diff --git a/.dockerignore b/.dockerignore
index 492480e3a0..12326e5bc5 100644
--- a/.dockerignore
+++ b/.dockerignore
@@ -96,6 +96,14 @@ configs/
 __pycache__/
 **/__pycache__/
 
+# Python virtualenvs. Large, platform-specific, and their symlinks break the build.
+.venv/
+**/.venv/
+venv/
+**/venv/
+*.egg-info/
+**/*.egg-info/
+
 # Local env
 .env
 .env.*
diff --git a/.editorconfig b/.editorconfig
index 665a74a09a..e6bda814c1 100644
--- a/.editorconfig
+++ b/.editorconfig
@@ -22,26 +22,15 @@ indent_size = 4
 
 [*.html]
 indent_size = 2
-insert_final_newline = false
-trim_trailing_whitespace = false
 
-[{*.js,*.jsx,*.mjs,*.ts,*.tsx}]
+[{*.js,*.jsx,*.mjs,*.ts,*.tsx,*.mts}]
 indent_size = 2
 
 [*.css]
-# CSS files typically use an indent size of 2 spaces for better readability and alignment with community standards.
 indent_size = 2
 
 [*.{yml,yaml}]
-# YAML files use an indent size of 2 spaces to maintain consistency with common YAML formatting practices.
-indent_size = 2
-insert_final_newline = false
-trim_trailing_whitespace = false
-
-[*.json]
-# JSON files use an indent size of 2 spaces, which is the standard for JSON formatting.
 indent_size = 2
 
-[*.jsonc]
-# JSONC (JSON with comments) files also follow the standard JSON formatting with an indent size of 2 spaces.
+[*.{json,jsonc}]
 indent_size = 2
diff --git a/.github/aur/stirling-pdf-desktop/PKGBUILD b/.github/aur/stirling-pdf-desktop/PKGBUILD
index fb6a99cfca..c47c8e3ee7 100644
--- a/.github/aur/stirling-pdf-desktop/PKGBUILD
+++ b/.github/aur/stirling-pdf-desktop/PKGBUILD
@@ -1,6 +1,6 @@
 # Maintainer: Stirling PDF Inc <contact@stirlingpdf.com>
 pkgname=stirling-pdf-desktop
-pkgver=2.14.2
+pkgver=2.14.3
 pkgrel=1
 pkgdesc="Locally hosted, web-based PDF manipulation tool (Tauri desktop app, official Stirling PDF Inc build)"
 arch=('x86_64')
diff --git a/.github/aur/stirling-pdf-server-bin/PKGBUILD b/.github/aur/stirling-pdf-server-bin/PKGBUILD
index 70bcee0423..d6159ddce3 100644
--- a/.github/aur/stirling-pdf-server-bin/PKGBUILD
+++ b/.github/aur/stirling-pdf-server-bin/PKGBUILD
@@ -1,6 +1,6 @@
 # Maintainer: Stirling PDF Inc <contact@stirlingpdf.com>
 pkgname=stirling-pdf-server-bin
-pkgver=2.14.2
+pkgver=2.14.3
 pkgrel=1
 pkgdesc="Locally hosted, web-based PDF manipulation tool (server JAR, prebuilt)"
 arch=('any')
diff --git a/.github/config/.files.yaml b/.github/config/.files.yaml
index e6e4f08230..7936145677 100644
--- a/.github/config/.files.yaml
+++ b/.github/config/.files.yaml
@@ -1,13 +1,15 @@
-# CI routing infra. Editing the top-level router (build.yml) or this filter
-# config re-runs every area's jobs, so every job-gating filter below includes
-# *ci. That makes a change to how jobs are dispatched actually exercise those
-# jobs (self-testing), instead of a router edit only matching the project filter.
+# CI routing infrastructure. Changes to the top-level router (build.yml) or
+# this filter configuration rerun every area's jobs. Every job-gating filter
+# therefore includes *ci, so routing changes exercise the jobs they affect
+# instead of matching only the project filter.
 ci: &ci
   - .github/workflows/build.yml
+  - .github/workflows/gradle-cache-prime.yml
   - .github/config/.files.yaml
 
 build: &build
   - *ci
+  - buildSrc/**
   - build.gradle
   - gradle/spotless.gradle
   - app/(common|core|proprietary|saas)/build.gradle
@@ -15,6 +17,22 @@ build: &build
   - .taskfiles/backend.yml
   - .github/workflows/check-licence.yml
 
+# Backend build inputs. This is intentionally broader than `build`: Java and
+# backend resource changes must exercise the backend matrix even when Gradle
+# build scripts themselves are unchanged.
+backend: &backend
+  - *ci
+  - *build
+  - gradle/**
+  - gradle.properties
+  - gradlew
+  - gradlew.bat
+  - settings.gradle
+  - app/(common|core|proprietary|saas)/src/(main|test)/java/**
+  - "app/(common|core|proprietary|saas)/src/(main|test)/resources/**/!(messages_*.properties|*.md)*"
+  - scripts/db-migration/**
+  - .github/workflows/backend-build.yml
+
 openapi: &openapi
   - *ci
   - *build
@@ -24,9 +42,9 @@ openapi: &openapi
 docker-base: &docker-base
   - docker/base/Dockerfile
 
-# Dockerfiles only (base + embedded + unoserver). Gates the slow multi-arch
-# (arm64) leg of the PR docker test build: arm64 is only rebuilt when a
-# Dockerfile itself changes, not on every code PR.
+# Dockerfiles only (base, embedded, and unoserver). The slow multi-architecture
+# (arm64) leg of the PR Docker test build runs only when a Dockerfile changes,
+# rather than for every code PR.
 dockerfiles: &dockerfiles
   - docker/**/Dockerfile*
 
@@ -68,7 +86,6 @@ project: &project
 frontend: &frontend
   - *ci
   - frontend/**
-  - .github/workflows/testdriver.yml
   - testing/**
   - docker/**
   - scripts/translations/*.py
@@ -88,8 +105,8 @@ frontend: &frontend
   - .github/workflows/e2e-stubbed.yml
   - .github/workflows/e2e-live.yml
 
-# Files that affect the Tauri desktop bundle. Gate the multi-OS Tauri build
-# job on changes to any of these.
+# Files that affect the Tauri desktop bundle. Changes to any of these files
+# trigger the multi-OS Tauri build job.
 tauri: &tauri
   - *ci
   - frontend/editor/src-tauri/**
@@ -102,9 +119,9 @@ tauri: &tauri
   - Taskfile.yml
   - .taskfiles/desktop.yml
 
-# Files that affect the AI engine (Python tool models, fixers, tests). Gate
-# the engine validation job on changes to engine sources or to the Java
-# tool surfaces it generates models from.
+# Files that affect the AI engine, including its Python tool models, fixers,
+# and tests. The engine validation job also runs when the Java tool surfaces
+# used to generate those models change.
 engine: &engine
   - *ci
   - engine/**
@@ -114,10 +131,10 @@ engine: &engine
   - .taskfiles/engine.yml
 
 # Files that can make the committed generated API models (frontend tool API
-# types + engine tool models) go stale: the Java tool surfaces they derive from,
-# the generators, the generated files themselves (to catch a hand-edit), and the
-# tasks that drive generation. Deliberately excludes the broad frontend/docker/
-# testing globs, so a CSS-only PR does not boot the backend to rebuild the spec.
+# types and engine tool models) stale: their Java sources, generators,
+# generated outputs (to catch hand edits), and generation tasks. Broad
+# frontend, Docker, and testing globs are intentionally excluded, so a CSS-only
+# PR does not start the backend to rebuild the specification.
 generated-models: &generated-models
   - *ci
   - *openapi
@@ -141,8 +158,8 @@ licenses-backend: &licenses-backend
   - ".github/workflows/frontend-backend-licenses-update.yml"
   - *build
 
-# Files that can affect premium / enterprise behaviour. Gate the enterprise
-# Playwright job on changes to any of these on PRs.
+# Files that can affect premium or enterprise behaviour. Changes to any of
+# these files trigger the enterprise Playwright job for pull requests.
 proprietary: &proprietary
   - *ci
   - app/proprietary/**
diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 92de1d9503..883c4f7f46 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -65,6 +65,7 @@ updates:
     directories:
       - /devTools
       - /frontend
+      - /testing/compose/mcp-client-check
     schedule:
       interval: "weekly"
     cooldown:
@@ -93,6 +94,13 @@ updates:
           - "react-dom"
           - "@types/react"
           - "@types/react-dom"
+      tanstack:
+        patterns:
+          - "@tanstack/*"
+      typescript:
+        patterns:
+          - "typescript"
+          - "@typescript/*"
       vite:
         patterns:
           - "vite"
@@ -171,14 +179,6 @@ updates:
           - "tokio"
           - "tokio-*"
 
-  - package-ecosystem: pip
-    directory: /testing/cucumber
-    schedule:
-      interval: "weekly"
-    cooldown:
-      default-days: 7
-    rebase-strategy: "auto"
-
   - package-ecosystem: "uv"
     directory: "/engine"
     schedule:
diff --git a/.github/workflows/PR-Auto-Deploy-V2.yml b/.github/workflows/PR-Auto-Deploy-V2.yml
index 50be9fe4cf..6420712640 100644
--- a/.github/workflows/PR-Auto-Deploy-V2.yml
+++ b/.github/workflows/PR-Auto-Deploy-V2.yml
@@ -26,6 +26,10 @@ jobs:
   check-pr:
     if: (github.event_name == 'pull_request' && github.event.action != 'closed') || github.event_name == 'workflow_dispatch'
     runs-on: ubuntu-latest
+    # Only reads the PR via pulls.get with the default GITHUB_TOKEN.
+    permissions:
+      contents: read
+      pull-requests: read
     outputs:
       should_deploy: ${{ steps.decide.outputs.should_deploy }}
       is_fork: ${{ steps.resolve.outputs.is_fork }}
@@ -35,7 +39,7 @@ jobs:
       pr_ref: ${{ steps.resolve.outputs.ref }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -97,6 +101,7 @@ jobs:
           echo "allow_fork=${allow_fork:-false}" >> $GITHUB_OUTPUT
 
   deploy-v2-pr:
+    environment: pr-preview
     needs: check-pr
     runs-on: ubuntu-latest
     if: needs.check-pr.outputs.should_deploy == 'true' && (needs.check-pr.outputs.is_fork == 'false' || needs.check-pr.outputs.allow_fork == 'true')
@@ -107,6 +112,7 @@ jobs:
     permissions:
       contents: read
       issues: write
+      packages: write
       pull-requests: write
     env:
       # Single source of truth for whether this preview embeds the admin portal:
@@ -115,7 +121,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -125,20 +131,11 @@ jobs:
           repository: ${{ github.repository }}
           ref: main
 
-      - name: Setup GitHub App Bot
-        if: github.actor != 'dependabot[bot]'
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        continue-on-error: true
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Add deployment started comment
         id: deployment-started
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const { owner, repo } = context.repo;
             const prNumber = ${{ needs.check-pr.outputs.pr_number }};
@@ -180,7 +177,8 @@ jobs:
         with:
           repository: ${{ needs.check-pr.outputs.pr_repository }}
           ref: ${{ needs.check-pr.outputs.pr_ref }}
-          token: ${{ secrets.GITHUB_TOKEN }}
+          # untrusted tree is built below - never leave credentials in .git/config
+          persist-credentials: false
           fetch-depth: 0 # Fetch full history for commit hash detection
 
       - name: Set up Docker Buildx
@@ -192,11 +190,16 @@ jobs:
           VERSION=$(grep "^version =" build.gradle | awk -F'"' '{print $2}')
           echo "versionNumber=$VERSION" >> $GITHUB_OUTPUT
 
-      - name: Login to Docker Hub
+      - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_API }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
+
+      - name: Convert repository owner to lowercase
+        id: repoowner
+        run: echo "lowercase=$(echo ${{ github.repository_owner }} | awk '{print tolower($0)}')" >> $GITHUB_OUTPUT
 
       - name: Get commit hash for app
         id: commit-hash
@@ -220,7 +223,7 @@ jobs:
       - name: Check if image exists
         id: check-image
         run: |
-          if docker manifest inspect ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-${{ steps.commit-hash.outputs.app_short }} >/dev/null 2>&1; then
+          if docker manifest inspect ${IMAGE_BASE}:v2-${{ steps.commit-hash.outputs.app_short }} >/dev/null 2>&1; then
             echo "exists=true" >> $GITHUB_OUTPUT
             echo "Image already exists, skipping build"
           else
@@ -228,6 +231,8 @@ jobs:
             echo "Image needs to be built"
           fi
 
+        env:
+          IMAGE_BASE: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test
       - name: Build and push V2 image
         if: steps.check-image.outputs.exists == 'false'
         uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
@@ -237,7 +242,7 @@ jobs:
           push: true
           cache-from: type=gha,scope=stirling-pdf-latest
           cache-to: type=gha,mode=max,scope=stirling-pdf-latest
-          tags: ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-${{ steps.commit-hash.outputs.app_short }}
+          tags: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test:v2-${{ steps.commit-hash.outputs.app_short }}
           build-args: |
             VERSION_TAG=v2-alpha
             BUILD_PORTAL=${{ env.BUILD_PORTAL }}
@@ -246,9 +251,11 @@ jobs:
       - name: Set up SSH
         run: |
           mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
+          echo "${NEW_VPS_SSH_KEY}" > ../private.key
           sudo chmod 600 ../private.key
 
+        env:
+          NEW_VPS_SSH_KEY: ${{ secrets.NEW_VPS_SSH_KEY }}
       - name: Deploy V2 to VPS
         id: deploy
         run: |
@@ -261,7 +268,7 @@ jobs:
           services:
             stirling-pdf-v2:
               container_name: stirling-pdf-v2-pr-${{ needs.check-pr.outputs.pr_number }}
-              image: ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-${{ steps.commit-hash.outputs.app_short }}
+              image: ${IMAGE_BASE}:v2-${{ steps.commit-hash.outputs.app_short }}
               ports:
                 - "${V2_PORT}:8080"
               volumes:
@@ -273,8 +280,8 @@ jobs:
                 DISABLE_ADDITIONAL_FEATURES: "false"
                 STIRLING_BILLING_ACCOUNT_LINK_ENABLED: "true"
                 SECURITY_ENABLELOGIN: "true"
-                SECURITY_INITIALLOGIN_USERNAME: "${{ secrets.TEST_LOGIN_USERNAME }}"
-                SECURITY_INITIALLOGIN_PASSWORD: "${{ secrets.TEST_LOGIN_PASSWORD }}"
+                SECURITY_INITIALLOGIN_USERNAME: "${TEST_LOGIN_USERNAME}"
+                SECURITY_INITIALLOGIN_PASSWORD: "${TEST_LOGIN_PASSWORD}"
                 SYSTEM_DEFAULTLOCALE: en-US
                 UI_APPNAME: "Stirling-PDF V2 PR#${{ needs.check-pr.outputs.pr_number }}"
                 UI_HOMEDESCRIPTION: "V2 PR#${{ needs.check-pr.outputs.pr_number }} - Embedded Architecture"
@@ -288,9 +295,9 @@ jobs:
           EOF
 
           # Deploy to VPS
-          scp -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker-compose.yml ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }}:/tmp/docker-compose-v2.yml
+          scp -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker-compose.yml ${NEW_VPS_USERNAME}@${NEW_VPS_HOST}:/tmp/docker-compose-v2.yml
 
-          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << ENDSSH
+          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${NEW_VPS_USERNAME}@${NEW_VPS_HOST} << ENDSSH
             # Create V2 PR-specific directories
             mkdir -p /stirling/V2-PR-${{ needs.check-pr.outputs.pr_number }}/{data,config,logs,storage}
 
@@ -315,12 +322,19 @@ jobs:
           # Set port for output
           echo "v2_port=${V2_PORT}" >> $GITHUB_OUTPUT
 
+        env:
+          IMAGE_BASE: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test
+          TEST_LOGIN_USERNAME: ${{ secrets.TEST_LOGIN_USERNAME }}
+          TEST_LOGIN_PASSWORD: ${{ secrets.TEST_LOGIN_PASSWORD }}
+          NEW_VPS_USERNAME: ${{ secrets.NEW_VPS_USERNAME }}
+          NEW_VPS_HOST: ${{ secrets.NEW_VPS_HOST }}
+
       # ---- Storybook preview (only when this PR touches stories/.storybook) ----
       # Runs inside the same approved-contributor-gated deploy job, so it deploys
       # under the exact same access rules as the app preview.
       - name: Detect Storybook changes
         id: sb-changes
-        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         with:
           list-files: json
           filters: |
@@ -379,8 +393,9 @@ jobs:
         env:
           SB_URL: ${{ steps.storybook.outputs.url }}
           SB_FILES: ${{ steps.sb-changes.outputs.storybook_files }}
+          NEW_VPS_HOST: ${{ secrets.NEW_VPS_HOST }}
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const { owner, repo } = context.repo;
             const prNumber = ${{ needs.check-pr.outputs.pr_number }};
@@ -401,7 +416,7 @@ jobs:
               }
             }
 
-            const deploymentUrl = `http://${{ secrets.NEW_VPS_HOST }}:${v2Port}`;
+            const deploymentUrl = `http://${process.env.NEW_VPS_HOST}:${v2Port}`;
 
             // Only mention the portal when this image actually embeds it.
             // Use the direct IP URL - the SSL hostname isn't supported yet.
@@ -447,6 +462,10 @@ jobs:
             });
 
   cleanup-v2-deployment:
+    # Tearing a preview down is not a deployment - no deployment object.
+    environment:
+      name: pr-preview
+      deployment: false
     if: github.event.action == 'closed'
     runs-on: ubuntu-latest
     permissions:
@@ -456,26 +475,17 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        if: github.actor != 'dependabot[bot]'
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        continue-on-error: true
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Clean up V2 deployment comments
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const { owner, repo } = context.repo;
             const prNumber = ${{ github.event.pull_request.number }};
@@ -504,12 +514,14 @@ jobs:
       - name: Set up SSH
         run: |
           mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
+          echo "${NEW_VPS_SSH_KEY}" > ../private.key
           sudo chmod 600 ../private.key
 
+        env:
+          NEW_VPS_SSH_KEY: ${{ secrets.NEW_VPS_SSH_KEY }}
       - name: Cleanup V2 deployment
         run: |
-          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << 'ENDSSH'
+          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${NEW_VPS_USERNAME}@${NEW_VPS_HOST} << 'ENDSSH'
             if [ -d "/stirling/V2-PR-${{ github.event.pull_request.number }}" ]; then
               echo "Found V2 PR directory, proceeding with cleanup..."
 
@@ -542,8 +554,11 @@ jobs:
             # Only remove PR-specific containers and directories
           ENDSSH
 
+        env:
+          NEW_VPS_USERNAME: ${{ secrets.NEW_VPS_USERNAME }}
+          NEW_VPS_HOST: ${{ secrets.NEW_VPS_HOST }}
       - name: Cleanup temporary files
         if: always()
         run: |
-          rm -f ../private.key
+          rm -f ../private.key docker-compose.yml storybook.tgz
         continue-on-error: true
diff --git a/.github/workflows/PR-Demo-Comment-with-react.yml b/.github/workflows/PR-Demo-Comment-with-react.yml
index c804489836..111dba441f 100644
--- a/.github/workflows/PR-Demo-Comment-with-react.yml
+++ b/.github/workflows/PR-Demo-Comment-with-react.yml
@@ -37,7 +37,8 @@ jobs:
   check-comment:
     runs-on: ubuntu-latest
     permissions:
-      issues: write
+      contents: read # actions/checkout
+      issues: write # add reaction to the triggering issue comment
     if: |
       vars.CI_PROFILE != 'lite' && (
         github.event_name == 'workflow_dispatch' ||
@@ -69,22 +70,13 @@ jobs:
       enable_prototypes: ${{ steps.check-prototypes-flag.outputs.enable_prototypes }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout PR
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        if: github.actor != 'dependabot[bot]'
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        continue-on-error: true
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Get PR data
         id: get-pr
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
@@ -155,7 +147,7 @@ jobs:
         id: add-eyes-reaction
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             console.log(`Adding eyes reaction to comment ID: ${context.payload.comment.id}`);
             try {
@@ -174,35 +166,38 @@ jobs:
             }
 
   deploy-pr:
+    environment: pr-preview
     needs: check-comment
     runs-on: ubuntu-latest
     permissions:
-      issues: write
+      contents: read # actions/checkout, incl. the PR merge ref
+      issues: write # reactions, 'pr-deployed' label, deployment URL comment
       pull-requests: write
+      packages: write # push PR image to ghcr.io
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout PR
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        if: github.actor != 'dependabot[bot]'
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        continue-on-error: true
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Checkout PR
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
         with:
           ref: refs/pull/${{ needs.check-comment.outputs.pr_number }}/merge
-          token: ${{ steps.setup-bot.outputs.token }}
+          # untrusted tree gets built below - never leave credentials in .git/config
+          persist-credentials: false
+
+      - name: Cache Gradle
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-deploy-pr-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
 
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
@@ -210,17 +205,6 @@ jobs:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
       - name: Run Gradle Command
@@ -240,11 +224,16 @@ jobs:
       - name: Set up Docker Buildx
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
-      - name: Login to Docker Hub
+      - name: Login to GitHub Container Registry
         uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
         with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_API }}
+          registry: ghcr.io
+          username: ${{ github.actor }}
+          password: ${{ github.token }}
+
+      - name: Convert repository owner to lowercase
+        id: repoowner
+        run: echo "lowercase=$(echo ${{ github.repository_owner }} | awk '{print tolower($0)}')" >> $GITHUB_OUTPUT
 
       - name: Build and push PR-specific image
         uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
@@ -254,7 +243,7 @@ jobs:
           push: true
           cache-from: type=gha,scope=stirling-pdf-latest
           cache-to: type=gha,mode=max,scope=stirling-pdf-latest
-          tags: ${{ secrets.DOCKER_HUB_USERNAME }}/test:pr-${{ needs.check-comment.outputs.pr_number }}
+          tags: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test:pr-${{ needs.check-comment.outputs.pr_number }}
           build-args: |
             VERSION_TAG=alpha
             PROTOTYPES_BUILD=${{ needs.check-comment.outputs.enable_prototypes }}
@@ -269,15 +258,17 @@ jobs:
           push: true
           cache-from: type=gha,scope=stirling-pdf-engine
           cache-to: type=gha,mode=max,scope=stirling-pdf-engine
-          tags: ${{ secrets.DOCKER_HUB_USERNAME }}/test:engine-pr-${{ needs.check-comment.outputs.pr_number }}
+          tags: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test:engine-pr-${{ needs.check-comment.outputs.pr_number }}
           platforms: linux/amd64
 
       - name: Set up SSH
         run: |
           mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
+          echo "${NEW_VPS_SSH_KEY}" > ../private.key
           sudo chmod 600 ../private.key
 
+        env:
+          NEW_VPS_SSH_KEY: ${{ secrets.NEW_VPS_SSH_KEY }}
       - name: Deploy to VPS
         id: deploy
         run: |
@@ -295,11 +286,11 @@ jobs:
           # Set pro/enterprise settings (enterprise implies pro)
           if [ "${{ needs.check-comment.outputs.enable_enterprise }}" == "true" ]; then
             PREMIUM_ENABLED="true"
-            PREMIUM_KEY="${{ secrets.ENTERPRISE_KEY }}"
+            PREMIUM_KEY="${ENTERPRISE_KEY}"
             PREMIUM_PROFEATURES_AUDIT_ENABLED="true"
           elif [ "${{ needs.check-comment.outputs.enable_pro }}" == "true" ]; then
             PREMIUM_ENABLED="true"
-            PREMIUM_KEY="${{ secrets.PREMIUM_KEY }}"
+            PREMIUM_KEY="${PRO_KEY}"
             PREMIUM_PROFEATURES_AUDIT_ENABLED="true"
           else
             PREMIUM_ENABLED="false"
@@ -309,7 +300,6 @@ jobs:
 
           ENABLE_PROTOTYPES="${{ needs.check-comment.outputs.enable_prototypes }}"
           PR_NUMBER="${{ needs.check-comment.outputs.pr_number }}"
-          DOCKER_USER="${{ secrets.DOCKER_HUB_USERNAME }}"
 
           # Build engine env vars for backend (only set when prototypes enabled)
           if [ "$ENABLE_PROTOTYPES" == "true" ]; then
@@ -319,9 +309,9 @@ jobs:
             ENGINE_SERVICE="
             stirling-pdf-engine:
               container_name: stirling-pdf-engine-pr-${PR_NUMBER}
-              image: ${DOCKER_USER}/test:engine-pr-${PR_NUMBER}
+              image: ${IMAGE_BASE}:engine-pr-${PR_NUMBER}
               environment:
-                ANTHROPIC_API_KEY: \"${{ secrets.ANTHROPIC_API_KEY }}\"
+                ANTHROPIC_API_KEY: \"${ANTHROPIC_API_KEY}\"
               networks:
                 - pr-network
               restart: on-failure:5"
@@ -344,7 +334,7 @@ jobs:
           services:
             stirling-pdf:
               container_name: stirling-pdf-pr-${PR_NUMBER}
-              image: ${DOCKER_USER}/test:pr-${PR_NUMBER}
+              image: ${IMAGE_BASE}:pr-${PR_NUMBER}
               ports:
                 - "${PR_NUMBER}:8080"
               volumes:
@@ -368,9 +358,9 @@ jobs:
           EOF
 
           # Then copy the file and execute commands
-          scp -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker-compose.yml ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }}:/tmp/docker-compose.yml
+          scp -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker-compose.yml ${NEW_VPS_USERNAME}@${NEW_VPS_HOST}:/tmp/docker-compose.yml
 
-          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << ENDSSH
+          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${NEW_VPS_USERNAME}@${NEW_VPS_HOST} << ENDSSH
             # Create PR-specific directories
             mkdir -p /stirling/PR-${PR_NUMBER}/{data,config,logs}
 
@@ -386,11 +376,19 @@ jobs:
           # Set output for use in PR comment
           echo "security_status=${SECURITY_STATUS}" >> $GITHUB_ENV
 
+        env:
+          ENTERPRISE_KEY: ${{ secrets.ENTERPRISE_KEY }}
+          # named PRO_KEY, not PREMIUM_KEY, so the shell var it feeds is not self-referential
+          PRO_KEY: ${{ secrets.PREMIUM_KEY }}
+          ANTHROPIC_API_KEY: ${{ secrets.ANTHROPIC_API_KEY }}
+          IMAGE_BASE: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test
+          NEW_VPS_USERNAME: ${{ secrets.NEW_VPS_USERNAME }}
+          NEW_VPS_HOST: ${{ secrets.NEW_VPS_HOST }}
       - name: Add success reaction to comment
         if: success() && github.event_name == 'issue_comment'
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             console.log(`Adding rocket reaction to comment ID: ${{ needs.check-comment.outputs.comment_id }}`);
             try {
@@ -425,7 +423,7 @@ jobs:
         if: failure() && github.event_name == 'issue_comment'
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             console.log(`Adding -1 reaction to comment ID: ${{ needs.check-comment.outputs.comment_id }}`);
             try {
@@ -444,15 +442,17 @@ jobs:
       - name: Post deployment URL to PR
         if: success()
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          NEW_VPS_HOST: ${{ secrets.NEW_VPS_HOST }}
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const { GITHUB_REPOSITORY } = process.env;
             const [repoOwner, repoName] = GITHUB_REPOSITORY.split('/');
             const prNumber = ${{ needs.check-comment.outputs.pr_number }};
             const securityStatus = process.env.security_status || "Security Disabled";
 
-            const deploymentUrl = `http://${{ secrets.NEW_VPS_HOST }}:${prNumber}`;
+            const deploymentUrl = `http://${process.env.NEW_VPS_HOST}:${prNumber}`;
             const commentBody = `## 🚀 PR Test Deployment\n\n` +
                               `Your PR has been deployed for testing!\n\n` +
                               `🔗 **Test URL:** [${deploymentUrl}](${deploymentUrl})\n` +
@@ -477,26 +477,22 @@ jobs:
   handle-label-commands:
     if: ${{ github.event.issue.pull_request != null }}
     runs-on: ubuntu-latest
+    permissions:
+      contents: read # actions/checkout, reads repo_devs.json and labels.yml
+      issues: write # add/remove labels, delete the command comment
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Check out the repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Apply label commands
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const fs = require('fs');
             const path = require('path');
diff --git a/.github/workflows/PR-Demo-cleanup.yml b/.github/workflows/PR-Demo-cleanup.yml
index 146f5c7f78..f2912dcedb 100644
--- a/.github/workflows/PR-Demo-cleanup.yml
+++ b/.github/workflows/PR-Demo-cleanup.yml
@@ -7,41 +7,33 @@ on:
 permissions:
   contents: read
 
-env:
-  SERVER_IP: ${{ secrets.NEW_VPS_IP }} # Add this to your GitHub secrets
-  CLEANUP_PERFORMED: "false" # Add flag to track if cleanup occurred
-
 jobs:
   cleanup:
+    # Tearing a preview down is not a deployment - no deployment object.
+    environment:
+      name: pr-preview
+      deployment: false
     if: github.event.action == 'closed'
     runs-on: ubuntu-latest
     permissions:
+      contents: read # actions/checkout
       pull-requests: write
-      issues: write
+      issues: write # list/remove labels, list/delete comments
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout PR
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        if: github.actor != 'dependabot[bot]'
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        continue-on-error: true
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Remove 'pr-deployed' label if present
         id: remove-label-comment
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const prNumber = ${{ github.event.pull_request.number }};
             const owner = context.repo.owner;
@@ -100,14 +92,22 @@ jobs:
         if: steps.remove-label-comment.outputs.present == 'true'
         run: |
           mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
+          echo "${NEW_VPS_SSH_KEY}" > ../private.key
           sudo chmod 600 ../private.key
+        env:
+          NEW_VPS_SSH_KEY: ${{ secrets.NEW_VPS_SSH_KEY }}
+
+      - name: Convert repository owner to lowercase
+        id: repoowner
+        run: echo "lowercase=$(echo ${{ github.repository_owner }} | awk '{print tolower($0)}')" >> $GITHUB_OUTPUT
 
       - name: Cleanup PR deployment
         if: steps.remove-label-comment.outputs.present == 'true'
         id: cleanup
+        # ENDSSH heredoc is quoted, so its body is sent literally: secrets inside it
+        # must stay as GitHub expressions, a shell var would be empty on the remote host.
         run: |
-          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << 'ENDSSH'
+          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null -T ${NEW_VPS_USERNAME}@${NEW_VPS_HOST} << 'ENDSSH'
             if [ -d "/stirling/PR-${{ github.event.pull_request.number }}" ]; then
               echo "Found PR directory, proceeding with cleanup..."
 
@@ -122,8 +122,8 @@ jobs:
               rm -rf /stirling/PR-${{ github.event.pull_request.number }}
 
               # Remove the Docker images
-              docker rmi --no-prune ${{ secrets.DOCKER_HUB_USERNAME }}/test:pr-${{ github.event.pull_request.number }} || true
-              docker rmi --no-prune ${{ secrets.DOCKER_HUB_USERNAME }}/test:engine-pr-${{ github.event.pull_request.number }} || true
+              docker rmi --no-prune ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test:pr-${{ github.event.pull_request.number }} || true
+              docker rmi --no-prune ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf-test:engine-pr-${{ github.event.pull_request.number }} || true
 
               echo "PERFORMED_CLEANUP"
             else
@@ -131,6 +131,9 @@ jobs:
               echo "NO_CLEANUP_NEEDED"
             fi
           ENDSSH
+        env:
+          NEW_VPS_USERNAME: ${{ secrets.NEW_VPS_USERNAME }}
+          NEW_VPS_HOST: ${{ secrets.NEW_VPS_HOST }}
 
       - name: Cleanup temporary files
         if: always()
diff --git a/.github/workflows/_runner-pick.yml b/.github/workflows/_runner-pick.yml
index 0b3f76a8cd..ca2337960a 100644
--- a/.github/workflows/_runner-pick.yml
+++ b/.github/workflows/_runner-pick.yml
@@ -38,7 +38,7 @@ jobs:
       is_fork: ${{ steps.decide.outputs.is_fork }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/ai-engine.yml b/.github/workflows/ai-engine.yml
index 056dc35ca3..caa5af1acb 100644
--- a/.github/workflows/ai-engine.yml
+++ b/.github/workflows/ai-engine.yml
@@ -20,7 +20,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -28,7 +28,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/ai_pr_title_review.yml b/.github/workflows/ai_pr_title_review.yml
deleted file mode 100644
index 563e94c9b3..0000000000
--- a/.github/workflows/ai_pr_title_review.yml
+++ /dev/null
@@ -1,228 +0,0 @@
-name: AI - PR Title Review
-
-on:
-  pull_request:
-    types: [opened, edited]
-    branches: [main]
-
-permissions: # required for secure-repo hardening
-  contents: read
-
-jobs:
-  ai-title-review:
-    permissions:
-      contents: read
-      pull-requests: write
-      models: read
-
-    runs-on: ubuntu-latest
-
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-        with:
-          fetch-depth: 0
-
-      - name: Configure Git to suppress detached HEAD warning
-        run: git config --global advice.detachedHead false
-
-      - name: Setup GitHub App Bot
-        if: github.actor != 'dependabot[bot]'
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        continue-on-error: true
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
-      - name: Check if actor is repo developer
-        id: actor
-        run: |
-          if [[ "${{ github.actor }}" == *"[bot]" ]]; then
-            echo "PR opened by a bot – skipping AI title review."
-            echo "is_repo_dev=false" >> $GITHUB_OUTPUT
-            exit 0
-          fi
-          if [ ! -f .github/config/repo_devs.json ]; then
-            echo "Error: .github/config/repo_devs.json not found" >&2
-            exit 1
-          fi
-          # Validate JSON and extract repo_devs
-          REPO_DEVS=$(jq -r '.repo_devs[]' .github/config/repo_devs.json 2>/dev/null || { echo "Error: Invalid JSON in repo_devs.json" >&2; exit 1; })
-          # Convert developer list into Bash array
-          mapfile -t DEVS_ARRAY <<< "$REPO_DEVS"
-          if [[ " ${DEVS_ARRAY[*]} " == *" ${{ github.actor }} "* ]]; then
-            echo "is_repo_dev=true" >> $GITHUB_OUTPUT
-          else
-            echo "is_repo_dev=false" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Get PR diff
-        if: steps.actor.outputs.is_repo_dev == 'true'
-        id: get_diff
-        run: |
-          git fetch origin ${{ github.base_ref }}
-          git diff origin/${{ github.base_ref }}...HEAD | head -n 10000 | grep -vP '[\x00-\x08\x0B\x0C\x0E-\x1F\x7F\x{202E}\x{200B}]' > pr.diff
-          echo "diff<<EOF" >> $GITHUB_OUTPUT
-          cat pr.diff >> $GITHUB_OUTPUT
-          echo "EOF" >> $GITHUB_OUTPUT
-
-      - name: Check and sanitize PR title
-        if: steps.actor.outputs.is_repo_dev == 'true'
-        id: sanitize_pr_title
-        env:
-          PR_TITLE_RAW: ${{ github.event.pull_request.title }}
-        run: |
-          # Sanitize PR title: max 72 characters, only printable characters
-          PR_TITLE=$(echo "$PR_TITLE_RAW" | tr -d '\n\r' | head -c 72 | sed 's/[^[:print:]]//g')
-          if [[ ${#PR_TITLE} -lt 5 ]]; then
-            echo "PR title is too short. Must be at least 5 characters." >&2
-          fi
-          echo "pr_title=$PR_TITLE" >> $GITHUB_OUTPUT
-
-      - name: AI PR Title Analysis
-        if: steps.actor.outputs.is_repo_dev == 'true'
-        id: ai-title-analysis
-        uses: actions/ai-inference@a7805884c80886efc241e94a5351df715968a0ad # v2.1.1
-        with:
-          model: openai/gpt-4o
-          system-prompt-file: ".github/config/system-prompt.txt"
-          prompt: |
-            Based on the following input data:
-
-            {
-              "diff": "${{ steps.get_diff.outputs.diff }}",
-              "pr_title": "${{ steps.sanitize_pr_title.outputs.pr_title }}"
-            }
-
-            Respond ONLY with valid JSON in the format:
-            {
-              "improved_rating": <0-10>,
-              "improved_ai_title_rating": <0-10>,
-              "improved_title": "<ai generated title>"
-            }
-
-      - name: Validate and set SCRIPT_OUTPUT
-        if: steps.actor.outputs.is_repo_dev == 'true'
-        run: |
-          cat <<EOF > ai_response.json
-          ${{ steps.ai-title-analysis.outputs.response }}
-          EOF
-
-          # Validate JSON structure
-          jq -e '
-            (keys | sort) == ["improved_ai_title_rating", "improved_rating", "improved_title"] and
-            (.improved_rating | type == "number" and . >= 0 and . <= 10) and
-            (.improved_ai_title_rating | type == "number" and . >= 0 and . <= 10) and
-            (.improved_title | type == "string")
-          ' ai_response.json
-          if [ $? -ne 0 ]; then
-            echo "Invalid AI response format" >&2
-            cat ai_response.json >&2
-            exit 1
-          fi
-          # Parse JSON fields
-          IMPROVED_RATING=$(jq -r '.improved_rating' ai_response.json)
-          IMPROVED_TITLE=$(jq -r '.improved_title' ai_response.json)
-          # Limit comment length to 1000 characters
-          COMMENT=$(cat <<EOF
-          ## 🤖 AI PR Title Suggestion
-
-          **PR-Title Rating**: $IMPROVED_RATING/10
-
-          ### ⬇️ Suggested Title (copy & paste):
-
-          \`\`\`
-          $IMPROVED_TITLE
-          \`\`\`
-
-          ---
-          *Generated by GitHub Models AI*
-          EOF
-          )
-          echo "$COMMENT" > /tmp/ai-title-comment.md
-          # Log input and output to the GitHub Step Summary
-          echo "### 🤖 AI PR Title Analysis" >> $GITHUB_STEP_SUMMARY
-          echo "### Input PR Title" >> $GITHUB_STEP_SUMMARY
-          echo '```bash' >> $GITHUB_STEP_SUMMARY
-          echo "${{ steps.sanitize_pr_title.outputs.pr_title }}" >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-          echo '### AI Response (raw JSON)' >> $GITHUB_STEP_SUMMARY
-          echo '```json' >> $GITHUB_STEP_SUMMARY
-          cat ai_response.json >> $GITHUB_STEP_SUMMARY
-          echo '```' >> $GITHUB_STEP_SUMMARY
-
-      - name: Post comment on PR if needed
-        if: steps.actor.outputs.is_repo_dev == 'true'
-        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
-        continue-on-error: true
-        with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
-          script: |
-            const fs = require('fs');
-            const body = fs.readFileSync('/tmp/ai-title-comment.md', 'utf8');
-            const { GITHUB_REPOSITORY } = process.env;
-            const [owner, repo] = GITHUB_REPOSITORY.split('/');
-            const issue_number = context.issue.number;
-
-            const ratingMatch = body.match(/\*\*PR-Title Rating\*\*: (\d+)\/10/);
-            const rating = ratingMatch ? parseInt(ratingMatch[1], 10) : null;
-
-            const expectedActor = "${{ steps.setup-bot.outputs.app-slug }}[bot]";
-            const comments = await github.rest.issues.listComments({ owner, repo, issue_number });
-
-            const existing = comments.data.find(c =>
-              c.user?.login === expectedActor &&
-              c.body.includes("## 🤖 AI PR Title Suggestion")
-            );
-
-            if (rating === null) {
-              console.log("No rating found in AI response – skipping.");
-              return;
-            }
-
-            if (rating <= 5) {
-              if (existing) {
-                await github.rest.issues.updateComment({
-                  owner, repo,
-                  comment_id: existing.id,
-                  body
-                });
-                console.log("Updated existing suggestion comment.");
-              } else {
-                await github.rest.issues.createComment({
-                  owner, repo, issue_number,
-                  body
-                });
-                console.log("Created new suggestion comment.");
-              }
-            } else {
-              const praise = `## 🤖 AI PR Title Suggestion\n\nGreat job! The current PR title is clear and well-structured.\n\n✅ No suggestions needed.\n\n---\n*Generated by GitHub Models AI*`;
-
-              if (existing) {
-                await github.rest.issues.updateComment({
-                  owner, repo,
-                  comment_id: existing.id,
-                  body: praise
-                });
-                console.log("Replaced suggestion with praise.");
-              } else {
-                console.log("Rating > 5 and no existing comment – skipping comment.");
-              }
-            }
-
-      - name: is not repo dev
-        if: steps.actor.outputs.is_repo_dev != 'true'
-        run: |
-          exit 0 # Skip the AI title review for non-repo developers
-
-      - name: Clean up
-        if: always()
-        run: |
-          rm -f pr.diff ai_response.json /tmp/ai-title-comment.md
-          echo "Cleaned up temporary files."
-        continue-on-error: true # Ensure cleanup runs even if previous steps fail
diff --git a/.github/workflows/aur-publish.yml b/.github/workflows/aur-publish.yml
index f5af23da07..8c658ec69e 100644
--- a/.github/workflows/aur-publish.yml
+++ b/.github/workflows/aur-publish.yml
@@ -26,7 +26,7 @@ jobs:
       jar_sha256: ${{ steps.hashes.outputs.jar_sha256 }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -66,11 +66,12 @@ jobs:
           echo "jar_sha256=$JAR_SHA" >> "$GITHUB_OUTPUT"
 
   publish-aur:
+    environment: package-publish
     needs: get-release-info
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/auto-labelerV2.yml b/.github/workflows/auto-labelerV2.yml
index 6039c0e7df..a5ce864d2b 100644
--- a/.github/workflows/auto-labelerV2.yml
+++ b/.github/workflows/auto-labelerV2.yml
@@ -13,26 +13,21 @@ jobs:
   labeler:
     runs-on: ubuntu-latest
     permissions:
-      pull-requests: write
+      contents: read # checkout + labeler fetching its config from the repo
+      pull-requests: write # read changed files, apply labels to the PR
+      issues: write # labels are applied through the issues API
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - uses: srvaroa/labeler@bf262763a8a8e191f5847873aecc0f29df84f957 # v1.14.0
         with:
           config_path: .github/labeler-config-srvaroa.yml
           use_local_config: false
           fail_on_error: true
         env:
-          GITHUB_TOKEN: "${{ steps.setup-bot.outputs.token }}"
+          GITHUB_TOKEN: "${{ github.token }}"
diff --git a/.github/workflows/backend-build.yml b/.github/workflows/backend-build.yml
index 3cba3c8d39..09c6bbc9a8 100644
--- a/.github/workflows/backend-build.yml
+++ b/.github/workflows/backend-build.yml
@@ -20,6 +20,9 @@ permissions:
 
 jobs:
   build:
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -28,29 +31,26 @@ jobs:
         flavor: [core, proprietary, saas]
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-${{ matrix.jdk-version }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK ${{ matrix.jdk-version }}
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: ${{ matrix.jdk-version }}
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-${{ matrix.jdk-version }}-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-${{ matrix.jdk-version }}-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
       - name: Check Java formatting (Spotless)
@@ -155,7 +155,7 @@ jobs:
           STIRLING_FLAVOR: ${{ matrix.flavor }}
           # Configure the Gradle daemon explicitly; GRADLE_OPTS alone only
           # configures the Gradle client JVM.
-          GRADLE_OPTS: '-Dorg.gradle.jvmargs=-Xmx4g -XX:+UseG1GC'
+          GRADLE_OPTS: "-Dorg.gradle.jvmargs=-Xmx4g -XX:+UseG1GC"
 
       - name: Check Test Reports Exist
         if: always()
@@ -197,7 +197,7 @@ jobs:
 
       - name: Install uv
         if: always() && matrix.flavor == 'saas'
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/build-enterprise.yml b/.github/workflows/build-enterprise.yml
index f1301b6fd2..a5a346db88 100644
--- a/.github/workflows/build-enterprise.yml
+++ b/.github/workflows/build-enterprise.yml
@@ -15,6 +15,11 @@ name: Enterprise E2E (Playwright)
 
 on:
   workflow_call:
+    inputs:
+      use_shared_cache:
+        required: false
+        type: boolean
+        default: false
   push:
     branches: ["main"]
   schedule:
@@ -37,6 +42,9 @@ jobs:
     uses: ./.github/workflows/_runner-pick.yml
 
   playwright-e2e-enterprise:
+    environment:
+      name: ci-unsigned
+      deployment: false
     needs: pick
     # Skip on fork PRs / untrusted authors: they have no PREMIUM_KEY_ENTERPRISE,
     # so the suite can't boot premium and would fail. See the header comment.
@@ -50,26 +58,36 @@ jobs:
       SYSTEM_ENABLEANALYTICS: "false"
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Set up JDK 25
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+
+      - name: Restore cache Gradle User Home
+        if: inputs.use_shared_cache
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          java-version: "25"
-          distribution: "temurin"
-      - name: Cache Gradle User Home
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
+      - name: Restore cache Gradle
+        if: inputs.use_shared_cache == false
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.gradle/caches
             ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
+          key: gradle-playwright-e2e-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
+      - name: Set up JDK 25
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        with:
+          java-version: "25"
+          distribution: "temurin"
+
       - name: Set up Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
@@ -306,9 +324,18 @@ jobs:
           path: frontend/playwright-report/
           retention-days: 7
 
+      - name: Cleanup temporary files
+        if: always()
+        run: |
+          rm -f /tmp/helpers.sh /tmp/backend.log /tmp/backend.pid
+        continue-on-error: true
+
   # Multi-node regression: builds + seeds the clustered stack (testing/compose/docker-compose-multinode.yml)
   # and runs behave features/multinode. Licence-gated, so it runs after the Playwright job (not in parallel).
   multinode-e2e:
+    environment:
+      name: ci-unsigned
+      deployment: false
     needs: [pick, playwright-e2e-enterprise]
     # Nightly cron + manual dispatch only (heavy build), fork-gated for the licence secret.
     if: >-
@@ -324,13 +351,13 @@ jobs:
       MN_COMPOSE: docker-compose-multinode.yml
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/build.yml b/.github/workflows/build.yml
index 69013f5554..16279c67f4 100644
--- a/.github/workflows/build.yml
+++ b/.github/workflows/build.yml
@@ -37,6 +37,7 @@ jobs:
     timeout-minutes: 3
     outputs:
       build: ${{ steps.changes.outputs.build }}
+      backend: ${{ steps.changes.outputs.backend }}
       project: ${{ steps.changes.outputs.project }}
       openapi: ${{ steps.changes.outputs.openapi }}
       frontend: ${{ steps.changes.outputs.frontend }}
@@ -48,54 +49,25 @@ jobs:
       proprietary: ${{ steps.changes.outputs.proprietary }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check for file changes
-        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: changes
         with:
           filters: .github/config/.files.yaml
 
   gradle-cache-prime:
-    name: Prime shared Gradle cache
     needs: [files-changed]
-    runs-on: ubuntu-latest
-    timeout-minutes: 15
-    steps:
-      - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - name: Set up JDK 25
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
-        with:
-          java-version: "25"
-          distribution: "temurin"
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-      - name: Resolve backend dependencies
-        run: ./gradlew :stirling-pdf:classes -PnoSpotless --no-daemon
-        env:
-          STIRLING_FLAVOR: saas
-          MAVEN_USER: ${{ secrets.MAVEN_USER }}
-          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
+    uses: ./.github/workflows/gradle-cache-prime.yml
+    secrets: inherit
 
   build:
+    if: needs.files-changed.outputs.backend == 'true'
     needs: [files-changed, gradle-cache-prime]
     permissions:
       actions: read
@@ -134,9 +106,10 @@ jobs:
     uses: ./.github/workflows/frontend-validation.yml
     secrets: inherit
 
-  # Advisory: deliberately NOT in all-checks-passed. It reports on the stories a
-  # branch touches so a regression is visible in review, but a browser scan is
-  # too new here to block merges on. Promote it once its pass/fail proves stable.
+  # Required (in all-checks-passed). Scans the stories a branch touches in both
+  # light and dark; an axe violation in either theme blocks the merge. The
+  # whole-suite sweep (nightly.yml) still covers stories a change affects without
+  # touching them directly.
   frontend-a11y:
     if: needs.files-changed.outputs.frontend == 'true'
     needs: [files-changed]
@@ -168,10 +141,12 @@ jobs:
       contents: read
     uses: ./.github/workflows/build-enterprise.yml
     secrets: inherit
+    with:
+      use_shared_cache: true
 
   check-licence:
     if: needs.files-changed.outputs.build == 'true'
-    needs: [files-changed, build, gradle-cache-prime]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
     uses: ./.github/workflows/check-licence.yml
@@ -190,8 +165,22 @@ jobs:
       docker-base-changed: ${{ needs.files-changed.outputs.docker-base }}
 
   test-build-docker-images:
-    if: github.event_name == 'pull_request' && needs.files-changed.outputs.project == 'true'
-    needs: [files-changed, build, check-generateOpenApiDocs, check-licence, gradle-cache-prime]
+    if: |
+      always() &&
+      github.event_name == 'pull_request' &&
+      needs.files-changed.outputs.project == 'true' &&
+      contains(fromJSON('["success", "skipped"]'), needs.gradle-cache-prime.result) &&
+      contains(fromJSON('["success", "skipped"]'), needs.build.result) &&
+      contains(fromJSON('["success", "skipped"]'), needs.check-generateOpenApiDocs.result) &&
+      contains(fromJSON('["success", "skipped"]'), needs.check-licence.result)
+    needs:
+      [
+        files-changed,
+        build,
+        check-generateOpenApiDocs,
+        check-licence,
+        gradle-cache-prime,
+      ]
     permissions:
       contents: read
       packages: read
@@ -203,7 +192,7 @@ jobs:
 
   tauri-build:
     if: needs.files-changed.outputs.tauri == 'true'
-    needs: [files-changed]
+    needs: [files-changed, gradle-cache-prime]
     permissions:
       contents: read
       pull-requests: write
@@ -217,6 +206,7 @@ jobs:
     with:
       platform: windows-macos
       sign: true
+      use_shared_cache: true
 
   ai-engine:
     if: needs.files-changed.outputs.engine == 'true'
@@ -240,6 +230,8 @@ jobs:
       pull-requests: write
     uses: ./.github/workflows/check-generated-models.yml
     secrets: inherit
+    with:
+      use_shared_cache: true
 
   pre-commit:
     needs: [files-changed]
@@ -286,10 +278,12 @@ jobs:
     if: always()
     needs:
       - files-changed
+      - gradle-cache-prime
       - build
       - db-migration-test
       - check-generateOpenApiDocs
       - frontend-validation
+      - frontend-a11y
       - playwright-e2e
       - playwright-e2e-live
       - playwright-e2e-enterprise
@@ -304,7 +298,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -312,10 +306,12 @@ jobs:
         env:
           RESULTS: |
             files-changed=${{ needs.files-changed.result }}
+            gradle-cache-prime=${{ needs.gradle-cache-prime.result }}
             build=${{ needs.build.result }}
             db-migration-test=${{ needs.db-migration-test.result }}
             check-generateOpenApiDocs=${{ needs.check-generateOpenApiDocs.result }}
             frontend-validation=${{ needs.frontend-validation.result }}
+            frontend-a11y=${{ needs.frontend-a11y.result }}
             playwright-e2e=${{ needs.playwright-e2e.result }}
             playwright-e2e-live=${{ needs.playwright-e2e-live.result }}
             playwright-e2e-enterprise=${{ needs.playwright-e2e-enterprise.result }}
diff --git a/.github/workflows/check-generated-models.yml b/.github/workflows/check-generated-models.yml
index 833b9c8e47..476f9d21a7 100644
--- a/.github/workflows/check-generated-models.yml
+++ b/.github/workflows/check-generated-models.yml
@@ -9,6 +9,11 @@ name: Check generated models
 # post-merge safety net.
 on:
   workflow_call:
+    inputs:
+      use_shared_cache:
+        required: false
+        type: boolean
+        default: false
   push:
     branches: [main]
 
@@ -23,7 +28,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -31,7 +36,7 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
@@ -39,22 +44,29 @@ jobs:
             engine/uv.lock
           cache-suffix: generated-models
 
-      - name: Set up JDK 25
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+      - name: Restore cache Gradle User Home
+        if: inputs.use_shared_cache
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
-          java-version: "25"
-          distribution: "temurin"
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
 
-      - name: Cache Gradle User Home
+      - name: Restore cache Gradle
+        if: inputs.use_shared_cache == false
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.gradle/caches
             ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
+          key: gradle-generated-models-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
+      - name: Set up JDK 25
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        with:
+          java-version: "25"
+          distribution: "temurin"
 
       - name: Set up Node
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
diff --git a/.github/workflows/check-licence.yml b/.github/workflows/check-licence.yml
index b1692c904d..7626122884 100644
--- a/.github/workflows/check-licence.yml
+++ b/.github/workflows/check-licence.yml
@@ -10,33 +10,33 @@ permissions:
 
 jobs:
   check-licence:
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
       - name: Check licenses for compatibility
diff --git a/.github/workflows/check-openapi.yml b/.github/workflows/check-openapi.yml
index c26bf60aba..47341834a3 100644
--- a/.github/workflows/check-openapi.yml
+++ b/.github/workflows/check-openapi.yml
@@ -11,33 +11,33 @@ permissions:
 
 jobs:
   check-generate-openapi-docs:
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
       - name: Generate OpenAPI documentation
diff --git a/.github/workflows/check_toml.yml b/.github/workflows/check_toml.yml
index d134c80a9b..84347defe2 100644
--- a/.github/workflows/check_toml.yml
+++ b/.github/workflows/check_toml.yml
@@ -23,29 +23,23 @@ jobs:
     if: github.event_name == 'pull_request_target'
     runs-on: ubuntu-latest
     permissions:
+      contents: read # Checkout, and read translation files via the contents API
       issues: write # Allow posting comments on issues/PRs
       pull-requests: write # Allow writing to pull requests
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout main branch first
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Setup GitHub App Bot
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Get PR data
         id: get-pr-data
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const prNumber = context.payload.pull_request.number;
             const repoOwner = context.payload.repository.owner.login;
@@ -66,17 +60,18 @@ jobs:
       - name: Fetch PR changed files
         id: fetch-pr-changes
         env:
-          GH_TOKEN: ${{ steps.setup-bot.outputs.token }}
+          GH_TOKEN: ${{ github.token }}
+          PR_NUMBER: ${{ steps.get-pr-data.outputs.pr_number }}
         run: |
           echo "Fetching PR changed files..."
           echo "Getting list of changed files from PR..."
           # Check if PR number exists
-          if [ -z "${{ steps.get-pr-data.outputs.pr_number }}" ]; then
+          if [ -z "${PR_NUMBER}" ]; then
             echo "Error: PR number is empty"
             exit 1
           fi
           # Get changed files and filter for TOML translation files
-          gh pr view ${{ steps.get-pr-data.outputs.pr_number }} --json files -q ".files[].path" | grep -E '^frontend/editor/public/locales/[a-zA-Z-]+/translation\.toml$' > changed_files.txt || echo "No matching TOML files found in PR"
+          gh pr view "${PR_NUMBER}" --json files -q ".files[].path" | grep -E '^frontend/editor/public/locales/[a-zA-Z-]+/translation\.toml$' > changed_files.txt || echo "No matching TOML files found in PR"
           # Check if any files were found
           if [ ! -s changed_files.txt ]; then
             echo "No TOML translation files changed in this PR"
@@ -88,32 +83,36 @@ jobs:
       - name: Determine reference file
         id: determine-file
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
+        env:
+          # Untrusted, fork-controlled values are passed via env, never interpolated into the script
+          PR_NUMBER: ${{ steps.get-pr-data.outputs.pr_number }}
+          REPO_OWNER: ${{ steps.get-pr-data.outputs.repo_owner }}
+          REPO_NAME: ${{ steps.get-pr-data.outputs.repo_name }}
+          PR_REPO_OWNER: ${{ github.event.pull_request.head.repo.owner.login }}
+          PR_REPO_NAME: ${{ github.event.pull_request.head.repo.name }}
+          PR_BRANCH: ${{ steps.get-pr-data.outputs.branch }}
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const fs = require("fs");
             const path = require("path");
 
-            const prNumber = ${{ steps.get-pr-data.outputs.pr_number }};
-            const repoOwner = "${{ steps.get-pr-data.outputs.repo_owner }}";
-            const repoName = "${{ steps.get-pr-data.outputs.repo_name }}";
-
-            const prRepoOwner = "${{ github.event.pull_request.head.repo.owner.login }}";
-            const prRepoName = "${{ github.event.pull_request.head.repo.name }}";
-            const branch = "${{ steps.get-pr-data.outputs.branch }}";
-
-            console.log(`Determining reference file for PR #${prNumber}`);
-
-            // Validate inputs
+            // Validate inputs before any use
             const validateInput = (input, regex, name) => {
-              if (!regex.test(input)) {
+              if (typeof input !== "string" || !regex.test(input)) {
                 throw new Error(`Invalid ${name}: ${input}`);
               }
+              return input;
             };
 
-            validateInput(repoOwner, /^[a-zA-Z0-9_-]+$/, "repository owner");
-            validateInput(repoName, /^[a-zA-Z0-9._-]+$/, "repository name");
-            validateInput(branch, /^[a-zA-Z0-9._/-]+$/, "branch name");
+            const repoOwner = validateInput(process.env.REPO_OWNER, /^[a-zA-Z0-9_-]+$/, "repository owner");
+            const repoName = validateInput(process.env.REPO_NAME, /^[a-zA-Z0-9._-]+$/, "repository name");
+            const prRepoOwner = validateInput(process.env.PR_REPO_OWNER, /^[a-zA-Z0-9_-]+$/, "PR repository owner");
+            const prRepoName = validateInput(process.env.PR_REPO_NAME, /^[a-zA-Z0-9._-]+$/, "PR repository name");
+            const branch = validateInput(process.env.PR_BRANCH, /^[a-zA-Z0-9._/-]+$/, "branch name");
+            const prNumber = Number(validateInput(process.env.PR_NUMBER, /^[0-9]+$/, "PR number"));
+
+            console.log(`Determining reference file for PR #${prNumber}`);
 
             // Get the list of changed files in the PR
             const { data: files } = await github.rest.pulls.listFiles({
@@ -126,7 +125,7 @@ jobs:
             const changedFiles = files
               .filter(file =>
                 file.status !== "removed" &&
-                /^frontend\/public\/locales\/[a-zA-Z-]+\/translation\.toml$/.test(file.filename)
+                /^frontend\/editor\/public\/locales\/[a-zA-Z-]+\/translation\.toml$/.test(file.filename)
               )
               .map(file => file.filename);
 
@@ -196,7 +195,7 @@ jobs:
             core.exportVariable("REFERENCE_FILE", referenceFilePath);
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
@@ -209,10 +208,12 @@ jobs:
 
       - name: Run Python script to check files
         id: run-check
+        env:
+          PR_ACTOR: ${{ github.event.pull_request.user.login }}
         run: |
           echo "Running Python script to check TOML files..."
           uv run --project engine --locked --group tools python .github/scripts/check_language_toml.py \
-            --actor ${{ github.event.pull_request.user.login }} \
+            --actor "${PR_ACTOR}" \
             --reference-file "${REFERENCE_FILE}" \
             --branch "pr-branch" \
             --files "${FILES_LIST[@]}" > result.txt
@@ -245,7 +246,7 @@ jobs:
         if: env.SCRIPT_OUTPUT != ''
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const { GITHUB_REPOSITORY, SCRIPT_OUTPUT } = process.env;
             const [repoOwner, repoName] = GITHUB_REPOSITORY.split('/');
@@ -261,7 +262,7 @@ jobs:
             const comment = comments.data.find(c => c.body.includes("## 🌐 TOML Translation Verification Summary"));
 
             // Only update or create comments by the action user
-            const expectedActor = "${{ steps.setup-bot.outputs.app-slug }}[bot]";
+            const expectedActor = "github-actions[bot]";
 
             if (comment && comment.user.login === expectedActor) {
               // Update existing comment
diff --git a/.github/workflows/coverage-aggregate.yml b/.github/workflows/coverage-aggregate.yml
index 507525f254..899bed7f9d 100644
--- a/.github/workflows/coverage-aggregate.yml
+++ b/.github/workflows/coverage-aggregate.yml
@@ -34,31 +34,28 @@ jobs:
     timeout-minutes: 15
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/db-migration-test.yml b/.github/workflows/db-migration-test.yml
index 377d2daf98..3841ea4410 100644
--- a/.github/workflows/db-migration-test.yml
+++ b/.github/workflows/db-migration-test.yml
@@ -13,34 +13,34 @@ permissions:
 
 jobs:
   migration-test:
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: 25
           distribution: temurin
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       # Keep the normal formatting path here so this smoke test exercises the
       # same Gradle configuration as the backend build.
       - name: Build Stirling-PDF JAR
@@ -81,3 +81,8 @@ jobs:
           path: /tmp/stirling-migration-failed-*/app.log
           retention-days: 7
           if-no-files-found: warn
+
+      - name: Cleanup temporary files
+        if: always()
+        run: rm -rf /tmp/stirling-migration-failed-*
+        continue-on-error: true
diff --git a/.github/workflows/dependency-review.yml b/.github/workflows/dependency-review.yml
index 07f1f8ce1a..527dca9703 100644
--- a/.github/workflows/dependency-review.yml
+++ b/.github/workflows/dependency-review.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/deploy-on-v2-commit.yml b/.github/workflows/deploy-on-v2-commit.yml
deleted file mode 100644
index c98ec8641c..0000000000
--- a/.github/workflows/deploy-on-v2-commit.yml
+++ /dev/null
@@ -1,189 +0,0 @@
-name: Auto V2 Deploy on Push
-
-on:
-  push:
-    branches:
-      - V2
-      - deploy-on-v2-commit
-
-permissions:
-  contents: read
-
-jobs:
-  deploy-v2-on-push:
-    runs-on: ubuntu-latest
-    concurrency:
-      group: deploy-v2-push-V2
-      cancel-in-progress: true
-
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-
-      - name: Checkout code
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
-
-      - name: Get commit hashes for frontend and backend
-        id: commit-hashes
-        run: |
-          # Get last commit that touched the frontend folder, docker/frontend, or docker/compose
-          FRONTEND_HASH=$(git log -1 --format="%H" -- frontend/ docker/frontend/ docker/compose/ 2>/dev/null || echo "")
-          if [ -z "$FRONTEND_HASH" ]; then
-            FRONTEND_HASH="no-frontend-changes"
-          fi
-
-          # Get last commit that touched backend code, docker/backend, or docker/compose
-          BACKEND_HASH=$(git log -1 --format="%H" -- app/ docker/backend/ docker/compose/ 2>/dev/null || echo "")
-          if [ -z "$BACKEND_HASH" ]; then
-            BACKEND_HASH="no-backend-changes"
-          fi
-
-          echo "Frontend hash: $FRONTEND_HASH"
-          echo "Backend hash: $BACKEND_HASH"
-
-          echo "frontend_hash=$FRONTEND_HASH" >> $GITHUB_OUTPUT
-          echo "backend_hash=$BACKEND_HASH" >> $GITHUB_OUTPUT
-
-          # Short hashes for tags
-          if [ "$FRONTEND_HASH" = "no-frontend-changes" ]; then
-            echo "frontend_short=no-frontend" >> $GITHUB_OUTPUT
-          else
-            echo "frontend_short=${FRONTEND_HASH:0:8}" >> $GITHUB_OUTPUT
-          fi
-
-          if [ "$BACKEND_HASH" = "no-backend-changes" ]; then
-            echo "backend_short=no-backend" >> $GITHUB_OUTPUT
-          else
-            echo "backend_short=${BACKEND_HASH:0:8}" >> $GITHUB_OUTPUT
-          fi
-
-      - name: Check if frontend image exists
-        id: check-frontend
-        run: |
-          if docker manifest inspect ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-frontend-${{ steps.commit-hashes.outputs.frontend_short }} >/dev/null 2>&1; then
-            echo "exists=true" >> $GITHUB_OUTPUT
-            echo "Frontend image already exists, skipping build"
-          else
-            echo "exists=false" >> $GITHUB_OUTPUT
-            echo "Frontend image needs to be built"
-          fi
-
-      - name: Check if backend image exists
-        id: check-backend
-        run: |
-          if docker manifest inspect ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-backend-${{ steps.commit-hashes.outputs.backend_short }} >/dev/null 2>&1; then
-            echo "exists=true" >> $GITHUB_OUTPUT
-            echo "Backend image already exists, skipping build"
-          else
-            echo "exists=false" >> $GITHUB_OUTPUT
-            echo "Backend image needs to be built"
-          fi
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
-        with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_API }}
-
-      - name: Build and push frontend image
-        if: steps.check-frontend.outputs.exists == 'false'
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
-        with:
-          context: .
-          file: ./docker/frontend/Dockerfile
-          push: true
-          cache-from: type=gha,scope=stirling-v2-frontend
-          cache-to: type=gha,mode=max,scope=stirling-v2-frontend
-          tags: |
-            ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-frontend-${{ steps.commit-hashes.outputs.frontend_short }}
-            ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-frontend-latest
-          build-args: VERSION_TAG=v2-alpha
-          platforms: linux/amd64
-
-      - name: Build and push backend image
-        if: steps.check-backend.outputs.exists == 'false'
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
-        with:
-          context: .
-          file: ./docker/backend/Dockerfile
-          push: true
-          cache-from: type=gha,scope=stirling-v2-backend
-          cache-to: type=gha,mode=max,scope=stirling-v2-backend
-          tags: |
-            ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-backend-${{ steps.commit-hashes.outputs.backend_short }}
-            ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-backend-latest
-          build-args: VERSION_TAG=v2-alpha
-          platforms: linux/amd64
-
-      - name: Set up SSH
-        run: |
-          mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
-          chmod 600 ../private.key
-
-      - name: Deploy to VPS on port 3000
-        run: |
-          export UNIQUE_NAME=docker-compose-v2-$GITHUB_RUN_ID.yml
-
-          cat > $UNIQUE_NAME << EOF
-          version: '3.3'
-          services:
-            backend:
-              container_name: stirling-v2-backend
-              image: ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-backend-${{ steps.commit-hashes.outputs.backend_short }}
-              ports:
-                - "13000:8080"
-              volumes:
-                - /stirling/V2/data:/usr/share/tessdata:rw
-                - /stirling/V2/config:/configs:rw
-                - /stirling/V2/logs:/logs:rw
-              environment:
-                DISABLE_ADDITIONAL_FEATURES: "true"
-                SECURITY_ENABLELOGIN: "false"
-                SYSTEM_DEFAULTLOCALE: en-US
-                UI_APPNAME: "Stirling-PDF V2"
-                UI_HOMEDESCRIPTION: "V2 Frontend/Backend Split"
-                UI_APPNAMENAVBAR: "V2 Deployment"
-                SYSTEM_MAXFILESIZE: "100"
-                METRICS_ENABLED: "true"
-                SYSTEM_GOOGLEVISIBILITY: "false"
-                SWAGGER_SERVER_URL: "https://demo.stirlingpdf.cloud"
-                baseUrl: "https://demo.stirlingpdf.cloud"
-              restart: on-failure:5
-
-            frontend:
-              container_name: stirling-v2-frontend
-              image: ${{ secrets.DOCKER_HUB_USERNAME }}/test:v2-frontend-${{ steps.commit-hashes.outputs.frontend_short }}
-              ports:
-                - "3000:80"
-              environment:
-                VITE_API_BASE_URL: "http://${{ secrets.NEW_VPS_HOST }}:13000"
-              depends_on:
-                - backend
-              restart: on-failure:5
-          EOF
-
-          # Copy to remote with unique name
-          scp -i ../private.key -o StrictHostKeyChecking=no $UNIQUE_NAME ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }}:/tmp/$UNIQUE_NAME
-
-          # SSH and rename/move atomically to avoid interference
-          ssh -i ../private.key -o StrictHostKeyChecking=no ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << ENDSSH
-            mkdir -p /stirling/V2/{data,config,logs}
-            mv /tmp/$UNIQUE_NAME /stirling/V2/docker-compose.yml
-            cd /stirling/V2
-            docker-compose down || true
-            docker-compose pull
-            docker-compose up -d
-            docker system prune -af --volumes || true
-            docker image prune -af --filter "until=336h" --filter "label!=keep=true" || true
-          ENDSSH
-
-      - name: Cleanup temporary files
-        if: always()
-        run: |
-          rm -f ../private.key
diff --git a/.github/workflows/docker-compose-tests.yml b/.github/workflows/docker-compose-tests.yml
index 05b66ba34b..cf5887a205 100644
--- a/.github/workflows/docker-compose-tests.yml
+++ b/.github/workflows/docker-compose-tests.yml
@@ -17,6 +17,9 @@ permissions:
 
 jobs:
   docker-compose-tests:
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     permissions:
       actions: write
@@ -25,30 +28,27 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Checkout Repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       # When the PR changes the base image, test.sh builds it locally
       # (stirling-pdf-base:local) into the daemon image store. A buildx
       # container builder can't see that store, so skip it here and let
@@ -66,11 +66,11 @@ jobs:
 
       - name: Install Docker Compose
         run: |
-          sudo curl -SL "https://github.com/docker/compose/releases/download/v2.39.4/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
+          sudo curl -SL "https://github.com/docker/compose/releases/download/v5.4.0/docker-compose-$(uname -s)-$(uname -m)" -o /usr/local/bin/docker-compose
           sudo chmod +x /usr/local/bin/docker-compose
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/e2e-live.yml b/.github/workflows/e2e-live.yml
index 3c5c12d6e7..b04f5022cc 100644
--- a/.github/workflows/e2e-live.yml
+++ b/.github/workflows/e2e-live.yml
@@ -11,48 +11,33 @@ permissions:
 
 jobs:
   playwright-e2e-live:
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     timeout-minutes: 30
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-      # Gradle does not retry 429s, and a cold cache resolving the buildscript
-      # classpath is exactly where Maven Central rate-limits us. Retry it here,
-      # where a failure is cheap, instead of inside the backgrounded bootRun.
-      - name: Prime Gradle dependencies
-        env:
-          MAVEN_USER: ${{ secrets.MAVEN_USER }}
-          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
-        run: |
-          for attempt in 1 2 3; do
-            if ./gradlew --quiet -PnoSpotless :stirling-pdf:classes; then
-              exit 0
-            fi
-            echo "::warning::Gradle dependency resolution failed (attempt $attempt of 3)"
-            sleep $((attempt * 30))
-          done
-          echo "::error::Gradle could not resolve dependencies after 3 attempts"
-          exit 1
+
       - name: Set up Node.js
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
         with:
@@ -121,7 +106,7 @@ jobs:
           fi
       - name: Install uv
         if: always()
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/e2e-stubbed.yml b/.github/workflows/e2e-stubbed.yml
index df3c5fa82a..5038a7585a 100644
--- a/.github/workflows/e2e-stubbed.yml
+++ b/.github/workflows/e2e-stubbed.yml
@@ -14,6 +14,11 @@ jobs:
   playwright-e2e:
     name: playwright-e2e (${{ matrix.browser }})
     runs-on: ubuntu-latest
+    # The image already contains the Playwright browsers and all Linux
+    # dependencies. This keeps the matrix for per-browser reporting while
+    # avoiding three concurrent `playwright install --with-deps` runs.
+    container:
+      image: mcr.microsoft.com/playwright:v1.58.2-noble@sha256:6446946a1d9fd62d9ae501312a2d76a43ee688542b21622056a372959b65d63d
     strategy:
       # One browser breaking must not mask a failure in another - report all.
       fail-fast: false
@@ -27,7 +32,7 @@ jobs:
             project: stubbed-webkit
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
@@ -40,15 +45,23 @@ jobs:
           cache-dependency-path: frontend/package-lock.json
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
-      - name: Install Playwright (${{ matrix.browser }})
-        run: task e2e:install -- ${{ matrix.browser }}
       - name: Build frontend (production bundle for vite preview)
         env:
           VITE_BUILD_FOR_PREVIEW: "1"
         run: task frontend:build
       - name: Run stubbed E2E tests (${{ matrix.browser }})
         env:
+          # The official Playwright image expects its browser runtime under
+          # the root home directory. Keep this scoped to Playwright and use a
+          # neutral Docker config path so Docker does not read /root/.docker.
+          HOME: /root
+          DOCKER_CONFIG: /tmp/playwright-docker-config
           PLAYWRIGHT_JSON_OUTPUT_FILE: ${{ github.workspace }}/frontend/playwright-report/results.json
+          NPM_CONFIG_PREFER_OFFLINE: "true"
+          NPM_CONFIG_FETCH_RETRIES: "5"
+          NPM_CONFIG_FETCH_RETRY_FACTOR: "2"
+          NPM_CONFIG_FETCH_RETRY_MINTIMEOUT: "1000"
+          NPM_CONFIG_FETCH_RETRY_MAXTIMEOUT: "120000"
         run: task e2e:stubbed-project PROJECT=${{ matrix.project }} -- --workers=3
       - name: Flag flaky tests
         # Runs regardless of the test outcome: a flaky test (passed on retry)
diff --git a/.github/workflows/frontend-a11y.yml b/.github/workflows/frontend-a11y.yml
index e9f259f2ab..247d8375fc 100644
--- a/.github/workflows/frontend-a11y.yml
+++ b/.github/workflows/frontend-a11y.yml
@@ -3,17 +3,12 @@ name: Frontend a11y regression gate
 # Reusable workflow called from build.yml when frontend sources change.
 #
 # Scans the stories this branch touches in real Chromium and runs axe against
-# each. Existing violations are grandfathered in .storybook/a11y-baseline.json;
-# the check fails on a NEW violation — a story breaking a rule it wasn't already
-# breaking — or on a story that fails to render at all.
+# each; the check fails on any axe violation, or on a story that fails to render
+# at all.
 #
 # Only changed stories, because a full sweep is ~30 minutes: far too slow to sit
 # in front of every merge. The whole suite is scanned nightly instead
 # (nightly.yml), which catches anything a branch didn't touch.
-#
-# Advisory for now: this is not in build.yml's all-checks-passed list, so a
-# failure reports without blocking. Promote it once a few weeks of runs show the
-# pass/fail is stable.
 on:
   workflow_call:
 
@@ -26,7 +21,7 @@ jobs:
     timeout-minutes: 25
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
diff --git a/.github/workflows/frontend-backend-licenses-update.yml b/.github/workflows/frontend-backend-licenses-update.yml
index f2cca9cee4..96e0edd8ac 100644
--- a/.github/workflows/frontend-backend-licenses-update.yml
+++ b/.github/workflows/frontend-backend-licenses-update.yml
@@ -28,7 +28,7 @@ jobs:
       licenses-backend: ${{ steps.changes.outputs.licenses-backend }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -36,12 +36,16 @@ jobs:
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
       - name: Check for file changes
-        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
+        uses: dorny/paths-filter@ceb8a2b8f2d89434be7ff52d3de7ec3738c5cc9d # v4.0.3
         id: changes
         with:
           filters: .github/config/.files.yaml
 
   generate-frontend-license-report:
+    # ci-bot, not bot-identity: this job runs on PRs too, and bot-identity is main-only.
+    environment:
+      name: ci-bot
+      deployment: false
     if: needs.files-changed.outputs.licenses-frontend == 'true'
     name: Generate Frontend License Report
     needs: files-changed
@@ -52,7 +56,7 @@ jobs:
       repository-projects: write # Required for enabling automerge
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -316,6 +320,10 @@ jobs:
           GH_TOKEN: ${{ steps.setup-bot.outputs.token }}
 
   generate-backend-license-report:
+    # ci-bot, not bot-identity: this job runs on PRs too, and bot-identity is main-only.
+    environment:
+      name: ci-bot
+      deployment: false
     if: needs.files-changed.outputs.licenses-backend == 'true'
     needs: files-changed
     name: Generate Backend License Report
@@ -326,7 +334,7 @@ jobs:
       repository-projects: write # Required for enabling automerge
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -344,22 +352,19 @@ jobs:
           app-id: ${{ secrets.GH_APP_ID }}
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
 
-      - name: Set up JDK 25
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
-        with:
-          java-version: "25"
-          distribution: "temurin"
-
-      - name: Cache Gradle User Home
+      - name: Cache Gradle
         uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
         with:
           path: |
             ~/.gradle/caches
             ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
+          key: gradle-license-report-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
+      - name: Set up JDK 25
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        with:
+          java-version: "25"
+          distribution: "temurin"
 
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
diff --git a/.github/workflows/frontend-validation.yml b/.github/workflows/frontend-validation.yml
index 7e2602c311..2650a945d6 100644
--- a/.github/workflows/frontend-validation.yml
+++ b/.github/workflows/frontend-validation.yml
@@ -15,7 +15,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
       - name: Checkout repository
@@ -107,7 +107,7 @@ jobs:
             }
       - name: Install uv
         if: always()
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
diff --git a/.github/workflows/gradle-cache-prime.yml b/.github/workflows/gradle-cache-prime.yml
new file mode 100644
index 0000000000..1c79ee4d12
--- /dev/null
+++ b/.github/workflows/gradle-cache-prime.yml
@@ -0,0 +1,66 @@
+name: Prime Gradle Cache
+
+on:
+  workflow_call:
+  push:
+    branches: ["main"]
+
+permissions:
+  contents: read
+
+jobs:
+  gradle-cache-prime:
+    environment:
+      name: ci-unsigned
+      deployment: false
+    name: Prime shared Gradle cache
+    runs-on: ubuntu-latest
+    timeout-minutes: 15
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        with:
+          egress-policy: audit
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Calculate Gradle cache key
+        id: gradle-cache-key
+        shell: bash
+        run: |
+          echo "key=gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}" >> "$GITHUB_OUTPUT"
+
+      - name: Cache Gradle (lookup-only)
+        id: cache-gradle-restore
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: ${{ steps.gradle-cache-key.outputs.key }}
+          lookup-only: true
+
+      - name: Set up JDK 25
+        if: steps.cache-gradle-restore.outputs.cache-hit != 'true'
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        with:
+          java-version: "25"
+          distribution: "temurin"
+
+      - name: Resolve backend dependencies
+        if: steps.cache-gradle-restore.outputs.cache-hit != 'true'
+        run: ./gradlew :stirling-pdf:classes --no-daemon
+        env:
+          STIRLING_FLAVOR: saas
+          MAVEN_USER: ${{ secrets.MAVEN_USER }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
+
+      - name: Save cache Gradle User Home
+        if: steps.cache-gradle-restore.outputs.cache-hit != 'true'
+        uses: actions/cache/save@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: ${{ steps.gradle-cache-key.outputs.key }}
diff --git a/.github/workflows/manage-label.yml b/.github/workflows/manage-label.yml
index 571479b030..cc27e45946 100644
--- a/.github/workflows/manage-label.yml
+++ b/.github/workflows/manage-label.yml
@@ -15,7 +15,7 @@ jobs:
       issues: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/multiOSReleases.yml b/.github/workflows/multiOSReleases.yml
index f02e6c612c..9071997ad7 100644
--- a/.github/workflows/multiOSReleases.yml
+++ b/.github/workflows/multiOSReleases.yml
@@ -38,6 +38,9 @@ permissions:
 
 jobs:
   determine-matrix:
+    environment:
+      name: ci-unsigned
+      deployment: false
     if: ${{ vars.CI_PROFILE != 'lite' }}
     runs-on: ubuntu-latest
     outputs:
@@ -45,29 +48,26 @@ jobs:
       version: ${{ steps.versionNumber.outputs.versionNumber }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Cache Gradle
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-tauri-releases-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
       - name: Get version number
@@ -93,7 +93,7 @@ jobs:
           ALL="$WINDOWS,$WINDOWS_ARM64,$MACOS,$LINUX"
 
           if [ "${{ github.event_name }}" = "workflow_dispatch" ]; then
-            case "${{ github.event.inputs.platform }}" in
+            case "${INPUT_PLATFORM}" in
               "windows")
                 echo "matrix={\"include\":[$WINDOWS,$WINDOWS_ARM64]}" >> $GITHUB_OUTPUT
                 ;;
@@ -115,7 +115,12 @@ jobs:
             echo "matrix={\"include\":[$ALL]}" >> $GITHUB_OUTPUT
           fi
 
+        env:
+          INPUT_PLATFORM: ${{ github.event.inputs.platform }}
   build-jars:
+    environment:
+      name: ci-unsigned
+      deployment: false
     needs: determine-matrix
     runs-on: ubuntu-latest
     strategy:
@@ -135,29 +140,26 @@ jobs:
             file_suffix: "-server"
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Cache Gradle
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-tauri-releases-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Setup Node.js
         if: matrix.variant.build_frontend == true
         uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
@@ -194,6 +196,7 @@ jobs:
           retention-days: 1
 
   build:
+    environment: release-signing
     needs: determine-matrix
     strategy:
       fail-fast: false
@@ -201,11 +204,10 @@ jobs:
     runs-on: ${{ matrix.platform }}
     env:
       SM_API_KEY: ${{ secrets.SM_API_KEY }}
-      WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
       RELEASE_GPG_PRIVATE_KEY: ${{ secrets.RELEASE_GPG_PRIVATE_KEY }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
           allowed-endpoints: >
@@ -234,6 +236,14 @@ jobs:
           toolchain: stable
           targets: ${{ matrix.platform == 'macos-15' && 'aarch64-apple-darwin,x86_64-apple-darwin' || '' }}
 
+      - name: Cache Gradle
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-tauri-releases-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       # x86_64 JDK is set up first so the aarch64 step below can leave its
       # JAVA_HOME as the active one. The macOS universal JRE build needs
       # jmods from both arches; the x64 path is captured into the env
@@ -257,17 +267,6 @@ jobs:
           java-version: "25"
           distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
 
@@ -292,7 +291,7 @@ jobs:
       # DigiCert KeyLocker Setup (Cloud HSM)
       - name: Setup DigiCert KeyLocker
         id: digicert-setup
-        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release') }}
         uses: digicert/ssm-code-signing@1d820463733701cf1484c7eb5d7d24a15ca2c454 # v1.2.1
         env:
           SM_API_KEY: ${{ secrets.SM_API_KEY }}
@@ -302,22 +301,22 @@ jobs:
           SM_HOST: ${{ secrets.SM_HOST }}
 
       - name: Setup DigiCert KeyLocker Certificate
-        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release') }}
         shell: pwsh
         run: |
           Write-Host "Setting up DigiCert KeyLocker environment..."
 
           # Decode client certificate
-          $certBytes = [Convert]::FromBase64String("${{ secrets.SM_CLIENT_CERT_FILE_B64 }}")
+          $certBytes = [Convert]::FromBase64String("$env:SM_CLIENT_CERT_FILE_B64")
           $certPath = "D:\Certificate_pkcs12.p12"
           [IO.File]::WriteAllBytes($certPath, $certBytes)
 
           # Set environment variables
           echo "SM_CLIENT_CERT_FILE=D:\Certificate_pkcs12.p12" >> $env:GITHUB_ENV
-          echo "SM_HOST=${{ secrets.SM_HOST }}" >> $env:GITHUB_ENV
-          echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> $env:GITHUB_ENV
-          echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> $env:GITHUB_ENV
-          echo "SM_KEYPAIR_ALIAS=${{ secrets.SM_KEYPAIR_ALIAS }}" >> $env:GITHUB_ENV
+          echo "SM_HOST=$env:SM_HOST" >> $env:GITHUB_ENV
+          echo "SM_API_KEY=$env:SM_API_KEY" >> $env:GITHUB_ENV
+          echo "SM_CLIENT_CERT_PASSWORD=$env:SM_CLIENT_CERT_PASSWORD" >> $env:GITHUB_ENV
+          echo "SM_KEYPAIR_ALIAS=$env:SM_KEYPAIR_ALIAS" >> $env:GITHUB_ENV
 
           # Get PKCS11 config path from DigiCert action
           $pkcs11Config = $env:PKCS11_CONFIG
@@ -335,40 +334,14 @@ jobs:
             }
           }
 
-      # Traditional PFX Certificate Import (fallback if KeyLocker not configured)
-      - name: Import Windows Code Signing Certificate
-        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY == '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
         env:
-          WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
-          WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
-        shell: powershell
-        run: |
-          if ($env:WINDOWS_CERTIFICATE) {
-            Write-Host "Importing Windows Code Signing Certificate..."
-
-            # Decode base64 certificate and save to file
-            $certBytes = [Convert]::FromBase64String($env:WINDOWS_CERTIFICATE)
-            $certPath = Join-Path $env:RUNNER_TEMP "certificate.pfx"
-            [IO.File]::WriteAllBytes($certPath, $certBytes)
-
-            # Import certificate to CurrentUser\My store
-            $cert = Import-PfxCertificate -FilePath $certPath -CertStoreLocation Cert:\CurrentUser\My -Password (ConvertTo-SecureString -String $env:WINDOWS_CERTIFICATE_PASSWORD -AsPlainText -Force)
-
-            # Extract and set thumbprint as environment variable
-            $thumbprint = $cert.Thumbprint
-            Write-Host "Certificate imported with thumbprint: $thumbprint"
-            echo "WINDOWS_CERTIFICATE_THUMBPRINT=$thumbprint" >> $env:GITHUB_ENV
-
-            # Clean up certificate file
-            Remove-Item $certPath
-
-            Write-Host "Windows certificate import completed."
-          } else {
-            Write-Host "⚠️ WINDOWS_CERTIFICATE secret not set - building unsigned binary"
-          }
-
+          SM_CLIENT_CERT_FILE_B64: ${{ secrets.SM_CLIENT_CERT_FILE_B64 }}
+          SM_HOST: ${{ secrets.SM_HOST }}
+          SM_API_KEY: ${{ secrets.SM_API_KEY }}
+          SM_CLIENT_CERT_PASSWORD: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}
+          SM_KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
       - name: Import Apple Developer Certificate
-        if: matrix.platform == 'macos-15' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')
+        if: matrix.platform == 'macos-15' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release')
         env:
           APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
           APPLE_CERTIFICATE_PASSWORD: ${{ secrets.APPLE_CERTIFICATE_PASSWORD }}
@@ -389,7 +362,7 @@ jobs:
           rm certificate.p12
 
       - name: Verify Certificate
-        if: matrix.platform == 'macos-15' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')
+        if: matrix.platform == 'macos-15' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release')
         run: |
           echo "Verifying Apple Developer Certificate..."
           KEYCHAIN_PATH=$RUNNER_TEMP/app-signing.keychain-db
@@ -405,7 +378,7 @@ jobs:
       # Without this, signCommand failures are opaque (Tauri captures but drops
       # smctl's stderr) - running these loudly surfaces auth/env/keypair issues.
       - name: Preflight smctl
-        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release') }}
         shell: pwsh
         env:
           KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
@@ -436,7 +409,7 @@ jobs:
       # smctl reads SM_HOST, SM_API_KEY, SM_CLIENT_CERT_FILE, SM_CLIENT_CERT_PASSWORD
       # from env (set by prior DigiCert setup step). No --config-file needed.
       - name: Configure Windows code signing
-        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release') }}
         shell: bash
         env:
           KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
@@ -457,7 +430,7 @@ jobs:
           sed "s/${KEYPAIR_ALIAS}/***/g" ./frontend/editor/src-tauri/tauri.windows.conf.json
 
       - name: Import release GPG signing key (Linux)
-        if: matrix.platform == 'ubuntu-22.04' && env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')
+        if: matrix.platform == 'ubuntu-22.04' && env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release')
         run: |
           echo "$RELEASE_GPG_PRIVATE_KEY" | gpg --batch --import
           gpg --list-secret-keys --keyid-format=long
@@ -489,8 +462,8 @@ jobs:
           #   APPIMAGETOOL_SIGN_PASSPHRASE  appimagetool uses this to unlock the GPG key non-interactively
           #   SIGN_KEY                      appimagetool picks the key matching this fingerprint
           # Without SIGN=1, the other two are ignored and the AppImage is built unsigned even if a key is present.
-          # Mirror the Windows/macOS gate: only sign on a real release/dispatch+sign or V2-master, when secret is present.
-          SIGN: ${{ (env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')) && '1' || '0' }}
+          # Mirror the Windows/macOS gate: only sign on a real release/dispatch+sign or the release branch, when secret is present.
+          SIGN: ${{ (env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release')) && '1' || '0' }}
           APPIMAGETOOL_SIGN_PASSPHRASE: ${{ secrets.RELEASE_GPG_PASSPHRASE }}
           SIGN_KEY: ${{ vars.RELEASE_GPG_FINGERPRINT }}
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
@@ -516,7 +489,7 @@ jobs:
         env:
           TAURI_SIGNING_PRIVATE_KEY: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY }}
           TAURI_SIGNING_PRIVATE_KEY_PASSWORD: ${{ secrets.TAURI_SIGNING_PRIVATE_KEY_PASSWORD }}
-          GPG_SIGN: ${{ (env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')) && '1' || '0' }}
+          GPG_SIGN: ${{ (env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release')) && '1' || '0' }}
           SIGN_KEY: ${{ vars.RELEASE_GPG_FINGERPRINT }}
           APPIMAGETOOL_SIGN_PASSPHRASE: ${{ secrets.RELEASE_GPG_PASSPHRASE }}
         run: |
@@ -555,7 +528,7 @@ jobs:
           echo "Stripped bundled libwayland from $(basename "$AI")"
 
       - name: Clear release GPG key from runner keyring (Linux)
-        if: always() && matrix.platform == 'ubuntu-22.04' && env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master')
+        if: always() && matrix.platform == 'ubuntu-22.04' && env.RELEASE_GPG_PRIVATE_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release')
         env:
           RELEASE_GPG_FINGERPRINT: ${{ vars.RELEASE_GPG_FINGERPRINT }}
         run: |
@@ -570,7 +543,7 @@ jobs:
       # artifact. Tauri signs a COPY when bundling into the MSI and leaves the raw
       # cargo output unsigned, so checking it produces false negatives.
       - name: Verify Windows Code Signature
-        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/V2-master') }}
+        if: ${{ startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && (github.event_name == 'release' || (github.event_name == 'workflow_dispatch' && github.event.inputs.sign != 'false') || github.ref == 'refs/heads/release') }}
         timeout-minutes: 15
         shell: pwsh
         run: |
@@ -724,6 +697,17 @@ jobs:
           path: ./dist/*
           retention-days: 1
 
+      - name: Cleanup temporary files
+        if: always()
+        shell: bash
+        run: |
+          rm -f certificate.p12
+          rm -rf "$RUNNER_TEMP/msi-verify"
+          if [ "${{ matrix.platform }}" = "macos-15" ]; then
+            security delete-keychain "$RUNNER_TEMP/app-signing.keychain-db" 2>/dev/null || true
+          fi
+        continue-on-error: true
+
   collect-and-release:
     needs: [determine-matrix, build, build-jars]
     runs-on: ubuntu-latest
@@ -731,7 +715,7 @@ jobs:
       contents: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -888,7 +872,7 @@ jobs:
       # Gate publish on valid updater sigs. Runs after the review upload (so
       # artifacts survive for debugging) and before action-gh-release.
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
@@ -902,11 +886,11 @@ jobs:
       # workflow_dispatch path requires platform=='all' so a single-platform
       # dispatch can't overwrite an existing release's full latest.json with a
       # partial one (action-gh-release defaults overwrite_files:true).
-      # release / V2-master always build the full matrix so no extra guard needed.
+      # release event / release branch always build the full matrix so no extra guard needed.
       # fail_on_unmatched_files makes a missing latest.json or installer fail loudly
       # instead of silently shipping a broken auto-update.
       - name: Upload binaries to Release
-        if: (github.event_name == 'workflow_dispatch' && github.event.inputs.test_mode != 'true' && github.event.inputs.platform == 'all') || github.event_name == 'release' || github.ref == 'refs/heads/V2-master'
+        if: (github.event_name == 'workflow_dispatch' && github.event.inputs.test_mode != 'true' && github.event.inputs.platform == 'all') || github.event_name == 'release' || github.ref == 'refs/heads/release'
         uses: softprops/action-gh-release@3d0d9888cb7fd7b750713d6e236d1fcb99157228 # v3.0.2
         with:
           tag_name: v${{ needs.determine-matrix.outputs.version }}
diff --git a/.github/workflows/nightly.yml b/.github/workflows/nightly.yml
index ba4054f190..5daa60f56f 100644
--- a/.github/workflows/nightly.yml
+++ b/.github/workflows/nightly.yml
@@ -4,6 +4,11 @@ on:
   schedule:
     - cron: "0 2 * * *" # 2 AM UTC every night
   workflow_dispatch:
+  pull_request:
+    paths:
+      - .github/workflows/nightly.yml
+      - testing/cucumber/**
+      - docker/embedded/compose/test_cicd.yml
 
 concurrency:
   group: ${{ github.workflow }}-${{ github.ref }}
@@ -18,7 +23,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -59,13 +64,17 @@ jobs:
   # the story itself — a shared component, a theme token — still surfaces within
   # a day.
   a11y-all-stories:
-    name: a11y (every story, light + dark)
+    name: a11y (every story)
+    strategy:
+      fail-fast: false
+      matrix:
+        theme: [light, dark]
     runs-on: ubuntu-latest
-    # Two full sweeps (one per theme), each ~30 minutes of browser time.
-    timeout-minutes: 120
+    # One full sweep (~30 minutes of browser time).
+    timeout-minutes: 60
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -82,14 +91,14 @@ jobs:
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
 
-      - name: a11y gate (every story, light + dark)
-        run: task frontend:storybook:a11y
+      - name: a11y gate (every story, ${{ matrix.theme }})
+        run: task frontend:storybook:a11y:${{ matrix.theme }}
 
       - name: Upload scan reports
         if: always()
         uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
-          name: a11y-scan-nightly-${{ github.run_id }}
+          name: a11y-scan-nightly-${{ matrix.theme }}-${{ github.run_id }}
           path: frontend/.a11y-scan/
           retention-days: 14
           if-no-files-found: ignore
@@ -99,8 +108,13 @@ jobs:
 
   # Builds all desktop platforms on a schedule so the Rust dependency cache is
   # written on main, where PR and merge-queue tauri builds can restore it.
+  #
+  # The only job here still pinned to schedule/main: it primes a cache rather than
+  # testing anything, and Actions scopes a cache written on a PR branch to that PR
+  # alone, so a PR run costs three platform builds and produces nothing reusable.
   warm-tauri-cache:
     name: Warm Tauri Rust cache
+    if: github.event_name == 'schedule' || github.ref == 'refs/heads/main'
     permissions:
       contents: read
       pull-requests: write
@@ -109,3 +123,75 @@ jobs:
       platform: all
       sign: false
     secrets: inherit
+
+  # Runs the @nightly tag (conversion scenarios) plus a 10-shard concurrency run
+  # of every other feature.
+  cucumber-nightly:
+    environment:
+      name: ci-unsigned
+      deployment: false
+    name: Cucumber (nightly scenarios + full concurrency)
+    runs-on: ubuntu-latest
+    # Fork pull requests get no MAVEN_* secrets, so the image build cannot work.
+    if: >-
+      github.event_name != 'pull_request' ||
+      github.event.pull_request.head.repo.full_name == github.repository
+    permissions:
+      contents: read
+    steps:
+      - name: Harden the runner (Audit all outbound calls)
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Set up JDK 25
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        with:
+          java-version: "25"
+          distribution: "temurin"
+
+      - name: Install uv
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
+        with:
+          enable-cache: true
+          cache-dependency-glob: |
+            engine/pyproject.toml
+            engine/uv.lock
+
+      - name: Install Task
+        uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
+
+      - name: Start the fat image with login and storage enabled
+        run: docker compose -f docker/embedded/compose/test_cicd.yml up -d --build
+        env:
+          MAVEN_USER: ${{ secrets.MAVEN_USER }}
+          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
+          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
+
+      - name: Wait for the server
+        # Throwaway key from test_cicd.yml; out of the header literal for gitleaks.
+        env:
+          TEST_API_KEY: "123456789"
+        run: |
+          curl --retry 90 --retry-delay 3 --retry-connrefused --retry-all-errors \
+            -sf -H "X-API-KEY: $TEST_API_KEY" http://localhost:8080/api/v1/info/status
+
+      # Heavy LibreOffice/Calibre/Ghostscript conversions, excluded from the PR run.
+      # Both tasks install the behave deps themselves, so there is no separate uv sync step.
+      - name: Run @nightly scenarios
+        run: task cucumber:nightly
+
+      # Genuinely different payloads contending on one backend.
+      - name: Sharded concurrency validation
+        run: task cucumber:parallel SHARDS=10
+
+      - name: Container logs on failure
+        if: failure()
+        run: docker compose -f docker/embedded/compose/test_cicd.yml logs --tail 400
+
+      - name: Tear down
+        if: always()
+        run: docker compose -f docker/embedded/compose/test_cicd.yml down -v
diff --git a/.github/workflows/package-managers.yml b/.github/workflows/package-managers.yml
index e88c5e400e..02d946e5a6 100644
--- a/.github/workflows/package-managers.yml
+++ b/.github/workflows/package-managers.yml
@@ -28,7 +28,7 @@ jobs:
       jar_sha256: ${{ steps.hashes.outputs.jar_sha256 }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -73,13 +73,14 @@ jobs:
           echo "jar_sha256=$JAR_SHA" >> "$GITHUB_OUTPUT"
 
   update-homebrew-and-scoop:
+    environment: package-publish
     needs: get-release-info
     runs-on: ubuntu-latest
     permissions:
       contents: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/pr-conflict-labeler.yml b/.github/workflows/pr-conflict-labeler.yml
index a44d4f7b28..564ea9cd93 100644
--- a/.github/workflows/pr-conflict-labeler.yml
+++ b/.github/workflows/pr-conflict-labeler.yml
@@ -27,29 +27,22 @@ jobs:
     name: Label conflicted PRs
     runs-on: ubuntu-latest
     permissions:
-      contents: read
-      issues: write
-      pull-requests: read
+      contents: read # actions/checkout
+      issues: write # get/create the repo-level conflict label
+      pull-requests: write # pulls.get/list plus add/remove the label on PRs
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - name: Check out the repository
         uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
-      - name: Set up stirling-bot token
-        id: setup-bot
-        uses: ./.github/actions/setup-bot
-        with:
-          app-id: ${{ secrets.GH_APP_ID }}
-          private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
-
       - name: Apply conflict label
         uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9.0.0
         with:
-          github-token: ${{ steps.setup-bot.outputs.token }}
+          github-token: ${{ github.token }}
           script: |
             const conflictLabel = process.env.CONFLICT_LABEL;
             const owner = context.repo.owner;
diff --git a/.github/workflows/pre_commit.yml b/.github/workflows/pre_commit.yml
index 18c4782927..674822363b 100644
--- a/.github/workflows/pre_commit.yml
+++ b/.github/workflows/pre_commit.yml
@@ -14,7 +14,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -25,7 +25,7 @@ jobs:
           persist-credentials: false
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
@@ -34,7 +34,7 @@ jobs:
           cache-suffix: pre-commit
 
       - name: Install Task
-        uses: go-task/setup-task@3be4020d41929789a01026e0e427a4321ce0ad44 # v2.0.0
+        uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
 
       - name: Run pre-commit checks
         run: task pre-commit
diff --git a/.github/workflows/push-docker-base.yml b/.github/workflows/push-docker-base.yml
index 167b71531e..9da49ad7ae 100644
--- a/.github/workflows/push-docker-base.yml
+++ b/.github/workflows/push-docker-base.yml
@@ -17,6 +17,9 @@ permissions:
 
 jobs:
   push-base:
+    # Own environment: docker-publish is branch-locked to release/main,
+    # which excludes the baseDockerImage/accessIssueFix branches this runs on.
+    environment: docker-base-publish
     if: ${{ vars.CI_PROFILE != 'lite' && github.actor == 'Frooodle' }}
     runs-on: ubuntu-24.04-8core
     permissions:
@@ -32,9 +35,11 @@ jobs:
 
       - name: Set version
         id: version
+        env:
+          INPUT_VERSION: ${{ github.event.inputs.version }}
         run: |
           if [ "${{ github.event_name }}" == "workflow_dispatch" ]; then
-            VERSION="${{ github.event.inputs.version }}"
+            VERSION="${INPUT_VERSION}"
           elif [ "${{ github.ref_name }}" == "accessIssueFix" ]; then
             VERSION="1.0.3"
           else
@@ -43,7 +48,7 @@ jobs:
           echo "version=${VERSION}" >> $GITHUB_OUTPUT
 
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/push-docker.yml b/.github/workflows/push-docker.yml
index 906884aaab..844a77b489 100644
--- a/.github/workflows/push-docker.yml
+++ b/.github/workflows/push-docker.yml
@@ -18,12 +18,20 @@ on:
         required: false
         type: boolean
         default: false
+      build_engine:
+        description: "Build & push the standalone stirling-engine image."
+        required: false
+        type: boolean
+        default: true
+      force_engine_rebuild:
+        description: "Rebuild stirling-engine even if its source hash is unchanged."
+        required: false
+        type: boolean
+        default: false
   push:
     branches:
-      - master
+      - release
       - main
-      - V2-master
-      - testMain
 
 # cancel in-progress jobs if a new job is triggered
 # This is useful to avoid running multiple builds for the same branch if a new commit is pushed
@@ -42,6 +50,7 @@ permissions:
 
 jobs:
   push:
+    environment: docker-publish
     if: ${{ vars.CI_PROFILE != 'lite' }}
     runs-on: ubuntu-24.04-8core
     permissions:
@@ -51,31 +60,29 @@ jobs:
     env:
       RUN_MAIN_APP: ${{ github.event_name != 'workflow_dispatch' || inputs.build_main_app }}
       RUN_UNOSERVER: ${{ github.event_name != 'workflow_dispatch' || inputs.build_unoserver }}
+      RUN_ENGINE: ${{ github.event_name != 'workflow_dispatch' || inputs.build_engine }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Cache Gradle
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-push-docker-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Set up Docker Buildx
         id: buildx
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
@@ -91,13 +98,13 @@ jobs:
           MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
 
       - name: Install cosign
-        if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master'
+        if: github.ref == 'refs/heads/release'
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
         with:
           cosign-release: "v2.4.1"
 
       - name: Install cosign
-        if: github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master'
+        if: github.ref == 'refs/heads/release'
         uses: sigstore/cosign-installer@6f9f17788090df1f26f669e9d70d6ae9567deba6 # v4.1.2
         with:
           cosign-release: "v2.4.1"
@@ -133,8 +140,8 @@ jobs:
             ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf
             ${{ secrets.DOCKER_HUB_ORG_USERNAME }}/stirling-pdf
           tags: |
-            type=raw,value=${{ steps.versionNumber.outputs.versionNumber }},enable=${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' }}
-            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' }}
+            type=raw,value=${{ steps.versionNumber.outputs.versionNumber }},enable=${{ github.ref == 'refs/heads/release' }}
+            type=raw,value=latest,enable=${{ github.ref == 'refs/heads/release' }}
 
       - name: Build and push Unified Dockerfile (latest variant)
         id: build-push-latest
@@ -158,7 +165,7 @@ jobs:
           sbom: true
 
       - name: Sign regular images
-        if: env.RUN_MAIN_APP == 'true' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master') && steps.build-push-latest.outputs.digest != ''
+        if: env.RUN_MAIN_APP == 'true' && (github.ref == 'refs/heads/release') && steps.build-push-latest.outputs.digest != ''
         env:
           DIGEST: ${{ steps.build-push-latest.outputs.digest }}
           TAGS: ${{ steps.meta.outputs.tags }}
@@ -182,8 +189,8 @@ jobs:
             ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf
             ${{ secrets.DOCKER_HUB_ORG_USERNAME }}/stirling-pdf
           tags: |
-            type=raw,value=${{ steps.versionNumber.outputs.versionNumber }}-fat,enable=${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' }}
-            type=raw,value=latest-fat,enable=${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' }}
+            type=raw,value=${{ steps.versionNumber.outputs.versionNumber }}-fat,enable=${{ github.ref == 'refs/heads/release' }}
+            type=raw,value=latest-fat,enable=${{ github.ref == 'refs/heads/release' }}
 
       - name: Build and push Unified Dockerfile (fat variant)
         id: build-push-fat
@@ -204,7 +211,7 @@ jobs:
           sbom: true
 
       - name: Sign fat images
-        if: env.RUN_MAIN_APP == 'true' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master') && steps.build-push-fat.outputs.digest != ''
+        if: env.RUN_MAIN_APP == 'true' && (github.ref == 'refs/heads/release') && steps.build-push-fat.outputs.digest != ''
         env:
           DIGEST: ${{ steps.build-push-fat.outputs.digest }}
           TAGS: ${{ steps.meta-fat.outputs.tags }}
@@ -226,8 +233,8 @@ jobs:
             ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-pdf
             ${{ secrets.DOCKER_HUB_ORG_USERNAME }}/stirling-pdf
           tags: |
-            type=raw,value=${{ steps.versionNumber.outputs.versionNumber }}-ultra-lite,enable=${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' }}
-            type=raw,value=latest-ultra-lite,enable=${{ github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master' }}
+            type=raw,value=${{ steps.versionNumber.outputs.versionNumber }}-ultra-lite,enable=${{ github.ref == 'refs/heads/release' }}
+            type=raw,value=latest-ultra-lite,enable=${{ github.ref == 'refs/heads/release' }}
 
       - name: Build and push Unified Dockerfile (ultra-lite variant)
         id: build-push-lite
@@ -248,7 +255,7 @@ jobs:
           sbom: true
 
       - name: Sign ultra-lite images
-        if: env.RUN_MAIN_APP == 'true' && (github.ref == 'refs/heads/master' || github.ref == 'refs/heads/V2-master') && steps.build-push-lite.outputs.digest != ''
+        if: env.RUN_MAIN_APP == 'true' && (github.ref == 'refs/heads/release') && steps.build-push-lite.outputs.digest != ''
         env:
           DIGEST: ${{ steps.build-push-lite.outputs.digest }}
           TAGS: ${{ steps.meta-lite.outputs.tags }}
@@ -260,7 +267,7 @@ jobs:
           done
 
       # Standalone unoserver image — versioned independently via
-      # docker/unoserver/VERSION. master/V2-master: publish <version>+latest
+      # docker/unoserver/VERSION. release: publish <version>+latest
       # only when the version is new. main/testMain: republish :alpha only
       # when the source hash differs from the published image's annotation.
       - name: Read unoserver image version
@@ -319,7 +326,7 @@ jobs:
           fi
 
           case "$EFFECTIVE_REF" in
-            refs/heads/master|refs/heads/V2-master)
+            refs/heads/release)
               if [ "${FORCE_REBUILD}" = "true" ]; then
                 echo "force_unoserver_rebuild=true — building stable regardless"
                 mode="stable"
@@ -391,3 +398,119 @@ jobs:
           else
             echo "Warning: COSIGN_PRIVATE_KEY not set, skipping unoserver image signing"
           fi
+
+      # Standalone AI engine image, same shape as the unoserver image above.
+      - name: Compute engine image source hash
+        id: engineHash
+        if: env.RUN_ENGINE == 'true'
+        run: |
+          set -eu
+          hash=$( { cat engine/Dockerfile engine/pyproject.toml engine/uv.lock engine/.env; \
+                    find engine/src -type f -print0 | sort -z | xargs -0 cat; } \
+                  | sha256sum | cut -d' ' -f1)
+          echo "hash=${hash}" >> "$GITHUB_OUTPUT"
+          echo "Engine source hash: ${hash}"
+
+      - name: Decide whether to publish engine image
+        id: engineDecision
+        if: env.RUN_ENGINE == 'true'
+        env:
+          ENGINE_VERSION: ${{ steps.versionNumber.outputs.versionNumber }}
+          ENGINE_HASH: ${{ steps.engineHash.outputs.hash }}
+          ENGINE_IMAGE: ghcr.io/${{ steps.repoowner.outputs.lowercase }}/stirling-engine
+          ENGINE_HASH_ANNOTATION: org.stirlingpdf.engine-source-hash
+          FORCE_REBUILD: ${{ inputs.force_engine_rebuild }}
+          GH_REF: ${{ github.ref }}
+          EVENT_NAME: ${{ github.event_name }}
+        run: |
+          set -eu
+          mode="skip"
+          tags=""
+
+          read_published_hash() {
+            local ref="$1"
+            docker buildx imagetools inspect "$ref" --raw 2>/dev/null \
+              | jq -r --arg key "$ENGINE_HASH_ANNOTATION" \
+                  '.annotations[$key] // empty' \
+              2>/dev/null || true
+          }
+
+          # Manual dispatch from any branch routes to the :alpha publish path.
+          EFFECTIVE_REF="$GH_REF"
+          if [ "$EVENT_NAME" = "workflow_dispatch" ]; then
+            EFFECTIVE_REF="refs/heads/testMain"
+          fi
+
+          case "$EFFECTIVE_REF" in
+            refs/heads/release)
+              if [ "${FORCE_REBUILD}" = "true" ]; then
+                echo "force_engine_rebuild=true — building stable regardless"
+                mode="stable"
+                tags="${ENGINE_IMAGE}:${ENGINE_VERSION},${ENGINE_IMAGE}:latest"
+              elif docker manifest inspect "${ENGINE_IMAGE}:${ENGINE_VERSION}" >/dev/null 2>&1; then
+                echo "stirling-engine:${ENGINE_VERSION} already on GHCR — skipping"
+              else
+                echo "stirling-engine:${ENGINE_VERSION} is new — will publish"
+                mode="stable"
+                tags="${ENGINE_IMAGE}:${ENGINE_VERSION},${ENGINE_IMAGE}:latest"
+              fi
+              ;;
+            refs/heads/main|refs/heads/testMain)
+              published_hash=$(read_published_hash "${ENGINE_IMAGE}:alpha")
+              if [ "${FORCE_REBUILD}" = "true" ]; then
+                echo "force_engine_rebuild=true — rebuilding :alpha regardless"
+                mode="alpha"
+                tags="${ENGINE_IMAGE}:alpha"
+              elif [ -n "$published_hash" ] && [ "$published_hash" = "$ENGINE_HASH" ]; then
+                echo "Published :alpha source hash matches (${published_hash}) — skipping"
+              else
+                if [ -z "$published_hash" ]; then
+                  echo ":alpha has no source-hash annotation (first publish) — will publish"
+                else
+                  echo "Source hash changed (was ${published_hash}, now ${ENGINE_HASH}) — will publish"
+                fi
+                mode="alpha"
+                tags="${ENGINE_IMAGE}:alpha"
+              fi
+              ;;
+            *)
+              echo "Branch ${GH_REF} does not publish engine image"
+              ;;
+          esac
+          echo "mode=${mode}" >> "$GITHUB_OUTPUT"
+          echo "tags=${tags}" >> "$GITHUB_OUTPUT"
+
+      - name: Build and push engine image
+        id: build-push-engine
+        if: env.RUN_ENGINE == 'true' && steps.engineDecision.outputs.mode != 'skip'
+        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
+        with:
+          builder: ${{ steps.buildx.outputs.name }}
+          context: .
+          file: ./engine/Dockerfile
+          push: true
+          cache-from: type=gha,scope=stirling-engine
+          cache-to: type=gha,mode=max,scope=stirling-engine
+          tags: ${{ steps.engineDecision.outputs.tags }}
+          # Manifest annotation read by the decision step above to detect drift.
+          annotations: |
+            index:org.stirlingpdf.engine-source-hash=${{ steps.engineHash.outputs.hash }}
+          platforms: linux/amd64,linux/arm64/v8
+          provenance: true
+          sbom: true
+
+      - name: Sign engine image
+        if: env.RUN_ENGINE == 'true' && steps.engineDecision.outputs.mode == 'stable'
+        env:
+          DIGEST: ${{ steps.build-push-engine.outputs.digest }}
+          TAGS: ${{ steps.engineDecision.outputs.tags }}
+          COSIGN_PRIVATE_KEY: ${{ secrets.COSIGN_PRIVATE_KEY }}
+          COSIGN_PASSWORD: ${{ secrets.COSIGN_PASSWORD }}
+        run: |
+          if [ -n "$COSIGN_PRIVATE_KEY" ]; then
+            echo "$TAGS" | tr ',' '\n' | while read -r tag; do
+              cosign sign --key env://COSIGN_PRIVATE_KEY --yes "${tag}@${DIGEST}"
+            done
+          else
+            echo "Warning: COSIGN_PRIVATE_KEY not set, skipping engine image signing"
+          fi
diff --git a/.github/workflows/rollback-latest.yml b/.github/workflows/rollback-latest.yml
index 27141eff31..fb0289b5a0 100644
--- a/.github/workflows/rollback-latest.yml
+++ b/.github/workflows/rollback-latest.yml
@@ -13,12 +13,13 @@ permissions:
 
 jobs:
   rollback:
+    environment: docker-publish
     runs-on: ubuntu-latest
     permissions:
       packages: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/scorecards.yml b/.github/workflows/scorecards.yml
index 2eab52b1d4..dbda06764b 100644
--- a/.github/workflows/scorecards.yml
+++ b/.github/workflows/scorecards.yml
@@ -35,7 +35,7 @@ jobs:
 
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -75,6 +75,6 @@ jobs:
 
       # Upload the results to GitHub's code scanning dashboard.
       - name: "Upload to code-scanning"
-        uses: github/codeql-action/upload-sarif@f205ea1c3313d32999d8d6a48b4f6530d4437b38 # v4.37.4
+        uses: github/codeql-action/upload-sarif@ff2f1c621b7f889edc0d3c761ac2e6a3f8cdb0dd # v4.37.7
         with:
           sarif_file: results.sarif
diff --git a/.github/workflows/stale.yml b/.github/workflows/stale.yml
index ab9078831a..2033154a00 100644
--- a/.github/workflows/stale.yml
+++ b/.github/workflows/stale.yml
@@ -17,7 +17,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/swagger.yml b/.github/workflows/swagger.yml
index 733ce9e7ed..1f53edd17b 100644
--- a/.github/workflows/swagger.yml
+++ b/.github/workflows/swagger.yml
@@ -4,7 +4,7 @@ on:
   workflow_dispatch:
   push:
     branches:
-      - master
+      - release
 
 # cancel in-progress jobs if a new job is triggered
 # This is useful to avoid running multiple builds for the same branch if a new commit is pushed
@@ -23,33 +23,33 @@ permissions:
 
 jobs:
   push:
+    # package-publish holds SWAGGERHUB_API_KEY. It requires reviewer approval and
+    # is limited to main / release / v* tags, so every push to release waits on one.
+    environment: package-publish
     if: ${{ vars.CI_PROFILE != 'lite' }}
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
       - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
 
+      - name: Cache Gradle
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-swagger-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Generate Swagger documentation
         run: ./gradlew :stirling-pdf:generateOpenApiDocs
 
diff --git a/.github/workflows/sync-portal-docs.yml b/.github/workflows/sync-portal-docs.yml
index 0b27858d5f..a6073b3f1f 100644
--- a/.github/workflows/sync-portal-docs.yml
+++ b/.github/workflows/sync-portal-docs.yml
@@ -24,6 +24,7 @@ permissions:
 
 jobs:
   sync:
+    environment: bot-identity
     name: Sync docs manifest
     runs-on: ubuntu-latest
     timeout-minutes: 10
@@ -32,7 +33,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/sync_files_v2.yml b/.github/workflows/sync_files_v2.yml
index 1888c08ca7..a199fd6cbd 100644
--- a/.github/workflows/sync_files_v2.yml
+++ b/.github/workflows/sync_files_v2.yml
@@ -33,10 +33,11 @@ permissions:
 
 jobs:
   sync-files:
+    environment: bot-identity
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -52,7 +53,7 @@ jobs:
           private-key: ${{ secrets.GH_APP_PRIVATE_KEY }}
 
       - name: Install uv
-        uses: astral-sh/setup-uv@c771a70e6277c0a99b617c7a806ffedaca235ff9 # v9.0.0
+        uses: astral-sh/setup-uv@20cfd1bf945f4377ade1205e4dbc17946fc9a30d # v10.0.1
         with:
           enable-cache: true
           cache-dependency-glob: |
@@ -65,7 +66,7 @@ jobs:
           uv sync --project engine --locked --group tools
 
       - name: Install Task
-        uses: go-task/setup-task@3be4020d41929789a01026e0e427a4321ce0ad44 # v2.0.0
+        uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
 
       - name: Sync translation TOML files
         run: |
diff --git a/.github/workflows/tauri-build.yml b/.github/workflows/tauri-build.yml
index b0888d83cf..3b7a0b04fa 100644
--- a/.github/workflows/tauri-build.yml
+++ b/.github/workflows/tauri-build.yml
@@ -26,6 +26,10 @@ on:
         required: false
         type: boolean
         default: false
+      use_shared_cache:
+        required: false
+        type: boolean
+        default: false
   workflow_dispatch:
     inputs:
       platform:
@@ -57,13 +61,18 @@ permissions:
 
 jobs:
   determine-matrix:
+    # Only probes APPLE_CERTIFICATE for presence, so it stays on the unrestricted
+    # signing environment - release-signing would block every PR run.
+    environment:
+      name: ci-signing
+      deployment: false
     if: ${{ vars.CI_PROFILE != 'lite' }}
     runs-on: ubuntu-latest
     outputs:
       matrix: ${{ steps.set-matrix.outputs.matrix }}
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -103,6 +112,12 @@ jobs:
           echo "matrix={\"include\":[$JOINED]}" >> $GITHUB_OUTPUT
 
   build:
+    # Windows/GPG signing only runs on main (see the per-step gates below), so only
+    # that path needs the reviewer-gated release-signing environment. Everything else
+    # (PRs, merge queue, nightly) signs macOS only and uses ci-signing, which has no
+    # approval or branch restriction.
+    environment:
+      name: ${{ (inputs.sign && (github.ref == 'refs/heads/main' || startsWith(github.ref, 'refs/tags/v'))) && 'release-signing' || 'ci-signing' }}
     needs: determine-matrix
     strategy:
       fail-fast: false
@@ -110,7 +125,6 @@ jobs:
     runs-on: ${{ matrix.platform }}
     env:
       SM_API_KEY: ${{ secrets.SM_API_KEY }}
-      WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
       APPLE_CERTIFICATE: ${{ secrets.APPLE_CERTIFICATE }}
       RELEASE_GPG_PRIVATE_KEY: ${{ secrets.RELEASE_GPG_PRIVATE_KEY }}
       # Per-platform sign gate. macOS signs on any run with the cert available,
@@ -120,7 +134,7 @@ jobs:
       SIGN_BUNDLE: ${{ inputs.sign && (matrix.platform == 'macos-15' && secrets.APPLE_CERTIFICATE != '' || github.ref == 'refs/heads/main') }}
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -150,7 +164,7 @@ jobs:
       # only recompiles the app crate. Written on main; PRs and the merge queue
       # restore from it.
       - name: Cache Rust build
-        uses: Swatinem/rust-cache@c19371144df3bb44fab255c43d04cbc2ab54d1c4 # v2.9.1
+        uses: Swatinem/rust-cache@6323deb102c322ba6fcbdcafc7e3dddab59af2b6 # v2.9.2
         with:
           workspaces: frontend/editor/src-tauri
           # Stable key shared across workflows so the nightly warmer.
@@ -160,6 +174,24 @@ jobs:
           # Save the dependency cache even if a later step fails
           cache-on-failure: true
 
+      - name: Restore cache Gradle User Home
+        if: inputs.use_shared_cache
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
+      - name: Restore cache Gradle
+        if: inputs.use_shared_cache == false
+        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-tauri-build-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up x86_64 JDK 25 (macOS universal JRE)
         if: matrix.platform == 'macos-15'
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
@@ -179,17 +211,6 @@ jobs:
           java-version: "25"
           distribution: ${{ matrix.platform == 'windows-11-arm' && 'microsoft' || 'temurin' }}
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Setup Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
 
@@ -227,20 +248,26 @@ jobs:
       - name: Setup DigiCert KeyLocker Certificate
         if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY != '' && github.ref == 'refs/heads/main' }}
         shell: pwsh
+        env:
+          SM_CLIENT_CERT_FILE_B64: ${{ secrets.SM_CLIENT_CERT_FILE_B64 }}
+          SM_HOST: ${{ secrets.SM_HOST }}
+          SM_API_KEY: ${{ secrets.SM_API_KEY }}
+          SM_CLIENT_CERT_PASSWORD: ${{ secrets.SM_CLIENT_CERT_PASSWORD }}
+          SM_KEYPAIR_ALIAS: ${{ secrets.SM_KEYPAIR_ALIAS }}
         run: |
           Write-Host "Setting up DigiCert KeyLocker environment..."
 
           # Decode client certificate
-          $certBytes = [Convert]::FromBase64String("${{ secrets.SM_CLIENT_CERT_FILE_B64 }}")
+          $certBytes = [Convert]::FromBase64String("$env:SM_CLIENT_CERT_FILE_B64")
           $certPath = "D:\Certificate_pkcs12.p12"
           [IO.File]::WriteAllBytes($certPath, $certBytes)
 
           # Set environment variables
           echo "SM_CLIENT_CERT_FILE=D:\Certificate_pkcs12.p12" >> $env:GITHUB_ENV
-          echo "SM_HOST=${{ secrets.SM_HOST }}" >> $env:GITHUB_ENV
-          echo "SM_API_KEY=${{ secrets.SM_API_KEY }}" >> $env:GITHUB_ENV
-          echo "SM_CLIENT_CERT_PASSWORD=${{ secrets.SM_CLIENT_CERT_PASSWORD }}" >> $env:GITHUB_ENV
-          echo "SM_KEYPAIR_ALIAS=${{ secrets.SM_KEYPAIR_ALIAS }}" >> $env:GITHUB_ENV
+          echo "SM_HOST=$env:SM_HOST" >> $env:GITHUB_ENV
+          echo "SM_API_KEY=$env:SM_API_KEY" >> $env:GITHUB_ENV
+          echo "SM_CLIENT_CERT_PASSWORD=$env:SM_CLIENT_CERT_PASSWORD" >> $env:GITHUB_ENV
+          echo "SM_KEYPAIR_ALIAS=$env:SM_KEYPAIR_ALIAS" >> $env:GITHUB_ENV
 
           # Get PKCS11 config path from DigiCert action
           $pkcs11Config = $env:PKCS11_CONFIG
@@ -258,38 +285,6 @@ jobs:
             }
           }
 
-      # Traditional PFX Certificate Import (fallback if KeyLocker not configured)
-      - name: Import Windows Code Signing Certificate
-        if: ${{ inputs.sign && startsWith(matrix.platform, 'windows') && env.SM_API_KEY == '' && github.ref == 'refs/heads/main' }}
-        env:
-          WINDOWS_CERTIFICATE: ${{ secrets.WINDOWS_CERTIFICATE }}
-          WINDOWS_CERTIFICATE_PASSWORD: ${{ secrets.WINDOWS_CERTIFICATE_PASSWORD }}
-        shell: powershell
-        run: |
-          if ($env:WINDOWS_CERTIFICATE) {
-            Write-Host "Importing Windows Code Signing Certificate..."
-
-            # Decode base64 certificate and save to file
-            $certBytes = [Convert]::FromBase64String($env:WINDOWS_CERTIFICATE)
-            $certPath = Join-Path $env:RUNNER_TEMP "certificate.pfx"
-            [IO.File]::WriteAllBytes($certPath, $certBytes)
-
-            # Import certificate to CurrentUser\My store
-            $cert = Import-PfxCertificate -FilePath $certPath -CertStoreLocation Cert:\CurrentUser\My -Password (ConvertTo-SecureString -String $env:WINDOWS_CERTIFICATE_PASSWORD -AsPlainText -Force)
-
-            # Extract and set thumbprint as environment variable
-            $thumbprint = $cert.Thumbprint
-            Write-Host "Certificate imported with thumbprint: $thumbprint"
-            echo "WINDOWS_CERTIFICATE_THUMBPRINT=$thumbprint" >> $env:GITHUB_ENV
-
-            # Clean up certificate file
-            Remove-Item $certPath
-
-            Write-Host "Windows certificate import completed."
-          } else {
-            Write-Host "⚠️ WINDOWS_CERTIFICATE secret not set - building unsigned binary"
-          }
-
       - name: Import Apple Developer Certificate
         if: env.SIGN_BUNDLE == 'true' && matrix.platform == 'macos-15'
         env:
@@ -682,6 +677,17 @@ jobs:
             fi
           done
 
+      - name: Cleanup temporary files
+        if: always()
+        shell: bash
+        run: |
+          rm -f certificate.p12
+          rm -rf "$RUNNER_TEMP/msi-verify"
+          if [ "${{ matrix.platform }}" = "macos-15" ]; then
+            security delete-keychain "$RUNNER_TEMP/app-signing.keychain-db" 2>/dev/null || true
+          fi
+        continue-on-error: true
+
   pr-comment:
     needs: build
     runs-on: ubuntu-latest
@@ -697,7 +703,7 @@ jobs:
       pull-requests: write
     steps:
       - name: Harden the runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -789,7 +795,7 @@ jobs:
     if: always()
     steps:
       - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/test-build-docker.yml b/.github/workflows/test-build-docker.yml
index 4ce06e6247..4717c9c387 100644
--- a/.github/workflows/test-build-docker.yml
+++ b/.github/workflows/test-build-docker.yml
@@ -22,21 +22,45 @@ permissions:
   contents: read
 
 jobs:
-  # TODO: extract a pre-matrix `prepare` job that runs once and produces
-  # shared artifacts for the three matrix entries below to consume:
-  #   1. `task backend:build` — currently runs 3× in parallel with
-  #      identical env (DISABLE_ADDITIONAL_FEATURES=true,
-  #      STIRLING_PDF_DESKTOP_UI=false). Build once, upload the JAR as an
-  #      artifact, matrix entries download.
-  #   2. The base-image `docker build` (gated on docker-base-changed) —
-  #      currently runs 3× in parallel against the same Dockerfile and
-  #      context. Build once, `docker save` to an artifact, matrix entries
-  #      `docker load` before the embedded build.
-  # Saves ~2 full backend builds + 2 base-image builds per PR that touches
-  # docker. May also be reusable from backend-build.yml's jdk-25 +
-  # spring-security=true matrix entry if `task backend:build` and
-  # `task backend:build:ci` produce equivalent JARs (verify before wiring).
+  # A changed base image is shared by all three embedded-image builds. Build
+  # it once and transfer it as an artifact; the matrix jobs use the local
+  # Docker driver so the loaded image is visible to the build.
+  prepare-base-image:
+    if: github.event_name == 'pull_request' && inputs.docker-base-changed == 'true'
+    environment:
+      name: ci-unsigned
+      deployment: false
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - name: Harden Runner
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        with:
+          egress-policy: audit
+
+      - name: Checkout Repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Build base image locally
+        run: docker build --platform linux/amd64 -t stirling-pdf-base:pr-test -f docker/base/Dockerfile docker/base
+
+      - name: Export base image
+        run: docker save stirling-pdf-base:pr-test | gzip -1 > stirling-pdf-base-pr-test.tar.gz
+
+      - name: Upload base image
+        uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
+        with:
+          name: docker-base-pr-test
+          path: stirling-pdf-base-pr-test.tar.gz
+          retention-days: 1
+          if-no-files-found: error
+
   test-build-docker-images:
+    if: always() && (needs.prepare-base-image.result == 'success' || needs.prepare-base-image.result == 'skipped')
+    needs: [prepare-base-image]
+    environment:
+      name: ci-unsigned
+      deployment: false
     runs-on: ubuntu-latest
     strategy:
       fail-fast: false
@@ -53,7 +77,7 @@ jobs:
             cache-scope: stirling-pdf-fat
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
@@ -78,23 +102,30 @@ jobs:
           docker system prune -af || true
           echo "Disk space after cleanup:" && df -h
 
+      - name: Download prepared base image
+        if: github.event_name == 'pull_request' && inputs.docker-base-changed == 'true'
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
+        with:
+          name: docker-base-pr-test
+
+      - name: Load prepared base image
+        if: github.event_name == 'pull_request' && inputs.docker-base-changed == 'true'
+        run: gzip -dc stirling-pdf-base-pr-test.tar.gz | docker load
+
+      - name: Restore cache Gradle User Home
+        uses: actions/cache/restore@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
+        with:
+          path: |
+            ~/.gradle/caches
+            ~/.gradle/wrapper
+          key: gradle-v1-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
+
       - name: Set up JDK 25
         uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
         with:
           java-version: "25"
           distribution: "temurin"
 
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
       - name: Install Task
         uses: go-task/setup-task@01a4adf9db2d14c1de7a560f09170b6e0df736aa # v2.1.0
       - name: Build application
@@ -113,11 +144,6 @@ jobs:
         id: buildx
         uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
 
-      - name: Build base image locally (PR base change only)
-        if: github.event_name == 'pull_request' && inputs.docker-base-changed == 'true'
-        run: |
-          docker build -t stirling-pdf-base:pr-test -f docker/base/Dockerfile docker/base
-
       - name: Set base image and platform for this build
         id: build-params
         # Pass workflow inputs through env vars rather than expanding `${{ }}`
@@ -191,7 +217,7 @@ jobs:
     runs-on: ubuntu-latest
     steps:
       - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
         with:
           egress-policy: audit
 
diff --git a/.github/workflows/testdriver.yml b/.github/workflows/testdriver.yml
deleted file mode 100644
index 7c03e57967..0000000000
--- a/.github/workflows/testdriver.yml
+++ /dev/null
@@ -1,213 +0,0 @@
-name: UI test with TestDriverAI
-
-on:
-  push:
-    branches: ["master", "UITest", "testdriver"]
-
-# cancel in-progress jobs if a new job is triggered
-# This is useful to avoid running multiple builds for the same branch if a new commit is pushed
-# or a pull request is updated.
-# It helps to save resources and time by ensuring that only the latest commit is built and tested
-# This is particularly useful for long-running jobs that may take a while to complete.
-# The `group` is set to a combination of the workflow name, event name, and branch name.
-# This ensures that jobs are grouped by the workflow and branch, allowing for cancellation of
-# in-progress jobs when a new commit is pushed to the same branch or a new pull request is opened.
-concurrency:
-  group: ${{ github.workflow }}-${{ github.event_name }}-${{ github.ref_name || github.ref }}
-  cancel-in-progress: true
-
-permissions:
-  contents: read
-
-jobs:
-  deploy:
-    if: ${{ vars.CI_PROFILE != 'lite' }}
-    runs-on: ubuntu-latest
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-
-      - name: Checkout repository
-        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Set up JDK 25
-        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
-        with:
-          java-version: "25"
-          distribution: "temurin"
-
-      - name: Cache Gradle User Home
-        uses: actions/cache@55cc8345863c7cc4c66a329aec7e433d2d1c52a9 # v6.1.0
-        with:
-          path: |
-            ~/.gradle/caches
-            ~/.gradle/wrapper
-          key: gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-${{ hashFiles('gradle/wrapper/gradle-wrapper.properties', 'gradle/libs.versions.toml', 'buildSrc/**', 'settings.gradle', 'build.gradle', 'app/**/build.gradle', 'gradle/**/*.gradle') }}
-          restore-keys: |
-            gradle-${{ runner.os }}-${{ runner.arch }}-jdk-25-
-            gradle-${{ runner.os }}-${{ runner.arch }}-
-
-      - name: Build with Gradle
-        run: ./gradlew build
-        env:
-          MAVEN_USER: ${{ secrets.MAVEN_USER }}
-          MAVEN_PASSWORD: ${{ secrets.MAVEN_PASSWORD }}
-          MAVEN_PUBLIC_URL: ${{ secrets.MAVEN_PUBLIC_URL }}
-          DISABLE_ADDITIONAL_FEATURES: true
-
-      - name: Set up Docker Buildx
-        uses: docker/setup-buildx-action@bb05f3f5519dd87d3ba754cc423b652a5edd6d2c # v4.2.0
-
-      - name: Get version number
-        id: versionNumber
-        run: |
-          VERSION=$(grep "^version =" build.gradle | awk -F'"' '{print $2}')
-          echo "versionNumber=$VERSION" >> $GITHUB_OUTPUT
-
-      - name: Login to Docker Hub
-        uses: docker/login-action@dbcb813823bdd20940b903addbd779551569679f # v4.6.0
-        with:
-          username: ${{ secrets.DOCKER_HUB_USERNAME }}
-          password: ${{ secrets.DOCKER_HUB_API }}
-
-      - name: Build and push test image
-        uses: docker/build-push-action@53b7df96c91f9c12dcc8a07bcb9ccacbed38856a # v7.3.0
-        with:
-          context: .
-          file: ./docker/embedded/Dockerfile
-          push: true
-          cache-from: type=gha,scope=stirling-pdf-latest
-          cache-to: type=gha,mode=max,scope=stirling-pdf-latest
-          tags: ${{ secrets.DOCKER_HUB_USERNAME }}/test:test-${{ github.sha }}
-          build-args: VERSION_TAG=${{ steps.versionNumber.outputs.versionNumber }}
-          platforms: linux/amd64
-
-      - name: Set up SSH
-        run: |
-          mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
-          sudo chmod 600 ../private.key
-
-      - name: Deploy to VPS
-        run: |
-          cat > docker-compose.yml << EOF
-          version: '3.3'
-          services:
-            stirling-pdf:
-              container_name: stirling-pdf-test-${{ github.sha }}
-              image: ${{ secrets.DOCKER_HUB_USERNAME }}/test:test-${{ github.sha }}
-              ports:
-                - "1337:8080"
-              volumes:
-                - /stirling/test-${{ github.sha }}/data:/usr/share/tessdata:rw
-                - /stirling/test-${{ github.sha }}/config:/configs:rw
-                - /stirling/test-${{ github.sha }}/logs:/logs:rw
-              environment:
-                DISABLE_ADDITIONAL_FEATURES: "true"
-                SECURITY_ENABLELOGIN: "false"
-                SYSTEM_DEFAULTLOCALE: en-US
-                UI_APPNAME: "Stirling-PDF Test"
-                UI_HOMEDESCRIPTION: "Test Deployment"
-                UI_APPNAMENAVBAR: "Test"
-                SYSTEM_MAXFILESIZE: "100"
-                METRICS_ENABLED: "true"
-                SYSTEM_GOOGLEVISIBILITY: "false"
-                SYSTEM_ENABLEANALYTICS: "false"
-              restart: on-failure:5
-          EOF
-
-          scp -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null docker-compose.yml ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }}:/tmp/docker-compose.yml
-
-          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << EOF
-            mkdir -p /stirling/test-${{ github.sha }}/{data,config,logs}
-            mv /tmp/docker-compose.yml /stirling/test-${{ github.sha }}/docker-compose.yml
-            cd /stirling/test-${{ github.sha }}
-            docker-compose pull
-            docker-compose up -d
-          EOF
-
-  files-changed:
-    if: always()
-    name: detect what files changed
-    runs-on: ubuntu-latest
-    timeout-minutes: 3
-    outputs:
-      frontend: ${{ steps.changes.outputs.frontend }}
-    steps:
-      - name: Harden the runner (Audit all outbound calls)
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Check for file changes
-        uses: dorny/paths-filter@7b450fff21473bca461d4b92ce414b9d0420d706 # v4.0.2
-        id: changes
-        with:
-          filters: ".github/config/.files.yaml"
-
-  test:
-    if: needs.files-changed.outputs.frontend == 'true'
-    needs: [deploy, files-changed]
-    runs-on: ubuntu-latest
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-
-      - name: Set up Node
-        uses: actions/setup-node@820762786026740c76f36085b0efc47a31fe5020 # v7.0.0
-        with:
-          cache: "npm"
-          cache-dependency-path: frontend/package-lock.json
-
-      - name: Run TestDriver.ai
-        uses: testdriverai/action@f0d0f45fdd684db628baa843fe9313f3ca3a8aa8 #1.1.3
-        with:
-          key: ${{secrets.TESTDRIVER_API_KEY}}
-          prerun: |
-            choco install go-task -y
-            task frontend:build
-            cd frontend
-            npm install dashcam-chrome --save
-            Start-Process "C:/Program Files/Google/Chrome/Application/chrome.exe" -ArgumentList "--start-maximized", "--load-extension=$(pwd)/node_modules/dashcam-chrome/build", "http://${{ secrets.NEW_VPS_HOST }}:1337"
-            Start-Sleep -Seconds 20
-          prompt: |
-            1. /run testing/testdriver/test.yml
-        env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-          FORCE_COLOR: "3"
-
-  cleanup:
-    needs: [deploy, test]
-    runs-on: ubuntu-latest
-    if: always()
-
-    steps:
-      - name: Harden Runner
-        uses: step-security/harden-runner@bf7454d06d71f1098171f2acdf0cd4708d7b5920 # v2.20.0
-        with:
-          egress-policy: audit
-
-      - name: Set up SSH
-        run: |
-          mkdir -p ~/.ssh/
-          echo "${{ secrets.NEW_VPS_SSH_KEY }}" > ../private.key
-          sudo chmod 600 ../private.key
-
-      - name: Cleanup deployment
-        if: always()
-        run: |
-          ssh -i ../private.key -o StrictHostKeyChecking=no -o UserKnownHostsFile=/dev/null ${{ secrets.NEW_VPS_USERNAME }}@${{ secrets.NEW_VPS_HOST }} << EOF
-            cd /stirling/test-${{ github.sha }}
-            docker-compose down
-            cd /stirling
-            rm -rf test-${{ github.sha }}
-          EOF
-        continue-on-error: true # Ensure cleanup runs even if previous steps fail
diff --git a/.github/workflows/update-gradle.yml b/.github/workflows/update-gradle.yml
new file mode 100644
index 0000000000..07474f112b
--- /dev/null
+++ b/.github/workflows/update-gradle.yml
@@ -0,0 +1,112 @@
+name: Update Gradle
+
+on:
+  workflow_dispatch:
+  schedule:
+    - cron: "0 3 * * 1"
+
+concurrency:
+  group: update-gradle
+  cancel-in-progress: true
+
+jobs:
+  update-gradle:
+    name: Update Gradle and Docker images
+    permissions:
+      contents: write
+      pull-requests: write
+    runs-on: ubuntu-latest
+    timeout-minutes: 20
+    steps:
+      - name: Harden runner
+        uses: step-security/harden-runner@05e31511f85b41b11d1cf0ef85d0992719546e2c # v2.21.0
+        with:
+          egress-policy: audit
+
+      - name: Check out repository
+        uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+
+      - name: Set up Java
+        uses: actions/setup-java@b6effb05e454b25005698d916606bdc6ffcbf961 # v5.7.0
+        with:
+          distribution: temurin
+          java-version: "25"
+
+      - name: Find latest Gradle release
+        id: gradle
+        shell: bash
+        run: |
+          set -euo pipefail
+          version=$(curl --fail --silent --show-error --retry 3 \
+            https://services.gradle.org/versions/current | jq -r '.version')
+          [[ "$version" =~ ^[0-9]+\.[0-9]+\.[0-9]+$ ]] || {
+            echo "Could not determine a stable Gradle version: $version" >&2
+            exit 1
+          }
+          echo "version=$version" >> "$GITHUB_OUTPUT"
+
+      - name: Find matching Docker image digest
+        id: docker
+        env:
+          GRADLE_VERSION: ${{ steps.gradle.outputs.version }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          tag="${GRADLE_VERSION}-jdk25"
+          digest=$(curl --fail --silent --show-error --retry 3 \
+            "https://hub.docker.com/v2/repositories/library/gradle/tags/${tag}" \
+            | jq -r '.digest // empty')
+          [[ "$digest" =~ ^sha256:[0-9a-f]{64}$ ]] || {
+            echo "Docker image gradle:${tag} was not found" >&2
+            exit 1
+          }
+          echo "tag=$tag" >> "$GITHUB_OUTPUT"
+          echo "digest=$digest" >> "$GITHUB_OUTPUT"
+
+      - name: Update Gradle wrapper
+        env:
+          GRADLE_VERSION: ${{ steps.gradle.outputs.version }}
+        run: ./gradlew wrapper --gradle-version "$GRADLE_VERSION" --distribution-type bin
+
+      - name: Update Gradle Docker images
+        env:
+          DOCKER_TAG: ${{ steps.docker.outputs.tag }}
+          DOCKER_DIGEST: ${{ steps.docker.outputs.digest }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          find docker -type f -name 'Dockerfile*' -print0 |
+            xargs -0 sed -E -i \
+              "s#gradle:[^@[:space:]]+-jdk25(@sha256:[^[:space:]]+)?#gradle:${DOCKER_TAG}@${DOCKER_DIGEST}#g"
+
+      - name: Verify Gradle update
+        env:
+          EXPECTED_VERSION: ${{ steps.gradle.outputs.version }}
+        shell: bash
+        run: |
+          set -euo pipefail
+          actual=$(./gradlew --version | sed -n 's/^Gradle \([0-9.]*\)$/\1/p')
+          [[ "$actual" == "$EXPECTED_VERSION" ]] || {
+            echo "Wrapper resolved Gradle $actual, expected $EXPECTED_VERSION" >&2
+            exit 1
+          }
+          if git diff --quiet; then
+            echo "Gradle is already up to date."
+            exit 0
+          fi
+          git diff --check
+
+      - name: Create pull request
+        uses: peter-evans/create-pull-request@5f6978faf089d4d20b00c7766989d076bb2fc7f1 # v8.1.1
+        with:
+          token: ${{ secrets.GITHUB_TOKEN }}
+          branch: automation/update-gradle
+          delete-branch: true
+          commit-message: "chore: update Gradle"
+          title: "chore: update Gradle to ${{ steps.gradle.outputs.version }}"
+          body: |
+            Automated update of the Gradle wrapper and Gradle Docker build images.
+
+            Gradle version: `${{ steps.gradle.outputs.version }}`
+            Docker image: `gradle:${{ steps.docker.outputs.tag }}`
+          labels: dependencies
diff --git a/.gitignore b/.gitignore
index a064973a3b..1290056e05 100644
--- a/.gitignore
+++ b/.gitignore
@@ -26,6 +26,7 @@ watchedFolders/
 # also matches this frontend source component dir; keep the source tracked.
 !frontend/editor/src/proprietary/components/watchedFolders/
 clientWebUI/
+policy-webhook-spool/
 # Scratch dir used by local fixture-regeneration runs (see
 # app/proprietary/src/test/resources/db-migration-fixtures/README.md).
 # Holds downloaded JARs and disposable workdirs. Never committed.
@@ -38,6 +39,7 @@ exampleYmlFiles/stirling/
 /testing/file_snapshots
 /testing/cucumber/junit/
 /testing/cucumber/report.html
+/testing/cucumber/.parallel/
 /testing/.failed_tests
 /.test-state/
 SwaggerDoc.json
@@ -174,6 +176,8 @@ app/core/src/main/resources/static/images/google-drive.svg
 *.nar
 *.ear
 *.zip
+# Real backend archives the form-bundle reader is tested against.
+!frontend/editor/src/core/tools/formFill/__fixtures__/*.zip
 *.tar.gz
 *.rar
 *.db
diff --git a/.gitleaksignore b/.gitleaksignore
index 12d98aebeb..c3917e985f 100644
--- a/.gitleaksignore
+++ b/.gitleaksignore
@@ -27,3 +27,8 @@ app/core/src/main/java/stirling/software/SPDF/pdf/signature/CreateSignatureBase.
 # Supabase publishable key (public by design, RLS-protected) used as a CI fallback
 # default in the tauri-build workflow when the GitHub secret is unset - not a real secret.
 .github/workflows/tauri-build.yml:generic-api-key:402
+
+# Staging Supabase publishable key (public by design). Ignored here rather than with an
+# inline gitleaks:allow because a trailing comment in a .properties file is part of the
+# value, so the pragma would end up inside the key.
+app/saas/src/main/resources/application-staging.properties:generic-api-key:16
diff --git a/.imgbotconfig b/.imgbotconfig
index 720b938475..6a1b1bf7a2 100644
--- a/.imgbotconfig
+++ b/.imgbotconfig
@@ -1,5 +1,7 @@
 {
   "ignoredFiles": [
-    "frontend/editor/src-tauri/icons/icon.png"
+    "frontend/editor/src-tauri/icons/macos/*",
+    "frontend/editor/src-tauri/icons/linux/*",
+    "frontend/editor/src-tauri/icons/windows/*"
   ]
 }
diff --git a/.taskfiles/backend.yml b/.taskfiles/backend.yml
index 63773f61fc..08a12b9535 100644
--- a/.taskfiles/backend.yml
+++ b/.taskfiles/backend.yml
@@ -57,16 +57,57 @@ tasks:
       - cmd: ./gradlew clean bootRun -PbuildWithFrontend=true
         platforms: [linux, darwin]
 
+  # SaaS backend. dev:saas -> the PR's preview branch, staging:saas -> shared v3,
+  # PROFILES=none -> production against your own SAAS_DB_*. Production has no named
+  # task on purpose. Use `none`, not an empty value: Go template `default` treats ""
+  # as absent and would resolve back to dev.
+
   dev:saas:
-    desc: "Start backend in SaaS flavor against Supabase"
-    # `dotenv:` reads from the root Taskfile's directory (".") because this
-    # subtaskfile is included with `dir: .`.
+    desc: "Start SaaS backend against the current PR's Supabase preview branch"
+    dotenv: ['app/.env.saas.local', 'app/.env.saas']
+    vars:
+      PROFILES: '{{.PROFILES | default "dev"}}'
+    cmds:
+      # Don't move this check into a `sh:` var: dotenv is visible in cmds but not
+      # during var evaluation, so the test would always see an empty value.
+      - cmd: |
+          if [ "{{.PROFILES}}" = "dev" ] && [ -z "${SAAS_DEV_PROJECT_REF:-}" ]; then
+            echo ">> SAAS_DEV_PROJECT_REF is not set."
+            echo ">> Testing a SaaS PR? Put its ref, DB password and publishable key in app/.env.saas.local."
+            echo ">> Wanted the shared v3 project? Use 'task backend:staging:saas' instead."
+            exit 1
+          fi
+      - task: _run:saas
+        vars:
+          PORT: '{{.PORT}}'
+          PROFILES: '{{.PROFILES}}'
+          AIENGINE_URL: '{{.AIENGINE_URL}}'
+          AIENGINE_ENABLED: '{{.AIENGINE_ENABLED}}'
+          AIENGINE_TIMEOUTSECONDS: '{{.AIENGINE_TIMEOUTSECONDS}}'
+
+  staging:saas:
+    desc: "Start SaaS backend against the shared v3 staging project"
+    cmds:
+      - task: _run:saas
+        vars:
+          PORT: '{{.PORT}}'
+          PROFILES: staging
+          AIENGINE_URL: '{{.AIENGINE_URL}}'
+          AIENGINE_ENABLED: '{{.AIENGINE_ENABLED}}'
+          AIENGINE_TIMEOUTSECONDS: '{{.AIENGINE_TIMEOUTSECONDS}}'
+
+  _run:saas:
+    internal: true
     dotenv: ['app/.env.saas.local', 'app/.env.saas']
     ignore_error: true
     vars:
       PORT: '{{.PORT | default "8080"}}'
-      # Override to "" to run the pure `saas` profile against your own SAAS_DB_*.
       PROFILES: '{{.PROFILES | default "dev"}}'
+      # Built here rather than inline in the cmds below: the Windows line is an
+      # unquoted YAML scalar wrapping a cmd.exe string, so a nested {{if ne .X
+      # "none"}} needs escaped quotes that reach the Go template as literal
+      # backslashes and fail with `unexpected "\" in operand`.
+      PROFILE_ARGS: '{{if ne .PROFILES "none"}}--spring.profiles.include={{.PROFILES}}{{end}}'
       AIENGINE_URL: '{{.AIENGINE_URL | default ""}}'
       AIENGINE_ENABLED: '{{.AIENGINE_ENABLED | default "false"}}'
       AIENGINE_TIMEOUTSECONDS: '{{.AIENGINE_TIMEOUTSECONDS | default "120"}}'
@@ -77,9 +118,11 @@ tasks:
       AIENGINE_ENABLED: '{{.AIENGINE_ENABLED}}'
       AIENGINE_TIMEOUTSECONDS: '{{.AIENGINE_TIMEOUTSECONDS}}'
     cmds:
-      - cmd: cmd /c ".\gradlew.bat :stirling-pdf:bootRun {{if .PROFILES}}--args=\"--spring.profiles.include={{.PROFILES}}\"{{end}}"
+      # PROFILE_ARGS is empty when PROFILES=none, i.e. the bare `saas` profile
+      # against SAAS_DB_* (production).
+      - cmd: cmd /c ".\gradlew.bat :stirling-pdf:bootRun {{if .PROFILE_ARGS}}--args=\"{{.PROFILE_ARGS}}\"{{end}}"
         platforms: [windows]
-      - cmd: ./gradlew :stirling-pdf:bootRun {{if .PROFILES}}--args='--spring.profiles.include={{.PROFILES}}'{{end}}
+      - cmd: ./gradlew :stirling-pdf:bootRun {{if .PROFILE_ARGS}}--args='{{.PROFILE_ARGS}}'{{end}}
         platforms: [linux, darwin]
 
   build:
diff --git a/.taskfiles/cucumber.yml b/.taskfiles/cucumber.yml
new file mode 100644
index 0000000000..cb630abf85
--- /dev/null
+++ b/.taskfiles/cucumber.yml
@@ -0,0 +1,44 @@
+version: '3'
+
+tasks:
+  install:
+    desc: "Sync the Python environment with the cucumber test dependencies"
+    run: once
+    # Deliberately no sources/status fingerprint: the engine venv is shared, so it can
+    # already exist while synced to a different dependency group. uv no-ops when correct.
+    cmds:
+      - uv sync --project ../../engine --locked --group cucumber
+
+  run:
+    desc: "Run the cucumber suite against a running server (BASE_URL, default localhost:8080)"
+    deps: [install]
+    cmds:
+      - uv run --project ../../engine --locked --group cucumber python -m behave --no-capture -f plain {{.CLI_ARGS}}
+
+  nightly:
+    desc: "Run the @nightly cucumber scenarios, excluded from the default run"
+    summary: |
+      Heavy LibreOffice/Calibre/Ghostscript conversions. behave.ini excludes @nightly,
+      so this opts back in explicitly.
+
+      Pass extra behave flags via -- :
+        task cucumber:nightly -- --tags=@convert
+    deps: [install]
+    cmds:
+      - uv run --project ../../engine --locked --group cucumber python -m behave --tags=@nightly --no-capture -f plain {{.CLI_ARGS}}
+
+  parallel:
+    desc: "Run the cucumber suite as concurrent shards against one server (SHARDS, default 10)"
+    summary: |
+      Splits the feature files across SHARDS concurrent behave processes hitting a single
+      backend, to shake out cross-request interference. Auth-coupled features are pinned
+      to one shard because they change the admin password mid-scenario.
+
+        task cucumber:parallel
+        task cucumber:parallel SHARDS=4
+        BASE_URL=http://localhost:8081 task cucumber:parallel
+    deps: [install]
+    vars:
+      SHARDS: '{{.SHARDS | default "10"}}'
+    cmds:
+      - bash run-parallel.sh {{.SHARDS}} {{if .CLI_ARGS}}-- {{.CLI_ARGS}}{{end}}
diff --git a/.taskfiles/frontend.yml b/.taskfiles/frontend.yml
index 19a3f6caf5..844306824d 100644
--- a/.taskfiles/frontend.yml
+++ b/.taskfiles/frontend.yml
@@ -5,6 +5,14 @@ version: '3'
 # mode flag) or use `--project editor/...` for tsc — so the editor lives
 # under frontend/editor/ without each task needing a cd.
 
+vars:
+  # Dev-only browser-tab label so concurrent worktrees are distinguishable. Only
+  # the worktree folder basename (e.g. "wt1") is exposed — never the full path,
+  # hostname, or user. Dropped from production builds.
+  DEV_LABEL:
+    sh: >-
+      {{if eq OS "windows"}}powershell -NoProfile -Command '$root = git rev-parse --show-toplevel 2>$null; if (-not $root) { $root = (Get-Location).Path }; Split-Path -Leaf $root'{{else}}basename "$(git rev-parse --show-toplevel 2>/dev/null || pwd)"{{end}}
+
 tasks:
   install:
     desc: "Install dependencies"
@@ -80,16 +88,52 @@ tasks:
       OPEN: '{{.OPEN | default ""}}'
     env:
       BACKEND_URL: '{{.BACKEND_URL}}'
-      # Dev-only browser-tab label so concurrent worktrees are distinguishable.
-      # Only the worktree folder basename (e.g. "wt1") is exposed — never the
-      # full path, hostname, or user. Consumed at dev-serve time by vite.config
-      # and dropped from production builds.
-      STIRLING_DEV_LABEL:
-        sh: >-
-          {{if eq OS "windows"}}powershell -NoProfile -Command '$root = git rev-parse --show-toplevel 2>$null; if (-not $root) { $root = (Get-Location).Path }; Split-Path -Leaf $root'{{else}}basename "$(git rev-parse --show-toplevel 2>/dev/null || pwd)"{{end}}
+      STIRLING_DEV_LABEL: '{{.DEV_LABEL}}'
     cmds:
       - npx vite editor --mode {{.MODE}} --port {{.PORT}}{{if .OPEN}} --open{{end}}
 
+  # Separate from dev:_run rather than a flag on it: Task sets an `env:` key even
+  # when its value resolves to empty, and Vite treats an empty process.env VITE_* as
+  # authoritative over the committed editor/.env, so folding these in blanks Supabase
+  # config for the core, proprietary and desktop dev servers.
+  dev:_run:saas:
+    internal: true
+    ignore_error: true
+    # The backend's own env files, so both halves target one project. Paths are
+    # relative to this taskfile's dir, `frontend`.
+    dotenv: ['../app/.env.saas.local', '../app/.env.saas']
+    vars:
+      PORT: '{{.PORT | default "5173"}}'
+      BACKEND_URL: '{{.BACKEND_URL | default "http://localhost:8080"}}'
+      OPEN: '{{.OPEN | default ""}}'
+      SAAS_ENV: '{{.SAAS_ENV | default "dev"}}'
+    env:
+      BACKEND_URL: '{{.BACKEND_URL}}'
+      STIRLING_DEV_LABEL: '{{.DEV_LABEL}}'
+      SAAS_ENV: '{{.SAAS_ENV}}'
+      # A real process.env VITE_* beats a committed .env in Vite (loadEnv applies
+      # process.env last), which is what lets this override editor/.env.
+      #
+      # These must stay `sh:`, not Go templates: dotenv values are visible to Task's
+      # embedded shell but not to templates, where {{.SAAS_DEV_PROJECT_REF}} is
+      # always empty.
+      VITE_SUPABASE_URL:
+        sh: |
+          case "${SAAS_ENV:-dev}" in
+            staging) ref="${SAAS_STAGING_PROJECT_REF:?set it in app/.env.saas.local}" ;;
+            *)       ref="${SAAS_DEV_PROJECT_REF:?set it in app/.env.saas.local, or run task staging:saas}" ;;
+          esac
+          echo "https://${ref}.supabase.co"
+      VITE_SUPABASE_PUBLISHABLE_DEFAULT_KEY:
+        sh: |
+          case "${SAAS_ENV:-dev}" in
+            staging) echo "${SAAS_STAGING_PUBLISHABLE_KEY:?set it in app/.env.saas.local}" ;;
+            *)       echo "${SAAS_DEV_PUBLISHABLE_KEY:?set it in app/.env.saas.local}" ;;
+          esac
+    cmds:
+      - 'echo ">> frontend Supabase target: $VITE_SUPABASE_URL"'
+      - npx vite editor --mode saas --port {{.PORT}}{{if .OPEN}} --open{{end}}
+
   dev:
     desc: "Start frontend dev server"
     cmds:
@@ -111,13 +155,23 @@ tasks:
         vars: { MODE: proprietary, PORT: '{{.PORT}}', BACKEND_URL: '{{.BACKEND_URL}}', OPEN: '{{.OPEN}}' }
 
   dev:saas:
-    desc: "Start frontend dev server in SaaS mode"
+    desc: "Start frontend dev server in SaaS mode (SAAS_ENV=dev|staging|prod)"
     deps:
       - task: prepare
         vars: { MODE: saas }
+    vars:
+      SAAS_ENV: '{{.SAAS_ENV | default "dev"}}'
+      # prod routes to the plain runner, which sets no VITE_SUPABASE_* and so leaves
+      # the committed editor/.env alone.
+      RUNNER: '{{if eq .SAAS_ENV "prod"}}dev:_run{{else}}dev:_run:saas{{end}}'
     cmds:
-      - task: dev:_run
-        vars: { MODE: saas, PORT: '{{.PORT}}', BACKEND_URL: '{{.BACKEND_URL}}', OPEN: '{{.OPEN}}' }
+      - task: '{{.RUNNER}}'
+        vars:
+          MODE: saas
+          PORT: '{{.PORT}}'
+          BACKEND_URL: '{{.BACKEND_URL}}'
+          OPEN: '{{.OPEN}}'
+          SAAS_ENV: '{{.SAAS_ENV}}'
 
   dev:desktop:
     desc: "Start frontend dev server in desktop mode"
@@ -210,15 +264,26 @@ tasks:
       #   task frontend:storybook:test -- Button
       - npx vitest run --config .storybook/vitest.config.ts {{.CLI_ARGS}}
 
-  storybook:a11y:
-    desc: "a11y regression gate over every story, light and dark: fail only on NEW axe violations"
+  storybook:a11y:light:
+    desc: "a11y gate over every story in light mode"
     deps: [prepare, storybook:browser]
     cmds:
-      - node .storybook/a11y-scan.mjs
+      - node .storybook/a11y-scan.mjs {{.CLI_ARGS}}
       - node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt
-      - SCAN_THEME=dark node .storybook/a11y-scan.mjs
+
+  storybook:a11y:dark:
+    desc: "a11y gate over every story in dark mode"
+    deps: [prepare, storybook:browser]
+    cmds:
+      - SCAN_THEME=dark node .storybook/a11y-scan.mjs {{.CLI_ARGS}}
       - node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt --baseline .storybook/a11y-baseline.dark.json
 
+  storybook:a11y:
+    desc: "a11y gate over every story, light and dark"
+    cmds:
+      - task: storybook:a11y:light
+      - task: storybook:a11y:dark
+
   storybook:a11y:changed:
     desc: "a11y gate over the stories this branch affects (default base origin/main)"
     summary: |
@@ -233,7 +298,6 @@ tasks:
 
       Pass a base ref through CLI_ARGS, e.g.
         task frontend:storybook:a11y:changed -- origin/release
-    deps: [prepare, storybook:browser]
     vars:
       BASE: '{{.CLI_ARGS | default "origin/main"}}'
       CHANGED:
@@ -244,10 +308,10 @@ tasks:
             echo "a11y: no story files affected vs {{.BASE}} — nothing to check"
             exit 0
           fi
-          node .storybook/a11y-scan.mjs {{.CHANGED}}
-          node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt
-          SCAN_THEME=dark node .storybook/a11y-scan.mjs {{.CHANGED}}
-          node .storybook/a11y-check.mjs --in .a11y-scan --manifest .a11y-scan/manifest.txt --baseline .storybook/a11y-baseline.dark.json
+          rc=0
+          task frontend:storybook:a11y:light -- {{.CHANGED}} || rc=1
+          task frontend:storybook:a11y:dark -- {{.CHANGED}} || rc=1
+          exit $rc
 
   storybook:a11y:record:
     desc: "Re-record both a11y baselines (run after intentionally fixing/adding violations)"
@@ -311,13 +375,13 @@ tasks:
     desc: "Auto-fix code formatting"
     deps: [install]
     cmds:
-      - npx prettier --write .
+      - npx oxfmt --write .
 
   format:check:
     desc: "Check code formatting"
     deps: [install]
     cmds:
-      - npx prettier --check .
+      - npx oxfmt --check .
 
   fix:
     desc: "Auto-fix lint and format"
@@ -490,6 +554,7 @@ tasks:
     deps: [install, ":backend:swagger"]
     cmds:
       - npx tsx editor/scripts/generate-tool-api-types.mts --spec ../SwaggerDoc.json --output editor/src/core/types/toolApiTypes.ts --io-output editor/src/core/types/toolIO.ts
+      - task: format
     sources:
       - editor/scripts/generate-tool-api-types.mts
       - ../SwaggerDoc.json
@@ -499,9 +564,9 @@ tasks:
 
   tool-models:check:
     desc: "Fail if committed tool API types are out of date"
-    deps: [install, ":backend:swagger"]
     cmds:
-      - npx tsx editor/scripts/generate-tool-api-types.mts --spec ../SwaggerDoc.json --output editor/src/core/types/toolApiTypes.ts --io-output editor/src/core/types/toolIO.ts --check
+      - task: tool-models
+      - git diff --exit-code -- editor/src/core/types/toolApiTypes.ts editor/src/core/types/toolIO.ts
 
   licenses:generate:
     desc: "Generate frontend license report"
diff --git a/CONTRIBUTING.md b/CONTRIBUTING.md
index 9092d5cd72..65fc4bc262 100644
--- a/CONTRIBUTING.md
+++ b/CONTRIBUTING.md
@@ -2,6 +2,13 @@
 
 Thank you for your interest in contributing to Stirling-PDF! There are many ways to contribute other than writing code. For example, reporting bugs, creating suggestions, and adding or modifying translations.
 
+## License
+
+By contributing to this project, you agree that your contributions will be licensed under the project [license](LICENSE), which follows an open-core model. 
+The codebase is a mix of MIT and source-available code, so your contribution is licensed according to the directory it is committed to.
+
+PRs are welcome in any directory by any user, just be aware of which license applies to the code you change.
+
 ## Issue Guidelines
 
 Issues can be used to report bugs, request features, or ask questions. If you have a question, you could also ask us in our [Discord](https://discord.gg/FJUSXUSYec).
@@ -63,7 +70,3 @@ For technical guides, setup instructions, and development resources:
 For configuration and usage guides, see:
 - [Database Guide](DATABASE.md) - Database setup and configuration
 - [OCR Guide](HowToUseOCR.md) - OCR setup and configuration
-
-## License
-
-By contributing to this project, you agree that your contributions will be licensed under the [MIT License](LICENSE).
diff --git a/DeveloperGuide.md b/DeveloperGuide.md
index 7c2e21d5ca..d87406715b 100644
--- a/DeveloperGuide.md
+++ b/DeveloperGuide.md
@@ -46,8 +46,8 @@ This guide focuses on developing for Stirling 2.0, including both the React fron
 - Docker
 - Git
 - Java JDK 25
-- Node.js 18+ and npm (required for frontend development)
-- Gradle 7.0 or later (Included within the repo)
+- Node.js 22+ and npm (required for frontend development)
+- Gradle 9.0 or later (Included within the repo)
 - [uv](https://docs.astral.sh/uv/) — Python package manager (required for engine development)
 - Rust and Cargo (required for Tauri desktop app development)
 - Tauri CLI (install with `cargo install tauri-cli`)
diff --git a/Taskfile.yml b/Taskfile.yml
index 304a031ac0..92dcdcc742 100644
--- a/Taskfile.yml
+++ b/Taskfile.yml
@@ -25,6 +25,9 @@ includes:
   e2e:
     taskfile: .taskfiles/e2e.yml
     dir: .
+  cucumber:
+    taskfile: .taskfiles/cucumber.yml
+    dir: testing/cucumber
   pre-commit:
     taskfile: .taskfiles/pre-commit.yml
     dir: .
@@ -96,11 +99,22 @@ tasks:
           BACKEND_URL: 'http://localhost:{{.BACKEND_PORT}}'
           OPEN: "true"
 
+  # Set SAAS_DEV_PROJECT_REF in app/.env.saas.local to pick the PR.
   dev:saas:
-    desc: "Start SaaS backend + frontend concurrently on free ports"
+    desc: "Start SaaS backend + frontend + engine against the current PR's preview branch"
     cmds:
       - task: dev:_all
-        vars: { FRONTEND: saas, BACKEND: saas }
+        vars: { FRONTEND: saas, BACKEND: saas, SAAS_ENV: dev }
+
+  staging:saas:
+    desc: "Start SaaS backend + frontend + engine against the shared v3 staging project"
+    cmds:
+      - task: dev:_all
+        vars:
+          FRONTEND: saas
+          BACKEND: saas
+          BACKEND_TASK: backend:staging:saas
+          SAAS_ENV: staging
 
   dev:all:
     desc: "Start backend + frontend + engine concurrently on free ports"
@@ -112,6 +126,9 @@ tasks:
     vars:
       FRONTEND: '{{.FRONTEND | default "proprietary"}}'
       BACKEND: '{{.BACKEND | default "proprietary"}}'
+      BACKEND_TASK: '{{.BACKEND_TASK | default (printf "backend:dev:%s" .BACKEND)}}'
+      # Only meaningful to the saas frontend; every other flavor ignores it.
+      SAAS_ENV: '{{.SAAS_ENV | default ""}}'
       PORTS:
         sh: '{{if eq OS "windows"}}{{.FIND_FREE_PORT_PS}} 8080 5173 5001{{else}}{{.FIND_FREE_PORT_SH}} 8080 5173 5001{{end}}'
       BACKEND_PORT: '{{index (splitList "\n" .PORTS) 0}}'
@@ -121,7 +138,7 @@ tasks:
       - task: engine:dev
         vars:
           PORT: '{{.ENGINE_PORT}}'
-      - task: 'backend:dev:{{.BACKEND}}'
+      - task: '{{.BACKEND_TASK}}'
         vars:
           PORT: '{{.BACKEND_PORT}}'
           AIENGINE_URL: 'http://localhost:{{.ENGINE_PORT}}'
@@ -131,6 +148,7 @@ tasks:
           PORT: '{{.FRONTEND_PORT}}'
           BACKEND_URL: 'http://localhost:{{.BACKEND_PORT}}'
           OPEN: "true"
+          SAAS_ENV: '{{.SAAS_ENV}}'
 
   # ============================================================
   # Build
diff --git a/WINDOWS_SIGNING.md b/WINDOWS_SIGNING.md
index 58ffd6e657..95cbbd24e2 100644
--- a/WINDOWS_SIGNING.md
+++ b/WINDOWS_SIGNING.md
@@ -4,6 +4,11 @@ This guide explains how to set up Windows code signing for Stirling-PDF desktop
 
 ## Overview
 
+Releases are signed with **DigiCert KeyLocker**, a cloud HSM: the private key never
+leaves DigiCert, and the runner signs through a PKCS#11 provider. The older approach
+of uploading a base64 `.pfx` to a repository secret has been removed from the
+workflows - the sections below describe KeyLocker, which is what actually runs.
+
 Windows code signing is essential for:
 - Preventing Windows SmartScreen warnings
 - Building trust with users
@@ -49,29 +54,19 @@ openssl pkcs12 -export -out certificate.pfx -inkey private-key.key -in certifica
 
 ### Required Secrets
 
-Navigate to your GitHub repository → Settings → Secrets and variables → Actions
+Navigate to your GitHub repository → Settings → Environments → `release-signing`.
 
-Add the following secrets:
+These live in the `release-signing` environment, not at repository scope. That
+environment requires reviewer approval and is limited to `main`, `release`,
+`hotfix/*` and `v*` tags. All five come from the DigiCert ONE console.
 
-#### 1. `WINDOWS_CERTIFICATE`
-- **Description**: Base64-encoded .pfx certificate file
-- **How to create**:
-
-**On macOS/Linux:**
-```bash
-base64 -i certificate.pfx | pbcopy  # Copies to clipboard
-```
-
-**On Windows (PowerShell):**
-```powershell
-[Convert]::ToBase64String([IO.File]::ReadAllBytes("certificate.pfx")) | Set-Clipboard
-```
-
-Paste the entire base64 string into the GitHub secret.
-
-#### 2. `WINDOWS_CERTIFICATE_PASSWORD`
-- **Description**: Password for the .pfx certificate
-- **Value**: The password you set when creating/exporting the .pfx file
+| Secret | Description |
+| --- | --- |
+| `SM_API_KEY` | KeyLocker API key. Also acts as the on/off switch: signing steps are gated on it being non-empty. |
+| `SM_CLIENT_CERT_FILE_B64` | Base64-encoded PKCS#12 client authentication certificate. |
+| `SM_CLIENT_CERT_PASSWORD` | Password for that client certificate. |
+| `SM_KEYPAIR_ALIAS` | Alias of the signing keypair to use. |
+| `SM_HOST` | DigiCert ONE host, e.g. `https://clientauth.one.digicert.com`. |
 
 ### Optional Secrets for Tauri Updater
 
@@ -110,23 +105,23 @@ The Windows signing configuration is already set up:
 
 ### 2. GitHub Workflow (.github/workflows/tauri-build.yml)
 
-The workflow includes three Windows signing steps:
+The workflow includes four Windows signing steps, all gated on `SM_API_KEY` being
+set and the ref being the release branch:
 
-1. **Import Certificate**: Decodes and imports the .pfx certificate into Windows certificate store
-2. **Build Tauri App**: Builds and signs the application using the imported certificate
-3. **Verify Signature**: Validates that both .exe and .msi files are properly signed
+1. **Setup DigiCert KeyLocker**: Installs the DigiCert signing tools via `digicert/ssm-code-signing`
+2. **Setup DigiCert KeyLocker Certificate**: Writes the client cert and exports the PKCS#11 config
+3. **Configure Windows code signing / Build Tauri app**: Signs through the PKCS#11 provider
+4. **Verify Windows Code Signature**: Validates that the .exe and .msi are properly signed
 
 ## Testing the Setup
 
 ### 1. Local Testing (Windows Only)
 
-Before pushing to GitHub, test locally:
+KeyLocker is CI-only. To check signing locally, install your own certificate into
+the Windows store and point Tauri at it; the build no longer reads any certificate
+from an environment variable.
 
 ```powershell
-# Set environment variables
-$env:WINDOWS_CERTIFICATE = [Convert]::ToBase64String([IO.File]::ReadAllBytes("certificate.pfx"))
-$env:WINDOWS_CERTIFICATE_PASSWORD = "your-certificate-password"
-
 # Build the application
 cd frontend
 npm run tauri build
@@ -191,9 +186,10 @@ Look for:
 - Consider EV certificate for immediate reputation
 
 ### Certificate Not Found During Build
-- Verify `WINDOWS_CERTIFICATE` secret is set
-- Check base64 encoding is correct (no extra whitespace)
-- Ensure password is correct
+- Verify `SM_API_KEY` is present in the `release-signing` environment. If it is empty
+  the signing steps skip silently and the build succeeds unsigned.
+- Check `SM_CLIENT_CERT_FILE_B64` base64 encoding is correct (no extra whitespace)
+- Ensure `SM_CLIENT_CERT_PASSWORD` and `SM_KEYPAIR_ALIAS` match the DigiCert keypair
 
 ## Security Best Practices
 
@@ -220,11 +216,10 @@ Look for:
 ## Certificate Lifecycle
 
 ### Before Expiration
-1. Obtain new certificate from CA (typically annual renewal)
-2. Convert to .pfx format if needed
-3. Update `WINDOWS_CERTIFICATE` secret with new base64-encoded certificate
-4. Update `WINDOWS_CERTIFICATE_PASSWORD` if password changed
-5. Test build to verify new certificate works
+1. Renew the certificate in the DigiCert ONE console (typically annual)
+2. If the keypair alias changed, update `SM_KEYPAIR_ALIAS` in the `release-signing` environment
+3. If the client authentication certificate was reissued, update `SM_CLIENT_CERT_FILE_B64` and `SM_CLIENT_CERT_PASSWORD`
+4. Test build to verify the new certificate works
 
 ### Expired Certificates
 - Signed binaries remain valid (timestamp proves signing time)
diff --git a/app/.env.saas b/app/.env.saas
index fb5feec559..25eefb84c5 100644
--- a/app/.env.saas
+++ b/app/.env.saas
@@ -1,15 +1,16 @@
-###############################################################################
-# Stirling-PDF SaaS environment defaults.
+# Stirling-PDF SaaS environment defaults. Committed, non-secret. Real values for secrets go in
+# .env.saas.local, which is loaded first and wins. Do not commit that file.
 #
-# This file is committed and provides non-secret defaults loaded by
-# `task backend:dev:saas`. Put real values for secrets (passwords, project
-# refs, edge function secrets) in `.env.saas.local` - any variable set there
-# takes precedence over what's defined here.
+# Three environments, each deriving its Supabase URLs, JWT issuer and JWKS from one project ref:
 #
-# DO NOT commit `.env.saas.local`. Only `.env.saas` is checked in.
-###############################################################################
+#   prod     PROFILES=none       SAAS_DB_*          the live project
+#   staging  PROFILES=staging    SAAS_STAGING_*     pinned to v3, always there
+#   dev      PROFILES=dev        SAAS_DEV_*         follows a SaaS PR's preview branch
+#
+# dev is the default for `task backend:dev:saas`. Use staging for somewhere stable; use dev when
+# testing an open SaaS PR, since its preview branch is the only place those migrations are applied.
 
-# ---------- Supabase project ----------
+# ---------- Supabase project (prod / no-profile) ----------
 # Project reference (the subdomain part of <ref>.supabase.co). Required.
 # Set in .env.saas.local.
 SAAS_DB_PROJECT_REF=
@@ -17,18 +18,35 @@ SAAS_DB_PROJECT_REF=
 # Edge function secret used by billing/license rollup calls. Set in .env.saas.local.
 SUPABASE_EDGE_FUNCTION_SECRET=
 
-# ---------- Database (saas profile) ----------
-# Direct JDBC URL to the Supabase Postgres. Required when running the plain
-# `saas` profile (i.e. without `--spring.profiles.include=dev`).
+# ---------- Database (no profile) ----------
+# Direct JDBC URL to the Supabase Postgres. Required when running without
+# `--spring.profiles.include=...`.
 # Example: jdbc:postgresql://db.<project-ref>.supabase.co:5432/postgres
 SAAS_DB_URL=
 SAAS_DB_USERNAME=postgres
 SAAS_DB_PASSWORD=
 
-# ---------- Database (dev profile overrides) ----------
-# Used when `--spring.profiles.include=dev` is active. The dev profile
-# defaults the URL/username to the shared dev Supabase project, but the
-# password must still be provided in .env.saas.local.
-SAAS_DEV_DB_URL=
+# ---------- staging profile ----------
+# The shared long-lived v3 project. application-staging.properties defaults the ref,
+# URL, database host and meter endpoint, so staging needs only the password, in
+# .env.saas.local. Set SAAS_STAGING_PROJECT_REF to repoint it; everything derives.
+#
+# The ref and publishable key are duplicated here because the task derives the
+# frontend's VITE_SUPABASE_* from them and a shell cannot read a Spring default.
+# Neither is secret: the ref is a public subdomain, the key ships in the bundle.
+SAAS_STAGING_PROJECT_REF=qacaivhsjtftfwtgjvva
+SAAS_STAGING_PUBLISHABLE_KEY=sb_publishable_nIM8y-9ARPE7EzQwAQHKMg_40fCN6kY # gitleaks:allow
+SAAS_STAGING_DB_USERNAME=postgres
+SAAS_STAGING_DB_PASSWORD=
+
+# ---------- dev profile ----------
+# The SaaS PR's Supabase preview branch. Take the ref from that PR's "Supabase
+# Preview" check; the profile derives URL, JWT issuer, JWKS, meter endpoint and
+# database host from it, so this one value follows a different PR.
+#
+# A preview branch has its own password and keys; the parent project's will not
+# authenticate. Both go in .env.saas.local, along with the ref.
+SAAS_DEV_PROJECT_REF=
+SAAS_DEV_PUBLISHABLE_KEY=
 SAAS_DEV_DB_USERNAME=postgres
 SAAS_DEV_DB_PASSWORD=
diff --git a/app/common/build.gradle b/app/common/build.gradle
index f53ad0eb79..8af68bcb76 100644
--- a/app/common/build.gradle
+++ b/app/common/build.gradle
@@ -18,11 +18,11 @@ dependencies {
     api "org.apache.pdfbox:preflight:$pdfboxVersion"
     api 'com.github.junrar:junrar:8.0.0' // RAR archive support for CBR files
     api 'jakarta.servlet:jakarta.servlet-api:6.1.0'
-    api 'org.snakeyaml:snakeyaml-engine:3.0.1'
+    api 'org.snakeyaml:snakeyaml-engine:3.1.1'
     api "org.springdoc:springdoc-openapi-starter-webmvc-ui:3.0.3"
     // Simple Java Mail for EML/MSG parsing (replaces direct Angus Mail usage)
-    api 'org.simplejavamail:simple-java-mail:9.2.0'
-    api 'org.simplejavamail:outlook-module:9.2.0' // MSG file support
+    api 'org.simplejavamail:simple-java-mail:9.3.2'
+    api 'org.simplejavamail:outlook-module:9.3.2' // MSG file support
     api 'jakarta.mail:jakarta.mail-api:2.1.5'
     runtimeOnly 'org.eclipse.angus:angus-mail:2.0.5'
 
diff --git a/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java b/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java
index ff1a880010..5e8f7fe336 100644
--- a/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java
+++ b/app/common/src/main/java/stirling/software/SPDF/config/EndpointConfiguration.java
@@ -6,6 +6,7 @@ import java.util.Map;
 import java.util.Set;
 import java.util.concurrent.ConcurrentHashMap;
 
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.beans.factory.annotation.Qualifier;
 import org.springframework.stereotype.Service;
 
@@ -13,6 +14,7 @@ import lombok.Getter;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.PdfaLevelAServiceInterface;
 
 @Service
 @Slf4j
@@ -51,12 +53,16 @@ public class EndpointConfiguration {
     private Map<String, DisableReason> groupDisableReasons = new ConcurrentHashMap<>();
     private Map<String, Set<String>> endpointAlternatives = new ConcurrentHashMap<>();
     private final boolean runningProOrHigher;
+    private final boolean pdfUaAvailable;
 
     public EndpointConfiguration(
             ApplicationProperties applicationProperties,
-            @Qualifier("runningProOrHigher") boolean runningProOrHigher) {
+            @Qualifier("runningProOrHigher") boolean runningProOrHigher,
+            @Autowired(required = false) PdfaLevelAServiceInterface pdfaLevelAService) {
         this.applicationProperties = applicationProperties;
         this.runningProOrHigher = runningProOrHigher;
+        // The PDF/UA tagger ships in the proprietary module, and so do its endpoints.
+        this.pdfUaAvailable = pdfaLevelAService != null;
         init();
         processEnvironmentConfigs();
     }
@@ -356,6 +362,7 @@ public class EndpointConfiguration {
         addEndpointToGroup("Convert", "pdf-to-img");
         addEndpointToGroup("Convert", "img-to-pdf");
         addEndpointToGroup("Convert", "pdf-to-pdfa");
+        addEndpointToGroup("Convert", "pdf-to-ua");
         addEndpointToGroup("Convert", "file-to-pdf");
         addEndpointToGroup("Convert", "pdf-to-word");
         addEndpointToGroup("Convert", "pdf-to-presentation");
@@ -395,6 +402,7 @@ public class EndpointConfiguration {
         // Backend-only endpoints (not in frontend tool registry endpoints)
         addEndpointToGroup("Security", "redact");
         addEndpointToGroup("Security", "verify-pdf");
+        addEndpointToGroup("Security", "accessibility-report");
         addEndpointToGroup("Security", "sign");
 
         // Adding endpoints to "Other" group
@@ -529,6 +537,8 @@ public class EndpointConfiguration {
         addEndpointToGroup("Java", "json-to-pdf");
         addEndpointToGroup("Java", "pdf-to-video");
         addEndpointToGroup("Java", "verify-pdf");
+        addEndpointToGroup("Java", "pdf-to-ua");
+        addEndpointToGroup("Java", "accessibility-report");
         addEndpointToGroup("Java", "flatten");
         addEndpointToGroup("Java", "unlock-pdf-forms");
         addEndpointToGroup("Java", "validate-signature");
@@ -600,6 +610,8 @@ public class EndpointConfiguration {
 
         // veraPDF dependent endpoints
         addEndpointToGroup("veraPDF", "verify-pdf");
+        addEndpointToGroup("veraPDF", "pdf-to-ua");
+        addEndpointToGroup("veraPDF", "accessibility-report");
 
         // Pdftohtml dependent endpoints
         addEndpointToGroup("Pdftohtml", "pdf-to-html");
@@ -630,6 +642,11 @@ public class EndpointConfiguration {
             disableGroup("enterprise");
         }
 
+        if (!pdfUaAvailable) {
+            disableEndpoint("pdf-to-ua");
+            disableEndpoint("accessibility-report");
+        }
+
         if (!applicationProperties.getSystem().isEnableUrlToPDF()) {
             disableEndpoint("url-to-pdf");
         }
diff --git a/app/common/src/main/java/stirling/software/common/aop/AutoJobAspect.java b/app/common/src/main/java/stirling/software/common/aop/AutoJobAspect.java
index adfad7704b..96293e9c3f 100644
--- a/app/common/src/main/java/stirling/software/common/aop/AutoJobAspect.java
+++ b/app/common/src/main/java/stirling/software/common/aop/AutoJobAspect.java
@@ -2,7 +2,9 @@ package stirling.software.common.aop;
 
 import java.io.IOException;
 import java.time.Duration;
+import java.util.ArrayList;
 import java.util.HashMap;
+import java.util.List;
 import java.util.Map;
 import java.util.concurrent.atomic.AtomicReference;
 import java.util.function.Supplier;
@@ -273,6 +275,7 @@ public class AutoJobAspect {
 
                         // Store the fileId for later reference
                         pdfFile.setFileId(fileId);
+                        recordPendingInputFile(fileId);
 
                         // Replace the original MultipartFile with our persistent copy
                         MultipartFile persistentFile = fileStorage.retrieveFile(fileId);
@@ -290,6 +293,29 @@ public class AutoJobAspect {
         return originalArgs;
     }
 
+    /**
+     * Queue an input copy for attribution to the job. The job id does not exist yet at this point,
+     * so {@link JobExecutorService} drains this list once it mints one.
+     */
+    @SuppressWarnings("unchecked")
+    private void recordPendingInputFile(String fileId) {
+        try {
+            Object existing = request.getAttribute(JobExecutorService.PENDING_INPUT_FILE_IDS_ATTR);
+            List<String> ids;
+            if (existing instanceof List<?> list) {
+                ids = (List<String>) list;
+            } else {
+                ids = new ArrayList<>();
+                request.setAttribute(JobExecutorService.PENDING_INPUT_FILE_IDS_ATTR, ids);
+            }
+            ids.add(fileId);
+        } catch (RuntimeException ex) {
+            // Without a bound request the copy cannot be attributed; the periodic sweep is the
+            // only backstop, so make the miss visible rather than silently leaking the file.
+            log.warn("Could not record input copy {} for cleanup: {}", fileId, ex.getMessage());
+        }
+    }
+
     private String getJobIdFromContext() {
         try {
             return (String) request.getAttribute("jobId");
diff --git a/app/common/src/main/java/stirling/software/common/model/FormFieldWithCoordinates.java b/app/common/src/main/java/stirling/software/common/model/FormFieldWithCoordinates.java
index 54ccafd665..9a0f23aa33 100644
--- a/app/common/src/main/java/stirling/software/common/model/FormFieldWithCoordinates.java
+++ b/app/common/src/main/java/stirling/software/common/model/FormFieldWithCoordinates.java
@@ -62,6 +62,15 @@ public class FormFieldWithCoordinates {
     @Schema(description = "Widget coordinates on each page (fields can have multiple widgets)")
     private List<WidgetCoordinates> widgets;
 
+    @Schema(description = "Maximum character count for a text field (/MaxLen); null when unset")
+    private Integer maxLength;
+
+    @Schema(
+            description =
+                    "Push button activation action as a spec string:"
+                            + " 'reset', 'print', 'uri:<url>' or 'submit:<url>'")
+    private String buttonActionSpec;
+
     /**
      * Coordinates for a single widget annotation (visual representation of the field). A field can
      * have multiple widgets if it appears on multiple pages.
@@ -94,5 +103,12 @@ public class FormFieldWithCoordinates {
 
         @Schema(description = "Font size in PDF points")
         private Float fontSize;
+
+        @Schema(
+                description =
+                        "CropBox height in PDF points. Lets the frontend reverse the backend's"
+                                + " Y-flip when sending new widget coordinates back for"
+                                + " create/modify operations.")
+        private Float cropBoxHeight;
     }
 }
diff --git a/app/common/src/main/java/stirling/software/common/model/job/JobResult.java b/app/common/src/main/java/stirling/software/common/model/job/JobResult.java
index aa43431a15..b3f1f31472 100644
--- a/app/common/src/main/java/stirling/software/common/model/job/JobResult.java
+++ b/app/common/src/main/java/stirling/software/common/model/job/JobResult.java
@@ -52,6 +52,13 @@ public class JobResult {
     /** Key/value metadata that survives the write-through into the shared job store. */
     private final Map<String, String> metadata = new ConcurrentHashMap<>();
 
+    /**
+     * File ids of the persistent input copies made for this job. An async submit copies the upload
+     * into FileStorage so the job can still read it after the request returns; without tracking
+     * them here nothing would ever delete those copies.
+     */
+    @JsonIgnore private final List<String> inputFileIds = new CopyOnWriteArrayList<>();
+
     /**
      * Create a new JobResult with the given job ID
      *
@@ -167,6 +174,22 @@ public class JobResult {
         return Collections.unmodifiableList(notes);
     }
 
+    /** Record a persistent input copy so job cleanup deletes it alongside the results. */
+    public void addInputFileId(String fileId) {
+        if (fileId != null && !fileId.isBlank() && !inputFileIds.contains(fileId)) {
+            this.inputFileIds.add(fileId);
+        }
+    }
+
+    /**
+     * File ids of this job's persistent input copies.
+     *
+     * @return An unmodifiable view of the input file ids
+     */
+    public List<String> getInputFileIds() {
+        return Collections.unmodifiableList(inputFileIds);
+    }
+
     /** Attach a metadata value, e.g. a policy id so cluster peers can identify a policy run. */
     public void putMetadata(String key, String value) {
         if (key != null && value != null) {
diff --git a/app/common/src/main/java/stirling/software/common/service/FileStorage.java b/app/common/src/main/java/stirling/software/common/service/FileStorage.java
index c5c1ddb5db..700a6e5a65 100644
--- a/app/common/src/main/java/stirling/software/common/service/FileStorage.java
+++ b/app/common/src/main/java/stirling/software/common/service/FileStorage.java
@@ -179,6 +179,21 @@ public class FileStorage {
         return fileStore.delete(fileId);
     }
 
+    /**
+     * Delete a stored file without the per-file ownership check.
+     *
+     * <p>Job cleanup authorises at the job level and then deletes that job's own files, so the
+     * deleter is legitimately not their owner - an admin sweeping every user's jobs, or the
+     * unauthenticated scheduled task. Routing those through {@link #deleteFile(String)} makes the
+     * ownership check throw and silently orphans the files on disk.
+     *
+     * <p>Only ever pass file ids read back off a job that the caller has already been authorised
+     * for; never a caller-supplied id.
+     */
+    public boolean deleteFileAsSystem(String fileId) {
+        return fileStore.delete(fileId);
+    }
+
     public boolean fileExists(String fileId) {
         enforceOwnership(fileId);
         return fileStore.exists(fileId);
diff --git a/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java b/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java
index f283f65763..eca4413350 100644
--- a/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java
+++ b/app/common/src/main/java/stirling/software/common/service/JobExecutorService.java
@@ -1,6 +1,7 @@
 package stirling.software.common.service;
 
 import java.io.IOException;
+import java.util.List;
 import java.util.Map;
 import java.util.UUID;
 import java.util.concurrent.CompletableFuture;
@@ -33,6 +34,14 @@ import stirling.software.common.util.RegexPatternUtils;
 @Slf4j
 public class JobExecutorService {
 
+    /**
+     * Request attribute holding the FileStorage ids of persistent input copies made for the job
+     * about to be created. Populated before the job id exists (the aspect copies the upload while
+     * processing arguments), drained onto the JobResult as soon as the task is created so cleanup
+     * can delete them.
+     */
+    public static final String PENDING_INPUT_FILE_IDS_ATTR = "autoJobPendingInputFileIds";
+
     private final TaskManager taskManager;
     private final FileStorage fileStorage;
     private final HttpServletRequest request;
@@ -133,6 +142,7 @@ public class JobExecutorService {
                     resourceWeight);
 
             taskManager.createTask(jobId);
+            registerPendingInputFiles(jobId);
 
             final String capturedJobIdForQueue = jobId;
             Supplier<Object> wrappedWork =
@@ -163,6 +173,7 @@ public class JobExecutorService {
             return ResponseEntity.ok().body(new JobResponse<>(true, jobId, null));
         } else if (async) {
             taskManager.createTask(jobId);
+            registerPendingInputFiles(jobId);
 
             final String capturedJobId = jobId;
 
@@ -484,4 +495,30 @@ public class JobExecutorService {
         }
         return baseJobId;
     }
+
+    /**
+     * Hand the input copies made while processing arguments to the freshly created job, so job
+     * cleanup deletes them. Drains the attribute so a retry cannot attribute the same ids twice.
+     */
+    @SuppressWarnings("unchecked")
+    private void registerPendingInputFiles(String jobId) {
+        if (request == null) {
+            return;
+        }
+        Object pending;
+        try {
+            pending = request.getAttribute(PENDING_INPUT_FILE_IDS_ATTR);
+            request.removeAttribute(PENDING_INPUT_FILE_IDS_ATTR);
+        } catch (RuntimeException ex) {
+            // No request bound to this thread (e.g. an internally dispatched job).
+            log.debug("Could not read pending input file ids: {}", ex.getMessage());
+            return;
+        }
+        if (!(pending instanceof List<?> ids)) {
+            return;
+        }
+        for (String fileId : (List<String>) ids) {
+            taskManager.registerInputFile(jobId, fileId);
+        }
+    }
 }
diff --git a/app/common/src/main/java/stirling/software/common/service/PdfaLevelAServiceInterface.java b/app/common/src/main/java/stirling/software/common/service/PdfaLevelAServiceInterface.java
new file mode 100644
index 0000000000..2ee55719b2
--- /dev/null
+++ b/app/common/src/main/java/stirling/software/common/service/PdfaLevelAServiceInterface.java
@@ -0,0 +1,22 @@
+package stirling.software.common.service;
+
+import java.util.List;
+
+/**
+ * Raises a converted PDF/A file from conformance level B to level A, which needs the tagging the
+ * PDF/UA tagger does. Implemented only in the proprietary module; core builds convert at level B.
+ */
+public interface PdfaLevelAServiceInterface {
+
+    /**
+     * @param levelA true only when the file was tagged and validated, so the claim is never a guess
+     */
+    record Result(byte[] pdfBytes, boolean levelA, List<String> warnings) {}
+
+    /**
+     * @param part PDF/A part, 1 to 3; part 1 keeps its PDF 1.4 version
+     * @param alsoDeclareUa additionally claim PDF/UA, but only if it validates
+     */
+    Result upgradeToLevelA(
+            byte[] pdfBytes, int part, String language, String title, boolean alsoDeclareUa);
+}
diff --git a/app/common/src/main/java/stirling/software/common/service/TaskManager.java b/app/common/src/main/java/stirling/software/common/service/TaskManager.java
index f504b39395..0d0f8c23aa 100644
--- a/app/common/src/main/java/stirling/software/common/service/TaskManager.java
+++ b/app/common/src/main/java/stirling/software/common/service/TaskManager.java
@@ -17,6 +17,7 @@ import java.util.concurrent.ConcurrentHashMap;
 import java.util.concurrent.Executors;
 import java.util.concurrent.ScheduledExecutorService;
 import java.util.concurrent.TimeUnit;
+import java.util.function.Predicate;
 import java.util.zip.ZipEntry;
 import java.util.zip.ZipInputStream;
 
@@ -234,6 +235,24 @@ public class TaskManager {
         return false;
     }
 
+    /**
+     * Record a persistent input copy against a job so cleanup deletes it with the results.
+     *
+     * @param jobId The job ID
+     * @param fileId The FileStorage id of the input copy
+     * @return true if the job exists and the id was recorded
+     */
+    public boolean registerInputFile(String jobId, String fileId) {
+        JobResult jobResult = jobResults.get(jobId);
+        if (jobResult == null) {
+            log.warn("Attempted to register an input file against non-existent job ID: {}", jobId);
+            return false;
+        }
+        jobResult.addInputFileId(fileId);
+        log.debug("Registered input file {} for job {}", fileId, jobId);
+        return true;
+    }
+
     /** Attach metadata to a job and write it through to the shared store for cluster peers. */
     public boolean putMetadata(String jobId, String key, String value) {
         JobResult jobResult = jobResults.get(jobId);
@@ -329,25 +348,59 @@ public class TaskManager {
         return jobResults.computeIfAbsent(jobId, JobResult::createNew);
     }
 
+    /**
+     * What a cleanup pass removed. Returned by the on-demand cleanup so callers can assert on it.
+     */
+    public record CleanupSummary(int jobsRemoved, int filesDeleted, int jobsRetained) {}
+
     /** Clean up old completed job results. No-op in cluster mode; the backplane TTL owns expiry. */
-    public void cleanupOldJobs() {
+    public CleanupSummary cleanupOldJobs() {
         if (clusterBackplane != null && !clusterBackplane.shouldRunLocalCleanup()) {
-            return;
+            return new CleanupSummary(0, 0, jobResults.size());
         }
+        return cleanupJobs(false, jobId -> true);
+    }
+
+    /**
+     * Force-expire this node's finished jobs now, ignoring the age threshold. Jobs still running
+     * are left alone - deleting their files mid-flight would break them - and are reported as
+     * retained.
+     *
+     * <p>Unlike {@link #cleanupOldJobs()} this always runs locally: it is an explicit request to
+     * release this node's storage, not the scheduled sweep the backplane TTL owns.
+     *
+     * @param jobIdFilter Only jobs whose id passes this predicate are considered, so a caller can
+     *     restrict the sweep to jobs the requester is allowed to touch
+     * @return What was removed
+     */
+    public CleanupSummary cleanupFinishedJobsNow(Predicate<String> jobIdFilter) {
+        return cleanupJobs(true, jobIdFilter);
+    }
+
+    private CleanupSummary cleanupJobs(boolean force, Predicate<String> filter) {
         LocalDateTime expiryThreshold =
                 LocalDateTime.now().minus(jobResultExpiryMinutes, ChronoUnit.MINUTES);
         LocalDateTime pendingExpiryThreshold =
                 LocalDateTime.now().minus(pendingJobExpiryMinutes, ChronoUnit.MINUTES);
         int removedCount = 0;
+        int filesDeleted = 0;
+        int retainedCount = 0;
 
         try {
             for (Map.Entry<String, JobResult> entry : jobResults.entrySet()) {
                 JobResult result = entry.getValue();
 
+                if (!filter.test(entry.getKey())) {
+                    retainedCount++;
+                    continue;
+                }
+
                 boolean expiredCompletedJob =
                         result.isComplete()
-                                && result.getCompletedAt() != null
-                                && result.getCompletedAt().isBefore(expiryThreshold);
+                                && (force
+                                        || (result.getCompletedAt() != null
+                                                && result.getCompletedAt()
+                                                        .isBefore(expiryThreshold)));
                 boolean abandonedPendingJob =
                         !result.isComplete()
                                 && result.getCreatedAt() != null
@@ -360,7 +413,7 @@ public class TaskManager {
 
                     // Clean up file results
                     if (expiredCompletedJob) {
-                        cleanupJobFiles(result, entry.getKey());
+                        filesDeleted += cleanupJobFiles(result, entry.getKey());
                     }
 
                     // Remove the job result
@@ -369,15 +422,22 @@ public class TaskManager {
                         jobStore.delete(entry.getKey());
                     }
                     removedCount++;
+                } else {
+                    retainedCount++;
                 }
             }
 
             if (removedCount > 0) {
-                log.info("Cleaned up {} expired job results", removedCount);
+                log.info(
+                        "Cleaned up {} {} job results ({} files deleted)",
+                        removedCount,
+                        force ? "finished" : "expired",
+                        filesDeleted);
             }
         } catch (Exception e) {
             log.error("Error during job cleanup: {}", e.getMessage(), e);
         }
+        return new CleanupSummary(removedCount, filesDeleted, retainedCount);
     }
 
     /** Mirror the in-memory {@code JobResult} into the cluster-visible {@link JobStore}. */
@@ -525,22 +585,43 @@ public class TaskManager {
         }
     }
 
-    /** Clean up files associated with a job result */
-    private void cleanupJobFiles(JobResult result, String jobId) {
+    /**
+     * Clean up files associated with a job result: both the results and the persistent input copy
+     * an async submit made of the upload.
+     *
+     * @return The number of files actually deleted
+     */
+    private int cleanupJobFiles(JobResult result, String jobId) {
+        int deleted = 0;
         // Clean up all result files
         if (result.hasFiles()) {
             for (ResultFile resultFile : result.getAllResultFiles()) {
-                try {
-                    fileStorage.deleteFile(resultFile.getFileId());
-                } catch (Exception e) {
-                    log.warn(
-                            "Failed to delete file {} for job {}: {}",
-                            resultFile.getFileId(),
-                            jobId,
-                            e.getMessage());
+                if (deleteJobFile(resultFile.getFileId(), jobId)) {
+                    deleted++;
                 }
             }
         }
+        for (String inputFileId : result.getInputFileIds()) {
+            if (deleteJobFile(inputFileId, jobId)) {
+                deleted++;
+            }
+        }
+        return deleted;
+    }
+
+    /**
+     * Deletes as the system, not as the caller: an admin sweeping another user's jobs, or the
+     * scheduled task running with no security context, is not the file's owner, and the
+     * ownership-checked delete would throw and leave the file orphaned on disk. The job itself is
+     * already authorised by the time we get here, and these ids come off that job, not the request.
+     */
+    private boolean deleteJobFile(String fileId, String jobId) {
+        try {
+            return fileStorage.deleteFileAsSystem(fileId);
+        } catch (Exception e) {
+            log.warn("Failed to delete file {} for job {}: {}", fileId, jobId, e.getMessage());
+            return false;
+        }
     }
 
     /** Find the ResultFile metadata for a given file ID by searching through all job results */
diff --git a/app/common/src/main/java/stirling/software/common/util/FormFieldTypeSupport.java b/app/common/src/main/java/stirling/software/common/util/FormFieldTypeSupport.java
index 1f971d8d9e..5d833290ec 100644
--- a/app/common/src/main/java/stirling/software/common/util/FormFieldTypeSupport.java
+++ b/app/common/src/main/java/stirling/software/common/util/FormFieldTypeSupport.java
@@ -3,14 +3,20 @@ package stirling.software.common.util;
 import java.io.IOException;
 import java.util.Arrays;
 import java.util.List;
+import java.util.Locale;
 import java.util.Map;
 import java.util.Optional;
 import java.util.function.Function;
+import java.util.regex.Pattern;
 import java.util.stream.Collectors;
 
 import org.apache.pdfbox.cos.COSName;
 import org.apache.pdfbox.pdmodel.graphics.color.PDColor;
 import org.apache.pdfbox.pdmodel.graphics.color.PDDeviceRGB;
+import org.apache.pdfbox.pdmodel.interactive.action.PDActionNamed;
+import org.apache.pdfbox.pdmodel.interactive.action.PDActionResetForm;
+import org.apache.pdfbox.pdmodel.interactive.action.PDActionSubmitForm;
+import org.apache.pdfbox.pdmodel.interactive.action.PDActionURI;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationWidget;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceCharacteristicsDictionary;
 import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
@@ -59,6 +65,24 @@ public enum FormFieldTypeSupport {
                 List<String> options)
                 throws IOException {
             PDTextField textField = (PDTextField) field;
+            if (definition.fontSize() != null && definition.fontSize() > 0) {
+                textField.setDefaultAppearance("/Helv " + definition.fontSize() + " Tf 0 g");
+            }
+            if (Boolean.TRUE.equals(definition.multiline())) {
+                textField.setMultiline(true);
+            }
+            // Comb field: evenly spaced character cells (e.g. SSN, phone). Requires
+            // a positive MaxLen and is mutually exclusive with multiline.
+            if (definition.maxLength() != null && definition.maxLength() > 0) {
+                textField.setMaxLen(definition.maxLength());
+                if (!Boolean.TRUE.equals(definition.multiline())) {
+                    try {
+                        textField.setComb(true);
+                    } catch (Exception e) {
+                        log.debug("Unable to set comb flag: {}", e.getMessage());
+                    }
+                }
+            }
             String defaultValue = Optional.ofNullable(definition.defaultValue()).orElse("");
             if (!defaultValue.isBlank()) {
                 FormUtils.setTextValue(textField, defaultValue);
@@ -272,14 +296,108 @@ public enum FormFieldTypeSupport {
         PDTerminalField createField(PDAcroForm acroForm) {
             return new PDSignatureField(acroForm);
         }
+
+        @Override
+        boolean doesNotsupportsDefinitionCreation() {
+            return false;
+        }
+        // Empty signature placeholder: no value to apply (signed later by a sign tool).
     },
     BUTTON("button", "pushButton", PDPushButton.class) {
         @Override
         PDTerminalField createField(PDAcroForm acroForm) {
             return new PDPushButton(acroForm);
         }
+
+        @Override
+        boolean doesNotsupportsDefinitionCreation() {
+            return false;
+        }
+
+        @Override
+        void applyNewFieldDefinition(
+                PDTerminalField field,
+                FormUtils.NewFormFieldDefinition definition,
+                List<String> options)
+                throws IOException {
+            if (field.getWidgets().isEmpty()) {
+                return;
+            }
+            PDAnnotationWidget widget = field.getWidgets().get(0);
+
+            // Visible caption (/MK /CA).
+            String caption = definition.label();
+            if (caption == null || caption.isBlank()) {
+                caption = definition.name();
+            }
+            if (caption != null && !caption.isBlank()) {
+                PDAppearanceCharacteristicsDictionary mk = widget.getAppearanceCharacteristics();
+                if (mk == null) {
+                    mk = new PDAppearanceCharacteristicsDictionary(widget.getCOSObject());
+                    widget.setAppearanceCharacteristics(mk);
+                }
+                mk.setNormalCaption(caption);
+            }
+            widget.setPrinted(true);
+
+            applyButtonAction(widget, definition.buttonAction());
+        }
     };
 
+    /**
+     * Writes a push button's activation action from a "reset"/"print"/"uri:"/"submit:" spec,
+     * returning why it could not, or null on success. A blank spec clears the action.
+     */
+    public static String applyButtonAction(PDAnnotationWidget widget, String action) {
+        if (action == null) {
+            return null;
+        }
+        if (action.isBlank()) {
+            // An explicit blank clears the action rather than leaving the old one behind.
+            widget.getCOSObject().removeItem(COSName.A);
+            return null;
+        }
+        String spec = action.trim();
+        if (!ACTION_SPEC.matcher(spec).matches()) {
+            return "'" + action + "' is not a button action this editor understands";
+        }
+        // The editor emits "uri:" the moment that kind is picked, before a URL is typed; an
+        // empty target is not yet an action, so clear rather than write an inert one.
+        int colon = spec.indexOf(':');
+        if (colon >= 0 && spec.substring(colon + 1).isBlank()) {
+            widget.getCOSObject().removeItem(COSName.A);
+            return null;
+        }
+        try {
+            String lower = spec.toLowerCase(Locale.ROOT);
+            if (lower.equals("reset")) {
+                widget.getCOSObject().setItem(COSName.A, new PDActionResetForm().getCOSObject());
+            } else if (lower.equals("print")) {
+                PDActionNamed named = new PDActionNamed();
+                named.setN("Print");
+                widget.getCOSObject().setItem(COSName.A, named.getCOSObject());
+            } else if (lower.startsWith("uri:")) {
+                PDActionURI uri = new PDActionURI();
+                uri.setURI(spec.substring(4));
+                widget.getCOSObject().setItem(COSName.A, uri.getCOSObject());
+            } else if (lower.startsWith("submit:")) {
+                PDActionSubmitForm submit = new PDActionSubmitForm();
+                // Store the target URL on the action dictionary's /F entry.
+                submit.getCOSObject().setString(COSName.F, spec.substring(7));
+                widget.getCOSObject().setItem(COSName.A, submit.getCOSObject());
+            }
+            return null;
+        } catch (Exception e) {
+            log.debug("Unable to apply button action '{}': {}", action, e.getMessage());
+            return e.getMessage();
+        }
+    }
+
+    /** The spec forms applyButtonAction understands; anything else is reported, not dropped. */
+    private static final Pattern ACTION_SPEC =
+            Pattern.compile(
+                    "^(reset|print|uri:.*|submit:.*)$", Pattern.CASE_INSENSITIVE | Pattern.DOTALL);
+
     private static final Map<String, FormFieldTypeSupport> BY_TYPE =
             Arrays.stream(values())
                     .collect(
diff --git a/app/common/src/main/java/stirling/software/common/util/FormUtils.java b/app/common/src/main/java/stirling/software/common/util/FormUtils.java
index a1862d379c..401b1eb1ac 100644
--- a/app/common/src/main/java/stirling/software/common/util/FormUtils.java
+++ b/app/common/src/main/java/stirling/software/common/util/FormUtils.java
@@ -23,6 +23,7 @@ import org.apache.pdfbox.cos.COSArray;
 import org.apache.pdfbox.cos.COSBase;
 import org.apache.pdfbox.cos.COSDictionary;
 import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.cos.COSString;
 import org.apache.pdfbox.pdmodel.PDDocument;
 import org.apache.pdfbox.pdmodel.PDDocumentCatalog;
 import org.apache.pdfbox.pdmodel.PDPage;
@@ -32,10 +33,12 @@ import org.apache.pdfbox.pdmodel.common.PDRectangle;
 import org.apache.pdfbox.pdmodel.font.PDFont;
 import org.apache.pdfbox.pdmodel.font.PDType1Font;
 import org.apache.pdfbox.pdmodel.font.Standard14Fonts;
+import org.apache.pdfbox.pdmodel.graphics.color.PDColor;
 import org.apache.pdfbox.pdmodel.graphics.image.JPEGFactory;
 import org.apache.pdfbox.pdmodel.graphics.image.PDImageXObject;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotation;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationWidget;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceCharacteristicsDictionary;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceDictionary;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceEntry;
 import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceStream;
@@ -68,6 +71,12 @@ public class FormUtils {
     public final Set<String> CHOICE_FIELD_TYPES =
             Set.of(FIELD_TYPE_COMBOBOX, FIELD_TYPE_LISTBOX, FIELD_TYPE_RADIO);
 
+    /** The reserved off-state name every toggle widget must carry an appearance for. */
+    private final String OFF_STATE = "Off";
+
+    /** The on-state a checkbox gets when the definition supplies no export values. */
+    private final String DEFAULT_CHECKBOX_ON_STATE = "Yes";
+
     /**
      * Threshold in PDF points for considering two widgets to be on the same line. Fields whose
      * y-coordinates differ by less than this value are sorted left-to-right by x-coordinate instead
@@ -75,6 +84,9 @@ public class FormUtils {
      */
     private static final float SAME_LINE_THRESHOLD_PT = 10.0f;
 
+    /** Below this, a rect change is a no-op and the existing /AP still maps exactly. */
+    private static final float GEOMETRY_EPSILON_PT = 0.01f;
+
     private static final Pattern HEX_UUID_PATTERN =
             Pattern.compile("^[0-9a-fA-F]{8}[0-9a-fA-F]{24,}$");
     private static final Pattern WHITESPACE_PATTERN = Pattern.compile("\\s+");
@@ -236,6 +248,8 @@ public class FormUtils {
                             .multiline(multiline)
                             .tooltip(tooltip)
                             .widgets(widgets.isEmpty() ? null : widgets)
+                            .maxLength(extractMaxLength(terminalField))
+                            .buttonActionSpec(extractButtonAction(terminalField))
                             .build());
         }
 
@@ -300,7 +314,8 @@ public class FormUtils {
                             findPageIndexForAnnotation(document, fieldDict, annotationPageMap);
                     if (pageIndex >= 0) {
                         PDRectangle rectangle = new PDRectangle(rectArray);
-                        result.add(
+                        addWidget(
+                                result,
                                 createWidgetCoordinates(
                                         document, rectangle, pageIndex, null, field));
                     } else {
@@ -373,7 +388,8 @@ public class FormUtils {
                     }
                 }
 
-                result.add(
+                addWidget(
+                        result,
                         createWidgetCoordinates(
                                 document, rectangle, pageIndex, exportValue, field));
             } catch (Exception e) {
@@ -387,6 +403,15 @@ public class FormUtils {
         return result;
     }
 
+    /** Unreadable geometry yields null, which must never reach the list the comparator walks. */
+    private void addWidget(
+            List<FormFieldWithCoordinates.WidgetCoordinates> target,
+            FormFieldWithCoordinates.WidgetCoordinates widget) {
+        if (widget != null) {
+            target.add(widget);
+        }
+    }
+
     private FormFieldWithCoordinates.WidgetCoordinates createWidgetCoordinates(
             PDDocument document,
             PDRectangle rectangle,
@@ -424,13 +449,14 @@ public class FormUtils {
         float finalW = width;
         float finalH = height;
 
-        // Validate coordinates are within reasonable bounds
-        if (finalX < -1.0f
-                || finalY < -1.0f
-                || finalX > cropBox.getWidth() * 2 // Allow some horizontal overflow
-                || finalY > cropHeight + 1.0f) {
+        // Only nonsense is rejected. A widget outside the visible page is legal and must still be
+        // reported, or the field loses its geometry and the user cannot drag it back.
+        if (!Float.isFinite(finalX)
+                || !Float.isFinite(finalY)
+                || !Float.isFinite(finalW)
+                || !Float.isFinite(finalH)) {
             log.warn(
-                    "Widget coordinates out of bounds for field '{}': page={}, x={}, y={}, w={}, h={}",
+                    "Widget coordinates are not finite for field '{}': page={}, x={}, y={}, w={}, h={}",
                     field.getFullyQualifiedName(),
                     pageIndex,
                     finalX,
@@ -439,6 +465,12 @@ public class FormUtils {
                     finalH);
             return null;
         }
+        if (finalX < 0 || finalY < 0 || finalX > cropBox.getWidth() || finalY > cropHeight) {
+            log.debug(
+                    "Widget for field '{}' sits outside page {}",
+                    field.getFullyQualifiedName(),
+                    pageIndex);
+        }
 
         return FormFieldWithCoordinates.WidgetCoordinates.builder()
                 .pageIndex(pageIndex)
@@ -448,6 +480,7 @@ public class FormUtils {
                 .height(finalH)
                 .exportValue(exportValue)
                 .fontSize(extractFontSize(field))
+                .cropBoxHeight(cropHeight)
                 .build();
     }
 
@@ -459,12 +492,40 @@ public class FormUtils {
      *
      * @param document PDF document to repair
      */
+    /**
+     * PDFBox reads /Opt entries without following references, so an option stored indirectly - as
+     * real forms do - silently disappears. Resolving in place keeps the value and the reader
+     * honest.
+     */
+    private void resolveIndirectChoiceOptions(PDAcroForm acroForm) {
+        try {
+            for (PDField field : acroForm.getFieldTree()) {
+                if (!(field instanceof PDChoice)) {
+                    continue;
+                }
+                COSBase raw = field.getCOSObject().getDictionaryObject(COSName.OPT);
+                if (!(raw instanceof COSArray options)) {
+                    continue;
+                }
+                for (int i = 0; i < options.size(); i++) {
+                    COSBase resolved = options.getObject(i);
+                    if (resolved != null && resolved != options.get(i)) {
+                        options.set(i, resolved);
+                    }
+                }
+            }
+        } catch (Exception e) {
+            log.debug("Could not resolve indirect choice options: {}", e.getMessage());
+        }
+    }
+
     public void repairMissingWidgetPageReferences(PDDocument document) {
         try {
             PDAcroForm acroForm = getAcroFormSafely(document);
             if (acroForm == null) {
                 return;
             }
+            resolveIndirectChoiceOptions(acroForm);
 
             log.debug("Checking for widgets with missing page references...");
             int repairedCount = 0;
@@ -887,7 +948,9 @@ public class FormUtils {
                 }
                 PDFont helvetica = new PDType1Font(Standard14Fonts.FontName.HELVETICA);
                 try {
-                    // Map standard name used by many DAs
+                    // Both spellings: a DA naming a font missing from /DR makes
+                    // refreshAppearances throw for the whole form, not just that field.
+                    dr.put(COSName.getPDFName("Helv"), helvetica);
                     dr.put(COSName.getPDFName("Helvetica"), helvetica);
                 } catch (Exception ignore) {
                     try {
@@ -991,7 +1054,7 @@ public class FormUtils {
         try {
             textField.setValue(value != null ? value : "");
             return;
-        } catch (IOException initial) {
+        } catch (IOException | RuntimeException initial) {
             log.debug(
                     "Primary fill failed for text field '{}': {}",
                     textField.getFullyQualifiedName(),
@@ -1277,6 +1340,11 @@ public class FormUtils {
                 }
                 return String.join(",", selected);
             }
+            // A signature has no text value; getValueAsString would emit a JVM identity hash that
+            // changes on every load, so the same document would describe itself differently.
+            if (field instanceof PDSignatureField) {
+                return null;
+            }
             return field.getValueAsString();
         } catch (Exception e) {
             log.debug(
@@ -1451,16 +1519,26 @@ public class FormUtils {
             return tooltipLabel;
         }
 
-        // Only check options for choice-type fields (combobox, listbox, radio)
-        if (CHOICE_FIELD_TYPES.contains(type) && options != null && !options.isEmpty()) {
+        // A clearly meaningful field name describes the whole field and matches
+        // the name shown in the editor, so it is the best label.
+        String humanized = cleanLabel(humanizeName(name));
+        if (humanized != null && !looksGeneric(humanized)) {
+            return humanized;
+        }
+
+        // An option only beats the name when the name is auto-generated; a human-typed
+        // one wins below, so a group named "Choice" does not read as its first option.
+        if (CHOICE_FIELD_TYPES.contains(type)
+                && options != null
+                && !options.isEmpty()
+                && looksAutoGenerated(name)) {
             String optionCandidate = cleanLabel(options.getFirst());
             if (optionCandidate != null && !looksGeneric(optionCandidate)) {
                 return optionCandidate;
             }
         }
 
-        String humanized = cleanLabel(humanizeName(name));
-        if (humanized != null && !looksGeneric(humanized)) {
+        if (humanized != null && !looksAutoGenerated(name)) {
             return humanized;
         }
 
@@ -1497,6 +1575,27 @@ public class FormUtils {
                 || patterns.getOptionalTNumericPattern().matcher(simplified).matches();
     }
 
+    /**
+     * True only for auto-generated identifiers ("Field_5", "t3", UUIDs). Unlike {@link
+     * #looksGeneric} it keeps human-typed placeholders like "Choice", which are usable labels.
+     */
+    private boolean looksAutoGenerated(String value) {
+        if (value == null) return true;
+
+        RegexPatternUtils patterns = RegexPatternUtils.getInstance();
+        String simplified = patterns.getPunctuationPattern().matcher(value).replaceAll(" ").trim();
+        if (simplified.isEmpty()) return true;
+
+        String nospaces = WHITESPACE_PATTERN.matcher(simplified).replaceAll("");
+        if (nospaces.length() >= 32 && HEX_UUID_PATTERN.matcher(nospaces).matches()) return true;
+
+        return patterns.getPattern("^field(\\s*\\d+)?$", Pattern.CASE_INSENSITIVE)
+                        .matcher(simplified)
+                        .matches()
+                || patterns.getSimpleFormFieldPattern().matcher(simplified).matches()
+                || patterns.getOptionalTNumericPattern().matcher(simplified).matches();
+    }
+
     private String humanizeName(String name) {
         if (name == null) return null;
 
@@ -1513,35 +1612,62 @@ public class FormUtils {
 
     public void modifyFormFields(
             PDDocument document, List<ModifyFormFieldDefinition> modifications) {
+        modifyFormFields(document, modifications, null);
+    }
+
+    public void modifyFormFields(
+            PDDocument document,
+            List<ModifyFormFieldDefinition> modifications,
+            List<SkippedFieldEdit> skipped) {
         if (document == null || modifications == null || modifications.isEmpty()) return;
 
         PDAcroForm acroForm = getAcroFormSafely(document);
         if (acroForm == null) {
             log.warn("Cannot modify fields because the document has no AcroForm");
+            for (ModifyFormFieldDefinition modification : modifications) {
+                if (modification != null) {
+                    recordSkip(
+                            skipped,
+                            "modify",
+                            modification.targetName(),
+                            "the document has no form to modify");
+                }
+            }
             return;
         }
 
         Set<String> existingNames = collectExistingFieldNames(acroForm);
 
         for (ModifyFormFieldDefinition modification : modifications) {
-            if (modification == null || modification.targetName() == null) {
+            if (modification == null) {
                 continue;
             }
 
-            String lookupName = modification.targetName().trim();
+            String lookupName =
+                    modification.targetName() == null ? "" : modification.targetName().trim();
             if (lookupName.isEmpty()) {
+                recordSkip(skipped, "modify", null, "the request named no field to change");
+                continue;
+            }
+
+            String nameProblem = renameProblem(lookupName, modification.name());
+            if (nameProblem != null) {
+                log.warn("Rejecting rename of '{}': {}", sanitizeForLog(lookupName), nameProblem);
+                recordSkip(skipped, "modify", lookupName, nameProblem);
                 continue;
             }
 
             PDField originalField = locateField(acroForm, lookupName);
             if (originalField == null) {
                 log.warn("No matching field '{}' found for modification", lookupName);
+                recordSkip(skipped, "modify", lookupName, "no field with that name exists");
                 continue;
             }
 
             List<PDAnnotationWidget> widgets = originalField.getWidgets();
             if (widgets == null || widgets.isEmpty()) {
                 log.warn("Field '{}' has no widgets; skipping modification", lookupName);
+                recordSkip(skipped, "modify", lookupName, "the field has nothing drawn on a page");
                 continue;
             }
 
@@ -1552,6 +1678,8 @@ public class FormUtils {
                 log.warn(
                         "Unable to resolve widget page or rectangle for '{}'; skipping",
                         lookupName);
+                recordSkip(
+                        skipped, "modify", lookupName, "the field is not placed on a known page");
                 continue;
             }
 
@@ -1564,6 +1692,11 @@ public class FormUtils {
                     .getSupportedNewFieldTypes()
                     .contains(resolvedType)) {
                 log.warn("Unsupported target type '{}' for field '{}'", resolvedType, lookupName);
+                recordSkip(
+                        skipped,
+                        "modify",
+                        lookupName,
+                        "'" + abbreviate(resolvedType, 60) + "' is not a supported field type");
                 continue;
             }
 
@@ -1571,13 +1704,22 @@ public class FormUtils {
                     Optional.ofNullable(modification.name())
                             .map(String::trim)
                             .filter(s -> !s.isEmpty())
+                            // The editor seeds the box with the qualified name, so a submission
+                            // equal to it is not a rename; keep the field's own partial name.
+                            .filter(name -> !name.equals(lookupName))
+                            .map(name -> leafName(lookupName, name))
                             .orElseGet(originalField::getPartialName);
 
+            String qualified = originalField.getFullyQualifiedName();
+            // desiredName is a PARTIAL name but existingNames holds qualified ones, so compare
+            // under this field's own parent or siblings collide unnoticed.
+            String prefix = parentPrefix(qualified);
+            String reservedName = null;
             if (desiredName != null) {
-                existingNames.remove(originalField.getFullyQualifiedName());
-                existingNames.remove(originalField.getPartialName());
-                desiredName = generateUniqueFieldName(desiredName, existingNames);
-                existingNames.add(desiredName);
+                existingNames.remove(qualified);
+                desiredName = generateUniqueFieldName(desiredName, existingNames, prefix);
+                reservedName = prefix + desiredName;
+                existingNames.add(reservedName);
             }
 
             // Try to modify field in-place first for simple property changes
@@ -1586,17 +1728,27 @@ public class FormUtils {
 
             if (!typeChanging) {
                 try {
-                    modifyFieldPropertiesInPlace(originalField, modification, desiredName);
+                    modifyFieldPropertiesInPlace(
+                            document, originalField, modification, desiredName, skipped);
                     log.debug("Successfully modified field '{}' in-place", lookupName);
                     continue; // Skip the remove-and-recreate process
                 } catch (Exception e) {
                     log.debug(
                             "In-place modification failed for '{}', falling back to recreation: {}",
-                            lookupName,
+                            sanitizeForLog(lookupName),
                             e.getMessage());
                 }
             }
 
+            // Recreation always builds a top-level field, so running it on a field nested under a
+            // parent would silently move it out of that parent and change its qualified name.
+            if (!prefix.isEmpty()) {
+                log.warn("Cannot recreate nested field '{}'; leaving it as it was", lookupName);
+                recordSkip(skipped, "modify", lookupName, refusalReason(typeChanging));
+                releaseReservedName(existingNames, reservedName, qualified);
+                continue;
+            }
+
             // For type changes or when in-place modification fails, use remove-and-recreate
             // But create the new field first to ensure success before removing the original
             NewFormFieldDefinition replacementDefinition =
@@ -1613,16 +1765,31 @@ public class FormUtils {
                             modification.multiSelect(),
                             modification.options(),
                             modification.defaultValue(),
-                            modification.tooltip());
+                            modification.tooltip(),
+                            modification.fontSize(),
+                            modification.readOnly(),
+                            modification.multiline(),
+                            modification.maxLength(),
+                            modification.buttonAction());
 
             List<String> sanitizedOptions = sanitizeOptions(modification.options());
 
-            try {
-                FormFieldTypeSupport handler = FormFieldTypeSupport.forTypeName(resolvedType);
-                if (handler == null || handler.doesNotsupportsDefinitionCreation()) {
-                    handler = FormFieldTypeSupport.TEXT;
-                }
+            FormFieldTypeSupport handler = FormFieldTypeSupport.forTypeName(resolvedType);
+            if (handler == null || handler.doesNotsupportsDefinitionCreation()) {
+                // Falling back to a text field here would silently retype the field and report
+                // success, so refuse instead and leave the original alone.
+                recordSkip(
+                        skipped,
+                        "modify",
+                        lookupName,
+                        "'"
+                                + resolvedType
+                                + "' cannot be rebuilt, so the field was left as it was");
+                releaseReservedName(existingNames, reservedName, qualified);
+                continue;
+            }
 
+            try {
                 // Create new field first - if this fails, original field is preserved
                 createNewField(
                         handler,
@@ -1635,25 +1802,56 @@ public class FormUtils {
 
                 removeFieldFromDocument(document, acroForm, originalField);
 
+                // A rebuilt toggle has no /AP yet, so without this it renders blank and cannot
+                // tick.
+                applyButtonAppearances(
+                        document,
+                        acroForm,
+                        List.of(Map.entry(prefix + desiredName, replacementDefinition)));
+
                 log.debug(
                         "Successfully replaced field '{}' with type '{}'",
-                        lookupName,
+                        sanitizeForLog(lookupName),
                         resolvedType);
             } catch (Exception e) {
                 log.warn(
                         "Failed to modify form field '{}' to type '{}': {}",
-                        lookupName,
+                        sanitizeForLog(lookupName),
                         resolvedType,
                         e.getMessage(),
                         e);
+                recordSkip(skipped, "modify", lookupName, readableFailure(e));
+                releaseReservedName(existingNames, reservedName, qualified);
             }
         }
 
         ensureAppearances(acroForm);
     }
 
+    /** Nothing was applied, so give the field back its real name and drop the one we reserved. */
+    private void releaseReservedName(
+            Set<String> existingNames, String reservedName, String originalQualifiedName) {
+        if (reservedName != null) {
+            existingNames.remove(reservedName);
+        }
+        if (originalQualifiedName != null) {
+            existingNames.add(originalQualifiedName);
+        }
+    }
+
+    /** Why the edit was refused, which is not always the type change that triggered the path. */
+    private String refusalReason(boolean typeChanging) {
+        return typeChanging
+                ? "a field nested under a parent cannot have its type changed here"
+                : "this change needs the field rebuilt, which a nested field does not support";
+    }
+
     private void modifyFieldPropertiesInPlace(
-            PDField field, ModifyFormFieldDefinition modification, String newName)
+            PDDocument document,
+            PDField field,
+            ModifyFormFieldDefinition modification,
+            String newName,
+            List<SkippedFieldEdit> skipped)
             throws IOException {
         if (newName != null && !newName.equals(field.getPartialName())) {
             field.setPartialName(newName);
@@ -1690,6 +1888,14 @@ public class FormUtils {
             if (modification.multiSelect() != null) {
                 choiceField.setMultiSelect(modification.multiSelect());
             }
+        } else if (modification.options() != null && !(field instanceof PDChoice)) {
+            // Only a choice field stores an option list, so say so rather than drop the edit and
+            // let the panel report it as saved.
+            recordSkip(
+                    skipped,
+                    "modify",
+                    field.getFullyQualifiedName(),
+                    "only dropdown and list fields have an editable option list");
         }
 
         // Update tooltip on widgets
@@ -1703,6 +1909,318 @@ public class FormUtils {
                 }
             }
         }
+
+        // Update read-only flag
+        if (modification.readOnly() != null) {
+            field.setReadOnly(modification.readOnly());
+        }
+
+        // Update multiline flag (text fields only)
+        if (modification.multiline() != null && field instanceof PDTextField tf) {
+            tf.setMultiline(modification.multiline());
+        }
+
+        // Update the activation action (push buttons only)
+        if (modification.buttonAction() != null && field instanceof PDPushButton) {
+            String actionProblem = null;
+            for (PDAnnotationWidget widget : field.getWidgets()) {
+                String problem =
+                        FormFieldTypeSupport.applyButtonAction(widget, modification.buttonAction());
+                if (problem != null && actionProblem == null) {
+                    actionProblem = problem;
+                }
+            }
+            if (actionProblem != null) {
+                recordSkip(skipped, "modify", field.getFullyQualifiedName(), actionProblem);
+            }
+        }
+
+        // Update comb / max length (text fields only). Zero clears it, since a null means
+        // "unchanged" and the editor otherwise has no way to remove an existing /MaxLen.
+        if (modification.maxLength() != null && field instanceof PDTextField combTf) {
+            int maxLength = modification.maxLength();
+            if (maxLength > 0) {
+                combTf.setMaxLen(maxLength);
+                if (!combTf.isMultiline()) {
+                    try {
+                        combTf.setComb(true);
+                    } catch (Exception ignore) {
+                        // comb is best-effort
+                    }
+                }
+            } else {
+                combTf.getCOSObject().removeItem(COSName.MAX_LEN);
+                try {
+                    combTf.setComb(false);
+                } catch (Exception ignore) {
+                    // comb is best-effort
+                }
+            }
+        }
+
+        // Update font size (variable-text fields only: text/combo/list)
+        if (modification.fontSize() != null
+                && modification.fontSize() > 0
+                && field instanceof PDVariableText vt) {
+            applyFontSizeToDefaultAppearance(vt, modification.fontSize());
+            // Clear the cached appearance so ensureAppearances() regenerates it
+            // with the new font size; otherwise viewers keep the old glyph sizing.
+            removeWidgetAppearanceStreams(field);
+        }
+
+        // Incoming coordinates are CropBox-relative and lower-left-origin, the reverse
+        // of what createWidgetCoordinates extracts.
+        if (modification.x() != null
+                || modification.y() != null
+                || modification.width() != null
+                || modification.height() != null
+                || modification.optionGap() != null
+                || modification.optionSize() != null) {
+            updateWidgetGeometry(document, field, modification, skipped);
+        }
+    }
+
+    /**
+     * Moves/resizes a field's widgets. The rect describes widget 0; the rest shift by the same
+     * delta and keep their own size, so a radio group travels intact instead of being normalised.
+     */
+    /** A size PDFBox would write as "Infinity" or a zero-area box makes the field unusable. */
+    private static boolean unusableSize(Float value) {
+        return value != null && (!Float.isFinite(value) || value <= 0);
+    }
+
+    /** The rectangle enclosing every widget, or null when none has one. */
+    private static PDRectangle widgetBounds(List<PDAnnotationWidget> widgets) {
+        float minX = Float.MAX_VALUE;
+        float minY = Float.MAX_VALUE;
+        float maxX = -Float.MAX_VALUE;
+        float maxY = -Float.MAX_VALUE;
+        boolean any = false;
+        for (PDAnnotationWidget widget : widgets) {
+            PDRectangle r = widget.getRectangle();
+            if (r == null) continue;
+            any = true;
+            minX = Math.min(minX, r.getLowerLeftX());
+            minY = Math.min(minY, r.getLowerLeftY());
+            maxX = Math.max(maxX, r.getUpperRightX());
+            maxY = Math.max(maxY, r.getUpperRightY());
+        }
+        return any ? new PDRectangle(minX, minY, maxX - minX, maxY - minY) : null;
+    }
+
+    private void updateWidgetGeometry(
+            PDDocument document,
+            PDField field,
+            ModifyFormFieldDefinition modification,
+            List<SkippedFieldEdit> skipped) {
+        List<PDAnnotationWidget> widgets = field.getWidgets();
+        if (widgets == null || widgets.isEmpty()) {
+            return;
+        }
+        if (unusableSize(modification.width()) || unusableSize(modification.height())) {
+            recordSkip(
+                    skipped,
+                    "modify",
+                    field.getFullyQualifiedName(),
+                    "a width and height above zero are required, so the size was left as it was");
+            return;
+        }
+        if (modification.x() != null && !Float.isFinite(modification.x())
+                || modification.y() != null && !Float.isFinite(modification.y())) {
+            recordSkip(
+                    skipped,
+                    "modify",
+                    field.getFullyQualifiedName(),
+                    "the position is not a usable number, so the field was left where it was");
+            return;
+        }
+        PDAnnotationWidget anchor = widgets.get(0);
+        PDRectangle anchorRect = anchor.getRectangle();
+        if (anchorRect == null) {
+            return;
+        }
+
+        Map<COSDictionary, Integer> pageMap = buildAnnotationPageMap(document);
+        int anchorPage = determineWidgetPageIndex(document, anchor, pageMap);
+        float offX = 0;
+        float offY = 0;
+        if (anchorPage >= 0) {
+            PDRectangle cropBox = document.getPage(anchorPage).getCropBox();
+            offX = cropBox.getLowerLeftX();
+            offY = cropBox.getLowerLeftY();
+        }
+
+        float newX =
+                modification.x() != null ? modification.x() + offX : anchorRect.getLowerLeftX();
+        float newY =
+                modification.y() != null ? modification.y() + offY : anchorRect.getLowerLeftY();
+        float dx = newX - anchorRect.getLowerLeftX();
+        float dy = newY - anchorRect.getLowerLeftY();
+        Float newW = modification.width();
+        Float newH = modification.height();
+
+        // Spacing and size are a property of the whole group, so an explicit change re-flows
+        // every option. Gated on those two: a plain drag sends widget 0's size, which would be
+        // mistaken for the group's height and collapse the stack.
+        if ((modification.optionGap() != null || modification.optionSize() != null)
+                && field instanceof PDRadioButton
+                && widgets.size() > 1) {
+            PDRectangle bounds = widgetBounds(widgets);
+            if (bounds != null) {
+                PDRectangle box =
+                        new PDRectangle(
+                                bounds.getLowerLeftX() + dx,
+                                bounds.getLowerLeftY() + dy,
+                                modification.width() != null
+                                        ? modification.width()
+                                        : bounds.getWidth(),
+                                modification.height() != null
+                                        ? modification.height()
+                                        : bounds.getHeight());
+                List<PDRectangle> reflowed =
+                        radioOptionRects(
+                                box,
+                                widgets.size(),
+                                modification.optionGap(),
+                                modification.optionSize());
+                List<String> groupStates = currentWidgetOnStates((PDButton) field);
+                for (int i = 0; i < widgets.size(); i++) {
+                    widgets.get(i).setRectangle(reflowed.get(i));
+                    rebuildWidgetAppearance(document, field, widgets.get(i), i, groupStates, true);
+                }
+                return;
+            }
+        }
+
+        // Read the on-states off /AP /N before the strip: PDFBox derives a button's
+        // value vocabulary from those keys, so a guessed state orphans /V.
+        List<String> onStates =
+                field instanceof PDButton button ? currentWidgetOnStates(button) : List.of();
+        boolean isRadio = field instanceof PDRadioButton;
+
+        int leftOffPage = 0;
+        for (int i = 0; i < widgets.size(); i++) {
+            PDAnnotationWidget widget = widgets.get(i);
+            PDRectangle rect = widget.getRectangle();
+            if (rect == null) {
+                continue;
+            }
+            if (i > 0 && determineWidgetPageIndex(document, widget, pageMap) != anchorPage) {
+                // A delta measured in another page's user space means nothing here.
+                log.warn(
+                        "Field '{}' widget {} sits on a different page; geometry left alone",
+                        field.getFullyQualifiedName(),
+                        i);
+                leftOffPage++;
+                continue;
+            }
+            // Only the widget the request describes takes the new size; the rest keep theirs.
+            float targetW = i == 0 && newW != null ? newW : rect.getWidth();
+            float targetH = i == 0 && newH != null ? newH : rect.getHeight();
+            boolean resized =
+                    Math.abs(targetW - rect.getWidth()) > GEOMETRY_EPSILON_PT
+                            || Math.abs(targetH - rect.getHeight()) > GEOMETRY_EPSILON_PT;
+            widget.setRectangle(
+                    new PDRectangle(
+                            rect.getLowerLeftX() + dx,
+                            rect.getLowerLeftY() + dy,
+                            targetW,
+                            targetH));
+            // A pure translation re-maps the same /AP onto the new /Rect unchanged, but a toggle
+            // with no /AP at all has no on-state vocabulary and must be given one regardless.
+            boolean toggle = field instanceof PDCheckBox || field instanceof PDRadioButton;
+            if (resized || (toggle && normalAppearanceOnState(widget) == null)) {
+                rebuildWidgetAppearance(document, field, widget, i, onStates, isRadio);
+            }
+        }
+        // One row per field, not per widget, so a split group cannot fill the report on its own.
+        if (leftOffPage > 0) {
+            recordSkip(
+                    skipped,
+                    "modify",
+                    field.getFullyQualifiedName(),
+                    leftOffPage + " widget(s) on another page were left where they were");
+        }
+    }
+
+    /** After a resize, rebuilds the appearance PDFBox cannot regenerate by itself. */
+    private void rebuildWidgetAppearance(
+            PDDocument document,
+            PDField field,
+            PDAnnotationWidget widget,
+            int index,
+            List<String> onStates,
+            boolean isRadio) {
+        if (field instanceof PDSignatureField) {
+            // PDFBox never rebuilds a signature appearance; dropping it blanks the field.
+            return;
+        }
+        COSName priorState = widget.getCOSObject().getCOSName(COSName.AS);
+        try {
+            if (field instanceof PDCheckBox || field instanceof PDRadioButton) {
+                // Drop the stale streams: viewers stretch an /AP built for the old BBox
+                // onto the new /Rect, so a resized toggle looks distorted.
+                widget.getCOSObject().removeItem(COSName.AP);
+                String onState =
+                        index < onStates.size() ? onStates.get(index) : DEFAULT_CHECKBOX_ON_STATE;
+                applyToggleAppearance(document, widget, onState, isRadio);
+                // applyToggleAppearance parks the widget on Off; put the selection back.
+                if (priorState != null && !OFF_STATE.equals(priorState.getName())) {
+                    widget.getCOSObject().setName(COSName.AS, onState);
+                }
+            } else if (field instanceof PDPushButton) {
+                // /D and /R still carry the old BBox and cannot be regenerated, so drop them
+                // rather than leave a stretched down-state; viewers fall back to /N.
+                PDAppearanceDictionary existing = widget.getAppearance();
+                if (existing != null) {
+                    existing.getCOSObject().removeItem(COSName.D);
+                    existing.getCOSObject().removeItem(COSName.R);
+                }
+                applyPushButtonAppearance(document, widget);
+            } else {
+                // text/choice: refreshAppearances() rebuilds these from /DA in ensureAppearances().
+                widget.getCOSObject().removeItem(COSName.AP);
+            }
+        } catch (Exception e) {
+            log.warn(
+                    "Could not rebuild the appearance for '{}' widget {}: {}",
+                    field.getFullyQualifiedName(),
+                    index,
+                    e.getMessage());
+        }
+    }
+
+    /** Rewrites only the size token in a variable-text field's /DA, keeping font and colour. */
+    private void applyFontSizeToDefaultAppearance(PDVariableText field, float fontSize) {
+        String da = field.getDefaultAppearance();
+        if (da != null && !da.isBlank()) {
+            // Replace the size token (the operand immediately before "Tf").
+            String[] tokens = da.split("\\s+");
+            boolean replaced = false;
+            for (int i = 0; i < tokens.length; i++) {
+                if ("Tf".equals(tokens[i]) && i > 0) {
+                    tokens[i - 1] = String.valueOf(fontSize);
+                    replaced = true;
+                    break;
+                }
+            }
+            if (replaced) {
+                field.setDefaultAppearance(String.join(" ", tokens));
+                return;
+            }
+        }
+        field.setDefaultAppearance("/Helv " + fontSize + " Tf 0 g");
+    }
+
+    /** Drops cached /AP appearance streams from every widget of a field. */
+    private void removeWidgetAppearanceStreams(PDField field) {
+        List<PDAnnotationWidget> widgets = field.getWidgets();
+        if (widgets == null) {
+            return;
+        }
+        for (PDAnnotationWidget widget : widgets) {
+            widget.getCOSObject().removeItem(COSName.AP);
+        }
     }
 
     private String fallbackLabelForType(String type, int typeIndex) {
@@ -1830,12 +2348,700 @@ public class FormUtils {
         return -1;
     }
 
+    /**
+     * Adds fields, creating an AcroForm if absent. Definition coordinates are CropBox-relative and
+     * lower-left-origin (the inverse of {@link #createWidgetCoordinates}).
+     */
+    public void addNewFields(PDDocument document, List<NewFormFieldDefinition> definitions)
+            throws IOException {
+        addNewFields(document, definitions, null);
+    }
+
+    /**
+     * A form with variable-text fields needs /DR and /DA; PDFBox refuses to set a value without
+     * them, and a PDF that never had a form has neither.
+     */
+    private void ensureAcroFormDefaults(PDAcroForm acroForm) {
+        if (acroForm == null) return;
+        try {
+            PDResources dr = acroForm.getDefaultResources();
+            if (dr == null) {
+                dr = new PDResources();
+                acroForm.setDefaultResources(dr);
+            }
+            String resourceName = "Helv";
+            COSName alias = dr.add(new PDType1Font(Standard14Fonts.FontName.HELVETICA));
+            if (alias != null && alias.getName() != null && !alias.getName().isBlank()) {
+                resourceName = alias.getName();
+            }
+            String da = acroForm.getDefaultAppearance();
+            if (da == null || da.isBlank()) {
+                acroForm.setDefaultAppearance("/" + resourceName + " 12 Tf 0 g");
+            }
+        } catch (Exception e) {
+            log.debug("Could not prepare AcroForm defaults: {}", e.getMessage());
+        }
+    }
+
+    public void addNewFields(
+            PDDocument document,
+            List<NewFormFieldDefinition> definitions,
+            List<SkippedFieldEdit> skipped)
+            throws IOException {
+        if (document == null || definitions == null || definitions.isEmpty()) return;
+        // A page-less document has nowhere to put a widget; the clamp below cannot make it safe.
+        if (document.getNumberOfPages() == 0) {
+            log.warn("Cannot add form fields: document has no pages");
+            for (NewFormFieldDefinition definition : definitions) {
+                if (definition != null) {
+                    recordSkip(skipped, "add", definition.name(), "the document has no pages");
+                }
+            }
+            return;
+        }
+
+        PDAcroForm acroForm = getAcroFormSafely(document);
+        if (acroForm == null) {
+            // Create a new AcroForm for PDFs that don't have one yet
+            acroForm = new PDAcroForm(document);
+            document.getDocumentCatalog().setAcroForm(acroForm);
+        }
+        ensureAcroFormDefaults(acroForm);
+
+        Set<String> existingNames = collectExistingFieldNames(acroForm);
+        int pageCount = document.getNumberOfPages();
+        // Buttons need their appearances built after creation; see applyButtonAppearances.
+        List<Map.Entry<String, NewFormFieldDefinition>> createdButtons = new ArrayList<>();
+
+        for (NewFormFieldDefinition definition : definitions) {
+            if (definition == null) continue;
+
+            String nameProblem = invalidFieldNameReason(definition.name());
+            if (nameProblem != null) {
+                log.warn("Rejecting new field: {}", nameProblem);
+                recordSkip(skipped, "add", definition.name(), nameProblem);
+                continue;
+            }
+
+            String resolvedType =
+                    Optional.ofNullable(definition.type())
+                            .map(FormUtils::normalizeFieldType)
+                            .orElse(FIELD_TYPE_TEXT);
+
+            int pageIdx = definition.pageIndex() != null ? definition.pageIndex() : 0;
+            if (pageIdx < 0 || pageIdx >= pageCount) {
+                log.warn(
+                        "Page index {} out of range (0-{}); clamping to last page",
+                        pageIdx,
+                        pageCount - 1);
+                // Clamped, so the field IS created; not a dropped edit and not reported as one.
+                pageIdx = Math.max(0, pageCount - 1);
+            }
+            PDPage page;
+            try {
+                page = document.getPage(pageIdx);
+            } catch (RuntimeException e) {
+                // getNumberOfPages() reports the raw /Count, which a broken /Pages tree can
+                // overstate, so the page may still not be there.
+                recordSkip(
+                        skipped,
+                        "add",
+                        definition.name(),
+                        "page " + (pageIdx + 1) + " could not be read from this PDF");
+                continue;
+            }
+            PDRectangle cropBox = page.getCropBox();
+
+            // CropBox-relative, lower-left-origin -> absolute PDF user space.
+            float x = (definition.x() != null ? definition.x() : 0f) + cropBox.getLowerLeftX();
+            float y = (definition.y() != null ? definition.y() : 0f) + cropBox.getLowerLeftY();
+            float w = definition.width() != null ? definition.width() : 150f;
+            float h = definition.height() != null ? definition.height() : 20f;
+            PDRectangle rectangle = new PDRectangle(x, y, w, h);
+
+            String baseName =
+                    Optional.ofNullable(definition.name())
+                            .map(String::trim)
+                            .filter(s -> !s.isEmpty())
+                            .orElse("field");
+            String uniqueName = generateUniqueFieldName(baseName, existingNames);
+            existingNames.add(uniqueName);
+
+            List<String> options = sanitizeOptions(definition.options());
+
+            try {
+                if (FIELD_TYPE_RADIO.equals(resolvedType)) {
+                    // Radio is a single field with one widget per option; it can't go
+                    // through the single-widget createNewField path.
+                    createRadioField(acroForm, page, rectangle, uniqueName, definition, options);
+                } else {
+                    FormFieldTypeSupport handler = FormFieldTypeSupport.forTypeName(resolvedType);
+                    if (handler == null || handler.doesNotsupportsDefinitionCreation()) {
+                        // Quietly making it a text field reported success for a field the
+                        // caller never asked for; say so instead.
+                        recordSkip(
+                                skipped,
+                                "add",
+                                uniqueName,
+                                "'" + resolvedType + "' fields cannot be created");
+                        existingNames.remove(uniqueName);
+                        continue;
+                    }
+                    createNewField(
+                            handler, acroForm, page, rectangle, uniqueName, definition, options);
+                }
+                createdButtons.add(Map.entry(uniqueName, definition));
+            } catch (Exception e) {
+                log.warn(
+                        "Failed to create field '{}' of type '{}': {}",
+                        sanitizeForLog(uniqueName),
+                        resolvedType,
+                        e.getMessage(),
+                        e);
+                recordSkip(skipped, "add", uniqueName, readableFailure(e));
+            }
+        }
+
+        applyButtonAppearances(document, acroForm, createdButtons);
+        ensureAppearances(acroForm);
+    }
+
+    /**
+     * {@link PDAcroForm#refreshAppearances()} never synthesizes /AP for the button family, and
+     * PDFBox reads a button's on-state from the /AP /N keys, so draw them then re-apply the value.
+     */
+    private void applyButtonAppearances(
+            PDDocument document,
+            PDAcroForm acroForm,
+            List<Map.Entry<String, NewFormFieldDefinition>> created) {
+        for (Map.Entry<String, NewFormFieldDefinition> entry : created) {
+            PDField field = acroForm.getField(entry.getKey());
+            if (field instanceof PDPushButton) {
+                for (PDAnnotationWidget widget : field.getWidgets()) {
+                    try {
+                        applyPushButtonAppearance(document, widget);
+                    } catch (Exception e) {
+                        log.warn(
+                                "Could not build an appearance for button '{}': {}",
+                                entry.getKey(),
+                                e.getMessage());
+                    }
+                }
+                continue;
+            }
+            if (!(field instanceof PDCheckBox) && !(field instanceof PDRadioButton)) {
+                continue;
+            }
+            boolean isRadio = field instanceof PDRadioButton;
+            List<String> onStates = buttonOnStates((PDButton) field);
+            List<PDAnnotationWidget> widgets = field.getWidgets();
+            for (int i = 0; i < widgets.size(); i++) {
+                String onState = i < onStates.size() ? onStates.get(i) : DEFAULT_CHECKBOX_ON_STATE;
+                try {
+                    applyToggleAppearance(document, widgets.get(i), onState, isRadio);
+                } catch (Exception e) {
+                    log.warn(
+                            "Could not build an appearance for '{}' widget {}: {}",
+                            entry.getKey(),
+                            i,
+                            e.getMessage());
+                }
+            }
+            applyButtonDefault((PDButton) field, entry.getValue(), onStates);
+        }
+    }
+
+    /** The on-state per widget: the export values when set, else the single checkbox state. */
+    private List<String> buttonOnStates(PDButton button) {
+        List<String> exportValues = button.getExportValues();
+        if (exportValues != null && !exportValues.isEmpty()) {
+            return exportValues;
+        }
+        return List.of(DEFAULT_CHECKBOX_ON_STATE);
+    }
+
+    /** Each widget's live on-state, read from /AP /N before that dictionary is dropped. */
+    private List<String> currentWidgetOnStates(PDButton button) {
+        List<String> exportValues = button.getExportValues();
+        List<PDAnnotationWidget> widgets = button.getWidgets();
+        // A checkbox's widgets all share one on-state, so /V names it however many there are.
+        // A radio's widgets each have their own, so /V identifies one and cannot stand in.
+        boolean sharedOnState = !(button instanceof PDRadioButton);
+        String fromValue = sharedOnState || widgets.size() == 1 ? nonOffValueName(button) : null;
+        List<String> states = new ArrayList<>(widgets.size());
+        for (int i = 0; i < widgets.size(); i++) {
+            String state = normalAppearanceOnState(widgets.get(i));
+            if ((state == null || state.isEmpty())
+                    && exportValues != null
+                    && i < exportValues.size()) {
+                state = sanitizePdfName(exportValues.get(i));
+            }
+            if (state == null || state.isEmpty()) {
+                state = fromValue;
+            }
+            states.add(state == null || state.isEmpty() ? DEFAULT_CHECKBOX_ON_STATE : state);
+        }
+        return states;
+    }
+
+    /** A button's current value when it names a real on-state, else null. */
+    private String nonOffValueName(PDButton button) {
+        try {
+            // /V is inheritable, so walk up. A malformed PDF can point /Parent back at an
+            // ancestor, so track what we have seen rather than trusting the chain to end.
+            COSBase raw = null;
+            Set<COSDictionary> seen = Collections.newSetFromMap(new IdentityHashMap<>());
+            COSDictionary d = button.getCOSObject();
+            while (d != null && raw == null && seen.add(d)) {
+                raw = d.getDictionaryObject(COSName.V);
+                COSBase parent = d.getDictionaryObject(COSName.PARENT);
+                d = parent instanceof COSDictionary parentDict ? parentDict : null;
+            }
+            String name =
+                    switch (raw) {
+                        case COSName cosName -> cosName.getName();
+                        case COSString cosString -> cosString.getString();
+                        case null, default -> null;
+                    };
+            return name == null || name.isEmpty() || OFF_STATE.equals(name) ? null : name;
+        } catch (Exception e) {
+            log.debug("Could not read a button's value: {}", e.getMessage());
+            return null;
+        }
+    }
+
+    /** The first non-Off key of a widget's /AP /N sub-dictionary, or null. */
+    private String normalAppearanceOnState(PDAnnotationWidget widget) {
+        try {
+            PDAppearanceDictionary appearance = widget.getAppearance();
+            PDAppearanceEntry normal = appearance != null ? appearance.getNormalAppearance() : null;
+            if (normal == null || !normal.isSubDictionary()) {
+                return null;
+            }
+            for (COSName name : normal.getSubDictionary().keySet()) {
+                if (!OFF_STATE.equals(name.getName())) {
+                    return name.getName();
+                }
+            }
+        } catch (Exception e) {
+            log.debug("Could not read a widget's on-state: {}", e.getMessage());
+        }
+        return null;
+    }
+
+    /** Re-applies the definition's default now that the on-state keys exist to resolve it. */
+    private void applyButtonDefault(
+            PDButton button, NewFormFieldDefinition definition, List<String> onStates) {
+        try {
+            if (button instanceof PDCheckBox checkBox) {
+                if (isChecked(definition.defaultValue())) {
+                    checkBox.check();
+                } else {
+                    checkBox.unCheck();
+                }
+                return;
+            }
+            String requested = definition.defaultValue();
+            if (requested == null || requested.isBlank()) {
+                return;
+            }
+            // The widget states are sanitized PDF names, so match the raw request against those.
+            String match =
+                    onStates.stream()
+                            .filter(
+                                    state ->
+                                            state.equals(requested)
+                                                    || state.equalsIgnoreCase(
+                                                            sanitizePdfName(requested)))
+                            .findFirst()
+                            .orElse(null);
+            if (match != null) {
+                button.setValue(match);
+            }
+        } catch (Exception e) {
+            log.debug(
+                    "Could not apply default value for '{}': {}",
+                    button.getPartialName(),
+                    e.getMessage());
+        }
+    }
+
+    /**
+     * Builds a toggle's two-state /AP /N from drawing primitives, so no font resource is needed.
+     */
+    private void applyToggleAppearance(
+            PDDocument document, PDAnnotationWidget widget, String onState, boolean isRadio)
+            throws IOException {
+        PDRectangle rect = widget.getRectangle();
+        if (rect == null || rect.getWidth() <= 0 || rect.getHeight() <= 0) {
+            return;
+        }
+        float w = rect.getWidth();
+        float h = rect.getHeight();
+        PDRectangle bbox = new PDRectangle(w, h);
+
+        PDAppearanceDictionary appearance = new PDAppearanceDictionary();
+        COSDictionary normalStates = new COSDictionary();
+        normalStates.setItem(
+                COSName.getPDFName(OFF_STATE),
+                toggleStream(document, bbox, false, false).getCOSObject());
+        normalStates.setItem(
+                COSName.getPDFName(onState),
+                toggleStream(document, bbox, true, isRadio).getCOSObject());
+        appearance.getCOSObject().setItem(COSName.N, normalStates);
+        widget.setAppearance(appearance);
+        // Until a value selects it, the widget shows the Off appearance.
+        widget.getCOSObject().setName(COSName.AS, OFF_STATE);
+    }
+
+    private PDAppearanceStream toggleStream(
+            PDDocument document, PDRectangle bbox, boolean on, boolean isRadio) throws IOException {
+        PDAppearanceStream stream = new PDAppearanceStream(document);
+        stream.setBBox(bbox);
+        stream.setResources(new PDResources());
+
+        float w = bbox.getWidth();
+        float h = bbox.getHeight();
+        float inset = Math.min(w, h) * 0.1f;
+        try (PDPageContentStream content =
+                new PDPageContentStream(
+                        document, stream, stream.getStream().createOutputStream())) {
+            content.setStrokingColor(0f, 0f, 0f);
+            content.setNonStrokingColor(0f, 0f, 0f);
+            content.setLineWidth(Math.max(0.5f, Math.min(w, h) * 0.06f));
+            if (isRadio) {
+                drawCircle(content, w / 2, h / 2, Math.min(w, h) / 2 - inset);
+                content.stroke();
+                if (on) {
+                    drawCircle(content, w / 2, h / 2, Math.min(w, h) / 4 - inset / 2);
+                    content.fill();
+                }
+            } else {
+                content.addRect(inset, inset, w - 2 * inset, h - 2 * inset);
+                content.stroke();
+                if (on) {
+                    content.moveTo(w * 0.25f, h * 0.5f);
+                    content.lineTo(w * 0.45f, h * 0.28f);
+                    content.lineTo(w * 0.78f, h * 0.72f);
+                    content.stroke();
+                }
+            }
+        }
+        return stream;
+    }
+
+    /**
+     * Draws a push button's single {@code /AP /N} stream from its {@code /MK} characteristics.
+     * PDFBox never synthesizes one, so without this a push button has no appearance at all.
+     */
+    private void applyPushButtonAppearance(PDDocument document, PDAnnotationWidget widget)
+            throws IOException {
+        PDRectangle rect = widget.getRectangle();
+        if (rect == null || rect.getWidth() <= 0 || rect.getHeight() <= 0) {
+            return;
+        }
+        float w = rect.getWidth();
+        float h = rect.getHeight();
+
+        PDAppearanceStream stream = new PDAppearanceStream(document);
+        stream.setBBox(new PDRectangle(w, h));
+        stream.setResources(new PDResources());
+
+        PDAppearanceCharacteristicsDictionary mk = widget.getAppearanceCharacteristics();
+        String caption = mk != null ? mk.getNormalCaption() : null;
+        // Honour the authored /MK colours; a hardcoded grey would restyle an existing button.
+        float[] background = mkColour(mk == null ? null : mk.getBackground(), 0.85f);
+        float[] border = mkColour(mk == null ? null : mk.getBorderColour(), 0f);
+        PDFont font = new PDType1Font(Standard14Fonts.FontName.HELVETICA);
+        float fontSize = Math.min(12f, h * 0.6f);
+
+        try (PDPageContentStream content =
+                new PDPageContentStream(
+                        document, stream, stream.getStream().createOutputStream())) {
+            content.setNonStrokingColor(background[0], background[1], background[2]);
+            content.addRect(0, 0, w, h);
+            content.fill();
+            content.setStrokingColor(border[0], border[1], border[2]);
+            content.setLineWidth(1f);
+            content.addRect(0.5f, 0.5f, w - 1f, h - 1f);
+            content.stroke();
+            if (caption != null && !caption.isBlank()) {
+                try {
+                    float textWidth = font.getStringWidth(caption) / 1000f * fontSize;
+                    content.beginText();
+                    content.setFont(font, fontSize);
+                    content.setNonStrokingColor(0f, 0f, 0f);
+                    content.newLineAtOffset(
+                            Math.max(2f, (w - textWidth) / 2f),
+                            (h - fontSize) / 2f + fontSize * 0.2f);
+                    content.showText(caption);
+                    content.endText();
+                } catch (Exception e) {
+                    // Unencodable caption: keep the frame, drop the text.
+                    log.debug("Could not draw button caption '{}': {}", caption, e.getMessage());
+                }
+            }
+        }
+
+        // Reuse the existing dictionary so an authored /D or /R is not collateral damage.
+        PDAppearanceDictionary appearance = widget.getAppearance();
+        if (appearance == null) {
+            appearance = new PDAppearanceDictionary();
+            widget.setAppearance(appearance);
+        }
+        appearance.setNormalAppearance(stream);
+        // A push button has no value, so no /AS.
+        widget.getCOSObject().removeItem(COSName.AS);
+    }
+
+    /** A /MK colour array as RGB, falling back to a grey level when absent or unsupported. */
+    private float[] mkColour(PDColor colour, float fallback) {
+        float[] rgb = {fallback, fallback, fallback};
+        if (colour == null) {
+            return rgb;
+        }
+        float[] components;
+        try {
+            components = colour.getComponents();
+        } catch (Exception e) {
+            log.debug("Unreadable /MK colour: {}", e.getMessage());
+            return rgb;
+        }
+        if (components.length == 3) {
+            rgb = components.clone();
+        } else if (components.length == 1) {
+            rgb = new float[] {components[0], components[0], components[0]};
+        } else if (components.length == 4) {
+            // CMYK to RGB, good enough for button chrome.
+            float k = components[3];
+            rgb =
+                    new float[] {
+                        (1 - components[0]) * (1 - k),
+                        (1 - components[1]) * (1 - k),
+                        (1 - components[2]) * (1 - k)
+                    };
+        }
+        // PDPageContentStream rejects anything outside 0..1, and a throw here loses the appearance.
+        for (int i = 0; i < rgb.length; i++) {
+            rgb[i] = Math.min(1f, Math.max(0f, rgb[i]));
+        }
+        return rgb;
+    }
+
+    /** A circle from four Bezier arcs; PDF has no primitive for one. */
+    private void drawCircle(PDPageContentStream content, float cx, float cy, float r)
+            throws IOException {
+        if (r <= 0) {
+            return;
+        }
+        float k = r * 0.5523f;
+        content.moveTo(cx - r, cy);
+        content.curveTo(cx - r, cy + k, cx - k, cy + r, cx, cy + r);
+        content.curveTo(cx + k, cy + r, cx + r, cy + k, cx + r, cy);
+        content.curveTo(cx + r, cy - k, cx + k, cy - r, cx, cy - r);
+        content.curveTo(cx - k, cy - r, cx - r, cy - k, cx - r, cy);
+        content.closePath();
+    }
+
+    /**
+     * One widget per option stacked below {@code baseRect}, each keyed by its sanitized export
+     * value so the group behaves as a single selectable field.
+     */
+    /**
+     * Per-option widget rects laid out INSIDE the drawn box, which is the group's total extent.
+     * Stacking outside it made a three-option group three times taller than what was drawn.
+     */
+    public static List<PDRectangle> radioOptionRects(
+            PDRectangle box, int count, Float gapOverride, Float sizeOverride) {
+        List<PDRectangle> rects = new ArrayList<>();
+        int n = Math.max(1, count);
+        float h = box.getHeight();
+        float slot = h / n;
+
+        float size;
+        if (sizeOverride != null && sizeOverride > 0f) {
+            size = sizeOverride;
+        } else if (gapOverride != null && gapOverride >= 0f) {
+            size = (h - (n - 1) * gapOverride) / n;
+        } else {
+            // A quarter of each slot is breathing room, so the stack fills the drawn height.
+            size = slot * 0.75f;
+        }
+        // Square keeps the circle round; a wide box becomes a left-aligned column.
+        size = Math.max(1f, Math.min(size, box.getWidth()));
+
+        float gap;
+        if (gapOverride != null && gapOverride >= 0f) {
+            gap = gapOverride;
+        } else {
+            gap = n > 1 ? Math.max(0f, (h - n * size) / (n - 1)) : 0f;
+        }
+
+        float top = box.getLowerLeftY() + h;
+        for (int i = 0; i < n; i++) {
+            float y = top - (i + 1) * size - i * gap;
+            rects.add(new PDRectangle(box.getLowerLeftX(), y, size, size));
+        }
+        return rects;
+    }
+
+    private void createRadioField(
+            PDAcroForm acroForm,
+            PDPage page,
+            PDRectangle baseRect,
+            String name,
+            NewFormFieldDefinition definition,
+            List<String> options)
+            throws IOException {
+
+        List<String> values = (options == null || options.isEmpty()) ? List.of("1", "2") : options;
+
+        PDRadioButton radio = new PDRadioButton(acroForm);
+        radio.setPartialName(name);
+        if (definition.label() != null && !definition.label().isBlank()) {
+            try {
+                radio.setAlternateFieldName(definition.label());
+            } catch (Exception ignore) {
+                // alternate name is best-effort
+            }
+        }
+        radio.setRequired(Boolean.TRUE.equals(definition.required()));
+        if (Boolean.TRUE.equals(definition.readOnly())) {
+            radio.setReadOnly(true);
+        }
+
+        List<PDRectangle> optionRects =
+                radioOptionRects(
+                        baseRect, values.size(), definition.optionGap(), definition.optionSize());
+
+        List<PDAnnotationWidget> widgets = new ArrayList<>();
+        List<String> exportValues = new ArrayList<>();
+        Set<String> usedStates = new HashSet<>();
+        for (int i = 0; i < values.size(); i++) {
+            String onState = sanitizeOnState(values.get(i), i, usedStates);
+            exportValues.add(onState);
+
+            PDRectangle rect = optionRects.get(i);
+
+            PDAnnotationWidget widget = new PDAnnotationWidget();
+            widget.setRectangle(rect);
+            widget.setPage(page);
+            widget.getCOSObject().setItem(COSName.P, page.getCOSObject());
+            widget.getCOSObject().setItem(COSName.TYPE, COSName.getPDFName("Annot"));
+            widget.getCOSObject().setItem(COSName.SUBTYPE, COSName.getPDFName("Widget"));
+            widget.setParent(radio);
+            // The widget's appearance state is "Off" until the group value selects it.
+            widget.getCOSObject().setName(COSName.AS, OFF_STATE);
+            widgets.add(widget);
+
+            List<PDAnnotation> annotations = page.getAnnotations();
+            if (annotations == null) {
+                annotations = new ArrayList<>();
+                page.setAnnotations(annotations);
+            }
+            annotations.add(widget);
+        }
+
+        radio.setWidgets(widgets);
+        try {
+            radio.setExportValues(exportValues);
+        } catch (Exception e) {
+            log.debug("Unable to set radio export values for '{}': {}", name, e.getMessage());
+        }
+
+        String defaultValue = definition.defaultValue();
+        if (defaultValue != null
+                && !defaultValue.isBlank()
+                && exportValues.contains(defaultValue)) {
+            try {
+                radio.setValue(defaultValue);
+            } catch (Exception e) {
+                log.debug("Unable to set radio default '{}': {}", defaultValue, e.getMessage());
+            }
+        }
+
+        acroForm.getFields().add(radio);
+    }
+
+    /** Builds a unique, PDF-name-safe "on" state for a radio widget. */
+    private String sanitizeOnState(String raw, int index, Set<String> used) {
+        String base =
+                Optional.ofNullable(raw)
+                        .map(String::trim)
+                        .filter(s -> !s.isEmpty())
+                        .map(FormUtils::sanitizePdfName)
+                        .orElse("Option" + (index + 1));
+        if (OFF_STATE.equalsIgnoreCase(base)) {
+            base = "Option" + (index + 1);
+        }
+        String candidate = base;
+        int suffix = 1;
+        while (!used.add(candidate)) {
+            candidate = base + "_" + suffix++;
+        }
+        return candidate;
+    }
+
+    /** Reduces a label to characters that are safe inside a PDF name. */
+    private static String sanitizePdfName(String raw) {
+        return raw == null ? "" : raw.trim().replaceAll("[^A-Za-z0-9_-]", "_");
+    }
+
+    /** Modify, then delete, then add, so generated names dedupe against the surviving set. */
+    public void applyFieldEdits(
+            PDDocument document,
+            List<NewFormFieldDefinition> adds,
+            List<ModifyFormFieldDefinition> modifies,
+            List<String> deletes)
+            throws IOException {
+        applyFieldEdits(document, adds, modifies, deletes, null);
+    }
+
+    /**
+     * As above, but records every operation that could not be applied into {@code skipped} so the
+     * caller can report "3 of 4" instead of a bare success.
+     */
+    public void applyFieldEdits(
+            PDDocument document,
+            List<NewFormFieldDefinition> adds,
+            List<ModifyFormFieldDefinition> modifies,
+            List<String> deletes,
+            List<SkippedFieldEdit> skipped)
+            throws IOException {
+        if (document == null) return;
+        if (modifies != null && !modifies.isEmpty()) {
+            modifyFormFields(document, modifies, skipped);
+        }
+        if (deletes != null && !deletes.isEmpty()) {
+            deleteFormFields(document, deletes, skipped);
+        }
+        if (adds != null && !adds.isEmpty()) {
+            addNewFields(document, adds, skipped);
+        }
+    }
+
+    /** Adds an entry to a skip list that may be absent, so call sites stay one-liners. */
+    private void recordSkip(
+            List<SkippedFieldEdit> skipped, String operation, String target, String reason) {
+        if (skipped != null) {
+            skipped.add(new SkippedFieldEdit(operation, target, reason));
+        }
+    }
+
     public void deleteFormFields(PDDocument document, List<String> fieldNames) {
+        deleteFormFields(document, fieldNames, null);
+    }
+
+    public void deleteFormFields(
+            PDDocument document, List<String> fieldNames, List<SkippedFieldEdit> skipped) {
         if (document == null || fieldNames == null || fieldNames.isEmpty()) return;
 
         PDAcroForm acroForm = getAcroFormSafely(document);
         if (acroForm == null) {
             log.warn("Cannot delete fields because the document has no AcroForm");
+            for (String name : fieldNames) {
+                recordSkip(skipped, "delete", name, "the document has no form to delete from");
+            }
             return;
         }
 
@@ -1847,6 +3053,7 @@ public class FormUtils {
             PDField field = locateField(acroForm, name.trim());
             if (field == null) {
                 log.warn("No matching field '{}' found for deletion", name);
+                recordSkip(skipped, "delete", name, "no field with that name exists");
                 continue;
             }
 
@@ -2138,17 +3345,122 @@ public class FormUtils {
             return Collections.emptySet();
         }
         Set<String> existing = new HashSet<>();
+        // Group (non-terminal) names occupy the namespace too, so a new field must not be
+        // allowed to take one; omitting them hides a whole class of collision.
         for (PDField field : acroForm.getFieldTree()) {
-            if (field instanceof PDTerminalField) {
-                String fqn = field.getFullyQualifiedName();
-                if (fqn != null && !fqn.isEmpty()) {
-                    existing.add(fqn);
-                }
+            String fqn = field.getFullyQualifiedName();
+            if (fqn != null && !fqn.isEmpty()) {
+                existing.add(fqn);
             }
         }
         return existing;
     }
 
+    /** A text field's /MaxLen, or null when unset so the editor shows an empty box. */
+    private Integer extractMaxLength(PDField field) {
+        if (field instanceof PDTextField textField) {
+            int maxLen = textField.getMaxLen();
+            return maxLen > 0 ? maxLen : null;
+        }
+        return null;
+    }
+
+    /** Reads a push button's action back into the same spec string the editor sends. */
+    private String extractButtonAction(PDField field) {
+        if (!(field instanceof PDPushButton)) {
+            return null;
+        }
+        for (PDAnnotationWidget widget : field.getWidgets()) {
+            COSBase raw = widget.getCOSObject().getDictionaryObject(COSName.A);
+            if (!(raw instanceof COSDictionary action)) {
+                continue;
+            }
+            String subtype = action.getNameAsString(COSName.S);
+            if ("ResetForm".equals(subtype)) {
+                return "reset";
+            }
+            if ("Named".equals(subtype)) {
+                return "Print".equalsIgnoreCase(action.getNameAsString(COSName.N)) ? "print" : null;
+            }
+            if ("URI".equals(subtype)) {
+                return "uri:" + Optional.ofNullable(action.getString(COSName.URI)).orElse("");
+            }
+            if ("SubmitForm".equals(subtype)) {
+                return "submit:" + Optional.ofNullable(action.getString(COSName.F)).orElse("");
+            }
+        }
+        return null;
+    }
+
+    /** The parent prefix of a qualified name, including the trailing dot, or "" if top level. */
+    private String parentPrefix(String qualifiedName) {
+        int dot = qualifiedName == null ? -1 : qualifiedName.lastIndexOf('.');
+        return dot < 0 ? "" : qualifiedName.substring(0, dot + 1);
+    }
+
+    /**
+     * The partial name a rename should set. Only a new name under the target's own parent may be
+     * qualified; anything else is used verbatim so it cannot silently re-parent the field.
+     */
+    private String leafName(String targetName, String newName) {
+        String prefix = parentPrefix(targetName);
+        return !prefix.isEmpty() && newName.startsWith(prefix)
+                ? newName.substring(prefix.length())
+                : newName;
+    }
+
+    /**
+     * Why the rename is impossible, or null. An unchanged name is not a rename, so a field nested
+     * under a parent is not rejected for the period in its qualified name.
+     */
+    public String renameProblem(String targetName, String newName) {
+        if (newName == null || newName.equals(targetName)) {
+            return null;
+        }
+        // A nested field's box shows "Parent.Child", so renaming the leaf under the same
+        // parent is legitimate; only the leaf has to be a storable partial name.
+        String trimmed = newName.trim();
+        String leaf = leafName(targetName, trimmed);
+        if (!trimmed.isEmpty() && leaf.isBlank()) {
+            return "Field name '" + newName + "' has no name after the parent prefix.";
+        }
+        return invalidFieldNameReason(leaf);
+    }
+
+    /**
+     * Why {@code name} is unusable as a field name, or null when it is fine. AcroForm reserves the
+     * period as the parent/child separator, so PDFBox rejects it outright in a partial name.
+     */
+    public String invalidFieldNameReason(String name) {
+        if (name == null || name.isBlank()) {
+            return null;
+        }
+        if (name.chars().anyMatch(Character::isISOControl)) {
+            // A line break in a name would also forge a second line in every log it reaches.
+            return "Field name cannot contain line breaks or control characters.";
+        }
+        if (name.indexOf('.') >= 0) {
+            return "Field name '"
+                    + sanitizeForLog(name)
+                    + "' cannot contain a period. PDF forms use '.' to separate a parent field"
+                    + " from its children.";
+        }
+        return null;
+    }
+
+    /**
+     * A caller-supplied string made safe to log. Without this a name containing CR/LF writes an
+     * extra, attacker-chosen line into the log file (CWE-117).
+     */
+    public static String sanitizeForLog(String value) {
+        if (value == null) {
+            return null;
+        }
+        StringBuilder out = new StringBuilder(value.length());
+        value.chars().forEach(c -> out.append(Character.isISOControl(c) ? ' ' : (char) c));
+        return out.toString();
+    }
+
     private PDField locateField(PDAcroForm acroForm, String name) {
         if (acroForm == null || name == null) {
             return null;
@@ -2185,20 +3497,26 @@ public class FormUtils {
     }
 
     private String generateUniqueFieldName(String baseName, Set<String> existingNames) {
-        String sanitized =
+        return generateUniqueFieldName(baseName, existingNames, "");
+    }
+
+    /**
+     * A partial name no sibling already uses. {@code qualifiedPrefix} is prepended only for the
+     * collision check, because {@code existingNames} holds fully qualified names.
+     */
+    private String generateUniqueFieldName(
+            String baseName, Set<String> existingNames, String qualifiedPrefix) {
+        // Trimmed, not sanitized: callers must reject bad names first via invalidFieldNameReason.
+        String trimmed =
                 Optional.ofNullable(baseName)
                         .map(String::trim)
                         .filter(s -> !s.isEmpty())
                         .orElse("field");
 
-        StringBuilder candidateBuilder = new StringBuilder(sanitized);
-        String candidate = candidateBuilder.toString();
+        String candidate = trimmed;
         int counter = 1;
-
-        while (existingNames.contains(candidate)) {
-            candidateBuilder.setLength(0);
-            candidateBuilder.append(sanitized).append("_").append(counter);
-            candidate = candidateBuilder.toString();
+        while (existingNames.contains(qualifiedPrefix + candidate)) {
+            candidate = trimmed + "_" + counter;
             counter++;
         }
 
@@ -2235,9 +3553,29 @@ public class FormUtils {
             }
         }
         field.setRequired(Boolean.TRUE.equals(definition.required()));
+        if (Boolean.TRUE.equals(definition.readOnly())) {
+            field.setReadOnly(true);
+        }
 
-        PDAnnotationWidget widget =
-                existingWidget != null ? existingWidget : new PDAnnotationWidget();
+        // A terminal field with no /Kids shares its dictionary with one merged widget.
+        // A separately built widget is not linked via /Kids, so its /Rect is lost on save.
+        boolean reuseFieldDict;
+        PDAnnotationWidget widget;
+        if (existingWidget != null) {
+            widget = existingWidget;
+            reuseFieldDict = false;
+        } else {
+            List<PDAnnotationWidget> current = field.getWidgets();
+            if (current != null && !current.isEmpty()) {
+                widget = current.get(0);
+            } else {
+                widget = new PDAnnotationWidget();
+            }
+            reuseFieldDict = widget.getCOSObject() == field.getCOSObject();
+            // Make sure the shared dictionary is recognised as a widget annotation.
+            widget.getCOSObject().setItem(COSName.TYPE, COSName.getPDFName("Annot"));
+            widget.getCOSObject().setItem(COSName.SUBTYPE, COSName.getPDFName("Widget"));
+        }
 
         // Ensure rectangle is valid and set before any appearance-related operations
         // please note removal of this might cause **subtle** issues
@@ -2250,10 +3588,10 @@ public class FormUtils {
         }
         widget.setRectangle(validRectangle);
         widget.setPage(page);
-
-        if (existingWidget == null) {
-            widget.setPrinted(true);
-        }
+        // Explicitly set the /P entry so the widget keeps a valid page reference
+        // after save/reload (some viewers rely on it to resolve the widget page).
+        widget.getCOSObject().setItem(COSName.P, page.getCOSObject());
+        widget.setPrinted(true);
 
         if (definition.tooltip() != null && !definition.tooltip().isBlank()) {
             widget.getCOSObject().setString(COSName.TU, definition.tooltip());
@@ -2265,13 +3603,25 @@ public class FormUtils {
             }
         }
 
-        field.getWidgets().add(widget);
-        widget.setParent(field);
+        // Only link a SEPARATE widget into the field; the merged widget IS the
+        // field dictionary and is already its own widget.
+        if (!reuseFieldDict) {
+            List<PDAnnotationWidget> widgets = new ArrayList<>(field.getWidgets());
+            if (!widgets.contains(widget)) {
+                widgets.add(widget);
+                field.setWidgets(widgets);
+            }
+            widget.setParent(field);
+        }
 
         List<PDAnnotation> annotations = page.getAnnotations();
         if (annotations == null) {
-            page.getAnnotations().add(widget);
-        } else if (!annotations.contains(widget)) {
+            // page.getAnnotations() can return null; calling it again and adding
+            // would NPE. Initialise the list and attach it to the page first.
+            annotations = new ArrayList<>();
+            page.setAnnotations(annotations);
+        }
+        if (!annotations.contains(widget)) {
             annotations.add(widget);
         }
         acroForm.getFields().add(field);
@@ -2399,7 +3749,60 @@ public class FormUtils {
             Boolean multiSelect,
             List<String> options,
             String defaultValue,
-            String tooltip) {}
+            String tooltip,
+            Float fontSize,
+            Boolean readOnly,
+            Boolean multiline,
+            Integer maxLength,
+            String buttonAction,
+            /** Gap between radio options in points; derived from the drawn box when null. */
+            Float optionGap,
+            /** Radio option size in points; derived from the drawn box when null. */
+            Float optionSize) {
+
+        /** The shape before option layout was tunable; both extras default to derived. */
+        public NewFormFieldDefinition(
+                String name,
+                String label,
+                String type,
+                Integer pageIndex,
+                Float x,
+                Float y,
+                Float width,
+                Float height,
+                Boolean required,
+                Boolean multiSelect,
+                List<String> options,
+                String defaultValue,
+                String tooltip,
+                Float fontSize,
+                Boolean readOnly,
+                Boolean multiline,
+                Integer maxLength,
+                String buttonAction) {
+            this(
+                    name,
+                    label,
+                    type,
+                    pageIndex,
+                    x,
+                    y,
+                    width,
+                    height,
+                    required,
+                    multiSelect,
+                    options,
+                    defaultValue,
+                    tooltip,
+                    fontSize,
+                    readOnly,
+                    multiline,
+                    maxLength,
+                    buttonAction,
+                    null,
+                    null);
+        }
+    }
 
     @JsonInclude(JsonInclude.Include.NON_NULL)
     public record ModifyFormFieldDefinition(
@@ -2407,11 +3810,120 @@ public class FormUtils {
             String name,
             String label,
             String type,
+            Integer pageIndex,
+            Float x,
+            Float y,
+            Float width,
+            Float height,
             Boolean required,
             Boolean multiSelect,
             List<String> options,
             String defaultValue,
-            String tooltip) {}
+            String tooltip,
+            Float fontSize,
+            Boolean readOnly,
+            Boolean multiline,
+            Integer maxLength,
+            String buttonAction,
+            /** Gap between radio options in points; leaves the existing layout alone when null. */
+            Float optionGap,
+            /** Radio option size in points; leaves the existing layout alone when null. */
+            Float optionSize) {
+
+        /** The shape before option layout was tunable; both extras default to unchanged. */
+        public ModifyFormFieldDefinition(
+                String targetName,
+                String name,
+                String label,
+                String type,
+                Integer pageIndex,
+                Float x,
+                Float y,
+                Float width,
+                Float height,
+                Boolean required,
+                Boolean multiSelect,
+                List<String> options,
+                String defaultValue,
+                String tooltip,
+                Float fontSize,
+                Boolean readOnly,
+                Boolean multiline,
+                Integer maxLength,
+                String buttonAction) {
+            this(
+                    targetName,
+                    name,
+                    label,
+                    type,
+                    pageIndex,
+                    x,
+                    y,
+                    width,
+                    height,
+                    required,
+                    multiSelect,
+                    options,
+                    defaultValue,
+                    tooltip,
+                    fontSize,
+                    readOnly,
+                    multiline,
+                    maxLength,
+                    buttonAction,
+                    null,
+                    null);
+        }
+    }
+
+    /** A mixed batch of field edits applied in one request via {@link #applyFieldEdits}. */
+    @JsonInclude(JsonInclude.Include.NON_NULL)
+    public record FieldEditBatch(
+            List<NewFormFieldDefinition> add,
+            List<ModifyFormFieldDefinition> modify,
+            List<String> delete) {}
+
+    /**
+     * One requested edit the document could not take, so the caller can report "3 of 4" rather than
+     * a bare success. {@code operation} is "add", "modify" or "delete".
+     */
+    @JsonInclude(JsonInclude.Include.NON_NULL)
+    /**
+     * Turns a library failure into something a person can act on. Raw messages like "/DR is a
+     * required entry" name PDF internals the user has never heard of.
+     */
+    public static String readableFailure(Throwable failure) {
+        String raw = failure == null ? null : failure.getMessage();
+        if (raw == null || raw.isBlank()) {
+            return "this PDF would not accept the change";
+        }
+        String lower = raw.toLowerCase(java.util.Locale.ROOT);
+        if (lower.contains("/dr") || lower.contains("default resources")) {
+            return "this PDF's form has no font settings, so the field could not be styled";
+        }
+        if (lower.contains("font") && lower.contains("not")) {
+            return "the font this field asks for is not embedded in the PDF";
+        }
+        if (lower.contains("encrypt") || lower.contains("password")) {
+            return "the PDF is protected, so its form cannot be changed";
+        }
+        if (lower.contains("read-only") || lower.contains("readonly")) {
+            return "the field is read-only in this PDF";
+        }
+        // Anything unrecognised stays vague rather than leaking internals at the user.
+        log.debug("Unmapped form edit failure: {}", raw);
+        return "this PDF would not accept the change";
+    }
+
+    /** Skip reasons travel in a response header, so an echoed value cannot be unbounded. */
+    public static String abbreviate(String value, int max) {
+        if (value == null || value.length() <= max) {
+            return value;
+        }
+        return value.substring(0, max) + "...";
+    }
+
+    public record SkippedFieldEdit(String operation, String target, String reason) {}
 
     @JsonInclude(JsonInclude.Include.NON_NULL)
     public record FormFieldInfo(
@@ -2433,19 +3945,25 @@ public class FormUtils {
     static final class FieldCoordinateComparator implements Comparator<FormFieldWithCoordinates> {
 
         private static int firstWidgetPageIndex(FormFieldWithCoordinates f) {
-            return (f.getWidgets() != null && !f.getWidgets().isEmpty())
+            return (f.getWidgets() != null
+                            && !f.getWidgets().isEmpty()
+                            && f.getWidgets().getFirst() != null)
                     ? f.getWidgets().getFirst().getPageIndex()
                     : -1;
         }
 
         private static float firstWidgetY(FormFieldWithCoordinates f) {
-            return (f.getWidgets() != null && !f.getWidgets().isEmpty())
+            return (f.getWidgets() != null
+                            && !f.getWidgets().isEmpty()
+                            && f.getWidgets().getFirst() != null)
                     ? f.getWidgets().getFirst().getY()
                     : 0;
         }
 
         private static float firstWidgetX(FormFieldWithCoordinates f) {
-            return (f.getWidgets() != null && !f.getWidgets().isEmpty())
+            return (f.getWidgets() != null
+                            && !f.getWidgets().isEmpty()
+                            && f.getWidgets().getFirst() != null)
                     ? f.getWidgets().getFirst().getX()
                     : 0;
         }
diff --git a/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java b/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java
index 52f79f733a..1d7320ca84 100644
--- a/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java
+++ b/app/common/src/main/java/stirling/software/common/util/GeneralUtils.java
@@ -12,6 +12,7 @@ import java.nio.file.*;
 import java.nio.file.attribute.BasicFileAttributes;
 import java.security.MessageDigest;
 import java.util.*;
+import java.util.concurrent.ConcurrentHashMap;
 import java.util.regex.Matcher;
 import java.util.regex.Pattern;
 
@@ -54,6 +55,10 @@ public class GeneralUtils {
 
     private final String DEFAULT_WEBUI_CONFIGS_DIR = "defaultWebUIConfigs";
     private final String PYTHON_SCRIPTS_DIR = "python";
+
+    // Extracted once per run. Rewriting a script while another request is exec-ing it
+    // races wherever rename is not atomic, such as 9p or NFS bind mounts.
+    private final Map<String, Path> EXTRACTED_SCRIPTS = new ConcurrentHashMap<>();
     private final RegexPatternUtils patternCache = RegexPatternUtils.getInstance();
     // Valid size units used for convertSizeToBytes validation and parsing
     private final Set<String> VALID_SIZE_UNITS = Set.of("B", "KB", "MB", "GB", "TB");
@@ -1025,17 +1030,30 @@ public class GeneralUtils {
         }
 
         Path scriptsDir = Path.of(InstallationPathConfig.getScriptsPath(), PYTHON_SCRIPTS_DIR);
-        Files.createDirectories(scriptsDir);
-
         Path target = scriptsDir.resolve(scriptName);
-        ClassPathResource res =
-                new ClassPathResource("static/" + PYTHON_SCRIPTS_DIR + "/" + scriptName);
-        if (!res.exists()) {
-            log.error("Resource not found: {}", res.getPath());
-            throw new IOException("Resource not found: " + res.getPath());
+
+        Path cached = EXTRACTED_SCRIPTS.get(scriptName);
+        if (cached != null && Files.isRegularFile(cached)) {
+            return cached;
+        }
+
+        synchronized (EXTRACTED_SCRIPTS) {
+            cached = EXTRACTED_SCRIPTS.get(scriptName);
+            if (cached != null && Files.isRegularFile(cached)) {
+                return cached;
+            }
+
+            Files.createDirectories(scriptsDir);
+            ClassPathResource res =
+                    new ClassPathResource("static/" + PYTHON_SCRIPTS_DIR + "/" + scriptName);
+            if (!res.exists()) {
+                log.error("Resource not found: {}", res.getPath());
+                throw new IOException("Resource not found: " + res.getPath());
+            }
+            copyResourceToFile(res, target);
+            EXTRACTED_SCRIPTS.put(scriptName, target);
+            return target;
         }
-        copyResourceToFile(res, target);
-        return target;
     }
 
     /*
diff --git a/app/common/src/main/java/stirling/software/common/util/RequestUriUtils.java b/app/common/src/main/java/stirling/software/common/util/RequestUriUtils.java
index f85880df5d..bfd3f53c67 100644
--- a/app/common/src/main/java/stirling/software/common/util/RequestUriUtils.java
+++ b/app/common/src/main/java/stirling/software/common/util/RequestUriUtils.java
@@ -4,7 +4,14 @@ import java.util.regex.Pattern;
 
 public class RequestUriUtils {
 
-    private static final Pattern SHARE_LINK_PATTERN = Pattern.compile("^/share/[^/]+/?$");
+    // Share tokens are 36-char lowercase UUIDs (UUID.randomUUID().toString()); match exactly
+    private static final Pattern SHARE_LINK_PATTERN =
+            Pattern.compile(
+                    "^/share/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/?$");
+    // Invite tokens are 36-char lowercase UUIDs (UUID.randomUUID().toString()); match exactly
+    private static final Pattern INVITE_LINK_PATTERN =
+            Pattern.compile(
+                    "^/invite/[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}/?$");
 
     public static boolean isStaticResource(String requestURI) {
         return isStaticResource("", requestURI);
@@ -69,7 +76,7 @@ public class RequestUriUtils {
         // cookie, so the server can't authenticate the navigation itself). The
         // portal gates access via its own auth gate + RequirePortalAccess, and its
         // data APIs stay protected, so serving the shell pre-auth is safe.
-        if (normalizedUri.equals("/processor") || normalizedUri.startsWith("/processor/")) {
+        if ("/processor".equals(normalizedUri) || normalizedUri.startsWith("/processor/")) {
             return true;
         }
 
@@ -209,7 +216,9 @@ public class RequestUriUtils {
                 // Workflow participant endpoints - access controlled by share tokens, not login
                 || trimmedUri.startsWith("/api/v1/workflow/participant/")
                 // Share-link SPA bootstrap; data APIs remain protected
-                || SHARE_LINK_PATTERN.matcher(trimmedUri).matches();
+                || SHARE_LINK_PATTERN.matcher(trimmedUri).matches()
+                // Invite-accept SPA bootstrap; data APIs remain protected
+                || INVITE_LINK_PATTERN.matcher(trimmedUri).matches();
     }
 
     private static String stripContextPath(String contextPath, String requestURI) {
diff --git a/app/common/src/test/java/stirling/software/SPDF/config/EndpointConfigurationGapTest.java b/app/common/src/test/java/stirling/software/SPDF/config/EndpointConfigurationGapTest.java
index 6275b49343..afc6fa7020 100644
--- a/app/common/src/test/java/stirling/software/SPDF/config/EndpointConfigurationGapTest.java
+++ b/app/common/src/test/java/stirling/software/SPDF/config/EndpointConfigurationGapTest.java
@@ -17,6 +17,7 @@ import org.junit.jupiter.api.Test;
 import stirling.software.SPDF.config.EndpointConfiguration.DisableReason;
 import stirling.software.SPDF.config.EndpointConfiguration.EndpointAvailability;
 import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.PdfaLevelAServiceInterface;
 
 /**
  * Unit tests for {@link EndpointConfiguration}. The class wires up its endpoint/group registry in
@@ -32,7 +33,14 @@ class EndpointConfigurationGapTest {
      * Construct an EndpointConfiguration with the given pro flag and current applicationProperties.
      */
     private EndpointConfiguration build(boolean runningProOrHigher) {
-        return new EndpointConfiguration(applicationProperties, runningProOrHigher);
+        return build(runningProOrHigher, null);
+    }
+
+    /** The PDF/UA service is only present in proprietary builds, so it is injected separately. */
+    private EndpointConfiguration build(
+            boolean runningProOrHigher, PdfaLevelAServiceInterface pdfaLevelAService) {
+        return new EndpointConfiguration(
+                applicationProperties, runningProOrHigher, pdfaLevelAService);
     }
 
     /** Default config: not pro, no removals, url-to-pdf disabled (default System flag is false). */
@@ -177,6 +185,28 @@ class EndpointConfigurationGapTest {
         }
     }
 
+    @Nested
+    @DisplayName("PDF/UA availability")
+    class PdfUaTests {
+
+        @Test
+        @DisplayName("the PDF/UA endpoints are off when the proprietary tagger is absent")
+        void disabledWithoutTagger() {
+            EndpointConfiguration config = build(false, null);
+            assertFalse(config.isEndpointEnabled("pdf-to-ua"));
+            assertFalse(config.isEndpointEnabled("accessibility-report"));
+        }
+
+        @Test
+        @DisplayName("they are on once the tagger is on the classpath")
+        void enabledWithTagger() {
+            EndpointConfiguration config =
+                    build(false, (pdfBytes, part, language, title, alsoDeclareUa) -> null);
+            assertTrue(config.isEndpointEnabled("pdf-to-ua"));
+            assertTrue(config.isEndpointEnabled("accessibility-report"));
+        }
+    }
+
     @Nested
     @DisplayName("group enable / disable")
     class GroupTests {
diff --git a/app/common/src/test/java/stirling/software/common/service/FileStorageOwnershipTest.java b/app/common/src/test/java/stirling/software/common/service/FileStorageOwnershipTest.java
index 861efa8509..9bf78b6af3 100644
--- a/app/common/src/test/java/stirling/software/common/service/FileStorageOwnershipTest.java
+++ b/app/common/src/test/java/stirling/software/common/service/FileStorageOwnershipTest.java
@@ -2,6 +2,7 @@ package stirling.software.common.service;
 
 import static org.junit.jupiter.api.Assertions.assertArrayEquals;
 import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
 import static org.mockito.Mockito.mock;
 import static org.mockito.Mockito.when;
 
@@ -65,6 +66,24 @@ class FileStorageOwnershipTest {
         assertThrows(SecurityException.class, () -> fs.deleteFile(id));
     }
 
+    @Test
+    void systemDeleteOfAnotherUsersFile_allowed_soJobCleanupDoesNotOrphanIt(@TempDir Path tempDir)
+            throws IOException {
+        // An admin sweeping every user's finished jobs is not the owner of their files. The
+        // ownership-checked delete throws there, which used to drop the job record and leave the
+        // files stranded on disk with nothing left able to reference them.
+        AtomicReference<String> user = new AtomicReference<>("alice");
+        FileStorage fs = newStorageWithCurrentUser(tempDir, user);
+        String id = fs.storeBytes("alice's file".getBytes(), "x.bin");
+        user.set("admin");
+
+        assertThrows(SecurityException.class, () -> fs.deleteFile(id));
+        assertTrue(fs.deleteFileAsSystem(id), "System delete must not be blocked by ownership");
+
+        user.set("alice");
+        assertThrows(IOException.class, () -> fs.retrieveBytes(id), "File should really be gone");
+    }
+
     @Test
     void anonymousRetrieveOfOwnedFile_allowed_noCurrentUserMeansNoCompare(@TempDir Path tempDir)
             throws IOException {
diff --git a/app/common/src/test/java/stirling/software/common/service/TaskManagerCleanupTest.java b/app/common/src/test/java/stirling/software/common/service/TaskManagerCleanupTest.java
new file mode 100644
index 0000000000..050004dc1f
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/service/TaskManagerCleanupTest.java
@@ -0,0 +1,263 @@
+package stirling.software.common.service;
+
+import static org.junit.jupiter.api.Assertions.*;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.Mockito.*;
+
+import java.time.LocalDateTime;
+import java.util.List;
+import java.util.Map;
+
+import org.junit.jupiter.api.AfterEach;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.MockitoAnnotations;
+import org.springframework.http.MediaType;
+import org.springframework.test.util.ReflectionTestUtils;
+
+import stirling.software.common.cluster.ClusterBackplane;
+import stirling.software.common.cluster.JobStore;
+import stirling.software.common.model.job.JobResult;
+import stirling.software.common.model.job.ResultFile;
+
+/**
+ * Covers the on-demand cleanup path and the input-copy tracking that makes it complete. An async
+ * submit persists a copy of the upload as well as its results; before both were tracked, only the
+ * results were ever deleted and the input copy stayed on disk indefinitely.
+ */
+class TaskManagerCleanupTest {
+
+    @Mock private FileStorage fileStorage;
+    @Mock private JobStore jobStore;
+    @Mock private ClusterBackplane clusterBackplane;
+
+    @InjectMocks private TaskManager taskManager;
+
+    private AutoCloseable closeable;
+
+    @BeforeEach
+    void setUp() {
+        closeable = MockitoAnnotations.openMocks(this);
+        lenient().when(clusterBackplane.localNodeId()).thenReturn("test-node");
+        lenient().when(clusterBackplane.shouldRunLocalCleanup()).thenReturn(true);
+        lenient().when(fileStorage.deleteFileAsSystem(anyString())).thenReturn(true);
+        ReflectionTestUtils.setField(taskManager, "jobResultExpiryMinutes", 30);
+        ReflectionTestUtils.setField(taskManager, "pendingJobExpiryMinutes", 1440);
+    }
+
+    @AfterEach
+    void tearDown() throws Exception {
+        closeable.close();
+    }
+
+    @SuppressWarnings("unchecked")
+    private Map<String, JobResult> jobResults() {
+        return (Map<String, JobResult>) ReflectionTestUtils.getField(taskManager, "jobResults");
+    }
+
+    /** Complete a job with a single result file, as an async file-producing job would. */
+    private void completeWithFile(String jobId, String fileId) {
+        taskManager.setFileResult(jobId, fileId, "out.pdf", MediaType.APPLICATION_PDF_VALUE);
+        taskManager.setComplete(jobId);
+    }
+
+    @Test
+    void forcedCleanupRemovesFinishedJobsRegardlessOfAge() {
+        String jobId = "fresh-job";
+        taskManager.createTask(jobId);
+        completeWithFile(jobId, "result-file");
+
+        // The scheduled sweep leaves it alone: it completed well inside the retention window.
+        taskManager.cleanupOldJobs();
+        assertTrue(jobResults().containsKey(jobId), "Scheduled cleanup should respect the expiry");
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(1, summary.jobsRemoved());
+        assertEquals(1, summary.filesDeleted());
+        assertEquals(0, summary.jobsRetained());
+        assertFalse(jobResults().containsKey(jobId));
+        verify(fileStorage).deleteFileAsSystem("result-file");
+        verify(jobStore).delete(jobId);
+    }
+
+    @Test
+    void forcedCleanupDeletesThePersistedInputCopy() {
+        String jobId = "job-with-input";
+        taskManager.createTask(jobId);
+        assertTrue(taskManager.registerInputFile(jobId, "input-file"));
+        completeWithFile(jobId, "result-file");
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(1, summary.jobsRemoved());
+        assertEquals(2, summary.filesDeleted(), "Both the result and the input copy must go");
+        verify(fileStorage).deleteFileAsSystem("result-file");
+        verify(fileStorage).deleteFileAsSystem("input-file");
+    }
+
+    @Test
+    void scheduledCleanupAlsoDeletesThePersistedInputCopy() {
+        String jobId = "expired-job";
+        taskManager.createTask(jobId);
+        taskManager.registerInputFile(jobId, "input-file");
+        completeWithFile(jobId, "result-file");
+
+        JobResult result = taskManager.getJobResult(jobId);
+        ReflectionTestUtils.setField(result, "completedAt", LocalDateTime.now().minusHours(1));
+
+        taskManager.cleanupOldJobs();
+
+        assertFalse(jobResults().containsKey(jobId));
+        verify(fileStorage).deleteFileAsSystem("result-file");
+        verify(fileStorage).deleteFileAsSystem("input-file");
+    }
+
+    @Test
+    void forcedCleanupLeavesRunningJobsAlone() {
+        String running = "running-job";
+        taskManager.createTask(running);
+        taskManager.registerInputFile(running, "in-flight-input");
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(0, summary.jobsRemoved());
+        assertEquals(0, summary.filesDeleted());
+        assertEquals(1, summary.jobsRetained());
+        assertTrue(jobResults().containsKey(running));
+        // Deleting a running job's input mid-flight would break it.
+        verify(fileStorage, never()).deleteFileAsSystem(anyString());
+    }
+
+    @Test
+    void forcedCleanupSkipsJobsTheFilterRejects() {
+        taskManager.createTask("alice:job");
+        completeWithFile("alice:job", "alice-file");
+        taskManager.createTask("bob:job");
+        completeWithFile("bob:job", "bob-file");
+
+        TaskManager.CleanupSummary summary =
+                taskManager.cleanupFinishedJobsNow(id -> id.startsWith("alice:"));
+
+        assertEquals(1, summary.jobsRemoved());
+        assertEquals(1, summary.jobsRetained());
+        assertFalse(jobResults().containsKey("alice:job"));
+        assertTrue(jobResults().containsKey("bob:job"), "Another user's job must survive");
+        verify(fileStorage).deleteFileAsSystem("alice-file");
+        verify(fileStorage, never()).deleteFileAsSystem("bob-file");
+    }
+
+    @Test
+    void forcedCleanupIsIdempotent() {
+        String jobId = "job-to-clean";
+        taskManager.createTask(jobId);
+        taskManager.registerInputFile(jobId, "input-file");
+        completeWithFile(jobId, "result-file");
+
+        taskManager.cleanupFinishedJobsNow(id -> true);
+        TaskManager.CleanupSummary second = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(0, second.jobsRemoved());
+        assertEquals(0, second.filesDeleted());
+    }
+
+    @Test
+    void forcedCleanupRunsEvenWhenTheBackplaneOwnsScheduledExpiry() {
+        // The scheduled sweep defers to the backplane TTL in cluster mode, but an explicit
+        // request to release this node's storage still has to do something.
+        when(clusterBackplane.shouldRunLocalCleanup()).thenReturn(false);
+        String jobId = "clustered-job";
+        taskManager.createTask(jobId);
+        completeWithFile(jobId, "result-file");
+
+        taskManager.cleanupOldJobs();
+        assertTrue(jobResults().containsKey(jobId));
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(1, summary.jobsRemoved());
+        assertFalse(jobResults().containsKey(jobId));
+    }
+
+    @Test
+    void cleanupCountsOnlyFilesThatWereActuallyDeleted() {
+        // A file already gone (a retry deleted it, say) must not be counted as freed.
+        String jobId = "partially-cleaned";
+        taskManager.createTask(jobId);
+        taskManager.registerInputFile(jobId, "already-gone");
+        completeWithFile(jobId, "result-file");
+        when(fileStorage.deleteFileAsSystem("already-gone")).thenReturn(false);
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(1, summary.filesDeleted());
+    }
+
+    @Test
+    void cleanupSurvivesAFileStorageFailure() {
+        String jobId = "job-with-unhappy-storage";
+        taskManager.createTask(jobId);
+        taskManager.registerInputFile(jobId, "input-file");
+        completeWithFile(jobId, "result-file");
+        when(fileStorage.deleteFileAsSystem("result-file"))
+                .thenThrow(new RuntimeException("disk on fire"));
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        // The job is still released and the remaining file still deleted.
+        assertEquals(1, summary.jobsRemoved());
+        assertEquals(1, summary.filesDeleted());
+        assertFalse(jobResults().containsKey(jobId));
+        verify(fileStorage).deleteFileAsSystem("input-file");
+    }
+
+    @Test
+    void registerInputFileRejectsAnUnknownJob() {
+        assertFalse(taskManager.registerInputFile("no-such-job", "input-file"));
+    }
+
+    @Test
+    void registerInputFileIgnoresDuplicatesAndBlanks() {
+        String jobId = "dedupe-job";
+        taskManager.createTask(jobId);
+        taskManager.registerInputFile(jobId, "input-file");
+        taskManager.registerInputFile(jobId, "input-file");
+        taskManager.registerInputFile(jobId, "  ");
+        taskManager.registerInputFile(jobId, null);
+
+        List<String> inputFileIds = taskManager.getJobResult(jobId).getInputFileIds();
+
+        assertEquals(List.of("input-file"), inputFileIds);
+    }
+
+    @Test
+    void multiFileResultsAndTheInputCopyAreAllDeleted() {
+        String jobId = "split-job";
+        taskManager.createTask(jobId);
+        taskManager.registerInputFile(jobId, "input-file");
+        JobResult result = taskManager.getJobResult(jobId);
+        result.completeWithFiles(
+                List.of(
+                        ResultFile.builder()
+                                .fileId("page-1")
+                                .fileName("1.pdf")
+                                .contentType(MediaType.APPLICATION_PDF_VALUE)
+                                .fileSize(10L)
+                                .build(),
+                        ResultFile.builder()
+                                .fileId("page-2")
+                                .fileName("2.pdf")
+                                .contentType(MediaType.APPLICATION_PDF_VALUE)
+                                .fileSize(10L)
+                                .build()));
+
+        TaskManager.CleanupSummary summary = taskManager.cleanupFinishedJobsNow(id -> true);
+
+        assertEquals(3, summary.filesDeleted());
+        verify(fileStorage).deleteFileAsSystem("page-1");
+        verify(fileStorage).deleteFileAsSystem("page-2");
+        verify(fileStorage).deleteFileAsSystem("input-file");
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/service/TaskManagerMoreTest.java b/app/common/src/test/java/stirling/software/common/service/TaskManagerMoreTest.java
index 0a02039ab3..1871e31a3f 100644
--- a/app/common/src/test/java/stirling/software/common/service/TaskManagerMoreTest.java
+++ b/app/common/src/test/java/stirling/software/common/service/TaskManagerMoreTest.java
@@ -290,7 +290,8 @@ class TaskManagerMoreTest {
             ReflectionTestUtils.setField(job, "complete", true);
             ReflectionTestUtils.setField(job, "completedAt", LocalDateTime.now().minusHours(2));
 
-            when(fileStorage.deleteFile("doomed")).thenThrow(new RuntimeException("locked"));
+            when(fileStorage.deleteFileAsSystem("doomed"))
+                    .thenThrow(new RuntimeException("locked"));
 
             // Must not propagate; the job is still removed afterwards.
             taskManager.cleanupOldJobs();
diff --git a/app/common/src/test/java/stirling/software/common/service/TaskManagerTest.java b/app/common/src/test/java/stirling/software/common/service/TaskManagerTest.java
index 9d880d3451..cb423d977c 100644
--- a/app/common/src/test/java/stirling/software/common/service/TaskManagerTest.java
+++ b/app/common/src/test/java/stirling/software/common/service/TaskManagerTest.java
@@ -258,7 +258,7 @@ class TaskManagerTest {
                         .build();
         ReflectionTestUtils.setField(oldJob, "resultFiles", java.util.List.of(resultFile));
 
-        when(fileStorage.deleteFile("file-id")).thenReturn(true);
+        when(fileStorage.deleteFileAsSystem("file-id")).thenReturn(true);
 
         // Obtain access to the private jobResults map
         Map<String, JobResult> jobResultsMap =
@@ -281,7 +281,7 @@ class TaskManagerTest {
         assertFalse(jobResultsMap.containsKey(oldJobId));
         assertTrue(jobResultsMap.containsKey(recentJobId));
         assertTrue(jobResultsMap.containsKey(activeJobId));
-        verify(fileStorage).deleteFile("file-id");
+        verify(fileStorage).deleteFileAsSystem("file-id");
     }
 
     @Test
@@ -308,7 +308,7 @@ class TaskManagerTest {
         // Assert: nothing was removed locally, and no jobStore.delete was issued.
         assertTrue(jobResultsMap.containsKey(oldJobId));
         verify(jobStore, never()).delete(anyString());
-        verify(fileStorage, never()).deleteFile(anyString());
+        verify(fileStorage, never()).deleteFileAsSystem(anyString());
     }
 
     @Test
diff --git a/app/common/src/test/java/stirling/software/common/util/ChoiceOptionRoundTripTest.java b/app/common/src/test/java/stirling/software/common/util/ChoiceOptionRoundTripTest.java
new file mode 100644
index 0000000000..b5312576e4
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/ChoiceOptionRoundTripTest.java
@@ -0,0 +1,116 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSArray;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.cos.COSObject;
+import org.apache.pdfbox.cos.COSObjectKey;
+import org.apache.pdfbox.cos.COSString;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.digitalsignature.PDSignature;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDComboBox;
+import org.apache.pdfbox.pdmodel.interactive.form.PDSignatureField;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** Pins how a choice field's options survive a save, which real forms rely on. */
+class ChoiceOptionRoundTripTest {
+
+    private static PDComboBox combo(PDDocument document, List<String> options) throws IOException {
+        document.addPage(new PDPage(PDRectangle.A4));
+        PDAcroForm form = new PDAcroForm(document);
+        document.getDocumentCatalog().setAcroForm(form);
+        PDComboBox field = new PDComboBox(form);
+        field.setPartialName("state");
+        field.setOptions(options);
+        form.getFields().add(field);
+        return field;
+    }
+
+    @Test
+    @DisplayName("a whitespace-only option survives a load, save and reload")
+    void whitespaceOptionSurvivesRoundTrip() throws IOException {
+        List<String> options = List.of(" ", "Alabama", "Alaska");
+
+        byte[] first;
+        try (PDDocument document = new PDDocument();
+                ByteArrayOutputStream out = new ByteArrayOutputStream()) {
+            combo(document, options);
+            document.save(out);
+            first = out.toByteArray();
+        }
+        // The real path edits a document loaded from bytes, not one built in memory.
+        byte[] saved;
+        try (PDDocument loaded = Loader.loadPDF(first);
+                ByteArrayOutputStream out = new ByteArrayOutputStream()) {
+            loaded.save(out);
+            saved = out.toByteArray();
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDComboBox reread =
+                    (PDComboBox) reloaded.getDocumentCatalog().getAcroForm(null).getField("state");
+            assertEquals(
+                    options,
+                    reread.getOptionsExportValues(),
+                    "an option must not vanish because the writer made it indirect");
+        }
+    }
+
+    @Test
+    @DisplayName("an option stored as an indirect reference is still reported")
+    void indirectOptionIsStillReported() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDComboBox field = combo(document, List.of(" ", "Alabama"));
+
+            // Real forms reference option strings indirectly; the reader must follow the reference.
+            COSArray options = new COSArray();
+            options.add(new COSObject(new COSString(" "), new COSObjectKey(629, 0)));
+            options.add(new COSString("Alabama"));
+            field.getCOSObject().setItem(COSName.OPT, options);
+
+            // Every read path runs this repair first, which is where the reference is followed.
+            FormUtils.repairMissingWidgetPageReferences(document);
+
+            assertEquals(
+                    List.of(" ", "Alabama"),
+                    field.getOptionsExportValues(),
+                    "an indirectly stored option must not be dropped");
+        }
+    }
+
+    @Test
+    @DisplayName("a signature field reports no value rather than a JVM identity hash")
+    void signatureValueIsNotAnIdentityHash() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage(PDRectangle.A4));
+            PDAcroForm form = new PDAcroForm(document);
+            document.getDocumentCatalog().setAcroForm(form);
+            PDSignatureField signature = new PDSignatureField(form);
+            signature.setPartialName("approval");
+            // Only a field that actually holds a signature hits getValueAsString's toString().
+            signature.setValue(new PDSignature());
+            form.getFields().add(signature);
+
+            List<FormUtils.FormFieldInfo> fields = FormUtils.extractFormFields(document);
+
+            FormUtils.FormFieldInfo field =
+                    fields.stream()
+                            .filter(f -> "approval".equals(f.name()))
+                            .findFirst()
+                            .orElseThrow();
+            // An identity hash differs per load, so the same document would describe itself twice.
+            assertNull(field.value(), "a signature has no text value");
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/DeepFieldTreeTest.java b/app/common/src/test/java/stirling/software/common/util/DeepFieldTreeTest.java
new file mode 100644
index 0000000000..4c28952ff0
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/DeepFieldTreeTest.java
@@ -0,0 +1,62 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSArray;
+import org.apache.pdfbox.cos.COSDictionary;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** A hostile or corrupt form must fail as a rejected request, never as a crashed thread. */
+class DeepFieldTreeTest {
+
+    private static byte[] chainOfKids(int depth) throws IOException {
+        try (PDDocument document = new PDDocument();
+                ByteArrayOutputStream out = new ByteArrayOutputStream()) {
+            document.addPage(new PDPage(PDRectangle.A4));
+            PDAcroForm form = new PDAcroForm(document);
+            document.getDocumentCatalog().setAcroForm(form);
+
+            COSDictionary root = new COSDictionary();
+            root.setString(COSName.T, "n0");
+            COSDictionary cursor = root;
+            for (int i = 1; i < depth; i++) {
+                COSDictionary kid = new COSDictionary();
+                kid.setString(COSName.T, "n" + i);
+                kid.setItem(COSName.PARENT, cursor);
+                COSArray kids = new COSArray();
+                kids.add(kid);
+                cursor.setItem(COSName.KIDS, kids);
+                cursor = kid;
+            }
+            cursor.setItem(COSName.FT, COSName.getPDFName("Tx"));
+
+            COSArray fields = new COSArray();
+            fields.add(root);
+            form.getCOSObject().setItem(COSName.FIELDS, fields);
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    @Test
+    @DisplayName("a deeply nested field tree extracts without overflowing the stack")
+    void deepKidsChainDoesNotOverflow() throws IOException {
+        // 2000 is as deep as PDFBox's own writer can build here; beyond that the overflow is in
+        // the writer, not in extraction, so it is not something a read endpoint would hit.
+        byte[] pdf = chainOfKids(2000);
+
+        try (PDDocument document = Loader.loadPDF(pdf)) {
+            assertDoesNotThrow(() -> FormUtils.extractFormFieldsWithCoordinates(document));
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormEditSafetyTest.java b/app/common/src/test/java/stirling/software/common/util/FormEditSafetyTest.java
new file mode 100644
index 0000000000..1f213c15ba
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormEditSafetyTest.java
@@ -0,0 +1,201 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDCheckBox;
+import org.apache.pdfbox.pdmodel.interactive.form.PDField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDRadioButton;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.model.FormFieldWithCoordinates;
+
+/** An edit that cannot be honoured must be refused and reported, never silently reshaped. */
+class FormEditSafetyTest {
+
+    private static PDDocument formWith(String name, String type) throws IOException {
+        PDDocument document = new PDDocument();
+        document.addPage(new PDPage(PDRectangle.A4));
+        document.getDocumentCatalog().setAcroForm(new PDAcroForm(document));
+        FormUtils.addNewFields(
+                document,
+                List.of(
+                        new FormUtils.NewFormFieldDefinition(
+                                name,
+                                null,
+                                type,
+                                0,
+                                50f,
+                                700f,
+                                200f,
+                                20f,
+                                null,
+                                null,
+                                type.equals("radio") ? List.of("a", "b") : null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null)));
+        return document;
+    }
+
+    private static FormUtils.ModifyFormFieldDefinition modify(
+            String target, String type, Float width, Float height) {
+        // Order: targetName, name, label, type, pageIndex, x, y, width, height, then the rest.
+        return new FormUtils.ModifyFormFieldDefinition(
+                target, null, null, type, null, null, null, width, height, null, null, null, null,
+                null, null, null, null, null, null);
+    }
+
+    @Test
+    @DisplayName("a type that cannot be rebuilt is refused instead of becoming a text field")
+    void unrebuildableTypeIsRefused() throws IOException {
+        try (PDDocument document = formWith("choice", "text")) {
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+
+            FormUtils.modifyFormFields(
+                    document, List.of(modify("choice", "radio", null, null)), skipped);
+
+            PDField field = document.getDocumentCatalog().getAcroForm(null).getField("choice");
+            assertFalse(skipped.isEmpty(), "the refusal must be reported to the caller");
+            assertFalse(
+                    field instanceof PDRadioButton,
+                    "it could not become a radio, so it must not claim to be one");
+            assertEquals(
+                    "text",
+                    FormUtils.extractFormFields(document).getFirst().type(),
+                    "the original field must survive untouched rather than be retyped");
+        }
+    }
+
+    @Test
+    @DisplayName("a field rebuilt as a checkbox gets an appearance so it can be ticked")
+    void rebuiltCheckboxIsUsable() throws IOException {
+        try (PDDocument document = formWith("agree", "text")) {
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+
+            FormUtils.modifyFormFields(
+                    document, List.of(modify("agree", "checkbox", null, null)), skipped);
+
+            PDField field = document.getDocumentCatalog().getAcroForm(null).getField("agree");
+            assertTrue(field instanceof PDCheckBox, "the rebuild should have produced a checkbox");
+            assertNotNull(
+                    field.getWidgets().getFirst().getAppearance(),
+                    "without an appearance the checkbox renders blank and cannot be ticked");
+        }
+    }
+
+    @Test
+    @DisplayName("a size of zero or infinity is refused rather than written into the page")
+    void unusableSizeIsRefused() throws IOException {
+        for (Float bad : new Float[] {0f, -5f, Float.POSITIVE_INFINITY, Float.NaN}) {
+            try (PDDocument document = formWith("box", "text")) {
+                List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+
+                FormUtils.modifyFormFields(
+                        document, List.of(modify("box", null, bad, 20f)), skipped);
+
+                PDRectangle rect =
+                        document.getDocumentCatalog()
+                                .getAcroForm(null)
+                                .getField("box")
+                                .getWidgets()
+                                .getFirst()
+                                .getRectangle();
+                assertFalse(skipped.isEmpty(), "a refused resize must be reported: width " + bad);
+                assertEquals(
+                        200f,
+                        rect.getWidth(),
+                        0.01f,
+                        "the original size must survive: width " + bad);
+            }
+        }
+    }
+
+    @Test
+    @DisplayName("a widget off the page still reports its geometry instead of dropping the field")
+    void offPageWidgetKeepsItsGeometry() throws IOException {
+        try (PDDocument document = formWith("stray", "text")) {
+            PDField field = document.getDocumentCatalog().getAcroForm(null).getField("stray");
+            // Above the page top: legal PDF, and the user needs the coordinates to drag it back.
+            field.getWidgets().getFirst().setRectangle(new PDRectangle(50f, 2000f, 200f, 20f));
+
+            List<FormFieldWithCoordinates> fields =
+                    FormUtils.extractFormFieldsWithCoordinates(document);
+
+            FormFieldWithCoordinates stray =
+                    fields.stream()
+                            .filter(f -> "stray".equals(f.getName()))
+                            .findFirst()
+                            .orElseThrow();
+            assertNotNull(stray.getWidgets(), "the field must keep its widget list");
+            assertFalse(stray.getWidgets().isEmpty(), "the off-page widget must still be reported");
+            assertNotNull(stray.getWidgets().getFirst(), "a null entry would crash the overlay");
+        }
+    }
+
+    private static FormUtils.ModifyFormFieldDefinition withValue(String target, String value) {
+        return new FormUtils.ModifyFormFieldDefinition(
+                target, null, null, null, null, null, null, null, null, null, null, null, value,
+                null, null, null, null, null, null);
+    }
+
+    private static FormUtils.ModifyFormFieldDefinition withOptions(
+            String target, List<String> options) {
+        return new FormUtils.ModifyFormFieldDefinition(
+                target, null, null, null, null, null, null, null, null, null, null, options, null,
+                null, null, null, null, null, null);
+    }
+
+    @Test
+    @DisplayName("a value a radio group cannot hold does not destroy the group")
+    void badRadioValueLeavesTheGroupIntact() throws IOException {
+        try (PDDocument document = formWith("plan", "radio")) {
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+
+            FormUtils.modifyFormFields(
+                    document, List.of(withValue("plan", "not-an-option")), skipped);
+
+            PDField field = document.getDocumentCatalog().getAcroForm(null).getField("plan");
+            assertTrue(
+                    field instanceof PDRadioButton,
+                    "a rejected value must not turn the group into another kind of field");
+            assertEquals(
+                    2,
+                    field.getWidgets().size(),
+                    "the group's options must survive a rejected value");
+            assertFalse(skipped.isEmpty(), "the caller must be told the value was not applied");
+        }
+    }
+
+    @Test
+    @DisplayName("editing a radio group's options is either applied or reported, never ignored")
+    void radioOptionEditIsNotSilentlyDropped() throws IOException {
+        try (PDDocument document = formWith("plan", "radio")) {
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+
+            FormUtils.modifyFormFields(
+                    document, List.of(withOptions("plan", List.of("a", "b", "c"))), skipped);
+
+            PDField field = document.getDocumentCatalog().getAcroForm(null).getField("plan");
+            boolean applied = field.getWidgets().size() == 3;
+            assertTrue(
+                    applied || !skipped.isEmpty(),
+                    "a change the UI shows as saved must either happen or be reported as skipped");
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormFieldNameSafetyTest.java b/app/common/src/test/java/stirling/software/common/util/FormFieldNameSafetyTest.java
new file mode 100644
index 0000000000..c1b0c806e1
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormFieldNameSafetyTest.java
@@ -0,0 +1,61 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import org.junit.jupiter.api.Test;
+
+/**
+ * A field name is caller-supplied and reaches several loggers. A line break in one would forge a
+ * second log line (CWE-117), so names carrying control characters are refused outright.
+ */
+class FormFieldNameSafetyTest {
+
+    @Test
+    void aNameWithCrLfIsRefused() {
+        String forged = "evil\r\n2026-01-01 00:00:00 ERROR admin login from 1.2.3.4";
+        String reason = FormUtils.invalidFieldNameReason(forged);
+        assertNotNull(reason, "a name containing CR/LF must be refused");
+        assertFalse(reason.contains("\n"), "the refusal itself must not carry a line break");
+        assertFalse(reason.contains("\r"), "the refusal itself must not carry a carriage return");
+    }
+
+    @Test
+    void otherControlCharactersAreRefusedToo() {
+        assertNotNull(FormUtils.invalidFieldNameReason("tab\there"));
+        assertNotNull(FormUtils.invalidFieldNameReason("null\u0000byte"));
+    }
+
+    @Test
+    void ordinaryNamesStillPass() {
+        assertNull(FormUtils.invalidFieldNameReason("Full Name"));
+        assertNull(FormUtils.invalidFieldNameReason("weird/[]{}"));
+        assertNull(FormUtils.invalidFieldNameReason("Mr Smith"));
+    }
+
+    @Test
+    void thePeriodRefusalDoesNotEchoControlCharacters() {
+        // Both problems at once: the period branch must not leak the raw name into a log line.
+        String reason = FormUtils.invalidFieldNameReason("Customer.Name\r\nFORGED");
+        assertNotNull(reason);
+        assertFalse(reason.contains("\r") || reason.contains("\n"), "no raw line break: " + reason);
+    }
+
+    @Test
+    void sanitizeForLogFlattensControlCharacters() {
+        assertEquals("a b", FormUtils.sanitizeForLog("a\nb"));
+        assertEquals("a b", FormUtils.sanitizeForLog("a\rb"));
+        assertEquals("plain", FormUtils.sanitizeForLog("plain"));
+        assertNull(FormUtils.sanitizeForLog(null));
+    }
+
+    @Test
+    void aPeriodIsStillRefusedWithTheOffendingCharacterNamed() {
+        String reason = FormUtils.invalidFieldNameReason("Customer.Name");
+        assertNotNull(reason);
+        assertTrue(reason.contains("period"), "the message should name the problem: " + reason);
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormFieldTypeSupportTest.java b/app/common/src/test/java/stirling/software/common/util/FormFieldTypeSupportTest.java
index 771ce89659..6924764a65 100644
--- a/app/common/src/test/java/stirling/software/common/util/FormFieldTypeSupportTest.java
+++ b/app/common/src/test/java/stirling/software/common/util/FormFieldTypeSupportTest.java
@@ -130,13 +130,15 @@ class FormFieldTypeSupportTest {
     }
 
     @Test
-    void doesNotSupportsDefinitionCreation_signatureReturnsTrue() {
-        assertTrue(FormFieldTypeSupport.SIGNATURE.doesNotsupportsDefinitionCreation());
+    void doesNotSupportsDefinitionCreation_signatureReturnsFalse() {
+        // Signature placeholders are now creatable via the editor.
+        assertFalse(FormFieldTypeSupport.SIGNATURE.doesNotsupportsDefinitionCreation());
     }
 
     @Test
-    void doesNotSupportsDefinitionCreation_buttonReturnsTrue() {
-        assertTrue(FormFieldTypeSupport.BUTTON.doesNotsupportsDefinitionCreation());
+    void doesNotSupportsDefinitionCreation_buttonReturnsFalse() {
+        // Push buttons (with actions) are now creatable via the editor.
+        assertFalse(FormFieldTypeSupport.BUTTON.doesNotsupportsDefinitionCreation());
     }
 
     @Test
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsEditRegressionTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsEditRegressionTest.java
new file mode 100644
index 0000000000..408380b790
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsEditRegressionTest.java
@@ -0,0 +1,911 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+import java.util.stream.Collectors;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDResources;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationWidget;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceDictionary;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceEntry;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDCheckBox;
+import org.apache.pdfbox.pdmodel.interactive.form.PDField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDNonTerminalField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDRadioButton;
+import org.apache.pdfbox.pdmodel.interactive.form.PDSignatureField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDTerminalField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDTextField;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Guards the form editor against silently destroying a field it edits. Assertions run after a
+ * save/reload cycle because only the serialised document reflects what a viewer sees.
+ */
+class FormUtilsEditRegressionTest {
+
+    private static PDAcroForm setupForm(PDDocument document) {
+        document.addPage(new PDPage(PDRectangle.A4));
+        PDAcroForm acroForm = new PDAcroForm(document);
+        acroForm.setDefaultResources(new PDResources());
+        document.getDocumentCatalog().setAcroForm(acroForm);
+        return acroForm;
+    }
+
+    private static byte[] save(PDDocument document) throws IOException {
+        ByteArrayOutputStream baos = new ByteArrayOutputStream();
+        document.save(baos);
+        return baos.toByteArray();
+    }
+
+    private static FormUtils.NewFormFieldDefinition newField(
+            String type, String name, float x, float y, float w, float h, List<String> options) {
+        return new FormUtils.NewFormFieldDefinition(
+                name, null, type, 0, x, y, w, h, null, null, options, null, null, null, null, null,
+                null, null);
+    }
+
+    /** Moves a field to a rect; null width/height leave the size alone. */
+    private static FormUtils.ModifyFormFieldDefinition moveTo(
+            String target, float x, float y, Float w, Float h) {
+        return new FormUtils.ModifyFormFieldDefinition(
+                target, null, null, null, 0, x, y, w, h, null, null, null, null, null, null, null,
+                null, null, null);
+    }
+
+    private static PDRectangle firstWidgetRect(PDAcroForm acroForm, String name) {
+        PDField field = acroForm.getField(name);
+        assertNotNull(field, "field '" + name + "' should exist");
+        return field.getWidgets().get(0).getRectangle();
+    }
+
+    /** The /AP /N state names on a widget. */
+    private static Set<String> normalStateNames(PDAnnotationWidget widget) {
+        PDAppearanceDictionary appearance = widget.getAppearance();
+        assertNotNull(appearance, "widget should have an /AP dictionary");
+        PDAppearanceEntry normal = appearance.getNormalAppearance();
+        assertNotNull(normal, "widget should have an /AP /N entry");
+        assertTrue(normal.isSubDictionary(), "a toggle needs per-state appearances");
+        return normal.getSubDictionary().keySet().stream()
+                .map(COSName::getName)
+                .collect(Collectors.toSet());
+    }
+
+    @Test
+    void movingCheckboxKeepsItFillable() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("checkbox", "agree", 50, 700, 14, 14, null)));
+            FormUtils.modifyFormFields(document, List.of(moveTo("agree", 200f, 400f, null, null)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("agree");
+            assertTrue(field instanceof PDCheckBox, "'agree' should still be a checkbox");
+            assertFalse(
+                    ((PDCheckBox) field).getOnValue().isEmpty(),
+                    "a moved checkbox must keep an on-state, or it can never be ticked again");
+            assertTrue(
+                    normalStateNames(field.getWidgets().get(0)).size() >= 2,
+                    "both /AP /N states must survive a move");
+            PDRectangle rect = firstWidgetRect(acroForm, "agree");
+            assertEquals(200f, rect.getLowerLeftX(), 0.5f);
+            assertEquals(400f, rect.getLowerLeftY(), 0.5f);
+        }
+    }
+
+    @Test
+    void resizingCheckboxRebuildsAppearanceAtTheNewSize() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("checkbox", "agree", 50, 700, 14, 14, null)));
+            FormUtils.modifyFormFields(document, List.of(moveTo("agree", 50f, 700f, 28f, 28f)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDCheckBox checkBox = (PDCheckBox) acroForm.getField("agree");
+            assertFalse(
+                    checkBox.getOnValue().isEmpty(), "a resized checkbox must keep its on-state");
+            PDAnnotationWidget widget = checkBox.getWidgets().get(0);
+            assertTrue(normalStateNames(widget).size() >= 2, "both /AP /N states must be rebuilt");
+            PDRectangle bbox =
+                    widget.getAppearance()
+                            .getNormalAppearance()
+                            .getSubDictionary()
+                            .get(COSName.getPDFName(checkBox.getOnValue()))
+                            .getBBox();
+            assertEquals(28f, bbox.getWidth(), 0.5f, "the rebuilt /AP must match the new size");
+        }
+    }
+
+    /** applyToggleAppearance parks /AS on Off, so a resize must put the selection back. */
+    @Test
+    void resizingCheckboxKeepsItChecked() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("checkbox", "agree", 50, 700, 14, 14, null)));
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            ((PDCheckBox) form.getField("agree")).check();
+            FormUtils.modifyFormFields(document, List.of(moveTo("agree", 50f, 700f, 30f, 30f)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertTrue(
+                    ((PDCheckBox) acroForm.getField("agree")).isChecked(),
+                    "a resize must not silently untick the box");
+        }
+    }
+
+    /** Only widgets.get(0) used to move, so a radio group lost every option but the first. */
+    @Test
+    void movingRadioGroupMovesEveryOption() throws IOException {
+        byte[] saved;
+        float[] before = new float[6];
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(newField("radio", "choice", 50, 700, 14, 14, List.of("A", "B", "C"))));
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            List<PDAnnotationWidget> widgets = form.getField("choice").getWidgets();
+            assertEquals(3, widgets.size(), "the fixture needs three option widgets");
+            for (int i = 0; i < 3; i++) {
+                before[i * 2] = widgets.get(i).getRectangle().getLowerLeftX();
+                before[i * 2 + 1] = widgets.get(i).getRectangle().getLowerLeftY();
+            }
+            FormUtils.modifyFormFields(document, List.of(moveTo("choice", 90f, 670f, null, null)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("choice");
+            assertTrue(field instanceof PDRadioButton, "'choice' should still be a radio group");
+            List<PDAnnotationWidget> widgets = field.getWidgets();
+            assertEquals(3, widgets.size(), "no option may be left behind");
+            float dx = 90f - before[0];
+            float dy = 670f - before[1];
+            for (int i = 0; i < 3; i++) {
+                PDRectangle rect = widgets.get(i).getRectangle();
+                assertEquals(
+                        before[i * 2] + dx,
+                        rect.getLowerLeftX(),
+                        0.5f,
+                        "option " + i + " should shift by the same delta");
+                assertEquals(before[i * 2 + 1] + dy, rect.getLowerLeftY(), 0.5f);
+            }
+        }
+    }
+
+    /** A signature's /AP is the signature, so it must never be dropped. */
+    @Test
+    void movingSignatureKeepsItsAppearance() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("signature", "sig", 50, 700, 120, 40, null)));
+            FormUtils.modifyFormFields(document, List.of(moveTo("sig", 60f, 600f, 140f, 50f)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertTrue(
+                    acroForm.getField("sig") instanceof PDSignatureField,
+                    "'sig' should still be a signature");
+            assertEquals(60f, firstWidgetRect(acroForm, "sig").getLowerLeftX(), 0.5f);
+        }
+    }
+
+    @Test
+    void invalidFieldNameReason_rejectsPeriodAndAllowsTheRest() {
+        String reason = FormUtils.invalidFieldNameReason("Customer.Name");
+        assertNotNull(reason, "a period must be refused, not silently dropped");
+        assertTrue(reason.contains("period"), "the message should name the offending character");
+        assertNull(FormUtils.invalidFieldNameReason("Has Space"));
+        assertNull(FormUtils.invalidFieldNameReason("weird/[]{}"));
+        assertNull(FormUtils.invalidFieldNameReason(null));
+    }
+
+    /** Dropped operations used to log a warning and still report success. */
+    @Test
+    void applyFieldEdits_reportsEveryDroppedOperation() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "present", 50, 700, 200, 20, null)));
+
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.applyFieldEdits(
+                    document,
+                    List.of(newField("text", "Bad.Name", 50, 600, 100, 20, null)),
+                    List.of(moveTo("ghost", 10f, 10f, null, null)),
+                    List.of("alsoGhost"),
+                    skipped);
+
+            assertEquals(3, skipped.size(), "each dropped operation should be reported");
+            assertTrue(skipped.stream().anyMatch(s -> "add".equals(s.operation())));
+            assertTrue(skipped.stream().anyMatch(s -> "modify".equals(s.operation())));
+            assertTrue(skipped.stream().anyMatch(s -> "delete".equals(s.operation())));
+            assertNotNull(
+                    document.getDocumentCatalog().getAcroForm(null).getField("present"),
+                    "the rest of the document must still be applied");
+        }
+    }
+
+    /** A clean batch must not report anything, or the UI would cry wolf on every save. */
+    @Test
+    void applyFieldEdits_reportsNothingWhenEverythingApplies() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.applyFieldEdits(
+                    document,
+                    List.of(newField("text", "fine", 50, 700, 200, 20, null)),
+                    List.of(),
+                    List.of(),
+                    skipped);
+            assertTrue(skipped.isEmpty(), "a fully applied batch reports no skips");
+        }
+    }
+
+    /** A drag must not normalise other options to the dragged widget's size. */
+    @Test
+    void movingRadioGroupKeepsEachOptionsOwnSize() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(newField("radio", "choice", 50, 700, 20, 20, List.of("A", "B"))));
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            List<PDAnnotationWidget> widgets = form.getField("choice").getWidgets();
+            // Hand-authored groups legitimately have option boxes of differing size.
+            PDRectangle second = widgets.get(1).getRectangle();
+            widgets.get(1)
+                    .setRectangle(
+                            new PDRectangle(
+                                    second.getLowerLeftX(), second.getLowerLeftY(), 40f, 40f));
+            FormUtils.modifyFormFields(document, List.of(moveTo("choice", 90f, 700f, 20f, 20f)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            List<PDAnnotationWidget> widgets = acroForm.getField("choice").getWidgets();
+            assertEquals(
+                    40f,
+                    widgets.get(1).getRectangle().getWidth(),
+                    0.5f,
+                    "a pure drag must not shrink the other options");
+            assertEquals(90f, widgets.get(0).getRectangle().getLowerLeftX(), 0.5f);
+        }
+    }
+
+    /** With no /AP and no /Opt the on-state must come from /V, not the invented "Yes". */
+    @Test
+    void resizingCheckboxWithoutAppearanceKeepsItsExportValue() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("checkbox", "agree", 50, 700, 14, 14, null)));
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            PDCheckBox box = (PDCheckBox) form.getField("agree");
+            // A NeedAppearances form exported by Word/LibreOffice looks exactly like this.
+            box.getWidgets().get(0).getCOSObject().removeItem(COSName.AP);
+            box.getCOSObject().setItem(COSName.V, COSName.getPDFName("On"));
+            FormUtils.modifyFormFields(document, List.of(moveTo("agree", 50f, 700f, 30f, 30f)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDCheckBox box = (PDCheckBox) acroForm.getField("agree");
+            assertEquals(
+                    "On",
+                    box.getOnValue(),
+                    "the export value must survive; inventing 'Yes' would orphan /V");
+            assertTrue(box.isChecked(), "the box was ticked and must stay ticked");
+        }
+    }
+
+    /** Renaming to the same qualified name is not a rename, so a nested field is not rejected. */
+    @Test
+    void renameProblem_ignoresAnUnchangedQualifiedName() {
+        assertNull(
+                FormUtils.renameProblem("Customer.Name", "Customer.Name"),
+                "a field standing still must not be rejected for its parent's period");
+        assertNull(FormUtils.renameProblem("plain", null));
+        assertNotNull(
+                FormUtils.renameProblem("plain", "New.Name"),
+                "an actual rename introducing a period must still be refused");
+    }
+
+    /** A nested field whose name box was left at its qualified name must still be modified. */
+    @Test
+    void modifyingNestedFieldKeepsWorkingWhenNameIsUntouched() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm form = setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "Name", 50, 700, 200, 20, null)));
+            // Re-parent it so its qualified name legitimately contains a period.
+            PDNonTerminalField parent = new PDNonTerminalField(form);
+            parent.setPartialName("Customer");
+            PDField child = form.getField("Name");
+            parent.setChildren(List.of(child));
+            child.getCOSObject().setItem(COSName.PARENT, parent.getCOSObject());
+            form.setFields(List.of(parent));
+
+            FormUtils.ModifyFormFieldDefinition mod =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "Customer.Name",
+                            "Customer.Name",
+                            null,
+                            null,
+                            0,
+                            90f,
+                            600f,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null);
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(mod), skipped);
+            assertTrue(
+                    skipped.isEmpty(), "an untouched qualified name is not a rename: " + skipped);
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("Customer.Name");
+            assertNotNull(field, "the nested field must survive the edit");
+            assertEquals(90f, field.getWidgets().get(0).getRectangle().getLowerLeftX(), 0.5f);
+        }
+    }
+
+    /** Zero clears /MaxLen; null means unchanged, so it could never be removed otherwise. */
+    @Test
+    void maxLengthZeroClearsTheCombSetting() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            new FormUtils.NewFormFieldDefinition(
+                                    "code", null, "text", 0, 50f, 700f, 200f, 20f, null, null, null,
+                                    null, null, null, null, null, 8, null)));
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            assertEquals(8, ((PDTextField) form.getField("code")).getMaxLen());
+
+            FormUtils.ModifyFormFieldDefinition clear =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "code", null, null, null, null, null, null, null, null, null, null,
+                            null, null, null, null, null, null, 0, null);
+            FormUtils.modifyFormFields(document, List.of(clear));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertEquals(
+                    -1,
+                    ((PDTextField) acroForm.getField("code")).getMaxLen(),
+                    "/MaxLen should be gone, not merely zero");
+        }
+    }
+
+    /** An unrecognised button action must be reported rather than silently ignored. */
+    @Test
+    void unknownButtonActionIsReported() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("button", "go", 50, 700, 100, 24, null)));
+
+            FormUtils.ModifyFormFieldDefinition mod =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "go",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            "launchTheMissiles");
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(mod), skipped);
+
+            assertEquals(1, skipped.size(), "an unusable action spec should be reported");
+            assertTrue(skipped.get(0).reason().contains("launchTheMissiles"));
+        }
+    }
+
+    /** Renaming a nested field must not re-parent it to the top level. */
+    @Test
+    void renamingNestedFieldKeepsItUnderItsParent() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm form = setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "Name", 50, 700, 200, 20, null)));
+            PDNonTerminalField parent = new PDNonTerminalField(form);
+            parent.setPartialName("Customer");
+            PDField child = form.getField("Name");
+            parent.setChildren(List.of(child));
+            child.getCOSObject().setItem(COSName.PARENT, parent.getCOSObject());
+            form.setFields(List.of(parent));
+
+            FormUtils.ModifyFormFieldDefinition rename =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "Customer.Name",
+                            "Customer.Phone",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null);
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(rename), skipped);
+            assertTrue(
+                    skipped.isEmpty(), "a leaf rename under the same parent is legal: " + skipped);
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertNotNull(
+                    acroForm.getField("Customer.Phone"),
+                    "the field should still live under Customer, not at the top level");
+            assertNull(acroForm.getField("Customer.Name"), "the old name should be gone");
+        }
+    }
+
+    /** One rejected action on a multi-widget button is one report, not one per widget. */
+    @Test
+    void unknownButtonActionIsReportedOncePerField() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("button", "go", 50, 700, 100, 24, null)));
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            PDField button = form.getField("go");
+            // Give it a second widget, as a button repeated on two pages would have.
+            PDAnnotationWidget extra = new PDAnnotationWidget();
+            extra.setRectangle(new PDRectangle(50, 600, 100, 24));
+            extra.getCOSObject().setItem(COSName.PARENT, button.getCOSObject());
+            List<PDAnnotationWidget> widgets = new ArrayList<>(button.getWidgets());
+            widgets.add(extra);
+            button.getCOSObject()
+                    .setItem(
+                            COSName.KIDS,
+                            new org.apache.pdfbox.cos.COSArray() {
+                                {
+                                    for (PDAnnotationWidget w : widgets) add(w.getCOSObject());
+                                }
+                            });
+
+            FormUtils.ModifyFormFieldDefinition mod =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "go",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            "launchTheMissiles");
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(mod), skipped);
+
+            assertEquals(1, skipped.size(), "one field, one report: " + skipped);
+        }
+    }
+
+    /** A clamped page index still creates the field, so it is not a dropped edit. */
+    @Test
+    void clampedPageIsNotReportedAsSkipped() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            new FormUtils.NewFormFieldDefinition(
+                                    "late", null, "text", 9, 50f, 700f, 100f, 20f, null, null, null,
+                                    null, null, null, null, null, null, null)),
+                    skipped);
+
+            assertNotNull(
+                    document.getDocumentCatalog().getAcroForm(null).getField("late"),
+                    "the field is created on the clamped page");
+            assertTrue(skipped.isEmpty(), "an applied edit must not appear as skipped: " + skipped);
+        }
+    }
+
+    /** Recreation builds a top-level field, so it must refuse rather than re-parent. */
+    @Test
+    void typeChangeOnNestedFieldIsRefusedNotSilentlyReparented() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm form = setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "Name", 50, 700, 200, 20, null)));
+            PDNonTerminalField parent = new PDNonTerminalField(form);
+            parent.setPartialName("Customer");
+            PDField child = form.getField("Name");
+            parent.setChildren(List.of(child));
+            child.getCOSObject().setItem(COSName.PARENT, parent.getCOSObject());
+            form.setFields(List.of(parent));
+
+            FormUtils.ModifyFormFieldDefinition retype =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "Customer.Name",
+                            null,
+                            null,
+                            "checkbox",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null);
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(retype), skipped);
+
+            assertEquals(1, skipped.size(), "the refusal must be reported: " + skipped);
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertNotNull(
+                    acroForm.getField("Customer.Name"),
+                    "the original nested field must be left intact");
+            assertNull(acroForm.getField("Name"), "nothing should be re-parented to the top level");
+        }
+    }
+
+    /** The editor emits "uri:" the moment that kind is picked, which must not fail the edit. */
+    @Test
+    void incompleteUrlActionClearsRatherThanFailing() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("button", "go", 50, 700, 100, 24, null)));
+
+            FormUtils.ModifyFormFieldDefinition pickUri =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "go", null, null, null, null, null, null, null, null, null, null, null,
+                            null, null, null, null, null, null, "uri:");
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(pickUri), skipped);
+
+            assertTrue(
+                    skipped.isEmpty(),
+                    "choosing a URL action before typing the URL is not an error: " + skipped);
+            PDField button = document.getDocumentCatalog().getAcroForm(null).getField("go");
+            assertNull(
+                    button.getWidgets().get(0).getCOSObject().getDictionaryObject(COSName.A),
+                    "an empty target must leave no action behind");
+        }
+    }
+
+    /** A real URL still writes a real action. */
+    @Test
+    void completeUrlActionIsApplied() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document);
+            FormUtils.addNewFields(
+                    document, List.of(newField("button", "go", 50, 700, 100, 24, null)));
+
+            FormUtils.ModifyFormFieldDefinition setUri =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "go",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            "uri:https://example.com");
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(setUri), skipped);
+
+            assertTrue(skipped.isEmpty(), "a complete spec applies cleanly: " + skipped);
+            PDField button = document.getDocumentCatalog().getAcroForm(null).getField("go");
+            assertNotNull(
+                    button.getWidgets().get(0).getCOSObject().getDictionaryObject(COSName.A),
+                    "the action should be written");
+        }
+    }
+
+    /** Builds a parent with the given terminal children already attached. */
+    private static PDNonTerminalField nest(
+            PDDocument document, PDAcroForm form, String parentName, String... childNames)
+            throws IOException {
+        List<FormUtils.NewFormFieldDefinition> defs = new ArrayList<>();
+        for (int i = 0; i < childNames.length; i++) {
+            defs.add(newField("text", childNames[i], 50, 700 - i * 40, 200, 20, null));
+        }
+        FormUtils.addNewFields(document, defs);
+
+        PDNonTerminalField parent = new PDNonTerminalField(form);
+        parent.setPartialName(parentName);
+        List<PDField> kids = new ArrayList<>();
+        for (String child : childNames) {
+            PDField field = form.getField(child);
+            field.getCOSObject().setItem(COSName.PARENT, parent.getCOSObject());
+            kids.add(field);
+        }
+        parent.setChildren(kids);
+        form.setFields(List.of(parent));
+        return parent;
+    }
+
+    /** A refused edit must not release the name the field still really has. */
+    @Test
+    void refusedNestedEditDoesNotFreeItsNameForALaterEdit() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm form = setupForm(document);
+            nest(document, form, "Customer", "Name", "Email");
+
+            // Edit 1 is refused (type change on a nested field). Edit 2 then asks for the
+            // name edit 1 still occupies, which must not be handed out.
+            FormUtils.ModifyFormFieldDefinition refused =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "Customer.Name",
+                            "Customer.Foo",
+                            null,
+                            "checkbox",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null);
+            FormUtils.ModifyFormFieldDefinition rename =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "Customer.Email",
+                            "Customer.Name",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null);
+
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.modifyFormFields(document, List.of(refused, rename), skipped);
+
+            List<String> names = new ArrayList<>();
+            for (PDField f : document.getDocumentCatalog().getAcroForm(null).getFieldTree()) {
+                if (f instanceof PDTerminalField) names.add(f.getFullyQualifiedName());
+            }
+            assertEquals(
+                    names.size(),
+                    new java.util.HashSet<>(names).size(),
+                    "two fields must never share a qualified name: " + names);
+            assertTrue(
+                    names.contains("Customer.Name"), "the refused field keeps its name: " + names);
+        }
+    }
+
+    /** A group name occupies the namespace, so a new field must not be able to take it. */
+    @Test
+    void groupNamesParticipateInCollisionChecks() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm form = setupForm(document);
+            nest(document, form, "Customer", "Name");
+
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "Customer", 50, 500, 100, 20, null)));
+
+            List<String> names = new ArrayList<>();
+            for (PDField f : document.getDocumentCatalog().getAcroForm(null).getFieldTree()) {
+                String fqn = f.getFullyQualifiedName();
+                if (fqn != null) names.add(fqn);
+            }
+            assertEquals(
+                    names.size(),
+                    new java.util.HashSet<>(names).size(),
+                    "the new field must not take the group's name: " + names);
+        }
+    }
+
+    /** "Customer." has no leaf, so it must be refused rather than become "Customer.field". */
+    @Test
+    void renameToBareParentPrefixIsRefused() {
+        assertNotNull(
+                FormUtils.renameProblem("Customer.Name", "Customer."),
+                "a name with nothing after the parent prefix is not a rename");
+        assertNull(FormUtils.renameProblem("Customer.Name", "Customer.Phone"));
+    }
+
+    /** A type change must leave the field on its own page, not relocate it to the last one. */
+    @Test
+    void typeChangeKeepsTheFieldOnItsPage() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm form = new PDAcroForm(document);
+            for (int i = 0; i < 5; i++) {
+                document.addPage(new PDPage(PDRectangle.A4));
+            }
+            form.setDefaultResources(new PDResources());
+            document.getDocumentCatalog().setAcroForm(form);
+
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            new FormUtils.NewFormFieldDefinition(
+                                    "onPageTwo",
+                                    null,
+                                    "text",
+                                    1,
+                                    50f,
+                                    700f,
+                                    200f,
+                                    20f,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null)));
+
+            FormUtils.ModifyFormFieldDefinition retype =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "onPageTwo",
+                            null,
+                            null,
+                            "checkbox",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null);
+            FormUtils.modifyFormFields(document, List.of(retype));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("onPageTwo");
+            assertNotNull(field, "the retyped field should exist");
+            int page = -1;
+            for (int i = 0; i < reloaded.getNumberOfPages(); i++) {
+                for (var annot : reloaded.getPage(i).getAnnotations()) {
+                    if (annot.getCOSObject() == field.getWidgets().get(0).getCOSObject()) page = i;
+                }
+            }
+            assertEquals(
+                    1, page, "a retyped field must stay on its own page, not move to the last");
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsEditReportingTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsEditReportingTest.java
new file mode 100644
index 0000000000..2c606d481a
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsEditReportingTest.java
@@ -0,0 +1,118 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDCheckBox;
+import org.junit.jupiter.api.Test;
+
+/** An edit the backend cannot honour must be reported, not logged and reported as success. */
+class FormUtilsEditReportingTest {
+
+    private static FormUtils.NewFormFieldDefinition field(String type, String name) {
+        return new FormUtils.NewFormFieldDefinition(
+                name, name, type, 0, 60f, 700f, 120f, 20f, null, null, null, null, null, null, null,
+                null, null, null);
+    }
+
+    private static PDDocument blank() {
+        PDDocument document = new PDDocument();
+        document.addPage(new PDPage(PDRectangle.LETTER));
+        document.getDocumentCatalog().setAcroForm(new PDAcroForm(document));
+        return document;
+    }
+
+    @Test
+    void anUncreatableTypeIsReportedRatherThanSilentlyMadeText() throws IOException {
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        try (PDDocument document = blank()) {
+            FormUtils.addNewFields(document, List.of(field("nonsense", "mystery")), skipped);
+            PDAcroForm acroForm = document.getDocumentCatalog().getAcroForm(null);
+            assertTrue(
+                    acroForm.getFields().isEmpty(),
+                    "an unsupported type must not quietly become a text field");
+        }
+        assertEquals(1, skipped.size(), "the caller must be told: " + skipped);
+        assertTrue(skipped.get(0).reason().contains("nonsense"), skipped.get(0).reason());
+    }
+
+    @Test
+    void aLyingPageCountIsSurvivable() throws IOException {
+        // /Count overstates the tree, so getNumberOfPages() passes the guard but getPage throws.
+        byte[] broken =
+                ("%PDF-1.4\n"
+                                + "1 0 obj << /Type /Catalog /Pages 2 0 R >> endobj\n"
+                                + "2 0 obj << /Type /Pages /Count 1 /Kids [] >> endobj\n"
+                                + "trailer << /Root 1 0 R >>\n")
+                        .getBytes(java.nio.charset.StandardCharsets.ISO_8859_1);
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        try (PDDocument document = Loader.loadPDF(broken)) {
+            // Must not throw; the field is reported as skipped instead.
+            FormUtils.addNewFields(document, List.of(field("text", "ghost")), skipped);
+        } catch (IOException loadFailure) {
+            // A parser that refuses the file outright is an equally acceptable outcome.
+            return;
+        }
+        assertFalse(skipped.isEmpty(), "an unreachable page must be reported, not thrown");
+    }
+
+    @Test
+    void aTwoWidgetCheckboxKeepsItsOnStateWhenMoved() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage(PDRectangle.LETTER));
+            document.addPage(new PDPage(PDRectangle.LETTER));
+            document.getDocumentCatalog().setAcroForm(new PDAcroForm(document));
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            new FormUtils.NewFormFieldDefinition(
+                                    "agree",
+                                    "agree",
+                                    "checkbox",
+                                    0,
+                                    60f,
+                                    700f,
+                                    14f,
+                                    14f,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null,
+                                    null)),
+                    new ArrayList<>());
+            FormUtils.modifyFormFields(
+                    document,
+                    List.of(
+                            new FormUtils.ModifyFormFieldDefinition(
+                                    "agree", null, null, null, 0, 200f, 400f, null, null, null,
+                                    null, null, null, null, null, null, null, null, null)));
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            saved = out.toByteArray();
+        }
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDCheckBox box = (PDCheckBox) acroForm.getField("agree");
+            assertNotNull(box);
+            assertFalse(box.getOnValue().isEmpty(), "a moved checkbox must stay tickable");
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsEditingTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsEditingTest.java
new file mode 100644
index 0000000000..a97c06daba
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsEditingTest.java
@@ -0,0 +1,467 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.List;
+import java.util.Set;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDResources;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationWidget;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceDictionary;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAppearanceEntry;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDCheckBox;
+import org.apache.pdfbox.pdmodel.interactive.form.PDField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDPushButton;
+import org.apache.pdfbox.pdmodel.interactive.form.PDRadioButton;
+import org.apache.pdfbox.pdmodel.interactive.form.PDSignatureField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDTextField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDVariableText;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Assertions run after a save/reload cycle: PDFBox synthesises widgets for fields with no explicit
+ * {@code /Kids}, so only the serialised document reflects what a viewer sees.
+ */
+class FormUtilsEditingTest {
+
+    private static PDAcroForm setupForm(PDDocument document, PDRectangle pageSize) {
+        PDPage page = new PDPage(pageSize);
+        document.addPage(page);
+        PDAcroForm acroForm = new PDAcroForm(document);
+        acroForm.setDefaultResources(new PDResources());
+        document.getDocumentCatalog().setAcroForm(acroForm);
+        return acroForm;
+    }
+
+    private static byte[] save(PDDocument document) throws IOException {
+        ByteArrayOutputStream baos = new ByteArrayOutputStream();
+        document.save(baos);
+        return baos.toByteArray();
+    }
+
+    private static FormUtils.NewFormFieldDefinition newText(
+            String name, float x, float y, float w, float h) {
+        return new FormUtils.NewFormFieldDefinition(
+                name, null, "text", 0, x, y, w, h, null, null, null, null, null, null, null, null,
+                null, null);
+    }
+
+    private static FormUtils.NewFormFieldDefinition newField(
+            String type,
+            String name,
+            float x,
+            float y,
+            float w,
+            float h,
+            List<String> options,
+            Integer maxLength,
+            String buttonAction) {
+        return new FormUtils.NewFormFieldDefinition(
+                name,
+                null,
+                type,
+                0,
+                x,
+                y,
+                w,
+                h,
+                null,
+                null,
+                options,
+                null,
+                null,
+                null,
+                null,
+                null,
+                maxLength,
+                buttonAction);
+    }
+
+    private static PDRectangle firstWidgetRect(PDAcroForm acroForm, String name) {
+        PDField field = acroForm.getField(name);
+        assertNotNull(field, "field '" + name + "' should exist");
+        assertTrue(!field.getWidgets().isEmpty(), "field should have at least one widget");
+        return field.getWidgets().get(0).getRectangle();
+    }
+
+    /**
+     * PDAcroForm.refreshAppearances() never synthesizes /AP for the button family, so without an
+     * explicit appearance a created checkbox or radio renders blank and resolves to Off.
+     */
+    @Test
+    void addNewFields_givesToggleFieldsAppearanceStreamsAndKeepsTheirDefault() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField("checkbox", "agree", 50, 600, 20, 20, null, null, null),
+                            newField(
+                                    "radio",
+                                    "choice",
+                                    50,
+                                    500,
+                                    20,
+                                    20,
+                                    List.of("Yes", "No"),
+                                    null,
+                                    null),
+                            newText("fullname", 50, 400, 200, 24)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertNotNull(acroForm);
+
+            // NeedAppearances=false means viewers trust our streams, so they must exist.
+            assertFalse(acroForm.getNeedAppearances(), "appearance generation should have run");
+
+            PDField checkBox = acroForm.getField("agree");
+            assertTrue(checkBox instanceof PDCheckBox);
+            assertEquals(
+                    Set.of("Off", "Yes"),
+                    normalStateNames(checkBox.getWidgets().get(0)),
+                    "checkbox needs an Off and an on-state appearance");
+
+            PDField radio = acroForm.getField("choice");
+            assertTrue(radio instanceof PDRadioButton);
+            assertEquals(2, radio.getWidgets().size());
+            assertEquals(Set.of("Off", "Yes"), normalStateNames(radio.getWidgets().get(0)));
+            assertEquals(Set.of("Off", "No"), normalStateNames(radio.getWidgets().get(1)));
+
+            // A text field's DA names /Helv; if /DR lacks that alias refreshAppearances throws for
+            // the whole form and every field above loses its appearance too.
+            PDField text = acroForm.getField("fullname");
+            assertNotNull(
+                    text.getWidgets().get(0).getAppearance().getNormalAppearance(),
+                    "text field should have a generated appearance");
+        }
+    }
+
+    /** The /AP /N state names on a widget. */
+    private static Set<String> normalStateNames(PDAnnotationWidget widget) {
+        PDAppearanceDictionary appearance = widget.getAppearance();
+        assertNotNull(appearance, "widget should have an /AP dictionary");
+        PDAppearanceEntry normal = appearance.getNormalAppearance();
+        assertNotNull(normal, "widget should have an /AP /N entry");
+        assertTrue(normal.isSubDictionary(), "a toggle needs per-state appearances");
+        return normal.getSubDictionary().keySet().stream()
+                .map(COSName::getName)
+                .collect(java.util.stream.Collectors.toSet());
+    }
+
+    @Test
+    void addNewFields_createsTextFieldAtRequestedRectangle() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(document, List.of(newText("created", 50, 700, 200, 20)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertNotNull(acroForm, "AcroForm should exist after reload");
+            assertTrue(acroForm.getField("created") instanceof PDTextField);
+            PDRectangle rect = firstWidgetRect(acroForm, "created");
+            assertNotNull(rect, "created widget should keep its rectangle after reload");
+            assertEquals(50f, rect.getLowerLeftX(), 0.5f);
+            assertEquals(700f, rect.getLowerLeftY(), 0.5f);
+            assertEquals(200f, rect.getWidth(), 0.5f);
+            assertEquals(20f, rect.getHeight(), 0.5f);
+        }
+    }
+
+    @Test
+    void addNewFields_appliesCropBoxOffsetToCoordinates() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            // Shift the CropBox origin; the frontend sends CropBox-relative coords.
+            document.getPage(0).setCropBox(new PDRectangle(10, 20, 500, 700));
+            FormUtils.addNewFields(document, List.of(newText("shifted", 5, 5, 100, 15)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDRectangle rect = firstWidgetRect(acroForm, "shifted");
+            // Absolute = CropBox-relative + CropBox lower-left offset.
+            assertEquals(15f, rect.getLowerLeftX(), 0.5f);
+            assertEquals(25f, rect.getLowerLeftY(), 0.5f);
+        }
+    }
+
+    @Test
+    void addNewFields_appliesReadOnlyFontSizeAndMultiline() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.NewFormFieldDefinition def =
+                    new FormUtils.NewFormFieldDefinition(
+                            "opts",
+                            null,
+                            "text",
+                            0,
+                            10f,
+                            10f,
+                            120f,
+                            18f,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            18f,
+                            Boolean.TRUE,
+                            Boolean.TRUE,
+                            null,
+                            null);
+            FormUtils.addNewFields(document, List.of(def));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("opts");
+            assertNotNull(field);
+            assertTrue(field.isReadOnly(), "read-only flag should survive reload");
+            assertTrue(field instanceof PDTextField);
+            assertTrue(((PDTextField) field).isMultiline(), "multiline flag should survive reload");
+            String da = ((PDVariableText) field).getDefaultAppearance();
+            assertTrue(da.contains("18"), "default appearance should carry the font size: " + da);
+        }
+    }
+
+    @Test
+    void modifyFormFields_movesAndResizesWidget() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(document, List.of(newText("movable", 50, 700, 200, 20)));
+
+            FormUtils.ModifyFormFieldDefinition mod =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "movable", null, null, null, 0, 100f, 600f, 150f, 30f, null, null, null,
+                            null, null, null, null, null, null, null);
+            FormUtils.modifyFormFields(document, List.of(mod));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDRectangle rect = firstWidgetRect(acroForm, "movable");
+            assertEquals(100f, rect.getLowerLeftX(), 0.5f);
+            assertEquals(600f, rect.getLowerLeftY(), 0.5f);
+            assertEquals(150f, rect.getWidth(), 0.5f);
+            assertEquals(30f, rect.getHeight(), 0.5f);
+        }
+    }
+
+    @Test
+    void modifyFormFields_setsReadOnlyAndFontSize() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(document, List.of(newText("editable", 50, 700, 200, 20)));
+
+            FormUtils.ModifyFormFieldDefinition mod =
+                    new FormUtils.ModifyFormFieldDefinition(
+                            "editable",
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            null,
+                            22f,
+                            Boolean.TRUE,
+                            null,
+                            null,
+                            null);
+            FormUtils.modifyFormFields(document, List.of(mod));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("editable");
+            assertNotNull(field);
+            assertTrue(field.isReadOnly(), "read-only flag should survive reload");
+            String da = ((PDVariableText) field).getDefaultAppearance();
+            assertTrue(da.contains("22"), "font size should be reflected in DA: " + da);
+        }
+    }
+
+    @Test
+    void deleteFormFields_removesField() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            PDAcroForm acroForm = setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(document, List.of(newText("temp", 50, 700, 200, 20)));
+            FormUtils.deleteFormFields(document, List.of("temp"));
+            // After delete the AcroForm may still exist; the field must be gone.
+            if (acroForm != null) {
+                assertNull(acroForm.getField("temp"));
+            }
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertTrue(acroForm == null || acroForm.getField("temp") == null);
+        }
+    }
+
+    @Test
+    void addNewFields_createsRadioGroupWithOneWidgetPerOption() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField(
+                                    "radio",
+                                    "choice",
+                                    60,
+                                    700,
+                                    16,
+                                    16,
+                                    List.of("Yes", "No"),
+                                    null,
+                                    null)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDField field = acroForm.getField("choice");
+            assertNotNull(field, "radio field should exist");
+            assertTrue(field instanceof PDRadioButton, "should be a radio button group");
+            assertEquals(2, field.getWidgets().size(), "one widget per option");
+            assertTrue(((PDRadioButton) field).getExportValues().contains("Yes"));
+            assertTrue(((PDRadioButton) field).getExportValues().contains("No"));
+        }
+    }
+
+    @Test
+    void extractFormFields_prefersFieldNameOverFirstOptionForChoiceLabel() throws IOException {
+        // A radio group's label is its field name, not its first option, so the viewer label
+        // matches the name shown in the editor.
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField(
+                                    "radio",
+                                    "Choice",
+                                    60,
+                                    700,
+                                    16,
+                                    16,
+                                    List.of("Yes", "No"),
+                                    null,
+                                    null)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            FormUtils.FormFieldInfo choice =
+                    FormUtils.extractFormFields(reloaded).stream()
+                            .filter(f -> "Choice".equals(f.name()))
+                            .findFirst()
+                            .orElse(null);
+            assertNotNull(choice, "radio field should be extracted");
+            assertEquals(
+                    "Choice", choice.label(), "field name should win over the first option value");
+        }
+    }
+
+    @Test
+    void addNewFields_createsCombTextField() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "ssn", 50, 700, 200, 20, null, 9, null)));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDTextField field = (PDTextField) acroForm.getField("ssn");
+            assertNotNull(field);
+            assertEquals(9, field.getMaxLen(), "comb max length should persist");
+            assertTrue(field.isComb(), "comb flag should be set");
+        }
+    }
+
+    @Test
+    void addNewFields_createsSignatureAndButton() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField("signature", "sig", 50, 600, 200, 60, null, null, null),
+                            newField("button", "btn", 50, 500, 120, 24, null, null, "reset")));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertTrue(
+                    acroForm.getField("sig") instanceof PDSignatureField,
+                    "signature placeholder should exist");
+            assertTrue(
+                    acroForm.getField("btn") instanceof PDPushButton, "push button should exist");
+        }
+    }
+
+    @Test
+    void applyFieldEdits_addsModifiesAndDeletesInOnePass() throws IOException {
+        byte[] saved;
+        try (PDDocument document = new PDDocument()) {
+            setupForm(document, PDRectangle.A4);
+            FormUtils.addNewFields(document, List.of(newText("old", 50, 700, 200, 20)));
+
+            FormUtils.applyFieldEdits(
+                    document,
+                    List.of(newText("fresh", 50, 600, 200, 20)),
+                    List.of(),
+                    List.of("old"));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertNotNull(acroForm.getField("fresh"), "added field should be present");
+            assertNull(acroForm.getField("old"), "deleted field should be gone");
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsGapTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsGapTest.java
index dd828327b1..5c13b13908 100644
--- a/app/common/src/test/java/stirling/software/common/util/FormUtilsGapTest.java
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsGapTest.java
@@ -705,10 +705,20 @@ class FormUtilsGapTest {
                                 "newName",
                                 "New Label",
                                 null, // keep type (text) -> in-place path
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
                                 Boolean.TRUE,
                                 null,
                                 null,
                                 null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
                                 null);
 
                 FormUtils.modifyFormFields(doc, List.of(mod));
@@ -731,7 +741,8 @@ class FormUtilsGapTest {
 
                 FormUtils.ModifyFormFieldDefinition mod =
                         new FormUtils.ModifyFormFieldDefinition(
-                                "missing", null, null, null, null, null, null, null, null);
+                                "missing", null, null, null, null, null, null, null, null, null,
+                                null, null, null, null, null, null, null, null, null);
 
                 FormUtils.modifyFormFields(doc, List.of(mod));
 
@@ -754,7 +765,8 @@ class FormUtilsGapTest {
                 mods.add(null);
                 mods.add(
                         new FormUtils.ModifyFormFieldDefinition(
-                                "  ", null, null, null, null, null, null, null, null));
+                                "  ", null, null, null, null, null, null, null, null, null, null,
+                                null, null, null, null, null, null, null, null));
 
                 FormUtils.modifyFormFields(doc, mods);
                 assertEquals(1, FormUtils.extractFormFields(doc).size());
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsMoreTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsMoreTest.java
index f4e013e082..fa3425176a 100644
--- a/app/common/src/test/java/stirling/software/common/util/FormUtilsMoreTest.java
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsMoreTest.java
@@ -285,13 +285,13 @@ class FormUtilsMoreTest {
         }
 
         @Test
-        void widgetOutOfBoundsYieldsNullCoordinateEntry() throws IOException {
+        void widgetOutOfBoundsStillReportsItsCoordinates() throws IOException {
             try (PDDocument doc = new PDDocument()) {
                 SetupDocument setup = createBasicDocument(doc);
                 PDTextField text = new PDTextField(setup.acroForm());
                 text.setPartialName("offpage");
-                // Far below the page origin -> finalY exceeds bounds -> createWidgetCoordinates
-                // returns null, which is still added to the per-field widget list.
+                // Off the page is legal PDF; dropping it would leave the user unable to drag it
+                // back.
                 attachWidget(setup, text, new PDRectangle(50, -5000, 200, 20));
 
                 List<FormFieldWithCoordinates> fields =
@@ -301,7 +301,8 @@ class FormUtilsMoreTest {
                         fields.get(0).getWidgets();
                 assertNotNull(widgets);
                 assertEquals(1, widgets.size());
-                assertNull(widgets.get(0));
+                assertNotNull(widgets.get(0), "a null entry here crashes sorting and the overlay");
+                assertEquals(50f, widgets.get(0).getX(), 0.01f);
             }
         }
 
@@ -476,8 +477,18 @@ class FormUtilsMoreTest {
                                 "combobox",
                                 null,
                                 null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
                                 List.of("One", "Two"),
                                 "One",
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
                                 null);
 
                 FormUtils.modifyFormFields(doc, List.of(mod));
@@ -505,10 +516,20 @@ class FormUtilsMoreTest {
                                 null,
                                 "listbox", // same type -> in-place path
                                 null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
                                 Boolean.TRUE,
                                 List.of("X", "Y", "Z"),
                                 null,
-                                "Choose items");
+                                "Choose items",
+                                null,
+                                null,
+                                null,
+                                null,
+                                null);
 
                 FormUtils.modifyFormFields(doc, List.of(mod));
 
@@ -529,7 +550,25 @@ class FormUtilsMoreTest {
 
                 FormUtils.ModifyFormFieldDefinition mod =
                         new FormUtils.ModifyFormFieldDefinition(
-                                "keep", null, null, "bogusType", null, null, null, null, null);
+                                "keep",
+                                null,
+                                null,
+                                "bogusType",
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null,
+                                null);
 
                 FormUtils.modifyFormFields(doc, List.of(mod));
                 // The field is preserved unchanged because the target type is unsupported.
@@ -554,7 +593,8 @@ class FormUtilsMoreTest {
                 // Rename beta -> alpha; should be uniquified to avoid the collision.
                 FormUtils.ModifyFormFieldDefinition mod =
                         new FormUtils.ModifyFormFieldDefinition(
-                                "beta", "alpha", null, null, null, null, null, null, null);
+                                "beta", "alpha", null, null, null, null, null, null, null, null,
+                                null, null, null, null, null, null, null, null, null);
 
                 FormUtils.modifyFormFields(doc, List.of(mod));
 
@@ -575,7 +615,8 @@ class FormUtilsMoreTest {
                 doc.addPage(new PDPage());
                 FormUtils.ModifyFormFieldDefinition mod =
                         new FormUtils.ModifyFormFieldDefinition(
-                                "x", null, null, null, null, null, null, null, null);
+                                "x", null, null, null, null, null, null, null, null, null, null,
+                                null, null, null, null, null, null, null, null);
                 FormUtils.modifyFormFields(doc, List.of(mod));
             }
         }
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsNoAcroFormTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsNoAcroFormTest.java
new file mode 100644
index 0000000000..d8f5e1deb2
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsNoAcroFormTest.java
@@ -0,0 +1,102 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDTextField;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Most real PDFs have no AcroForm at all, so adding the very first field has to build one that
+ * PDFBox will accept.
+ */
+class FormUtilsNoAcroFormTest {
+
+    private static final Path PLAIN_PDF =
+            Path.of("src/test/resources/pdf-ingestion-fixtures/many-tables-test_stress.pdf");
+
+    private static FormUtils.NewFormFieldDefinition newField(
+            String type, String name, float y, List<String> options, String defaultValue) {
+        // name, label, type, pageIndex, x, y, width, height, required, multiSelect,
+        // options, defaultValue, tooltip, fontSize, readOnly, multiline, maxLength, buttonAction
+        return new FormUtils.NewFormFieldDefinition(
+                name,
+                name,
+                type,
+                0,
+                60f,
+                y,
+                200f,
+                20f,
+                null,
+                null,
+                options,
+                defaultValue,
+                null,
+                null,
+                null,
+                null,
+                null,
+                null);
+    }
+
+    private static PDDocument loadPlain() throws IOException {
+        return Loader.loadPDF(Files.readAllBytes(PLAIN_PDF));
+    }
+
+    @Test
+    void plainPdfReallyHasNoAcroForm() throws IOException {
+        try (PDDocument document = loadPlain()) {
+            assertNull(
+                    document.getDocumentCatalog().getAcroForm(null),
+                    "fixture must have no AcroForm or this test proves nothing");
+        }
+    }
+
+    @Test
+    void addsFirstFieldToAPdfWithNoAcroForm() throws IOException {
+        byte[] saved;
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        try (PDDocument document = loadPlain()) {
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField("text", "fullName", 700f, null, "Ada"),
+                            newField("checkbox", "agree", 660f, null, null),
+                            newField("radio", "contact", 600f, List.of("Email", "Post"), null)),
+                    skipped);
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            saved = out.toByteArray();
+        }
+
+        assertTrue(skipped.isEmpty(), "no field should be skipped: " + skipped);
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            assertNotNull(acroForm, "an AcroForm should have been created");
+            assertNotNull(acroForm.getDefaultResources(), "/DR is required for variable text");
+            assertTrue(
+                    acroForm.getDefaultAppearance() != null
+                            && !acroForm.getDefaultAppearance().isBlank(),
+                    "/DA is required for variable text");
+            PDTextField text = (PDTextField) acroForm.getField("fullName");
+            assertNotNull(text, "the text field should exist");
+            assertEquals("Ada", text.getValueAsString());
+            assertNotNull(acroForm.getField("agree"));
+            assertNotNull(acroForm.getField("contact"));
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/FormUtilsRadioCaptionTest.java b/app/common/src/test/java/stirling/software/common/util/FormUtilsRadioCaptionTest.java
new file mode 100644
index 0000000000..04b317feb8
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/FormUtilsRadioCaptionTest.java
@@ -0,0 +1,175 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDRadioButton;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Option captions belong to the viewer, not the page. Drawing them into the content stream left
+ * orphan text behind on every move and delete, so these pin the page staying clean.
+ */
+class FormUtilsRadioCaptionTest {
+
+    private static FormUtils.NewFormFieldDefinition newField(
+            String type, String name, float x, float y, float w, float h, List<String> options) {
+        return new FormUtils.NewFormFieldDefinition(
+                name, null, type, 0, x, y, w, h, null, null, options, null, null, null, null, null,
+                null, null);
+    }
+
+    private static byte[] save(PDDocument document) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        document.save(out);
+        return out.toByteArray();
+    }
+
+    private static PDDocument blankWithForm() {
+        PDDocument document = new PDDocument();
+        document.addPage(new PDPage(PDRectangle.LETTER));
+        document.getDocumentCatalog().setAcroForm(new PDAcroForm(document));
+        return document;
+    }
+
+    private static String textOf(byte[] pdf) throws IOException {
+        try (PDDocument reloaded = Loader.loadPDF(pdf)) {
+            return new PDFTextStripper().getText(reloaded);
+        }
+    }
+
+    @Test
+    void radioOptionsAreNotBakedIntoThePage() throws IOException {
+        byte[] saved;
+        try (PDDocument document = blankWithForm()) {
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField(
+                                    "radio",
+                                    "contact",
+                                    72,
+                                    600,
+                                    12,
+                                    12,
+                                    List.of("Email", "Telephone", "Post"))));
+            saved = save(document);
+        }
+
+        // The caption is the viewer's job; page content cannot follow a widget that moves.
+        String text = textOf(saved);
+        assertFalse(text.contains("Email"), "options must not be page content: " + text);
+        assertFalse(text.contains("Telephone"), "options must not be page content: " + text);
+        assertFalse(text.contains("Post"), "options must not be page content: " + text);
+    }
+
+    @Test
+    void captionsDoNotReplaceTheWidgetsThemselves() throws IOException {
+        byte[] saved;
+        try (PDDocument document = blankWithForm()) {
+            FormUtils.addNewFields(
+                    document,
+                    List.of(newField("radio", "size", 72, 600, 12, 12, List.of("S", "M", "L"))));
+            saved = save(document);
+        }
+
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            PDAcroForm acroForm = reloaded.getDocumentCatalog().getAcroForm(null);
+            PDRadioButton radio = (PDRadioButton) acroForm.getField("size");
+            assertEquals(3, radio.getWidgets().size(), "one widget per option");
+            assertFalse(radio.getExportValues().isEmpty(), "export values must survive");
+        }
+    }
+
+    @Test
+    void aTextFieldDrawsNoStrayCaption() throws IOException {
+        // Control: proves the assertions above read the captions and not some unrelated content.
+        byte[] saved;
+        try (PDDocument document = blankWithForm()) {
+            FormUtils.addNewFields(
+                    document, List.of(newField("text", "fullName", 72, 600, 200, 18, null)));
+            saved = save(document);
+        }
+        assertTrue(textOf(saved).isBlank(), "a text field should add no page content");
+    }
+
+    @Test
+    void deletingARadioGroupTakesItsCaptionsWithIt() throws IOException {
+        byte[] withRadio;
+        try (PDDocument document = blankWithForm()) {
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            newField(
+                                    "radio",
+                                    "contact",
+                                    72,
+                                    600,
+                                    12,
+                                    12,
+                                    List.of("Email", "Telephone", "Post"))));
+            withRadio = save(document);
+        }
+        assertFalse(
+                textOf(withRadio).contains("Telephone"),
+                "the group adds no page text to begin with");
+
+        byte[] afterDelete;
+        try (PDDocument document = Loader.loadPDF(withRadio)) {
+            FormUtils.applyFieldEdits(document, List.of(), List.of(), List.of("contact"));
+            afterDelete = save(document);
+        }
+
+        String text = textOf(afterDelete);
+        assertFalse(
+                text.contains("Telephone"),
+                "a deleted radio group must not leave its captions on the page: " + text);
+    }
+
+    @Test
+    void theDrawnBoxIsTheWholeGroupNotOneOption() {
+        // A 90pt box used to become a 360pt stack because each option got the full height.
+        PDRectangle box = new PDRectangle(72f, 500f, 100f, 90f);
+        var rects = FormUtils.radioOptionRects(box, 3, null, null);
+
+        assertEquals(3, rects.size());
+        float top = rects.get(0).getUpperRightY();
+        float bottom = rects.get(2).getLowerLeftY();
+        assertEquals(90f, top - bottom, 0.01f, "the group must fill exactly the drawn height");
+        assertEquals(
+                box.getUpperRightY(), top, 0.01f, "the first option starts at the box's top edge");
+        for (PDRectangle r : rects) {
+            assertEquals(r.getWidth(), r.getHeight(), 0.01f, "options stay square");
+            assertTrue(r.getWidth() <= box.getWidth() + 0.01f, "an option never exceeds the box");
+        }
+    }
+
+    @Test
+    void explicitSizeAndGapWin() {
+        PDRectangle box = new PDRectangle(0f, 0f, 100f, 90f);
+        var rects = FormUtils.radioOptionRects(box, 3, 20f, 14f);
+        for (PDRectangle r : rects) {
+            assertEquals(14f, r.getHeight(), 0.01f, "the requested size is used verbatim");
+        }
+        float gap = rects.get(0).getLowerLeftY() - rects.get(1).getUpperRightY();
+        assertEquals(20f, gap, 0.01f, "the requested gap is used verbatim");
+    }
+
+    @Test
+    void aSingleOptionStillFitsTheBox() {
+        var rects = FormUtils.radioOptionRects(new PDRectangle(0f, 0f, 40f, 40f), 1, null, null);
+        assertEquals(1, rects.size());
+        assertTrue(rects.get(0).getHeight() <= 40f, "one option cannot exceed its box");
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/MissingDefaultResourcesTest.java b/app/common/src/test/java/stirling/software/common/util/MissingDefaultResourcesTest.java
new file mode 100644
index 0000000000..8c8d7e14be
--- /dev/null
+++ b/app/common/src/test/java/stirling/software/common/util/MissingDefaultResourcesTest.java
@@ -0,0 +1,57 @@
+package stirling.software.common.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** A form with no default resources is ordinary; adding a field to it must still work. */
+class MissingDefaultResourcesTest {
+
+    @Test
+    @DisplayName("a text field can be added to a form that has no default resources")
+    void addsToFormWithoutDefaultResources() throws IOException {
+        // A real upload arrives as bytes, and plenty of forms in the wild carry no /DR at all.
+        byte[] pdf;
+        try (PDDocument built = new PDDocument();
+                java.io.ByteArrayOutputStream out = new java.io.ByteArrayOutputStream()) {
+            built.addPage(new PDPage(PDRectangle.A4));
+            PDAcroForm form = new PDAcroForm(built);
+            // A /DA naming a font with no /DR to resolve it is what PDFBox refuses.
+            form.setDefaultAppearance("/Helv 0 Tf 0 g");
+            form.getCOSObject().removeItem(org.apache.pdfbox.cos.COSName.DR);
+            built.getDocumentCatalog().setAcroForm(form);
+            built.save(out);
+            pdf = out.toByteArray();
+        }
+
+        try (PDDocument document = org.apache.pdfbox.Loader.loadPDF(pdf)) {
+
+            List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            new FormUtils.NewFormFieldDefinition(
+                                    "note", null, "text", 0, 50f, 700f, 200f, 20f, null, null, null,
+                                    null, null, null, null, null, null, null)),
+                    skipped);
+
+            assertTrue(
+                    skipped.isEmpty(),
+                    "adding a plain text field should not be refused: " + skipped);
+            assertEquals(
+                    1,
+                    FormUtils.extractFormFields(document).size(),
+                    "the field should be in the document");
+        }
+    }
+}
diff --git a/app/common/src/test/java/stirling/software/common/util/RequestUriUtilsTest.java b/app/common/src/test/java/stirling/software/common/util/RequestUriUtilsTest.java
index 0e399c1fae..72e5eae9a2 100644
--- a/app/common/src/test/java/stirling/software/common/util/RequestUriUtilsTest.java
+++ b/app/common/src/test/java/stirling/software/common/util/RequestUriUtilsTest.java
@@ -206,12 +206,24 @@ class RequestUriUtilsTest {
 
     @Test
     void testIsPublicAuthEndpoint_shareLinkTokenTrailingSlash() {
-        assertTrue(RequestUriUtils.isPublicAuthEndpoint("/share/abc123/", ""));
+        assertTrue(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/share/00dcac3a-fc7a-4989-9c4f-97745484d62f/", ""));
     }
 
     @Test
     void testIsPublicAuthEndpoint_shareLinkWithContextPath() {
-        assertTrue(RequestUriUtils.isPublicAuthEndpoint("/app/share/abc123", "/app"));
+        assertTrue(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/app/share/00dcac3a-fc7a-4989-9c4f-97745484d62f", "/app"));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_shareLinkWithInvalidTokenLength() {
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/share/abc123", ""));
+        assertFalse(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/share/00dcac3a-fc7a-4989-9c4f-97745484d62fa", ""));
     }
 
     @Test
@@ -236,4 +248,86 @@ class RequestUriUtilsTest {
                 RequestUriUtils.isPublicAuthEndpoint(
                         "/api/v1/storage/share-links/abc123/metadata", ""));
     }
+
+    // --- invite-accept SPA bootstrap ---
+
+    private static final String INVITE_TOKEN = "06a20e7e-2e35-4e26-be7d-2dce14f28f12";
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteLinkToken() {
+        assertTrue(RequestUriUtils.isPublicAuthEndpoint("/invite/" + INVITE_TOKEN, ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteLinkTokenTrailingSlash() {
+        assertTrue(RequestUriUtils.isPublicAuthEndpoint("/invite/" + INVITE_TOKEN + "/", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteLinkWithContextPath() {
+        assertTrue(RequestUriUtils.isPublicAuthEndpoint("/app/invite/" + INVITE_TOKEN, "/app"));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteRootNotPublic() {
+        // Avoid matching bare "/invite" or "/invite/" - must have a token segment
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite", ""));
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite/", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteNestedPathNotPublic() {
+        // Guard against future additions like /invite/<token>/foo becoming accidentally public
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite/" + INVITE_TOKEN + "/foo", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_invitePrefixDoesNotOvermatch() {
+        // "/inviteX" must not match the invite pattern
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/inviteX", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteNonUuidTokenNotPublic() {
+        // Only exactly-shaped 36-char lowercase UUID tokens are treated as invite links
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite/abc123", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteUppercaseUuidNotPublic() {
+        // Tokens are generated lowercase by UUID.randomUUID().toString()
+        assertFalse(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/invite/06A20E7E-2E35-4E26-BE7D-2DCE14F28F12", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteWrongLengthNotPublic() {
+        // 35-char and 37-char UUID-like tokens are not valid UUIDs
+        assertFalse(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/invite/06a20e7e-2e35-4e26-be7d-2dce14f28f1", ""));
+        assertFalse(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/invite/06a20e7e-2e35-4e26-be7d-2dce14f28f122", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteWrongGroupingNotPublic() {
+        // Groups of 8-4-4-4-4 must not be shifted around (e.g. 4-4-4-4-8)
+        assertFalse(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/invite/06a2-0e7e-2e35-4e26-be7d2dce14f28f12", ""));
+    }
+
+    @Test
+    void testIsPublicAuthEndpoint_inviteTokenInvalidCharsNotPublic() {
+        // Hex-only; anything outside [0-9a-f] or the UUID hyphens is rejected
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite/abc$123", ""));
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite/abc..123", ""));
+        assertFalse(RequestUriUtils.isPublicAuthEndpoint("/invite/abc%2F123", ""));
+        assertFalse(
+                RequestUriUtils.isPublicAuthEndpoint(
+                        "/invite/06a20e7e-2e35-4e26-be7d-2dce14f28f1g", ""));
+    }
 }
diff --git a/app/core/src/main/java/stirling/software/SPDF/config/WebMvcConfig.java b/app/core/src/main/java/stirling/software/SPDF/config/WebMvcConfig.java
index 2726f8d764..01d3f49e2c 100644
--- a/app/core/src/main/java/stirling/software/SPDF/config/WebMvcConfig.java
+++ b/app/core/src/main/java/stirling/software/SPDF/config/WebMvcConfig.java
@@ -183,7 +183,9 @@ public class WebMvcConfig implements WebMvcConfigurer {
                             "X-Page-Number",
                             "X-Page-Size",
                             "Content-Disposition",
-                            "Content-Type")
+                            "Content-Type",
+                            "X-Stirling-Skipped-Field-Edits",
+                            "X-Stirling-Skipped-Field-Edits-Total")
                     .allowCredentials(true)
                     .maxAge(3600);
         } else if (hasConfiguredOrigins) {
@@ -229,7 +231,9 @@ public class WebMvcConfig implements WebMvcConfigurer {
                             "X-Page-Number",
                             "X-Page-Size",
                             "Content-Disposition",
-                            "Content-Type")
+                            "Content-Type",
+                            "X-Stirling-Skipped-Field-Edits",
+                            "X-Stirling-Skipped-Field-Edits-Total")
                     .allowCredentials(true)
                     .maxAge(3600);
         } else {
@@ -256,7 +260,9 @@ public class WebMvcConfig implements WebMvcConfigurer {
                             "X-Page-Number",
                             "X-Page-Size",
                             "Content-Disposition",
-                            "Content-Type")
+                            "Content-Type",
+                            "X-Stirling-Skipped-Field-Edits",
+                            "X-Stirling-Skipped-Field-Edits-Total")
                     .allowCredentials(true)
                     .maxAge(3600);
         }
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java
index 49bf4e4895..0354817315 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFA.java
@@ -11,6 +11,7 @@ import java.time.Instant;
 import java.time.ZoneId;
 import java.time.ZonedDateTime;
 import java.util.*;
+import java.util.Locale;
 import java.util.regex.Pattern;
 import java.util.stream.Collectors;
 import java.util.stream.Stream;
@@ -71,6 +72,7 @@ import org.apache.xmpbox.schema.PDFAIdentificationSchema;
 import org.apache.xmpbox.schema.XMPBasicSchema;
 import org.apache.xmpbox.xml.DomXmpParser;
 import org.apache.xmpbox.xml.XmpSerializer;
+import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.core.io.Resource;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.MediaType;
@@ -83,7 +85,6 @@ import io.github.pixee.security.Filenames;
 import io.swagger.v3.oas.annotations.Operation;
 
 import lombok.Getter;
-import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.SPDF.model.api.converters.PdfToPdfARequest;
@@ -93,6 +94,7 @@ import stirling.software.common.configuration.RuntimePathConfig;
 import stirling.software.common.enumeration.ResourceWeight;
 import stirling.software.common.model.tool.ToolFormat;
 import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.service.PdfaLevelAServiceInterface;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.ProcessExecutor;
 import stirling.software.common.util.ProcessExecutor.ProcessExecutorResult;
@@ -102,14 +104,26 @@ import stirling.software.common.util.WebResponseUtils;
 
 @ConvertApi
 @Slf4j
-@RequiredArgsConstructor
 public class ConvertPDFToPDFA {
 
     private static final Pattern NON_PRINTABLE_ASCII = Pattern.compile("[^\\x20-\\x7E]");
     private final RuntimePathConfig runtimePathConfig;
     private final stirling.software.SPDF.service.VeraPDFService veraPDFService;
+    // Level A needs the proprietary tagger; core builds convert at level B instead.
+    private final PdfaLevelAServiceInterface pdfaLevelAService;
     private final TempFileManager tempFileManager;
 
+    public ConvertPDFToPDFA(
+            RuntimePathConfig runtimePathConfig,
+            stirling.software.SPDF.service.VeraPDFService veraPDFService,
+            @Autowired(required = false) PdfaLevelAServiceInterface pdfaLevelAService,
+            TempFileManager tempFileManager) {
+        this.runtimePathConfig = runtimePathConfig;
+        this.veraPDFService = veraPDFService;
+        this.pdfaLevelAService = pdfaLevelAService;
+        this.tempFileManager = tempFileManager;
+    }
+
     private static final String ICC_RESOURCE_PATH = "/icc/sRGB2014.icc";
     private static final int PDFA_COMPATIBILITY_POLICY = 1;
 
@@ -604,7 +618,10 @@ public class ConvertPDFToPDFA {
             return handlePdfXConversion(inputFile, outputFormat);
         } else {
             return handlePdfAConversion(
-                    inputFile, outputFormat, request.getStrict() != null && request.getStrict());
+                    inputFile,
+                    outputFormat,
+                    request.getStrict() != null && request.getStrict(),
+                    request.getPdfUa() != null && request.getPdfUa());
         }
     }
 
@@ -1815,8 +1832,64 @@ public class ConvertPDFToPDFA {
         return Files.readAllBytes(outputPdf);
     }
 
+    /** Tags a converted PDF/A for level A; must run after Ghostscript, which discards tags. */
+    private PdfaLevelAServiceInterface.Result applyLevelA(
+            byte[] converted,
+            Path original,
+            PdfaProfile profile,
+            String baseFileName,
+            boolean declarePdfUa) {
+        if (!profile.requiresTagging()) {
+            return new PdfaLevelAServiceInterface.Result(converted, true, List.of());
+        }
+        if (pdfaLevelAService == null) {
+            return new PdfaLevelAServiceInterface.Result(
+                    converted,
+                    false,
+                    List.of(
+                            "Level A tagging is not available in this build, so the file was left"
+                                    + " at conformance level B."));
+        }
+        // Prefer the document's own title/language; hardcoding "en" mislabelled German reports.
+        // Read the original, not the converted bytes: Ghostscript discards /Lang, so probing its
+        // output always yields null and every document would be relabelled with the default.
+        String language = null;
+        String title = null;
+        try (PDDocument probe = Loader.loadPDF(original.toFile())) {
+            language = probe.getDocumentCatalog().getLanguage();
+            title = probe.getDocumentInformation().getTitle();
+        } catch (IOException e) {
+            log.debug("Could not read original title/language: {}", e.getMessage());
+        }
+        if (language == null || language.isBlank()) {
+            try (PDDocument probe = Loader.loadPDF(converted)) {
+                language = probe.getDocumentCatalog().getLanguage();
+                if (title == null || title.isBlank()) {
+                    title = probe.getDocumentInformation().getTitle();
+                }
+            } catch (IOException e) {
+                log.debug("Could not read converted title/language: {}", e.getMessage());
+            }
+        }
+        PdfaLevelAServiceInterface.Result result =
+                pdfaLevelAService.upgradeToLevelA(
+                        converted,
+                        profile.getPart(),
+                        language,
+                        title != null && !title.isBlank() ? title : baseFileName,
+                        declarePdfUa);
+        result.warnings().forEach(warning -> log.info("PDF/A level A: {}", warning));
+        if (!result.levelA()) {
+            log.warn(
+                    "{} requested but the document could not be tagged; returning level B",
+                    profile.getDisplayName());
+        }
+        return result;
+    }
+
     private ResponseEntity<Resource> handlePdfAConversion(
-            MultipartFile inputFile, String outputFormat, boolean strict) throws Exception {
+            MultipartFile inputFile, String outputFormat, boolean strict, boolean declarePdfUa)
+            throws Exception {
         PdfaProfile profile = PdfaProfile.fromRequest(outputFormat);
 
         // Get the original filename without extension
@@ -1841,12 +1914,15 @@ public class ConvertPDFToPDFA {
                 log.info("Using Ghostscript for PDF/A conversion to {}", profile.getDisplayName());
                 try {
                     converted = convertWithGhostscript(inputPath, workingDir, profile);
-                    String outputFilename = baseFileName + profile.outputSuffix();
+                    var levelA =
+                            applyLevelA(converted, inputPath, profile, baseFileName, declarePdfUa);
+                    converted = levelA.pdfBytes();
+                    String outputFilename = baseFileName + profile.outputSuffix(levelA.levelA());
 
                     validateAndWarnPdfA(converted, profile, "Ghostscript");
 
                     if (strict) {
-                        verifyStrictCompliance(converted);
+                        verifyStrictCompliance(converted, profile, levelA.levelA());
                     }
 
                     TempFile tempOut = tempFileManager.createManagedTempFile(".pdf");
@@ -1867,13 +1943,15 @@ public class ConvertPDFToPDFA {
             }
 
             converted = convertWithPdfBoxMethod(inputPath, profile);
-            String outputFilename = baseFileName + profile.outputSuffix();
+            var levelA = applyLevelA(converted, inputPath, profile, baseFileName, declarePdfUa);
+            converted = levelA.pdfBytes();
+            String outputFilename = baseFileName + profile.outputSuffix(levelA.levelA());
 
             // Validate with PDFBox preflight and warn if issues found
             validateAndWarnPdfA(converted, profile, "PDFBox/LibreOffice");
 
             if (strict) {
-                verifyStrictCompliance(converted);
+                verifyStrictCompliance(converted, profile, levelA.levelA());
             }
 
             TempFile tempOut = tempFileManager.createManagedTempFile(".pdf");
@@ -1889,11 +1967,56 @@ public class ConvertPDFToPDFA {
         }
     }
 
-    private void verifyStrictCompliance(byte[] pdfBytes) throws IOException {
+    /** True for a PDF/UA or WCAG result, which says nothing about archival conformance. */
+    private static boolean isAccessibilityProfile(
+            stirling.software.SPDF.model.api.security.PDFVerificationResult result) {
+        String profile = result.getValidationProfile();
+        if (profile == null) {
+            return false;
+        }
+        String normalised = profile.toLowerCase(Locale.ROOT);
+        return normalised.contains("ua") || normalised.contains("wcag");
+    }
+
+    /**
+     * True when a result speaks for the requested profile. Only archival results count, and a level
+     * B pass must never satisfy a level A request.
+     */
+    private static boolean answersRequest(
+            PdfaProfile profile,
+            stirling.software.SPDF.model.api.security.PDFVerificationResult result) {
+        if (isAccessibilityProfile(result)) {
+            return false;
+        }
+        String standard = result.getStandard();
+        if (standard == null || standard.length() < 2) {
+            return false;
+        }
+        if (standard.charAt(0) != Character.forDigit(profile.getPart(), 10)) {
+            return false;
+        }
+        return !profile.requiresTagging() || Character.toLowerCase(standard.charAt(1)) == 'a';
+    }
+
+    private void verifyStrictCompliance(byte[] pdfBytes, PdfaProfile profile, boolean levelAReached)
+            throws IOException {
+        // Tagging is the only route to level A, so an untagged file cannot answer a strict request.
+        if (!levelAReached) {
+            throw new ResponseStatusException(
+                    HttpStatus.BAD_REQUEST,
+                    "Strict PDF/A mode enabled: the document could not be tagged, so "
+                            + profile.getDisplayName()
+                            + " was not reached. It is valid at level B.");
+        }
         try (InputStream is = new ByteArrayInputStream(pdfBytes)) {
             List<stirling.software.SPDF.model.api.security.PDFVerificationResult> results =
                     veraPDFService.validatePDF(is);
-            boolean isCompliant = results.stream().anyMatch(result -> result.isCompliant());
+            boolean isCompliant =
+                    results.stream()
+                            .filter(result -> answersRequest(profile, result))
+                            .anyMatch(
+                                    stirling.software.SPDF.model.api.security.PDFVerificationResult
+                                            ::isCompliant);
             if (!isCompliant) {
                 String details =
                         results.stream()
@@ -1901,7 +2024,9 @@ public class ConvertPDFToPDFA {
                                 .collect(Collectors.joining("; "));
                 throw new ResponseStatusException(
                         HttpStatus.BAD_REQUEST,
-                        "Strict PDF/A mode enabled: Conversion is not perfectly compliant. Details: "
+                        "Strict PDF/A mode enabled: the output is not perfectly compliant with "
+                                + profile.getDisplayName()
+                                + ". Details: "
                                 + details);
             }
         } catch (Exception e) {
@@ -2466,11 +2591,16 @@ public class ConvertPDFToPDFA {
 
     @Getter
     private enum PdfaProfile {
-        PDF_A_1B(1, "PDF/A-1b", "_PDFA-1b.pdf", "1.4", Format.PDF_A1B, "pdfa-1"),
-        PDF_A_2B(2, "PDF/A-2b", "_PDFA-2b.pdf", "1.7", null, "pdfa", "pdfa-2", "pdfa-2b"),
-        PDF_A_3B(3, "PDF/A-3b", "_PDFA-3b.pdf", "1.7", null, "pdfa-3", "pdfa-3b");
+        PDF_A_1B(1, "B", "PDF/A-1b", "_PDFA-1b.pdf", "1.4", Format.PDF_A1B, "pdfa-1"),
+        PDF_A_2B(2, "B", "PDF/A-2b", "_PDFA-2b.pdf", "1.7", null, "pdfa", "pdfa-2", "pdfa-2b"),
+        PDF_A_3B(3, "B", "PDF/A-3b", "_PDFA-3b.pdf", "1.7", null, "pdfa-3", "pdfa-3b"),
+        // Level A = level B plus tagging, declared language and Unicode text; tagged post-convert.
+        PDF_A_1A(1, "A", "PDF/A-1a", "_PDFA-1a.pdf", "1.4", Format.PDF_A1B, "pdfa-1a"),
+        PDF_A_2A(2, "A", "PDF/A-2a", "_PDFA-2a.pdf", "1.7", null, "pdfa-2a"),
+        PDF_A_3A(3, "A", "PDF/A-3a", "_PDFA-3a.pdf", "1.7", null, "pdfa-3a");
 
         private final int part;
+        private final String conformanceLevel;
         private final String displayName;
         private final String suffix;
         private final String compatibilityLevel;
@@ -2479,12 +2609,14 @@ public class ConvertPDFToPDFA {
 
         PdfaProfile(
                 int part,
+                String conformanceLevel,
                 String displayName,
                 String suffix,
                 String compatibilityLevel,
                 Format preflightFormat,
                 String... requestTokens) {
             this.part = part;
+            this.conformanceLevel = conformanceLevel;
             this.displayName = displayName;
             this.suffix = suffix;
             this.compatibilityLevel = compatibilityLevel;
@@ -2495,6 +2627,10 @@ public class ConvertPDFToPDFA {
                             .toList();
         }
 
+        boolean requiresTagging() {
+            return "A".equals(conformanceLevel);
+        }
+
         static PdfaProfile fromRequest(String requestToken) {
             if (requestToken == null) {
                 return PDF_A_2B;
@@ -2508,8 +2644,11 @@ public class ConvertPDFToPDFA {
             return match.orElse(PDF_A_2B);
         }
 
-        String outputSuffix() {
-            return suffix;
+        /**
+         * Names the file at the level actually reached; a level A name over level B content lies.
+         */
+        String outputSuffix(boolean levelAReached) {
+            return levelAReached ? suffix : "_PDFA-" + part + "b.pdf";
         }
 
         Optional<Format> preflightFormat() {
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormFillController.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormFillController.java
index d24d175f5c..0bd3daf180 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormFillController.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormFillController.java
@@ -2,10 +2,20 @@ package stirling.software.SPDF.controller.api.form;
 
 import java.io.ByteArrayOutputStream;
 import java.io.IOException;
+import java.io.InputStream;
 import java.io.StringWriter;
 import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.Base64;
 import java.util.List;
 import java.util.Map;
+import java.util.Objects;
+import java.util.stream.Stream;
+import java.util.zip.CRC32;
+import java.util.zip.ZipEntry;
+import java.util.zip.ZipOutputStream;
 
 import org.apache.pdfbox.pdmodel.PDDocument;
 import org.apache.poi.ss.usermodel.*;
@@ -35,6 +45,7 @@ import stirling.software.common.model.FormFieldWithCoordinates;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.util.ExceptionUtils;
 import stirling.software.common.util.FormUtils;
+import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
 import stirling.software.common.util.WebResponseUtils;
 
@@ -59,6 +70,25 @@ import tools.jackson.databind.ObjectMapper;
 @RequiredArgsConstructor
 public class FormFillController {
 
+    /** Carries the edits a request asked for but the document could not take, as base64 JSON. */
+    public static final String SKIPPED_EDITS_HEADER = "X-Stirling-Skipped-Field-Edits";
+
+    /** How many were skipped in total, which may exceed the number listed in the header above. */
+    public static final String SKIPPED_EDITS_TOTAL_HEADER = "X-Stirling-Skipped-Field-Edits-Total";
+
+    /** Keeps the header well inside Jetty's response-header budget. */
+    private static final int MAX_REPORTED_SKIPS = 20;
+
+    /** Bytes of encoded header value, well under the container's limit for the whole header set. */
+    private static final int MAX_SKIP_HEADER_BYTES = 4096;
+
+    private static final int MAX_SKIP_FIELD_CHARS = 120;
+
+    /** Entry names inside the {@code ?includeFields=true} bundle. */
+    private static final String FIELDS_ENTRY = "fields.json";
+
+    private static final String DOCUMENT_ENTRY = "document.pdf";
+
     private final CustomPDFDocumentFactory pdfDocumentFactory;
     private final ObjectMapper objectMapper;
     private final TempFileManager tempFileManager;
@@ -68,6 +98,72 @@ public class FormFillController {
         return WebResponseUtils.pdfDocToWebResponse(document, baseName + ".pdf", tempFileManager);
     }
 
+    /**
+     * Rejects field names PDFBox cannot store before the document is touched, so the caller gets a
+     * 400 naming the offending character instead of a 200 with the field quietly missing.
+     */
+    private static void requireUsableFieldNames(
+            List<FormUtils.NewFormFieldDefinition> adds,
+            List<FormUtils.ModifyFormFieldDefinition> modifies) {
+        Stream<String> problems =
+                Stream.concat(
+                        adds.stream()
+                                .map(FormUtils.NewFormFieldDefinition::name)
+                                .map(FormUtils::invalidFieldNameReason),
+                        // A rename to the same name is not a rename, so a nested field whose
+                        // qualified name already contains a period is left alone.
+                        modifies.stream()
+                                .map(m -> FormUtils.renameProblem(m.targetName(), m.name())));
+        problems.filter(Objects::nonNull)
+                .findFirst()
+                .ifPresent(
+                        reason -> {
+                            throw ExceptionUtils.createIllegalArgumentException(
+                                    "error.invalidArgument", "{0}", reason);
+                        });
+    }
+
+    /**
+     * The body is the updated PDF, so dropped edits travel as a base64 JSON header;
+     * percent-encoding would turn every space into a plus sign.
+     */
+    private ResponseEntity<Resource> withSkippedEdits(
+            ResponseEntity<Resource> response, List<FormUtils.SkippedFieldEdit> skipped) {
+        if (skipped.isEmpty()) {
+            return response;
+        }
+        // A count cap alone is not enough: one very long field name can still overflow the
+        // header budget and turn the response into an error page, losing the edited PDF.
+        List<FormUtils.SkippedFieldEdit> reported = new ArrayList<>();
+        String encoded = "";
+        for (FormUtils.SkippedFieldEdit edit : skipped) {
+            if (reported.size() >= MAX_REPORTED_SKIPS) {
+                break;
+            }
+            reported.add(
+                    new FormUtils.SkippedFieldEdit(
+                            edit.operation(),
+                            FormUtils.abbreviate(edit.target(), MAX_SKIP_FIELD_CHARS),
+                            FormUtils.abbreviate(edit.reason(), MAX_SKIP_FIELD_CHARS)));
+            String candidate =
+                    Base64.getEncoder()
+                            .encodeToString(
+                                    objectMapper
+                                            .writeValueAsString(reported)
+                                            .getBytes(StandardCharsets.UTF_8));
+            if (candidate.length() > MAX_SKIP_HEADER_BYTES) {
+                reported.removeLast();
+                break;
+            }
+            encoded = candidate;
+        }
+        return ResponseEntity.status(response.getStatusCode())
+                .headers(response.getHeaders())
+                .header(SKIPPED_EDITS_TOTAL_HEADER, String.valueOf(skipped.size()))
+                .header(SKIPPED_EDITS_HEADER, encoded)
+                .body(response.getBody());
+    }
+
     private static String buildBaseName(MultipartFile file, String suffix) {
         String original = Filenames.toSimpleFileName(file.getOriginalFilename());
         if (original == null || original.isBlank()) {
@@ -257,6 +353,110 @@ public class FormFillController {
         }
     }
 
+    @PostMapping(value = "/add-fields", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
+    @Operation(
+            summary = "Add new form fields",
+            description =
+                    "Creates new form fields in the provided PDF and returns the updated file")
+    public ResponseEntity<Resource> addFields(
+            @Parameter(
+                            description = "The input PDF file",
+                            required = true,
+                            content =
+                                    @Content(
+                                            mediaType = MediaType.APPLICATION_PDF_VALUE,
+                                            schema = @Schema(type = "string", format = "binary")))
+                    @RequestParam("file")
+                    MultipartFile file,
+            @Parameter(
+                            description = "JSON array of new field definitions",
+                            example =
+                                    "[{\"name\":\"NewField\",\"type\":\"text\",\"pageIndex\":0,"
+                                            + "\"x\":50,\"y\":700,\"width\":200,\"height\":20}]")
+                    @RequestPart(value = "fields", required = false)
+                    byte[] fieldsPayload)
+            throws IOException {
+
+        String rawFields = decodePart(fieldsPayload);
+        List<FormUtils.NewFormFieldDefinition> definitions =
+                FormPayloadParser.parseNewFieldDefinitions(objectMapper, rawFields);
+        if (definitions.isEmpty()) {
+            throw ExceptionUtils.createIllegalArgumentException(
+                    "error.dataRequired",
+                    "{0} must contain at least one definition",
+                    "fields payload");
+        }
+
+        requireUsableFieldNames(definitions, List.of());
+
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        return withSkippedEdits(
+                processSingleFile(
+                        file,
+                        "updated",
+                        document -> FormUtils.addNewFields(document, definitions, skipped)),
+                skipped);
+    }
+
+    @PostMapping(value = "/edit-fields", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
+    @Operation(
+            summary = "Apply a batch of form field edits",
+            description =
+                    "Adds, modifies, and deletes form fields in a single request (one document"
+                            + " load/save) and returns the updated file")
+    public ResponseEntity<Resource> editFields(
+            @Parameter(
+                            description = "The input PDF file",
+                            required = true,
+                            content =
+                                    @Content(
+                                            mediaType = MediaType.APPLICATION_PDF_VALUE,
+                                            schema = @Schema(type = "string", format = "binary")))
+                    @RequestParam("file")
+                    MultipartFile file,
+            @Parameter(
+                            description =
+                                    "JSON object with optional 'add', 'modify' and 'delete'"
+                                            + " sections",
+                            example =
+                                    "{\"add\":[{\"name\":\"f\",\"type\":\"text\",\"pageIndex\":0,"
+                                            + "\"x\":50,\"y\":700,\"width\":200,\"height\":20}],"
+                                            + "\"modify\":[],\"delete\":[]}")
+                    @RequestPart(value = "edits", required = false)
+                    byte[] editsPayload,
+            @Parameter(
+                            description =
+                                    "Return a ZIP holding the updated PDF plus the field list it"
+                                            + " produced, instead of the bare PDF. Saves re-uploading"
+                                            + " the result just to read its fields back.")
+                    @RequestParam(value = "includeFields", defaultValue = "false")
+                    boolean includeFields)
+            throws IOException {
+
+        String rawEdits = decodePart(editsPayload);
+        FormUtils.FieldEditBatch batch = FormPayloadParser.parseFieldEdits(objectMapper, rawEdits);
+        if (batch.add().isEmpty() && batch.modify().isEmpty() && batch.delete().isEmpty()) {
+            throw ExceptionUtils.createIllegalArgumentException(
+                    "error.dataRequired", "{0} must contain at least one edit", "edits payload");
+        }
+        requireUsableFieldNames(batch.add(), batch.modify());
+
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        return withSkippedEdits(
+                processSingleFile(
+                        file,
+                        "updated",
+                        includeFields,
+                        document ->
+                                FormUtils.applyFieldEdits(
+                                        document,
+                                        batch.add(),
+                                        batch.modify(),
+                                        batch.delete(),
+                                        skipped)),
+                skipped);
+    }
+
     @PostMapping(value = "/modify-fields", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
     @Operation(
             summary = "Modify existing form fields",
@@ -285,8 +485,15 @@ public class FormFillController {
                     "updates payload");
         }
 
-        return processSingleFile(
-                file, "updated", document -> FormUtils.modifyFormFields(document, modifications));
+        requireUsableFieldNames(List.of(), modifications);
+
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        return withSkippedEdits(
+                processSingleFile(
+                        file,
+                        "updated",
+                        document -> FormUtils.modifyFormFields(document, modifications, skipped)),
+                skipped);
     }
 
     @PostMapping(value = "/delete-fields", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
@@ -319,8 +526,13 @@ public class FormFillController {
                     "error.dataRequired", "{0} must contain at least one value", "names payload");
         }
 
-        return processSingleFile(
-                file, "updated", document -> FormUtils.deleteFormFields(document, names));
+        List<FormUtils.SkippedFieldEdit> skipped = new ArrayList<>();
+        return withSkippedEdits(
+                processSingleFile(
+                        file,
+                        "updated",
+                        document -> FormUtils.deleteFormFields(document, names, skipped)),
+                skipped);
     }
 
     @PostMapping(value = "/fill", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
@@ -358,13 +570,81 @@ public class FormFillController {
 
     private ResponseEntity<Resource> processSingleFile(
             MultipartFile file, String suffix, DocumentProcessor processor) throws IOException {
+        return processSingleFile(file, suffix, false, processor);
+    }
+
+    private ResponseEntity<Resource> processSingleFile(
+            MultipartFile file, String suffix, boolean includeFields, DocumentProcessor processor)
+            throws IOException {
         requirePdf(file);
 
         String baseName = buildBaseName(file, suffix);
         try (PDDocument document = pdfDocumentFactory.load(file)) {
             FormUtils.repairMissingWidgetPageReferences(document);
             processor.accept(document);
-            return saveDocument(document, baseName);
+            return includeFields
+                    ? saveDocumentWithFields(document, baseName)
+                    : saveDocument(document, baseName);
+        }
+    }
+
+    /**
+     * Answers "what fields does the saved file have?" from the document still open here, so the
+     * caller does not have to upload the result back to ask.
+     */
+    private ResponseEntity<Resource> saveDocumentWithFields(PDDocument document, String baseName)
+            throws IOException {
+        TempFile zip = null;
+        boolean zipTransferred = false;
+        try (TempFile pdf = tempFileManager.createManagedTempFile(".pdf")) {
+            document.save(pdf.getFile());
+            // Read the fields after the save so they describe the bytes actually being returned.
+            byte[] fields =
+                    objectMapper.writeValueAsBytes(
+                            FormUtils.extractFormFieldsWithCoordinates(document));
+            zip = tempFileManager.createManagedTempFile(".zip");
+            writeFieldBundle(zip.getPath(), pdf.getPath(), fields);
+            ResponseEntity<Resource> response =
+                    WebResponseUtils.zipFileToWebResponse(zip, baseName + ".zip");
+            zipTransferred = true;
+            return response;
+        } finally {
+            if (zip != null && !zipTransferred) {
+                zip.close();
+            }
+        }
+    }
+
+    /**
+     * Deflates the JSON because it is text, but stores the PDF: its streams are already compressed,
+     * so deflating costs ~25ms per MB to save a few percent.
+     */
+    private static void writeFieldBundle(Path zipPath, Path pdfPath, byte[] fields)
+            throws IOException {
+        long pdfSize = Files.size(pdfPath);
+        CRC32 crc = new CRC32();
+        try (InputStream in = Files.newInputStream(pdfPath)) {
+            byte[] buffer = new byte[8192];
+            for (int read; (read = in.read(buffer)) != -1; ) {
+                crc.update(buffer, 0, read);
+            }
+        }
+        try (ZipOutputStream zip = new ZipOutputStream(Files.newOutputStream(zipPath))) {
+            ZipEntry fieldsEntry = new ZipEntry(FIELDS_ENTRY);
+            fieldsEntry.setMethod(ZipEntry.DEFLATED);
+            zip.putNextEntry(fieldsEntry);
+            zip.write(fields);
+            zip.closeEntry();
+
+            ZipEntry documentEntry = new ZipEntry(DOCUMENT_ENTRY);
+            documentEntry.setMethod(ZipEntry.STORED);
+            documentEntry.setSize(pdfSize);
+            documentEntry.setCompressedSize(pdfSize);
+            documentEntry.setCrc(crc.getValue());
+            zip.putNextEntry(documentEntry);
+            Files.copy(pdfPath, zip);
+            zip.closeEntry();
+            zip.finish();
         }
     }
 
diff --git a/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormPayloadParser.java b/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormPayloadParser.java
index 6f82c7546e..f48f419a6d 100644
--- a/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormPayloadParser.java
+++ b/app/core/src/main/java/stirling/software/SPDF/controller/api/form/FormPayloadParser.java
@@ -28,6 +28,8 @@ final class FormPayloadParser {
     private static final TypeReference<Map<String, Object>> MAP_TYPE = new TypeReference<>() {};
     private static final TypeReference<List<FormUtils.ModifyFormFieldDefinition>>
             MODIFY_FIELD_LIST_TYPE = new TypeReference<>() {};
+    private static final TypeReference<List<FormUtils.NewFormFieldDefinition>> NEW_FIELD_LIST_TYPE =
+            new TypeReference<>() {};
     private static final TypeReference<List<String>> STRING_LIST_TYPE = new TypeReference<>() {};
 
     private FormPayloadParser() {}
@@ -94,6 +96,43 @@ final class FormPayloadParser {
         return objectMapper.readValue(json, MODIFY_FIELD_LIST_TYPE);
     }
 
+    static List<FormUtils.NewFormFieldDefinition> parseNewFieldDefinitions(
+            ObjectMapper objectMapper, String json) {
+        if (json == null || json.isBlank()) {
+            return List.of();
+        }
+        return objectMapper.readValue(json, NEW_FIELD_LIST_TYPE);
+    }
+
+    /**
+     * Parses a combined edit batch: {@code {"add":[...],"modify":[...],"delete":[...]}}. Each
+     * section is optional. The delete section accepts the same shapes as {@link #parseNameList}.
+     */
+    static FormUtils.FieldEditBatch parseFieldEdits(ObjectMapper objectMapper, String json) {
+        if (json == null || json.isBlank()) {
+            return new FormUtils.FieldEditBatch(List.of(), List.of(), List.of());
+        }
+        final JsonNode root = objectMapper.readTree(json);
+        List<FormUtils.NewFormFieldDefinition> adds = List.of();
+        List<FormUtils.ModifyFormFieldDefinition> modifies = List.of();
+        List<String> deletes = List.of();
+        if (root != null && root.isObject()) {
+            final JsonNode addNode = root.get("add");
+            if (addNode != null && addNode.isArray()) {
+                adds = objectMapper.readValue(addNode.toString(), NEW_FIELD_LIST_TYPE);
+            }
+            final JsonNode modifyNode = root.get("modify");
+            if (modifyNode != null && modifyNode.isArray()) {
+                modifies = objectMapper.readValue(modifyNode.toString(), MODIFY_FIELD_LIST_TYPE);
+            }
+            final JsonNode deleteNode = root.get("delete");
+            if (deleteNode != null && !deleteNode.isNull()) {
+                deletes = parseNameList(objectMapper, deleteNode.toString());
+            }
+        }
+        return new FormUtils.FieldEditBatch(adds, modifies, deletes);
+    }
+
     static List<String> parseNameList(ObjectMapper objectMapper, String json) {
         if (json == null || json.isBlank()) {
             return List.of();
diff --git a/app/core/src/main/java/stirling/software/SPDF/model/api/converters/PdfToPdfARequest.java b/app/core/src/main/java/stirling/software/SPDF/model/api/converters/PdfToPdfARequest.java
index bb0520a4ba..921663912b 100644
--- a/app/core/src/main/java/stirling/software/SPDF/model/api/converters/PdfToPdfARequest.java
+++ b/app/core/src/main/java/stirling/software/SPDF/model/api/converters/PdfToPdfARequest.java
@@ -14,9 +14,19 @@ public class PdfToPdfARequest extends PDFFile {
     @Schema(
             description = "The output format type (PDF/A or PDF/X)",
             requiredMode = Schema.RequiredMode.REQUIRED,
-            allowableValues = {"pdfa", "pdfa-1", "pdfa-2", "pdfa-2b", "pdfa-3", "pdfa-3b", "pdfx"})
+            allowableValues = {
+                "pdfa", "pdfa-1", "pdfa-2", "pdfa-2b", "pdfa-3", "pdfa-3b", "pdfa-1a", "pdfa-2a",
+                "pdfa-3a", "pdfx"
+            })
     private String outputFormat;
 
+    @Schema(
+            description =
+                    "Also declare PDF/UA accessibility alongside PDF/A. Only applies to the level A"
+                            + " formats, and the claim is written only if it validates.",
+            defaultValue = "false")
+    private Boolean pdfUa;
+
     @Schema(
             description =
                     "If true, the conversion will fail if the output is not perfectly compliant")
diff --git a/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java b/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java
index bb3c84534c..6361157b21 100644
--- a/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java
+++ b/app/core/src/main/java/stirling/software/SPDF/service/VeraPDFService.java
@@ -285,6 +285,8 @@ public class VeraPDFService {
             }
         }
 
+        // Never force PDF/UA here - it flags every ordinary document as non-compliant and doubles
+        // verify cost; /accessibility-report checks PDF/UA on demand.
         if (!hasPdfaDeclaration) {
             results.add(createNoPdfaDeclarationResult());
         }
diff --git a/app/core/src/main/java/stirling/software/common/controller/JobController.java b/app/core/src/main/java/stirling/software/common/controller/JobController.java
index ef9e81873e..c6fec4b92b 100644
--- a/app/core/src/main/java/stirling/software/common/controller/JobController.java
+++ b/app/core/src/main/java/stirling/software/common/controller/JobController.java
@@ -12,6 +12,7 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.DeleteMapping;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PathVariable;
+import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
 import org.springframework.web.bind.annotation.RestController;
 
@@ -213,6 +214,35 @@ public class JobController {
         }
     }
 
+    /**
+     * Self-service counterpart to the admin-only {@code POST /api/v1/admin/job/cleanup}: that one
+     * sweeps every user's jobs and needs ROLE_ADMIN, this one releases only the caller's own and so
+     * is safe for any authenticated user. Both run the same sweep inside {@link TaskManager}.
+     */
+    @PostMapping("/jobs/cleanup")
+    @Operation(
+            summary = "Release finished jobs and their stored files now",
+            description =
+                    "Force-expires this node's finished jobs instead of waiting out the retention"
+                            + " window, deleting their result files and the persistent copies made of"
+                            + " their inputs. Only jobs the caller may access are touched, and jobs"
+                            + " still running are left alone. Admins can sweep every user's jobs"
+                            + " with POST /api/v1/admin/job/cleanup?force=true.")
+    public ResponseEntity<?> cleanupFinishedJobs() {
+        TaskManager.CleanupSummary summary =
+                taskManager.cleanupFinishedJobsNow(this::validateJobAccess);
+        log.info(
+                "On-demand job cleanup removed {} job(s) and {} file(s), retained {} job(s)",
+                summary.jobsRemoved(),
+                summary.filesDeleted(),
+                summary.jobsRetained());
+        return ResponseEntity.ok(
+                Map.of(
+                        "jobsRemoved", summary.jobsRemoved(),
+                        "filesDeleted", summary.filesDeleted(),
+                        "jobsRetained", summary.jobsRetained()));
+    }
+
     @GetMapping("/job/{jobId}/result/files")
     @Operation(summary = "Get job result files")
     public ResponseEntity<?> getJobFiles(@PathVariable("jobId") String jobId) {
diff --git a/app/core/src/main/resources/static/3rdPartyLicenses.json b/app/core/src/main/resources/static/3rdPartyLicenses.json
index fa852846b3..a0dae640e0 100644
--- a/app/core/src/main/resources/static/3rdPartyLicenses.json
+++ b/app/core/src/main/resources/static/3rdPartyLicenses.json
@@ -14,6 +14,13 @@
             "moduleLicense": "GNU Lesser General Public License",
             "moduleLicenseUrl": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
         },
+        {
+            "moduleName": "ch.qos.logback:logback-classic",
+            "moduleUrl": "http://www.qos.ch",
+            "moduleVersion": "1.6.3",
+            "moduleLicense": "LGPL-2.1-only",
+            "moduleLicenseUrl": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
+        },
         {
             "moduleName": "ch.qos.logback:logback-core",
             "moduleUrl": "http://www.qos.ch",
@@ -21,6 +28,13 @@
             "moduleLicense": "GNU Lesser General Public License",
             "moduleLicenseUrl": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
         },
+        {
+            "moduleName": "ch.qos.logback:logback-core",
+            "moduleUrl": "http://www.qos.ch",
+            "moduleVersion": "1.6.3",
+            "moduleLicense": "LGPL-2.1-only",
+            "moduleLicenseUrl": "https://www.gnu.org/licenses/old-licenses/lgpl-2.1.html"
+        },
         {
             "moduleName": "com.adobe.xmp:xmpcore",
             "moduleUrl": "https://www.adobe.com/devnet/xmp/library/eula-xmp-library-java.html",
@@ -182,7 +196,7 @@
         {
             "moduleName": "com.github.mwiede:jsch",
             "moduleUrl": "https://github.com/mwiede/jsch",
-            "moduleVersion": "0.2.23",
+            "moduleVersion": "2.28.6",
             "moduleLicense": "Revised BSD",
             "moduleLicenseUrl": "https://github.com/mwiede/jsch/blob/master/LICENSE.txt"
         },
@@ -513,27 +527,45 @@
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.common:common-image",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.twelvemonkeys.common:common-io",
             "moduleVersion": "3.13.1",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.common:common-io",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.twelvemonkeys.common:common-lang",
             "moduleVersion": "3.13.1",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.common:common-lang",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.twelvemonkeys.imageio:imageio-batik",
-            "moduleVersion": "3.13.1",
+            "moduleVersion": "3.14.0",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
         {
             "moduleName": "com.twelvemonkeys.imageio:imageio-bmp",
-            "moduleVersion": "3.13.1",
+            "moduleVersion": "3.14.0",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
@@ -543,9 +575,15 @@
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.imageio:imageio-core",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.twelvemonkeys.imageio:imageio-jpeg",
-            "moduleVersion": "3.13.1",
+            "moduleVersion": "3.14.0",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
@@ -555,9 +593,15 @@
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.imageio:imageio-metadata",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.twelvemonkeys.imageio:imageio-psd",
-            "moduleVersion": "3.13.1",
+            "moduleVersion": "3.14.0",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
@@ -567,12 +611,24 @@
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.imageio:imageio-tiff",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.twelvemonkeys.imageio:imageio-webp",
             "moduleVersion": "3.13.1",
             "moduleLicense": "The BSD License",
             "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
         },
+        {
+            "moduleName": "com.twelvemonkeys.imageio:imageio-webp",
+            "moduleVersion": "3.14.0",
+            "moduleLicense": "The BSD License",
+            "moduleLicenseUrl": "https://github.com/haraldk/TwelveMonkeys#license"
+        },
         {
             "moduleName": "com.vladsch.flexmark:flexmark",
             "moduleVersion": "0.64.8",
@@ -758,7 +814,7 @@
         {
             "moduleName": "commons-net:commons-net",
             "moduleUrl": "https://commons.apache.org/proper/commons-net/",
-            "moduleVersion": "3.11.1",
+            "moduleVersion": "3.13.0",
             "moduleLicense": "Apache-2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
         },
@@ -1008,21 +1064,14 @@
         {
             "moduleName": "io.swagger.core.v3:swagger-annotations-jakarta",
             "moduleUrl": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations",
-            "moduleVersion": "2.2.46",
+            "moduleVersion": "2.2.47",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
         {
             "moduleName": "io.swagger.core.v3:swagger-annotations-jakarta",
             "moduleUrl": "https://github.com/swagger-api/swagger-core/modules/swagger-annotations",
-            "moduleVersion": "2.2.47",
-            "moduleLicense": "Apache License, Version 2.0",
-            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
-        },
-        {
-            "moduleName": "io.swagger.core.v3:swagger-core-jakarta",
-            "moduleUrl": "https://github.com/swagger-api/swagger-core/modules/swagger-core",
-            "moduleVersion": "2.2.46",
+            "moduleVersion": "2.2.53",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
@@ -1034,9 +1083,9 @@
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
         {
-            "moduleName": "io.swagger.core.v3:swagger-models-jakarta",
-            "moduleUrl": "https://github.com/swagger-api/swagger-core/modules/swagger-models",
-            "moduleVersion": "2.2.46",
+            "moduleName": "io.swagger.core.v3:swagger-core-jakarta",
+            "moduleUrl": "https://github.com/swagger-api/swagger-core/modules/swagger-core",
+            "moduleVersion": "2.2.53",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
@@ -1047,6 +1096,13 @@
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
+        {
+            "moduleName": "io.swagger.core.v3:swagger-models-jakarta",
+            "moduleUrl": "https://github.com/swagger-api/swagger-core/modules/swagger-models",
+            "moduleVersion": "2.2.53",
+            "moduleLicense": "Apache License, Version 2.0",
+            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
+        },
         {
             "moduleName": "jakarta.activation:jakarta.activation-api",
             "moduleUrl": "https://www.eclipse.org",
@@ -1213,24 +1269,48 @@
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "net.shibboleth:shib-networking",
+            "moduleVersion": "9.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "net.shibboleth:shib-security",
             "moduleVersion": "9.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "net.shibboleth:shib-security",
+            "moduleVersion": "9.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "net.shibboleth:shib-support",
             "moduleVersion": "9.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "net.shibboleth:shib-support",
+            "moduleVersion": "9.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "net.shibboleth:shib-velocity",
             "moduleVersion": "9.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "net.shibboleth:shib-velocity",
+            "moduleVersion": "9.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.antlr:antlr4-runtime",
             "moduleUrl": "https://www.antlr.org/",
@@ -1325,13 +1405,6 @@
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
         },
-        {
-            "moduleName": "org.apache.httpcomponents:httpclient",
-            "moduleUrl": "http://hc.apache.org/httpcomponents-client",
-            "moduleVersion": "4.5.13",
-            "moduleLicense": "Apache License, Version 2.0",
-            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
-        },
         {
             "moduleName": "org.apache.httpcomponents:httpclient",
             "moduleUrl": "http://hc.apache.org/httpcomponents-client-ga",
@@ -1456,6 +1529,13 @@
             "moduleLicense": "Apache-2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.apache.santuario:xmlsec",
+            "moduleUrl": "https://www.apache.org/",
+            "moduleVersion": "3.0.6",
+            "moduleLicense": "Apache-2.0",
+            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.apache.tomcat.embed:tomcat-embed-el",
             "moduleUrl": "https://tomcat.apache.org/",
@@ -1470,6 +1550,13 @@
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.apache.velocity:velocity-engine-core",
+            "moduleUrl": "https://www.apache.org/",
+            "moduleVersion": "2.4.1",
+            "moduleLicense": "Apache-2.0",
+            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.apache.xmlbeans:xmlbeans",
             "moduleUrl": "https://xmlbeans.apache.org/",
@@ -1647,6 +1734,13 @@
             "moduleLicense": "GNU Lesser General Public License",
             "moduleLicenseUrl": "http://www.gnu.org/licenses/lgpl-3.0.txt"
         },
+        {
+            "moduleName": "org.cryptacular:cryptacular",
+            "moduleUrl": "https://www.cryptacular.org",
+            "moduleVersion": "1.3.0",
+            "moduleLicense": "GNU Lesser General Public License",
+            "moduleLicenseUrl": "https://www.gnu.org/licenses/lgpl-3.0.txt"
+        },
         {
             "moduleName": "org.eclipse.angus:angus-activation",
             "moduleUrl": "https://www.eclipse.org",
@@ -2016,78 +2110,156 @@
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-core-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-core-impl",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-core-impl",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-messaging-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-messaging-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-profile-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-profile-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-saml-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-saml-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-saml-impl",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-saml-impl",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-security-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-security-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-security-impl",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-security-impl",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-soap-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-soap-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-soap-impl",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-soap-impl",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-storage-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-storage-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-xmlsec-api",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-xmlsec-api",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.opensaml:opensaml-xmlsec-impl",
             "moduleVersion": "5.1.6",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
+        {
+            "moduleName": "org.opensaml:opensaml-xmlsec-impl",
+            "moduleVersion": "5.2.2",
+            "moduleLicense": "The Apache Software License, Version 2.0",
+            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+        },
         {
             "moduleName": "org.ow2.asm:asm",
             "moduleUrl": "http://asm.ow2.org",
@@ -2132,7 +2304,7 @@
         },
         {
             "moduleName": "org.simplejavamail:core-module",
-            "moduleVersion": "9.2.0",
+            "moduleVersion": "9.3.2",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
@@ -2145,13 +2317,13 @@
         },
         {
             "moduleName": "org.simplejavamail:outlook-module",
-            "moduleVersion": "9.2.0",
+            "moduleVersion": "9.3.2",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
         {
             "moduleName": "org.simplejavamail:simple-java-mail",
-            "moduleVersion": "9.2.0",
+            "moduleVersion": "9.3.2",
             "moduleLicense": "The Apache Software License, Version 2.0",
             "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
         },
@@ -2171,10 +2343,10 @@
         },
         {
             "moduleName": "org.snakeyaml:snakeyaml-engine",
-            "moduleUrl": "https://bitbucket.org/snakeyaml/snakeyaml-engine",
-            "moduleVersion": "3.0.1",
+            "moduleUrl": "https://codeberg.org/snakeyaml/snakeyaml-engine",
+            "moduleVersion": "3.1.1",
             "moduleLicense": "Apache License, Version 2.0",
-            "moduleLicenseUrl": "http://www.apache.org/licenses/LICENSE-2.0.txt"
+            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0.txt"
         },
         {
             "moduleName": "org.springdoc:springdoc-openapi-starter-common",
@@ -2564,6 +2736,13 @@
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
+        {
+            "moduleName": "org.springframework.security:spring-security-core",
+            "moduleUrl": "https://spring.io/projects/spring-security",
+            "moduleVersion": "7.1.0",
+            "moduleLicense": "Apache License, Version 2.0",
+            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
+        },
         {
             "moduleName": "org.springframework.security:spring-security-crypto",
             "moduleUrl": "https://spring.io/projects/spring-security",
@@ -2606,6 +2785,13 @@
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
         },
+        {
+            "moduleName": "org.springframework.security:spring-security-saml2-service-provider",
+            "moduleUrl": "https://spring.io/projects/spring-security",
+            "moduleVersion": "7.1.0",
+            "moduleLicense": "Apache License, Version 2.0",
+            "moduleLicenseUrl": "https://www.apache.org/licenses/LICENSE-2.0"
+        },
         {
             "moduleName": "org.springframework.security:spring-security-web",
             "moduleUrl": "https://spring.io/projects/spring-security",
@@ -2805,207 +2991,207 @@
         },
         {
             "moduleName": "software.amazon.awssdk:annotations",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
-            "moduleName": "software.amazon.awssdk:apache-client",
-            "moduleVersion": "2.44.12",
+            "moduleName": "software.amazon.awssdk:apache5-client",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:arns",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:auth",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:aws-core",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:aws-query-protocol",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:aws-xml-protocol",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:checksums",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:checksums-spi",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:crt-core",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:endpoints-spi",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:http-auth",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:http-auth-aws",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:http-auth-aws-eventstream",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:http-auth-spi",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:http-client-spi",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:identity-spi",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:json-utils",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:metrics-spi",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:netty-nio-client",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:profiles",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:protocol-core",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:regions",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:retries",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:retries-spi",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:s3",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:sdk-core",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:third-party-jackson-core",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:url-connection-client",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:utils",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
         {
             "moduleName": "software.amazon.awssdk:utils-lite",
             "moduleUrl": "https://aws.amazon.com/sdkforjava",
-            "moduleVersion": "2.44.12",
+            "moduleVersion": "2.51.3",
             "moduleLicense": "Apache License, Version 2.0",
             "moduleLicenseUrl": "https://aws.amazon.com/apache2.0"
         },
diff --git a/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java b/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java
index f6fe52f2a6..d7d211a7ce 100644
--- a/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/config/ToolIODeclarationCoverageTest.java
@@ -61,7 +61,10 @@ class ToolIODeclarationCoverageTest {
                     // signing tool itself is /api/v1/security/cert-sign, which is declared.
                     "/api/v1/security/cert-sign/sessions",
                     "/api/v1/security/cert-sign/validate-certificate",
-                    "/api/v1/security/cert-sign/hardware");
+                    "/api/v1/security/cert-sign/hardware",
+                    // Releases finished jobs and their stored files; server maintenance, takes and
+                    // returns no document.
+                    "/api/v1/general/jobs/cleanup");
 
     private record Scan(Set<String> required, Map<String, ToolIOSpec> declared) {}
 
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAGapTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAGapTest.java
index b64776665b..ea693ddd27 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAGapTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAGapTest.java
@@ -46,6 +46,7 @@ import stirling.software.SPDF.model.api.converters.PdfToPdfARequest;
 import stirling.software.SPDF.model.api.security.PDFVerificationResult;
 import stirling.software.SPDF.service.VeraPDFService;
 import stirling.software.common.configuration.RuntimePathConfig;
+import stirling.software.common.service.PdfaLevelAServiceInterface;
 import stirling.software.common.util.TempFileManager;
 
 /**
@@ -62,10 +63,12 @@ class ConvertPDFToPDFAGapTest {
 
     @Mock private RuntimePathConfig runtimePathConfig;
     @Mock private VeraPDFService veraPDFService;
+    @Mock private PdfaLevelAServiceInterface pdfaLevelAService;
     @Mock private TempFileManager tempFileManager;
 
     private ConvertPDFToPDFA newController() {
-        return new ConvertPDFToPDFA(runtimePathConfig, veraPDFService, tempFileManager);
+        return new ConvertPDFToPDFA(
+                runtimePathConfig, veraPDFService, pdfaLevelAService, tempFileManager);
     }
 
     // ---- reflection helpers ----------------------------------------------------------------
@@ -161,9 +164,21 @@ class ConvertPDFToPDFAGapTest {
         }
 
         private String suffixOf(Object profile) throws Exception {
-            Method m = profile.getClass().getDeclaredMethod("outputSuffix");
+            return suffixOf(profile, true);
+        }
+
+        private String suffixOf(Object profile, boolean levelAReached) throws Exception {
+            Method m = profile.getClass().getDeclaredMethod("outputSuffix", boolean.class);
             m.setAccessible(true);
-            return (String) m.invoke(profile);
+            return (String) m.invoke(profile, levelAReached);
+        }
+
+        @Test
+        @DisplayName("a level A profile falls back to the level B name when tagging failed")
+        void levelANotReachedIsNamedLevelB() throws Exception {
+            assertThat(suffixOf(resolveProfile("pdfa-1a"), false)).isEqualTo("_PDFA-1b.pdf");
+            assertThat(suffixOf(resolveProfile("pdfa-2a"), false)).isEqualTo("_PDFA-2b.pdf");
+            assertThat(suffixOf(resolveProfile("pdfa-3a"), true)).isEqualTo("_PDFA-3a.pdf");
         }
 
         @Test
@@ -717,6 +732,30 @@ class ConvertPDFToPDFAGapTest {
     @DisplayName("verifyStrictCompliance (VeraPDFService mocked)")
     class StrictCompliance {
 
+        private Object profile(String token) throws Exception {
+            Class<?> enumClass = null;
+            for (Class<?> inner : ConvertPDFToPDFA.class.getDeclaredClasses()) {
+                if (inner.getSimpleName().equals("PdfaProfile")) {
+                    enumClass = inner;
+                }
+            }
+            Method m = enumClass.getDeclaredMethod("fromRequest", String.class);
+            m.setAccessible(true);
+            return m.invoke(null, token);
+        }
+
+        private Throwable verify(String token, boolean levelAReached) throws Exception {
+            ConvertPDFToPDFA controller = newController();
+            return catchThrowable(
+                    () ->
+                            invokeInstance(
+                                    controller,
+                                    "verifyStrictCompliance",
+                                    (Object) "dummy".getBytes(),
+                                    profile(token),
+                                    levelAReached));
+        }
+
         @Test
         @DisplayName("compliant result passes without throwing")
         void compliantPasses() throws Exception {
@@ -726,14 +765,7 @@ class ConvertPDFToPDFAGapTest {
             ok.setComplianceSummary("PDF/A-1b compliant");
             when(veraPDFService.validatePDF(any())).thenReturn(List.of(ok));
 
-            ConvertPDFToPDFA controller = newController();
-            assertThatCode(
-                            () ->
-                                    invokeInstance(
-                                            controller,
-                                            "verifyStrictCompliance",
-                                            (Object) "dummy".getBytes()))
-                    .doesNotThrowAnyException();
+            assertThat(verify("pdfa-1", true)).isNull();
         }
 
         @Test
@@ -745,34 +777,70 @@ class ConvertPDFToPDFAGapTest {
             bad.setComplianceSummary("PDF/A-1b with errors");
             when(veraPDFService.validatePDF(any())).thenReturn(List.of(bad));
 
-            ConvertPDFToPDFA controller = newController();
-            ResponseStatusException ex =
-                    (ResponseStatusException)
-                            catchThrowable(
-                                    () ->
-                                            invokeInstance(
-                                                    controller,
-                                                    "verifyStrictCompliance",
-                                                    (Object) "dummy".getBytes()));
+            ResponseStatusException ex = (ResponseStatusException) verify("pdfa-1", true);
             assertThat(ex).isNotNull();
             assertThat(ex.getStatusCode()).isEqualTo(HttpStatus.BAD_REQUEST);
             assertThat(ex.getReason()).contains("PDF/A-1b with errors");
         }
 
+        @Test
+        @DisplayName("a level B pass does not satisfy a level A request")
+        void levelBDoesNotSatisfyLevelA() throws Exception {
+            PDFVerificationResult ok = new PDFVerificationResult();
+            ok.setCompliant(true);
+            ok.setStandard("1b");
+            ok.setComplianceSummary("PDF/A-1b compliant");
+            when(veraPDFService.validatePDF(any())).thenReturn(List.of(ok));
+
+            ResponseStatusException ex = (ResponseStatusException) verify("pdfa-1a", true);
+            assertThat(ex).isNotNull();
+            assertThat(ex.getStatusCode()).isEqualTo(HttpStatus.BAD_REQUEST);
+            assertThat(ex.getReason()).contains("PDF/A-1a");
+        }
+
+        @Test
+        @DisplayName("a level A result satisfies a level A request")
+        void levelASatisfiesLevelA() throws Exception {
+            PDFVerificationResult ok = new PDFVerificationResult();
+            ok.setCompliant(true);
+            ok.setStandard("2a");
+            ok.setComplianceSummary("PDF/A-2a compliant");
+            when(veraPDFService.validatePDF(any())).thenReturn(List.of(ok));
+
+            assertThat(verify("pdfa-2a", true)).isNull();
+        }
+
+        @Test
+        @DisplayName("untagged output fails a level A request before validation runs")
+        void untaggedLevelARequestFails() throws Exception {
+            ResponseStatusException ex = (ResponseStatusException) verify("pdfa-2a", false);
+            assertThat(ex).isNotNull();
+            assertThat(ex.getStatusCode()).isEqualTo(HttpStatus.BAD_REQUEST);
+            assertThat(ex.getReason()).contains("could not be tagged");
+            verifyNoInteractions(veraPDFService);
+        }
+
+        @Test
+        @DisplayName("a compliant PDF/UA result never satisfies a strict PDF/A request")
+        void accessibilityResultIsIgnored() throws Exception {
+            PDFVerificationResult ua = new PDFVerificationResult();
+            ua.setCompliant(true);
+            ua.setStandard("ua1");
+            ua.setValidationProfile("ua1");
+            ua.setComplianceSummary("PDF/UA-1 compliant");
+            when(veraPDFService.validatePDF(any())).thenReturn(List.of(ua));
+
+            ResponseStatusException ex = (ResponseStatusException) verify("pdfa-2b", true);
+            assertThat(ex).isNotNull();
+            assertThat(ex.getStatusCode()).isEqualTo(HttpStatus.BAD_REQUEST);
+        }
+
         @Test
         @DisplayName("empty result list is treated as non-compliant -> 400")
         void emptyResultsTreatedNonCompliant() throws Exception {
             when(veraPDFService.validatePDF(any())).thenReturn(Collections.emptyList());
 
-            ConvertPDFToPDFA controller = newController();
-            ResponseStatusException ex =
-                    (ResponseStatusException)
-                            catchThrowable(
-                                    () ->
-                                            invokeInstance(
-                                                    controller,
-                                                    "verifyStrictCompliance",
-                                                    (Object) "dummy".getBytes()));
+            ResponseStatusException ex = (ResponseStatusException) verify("pdfa-1", true);
             assertThat(ex).isNotNull();
             assertThat(ex.getStatusCode()).isEqualTo(HttpStatus.BAD_REQUEST);
         }
@@ -782,15 +850,7 @@ class ConvertPDFToPDFAGapTest {
         void serviceErrorWrappedAs500() throws Exception {
             when(veraPDFService.validatePDF(any())).thenThrow(new IOException("boom"));
 
-            ConvertPDFToPDFA controller = newController();
-            ResponseStatusException ex =
-                    (ResponseStatusException)
-                            catchThrowable(
-                                    () ->
-                                            invokeInstance(
-                                                    controller,
-                                                    "verifyStrictCompliance",
-                                                    (Object) "dummy".getBytes()));
+            ResponseStatusException ex = (ResponseStatusException) verify("pdfa-1", true);
             assertThat(ex).isNotNull();
             assertThat(ex.getStatusCode()).isEqualTo(HttpStatus.INTERNAL_SERVER_ERROR);
         }
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAMoreTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAMoreTest.java
index e9d9b9ce1d..d56a283464 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAMoreTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/converters/ConvertPDFToPDFAMoreTest.java
@@ -42,6 +42,7 @@ import org.springframework.mock.web.MockMultipartFile;
 import stirling.software.SPDF.model.api.converters.PdfToPdfARequest;
 import stirling.software.SPDF.service.VeraPDFService;
 import stirling.software.common.configuration.RuntimePathConfig;
+import stirling.software.common.service.PdfaLevelAServiceInterface;
 import stirling.software.common.util.ProcessExecutor;
 import stirling.software.common.util.ProcessExecutor.ProcessExecutorResult;
 import stirling.software.common.util.TempFile;
@@ -63,10 +64,12 @@ class ConvertPDFToPDFAMoreTest {
 
     @Mock private RuntimePathConfig runtimePathConfig;
     @Mock private VeraPDFService veraPDFService;
+    @Mock private PdfaLevelAServiceInterface pdfaLevelAService;
     @Mock private TempFileManager tempFileManager;
 
     private ConvertPDFToPDFA newController() {
-        return new ConvertPDFToPDFA(runtimePathConfig, veraPDFService, tempFileManager);
+        return new ConvertPDFToPDFA(
+                runtimePathConfig, veraPDFService, pdfaLevelAService, tempFileManager);
     }
 
     private static ResponseEntity<Resource> streamingOk(byte[] bytes) {
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFieldBundleTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFieldBundleTest.java
new file mode 100644
index 0000000000..8082949c8e
--- /dev/null
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFieldBundleTest.java
@@ -0,0 +1,374 @@
+package stirling.software.SPDF.controller.api.form;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.mock;
+import static org.mockito.Mockito.when;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.File;
+import java.io.IOException;
+import java.io.InputStream;
+import java.io.OutputStream;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.nio.file.Paths;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.zip.ZipEntry;
+import java.util.zip.ZipInputStream;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDField;
+import org.apache.pdfbox.pdmodel.interactive.form.PDNonTerminalField;
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.MethodSource;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.springframework.core.io.Resource;
+import org.springframework.http.ResponseEntity;
+import org.springframework.mock.web.MockMultipartFile;
+
+import stirling.software.common.model.FormFieldWithCoordinates;
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.util.FormUtils;
+import stirling.software.common.util.TempFile;
+import stirling.software.common.util.TempFileManager;
+
+import tools.jackson.databind.ObjectMapper;
+import tools.jackson.databind.json.JsonMapper;
+
+/**
+ * Drives ?includeFields=true across a spread of real form shapes, checking the bundled list stays
+ * interchangeable with the follow-up request it exists to remove.
+ */
+@ExtendWith(MockitoExtension.class)
+@DisplayName("edit-fields field bundle")
+class FormFieldBundleTest {
+
+    /** Set to a directory to dump the produced archives for the frontend reader's fixtures. */
+    private static final String FIXTURE_DIR = System.getProperty("bundle.fixtures");
+
+    @Mock private CustomPDFDocumentFactory pdfDocumentFactory;
+    @Mock private TempFileManager tempFileManager;
+    @InjectMocks private FormFillController controller;
+
+    private ObjectMapper objectMapper;
+
+    @BeforeEach
+    void setUp() throws Exception {
+        lenient()
+                .when(tempFileManager.createManagedTempFile(anyString()))
+                .thenAnswer(
+                        invocation -> {
+                            File file =
+                                    Files.createTempFile(
+                                                    "bundle", invocation.<String>getArgument(0))
+                                            .toFile();
+                            TempFile temp = mock(TempFile.class);
+                            lenient().when(temp.getFile()).thenReturn(file);
+                            lenient().when(temp.getPath()).thenReturn(file.toPath());
+                            return temp;
+                        });
+        objectMapper = JsonMapper.builder().build();
+        var field = FormFillController.class.getDeclaredField("objectMapper");
+        field.setAccessible(true);
+        field.set(controller, objectMapper);
+    }
+
+    // -- document shapes ----------------------------------------------
+
+    private record Style(
+            String name, int pages, int rotation, List<FormUtils.NewFormFieldDefinition> fields) {}
+
+    private static FormUtils.NewFormFieldDefinition field(
+            String name, String type, int page, float y, List<String> options) {
+        return new FormUtils.NewFormFieldDefinition(
+                name, null, type, page, 50f, y, 200f, 20f, null, null, options, null, null, null,
+                null, null, null, null);
+    }
+
+    static List<Style> styles() {
+        List<Style> styles = new ArrayList<>();
+        styles.add(new Style("text-only", 1, 0, List.of(field("fullName", "text", 0, 700f, null))));
+        styles.add(
+                new Style(
+                        "checkbox-and-radio",
+                        1,
+                        0,
+                        List.of(
+                                field("agree", "checkbox", 0, 700f, null),
+                                field("plan", "radio", 0, 650f, List.of("basic", "pro")))));
+        styles.add(
+                new Style(
+                        "choice-widgets",
+                        1,
+                        0,
+                        List.of(
+                                field("country", "dropdown", 0, 700f, List.of("UK", "IE", "FR")),
+                                field("tags", "listbox", 0, 640f, List.of("a", "b", "c")))));
+        styles.add(
+                new Style(
+                        "signature", 1, 0, List.of(field("approval", "signature", 0, 700f, null))));
+        styles.add(
+                new Style(
+                        "multi-page",
+                        3,
+                        0,
+                        List.of(
+                                field("p1", "text", 0, 700f, null),
+                                field("p2", "text", 1, 700f, null),
+                                field("p3", "text", 2, 700f, null))));
+        styles.add(new Style("rotated-90", 1, 90, List.of(field("rot", "text", 0, 700f, null))));
+        styles.add(new Style("rotated-270", 1, 270, List.of(field("rot", "text", 0, 700f, null))));
+        styles.add(
+                new Style(
+                        "unicode-names",
+                        1,
+                        0,
+                        List.of(
+                                field("nom_complet", "text", 0, 700f, null),
+                                field("adresse postale", "text", 0, 660f, null))));
+
+        List<FormUtils.NewFormFieldDefinition> many = new ArrayList<>();
+        for (int i = 0; i < 120; i++) {
+            many.add(
+                    field(
+                            "field_" + i,
+                            i % 3 == 0 ? "checkbox" : "text",
+                            i / 40,
+                            740f - (i % 40) * 18f,
+                            null));
+        }
+        styles.add(new Style("many-fields", 3, 0, many));
+        return styles;
+    }
+
+    private byte[] blankPdf(int pages, int rotation) throws IOException {
+        try (PDDocument document = new PDDocument();
+                ByteArrayOutputStream out = new ByteArrayOutputStream()) {
+            for (int i = 0; i < pages; i++) {
+                PDPage page = new PDPage(PDRectangle.A4);
+                page.setRotation(rotation);
+                document.addPage(page);
+            }
+            document.getDocumentCatalog().setAcroForm(new PDAcroForm(document));
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    // -- the test ------------------------------------------------------
+
+    @ParameterizedTest(name = "{0}")
+    @MethodSource("styles")
+    @DisplayName("bundled list matches the follow-up request it replaces")
+    void bundleMatchesRefetch(Style style) throws Exception {
+        byte[] source = blankPdf(style.pages(), style.rotation());
+        MockMultipartFile upload =
+                new MockMultipartFile("file", style.name() + ".pdf", "application/pdf", source);
+        byte[] edits = objectMapper.writeValueAsBytes(Map.of("add", style.fields()));
+
+        byte[] zipBytes;
+        try (PDDocument document = Loader.loadPDF(source)) {
+            when(pdfDocumentFactory.load(eq(upload))).thenReturn(document);
+            zipBytes = drain(controller.editFields(upload, edits, true));
+        }
+        Map<String, byte[]> bundle = unzip(zipBytes);
+
+        assertThat(bundle).containsKeys("document.pdf", "fields.json");
+        byte[] editedPdf = bundle.get("document.pdf");
+        assertThat(new String(editedPdf, 0, 5, StandardCharsets.UTF_8)).isEqualTo("%PDF-");
+
+        // The comparison that matters: ask the endpoint this feature stops re-calling,
+        // and demand a match.
+        MockMultipartFile saved =
+                new MockMultipartFile("file", style.name() + ".pdf", "application/pdf", editedPdf);
+        try (PDDocument reloaded = Loader.loadPDF(editedPdf)) {
+            when(pdfDocumentFactory.load(eq(saved), eq(true))).thenReturn(reloaded);
+            ResponseEntity<List<FormFieldWithCoordinates>> refetched =
+                    controller.listFieldsWithCoordinates(saved);
+            assertThat(new String(bundle.get("fields.json"), StandardCharsets.UTF_8))
+                    .isEqualTo(objectMapper.writeValueAsString(refetched.getBody()));
+        }
+
+        dumpFixture(style.name(), zipBytes);
+    }
+
+    @ParameterizedTest(name = "{0}")
+    @MethodSource("styles")
+    @DisplayName("pdf entry is stored and json entry is deflated")
+    void perEntryCompression(Style style) throws Exception {
+        byte[] source = blankPdf(style.pages(), style.rotation());
+        MockMultipartFile upload =
+                new MockMultipartFile("file", style.name() + ".pdf", "application/pdf", source);
+        byte[] edits = objectMapper.writeValueAsBytes(Map.of("add", style.fields()));
+
+        byte[] zipBytes;
+        try (PDDocument document = Loader.loadPDF(source)) {
+            when(pdfDocumentFactory.load(eq(upload))).thenReturn(document);
+            zipBytes = drain(controller.editFields(upload, edits, true));
+        }
+
+        Map<String, Integer> methods = methodsOf(zipBytes);
+        assertThat(methods.get("document.pdf")).isEqualTo(ZipEntry.STORED);
+        assertThat(methods.get("fields.json")).isEqualTo(ZipEntry.DEFLATED);
+    }
+
+    @Test
+    @DisplayName("hierarchical field names survive the bundle")
+    void nestedFieldNames() throws Exception {
+        byte[] source = nestedPdf();
+        MockMultipartFile upload =
+                new MockMultipartFile("file", "nested.pdf", "application/pdf", source);
+        byte[] edits =
+                objectMapper.writeValueAsBytes(
+                        Map.of(
+                                "modify",
+                                List.of(
+                                        Map.of(
+                                                "targetName",
+                                                "Customer.Name",
+                                                "defaultValue",
+                                                "Ada"))));
+
+        byte[] zipBytes;
+        try (PDDocument document = Loader.loadPDF(source)) {
+            when(pdfDocumentFactory.load(eq(upload))).thenReturn(document);
+            zipBytes = drain(controller.editFields(upload, edits, true));
+        }
+        Map<String, byte[]> bundle = unzip(zipBytes);
+        byte[] editedPdf = bundle.get("document.pdf");
+
+        MockMultipartFile saved =
+                new MockMultipartFile("file", "nested.pdf", "application/pdf", editedPdf);
+        try (PDDocument reloaded = Loader.loadPDF(editedPdf)) {
+            when(pdfDocumentFactory.load(eq(saved), eq(true))).thenReturn(reloaded);
+            ResponseEntity<List<FormFieldWithCoordinates>> refetched =
+                    controller.listFieldsWithCoordinates(saved);
+            String bundled = new String(bundle.get("fields.json"), StandardCharsets.UTF_8);
+            assertThat(bundled).contains("Customer.Name");
+            assertThat(bundled).isEqualTo(objectMapper.writeValueAsString(refetched.getBody()));
+        }
+    }
+
+    /** Builds a parent field with two children, which add-fields cannot express. */
+    private byte[] nestedPdf() throws IOException {
+        try (PDDocument document = Loader.loadPDF(blankPdf(1, 0));
+                ByteArrayOutputStream out = new ByteArrayOutputStream()) {
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm(null);
+            FormUtils.addNewFields(
+                    document,
+                    List.of(
+                            field("Name", "text", 0, 700f, null),
+                            field("Email", "text", 0, 660f, null)));
+
+            PDNonTerminalField parent = new PDNonTerminalField(form);
+            parent.setPartialName("Customer");
+            List<PDField> kids = new ArrayList<>();
+            for (String child : List.of("Name", "Email")) {
+                PDField kid = form.getField(child);
+                kid.getCOSObject().setItem(COSName.PARENT, parent.getCOSObject());
+                kids.add(kid);
+            }
+            parent.setChildren(kids);
+            form.setFields(List.of(parent));
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    @Test
+    @DisplayName("bundle stays close to the wire cost of the two calls it replaces")
+    void wireCost() throws Exception {
+        Style style =
+                styles().stream()
+                        .filter(s -> s.name().equals("many-fields"))
+                        .findFirst()
+                        .orElseThrow();
+        byte[] source = blankPdf(style.pages(), style.rotation());
+        MockMultipartFile upload =
+                new MockMultipartFile("file", "cost.pdf", "application/pdf", source);
+        byte[] edits = objectMapper.writeValueAsBytes(Map.of("add", style.fields()));
+
+        byte[] zipBytes;
+        Map<String, byte[]> bundle;
+        try (PDDocument document = Loader.loadPDF(source)) {
+            when(pdfDocumentFactory.load(eq(upload))).thenReturn(document);
+            zipBytes = drain(controller.editFields(upload, edits, true));
+        }
+        bundle = unzip(zipBytes);
+
+        int pdfSize = bundle.get("document.pdf").length;
+        int jsonSize = bundle.get("fields.json").length;
+        System.out.printf(
+                "wire: pdf=%d json=%d zip=%d overhead=%d bytes (%.2f%% over the pdf alone)%n",
+                pdfSize,
+                jsonSize,
+                zipBytes.length,
+                zipBytes.length - pdfSize,
+                100.0 * (zipBytes.length - pdfSize) / pdfSize);
+
+        // True for a field list this repetitive; on a tiny list the ~200 bytes of zip framing can
+        // exceed what deflate saves, so this is a property of the fixture, not of every document.
+        assertThat(zipBytes.length).isLessThan(pdfSize + jsonSize);
+    }
+
+    // -- helpers -------------------------------------------------------
+
+    private static byte[] drain(ResponseEntity<Resource> response) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        try (InputStream in = response.getBody().getInputStream()) {
+            in.transferTo(out);
+        }
+        return out.toByteArray();
+    }
+
+    private static Map<String, byte[]> unzip(byte[] zipBytes) throws IOException {
+        Map<String, byte[]> entries = new HashMap<>();
+        try (ZipInputStream in = new ZipInputStream(new ByteArrayInputStream(zipBytes))) {
+            for (ZipEntry entry; (entry = in.getNextEntry()) != null; ) {
+                ByteArrayOutputStream out = new ByteArrayOutputStream();
+                in.transferTo(out);
+                entries.put(entry.getName(), out.toByteArray());
+            }
+        }
+        return entries;
+    }
+
+    private static Map<String, Integer> methodsOf(byte[] zipBytes) throws IOException {
+        Map<String, Integer> methods = new HashMap<>();
+        try (ZipInputStream in = new ZipInputStream(new ByteArrayInputStream(zipBytes))) {
+            for (ZipEntry entry; (entry = in.getNextEntry()) != null; ) {
+                methods.put(entry.getName(), entry.getMethod());
+                in.transferTo(OutputStream.nullOutputStream());
+            }
+        }
+        return methods;
+    }
+
+    private static void dumpFixture(String name, byte[] zipBytes) throws IOException {
+        if (FIXTURE_DIR == null) {
+            return;
+        }
+        Path dir = Paths.get(FIXTURE_DIR);
+        Files.createDirectories(dir);
+        Files.write(dir.resolve(name + ".zip"), zipBytes);
+    }
+}
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFillControllerTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFillControllerTest.java
index 7b2bfc9ce0..0473d630bf 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFillControllerTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormFillControllerTest.java
@@ -29,6 +29,7 @@ import org.springframework.http.ResponseEntity;
 import org.springframework.mock.web.MockMultipartFile;
 
 import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.util.FormUtils;
 import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
 
@@ -330,6 +331,160 @@ class FormFillControllerTest {
         }
     }
 
+    // ── addFields ──────────────────────────────────────────────────────
+
+    @Nested
+    @DisplayName("addFields")
+    class AddFields {
+
+        @Test
+        @DisplayName("throws when fields payload is null")
+        void nullPayload() {
+            assertThatThrownBy(() -> controller.addFields(pdfFile(), null))
+                    .isInstanceOf(IllegalArgumentException.class);
+        }
+
+        @Test
+        @DisplayName("throws when fields payload is an empty list")
+        void emptyPayload() {
+            assertThatThrownBy(() -> controller.addFields(pdfFile(), "[]".getBytes()))
+                    .isInstanceOf(IllegalArgumentException.class);
+        }
+
+        @Test
+        @DisplayName("processes a valid new-field payload")
+        void validPayload() throws Exception {
+            MockMultipartFile file = pdfFile();
+            PDDocument doc = createMinimalPdf();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(doc);
+
+            String json =
+                    "[{\"name\":\"NewField\",\"type\":\"text\",\"pageIndex\":0,"
+                            + "\"x\":50,\"y\":700,\"width\":200,\"height\":20}]";
+            ResponseEntity<Resource> response = controller.addFields(file, json.getBytes());
+
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
+            assertThat(response.getBody()).isNotNull();
+        }
+    }
+
+    // ── editFields (combined) ──────────────────────────────────────────
+
+    @Nested
+    @DisplayName("editFields")
+    class EditFields {
+
+        @Test
+        @DisplayName("throws when edits payload is null")
+        void nullPayload() {
+            assertThatThrownBy(() -> controller.editFields(pdfFile(), null, false))
+                    .isInstanceOf(IllegalArgumentException.class);
+        }
+
+        @Test
+        @DisplayName("throws when all sections are empty")
+        void emptyBatch() {
+            assertThatThrownBy(
+                            () ->
+                                    controller.editFields(
+                                            pdfFile(),
+                                            "{\"add\":[],\"modify\":[],\"delete\":[]}".getBytes(),
+                                            false))
+                    .isInstanceOf(IllegalArgumentException.class);
+        }
+
+        @Test
+        @DisplayName("processes a combined add/delete batch")
+        void validBatch() throws Exception {
+            MockMultipartFile file = pdfFile();
+            PDDocument doc = createMinimalPdf();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(doc);
+
+            String json =
+                    "{\"add\":[{\"name\":\"f\",\"type\":\"text\",\"pageIndex\":0,\"x\":50,"
+                            + "\"y\":700,\"width\":200,\"height\":20}],\"modify\":[],"
+                            + "\"delete\":[]}";
+            ResponseEntity<Resource> response = controller.editFields(file, json.getBytes(), false);
+
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
+            assertThat(response.getBody()).isNotNull();
+        }
+
+        @Test
+        @DisplayName("refuses a field name containing a period before touching the document")
+        void refusesPeriodInName() throws Exception {
+            String json =
+                    "{\"add\":[{\"name\":\"Customer.Name\",\"type\":\"text\",\"pageIndex\":0,"
+                            + "\"x\":50,\"y\":700,\"width\":200,\"height\":20}]}";
+
+            assertThatThrownBy(() -> controller.editFields(pdfFile(), json.getBytes(), false))
+                    .hasMessageContaining("period");
+            // Rejected up front, so the document is never even loaded.
+            verify(pdfDocumentFactory, never()).load(any(MockMultipartFile.class));
+        }
+
+        @Test
+        @DisplayName("renaming a nested field to its own qualified name is not a rename")
+        void allowsUnchangedQualifiedName() throws Exception {
+            MockMultipartFile file = pdfFile();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(createMinimalPdf());
+
+            String json =
+                    "{\"modify\":[{\"targetName\":\"Customer.Name\",\"name\":\"Customer.Name\","
+                            + "\"x\":10,\"y\":10}]}";
+            ResponseEntity<Resource> response = controller.editFields(file, json.getBytes(), false);
+
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
+            // It must get past validation into the edit loop: the only complaint should be that
+            // this document has no such field, never that the name contains a period.
+            String encoded =
+                    response.getHeaders().getFirst(FormFillController.SKIPPED_EDITS_HEADER);
+            assertThat(encoded).isNotNull();
+            String report =
+                    new String(
+                            java.util.Base64.getDecoder().decode(encoded),
+                            java.nio.charset.StandardCharsets.UTF_8);
+            assertThat(report).contains("no field with that name exists").doesNotContain("period");
+        }
+
+        @Test
+        @DisplayName("reports a dropped edit as base64 JSON in the skipped-edits header")
+        void reportsSkippedEdits() throws Exception {
+            MockMultipartFile file = pdfFile();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(createMinimalPdf());
+
+            String json = "{\"delete\":[\"noSuchField\"]}";
+            ResponseEntity<Resource> response = controller.editFields(file, json.getBytes(), false);
+
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
+            String encoded =
+                    response.getHeaders().getFirst(FormFillController.SKIPPED_EDITS_HEADER);
+            assertThat(encoded).isNotNull();
+            String report =
+                    new String(
+                            java.util.Base64.getDecoder().decode(encoded),
+                            java.nio.charset.StandardCharsets.UTF_8);
+            assertThat(report).contains("noSuchField").contains("delete");
+            // Base64 rather than percent-encoding, so spaces survive as spaces.
+            assertThat(report).contains("no field with that name exists");
+        }
+
+        @Test
+        @DisplayName("omits the skipped-edits header when everything applied")
+        void noHeaderOnCleanBatch() throws Exception {
+            MockMultipartFile file = pdfFile();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(createMinimalPdf());
+
+            String json =
+                    "{\"add\":[{\"name\":\"clean\",\"type\":\"text\",\"pageIndex\":0,\"x\":50,"
+                            + "\"y\":700,\"width\":200,\"height\":20}]}";
+            ResponseEntity<Resource> response = controller.editFields(file, json.getBytes(), false);
+
+            assertThat(response.getHeaders().getFirst(FormFillController.SKIPPED_EDITS_HEADER))
+                    .isNull();
+        }
+    }
+
     // ── buildBaseName ──────────────────────────────────────────────────
 
     @Nested
@@ -384,4 +539,156 @@ class FormFillControllerTest {
             assertThat(result).isEqualTo("document_filled");
         }
     }
+
+    // -- includeFields bundle ------------------------------------------
+
+    @Nested
+    @DisplayName("editFields ?includeFields=true")
+    class FieldBundle {
+
+        private byte[] editsPayload() {
+            return ("{\"add\":[{\"name\":\"bundled\",\"type\":\"text\",\"pageIndex\":0,"
+                            + "\"x\":50,\"y\":700,\"width\":200,\"height\":20}]}")
+                    .getBytes(java.nio.charset.StandardCharsets.UTF_8);
+        }
+
+        private java.util.Map<String, java.util.zip.ZipEntry> entriesOf(byte[] zipBytes)
+                throws IOException {
+            java.util.Map<String, java.util.zip.ZipEntry> found = new java.util.HashMap<>();
+            try (java.util.zip.ZipInputStream in =
+                    new java.util.zip.ZipInputStream(new java.io.ByteArrayInputStream(zipBytes))) {
+                for (java.util.zip.ZipEntry e; (e = in.getNextEntry()) != null; ) {
+                    java.io.ByteArrayOutputStream data = new java.io.ByteArrayOutputStream();
+                    in.transferTo(data);
+                    // getMethod/getSize are only final once the entry has been fully read.
+                    found.put(e.getName(), e);
+                    payloads.put(e.getName(), data.toByteArray());
+                }
+            }
+            return found;
+        }
+
+        private final java.util.Map<String, byte[]> payloads = new java.util.HashMap<>();
+
+        private byte[] bundleFor(MockMultipartFile file) throws Exception {
+            PDDocument doc = createMinimalPdf();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(doc);
+            ResponseEntity<Resource> response = controller.editFields(file, editsPayload(), true);
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.OK);
+            return drainBody(response);
+        }
+
+        @Test
+        @DisplayName("returns a zip holding the pdf and the field list")
+        void bundlesBoth() throws Exception {
+            byte[] zip = bundleFor(pdfFile());
+            entriesOf(zip);
+
+            assertThat(payloads).containsKeys("document.pdf", "fields.json");
+            assertThat(new String(payloads.get("document.pdf"), 0, 5)).isEqualTo("%PDF-");
+            assertThat(
+                            new String(
+                                    payloads.get("fields.json"),
+                                    java.nio.charset.StandardCharsets.UTF_8))
+                    .contains("bundled");
+        }
+
+        @Test
+        @DisplayName("stores the pdf entry but deflates the json")
+        void perEntryMethods() throws Exception {
+            byte[] zip = bundleFor(pdfFile());
+            java.util.Map<String, java.util.zip.ZipEntry> entries = entriesOf(zip);
+
+            assertThat(entries.get("document.pdf").getMethod())
+                    .as("deflating an already-compressed PDF burns CPU for almost nothing")
+                    .isEqualTo(java.util.zip.ZipEntry.STORED);
+            assertThat(entries.get("fields.json").getMethod())
+                    .as("the JSON is text and no longer gets the container's gzip")
+                    .isEqualTo(java.util.zip.ZipEntry.DEFLATED);
+        }
+
+        @Test
+        @DisplayName("bundled fields match what a follow-up fetch would have returned")
+        void matchesTheSecondCallItReplaces() throws Exception {
+            byte[] zip = bundleFor(pdfFile());
+            entriesOf(zip);
+            byte[] bundledPdf = payloads.get("document.pdf");
+
+            // Re-ask the endpoint this feature stops re-calling, using the returned bytes.
+            MockMultipartFile saved =
+                    new MockMultipartFile("file", "test.pdf", "application/pdf", bundledPdf);
+            try (PDDocument reloaded = org.apache.pdfbox.Loader.loadPDF(bundledPdf)) {
+                when(pdfDocumentFactory.load(eq(saved), eq(true))).thenReturn(reloaded);
+                ResponseEntity<
+                                java.util.List<
+                                        stirling.software.common.model.FormFieldWithCoordinates>>
+                        refetched = controller.listFieldsWithCoordinates(saved);
+
+                String viaRefetch = realObjectMapper.writeValueAsString(refetched.getBody());
+                String viaBundle =
+                        new String(
+                                payloads.get("fields.json"),
+                                java.nio.charset.StandardCharsets.UTF_8);
+                assertThat(viaBundle)
+                        .as("the bundle must be interchangeable with the round trip it removes")
+                        .isEqualTo(viaRefetch);
+            }
+        }
+
+        @Test
+        @DisplayName("omitting the flag still returns a bare pdf")
+        void defaultsToPlainPdf() throws Exception {
+            MockMultipartFile file = pdfFile();
+            PDDocument doc = createMinimalPdf();
+            when(pdfDocumentFactory.load(eq(file))).thenReturn(doc);
+
+            byte[] body = drainBody(controller.editFields(file, editsPayload(), false));
+
+            assertThat(new String(body, 0, 5)).isEqualTo("%PDF-");
+        }
+    }
+
+    // -- skipped-edits header budget -----------------------------------
+
+    @Nested
+    @DisplayName("skipped-edits header")
+    class SkipHeaderBudget {
+
+        @Test
+        @DisplayName("stays within budget however long the reported names are")
+        void staysWithinBudget() throws Exception {
+            java.util.List<FormUtils.SkippedFieldEdit> skipped = new java.util.ArrayList<>();
+            String huge = "x".repeat(20000);
+            for (int i = 0; i < 40; i++) {
+                skipped.add(new FormUtils.SkippedFieldEdit("modify", huge, huge));
+            }
+
+            var method =
+                    FormFillController.class.getDeclaredMethod(
+                            "withSkippedEdits", ResponseEntity.class, java.util.List.class);
+            method.setAccessible(true);
+            @SuppressWarnings("unchecked")
+            ResponseEntity<Resource> response =
+                    (ResponseEntity<Resource>)
+                            method.invoke(controller, streamingOk(new byte[] {1}), skipped);
+
+            String header = response.getHeaders().getFirst(FormFillController.SKIPPED_EDITS_HEADER);
+            assertThat(header).isNotNull();
+            // Not merely short: an empty header would pass a length check while telling the
+            // user nothing, because the alert renders only when it has entries.
+            String decoded =
+                    new String(
+                            java.util.Base64.getDecoder().decode(header),
+                            java.nio.charset.StandardCharsets.UTF_8);
+            assertThat(decoded).startsWith("[{");
+            assertThat(decoded).contains("...");
+            // Overflowing the container's header budget turns the reply into an error page,
+            // which loses the edited PDF the user just saved.
+            assertThat(header.length()).isLessThanOrEqualTo(4096);
+            assertThat(
+                            response.getHeaders()
+                                    .getFirst(FormFillController.SKIPPED_EDITS_TOTAL_HEADER))
+                    .isEqualTo("40");
+        }
+    }
 }
diff --git a/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormPayloadParserTest.java b/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormPayloadParserTest.java
index b0c0411cb6..eacdbbcd57 100644
--- a/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormPayloadParserTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/controller/api/form/FormPayloadParserTest.java
@@ -170,6 +170,94 @@ class FormPayloadParserTest {
         }
     }
 
+    // ── parseNewFieldDefinitions ───────────────────────────────────────
+
+    @Nested
+    @DisplayName("parseNewFieldDefinitions")
+    class ParseNewFieldDefinitions {
+
+        @Test
+        @DisplayName("returns empty list for null input")
+        void nullInput() {
+            List<FormUtils.NewFormFieldDefinition> result =
+                    FormPayloadParser.parseNewFieldDefinitions(objectMapper, null);
+            assertThat(result).isEmpty();
+        }
+
+        @Test
+        @DisplayName("returns empty list for blank input")
+        void blankInput() {
+            List<FormUtils.NewFormFieldDefinition> result =
+                    FormPayloadParser.parseNewFieldDefinitions(objectMapper, "   ");
+            assertThat(result).isEmpty();
+        }
+
+        @Test
+        @DisplayName("parses a valid new-field list including geometry and flags")
+        void validNewFields() {
+            String json =
+                    "[{\"name\":\"NewField\",\"type\":\"text\",\"pageIndex\":0,"
+                            + "\"x\":50,\"y\":700,\"width\":200,\"height\":20,"
+                            + "\"fontSize\":14,\"readOnly\":true,\"multiline\":true}]";
+            List<FormUtils.NewFormFieldDefinition> result =
+                    FormPayloadParser.parseNewFieldDefinitions(objectMapper, json);
+            assertThat(result).hasSize(1);
+            FormUtils.NewFormFieldDefinition def = result.get(0);
+            assertThat(def.name()).isEqualTo("NewField");
+            assertThat(def.type()).isEqualTo("text");
+            assertThat(def.pageIndex()).isEqualTo(0);
+            assertThat(def.x()).isEqualTo(50f);
+            assertThat(def.y()).isEqualTo(700f);
+            assertThat(def.width()).isEqualTo(200f);
+            assertThat(def.height()).isEqualTo(20f);
+            assertThat(def.fontSize()).isEqualTo(14f);
+            assertThat(def.readOnly()).isTrue();
+            assertThat(def.multiline()).isTrue();
+        }
+    }
+
+    // ── parseFieldEdits ────────────────────────────────────────────────
+
+    @Nested
+    @DisplayName("parseFieldEdits")
+    class ParseFieldEdits {
+
+        @Test
+        @DisplayName("returns empty batch for null input")
+        void nullInput() {
+            FormUtils.FieldEditBatch batch = FormPayloadParser.parseFieldEdits(objectMapper, null);
+            assertThat(batch.add()).isEmpty();
+            assertThat(batch.modify()).isEmpty();
+            assertThat(batch.delete()).isEmpty();
+        }
+
+        @Test
+        @DisplayName("parses a combined add/modify/delete batch")
+        void combinedBatch() {
+            String json =
+                    "{\"add\":[{\"name\":\"new1\",\"type\":\"text\",\"pageIndex\":0,\"x\":1,"
+                            + "\"y\":2,\"width\":3,\"height\":4}],"
+                            + "\"modify\":[{\"targetName\":\"old1\",\"label\":\"L\"}],"
+                            + "\"delete\":[\"gone1\",{\"name\":\"gone2\"}]}";
+            FormUtils.FieldEditBatch batch = FormPayloadParser.parseFieldEdits(objectMapper, json);
+            assertThat(batch.add()).hasSize(1);
+            assertThat(batch.add().get(0).name()).isEqualTo("new1");
+            assertThat(batch.modify()).hasSize(1);
+            assertThat(batch.modify().get(0).targetName()).isEqualTo("old1");
+            assertThat(batch.delete()).containsExactly("gone1", "gone2");
+        }
+
+        @Test
+        @DisplayName("tolerates missing sections")
+        void missingSections() {
+            FormUtils.FieldEditBatch batch =
+                    FormPayloadParser.parseFieldEdits(objectMapper, "{\"delete\":[\"x\"]}");
+            assertThat(batch.add()).isEmpty();
+            assertThat(batch.modify()).isEmpty();
+            assertThat(batch.delete()).containsExactly("x");
+        }
+    }
+
     // ── parseNameList ──────────────────────────────────────────────────
 
     @Nested
diff --git a/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java b/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java
index 38043780d9..e071ece3fb 100644
--- a/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java
+++ b/app/core/src/test/java/stirling/software/SPDF/service/VeraPDFServicePdfaFixtureTest.java
@@ -90,7 +90,9 @@ class VeraPDFServicePdfaFixtureTest {
                         () -> service.validatePDF(new ByteArrayInputStream(pdfBytes)),
                         "Empty veraPDF flavour list must not surface as IndexOutOfBoundsException");
 
-        assertEquals(1, results.size());
+        // One result: PDF/UA is checked by the dedicated accessibility-report endpoint, not here.
+        assertEquals(1, results.size(), () -> "Expected a single PDF/A result, got: " + results);
+
         PDFVerificationResult result = results.get(0);
         assertEquals("not-pdfa", result.getStandard());
         assertFalse(result.isDeclaredPdfa());
@@ -161,13 +163,22 @@ class VeraPDFServicePdfaFixtureTest {
         }
     }
 
+    /** The PDF/A result; every document is also checked against PDF/UA, so filter that one out. */
     private PDFVerificationResult onlyResult(byte[] pdfBytes) throws Exception {
         List<PDFVerificationResult> results =
                 service.validatePDF(new ByteArrayInputStream(pdfBytes));
 
         assertNotNull(results);
-        assertEquals(1, results.size(), () -> "Expected a single result, got: " + results);
-        return results.get(0);
+        List<PDFVerificationResult> pdfaResults =
+                results.stream().filter(r -> !isUaResult(r)).toList();
+        assertEquals(
+                1, pdfaResults.size(), () -> "Expected a single PDF/A result, got: " + results);
+        return pdfaResults.get(0);
+    }
+
+    private static boolean isUaResult(PDFVerificationResult result) {
+        String profile = result.getValidationProfile();
+        return profile != null && profile.toLowerCase().contains("ua");
     }
 
     private static String messages(PDFVerificationResult result) {
diff --git a/app/core/src/test/java/stirling/software/SPDF/util/ExtractScriptConcurrencyTest.java b/app/core/src/test/java/stirling/software/SPDF/util/ExtractScriptConcurrencyTest.java
new file mode 100644
index 0000000000..f0c3ff6f95
--- /dev/null
+++ b/app/core/src/test/java/stirling/software/SPDF/util/ExtractScriptConcurrencyTest.java
@@ -0,0 +1,78 @@
+package stirling.software.SPDF.util;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.concurrent.CountDownLatch;
+import java.util.concurrent.TimeUnit;
+import java.util.concurrent.atomic.AtomicInteger;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.util.GeneralUtils;
+
+/**
+ * Lives in core because the python resources it extracts ship in this module.
+ *
+ * <p>Callers hand the returned path straight to python3, so the file has to stay readable while
+ * other requests are extracting it. Re-writing it per call used to break that wherever rename is
+ * not atomic, such as a 9p or NFS bind mount.
+ */
+class ExtractScriptConcurrencyTest {
+
+    @Test
+    @DisplayName("concurrent callers always get a readable script")
+    void concurrentCallersSeeAReadableScript() throws Exception {
+        int threads = 16;
+        CountDownLatch start = new CountDownLatch(1);
+        CountDownLatch done = new CountDownLatch(threads);
+        AtomicInteger unreadable = new AtomicInteger();
+        AtomicInteger errors = new AtomicInteger();
+
+        for (int i = 0; i < threads; i++) {
+            Thread.ofVirtual()
+                    .start(
+                            () -> {
+                                try {
+                                    start.await();
+                                    for (int n = 0; n < 25; n++) {
+                                        Path script = GeneralUtils.extractScript("png_to_webp.py");
+                                        if (!Files.isReadable(script)) {
+                                            unreadable.incrementAndGet();
+                                        }
+                                    }
+                                } catch (Exception e) {
+                                    errors.incrementAndGet();
+                                } finally {
+                                    done.countDown();
+                                }
+                            });
+        }
+
+        start.countDown();
+        assertTrue(done.await(60, TimeUnit.SECONDS), "extractScript threads did not finish");
+        assertEquals(0, errors.get(), "extractScript threw under concurrency");
+        assertEquals(0, unreadable.get(), "script was missing while another caller held it");
+    }
+
+    @Test
+    @DisplayName("repeated calls return the same path without rewriting the file")
+    void repeatedCallsAreStable() throws Exception {
+        Path first = GeneralUtils.extractScript("png_to_webp.py");
+        long modified = Files.getLastModifiedTime(first).toMillis();
+        long size = Files.size(first);
+
+        // Any rewrite after this pause lands on a later timestamp, so mtime is a
+        // reliable signal rather than a same-millisecond coin flip.
+        Thread.sleep(50);
+        for (int i = 0; i < 5; i++) {
+            assertEquals(first, GeneralUtils.extractScript("png_to_webp.py"));
+        }
+
+        assertEquals(modified, Files.getLastModifiedTime(first).toMillis(), "script was rewritten");
+        assertEquals(size, Files.size(first));
+    }
+}
diff --git a/app/core/src/test/java/stirling/software/common/controller/JobControllerTest.java b/app/core/src/test/java/stirling/software/common/controller/JobControllerTest.java
index 53212a2e65..2083e7339b 100644
--- a/app/core/src/test/java/stirling/software/common/controller/JobControllerTest.java
+++ b/app/core/src/test/java/stirling/software/common/controller/JobControllerTest.java
@@ -5,9 +5,11 @@ import static org.mockito.ArgumentMatchers.anyString;
 import static org.mockito.Mockito.*;
 
 import java.util.Map;
+import java.util.function.Predicate;
 
 import org.junit.jupiter.api.BeforeEach;
 import org.junit.jupiter.api.Test;
+import org.mockito.ArgumentCaptor;
 import org.mockito.InjectMocks;
 import org.mockito.Mock;
 import org.mockito.MockitoAnnotations;
@@ -442,4 +444,52 @@ class JobControllerTest {
         assertEquals(HttpStatus.FORBIDDEN, response.getStatusCode());
         verify(fileStorage, never()).getFileSize(eq(fileId));
     }
+
+    @Test
+    void testCleanupFinishedJobs_ReportsWhatWasReleased() {
+        when(taskManager.cleanupFinishedJobsNow(any()))
+                .thenReturn(new TaskManager.CleanupSummary(2, 5, 1));
+
+        ResponseEntity<?> response = controller.cleanupFinishedJobs();
+
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        @SuppressWarnings("unchecked")
+        Map<String, Object> body = (Map<String, Object>) response.getBody();
+        assertEquals(2, body.get("jobsRemoved"));
+        assertEquals(5, body.get("filesDeleted"));
+        assertEquals(1, body.get("jobsRetained"));
+    }
+
+    @Test
+    void testCleanupFinishedJobs_OnlySweepsJobsTheCallerOwns() {
+        ReflectionTestUtils.setField(controller, "jobOwnershipService", jobOwnershipService);
+        when(jobOwnershipService.validateJobAccess("me:job")).thenReturn(true);
+        when(jobOwnershipService.validateJobAccess("someone-else:job"))
+                .thenThrow(new SecurityException("not yours"));
+        when(taskManager.cleanupFinishedJobsNow(any()))
+                .thenReturn(new TaskManager.CleanupSummary(1, 1, 1));
+
+        controller.cleanupFinishedJobs();
+
+        @SuppressWarnings("unchecked")
+        ArgumentCaptor<Predicate<String>> filter = ArgumentCaptor.forClass(Predicate.class);
+        verify(taskManager).cleanupFinishedJobsNow(filter.capture());
+        assertTrue(filter.getValue().test("me:job"));
+        assertFalse(
+                filter.getValue().test("someone-else:job"),
+                "A job the caller cannot access must be left in place");
+    }
+
+    @Test
+    void testCleanupFinishedJobs_SweepsEverythingWhenSecurityIsDisabled() {
+        when(taskManager.cleanupFinishedJobsNow(any()))
+                .thenReturn(new TaskManager.CleanupSummary(3, 3, 0));
+
+        controller.cleanupFinishedJobs();
+
+        @SuppressWarnings("unchecked")
+        ArgumentCaptor<Predicate<String>> filter = ArgumentCaptor.forClass(Predicate.class);
+        verify(taskManager).cleanupFinishedJobsNow(filter.capture());
+        assertTrue(filter.getValue().test("any-job-id"));
+    }
 }
diff --git a/app/proprietary/build.gradle b/app/proprietary/build.gradle
index c20241dbb5..e66288238a 100644
--- a/app/proprietary/build.gradle
+++ b/app/proprietary/build.gradle
@@ -27,7 +27,7 @@ dependencies {
     api 'org.springframework.boot:spring-boot-starter-cache'
     api 'com.github.ben-manes.caffeine:caffeine'
     implementation 'org.springframework.boot:spring-boot-starter-data-redis'
-    api 'io.swagger.core.v3:swagger-core-jakarta:2.2.46'
+    api 'io.swagger.core.v3:swagger-core-jakarta:2.2.53'
     implementation "com.bucket4j:bucket4j_jdk17-core:${bucket4jVersion}"
     // Lettuce-backed Bucket4j ProxyManager used by ValkeyRateLimitStore for cluster-wide
     // token-bucket rate limiting (parity with in-process Bucket4j semantics; no fixed-window
@@ -37,6 +37,15 @@ dependencies {
     // https://mvnrepository.com/artifact/com.bucket4j/bucket4j_jdk17
     implementation "org.bouncycastle:bcprov-jdk18on:$bouncycastleVersion"
 
+    // PDF/UA tagging and its validation oracle.
+    implementation 'org.verapdf:validation-model:1.30.2'
+    // CVE-2025-66453: Explicit rhino 1.7.15 to override verapdf's 1.7.13
+    implementation "org.mozilla:rhino:${rhinoVersion}"
+    // veraPDF still uses javax.xml.bind, not the new jakarta namespace
+    implementation 'javax.xml.bind:jaxb-api:2.3.1'
+    runtimeOnly 'com.sun.xml.bind:jaxb-impl:2.3.9'
+    runtimeOnly 'com.sun.xml.bind:jaxb-core:4.0.9'
+
     implementation "com.google.code.gson:gson:${gsonVersion}"
 
     // jinjava/jjwt transitively request older Jackson 2 versions; declare the current
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/audit/ControllerAuditAspect.java b/app/proprietary/src/main/java/stirling/software/proprietary/audit/ControllerAuditAspect.java
index 2f75b755e0..e6af47129f 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/audit/ControllerAuditAspect.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/audit/ControllerAuditAspect.java
@@ -91,24 +91,32 @@ public class ControllerAuditAspect {
         MethodSignature sig = (MethodSignature) joinPoint.getSignature();
         Method method = sig.getMethod();
 
-        // Fast path: check if auditing is enabled before doing any work
-        // This avoids all data collection if auditing is disabled
-        if (!auditService.shouldAudit(method, auditConfig)) {
+        // Resolve the event type up front so the enterprise gate can be type-aware: document
+        // processing events (the Documents tab's data source) are audited without an Enterprise
+        // license, while the rest of the audit log stays Enterprise-only. resolveEventType is cheap
+        // (annotation / class / path checks), so it's safe on the pre-record fast path.
+        Audited auditedAnnotation = method.getAnnotation(Audited.class);
+        String path = getRequestPath(method, httpMethod);
+        AuditEventType eventType =
+                auditService.resolveEventType(
+                        method,
+                        joinPoint.getTarget().getClass(),
+                        path,
+                        httpMethod,
+                        auditedAnnotation);
+
+        // Fast path: skip all data collection when this event won't be recorded.
+        if (!auditService.shouldAudit(eventType, method, auditConfig)) {
             return joinPoint.proceed();
         }
 
-        // Check if method is explicitly annotated with @Audited
-        Audited auditedAnnotation = method.getAnnotation(Audited.class);
         AuditLevel level = auditConfig.getAuditLevel();
-
         // If @Audited annotation is present, respect its level setting
         if (auditedAnnotation != null) {
             // Use the level from annotation if it's stricter than global level
             level = auditedAnnotation.level();
         }
 
-        String path = getRequestPath(method, httpMethod);
-
         // Skip static GET resources
         if ("GET".equals(httpMethod)) {
             HttpServletRequest maybe = auditService.getCurrentRequest();
@@ -209,15 +217,6 @@ public class ControllerAuditAspect {
                 // the body ran, so it must happen here rather than with the pre-proceed HTTP data).
                 auditService.addAutomationContext(data, req);
 
-                // Resolve the event type using the unified method
-                AuditEventType eventType =
-                        auditService.resolveEventType(
-                                method,
-                                joinPoint.getTarget().getClass(),
-                                path,
-                                httpMethod,
-                                auditedAnnotation);
-
                 // Add result only if operation result capture is explicitly enabled
                 // Skip result for UI_DATA events to avoid storing large response bodies
                 if (auditService.shouldCaptureOperationResults()
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/audit/DefaultPortalDocumentsScopeResolver.java b/app/proprietary/src/main/java/stirling/software/proprietary/audit/DefaultPortalDocumentsScopeResolver.java
new file mode 100644
index 0000000000..066e74f4c5
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/audit/DefaultPortalDocumentsScopeResolver.java
@@ -0,0 +1,13 @@
+package stirling.software.proprietary.audit;
+
+import org.springframework.stereotype.Component;
+
+/** Self-hosted default: any portal user sees the whole-server documents queue. */
+@Component
+public class DefaultPortalDocumentsScopeResolver implements PortalDocumentsScopeResolver {
+
+    @Override
+    public PortalAuditScope resolve() {
+        return PortalAuditScope.server();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/audit/PortalDocumentsScopeResolver.java b/app/proprietary/src/main/java/stirling/software/proprietary/audit/PortalDocumentsScopeResolver.java
new file mode 100644
index 0000000000..2767de0630
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/audit/PortalDocumentsScopeResolver.java
@@ -0,0 +1,7 @@
+package stirling.software.proprietary.audit;
+
+/** Resolves which slice of the documents queue a portal user may see. */
+public interface PortalDocumentsScopeResolver {
+
+    PortalAuditScope resolve();
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/AdminJobController.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/AdminJobController.java
index ef941c603f..fa9d6db141 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/AdminJobController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/AdminJobController.java
@@ -7,6 +7,7 @@ import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RestController;
 
 import io.swagger.v3.oas.annotations.Operation;
@@ -66,28 +67,40 @@ public class AdminJobController {
     }
 
     /**
-     * Manually trigger cleanup of old jobs (admin only)
+     * Manually trigger cleanup of old jobs (admin only). Covers every user's jobs, unlike the
+     * self-service {@code POST /api/v1/general/jobs/cleanup}, which only releases the caller's own.
      *
-     * @return A response indicating how many jobs were cleaned up
+     * @param force Ignore the retention window and release every finished job now, rather than only
+     *     those already past it
+     * @return A response indicating how many jobs and files were cleaned up
      */
     @PostMapping("/job/cleanup")
-    @Operation(summary = "Cleanup old jobs")
+    @Operation(
+            summary = "Cleanup old jobs",
+            description =
+                    "Runs the job retention sweep now across all users. With force=true the"
+                            + " retention window is ignored and every finished job is released"
+                            + " immediately.")
     @PreAuthorize("hasRole('ADMIN')")
-    public ResponseEntity<?> cleanupOldJobs() {
-        int beforeCount = taskManager.getJobStats().getTotalJobs();
-        taskManager.cleanupOldJobs();
-        int afterCount = taskManager.getJobStats().getTotalJobs();
-        int removedCount = beforeCount - afterCount;
+    public ResponseEntity<?> cleanupOldJobs(
+            @RequestParam(name = "force", defaultValue = "false") boolean force) {
+        TaskManager.CleanupSummary summary =
+                force
+                        ? taskManager.cleanupFinishedJobsNow(jobId -> true)
+                        : taskManager.cleanupOldJobs();
 
         log.info(
-                "Admin triggered job cleanup: removed {} jobs, {} remaining",
-                removedCount,
-                afterCount);
+                "Admin triggered job cleanup (force={}): removed {} jobs and {} files, {} remaining",
+                force,
+                summary.jobsRemoved(),
+                summary.filesDeleted(),
+                summary.jobsRetained());
 
         return ResponseEntity.ok(
                 Map.of(
                         "message", "Cleanup complete",
-                        "removedJobs", removedCount,
-                        "remainingJobs", afterCount));
+                        "removedJobs", summary.jobsRemoved(),
+                        "filesDeleted", summary.filesDeleted(),
+                        "remainingJobs", summary.jobsRetained()));
     }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/ClassifyLabelController.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/ClassifyLabelController.java
index 798de71df9..dc422433f0 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/ClassifyLabelController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/ClassifyLabelController.java
@@ -9,6 +9,7 @@ import java.util.Map;
 import java.util.Set;
 
 import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDDocumentInformation;
 import org.springframework.beans.factory.annotation.Autowired;
 import org.springframework.core.io.Resource;
 import org.springframework.http.MediaType;
@@ -20,12 +21,13 @@ import org.springframework.web.bind.annotation.RestController;
 import org.springframework.web.multipart.MultipartFile;
 
 import io.github.pixee.security.Filenames;
-import io.swagger.v3.oas.annotations.Hidden;
 import io.swagger.v3.oas.annotations.Operation;
 import io.swagger.v3.oas.annotations.tags.Tag;
 
 import lombok.extern.slf4j.Slf4j;
 
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
 import stirling.software.common.service.CustomPDFDocumentFactory;
 import stirling.software.common.service.PdfMetadataService;
 import stirling.software.common.service.UserServiceInterface;
@@ -48,11 +50,13 @@ import tools.jackson.databind.node.ObjectNode;
  * <p>Runs as a Classification-policy pipeline step: it reads a bounded page window, asks the AI
  * engine to classify the document against the built-in label set, and stores the engine's JSON
  * answer — minus the transport-only {@code outcome} field — in the custom Info-dictionary key
- * {@link PdfMetadataService#CLASSIFICATION_KEY}. Returns the labelled PDF. Not intended for direct
- * client use.
+ * {@link PdfMetadataService#CLASSIFICATION_KEY}. Returns the labelled PDF.
+ *
+ * <p>Published in the API spec rather than hidden, so the tool-model generator emits it and a
+ * pipeline can name it as a step like any other tool. Classification is a thing a pipeline does,
+ * not a thing only the Classification policy may do.
  */
 @Slf4j
-@Hidden
 @RestController
 @RequestMapping("/api/v1/ai/tools")
 @Tag(name = "AI Tools", description = "Dispatchable AI-backed tools.")
@@ -99,19 +103,31 @@ public class ClassifyLabelController {
     }
 
     @PostMapping(value = "/classify-and-label", consumes = MediaType.MULTIPART_FORM_DATA_VALUE)
+    // PDF in, the same PDF out with a verdict on it, so a chain can be checked across this step.
+    @ToolIO(accepts = ToolFormat.PDF, produces = ToolFormat.PDF)
     @Operation(
             summary = "Classify a PDF and label its metadata",
             description =
                     "Reads the first two and last two pages, classifies the document via the AI"
                             + " engine, and stores the result in the StirlingPDFClassification"
-                            + " metadata field. Dispatched by the Classification policy; not"
-                            + " intended for direct client use.")
+                            + " metadata field. A document that already carries a verdict is"
+                            + " passed through untouched unless reclassify=true.")
     public ResponseEntity<Resource> classifyAndLabel(
-            @RequestParam("fileInput") MultipartFile fileInput) throws IOException {
+            @RequestParam("fileInput") MultipartFile fileInput,
+            @RequestParam(value = "reclassify", defaultValue = "false") boolean reclassify)
+            throws IOException {
         aiFeatureGate.requireClassify();
         try (PDDocument document = pdfDocumentFactory.load(fileInput, true)) {
             String fileName = safeFileName(fileInput.getOriginalFilename());
 
+            if (!reclassify && isClassified(document)) {
+                // Classifying twice costs a second engine call and charges for it, and a document
+                // that already carries a verdict has nothing new to learn. A pipeline can run this
+                // step over a mixed batch without paying for the ones already done.
+                log.debug("[classify-and-label] {} already classified; passing through", fileName);
+                return WebResponseUtils.pdfDocToWebResponse(document, fileName, tempFileManager);
+            }
+
             List<EngineLabel> allowed = resolveAllowedLabels();
             if (allowed.isEmpty()) {
                 // No vocabulary to classify against: pass the file through unlabelled rather than
@@ -135,6 +151,25 @@ public class ClassifyLabelController {
         }
     }
 
+    /**
+     * Whether a verdict is already on the document.
+     *
+     * <p>This only reads back what a previous run of this step wrote. It is not a statement that
+     * the verdict is trustworthy: the key is ordinary PDF metadata that whoever supplied the file
+     * can set. Skipping the engine on the strength of it is safe because the cost of being wrong is
+     * a missing re-classification, not a wrong decision. Anything that makes a SECURITY decision
+     * from this field - routing a document somewhere on the strength of its label, say - must
+     * classify with {@code reclassify=true} rather than trust what arrived.
+     */
+    private static boolean isClassified(PDDocument document) {
+        PDDocumentInformation info = document.getDocumentInformation();
+        if (info == null) {
+            return false;
+        }
+        String existing = info.getCustomMetadataValue(PdfMetadataService.CLASSIFICATION_KEY);
+        return existing != null && !existing.isBlank();
+    }
+
     private List<AiPageText> extractWindow(PDDocument document) throws IOException {
         List<AiPageText> pages = new ArrayList<>();
         for (int pageNumber : windowPageNumbers(document.getNumberOfPages(), WINDOW_PAGES)) {
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PortalDocumentsController.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PortalDocumentsController.java
index 14146eacb4..f6d094bde4 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PortalDocumentsController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/PortalDocumentsController.java
@@ -2,6 +2,7 @@ package stirling.software.proprietary.controller.api;
 
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
+import org.springframework.security.access.prepost.PreAuthorize;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.RequestParam;
 
@@ -11,19 +12,25 @@ import lombok.RequiredArgsConstructor;
 
 import stirling.software.common.annotations.api.ProprietaryUiDataApi;
 import stirling.software.proprietary.audit.PortalAuditScope;
-import stirling.software.proprietary.audit.PortalAuditScopeResolver;
+import stirling.software.proprietary.audit.PortalDocumentsScopeResolver;
 import stirling.software.proprietary.model.api.documents.PortalDocumentsResponseDto;
-import stirling.software.proprietary.security.config.EnterpriseEndpoint;
 import stirling.software.proprietary.service.PortalDocumentsService;
 
-/** Serves the portal Documents review queue, derived from real audit data and scoped per caller. */
+/**
+ * Serves the portal Documents review queue, derived from real audit data and scoped per caller.
+ *
+ * <p>Open to every portal user (not Enterprise-gated): the Documents tab is a core Processor
+ * feature. Access is enforced by {@code @resourceAccess.canUsePortal()}; visibility is then
+ * resolved per deployment - self-hosted portal users see the whole server, SaaS users see their
+ * team (see {@link PortalDocumentsScopeResolver}).
+ */
 @ProprietaryUiDataApi
 @RequiredArgsConstructor
-@EnterpriseEndpoint
+@PreAuthorize("@resourceAccess.canUsePortal()")
 public class PortalDocumentsController {
 
     private final PortalDocumentsService portalDocumentsService;
-    private final PortalAuditScopeResolver auditScopeResolver;
+    private final PortalDocumentsScopeResolver documentsScopeResolver;
 
     // tier accepted for mock-seam symmetry; ignored (queue isn't tier-scoped).
     @GetMapping("/documents")
@@ -32,8 +39,9 @@ public class PortalDocumentsController {
             description = "Files processed through the org, derived from the audit trail.")
     public ResponseEntity<PortalDocumentsResponseDto> getDocuments(
             @RequestParam(value = "tier", required = false) String tier) {
-        PortalAuditScope scope = auditScopeResolver.resolve();
+        PortalAuditScope scope = documentsScopeResolver.resolve();
         if (!scope.allowed()) {
+            // SaaS caller with no team has nothing to show; surface an empty tab, not a 500.
             return ResponseEntity.status(HttpStatus.FORBIDDEN).build();
         }
         PortalDocumentsResponseDto body =
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/converters/ConvertPdfToPdfUa.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/converters/ConvertPdfToPdfUa.java
new file mode 100644
index 0000000000..7f5241388f
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/converters/ConvertPdfToPdfUa.java
@@ -0,0 +1,176 @@
+package stirling.software.proprietary.controller.api.converters;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.util.LinkedHashMap;
+import java.util.Map;
+import java.util.regex.Pattern;
+
+import org.springframework.core.io.Resource;
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.multipart.MultipartFile;
+
+import io.github.pixee.security.Filenames;
+import io.swagger.v3.oas.annotations.Operation;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.annotations.AutoJobPostMapping;
+import stirling.software.common.annotations.api.ConvertApi;
+import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.util.ExceptionUtils;
+import stirling.software.common.util.TempFile;
+import stirling.software.common.util.TempFileManager;
+import stirling.software.common.util.WebResponseUtils;
+import stirling.software.proprietary.model.api.converters.PdfToPdfUaRequest;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+import stirling.software.proprietary.service.ua.PdfUaConversionService;
+
+/** Converts a PDF to PDF/UA; response headers say whether the result actually conforms. */
+@ConvertApi
+@Slf4j
+@RequiredArgsConstructor
+public class ConvertPdfToPdfUa {
+
+    private static final String HEADER_DECLARED = "X-Stirling-UA-Declared";
+    private static final String HEADER_FAILURES = "X-Stirling-UA-Failures";
+    private static final String HEADER_ALT_NEEDED = "X-Stirling-UA-Figures-Needing-Alt";
+    private static final String HEADER_WARNINGS = "X-Stirling-UA-Warnings";
+
+    /** Any line ending, so descriptions pasted from any platform parse the same. */
+    private static final Pattern NEWLINE = Pattern.compile("\\R");
+
+    private final PdfUaConversionService conversionService;
+    private final TempFileManager tempFileManager;
+
+    @AutoJobPostMapping(
+            consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
+            value = "/pdf/ua",
+            resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    @ToolIO(produces = ToolFormat.PDF)
+    @Operation(
+            summary = "Convert a PDF to PDF/UA-1 or PDF/UA-2",
+            description =
+                    "Tags the document, marks decorative content as artifacts, embeds fonts and"
+                            + " applies the document-level requirements of PDF/UA, then validates"
+                            + " the result. A conformance declaration is written only if validation"
+                            + " passes, so the returned file never claims more than it delivers.")
+    public ResponseEntity<Resource> pdfToPdfUa(@ModelAttribute PdfToPdfUaRequest request)
+            throws IOException {
+
+        MultipartFile input = request.getFileInput();
+        if (input == null || input.isEmpty()) {
+            throw ExceptionUtils.createPdfFileRequiredException();
+        }
+
+        String originalName = Filenames.toSimpleFileName(input.getOriginalFilename());
+        String stem = stripExtension(originalName == null ? "document" : originalName);
+        PdfUaProfile profile = PdfUaProfile.fromRequest(request.getProfile());
+
+        TaggingOptions options =
+                TaggingOptions.builder()
+                        .profile(profile)
+                        .title(request.getTitle())
+                        .fallbackTitle(stem)
+                        // Only used when the document declares no language of its own.
+                        .language(
+                                request.getLanguage() == null || request.getLanguage().isBlank()
+                                        ? "en-GB"
+                                        : request.getLanguage())
+                        .overrideLanguage(
+                                request.getOverrideLanguage() != null
+                                        && request.getOverrideLanguage())
+                        .existingTags(existingTags(request.getExistingTags()))
+                        .figurePolicy(figurePolicy(request.getFigurePolicy()))
+                        .embedFonts(request.getEmbedFonts() == null || request.getEmbedFonts())
+                        .altTextByFigure(parseAltText(request.getAltText()))
+                        .build();
+
+        PdfUaConversionOutcome outcome = conversionService.convert(input.getBytes(), options);
+
+        log.info(
+                "Converted '{}' to {}: declared={}, {} remaining failure(s)",
+                originalName,
+                profile.displayName(),
+                outcome.declared(),
+                outcome.validation().totalFailures());
+
+        outcome.warnings().forEach(warning -> log.info("PDF/UA warning: {}", warning));
+
+        // Streamed from a temp file so a large conversion does not hold a second heap copy.
+        String suffix = outcome.declared() ? "_pdfua" + profile.part() : "_tagged";
+        TempFile tempOut = tempFileManager.createManagedTempFile(".pdf");
+        try {
+            Files.write(tempOut.getPath(), outcome.pdfBytes());
+        } catch (IOException e) {
+            tempOut.close();
+            throw e;
+        }
+        ResponseEntity<Resource> response =
+                WebResponseUtils.pdfFileToWebResponse(tempOut, stem + suffix + ".pdf");
+
+        return ResponseEntity.status(response.getStatusCode())
+                .headers(response.getHeaders())
+                .header(HEADER_DECLARED, String.valueOf(outcome.declared()))
+                .header(HEADER_FAILURES, String.valueOf(outcome.validation().totalFailures()))
+                .header(
+                        HEADER_ALT_NEEDED,
+                        String.valueOf(outcome.tagging().figuresNeedingAltText()))
+                // Count only: warning text is multi-line prose, which HTTP headers mangle.
+                .header(HEADER_WARNINGS, String.valueOf(outcome.warnings().size()))
+                .body(response.getBody());
+    }
+
+    /**
+     * Parses newline-separated {@code key=description} pairs, keyed as the report hands them out.
+     * Only the first "=" splits, since a description may contain one.
+     */
+    public static Map<String, String> parseAltText(String raw) {
+        if (raw == null || raw.isBlank()) {
+            return Map.of();
+        }
+        Map<String, String> parsed = new LinkedHashMap<>();
+        for (String line : NEWLINE.split(raw)) {
+            int split = line.indexOf('=');
+            if (split <= 0) {
+                continue;
+            }
+            String key = line.substring(0, split).strip();
+            String description = line.substring(split + 1).strip();
+            if (!key.isEmpty() && !description.isEmpty()) {
+                parsed.put(key, description);
+            }
+        }
+        return parsed;
+    }
+
+    private static TaggingOptions.ExistingTags existingTags(String value) {
+        if (value == null) {
+            return TaggingOptions.ExistingTags.AUTO;
+        }
+        return switch (value.trim().toLowerCase()) {
+            case "keep" -> TaggingOptions.ExistingTags.KEEP;
+            case "rebuild" -> TaggingOptions.ExistingTags.REBUILD;
+            default -> TaggingOptions.ExistingTags.AUTO;
+        };
+    }
+
+    private static TaggingOptions.FigurePolicy figurePolicy(String value) {
+        if (value != null && value.trim().equalsIgnoreCase("mark-decorative")) {
+            return TaggingOptions.FigurePolicy.MARK_DECORATIVE;
+        }
+        return TaggingOptions.FigurePolicy.REQUIRE_ALT;
+    }
+
+    private static String stripExtension(String filename) {
+        int dot = filename.lastIndexOf('.');
+        return dot > 0 ? filename.substring(0, dot) : filename;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/security/AccessibilityReportController.java b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/security/AccessibilityReportController.java
new file mode 100644
index 0000000000..043734dad8
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/controller/api/security/AccessibilityReportController.java
@@ -0,0 +1,67 @@
+package stirling.software.proprietary.controller.api.security;
+
+import java.io.IOException;
+
+import org.springframework.http.MediaType;
+import org.springframework.http.ResponseEntity;
+import org.springframework.web.bind.annotation.ModelAttribute;
+import org.springframework.web.multipart.MultipartFile;
+
+import io.swagger.v3.oas.annotations.Operation;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.annotations.AutoJobPostMapping;
+import stirling.software.common.annotations.api.SecurityApi;
+import stirling.software.common.enumeration.ResourceWeight;
+import stirling.software.common.model.tool.ToolFormat;
+import stirling.software.common.model.tool.ToolIO;
+import stirling.software.common.util.ExceptionUtils;
+import stirling.software.proprietary.model.api.ua.AccessibilityReport;
+import stirling.software.proprietary.model.api.ua.AccessibilityReportRequest;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.service.ua.AccessibilityAuditService;
+
+/** Reports how accessible a document is, without modifying it. */
+@SecurityApi
+@RequiredArgsConstructor
+@Slf4j
+public class AccessibilityReportController {
+
+    private final AccessibilityAuditService auditService;
+
+    @ToolIO(produces = ToolFormat.JSON)
+    @Operation(
+            summary = "Report a document's accessibility standing",
+            description =
+                    "Validates the document against PDF/UA and reports what fails, which failures"
+                            + " can be fixed automatically, and which checks still need a person."
+                            + " Does not modify the file.")
+    // Costs a full veraPDF pass plus the converter's own layout analysis over every page.
+    @AutoJobPostMapping(
+            value = "/accessibility-report",
+            consumes = MediaType.MULTIPART_FORM_DATA_VALUE,
+            resourceWeight = ResourceWeight.LARGE_WEIGHT)
+    public ResponseEntity<AccessibilityReport> report(
+            @ModelAttribute AccessibilityReportRequest request) {
+
+        MultipartFile file = request.getFileInput();
+        if (file == null || file.isEmpty()) {
+            throw ExceptionUtils.createPdfFileRequiredException();
+        }
+        PdfUaProfile profile = PdfUaProfile.fromRequest(request.getProfile());
+        try {
+            AccessibilityReport report = auditService.audit(file.getBytes(), profile);
+            log.info(
+                    "Accessibility report for '{}': tagged={}, {} issue(s)",
+                    file.getOriginalFilename(),
+                    report.isTagged(),
+                    report.getIssues().size());
+            return ResponseEntity.ok(report);
+        } catch (IOException e) {
+            throw ExceptionUtils.createRuntimeException(
+                    "error.ioException", "Could not read the PDF: {0}", e, e.getMessage());
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/EditorFailureReport.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/EditorFailureReport.java
new file mode 100644
index 0000000000..b200b3d589
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/EditorFailureReport.java
@@ -0,0 +1,47 @@
+package stirling.software.proprietary.failure;
+
+import java.util.List;
+
+/**
+ * A failure a user hit in the editor, reported by their own client. The editor calls tools directly
+ * rather than through the policy engine, so nothing server-side sees these unless the client says
+ * so.
+ *
+ * <p>Note what the client cannot supply: no team, no actor, no document name. The first two come
+ * from the authenticated session, and the third is never stored.
+ *
+ * @param operation the tool that failed, e.g. {@code remove-password}
+ * @param errorCode the code from the tool's Problem Details response, or null when there was none
+ * @param fileIds opaque client-side ids of the documents involved; empty when none is attributable
+ * @param detail the message the user saw
+ */
+public record EditorFailureReport(
+        String operation, String errorCode, List<String> fileIds, String detail) {
+
+    /**
+     * Cap on the files one report may name. Each one becomes a permanent incident and this endpoint
+     * is open to any authenticated user, so without a bound a single call can flood a leader's
+     * queue. 200 is several times the largest batch an editor session plausibly fails on, and the
+     * most the review queue shows in one page, so a real report never meets it.
+     *
+     * <p>An oversized report is refused whole rather than trimmed: see {@link
+     * FileRunEventController#report}.
+     */
+    static final int MAX_FILE_IDS = 200;
+
+    public EditorFailureReport {
+        fileIds = fileIds == null ? List.of() : List.copyOf(fileIds);
+    }
+
+    boolean hasOperation() {
+        return operation != null && !operation.isBlank();
+    }
+
+    /**
+     * Counted before the blank ids are dropped, because this bounds the request rather than the
+     * rows it would produce.
+     */
+    boolean namesTooManyFiles() {
+        return fileIds.size() > MAX_FILE_IDS;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionException.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionException.java
index 1c899ab529..bd0ed2d001 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionException.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionException.java
@@ -1,20 +1,17 @@
 package stirling.software.proprietary.failure;
 
+import org.springframework.http.HttpStatus;
+
 import lombok.Getter;
 
-/**
- * Why an action could not be dispatched. Carries a {@link Reason} rather than an HTTP status, so
- * the service stays web-agnostic and the controller owns the mapping.
- */
+/** Carries a {@link Reason} rather than an HTTP status, so the service stays web-agnostic. */
 @Getter
 public class FailureActionException extends RuntimeException {
 
     public enum Reason {
         /**
-         * No such event, it belongs to another team, or the caller's team did not resolve. One
-         * reason for all three, so the response does not vary with which it was. Unrelated to
-         * {@link FailureKind#UNKNOWN}, which is an unclassified failure rather than a refused
-         * action.
+         * No such event, another team's, or an unresolved team: one reason, so the answer cannot
+         * vary.
          */
         EVENT_NOT_FOUND,
 
@@ -22,15 +19,13 @@ public class FailureActionException extends RuntimeException {
         ACTION_NOT_RECOGNISED,
 
         /**
-         * The action exists but this kind does not declare it, so an incoherent pairing (releasing
-         * a document whose destination is what failed) cannot be dispatched even by hand.
-         *
-         * <p>Unreachable today: both kinds declare both actions, so no request can trip this guard
-         * until a kind ships with a restricted action set. Declared now because the guard must
-         * exist before that kind does, not after.
+         * The action exists but this kind does not offer it, so it cannot be dispatched by hand.
          */
         ACTION_NOT_DECLARED,
 
+        /** Offered, but the client is what runs it, so refused rather than half-performed. */
+        ACTION_NOT_DISPATCHABLE,
+
         /** The event is already closed, so no further transition is possible. */
         ALREADY_CLOSED
     }
@@ -41,9 +36,21 @@ public class FailureActionException extends RuntimeException {
         this(reason, message, null);
     }
 
-    /** For a refusal that follows from a lower-level failure, so its stack is not dropped. */
     public FailureActionException(Reason reason, String message, Throwable cause) {
         super(message, cause);
         this.reason = reason;
     }
+
+    /**
+     * Lives with the reasons it maps, so every surface that dispatches an action answers alike. A
+     * closed row is a conflict, not a bad request: it was well-formed and valid a moment earlier.
+     */
+    public static HttpStatus statusOf(Reason reason) {
+        return switch (reason) {
+            case EVENT_NOT_FOUND -> HttpStatus.NOT_FOUND;
+            case ACTION_NOT_RECOGNISED, ACTION_NOT_DECLARED, ACTION_NOT_DISPATCHABLE ->
+                    HttpStatus.BAD_REQUEST;
+            case ALREADY_CLOSED -> HttpStatus.CONFLICT;
+        };
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionId.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionId.java
index dbfcff7fb4..8f60e9f4a0 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionId.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionId.java
@@ -1,11 +1,52 @@
 package stirling.software.proprietary.failure;
 
+import lombok.Getter;
+
 /**
- * The actions a {@link FailureKind} may declare. Both are incident dispositions: they change how
- * the event is shown and touch nothing else, which is what makes them valid for every kind
- * including {@link FailureKind#UNKNOWN}, and why there is no {@code APPROVE} yet.
+ * The actions a {@link FailureKind} may declare. Client actions are declared here rather than
+ * invented per client, so the server keeps deciding what a kind offers, in what order and labelled
+ * how.
  */
+@Getter
 public enum FailureActionId {
-    ACKNOWLEDGE,
-    DISMISS
+
+    /**
+     * Kept in the vocabulary for as long as any persisted row is {@code ACKNOWLEDGED}: such rows
+     * must stay readable and closable whether or not any kind currently offers this.
+     */
+    ACKNOWLEDGE(Execution.SERVER, "Acknowledge"),
+
+    DISMISS(Execution.SERVER, "Dismiss"),
+
+    /** Open the document behind the incident, in whichever client can resolve its id. */
+    VIEW_FILE(Execution.CLIENT, "View file"),
+
+    VIEW_IN_PROCESSOR(Execution.CLIENT, "View in processor");
+
+    /** Dispatch refuses a {@code CLIENT} id, so this is enforced rather than merely documented. */
+    public enum Execution {
+
+        /** {@link FailureActionRegistry} requires a {@link FailureAction} bean for these. */
+        SERVER,
+
+        /**
+         * Declared and rendered, never dispatched: the server has neither the file nor the tool.
+         */
+        CLIENT
+    }
+
+    private final Execution execution;
+
+    /** English fallback, for a client with no translation for the label key. */
+    private final String defaultLabel;
+
+    FailureActionId(Execution execution, String defaultLabel) {
+        this.execution = execution;
+        this.defaultLabel = defaultLabel;
+    }
+
+    /** Also whether it can be dispatched. */
+    public boolean runsOnServer() {
+        return execution == Execution.SERVER;
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionRegistry.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionRegistry.java
index 3928e91845..dad1bd5eda 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionRegistry.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureActionRegistry.java
@@ -16,6 +16,9 @@ import lombok.extern.slf4j.Slf4j;
  * Resolves a {@link FailureActionId} to the bean that implements it. The startup check is the
  * point: because kinds declare action ids as data, one could name an action nobody implements,
  * which would otherwise show up as a button that 400s rather than as a failed boot.
+ *
+ * <p>Only {@link FailureActionId.Execution#SERVER} ids belong here: a bean for a client action is
+ * refused, because dispatch could never reach it.
  */
 @Slf4j
 @Service
@@ -25,6 +28,14 @@ public class FailureActionRegistry {
 
     public FailureActionRegistry(List<FailureAction> actions) {
         for (FailureAction action : actions) {
+            if (!action.id().runsOnServer()) {
+                throw new IllegalStateException(
+                        "Action "
+                                + action.id()
+                                + " is run by the client, so "
+                                + action.getClass().getName()
+                                + " could never be dispatched");
+            }
             FailureAction clash = byId.put(action.id(), action);
             if (clash != null) {
                 throw new IllegalStateException(
@@ -38,10 +49,7 @@ public class FailureActionRegistry {
         }
     }
 
-    /**
-     * Fail fast if any kind declares an action with no handler, naming every gap rather than the
-     * first, so one boot tells you everything that is missing.
-     */
+    /** Names every gap rather than the first, so one boot tells you everything that is missing. */
     @PostConstruct
     void verifyEveryDeclaredActionHasAHandler() {
         List<String> gaps =
@@ -49,6 +57,7 @@ public class FailureActionRegistry {
                         .flatMap(
                                 kind ->
                                         kind.getActions().stream()
+                                                .filter(FailureActionId::runsOnServer)
                                                 .filter(action -> !byId.containsKey(action))
                                                 .map(action -> kind.getId() + " -> " + action))
                         .toList();
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureAudience.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureAudience.java
new file mode 100644
index 0000000000..217dfc7975
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureAudience.java
@@ -0,0 +1,15 @@
+package stirling.software.proprietary.failure;
+
+/**
+ * Who an offered action is for, the read scope having already decided they may see the incident.
+ * The distinction is possession, not seniority: a reviewer cannot reach a document only its owner
+ * holds.
+ */
+public enum FailureAudience {
+    OWNER,
+
+    /** Anyone who triages the team's incidents, whoever hit them. */
+    TEAM_REVIEWER,
+
+    ANYONE_WHO_SEES
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureKind.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureKind.java
index d46f2d85e1..fa2fd93448 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureKind.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FailureKind.java
@@ -1,7 +1,11 @@
 package stirling.software.proprietary.failure;
 
-import static stirling.software.proprietary.failure.FailureActionId.ACKNOWLEDGE;
 import static stirling.software.proprietary.failure.FailureActionId.DISMISS;
+import static stirling.software.proprietary.failure.FailureActionId.VIEW_FILE;
+import static stirling.software.proprietary.failure.FailureActionId.VIEW_IN_PROCESSOR;
+import static stirling.software.proprietary.failure.FailureAudience.ANYONE_WHO_SEES;
+import static stirling.software.proprietary.failure.FailureAudience.OWNER;
+import static stirling.software.proprietary.failure.FailureAudience.TEAM_REVIEWER;
 
 import java.util.Arrays;
 import java.util.HashMap;
@@ -20,9 +24,8 @@ import lombok.Getter;
  * The registry of failure kinds, described as data: a stable id, i18n keys and an English fallback
  * like {@code ExceptionUtils.ErrorCode}, plus the facets a review surface needs.
  *
- * <p>Actions are declared here but implemented in {@link FailureAction} beans resolved by id, so a
- * new kind ships as a registry entry plus copy. Two members today: {@link #UNKNOWN} gives every
- * failed run a record, and kinds get promoted out of it as production shows what occurs.
+ * <p>A new kind ships as a registry entry plus copy. Each offer also says who it is for, since one
+ * incident is read both by whoever hit it and by whoever reviews after them.
  */
 @Getter
 public enum FailureKind {
@@ -33,8 +36,9 @@ public enum FailureKind {
             FailureScope.FILE,
             errorCodes("E004"),
             fallback("This document is password-protected, so the pipeline could not read it."),
-            offer(ACKNOWLEDGE),
-            offer(DISMISS, "dismissSkipFile")),
+            offer(VIEW_FILE, OWNER),
+            offer(VIEW_IN_PROCESSOR, TEAM_REVIEWER),
+            offer(DISMISS, ANYONE_WHO_SEES)),
 
     UNKNOWN(
             FailureStage.INTERNAL,
@@ -43,8 +47,11 @@ public enum FailureKind {
             FailureScope.RUN,
             noErrorCodes(),
             fallback("This run failed for a reason Stirling does not yet recognise."),
-            offer(ACKNOWLEDGE),
-            offer(DISMISS));
+            // Same order as every other kind: declaration order is display order, so the document
+            // leads wherever it is offered rather than moving between failures.
+            offer(VIEW_FILE, OWNER),
+            offer(VIEW_IN_PROCESSOR, TEAM_REVIEWER),
+            offer(DISMISS, ANYONE_WHO_SEES));
 
     private static final String KEY_PREFIX = "portal.failures.kind.";
     private static final String ACTION_KEY_PREFIX = "portal.failures.action.";
@@ -92,22 +99,26 @@ public enum FailureKind {
     }
 
     /**
-     * One action this kind offers, with the key to label it by. One ordered list rather than ids
-     * plus a parallel map of overrides, which could disagree with each other.
+     * One ordered list rather than ids plus parallel maps of audiences and labels, which could
+     * disagree with each other.
      *
      * @param labelKeySuffix key under {@code portal.failures.action.}, or null for the generic
      *     label
      */
-    private record Offer(FailureActionId id, String labelKeySuffix) {}
+    private record Offer(FailureActionId id, FailureAudience audience, String labelKeySuffix) {}
 
-    /** An action labelled by this kind's own wording, where the generic label reads badly. */
-    private static Offer offer(FailureActionId id, String labelKeySuffix) {
-        return new Offer(id, labelKeySuffix);
+    /** Declaration order is display order. */
+    private static Offer offer(FailureActionId id, FailureAudience audience) {
+        return new Offer(id, audience, null);
     }
 
-    /** An action labelled by the shared wording for that action. */
-    private static Offer offer(FailureActionId id) {
-        return new Offer(id, null);
+    /**
+     * As {@link #offer(FailureActionId, FailureAudience)}, but labelled by this kind's own wording
+     * where the shared one reads badly.
+     */
+    private static Offer offer(
+            FailureActionId id, FailureAudience audience, String labelKeySuffix) {
+        return new Offer(id, audience, labelKeySuffix);
     }
 
     /**
@@ -146,6 +157,22 @@ public enum FailureKind {
         return offers.stream().map(Offer::id).toList();
     }
 
+    /**
+     * What this kind offers, in declaration order, each with its label resolved. What a review
+     * surface reads, so it never has to ask two separate questions about one offer.
+     */
+    public List<OfferedAction> getOfferedActions() {
+        return offers.stream()
+                .map(
+                        offer ->
+                                new OfferedAction(
+                                        offer.id(), labelKeyFor(offer.id()), offer.audience()))
+                .toList();
+    }
+
+    /** One action as a kind declares it: what to call it and who it is for. */
+    public record OfferedAction(FailureActionId id, String labelKey, FailureAudience audience) {}
+
     /** Whether this kind offers {@code action}. The dispatch guard: see {@code FailureActionId}. */
     public boolean declares(FailureActionId action) {
         return offers.stream().anyMatch(offer -> offer.id() == action);
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEvent.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEvent.java
index cb6b3a452f..10f46cdbe2 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEvent.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEvent.java
@@ -20,6 +20,7 @@ public record FileRunEvent(
         FailureOrigin origin,
         String policyId,
         String runId,
+        String sourceId,
         String fileId,
         String detail,
         String dedupKey,
@@ -46,6 +47,7 @@ public record FileRunEvent(
                 entity.getOrigin(),
                 entity.getPolicyId(),
                 entity.getRunId(),
+                entity.getSourceId(),
                 entity.getFileId(),
                 entity.getDetail(),
                 entity.getDedupKey(),
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventController.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventController.java
index 49aab9aff6..24d3558c25 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventController.java
@@ -5,6 +5,7 @@ import java.util.List;
 import java.util.Map;
 
 import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
 import org.springframework.web.bind.annotation.GetMapping;
 import org.springframework.web.bind.annotation.PathVariable;
 import org.springframework.web.bind.annotation.PostMapping;
@@ -21,15 +22,13 @@ import io.swagger.v3.oas.annotations.tags.Tag;
 import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
-import stirling.software.common.model.ApplicationProperties;
-import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
-
 /**
- * Read and triage recorded failures for the caller's team. Note the absence of a team parameter:
- * the team comes from the authenticated principal, never the request.
+ * Read and triage recorded failures. Note the absence of a team parameter: the team comes from the
+ * authenticated principal, never the request.
  *
- * <p>Reviewing failures is a leader-level capability, gated the same way policy editing is: see
- * {@link #requireFailureReviewAllowed()}.
+ * <p>Every endpoint is open to any authenticated user and scoped in the service instead: a leader
+ * reads and closes the whole team's failures, everyone else their own. Nothing here decides who may
+ * do what, so the two cannot drift apart.
  */
 @Slf4j
 @RestController
@@ -45,21 +44,21 @@ public class FileRunEventController {
     private static final int DEFAULT_LIMIT = 50;
 
     private final FileRunEventService service;
-    private final PolicyManagementAuthority policyManagementAuthority;
-    private final ApplicationProperties applicationProperties;
 
     @GetMapping
     @Operation(
             summary = "List recorded failures",
             description =
-                    "Failures recorded for the caller's team, newest first. Each row carries its"
-                            + " available actions already resolved.")
+                    "Failures the caller may see, newest first: their team's for a leader, their own"
+                            + " for everyone else. Each row carries its available actions already"
+                            + " resolved.")
     public FileRunEventsResponse list(
             // Spring's converter 400s on a value outside the enum, so no hand-rolled parse.
             @RequestParam(required = false) FileRunEventStatus status,
             @RequestParam(required = false) String kindId,
             @RequestParam(required = false) Integer limit) {
-        requireFailureReviewAllowed();
+        // No role gate: the service scopes the read instead, so a member gets their own failures
+        // and a leader the team's.
         int cappedLimit = Math.min(limit == null ? DEFAULT_LIMIT : Math.max(1, limit), MAX_LIMIT);
 
         List<FileRunEventView> events =
@@ -75,22 +74,70 @@ public class FileRunEventController {
     @Operation(
             summary = "Apply an action to a recorded failure",
             description =
-                    "Rejected with 400 if the failure's kind does not declare the action, so an"
-                            + " action that makes no sense for a given failure cannot be applied.")
+                    "Rejected with 400 if the failure's kind does not declare the action, or if the"
+                            + " action is one the client runs rather than the server, so neither an"
+                            + " action that makes no sense for a given failure nor one the server"
+                            + " cannot perform can be applied.")
     public FileRunEventView act(
             @PathVariable String eventId,
             @PathVariable String actionId,
             @RequestBody(required = false) ActionRequest request) {
-        requireFailureReviewAllowed();
+        // No role gate: the service decides, which lets someone close their own failure while
+        // still keeping a colleague's out of reach.
         Map<String, String> inputs = request == null ? Map.of() : request.safeInputs();
         try {
             FileRunEvent updated = service.dispatch(eventId, actionId, inputs);
             return FileRunEventView.of(updated, service.availableActions(updated));
         } catch (FailureActionException e) {
-            throw new ResponseStatusException(statusFor(e.getReason()), e.getMessage(), e);
+            throw new ResponseStatusException(
+                    FailureActionException.statusOf(e.getReason()), e.getMessage(), e);
         }
     }
 
+    @PostMapping("/reports")
+    @Operation(
+            summary = "Report a failure hit in the editor",
+            description =
+                    "For failures the server never sees, because the editor calls tools directly."
+                            + " Open to any authenticated user: whoever's work failed can say so, and"
+                            + " reads it back scoped to themselves. Rejected with 400 if it names"
+                            + " more files than one report may carry.")
+    public ResponseEntity<Void> report(@RequestBody EditorFailureReport report) {
+        if (report == null || !report.hasOperation()) {
+            throw new ResponseStatusException(
+                    HttpStatus.BAD_REQUEST, "operation is required to report a failure");
+        }
+        // Refused whole rather than trimmed, and refused before the first write, so an oversized
+        // report leaves no rows at all. Trimming would hand a reviewer part of a set with nothing
+        // saying the rest existed, which is what the cap inside the service used to do. The limit
+        // is stated in the message because the editor reports in the background: a client author
+        // reading a log is the only person who will ever see this.
+        if (report.namesTooManyFiles()) {
+            throw new ResponseStatusException(
+                    HttpStatus.BAD_REQUEST,
+                    "a report may name at most "
+                            + EditorFailureReport.MAX_FILE_IDS
+                            + " files, and this one named "
+                            + report.fileIds().size());
+        }
+        service.report(report);
+        // No body: the editor reports and moves on, and has nothing to do with the row.
+        return ResponseEntity.noContent().build();
+    }
+
+    @PostMapping("/removed-files")
+    @Operation(
+            summary = "Close the incidents about files deleted from the editor",
+            description =
+                    "Deleting the document leaves nothing to act on, so its incidents drop out of"
+                            + " the queue while the rows stay for audit. Applies only to the"
+                            + " caller's own editor rows, however senior they are.")
+    public ResponseEntity<Void> filesRemoved(@RequestBody(required = false) RemovedFiles request) {
+        service.forgetFiles(request == null ? List.of() : request.safeFileIds());
+        // No body: the editor is telling the server, not asking it anything.
+        return ResponseEntity.noContent().build();
+    }
+
     @GetMapping("/kinds")
     @Operation(
             summary = "List known failure kinds",
@@ -98,48 +145,37 @@ public class FileRunEventController {
                     "The failure registry. Lets a client describe kinds it was not built with, and"
                             + " doubles as the probe for whether failure tracking exists at all.")
     public List<FailureKindView> kinds() {
-        requireFailureReviewAllowed();
+        // The registry is copy and metadata, not anyone's data, and a member needs it to render the
+        // failures they can already see.
         return Arrays.stream(FailureKind.values()).map(FailureKindView::of).toList();
     }
 
-    /**
-     * Triage is for a team leader (SaaS) or admin (self-hosted), mirroring {@code
-     * PolicyController.requirePolicyEditingAllowed()} rather than inventing a second notion of who
-     * manages a team's automation: a member can trigger runs, a leader reviews them.
-     *
-     * <p>Login disabled means a single-user deployment with no roles to tell apart, the same
-     * carve-out the policy endpoints make. Team scoping is separate, and lives in the service.
-     */
-    private void requireFailureReviewAllowed() {
-        if (!applicationProperties.getSecurity().isEnableLogin()) {
-            return;
-        }
-        if (!policyManagementAuthority.canEditPolicies()) {
-            throw new ResponseStatusException(
-                    HttpStatus.FORBIDDEN,
-                    "Recorded failures may only be reviewed by a team leader");
-        }
-    }
-
-    /**
-     * A closed row is a conflict rather than a bad request: the request was well-formed and would
-     * have been valid a moment earlier.
-     */
-    private static HttpStatus statusFor(FailureActionException.Reason reason) {
-        return switch (reason) {
-            case EVENT_NOT_FOUND -> HttpStatus.NOT_FOUND;
-            case ACTION_NOT_RECOGNISED, ACTION_NOT_DECLARED -> HttpStatus.BAD_REQUEST;
-            case ALREADY_CLOSED -> HttpStatus.CONFLICT;
-        };
-    }
-
     /** Wrapped rather than a bare array so pagination can be added without breaking clients. */
     public record FileRunEventsResponse(List<FileRunEventView> events) {}
 
-    /** Inputs an action declared it needs. Empty for both actions that exist today. */
+    /**
+     * Files gone from the caller's editor. Opaque ids only, as everywhere else on this API.
+     *
+     * <p>Deliberately uncapped where a report is capped, because this creates nothing: it closes
+     * rows the caller already owns, so however long the list is, it can only ever touch incidents
+     * that already exist. Refusing an oversized one would also be the harmful direction here, since
+     * the editor says this once and never retries: those incidents would sit in the queue asking
+     * for attention about files that no longer exist.
+     */
+    public record RemovedFiles(List<String> fileIds) {
+
+        List<String> safeFileIds() {
+            return fileIds == null ? List.of() : fileIds;
+        }
+    }
+
+    /**
+     * Inputs an action declared it needs. Empty for every action the server runs today: the one
+     * that needs a password is run by the client, which never sends it here.
+     */
     public record ActionRequest(Map<String, String> inputs) {
 
-        Map<String, String> safeInputs() {
+        public Map<String, String> safeInputs() {
             return inputs == null ? Map.of() : inputs;
         }
     }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventEntity.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventEntity.java
index 9659941fc9..3cfb67a7fc 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventEntity.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventEntity.java
@@ -84,6 +84,10 @@ public class FileRunEventEntity implements Serializable {
     @Column(name = "run_id")
     private String runId;
 
+    /** Which folder, bucket or webhook fed the run. Null when a user supplied the file. */
+    @Column(name = "source_id")
+    private String sourceId;
+
     @Column(name = "file_id")
     private String fileId;
 
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventRepository.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventRepository.java
index 6da6a9b004..316dd34925 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventRepository.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventRepository.java
@@ -17,27 +17,36 @@ import org.springframework.transaction.annotation.Transactional;
 public interface FileRunEventRepository extends JpaRepository<FileRunEventEntity, String> {
 
     /**
-     * This team's events, newest first, scoped in the query rather than loaded and filtered. A
-     * {@code null} teamId matches the rows with no team (login disabled), mirroring {@link
-     * stirling.software.proprietary.policy.source.SourceRepository#findByTeam}, since a plain
-     * {@code = null} would return nothing.
+     * As {@link #findByTeamAndStatus} but for a set of statuses, e.g. the open ones. The kind
+     * filter is in the query, before the limit: filtering an already-limited page could return
+     * nothing while matching rows exist.
+     *
+     * <p>{@code actor} narrows to one person's own failures. Null means the whole team, which only
+     * a leader ever asks for: see {@code FileRunEventService#readScope}.
      */
     @Query(
             "select e from FileRunEventEntity e where ((:teamId is null and e.teamId is null) or"
-                    + " e.teamId = :teamId) and (:kindId is null or e.kindId = :kindId)"
-                    + " order by e.lastSeenAt desc")
-    List<FileRunEventEntity> findByTeam(
-            @Param("teamId") Long teamId, @Param("kindId") String kindId, Pageable pageable);
+                    + " e.teamId = :teamId) and e.status in :statuses"
+                    + " and (:kindId is null or e.kindId = :kindId)"
+                    + " and (:actor is null or e.actor = :actor) order by e.lastSeenAt desc")
+    List<FileRunEventEntity> findByTeamAndStatusIn(
+            @Param("teamId") Long teamId,
+            @Param("statuses") List<FileRunEventStatus> statuses,
+            @Param("kindId") String kindId,
+            @Param("actor") String actor,
+            Pageable pageable);
 
-    /** As {@link #findByTeam} but restricted to one status, for the review surface's filters. */
+    /** As {@link #findByTeamAndStatusIn} but for exactly one status, for the surface's filters. */
     @Query(
             "select e from FileRunEventEntity e where ((:teamId is null and e.teamId is null) or"
                     + " e.teamId = :teamId) and e.status = :status"
-                    + " and (:kindId is null or e.kindId = :kindId) order by e.lastSeenAt desc")
+                    + " and (:kindId is null or e.kindId = :kindId)"
+                    + " and (:actor is null or e.actor = :actor) order by e.lastSeenAt desc")
     List<FileRunEventEntity> findByTeamAndStatus(
             @Param("teamId") Long teamId,
             @Param("status") FileRunEventStatus status,
             @Param("kindId") String kindId,
+            @Param("actor") String actor,
             Pageable pageable);
 
     /**
@@ -85,6 +94,29 @@ public interface FileRunEventRepository extends JpaRepository<FileRunEventEntity
             @Param("now") Instant now,
             @Param("allowedFrom") Collection<FileRunEventStatus> allowedFrom);
 
+    /**
+     * Close the incidents about documents their owner deleted from the editor: the queue is what
+     * needs attention, and a document that no longer exists needs none.
+     *
+     * <p>Scoped by the absence of a source rather than by origin: a source-fed run's {@code fileId}
+     * is a hash no client can name. Narrowed to the owner's own rows, since clients mint the ids.
+     */
+    @Modifying(clearAutomatically = true)
+    @Transactional
+    @Query(
+            "update FileRunEventEntity e set e.status ="
+                    + " stirling.software.proprietary.failure.FileRunEventStatus.FILE_REMOVED,"
+                    + " e.statusActor = :actor, e.statusAt = :now where e.sourceId is null and"
+                    + " ((:teamId is null and e.teamId is null) or e.teamId = :teamId) and"
+                    + " ((:actor is null and e.actor is null) or e.actor = :actor) and e.fileId in"
+                    + " :fileIds and e.status in :allowedFrom")
+    int markFilesRemoved(
+            @Param("teamId") Long teamId,
+            @Param("actor") String actor,
+            @Param("fileIds") Collection<String> fileIds,
+            @Param("now") Instant now,
+            @Param("allowedFrom") Collection<FileRunEventStatus> allowedFrom);
+
     /**
      * The most recent row for this exact failure, so the rollup can increment an existing incident
      * instead of opening a new one. Team-scoped, so the same failure in two teams stays two rows.
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventService.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventService.java
index 94b9c00a2c..10f45f46c0 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventService.java
@@ -13,55 +13,130 @@ import stirling.software.common.service.UserServiceInterface;
 import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
 
 /**
- * Reads and acts on incidents for the calling user's team.
+ * Reads and acts on the incidents the calling user is allowed to see, which is where that decision
+ * is made: a leader reads and closes the whole team's failures, everyone else their own. Keeping it
+ * here rather than on the endpoints means the read and the triage cannot drift apart.
  *
  * <p>Team scoping mirrors {@code PolicyAccessGuard}: everyone sees only their own team's rows, the
  * team always comes from the authenticated principal, and scoping applies only when login is
  * enabled so single-user deployments keep working. When the team cannot be resolved the caller
- * reads nothing; see {@link #scope()}.
+ * reads nothing; see {@link #readScope()}.
+ *
+ * <p>The read scope decides who sees an incident; {@link #availableActions} decides who may act.
  */
 @Slf4j
 @Service
 @RequiredArgsConstructor
 public class FileRunEventService {
 
+    /** Why an offered action came back disabled. Copy lives under {@code portal.failures}. */
+    private static final String CLOSED_REASON_KEY = "portal.failures.disabled.closed";
+
+    private static final String UNATTENDED_REASON_KEY = "portal.failures.disabled.unattended";
+
+    /** The row never named a document, so unlike the unattended case no client can find one. */
+    private static final String DOCUMENTLESS_REASON_KEY = "portal.failures.disabled.noDocument";
+
     private final FileRunEventStore store;
     private final FailureActionRegistry actionRegistry;
     private final PolicyManagementAuthority policyManagementAuthority;
     private final UserServiceInterface userService;
     private final ApplicationProperties applicationProperties;
 
-    /** The calling user's events, newest first. Empty when their team cannot be resolved. */
+    /**
+     * Record a failure a user hit in the editor. One incident per named file, so each document
+     * stays separately actionable; one unattributed incident when the report names none.
+     *
+     * <p>The team and actor come from the session rather than the report, and the kind is
+     * classified from the reported code, falling back to {@link FailureKind#UNKNOWN} for a code no
+     * kind claims.
+     */
+    public List<FileRunEvent> report(EditorFailureReport report) {
+        FailureKind kind = FailureKind.byErrorCode(report.errorCode()).orElse(FailureKind.UNKNOWN);
+        // The caller's team, not their read scope: recording is open to everyone, and a reader who
+        // may see nothing still has their failure filed under the team it happened in.
+        Long teamId = currentTeamId();
+        String actor = currentActor();
+        String detail = detailFor(report);
+
+        List<String> fileIds =
+                report.fileIds().stream().filter(id -> id != null && !id.isBlank()).toList();
+        if (fileIds.isEmpty()) {
+            return List.of(recordReported(kind, teamId, actor, null, detail));
+        }
+        // Every named file gets its row. An earlier cap here silently dropped the rest, which lost
+        // failures a reviewer needed and was inconsistent with the processor path, where a sweep
+        // records one row per failing file with no limit at all. How many files one report may name
+        // is bounded at the boundary instead (see EditorFailureReport#MAX_FILE_IDS), where an
+        // oversized report can be refused whole before anything is written.
+        return fileIds.stream()
+                .map(fileId -> recordReported(kind, teamId, actor, fileId, detail))
+                .toList();
+    }
+
+    private FileRunEvent recordReported(
+            FailureKind kind, Long teamId, String actor, String fileId, String detail) {
+        return store.record(RecordFailure.forEditor(kind, teamId, actor, fileId, detail));
+    }
+
+    /**
+     * The operation is the context a reviewer needs, since an editor failure has no policy or run.
+     */
+    private String detailFor(EditorFailureReport report) {
+        String message = report.detail() == null ? "" : report.detail();
+        return message.isBlank() ? report.operation() : report.operation() + ": " + message;
+    }
+
+    /**
+     * Close the incidents about documents the caller has deleted from their editor. The queue means
+     * "needs attention", and a document that no longer exists needs none; the rows stay for audit.
+     *
+     * <p>Best-effort by nature: this only arrives if the browser that owns the file says so, and a
+     * cleared cache or another device never will. Rows left open that way are retention's problem,
+     * not this method's.
+     *
+     * <p>Narrowed to the caller's own rows however senior they are, which is why it passes {@link
+     * #currentActor()} rather than the read scope's actor: file ids are minted by each client, so a
+     * leader reading with a null actor would match every unattributed row in the team.
+     *
+     * @return how many incidents were closed
+     */
+    public int forgetFiles(List<String> fileIds) {
+        ReadScope scope = readScope();
+        if (!scope.permitted()) {
+            return 0;
+        }
+        List<String> named = fileIds.stream().filter(id -> id != null && !id.isBlank()).toList();
+        return store.markFilesRemoved(scope.teamId(), currentActor(), named);
+    }
+
+    /**
+     * The events the caller may read, newest first: the team's for a leader, their own for everyone
+     * else. Empty when their team cannot be resolved.
+     */
     public List<FileRunEvent> list(FileRunEventStatus status, String kindId, int limit) {
-        TeamScope scope = scope();
+        ReadScope scope = readScope();
         if (!scope.permitted()) {
             return List.of();
         }
-        return store.list(scope.teamId(), status, kindId, limit);
+        return store.list(scope.teamId(), status, kindId, scope.actor(), limit);
     }
 
     /**
      * Dispatch an action against one event.
      *
      * @throws FailureActionException if the event is not the caller's, the action is unknown, the
-     *     event's kind does not declare the action, or the event is already closed
+     *     event's kind does not declare the action, the client is what runs the action, or the
+     *     event is already closed
      */
     public FileRunEvent dispatch(String eventId, String actionId, Map<String, String> inputs) {
-        TeamScope scope = scope();
-        if (!scope.permitted()) {
-            // Reported as "no such event", the same as an id from another team, so the response
-            // does
-            // not depend on whether the id happens to exist.
-            throw new FailureActionException(
-                    FailureActionException.Reason.EVENT_NOT_FOUND, "No such event: " + eventId);
-        }
-        FileRunEvent event =
-                store.find(eventId, scope.teamId())
-                        .orElseThrow(
-                                () ->
-                                        new FailureActionException(
-                                                FailureActionException.Reason.EVENT_NOT_FOUND,
-                                                "No such event: " + eventId));
+        // Whoever can see it can close it: a leader for the whole team, everyone else for the
+        // failures they caused. Someone who fixes their own problem should not have to ask a leader
+        // to clear the row.
+        //
+        // Audience decides what is offered, not what may be dispatched, so this scope is the whole
+        // gate. A server action aimed at OWNER alone would need its own guard here.
+        FileRunEvent event = requireVisible(eventId);
 
         FailureActionId resolvedId = parseActionId(actionId);
 
@@ -72,6 +147,12 @@ public class FileRunEventService {
                     FailureActionException.Reason.ACTION_NOT_DECLARED,
                     "Kind " + event.kind().getId() + " does not offer action " + resolvedId);
         }
+        // Without this a client could post VIEW_FILE and be answered as though something happened.
+        if (!resolvedId.runsOnServer()) {
+            throw new FailureActionException(
+                    FailureActionException.Reason.ACTION_NOT_DISPATCHABLE,
+                    "Action " + resolvedId + " is run by the client, not the server");
+        }
         if (event.status().terminal()) {
             throw new FailureActionException(
                     FailureActionException.Reason.ALREADY_CLOSED,
@@ -90,23 +171,91 @@ public class FileRunEventService {
         return action.execute(event, inputs == null ? Map.of() : inputs, currentActor());
     }
 
+    /** "No such event" rather than a refusal, so trying does not confirm a colleague's exists. */
+    private FileRunEvent requireVisible(String eventId) {
+        ReadScope scope = readScope();
+        if (!scope.permitted()) {
+            return notFound(eventId);
+        }
+        return store.find(eventId, scope.teamId())
+                .filter(found -> scope.actor() == null || scope.actor().equals(found.actor()))
+                .orElseGet(() -> notFound(eventId));
+    }
+
+    private FileRunEvent notFound(String eventId) {
+        throw new FailureActionException(
+                FailureActionException.Reason.EVENT_NOT_FOUND, "No such event: " + eventId);
+    }
+
+    public Ownership ownershipOf(FileRunEvent event) {
+        if (event.actor() == null) {
+            return Ownership.UNOWNED;
+        }
+        String caller = currentActor();
+        return event.actor().equals(caller) ? Ownership.MINE : Ownership.THEIRS;
+    }
+
     /**
-     * Which of an event's declared actions are usable right now. Decided per row, so the client
-     * never renders a button that would be refused.
+     * Offers resolved for one caller, so no client renders a button that would be refused. Outside
+     * their audience is dropped, not disabled: greyed out would read as a permission problem.
      */
     public List<AvailableAction> availableActions(FileRunEvent event) {
+        Ownership ownership = ownershipOf(event);
+        boolean reviewsTeam = reviewsTeam();
         boolean closed = event.status().terminal();
-        return event.kind().getActions().stream()
-                .map(
-                        action ->
-                                new AvailableAction(
-                                        action,
-                                        event.kind().labelKeyFor(action),
-                                        !closed,
-                                        closed ? "portal.failures.disabled.closed" : null))
+        // Login disabled is excluded: its rows are unowned only for want of users, and its one
+        // operator owns everything they can see.
+        boolean unattended = enforced() && ownership == Ownership.UNOWNED;
+        // Answered here, or the client reports "not on this device" about a document the row never
+        // identified in the first place.
+        boolean documentless = event.fileId() == null || event.fileId().isBlank();
+        return event.kind().getOfferedActions().stream()
+                .filter(offer -> offeredTo(offer.audience(), ownership, reviewsTeam))
+                .map(offer -> availability(offer, closed, unattended, documentless))
                 .toList();
     }
 
+    /** Enabled is derived from the reason, so a disabled button always has one to show. */
+    private static AvailableAction availability(
+            FailureKind.OfferedAction offer,
+            boolean closed,
+            boolean unattended,
+            boolean documentless) {
+        String reason = disabledReasonFor(offer.audience(), closed, unattended, documentless);
+        return new AvailableAction(offer.id(), offer.labelKey(), reason == null, reason);
+    }
+
+    /** Closed wins over everything, then the owner-only reasons, most specific first. */
+    private static String disabledReasonFor(
+            FailureAudience audience, boolean closed, boolean unattended, boolean documentless) {
+        if (closed) {
+            return CLOSED_REASON_KEY;
+        }
+        if (audience != FailureAudience.OWNER) {
+            return null;
+        }
+        if (unattended) {
+            return UNATTENDED_REASON_KEY;
+        }
+        return documentless ? DOCUMENTLESS_REASON_KEY : null;
+    }
+
+    /** An unattended incident has no owner, so its reviewer inherits the owner's actions. */
+    private static boolean offeredTo(
+            FailureAudience audience, Ownership ownership, boolean reviewsTeam) {
+        return switch (audience) {
+            case OWNER ->
+                    ownership == Ownership.MINE || (ownership == Ownership.UNOWNED && reviewsTeam);
+            case TEAM_REVIEWER -> reviewsTeam;
+            case ANYONE_WHO_SEES -> true;
+        };
+    }
+
+    /** Login disabled has no roles, so its one operator triages everything. */
+    private boolean reviewsTeam() {
+        return !enforced() || policyManagementAuthority.canEditPolicies();
+    }
+
     private FailureActionId parseActionId(String actionId) {
         for (FailureActionId candidate : FailureActionId.values()) {
             if (candidate.name().equals(actionId)) {
@@ -118,31 +267,55 @@ public class FileRunEventService {
     }
 
     /**
-     * Which rows the caller may touch, since a null team id means two different things. Login
-     * disabled is the self-hosted setup with no users or teams, where unteamed rows are everyone's,
-     * as {@code PolicyAccessGuard} also treats them. Login enabled with no resolvable team reads
-     * nothing, because unteamed rows there are shared by every team's ad-hoc runs.
+     * Which rows the caller may read. A leader reviews the whole team's, as before. Everyone else
+     * reads the failures they caused themselves: a member can already report one, so letting them
+     * see their own back is what makes telling them about it worth anything, and it exposes nothing
+     * of a colleague's.
+     *
+     * <p>A null team id means two different things. Login disabled is the self-hosted setup with no
+     * users or teams, where unteamed rows are everyone's, as {@code PolicyAccessGuard} also treats
+     * them. Login enabled with no resolvable team reads nothing, because unteamed rows there are
+     * shared by every team's ad-hoc runs.
      */
-    private TeamScope scope() {
+    private ReadScope readScope() {
         if (!enforced()) {
-            return TeamScope.of(null);
+            return ReadScope.wholeTeam(null);
         }
-        Long teamId = policyManagementAuthority.currentUserTeamId();
-        return teamId == null ? TeamScope.denied() : TeamScope.of(teamId);
+        Long teamId = currentTeamId();
+        if (teamId == null) {
+            return ReadScope.denied();
+        }
+        if (policyManagementAuthority.canEditPolicies()) {
+            return ReadScope.wholeTeam(teamId);
+        }
+        // Narrowing to "mine" needs a name to narrow by. Without one the filter would be dropped
+        // and a member would read the whole team, so refuse rather than widen.
+        String actor = currentActor();
+        return actor == null ? ReadScope.denied() : ReadScope.mine(teamId, actor);
     }
 
     /**
-     * The caller's readable team, or a refusal. {@code teamId} is only meaningful when permitted.
+     * What the caller may read. {@code actor} is the person to narrow to, or null for the whole
+     * team; both are only meaningful when permitted.
      */
-    private record TeamScope(boolean permitted, Long teamId) {
+    private record ReadScope(boolean permitted, Long teamId, String actor) {
 
-        static TeamScope of(Long teamId) {
-            return new TeamScope(true, teamId);
+        static ReadScope wholeTeam(Long teamId) {
+            return new ReadScope(true, teamId, null);
         }
 
-        static TeamScope denied() {
-            return new TeamScope(false, null);
+        static ReadScope mine(Long teamId, String actor) {
+            return new ReadScope(true, teamId, actor);
         }
+
+        static ReadScope denied() {
+            return new ReadScope(false, null, null);
+        }
+    }
+
+    /** The team a row belongs to, which is nobody's when there are no teams to belong to. */
+    private Long currentTeamId() {
+        return enforced() ? policyManagementAuthority.currentUserTeamId() : null;
     }
 
     private String currentActor() {
@@ -153,7 +326,6 @@ public class FileRunEventService {
         return applicationProperties.getSecurity().isEnableLogin();
     }
 
-    /** One action as offered for a specific event, with its resolved availability. */
     public record AvailableAction(
             FailureActionId id, String labelKey, boolean enabled, String disabledReasonKey) {}
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStatus.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStatus.java
index cae0529334..9bf0e0b607 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStatus.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStatus.java
@@ -11,7 +11,14 @@ public enum FileRunEventStatus {
     NEW(false),
     ACKNOWLEDGED(false),
     DISMISSED(true),
-    RESOLVED(true);
+    RESOLVED(true),
+
+    /**
+     * The document this incident was about was deleted from its owner's editor, so there is nothing
+     * left to act on. Distinct from {@code DISMISSED}, which is a reviewer's decision, and from
+     * {@code RESOLVED}, which reopens on recurrence: this one cannot recur, the file is gone.
+     */
+    FILE_REMOVED(true);
 
     /** The statuses a review queue shows by default: everything still needing a decision. */
     private static final List<FileRunEventStatus> OPEN =
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStore.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStore.java
index e1fc7cc453..2ed86e61b2 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStore.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventStore.java
@@ -98,6 +98,7 @@ public class FileRunEventStore {
         entity.setOrigin(command.origin());
         entity.setPolicyId(command.policyId());
         entity.setRunId(command.runId());
+        entity.setSourceId(command.sourceId());
         entity.setFileId(command.fileId());
         entity.setDetail(command.detail());
         entity.setDedupKey(dedupKey);
@@ -112,18 +113,27 @@ public class FileRunEventStore {
     }
 
     /**
-     * A page of incidents, newest first, optionally narrowed to one status and one kind. The kind
-     * filter lives in the query, before the limit: filtering a already-limited page could return
-     * nothing while matching rows exist.
+     * A page of incidents, newest first, optionally narrowed to one status and one kind.
+     *
+     * <p>With no status asked for this is the <em>open</em> queue rather than every row ever
+     * recorded: a dismissed failure has been dealt with, and leaving it in the default view means
+     * the list can never be cleared. Ask for a status to see closed rows.
+     *
+     * <p>Both filters live in the query, before the limit: filtering an already-limited page could
+     * return nothing while matching rows exist.
+     *
+     * <p>{@code actor} narrows to one person's own failures, or reads the whole team when null. Who
+     * gets which is the service's decision, not this method's.
      */
     @Transactional(readOnly = true)
     public List<FileRunEvent> list(
-            Long teamId, FileRunEventStatus status, String kindId, int limit) {
+            Long teamId, FileRunEventStatus status, String kindId, String actor, int limit) {
         Pageable page = PageRequest.of(0, Math.max(1, limit));
         List<FileRunEventEntity> rows =
                 status == null
-                        ? repository.findByTeam(teamId, kindId, page)
-                        : repository.findByTeamAndStatus(teamId, status, kindId, page);
+                        ? repository.findByTeamAndStatusIn(
+                                teamId, FileRunEventStatus.open(), kindId, actor, page)
+                        : repository.findByTeamAndStatus(teamId, status, kindId, actor, page);
         return rows.stream().map(FileRunEvent::of).toList();
     }
 
@@ -184,6 +194,22 @@ public class FileRunEventStore {
                 .orElseThrow(() -> refusalFor(id, teamId));
     }
 
+    /**
+     * Close this owner's open incidents about {@code fileIds}, because the documents are gone. The
+     * rows stay for audit; they just leave the queue. Only open rows move, so a reviewer's dismiss
+     * keeps its meaning and its actor.
+     *
+     * @return how many incidents were closed
+     */
+    @Transactional
+    public int markFilesRemoved(Long teamId, String actor, Collection<String> fileIds) {
+        if (fileIds.isEmpty()) {
+            return 0;
+        }
+        return repository.markFilesRemoved(
+                teamId, actor, fileIds, Instant.now(), FileRunEventStatus.open());
+    }
+
     /**
      * Why the guarded UPDATE refused, worked out only once it has. Missing and closed are told
      * apart after the fact rather than before, so the answer describes the row the UPDATE saw.
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventView.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventView.java
index cbaab4684d..b88ba3d48d 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventView.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/FileRunEventView.java
@@ -22,6 +22,7 @@ public record FileRunEventView(
         String detail,
         String policyId,
         String runId,
+        String sourceId,
         String fileId,
         String actor,
         int occurrences,
@@ -48,6 +49,7 @@ public record FileRunEventView(
                 event.detail(),
                 event.policyId(),
                 event.runId(),
+                event.sourceId(),
                 event.fileId(),
                 event.actor(),
                 event.occurrences(),
@@ -58,14 +60,24 @@ public record FileRunEventView(
                 event.lastSeenAt() == null ? 0L : event.lastSeenAt().toEpochMilli());
     }
 
-    /** One button, as offered for this specific row. */
+    /**
+     * {@code defaultLabel} and {@code execution} let a client render and route an action it was
+     * never built with. Declaration order is display order.
+     */
     public record ActionView(
-            String id, String labelKey, boolean enabled, String disabledReasonKey) {
+            String id,
+            String labelKey,
+            String defaultLabel,
+            FailureActionId.Execution execution,
+            boolean enabled,
+            String disabledReasonKey) {
 
-        static ActionView of(FileRunEventService.AvailableAction action) {
+        public static ActionView of(FileRunEventService.AvailableAction action) {
             return new ActionView(
                     action.id().name(),
                     action.labelKey(),
+                    action.id().getDefaultLabel(),
+                    action.id().getExecution(),
                     action.enabled(),
                     action.disabledReasonKey());
         }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/Ownership.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/Ownership.java
new file mode 100644
index 0000000000..65745a61b1
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/Ownership.java
@@ -0,0 +1,17 @@
+package stirling.software.proprietary.failure;
+
+/**
+ * Whose incident this is, from the reader's point of view. Derived on read, never persisted: one
+ * row is {@code MINE} to whoever hit it and {@code THEIRS} to the leader reviewing after them.
+ */
+public enum Ownership {
+    MINE,
+
+    /** A colleague's, visible because the caller reviews the team. */
+    THEIRS,
+
+    /**
+     * An unattended run: a folder, bucket or webhook is its only attribution, so there is no owner.
+     */
+    UNOWNED
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/PolicyFailureRecorder.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/PolicyFailureRecorder.java
index 7d4516939a..eaa8e0f5bd 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/PolicyFailureRecorder.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/PolicyFailureRecorder.java
@@ -30,11 +30,12 @@ public class PolicyFailureRecorder {
     public void recordRunFailure(
             String runId,
             String policyId,
-            String actor,
+            String sourceId,
             String fileIdentity,
+            String actor,
             String detail,
             Throwable cause) {
-        record(classifier.classify(cause), runId, policyId, actor, fileIdentity, detail);
+        record(classifier.classify(cause), runId, policyId, sourceId, fileIdentity, actor, detail);
     }
 
     /**
@@ -44,21 +45,35 @@ public class PolicyFailureRecorder {
      * pick the wrong one.
      */
     public void recordRunFailureAs(
-            FailureKind kind, String runId, String policyId, String actor, String detail) {
-        record(kind, runId, policyId, actor, null, detail);
+            FailureKind kind,
+            String runId,
+            String policyId,
+            String sourceId,
+            String actor,
+            String detail) {
+        // No document reference: a run rejected at admission never got as far as one.
+        record(kind, runId, policyId, sourceId, null, actor, detail);
     }
 
     private void record(
             FailureKind kind,
             String runId,
             String policyId,
-            String actor,
+            String sourceId,
             String fileIdentity,
+            String actor,
             String detail) {
         try {
             store.record(
                     RecordFailure.forRun(
-                            kind, teamFor(policyId), actor, policyId, runId, fileIdentity, detail));
+                            kind,
+                            teamFor(policyId),
+                            actor,
+                            policyId,
+                            runId,
+                            sourceId,
+                            fileIdentity,
+                            detail));
         } catch (RuntimeException e) {
             // Deliberately swallowed: see the class comment.
             log.warn("Could not record failure event for run {} (kind {})", runId, kind.getId(), e);
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/failure/RecordFailure.java b/app/proprietary/src/main/java/stirling/software/proprietary/failure/RecordFailure.java
index 1f45d52e17..8448f26fc3 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/failure/RecordFailure.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/failure/RecordFailure.java
@@ -38,17 +38,40 @@ public record RecordFailure(
         detail = truncate(detail);
     }
 
-    /** A processor-side failure with no file or source context, e.g. a run that failed outright. */
+    /**
+     * A processor-side run failure. {@code sourceId} says which folder, bucket or webhook fed the
+     * run, and is the only attribution an unattended failure has: there is no user to name. {@code
+     * fileId} is the source's opaque reference to the document, already hashed upstream.
+     */
     public static RecordFailure forRun(
             FailureKind kind,
             Long teamId,
             String actor,
             String policyId,
             String runId,
+            String sourceId,
             String fileId,
             String detail) {
         return new RecordFailure(
-                kind, FailureOrigin.POLICY, teamId, actor, policyId, runId, null, fileId, detail);
+                kind,
+                FailureOrigin.POLICY,
+                teamId,
+                actor,
+                policyId,
+                runId,
+                sourceId,
+                fileId,
+                detail);
+    }
+
+    /**
+     * A failure a user hit in their own editor. There is no policy, run or source: the user is the
+     * attribution, and {@code fileId} may be null when the report named no file.
+     */
+    public static RecordFailure forEditor(
+            FailureKind kind, Long teamId, String actor, String fileId, String detail) {
+        return new RecordFailure(
+                kind, FailureOrigin.TOOL, teamId, actor, null, null, null, fileId, detail);
     }
 
     /**
@@ -56,14 +79,21 @@ public record RecordFailure(
      * reference are the same incident; see {@link #dedupKey()}.
      */
     public String scopeRef() {
-        return switch (kind.getScope()) {
-            case FILE -> nullToEmpty(policyId) + "|" + fileOrRun();
-            case RUN -> nullToEmpty(runId);
-            case POLICY -> nullToEmpty(policyId);
-            case SOURCE -> nullToEmpty(sourceId);
-            // One server-wide condition is one incident regardless of which run tripped over it.
-            case SERVER -> "";
-        };
+        String about =
+                switch (kind.getScope()) {
+                    case FILE -> nullToEmpty(policyId) + "|" + fileOrRun();
+                    // An editor report has no run, so a RUN-scoped kind would otherwise put every
+                    // such failure in a team into one incident: fall back to the document.
+                    case RUN -> isBlank(runId) ? fileOrRun() : nullToEmpty(runId);
+                    case POLICY -> nullToEmpty(policyId);
+                    case SOURCE -> nullToEmpty(sourceId);
+                    // One server-wide condition is one incident regardless of which run hit it.
+                    case SERVER -> "";
+                };
+        // An editor failure belongs to the person who hit it, so two colleagues hitting the same
+        // thing are two incidents. Folding them would credit one actor for both and offer the
+        // wrong person the row. Unattended runs have no such owner and are unaffected.
+        return origin == FailureOrigin.TOOL ? nullToEmpty(actor) + "|" + about : about;
     }
 
     /**
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/Team.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/Team.java
index a54959b0ff..661e42c771 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/model/Team.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/Team.java
@@ -2,13 +2,19 @@ package stirling.software.proprietary.model;
 
 import java.io.Serializable;
 import java.util.HashSet;
+import java.util.Objects;
 import java.util.Set;
 
+import org.hibernate.proxy.HibernateProxy;
+
 import com.fasterxml.jackson.annotation.JsonIgnore;
 
 import jakarta.persistence.*;
 
-import lombok.*;
+import lombok.Getter;
+import lombok.NoArgsConstructor;
+import lombok.Setter;
+import lombok.ToString;
 
 import stirling.software.proprietary.security.model.User;
 
@@ -18,7 +24,6 @@ import stirling.software.proprietary.security.model.User;
 @NoArgsConstructor
 @Getter
 @Setter
-@EqualsAndHashCode(onlyExplicitlyIncluded = true)
 @ToString(onlyExplicitlyIncluded = true)
 public class Team implements Serializable {
 
@@ -47,4 +52,31 @@ public class Team implements Serializable {
         users.remove(user);
         user.setTeam(null);
     }
+
+    @Override
+    public final boolean equals(Object o) {
+        if (this == o) return true;
+        if (o == null) return false;
+        Class<?> oEffectiveClass =
+                o instanceof HibernateProxy
+                        ? ((HibernateProxy) o).getHibernateLazyInitializer().getPersistentClass()
+                        : o.getClass();
+        Class<?> thisEffectiveClass =
+                this instanceof HibernateProxy
+                        ? ((HibernateProxy) this).getHibernateLazyInitializer().getPersistentClass()
+                        : this.getClass();
+        if (thisEffectiveClass != oEffectiveClass) return false;
+        Team team = (Team) o;
+        return getId() != null && Objects.equals(getId(), team.getId());
+    }
+
+    @Override
+    public final int hashCode() {
+        return this instanceof HibernateProxy
+                ? ((HibernateProxy) this)
+                        .getHibernateLazyInitializer()
+                        .getPersistentClass()
+                        .hashCode()
+                : getClass().hashCode();
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/converters/PdfToPdfUaRequest.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/converters/PdfToPdfUaRequest.java
new file mode 100644
index 0000000000..8981398001
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/converters/PdfToPdfUaRequest.java
@@ -0,0 +1,73 @@
+package stirling.software.proprietary.model.api.converters;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+import stirling.software.common.model.api.PDFFile;
+
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class PdfToPdfUaRequest extends PDFFile {
+
+    @Schema(
+            description = "PDF/UA conformance level to target",
+            defaultValue = "ua1",
+            allowableValues = {"ua1", "ua2"})
+    private String profile;
+
+    @Schema(
+            description =
+                    "Document title, required by PDF/UA. Falls back to the first heading, then the"
+                            + " filename.")
+    private String title;
+
+    @Schema(
+            description =
+                    "Document language as a BCP-47 tag, for example en-GB. Applied only when the"
+                            + " document does not already declare one, unless overrideLanguage is"
+                            + " set.",
+            defaultValue = "en-GB")
+    private String language;
+
+    @Schema(
+            description =
+                    "Replace the language the document already declares. Off by default, so a"
+                            + " document is never relabelled into a language it is not written in.",
+            defaultValue = "false")
+    private Boolean overrideLanguage;
+
+    @Schema(
+            description =
+                    "What to do with an existing structure tree: keep it, rebuild it, or decide"
+                            + " automatically",
+            defaultValue = "auto",
+            allowableValues = {"auto", "keep", "rebuild"})
+    private String existingTags;
+
+    @Schema(
+            description =
+                    "How to treat images with no description. require-alt leaves them undescribed so"
+                            + " the report asks for input; mark-decorative treats every image as"
+                            + " decoration.",
+            defaultValue = "require-alt",
+            allowableValues = {"require-alt", "mark-decorative"})
+    private String figurePolicy;
+
+    @Schema(
+            description =
+                    "Embed fonts the document references but does not carry. Required for"
+                            + " conformance and needs Ghostscript.",
+            defaultValue = "true")
+    private Boolean embedFonts;
+
+    @Schema(
+            description =
+                    "Alternative descriptions for figures, as key=text pairs separated by newlines."
+                            + " Keys come from the accessibility-report endpoint's"
+                            + " figuresNeedingDescription list, for example \"0:12=Bar chart of"
+                            + " quarterly revenue\". Descriptions are never invented, so without"
+                            + " these an illustrated document cannot claim conformance.")
+    private String altText;
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityIssue.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityIssue.java
new file mode 100644
index 0000000000..0c2a86ad99
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityIssue.java
@@ -0,0 +1,38 @@
+package stirling.software.proprietary.model.api.ua;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import lombok.Data;
+
+/** One accessibility problem, grouped across all of its occurrences. */
+@Data
+@Schema(description = "A single accessibility issue found in a document")
+public class AccessibilityIssue {
+
+    @Schema(description = "ISO 14289 clause, e.g. 7.3")
+    private String clause;
+
+    @Schema(description = "Test number within the clause")
+    private String testNumber;
+
+    @Schema(description = "Plain-English description of the problem")
+    private String message;
+
+    @Schema(description = "The validator's own wording, for support and debugging")
+    private String technicalMessage;
+
+    @Schema(description = "error or warning")
+    private String severity = "error";
+
+    @Schema(description = "Standard the check came from, e.g. PDF/UA-1")
+    private String specification;
+
+    @Schema(description = "Where the problem was found, when the validator reports it")
+    private String location;
+
+    @Schema(description = "How many times this issue occurs")
+    private int occurrences;
+
+    @Schema(description = "True when the converter can fix this without human input")
+    private boolean autoFixable;
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityReport.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityReport.java
new file mode 100644
index 0000000000..bc810635d1
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityReport.java
@@ -0,0 +1,63 @@
+package stirling.software.proprietary.model.api.ua;
+
+import java.util.List;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import lombok.Data;
+
+/**
+ * A document's accessibility standing. The machine/human split is load-bearing: veraPDF covers only
+ * about half of the Matterhorn Protocol, so a clean automated pass is not "accessible".
+ */
+@Data
+@Schema(description = "Accessibility standing of a document")
+public class AccessibilityReport {
+
+    @Schema(description = "Profile the document was checked against, e.g. PDF/UA-1")
+    private String profile;
+
+    @Schema(description = "Whether the document has a structure tree at all")
+    private boolean tagged;
+
+    @Schema(description = "Whether the document declares PDF/UA conformance in its metadata")
+    private boolean declaresConformance;
+
+    @Schema(description = "Whether every automated check passed")
+    private boolean passesAutomatedChecks;
+
+    @Schema(description = "Automated checks that failed, grouped by rule")
+    private List<AccessibilityIssue> issues = List.of();
+
+    @Schema(description = "Things a person still has to verify; automation cannot decide these")
+    private List<String> humanChecks = List.of();
+
+    @Schema(description = "How many of the failing checks the converter can fix on its own")
+    private int automaticallyFixable;
+
+    @Schema(description = "How many need information from the user, such as alternative text")
+    private int needsInput;
+
+    @Schema(
+            description =
+                    "Figures that need an alternative description. Each carries the key to pass"
+                            + " back in the conversion request's altTextByFigure map, so a caller"
+                            + " can enumerate what is missing and then supply it.")
+    private List<FigureDescriptor> figuresNeedingDescription = List.of();
+
+    @Schema(description = "Document-level facts that drive most failures")
+    private Summary summary = new Summary();
+
+    @Data
+    @Schema(description = "Quick document-level facts")
+    public static class Summary {
+        private int pages;
+        private boolean hasTitle;
+        private boolean displaysDocTitle;
+        private boolean hasLanguage;
+        private boolean allFontsEmbedded;
+        private int unembeddedFonts;
+        private int figures;
+        private boolean encrypted;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityReportRequest.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityReportRequest.java
new file mode 100644
index 0000000000..178d2637b2
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/AccessibilityReportRequest.java
@@ -0,0 +1,19 @@
+package stirling.software.proprietary.model.api.ua;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+import lombok.Data;
+import lombok.EqualsAndHashCode;
+
+import stirling.software.common.model.api.PDFFile;
+
+@Data
+@EqualsAndHashCode(callSuper = true)
+public class AccessibilityReportRequest extends PDFFile {
+
+    @Schema(
+            description = "Profile to check against",
+            defaultValue = "ua1",
+            allowableValues = {"ua1", "ua2"})
+    private String profile;
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/FigureDescriptor.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/FigureDescriptor.java
new file mode 100644
index 0000000000..1c960d87e7
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/FigureDescriptor.java
@@ -0,0 +1,18 @@
+package stirling.software.proprietary.model.api.ua;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+/**
+ * One figure needing an alternative description, which is never invented. key is the
+ * altTextByFigure key "pageIndex:ordinal"; page is 1-based; kind is "figure" or "formula".
+ */
+@Schema(description = "A figure that needs an alternative description")
+public record FigureDescriptor(
+        String key,
+        int page,
+        String kind,
+        float x,
+        float y,
+        float width,
+        float height,
+        String existingAlt) {}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/PdfUaConversionOutcome.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/PdfUaConversionOutcome.java
new file mode 100644
index 0000000000..dcef97c916
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/PdfUaConversionOutcome.java
@@ -0,0 +1,26 @@
+package stirling.software.proprietary.model.api.ua;
+
+import java.util.List;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+/**
+ * Result of a PDF/UA conversion.
+ *
+ * @param declared whether a {@code pdfuaid} conformance claim was written into {@code pdfBytes}
+ */
+@Schema(description = "Result of converting a document to PDF/UA")
+public record PdfUaConversionOutcome(
+        byte[] pdfBytes,
+        boolean declared,
+        UaValidationResult validation,
+        TaggingSummary tagging,
+        List<String> warnings) {
+
+    @Schema(description = "What the tagging pass produced")
+    public record TaggingSummary(
+            boolean rebuiltStructure,
+            int taggedElements,
+            int artifacts,
+            int figuresNeedingAltText) {}
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/UaValidationResult.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/UaValidationResult.java
new file mode 100644
index 0000000000..5e494c35be
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/api/ua/UaValidationResult.java
@@ -0,0 +1,18 @@
+package stirling.software.proprietary.model.api.ua;
+
+import java.util.List;
+
+import io.swagger.v3.oas.annotations.media.Schema;
+
+/**
+ * Outcome of validating against one PDF/UA profile. compliant means every automated check passed,
+ * which is not the same as usable by assistive technology; totalFailures is ungrouped.
+ */
+@Schema(description = "Result of validating a document against a PDF/UA profile")
+public record UaValidationResult(
+        String profile, boolean compliant, List<AccessibilityIssue> issues, int totalFailures) {
+
+    public boolean hasIssues() {
+        return !issues.isEmpty();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/model/security/PersistentAuditEvent.java b/app/proprietary/src/main/java/stirling/software/proprietary/model/security/PersistentAuditEvent.java
index ccaf337c0b..aeb66b47a8 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/model/security/PersistentAuditEvent.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/model/security/PersistentAuditEvent.java
@@ -1,6 +1,9 @@
 package stirling.software.proprietary.model.security;
 
 import java.time.Instant;
+import java.util.Objects;
+
+import org.hibernate.proxy.HibernateProxy;
 
 import jakarta.persistence.*;
 
@@ -28,7 +31,9 @@ import lombok.*;
                     name = "idx_audit_source_timestamp_principal",
                     columnList = "source,timestamp,principal")
         })
-@Data
+@Getter
+@Setter
+@ToString(onlyExplicitlyIncluded = true)
 @Builder
 @NoArgsConstructor
 @AllArgsConstructor
@@ -36,14 +41,43 @@ public class PersistentAuditEvent {
 
     @Id
     @GeneratedValue(strategy = GenerationType.IDENTITY)
+    @ToString.Include
     private Long id;
 
-    private String principal;
-    private String type;
+    @ToString.Include private String principal;
+
+    @ToString.Include private String type;
     private String source;
 
     @Column(columnDefinition = "text")
     private String data; // JSON blob
 
-    private Instant timestamp;
+    @ToString.Include private Instant timestamp;
+
+    @Override
+    public final boolean equals(Object o) {
+        if (this == o) return true;
+        if (o == null) return false;
+        Class<?> oEffectiveClass =
+                o instanceof HibernateProxy
+                        ? ((HibernateProxy) o).getHibernateLazyInitializer().getPersistentClass()
+                        : o.getClass();
+        Class<?> thisEffectiveClass =
+                this instanceof HibernateProxy
+                        ? ((HibernateProxy) this).getHibernateLazyInitializer().getPersistentClass()
+                        : this.getClass();
+        if (thisEffectiveClass != oEffectiveClass) return false;
+        PersistentAuditEvent that = (PersistentAuditEvent) o;
+        return getId() != null && Objects.equals(getId(), that.getId());
+    }
+
+    @Override
+    public final int hashCode() {
+        return this instanceof HibernateProxy
+                ? ((HibernateProxy) this)
+                        .getHibernateLazyInitializer()
+                        .getPersistentClass()
+                        .hashCode()
+                : getClass().hashCode();
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationController.java b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationController.java
new file mode 100644
index 0000000000..f2bf36a8dc
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationController.java
@@ -0,0 +1,48 @@
+package stirling.software.proprietary.notification;
+
+import java.util.List;
+
+import org.springframework.web.bind.annotation.GetMapping;
+import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
+import org.springframework.web.bind.annotation.RestController;
+
+import io.swagger.v3.oas.annotations.Hidden;
+import io.swagger.v3.oas.annotations.Operation;
+import io.swagger.v3.oas.annotations.tags.Tag;
+
+import lombok.RequiredArgsConstructor;
+
+/**
+ * Open to any authenticated user, unlike the failure endpoints it draws on: each source scopes its
+ * own rows. Read-only, because every action a notification offers runs on the client's own device.
+ */
+@RestController
+@RequestMapping("/api/v1/notifications")
+@Hidden
+@RequiredArgsConstructor
+@Tag(name = "Notifications", description = "Things worth telling the caller about")
+public class NotificationController {
+
+    /** How many notifications one read returns when the caller does not say: one panelful. */
+    private static final int DEFAULT_LIMIT = 20;
+
+    /** The most one read may return however large a limit the caller asks for. */
+    private static final int MAX_LIMIT = 100;
+
+    private final NotificationService notifications;
+
+    @GetMapping
+    @Operation(
+            summary = "List the caller's notifications",
+            description =
+                    "Newest first. Derived from the sources that produce them, so there is nothing"
+                            + " to mark read here yet: the client tracks what it has shown.")
+    public NotificationsResponse list(@RequestParam(required = false) Integer limit) {
+        int capped = Math.min(limit == null ? DEFAULT_LIMIT : Math.max(1, limit), MAX_LIMIT);
+        return new NotificationsResponse(notifications.list(capped));
+    }
+
+    /** Wrapped so paging or a total can be added without breaking clients. */
+    public record NotificationsResponse(List<NotificationView> notifications) {}
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationService.java b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationService.java
new file mode 100644
index 0000000000..f7bf3b8530
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationService.java
@@ -0,0 +1,53 @@
+package stirling.software.proprietary.notification;
+
+import java.util.List;
+
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.proprietary.failure.FileRunEvent;
+import stirling.software.proprietary.failure.FileRunEventService;
+import stirling.software.proprietary.failure.FileRunEventView;
+
+/**
+ * Derived on read rather than stored: one source today, and a table would need a write path,
+ * retention and a per-user read model first. Each source scopes its own rows, so this cannot widen.
+ */
+@Service
+@RequiredArgsConstructor
+public class NotificationService {
+
+    private final FileRunEventService fileRunEvents;
+
+    /** Newest first, and only open failures: one already dealt with is not news. */
+    public List<NotificationView> list(int limit) {
+        return fileRunEvents.list(null, null, limit).stream().map(this::fromFailure).toList();
+    }
+
+    /** Prefixes the row id on the way out, so it is never sent bare. */
+    private NotificationView fromFailure(FileRunEvent event) {
+        return new NotificationView(
+                NotificationSource.FAILURE.qualify(event.id()),
+                NotificationSource.FAILURE,
+                event.kind().getId(),
+                event.origin(),
+                fileRunEvents.ownershipOf(event),
+                event.severity(),
+                event.status(),
+                event.kind().getTitleKey(),
+                event.kind().getDefaultTitle(),
+                event.detail(),
+                event.fileId(),
+                event.sourceId(),
+                event.policyId(),
+                event.occurrences(),
+                event.createdAt(),
+                event.lastSeenAt(),
+                // A disposition such as Dismiss belongs to the review surface, not the bell.
+                fileRunEvents.availableActions(event).stream()
+                        .filter(action -> !action.id().runsOnServer())
+                        .map(FileRunEventView.ActionView::of)
+                        .toList());
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationSource.java b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationSource.java
new file mode 100644
index 0000000000..007e51616f
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationSource.java
@@ -0,0 +1,21 @@
+package stirling.software.proprietary.notification;
+
+import java.util.Locale;
+
+/**
+ * Which subsystem produced a notification. Every id is prefixed with it, so a client never holds
+ * the producing row's own id and cannot reach that source's endpoints by accident.
+ */
+public enum NotificationSource {
+    FAILURE;
+
+    private static final char SEPARATOR = ':';
+
+    public String prefix() {
+        return name().toLowerCase(Locale.ROOT) + SEPARATOR;
+    }
+
+    public String qualify(String sourceRowId) {
+        return prefix() + sourceRowId;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationView.java b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationView.java
new file mode 100644
index 0000000000..be04153686
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/notification/NotificationView.java
@@ -0,0 +1,33 @@
+package stirling.software.proprietary.notification;
+
+import java.time.Instant;
+import java.util.List;
+
+import stirling.software.proprietary.failure.FailureOrigin;
+import stirling.software.proprietary.failure.FailureSeverity;
+import stirling.software.proprietary.failure.FileRunEventStatus;
+import stirling.software.proprietary.failure.FileRunEventView;
+import stirling.software.proprietary.failure.Ownership;
+
+/**
+ * A source's row flattened to what a bell renders. {@code fileId} is an opaque reference, never a
+ * name, and two id spaces share it: {@code sourceId} tells them apart.
+ */
+public record NotificationView(
+        String id,
+        NotificationSource source,
+        String kindId,
+        FailureOrigin origin,
+        Ownership ownership,
+        FailureSeverity severity,
+        FileRunEventStatus status,
+        String titleKey,
+        String defaultTitle,
+        String detail,
+        String fileId,
+        String sourceId,
+        String policyId,
+        int occurrences,
+        Instant createdAt,
+        Instant lastSeenAt,
+        List<FileRunEventView.ActionView> actions) {}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/ArtifactType.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/ArtifactType.java
new file mode 100644
index 0000000000..78df1fbc27
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/ArtifactType.java
@@ -0,0 +1,23 @@
+package stirling.software.proprietary.pdf.ua;
+
+/** Artifact subtypes (ISO 32000-1 14.8.2.2). Artifacts are excluded from the structure tree. */
+public enum ArtifactType {
+    /** Running heads, folios, page numbers. Required by PDF/UA-1 clause 7.8. */
+    PAGINATION("Pagination"),
+    /** Rules, boxes, and other layout ornamentation. */
+    LAYOUT("Layout"),
+    /** Cut marks and colour bars. */
+    PAGE("Page"),
+    /** Background graphics with no informational content. */
+    BACKGROUND("Background");
+
+    private final String subtype;
+
+    ArtifactType(String subtype) {
+        this.subtype = subtype;
+    }
+
+    public String subtype() {
+        return subtype;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/BBox.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/BBox.java
new file mode 100644
index 0000000000..f2fbf97438
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/BBox.java
@@ -0,0 +1,48 @@
+package stirling.software.proprietary.pdf.ua;
+
+/** An axis-aligned rectangle in PDF user space, with y increasing upwards. */
+public record BBox(float x0, float y0, float x1, float y1) {
+
+    public static final BBox EMPTY = new BBox(0, 0, 0, 0);
+
+    public static BBox of(float x, float y, float width, float height) {
+        return new BBox(x, y, x + width, y + height);
+    }
+
+    public float width() {
+        return x1 - x0;
+    }
+
+    public float height() {
+        return y1 - y0;
+    }
+
+    public float centreX() {
+        return (x0 + x1) / 2f;
+    }
+
+    public BBox union(BBox other) {
+        if (other == null || other.isEmpty()) {
+            return this;
+        }
+        if (isEmpty()) {
+            return other;
+        }
+        return new BBox(
+                Math.min(x0, other.x0),
+                Math.min(y0, other.y0),
+                Math.max(x1, other.x1),
+                Math.max(y1, other.y1));
+    }
+
+    public boolean isEmpty() {
+        return x1 <= x0 || y1 <= y0;
+    }
+
+    /** Horizontal overlap with another box as a fraction of the narrower box's width. */
+    public float horizontalOverlap(BBox other) {
+        float overlap = Math.min(x1, other.x1) - Math.max(x0, other.x0);
+        float narrower = Math.min(width(), other.width());
+        return narrower <= 0 ? 0 : Math.max(0, overlap) / narrower;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/DocumentStructure.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/DocumentStructure.java
new file mode 100644
index 0000000000..5922895453
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/DocumentStructure.java
@@ -0,0 +1,84 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.function.Consumer;
+
+import lombok.Getter;
+import lombok.Setter;
+
+/** The derived logical structure of a document, ready for serialisation into a structure tree. */
+@Getter
+@Setter
+public class DocumentStructure {
+
+    /** Top-level blocks in document reading order. */
+    private final List<StructBlock> blocks = new ArrayList<>();
+
+    /** Warnings raised during analysis, surfaced in the conversion report. */
+    private final List<String> warnings = new ArrayList<>();
+
+    private String title;
+    private String language;
+
+    /** True when real text was wrapped as artifacts, which blocks any conformance claim. */
+    private boolean textSuppressed;
+
+    /** Body text size used as the baseline for heading detection, in points. */
+    private float bodyFontSize;
+
+    public void add(StructBlock block) {
+        blocks.add(block);
+    }
+
+    public void warn(String message) {
+        if (!warnings.contains(message)) {
+            warnings.add(message);
+        }
+    }
+
+    public void visit(Consumer<StructBlock> visitor) {
+        blocks.forEach(block -> block.visit(visitor));
+    }
+
+    public int count(StructType type) {
+        int[] total = {0};
+        visit(
+                block -> {
+                    if (block.getType() == type) {
+                        total[0]++;
+                    }
+                });
+        return total[0];
+    }
+
+    public int artifactCount() {
+        int[] total = {0};
+        visit(
+                block -> {
+                    if (block.isArtifact()) {
+                        total[0]++;
+                    }
+                });
+        return total[0];
+    }
+
+    /** Figures with no alternative description, the most common PDF/UA failure. */
+    public List<StructBlock> figuresWithoutAlt() {
+        List<StructBlock> missing = new ArrayList<>();
+        visit(
+                block -> {
+                    if ((block.getType() == StructType.FIGURE
+                                    || block.getType() == StructType.FORMULA)
+                            && (block.getAlt() == null || block.getAlt().isBlank())
+                            && (block.getActualText() == null || block.getActualText().isBlank())) {
+                        missing.add(block);
+                    }
+                });
+        return missing;
+    }
+
+    public boolean isEmpty() {
+        return blocks.isEmpty();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/LayoutAnalyzer.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/LayoutAnalyzer.java
new file mode 100644
index 0000000000..11c510d6ea
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/LayoutAnalyzer.java
@@ -0,0 +1,831 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.ArrayList;
+import java.util.Collections;
+import java.util.Comparator;
+import java.util.HashMap;
+import java.util.HashSet;
+import java.util.IdentityHashMap;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+import java.util.regex.Pattern;
+import java.util.stream.Collectors;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * Derives a logical structure from extracted lines and graphics, reusing {@code HeadingDetector}'s
+ * heuristics. Degrades to paragraphs rather than guessing, since a wrong tag misleads readers.
+ */
+@Slf4j
+public class LayoutAnalyzer {
+
+    private static final Pattern BULLET = Pattern.compile("^[•‣◦⁃∙·▪●■o\\-\\*\\+]\\s+.*");
+    private static final Pattern ORDERED =
+            Pattern.compile("^(\\d{1,3}|[a-zA-Z]|[ivxlcIVXLC]{1,5})[\\.\\)]\\s+.*");
+    private static final Pattern PAGE_NUMBER =
+            Pattern.compile(
+                    "^(page\\s+)?\\d{1,4}(\\s*(of|/)\\s*\\d{1,4})?$", Pattern.CASE_INSENSITIVE);
+    private static final Pattern DIGITS = Pattern.compile("\\d+");
+
+    /** Fraction of page height treated as the running head / foot band. */
+    private static final float MARGIN_BAND = 0.10f;
+
+    /** A line must exceed the body size by this ratio before it can be a heading. */
+    private static final float HEADING_RATIO = 1.10f;
+
+    /** Sizes within this many points are treated as the same heading tier. */
+    private static final float TIER_TOLERANCE = 0.4f;
+
+    private static final int MAX_HEADING_WORDS = 12;
+
+    /** Word gap beyond this multiple of the font size separates table cells. */
+    private static final float CELL_GAP_RATIO = 1.2f;
+
+    /** Images smaller than this in either dimension are decoration, not content. */
+    private static final float MIN_FIGURE_SIZE = 12f;
+
+    /** A size used by more than this share of lines is body text, however large the median says. */
+    private static final float MAX_HEADING_LINE_SHARE = 0.2f;
+
+    /** Consecutive lines sharing a size are a text block; headings appear alone. */
+    private static final int MAX_HEADING_RUN = 3;
+
+    /** A vector thinner than this in either dimension is a rule or border, not a drawing. */
+    private static final float MIN_VECTOR_THICKNESS = 3f;
+
+    /** Vector clusters smaller than this are ornament; larger ones are probably a chart. */
+    private static final float MIN_VECTOR_FIGURE_SIZE = 40f;
+
+    /** A drawing is built from several strokes; one big rectangle is a panel, not a chart. */
+    private static final int MIN_VECTOR_FIGURE_OPS = 4;
+
+    /** More text than this inside the region means shading behind content, not a drawing. */
+    private static final int MAX_LINES_INSIDE_FIGURE = 2;
+
+    public DocumentStructure analyse(List<PageContent> pages) {
+        DocumentStructure structure = new DocumentStructure();
+        float bodySize = bodyFontSize(pages);
+        structure.setBodyFontSize(bodySize);
+        Map<Float, Integer> tiers = headingTiers(pages, bodySize);
+        Map<Integer, List<TextLineInfo>> artifactLines = repeatedMarginLines(pages, bodySize);
+
+        for (PageContent page : pages) {
+            analysePage(
+                    page,
+                    structure,
+                    bodySize,
+                    tiers,
+                    artifactLines.getOrDefault(page.pageIndex(), List.of()));
+        }
+
+        List<Integer> suppressedPages =
+                pages.stream()
+                        .filter(PageContent::linesDropped)
+                        .map(PageContent::pageIndex)
+                        .toList();
+        if (!suppressedPages.isEmpty()) {
+            structure.setTextSuppressed(true);
+            structure.warn(
+                    "Text on page(s) "
+                            + suppressedPages.stream()
+                                    .map(i -> String.valueOf(i + 1))
+                                    .collect(Collectors.joining(", "))
+                            + " could not be tagged reliably and was marked as artifacts. The"
+                            + " converter will not claim conformance while real text is hidden"
+                            + " from assistive technology.");
+        }
+
+        normaliseHeadingLevels(structure);
+        structure.setTitle(deriveTitle(structure));
+        return structure;
+    }
+
+    // --- Document-wide statistics -----------------------------------------
+
+    /** Character-weighted median line size, which is far more stable than a plain median. */
+    static float bodyFontSize(List<PageContent> pages) {
+        Map<Float, Integer> weights = new HashMap<>();
+        for (PageContent page : pages) {
+            for (TextLineInfo line : page.lines()) {
+                if (line.dominantFontSize() > 0 && !line.isBlank()) {
+                    weights.merge(line.dominantFontSize(), line.charCount(), Integer::sum);
+                }
+            }
+        }
+        if (weights.isEmpty()) {
+            return 0f;
+        }
+        int total = weights.values().stream().mapToInt(Integer::intValue).sum();
+        List<Map.Entry<Float, Integer>> sorted =
+                weights.entrySet().stream().sorted(Map.Entry.comparingByKey()).toList();
+        int seen = 0;
+        for (Map.Entry<Float, Integer> entry : sorted) {
+            seen += entry.getValue();
+            if (seen >= total / 2) {
+                return entry.getKey();
+            }
+        }
+        return sorted.get(sorted.size() - 1).getKey();
+    }
+
+    /** Maps each distinct heading size to a 1-based level, largest size first. */
+    static Map<Float, Integer> headingTiers(List<PageContent> pages, float bodySize) {
+        if (bodySize <= 0) {
+            return Map.of();
+        }
+        // A size used by a large share of the lines is body text, whatever the median says.
+        Map<Float, Integer> lineCounts = new HashMap<>();
+        int totalLines = 0;
+        for (PageContent page : pages) {
+            for (TextLineInfo line : page.lines()) {
+                if (!line.isBlank()) {
+                    lineCounts.merge(line.dominantFontSize(), 1, Integer::sum);
+                    totalLines++;
+                }
+            }
+        }
+        int headingLineCeiling = Math.max(1, (int) (totalLines * MAX_HEADING_LINE_SHARE));
+
+        // Headings do not cluster; a run of same-size lines is a text block, not headings.
+        Map<Float, Integer> longestRun = new HashMap<>();
+        for (PageContent page : pages) {
+            Float runSize = null;
+            int runLength = 0;
+            for (TextLineInfo line : page.lines()) {
+                if (line.isBlank()) {
+                    continue;
+                }
+                float size = line.dominantFontSize();
+                if (runSize != null && Float.compare(size, runSize) == 0) {
+                    runLength++;
+                } else {
+                    runSize = size;
+                    runLength = 1;
+                }
+                int seen = longestRun.getOrDefault(size, 0);
+                if (runLength > seen) {
+                    longestRun.put(size, runLength);
+                }
+            }
+        }
+
+        List<Float> sizes = new ArrayList<>();
+        for (PageContent page : pages) {
+            for (TextLineInfo line : page.lines()) {
+                if (isHeadingCandidate(line)
+                        && line.dominantFontSize() > bodySize * HEADING_RATIO
+                        && lineCounts.getOrDefault(line.dominantFontSize(), 0) <= headingLineCeiling
+                        && longestRun.getOrDefault(line.dominantFontSize(), 0) < MAX_HEADING_RUN) {
+                    sizes.add(line.dominantFontSize());
+                }
+            }
+        }
+        List<Float> distinct = sizes.stream().distinct().sorted(Comparator.reverseOrder()).toList();
+
+        Map<Float, Integer> tiers = new LinkedHashMap<>();
+        int level = 0;
+        Float previous = null;
+        for (Float size : distinct) {
+            if (previous == null || previous - size > TIER_TOLERANCE) {
+                level = Math.min(level + 1, 6);
+                previous = size;
+            }
+            tiers.put(size, level);
+        }
+        return tiers;
+    }
+
+    /**
+     * Claims a line's operators word run by word run; claiming the whole ordinal interval would
+     * swallow anything drawn between them, an image included.
+     */
+    private static void claimLine(StructBlock block, TextLineInfo line) {
+        // Sort by ordinal, not position: merging out-of-order runs silently drops them to
+        // /Artifact, hiding them from assistive technology while the file still validates.
+        List<WordInfo> words =
+                line.words().stream()
+                        .filter(w -> !w.isBlank())
+                        .sorted(Comparator.comparingInt(WordInfo::startOrdinal))
+                        .toList();
+        if (words.isEmpty()) {
+            block.addRange(line.startOrdinal(), line.endOrdinal());
+            return;
+        }
+        int start = words.get(0).startOrdinal();
+        int end = words.get(0).endOrdinal();
+        for (int i = 1; i < words.size(); i++) {
+            WordInfo word = words.get(i);
+            if (word.startOrdinal() <= end + 1) {
+                end = Math.max(end, word.endOrdinal());
+            } else {
+                block.addRange(start, end);
+                start = word.startOrdinal();
+                end = word.endOrdinal();
+            }
+        }
+        block.addRange(start, end);
+    }
+
+    static boolean isHeadingCandidate(TextLineInfo line) {
+        String text = line.text().strip();
+        if (text.isEmpty() || line.wordCount() > MAX_HEADING_WORDS) {
+            return false;
+        }
+        char last = text.charAt(text.length() - 1);
+        return last != '.' && last != '!' && last != '?';
+    }
+
+    /**
+     * Finds lines in the head/foot bands whose text repeats across pages. Digits are masked first
+     * so that "Page 4" and "Page 5" count as the same running foot.
+     */
+    static Map<Integer, List<TextLineInfo>> repeatedMarginLines(List<PageContent> pages) {
+        return repeatedMarginLines(pages, bodyFontSize(pages));
+    }
+
+    static Map<Integer, List<TextLineInfo>> repeatedMarginLines(
+            List<PageContent> pages, float bodySize) {
+        Map<Integer, List<TextLineInfo>> result = new HashMap<>();
+        if (pages.isEmpty()) {
+            return result;
+        }
+        Map<String, Integer> counts = new HashMap<>();
+        Map<Integer, List<TextLineInfo>> candidates = new HashMap<>();
+
+        for (PageContent page : pages) {
+            float height = page.mediaBox().height();
+            if (height <= 0) {
+                continue;
+            }
+            float topEdge = page.mediaBox().y1() - height * MARGIN_BAND;
+            float bottomEdge = page.mediaBox().y0() + height * MARGIN_BAND;
+            List<TextLineInfo> inBand = new ArrayList<>();
+            for (TextLineInfo line : page.lines()) {
+                if (line.bbox().y0() >= topEdge || line.bbox().y1() <= bottomEdge) {
+                    inBand.add(line);
+                    counts.merge(mask(line.text()), 1, Integer::sum);
+                }
+            }
+            candidates.put(page.pageIndex(), inBand);
+        }
+
+        int threshold = Math.max(2, pages.size() / 2);
+        for (Map.Entry<Integer, List<TextLineInfo>> entry : candidates.entrySet()) {
+            List<TextLineInfo> artifacts = new ArrayList<>();
+            for (TextLineInfo line : entry.getValue()) {
+                boolean repeats =
+                        pages.size() >= 3 && counts.getOrDefault(mask(line.text()), 0) >= threshold;
+                boolean pageNumber = PAGE_NUMBER.matcher(line.text().strip()).matches();
+                // Masked digits merge "Section 1" and "Section 2"; size is the tie-break that stops
+                // a real heading being demoted, as running heads are never larger than body text.
+                boolean looksLikeChrome =
+                        bodySize <= 0 || line.dominantFontSize() <= bodySize * 1.05f;
+                if (pageNumber || (repeats && looksLikeChrome)) {
+                    artifacts.add(line);
+                }
+            }
+            result.put(entry.getKey(), artifacts);
+        }
+        return result;
+    }
+
+    private static String mask(String text) {
+        return DIGITS.matcher(text.strip().toLowerCase()).replaceAll("#").replaceAll("\\s+", " ");
+    }
+
+    // --- Per-page analysis -------------------------------------------------
+
+    private void analysePage(
+            PageContent page,
+            DocumentStructure structure,
+            float bodySize,
+            Map<Float, Integer> tiers,
+            List<TextLineInfo> marginArtifacts) {
+
+        for (TextLineInfo line : marginArtifacts) {
+            StructBlock artifact = StructBlock.artifact(ArtifactType.PAGINATION, page.pageIndex());
+            claimLine(artifact, line);
+            artifact.setBbox(line.bbox());
+            artifact.setText(line.text());
+            structure.add(artifact);
+        }
+
+        // Identity set, not List.contains: TextLineInfo is a record whose equals walks its word
+        // list, so a linear scan per line is quadratic with a deep comparison inside it.
+        java.util.Set<TextLineInfo> marginSet = Collections.newSetFromMap(new IdentityHashMap<>());
+        marginSet.addAll(marginArtifacts);
+        List<TextLineInfo> body =
+                page.lines().stream()
+                        .filter(line -> !line.isBlank() && !marginSet.contains(line))
+                        .sorted(readingOrder(page))
+                        .toList();
+
+        List<StructBlock> blocks = new ArrayList<>();
+        int index = 0;
+        while (index < body.size()) {
+            TextLineInfo line = body.get(index);
+
+            int tableEnd = tableRunEnd(body, index);
+            if (tableEnd > index) {
+                StructBlock table = buildTable(body.subList(index, tableEnd + 1), page.pageIndex());
+                if (table != null) {
+                    blocks.add(table);
+                    index = tableEnd + 1;
+                    continue;
+                }
+            }
+
+            int listEnd = listRunEnd(body, index);
+            if (listEnd > index) {
+                blocks.add(buildList(body.subList(index, listEnd + 1), page.pageIndex()));
+                index = listEnd + 1;
+                continue;
+            }
+
+            Integer level = headingLevel(line, tiers);
+            if (level != null) {
+                StructBlock heading = new StructBlock(StructType.heading(level), page.pageIndex());
+                claimLine(heading, line);
+                heading.setBbox(line.bbox());
+                heading.setText(line.text());
+                blocks.add(heading);
+                index++;
+                continue;
+            }
+
+            int paragraphEnd = paragraphRunEnd(body, index, tiers, bodySize);
+            blocks.add(buildParagraph(body.subList(index, paragraphEnd + 1), page.pageIndex()));
+            index = paragraphEnd + 1;
+        }
+
+        // Form XObject text is attributed to its Do, so a Figure too would double-claim it.
+        Set<Integer> claimed = new HashSet<>();
+        for (StructBlock block : blocks) {
+            block.visit(
+                    node ->
+                            node.getRanges()
+                                    .forEach(
+                                            range -> {
+                                                for (int i = range.start(); i <= range.end(); i++) {
+                                                    claimed.add(i);
+                                                }
+                                            }));
+        }
+        blocks.addAll(buildGraphics(page, structure, claimed));
+        blocks.forEach(structure::add);
+    }
+
+    /**
+     * Orders lines top-to-bottom, splitting into columns first when the page is clearly
+     * multi-column. Without this, a two-column page reads as interleaved half-sentences.
+     */
+    private Comparator<TextLineInfo> readingOrder(PageContent page) {
+        Float gutter = detectGutter(page);
+        if (gutter == null) {
+            return Comparator.comparingDouble((TextLineInfo l) -> -l.bbox().y1())
+                    .thenComparingDouble(l -> l.bbox().x0());
+        }
+        return Comparator.comparingInt((TextLineInfo l) -> l.bbox().centreX() < gutter ? 0 : 1)
+                .thenComparingDouble(l -> -l.bbox().y1())
+                .thenComparingDouble(l -> l.bbox().x0());
+    }
+
+    /**
+     * Returns the x of a vertical gutter when the page is two-column, else null. A gutter must sit
+     * near the middle, be crossed by almost no line, and have substantial text on both sides.
+     */
+    static Float detectGutter(PageContent page) {
+        List<TextLineInfo> lines = page.lines().stream().filter(line -> !line.isBlank()).toList();
+        if (lines.size() < 8) {
+            return null;
+        }
+        float pageWidth = page.mediaBox().width();
+        if (pageWidth <= 0) {
+            return null;
+        }
+        float centre = page.mediaBox().x0() + pageWidth / 2f;
+        long crossing =
+                lines.stream()
+                        .filter(
+                                line ->
+                                        line.bbox().x0() < centre - 5
+                                                && line.bbox().x1() > centre + 5)
+                        .count();
+        if (crossing > lines.size() * 0.1) {
+            return null;
+        }
+        long left = lines.stream().filter(line -> line.bbox().centreX() < centre).count();
+        long right = lines.size() - left;
+        boolean balanced = left > lines.size() * 0.25 && right > lines.size() * 0.25;
+        return balanced ? centre : null;
+    }
+
+    private static Integer headingLevel(TextLineInfo line, Map<Float, Integer> tiers) {
+        if (!isHeadingCandidate(line)) {
+            return null;
+        }
+        return tiers.get(line.dominantFontSize());
+    }
+
+    // --- Paragraphs --------------------------------------------------------
+
+    private static int paragraphRunEnd(
+            List<TextLineInfo> lines, int start, Map<Float, Integer> tiers, float bodySize) {
+        int end = start;
+        for (int i = start + 1; i < lines.size(); i++) {
+            TextLineInfo previous = lines.get(i - 1);
+            TextLineInfo current = lines.get(i);
+            if (headingLevel(current, tiers) != null || startsListItem(current)) {
+                break;
+            }
+            float gap = previous.bbox().y0() - current.bbox().y1();
+            float leading = Math.max(bodySize, current.bbox().height());
+            boolean sameBlock = gap < leading * 0.8f && gap > -leading;
+            boolean sentenceEnded = endsSentence(previous.text());
+            if (!sameBlock || (sentenceEnded && gap > leading * 0.4f)) {
+                break;
+            }
+            end = i;
+        }
+        return end;
+    }
+
+    private static boolean endsSentence(String text) {
+        String stripped = text.strip();
+        if (stripped.isEmpty()) {
+            return false;
+        }
+        char last = stripped.charAt(stripped.length() - 1);
+        return last == '.' || last == '!' || last == '?';
+    }
+
+    private static StructBlock buildParagraph(List<TextLineInfo> lines, int pageIndex) {
+        StructBlock paragraph = new StructBlock(StructType.P, pageIndex);
+        BBox box = BBox.EMPTY;
+        StringBuilder text = new StringBuilder();
+        for (TextLineInfo line : lines) {
+            claimLine(paragraph, line);
+            box = box.union(line.bbox());
+            if (text.length() > 0) {
+                text.append(' ');
+            }
+            text.append(line.text().strip());
+        }
+        paragraph.setBbox(box);
+        paragraph.setText(text.toString());
+        return paragraph;
+    }
+
+    // --- Lists -------------------------------------------------------------
+
+    static boolean startsListItem(TextLineInfo line) {
+        String text = line.text().strip();
+        return BULLET.matcher(text).matches() || ORDERED.matcher(text).matches();
+    }
+
+    private static int listRunEnd(List<TextLineInfo> lines, int start) {
+        if (!startsListItem(lines.get(start))) {
+            return start;
+        }
+        float indent = lines.get(start).bbox().x0();
+        int end = start;
+        for (int i = start + 1; i < lines.size(); i++) {
+            TextLineInfo line = lines.get(i);
+            boolean isItem = startsListItem(line) && Math.abs(line.bbox().x0() - indent) < 6f;
+            boolean isContinuation = !startsListItem(line) && line.bbox().x0() > indent + 2f;
+            if (!isItem && !isContinuation) {
+                break;
+            }
+            end = i;
+        }
+        // A single marker is a stray character, not a list.
+        long items =
+                lines.subList(start, end + 1).stream()
+                        .filter(LayoutAnalyzer::startsListItem)
+                        .count();
+        return items >= 2 ? end : start;
+    }
+
+    private static StructBlock buildList(List<TextLineInfo> lines, int pageIndex) {
+        StructBlock list = new StructBlock(StructType.L, pageIndex);
+        list.setListNumbering(listNumbering(lines.get(0)));
+        BBox box = BBox.EMPTY;
+        StructBlock currentBody = null;
+
+        for (TextLineInfo line : lines) {
+            box = box.union(line.bbox());
+            if (startsListItem(line) || currentBody == null) {
+                StructBlock item = new StructBlock(StructType.LI, pageIndex);
+                StructBlock body = new StructBlock(StructType.LBODY, pageIndex);
+                claimLine(body, line);
+                body.setBbox(line.bbox());
+                body.setText(line.text());
+                item.addChild(body);
+                item.setBbox(line.bbox());
+                list.addChild(item);
+                currentBody = body;
+            } else {
+                claimLine(currentBody, line);
+                currentBody.setBbox(currentBody.getBbox().union(line.bbox()));
+                currentBody.setText(currentBody.getText() + " " + line.text().strip());
+            }
+        }
+        list.setBbox(box);
+        return list;
+    }
+
+    private static String listNumbering(TextLineInfo first) {
+        String text = first.text().strip();
+        if (BULLET.matcher(text).matches()) {
+            return "Disc";
+        }
+        char c = text.charAt(0);
+        if (Character.isDigit(c)) {
+            return "Decimal";
+        }
+        if ("ivxlc".indexOf(Character.toLowerCase(c)) >= 0 && text.length() > 1) {
+            return Character.isUpperCase(c) ? "UpperRoman" : "LowerRoman";
+        }
+        return Character.isUpperCase(c) ? "UpperAlpha" : "LowerAlpha";
+    }
+
+    // --- Tables ------------------------------------------------------------
+
+    /** Splits a line into cells wherever the gap between words exceeds the cell threshold. */
+    static List<List<WordInfo>> splitCells(TextLineInfo line) {
+        List<WordInfo> words = line.words().stream().filter(w -> !w.isBlank()).toList();
+        List<List<WordInfo>> cells = new ArrayList<>();
+        if (words.isEmpty()) {
+            return cells;
+        }
+        float threshold = Math.max(line.dominantFontSize(), 1f) * CELL_GAP_RATIO;
+        List<WordInfo> current = new ArrayList<>();
+        current.add(words.get(0));
+        for (int i = 1; i < words.size(); i++) {
+            float gap = words.get(i).bbox().x0() - words.get(i - 1).bbox().x1();
+            if (gap > threshold) {
+                cells.add(List.copyOf(current));
+                current = new ArrayList<>();
+            }
+            current.add(words.get(i));
+        }
+        cells.add(List.copyOf(current));
+        return cells;
+    }
+
+    /**
+     * Index of the last line of a table run starting at {@code start}, or {@code start} if none.
+     */
+    private static int tableRunEnd(List<TextLineInfo> lines, int start) {
+        int end = start;
+        for (int i = start; i < lines.size(); i++) {
+            if (splitCells(lines.get(i)).size() < 2) {
+                break;
+            }
+            end = i;
+        }
+        return end > start ? end : start;
+    }
+
+    /**
+     * Builds a Table when the run really looks tabular and each cell owns its own operators.
+     * Returns null when it does not, so the caller falls back to paragraphs.
+     */
+    private static StructBlock buildTable(List<TextLineInfo> rows, int pageIndex) {
+        if (rows.size() < 2) {
+            return null;
+        }
+        List<List<List<WordInfo>>> grid = new ArrayList<>();
+        for (TextLineInfo row : rows) {
+            if (!row.wordsAreSeparable()) {
+                log.debug("Table row shares operators between cells; falling back to paragraphs");
+                return null;
+            }
+            grid.add(splitCells(row));
+        }
+        int columns = grid.get(0).size();
+        long consistent = grid.stream().filter(row -> row.size() == columns).count();
+        if (columns < 2 || consistent < Math.max(2, grid.size() * 0.6)) {
+            return null;
+        }
+
+        boolean headerRow = looksLikeHeader(rows, grid);
+        StructBlock table = new StructBlock(StructType.TABLE, pageIndex);
+        BBox box = BBox.EMPTY;
+
+        for (int r = 0; r < grid.size(); r++) {
+            List<List<WordInfo>> cells = grid.get(r);
+            if (cells.size() != columns) {
+                continue;
+            }
+            StructBlock tr = new StructBlock(StructType.TR, pageIndex);
+            boolean isHeader = headerRow && r == 0;
+            for (List<WordInfo> cell : cells) {
+                StructBlock td =
+                        new StructBlock(isHeader ? StructType.TH : StructType.TD, pageIndex);
+                if (isHeader) {
+                    td.setScope("Column");
+                }
+                BBox cellBox = BBox.EMPTY;
+                StringBuilder text = new StringBuilder();
+                int from = cell.get(0).startOrdinal();
+                int to = cell.get(cell.size() - 1).endOrdinal();
+                for (WordInfo word : cell) {
+                    cellBox = cellBox.union(word.bbox());
+                    if (text.length() > 0) {
+                        text.append(' ');
+                    }
+                    text.append(word.text());
+                }
+                td.addRange(from, to);
+                td.setBbox(cellBox);
+                td.setText(text.toString());
+                tr.addChild(td);
+                box = box.union(cellBox);
+            }
+            tr.setBbox(box);
+            table.addChild(tr);
+        }
+        table.setBbox(box);
+        if (table.getChildren().size() < 2) {
+            return null;
+        }
+        // Clause 7.5 needs equal cell counts per row; a ragged table fails validation outright.
+        long distinctWidths =
+                table.getChildren().stream()
+                        .map(row -> row.getChildren().size())
+                        .distinct()
+                        .count();
+        if (distinctWidths != 1) {
+            log.debug("Discarding a table whose rows have different cell counts");
+            return null;
+        }
+        return table;
+    }
+
+    /** The first row is a header when it is bold, or when only later rows carry numbers. */
+    private static boolean looksLikeHeader(
+            List<TextLineInfo> rows, List<List<List<WordInfo>>> grid) {
+        if (rows.get(0).bold()) {
+            return true;
+        }
+        boolean firstHasDigits = DIGITS.matcher(rows.get(0).text()).find();
+        boolean laterHasDigits =
+                rows.subList(1, rows.size()).stream()
+                        .anyMatch(row -> DIGITS.matcher(row.text()).find());
+        return !firstHasDigits && laterHasDigits;
+    }
+
+    // --- Graphics ----------------------------------------------------------
+
+    private List<StructBlock> buildGraphics(
+            PageContent page, DocumentStructure structure, java.util.Set<Integer> claimed) {
+        List<StructBlock> blocks = new ArrayList<>();
+        boolean warnedForms = false;
+
+        // Vectors cluster: a chart is many strokes in one region, a rule is a single thin one.
+        java.util.Set<Integer> vectorFigureOrdinals = vectorFigureOrdinals(page, claimed);
+
+        for (MarkableOp op : page.ops()) {
+            if (op.kind() == MarkableOp.Kind.TEXT || claimed.contains(op.ordinal())) {
+                continue;
+            }
+            BBox box = op.bbox();
+
+            if (op.kind() == MarkableOp.Kind.VECTOR) {
+                StructBlock block;
+                if (vectorFigureOrdinals.contains(op.ordinal())) {
+                    block = new StructBlock(StructType.FIGURE, page.pageIndex());
+                } else {
+                    block = StructBlock.artifact(ArtifactType.LAYOUT, page.pageIndex());
+                }
+                block.addRange(op.ordinal(), op.ordinal());
+                block.setBbox(box);
+                blocks.add(block);
+                continue;
+            }
+
+            boolean decorative = box.width() < MIN_FIGURE_SIZE || box.height() < MIN_FIGURE_SIZE;
+            if (decorative) {
+                StructBlock artifact = StructBlock.artifact(ArtifactType.LAYOUT, page.pageIndex());
+                artifact.addRange(op.ordinal(), op.ordinal());
+                artifact.setBbox(box);
+                blocks.add(artifact);
+                continue;
+            }
+
+            if (op.kind() == MarkableOp.Kind.FORM && !warnedForms) {
+                structure.warn(
+                        "Content inside form XObjects was tagged as a single region because its"
+                                + " text is not separately addressable; review those areas.");
+                warnedForms = true;
+            }
+
+            StructBlock figure = new StructBlock(StructType.FIGURE, page.pageIndex());
+            figure.addRange(op.ordinal(), op.ordinal());
+            figure.setBbox(box);
+            blocks.add(figure);
+        }
+        return blocks;
+    }
+
+    /**
+     * Finds vector operators belonging to a substantial drawing rather than page furniture; thin
+     * paths are rules and table borders, and a short run is ornament.
+     */
+    private static Set<Integer> vectorFigureOrdinals(
+            PageContent page, java.util.Set<Integer> claimed) {
+        // A chart's plot area is mostly empty, while shading sits behind the text it decorates.
+        Set<Integer> result = new HashSet<>();
+        List<MarkableOp> run = new ArrayList<>();
+        BBox extent = BBox.EMPTY;
+
+        for (MarkableOp op : page.ops()) {
+            boolean substantial =
+                    op.kind() == MarkableOp.Kind.VECTOR
+                            && !claimed.contains(op.ordinal())
+                            && !op.bbox().isEmpty()
+                            && op.bbox().width() >= MIN_VECTOR_THICKNESS
+                            && op.bbox().height() >= MIN_VECTOR_THICKNESS;
+            if (substantial) {
+                run.add(op);
+                extent = extent.isEmpty() ? op.bbox() : extent.union(op.bbox());
+                continue;
+            }
+            flushVectorRun(run, extent, page.lines(), result);
+            run = new ArrayList<>();
+            extent = BBox.EMPTY;
+        }
+        flushVectorRun(run, extent, page.lines(), result);
+        return result;
+    }
+
+    private static void flushVectorRun(
+            List<MarkableOp> run,
+            BBox extent,
+            List<TextLineInfo> lines,
+            java.util.Set<Integer> result) {
+        if (run.size() < MIN_VECTOR_FIGURE_OPS
+                || extent.width() < MIN_VECTOR_FIGURE_SIZE
+                || extent.height() < MIN_VECTOR_FIGURE_SIZE) {
+            return;
+        }
+        if (overlappingLines(extent, lines) > MAX_LINES_INSIDE_FIGURE) {
+            return;
+        }
+        run.forEach(op -> result.add(op.ordinal()));
+    }
+
+    /** How many text lines sit within the region a vector cluster covers. */
+    private static int overlappingLines(BBox extent, List<TextLineInfo> lines) {
+        int count = 0;
+        for (TextLineInfo line : lines) {
+            BBox box = line.bbox();
+            boolean inside =
+                    box.x0() >= extent.x0() - 2
+                            && box.x1() <= extent.x1() + 2
+                            && box.y0() >= extent.y0() - 2
+                            && box.y1() <= extent.y1() + 2;
+            if (inside) {
+                count++;
+            }
+        }
+        return count;
+    }
+
+    // --- Post-processing ---------------------------------------------------
+
+    /**
+     * Rewrites heading levels so no level is skipped, which PDF/UA-1 clause 7.4 requires. A
+     * document that jumps H1 to H3 is remapped to H1, H2 while preserving relative depth.
+     */
+    static void normaliseHeadingLevels(DocumentStructure structure) {
+        List<StructBlock> headings = new ArrayList<>();
+        structure.visit(
+                block -> {
+                    if (block.getType().isHeading()) {
+                        headings.add(block);
+                    }
+                });
+        int previous = 0;
+        for (StructBlock heading : headings) {
+            int level = heading.getType().headingLevel();
+            int adjusted = level > previous + 1 ? previous + 1 : level;
+            heading.setType(StructType.heading(adjusted));
+            previous = adjusted;
+        }
+    }
+
+    /** Uses the first top-level heading as the title when the document has no metadata title. */
+    private static String deriveTitle(DocumentStructure structure) {
+        for (StructBlock block : structure.getBlocks()) {
+            if (block.getType().isHeading() && !block.getText().isBlank()) {
+                return block.getText().strip();
+            }
+        }
+        return null;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/MarkableOp.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/MarkableOp.java
new file mode 100644
index 0000000000..c48319260f
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/MarkableOp.java
@@ -0,0 +1,44 @@
+package stirling.software.proprietary.pdf.ua;
+
+/**
+ * One operator in a page content stream that may be wrapped in a marked-content sequence. The
+ * ordinal counts only markable operators, joining text extraction to token rewriting.
+ */
+public record MarkableOp(int ordinal, Kind kind, BBox bbox, String resourceName) {
+
+    public enum Kind {
+        /** Tj, TJ, ' or " */
+        TEXT,
+        /** Do referencing an image XObject */
+        IMAGE,
+        /** Do referencing a form XObject */
+        FORM,
+        /** BI ... ID ... EI */
+        INLINE_IMAGE,
+        /** A path-painting or shading operator: rules, borders, fills, logos */
+        VECTOR;
+
+        public boolean isGraphic() {
+            return this == IMAGE || this == INLINE_IMAGE;
+        }
+    }
+
+    /**
+     * Operator names counted as markable; both passes must agree on this set. Path painting is
+     * included because clause 7.1 needs visible rules and borders tagged or artifacted.
+     */
+    public static boolean isMarkableOperator(String name) {
+        return switch (name) {
+            case "Tj", "TJ", "'", "\"", "Do", "BI" -> true;
+            default -> isPathPainting(name);
+        };
+    }
+
+    /** Painting operators only: {@code n} ends a path without marking the page. */
+    public static boolean isPathPainting(String name) {
+        return switch (name) {
+            case "S", "s", "f", "F", "f*", "B", "B*", "b", "b*", "sh" -> true;
+            default -> false;
+        };
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/MarkedContentInjector.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/MarkedContentInjector.java
new file mode 100644
index 0000000000..c9d6330a60
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/MarkedContentInjector.java
@@ -0,0 +1,284 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.io.IOException;
+import java.io.OutputStream;
+import java.util.ArrayDeque;
+import java.util.ArrayList;
+import java.util.Deque;
+import java.util.HashMap;
+import java.util.List;
+import java.util.Map;
+
+import org.apache.pdfbox.contentstream.operator.Operator;
+import org.apache.pdfbox.cos.COSBase;
+import org.apache.pdfbox.cos.COSDictionary;
+import org.apache.pdfbox.cos.COSInteger;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdfparser.PDFStreamParser;
+import org.apache.pdfbox.pdfwriter.ContentStreamWriter;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDStream;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * Rewrites a page stream so every markable operator sits inside a marked-content sequence: claimed
+ * content gets an MCID, everything else /Artifact, satisfying PDF/UA-1 clause 7.1 by construction.
+ */
+@Slf4j
+public class MarkedContentInjector {
+
+    private static final COSName ARTIFACT = COSName.getPDFName("Artifact");
+    private static final COSName MCID = COSName.getPDFName("MCID");
+    private static final COSName ACTUAL_TEXT = COSName.getPDFName("ActualText");
+    private static final COSName ALT = COSName.getPDFName("Alt");
+
+    /** Operators that force an open sequence to close so nesting stays legal. */
+    private static boolean isBoundary(String name) {
+        return "BT".equals(name) || "ET".equals(name) || "q".equals(name) || "Q".equals(name);
+    }
+
+    private static boolean isMarkedContentOperator(String name) {
+        return "BDC".equals(name) || "BMC".equals(name) || "EMC".equals(name);
+    }
+
+    /**
+     * Path-construction operators; ISO 32000-1 forbids marked content inside a path object, so a
+     * sequence wrapping a fill or stroke must open before the path starts.
+     */
+    private static boolean isPathConstruction(String name) {
+        return switch (name) {
+            case "m", "l", "c", "v", "y", "h", "re" -> true;
+            default -> false;
+        };
+    }
+
+    private static boolean opensMarkedContent(String name) {
+        return "BDC".equals(name) || "BMC".equals(name);
+    }
+
+    /**
+     * True for an optional-content sequence; stripping an {@code /OC} wrapper would make hidden
+     * layers such as watermarks or redaction overlays visible.
+     */
+    private static boolean isOptionalContent(String name, List<COSBase> operands) {
+        return opensMarkedContent(name)
+                && !operands.isEmpty()
+                && operands.get(0) instanceof COSName tag
+                && "OC".equals(tag.getName());
+    }
+
+    /**
+     * True when a sequence supplies replacement text for its glyphs; dropping it leaves a screen
+     * reader with the font's own mapping, which for a ligature says nothing useful.
+     */
+    private static boolean carriesReplacementText(String name, List<COSBase> operands) {
+        if (!opensMarkedContent(name)) {
+            return false;
+        }
+        for (COSBase operand : operands) {
+            if (operand instanceof COSDictionary properties
+                    && (properties.containsKey(ACTUAL_TEXT)
+                            || properties.containsKey(ALT)
+                            || properties.containsKey(COSName.E))) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    /** The source's own ids mean nothing once the tree is rebuilt, so they are dropped. */
+    private static void stripStaleMcid(List<COSBase> operands) {
+        for (COSBase operand : operands) {
+            if (operand instanceof COSDictionary properties) {
+                properties.removeItem(MCID);
+            }
+        }
+    }
+
+    /** Wraps every markable operator on the page; returns the next unused marked content id. */
+    public int inject(
+            PDDocument document,
+            PDPage page,
+            List<StructBlock> blocks,
+            int nextMcid,
+            boolean stripExisting)
+            throws IOException {
+
+        Map<Integer, StructBlock> owners = ownersByOrdinal(blocks);
+        List<Object> tokens = parse(page);
+        List<Object> output = new ArrayList<>(tokens.size() + owners.size() * 4);
+
+        List<COSBase> operands = new ArrayList<>();
+        // Tracks, for each surviving source sequence, whether its closer should be kept.
+        Deque<Boolean> keptSequences = new ArrayDeque<>();
+        StructBlock openBlock = null;
+        boolean open = false;
+        int ordinal = -1;
+        int mcid = nextMcid;
+        int pathStart = -1;
+
+        for (Object token : tokens) {
+            if (!(token instanceof Operator operator)) {
+                operands.add((COSBase) token);
+                continue;
+            }
+            String name = operator.getName();
+
+            if (stripExisting && isMarkedContentOperator(name)) {
+                boolean keep;
+                if (opensMarkedContent(name)) {
+                    keep =
+                            isOptionalContent(name, operands)
+                                    || carriesReplacementText(name, operands);
+                    if (keep) {
+                        stripStaleMcid(operands);
+                    }
+                    keptSequences.push(keep);
+                } else {
+                    // A closer is kept exactly when its matching opener was.
+                    keep = !keptSequences.isEmpty() && keptSequences.pop();
+                }
+                if (!keep) {
+                    operands.clear();
+                    continue;
+                }
+                // Close our own sequence first so the two never interleave illegally.
+                if (open) {
+                    output.add(Operator.getOperator("EMC"));
+                    open = false;
+                    openBlock = null;
+                }
+                output.addAll(operands);
+                output.add(operator);
+                operands.clear();
+                continue;
+            }
+
+            if (isBoundary(name) && open) {
+                output.add(Operator.getOperator("EMC"));
+                open = false;
+                openBlock = null;
+            }
+
+            // Remember where the current path object began so a sequence wrapping its painting
+            // operator can be opened before it rather than inside it.
+            if (isPathConstruction(name)) {
+                if (pathStart < 0) {
+                    pathStart = output.size();
+                }
+            } else if (!MarkableOp.isPathPainting(name) && !"n".equals(name)) {
+                pathStart = -1;
+            }
+
+            if (MarkableOp.isMarkableOperator(name)) {
+                ordinal++;
+                StructBlock owner = owners.get(ordinal);
+                if (!open || owner != openBlock) {
+                    boolean insidePath = MarkableOp.isPathPainting(name) && pathStart >= 0;
+                    if (open) {
+                        // Close before the path began, so the EMC also stays outside the path.
+                        output.add(
+                                insidePath ? pathStart : output.size(),
+                                Operator.getOperator("EMC"));
+                        if (insidePath) {
+                            pathStart++;
+                        }
+                    }
+                    int at = insidePath ? pathStart : output.size();
+                    mcid = openSequenceAt(output, at, owner, mcid);
+                    open = true;
+                    openBlock = owner;
+                }
+            }
+
+            output.addAll(operands);
+            output.add(operator);
+            operands.clear();
+
+            if (MarkableOp.isPathPainting(name) || "n".equals(name)) {
+                pathStart = -1;
+            }
+        }
+
+        if (open) {
+            output.add(Operator.getOperator("EMC"));
+        }
+
+        write(document, page, output);
+        return mcid;
+    }
+
+    /** Emits the opening BDC/BMC at a given position and records the id on the owning block. */
+    private int openSequenceAt(List<Object> output, int at, StructBlock owner, int mcid) {
+        List<Object> opening = new ArrayList<>(3);
+        if (owner == null) {
+            opening.add(ARTIFACT);
+            opening.add(Operator.getOperator("BMC"));
+        } else if (owner.isArtifact()) {
+            COSDictionary properties = new COSDictionary();
+            if (owner.getArtifactType() != null) {
+                properties.setName(COSName.TYPE, owner.getArtifactType().subtype());
+            }
+            opening.add(ARTIFACT);
+            opening.add(properties);
+            opening.add(Operator.getOperator("BDC"));
+        } else {
+            COSDictionary properties = new COSDictionary();
+            properties.setItem(MCID, COSInteger.get(mcid));
+            opening.add(COSName.getPDFName(owner.getType().tag()));
+            opening.add(properties);
+            opening.add(Operator.getOperator("BDC"));
+            owner.getMcids().add(mcid);
+            mcid++;
+        }
+        output.addAll(at, opening);
+        return mcid;
+    }
+
+    /**
+     * Maps each claimed ordinal to its block. Overlapping claims are dropped rather than merged:
+     * two structure elements sharing content would make the reading order ambiguous.
+     */
+    static Map<Integer, StructBlock> ownersByOrdinal(List<StructBlock> blocks) {
+        Map<Integer, StructBlock> owners = new HashMap<>();
+        for (StructBlock block : blocks) {
+            block.visit(
+                    node -> {
+                        for (StructBlock.OrdinalRange range : node.getRanges()) {
+                            for (int i = range.start(); i <= range.end(); i++) {
+                                StructBlock existing = owners.putIfAbsent(i, node);
+                                if (existing != null && existing != node) {
+                                    log.debug(
+                                            "Ordinal {} claimed by both {} and {}; keeping the first",
+                                            i,
+                                            existing,
+                                            node);
+                                }
+                            }
+                        }
+                    });
+        }
+        return owners;
+    }
+
+    private static List<Object> parse(PDPage page) throws IOException {
+        PDFStreamParser parser = new PDFStreamParser(page);
+        List<Object> tokens = new ArrayList<>();
+        Object token;
+        while ((token = parser.parseNextToken()) != null) {
+            tokens.add(token);
+        }
+        return tokens;
+    }
+
+    private static void write(PDDocument document, PDPage page, List<Object> tokens)
+            throws IOException {
+        PDStream stream = new PDStream(document);
+        try (OutputStream out = stream.createOutputStream(COSName.FLATE_DECODE)) {
+            new ContentStreamWriter(out).writeTokens(tokens);
+        }
+        page.setContents(stream);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PageContent.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PageContent.java
new file mode 100644
index 0000000000..6c74212621
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PageContent.java
@@ -0,0 +1,33 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.List;
+
+/**
+ * Everything the layout analyser needs about one page. carriesTextSemantics: existing marked
+ * content has ActualText/Alt/expansion a rebuild would discard. linesDropped: text became
+ * artifacts.
+ */
+public record PageContent(
+        int pageIndex,
+        List<TextLineInfo> lines,
+        List<MarkableOp> ops,
+        int markableCount,
+        boolean preExistingMarkedContent,
+        boolean carriesTextSemantics,
+        boolean linesDropped,
+        BBox mediaBox) {
+
+    public boolean hasText() {
+        return lines.stream().anyMatch(line -> !line.isBlank());
+    }
+
+    /** Markable operators that draw graphics rather than text. */
+    public List<MarkableOp> graphics() {
+        return ops.stream().filter(op -> op.kind().isGraphic()).toList();
+    }
+
+    /** Form XObject invocations, which are tagged as a unit because their text is opaque here. */
+    public List<MarkableOp> forms() {
+        return ops.stream().filter(op -> op.kind() == MarkableOp.Kind.FORM).toList();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaIdentificationSchema.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaIdentificationSchema.java
new file mode 100644
index 0000000000..d37c2569c9
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaIdentificationSchema.java
@@ -0,0 +1,47 @@
+package stirling.software.proprietary.pdf.ua;
+
+import org.apache.xmpbox.XMPMetadata;
+import org.apache.xmpbox.schema.XMPSchema;
+import org.apache.xmpbox.type.IntegerType;
+import org.apache.xmpbox.type.StructuredType;
+
+/**
+ * The {@code pdfuaid} XMP conformance schema, which XMPBox does not ship. Only write it once
+ * validation has passed - it is a compliance claim.
+ */
+@StructuredType(
+        preferedPrefix = PdfUaIdentificationSchema.PREFERRED_PREFIX,
+        namespace = PdfUaIdentificationSchema.NAMESPACE)
+public class PdfUaIdentificationSchema extends XMPSchema {
+
+    public static final String PREFERRED_PREFIX = "pdfuaid";
+    public static final String NAMESPACE = "http://www.aiim.org/pdfua/ns/id/";
+
+    public static final String PART = "part";
+    public static final String REV = "rev";
+
+    public PdfUaIdentificationSchema(XMPMetadata metadata) {
+        super(metadata);
+    }
+
+    public PdfUaIdentificationSchema(XMPMetadata metadata, String prefix) {
+        super(metadata, prefix);
+    }
+
+    /** Sets {@code pdfuaid:part}, the conformance level (1 or 2). */
+    public void setPart(int part) {
+        addProperty(new IntegerType(getMetadata(), getNamespace(), getPrefix(), PART, part));
+    }
+
+    /** Sets {@code pdfuaid:rev}, the four-digit revision year used by PDF/UA-2. */
+    public void setRevision(int year) {
+        addProperty(new IntegerType(getMetadata(), getNamespace(), getPrefix(), REV, year));
+    }
+
+    public Integer getPart() {
+        if (getProperty(PART) instanceof IntegerType part) {
+            return part.getValue();
+        }
+        return null;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaMetadataWriter.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaMetadataWriter.java
new file mode 100644
index 0000000000..7f58654c87
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaMetadataWriter.java
@@ -0,0 +1,224 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDDocumentCatalog;
+import org.apache.pdfbox.pdmodel.PDDocumentInformation;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDMetadata;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDField;
+import org.apache.pdfbox.pdmodel.interactive.viewerpreferences.PDViewerPreferences;
+import org.apache.xmpbox.XMPMetadata;
+import org.apache.xmpbox.schema.DublinCoreSchema;
+import org.apache.xmpbox.schema.XMPSchema;
+import org.apache.xmpbox.xml.DomXmpParser;
+import org.apache.xmpbox.xml.XmpSerializer;
+
+import lombok.extern.slf4j.Slf4j;
+
+/** Applies the document-level PDF/UA requirements: title, language, tab order, declaration. */
+@Slf4j
+public class PdfUaMetadataWriter {
+
+    private static final COSName TABS = COSName.getPDFName("Tabs");
+    private static final COSName SUSPECTS = COSName.getPDFName("Suspects");
+
+    /**
+     * Applies everything except the conformance declaration. Clause 7.1 requires a title, so a
+     * blank one falls back to the existing metadata title.
+     */
+    public List<String> applyDocumentRequirements(
+            PDDocument document, String title, String language, PdfUaProfile profile)
+            throws IOException {
+        return applyDocumentRequirements(document, title, language, profile, false);
+    }
+
+    public List<String> applyDocumentRequirements(
+            PDDocument document,
+            String title,
+            String language,
+            PdfUaProfile profile,
+            boolean preserveVersion)
+            throws IOException {
+
+        List<String> warnings = new ArrayList<>();
+        PDDocumentCatalog catalog = document.getDocumentCatalog();
+
+        if (language != null && !language.isBlank()) {
+            catalog.setLanguage(language);
+        }
+
+        String effectiveTitle = resolveTitle(document, title);
+        if (effectiveTitle != null) {
+            PDDocumentInformation info = document.getDocumentInformation();
+            info.setTitle(effectiveTitle);
+            document.setDocumentInformation(info);
+        }
+
+        // Without this a viewer shows the filename instead of the title, which defeats the point.
+        PDViewerPreferences preferences = catalog.getViewerPreferences();
+        if (preferences == null) {
+            preferences = new PDViewerPreferences(catalog.getCOSObject());
+        }
+        preferences.setDisplayDocTitle(true);
+        catalog.setViewerPreferences(preferences);
+
+        // Clause 7.18.1: every page needs an explicit tab order.
+        for (PDPage page : document.getPages()) {
+            page.getCOSObject().setName(TABS, "S");
+        }
+
+        // A structure tree flagged as suspect is not conforming.
+        if (catalog.getMarkInfo() != null) {
+            catalog.getMarkInfo().getCOSObject().removeItem(SUSPECTS);
+        }
+
+        if (!preserveVersion && document.getVersion() < profile.pdfVersion()) {
+            document.setVersion(profile.pdfVersion());
+        }
+
+        warnings.addAll(describeFormFields(document));
+        writeXmp(document, effectiveTitle, language, null);
+        return warnings;
+    }
+
+    /**
+     * Gives every form field the {@code /TU} description clause 7.18.1 requires, reusing its
+     * authored partial name. Unnamed fields are reported, never given a useless placeholder.
+     */
+    private static List<String> describeFormFields(PDDocument document) {
+        List<String> warnings = new ArrayList<>();
+        PDAcroForm form = document.getDocumentCatalog().getAcroForm();
+        if (form == null) {
+            return warnings;
+        }
+        int unnamed = 0;
+        for (PDField field : form.getFieldTree()) {
+            String existing = field.getAlternateFieldName();
+            if (existing != null && !existing.isBlank()) {
+                continue;
+            }
+            String partialName = field.getPartialName();
+            if (partialName == null || partialName.isBlank()) {
+                unnamed++;
+                continue;
+            }
+            field.setAlternateFieldName(partialName);
+        }
+        if (unnamed > 0) {
+            warnings.add(
+                    unnamed
+                            + " form field(s) have neither a description nor a name, so no tooltip"
+                            + " could be derived. Add one for each before claiming conformance.");
+        }
+        return warnings;
+    }
+
+    /**
+     * Strips the {@code pdfuaid} declaration when validation fails after it was written, so the
+     * returned file does not assert conformance it lacks.
+     */
+    public void removeConformanceDeclaration(PDDocument document) throws IOException {
+        PDDocumentCatalog catalog = document.getDocumentCatalog();
+        XMPMetadata metadata = loadOrCreate(catalog);
+        XMPSchema identification = metadata.getSchema(PdfUaIdentificationSchema.NAMESPACE);
+        if (identification == null) {
+            return;
+        }
+        metadata.removeSchema(identification);
+        serialiseInto(document, metadata);
+    }
+
+    /** Writes the {@code pdfuaid:part} declaration. Only call this after validation has passed. */
+    public void declareConformance(PDDocument document, PdfUaProfile profile) throws IOException {
+        writeXmp(document, resolveTitle(document, null), documentLanguage(document), profile);
+    }
+
+    private String resolveTitle(PDDocument document, String preferred) {
+        if (preferred != null && !preferred.isBlank()) {
+            return preferred.strip();
+        }
+        String existing = document.getDocumentInformation().getTitle();
+        return existing != null && !existing.isBlank() ? existing.strip() : null;
+    }
+
+    private static String documentLanguage(PDDocument document) {
+        return document.getDocumentCatalog().getLanguage();
+    }
+
+    /**
+     * Rewrites the XMP packet, preserving what was there. A malformed packet is replaced, since an
+     * unparseable one fails validation on its own.
+     */
+    private void writeXmp(PDDocument document, String title, String language, PdfUaProfile profile)
+            throws IOException {
+
+        PDDocumentCatalog catalog = document.getDocumentCatalog();
+        XMPMetadata metadata = loadOrCreate(catalog);
+
+        if (title != null) {
+            DublinCoreSchema dublinCore = metadata.getDublinCoreSchema();
+            if (dublinCore == null) {
+                dublinCore = metadata.createAndAddDublinCoreSchema();
+            }
+            dublinCore.setTitle(title);
+            if (language != null
+                    && !language.isBlank()
+                    && (dublinCore.getLanguages() == null
+                            || !dublinCore.getLanguages().contains(language))) {
+                dublinCore.addLanguage(language);
+            }
+        }
+
+        if (profile != null) {
+            // Re-converting an already-declared file must not leave two pdfuaid schemas.
+            XMPSchema stale = metadata.getSchema(PdfUaIdentificationSchema.NAMESPACE);
+            if (stale != null) {
+                metadata.removeSchema(stale);
+            }
+            PdfUaIdentificationSchema identification = new PdfUaIdentificationSchema(metadata);
+            identification.setPart(profile.part());
+            if (profile.revision() > 0) {
+                identification.setRevision(profile.revision());
+            }
+            metadata.addSchema(identification);
+        }
+
+        serialiseInto(document, metadata);
+    }
+
+    private static void serialiseInto(PDDocument document, XMPMetadata metadata)
+            throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        try {
+            new XmpSerializer().serialize(metadata, out, true);
+        } catch (javax.xml.transform.TransformerException e) {
+            throw new IOException("Could not serialise XMP metadata", e);
+        }
+        PDMetadata pdMetadata = new PDMetadata(document);
+        pdMetadata.importXMPMetadata(out.toByteArray());
+        document.getDocumentCatalog().setMetadata(pdMetadata);
+    }
+
+    private XMPMetadata loadOrCreate(PDDocumentCatalog catalog) {
+        PDMetadata existing = catalog.getMetadata();
+        if (existing != null) {
+            try {
+                DomXmpParser parser = new DomXmpParser();
+                // Strict parsing rejects pdfuaid, silently discarding a packet we just wrote.
+                parser.setStrictParsing(false);
+                return parser.parse(new ByteArrayInputStream(existing.toByteArray()));
+            } catch (Exception e) {
+                log.debug("Replacing unparseable XMP packet: {}", e.getMessage());
+            }
+        }
+        return XMPMetadata.createXMPMetadata();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaProfile.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaProfile.java
new file mode 100644
index 0000000000..9523f5c790
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaProfile.java
@@ -0,0 +1,47 @@
+package stirling.software.proprietary.pdf.ua;
+
+/** The PDF/UA conformance level a conversion targets. */
+public enum PdfUaProfile {
+    /** ISO 14289-1, layered on PDF 1.7. */
+    UA1(1, 1.7f, 0),
+    /** ISO 14289-2: needs PDF 2.0, namespaced structure types and a revision year. */
+    UA2(2, 2.0f, 2024);
+
+    private final int part;
+    private final float pdfVersion;
+    private final int revision;
+
+    PdfUaProfile(int part, float pdfVersion, int revision) {
+        this.part = part;
+        this.pdfVersion = pdfVersion;
+        this.revision = revision;
+    }
+
+    public int part() {
+        return part;
+    }
+
+    public float pdfVersion() {
+        return pdfVersion;
+    }
+
+    /** The {@code pdfuaid:rev} year, or 0 when the profile does not use one. */
+    public int revision() {
+        return revision;
+    }
+
+    public String displayName() {
+        return "PDF/UA-" + part;
+    }
+
+    public static PdfUaProfile fromRequest(String value) {
+        if (value == null || value.isBlank()) {
+            return UA1;
+        }
+        String normalised = value.trim().toLowerCase().replace("/", "").replace("-", "");
+        return switch (normalised) {
+            case "ua2", "pdfua2", "2" -> UA2;
+            default -> UA1;
+        };
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaTagger.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaTagger.java
new file mode 100644
index 0000000000..7f5dcc3739
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/PdfUaTagger.java
@@ -0,0 +1,303 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.HashSet;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+import java.util.Set;
+
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDDocumentCatalog;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureElement;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureTreeRoot;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * Tags an untagged PDF and applies the document-level PDF/UA requirements. Content must be marked
+ * before the tree can reference it, and conformance is declared elsewhere, only after validation.
+ */
+@Slf4j
+public class PdfUaTagger {
+
+    private final TaggedContentExtractor extractor = new TaggedContentExtractor();
+    private final LayoutAnalyzer analyzer = new LayoutAnalyzer();
+    private final MarkedContentInjector injector = new MarkedContentInjector();
+    private final PdfUaMetadataWriter metadataWriter = new PdfUaMetadataWriter();
+
+    public TaggingResult tag(PDDocument document, TaggingOptions options) throws IOException {
+        boolean alreadyTagged = hasUsableStructureTree(document);
+        boolean rebuild =
+                switch (options.getExistingTags()) {
+                    case KEEP -> false;
+                    case REBUILD -> true;
+                    case AUTO -> !alreadyTagged;
+                };
+
+        List<String> languageWarnings = new ArrayList<>();
+        String language = resolveLanguage(document, options, languageWarnings);
+
+        if (!rebuild) {
+            log.info("Keeping existing structure tree; applying document requirements only");
+            DocumentStructure kept = new DocumentStructure();
+            languageWarnings.forEach(kept::warn);
+            metadataWriter
+                    .applyDocumentRequirements(
+                            document,
+                            options.getTitle(),
+                            language,
+                            options.getProfile(),
+                            options.isPreservePdfVersion())
+                    .forEach(kept::warn);
+            return new TaggingResult(kept, false);
+        }
+
+        // Types the old tree carried, so a rebuild that cannot reproduce them can say so. Font
+        // embedding may already have deleted the tree, so fall back to what the source had.
+        Set<String> discardedTypes =
+                alreadyTagged
+                        ? structureTypes(document)
+                        : options.getSourceFacts().structureTypes();
+
+        if (alreadyTagged) {
+            stripStructure(document);
+        }
+
+        List<PageContent> pages = extractor.extract(document);
+        DocumentStructure structure = analyzer.analyse(pages);
+        structure.setLanguage(language);
+        languageWarnings.forEach(structure::warn);
+        applyFigurePolicy(structure, options);
+
+        if (structure.isEmpty()) {
+            structure.warn(
+                    "No taggable content was found; the document may be a scan with no text layer.");
+        }
+
+        injectMarkedContent(document, structure, pages);
+        new StructTreeWriter().write(document, structure, options.getProfile());
+        // Losing the tree to the embedder is a different problem from a requested rebuild, and
+        // the advice that helps differs too, so tell them apart.
+        boolean lostToEmbedder = !alreadyTagged && options.getSourceFacts().hasUsableTree();
+        warnAboutFlattenedStructure(
+                discardedTypes, structureTypes(document), structure, lostToEmbedder);
+
+        String title = resolveTitle(options, structure);
+        if (title == null) {
+            structure.warn(
+                    "No document title could be derived. PDF/UA requires one, so supply a title.");
+        }
+        metadataWriter
+                .applyDocumentRequirements(
+                        document,
+                        title,
+                        language,
+                        options.getProfile(),
+                        options.isPreservePdfVersion())
+                .forEach(structure::warn);
+
+        return new TaggingResult(structure, true);
+    }
+
+    /**
+     * Keeps the language the document already declares. Overwriting it relabels, say, a French file
+     * as English, and no validator can catch that.
+     */
+    private static String resolveLanguage(
+            PDDocument document, TaggingOptions options, List<String> warnings) {
+        String existing = document.getDocumentCatalog().getLanguage();
+        if (existing == null || existing.isBlank()) {
+            // Font embedding discards /Lang, so without this a rewritten French document would
+            // silently take the caller's default language.
+            existing = options.getSourceFacts().language();
+        }
+        String requested = options.getLanguage();
+        if (existing == null || existing.isBlank() || options.isOverrideLanguage()) {
+            return requested;
+        }
+        if (requested != null && !requested.isBlank() && !requested.equalsIgnoreCase(existing)) {
+            warnings.add(
+                    "The document already declares its language as '"
+                            + existing
+                            + "', so the requested '"
+                            + requested
+                            + "' was ignored. Ask to override the language to change it.");
+        }
+        return existing;
+    }
+
+    /** Explicit title first, then the first heading, then the caller's fallback. */
+    private static String resolveTitle(TaggingOptions options, DocumentStructure structure) {
+        for (String candidate :
+                new String[] {
+                    options.getTitle(), structure.getTitle(), options.getFallbackTitle()
+                }) {
+            if (candidate != null && !candidate.isBlank()) {
+                return candidate.strip();
+            }
+        }
+        return null;
+    }
+
+    /** Writes the conformance declaration. Separate from tagging so validation can gate it. */
+    public void declareConformance(PDDocument document, PdfUaProfile profile) throws IOException {
+        metadataWriter.declareConformance(document, profile);
+    }
+
+    /** Withdraws the conformance claim, for a document that turned out not to validate. */
+    public void withdrawConformance(PDDocument document) throws IOException {
+        metadataWriter.removeConformanceDeclaration(document);
+    }
+
+    /** Wraps content page by page; marked content ids restart on each page. */
+    private void injectMarkedContent(
+            PDDocument document, DocumentStructure structure, List<PageContent> pages)
+            throws IOException {
+        Map<Integer, Integer> markableCounts = new LinkedHashMap<>();
+        pages.forEach(page -> markableCounts.put(page.pageIndex(), page.markableCount()));
+        Map<Integer, List<StructBlock>> byPage = new LinkedHashMap<>();
+        for (StructBlock block : structure.getBlocks()) {
+            byPage.computeIfAbsent(block.getPageIndex(), k -> new ArrayList<>()).add(block);
+        }
+        for (int pageIndex = 0; pageIndex < document.getNumberOfPages(); pageIndex++) {
+            List<StructBlock> blocks = byPage.getOrDefault(pageIndex, List.of());
+            // Nothing to wrap, and rewriting costs a parse and recompress for an identical stream.
+            if (blocks.isEmpty() && markableCounts.getOrDefault(pageIndex, 0) == 0) {
+                continue;
+            }
+            injector.inject(document, document.getPage(pageIndex), blocks, 0, true);
+        }
+    }
+
+    /** Applies alt text supplied by the caller, or demotes images to artifacts on request. */
+    private static void applyFigurePolicy(DocumentStructure structure, TaggingOptions options) {
+        int[] suppressed = {0};
+        structure.visit(
+                block -> {
+                    if (block.getType() != StructType.FIGURE) {
+                        return;
+                    }
+                    if (options.getFigurePolicy() == TaggingOptions.FigurePolicy.MARK_DECORATIVE) {
+                        block.setType(StructType.ARTIFACT);
+                        block.setArtifactType(ArtifactType.LAYOUT);
+                        suppressed[0]++;
+                        return;
+                    }
+                    int ordinal =
+                            block.getRanges().isEmpty() ? -1 : block.getRanges().get(0).start();
+                    String alt = options.altTextFor(block.getPageIndex(), ordinal);
+                    if (alt != null && !alt.isBlank()) {
+                        block.setAlt(alt);
+                    }
+                });
+        // Marking images decorative validates by hiding content, so never report it as clean.
+        if (suppressed[0] > 0) {
+            structure.warn(
+                    suppressed[0]
+                            + " image(s) were marked as decoration and are now hidden from"
+                            + " assistive technology. Confirm none of them carried meaning.");
+        }
+        int missing = structure.figuresWithoutAlt().size();
+        if (missing > 0) {
+            structure.warn(
+                    missing
+                            + " figure(s) have no alternative description. PDF/UA requires one for"
+                            + " every image that carries meaning.");
+        }
+    }
+
+    /**
+     * A tree is only worth keeping when wired up: kids, a parent tree, and a marked catalog.
+     * Keeping one that fails any of those leaves the document permanently unfixable.
+     */
+    public static boolean hasUsableStructureTree(PDDocument document) {
+        PDDocumentCatalog catalog = document.getDocumentCatalog();
+        PDStructureTreeRoot root = catalog.getStructureTreeRoot();
+        if (root == null) {
+            return false;
+        }
+        try {
+            boolean hasKids = root.getKids() != null && !root.getKids().isEmpty();
+            boolean hasParentTree = root.getParentTree() != null;
+            boolean marked = catalog.getMarkInfo() != null && catalog.getMarkInfo().isMarked();
+            return hasKids && hasParentTree && marked;
+        } catch (RuntimeException e) {
+            log.debug("Unreadable structure tree, treating as absent: {}", e.getMessage());
+            return false;
+        }
+    }
+
+    /**
+     * A rebuild derives structure from layout, so semantics the old tree carried can vanish - a
+     * table becomes loose paragraphs. Validators cannot see that loss, so it has to be reported.
+     */
+    private static void warnAboutFlattenedStructure(
+            Set<String> before,
+            Set<String> after,
+            DocumentStructure structure,
+            boolean lostToEmbedder) {
+        List<String> lost =
+                MEANINGFUL_TYPES.stream()
+                        .filter(type -> before.contains(type) && !after.contains(type))
+                        .toList();
+        if (lost.isEmpty()) {
+            return;
+        }
+        // Keeping the tags cannot help once the embedder has deleted them, so do not suggest it.
+        String remedy =
+                lostToEmbedder
+                        ? " Embedding the missing fonts rewrote the document and deleted its"
+                                + " original tags. Turn off font embedding to keep them."
+                        : " Keep the existing tags instead to preserve it.";
+        structure.warn(
+                "Rebuilding the tags could not reproduce "
+                        + String.join(", ", lost)
+                        + " structure, so that content is now plain paragraphs."
+                        + remedy);
+    }
+
+    /** Structure whose loss changes what a screen reader conveys, not just how it is nested. */
+    private static final List<String> MEANINGFUL_TYPES =
+            List.of("Table", "TH", "Formula", "L", "LI", "TOC", "Note");
+
+    private static Set<String> structureTypes(PDDocument document) {
+        Set<String> types = new HashSet<>();
+        try {
+            PDStructureTreeRoot root = document.getDocumentCatalog().getStructureTreeRoot();
+            if (root != null) {
+                collectTypes(root.getKids(), types, 0);
+            }
+        } catch (RuntimeException e) {
+            log.debug("Could not read structure types: {}", e.getMessage());
+        }
+        return types;
+    }
+
+    private static void collectTypes(Object node, Set<String> types, int depth) {
+        // Structure trees can be deep or, in damaged files, cyclic; cap rather than overflow.
+        if (node == null || depth > 64) {
+            return;
+        }
+        if (node instanceof List<?> list) {
+            list.forEach(child -> collectTypes(child, types, depth + 1));
+        } else if (node instanceof PDStructureElement element) {
+            types.add(element.getStructureType());
+            collectTypes(element.getKids(), types, depth + 1);
+        }
+    }
+
+    private static void stripStructure(PDDocument document) {
+        PDDocumentCatalog catalog = document.getDocumentCatalog();
+        catalog.getCOSObject().removeItem(COSName.getPDFName("StructTreeRoot"));
+        catalog.getCOSObject().removeItem(COSName.getPDFName("MarkInfo"));
+        document.getPages()
+                .forEach(
+                        page ->
+                                page.getCOSObject()
+                                        .removeItem(COSName.getPDFName("StructParents")));
+        log.info("Removed existing structure tree before rebuilding");
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/SourceFacts.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/SourceFacts.java
new file mode 100644
index 0000000000..4f058d6c48
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/SourceFacts.java
@@ -0,0 +1,59 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.HashSet;
+import java.util.Set;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureElement;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureTreeRoot;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * What the document said about itself before anything rewrote it. Font embedding shells out to
+ * Ghostscript, which returns a file with no structure tree, no {@code /Lang} and no XMP, so a
+ * tagger reading the rewritten document sees an untagged, language-less file and cannot tell that
+ * anything was lost. These facts are captured from the original and carried past that stage.
+ *
+ * @param language the catalog {@code /Lang} the author declared, or null
+ * @param structureTypes every structure element type the original tree contained
+ * @param hasUsableTree whether the original had a structure tree worth preserving
+ */
+@Slf4j
+public record SourceFacts(String language, Set<String> structureTypes, boolean hasUsableTree) {
+
+    private static final int MAX_DEPTH = 64;
+
+    /** Facts for a document nothing has rewritten, used when font embedding did not run. */
+    public static final SourceFacts NONE = new SourceFacts(null, Set.of(), false);
+
+    public static SourceFacts of(PDDocument document) {
+        String language = null;
+        Set<String> types = new HashSet<>();
+        boolean usable = false;
+        try {
+            language = document.getDocumentCatalog().getLanguage();
+            usable = PdfUaTagger.hasUsableStructureTree(document);
+            PDStructureTreeRoot root = document.getDocumentCatalog().getStructureTreeRoot();
+            if (root != null) {
+                collect(root.getKids(), types, 0);
+            }
+        } catch (RuntimeException e) {
+            log.debug("Could not read source facts: {}", e.getMessage());
+        }
+        return new SourceFacts(language, Set.copyOf(types), usable);
+    }
+
+    private static void collect(Object node, Set<String> types, int depth) {
+        // Damaged files can present a cyclic tree; cap rather than overflow the stack.
+        if (node == null || depth > MAX_DEPTH) {
+            return;
+        }
+        if (node instanceof java.util.List<?> list) {
+            list.forEach(child -> collect(child, types, depth + 1));
+        } else if (node instanceof PDStructureElement element) {
+            types.add(element.getStructureType());
+            collect(element.getKids(), types, depth + 1);
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructBlock.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructBlock.java
new file mode 100644
index 0000000000..d2f3e452b1
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructBlock.java
@@ -0,0 +1,134 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.function.Consumer;
+
+import lombok.Getter;
+import lombok.Setter;
+
+/**
+ * One node of the derived logical structure: either page content (ranges of markable operator
+ * ordinals) or child blocks. Containers with no content are pruned before serialisation.
+ */
+@Getter
+@Setter
+public class StructBlock {
+
+    /** A contiguous, inclusive run of markable operator ordinals within one page stream. */
+    public record OrdinalRange(int start, int end) {
+        public boolean contains(int ordinal) {
+            return ordinal >= start && ordinal <= end;
+        }
+
+        public int size() {
+            return end - start + 1;
+        }
+    }
+
+    private StructType type;
+    private ArtifactType artifactType;
+    private int pageIndex;
+    private BBox bbox = BBox.EMPTY;
+    private String text = "";
+
+    private final List<OrdinalRange> ranges = new ArrayList<>();
+    private final List<StructBlock> children = new ArrayList<>();
+
+    /** {@code /Alt} - required on Figure and Formula for PDF/UA. */
+    private String alt;
+
+    /** {@code /ActualText} - replacement text for content whose glyphs do not spell the word. */
+    private String actualText;
+
+    /** {@code /Lang} - set only where it differs from the document default. */
+    private String lang;
+
+    /** {@code /Scope} on a TH: Row, Column or Both. */
+    private String scope;
+
+    /** {@code /ListNumbering} on an L. */
+    private String listNumbering;
+
+    /** Unique {@code /ID}, required on Note and FENote elements. */
+    private String id;
+
+    /**
+     * Marked content ids assigned during injection; one block yields several when split, since a
+     * sequence must nest inside BT/ET and q/Q rather than straddle them.
+     */
+    private final List<Integer> mcids = new ArrayList<>();
+
+    /** True when the source content was already inside a marked-content sequence. */
+    private boolean preMarked;
+
+    public StructBlock(StructType type, int pageIndex) {
+        this.type = type;
+        this.pageIndex = pageIndex;
+    }
+
+    public static StructBlock artifact(ArtifactType artifactType, int pageIndex) {
+        StructBlock block = new StructBlock(StructType.ARTIFACT, pageIndex);
+        block.artifactType = artifactType;
+        return block;
+    }
+
+    public StructBlock addChild(StructBlock child) {
+        children.add(child);
+        return this;
+    }
+
+    public StructBlock addRange(int start, int end) {
+        ranges.add(new OrdinalRange(start, end));
+        return this;
+    }
+
+    public boolean isArtifact() {
+        return type == StructType.ARTIFACT;
+    }
+
+    /** Depth-first walk over this block and all descendants. */
+    public void visit(Consumer<StructBlock> visitor) {
+        visitor.accept(this);
+        for (StructBlock child : children) {
+            child.visit(visitor);
+        }
+    }
+
+    /** Total number of ordinals owned by this block and its descendants. */
+    public int contentCount() {
+        int total = ranges.stream().mapToInt(OrdinalRange::size).sum();
+        for (StructBlock child : children) {
+            total += child.contentCount();
+        }
+        return total;
+    }
+
+    /** Concatenated text of this block and its descendants, in tree order. */
+    public String collectText() {
+        StringBuilder sb = new StringBuilder();
+        visit(
+                block -> {
+                    if (!block.text.isBlank()) {
+                        if (sb.length() > 0) {
+                            sb.append(' ');
+                        }
+                        sb.append(block.text.strip());
+                    }
+                });
+        return sb.toString();
+    }
+
+    @Override
+    public String toString() {
+        return type.tag()
+                + (artifactType != null ? "[" + artifactType.subtype() + "]" : "")
+                + "(p"
+                + pageIndex
+                + ", "
+                + ranges.size()
+                + " ranges, "
+                + children.size()
+                + " kids)";
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructTreeWriter.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructTreeWriter.java
new file mode 100644
index 0000000000..f6b5d89b4c
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructTreeWriter.java
@@ -0,0 +1,295 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+import org.apache.pdfbox.cos.COSArray;
+import org.apache.pdfbox.cos.COSBase;
+import org.apache.pdfbox.cos.COSDictionary;
+import org.apache.pdfbox.cos.COSInteger;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDNumberTreeNode;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDMarkInfo;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDObjectReference;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureElement;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureTreeRoot;
+import org.apache.pdfbox.pdmodel.documentinterchange.taggedpdf.PDListAttributeObject;
+import org.apache.pdfbox.pdmodel.documentinterchange.taggedpdf.PDTableAttributeObject;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotation;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationLink;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationWidget;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * Serialises a {@link DocumentStructure} into a PDF structure tree. Must run after {@link
+ * MarkedContentInjector}, which assigns the marked content ids this writer references.
+ */
+@Slf4j
+public class StructTreeWriter {
+
+    private static final COSName STRUCT_PARENT = COSName.getPDFName("StructParent");
+    private static final COSName NUMS = COSName.getPDFName("Nums");
+    private static final String PDF2_STANDARD_NAMESPACE = "http://iso.org/pdf2/ssn";
+
+    /** Per-page marked content id to owning element, built while walking the tree. */
+    private final Map<Integer, Map<Integer, PDStructureElement>> mcidOwners = new LinkedHashMap<>();
+
+    private COSDictionary standardNamespace;
+    private int nextParentKey;
+
+    public void write(PDDocument document, DocumentStructure structure, PdfUaProfile profile)
+            throws IOException {
+        PDStructureTreeRoot root = new PDStructureTreeRoot();
+        PDStructureElement documentElement =
+                new PDStructureElement(StructType.DOCUMENT.tag(), root);
+        if (structure.getLanguage() != null) {
+            documentElement.setLanguage(structure.getLanguage());
+        }
+        if (profile == PdfUaProfile.UA2) {
+            applyNamespace(documentElement, document);
+        }
+
+        for (StructBlock block : structure.getBlocks()) {
+            if (block.isArtifact()) {
+                continue;
+            }
+            PDStructureElement child = buildElement(document, block, documentElement, profile);
+            if (child != null) {
+                documentElement.appendKid(child);
+            }
+        }
+
+        root.appendKid(documentElement);
+        buildParentTree(document, root);
+        registerNamespaces(root);
+
+        PDMarkInfo markInfo = new PDMarkInfo();
+        markInfo.setMarked(true);
+        document.getDocumentCatalog().setMarkInfo(markInfo);
+        document.getDocumentCatalog().setStructureTreeRoot(root);
+    }
+
+    /** Recursively builds an element, returning null when the block carries no content at all. */
+    private PDStructureElement buildElement(
+            PDDocument document,
+            StructBlock block,
+            PDStructureElement parent,
+            PdfUaProfile profile) {
+
+        // Prune on assigned MCIDs, not claimed ranges: form-XObject lines all resolve to one Do,
+        // and emitting the losers would announce empty paragraphs to a screen reader.
+        if (!carriesContent(block)) {
+            return null;
+        }
+        StructType type = effectiveType(block, profile);
+        PDStructureElement element = new PDStructureElement(type.tag(), parent);
+        PDPage page = document.getPage(block.getPageIndex());
+        element.setPage(page);
+
+        if (profile == PdfUaProfile.UA2) {
+            applyNamespace(element, document);
+        }
+        applyAttributes(block, element);
+
+        for (int mcid : block.getMcids()) {
+            element.appendKid(mcid);
+            mcidOwners
+                    .computeIfAbsent(block.getPageIndex(), k -> new LinkedHashMap<>())
+                    .put(mcid, element);
+        }
+
+        for (StructBlock child : block.getChildren()) {
+            PDStructureElement childElement = buildElement(document, child, element, profile);
+            if (childElement != null) {
+                element.appendKid(childElement);
+            }
+        }
+        return element;
+    }
+
+    /** True when this block, or something beneath it, was actually given marked content. */
+    private static boolean carriesContent(StructBlock block) {
+        if (!block.getMcids().isEmpty()) {
+            return true;
+        }
+        return block.getChildren().stream().anyMatch(StructTreeWriter::carriesContent);
+    }
+
+    /** PDF/UA-2 replaces Note with FENote for footnotes. */
+    private static StructType effectiveType(StructBlock block, PdfUaProfile profile) {
+        if (profile == PdfUaProfile.UA2 && block.getType() == StructType.NOTE) {
+            return StructType.FENOTE;
+        }
+        return block.getType();
+    }
+
+    private static void applyAttributes(StructBlock block, PDStructureElement element) {
+        if (block.getAlt() != null && !block.getAlt().isBlank()) {
+            element.setAlternateDescription(block.getAlt());
+        }
+        if (block.getActualText() != null && !block.getActualText().isBlank()) {
+            element.setActualText(block.getActualText());
+        }
+        if (block.getLang() != null && !block.getLang().isBlank()) {
+            element.setLanguage(block.getLang());
+        }
+        if (block.getId() != null && !block.getId().isBlank()) {
+            element.setElementIdentifier(block.getId());
+        }
+        if (block.getScope() != null) {
+            PDTableAttributeObject table = new PDTableAttributeObject();
+            table.setScope(block.getScope());
+            element.addAttribute(table);
+        }
+        if (block.getListNumbering() != null) {
+            PDListAttributeObject list = new PDListAttributeObject();
+            list.setListNumbering(block.getListNumbering());
+            element.addAttribute(list);
+        }
+    }
+
+    /** PDF/UA-2 requires every element to declare the standard structure namespace. */
+    private void applyNamespace(PDStructureElement element, PDDocument document) {
+        element.getCOSObject().setItem(COSName.getPDFName("NS"), standardNamespace());
+    }
+
+    /** The PDF 2.0 standard structure namespace, created once per document. */
+    private COSDictionary standardNamespace() {
+        if (standardNamespace == null) {
+            standardNamespace = new COSDictionary();
+            standardNamespace.setName(COSName.TYPE, "Namespace");
+            standardNamespace.setString(COSName.getPDFName("NS"), PDF2_STANDARD_NAMESPACE);
+        }
+        return standardNamespace;
+    }
+
+    private void registerNamespaces(PDStructureTreeRoot root) {
+        if (standardNamespace == null) {
+            return;
+        }
+        COSArray namespaces = new COSArray();
+        namespaces.add(standardNamespace);
+        root.getCOSObject().setItem(COSName.getPDFName("Namespaces"), namespaces);
+    }
+
+    /**
+     * Builds {@code /ParentTree}: per page, an array indexed by marked content id keyed on {@code
+     * /StructParents}, plus one entry per annotation keyed on {@code /StructParent}.
+     */
+    private void buildParentTree(PDDocument document, PDStructureTreeRoot root) {
+        COSArray nums = new COSArray();
+        nextParentKey = 0;
+
+        for (int pageIndex = 0; pageIndex < document.getNumberOfPages(); pageIndex++) {
+            Map<Integer, PDStructureElement> owners = mcidOwners.get(pageIndex);
+            if (owners == null || owners.isEmpty()) {
+                continue;
+            }
+            PDPage page = document.getPage(pageIndex);
+            int key = nextParentKey++;
+            page.setStructParents(key);
+
+            int maxMcid = owners.keySet().stream().mapToInt(Integer::intValue).max().orElse(-1);
+            COSArray entries = new COSArray();
+            for (int mcid = 0; mcid <= maxMcid; mcid++) {
+                PDStructureElement owner = owners.get(mcid);
+                entries.add(
+                        owner != null ? owner.getCOSObject() : org.apache.pdfbox.cos.COSNull.NULL);
+            }
+            nums.add(COSInteger.get(key));
+            nums.add(entries);
+        }
+
+        List<COSBase> annotationEntries = tagAnnotations(document, root);
+        for (int i = 0; i + 1 < annotationEntries.size(); i += 2) {
+            nums.add(annotationEntries.get(i));
+            nums.add(annotationEntries.get(i + 1));
+        }
+
+        COSDictionary parentTreeDict = new COSDictionary();
+        parentTreeDict.setItem(NUMS, nums);
+        root.setParentTree(new PDNumberTreeNode(parentTreeDict, PDStructureElement.class));
+        root.setParentTreeNextKey(nextParentKey);
+    }
+
+    /**
+     * Clause 7.18: every visible annotation needs a structure element so it is reachable from the
+     * tree. Links become Link elements, anything else an Annot.
+     */
+    private List<COSBase> tagAnnotations(PDDocument document, PDStructureTreeRoot root) {
+        List<COSBase> entries = new ArrayList<>();
+        PDStructureElement documentElement = firstDocumentElement(root);
+        if (documentElement == null) {
+            return entries;
+        }
+        for (int pageIndex = 0; pageIndex < document.getNumberOfPages(); pageIndex++) {
+            PDPage page = document.getPage(pageIndex);
+            List<PDAnnotation> annotations;
+            try {
+                annotations = page.getAnnotations();
+            } catch (IOException e) {
+                log.debug("Could not read annotations on page {}: {}", pageIndex, e.getMessage());
+                continue;
+            }
+            for (PDAnnotation annotation : annotations) {
+                if (annotation == null
+                        || annotation.isHidden()
+                        || annotation.isNoView()
+                        || "Popup".equals(annotation.getSubtype())) {
+                    continue;
+                }
+                PDStructureElement element =
+                        new PDStructureElement(annotationType(annotation), documentElement);
+                element.setPage(page);
+
+                PDObjectReference reference = new PDObjectReference();
+                reference.setReferencedObject(annotation);
+                element.appendKid(reference);
+                documentElement.appendKid(element);
+
+                int key = nextParentKey++;
+                annotation.getCOSObject().setInt(STRUCT_PARENT, key);
+                entries.add(COSInteger.get(key));
+                entries.add(element.getCOSObject());
+
+                if (annotation.getContents() == null || annotation.getContents().isBlank()) {
+                    annotation.setContents(defaultContents(annotation));
+                }
+            }
+        }
+        return entries;
+    }
+
+    /** Clause 7.18.4: widgets need a Form element, links a Link element, everything else Annot. */
+    private static String annotationType(PDAnnotation annotation) {
+        if (annotation instanceof PDAnnotationWidget) {
+            return StructType.FORM.tag();
+        }
+        if (annotation instanceof PDAnnotationLink) {
+            return StructType.LINK.tag();
+        }
+        return "Annot";
+    }
+
+    private static String defaultContents(PDAnnotation annotation) {
+        if (annotation instanceof PDAnnotationLink link && link.getAction() != null) {
+            return "Link";
+        }
+        return annotation.getSubtype() == null ? "Annotation" : annotation.getSubtype();
+    }
+
+    private static PDStructureElement firstDocumentElement(PDStructureTreeRoot root) {
+        for (Object kid : root.getKids()) {
+            if (kid instanceof PDStructureElement element) {
+                return element;
+            }
+        }
+        return null;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructType.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructType.java
new file mode 100644
index 0000000000..b4634a58c6
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/StructType.java
@@ -0,0 +1,62 @@
+package stirling.software.proprietary.pdf.ua;
+
+/**
+ * PDF standard structure types emitted by the tagger (ISO 32000-1 14.8.4), limited to the PDF/UA
+ * subset. {@link #ARTIFACT} is not one: it marks content in the stream and stays out of the tree.
+ */
+public enum StructType {
+    DOCUMENT("Document"),
+    PART("Part"),
+    SECT("Sect"),
+    H1("H1"),
+    H2("H2"),
+    H3("H3"),
+    H4("H4"),
+    H5("H5"),
+    H6("H6"),
+    P("P"),
+    L("L"),
+    LI("LI"),
+    LBL("Lbl"),
+    LBODY("LBody"),
+    TABLE("Table"),
+    TR("TR"),
+    TH("TH"),
+    TD("TD"),
+    FIGURE("Figure"),
+    CAPTION("Caption"),
+    FORMULA("Formula"),
+    NOTE("Note"),
+    FENOTE("FENote"),
+    LINK("Link"),
+    /** Wraps a widget annotation; PDF/UA-1 clause 7.18.4 requires widgets to sit inside one. */
+    FORM("Form"),
+    SPAN("Span"),
+    ARTIFACT("Artifact");
+
+    private final String tag;
+
+    StructType(String tag) {
+        this.tag = tag;
+    }
+
+    /** The name written into the PDF {@code /S} entry. */
+    public String tag() {
+        return tag;
+    }
+
+    public boolean isHeading() {
+        return this == H1 || this == H2 || this == H3 || this == H4 || this == H5 || this == H6;
+    }
+
+    /** Heading level 1-6, or 0 when this is not a heading. */
+    public int headingLevel() {
+        return isHeading() ? ordinal() - H1.ordinal() + 1 : 0;
+    }
+
+    /** The heading type for a 1-based level, clamped to the H1-H6 range. */
+    public static StructType heading(int level) {
+        int clamped = Math.max(1, Math.min(6, level));
+        return values()[H1.ordinal() + clamped - 1];
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggedContentExtractor.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggedContentExtractor.java
new file mode 100644
index 0000000000..01c86215d4
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggedContentExtractor.java
@@ -0,0 +1,630 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.io.IOException;
+import java.io.Writer;
+import java.util.ArrayList;
+import java.util.HashMap;
+import java.util.IdentityHashMap;
+import java.util.List;
+import java.util.Map;
+
+import org.apache.pdfbox.contentstream.operator.Operator;
+import org.apache.pdfbox.cos.COSBase;
+import org.apache.pdfbox.cos.COSDictionary;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdfparser.PDFStreamParser;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDResources;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.font.PDFontDescriptor;
+import org.apache.pdfbox.pdmodel.font.PDType3Font;
+import org.apache.pdfbox.pdmodel.graphics.PDXObject;
+import org.apache.pdfbox.pdmodel.graphics.form.PDFormXObject;
+import org.apache.pdfbox.pdmodel.graphics.form.PDTransparencyGroup;
+import org.apache.pdfbox.pdmodel.graphics.image.PDImageXObject;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.apache.pdfbox.text.TextPosition;
+import org.apache.pdfbox.util.Matrix;
+import org.apache.pdfbox.util.Vector;
+
+import lombok.extern.slf4j.Slf4j;
+
+/**
+ * Extracts text lines and graphic ops from page streams, tagging each with its operator ordinal.
+ * Both passes count the same operators in the same order, so ordinals cross-reference.
+ */
+@Slf4j
+public class TaggedContentExtractor {
+
+    /** Glyph size below which a run is treated as noise rather than a line. */
+    private static final float MIN_FONT_SIZE = 0.5f;
+
+    public List<PageContent> extract(PDDocument document) throws IOException {
+        LineCollector collector = new LineCollector();
+        collector.setSortByPosition(true);
+        collector.setStartPage(1);
+        collector.setEndPage(document.getNumberOfPages());
+        collector.writeText(document, Writer.nullWriter());
+
+        List<PageContent> pages = new ArrayList<>(document.getNumberOfPages());
+        for (int i = 0; i < document.getNumberOfPages(); i++) {
+            PDPage page = document.getPage(i);
+            List<MarkableOp> ops = collector.opsFor(i);
+            List<TextLineInfo> lines = collector.linesFor(i);
+            boolean dropped = false;
+            if (ops.size() < maxOrdinal(lines) + 1) {
+                // Untrusted ordinals: drop the lines so the page is untaggable rather than
+                // mis-tagged, and flag it so the caller refuses to declare conformance.
+                log.warn(
+                        "Ordinal mismatch on page {} (ops={}, text={}); skipping page",
+                        i,
+                        ops.size(),
+                        maxOrdinal(lines) + 1);
+                dropped = !lines.isEmpty();
+                lines = List.of();
+            }
+            pages.add(
+                    new PageContent(
+                            i,
+                            lines,
+                            ops,
+                            ops.size(),
+                            collector.preMarkedOn(i),
+                            collector.textSemanticsOn(i),
+                            dropped,
+                            normalisedBox(page)));
+        }
+        return pages;
+    }
+
+    /**
+     * The page box in the space of extracted line coordinates: origin-zero, width and height
+     * swapped for 90/270 rotations, because the text engine reports in the rotated frame.
+     */
+    static BBox normalisedBox(PDPage page) {
+        PDRectangle mediaBox = page.getMediaBox();
+        boolean sideways = page.getRotation() % 180 != 0;
+        float width = sideways ? mediaBox.getHeight() : mediaBox.getWidth();
+        float height = sideways ? mediaBox.getWidth() : mediaBox.getHeight();
+        return new BBox(0, 0, width, height);
+    }
+
+    /** Counts images with the token scan alone, skipping the expensive text pass. */
+    public int countGraphics(PDDocument document) {
+        int total = 0;
+        for (int i = 0; i < document.getNumberOfPages(); i++) {
+            try {
+                PDResources resources = document.getPage(i).getResources();
+                PDFStreamParser parser = new PDFStreamParser(document.getPage(i));
+                List<COSBase> operands = new ArrayList<>();
+                Object token;
+                while ((token = parser.parseNextToken()) != null) {
+                    if (!(token instanceof Operator operator)) {
+                        operands.add((COSBase) token);
+                        continue;
+                    }
+                    if (isGraphicOperator(operator.getName(), operands, resources)) {
+                        total++;
+                    }
+                    operands.clear();
+                }
+            } catch (IOException e) {
+                log.debug("Could not scan page {} for graphics: {}", i, e.getMessage());
+            }
+        }
+        return total;
+    }
+
+    /** True for an inline image, or a Do that resolves to an image XObject. */
+    private static boolean isGraphicOperator(
+            String name, List<COSBase> operands, PDResources resources) {
+        if ("BI".equals(name)) {
+            return true;
+        }
+        if (!"Do".equals(name) || resources == null || operands.size() != 1) {
+            return false;
+        }
+        if (!(operands.get(0) instanceof COSName resourceName)) {
+            return false;
+        }
+        try {
+            return resources.getXObject(resourceName) instanceof PDImageXObject;
+        } catch (IOException e) {
+            return false;
+        }
+    }
+
+    private static int maxOrdinal(List<TextLineInfo> lines) {
+        return lines.stream().mapToInt(TextLineInfo::endOrdinal).max().orElse(-1);
+    }
+
+    static BBox toBBox(PDRectangle rect) {
+        return new BBox(
+                rect.getLowerLeftX(),
+                rect.getLowerLeftY(),
+                rect.getUpperRightX(),
+                rect.getUpperRightY());
+    }
+
+    // --- Operator classification -------------------------------------------
+
+    private static boolean isPathConstruction(String name) {
+        return switch (name) {
+            case "m", "l", "c", "v", "y", "re" -> true;
+            default -> false;
+        };
+    }
+
+    /** True when a sequence carries replacement or alternative text, which a rebuild would drop. */
+    private static boolean carriesTextSemantics(List<COSBase> operands) {
+        for (COSBase operand : operands) {
+            if (operand instanceof COSDictionary dictionary
+                    && (dictionary.containsKey(COSName.getPDFName("ActualText"))
+                            || dictionary.containsKey(COSName.getPDFName("Alt"))
+                            || dictionary.containsKey(COSName.E))) {
+                return true;
+            }
+        }
+        return false;
+    }
+
+    /**
+     * Describes one markable operator, placed with the engine's own matrix rather than a
+     * hand-rolled q/Q/cm stack that would get nesting and form matrices wrong.
+     */
+    private static MarkableOp classify(
+            String name,
+            List<COSBase> operands,
+            PDResources resources,
+            Matrix ctm,
+            BBox pathBox,
+            int ordinal) {
+
+        if ("BI".equals(name)) {
+            return new MarkableOp(ordinal, MarkableOp.Kind.INLINE_IMAGE, unitSquare(ctm), null);
+        }
+        if (MarkableOp.isPathPainting(name)) {
+            return new MarkableOp(ordinal, MarkableOp.Kind.VECTOR, pathBox, null);
+        }
+        if (!"Do".equals(name)) {
+            return new MarkableOp(ordinal, MarkableOp.Kind.TEXT, BBox.EMPTY, null);
+        }
+        COSName resourceName =
+                operands.size() == 1 && operands.get(0) instanceof COSName n ? n : null;
+        if (resourceName == null || resources == null) {
+            return new MarkableOp(ordinal, MarkableOp.Kind.FORM, unitSquare(ctm), null);
+        }
+        try {
+            PDXObject xobject = resources.getXObject(resourceName);
+            if (xobject instanceof PDImageXObject) {
+                return new MarkableOp(
+                        ordinal, MarkableOp.Kind.IMAGE, unitSquare(ctm), resourceName.getName());
+            }
+            if (xobject instanceof PDFormXObject form) {
+                return new MarkableOp(
+                        ordinal, MarkableOp.Kind.FORM, formBox(form, ctm), resourceName.getName());
+            }
+        } catch (IOException e) {
+            log.debug("Could not resolve XObject {}: {}", resourceName.getName(), e.getMessage());
+        }
+        return new MarkableOp(
+                ordinal, MarkableOp.Kind.FORM, unitSquare(ctm), resourceName.getName());
+    }
+
+    /**
+     * Extends the running path box with one path-construction operator's points; without it every
+     * vector had an empty box and charts and vector logos vanished from the structure tree.
+     */
+    private static BBox extendPath(BBox current, String name, List<COSBase> operands, Matrix ctm) {
+        int pairs =
+                switch (name) {
+                    case "m", "l" -> 1;
+                    case "re" -> 2;
+                    case "v", "y" -> 2;
+                    case "c" -> 3;
+                    default -> 0;
+                };
+        if (pairs == 0 || operands.size() < pairs * 2) {
+            return current;
+        }
+
+        // Deliberately allocation-free; the obvious version cost a third of the extraction budget.
+        float minX = current.isEmpty() ? Float.MAX_VALUE : current.x0();
+        float minY = current.isEmpty() ? Float.MAX_VALUE : current.y0();
+        float maxX = current.isEmpty() ? -Float.MAX_VALUE : current.x1();
+        float maxY = current.isEmpty() ? -Float.MAX_VALUE : current.y1();
+
+        for (int pair = 0; pair < pairs; pair++) {
+            Float x = numberAt(operands, pair * 2);
+            Float y = numberAt(operands, pair * 2 + 1);
+            if (x == null || y == null) {
+                continue;
+            }
+            float px = x;
+            float py = y;
+            // "re" gives origin plus size, so the second pair is a corner offset from the first.
+            if ("re".equals(name) && pair == 1) {
+                Float ox = numberAt(operands, 0);
+                Float oy = numberAt(operands, 1);
+                if (ox == null || oy == null) {
+                    continue;
+                }
+                px = ox + x;
+                py = oy + y;
+            }
+            float tx = ctm.getScaleX() * px + ctm.getShearX() * py + ctm.getTranslateX();
+            float ty = ctm.getShearY() * px + ctm.getScaleY() * py + ctm.getTranslateY();
+            minX = Math.min(minX, tx);
+            minY = Math.min(minY, ty);
+            maxX = Math.max(maxX, tx);
+            maxY = Math.max(maxY, ty);
+        }
+        return maxX < minX ? current : new BBox(minX, minY, maxX, maxY);
+    }
+
+    private static Float numberAt(List<COSBase> operands, int index) {
+        return index < operands.size()
+                        && operands.get(index) instanceof org.apache.pdfbox.cos.COSNumber number
+                ? number.floatValue()
+                : null;
+    }
+
+    /** The unit square mapped through the CTM, which is how images are placed. */
+    private static BBox unitSquare(Matrix ctm) {
+        return transformBox(new BBox(0, 0, 1, 1), ctm);
+    }
+
+    private static BBox formBox(PDFormXObject form, Matrix ctm) {
+        PDRectangle box = form.getBBox();
+        if (box == null) {
+            return unitSquare(ctm);
+        }
+        Matrix combined = form.getMatrix() != null ? form.getMatrix().multiply(ctm) : ctm;
+        return transformBox(toBBox(box), combined);
+    }
+
+    private static BBox transformBox(BBox box, Matrix m) {
+        float[] xs = new float[4];
+        float[] ys = new float[4];
+        float[][] corners = {
+            {box.x0(), box.y0()}, {box.x1(), box.y0()},
+            {box.x0(), box.y1()}, {box.x1(), box.y1()}
+        };
+        for (int i = 0; i < 4; i++) {
+            Vector v = m.transform(new Vector(corners[i][0], corners[i][1]));
+            xs[i] = v.getX();
+            ys[i] = v.getY();
+        }
+        float minX = Math.min(Math.min(xs[0], xs[1]), Math.min(xs[2], xs[3]));
+        float maxX = Math.max(Math.max(xs[0], xs[1]), Math.max(xs[2], xs[3]));
+        float minY = Math.min(Math.min(ys[0], ys[1]), Math.min(ys[2], ys[3]));
+        float maxY = Math.max(Math.max(ys[0], ys[1]), Math.max(ys[2], ys[3]));
+        return new BBox(minX, minY, maxX, maxY);
+    }
+
+    // --- Text pass ---------------------------------------------------------
+
+    /** Marker recorded for each glyph so a finished line knows where it came from. */
+    private record GlyphOrigin(int ordinal, boolean marked) {}
+
+    private static final class LineCollector extends PDFTextStripper {
+
+        private final Map<Integer, List<TextLineInfo>> byPage = new HashMap<>();
+        private final Map<Integer, List<MarkableOp>> opsByPage = new HashMap<>();
+        private final Map<Integer, Boolean> preMarkedByPage = new HashMap<>();
+        private final Map<Integer, Boolean> textSemanticsByPage = new HashMap<>();
+        private final Map<TextPosition, GlyphOrigin> origins = new IdentityHashMap<>();
+        private final List<TextPosition> lineBuffer = new ArrayList<>();
+        private final List<WordInfo> lineWords = new ArrayList<>();
+        private final StringBuilder lineText = new StringBuilder();
+
+        private int ordinal = -1;
+        private int markedDepth;
+        private int nestedDepth;
+        private BBox pathBox = BBox.EMPTY;
+        private int syntheticDepth;
+        private float pageHeight;
+        private int pageIndex;
+
+        LineCollector() throws IOException {
+            super();
+        }
+
+        List<TextLineInfo> linesFor(int index) {
+            return byPage.getOrDefault(index, List.of());
+        }
+
+        List<MarkableOp> opsFor(int index) {
+            return opsByPage.getOrDefault(index, List.of());
+        }
+
+        boolean preMarkedOn(int index) {
+            return preMarkedByPage.getOrDefault(index, false);
+        }
+
+        boolean textSemanticsOn(int index) {
+            return textSemanticsByPage.getOrDefault(index, false);
+        }
+
+        @Override
+        protected void startPage(PDPage page) throws IOException {
+            ordinal = -1;
+            markedDepth = 0;
+            nestedDepth = 0;
+            syntheticDepth = 0;
+            pathBox = BBox.EMPTY;
+            origins.clear();
+            lineBuffer.clear();
+            lineWords.clear();
+            lineText.setLength(0);
+            // Dir-adjusted glyph coordinates live in the rotated frame, so the flip must too.
+            pageHeight = normalisedBox(page).height();
+            pageIndex = getCurrentPageNo() - 1;
+            super.startPage(page);
+        }
+
+        @Override
+        protected void endPage(PDPage page) throws IOException {
+            flushLine();
+            super.endPage(page);
+        }
+
+        /**
+         * Counts only operators physically present in the page's own stream: PDFBox re-enters here
+         * with synthetic calls for {@code '} and {@code "}, and descends into form XObjects.
+         */
+        @Override
+        protected void processOperator(Operator operator, List<COSBase> operands)
+                throws IOException {
+            String name = operator.getName();
+            if (nestedDepth == 0 && syntheticDepth == 0) {
+                if (isPathConstruction(name)) {
+                    pathBox =
+                            extendPath(
+                                    pathBox,
+                                    name,
+                                    operands,
+                                    getGraphicsState().getCurrentTransformationMatrix());
+                }
+                if (MarkableOp.isMarkableOperator(name)) {
+                    ordinal++;
+                    // Classified here rather than in a second parse of the same stream: the engine
+                    // already has the operands and the live transformation matrix.
+                    opsByPage
+                            .computeIfAbsent(pageIndex, k -> new ArrayList<>())
+                            .add(
+                                    classify(
+                                            name,
+                                            operands,
+                                            getResources(),
+                                            getGraphicsState().getCurrentTransformationMatrix(),
+                                            pathBox,
+                                            ordinal));
+                    if (MarkableOp.isPathPainting(name)) {
+                        pathBox = BBox.EMPTY;
+                    }
+                } else if ("n".equals(name)) {
+                    pathBox = BBox.EMPTY;
+                } else if ("BDC".equals(name) || "BMC".equals(name)) {
+                    markedDepth++;
+                    preMarkedByPage.put(pageIndex, true);
+                    if (carriesTextSemantics(operands)) {
+                        textSemanticsByPage.put(pageIndex, true);
+                    }
+                } else if ("EMC".equals(name) && markedDepth > 0) {
+                    markedDepth--;
+                }
+            }
+            boolean synthesises = "'".equals(name) || "\"".equals(name);
+            if (synthesises) {
+                syntheticDepth++;
+            }
+            try {
+                super.processOperator(operator, operands);
+            } finally {
+                if (synthesises) {
+                    syntheticDepth--;
+                }
+            }
+        }
+
+        @Override
+        public void showForm(PDFormXObject form) throws IOException {
+            nestedDepth++;
+            try {
+                super.showForm(form);
+            } finally {
+                nestedDepth--;
+            }
+        }
+
+        @Override
+        public void showTransparencyGroup(PDTransparencyGroup group) throws IOException {
+            nestedDepth++;
+            try {
+                super.showTransparencyGroup(group);
+            } finally {
+                nestedDepth--;
+            }
+        }
+
+        @Override
+        protected void showType3Glyph(
+                Matrix textRenderingMatrix,
+                PDType3Font font,
+                int code,
+                org.apache.pdfbox.util.Vector displacement)
+                throws IOException {
+            nestedDepth++;
+            try {
+                super.showType3Glyph(textRenderingMatrix, font, code, displacement);
+            } finally {
+                nestedDepth--;
+            }
+        }
+
+        @Override
+        protected void processChildStream(
+                org.apache.pdfbox.contentstream.PDContentStream contentStream, PDPage page)
+                throws IOException {
+            nestedDepth++;
+            try {
+                super.processChildStream(contentStream, page);
+            } finally {
+                nestedDepth--;
+            }
+        }
+
+        @Override
+        protected void processTextPosition(TextPosition text) {
+            origins.put(text, new GlyphOrigin(ordinal, markedDepth > 0));
+            super.processTextPosition(text);
+        }
+
+        @Override
+        protected void writeString(String text, List<TextPosition> positions) {
+            lineText.append(text);
+            lineBuffer.addAll(positions);
+            WordInfo word = buildWord(text, positions);
+            if (word != null) {
+                lineWords.add(word);
+            }
+        }
+
+        private WordInfo buildWord(String text, List<TextPosition> positions) {
+            if (text == null || text.isBlank() || positions.isEmpty()) {
+                return null;
+            }
+            Bounds bounds = new Bounds();
+            for (TextPosition tp : positions) {
+                bounds.accept(tp, pageHeight, origins.get(tp));
+            }
+            if (bounds.end < 0) {
+                return null;
+            }
+            return new WordInfo(
+                    text,
+                    bounds.box(),
+                    bounds.start,
+                    bounds.end,
+                    bounds.dominantSize(),
+                    bounds.bold);
+        }
+
+        @Override
+        protected void writeWordSeparator() {
+            lineText.append(' ');
+        }
+
+        @Override
+        protected void writeLineSeparator() {
+            flushLine();
+        }
+
+        @Override
+        protected void writeParagraphSeparator() {
+            flushLine();
+        }
+
+        private void flushLine() {
+            if (lineBuffer.isEmpty()) {
+                lineText.setLength(0);
+                lineWords.clear();
+                return;
+            }
+            TextLineInfo line = buildLine();
+            lineBuffer.clear();
+            lineWords.clear();
+            lineText.setLength(0);
+            if (line != null) {
+                byPage.computeIfAbsent(pageIndex, k -> new ArrayList<>()).add(line);
+            }
+        }
+
+        private TextLineInfo buildLine() {
+            String text = lineText.toString();
+            if (text.isBlank()) {
+                return null;
+            }
+            Bounds bounds = new Bounds();
+            for (TextPosition tp : lineBuffer) {
+                bounds.accept(tp, pageHeight, origins.get(tp));
+            }
+            if (bounds.end < 0) {
+                return null;
+            }
+            return new TextLineInfo(
+                    pageIndex,
+                    text,
+                    bounds.box(),
+                    bounds.dominantSize(),
+                    bounds.bold,
+                    bounds.start,
+                    bounds.end,
+                    bounds.marked,
+                    List.copyOf(lineWords));
+        }
+    }
+
+    /** Accumulates glyph geometry, ordinals and font signals for a word or a line. */
+    private static final class Bounds {
+        private float minX = Float.MAX_VALUE;
+        private float maxX = -Float.MAX_VALUE;
+        private float minY = Float.MAX_VALUE;
+        private float maxY = -Float.MAX_VALUE;
+        private int start = Integer.MAX_VALUE;
+        private int end = -1;
+        private boolean marked;
+        private boolean bold;
+        private final Map<Float, Integer> sizeCounts = new HashMap<>();
+
+        void accept(TextPosition tp, float pageHeight, GlyphOrigin origin) {
+            float top = pageHeight - tp.getYDirAdj();
+            float bottom = top - Math.max(tp.getHeightDir(), 0);
+            minX = Math.min(minX, tp.getXDirAdj());
+            maxX = Math.max(maxX, tp.getXDirAdj() + tp.getWidthDirAdj());
+            minY = Math.min(minY, bottom);
+            maxY = Math.max(maxY, top);
+
+            if (origin != null) {
+                start = Math.min(start, origin.ordinal());
+                end = Math.max(end, origin.ordinal());
+                marked |= origin.marked();
+            }
+            float size = tp.getFontSizeInPt();
+            if (size > MIN_FONT_SIZE) {
+                sizeCounts.merge(round(size), 1, Integer::sum);
+            }
+            bold |= isBold(tp);
+        }
+
+        BBox box() {
+            return new BBox(minX, minY, maxX, maxY);
+        }
+
+        float dominantSize() {
+            return sizeCounts.entrySet().stream()
+                    .max(Map.Entry.comparingByValue())
+                    .map(Map.Entry::getKey)
+                    .orElse(0f);
+        }
+
+        private static float round(float value) {
+            return Math.round(value * 10f) / 10f;
+        }
+
+        private static boolean isBold(TextPosition tp) {
+            if (tp.getFont() == null) {
+                return false;
+            }
+            String name = tp.getFont().getName();
+            if (name != null && name.toLowerCase().contains("bold")) {
+                return true;
+            }
+            PDFontDescriptor descriptor = tp.getFont().getFontDescriptor();
+            return descriptor != null
+                    && (descriptor.getFontWeight() >= 600 || descriptor.isForceBold());
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggingOptions.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggingOptions.java
new file mode 100644
index 0000000000..bba15ed09f
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggingOptions.java
@@ -0,0 +1,63 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.Map;
+
+import lombok.Builder;
+import lombok.Getter;
+
+/** Inputs that change how a document is tagged. */
+@Getter
+@Builder(toBuilder = true)
+public class TaggingOptions {
+
+    /** What to do when the source already has a structure tree. */
+    public enum ExistingTags {
+        /** Leave the tree alone and fix only document-level requirements. */
+        KEEP,
+        /** Discard the tree and derive a new one. */
+        REBUILD,
+        /** Keep a usable tree, rebuild an empty or trivially broken one. */
+        AUTO
+    }
+
+    /** How images with no alternative description are handled. */
+    public enum FigurePolicy {
+        /** Leave undescribed so validation fails honestly; a faked {@code /Alt} helps nobody. */
+        REQUIRE_ALT,
+        /** Treat every image as decoration and mark it as an artifact. */
+        MARK_DECORATIVE
+    }
+
+    @Builder.Default private PdfUaProfile profile = PdfUaProfile.UA1;
+
+    /** BCP-47 language tag for the document, for example {@code en-GB}. */
+    private String language;
+
+    /** Replace a language the document already declares. Off, so a French file stays French. */
+    @Builder.Default private boolean overrideLanguage = false;
+
+    private String title;
+
+    /** Last resort when no title is given and none can be derived; pass the uploaded filename. */
+    private String fallbackTitle;
+
+    /** Embed any font the document references but does not carry, which clause 7.21 requires. */
+    @Builder.Default private boolean embedFonts = true;
+
+    /** Leave the PDF version alone; raising it would break PDF/A-1, defined on PDF 1.4. */
+    @Builder.Default private boolean preservePdfVersion = false;
+
+    @Builder.Default private ExistingTags existingTags = ExistingTags.AUTO;
+
+    @Builder.Default private FigurePolicy figurePolicy = FigurePolicy.REQUIRE_ALT;
+
+    /** Alternative descriptions supplied by the caller, keyed by "pageIndex:ordinal". */
+    @Builder.Default private Map<String, String> altTextByFigure = Map.of();
+
+    /** What the document said before font embedding rewrote it; see {@link SourceFacts}. */
+    @Builder.Default private SourceFacts sourceFacts = SourceFacts.NONE;
+
+    public String altTextFor(int pageIndex, int ordinal) {
+        return altTextByFigure.get(pageIndex + ":" + ordinal);
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggingResult.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggingResult.java
new file mode 100644
index 0000000000..d54fad5de8
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TaggingResult.java
@@ -0,0 +1,42 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.ArrayList;
+import java.util.List;
+
+import lombok.Getter;
+
+/** What a tagging run produced, for the conversion report. */
+@Getter
+public class TaggingResult {
+
+    private final List<String> warnings = new ArrayList<>();
+    private final DocumentStructure structure;
+    private final boolean rebuilt;
+    private final int taggedElements;
+    private final int artifacts;
+    private final int figuresNeedingAlt;
+
+    /** True when text was hidden as artifacts; the caller must not declare conformance. */
+    private final boolean contentSuppressed;
+
+    public TaggingResult(DocumentStructure structure, boolean rebuilt) {
+        this.structure = structure;
+        this.rebuilt = rebuilt;
+        this.warnings.addAll(structure.getWarnings());
+        int[] elements = {0};
+        structure.visit(
+                block -> {
+                    if (!block.isArtifact()) {
+                        elements[0]++;
+                    }
+                });
+        this.taggedElements = elements[0];
+        this.artifacts = structure.artifactCount();
+        this.figuresNeedingAlt = structure.figuresWithoutAlt().size();
+        this.contentSuppressed = structure.isTextSuppressed();
+    }
+
+    public boolean needsHumanReview() {
+        return figuresNeedingAlt > 0 || !warnings.isEmpty();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TextLineInfo.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TextLineInfo.java
new file mode 100644
index 0000000000..67f37d1c8d
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/TextLineInfo.java
@@ -0,0 +1,42 @@
+package stirling.software.proprietary.pdf.ua;
+
+import java.util.List;
+
+/**
+ * A run of text on one baseline, with the operator ordinals that produced it. {@code preMarked}
+ * means the source stream already wrapped this text in BDC/EMC.
+ */
+public record TextLineInfo(
+        int pageIndex,
+        String text,
+        BBox bbox,
+        float dominantFontSize,
+        boolean bold,
+        int startOrdinal,
+        int endOrdinal,
+        boolean preMarked,
+        List<WordInfo> words) {
+
+    public boolean isBlank() {
+        return text == null || text.isBlank();
+    }
+
+    public int charCount() {
+        return text == null ? 0 : text.strip().length();
+    }
+
+    public int wordCount() {
+        return (int) words.stream().filter(w -> !w.isBlank()).count();
+    }
+
+    /** True when every word occupies its own operator run, so cells can be tagged separately. */
+    public boolean wordsAreSeparable() {
+        List<WordInfo> real = words.stream().filter(w -> !w.isBlank()).toList();
+        for (int i = 1; i < real.size(); i++) {
+            if (!real.get(i - 1).isSeparableFrom(real.get(i))) {
+                return false;
+            }
+        }
+        return true;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/WordInfo.java b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/WordInfo.java
new file mode 100644
index 0000000000..515775b6f8
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/pdf/ua/WordInfo.java
@@ -0,0 +1,18 @@
+package stirling.software.proprietary.pdf.ua;
+
+/**
+ * A whitespace-delimited run of glyphs, with the operator ordinals that produced it. Cell detection
+ * needs both: geometry to find cells, ordinals to tell whether they can be tagged separately.
+ */
+public record WordInfo(
+        String text, BBox bbox, int startOrdinal, int endOrdinal, float fontSize, boolean bold) {
+
+    public boolean isBlank() {
+        return text == null || text.isBlank();
+    }
+
+    /** True when this word shares no operator with the other, so both can carry their own MCID. */
+    public boolean isSeparableFrom(WordInfo other) {
+        return endOrdinal < other.startOrdinal || other.endOrdinal < startOrdinal;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthority.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthority.java
index a49c8e5aa9..6d8229aa26 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthority.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthority.java
@@ -26,6 +26,11 @@ public class AdminPolicyManagementAuthority implements PolicyManagementAuthority
         return userService.isCurrentUserAdmin();
     }
 
+    @Override
+    public boolean canTriggerPolicies() {
+        return userService.isCurrentUserAdmin();
+    }
+
     @Override
     public Long currentUserTeamId() {
         String username = userService.getCurrentUsername();
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/PolicyManagementAuthority.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/PolicyManagementAuthority.java
index 0ea3c298ad..d7e4f50ad1 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/PolicyManagementAuthority.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/config/PolicyManagementAuthority.java
@@ -12,6 +12,17 @@ public interface PolicyManagementAuthority {
     /** Whether the current user may create, edit, or delete policies (for their own team). */
     boolean canEditPolicies();
 
+    /**
+     * Whether the current user may run a policy against its <em>configured sources</em> (the manual
+     * "run now" sweep). Kept separate from {@link #canEditPolicies()} because the two are distinct
+     * capabilities, even where a deployment grants both to the same people: a sweep operates on the
+     * team's configured sources using the server's stored connection credentials, which makes it a
+     * policy-management capability rather than ordinary use. Running a policy over the caller's
+     * <em>own</em> uploaded files is not covered by this and stays open to every team member — that
+     * is ordinary editor enforcement.
+     */
+    boolean canTriggerPolicies();
+
     /**
      * The team that scopes the current user's policies — the team a new policy is stamped with and
      * the only team whose policies the user may see/run/edit. {@code null} when it can't be
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
index 506bb75578..5a5a3018b1 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyController.java
@@ -21,6 +21,7 @@ import org.springframework.web.bind.annotation.PostMapping;
 import org.springframework.web.bind.annotation.PutMapping;
 import org.springframework.web.bind.annotation.RequestBody;
 import org.springframework.web.bind.annotation.RequestMapping;
+import org.springframework.web.bind.annotation.RequestParam;
 import org.springframework.web.bind.annotation.RequestPart;
 import org.springframework.web.bind.annotation.RestController;
 import org.springframework.web.context.request.RequestContextHolder;
@@ -51,6 +52,7 @@ import stirling.software.common.util.TempFile;
 import stirling.software.common.util.TempFileManager;
 import stirling.software.proprietary.audit.AuditContext;
 import stirling.software.proprietary.policy.asset.PolicyAssetCleaner;
+import stirling.software.proprietary.policy.asset.PolicyAssetResolver;
 import stirling.software.proprietary.policy.config.PolicyAccessGuard;
 import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
 import stirling.software.proprietary.policy.engine.PolicyRunHandle;
@@ -106,6 +108,7 @@ public class PolicyController {
     private final PolicyTriggerManager policyTriggerManager;
     private final PolicyOverviewService policyOverviewService;
     private final PolicyAssetCleaner assetCleaner;
+    private final PolicyAssetResolver assetResolver;
     private final ProcessedLedger processedLedger;
     private final List<PolicyTrigger> policyTriggers;
     private final ApplicationProperties applicationProperties;
@@ -125,12 +128,13 @@ public class PolicyController {
                             + " endpoint and download outputs via /api/v1/general/files/{id}.")
     public ResponseEntity<JobResponse<Void>> run(
             @RequestPart("json") PipelineDefinition definition,
+            @RequestParam(value = "policyId", required = false) String policyId,
             @Valid @ModelAttribute PolicyRunFiles files)
             throws IOException {
         stampPolicyAudit(definition);
         requireRunnable(definition);
         validateAdHocRun(definition);
-        PolicyInputs inputs = toInputs(files);
+        PolicyInputs inputs = resolveStoredAssets(policyId, toInputs(files));
         PolicyRunHandle handle =
                 policyRunner.runAdHoc(definition, inputs, PolicyProgressListener.NOOP);
         recordEditorDocs(inputs);
@@ -146,12 +150,13 @@ public class PolicyController {
                             + " 'cancelled', or 'waiting' event carrying the final run view.")
     public SseEmitter runStream(
             @RequestPart("json") PipelineDefinition definition,
+            @RequestParam(value = "policyId", required = false) String policyId,
             @Valid @ModelAttribute PolicyRunFiles files)
             throws IOException {
         stampPolicyAudit(definition);
         requireRunnable(definition);
         validateAdHocRun(definition);
-        PolicyInputs inputs = toInputs(files);
+        PolicyInputs inputs = resolveStoredAssets(policyId, toInputs(files));
 
         SseEmitter emitter =
                 new SseEmitter(applicationProperties.getPolicies().getStreamTimeoutMs());
@@ -432,21 +437,47 @@ public class PolicyController {
      * admin gets no say on SaaS. Team scoping (which team's policies) is enforced separately by
      * {@link PolicyAccessGuard}. Every mutation routes through {@link #savePolicy} (pause/resume
      * re-save with a flipped {@code enabled} flag) or {@link #deletePolicy}, so gating those two
-     * covers them all; runs ({@code /run}) stay open to the team. Single-user deployments (login
-     * disabled) have no such role, so they trust the local operator. The path allowlist for folder
-     * sources/outputs is enforced separately by {@link PolicyValidator} at validation time.
+     * covers them all; runs over the caller's own files ({@code /{id}/run}) stay open to the team,
+     * while source sweeps are gated by {@link #requirePolicySweepAllowed}. Single-user deployments
+     * (login disabled) have no such role, so they trust the local operator. The path allowlist for
+     * folder sources/outputs is enforced separately by {@link PolicyValidator} at validation time.
      */
     private void requirePolicyEditingAllowed() {
-        if (!applicationProperties.getSecurity().isEnableLogin()) {
-            return;
-        }
-        if (!policyManagementAuthority.canEditPolicies()) {
+        if (!policyEditingAllowed()) {
             throw new ResponseStatusException(
                     HttpStatus.FORBIDDEN,
                     "Policies may only be created or modified by a team leader");
         }
     }
 
+    /**
+     * Sweeping a policy's configured sources requires the same role as managing policies: the sweep
+     * operates on the team's configured sources using the server's stored connection credentials,
+     * which makes it a policy-management capability rather than ordinary use, and team scoping on
+     * its own does not express that. Deliberately narrower than it looks: it gates only the sweep,
+     * not {@link #runStoredPolicy}, because running a policy over documents the caller supplied is
+     * ordinary editor enforcement that every member performs on upload and export.
+     */
+    private void requirePolicySweepAllowed() {
+        if (!applicationProperties.getSecurity().isEnableLogin()) {
+            return;
+        }
+        if (!policyManagementAuthority.canTriggerPolicies()) {
+            throw new ResponseStatusException(
+                    HttpStatus.FORBIDDEN,
+                    "Not permitted to run this policy against its configured sources");
+        }
+    }
+
+    /**
+     * Whether the caller may create/modify policies (a team leader, or any operator when login is
+     * off).
+     */
+    private boolean policyEditingAllowed() {
+        return !applicationProperties.getSecurity().isEnableLogin()
+                || policyManagementAuthority.canEditPolicies();
+    }
+
     @GetMapping
     @Operation(
             summary = "List policies",
@@ -545,7 +576,9 @@ public class PolicyController {
                             + " under 'fileInput', supporting files under 'assets[i].key' /"
                             + " 'assets[i].file' - only for bindings the policy does not already"
                             + " store). Runs regardless of the policy's enabled flag, which only"
-                            + " gates automatic triggering. Returns a run id.")
+                            + " gates automatic triggering. A single-document run may also send its"
+                            + " own opaque 'fileId', which is recorded against any failure so the"
+                            + " caller can resolve it back to that document. Returns a run id.")
     public ResponseEntity<JobResponse<Void>> runStoredPolicy(
             @PathVariable String policyId, @Valid @ModelAttribute PolicyRunFiles files)
             throws IOException {
@@ -559,7 +592,14 @@ public class PolicyController {
                                                 HttpStatus.NOT_FOUND, "No policy: " + policyId));
         stampPolicyAudit(policy.toDefinition());
         PolicyInputs inputs = toInputs(files);
-        String runId = policyRunner.runWith(policy, inputs, PolicyProgressListener.NOOP).runId();
+        String runId =
+                policyRunner
+                        .runWith(
+                                policy,
+                                inputs,
+                                PolicyProgressListener.NOOP,
+                                documentReferenceFor(files, inputs))
+                        .runId();
         return ResponseEntity.accepted().body(new JobResponse<>(true, runId, null));
     }
 
@@ -571,8 +611,10 @@ public class PolicyController {
                             + " the enabled flag (which only gates automatic triggering). Returns"
                             + " the ids of the runs started (poll the run-status endpoint for each)"
                             + " plus what the sweep skipped - already-processed, parked-by-failure,"
-                            + " and in-flight counts - so an empty result explains itself.")
+                            + " and in-flight counts - so an empty result explains itself. Requires"
+                            + " the policy-management role.")
     public ResponseEntity<SweepOutcome> trigger(@PathVariable String policyId) {
+        requirePolicySweepAllowed();
         Policy policy =
                 policyStore
                         .get(policyId)
@@ -650,6 +692,25 @@ public class PolicyController {
                 inputs.primary().size());
     }
 
+    /**
+     * Resolve a test run's stored {@code asset:<id>} bindings from the saved policy the builder is
+     * editing, so their bytes need not be re-uploaded. Scoped to that policy (the resolver loads
+     * only the assets it references, in its own team) and gated to policy editors - the same
+     * authority that can read asset bytes - so a member can't rebind a policy's stored asset into
+     * an ad-hoc step to read it back. A blank id (an unsaved pipeline has no stored bindings) or an
+     * inaccessible policy leaves the run-supplied inputs untouched.
+     */
+    private PolicyInputs resolveStoredAssets(String policyId, PolicyInputs inputs) {
+        if (policyId == null || policyId.isBlank() || !policyEditingAllowed()) {
+            return inputs;
+        }
+        return policyStore
+                .get(policyId)
+                .filter(policyAccessGuard::canAccess)
+                .map(policy -> assetResolver.resolve(policy, inputs))
+                .orElse(inputs);
+    }
+
     /**
      * Turn the typed run files into engine {@link PolicyInputs}: the primary documents plus the
      * named supporting-file store, where each asset's {@code key} is the name a step references
@@ -670,6 +731,19 @@ public class PolicyController {
         return new PolicyInputs(primary, supportingFiles);
     }
 
+    /**
+     * Only for a single-document run: an incident holds one file reference, so naming one of
+     * several would attribute the failure to whichever bound first. Counted off resolved inputs,
+     * not parts.
+     */
+    private static String documentReferenceFor(PolicyRunFiles files, PolicyInputs inputs) {
+        String fileId = files.getFileId();
+        if (fileId == null || fileId.isBlank() || inputs.primary().size() != 1) {
+            return null;
+        }
+        return fileId;
+    }
+
     private PolicyProgressListener streamListener(SseEmitter emitter) {
         return new PolicyProgressListener() {
             @Override
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyRunFiles.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyRunFiles.java
index f42e02a07d..fd4a791c8b 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyRunFiles.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/controller/PolicyRunFiles.java
@@ -16,8 +16,8 @@ import lombok.Data;
  * from the multipart request via {@code @ModelAttribute}; the pipeline definition itself travels as
  * a separate typed {@code json} part.
  *
- * <p>Wire form: {@code fileInput} (repeated) for primaries, and {@code assets[i].key} / {@code
- * assets[i].file} for each supporting asset.
+ * <p>Wire form: {@code fileInput} (repeated) for primaries, {@code assets[i].key} / {@code
+ * assets[i].file} for each supporting asset, and the optional {@code fileId}.
  */
 @Data
 @Schema(description = "Files for a policy run: primary documents plus keyed supporting assets")
@@ -29,4 +29,16 @@ public class PolicyRunFiles {
     @Valid
     @Schema(description = "Supporting files, each bound to the asset key its step references")
     private List<NamedAsset> assets = new ArrayList<>();
+
+    /**
+     * Recorded against any failure of this run, so the client can resolve the row back to its
+     * document. Opaque by contract, never a name, and only honoured for a single-document run.
+     */
+    @Schema(
+            description =
+                    "The caller's opaque id for the document being run, echoed onto any failure"
+                            + " recorded for this run so the originating client can resolve it."
+                            + " Ignored unless exactly one primary document is supplied. Never a"
+                            + " filename.")
+    private String fileId;
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java
index a58670ac25..f9c0f719ef 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyEngine.java
@@ -130,25 +130,36 @@ public class PolicyEngine {
         // worker.
         String principal = currentActingPrincipal();
         return submitForPrincipal(
-                principal, principal, policyId, definition, inputs, null, listener);
+                principal,
+                principal,
+                principal,
+                policyId,
+                definition,
+                inputs,
+                listener,
+                null,
+                null);
     }
 
     /** Run a stored policy on demand. {@code enabled} gates triggers, not explicit runs. */
     public PolicyRunHandle runPolicy(
             Policy policy, PolicyInputs inputs, PolicyProgressListener listener) {
-        return runPolicy(policy, inputs, null, listener);
+        return runPolicy(policy, inputs, listener, null, null);
     }
 
     /**
-     * As {@link #runPolicy(Policy, PolicyInputs, PolicyProgressListener)}, with the source's opaque
-     * reference to the document being run. Carried so a failure can say which document it was
-     * about, and so the same document failing again folds into one incident.
+     * As {@link #runPolicy(Policy, PolicyInputs, PolicyProgressListener)}, recording which source
+     * fed the run and its opaque reference to the document. The first says where an unattended
+     * failure came from; the second says which document, and is what lets the same document failing
+     * again fold into one incident. With no source {@code fileIdentity} is the client's own
+     * reference, with one it is that source's hash; this engine only carries it either way.
      */
     public PolicyRunHandle runPolicy(
             Policy policy,
             PolicyInputs inputs,
-            String fileIdentity,
-            PolicyProgressListener listener) {
+            PolicyProgressListener listener,
+            String sourceId,
+            String fileIdentity) {
         // Bill the policy owner: trigger-fired runs have no security context, and the async worker
         // doesn't inherit the caller's, so the owner (stamped at policy creation) is the reliable
         // billing identity — and for org-wide policies the org/owner is meant to pay. But own the
@@ -156,6 +167,10 @@ public class PolicyEngine {
         // they can download their enforced file; otherwise an org-wide policy's output is owned by
         // the admin and the triggering user is denied it. Trigger-fired runs have no such user, so
         // the owner owns those outputs.
+        //
+        // The triggering user is also carried on the run, as the actor of any failure it records:
+        // null for a trigger-fired run, which is what makes an unattended incident ownerless rather
+        // than the owner's problem. Three identities, deliberately not interchangeable.
         String triggeringUser = currentActingPrincipal();
         String fileOwner = triggeringUser != null ? triggeringUser : policy.owner();
         // Stored supporting files (certificates, watermark images, ...) load here, before the
@@ -170,21 +185,27 @@ public class PolicyEngine {
         return submitForPrincipal(
                 policy.owner(),
                 fileOwner,
+                triggeringUser,
                 policy.id(),
                 definition,
+                // main's asset-resolved inputs, not the raw ones: stored certificates and watermark
+                // images bind here, before the async hop, because worker threads have no principal.
                 resolved,
-                fileIdentity,
-                listener);
+                listener,
+                sourceId,
+                fileIdentity);
     }
 
     private PolicyRunHandle submitForPrincipal(
             String billingPrincipal,
             String fileOwner,
+            String triggeringUser,
             String policyId,
             PipelineDefinition definition,
             PolicyInputs inputs,
-            String fileIdentity,
-            PolicyProgressListener listener) {
+            PolicyProgressListener listener,
+            String sourceId,
+            String fileIdentity) {
         // Scope the run id to the current user (this request thread) so the file-download
         // ownership check passes. No-op when security is off.
         String runId = jobOwnershipService.createScopedJobKey(UUID.randomUUID().toString());
@@ -193,7 +214,8 @@ public class PolicyEngine {
         if (policyId != null) {
             taskManager.putMetadata(runId, "policyId", policyId);
         }
-        PolicyRun run = new PolicyRun(runId, policyId, definition, fileIdentity);
+        PolicyRun run =
+                new PolicyRun(runId, policyId, definition, sourceId, fileIdentity, triggeringUser);
         registry.register(run);
         CompletableFuture<PolicyRun> completion = new CompletableFuture<>();
         PolicyProgressListener tracking = trackingListener(runId, run, listener);
@@ -358,8 +380,15 @@ public class PolicyEngine {
             taskManager.setError(run.getRunId(), message);
             // No exception to classify here: nothing was thrown by a tool, the run simply was not
             // admitted. Record it explicitly so a run lost to load pressure is still accounted for.
+            // Attributed like any other failure: a user whose run was refused is still the person
+            // holding that document, and an unattended sweep's run carries no triggering user.
             failureRecorder.recordRunFailureAs(
-                    FailureKind.UNKNOWN, run.getRunId(), run.getPolicyId(), null, message);
+                    FailureKind.UNKNOWN,
+                    run.getRunId(),
+                    run.getPolicyId(),
+                    run.getSourceId(),
+                    run.getTriggeringUser(),
+                    message);
             completion.complete(run);
         }
         return null;
@@ -368,13 +397,19 @@ public class PolicyEngine {
     /**
      * Record why a run failed. Called after the run's own state transition and task-manager update,
      * so a recording problem cannot change the outcome the caller observes.
+     *
+     * <p>The actor is the run's triggering user, not the MDC audit principal: that carries the
+     * BILLING identity, which for a stored policy is always its owner. Reading it here filed every
+     * failure under the owner — hiding an attended failure from the member who caused it and holds
+     * the document, and leaving an unattended sweep's failure looking attended.
      */
     private void recordFailure(PolicyRun run, String message, Throwable cause) {
         failureRecorder.recordRunFailure(
                 run.getRunId(),
                 run.getPolicyId(),
-                MDC.get(AUDIT_PRINCIPAL_MDC_KEY),
+                run.getSourceId(),
                 run.getFileIdentity(),
+                run.getTriggeringUser(),
                 message,
                 cause);
     }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java
index 04dda0871e..d159ebf012 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/engine/PolicyRunner.java
@@ -79,7 +79,8 @@ public class PolicyRunner {
             // Generator pipeline: one run with no input. Still fall through to the cleanup
             // below so rows recorded for its folder outputs are pruned like anything else,
             // instead of accumulating until the policy is deleted.
-            runIds.add(startRun(policy, PolicyInputs.of(List.of()), null, unused -> {}));
+            // Generator pipeline: no input, so neither a source nor a document to attribute to.
+            runIds.add(startRun(policy, null, null, PolicyInputs.of(List.of()), unused -> {}));
         }
         for (PipelineInput input : inputs) {
             String sourceId = input.sourceId();
@@ -119,10 +120,17 @@ public class PolicyRunner {
      * Run a stored policy on caller-supplied files (e.g. an editor upload), bypassing its sources.
      * The supplied documents are still counted against the virtual {@link EditorSource}, scoped to
      * the policy's team, so the Sources overview reports the whole team's editor throughput.
+     *
+     * @param documentReference the caller's own opaque reference to the single document it runs on,
+     *     or null when it supplied none or several. Passed through untouched.
      */
     public PolicyRunHandle runWith(
-            Policy policy, PolicyInputs inputs, PolicyProgressListener listener) {
-        PolicyRunHandle handle = policyEngine.runPolicy(policy, inputs, listener);
+            Policy policy,
+            PolicyInputs inputs,
+            PolicyProgressListener listener,
+            String documentReference) {
+        PolicyRunHandle handle =
+                policyEngine.runPolicy(policy, inputs, listener, null, documentReference);
         docCounter.record(EditorSource.counterKey(policy.teamId()), inputs.primary().size());
         return handle;
     }
@@ -167,7 +175,13 @@ public class PolicyRunner {
         List<String> runIds = new ArrayList<>();
         long docsFed = 0;
         for (ResolvedInput unit : work) {
-            runIds.add(startRun(policy, unit.inputs(), unit.fileIdentity(), unit.onComplete()));
+            runIds.add(
+                    startRun(
+                            policy,
+                            sourceId,
+                            unit.fileIdentity(),
+                            unit.inputs(),
+                            unit.onComplete()));
             docsFed += unit.inputs().primary().size();
         }
         docCounter.record(sourceId, docsFed);
@@ -175,10 +189,15 @@ public class PolicyRunner {
     }
 
     private String startRun(
-            Policy policy, PolicyInputs inputs, String fileIdentity, Consumer<Boolean> onComplete) {
+            Policy policy,
+            String sourceId,
+            String fileIdentity,
+            PolicyInputs inputs,
+            Consumer<Boolean> onComplete) {
         log.info("Running policy {} ({})", policy.id(), policy.name());
         PolicyRunHandle handle =
-                policyEngine.runPolicy(policy, inputs, fileIdentity, PolicyProgressListener.NOOP);
+                policyEngine.runPolicy(
+                        policy, inputs, PolicyProgressListener.NOOP, sourceId, fileIdentity);
         handle.completion()
                 .whenComplete((run, throwable) -> onComplete.accept(succeeded(run, throwable)));
         return handle.runId();
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java
index a3d43b712d..14b1eb325c 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/Policy.java
@@ -85,6 +85,11 @@ public record Policy(
         return new Policy(id, name, owner, enabled, inputs, steps, resolved, outputIds, teamId);
     }
 
+    /** A copy under a different owner (e.g. moving a seed off a placeholder name). */
+    public Policy withOwner(String newOwner) {
+        return new Policy(id, name, newOwner, enabled, inputs, steps, output, outputIds, teamId);
+    }
+
     /** A copy referencing the given saved output destinations. */
     public Policy withOutputIds(List<String> newOutputIds) {
         return new Policy(id, name, owner, enabled, inputs, steps, output, newOutputIds, teamId);
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyRun.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyRun.java
index 24a97f6c2a..8eb0cfcc73 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyRun.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/model/PolicyRun.java
@@ -21,6 +21,12 @@ public class PolicyRun {
     /** ID of the stored policy that produced this run; null for ad-hoc pipelines. */
     private final String policyId;
 
+    /**
+     * ID of the source the input came from (folder, S3, webhook), or null when a user supplied the
+     * files. Recorded on a failure so a reviewer can see where an unattended file came from.
+     */
+    private final String sourceId;
+
     private final PipelineDefinition definition;
 
     /**
@@ -29,6 +35,14 @@ public class PolicyRun {
      */
     private final String fileIdentity;
 
+    /**
+     * The user who triggered this run, or null when nothing attended it (a trigger-fired sweep).
+     * Recorded as a failure's actor, so an attended failure is handed to the person holding the
+     * document. Deliberately not the billing principal: a shared policy is billed to its owner, who
+     * may never have touched the file.
+     */
+    private final String triggeringUser;
+
     private final Instant createdAt = Instant.now();
 
     private volatile PolicyRunStatus status = PolicyRunStatus.PENDING;
@@ -56,12 +70,25 @@ public class PolicyRun {
     private volatile List<ResultFile> outputs = List.of();
     private volatile Instant updatedAt = Instant.now();
 
+    /**
+     * All three attribution references are required rather than defaulted: a run with none is a
+     * real case (an unattended sweep of a generator pipeline), but it should be stated at the call
+     * site. Overloads that omitted them would make losing the attribution the frictionless option,
+     * which is how {@code sourceId} and {@code fileIdentity} went unpopulated in the first place.
+     */
     public PolicyRun(
-            String runId, String policyId, PipelineDefinition definition, String fileIdentity) {
+            String runId,
+            String policyId,
+            PipelineDefinition definition,
+            String sourceId,
+            String fileIdentity,
+            String triggeringUser) {
         this.runId = runId;
         this.policyId = policyId;
+        this.sourceId = sourceId;
         this.definition = definition;
         this.fileIdentity = fileIdentity;
+        this.triggeringUser = triggeringUser;
     }
 
     public int stepCount() {
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java
index 5ecc29392d..d222e3be40 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/network/SftpFileClient.java
@@ -65,7 +65,7 @@ final class SftpFileClient implements RemoteFileClient {
             }
             Session session = jsch.getSession(config.username(), config.host(), config.port());
             if (config.password() != null) {
-                session.setPassword(config.password());
+                session.setPassword(config.password().getBytes(StandardCharsets.UTF_8));
             }
             if (config.hostKeyFingerprint() != null) {
                 // Pinned key: only the configured fingerprint is ever accepted.
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java
index 272917ec7f..b2be7b668e 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/overview/PolicyOverviewService.java
@@ -20,23 +20,28 @@ import stirling.software.proprietary.policy.source.SourceStore;
 import stirling.software.proprietary.policy.store.PolicyStore;
 
 /**
- * Builds the Pipelines overview: every policy the caller's team owns, each annotated with its
- * referenced sources (resolved to display names), its pipeline steps, and a trigger/output summary.
- * Source names are resolved from the team's sources in memory rather than persisted on the policy,
- * so the view always reflects the live source set. This is the "all pipelines" admin surface; the
- * user-facing Policies page builds only a friendly subset of the same backend policies.
+ * Builds the Pipelines overview: one row per policy the caller's team built on the Pipelines page,
+ * with its sources resolved to live display names, its steps, and a trigger/output summary.
+ * Frontend/catalogue policies (marked by a {@code categoryId} in their output options) belong to
+ * the user-facing Policies page and are excluded; a folder-watch trigger is not a signal.
  */
 @Service
 @RequiredArgsConstructor
 public class PolicyOverviewService {
 
+    // Output-options key marking a frontend/catalogue policy (set by the Policies page and seeder).
+    private static final String CATEGORY_OPTION = "categoryId";
+
     private final PolicyStore policyStore;
     private final SourceStore sourceStore;
     private final PolicyAccessGuard policyAccessGuard;
     private final SourceAccessGuard sourceAccessGuard;
 
     public PoliciesOverviewResponse overview() {
-        List<Policy> policies = policyAccessGuard.visibleFrom(policyStore);
+        List<Policy> policies =
+                policyAccessGuard.visibleFrom(policyStore).stream()
+                        .filter(PolicyOverviewService::isPipeline)
+                        .toList();
         Map<String, String> sourceNames = sourceNames();
 
         List<PolicyView> views =
@@ -50,6 +55,18 @@ public class PolicyOverviewService {
         return new PoliciesOverviewResponse(buildKpis(policies), views);
     }
 
+    private static boolean isPipeline(Policy policy) {
+        return !isCataloguePolicy(policy);
+    }
+
+    /** A frontend/catalogue policy, marked by a {@code categoryId} in its output options. */
+    private static boolean isCataloguePolicy(Policy policy) {
+        OutputSpec output = policy.output();
+        return output != null
+                && output.options().get(CATEGORY_OPTION) instanceof String category
+                && !category.isBlank();
+    }
+
     /** Display names for every source the caller's team can see, keyed by source id. */
     private Map<String, String> sourceNames() {
         Map<String, String> names = new HashMap<>();
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java b/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
index 63ebae833a..9b347366bc 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeeder.java
@@ -22,8 +22,8 @@ import stirling.software.proprietary.security.repository.TeamRepository;
 import stirling.software.proprietary.security.service.TeamService;
 
 /**
- * Seeds an enabled Classification policy per team so classification is on by default. Idempotent;
- * skips the internal team.
+ * Seeds an enabled Classification policy per team; idempotent, skips the internal team. Left
+ * unowned: nobody created it, and an owner here would have to name a real user.
  */
 @Slf4j
 @Component
@@ -34,6 +34,11 @@ public class DefaultClassificationPolicySeeder {
     private static final String CLASSIFY_ENDPOINT = "/api/v1/ai/tools/classify-and-label";
     private static final String POLICY_NAME = "Classification Policy";
 
+    /**
+     * Pre-existing seeds used this placeholder, which was never a user; see {@link #repairOwner}.
+     */
+    private static final String LEGACY_OWNER = "system";
+
     private final PolicyStore policyStore;
     private final TeamRepository teamRepository;
 
@@ -46,9 +51,8 @@ public class DefaultClassificationPolicySeeder {
                 .ifPresent(team -> seedIfMissing(team.getId(), team.getName()));
     }
 
-    // Any team created at runtime (admin-created, SaaS sign-ups). Seeds inside the team's own
-    // transaction: rollback still leaves no policy behind, and the store's pessimistic lock needs a
-    // live transaction, which AFTER_COMMIT cannot offer.
+    // Seeds inside the new team's own transaction: rollback leaves no policy behind, and the
+    // store's pessimistic lock needs a live transaction, which AFTER_COMMIT cannot offer.
     @TransactionalEventListener(phase = TransactionPhase.BEFORE_COMMIT)
     public void onTeamCreated(TeamCreatedEvent event) {
         seedIfMissing(event.teamId(), event.teamName());
@@ -58,16 +62,33 @@ public class DefaultClassificationPolicySeeder {
         if (teamId == null || TeamService.INTERNAL_TEAM_NAME.equals(teamName)) {
             return;
         }
-        boolean alreadySeeded =
+        Policy existing =
                 policyStore.findByTeam(teamId).stream()
-                        .anyMatch(DefaultClassificationPolicySeeder::isClassification);
-        if (alreadySeeded) {
+                        .filter(DefaultClassificationPolicySeeder::isClassification)
+                        .findFirst()
+                        .orElse(null);
+        if (existing != null) {
+            repairOwner(existing);
             return;
         }
         policyStore.save(defaultPolicy(teamId));
         log.info("Seeded default Classification policy for team {}", teamId);
     }
 
+    /**
+     * Clear an owner seeded as a placeholder name. An owner someone deliberately set is left alone.
+     */
+    private void repairOwner(Policy policy) {
+        if (!LEGACY_OWNER.equals(policy.owner())) {
+            return;
+        }
+        policyStore.save(policy.withOwner(null));
+        log.info(
+                "Cleared placeholder owner '{}' on Classification policy {}",
+                LEGACY_OWNER,
+                policy.id());
+    }
+
     private static boolean isClassification(Policy policy) {
         return policy.output() != null
                 && CATEGORY.equals(policy.output().options().get("categoryId"));
@@ -85,7 +106,9 @@ public class DefaultClassificationPolicySeeder {
         return new Policy(
                 null,
                 POLICY_NAME,
-                "system",
+                // Nobody created this - it is seeded. A name here would have to be a real user, and
+                // every consumer of owner already handles its absence.
+                null,
                 true,
                 List.of(),
                 List.of(new PipelineStep(CLASSIFY_ENDPOINT, Map.of())),
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/configuration/SecurityConfiguration.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/configuration/SecurityConfiguration.java
index eab9fc6fd0..9fc4428f73 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/configuration/SecurityConfiguration.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/configuration/SecurityConfiguration.java
@@ -213,7 +213,9 @@ public class SecurityConfiguration {
                         "X-Page-Number",
                         "X-Page-Size",
                         "Content-Disposition",
-                        "Content-Type"));
+                        "Content-Type",
+                        "X-Stirling-Skipped-Field-Edits",
+                        "X-Stirling-Skipped-Field-Edits-Total"));
 
         cfg.setAllowCredentials(true);
         cfg.setMaxAge(3600L);
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/model/PersistentLogin.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/model/PersistentLogin.java
index fe9c9f4209..312cddb662 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/model/PersistentLogin.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/model/PersistentLogin.java
@@ -1,17 +1,23 @@
 package stirling.software.proprietary.security.model;
 
 import java.time.Instant;
+import java.util.Objects;
+
+import org.hibernate.proxy.HibernateProxy;
 
 import jakarta.persistence.Column;
 import jakarta.persistence.Entity;
 import jakarta.persistence.Id;
 import jakarta.persistence.Table;
 
-import lombok.Data;
+import lombok.*;
 
 @Entity
 @Table(name = "persistent_logins")
-@Data
+@Getter
+@Setter
+@ToString(onlyExplicitlyIncluded = true)
+@NoArgsConstructor
 public class PersistentLogin {
 
     @Id
@@ -19,11 +25,40 @@ public class PersistentLogin {
     private String series;
 
     @Column(name = "username", length = 64, nullable = false)
+    @ToString.Include
     private String username;
 
     @Column(name = "token", length = 64, nullable = false)
     private String token;
 
     @Column(name = "last_used", nullable = false)
+    @ToString.Include
     private Instant lastUsed;
+
+    @Override
+    public final boolean equals(Object o) {
+        if (this == o) return true;
+        if (o == null) return false;
+        Class<?> oEffectiveClass =
+                o instanceof HibernateProxy
+                        ? ((HibernateProxy) o).getHibernateLazyInitializer().getPersistentClass()
+                        : o.getClass();
+        Class<?> thisEffectiveClass =
+                this instanceof HibernateProxy
+                        ? ((HibernateProxy) this).getHibernateLazyInitializer().getPersistentClass()
+                        : this.getClass();
+        if (thisEffectiveClass != oEffectiveClass) return false;
+        PersistentLogin that = (PersistentLogin) o;
+        return getSeries() != null && Objects.equals(getSeries(), that.getSeries());
+    }
+
+    @Override
+    public final int hashCode() {
+        return this instanceof HibernateProxy
+                ? ((HibernateProxy) this)
+                        .getHibernateLazyInitializer()
+                        .getPersistentClass()
+                        .hashCode()
+                : getClass().hashCode();
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/model/SessionEntity.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/model/SessionEntity.java
index 552d97d022..44b2153500 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/model/SessionEntity.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/model/SessionEntity.java
@@ -2,16 +2,22 @@ package stirling.software.proprietary.security.model;
 
 import java.io.Serializable;
 import java.time.Instant;
+import java.util.Objects;
+
+import org.hibernate.proxy.HibernateProxy;
 
 import jakarta.persistence.Entity;
 import jakarta.persistence.Id;
 import jakarta.persistence.Index;
 import jakarta.persistence.Table;
 
-import lombok.Data;
+import lombok.*;
 
 @Entity
-@Data
+@Getter
+@Setter
+@ToString
+@NoArgsConstructor
 @Table(
         name = "sessions",
         indexes = {
@@ -23,11 +29,42 @@ import lombok.Data;
             @Index(name = "idx_sessions_expired", columnList = "expired")
         })
 public class SessionEntity implements Serializable {
-    @Id private String sessionId;
+    @Id
+    @Setter(AccessLevel.NONE)
+    private String sessionId;
 
     private String principalName;
 
     private Instant lastRequest;
 
     private boolean expired;
+
+    public void setSessionId(String sessionId) {
+        if (this.sessionId != null && !this.sessionId.equals(sessionId)) {
+            throw new IllegalStateException("sessionId is immutable once set");
+        }
+        this.sessionId = sessionId;
+    }
+
+    @Override
+    public final boolean equals(Object o) {
+        if (this == o) return true;
+        if (o == null) return false;
+        Class<?> oEffectiveClass =
+                o instanceof HibernateProxy
+                        ? ((HibernateProxy) o).getHibernateLazyInitializer().getPersistentClass()
+                        : o.getClass();
+        Class<?> thisEffectiveClass =
+                this instanceof HibernateProxy
+                        ? ((HibernateProxy) this).getHibernateLazyInitializer().getPersistentClass()
+                        : this.getClass();
+        if (thisEffectiveClass != oEffectiveClass) return false;
+        SessionEntity that = (SessionEntity) o;
+        return getSessionId() != null && Objects.equals(getSessionId(), that.getSessionId());
+    }
+
+    @Override
+    public final int hashCode() {
+        return getSessionId() != null ? getSessionId().hashCode() : getClass().hashCode();
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/security/model/User.java b/app/proprietary/src/main/java/stirling/software/proprietary/security/model/User.java
index 32733f5fc5..9455ed6e4b 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/security/model/User.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/security/model/User.java
@@ -2,27 +2,19 @@ package stirling.software.proprietary.security.model;
 
 import java.io.Serializable;
 import java.time.LocalDateTime;
-import java.util.HashMap;
-import java.util.HashSet;
-import java.util.Locale;
-import java.util.Map;
-import java.util.Set;
-import java.util.UUID;
+import java.util.*;
 import java.util.stream.Collectors;
 
 import org.hibernate.annotations.CreationTimestamp;
 import org.hibernate.annotations.UpdateTimestamp;
+import org.hibernate.proxy.HibernateProxy;
 import org.springframework.security.core.userdetails.UserDetails;
 
 import com.fasterxml.jackson.annotation.JsonIgnore;
 
 import jakarta.persistence.*;
 
-import lombok.EqualsAndHashCode;
-import lombok.Getter;
-import lombok.NoArgsConstructor;
-import lombok.Setter;
-import lombok.ToString;
+import lombok.*;
 
 import stirling.software.common.model.enumeration.Role;
 import stirling.software.proprietary.model.Team;
@@ -35,7 +27,6 @@ import stirling.software.proprietary.model.Team;
 @NoArgsConstructor
 @Getter
 @Setter
-@EqualsAndHashCode(onlyExplicitlyIncluded = true)
 @ToString(onlyExplicitlyIncluded = true)
 public class User implements UserDetails, Serializable {
 
@@ -44,7 +35,6 @@ public class User implements UserDetails, Serializable {
     @Id
     @GeneratedValue(strategy = GenerationType.IDENTITY)
     @Column(name = "user_id")
-    @EqualsAndHashCode.Include
     private Long id;
 
     @Column(name = "username", unique = true)
@@ -181,4 +171,31 @@ public class User implements UserDetails, Serializable {
     public void setOauthGrandfathered(boolean oauthGrandfathered) {
         this.oauthGrandfathered = oauthGrandfathered;
     }
+
+    @Override
+    public final boolean equals(Object o) {
+        if (this == o) return true;
+        if (o == null) return false;
+        Class<?> oEffectiveClass =
+                o instanceof HibernateProxy
+                        ? ((HibernateProxy) o).getHibernateLazyInitializer().getPersistentClass()
+                        : o.getClass();
+        Class<?> thisEffectiveClass =
+                this instanceof HibernateProxy
+                        ? ((HibernateProxy) this).getHibernateLazyInitializer().getPersistentClass()
+                        : this.getClass();
+        if (thisEffectiveClass != oEffectiveClass) return false;
+        User user = (User) o;
+        return getId() != null && Objects.equals(getId(), user.getId());
+    }
+
+    @Override
+    public final int hashCode() {
+        return this instanceof HibernateProxy
+                ? ((HibernateProxy) this)
+                        .getHibernateLazyInitializer()
+                        .getPersistentClass()
+                        .hashCode()
+                : getClass().hashCode();
+    }
 }
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditCleanupService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditCleanupService.java
index 8a70a1b7a4..df1d762963 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditCleanupService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditCleanupService.java
@@ -5,13 +5,13 @@ import java.time.temporal.ChronoUnit;
 import java.util.List;
 import java.util.concurrent.TimeUnit;
 
+import org.springframework.beans.factory.annotation.Qualifier;
 import org.springframework.data.domain.PageRequest;
 import org.springframework.data.domain.Sort;
 import org.springframework.scheduling.annotation.Scheduled;
 import org.springframework.stereotype.Service;
 import org.springframework.transaction.annotation.Transactional;
 
-import lombok.RequiredArgsConstructor;
 import lombok.extern.slf4j.Slf4j;
 
 import stirling.software.proprietary.config.AuditConfigurationProperties;
@@ -20,15 +20,31 @@ import stirling.software.proprietary.repository.PersistentAuditEventRepository;
 /** Service to periodically clean up old audit events based on retention policy. */
 @Slf4j
 @Service
-@RequiredArgsConstructor
 public class AuditCleanupService {
 
     private final PersistentAuditEventRepository auditRepository;
     private final AuditConfigurationProperties auditConfig;
+    private final boolean runningEE;
 
     // Default batch size for deletions
     private static final int BATCH_SIZE = 10000;
 
+    /**
+     * Maximum audit retention on non-Enterprise instances. Audit events feed the Documents tab on
+     * every instance, but longer history is an Enterprise feature - so non-EE deployments keep a
+     * shorter window ("infinite" included), bounding the always-on trail off-license.
+     */
+    private static final int NON_EE_MAX_RETENTION_DAYS = 30;
+
+    public AuditCleanupService(
+            PersistentAuditEventRepository auditRepository,
+            AuditConfigurationProperties auditConfig,
+            @Qualifier("runningEE") boolean runningEE) {
+        this.auditRepository = auditRepository;
+        this.auditConfig = auditConfig;
+        this.runningEE = runningEE;
+    }
+
     /**
      * Scheduled task that runs daily to clean up old audit events. The retention period is
      * configurable in settings.yml.
@@ -39,7 +55,7 @@ public class AuditCleanupService {
             return;
         }
 
-        int retentionDays = auditConfig.getRetentionDays();
+        int retentionDays = effectiveRetentionDays();
         if (retentionDays <= 0) {
             return;
         }
@@ -58,6 +74,20 @@ public class AuditCleanupService {
         }
     }
 
+    /**
+     * The retention window actually applied. Enterprise uses the configured value (0 = infinite);
+     * non-Enterprise is clamped to {@link #NON_EE_MAX_RETENTION_DAYS}.
+     */
+    int effectiveRetentionDays() {
+        int configured = auditConfig.getRetentionDays();
+        if (runningEE) {
+            return configured;
+        }
+        return configured <= 0
+                ? NON_EE_MAX_RETENTION_DAYS
+                : Math.min(configured, NON_EE_MAX_RETENTION_DAYS);
+    }
+
     /**
      * Performs batch deletion of events to prevent long-running transactions and potential database
      * locks.
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditService.java
index 2fee8b5c7c..87fa165826 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditService.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/AuditService.java
@@ -87,10 +87,7 @@ public class AuditService {
      * @param level The minimum audit level required for this event to be logged
      */
     public void audit(AuditEventType type, Map<String, Object> data, AuditLevel level) {
-        // Skip auditing if this level is not enabled or if not Enterprise edition
-        if (!auditConfig.isEnabled()
-                || !auditConfig.getAuditLevel().includes(level)
-                || !runningEE) {
+        if (!shouldRecord(type, level)) {
             return;
         }
 
@@ -126,8 +123,7 @@ public class AuditService {
      */
     public void audit(
             String principal, AuditEventType type, Map<String, Object> data, AuditLevel level) {
-        // Skip auditing if this level is not enabled or if not Enterprise edition
-        if (!auditConfig.isLevelEnabled(level) || !runningEE) {
+        if (!shouldRecord(type, level)) {
             return;
         }
 
@@ -156,8 +152,7 @@ public class AuditService {
      * @param level The minimum audit level required for this event to be logged
      */
     public void audit(String type, Map<String, Object> data, AuditLevel level) {
-        // Skip auditing if this level is not enabled or if not Enterprise edition
-        if (!auditConfig.isLevelEnabled(level) || !runningEE) {
+        if (!shouldRecord(type, level)) {
             return;
         }
 
@@ -192,8 +187,7 @@ public class AuditService {
      * @param level The minimum audit level required for this event to be logged
      */
     public void audit(String principal, String type, Map<String, Object> data, AuditLevel level) {
-        // Skip auditing if this level is not enabled or if not Enterprise edition
-        if (!auditConfig.isLevelEnabled(level) || !runningEE) {
+        if (!shouldRecord(type, level)) {
             return;
         }
 
@@ -223,9 +217,7 @@ public class AuditService {
             AuditEventType type,
             Map<String, Object> data,
             AuditLevel level) {
-        if (!auditConfig.isEnabled()
-                || !auditConfig.getAuditLevel().includes(level)
-                || !runningEE) {
+        if (!shouldRecord(type, level)) {
             return;
         }
 
@@ -250,9 +242,7 @@ public class AuditService {
             String type,
             Map<String, Object> data,
             AuditLevel level) {
-        if (!auditConfig.isEnabled()
-                || !auditConfig.getAuditLevel().includes(level)
-                || !runningEE) {
+        if (!shouldRecord(type, level)) {
             return;
         }
 
@@ -626,6 +616,55 @@ public class AuditService {
         return auditConfig.getAuditLevel().includes(requiredLevel);
     }
 
+    /**
+     * Type-aware variant used by the controller aspect, which resolves the event type before
+     * deciding whether to record. Document-processing events feed the Documents tab (available to
+     * every Processor user), so they audit without an Enterprise license; the rest of the audit log
+     * stays Enterprise-only.
+     */
+    public boolean shouldAudit(
+            AuditEventType eventType, Method method, AuditConfigurationProperties auditConfig) {
+        if (!auditConfig.isEnabled() || !isLicensedToRecord(eventType)) {
+            return false;
+        }
+
+        Audited auditedAnnotation = method.getAnnotation(Audited.class);
+        AuditLevel requiredLevel =
+                (auditedAnnotation != null) ? auditedAnnotation.level() : AuditLevel.BASIC;
+
+        return auditConfig.getAuditLevel().includes(requiredLevel);
+    }
+
+    /**
+     * Whether an event of this type and level should be persisted: the configured audit level must
+     * include it and the current license must permit recording it.
+     */
+    private boolean shouldRecord(AuditEventType type, AuditLevel level) {
+        return auditConfig.isLevelEnabled(level) && isLicensedToRecord(type);
+    }
+
+    private boolean shouldRecord(String type, AuditLevel level) {
+        return auditConfig.isLevelEnabled(level) && isLicensedToRecord(type);
+    }
+
+    /**
+     * Whether the current license permits recording this event type. Enterprise records everything;
+     * without it only document-processing events (PDF_PROCESS, FILE_OPERATION) are captured,
+     * because they back the Documents tab that is open to every Processor user (still subject to
+     * audit being enabled at a level that includes them). Everything else stays Enterprise-only.
+     */
+    private boolean isLicensedToRecord(AuditEventType type) {
+        return runningEE
+                || type == AuditEventType.PDF_PROCESS
+                || type == AuditEventType.FILE_OPERATION;
+    }
+
+    private boolean isLicensedToRecord(String type) {
+        return runningEE
+                || AuditEventType.PDF_PROCESS.name().equals(type)
+                || AuditEventType.FILE_OPERATION.name().equals(type);
+    }
+
     /**
      * Add timing and response status data to the audit record
      *
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/AccessibilityAuditService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/AccessibilityAuditService.java
new file mode 100644
index 0000000000..869d489a04
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/AccessibilityAuditService.java
@@ -0,0 +1,187 @@
+package stirling.software.proprietary.service.ua;
+
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Set;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDDocumentCatalog;
+import org.apache.pdfbox.pdmodel.interactive.viewerpreferences.PDViewerPreferences;
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.util.ExceptionUtils;
+import stirling.software.proprietary.model.api.ua.AccessibilityIssue;
+import stirling.software.proprietary.model.api.ua.AccessibilityReport;
+import stirling.software.proprietary.model.api.ua.FigureDescriptor;
+import stirling.software.proprietary.model.api.ua.UaValidationResult;
+import stirling.software.proprietary.pdf.ua.BBox;
+import stirling.software.proprietary.pdf.ua.DocumentStructure;
+import stirling.software.proprietary.pdf.ua.LayoutAnalyzer;
+import stirling.software.proprietary.pdf.ua.PageContent;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.StructBlock;
+import stirling.software.proprietary.pdf.ua.StructType;
+import stirling.software.proprietary.pdf.ua.TaggedContentExtractor;
+
+/** Produces an accessibility report without changing the document. */
+@Service
+@Slf4j
+@RequiredArgsConstructor
+public class AccessibilityAuditService {
+
+    /** Checks no validator can make; omitting them implies the work does not exist. */
+    private static final List<String> HUMAN_CHECKS =
+            List.of(
+                    "Is the reading order correct for someone who cannot see the layout?",
+                    "Does each alternative description convey what the image is for, not just what"
+                            + " it looks like?",
+                    "Are headings used for structure rather than for visual emphasis?",
+                    "Is any information conveyed by colour alone also available another way?",
+                    "Do tables have headers that identify the right rows and columns?",
+                    "Is the document language correct, including for quoted passages?",
+                    "Do links describe their destination rather than saying 'click here'?");
+
+    /** The report walks every page and validates, so it carries the conversion's own caps. */
+    private static final long MAX_INPUT_BYTES = 100L * 1024 * 1024;
+
+    private static final int MAX_PAGES = 2000;
+
+    private final PdfUaValidationService validationService;
+
+    public AccessibilityReport audit(byte[] pdfBytes, PdfUaProfile profile) throws IOException {
+        enforceLimits(pdfBytes);
+        AccessibilityReport report = new AccessibilityReport();
+        report.setProfile(profile.displayName());
+
+        UaValidationResult validation = validationService.validate(pdfBytes, profile);
+        report.setIssues(validation.issues());
+        report.setPassesAutomatedChecks(validation.compliant());
+        report.setHumanChecks(HUMAN_CHECKS);
+
+        int fixable = 0;
+        int needsInput = 0;
+        for (AccessibilityIssue issue : validation.issues()) {
+            if (issue.isAutoFixable()) {
+                fixable++;
+            } else {
+                needsInput++;
+            }
+        }
+        report.setAutomaticallyFixable(fixable);
+        report.setNeedsInput(needsInput);
+
+        try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+            populateSummary(document, report);
+            report.setFiguresNeedingDescription(figuresNeedingDescription(document));
+        } catch (IOException e) {
+            log.debug("Could not inspect document for the summary: {}", e.getMessage());
+        }
+        return report;
+    }
+
+    /**
+     * Rejects before the expensive pass. An unreadable file is left to the report itself to say.
+     */
+    private static void enforceLimits(byte[] pdfBytes) {
+        if (pdfBytes.length > MAX_INPUT_BYTES) {
+            throw ExceptionUtils.createIllegalArgumentException(
+                    "error.fileTooLarge",
+                    "This PDF is {0} MB. The accessibility report is limited to {1} MB.",
+                    pdfBytes.length / (1024 * 1024),
+                    MAX_INPUT_BYTES / (1024 * 1024));
+        }
+        int pages;
+        try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+            pages = document.getNumberOfPages();
+        } catch (IOException e) {
+            return;
+        }
+        if (pages > MAX_PAGES) {
+            throw ExceptionUtils.createIllegalArgumentException(
+                    "error.tooManyPages",
+                    "This PDF has {0} pages. The accessibility report is limited to {1} pages;"
+                            + " split it first.",
+                    pages,
+                    MAX_PAGES);
+        }
+    }
+
+    private void populateSummary(PDDocument document, AccessibilityReport report)
+            throws IOException {
+        PDDocumentCatalog catalog = document.getDocumentCatalog();
+        AccessibilityReport.Summary summary = report.getSummary();
+
+        report.setTagged(catalog.getStructureTreeRoot() != null);
+        report.setDeclaresConformance(declaresUa(document));
+
+        summary.setPages(document.getNumberOfPages());
+        summary.setEncrypted(document.isEncrypted());
+        summary.setHasLanguage(catalog.getLanguage() != null && !catalog.getLanguage().isBlank());
+
+        String title = document.getDocumentInformation().getTitle();
+        summary.setHasTitle(title != null && !title.isBlank());
+
+        PDViewerPreferences preferences = catalog.getViewerPreferences();
+        summary.setDisplaysDocTitle(preferences != null && preferences.displayDocTitle());
+
+        Set<String> unembedded = FontEmbeddingService.findUnembeddedFonts(document);
+        summary.setUnembeddedFonts(unembedded.size());
+        summary.setAllFontsEmbedded(unembedded.isEmpty());
+
+        try {
+            summary.setFigures(new TaggedContentExtractor().countGraphics(document));
+        } catch (Exception e) {
+            log.debug("Could not count figures: {}", e.getMessage());
+        }
+    }
+
+    /**
+     * Lists the figures a conversion would leave undescribed, running the converter's own analysis
+     * because counting raster images would miss vector charts and existing descriptions.
+     */
+    private List<FigureDescriptor> figuresNeedingDescription(PDDocument document) {
+        try {
+            List<PageContent> pages = new TaggedContentExtractor().extract(document);
+            DocumentStructure structure = new LayoutAnalyzer().analyse(pages);
+            List<FigureDescriptor> figures = new ArrayList<>();
+            for (StructBlock block : structure.figuresWithoutAlt()) {
+                int ordinal = block.getRanges().isEmpty() ? -1 : block.getRanges().get(0).start();
+                BBox box = block.getBbox();
+                figures.add(
+                        new FigureDescriptor(
+                                block.getPageIndex() + ":" + ordinal,
+                                block.getPageIndex() + 1,
+                                block.getType() == StructType.FORMULA ? "formula" : "figure",
+                                box.x0(),
+                                box.y0(),
+                                box.width(),
+                                box.height(),
+                                block.getAlt()));
+            }
+            return figures;
+        } catch (Exception e) {
+            log.debug("Could not enumerate figures: {}", e.getMessage());
+            return List.of();
+        }
+    }
+
+    /** True when the XMP packet carries a pdfuaid identifier. */
+    private static boolean declaresUa(PDDocument document) {
+        try {
+            var metadata = document.getDocumentCatalog().getMetadata();
+            if (metadata == null) {
+                return false;
+            }
+            String xmp =
+                    new String(metadata.toByteArray(), java.nio.charset.StandardCharsets.UTF_8);
+            return xmp.contains("pdfuaid");
+        } catch (IOException e) {
+            return false;
+        }
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/FontEmbeddingService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/FontEmbeddingService.java
new file mode 100644
index 0000000000..9c38b54f6b
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/FontEmbeddingService.java
@@ -0,0 +1,254 @@
+package stirling.software.proprietary.service.ua;
+
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.HashSet;
+import java.util.List;
+import java.util.Set;
+import java.util.stream.Stream;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDResources;
+import org.apache.pdfbox.pdmodel.font.PDFont;
+import org.springframework.stereotype.Service;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.util.ProcessExecutor;
+import stirling.software.common.util.ProcessExecutor.ProcessExecutorResult;
+
+/**
+ * Embeds any font the document references but does not carry, as PDF/UA-1 clause 7.21 requires.
+ * Ghostscript does the embedding and discards the structure tree, so this must run before tagging.
+ */
+@Service
+@Slf4j
+public class FontEmbeddingService {
+
+    public boolean hasUnembeddedFonts(byte[] pdfBytes) {
+        try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+            return !findUnembeddedFonts(document).isEmpty();
+        } catch (IOException e) {
+            log.debug("Could not inspect fonts: {}", e.getMessage());
+            return false;
+        }
+    }
+
+    public static Set<String> findUnembeddedFonts(PDDocument document) {
+        Set<String> missing = new HashSet<>();
+        for (PDPage page : document.getPages()) {
+            PDResources resources = page.getResources();
+            if (resources == null) {
+                continue;
+            }
+            for (COSName name : resources.getFontNames()) {
+                try {
+                    PDFont font = resources.getFont(name);
+                    if (font != null && !font.isEmbedded()) {
+                        missing.add(font.getName());
+                    }
+                } catch (IOException e) {
+                    log.debug("Could not read font {}: {}", name.getName(), e.getMessage());
+                }
+            }
+        }
+        return missing;
+    }
+
+    /**
+     * Returns the document with all fonts embedded, or the input unchanged. Never throws: failing
+     * to embed is a reportable shortfall, not a reason to abandon the conversion.
+     */
+    public Result embedFonts(byte[] pdfBytes) {
+        Set<String> missing;
+        try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+            missing = findUnembeddedFonts(document);
+        } catch (IOException e) {
+            return new Result(
+                    pdfBytes, false, Set.of(), "Could not inspect fonts: " + e.getMessage());
+        }
+        if (missing.isEmpty()) {
+            return new Result(pdfBytes, false, Set.of(), null);
+        }
+        if (!isGhostscriptAvailable()) {
+            return new Result(
+                    pdfBytes,
+                    false,
+                    missing,
+                    "Ghostscript is not installed, so "
+                            + missing.size()
+                            + " unembedded font(s) could not be embedded. PDF/UA requires every font"
+                            + " to be embedded.");
+        }
+
+        Path workingDir = null;
+        try {
+            workingDir = Files.createTempDirectory("pdfua_fonts_");
+            Path input = workingDir.resolve("input.pdf");
+            Path output = workingDir.resolve("output.pdf");
+            Files.write(input, pdfBytes);
+
+            ProcessExecutorResult result =
+                    ProcessExecutor.getInstance(ProcessExecutor.Processes.GHOSTSCRIPT)
+                            .runCommandWithOutputHandling(command(input, output, workingDir));
+
+            if (result.getRc() != 0 || !Files.exists(output)) {
+                return new Result(
+                        pdfBytes,
+                        false,
+                        missing,
+                        "Font embedding failed with code " + result.getRc());
+            }
+            byte[] embedded = Files.readAllBytes(output);
+
+            // Ghostscript can exit 0 having written a blank page, so keep the original rather than
+            // return an empty document.
+            if (!survived(pdfBytes, embedded)) {
+                log.warn("Ghostscript produced a degenerate document; keeping the original");
+                return new Result(
+                        pdfBytes,
+                        false,
+                        missing,
+                        "Font embedding was skipped because the embedder returned a document that"
+                                + " had lost content. "
+                                + missing.size()
+                                + " font(s) remain unembedded.");
+            }
+
+            // It can also exit 0 while simply leaving fonts unembedded.
+            Set<String> remaining;
+            try (PDDocument check = Loader.loadPDF(embedded)) {
+                remaining = findUnembeddedFonts(check);
+            }
+            if (!remaining.isEmpty()) {
+                return new Result(
+                        embedded,
+                        true,
+                        remaining,
+                        remaining.size()
+                                + " font(s) could not be embedded ("
+                                + String.join(", ", remaining)
+                                + "). PDF/UA requires every font to be embedded.");
+            }
+            log.info("Embedded {} previously unembedded font(s)", missing.size());
+            return new Result(embedded, true, missing, null);
+
+        } catch (Exception e) {
+            log.warn("Font embedding failed: {}", e.getMessage());
+            return new Result(pdfBytes, false, missing, "Font embedding failed: " + e.getMessage());
+        } finally {
+            deleteQuietly(workingDir);
+        }
+    }
+
+    /**
+     * True when the rewritten document still holds the original's content. A collapse in page count
+     * or content-stream size is the only signature of a failed rewrite the exit code hides.
+     */
+    private static boolean survived(byte[] original, byte[] rewritten) {
+        try (PDDocument before = Loader.loadPDF(original);
+                PDDocument after = Loader.loadPDF(rewritten)) {
+            if (after.getNumberOfPages() != before.getNumberOfPages()) {
+                return false;
+            }
+            long beforeBytes = contentBytes(before);
+            long afterBytes = contentBytes(after);
+            if (beforeBytes == 0) {
+                return true;
+            }
+            return afterBytes * 20L >= beforeBytes;
+        } catch (IOException e) {
+            log.debug("Could not compare documents after embedding: {}", e.getMessage());
+            return false;
+        }
+    }
+
+    private static long contentBytes(PDDocument document) {
+        long total = 0;
+        for (PDPage page : document.getPages()) {
+            try (InputStream in = page.getContents()) {
+                if (in != null) {
+                    byte[] buffer = new byte[8192];
+                    int read;
+                    while ((read = in.read(buffer)) > 0) {
+                        total += read;
+                    }
+                }
+            } catch (IOException e) {
+                log.debug("Could not measure page content: {}", e.getMessage());
+            }
+        }
+        return total;
+    }
+
+    private static List<String> command(Path input, Path output, Path workingDir) {
+        List<String> command = new ArrayList<>();
+        command.add("gs");
+        command.add("--permit-file-read=" + workingDir.toAbsolutePath());
+        command.add("--permit-file-write=" + workingDir.toAbsolutePath());
+        command.add("-sDEVICE=pdfwrite");
+        command.add("-dEmbedAllFonts=true");
+        command.add("-dSubsetFonts=true");
+        command.add("-dCompressFonts=true");
+        command.add("-dNOSUBSTFONTS=false");
+        command.add("-dPDFSETTINGS=/prepress");
+        command.add("-dNOPAUSE");
+        command.add("-dBATCH");
+        command.add("-sOutputFile=" + output.toAbsolutePath());
+        command.add(input.toAbsolutePath().toString());
+        return command;
+    }
+
+    /** Cached after the first probe: availability does not change mid-process. */
+    private volatile Boolean ghostscriptAvailable;
+
+    private boolean isGhostscriptAvailable() {
+        Boolean cached = ghostscriptAvailable;
+        if (cached != null) {
+            return cached;
+        }
+        boolean available;
+        try {
+            ProcessExecutorResult result =
+                    ProcessExecutor.getInstance(ProcessExecutor.Processes.GHOSTSCRIPT)
+                            .runCommandWithOutputHandling(List.of("gs", "--version"));
+            available = result.getRc() == 0;
+        } catch (Exception e) {
+            log.debug("Ghostscript availability check failed: {}", e.getMessage());
+            available = false;
+        }
+        ghostscriptAvailable = available;
+        return available;
+    }
+
+    private static void deleteQuietly(Path directory) {
+        if (directory == null) {
+            return;
+        }
+        try (Stream<Path> stream = Files.walk(directory)) {
+            stream.sorted(Comparator.reverseOrder())
+                    .forEach(
+                            path -> {
+                                try {
+                                    Files.deleteIfExists(path);
+                                } catch (IOException e) {
+                                    log.debug("Could not delete {}", path);
+                                }
+                            });
+        } catch (IOException e) {
+            log.debug("Could not clean {}", directory);
+        }
+    }
+
+    /**
+     * @param warning non-null when fonts remain unembedded, for the conversion report
+     */
+    public record Result(byte[] pdfBytes, boolean changed, Set<String> fonts, String warning) {}
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfUaConversionService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfUaConversionService.java
new file mode 100644
index 0000000000..1d0920c109
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfUaConversionService.java
@@ -0,0 +1,251 @@
+package stirling.software.proprietary.service.ua;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Locale;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.encryption.InvalidPasswordException;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.model.api.ua.UaValidationResult;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.PdfUaTagger;
+import stirling.software.proprietary.pdf.ua.SourceFacts;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+import stirling.software.proprietary.pdf.ua.TaggingResult;
+
+/**
+ * Converts a PDF to PDF/UA. The declaration is written first and withdrawn unless validation
+ * passes, so a returned file either conforms or does not claim to.
+ */
+@Service
+@Slf4j
+@RequiredArgsConstructor
+public class PdfUaConversionService {
+
+    private final PdfUaValidationService validationService;
+    private final FontEmbeddingService fontEmbeddingService;
+    private final stirling.software.common.service.CustomPDFDocumentFactory pdfDocumentFactory;
+
+    /** Matches the cap GetInfoOnPDF already applies to comparable whole-document work. */
+    private static final long MAX_INPUT_BYTES = 100L * 1024 * 1024;
+
+    /** Beyond this the structure model alone runs to hundreds of megabytes. */
+    private static final int MAX_PAGES = 2000;
+
+    public PdfUaConversionOutcome convert(byte[] input, TaggingOptions options) throws IOException {
+        if (input.length > MAX_INPUT_BYTES) {
+            throw new IOException(
+                    "This PDF is "
+                            + (input.length / (1024 * 1024))
+                            + " MB. PDF/UA conversion is limited to "
+                            + (MAX_INPUT_BYTES / (1024 * 1024))
+                            + " MB.");
+        }
+        PdfUaProfile profile = options.getProfile();
+        List<String> warnings = new ArrayList<>();
+
+        // Read the document's own facts before anything rewrites it. Font embedding runs
+        // Ghostscript over the whole file, which discards the structure tree, /Lang and XFA, so
+        // every guard and every "what did the source say" question must be answered from here.
+        SourceFacts facts;
+        try (PDDocument original = load(input)) {
+            rejectUnsupportedSource(original);
+            warnSignatures(original, warnings);
+            facts = SourceFacts.of(original);
+        }
+
+        byte[] source = input;
+        if (options.isEmbedFonts()) {
+            // Must precede tagging: the embedder rewrites the file and drops any structure tree.
+            FontEmbeddingService.Result fonts = fontEmbeddingService.embedFonts(input);
+            source = fonts.pdfBytes();
+            if (fonts.warning() != null) {
+                warnings.add(fonts.warning());
+            }
+            source = keepTagsOverFonts(input, source, facts, options, warnings);
+        }
+
+        TaggingOptions effective = options.toBuilder().sourceFacts(facts).build();
+
+        // Tag and declare in one pass; the claim is withdrawn below if validation disagrees.
+        byte[] declared;
+        TaggingResult taggingResult;
+        PdfUaTagger tagger = new PdfUaTagger();
+        try (PDDocument document = load(source)) {
+            rejectEncrypted(document);
+            taggingResult = tagger.tag(document, effective);
+            warnings.addAll(taggingResult.getWarnings());
+            tagger.declareConformance(document, profile);
+            declared = save(document);
+        }
+
+        UaValidationResult validation = validationService.validate(declared, profile);
+
+        // A validator cannot see text hidden behind artifact markers, so a clean verdict over
+        // suppressed content would be a false claim.
+        boolean honest = !taggingResult.isContentSuppressed();
+
+        if (validation.compliant() && honest) {
+            log.info("{} conversion passed validation", profile.displayName());
+            return new PdfUaConversionOutcome(
+                    declared, true, validation, summary(taggingResult), warnings);
+        }
+
+        byte[] undeclared;
+        try (PDDocument document = load(declared)) {
+            tagger.withdrawConformance(document);
+            undeclared = save(document);
+        }
+
+        if (!validation.compliant()) {
+            warnings.add(
+                    "The document could not be made "
+                            + profile.displayName()
+                            + " conformant, so no conformance claim was written. "
+                            + validation.totalFailures()
+                            + " automated check(s) still fail.");
+        }
+        log.info(
+                "{} conversion left undeclared: {} failures, suppressedText={}",
+                profile.displayName(),
+                validation.totalFailures(),
+                !honest);
+        return new PdfUaConversionOutcome(
+                undeclared, false, validation, summary(taggingResult), warnings);
+    }
+
+    private static PdfUaConversionOutcome.TaggingSummary summary(TaggingResult result) {
+        return new PdfUaConversionOutcome.TaggingSummary(
+                result.isRebuilt(),
+                result.getTaggedElements(),
+                result.getArtifacts(),
+                result.getFiguresNeedingAlt());
+    }
+
+    /**
+     * Tagging rewrites the content streams a signature covers, so the conversion still runs but the
+     * caller has to know the signature will no longer verify.
+     */
+    private static void warnSignatures(PDDocument document, List<String> warnings) {
+        int signatures = document.getSignatureDictionaries().size();
+        if (signatures > 0) {
+            warnings.add(
+                    signatures
+                            + " digital signature(s) will stop verifying: tagging rewrites the"
+                            + " content streams they cover. Convert first, then re-sign.");
+        }
+    }
+
+    /** Replaces PDFBox's "incorrect password" wording, baffling when the caller supplied none. */
+    private PDDocument load(byte[] bytes) throws IOException {
+        try {
+            // The factory spills large documents to a temp-file cache instead of the heap.
+            return pdfDocumentFactory.load(bytes);
+        } catch (IOException | RuntimeException e) {
+            // The factory wraps the parse failure, so check the cause chain rather than the type.
+            if (mentionsPassword(e)) {
+                throw new IOException(
+                        "This PDF is encrypted. Remove the password before converting it to"
+                                + " PDF/UA.",
+                        e);
+            }
+            throw e;
+        }
+    }
+
+    private static boolean mentionsPassword(Throwable error) {
+        for (Throwable cause = error; cause != null; cause = cause.getCause()) {
+            if (cause instanceof InvalidPasswordException) {
+                return true;
+            }
+            String message = cause.getMessage();
+            if (message != null) {
+                String lower = message.toLowerCase(Locale.ROOT);
+                if (lower.contains("password") || lower.contains("decrypt")) {
+                    return true;
+                }
+            }
+        }
+        return false;
+    }
+
+    /** XFA is forbidden by PDF/UA-1 clause 7.15; encrypted or huge files cannot be restructured. */
+    /**
+     * Under KEEP nothing rebuilds a tree, so if the embedder deleted one we would hand back an
+     * untagged document. Fonts are not worth the whole structure; give the tags back instead.
+     */
+    private byte[] keepTagsOverFonts(
+            byte[] input,
+            byte[] embedded,
+            SourceFacts facts,
+            TaggingOptions options,
+            List<String> warnings)
+            throws IOException {
+        if (options.getExistingTags() != TaggingOptions.ExistingTags.KEEP
+                || !facts.hasUsableTree()
+                || embedded == input) {
+            return embedded;
+        }
+        boolean survived;
+        try (PDDocument rewritten = load(embedded)) {
+            survived = PdfUaTagger.hasUsableStructureTree(rewritten);
+        }
+        if (survived) {
+            return embedded;
+        }
+        warnings.add(
+                "Embedding the missing fonts would have deleted the document's existing tags, so"
+                        + " the tags were kept and the fonts left unembedded. Turn off font"
+                        + " embedding to silence this, or rebuild the tags to embed them.");
+        return input;
+    }
+
+    /**
+     * Checks that must see the document as the author wrote it. Font embedding strips XFA, so
+     * running this afterwards would let a dynamic form through unnoticed, and it would push a
+     * document we are about to reject through the whole embedder first.
+     */
+    private static void rejectUnsupportedSource(PDDocument document) throws IOException {
+        if (document.getNumberOfPages() > MAX_PAGES) {
+            throw new IOException(
+                    "This PDF has "
+                            + document.getNumberOfPages()
+                            + " pages. PDF/UA conversion is limited to "
+                            + MAX_PAGES
+                            + " pages; split it first.");
+        }
+        PDAcroForm form = document.getDocumentCatalog().getAcroForm();
+        if (form != null && form.xfaIsDynamic()) {
+            throw new IOException(
+                    "Dynamic XFA forms are not permitted by PDF/UA. Flatten the form first.");
+        }
+    }
+
+    /**
+     * Deliberately checked on the working document rather than the source. Permissions-only
+     * encryption with an empty user password is common in published documents, the embedder
+     * resolves it, and those files convert usefully; rejecting them up front would fail a document
+     * for a password its author never set.
+     */
+    private static void rejectEncrypted(PDDocument document) throws IOException {
+        if (document.isEncrypted()) {
+            throw new IOException(
+                    "Encrypted PDFs cannot be converted to PDF/UA. Remove the password first.");
+        }
+    }
+
+    private static byte[] save(PDDocument document) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        document.save(out);
+        return out.toByteArray();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfUaValidationService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfUaValidationService.java
new file mode 100644
index 0000000000..18d9fcaee7
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfUaValidationService.java
@@ -0,0 +1,245 @@
+package stirling.software.proprietary.service.ua;
+
+import java.io.ByteArrayInputStream;
+import java.util.ArrayList;
+import java.util.LinkedHashMap;
+import java.util.List;
+import java.util.Map;
+
+import org.springframework.stereotype.Service;
+import org.verapdf.gf.foundry.VeraGreenfieldFoundryProvider;
+import org.verapdf.pdfa.Foundries;
+import org.verapdf.pdfa.PDFAParser;
+import org.verapdf.pdfa.PDFAValidator;
+import org.verapdf.pdfa.flavours.PDFAFlavour;
+import org.verapdf.pdfa.results.TestAssertion;
+import org.verapdf.pdfa.results.ValidationResult;
+
+import jakarta.annotation.PostConstruct;
+
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.proprietary.model.api.ua.AccessibilityIssue;
+import stirling.software.proprietary.model.api.ua.UaValidationResult;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+
+/**
+ * Validates a document against a PDF/UA profile using veraPDF, the oracle a conversion is declared
+ * against. It checks only the machine-verifiable subset, so a clean result is not "accessible".
+ */
+@Service
+@Slf4j
+public class PdfUaValidationService {
+
+    /** Plain-English text and remediability for the clauses users actually hit. */
+    private static final Map<String, ClauseInfo> CLAUSES = buildClauseTable();
+
+    record ClauseInfo(String message, boolean autoFixable) {}
+
+    @PostConstruct
+    public void initialise() {
+        try {
+            VeraGreenfieldFoundryProvider.initialise();
+        } catch (Exception e) {
+            log.error("Failed to initialise veraPDF for PDF/UA validation", e);
+        }
+    }
+
+    public UaValidationResult validate(byte[] pdfBytes, PdfUaProfile profile) {
+        PDFAFlavour flavour = flavourFor(profile);
+        try (PDFAParser parser =
+                Foundries.defaultInstance()
+                        .createParser(new ByteArrayInputStream(pdfBytes), flavour)) {
+
+            PDFAValidator validator = Foundries.defaultInstance().createValidator(flavour, false);
+            ValidationResult result = validator.validate(parser);
+            return toResult(profile, result);
+
+        } catch (Exception e) {
+            log.warn("PDF/UA validation failed for {}: {}", profile.displayName(), e.getMessage());
+            AccessibilityIssue issue = new AccessibilityIssue();
+            issue.setMessage("Validation could not run: " + e.getMessage());
+            issue.setSeverity("error");
+            issue.setClause("n/a");
+            return new UaValidationResult(profile.displayName(), false, List.of(issue), 0);
+        }
+    }
+
+    public static PDFAFlavour flavourFor(PdfUaProfile profile) {
+        return profile == PdfUaProfile.UA2 ? PDFAFlavour.PDFUA_2 : PDFAFlavour.PDFUA_1;
+    }
+
+    /**
+     * Whether the bytes really validate as PDF/A level A for the given part. Tagging is necessary
+     * for level A but not sufficient, so the claim is only written once veraPDF agrees.
+     */
+    public boolean validatesAsPdfaLevelA(byte[] pdfBytes, int part) {
+        PDFAFlavour flavour =
+                switch (part) {
+                    case 1 -> PDFAFlavour.PDFA_1_A;
+                    case 2 -> PDFAFlavour.PDFA_2_A;
+                    case 3 -> PDFAFlavour.PDFA_3_A;
+                    default -> null;
+                };
+        if (flavour == null) {
+            log.warn("No PDF/A level A flavour for part {}", part);
+            return false;
+        }
+        try (PDFAParser parser =
+                Foundries.defaultInstance()
+                        .createParser(new ByteArrayInputStream(pdfBytes), flavour)) {
+            PDFAValidator validator = Foundries.defaultInstance().createValidator(flavour, false);
+            return validator.validate(parser).isCompliant();
+        } catch (Exception e) {
+            log.warn("Level A validation could not run: {}", e.getMessage());
+            return false;
+        }
+    }
+
+    /**
+     * Groups repeated failures of the same rule so a report lists issues, not thousands of lines.
+     */
+    private static UaValidationResult toResult(PdfUaProfile profile, ValidationResult result) {
+        Map<String, AccessibilityIssue> grouped = new LinkedHashMap<>();
+        int total = 0;
+
+        for (TestAssertion assertion : result.getTestAssertions()) {
+            if (assertion.getStatus() != TestAssertion.Status.FAILED) {
+                continue;
+            }
+            total++;
+            String clause =
+                    assertion.getRuleId() != null ? assertion.getRuleId().getClause() : "unknown";
+            int test = assertion.getRuleId() != null ? assertion.getRuleId().getTestNumber() : 0;
+            String key = clause + "-" + test;
+
+            AccessibilityIssue issue =
+                    grouped.computeIfAbsent(
+                            key,
+                            k -> {
+                                AccessibilityIssue created = new AccessibilityIssue();
+                                created.setClause(clause);
+                                created.setTestNumber(String.valueOf(test));
+                                created.setSeverity("error");
+                                ClauseInfo info = lookupClause(clause);
+                                created.setMessage(
+                                        info != null ? info.message() : assertion.getMessage());
+                                created.setTechnicalMessage(assertion.getMessage());
+                                created.setAutoFixable(info != null && info.autoFixable());
+                                created.setSpecification(profile.displayName());
+                                return created;
+                            });
+            issue.setOccurrences(issue.getOccurrences() + 1);
+            if (issue.getLocation() == null && assertion.getLocation() != null) {
+                issue.setLocation(assertion.getLocation().toString());
+            }
+        }
+
+        List<AccessibilityIssue> issues = new ArrayList<>(grouped.values());
+        return new UaValidationResult(
+                profile.displayName(), result.isCompliant() && total == 0, issues, total);
+    }
+
+    /**
+     * Finds the most specific entry covering a clause by walking up the dotted hierarchy. String
+     * prefixes would be wrong: {@code 7.1} prefixes {@code 7.18.1} without being its ancestor.
+     */
+    static ClauseInfo lookupClause(String clause) {
+        if (clause == null) {
+            return null;
+        }
+        String current = clause;
+        while (!current.isEmpty()) {
+            ClauseInfo info = CLAUSES.get(current);
+            if (info != null) {
+                return info;
+            }
+            int dot = current.lastIndexOf('.');
+            if (dot < 0) {
+                return null;
+            }
+            current = current.substring(0, dot);
+        }
+        return null;
+    }
+
+    private static Map<String, ClauseInfo> buildClauseTable() {
+        Map<String, ClauseInfo> table = new LinkedHashMap<>();
+        table.put(
+                "7.1",
+                new ClauseInfo(
+                        "Document is not tagged, or some content is neither tagged nor marked as an artifact.",
+                        true));
+        table.put(
+                "7.2",
+                new ClauseInfo(
+                        "Text cannot be mapped to Unicode, or the document language is not declared.",
+                        true));
+        table.put(
+                "7.3",
+                new ClauseInfo("An image or graphic has no alternative description.", false));
+        table.put(
+                "7.4",
+                new ClauseInfo(
+                        "Heading levels skip a level, or headings are nested incorrectly.", true));
+        table.put(
+                "7.5",
+                new ClauseInfo("A table is missing header cells or header associations.", false));
+        table.put(
+                "7.6", new ClauseInfo("A list is not structured as list items with bodies.", true));
+        table.put(
+                "7.7",
+                new ClauseInfo("A mathematical expression has no alternative description.", false));
+        table.put(
+                "7.8",
+                new ClauseInfo("Running heads or page numbers are not marked as artifacts.", true));
+        table.put("7.9", new ClauseInfo("A note is missing a unique identifier.", true));
+        // Tagging does not touch optional content groups, so this needs the authoring tool.
+        table.put("7.10", new ClauseInfo("An optional content group has no name.", false));
+        // The attachment's own /AFRelationship and /Desc are not something tagging can supply.
+        table.put(
+                "7.11",
+                new ClauseInfo(
+                        "An embedded file is missing its relationship or description.", false));
+        table.put(
+                "7.15",
+                new ClauseInfo(
+                        "The document uses a dynamic XFA form, which PDF/UA does not allow.",
+                        false));
+        table.put(
+                "7.16",
+                new ClauseInfo(
+                        "Security settings prevent assistive technology from reading the content.",
+                        true));
+        table.put("7.17", new ClauseInfo("Navigation aids such as page labels are missing.", true));
+        table.put(
+                "7.18",
+                new ClauseInfo(
+                        "An annotation is missing a description, tab order, or structure entry.",
+                        true));
+        table.put(
+                "7.20",
+                new ClauseInfo(
+                        "A form or group XObject is not marked as content or as an artifact.",
+                        false));
+        // Most font defects (CIDFont, CMap, metrics, encoding) need the font itself repaired.
+        table.put(
+                "7.21",
+                new ClauseInfo("A font in the document does not meet PDF/UA rules.", false));
+        // The one font defect embedding does fix.
+        table.put("7.21.4.1", new ClauseInfo("A font used in the document is not embedded.", true));
+        // ToUnicode gaps need the font itself repaired, which embedding does not do.
+        table.put(
+                "7.21.7",
+                new ClauseInfo(
+                        "A font does not map every character it uses to Unicode, so extracted text"
+                                + " may be wrong.",
+                        false));
+        table.put(
+                "5",
+                new ClauseInfo(
+                        "The document does not declare PDF/UA conformance in its XMP metadata.",
+                        true));
+        return table;
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfaAccessibilityService.java b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfaAccessibilityService.java
new file mode 100644
index 0000000000..5a13b4ab65
--- /dev/null
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/service/ua/PdfaAccessibilityService.java
@@ -0,0 +1,297 @@
+package stirling.software.proprietary.service.ua;
+
+import java.io.ByteArrayInputStream;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.util.ArrayList;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdfwriter.compress.CompressParameters;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.common.PDMetadata;
+import org.apache.xmpbox.XMPMetadata;
+import org.apache.xmpbox.schema.PDFAExtensionSchema;
+import org.apache.xmpbox.schema.PDFAIdentificationSchema;
+import org.apache.xmpbox.type.AbstractStructuredType;
+import org.apache.xmpbox.type.ArrayProperty;
+import org.apache.xmpbox.type.Cardinality;
+import org.apache.xmpbox.type.PDFAPropertyType;
+import org.apache.xmpbox.type.PDFASchemaType;
+import org.apache.xmpbox.xml.DomXmpParser;
+import org.apache.xmpbox.xml.XmpSerializer;
+import org.springframework.stereotype.Service;
+
+import lombok.RequiredArgsConstructor;
+import lombok.extern.slf4j.Slf4j;
+
+import stirling.software.common.service.PdfaLevelAServiceInterface;
+import stirling.software.proprietary.pdf.ua.PdfUaIdentificationSchema;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.PdfUaTagger;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+import stirling.software.proprietary.pdf.ua.TaggingResult;
+
+/**
+ * Raises a PDF/A file from conformance level B to level A, which adds the tagging the PDF/UA tagger
+ * already does. Must run after Ghostscript, which discards any structure tree it is given.
+ */
+@Service
+@Slf4j
+@RequiredArgsConstructor
+public class PdfaAccessibilityService implements PdfaLevelAServiceInterface {
+
+    /**
+     * Matches the PDF/UA converter's own cap; beyond this the structure model exhausts the heap.
+     */
+    private static final int MAX_TAGGABLE_PAGES = 2000;
+
+    private final PdfUaValidationService validationService;
+
+    /**
+     * Tags a converted PDF/A and marks it conformance A, or returns it unchanged rather than
+     * claiming level A over untagged content. part is 1 to 3; part 1 keeps its PDF 1.4 version.
+     */
+    public Result upgradeToLevelA(byte[] pdfBytes, int part, String language, String title) {
+        return upgradeToLevelA(pdfBytes, part, language, title, false);
+    }
+
+    /**
+     * @param alsoDeclareUa additionally claim PDF/UA, but only if it validates
+     */
+    @Override
+    public Result upgradeToLevelA(
+            byte[] pdfBytes, int part, String language, String title, boolean alsoDeclareUa) {
+        List<String> warnings = new ArrayList<>();
+        try {
+            byte[] tagged;
+            TaggingResult taggingResult;
+
+            try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+                // Tagging holds a model of the whole document; without a cap a large file exhausts
+                // the heap, and OutOfMemoryError is an Error, so the catch below never sees it.
+                if (document.getNumberOfPages() > MAX_TAGGABLE_PAGES) {
+                    warnings.add(
+                            "This document has "
+                                    + document.getNumberOfPages()
+                                    + " pages, more than the "
+                                    + MAX_TAGGABLE_PAGES
+                                    + " that can be tagged, so it was left at conformance level B.");
+                    return new Result(pdfBytes, false, warnings);
+                }
+                TaggingOptions options =
+                        TaggingOptions.builder()
+                                .profile(PdfUaProfile.UA1)
+                                .language(language)
+                                .title(title)
+                                .fallbackTitle(title)
+                                // Fonts were embedded on the PDF/A pass; a rewrite would undo it.
+                                .embedFonts(false)
+                                // PDF/A-1 is defined on PDF 1.4; raising it breaks conformance.
+                                .preservePdfVersion(part == 1)
+                                .existingTags(TaggingOptions.ExistingTags.AUTO)
+                                .build();
+
+                taggingResult = new PdfUaTagger().tag(document, options);
+                warnings.addAll(taggingResult.getWarnings());
+                tagged = save(document, part);
+            }
+
+            if (taggingResult.getTaggedElements() == 0 && taggingResult.isRebuilt()) {
+                warnings.add(
+                        "No taggable content was found, so the file cannot claim PDF/A level A."
+                                + " It remains valid at level B.");
+                return new Result(pdfBytes, false, warnings);
+            }
+            if (taggingResult.isContentSuppressed()) {
+                warnings.add(
+                        "Some text could not be tagged reliably and was marked as an artifact, so"
+                                + " no level A claim was written. The file remains valid at level B.");
+                return new Result(tagged, false, warnings);
+            }
+
+            byte[] declared = setConformance(tagged, part, "A");
+
+            // Tagging is necessary for level A but not sufficient: Unicode mappings are too.
+            if (!validationService.validatesAsPdfaLevelA(declared, part)) {
+                warnings.add(
+                        "The document was tagged but does not validate as PDF/A-"
+                                + part
+                                + "a, so it was left at conformance level B.");
+                return new Result(setConformance(tagged, part, "B"), false, warnings);
+            }
+
+            if (alsoDeclareUa) {
+                byte[] withUa = declarePdfUaAlongsidePdfa(declared, part);
+                var uaResult = validationService.validate(withUa, PdfUaProfile.UA1);
+                if (uaResult.compliant()) {
+                    log.info("Upgraded PDF/A-{} to level A and declared PDF/UA", part);
+                    return new Result(withUa, true, warnings);
+                }
+                // The archival upgrade stands on its own; only the accessibility claim is dropped.
+                warnings.add(
+                        "PDF/UA was requested alongside PDF/A but "
+                                + uaResult.totalFailures()
+                                + " accessibility check(s) still fail, so no PDF/UA claim was"
+                                + " written. The file is valid PDF/A-"
+                                + part
+                                + "a.");
+            }
+
+            log.info("Upgraded PDF/A-{} to conformance level A", part);
+            return new Result(declared, true, warnings);
+
+        } catch (Exception e) {
+            log.warn("Could not upgrade to PDF/A level A: {}", e.getMessage());
+            warnings.add(
+                    "Level A upgrade failed ("
+                            + e.getMessage()
+                            + "), so the file was left at conformance level B.");
+            return new Result(pdfBytes, false, warnings);
+        }
+    }
+
+    /**
+     * Declares PDF/UA alongside PDF/A in one file. The extension schema is required: PDF/A forbids
+     * XMP properties no schema describes, and XMPBox has none for {@code pdfuaid}.
+     */
+    static byte[] declarePdfUaAlongsidePdfa(byte[] pdfBytes, int part) throws Exception {
+        try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+            XMPMetadata xmp = parseOrCreate(document);
+
+            PdfUaIdentificationSchema identification = new PdfUaIdentificationSchema(xmp);
+            identification.setPart(1);
+            xmp.addSchema(identification);
+
+            addPdfUaExtensionSchema(xmp);
+            writeMetadata(document, xmp);
+            return save(document, part);
+        }
+    }
+
+    /**
+     * Describes the pdfuaid namespace so a PDF/A validator accepts it. Fields are set individually,
+     * not by subclassing: XMPBox reads the namespace from an annotation, which is not inherited.
+     */
+    private static void addPdfUaExtensionSchema(XMPMetadata xmp) {
+        PDFAExtensionSchema extension =
+                (PDFAExtensionSchema) xmp.getSchema(PDFAExtensionSchema.class);
+        if (extension == null) {
+            extension = xmp.createAndAddPDFAExtensionSchemaWithDefaultNS();
+        }
+
+        PDFAPropertyType partProperty = new PDFAPropertyType(xmp);
+        addField(xmp, partProperty, PDFAPropertyType.NAME, "part");
+        addField(xmp, partProperty, PDFAPropertyType.VALUETYPE, "Integer");
+        addField(xmp, partProperty, PDFAPropertyType.CATEGORY, "internal");
+        addField(
+                xmp,
+                partProperty,
+                PDFAPropertyType.DESCRIPTION,
+                "Indicates which part of ISO 14289 the document conforms to");
+
+        PDFASchemaType schema = new PDFASchemaType(xmp);
+        addField(xmp, schema, PDFASchemaType.SCHEMA, "PDF/UA Universal Accessibility Schema");
+        addField(xmp, schema, PDFASchemaType.NAMESPACE_URI, PdfUaIdentificationSchema.NAMESPACE);
+        addField(xmp, schema, PDFASchemaType.PREFIX, PdfUaIdentificationSchema.PREFERRED_PREFIX);
+
+        ArrayProperty properties =
+                xmp.getTypeMapping()
+                        .createArrayProperty(
+                                schema.getNamespace(),
+                                schema.getPrefix(),
+                                PDFASchemaType.PROPERTY,
+                                Cardinality.Seq);
+        properties.getContainer().addProperty(partProperty);
+        schema.getContainer().addProperty(properties);
+
+        // A freshly created extension schema has no schemas bag yet, so make one.
+        ArrayProperty schemas = extension.getSchemasProperty();
+        if (schemas == null) {
+            schemas =
+                    xmp.getTypeMapping()
+                            .createArrayProperty(
+                                    extension.getNamespace(),
+                                    extension.getPrefix(),
+                                    PDFAExtensionSchema.SCHEMAS,
+                                    Cardinality.Bag);
+            extension.addProperty(schemas);
+        }
+        schemas.getContainer().addProperty(schema);
+    }
+
+    /** Adds one text field to a structured type, in that type's own namespace. */
+    private static void addField(
+            XMPMetadata xmp, AbstractStructuredType target, String name, String value) {
+        target.getContainer()
+                .addProperty(
+                        xmp.getTypeMapping()
+                                .createText(
+                                        target.getNamespace(), target.getPrefix(), name, value));
+    }
+
+    private static XMPMetadata parseOrCreate(PDDocument document) throws Exception {
+        PDMetadata existing = document.getDocumentCatalog().getMetadata();
+        if (existing == null) {
+            return XMPMetadata.createXMPMetadata();
+        }
+        try (InputStream in = new ByteArrayInputStream(existing.toByteArray())) {
+            DomXmpParser parser = new DomXmpParser();
+            parser.setStrictParsing(false);
+            return parser.parse(in);
+        }
+    }
+
+    private static void writeMetadata(PDDocument document, XMPMetadata xmp) throws Exception {
+        ByteArrayOutputStream serialised = new ByteArrayOutputStream();
+        new XmpSerializer().serialize(xmp, serialised, true);
+        PDMetadata metadata = new PDMetadata(document);
+        metadata.importXMPMetadata(serialised.toByteArray());
+        document.getDocumentCatalog().setMetadata(metadata);
+    }
+
+    /** Rewrites {@code pdfaid:conformance} without disturbing the rest of the packet. */
+    static byte[] setConformance(byte[] pdfBytes, int part, String conformance) throws Exception {
+        try (PDDocument document = Loader.loadPDF(pdfBytes)) {
+            PDMetadata existing = document.getDocumentCatalog().getMetadata();
+            XMPMetadata xmp;
+            if (existing != null) {
+                try (InputStream in = new ByteArrayInputStream(existing.toByteArray())) {
+                    DomXmpParser parser = new DomXmpParser();
+                    parser.setStrictParsing(false);
+                    xmp = parser.parse(in);
+                }
+            } else {
+                xmp = XMPMetadata.createXMPMetadata();
+            }
+
+            PDFAIdentificationSchema identification =
+                    (PDFAIdentificationSchema) xmp.getSchema(PDFAIdentificationSchema.class);
+            if (identification == null) {
+                identification = xmp.createAndAddPDFAIdentificationSchema();
+            }
+            identification.setPart(part);
+            identification.setConformance(conformance);
+
+            ByteArrayOutputStream serialised = new ByteArrayOutputStream();
+            new XmpSerializer().serialize(xmp, serialised, true);
+            PDMetadata metadata = new PDMetadata(document);
+            metadata.importXMPMetadata(serialised.toByteArray());
+            document.getDocumentCatalog().setMetadata(metadata);
+
+            return save(document, part);
+        }
+    }
+
+    /**
+     * Part 1 is saved uncompressed: PDFBox's default object streams need PDF 1.5, which would push
+     * a PDF/A-1 file off its required 1.4 version.
+     */
+    private static byte[] save(PDDocument document, int part) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        document.save(
+                out, part == 1 ? CompressParameters.NO_COMPRESSION : new CompressParameters());
+        return out.toByteArray();
+    }
+}
diff --git a/app/proprietary/src/main/java/stirling/software/proprietary/workflow/model/UserServerCertificateEntity.java b/app/proprietary/src/main/java/stirling/software/proprietary/workflow/model/UserServerCertificateEntity.java
index 0ad30a3bf7..aef781dd9b 100644
--- a/app/proprietary/src/main/java/stirling/software/proprietary/workflow/model/UserServerCertificateEntity.java
+++ b/app/proprietary/src/main/java/stirling/software/proprietary/workflow/model/UserServerCertificateEntity.java
@@ -2,9 +2,11 @@ package stirling.software.proprietary.workflow.model;
 
 import java.io.Serializable;
 import java.time.LocalDateTime;
+import java.util.Objects;
 
 import org.hibernate.annotations.CreationTimestamp;
 import org.hibernate.annotations.UpdateTimestamp;
+import org.hibernate.proxy.HibernateProxy;
 
 import com.fasterxml.jackson.annotation.JsonIgnore;
 
@@ -19,7 +21,6 @@ import stirling.software.proprietary.security.model.User;
 @NoArgsConstructor
 @Getter
 @Setter
-@EqualsAndHashCode(onlyExplicitlyIncluded = true)
 @ToString(onlyExplicitlyIncluded = true)
 public class UserServerCertificateEntity implements Serializable {
 
@@ -28,7 +29,6 @@ public class UserServerCertificateEntity implements Serializable {
     @Id
     @GeneratedValue(strategy = GenerationType.IDENTITY)
     @Column(name = "id")
-    @EqualsAndHashCode.Include
     @ToString.Include
     private Long id;
 
@@ -70,4 +70,31 @@ public class UserServerCertificateEntity implements Serializable {
     @UpdateTimestamp
     @Column(name = "updated_at")
     private LocalDateTime updatedAt;
+
+    @Override
+    public final boolean equals(Object o) {
+        if (this == o) return true;
+        if (o == null) return false;
+        Class<?> oEffectiveClass =
+                o instanceof HibernateProxy
+                        ? ((HibernateProxy) o).getHibernateLazyInitializer().getPersistentClass()
+                        : o.getClass();
+        Class<?> thisEffectiveClass =
+                this instanceof HibernateProxy
+                        ? ((HibernateProxy) this).getHibernateLazyInitializer().getPersistentClass()
+                        : this.getClass();
+        if (thisEffectiveClass != oEffectiveClass) return false;
+        UserServerCertificateEntity that = (UserServerCertificateEntity) o;
+        return getId() != null && Objects.equals(getId(), that.getId());
+    }
+
+    @Override
+    public final int hashCode() {
+        return this instanceof HibernateProxy
+                ? ((HibernateProxy) this)
+                        .getHibernateLazyInitializer()
+                        .getPersistentClass()
+                        .hashCode()
+                : getClass().hashCode();
+    }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/audit/ControllerAuditAspectTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/audit/ControllerAuditAspectTest.java
index e8d8ae7a73..da4a48079a 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/audit/ControllerAuditAspectTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/audit/ControllerAuditAspectTest.java
@@ -76,7 +76,8 @@ class ControllerAuditAspectTest {
         @DisplayName("shouldAudit false proceeds without recording")
         void skipsWhenShouldAuditFalse() throws Throwable {
             ProceedingJoinPoint jp = joinPointFor("getEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(false);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(false);
             when(jp.proceed()).thenReturn("ok");
 
             Object result = aspect.auditGetMethod(jp);
@@ -102,7 +103,8 @@ class ControllerAuditAspectTest {
         @DisplayName("records success outcome and returns result")
         void recordsSuccess() throws Throwable {
             ProceedingJoinPoint jp = joinPointFor("postEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(true);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(true);
             when(auditService.captureCurrentPrincipal()).thenReturn("alice");
             when(auditService.captureCurrentOrigin()).thenReturn("WEB");
             when(auditService.createBaseAuditData(eq(jp), any(AuditLevel.class)))
@@ -134,7 +136,8 @@ class ControllerAuditAspectTest {
             MDC.put("auditPrincipal", "fromMdc");
             MDC.put("auditOrigin", "API");
             ProceedingJoinPoint jp = joinPointFor("postEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(true);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(true);
             when(auditService.createBaseAuditData(eq(jp), any(AuditLevel.class)))
                     .thenReturn(new HashMap<>());
             when(auditService.resolveEventType(
@@ -166,7 +169,8 @@ class ControllerAuditAspectTest {
         @DisplayName("records failure outcome and rethrows")
         void recordsFailureAndRethrows() throws Throwable {
             ProceedingJoinPoint jp = joinPointFor("postEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(true);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(true);
             when(auditService.captureCurrentPrincipal()).thenReturn("alice");
             when(auditService.captureCurrentOrigin()).thenReturn("WEB");
             when(auditService.createBaseAuditData(eq(jp), any(AuditLevel.class)))
@@ -204,7 +208,8 @@ class ControllerAuditAspectTest {
         @DisplayName("annotated method proceeds without double-auditing")
         void annotatedMethodSkips() throws Throwable {
             ProceedingJoinPoint jp = joinPointFor("annotatedEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(true);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(true);
             when(auditService.captureCurrentPrincipal()).thenReturn("alice");
             when(auditService.captureCurrentOrigin()).thenReturn("WEB");
             when(jp.proceed()).thenReturn("ok");
@@ -232,7 +237,8 @@ class ControllerAuditAspectTest {
         @DisplayName("captures result when enabled and non-UI type")
         void capturesResult() throws Throwable {
             ProceedingJoinPoint jp = joinPointFor("postEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(true);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(true);
             when(auditService.captureCurrentPrincipal()).thenReturn("alice");
             when(auditService.captureCurrentOrigin()).thenReturn("WEB");
             when(auditService.createBaseAuditData(eq(jp), any(AuditLevel.class)))
@@ -262,7 +268,8 @@ class ControllerAuditAspectTest {
         @DisplayName("UI_DATA result is not captured")
         void uiDataResultSkipped() throws Throwable {
             ProceedingJoinPoint jp = joinPointFor("getEndpoint");
-            when(auditService.shouldAudit(any(Method.class), eq(auditConfig))).thenReturn(true);
+            when(auditService.shouldAudit(any(), any(Method.class), eq(auditConfig)))
+                    .thenReturn(true);
             when(auditService.captureCurrentPrincipal()).thenReturn("alice");
             when(auditService.captureCurrentOrigin()).thenReturn("WEB");
             when(auditService.createBaseAuditData(eq(jp), any(AuditLevel.class)))
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/AdminJobControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/AdminJobControllerTest.java
new file mode 100644
index 0000000000..95d2e097cf
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/AdminJobControllerTest.java
@@ -0,0 +1,89 @@
+package stirling.software.proprietary.controller.api;
+
+import static org.junit.jupiter.api.Assertions.*;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.Mockito.*;
+
+import java.util.Map;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.Test;
+import org.mockito.InjectMocks;
+import org.mockito.Mock;
+import org.mockito.MockitoAnnotations;
+import org.springframework.http.HttpStatus;
+import org.springframework.http.ResponseEntity;
+
+import stirling.software.common.service.JobQueue;
+import stirling.software.common.service.TaskManager;
+
+/**
+ * The admin sweep covers every user's jobs, so it must stay distinct from the self-service endpoint
+ * on JobController - and both must run the same TaskManager sweep rather than each growing their
+ * own cleanup logic.
+ */
+class AdminJobControllerTest {
+
+    @Mock private TaskManager taskManager;
+    @Mock private JobQueue jobQueue;
+
+    @InjectMocks private AdminJobController controller;
+
+    private AutoCloseable closeable;
+
+    @BeforeEach
+    void setUp() {
+        closeable = MockitoAnnotations.openMocks(this);
+    }
+
+    @Test
+    void cleanupWithoutForceRunsTheRetentionSweep() throws Exception {
+        when(taskManager.cleanupOldJobs()).thenReturn(new TaskManager.CleanupSummary(2, 4, 3));
+
+        ResponseEntity<?> response = controller.cleanupOldJobs(false);
+
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        @SuppressWarnings("unchecked")
+        Map<String, Object> body = (Map<String, Object>) response.getBody();
+        assertEquals(2, body.get("removedJobs"));
+        assertEquals(4, body.get("filesDeleted"));
+        assertEquals(3, body.get("remainingJobs"));
+        verify(taskManager).cleanupOldJobs();
+        verify(taskManager, never()).cleanupFinishedJobsNow(any());
+        closeable.close();
+    }
+
+    @Test
+    void cleanupWithForceIgnoresTheRetentionWindow() throws Exception {
+        when(taskManager.cleanupFinishedJobsNow(any()))
+                .thenReturn(new TaskManager.CleanupSummary(5, 9, 0));
+
+        ResponseEntity<?> response = controller.cleanupOldJobs(true);
+
+        assertEquals(HttpStatus.OK, response.getStatusCode());
+        @SuppressWarnings("unchecked")
+        Map<String, Object> body = (Map<String, Object>) response.getBody();
+        assertEquals(5, body.get("removedJobs"));
+        assertEquals(9, body.get("filesDeleted"));
+        verify(taskManager).cleanupFinishedJobsNow(any());
+        verify(taskManager, never()).cleanupOldJobs();
+        closeable.close();
+    }
+
+    @Test
+    void forcedAdminCleanupSweepsEveryUsersJobs() throws Exception {
+        when(taskManager.cleanupFinishedJobsNow(any()))
+                .thenReturn(new TaskManager.CleanupSummary(1, 1, 0));
+
+        controller.cleanupOldJobs(true);
+
+        @SuppressWarnings("unchecked")
+        org.mockito.ArgumentCaptor<java.util.function.Predicate<String>> filter =
+                org.mockito.ArgumentCaptor.forClass(java.util.function.Predicate.class);
+        verify(taskManager).cleanupFinishedJobsNow(filter.capture());
+        // Unlike the self-service endpoint, the admin sweep is not scoped to one caller.
+        assertTrue(filter.getValue().test("alice:job"));
+        assertTrue(filter.getValue().test("bob:job"));
+        closeable.close();
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/ClassifyLabelControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/ClassifyLabelControllerTest.java
index 74749289a7..637f05b284 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/ClassifyLabelControllerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/controller/api/ClassifyLabelControllerTest.java
@@ -14,6 +14,7 @@ import static org.mockito.Mockito.when;
 import java.util.List;
 
 import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDDocumentInformation;
 import org.junit.jupiter.api.Test;
 import org.junit.jupiter.api.extension.ExtendWith;
 import org.mockito.ArgumentCaptor;
@@ -76,7 +77,7 @@ class ClassifyLabelControllerTest {
                 .thenReturn("{\"outcome\":\"classification\",\"labels\":[\"invoice\"]}");
 
         try {
-            controller.classifyAndLabel(file);
+            controller.classifyAndLabel(file, false);
         } catch (Exception ignored) {
             // WebResponseUtils.pdfDocToWebResponse needs a real temp file; the engine call and
             // metadata write we assert on have already happened by the time it runs.
@@ -89,6 +90,52 @@ class ClassifyLabelControllerTest {
         return objectMapper.readTree(body.getValue());
     }
 
+    /** Stubs a document that already carries a verdict, as a second run over a batch would see. */
+    private MultipartFile alreadyClassifiedDocument() throws Exception {
+        PDDocument document = mock(PDDocument.class);
+        PDDocumentInformation info = mock(PDDocumentInformation.class);
+        when(document.getDocumentInformation()).thenReturn(info);
+        when(info.getCustomMetadataValue(PdfMetadataService.CLASSIFICATION_KEY))
+                .thenReturn("{\"labels\":[\"invoice\"]}");
+        MultipartFile file = mock(MultipartFile.class);
+        when(file.getOriginalFilename()).thenReturn("invoice.pdf");
+        when(pdfDocumentFactory.load(any(MultipartFile.class), eq(true))).thenReturn(document);
+        return file;
+    }
+
+    @Test
+    void classifyAndLabel_skipsADocumentThatAlreadyCarriesAVerdict() throws Exception {
+        withLabels(List.of(new ClassificationLabel("invoice", "Invoice", null)));
+        MultipartFile file = alreadyClassifiedDocument();
+
+        try {
+            controller.classifyAndLabel(file, false);
+        } catch (Exception ignored) {
+            // The response needs a real temp file; the decision under test happens before it.
+        }
+
+        // No second engine call, and no charge for one: re-classifying buys the same answer twice.
+        verify(aiEngineClient, never()).post(anyString(), anyString(), any());
+        verify(pdfMetadataService, never()).setClassificationMetadata(any(), anyString());
+    }
+
+    @Test
+    void classifyAndLabel_reclassifiesWhenAskedTo() throws Exception {
+        withLabels(List.of(new ClassificationLabel("invoice", "Invoice", null)));
+        MultipartFile file = alreadyClassifiedDocument();
+        when(pdfContentExtractor.extractPageTextRaw(any(), eq(1))).thenReturn("Invoice total");
+        when(aiEngineClient.post(eq("/api/v1/documents/classify"), anyString(), isNull()))
+                .thenReturn("{\"outcome\":\"classification\",\"labels\":[\"receipt\"]}");
+
+        try {
+            controller.classifyAndLabel(file, true);
+        } catch (Exception ignored) {
+            // As above.
+        }
+
+        verify(aiEngineClient).post(eq("/api/v1/documents/classify"), anyString(), isNull());
+    }
+
     @Test
     void classifyAndLabel_writesClassificationWithoutOutcome() throws Exception {
         withLabels(List.of(new ClassificationLabel("invoice", "Invoice", null)));
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/CheckConstrainedEnumsTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/CheckConstrainedEnumsTest.java
new file mode 100644
index 0000000000..7eaeb01eb4
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/CheckConstrainedEnumsTest.java
@@ -0,0 +1,57 @@
+package stirling.software.proprietary.failure;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.Arrays;
+import java.util.List;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Pins the five enums {@code file_run_events} stores behind CHECK constraints: adding a value is a
+ * schema change dressed as a Java one, compiling here and failing against a real database.
+ */
+class CheckConstrainedEnumsTest {
+
+    @Test
+    @DisplayName("no value has been added to a CHECK-constrained column's enum")
+    void everyPersistedEnumStillMatchesTheShippedCheckConstraints() {
+        assertThat(names(FileRunEventStatus.values()))
+                .containsExactlyInAnyOrder(
+                        "NEW", "ACKNOWLEDGED", "DISMISSED", "RESOLVED", "FILE_REMOVED");
+        assertThat(names(FailureOrigin.values()))
+                .containsExactlyInAnyOrder("TOOL", "POLICY", "PIPELINE");
+        assertThat(names(FailureStage.values()))
+                .containsExactlyInAnyOrder("INPUT", "INTERNAL", "OUTPUT", "BLOCKED", "NEVER_RAN");
+        assertThat(names(FailureSeverity.values()))
+                .containsExactlyInAnyOrder("ERROR", "WARNING", "INFO");
+        assertThat(names(FailureScope.values()))
+                .containsExactlyInAnyOrder("FILE", "RUN", "POLICY", "SOURCE", "SERVER");
+    }
+
+    @Test
+    @DisplayName("the facets added since are derived, not stored")
+    void nothingAddedToTheModelReachedTheTable() throws Exception {
+        // Resolved per reader, so a column would hold the wrong answer for all but one person.
+        List<Class<?>> persisted =
+                Arrays.stream(FileRunEventEntity.class.getDeclaredFields())
+                        .filter(field -> !field.isSynthetic())
+                        .map(java.lang.reflect.Field::getType)
+                        .toList();
+
+        assertThat(persisted)
+                .doesNotContain(
+                        FailureAudience.class,
+                        FailureActionId.class,
+                        FailureActionId.Execution.class,
+                        Ownership.class);
+        // A plain varchar with no CHECK, which is what lets a new kind ship without a migration.
+        assertThat(FileRunEventEntity.class.getDeclaredField("kindId").getType())
+                .isEqualTo(String.class);
+    }
+
+    private static List<String> names(Enum<?>[] values) {
+        return Arrays.stream(values).map(Enum::name).toList();
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FailureKindTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FailureKindTest.java
index 1a1b1a1599..03aa5c9402 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FailureKindTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FailureKindTest.java
@@ -1,6 +1,9 @@
 package stirling.software.proprietary.failure;
 
 import static org.assertj.core.api.Assertions.assertThat;
+import static stirling.software.proprietary.failure.FailureAudience.ANYONE_WHO_SEES;
+import static stirling.software.proprietary.failure.FailureAudience.OWNER;
+import static stirling.software.proprietary.failure.FailureAudience.TEAM_REVIEWER;
 
 import java.io.IOException;
 import java.io.UncheckedIOException;
@@ -29,6 +32,13 @@ import stirling.software.common.util.ExceptionUtils;
  */
 class FailureKindTest {
 
+    /** In full, so a declaration pairing the right action with the wrong audience cannot pass. */
+    private static FailureKind.OfferedAction offered(
+            FailureActionId id, FailureAudience audience, String labelKeySuffix) {
+        return new FailureKind.OfferedAction(
+                id, "portal.failures.action." + labelKeySuffix, audience);
+    }
+
     @Nested
     @DisplayName("every kind is well formed")
     class Invariants {
@@ -60,6 +70,27 @@ class FailureKindTest {
             assertThat(kind.getId()).matches("^[A-Z][A-Z0-9_]*$");
         }
 
+        @ParameterizedTest
+        @EnumSource(FailureKind.class)
+        void declaresItsActionsInTheSameOrderAsEveryOtherKind(FailureKind kind) {
+            // Declaration order is display order and the first usable offer is the row's primary,
+            // so
+            // two kinds disagreeing would flip the solid button between rows.
+            List<FailureActionId> ranking =
+                    List.of(
+                            FailureActionId.VIEW_FILE,
+                            FailureActionId.VIEW_IN_PROCESSOR,
+                            FailureActionId.DISMISS);
+
+            List<FailureActionId> declared = kind.getActions();
+            assertThat(ranking)
+                    .as("%s declares an action the shared ranking does not rank", kind.getId())
+                    .containsAll(declared);
+            assertThat(declared)
+                    .as("%s declares its actions out of the shared order", kind.getId())
+                    .isEqualTo(ranking.stream().filter(declared::contains).toList());
+        }
+
         @Test
         void idsAreUnique() {
             Set<String> ids = new HashSet<>();
@@ -88,6 +119,25 @@ class FailureKindTest {
             }
         }
 
+        @ParameterizedTest
+        @EnumSource(FailureKind.class)
+        void everyOfferSaysWhoItIsFor(FailureKind kind) {
+            // Read per row to decide what a caller is shown, so a null would leak a button.
+            for (FailureKind.OfferedAction offer : kind.getOfferedActions()) {
+                assertThat(offer.audience())
+                        .as("%s offers %s", kind.getId(), offer.id())
+                        .isNotNull();
+            }
+        }
+
+        @ParameterizedTest
+        @EnumSource(FailureKind.class)
+        void offersEachActionAtMostOnce(FailureKind kind) {
+            // The same action twice would be two buttons with one meaning, and labelKeyFor would
+            // answer for the first.
+            assertThat(kind.getActions()).doesNotHaveDuplicates();
+        }
+
         @Test
         void noTwoKindsClaimTheSameErrorCode() {
             // Computed independently of duplicateErrorCodes(), then checked against it: the boot
@@ -182,10 +232,16 @@ class FailureKindTest {
     class Unknown {
 
         @Test
-        void existsAndCanBeTriaged() {
-            assertThat(FailureKind.UNKNOWN.getActions())
-                    .containsExactlyInAnyOrder(
-                            FailureActionId.ACKNOWLEDGE, FailureActionId.DISMISS);
+        void offersItsOwnerTheirDocumentAndTheRunToWhoeverReviews() {
+            // Nothing here is known to be fixable, so the offers are just the places to look.
+            assertThat(FailureKind.UNKNOWN.getOfferedActions())
+                    .containsExactly(
+                            offered(FailureActionId.VIEW_FILE, OWNER, "viewFile"),
+                            offered(
+                                    FailureActionId.VIEW_IN_PROCESSOR,
+                                    TEAM_REVIEWER,
+                                    "viewInProcessor"),
+                            offered(FailureActionId.DISMISS, ANYONE_WHO_SEES, "dismiss"));
         }
 
         @Test
@@ -233,23 +289,54 @@ class FailureKindTest {
 
         @Test
         void declaresOnlyWhatItLists() {
-            assertThat(FailureKind.UNKNOWN.declares(FailureActionId.ACKNOWLEDGE)).isTrue();
             assertThat(FailureKind.UNKNOWN.declares(FailureActionId.DISMISS)).isTrue();
+            assertThat(FailureKind.UNKNOWN.declares(FailureActionId.ACKNOWLEDGE)).isFalse();
         }
 
         @Test
-        void overriddenLabelWinsOverTheGenericOne() {
-            String label =
-                    FailureKind.INPUT_PASSWORD_PROTECTED.labelKeyFor(FailureActionId.DISMISS);
-            assertThat(label).isEqualTo("portal.failures.action.dismissSkipFile");
-            assertThat(label).isNotEqualTo(FailureKind.genericLabelKey(FailureActionId.DISMISS));
+        void offersTheDocumentToItsOwnerAndTheRunToItsReviewer() {
+            // The point of the audiences: only the owner holds the document.
+            assertThat(FailureKind.INPUT_PASSWORD_PROTECTED.getOfferedActions())
+                    .containsExactly(
+                            offered(FailureActionId.VIEW_FILE, OWNER, "viewFile"),
+                            offered(
+                                    FailureActionId.VIEW_IN_PROCESSOR,
+                                    TEAM_REVIEWER,
+                                    "viewInProcessor"),
+                            offered(FailureActionId.DISMISS, ANYONE_WHO_SEES, "dismiss"));
         }
 
         @Test
-        void genericLabelIsUsedWhenAKindDeclaresNoOverride() {
+        void noKindOffersAcknowledgeAnyMore() {
+            // Kept in the vocabulary for rows already ACKNOWLEDGED; offered by nothing, so
+            // dispatchable by nothing.
+            for (FailureKind kind : FailureKind.values()) {
+                assertThat(kind.declares(FailureActionId.ACKNOWLEDGE))
+                        .as("%s offers ACKNOWLEDGE", kind.getId())
+                        .isFalse();
+            }
+        }
+
+        @Test
+        void everyKindLabelsItsActionsWithTheSharedWordingToday() {
+            // The per-kind override still exists for wording that reads badly in context.
+            for (FailureKind kind : FailureKind.values()) {
+                for (FailureActionId action : kind.getActions()) {
+                    assertThat(kind.labelKeyFor(action))
+                            .isEqualTo(FailureKind.genericLabelKey(action));
+                }
+            }
+        }
+
+        @Test
+        void genericLabelIsDerivedFromTheActionId() {
             assertThat(FailureKind.UNKNOWN.labelKeyFor(FailureActionId.DISMISS))
                     .isEqualTo(FailureKind.genericLabelKey(FailureActionId.DISMISS))
                     .isEqualTo("portal.failures.action.dismiss");
+            assertThat(
+                            FailureKind.INPUT_PASSWORD_PROTECTED.labelKeyFor(
+                                    FailureActionId.VIEW_IN_PROCESSOR))
+                    .isEqualTo("portal.failures.action.viewInProcessor");
         }
 
         @Test
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventControllerTest.java
index a4b830d0f8..3ece59f6af 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventControllerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventControllerTest.java
@@ -51,9 +51,7 @@ class FileRunEventControllerTest {
                         List.of(new AcknowledgeAction(store), new DismissAction(store)));
         controller =
                 new FileRunEventController(
-                        new FileRunEventService(store, registry, authority, userService, props),
-                        authority,
-                        props);
+                        new FileRunEventService(store, registry, authority, userService, props));
 
         lenient().when(authority.canEditPolicies()).thenReturn(true);
         lenient().when(authority.currentUserTeamId()).thenReturn(TEAM);
@@ -61,19 +59,46 @@ class FileRunEventControllerTest {
     }
 
     private FileRunEvent given(FailureKind kind, Long teamId, String fileId) {
+        return recorded("author@example.com", kind, teamId, fileId, "run-1");
+    }
+
+    /**
+     * As {@link #given} but naming who hit it, in its own run. A RUN-scoped kind keys on the run,
+     * so two rows sharing one run id are one incident, however they differ otherwise.
+     */
+    private FileRunEvent givenHitBy(String actor, FailureKind kind, Long teamId, String fileId) {
+        return recorded(actor, kind, teamId, fileId, "run-" + fileId);
+    }
+
+    private FileRunEvent recorded(
+            String actor, FailureKind kind, Long teamId, String fileId, String runId) {
         return store.record(
                 new RecordFailure(
                         kind,
                         FailureOrigin.POLICY,
                         teamId,
-                        "author@example.com",
+                        actor,
                         "policy-1",
-                        "run-1",
+                        runId,
                         null,
                         fileId,
                         "the raw failure message"));
     }
 
+    private static List<String> fileIds(int count) {
+        return java.util.stream.IntStream.range(0, count).mapToObj(i -> "f-" + i).toList();
+    }
+
+    /** The status a refused call came back with. Fails the test if the call was allowed. */
+    private HttpStatus statusOf(Runnable call) {
+        try {
+            call.run();
+        } catch (ResponseStatusException e) {
+            return HttpStatus.valueOf(e.getStatusCode().value());
+        }
+        throw new AssertionError("expected the call to be refused");
+    }
+
     @Nested
     @DisplayName("listing")
     class Listing {
@@ -103,7 +128,9 @@ class FileRunEventControllerTest {
         }
 
         @Test
-        void carriesActionsAlreadyResolvedForTheRow() {
+        void carriesActionsAlreadyResolvedForTheRowAndItsReader() {
+            // A leader reading a colleague's password failure: the unlock is not theirs to do,
+            // so it is not in the list at all.
             given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
 
             List<FileRunEventView.ActionView> actions =
@@ -111,12 +138,35 @@ class FileRunEventControllerTest {
 
             assertThat(actions)
                     .extracting(FileRunEventView.ActionView::id)
-                    .containsExactlyInAnyOrder("ACKNOWLEDGE", "DISMISS");
+                    .containsExactly("VIEW_IN_PROCESSOR", "DISMISS");
             assertThat(actions).allMatch(FileRunEventView.ActionView::enabled);
         }
 
+        @Test
+        void carriesEnoughForAClientToRenderAndRouteAnActionItDoesNotKnow() {
+            // The English fallback, which side runs it, and where the kind wants it: everything a
+            // build with no copy for a newly shipped action still needs.
+            given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(controller.list(null, null, null).events().getFirst().actions())
+                    .allSatisfy(
+                            action -> {
+                                assertThat(action.defaultLabel()).isNotBlank();
+                                assertThat(action.execution()).isNotNull();
+                            })
+                    .filteredOn(action -> "VIEW_IN_PROCESSOR".equals(action.id()))
+                    .singleElement()
+                    .satisfies(
+                            action -> {
+                                assertThat(action.execution())
+                                        .isEqualTo(FailureActionId.Execution.CLIENT);
+                                assertThat(action.defaultLabel()).isEqualTo("View in processor");
+                            });
+        }
+
         @Test
         void showsAClosedRowsActionsDisabledWithAReasonRatherThanHidingThem() {
+            // Only visible by asking for the closed status: the default queue drops it.
             FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
             controller.act(event.id(), "DISMISS", null);
 
@@ -134,15 +184,20 @@ class FileRunEventControllerTest {
 
         @Test
         void filtersByStatusAndByKind() {
-            FileRunEvent open = given(FailureKind.UNKNOWN, TEAM, "open");
-            given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "locked");
-            controller.act(open.id(), "ACKNOWLEDGE", null);
+            FileRunEvent locked = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "locked");
+            given(FailureKind.UNKNOWN, TEAM, "open");
+            controller.act(locked.id(), "DISMISS", null);
 
-            assertThat(controller.list(FileRunEventStatus.ACKNOWLEDGED, null, null).events())
-                    .hasSize(1);
-            assertThat(controller.list(null, "INPUT_PASSWORD_PROTECTED", null).events())
+            assertThat(controller.list(FileRunEventStatus.DISMISSED, null, null).events())
                     .extracting(FileRunEventView::fileId)
                     .containsExactly("locked");
+            // A dismissed row is decided, so the default queue holds only the other one.
+            assertThat(controller.list(null, null, null).events())
+                    .extracting(FileRunEventView::fileId)
+                    .containsExactly("open");
+            assertThat(controller.list(null, "INPUT_PASSWORD_PROTECTED", null).events())
+                    .extracting(FileRunEventView::fileId)
+                    .isEmpty();
             assertThat(controller.list(null, "NO_SUCH_KIND", null).events()).isEmpty();
         }
 
@@ -182,12 +237,31 @@ class FileRunEventControllerTest {
 
         @Test
         void appliesADeclaredActionAndReturnsTheUpdatedRow() {
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            FileRunEventView updated = controller.act(event.id(), "DISMISS", null);
+
+            assertThat(updated.status()).isEqualTo(FileRunEventStatus.DISMISSED);
+            assertThat(updated.statusActor()).isEqualTo("reviewer@example.com");
+        }
+
+        @Test
+        void anActionTheClientRunsIsABadRequest() {
+            // Offered, and still not the server's to perform: the document is in the browser.
             FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
 
-            FileRunEventView updated = controller.act(event.id(), "ACKNOWLEDGE", null);
+            assertThat(statusOf(() -> controller.act(event.id(), "VIEW_FILE", null)))
+                    .isEqualTo(HttpStatus.BAD_REQUEST);
+        }
 
-            assertThat(updated.status()).isEqualTo(FileRunEventStatus.ACKNOWLEDGED);
-            assertThat(updated.statusActor()).isEqualTo("reviewer@example.com");
+        @Test
+        void anActionNoKindOffersAnyMoreIsABadRequest() {
+            // ACKNOWLEDGE is still in the vocabulary for the rows that carry it, and still not
+            // something any kind offers, so posting it is refused rather than applied.
+            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
+
+            assertThat(statusOf(() -> controller.act(event.id(), "ACKNOWLEDGE", null)))
+                    .isEqualTo(HttpStatus.BAD_REQUEST);
         }
 
         @Test
@@ -211,28 +285,19 @@ class FileRunEventControllerTest {
             // 404 rather than 403, so the response does not confirm the row exists.
             FileRunEvent theirs = given(FailureKind.UNKNOWN, 99L, "f1");
 
-            assertThat(statusOf(() -> controller.act(theirs.id(), "ACKNOWLEDGE", null)))
+            assertThat(statusOf(() -> controller.act(theirs.id(), "DISMISS", null)))
                     .isEqualTo(HttpStatus.NOT_FOUND);
         }
 
         @Test
         void anAlreadyClosedRowIsAConflict() {
             // The request was well formed and would have been valid a moment earlier.
-            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
             controller.act(event.id(), "DISMISS", null);
 
-            assertThat(statusOf(() -> controller.act(event.id(), "ACKNOWLEDGE", null)))
+            assertThat(statusOf(() -> controller.act(event.id(), "DISMISS", null)))
                     .isEqualTo(HttpStatus.CONFLICT);
         }
-
-        private HttpStatus statusOf(Runnable call) {
-            try {
-                call.run();
-            } catch (ResponseStatusException e) {
-                return HttpStatus.valueOf(e.getStatusCode().value());
-            }
-            throw new AssertionError("expected the call to be refused");
-        }
     }
 
     @Nested
@@ -258,7 +323,7 @@ class FileRunEventControllerTest {
 
             assertThat(locked.actions())
                     .extracting(FailureKindView.ActionDeclaration::labelKey)
-                    .contains("portal.failures.action.dismissSkipFile");
+                    .contains("portal.failures.action.viewFile", "portal.failures.action.dismiss");
         }
 
         @Test
@@ -274,48 +339,68 @@ class FileRunEventControllerTest {
     }
 
     @Nested
-    @DisplayName("only a team leader may review failures")
+    @DisplayName("a leader reviews the team's failures, everyone else their own")
     class Authorization {
 
         @Test
-        void aMemberCannotListThem() {
+        void aMemberSeesTheirOwnFailuresAndNobodyElses() {
+            // A member can report a failure, so they get to see it back. It must not widen to a
+            // colleague's.
+            givenHitBy("reviewer@example.com", FailureKind.UNKNOWN, TEAM, "mine");
+            givenHitBy("colleague@example.com", FailureKind.UNKNOWN, TEAM, "theirs");
             when(authority.canEditPolicies()).thenReturn(false);
 
-            assertThatThrownBy(() -> controller.list(null, null, null))
-                    .isInstanceOf(ResponseStatusException.class)
-                    .satisfies(
-                            e ->
-                                    assertThat(((ResponseStatusException) e).getStatusCode())
-                                            .isEqualTo(HttpStatus.FORBIDDEN));
+            assertThat(controller.list(null, null, null).events())
+                    .extracting(FileRunEventView::fileId)
+                    .containsExactly("mine");
         }
 
         @Test
-        void aMemberCannotDispatchAnAction() {
-            // The read being refused is not enough on its own: an id learned any other way must
-            // not let a member close another user's failure.
-            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f-1");
-            when(authority.canEditPolicies()).thenReturn(false);
+        void aLeaderSeesTheWholeTeams() {
+            givenHitBy("reviewer@example.com", FailureKind.UNKNOWN, TEAM, "mine");
+            givenHitBy("colleague@example.com", FailureKind.UNKNOWN, TEAM, "theirs");
+            when(authority.canEditPolicies()).thenReturn(true);
 
-            assertThatThrownBy(() -> controller.act(event.id(), "DISMISS", null))
-                    .isInstanceOf(ResponseStatusException.class)
-                    .satisfies(
-                            e ->
-                                    assertThat(((ResponseStatusException) e).getStatusCode())
-                                            .isEqualTo(HttpStatus.FORBIDDEN));
+            assertThat(controller.list(null, null, null).events())
+                    .extracting(FileRunEventView::fileId)
+                    .containsExactlyInAnyOrder("mine", "theirs");
         }
 
         @Test
-        void theRegistryIsAlsoLeaderOnly() {
+        void aMemberMayCloseTheirOwn() {
+            // Someone who fixes their own problem should not have to ask a leader to clear the row.
+            FileRunEvent mine =
+                    givenHitBy("reviewer@example.com", FailureKind.UNKNOWN, TEAM, "mine");
             when(authority.canEditPolicies()).thenReturn(false);
 
-            assertThatThrownBy(() -> controller.kinds())
-                    .isInstanceOf(ResponseStatusException.class);
+            assertThat(controller.act(mine.id(), "DISMISS", null).status())
+                    .isEqualTo(FileRunEventStatus.DISMISSED);
+        }
+
+        @Test
+        void aMemberCannotCloseAColleaguesEvenKnowingTheId() {
+            // Refusing the read is not enough on its own: an id learned any other way must not work
+            // either. Answered as not-found rather than forbidden, so trying does not confirm the
+            // row exists.
+            FileRunEvent theirs =
+                    givenHitBy("colleague@example.com", FailureKind.UNKNOWN, TEAM, "theirs");
+            when(authority.canEditPolicies()).thenReturn(false);
+
+            assertThat(statusOf(() -> controller.act(theirs.id(), "DISMISS", null)))
+                    .isEqualTo(HttpStatus.NOT_FOUND);
+        }
+
+        @Test
+        void theRegistryIsOpenBecauseItIsCopyNotData() {
+            // A member renders the failures they can see, so they need the labels for them. No role
+            // stub: the point is that kinds() never asks.
+            assertThat(controller.kinds()).isNotEmpty();
         }
 
         @Test
         void loginDisabledTrustsTheLocalOperator() {
-            // A single-user deployment has no roles to distinguish, so the role gate must not lock
-            // the only user out of their own failures.
+            // A single-user deployment has no roles to distinguish, so the narrowing must not leave
+            // the only user reading nothing.
             ApplicationProperties unsecured = new ApplicationProperties();
             unsecured.getSecurity().setEnableLogin(false);
             FileRunEventController noLogin =
@@ -328,9 +413,7 @@ class FileRunEventControllerTest {
                                                     new DismissAction(store))),
                                     authority,
                                     userService,
-                                    unsecured),
-                            authority,
-                            unsecured);
+                                    unsecured));
 
             assertThatCode(() -> noLogin.list(null, null, null)).doesNotThrowAnyException();
             // Not merely permitted: the role is never consulted at all, which is what makes the
@@ -375,9 +458,7 @@ class FileRunEventControllerTest {
                                                     new DismissAction(store))),
                                     authority,
                                     userService,
-                                    unsecured),
-                            authority,
-                            unsecured);
+                                    unsecured));
             given(FailureKind.UNKNOWN, null, "unteamed");
             given(FailureKind.UNKNOWN, TEAM, "teamed");
 
@@ -387,6 +468,109 @@ class FileRunEventControllerTest {
         }
     }
 
+    @Nested
+    @DisplayName("reporting from the editor")
+    class Reporting {
+
+        @Test
+        void aMemberMayReportAndThenSeeTheirOwnReport() {
+            // Reporting was always open to a member; reading their own back is the round trip that
+            // makes the report worth anything to them.
+            when(authority.canEditPolicies()).thenReturn(false);
+
+            assertThatCode(
+                            () ->
+                                    controller.report(
+                                            new EditorFailureReport(
+                                                    "compress", "E004", List.of("f-1"), "boom")))
+                    .doesNotThrowAnyException();
+            assertThat(controller.list(null, null, null).events())
+                    .extracting(FileRunEventView::fileId)
+                    .containsExactly("f-1");
+        }
+
+        @Test
+        void answersWithNoContentSoTheEditorNeverWaitsOnABody() {
+            EditorFailureReport report =
+                    new EditorFailureReport("compress", "E004", List.of("f-1"), "boom");
+
+            assertThat(controller.report(report).getStatusCode()).isEqualTo(HttpStatus.NO_CONTENT);
+        }
+
+        @Test
+        void rejectsAReportWithNoOperation() {
+            assertThat(
+                            statusOf(
+                                    () ->
+                                            controller.report(
+                                                    new EditorFailureReport(
+                                                            " ", "E004", List.of("f-1"), "boom"))))
+                    .isEqualTo(HttpStatus.BAD_REQUEST);
+        }
+
+        @Test
+        void acceptsAReportAtTheFileLimitAndRecordsEveryRow() {
+            List<String> atLimit = fileIds(EditorFailureReport.MAX_FILE_IDS);
+
+            EditorFailureReport report =
+                    new EditorFailureReport("compress", "E004", atLimit, "boom");
+
+            assertThat(controller.report(report).getStatusCode()).isEqualTo(HttpStatus.NO_CONTENT);
+            assertThat(store.list(TEAM, null, null, null, EditorFailureReport.MAX_FILE_IDS + 10))
+                    .hasSize(EditorFailureReport.MAX_FILE_IDS);
+        }
+
+        @Test
+        void refusesAReportOverTheFileLimitAndRecordsNothing() {
+            // One call used to be able to mint an unbounded number of permanent incidents, since
+            // each named file gets its own row and TOOL dedup keys never fold across ids. Refused
+            // rather than trimmed so nothing is lost silently, and refused before the first write
+            // so a rejected report cannot leave a partial set behind either.
+            List<String> overLimit = fileIds(EditorFailureReport.MAX_FILE_IDS + 1);
+
+            assertThat(
+                            statusOf(
+                                    () ->
+                                            controller.report(
+                                                    new EditorFailureReport(
+                                                            "compress",
+                                                            "E004",
+                                                            overLimit,
+                                                            "boom"))))
+                    .isEqualTo(HttpStatus.BAD_REQUEST);
+            assertThat(store.list(TEAM, null, null, null, EditorFailureReport.MAX_FILE_IDS + 10))
+                    .isEmpty();
+        }
+
+        @Test
+        void saysWhatTheLimitIsSoAClientAuthorCanSeeWhatHappened() {
+            // The editor reports in the background, so the message is the only place this surfaces.
+            assertThatThrownBy(
+                            () ->
+                                    controller.report(
+                                            new EditorFailureReport(
+                                                    "compress",
+                                                    "E004",
+                                                    fileIds(EditorFailureReport.MAX_FILE_IDS + 1),
+                                                    "boom")))
+                    .isInstanceOf(ResponseStatusException.class)
+                    .hasMessageContaining(String.valueOf(EditorFailureReport.MAX_FILE_IDS));
+        }
+
+        @Test
+        void theReportHasNoTeamOrFileNameToSupply() {
+            // Stated as a test because the absence of those fields is the property. Adding either
+            // to
+            // EditorFailureReport breaks this at compile time.
+            List<String> components =
+                    java.util.Arrays.stream(EditorFailureReport.class.getRecordComponents())
+                            .map(java.lang.reflect.RecordComponent::getName)
+                            .toList();
+
+            assertThat(components).containsExactly("operation", "errorCode", "fileIds", "detail");
+        }
+    }
+
     @Nested
     @DisplayName("action request body")
     class RequestBody {
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventHttpIntegrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventHttpIntegrationTest.java
index 3537c9e06c..ae46a50c8a 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventHttpIntegrationTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventHttpIntegrationTest.java
@@ -120,13 +120,20 @@ class FileRunEventHttpIntegrationTest {
             // Epoch millis, not an ISO string: the client renders relative times from a number.
             assertThat(row.get("lastSeenAt").isNumber()).isTrue();
 
+            // Resolved for this reader: a leader looking at a colleague's password failure is
+            // offered the run and a way to close the row, not a password they do not have.
             JsonNode actions = row.get("actions");
             assertThat(actions).hasSize(2);
-            assertThat(actions.get(0).get("id").asString()).isEqualTo("ACKNOWLEDGE");
+            assertThat(actions.get(0).get("id").asString()).isEqualTo("VIEW_IN_PROCESSOR");
             assertThat(actions.get(0).get("labelKey").asString())
-                    .isEqualTo("portal.failures.action.acknowledge");
+                    .isEqualTo("portal.failures.action.viewInProcessor");
+            assertThat(actions.get(0).get("defaultLabel").asString())
+                    .isEqualTo("View in processor");
+            assertThat(actions.get(0).get("execution").asString()).isEqualTo("CLIENT");
             assertThat(actions.get(0).get("enabled").asBoolean()).isTrue();
             assertThat(actions.get(0).get("disabledReasonKey").isNull()).isTrue();
+            assertThat(actions.get(1).get("id").asString()).isEqualTo("DISMISS");
+            assertThat(actions.get(1).get("execution").asString()).isEqualTo("SERVER");
         }
 
         @Test
@@ -152,18 +159,19 @@ class FileRunEventHttpIntegrationTest {
 
         @Test
         void coercesQueryParametersAndFiltersOnThem() throws Exception {
-            String open = seed(FailureKind.UNKNOWN, TEAM, "open", "a");
-            seed(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "locked", "b");
-            post("/api/v1/file-run-events/" + open + "/actions/ACKNOWLEDGE", "{\"inputs\":{}}");
+            String locked = seed(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "locked", "b");
+            seed(FailureKind.UNKNOWN, TEAM, "open", "a");
+            post("/api/v1/file-run-events/" + locked + "/actions/DISMISS", "{\"inputs\":{}}");
 
-            JsonNode acknowledged =
-                    mapper.readTree(get("/api/v1/file-run-events?status=ACKNOWLEDGED").body())
+            JsonNode dismissed =
+                    mapper.readTree(get("/api/v1/file-run-events?status=DISMISSED").body())
                             .get("events");
-            assertThat(acknowledged).hasSize(1);
+            assertThat(dismissed).hasSize(1);
 
             JsonNode byKind =
                     mapper.readTree(
-                                    get("/api/v1/file-run-events?kindId=INPUT_PASSWORD_PROTECTED")
+                                    get("/api/v1/file-run-events?status=DISMISSED"
+                                                    + "&kindId=INPUT_PASSWORD_PROTECTED")
                                             .body())
                             .get("events");
             assertThat(byKind).hasSize(1);
@@ -189,6 +197,75 @@ class FileRunEventHttpIntegrationTest {
         }
     }
 
+    @Nested
+    @DisplayName("reporting from the editor")
+    class Reporting {
+
+        @Test
+        void bindsAReportBodyAndAnswersNoContent() throws Exception {
+            HttpResponse<String> response =
+                    post(
+                            "/api/v1/file-run-events/reports",
+                            "{\"operation\":\"remove-password\",\"errorCode\":\"E004\","
+                                    + "\"fileIds\":[\"f-1\",\"f-2\"],\"detail\":\"locked\"}");
+
+            assertThat(response.statusCode()).isEqualTo(204);
+            assertThat(response.body()).isEmpty();
+
+            JsonNode events = mapper.readTree(get("/api/v1/file-run-events").body()).get("events");
+            assertThat(events).hasSize(2);
+            assertThat(events.get(0).get("origin").asString()).isEqualTo("TOOL");
+            assertThat(events.get(0).get("kindId").asString())
+                    .isEqualTo("INPUT_PASSWORD_PROTECTED");
+        }
+
+        @Test
+        void acceptsAReportWithNoCodeOrFiles() throws Exception {
+            HttpResponse<String> response =
+                    post(
+                            "/api/v1/file-run-events/reports",
+                            "{\"operation\":\"compress\",\"detail\":\"network died\"}");
+
+            assertThat(response.statusCode()).isEqualTo(204);
+            JsonNode events = mapper.readTree(get("/api/v1/file-run-events").body()).get("events");
+            assertThat(events).hasSize(1);
+            assertThat(events.get(0).get("kindId").asString()).isEqualTo("UNKNOWN");
+            assertThat(events.get(0).get("fileId").isNull()).isTrue();
+        }
+
+        @Test
+        void rejectsAReportWithNoOperation() throws Exception {
+            assertThat(
+                            post(
+                                            "/api/v1/file-run-events/reports",
+                                            "{\"errorCode\":\"E004\",\"detail\":\"boom\"}")
+                                    .statusCode())
+                    .isEqualTo(400);
+        }
+
+        @Test
+        void rejectsAnOversizedReportWithoutRecordingAnyOfIt() throws Exception {
+            // Over the wire because that is where the flood would arrive: one request, an
+            // arbitrarily long fileIds array, a permanent row per entry. The read-back is the point
+            // of the test, since a partial write would be worse than either accepting or refusing.
+            String ids =
+                    java.util.stream.IntStream.range(0, EditorFailureReport.MAX_FILE_IDS + 1)
+                            .mapToObj(i -> "\"f-" + i + "\"")
+                            .collect(java.util.stream.Collectors.joining(","));
+
+            HttpResponse<String> response =
+                    post(
+                            "/api/v1/file-run-events/reports",
+                            "{\"operation\":\"compress\",\"errorCode\":\"E004\",\"fileIds\":["
+                                    + ids
+                                    + "],\"detail\":\"boom\"}");
+
+            assertThat(response.statusCode()).isEqualTo(400);
+            assertThat(mapper.readTree(get("/api/v1/file-run-events").body()).get("events"))
+                    .isEmpty();
+        }
+    }
+
     @Nested
     @DisplayName("action dispatch")
     class Dispatch {
@@ -197,28 +274,26 @@ class FileRunEventHttpIntegrationTest {
         void bindsTheRequestBodyAndReturnsTheUpdatedRow() throws Exception {
             // The regression guard: an object body, sent as real JSON over the wire, binding into
             // ActionRequest. A double-encoded string would fail here.
-            String id = seed(FailureKind.UNKNOWN, TEAM, "f1", "boom");
+            String id = seed(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1", "boom");
 
             HttpResponse<String> response =
-                    post(
-                            "/api/v1/file-run-events/" + id + "/actions/ACKNOWLEDGE",
-                            "{\"inputs\":{}}");
+                    post("/api/v1/file-run-events/" + id + "/actions/DISMISS", "{\"inputs\":{}}");
 
             assertThat(response.statusCode()).isEqualTo(200);
             JsonNode row = mapper.readTree(response.body());
-            assertThat(row.get("status").asString()).isEqualTo("ACKNOWLEDGED");
+            assertThat(row.get("status").asString()).isEqualTo("DISMISSED");
             assertThat(row.get("statusActor").asString()).isEqualTo(ACTOR);
         }
 
         @Test
         void acceptsAPopulatedInputsMap() throws Exception {
-            // Nothing consumes inputs yet, but the shape must bind so the first action that needs
-            // one (a password) does not discover a broken contract.
+            // No server action consumes inputs, but the shape must still bind rather than 400, so a
+            // client that posts an empty or stale map is not refused over its body.
             String id = seed(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1", "locked");
 
             HttpResponse<String> response =
                     post(
-                            "/api/v1/file-run-events/" + id + "/actions/ACKNOWLEDGE",
+                            "/api/v1/file-run-events/" + id + "/actions/DISMISS",
                             "{\"inputs\":{\"password\":\"hunter2\"}}");
 
             assertThat(response.statusCode()).isEqualTo(200);
@@ -246,15 +321,27 @@ class FileRunEventHttpIntegrationTest {
                     .isEqualTo(400);
         }
 
+        @Test
+        void mapsAnActionTheClientRunsToBadRequest() throws Exception {
+            // Declared by the kind, refused here: over the wire, so a client that posts a retry
+            // gets a refusal rather than a 200 implying the server did something.
+            String id = seed(FailureKind.UNKNOWN, TEAM, "f1", "boom");
+
+            assertThat(
+                            post(
+                                            "/api/v1/file-run-events/" + id + "/actions/VIEW_FILE",
+                                            "{\"inputs\":{}}")
+                                    .statusCode())
+                    .isEqualTo(400);
+        }
+
         @Test
         void mapsAnotherTeamsRowToNotFound() throws Exception {
             String id = seed(FailureKind.UNKNOWN, 999L, "theirs", "boom");
 
             assertThat(
                             post(
-                                            "/api/v1/file-run-events/"
-                                                    + id
-                                                    + "/actions/ACKNOWLEDGE",
+                                            "/api/v1/file-run-events/" + id + "/actions/DISMISS",
                                             "{\"inputs\":{}}")
                                     .statusCode())
                     .isEqualTo(404);
@@ -262,14 +349,12 @@ class FileRunEventHttpIntegrationTest {
 
         @Test
         void mapsAnAlreadyClosedRowToConflict() throws Exception {
-            String id = seed(FailureKind.UNKNOWN, TEAM, "f1", "boom");
+            String id = seed(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1", "boom");
             post("/api/v1/file-run-events/" + id + "/actions/DISMISS", "{\"inputs\":{}}");
 
             assertThat(
                             post(
-                                            "/api/v1/file-run-events/"
-                                                    + id
-                                                    + "/actions/ACKNOWLEDGE",
+                                            "/api/v1/file-run-events/" + id + "/actions/DISMISS",
                                             "{\"inputs\":{}}")
                                     .statusCode())
                     .isEqualTo(409);
@@ -369,11 +454,8 @@ class FileRunEventHttpIntegrationTest {
         }
 
         @Bean
-        FileRunEventController fileRunEventController(
-                FileRunEventService service,
-                PolicyManagementAuthority authority,
-                ApplicationProperties props) {
-            return new FileRunEventController(service, authority, props);
+        FileRunEventController fileRunEventController(FileRunEventService service) {
+            return new FileRunEventController(service);
         }
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventServiceTest.java
index cd75c181c5..83ad173637 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventServiceTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventServiceTest.java
@@ -1,6 +1,7 @@
 package stirling.software.proprietary.failure;
 
 import static org.assertj.core.api.Assertions.assertThat;
+import static org.assertj.core.api.Assertions.assertThatCode;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
 import static org.mockito.Mockito.lenient;
 import static org.mockito.Mockito.when;
@@ -54,17 +55,26 @@ class FileRunEventServiceTest {
 
         lenient().when(authority.currentUserTeamId()).thenReturn(TEAM);
         lenient().when(userService.getCurrentUsername()).thenReturn(ACTOR);
+        // A leader unless a test says otherwise: most of these are about team scoping, which is
+        // what a leader sees. The member narrowing has its own tests.
+        lenient().when(authority.canEditPolicies()).thenReturn(true);
     }
 
     private FileRunEvent given(FailureKind kind, Long teamId, String fileId) {
+        return givenHitBy("author@example.com", kind, teamId, fileId);
+    }
+
+    /** As {@link #given} but naming who the incident belongs to, which decides its ownership. */
+    private FileRunEvent givenHitBy(String actor, FailureKind kind, Long teamId, String fileId) {
         return store.record(
                 new RecordFailure(
                         kind,
                         FailureOrigin.POLICY,
                         teamId,
-                        "author@example.com",
+                        actor,
                         "policy-1",
-                        "run-1",
+                        // Distinct per file, so a RUN-scoped kind does not fold two rows into one.
+                        "run-" + fileId,
                         null,
                         fileId,
                         "detail"));
@@ -74,11 +84,28 @@ class FileRunEventServiceTest {
     @DisplayName("acknowledge")
     class Acknowledge {
 
+        /**
+         * No kind offers it, so it cannot be dispatched; exercised directly for rows that have it.
+         */
+        private FileRunEvent acknowledge(FileRunEvent event, String actor) {
+            return new AcknowledgeAction(store).execute(event, Map.of(), actor);
+        }
+
+        @Test
+        void isNoLongerOfferedSoItCannotBeDispatched() {
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThatThrownBy(() -> service.dispatch(event.id(), "ACKNOWLEDGE", Map.of()))
+                    .isInstanceOf(FailureActionException.class)
+                    .extracting(e -> ((FailureActionException) e).getReason())
+                    .isEqualTo(FailureActionException.Reason.ACTION_NOT_DECLARED);
+        }
+
         @Test
         void movesANewEventToAcknowledgedAndStampsTheActor() {
-            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
 
-            FileRunEvent updated = service.dispatch(event.id(), "ACKNOWLEDGE", Map.of());
+            FileRunEvent updated = acknowledge(event, ACTOR);
 
             assertThat(updated.status()).isEqualTo(FileRunEventStatus.ACKNOWLEDGED);
             assertThat(updated.statusActor()).isEqualTo(ACTOR);
@@ -87,17 +114,25 @@ class FileRunEventServiceTest {
 
         @Test
         void isANoOpWhenAlreadyAcknowledgedSoOwnershipIsNotStolen() {
-            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
-            FileRunEvent first = service.dispatch(event.id(), "ACKNOWLEDGE", Map.of());
-            Instant originalAt = first.statusAt();
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+            Instant originalAt = acknowledge(event, ACTOR).statusAt();
 
-            when(userService.getCurrentUsername()).thenReturn("someone-else@example.com");
-            FileRunEvent second = service.dispatch(event.id(), "ACKNOWLEDGE", Map.of());
+            FileRunEvent second = acknowledge(event, "someone-else@example.com");
 
             assertThat(second.status()).isEqualTo(FileRunEventStatus.ACKNOWLEDGED);
             assertThat(second.statusActor()).isEqualTo(ACTOR);
             assertThat(second.statusAt()).isEqualTo(originalAt);
         }
+
+        @Test
+        void anAlreadyAcknowledgedRowStaysReadableAndClosable() {
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+            acknowledge(event, ACTOR);
+
+            assertThat(service.list(FileRunEventStatus.ACKNOWLEDGED, null, 10)).hasSize(1);
+            assertThat(service.dispatch(event.id(), "DISMISS", Map.of()).status())
+                    .isEqualTo(FileRunEventStatus.DISMISSED);
+        }
     }
 
     @Nested
@@ -114,8 +149,8 @@ class FileRunEventServiceTest {
 
         @Test
         void closesAnAcknowledgedEvent() {
-            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
-            service.dispatch(event.id(), "ACKNOWLEDGE", Map.of());
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+            new AcknowledgeAction(store).execute(event, Map.of(), ACTOR);
 
             assertThat(service.dispatch(event.id(), "DISMISS", Map.of()).status())
                     .isEqualTo(FileRunEventStatus.DISMISSED);
@@ -177,7 +212,7 @@ class FileRunEventServiceTest {
         void anotherTeamsEventIsNotFound() {
             FileRunEvent theirs = given(FailureKind.UNKNOWN, 99L, "f1");
 
-            assertThatThrownBy(() -> service.dispatch(theirs.id(), "ACKNOWLEDGE", Map.of()))
+            assertThatThrownBy(() -> service.dispatch(theirs.id(), "DISMISS", Map.of()))
                     .isInstanceOf(FailureActionException.class)
                     .extracting(e -> ((FailureActionException) e).getReason())
                     .isEqualTo(FailureActionException.Reason.EVENT_NOT_FOUND);
@@ -185,12 +220,44 @@ class FileRunEventServiceTest {
 
         @Test
         void anUnknownEventIdIsNotFound() {
-            assertThatThrownBy(() -> service.dispatch("nope", "ACKNOWLEDGE", Map.of()))
+            assertThatThrownBy(() -> service.dispatch("nope", "DISMISS", Map.of()))
                     .isInstanceOf(FailureActionException.class)
                     .extracting(e -> ((FailureActionException) e).getReason())
                     .isEqualTo(FailureActionException.Reason.EVENT_NOT_FOUND);
         }
 
+        @Test
+        void anActionTheClientRunsIsRefusedRatherThanPretendedTo() {
+            // Answering 200 would tell the client something happened when nothing did.
+            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
+
+            assertThatThrownBy(() -> service.dispatch(event.id(), "VIEW_FILE", Map.of()))
+                    .isInstanceOf(FailureActionException.class)
+                    .extracting(e -> ((FailureActionException) e).getReason())
+                    .isEqualTo(FailureActionException.Reason.ACTION_NOT_DISPATCHABLE);
+
+            assertThat(store.find(event.id(), TEAM).orElseThrow().status())
+                    .isEqualTo(FileRunEventStatus.NEW);
+        }
+
+        @Test
+        void everyClientActionIsRefusedWhicheverKindDeclaresIt() {
+            // Over the whole vocabulary, so a client action added later cannot arrive dispatchable.
+            for (FailureKind kind : FailureKind.values()) {
+                FileRunEvent event = given(kind, TEAM, "f-" + kind.getId());
+                for (FailureActionId action : kind.getActions()) {
+                    if (action.runsOnServer()) {
+                        continue;
+                    }
+                    assertThatThrownBy(() -> service.dispatch(event.id(), action.name(), Map.of()))
+                            .as("%s offers %s", kind.getId(), action)
+                            .isInstanceOf(FailureActionException.class)
+                            .extracting(e -> ((FailureActionException) e).getReason())
+                            .isEqualTo(FailureActionException.Reason.ACTION_NOT_DISPATCHABLE);
+                }
+            }
+        }
+
         @Test
         void anUnknownActionIdIsRejected() {
             FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
@@ -225,14 +292,9 @@ class FileRunEventServiceTest {
 
         @Test
         void aClosedEventCannotBeActedOnAgain() {
-            FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
+            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
             service.dispatch(event.id(), "DISMISS", Map.of());
 
-            assertThatThrownBy(() -> service.dispatch(event.id(), "ACKNOWLEDGE", Map.of()))
-                    .isInstanceOf(FailureActionException.class)
-                    .extracting(e -> ((FailureActionException) e).getReason())
-                    .isEqualTo(FailureActionException.Reason.ALREADY_CLOSED);
-
             assertThatThrownBy(() -> service.dispatch(event.id(), "DISMISS", Map.of()))
                     .isInstanceOf(FailureActionException.class)
                     .extracting(e -> ((FailureActionException) e).getReason())
@@ -241,18 +303,184 @@ class FileRunEventServiceTest {
     }
 
     @Nested
-    @DisplayName("available actions are resolved per row")
-    class Availability {
+    @DisplayName("ownership is derived against whoever is reading")
+    class OwnershipDerivation {
 
         @Test
-        void openRowOffersEveryDeclaredActionEnabled() {
-            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+        void theCallersOwnFailureIsMine() {
+            FileRunEvent mine = givenHitBy(ACTOR, FailureKind.UNKNOWN, TEAM, "f1");
 
-            List<FileRunEventService.AvailableAction> actions = service.availableActions(event);
+            assertThat(service.ownershipOf(mine)).isEqualTo(Ownership.MINE);
+        }
 
-            assertThat(actions).hasSize(2);
-            assertThat(actions).allMatch(FileRunEventService.AvailableAction::enabled);
-            assertThat(actions).allMatch(action -> action.disabledReasonKey() == null);
+        @Test
+        void aColleaguesIsTheirs() {
+            FileRunEvent theirs =
+                    givenHitBy("colleague@example.com", FailureKind.UNKNOWN, TEAM, "f1");
+
+            assertThat(service.ownershipOf(theirs)).isEqualTo(Ownership.THEIRS);
+        }
+
+        @Test
+        void anUnattendedRunsIsNobodys() {
+            // A trigger-fired run has no user to name, so there is nobody to hand the fix to.
+            FileRunEvent unattended = givenHitBy(null, FailureKind.UNKNOWN, TEAM, "f1");
+
+            assertThat(service.ownershipOf(unattended)).isEqualTo(Ownership.UNOWNED);
+        }
+
+        @Test
+        void theSameRowIsMineToOnePersonAndTheirsToAnother() {
+            // Why it is derived: a stored answer would be wrong for everyone but one person.
+            FileRunEvent event = givenHitBy(ACTOR, FailureKind.UNKNOWN, TEAM, "f1");
+            assertThat(service.ownershipOf(event)).isEqualTo(Ownership.MINE);
+
+            when(userService.getCurrentUsername()).thenReturn("colleague@example.com");
+
+            assertThat(service.ownershipOf(event)).isEqualTo(Ownership.THEIRS);
+        }
+    }
+
+    @Nested
+    @DisplayName("available actions are resolved per row and per reader")
+    class Availability {
+
+        private List<FailureActionId> offeredFor(FileRunEvent event) {
+            return service.availableActions(event).stream()
+                    .map(FileRunEventService.AvailableAction::id)
+                    .toList();
+        }
+
+        @Test
+        void theOwnerIsOfferedTheirDocumentAndNotTheReviewersView() {
+            // The document is theirs to open; the processor view is for whoever reviews the team.
+            when(authority.canEditPolicies()).thenReturn(false);
+            FileRunEvent mine = givenHitBy(ACTOR, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(offeredFor(mine))
+                    .containsExactly(FailureActionId.VIEW_FILE, FailureActionId.DISMISS);
+            assertThat(service.availableActions(mine))
+                    .allMatch(FileRunEventService.AvailableAction::enabled);
+        }
+
+        @Test
+        void aReviewerReadingAColleaguesIsNotOfferedTheDocumentTheyDoNotHave() {
+            // Dropped, not disabled: greyed out would read as their permission problem.
+            FileRunEvent theirs =
+                    givenHitBy(
+                            "colleague@example.com",
+                            FailureKind.INPUT_PASSWORD_PROTECTED,
+                            TEAM,
+                            "f1");
+
+            assertThat(offeredFor(theirs))
+                    .containsExactly(FailureActionId.VIEW_IN_PROCESSOR, FailureActionId.DISMISS);
+        }
+
+        @Test
+        void aReviewerInheritsTheOwnerActionsOnAnUnattendedRow() {
+            // Nobody owns it, so without the inheritance the row could only ever be dismissed.
+            FileRunEvent unattended =
+                    givenHitBy(null, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(offeredFor(unattended))
+                    .containsExactly(
+                            FailureActionId.VIEW_FILE,
+                            FailureActionId.VIEW_IN_PROCESSOR,
+                            FailureActionId.DISMISS);
+        }
+
+        @Test
+        void inheritedOwnerActionsComeBackDisabledWithTheReasonWhy() {
+            // No browser holds a source-fed file, so it is stated rather than offered as a dead
+            // button.
+            FileRunEvent unattended =
+                    givenHitBy(null, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(service.availableActions(unattended))
+                    .filteredOn(action -> action.id() != FailureActionId.DISMISS)
+                    .filteredOn(action -> action.id() != FailureActionId.VIEW_IN_PROCESSOR)
+                    .isNotEmpty()
+                    .allSatisfy(
+                            action -> {
+                                assertThat(action.enabled()).isFalse();
+                                assertThat(action.disabledReasonKey())
+                                        .isEqualTo("portal.failures.disabled.unattended");
+                            });
+        }
+
+        @Test
+        void theReviewersOwnActionsStayUsableOnAnUnattendedRow() {
+            FileRunEvent unattended =
+                    givenHitBy(null, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(service.availableActions(unattended))
+                    .filteredOn(
+                            action ->
+                                    action.id() == FailureActionId.DISMISS
+                                            || action.id() == FailureActionId.VIEW_IN_PROCESSOR)
+                    .hasSize(2)
+                    .allMatch(FileRunEventService.AvailableAction::enabled);
+        }
+
+        @Test
+        void theOwnersActionsAreDisabledWhenTheRowNamesNoDocument() {
+            // Answered here, or the client calls it "not on this device" while it sits in their
+            // own workbench.
+            FileRunEvent documentless =
+                    givenHitBy(ACTOR, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, null);
+
+            assertThat(service.ownershipOf(documentless)).isEqualTo(Ownership.MINE);
+            assertThat(service.availableActions(documentless))
+                    .filteredOn(action -> action.id() != FailureActionId.DISMISS)
+                    .filteredOn(action -> action.id() != FailureActionId.VIEW_IN_PROCESSOR)
+                    .isNotEmpty()
+                    .allSatisfy(
+                            action -> {
+                                assertThat(action.enabled()).isFalse();
+                                assertThat(action.disabledReasonKey())
+                                        .isEqualTo("portal.failures.disabled.noDocument");
+                            });
+        }
+
+        @Test
+        void aRowThatNamesADocumentKeepsItsOwnerActionsUsable() {
+            FileRunEvent withDocument =
+                    givenHitBy(ACTOR, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(service.availableActions(withDocument))
+                    .isNotEmpty()
+                    .allMatch(FileRunEventService.AvailableAction::enabled);
+        }
+
+        @Test
+        void aMemberIsNotOfferedTheOwnerActionsOnAnUnattendedRow() {
+            // The inheritance is the reviewer's: a member has no claim on a run nobody attended.
+            when(authority.canEditPolicies()).thenReturn(false);
+            FileRunEvent unattended =
+                    givenHitBy(null, FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
+
+            assertThat(offeredFor(unattended)).containsExactly(FailureActionId.DISMISS);
+        }
+
+        @Test
+        void aLoginDisabledOperatorKeepsTheirOwnActions() {
+            // Unowned for want of users, not because nothing attended: the one operator holds the
+            // file.
+            ApplicationProperties props = new ApplicationProperties();
+            props.getSecurity().setEnableLogin(false);
+            FileRunEventService unsecured =
+                    new FileRunEventService(
+                            store,
+                            new FailureActionRegistry(List.of(new DismissAction(store))),
+                            authority,
+                            userService,
+                            props);
+            FileRunEvent event = givenHitBy(null, FailureKind.INPUT_PASSWORD_PROTECTED, null, "f1");
+
+            assertThat(unsecured.availableActions(event))
+                    .extracting(FileRunEventService.AvailableAction::enabled)
+                    .containsOnly(true);
         }
 
         @Test
@@ -272,27 +500,19 @@ class FileRunEventServiceTest {
         }
 
         @Test
-        void carriesTheKindsOverriddenLabelWhereItHasOne() {
-            FileRunEvent event = given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f1");
-
-            assertThat(service.availableActions(event))
-                    .extracting(FileRunEventService.AvailableAction::labelKey)
-                    .contains("portal.failures.action.dismissSkipFile");
-        }
-
-        @Test
-        void fallsBackToTheGenericLabelWhereTheKindDeclaresNoOverride() {
+        void carriesTheLabelKeyForEachOffer() {
             FileRunEvent event = given(FailureKind.UNKNOWN, TEAM, "f1");
 
             assertThat(service.availableActions(event))
                     .extracting(FileRunEventService.AvailableAction::labelKey)
-                    .containsExactlyInAnyOrder(
-                            "portal.failures.action.acknowledge", "portal.failures.action.dismiss");
+                    .containsExactly(
+                            "portal.failures.action.viewInProcessor",
+                            "portal.failures.action.dismiss");
         }
     }
 
     @Nested
-    @DisplayName("team scoping")
+    @DisplayName("read scoping")
     class Scoping {
 
         @Test
@@ -305,6 +525,68 @@ class FileRunEventServiceTest {
                     .containsExactly("mine");
         }
 
+        @Test
+        void aMemberReadsOnlyTheFailuresTheyCaused() {
+            // Reporting is open to a member, so reading their own back is what lets us tell them
+            // anything at all. A colleague's must not come with it.
+            store.record(RecordFailure.forEditor(FailureKind.UNKNOWN, TEAM, ACTOR, "mine", "boom"));
+            store.record(
+                    RecordFailure.forEditor(
+                            FailureKind.UNKNOWN, TEAM, "colleague@example.com", "theirs", "boom"));
+            when(authority.canEditPolicies()).thenReturn(false);
+
+            assertThat(service.list(null, null, 50))
+                    .extracting(FileRunEvent::fileId)
+                    .containsExactly("mine");
+        }
+
+        @Test
+        void aMemberWithNoResolvableNameReadsNothingRatherThanEverything() {
+            // Narrowing to "mine" needs a name to narrow by. Dropping the filter would hand the
+            // whole team to someone who may not have it.
+            given(FailureKind.UNKNOWN, TEAM, "mine");
+            when(authority.canEditPolicies()).thenReturn(false);
+            when(userService.getCurrentUsername()).thenReturn(null);
+
+            assertThat(service.list(null, null, 50)).isEmpty();
+        }
+
+        @Test
+        void aMemberCannotActOnAColleaguesRowEvenKnowingItsId() {
+            // Refusing the read is not enough on its own: an id learned any other way must not work
+            // either. Reported as not-found, so trying does not confirm the row exists.
+            FileRunEvent theirs =
+                    store.record(
+                            RecordFailure.forEditor(
+                                    FailureKind.UNKNOWN,
+                                    TEAM,
+                                    "colleague@example.com",
+                                    "theirs",
+                                    "boom"));
+            when(authority.canEditPolicies()).thenReturn(false);
+
+            assertThatThrownBy(() -> service.dispatch(theirs.id(), "DISMISS", Map.of()))
+                    .isInstanceOf(FailureActionException.class)
+                    .extracting(e -> ((FailureActionException) e).getReason())
+                    .isEqualTo(FailureActionException.Reason.EVENT_NOT_FOUND);
+
+            assertThat(store.find(theirs.id(), TEAM).orElseThrow().status())
+                    .isEqualTo(FileRunEventStatus.NEW);
+        }
+
+        @Test
+        void aMemberMayCloseTheirOwn() {
+            // Someone who fixes their own problem should not have to ask a leader to clear the row.
+            FileRunEvent mine =
+                    store.record(
+                            RecordFailure.forEditor(
+                                    FailureKind.UNKNOWN, TEAM, ACTOR, "mine", "boom"));
+            when(authority.canEditPolicies()).thenReturn(false);
+
+            assertThat(service.dispatch(mine.id(), "DISMISS", Map.of()).status())
+                    .isEqualTo(FileRunEventStatus.DISMISSED);
+        }
+
         @Test
         void aCallerWhoseTeamCannotBeResolvedReadsNothing() {
             // A run with no stored policy is recorded unteamed, and those rows are shared by every
@@ -386,8 +668,312 @@ class FileRunEventServiceTest {
             complete.verifyEveryDeclaredActionHasAHandler();
 
             for (FailureActionId id : FailureActionId.values()) {
-                assertThat(complete.find(id)).isPresent();
+                // Only server actions need a handler, which is why the boot check ignores the rest.
+                assertThat(complete.find(id).isPresent()).isEqualTo(id.runsOnServer());
+            }
+        }
+
+        @Test
+        void doesNotAskForAHandlerForAnActionTheClientRuns() {
+            // Otherwise every client action would need an empty handler beside it.
+            FailureActionRegistry serverOnly =
+                    new FailureActionRegistry(
+                            List.of(new AcknowledgeAction(store), new DismissAction(store)));
+
+            assertThatCode(serverOnly::verifyEveryDeclaredActionHasAHandler)
+                    .doesNotThrowAnyException();
+        }
+
+        @Test
+        void refusesAHandlerForAnActionTheClientRuns() {
+            // Dispatch refuses the id before resolving a handler, so the bean reads as live and is
+            // not.
+            assertThatThrownBy(() -> new FailureActionRegistry(List.of(new ClientSideAction())))
+                    .isInstanceOf(IllegalStateException.class)
+                    .hasMessageContaining("VIEW_FILE");
+        }
+
+        /** A handler for a client action, which is exactly what must not be registered. */
+        private static final class ClientSideAction implements FailureAction {
+
+            @Override
+            public FailureActionId id() {
+                return FailureActionId.VIEW_FILE;
+            }
+
+            @Override
+            public FileRunEvent execute(
+                    FileRunEvent event, Map<String, String> inputs, String actor) {
+                throw new UnsupportedOperationException();
             }
         }
     }
+
+    @Nested
+    @DisplayName("reporting a failure the user hit in the editor")
+    class Reporting {
+
+        @Test
+        void classifiesTheReportedCodeAndStampsItAsEditorOrigin() {
+            service.report(
+                    new EditorFailureReport("remove-password", "E004", List.of("f-1"), "boom"));
+
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
+            assertThat(event.kind()).isEqualTo(FailureKind.INPUT_PASSWORD_PROTECTED);
+            assertThat(event.origin()).isEqualTo(FailureOrigin.TOOL);
+            assertThat(event.fileId()).isEqualTo("f-1");
+            assertThat(event.detail()).contains("boom");
+        }
+
+        @Test
+        void takesTheTeamAndActorFromThePrincipalNotTheReport() {
+            // The report carries no team or actor field at all; both come from the caller's
+            // session.
+            service.report(new EditorFailureReport("compress", "E004", List.of("f-1"), "boom"));
+
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
+            assertThat(event.teamId()).isEqualTo(TEAM);
+            assertThat(event.actor()).isEqualTo(ACTOR);
+        }
+
+        @Test
+        void stillFilesTheRowUnderTheTeamWhenTheReporterCannotBeNamed() {
+            // Recording is open to everyone and takes the caller's team, not their read scope: a
+            // reporter who cannot be named reads nothing back, but the row is still the team's
+            // rather than dropping into the unteamed bucket every team shares. No role stub either,
+            // since recording never asks.
+            when(userService.getCurrentUsername()).thenReturn(null);
+
+            service.report(new EditorFailureReport("compress", "E004", List.of("f-1"), "boom"));
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .singleElement()
+                    .extracting(FileRunEvent::teamId)
+                    .isEqualTo(TEAM);
+        }
+
+        @Test
+        void recordsAnUnrecognisedCodeAsUnknownRatherThanDroppingIt() {
+            service.report(new EditorFailureReport("ocr", "E999", List.of("f-1"), "no idea"));
+
+            assertThat(store.list(TEAM, null, null, null, 10).getFirst().kind())
+                    .isEqualTo(FailureKind.UNKNOWN);
+        }
+
+        @Test
+        void recordsAnAbsentCodeAsUnknown() {
+            service.report(new EditorFailureReport("ocr", null, List.of("f-1"), "network died"));
+
+            assertThat(store.list(TEAM, null, null, null, 10).getFirst().kind())
+                    .isEqualTo(FailureKind.UNKNOWN);
+        }
+
+        @Test
+        void recordsOneIncidentPerFileSoEachDocumentStaysActionable() {
+            service.report(
+                    new EditorFailureReport(
+                            "compress", "E004", List.of("f-1", "f-2", "f-3"), "boom"));
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .hasSize(3)
+                    .extracting(FileRunEvent::fileId)
+                    .containsExactlyInAnyOrder("f-1", "f-2", "f-3");
+        }
+
+        @Test
+        void foldsARepeatOfTheSameFileIntoTheExistingIncident() {
+            service.report(new EditorFailureReport("compress", "E004", List.of("f-1"), "boom"));
+            service.report(
+                    new EditorFailureReport("compress", "E004", List.of("f-1"), "boom again"));
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .singleElement()
+                    .extracting(FileRunEvent::occurrences)
+                    .isEqualTo(2);
+        }
+
+        @Test
+        void recordsOneUnattributedIncidentWhenNoFileWasNamed() {
+            service.report(new EditorFailureReport("compress", "E004", List.of(), "boom"));
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .singleElement()
+                    .extracting(FileRunEvent::fileId)
+                    .isNull();
+        }
+
+        @Test
+        void recordsEveryFileInALargeBatchRatherThanTrimmingIt() {
+            // A cap here used to drop the overflow silently, so a reviewer saw 25 of 60 failures
+            // with nothing indicating the rest existed. The processor path has never had one.
+            List<String> many =
+                    java.util.stream.IntStream.range(0, 60).mapToObj(i -> "f-" + i).toList();
+
+            service.report(new EditorFailureReport("compress", "E004", many, "boom"));
+
+            assertThat(store.list(TEAM, null, null, null, 200)).hasSize(60);
+        }
+
+        @Test
+        void keepsTheOperationNameOutOfTheStoredDocumentReferences() {
+            // The operation is context for the reviewer, not a document reference: it belongs in
+            // detail, never in fileId.
+            service.report(
+                    new EditorFailureReport("remove-password", "E004", List.of("f-1"), "boom"));
+
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
+            assertThat(event.detail()).contains("remove-password");
+            assertThat(event.fileId()).isEqualTo("f-1");
+        }
+
+        @Test
+        void storesTheReportedMessageVerbatimAlongsideTheOperation() {
+            // The user's own error about their own file. The operation is prefixed because an
+            // editor failure has no run to give a reviewer context.
+            service.report(
+                    new EditorFailureReport(
+                            "compress", "E004", List.of("f-1"), "Failed on Q4 report.pdf"));
+
+            assertThat(store.list(TEAM, null, null, null, 10).getFirst().detail())
+                    .isEqualTo("compress: Failed on Q4 report.pdf");
+        }
+
+        @Test
+        void theServiceHoldsNothingThatCouldReachADocument() {
+            // Asserted structurally rather than with verifyNoInteractions on unwired mocks, which
+            // is how the version of this test on the other branch passed without proving anything.
+            List<Class<?>> forbidden =
+                    List.of(
+                            stirling.software.proprietary.policy.ledger.ProcessedLedger.class,
+                            stirling.software.common.service.FileStorage.class,
+                            stirling.software.proprietary.policy.output.PolicyOutputSink.class);
+
+            List<Class<?>> held =
+                    Arrays.stream(FileRunEventService.class.getDeclaredFields())
+                            .filter(field -> !field.isSynthetic())
+                            .map(Field::getType)
+                            .toList();
+
+            assertThat(held).isNotEmpty().doesNotContainAnyElementsOf(forbidden);
+        }
+    }
+
+    @Nested
+    @DisplayName("editor incidents stay separate")
+    class EditorIncidentIdentity {
+
+        private void reportedBy(String actor, String fileId) {
+            when(userService.getCurrentUsername()).thenReturn(actor);
+            service.report(new EditorFailureReport("compress", null, List.of(fileId), "boom"));
+        }
+
+        @Test
+        void twoPeopleHittingTheSameUnclassifiedFailureAreTwoIncidents() {
+            // UNKNOWN is RUN scoped and an editor report has no run, so without the fallback every
+            // unclassified editor failure in a team collapsed into one row: one actor credited for
+            // everyone's, and the wrong person offered the row.
+            reportedBy("alice@example.com", "a-1");
+            reportedBy("bob@example.com", "b-1");
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .extracting(FileRunEvent::actor)
+                    .containsExactlyInAnyOrder("alice@example.com", "bob@example.com");
+        }
+
+        @Test
+        void onePersonsTwoBrokenFilesAreTwoIncidents() {
+            reportedBy("alice@example.com", "a-1");
+            reportedBy("alice@example.com", "a-2");
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .extracting(FileRunEvent::fileId)
+                    .containsExactlyInAnyOrder("a-1", "a-2");
+        }
+
+        @Test
+        void theSamePersonHittingTheSameFileTwiceIsOneIncident() {
+            reportedBy("alice@example.com", "a-1");
+            reportedBy("alice@example.com", "a-1");
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .singleElement()
+                    .extracting(FileRunEvent::occurrences)
+                    .isEqualTo(2);
+        }
+    }
+
+    @Nested
+    @DisplayName("files deleted from the editor")
+    class RemovedFiles {
+
+        private void reported(String fileId) {
+            service.report(new EditorFailureReport("compress", "E004", List.of(fileId), "boom"));
+        }
+
+        @Test
+        void closeTheirIncidentsSoTheQueueStopsAskingAboutThem() {
+            reported("f-1");
+
+            assertThat(service.forgetFiles(List.of("f-1"))).isEqualTo(1);
+            assertThat(service.list(null, null, 10))
+                    .as("the open queue is what the reviewer works from")
+                    .isEmpty();
+        }
+
+        @Test
+        void theRowSurvivesForAudit() {
+            reported("f-1");
+            service.forgetFiles(List.of("f-1"));
+
+            assertThat(service.list(FileRunEventStatus.FILE_REMOVED, null, 10))
+                    .singleElement()
+                    .satisfies(
+                            event -> {
+                                assertThat(event.fileId()).isEqualTo("f-1");
+                                assertThat(event.detail()).contains("boom");
+                            });
+        }
+
+        @Test
+        void aReviewersDismissKeepsItsMeaningAndItsActor() {
+            reported("f-1");
+            FileRunEvent event = service.list(null, null, 10).getFirst();
+            service.dispatch(event.id(), "DISMISS", Map.of());
+
+            assertThat(service.forgetFiles(List.of("f-1")))
+                    .as("only open rows move; a closed one has already been decided")
+                    .isZero();
+            assertThat(service.list(FileRunEventStatus.DISMISSED, null, 10)).hasSize(1);
+        }
+
+        @Test
+        void aColleaguesIncidentIsUntouchedEvenForALeader() {
+            // File ids come from the client, so naming one must not close someone else's row. The
+            // caller here is a leader, who reads the whole team: this path narrows to their own
+            // rows
+            // regardless, since a null actor would otherwise match every unattributed row.
+            store.record(
+                    RecordFailure.forEditor(
+                            FailureKind.UNKNOWN, TEAM, "employee@example.com", "f-1", "theirs"));
+
+            assertThat(service.forgetFiles(List.of("f-1"))).isZero();
+        }
+
+        @Test
+        void aProcessorIncidentIsUntouchedEvenOnTheSameFileId() {
+            // Nothing was deleted from an editor there, and the file may still be in the bucket.
+            given(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "f-1");
+
+            assertThat(service.forgetFiles(List.of("f-1"))).isZero();
+        }
+
+        @Test
+        void namingNoFilesClosesNothing() {
+            reported("f-1");
+
+            assertThat(service.forgetFiles(List.of())).isZero();
+            assertThat(service.forgetFiles(java.util.Arrays.asList(null, "  "))).isZero();
+            assertThat(service.list(null, null, 10)).hasSize(1);
+        }
+    }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreDbTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreDbTest.java
index 46d2be8a0d..af1353477d 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreDbTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreDbTest.java
@@ -6,6 +6,7 @@ import static org.assertj.core.api.Assertions.assertThatThrownBy;
 import java.lang.reflect.InvocationTargetException;
 import java.lang.reflect.Proxy;
 import java.time.Instant;
+import java.util.List;
 import java.util.UUID;
 import java.util.concurrent.atomic.AtomicBoolean;
 
@@ -54,11 +55,16 @@ class FileRunEventStoreDbTest {
     }
 
     private RecordFailure failure(FailureKind kind, Long teamId, String fileId) {
+        return failure(kind, teamId, "author@example.com", fileId);
+    }
+
+    /** As {@link #failure} but naming the actor, which is what the read scope narrows by. */
+    private RecordFailure failure(FailureKind kind, Long teamId, String actor, String fileId) {
         return new RecordFailure(
                 kind,
                 FailureOrigin.POLICY,
                 teamId,
-                "author@example.com",
+                actor,
                 "policy-1",
                 "run-1",
                 null,
@@ -73,16 +79,37 @@ class FileRunEventStoreDbTest {
         store.record(failure(FailureKind.UNKNOWN, OTHER_TEAM, "theirs"));
         store.record(failure(FailureKind.UNKNOWN, null, "unteamed"));
 
-        assertThat(store.list(TEAM, null, null, 10))
+        assertThat(store.list(TEAM, null, null, null, 10))
                 .extracting(FileRunEvent::fileId)
                 .containsExactly("ours");
         // A plain `e.teamId = :teamId` would return nothing here: SQL equality against NULL is
         // never true, which is what the explicit null branch in the JPQL exists for.
-        assertThat(store.list(null, null, null, 10))
+        assertThat(store.list(null, null, null, null, 10))
                 .extracting(FileRunEvent::fileId)
                 .containsExactly("unteamed");
     }
 
+    @Test
+    @DisplayName("actor narrowing is enforced by the query, within the team")
+    void actorNarrowingIsEnforcedBySql() {
+        // The clause that makes a member read only their own rows. Exercised here rather than only
+        // against the in-memory repository, which reimplements the filter in Java and would agree
+        // with a query that had lost it.
+        store.record(failure(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "mine@example.com", "f1"));
+        store.record(
+                failure(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "theirs@example.com", "f2"));
+        store.record(failure(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, null, "f3"));
+
+        assertThat(store.list(TEAM, null, null, "mine@example.com", 10))
+                .extracting(FileRunEvent::fileId)
+                .containsExactly("f1");
+        // A null actor is "no filter", which is what a leader reads with: the whole team, including
+        // the rows nobody is named on.
+        assertThat(store.list(TEAM, null, null, null, 10))
+                .extracting(FileRunEvent::fileId)
+                .containsExactlyInAnyOrder("f1", "f2", "f3");
+    }
+
     @Test
     @DisplayName("a fold lands on the row's current state, not the caller's snapshot")
     void foldTargetsTheCurrentRowNotACallersSnapshot() {
@@ -169,7 +196,7 @@ class FileRunEventStoreDbTest {
 
         assertThat(replacement.id()).isNotEqualTo(first.id());
         assertThat(replacement.occurrences()).isEqualTo(1);
-        assertThat(store.list(TEAM, null, null, 10)).hasSize(1);
+        assertThat(store.list(TEAM, null, null, null, 10)).hasSize(1);
     }
 
     @Test
@@ -187,7 +214,7 @@ class FileRunEventStoreDbTest {
         FileRunEvent folded = store.record(secondSweep);
 
         assertThat(folded.occurrences()).isEqualTo(2);
-        assertThat(store.list(TEAM, null, null, 10))
+        assertThat(store.list(TEAM, null, null, null, 10))
                 .as("one incident per document, however many runs it failed in")
                 .extracting(FileRunEvent::fileId)
                 .containsExactlyInAnyOrder("file-hash-a", "file-hash-b");
@@ -198,12 +225,94 @@ class FileRunEventStoreDbTest {
                 FailureKind.INPUT_PASSWORD_PROTECTED,
                 TEAM,
                 null,
+                null,
                 "policy-1",
                 runId,
                 fileId,
                 "locked");
     }
 
+    @Test
+    @DisplayName("deleting a document closes every incident about it that the deleter caused")
+    void markFilesRemovedIsScopedBySqlNotByTheCaller() {
+        // The scoping is entirely in the JPQL, so the in-memory fake proves nothing about it:
+        // it implements the same rules by hand and would agree with a wrong query.
+        FileRunEvent mine =
+                store.record(
+                        RecordFailure.forEditor(
+                                FailureKind.UNKNOWN, TEAM, "owner@example.com", "f-1", "boom"));
+        // Recorded by the processor, about the document they just deleted. Keying on origin left
+        // these in the queue.
+        FileRunEvent myPolicyRun =
+                store.record(failure(FailureKind.UNKNOWN, TEAM, "owner@example.com", "f-1"));
+        FileRunEvent theirs =
+                store.record(
+                        RecordFailure.forEditor(
+                                FailureKind.UNKNOWN, TEAM, "colleague@example.com", "f-1", "boom"));
+        FileRunEvent otherTeam =
+                store.record(
+                        RecordFailure.forEditor(
+                                FailureKind.UNKNOWN,
+                                OTHER_TEAM,
+                                "owner@example.com",
+                                "f-1",
+                                "boom"));
+
+        int closed = store.markFilesRemoved(TEAM, "owner@example.com", List.of("f-1"));
+
+        assertThat(closed).isEqualTo(2);
+        assertThat(store.find(mine.id(), TEAM).orElseThrow().status())
+                .isEqualTo(FileRunEventStatus.FILE_REMOVED);
+        assertThat(store.find(myPolicyRun.id(), TEAM).orElseThrow().status())
+                .as("their upload, their document, now deleted")
+                .isEqualTo(FileRunEventStatus.FILE_REMOVED);
+        assertThat(store.find(theirs.id(), TEAM).orElseThrow().status())
+                .as("another person's incident about their own file")
+                .isEqualTo(FileRunEventStatus.NEW);
+        assertThat(store.find(otherTeam.id(), OTHER_TEAM).orElseThrow().status())
+                .as("another team entirely")
+                .isEqualTo(FileRunEventStatus.NEW);
+    }
+
+    @Test
+    @DisplayName("a source-fed incident survives a client naming its file id")
+    void markFilesRemovedLeavesSourceFedRowsAlone() {
+        // With login disabled the actor is null on both sides, so the absence of a source is all
+        // that stands between a local delete and a sweep's incidents.
+        FileRunEvent sweep =
+                store.record(
+                        new RecordFailure(
+                                FailureKind.UNKNOWN,
+                                FailureOrigin.POLICY,
+                                null,
+                                null,
+                                "policy-1",
+                                "run-1",
+                                "src-watched-folder",
+                                "collides-with-a-client-id",
+                                "detail"));
+
+        int closed = store.markFilesRemoved(null, null, List.of("collides-with-a-client-id"));
+
+        assertThat(closed).isZero();
+        assertThat(store.find(sweep.id(), null).orElseThrow().status())
+                .isEqualTo(FileRunEventStatus.NEW);
+    }
+
+    @Test
+    @DisplayName("a row already closed by a reviewer is left as they left it")
+    void markFilesRemovedLeavesClosedRowsAlone() {
+        FileRunEvent event =
+                store.record(
+                        RecordFailure.forEditor(
+                                FailureKind.UNKNOWN, TEAM, "owner@example.com", "f-1", "boom"));
+        store.applyStatus(event.id(), TEAM, FileRunEventStatus.DISMISSED, "reviewer@example.com");
+
+        assertThat(store.markFilesRemoved(TEAM, "owner@example.com", List.of("f-1"))).isZero();
+        assertThat(store.find(event.id(), TEAM).orElseThrow().statusActor())
+                .isEqualTo("reviewer@example.com");
+    }
+
     @Test
     @DisplayName("the kind filter applies before the limit, not after")
     void kindFilterAppliesBeforeTheLimit() {
@@ -212,7 +321,7 @@ class FileRunEventStoreDbTest {
             store.record(failure(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "newer-" + i));
         }
 
-        assertThat(store.list(TEAM, null, "UNKNOWN", 1))
+        assertThat(store.list(TEAM, null, "UNKNOWN", null, 1))
                 .extracting(FileRunEvent::fileId)
                 .containsExactly("old-unknown");
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreTest.java
index 2adbc7d2b2..97de1952e9 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/FileRunEventStoreTest.java
@@ -281,7 +281,7 @@ class FileRunEventStoreTest {
             store.record(failure(FailureKind.UNKNOWN, TEAM, "mine", "a"));
             store.record(failure(FailureKind.UNKNOWN, OTHER_TEAM, "theirs", "b"));
 
-            assertThat(store.list(TEAM, null, null, 50))
+            assertThat(store.list(TEAM, null, null, null, 50))
                     .extracting(FileRunEvent::fileId)
                     .containsExactly("mine");
         }
@@ -293,18 +293,37 @@ class FileRunEventStoreTest {
             store.record(failure(FailureKind.UNKNOWN, null, "unteamed", "a"));
             store.record(failure(FailureKind.UNKNOWN, TEAM, "teamed", "b"));
 
-            assertThat(store.list(null, null, null, 50))
+            assertThat(store.list(null, null, null, null, 50))
                     .extracting(FileRunEvent::fileId)
                     .containsExactly("unteamed");
         }
 
+        @Test
+        void dismissingARowClearsItFromTheDefaultQueue() {
+            // The reviewer's whole complaint: without this, dismissing changes the buttons and
+            // leaves the row sitting there, so the list can only ever grow.
+            FileRunEvent event = store.record(failure(FailureKind.UNKNOWN, TEAM, "f1", "boom"));
+            store.applyStatus(event.id(), TEAM, FileRunEventStatus.DISMISSED, "reviewer");
+
+            assertThat(store.list(TEAM, null, null, null, 10)).isEmpty();
+            assertThat(store.list(TEAM, FileRunEventStatus.DISMISSED, null, null, 10)).hasSize(1);
+        }
+
+        @Test
+        void anAcknowledgedRowIsStillOpenWorkSoItStays() {
+            FileRunEvent event = store.record(failure(FailureKind.UNKNOWN, TEAM, "f1", "boom"));
+            store.applyStatus(event.id(), TEAM, FileRunEventStatus.ACKNOWLEDGED, "reviewer");
+
+            assertThat(store.list(TEAM, null, null, null, 10)).hasSize(1);
+        }
+
         @Test
         void filtersByStatus() {
             FileRunEvent open = store.record(failure(FailureKind.UNKNOWN, TEAM, "open", "a"));
             store.record(failure(FailureKind.INPUT_PASSWORD_PROTECTED, TEAM, "closed", "b"));
             store.applyStatus(open.id(), TEAM, FileRunEventStatus.ACKNOWLEDGED, "me");
 
-            assertThat(store.list(TEAM, FileRunEventStatus.ACKNOWLEDGED, null, 50))
+            assertThat(store.list(TEAM, FileRunEventStatus.ACKNOWLEDGED, null, null, 50))
                     .extracting(FileRunEvent::fileId)
                     .containsExactly("open");
         }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/InMemoryFileRunEventRepository.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/InMemoryFileRunEventRepository.java
index ed8b6f29cd..4f429fe9b1 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/InMemoryFileRunEventRepository.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/InMemoryFileRunEventRepository.java
@@ -6,6 +6,7 @@ import java.util.Collection;
 import java.util.HashMap;
 import java.util.List;
 import java.util.Map;
+import java.util.Objects;
 import java.util.Optional;
 import java.util.function.Function;
 
@@ -53,19 +54,18 @@ class InMemoryFileRunEventRepository implements FileRunEventRepository {
         return kindId == null || kindId.equals(entity.getKindId());
     }
 
-    @Override
-    public List<FileRunEventEntity> findByTeam(Long teamId, String kindId, Pageable pageable) {
-        return page(
-                newestFirst(
-                        rows.values().stream()
-                                .filter(e -> sameTeam(e, teamId) && sameKind(e, kindId))
-                                .toList()),
-                pageable);
+    /** Null means the whole team, matching the JPQL's {@code :actor is null} branch. */
+    private static boolean sameActor(FileRunEventEntity entity, String actor) {
+        return actor == null || actor.equals(entity.getActor());
     }
 
     @Override
     public List<FileRunEventEntity> findByTeamAndStatus(
-            Long teamId, FileRunEventStatus status, String kindId, Pageable pageable) {
+            Long teamId,
+            FileRunEventStatus status,
+            String kindId,
+            String actor,
+            Pageable pageable) {
         return page(
                 newestFirst(
                         rows.values().stream()
@@ -73,7 +73,8 @@ class InMemoryFileRunEventRepository implements FileRunEventRepository {
                                         e ->
                                                 sameTeam(e, teamId)
                                                         && e.getStatus() == status
-                                                        && sameKind(e, kindId))
+                                                        && sameKind(e, kindId)
+                                                        && sameActor(e, actor))
                                 .toList()),
                 pageable);
     }
@@ -124,6 +125,52 @@ class InMemoryFileRunEventRepository implements FileRunEventRepository {
         return 1;
     }
 
+    @Override
+    public int markFilesRemoved(
+            Long teamId,
+            String actor,
+            Collection<String> fileIds,
+            Instant now,
+            Collection<FileRunEventStatus> allowedFrom) {
+        int closed = 0;
+        for (FileRunEventEntity entity : rows.values()) {
+            // Mirrors the real query: scoped by the absence of a source, not by origin.
+            if (entity.getSourceId() != null
+                    || !sameTeam(entity, teamId)
+                    || !Objects.equals(entity.getActor(), actor)
+                    || entity.getFileId() == null
+                    || !fileIds.contains(entity.getFileId())
+                    || !allowedFrom.contains(entity.getStatus())) {
+                continue;
+            }
+            entity.setStatus(FileRunEventStatus.FILE_REMOVED);
+            entity.setStatusActor(actor);
+            entity.setStatusAt(now);
+            closed++;
+        }
+        return closed;
+    }
+
+    @Override
+    public List<FileRunEventEntity> findByTeamAndStatusIn(
+            Long teamId,
+            List<FileRunEventStatus> statuses,
+            String kindId,
+            String actor,
+            Pageable pageable) {
+        return page(
+                newestFirst(
+                        rows.values().stream()
+                                .filter(
+                                        e ->
+                                                sameTeam(e, teamId)
+                                                        && statuses.contains(e.getStatus())
+                                                        && sameKind(e, kindId)
+                                                        && sameActor(e, actor))
+                                .toList()),
+                pageable);
+    }
+
     @Override
     public List<FileRunEventEntity> findByTeamAndDedupKey(
             Long teamId, String dedupKey, Pageable pageable) {
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/NotificationProjectionTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/NotificationProjectionTest.java
new file mode 100644
index 0000000000..e76a8b96ee
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/NotificationProjectionTest.java
@@ -0,0 +1,168 @@
+package stirling.software.proprietary.failure;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.lenient;
+
+import java.util.List;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.UserServiceInterface;
+import stirling.software.proprietary.notification.NotificationController;
+import stirling.software.proprietary.notification.NotificationService;
+import stirling.software.proprietary.notification.NotificationSource;
+import stirling.software.proprietary.notification.NotificationView;
+import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
+
+/**
+ * What the bell is given to render: never a raw event id, and only the actions the client itself
+ * runs, resolved for this reader by the same service that scopes the queue.
+ */
+@ExtendWith(MockitoExtension.class)
+class NotificationProjectionTest {
+
+    private static final Long TEAM = 7L;
+    private static final String ACTOR = "reviewer@example.com";
+
+    @Mock private PolicyManagementAuthority authority;
+    @Mock private UserServiceInterface userService;
+
+    private FileRunEventStore store;
+    private FileRunEventService failures;
+    private NotificationController controller;
+
+    @BeforeEach
+    void setUp() {
+        ApplicationProperties props = new ApplicationProperties();
+        props.getSecurity().setEnableLogin(true);
+        store = new FileRunEventStore(new InMemoryFileRunEventRepository());
+        failures =
+                new FileRunEventService(
+                        store,
+                        new FailureActionRegistry(
+                                List.of(new AcknowledgeAction(store), new DismissAction(store))),
+                        authority,
+                        userService,
+                        props);
+        controller = new NotificationController(new NotificationService(failures));
+
+        lenient().when(authority.currentUserTeamId()).thenReturn(TEAM);
+        lenient().when(authority.canEditPolicies()).thenReturn(true);
+        lenient().when(userService.getCurrentUsername()).thenReturn(ACTOR);
+    }
+
+    private FileRunEvent given(FailureKind kind, String actor, String fileId) {
+        return store.record(RecordFailure.forEditor(kind, TEAM, actor, fileId, "boom"));
+    }
+
+    @Nested
+    @DisplayName("the bell holds a prefixed id and nothing else")
+    class Ids {
+
+        @Test
+        void everyNotificationIsKeyedByItsSourceAndRowId() {
+            FileRunEvent event = given(FailureKind.UNKNOWN, ACTOR, "f-1");
+
+            NotificationView notification = controller.list(null).notifications().getFirst();
+
+            assertThat(notification.id()).isEqualTo("failure:" + event.id());
+            assertThat(notification.source()).isEqualTo(NotificationSource.FAILURE);
+        }
+    }
+
+    @Nested
+    @DisplayName("what the bell is given to render")
+    class Projection {
+
+        @Test
+        void carriesTheKindOriginOwnershipAndTheQueuesClientActions() {
+            FileRunEvent mine = given(FailureKind.INPUT_PASSWORD_PROTECTED, ACTOR, "f-1");
+
+            NotificationView notification = controller.list(null).notifications().getFirst();
+
+            assertThat(notification.kindId()).isEqualTo("INPUT_PASSWORD_PROTECTED");
+            assertThat(notification.origin()).isEqualTo(FailureOrigin.TOOL);
+            assertThat(notification.ownership()).isEqualTo(Ownership.MINE);
+            assertThat(notification.severity()).isEqualTo(FailureSeverity.ERROR);
+            assertThat(notification.status()).isEqualTo(FileRunEventStatus.NEW);
+            assertThat(notification.fileId()).isEqualTo("f-1");
+            assertThat(notification.policyId()).isNull();
+            // How the client knows the fileId above is one of its own and worth looking up.
+            assertThat(notification.sourceId()).isNull();
+            assertThat(notification.defaultTitle()).isNotBlank();
+            // The queue's own offers minus the server's: a bell offering different ones would lie.
+            assertThat(notification.actions())
+                    .containsExactlyElementsOf(
+                            FileRunEventView.of(mine, failures.availableActions(mine))
+                                    .actions()
+                                    .stream()
+                                    .filter(
+                                            action ->
+                                                    action.execution()
+                                                            == FailureActionId.Execution.CLIENT)
+                                    .toList());
+        }
+
+        @Test
+        void offersNoActionTheServerRunsBecauseDispositionsBelongToTheQueue() {
+            // Deciding a failure's fate belongs to the review surface, not the panel.
+            given(FailureKind.INPUT_PASSWORD_PROTECTED, ACTOR, "f-1");
+
+            assertThat(controller.list(null).notifications().getFirst().actions())
+                    .isNotEmpty()
+                    .allMatch(action -> action.execution() == FailureActionId.Execution.CLIENT);
+        }
+
+        @Test
+        void namesTheSourceThatFedAnUnattendedRunSoItsFileIdIsNotMistakenForAClientsOwn() {
+            // Without the source a client looks up a hash it can never resolve and calls it
+            // missing.
+            store.record(
+                    RecordFailure.forRun(
+                            FailureKind.INPUT_PASSWORD_PROTECTED,
+                            TEAM,
+                            null,
+                            "policy-1",
+                            "run-1",
+                            "source-7",
+                            "hashed-identity",
+                            "boom"));
+
+            NotificationView notification = controller.list(null).notifications().getFirst();
+
+            assertThat(notification.sourceId()).isEqualTo("source-7");
+            assertThat(notification.fileId()).isEqualTo("hashed-identity");
+        }
+
+        @Test
+        void aColleaguesNotificationOffersTheReviewersActionsOnly() {
+            // A leader sees the team's failures, so audience filtering has to reach the bell too.
+            given(FailureKind.INPUT_PASSWORD_PROTECTED, "colleague@example.com", "f-1");
+
+            assertThat(controller.list(null).notifications().getFirst().actions())
+                    .extracting(FileRunEventView.ActionView::id)
+                    .containsExactly("VIEW_IN_PROCESSOR");
+        }
+
+        @Test
+        void carriesWhatAClientNeedsToRenderAnActionItDoesNotKnow() {
+            given(FailureKind.INPUT_PASSWORD_PROTECTED, ACTOR, "f-1");
+
+            assertThat(controller.list(null).notifications().getFirst().actions())
+                    .isNotEmpty()
+                    .allSatisfy(
+                            action -> {
+                                assertThat(action.labelKey()).startsWith("portal.failures.action.");
+                                assertThat(action.defaultLabel()).isNotBlank();
+                                assertThat(action.execution()).isNotNull();
+                            });
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureAttributionTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureAttributionTest.java
new file mode 100644
index 0000000000..2a71c236a7
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureAttributionTest.java
@@ -0,0 +1,264 @@
+package stirling.software.proprietary.failure;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyInt;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.when;
+
+import java.nio.file.Path;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.concurrent.TimeUnit;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.slf4j.MDC;
+import org.springframework.core.io.ByteArrayResource;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.FileStorage;
+import stirling.software.common.service.InternalApiClient;
+import stirling.software.common.service.JobOwnershipService;
+import stirling.software.common.service.JobQueue;
+import stirling.software.common.service.ResourceMonitor;
+import stirling.software.common.service.TaskManager;
+import stirling.software.common.service.ToolMetadataService;
+import stirling.software.common.service.UserServiceInterface;
+import stirling.software.common.util.TempFileManager;
+import stirling.software.common.util.TempFileRegistry;
+import stirling.software.proprietary.policy.asset.InProcessPolicyAssetStore;
+import stirling.software.proprietary.policy.asset.PolicyAssetResolver;
+import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
+import stirling.software.proprietary.policy.engine.PolicyEngine;
+import stirling.software.proprietary.policy.engine.PolicyExecutor;
+import stirling.software.proprietary.policy.engine.PolicyRunRegistry;
+import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineStep;
+import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyInputs;
+import stirling.software.proprietary.policy.output.InlineOutputSink;
+import stirling.software.proprietary.policy.output.PolicyOutputResolver;
+import stirling.software.proprietary.policy.progress.PolicyProgressListener;
+import stirling.software.proprietary.policy.source.InProcessSourceStore;
+import stirling.software.proprietary.policy.store.PolicyStore;
+
+import tools.jackson.databind.json.JsonMapper;
+
+/**
+ * Pins what the engine records as a failure's actor against what a reader gets back, because the
+ * two sides used to assert independently: the engine's test passed {@code any()} for the actor, and
+ * the service's fixtures assumed an actor the engine never actually produced. Every collaborator
+ * between the failing tool call and the read is real here, so a regression in either one fails.
+ *
+ * <p>This is what makes this PR's promise hold. Reads are narrowed to the rows the caller is the
+ * actor on, so if the engine names the wrong person, a member reads nothing at all.
+ *
+ * <p>The bug it exists for: the engine recorded the BILLING principal as the actor, which for a
+ * stored policy is always its owner. So an attended failure was filed under someone who never
+ * touched the document, and the member who did could not see it.
+ */
+@ExtendWith(MockitoExtension.class)
+class PolicyFailureAttributionTest {
+
+    private static final String ROTATE = "/api/v1/general/rotate-pdf";
+    private static final Long TEAM = 3L;
+
+    @Mock private InternalApiClient internalApiClient;
+    @Mock private ToolMetadataService toolMetadataService;
+    @Mock private TaskManager taskManager;
+    @Mock private FileStorage fileStorage;
+    @Mock private JobOwnershipService jobOwnershipService;
+    @Mock private ResourceMonitor resourceMonitor;
+    @Mock private JobQueue jobQueue;
+    @Mock private PolicyStore policyStore;
+    @Mock private PolicyManagementAuthority authority;
+    @Mock private UserServiceInterface userService;
+
+    @TempDir Path tempDir;
+
+    private PolicyEngine engine;
+    private FileRunEventService service;
+
+    @BeforeEach
+    void setUp() {
+        ApplicationProperties props = new ApplicationProperties();
+        props.getSecurity().setEnableLogin(true);
+        props.getSystem().getTempFileManagement().setBaseTmpDir(tempDir.toString());
+        props.getSystem().getTempFileManagement().setPrefix("failure-attribution-test-");
+
+        FileRunEventStore store = new FileRunEventStore(new InMemoryFileRunEventRepository());
+        service =
+                new FileRunEventService(
+                        store,
+                        new FailureActionRegistry(
+                                List.of(new AcknowledgeAction(store), new DismissAction(store))),
+                        authority,
+                        userService,
+                        props);
+
+        PolicyFailureRecorder recorder =
+                new PolicyFailureRecorder(
+                        new FailureClassifier(JsonMapper.builder().build()), store, policyStore);
+        PolicyExecutor executor =
+                new PolicyExecutor(
+                        internalApiClient,
+                        toolMetadataService,
+                        new TempFileManager(new TempFileRegistry(), props),
+                        JsonMapper.builder().build());
+        engine =
+                new PolicyEngine(
+                        executor,
+                        taskManager,
+                        new PolicyRunRegistry(new ApplicationProperties()),
+                        recorder,
+                        fileStorage,
+                        jobOwnershipService,
+                        List.of(new InlineOutputSink(fileStorage)),
+                        new PolicyOutputResolver(new InProcessSourceStore()),
+                        resourceMonitor,
+                        jobQueue,
+                        new PolicyAssetResolver(new InProcessPolicyAssetStore()));
+
+        lenient()
+                .when(jobOwnershipService.createScopedJobKey(anyString()))
+                .thenAnswer(invocation -> invocation.getArgument(0));
+        lenient().when(resourceMonitor.shouldQueueJob(anyInt())).thenReturn(false);
+        lenient().when(toolMetadataService.isMultiInput(anyString())).thenReturn(false);
+        // The team is resolved from the policy, so the recorded row lands in the reader's team.
+        lenient().when(policyStore.get(anyString())).thenReturn(Optional.of(sharedPolicy()));
+        lenient().when(authority.currentUserTeamId()).thenReturn(TEAM);
+    }
+
+    /** Alice's policy, shared with her team. Bob is a member of it and does not own it. */
+    private static Policy sharedPolicy() {
+        return new Policy(
+                "p1",
+                "rotate",
+                "alice",
+                true,
+                List.of(),
+                List.of(new PipelineStep(ROTATE, Map.of())),
+                OutputSpec.inline(),
+                TEAM);
+    }
+
+    /**
+     * Run the shared policy so its single tool step fails, as {@code triggeredBy} (null = sweep).
+     */
+    private void runAndFail(String triggeredBy, String sourceId, String fileIdentity)
+            throws Exception {
+        when(internalApiClient.post(eq(ROTATE), any())).thenThrow(new RuntimeException("boom"));
+        if (triggeredBy != null) {
+            MDC.put("auditPrincipal", triggeredBy);
+        }
+        try {
+            engine.runPolicy(
+                            sharedPolicy(),
+                            PolicyInputs.of(List.of(pdf())),
+                            PolicyProgressListener.NOOP,
+                            sourceId,
+                            fileIdentity)
+                    .completion()
+                    .get(10, TimeUnit.SECONDS);
+        } finally {
+            MDC.remove("auditPrincipal");
+        }
+    }
+
+    private static ByteArrayResource pdf() {
+        return new ByteArrayResource("input".getBytes()) {
+            @Override
+            public String getFilename() {
+                return "input.pdf";
+            }
+        };
+    }
+
+    /** Read as a plain member, who is narrowed to the rows they are the actor on. */
+    private FileRunEvent asMember(String reader) {
+        lenient().when(userService.getCurrentUsername()).thenReturn(reader);
+        lenient().when(authority.canEditPolicies()).thenReturn(false);
+        List<FileRunEvent> visible = service.list(null, null, 10);
+        return visible.isEmpty() ? null : visible.getFirst();
+    }
+
+    /** Read as a team leader, who reviews the whole team's incidents. */
+    private FileRunEvent asReviewer(String reader) {
+        lenient().when(userService.getCurrentUsername()).thenReturn(reader);
+        lenient().when(authority.canEditPolicies()).thenReturn(true);
+        return service.list(null, null, 10).getFirst();
+    }
+
+    @Nested
+    @DisplayName("a non-owner runs a shared policy on their own upload")
+    class AttendedByANonOwner {
+
+        @Test
+        void theTriggeringUserCanReadTheFailureTheyCaused() throws Exception {
+            runAndFail("bob", null, "bob-doc-1");
+
+            // The whole point: Bob's read scope narrows to his own rows, so the row only reaches
+            // him if the engine named him. Before the fix this list was empty.
+            FileRunEvent mine = asMember("bob");
+            assertThat(mine).as("bob must be able to see the failure he caused").isNotNull();
+            assertThat(mine.actor()).isEqualTo("bob");
+        }
+
+        @Test
+        void thePolicyOwnerIsNotNamedAsTheActorMerelyForBeingBilled() throws Exception {
+            runAndFail("bob", null, "bob-doc-1");
+
+            // Alice owns the policy and pays for the run, but she never touched the document.
+            assertThat(asReviewer("alice").actor()).isEqualTo("bob");
+        }
+
+        @Test
+        void aColleagueWhoDidNotTriggerItCannotSeeItAtAll() throws Exception {
+            runAndFail("bob", null, "bob-doc-1");
+
+            assertThat(asMember("carol")).isNull();
+        }
+    }
+
+    @Nested
+    @DisplayName("an unattended sweep pulls a file from a source")
+    class UnattendedSweep {
+
+        @Test
+        void theRowIsRecordedWithNoActorWhileStillBillingTheOwner() throws Exception {
+            runAndFail(null, "src-watched-folder", "file-hash-1");
+
+            assertThat(asReviewer("alice").actor())
+                    .as("a trigger-fired run has no user to name")
+                    .isNull();
+        }
+
+        @Test
+        void theSourceThatFedItIsStillRecorded() throws Exception {
+            runAndFail(null, "src-watched-folder", "file-hash-1");
+
+            FileRunEvent unattended = asReviewer("alice");
+            assertThat(unattended.sourceId()).isEqualTo("src-watched-folder");
+            assertThat(unattended.fileId()).isEqualTo("file-hash-1");
+        }
+
+        @Test
+        void aMemberDoesNotInheritAnUnattendedFailureAsTheirOwn() throws Exception {
+            // An unowned row must not fall to whoever happens to be reading: with no actor there is
+            // nothing for a member's narrowed read to match.
+            runAndFail(null, "src-watched-folder", "file-hash-1");
+
+            assertThat(asMember("bob")).isNull();
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureOwnershipTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureOwnershipTest.java
new file mode 100644
index 0000000000..0ae6c3a945
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureOwnershipTest.java
@@ -0,0 +1,272 @@
+package stirling.software.proprietary.failure;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.ArgumentMatchers.any;
+import static org.mockito.ArgumentMatchers.anyInt;
+import static org.mockito.ArgumentMatchers.anyString;
+import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.Mockito.lenient;
+import static org.mockito.Mockito.when;
+
+import java.nio.file.Path;
+import java.util.List;
+import java.util.Map;
+import java.util.Optional;
+import java.util.concurrent.TimeUnit;
+
+import org.junit.jupiter.api.BeforeEach;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.extension.ExtendWith;
+import org.junit.jupiter.api.io.TempDir;
+import org.mockito.Mock;
+import org.mockito.junit.jupiter.MockitoExtension;
+import org.slf4j.MDC;
+import org.springframework.core.io.ByteArrayResource;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.common.service.FileStorage;
+import stirling.software.common.service.InternalApiClient;
+import stirling.software.common.service.JobOwnershipService;
+import stirling.software.common.service.JobQueue;
+import stirling.software.common.service.ResourceMonitor;
+import stirling.software.common.service.TaskManager;
+import stirling.software.common.service.ToolMetadataService;
+import stirling.software.common.service.UserServiceInterface;
+import stirling.software.common.util.TempFileManager;
+import stirling.software.common.util.TempFileRegistry;
+import stirling.software.proprietary.policy.asset.InProcessPolicyAssetStore;
+import stirling.software.proprietary.policy.asset.PolicyAssetResolver;
+import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
+import stirling.software.proprietary.policy.engine.PolicyEngine;
+import stirling.software.proprietary.policy.engine.PolicyExecutor;
+import stirling.software.proprietary.policy.engine.PolicyRunRegistry;
+import stirling.software.proprietary.policy.model.OutputSpec;
+import stirling.software.proprietary.policy.model.PipelineStep;
+import stirling.software.proprietary.policy.model.Policy;
+import stirling.software.proprietary.policy.model.PolicyInputs;
+import stirling.software.proprietary.policy.output.InlineOutputSink;
+import stirling.software.proprietary.policy.output.PolicyOutputResolver;
+import stirling.software.proprietary.policy.progress.PolicyProgressListener;
+import stirling.software.proprietary.policy.source.InProcessSourceStore;
+import stirling.software.proprietary.policy.store.PolicyStore;
+
+import tools.jackson.databind.json.JsonMapper;
+
+/**
+ * What a reader is offered on a real recorded row, every collaborator being the real one. Both
+ * directions are asserted: offered to the wrong reader is either a dead button or a leaked
+ * document.
+ */
+@ExtendWith(MockitoExtension.class)
+class PolicyFailureOwnershipTest {
+
+    private static final String ROTATE = "/api/v1/general/rotate-pdf";
+    private static final Long TEAM = 3L;
+
+    @Mock private InternalApiClient internalApiClient;
+    @Mock private ToolMetadataService toolMetadataService;
+    @Mock private TaskManager taskManager;
+    @Mock private FileStorage fileStorage;
+    @Mock private JobOwnershipService jobOwnershipService;
+    @Mock private ResourceMonitor resourceMonitor;
+    @Mock private JobQueue jobQueue;
+    @Mock private PolicyStore policyStore;
+    @Mock private PolicyManagementAuthority authority;
+    @Mock private UserServiceInterface userService;
+
+    @TempDir Path tempDir;
+
+    private PolicyEngine engine;
+    private FileRunEventService service;
+
+    @BeforeEach
+    void setUp() {
+        ApplicationProperties props = new ApplicationProperties();
+        props.getSecurity().setEnableLogin(true);
+        props.getSystem().getTempFileManagement().setBaseTmpDir(tempDir.toString());
+        props.getSystem().getTempFileManagement().setPrefix("failure-ownership-test-");
+
+        FileRunEventStore store = new FileRunEventStore(new InMemoryFileRunEventRepository());
+        service =
+                new FileRunEventService(
+                        store,
+                        new FailureActionRegistry(
+                                List.of(new AcknowledgeAction(store), new DismissAction(store))),
+                        authority,
+                        userService,
+                        props);
+
+        PolicyFailureRecorder recorder =
+                new PolicyFailureRecorder(
+                        new FailureClassifier(JsonMapper.builder().build()), store, policyStore);
+        PolicyExecutor executor =
+                new PolicyExecutor(
+                        internalApiClient,
+                        toolMetadataService,
+                        new TempFileManager(new TempFileRegistry(), props),
+                        JsonMapper.builder().build());
+        engine =
+                new PolicyEngine(
+                        executor,
+                        taskManager,
+                        new PolicyRunRegistry(new ApplicationProperties()),
+                        recorder,
+                        fileStorage,
+                        jobOwnershipService,
+                        List.of(new InlineOutputSink(fileStorage)),
+                        new PolicyOutputResolver(new InProcessSourceStore()),
+                        resourceMonitor,
+                        jobQueue,
+                        new PolicyAssetResolver(new InProcessPolicyAssetStore()));
+
+        lenient()
+                .when(jobOwnershipService.createScopedJobKey(anyString()))
+                .thenAnswer(invocation -> invocation.getArgument(0));
+        lenient().when(resourceMonitor.shouldQueueJob(anyInt())).thenReturn(false);
+        lenient().when(toolMetadataService.isMultiInput(anyString())).thenReturn(false);
+        // The team is resolved from the policy, so the recorded row lands in the reader's team.
+        lenient().when(policyStore.get(anyString())).thenReturn(Optional.of(sharedPolicy()));
+        lenient().when(authority.currentUserTeamId()).thenReturn(TEAM);
+    }
+
+    /** Alice's policy, shared with her team. Bob is a member of it and does not own it. */
+    private static Policy sharedPolicy() {
+        return new Policy(
+                "p1",
+                "rotate",
+                "alice",
+                true,
+                List.of(),
+                List.of(new PipelineStep(ROTATE, Map.of())),
+                OutputSpec.inline(),
+                TEAM);
+    }
+
+    /** Fails the policy's single tool step as {@code triggeredBy} (null = sweep). */
+    private void runAndFail(String triggeredBy, String sourceId, String fileIdentity)
+            throws Exception {
+        when(internalApiClient.post(eq(ROTATE), any())).thenThrow(new RuntimeException("boom"));
+        if (triggeredBy != null) {
+            MDC.put("auditPrincipal", triggeredBy);
+        }
+        try {
+            engine.runPolicy(
+                            sharedPolicy(),
+                            PolicyInputs.of(List.of(pdf())),
+                            PolicyProgressListener.NOOP,
+                            sourceId,
+                            fileIdentity)
+                    .completion()
+                    .get(10, TimeUnit.SECONDS);
+        } finally {
+            MDC.remove("auditPrincipal");
+        }
+    }
+
+    private static ByteArrayResource pdf() {
+        return new ByteArrayResource("input".getBytes()) {
+            @Override
+            public String getFilename() {
+                return "input.pdf";
+            }
+        };
+    }
+
+    /**
+     * Lenient because a leader's scope and an UNOWNED check both answer without asking who reads,
+     * so whether the name is consulted is the behaviour under test.
+     */
+    private FileRunEvent asMember(String reader) {
+        lenient().when(userService.getCurrentUsername()).thenReturn(reader);
+        lenient().when(authority.canEditPolicies()).thenReturn(false);
+        List<FileRunEvent> visible = service.list(null, null, 10);
+        return visible.isEmpty() ? null : visible.getFirst();
+    }
+
+    /** Read as a team leader, who reviews the whole team's incidents. See {@link #asMember}. */
+    private FileRunEvent asReviewer(String reader) {
+        lenient().when(userService.getCurrentUsername()).thenReturn(reader);
+        lenient().when(authority.canEditPolicies()).thenReturn(true);
+        return service.list(null, null, 10).getFirst();
+    }
+
+    private List<FailureActionId> offeredTo(FileRunEvent event) {
+        return service.availableActions(event).stream()
+                .map(FileRunEventService.AvailableAction::id)
+                .toList();
+    }
+
+    @Nested
+    @DisplayName("a non-owner runs a shared policy on their own upload")
+    class AttendedByANonOwner {
+
+        @Test
+        void theTriggeringUserHoldsItAndIsOfferedTheDocument() throws Exception {
+            runAndFail("bob", null, "bob-doc-1");
+
+            FileRunEvent mine = asMember("bob");
+            assertThat(service.ownershipOf(mine)).isEqualTo(Ownership.MINE);
+            assertThat(offeredTo(mine))
+                    .as("he is holding the document, so opening it is his to do")
+                    .contains(FailureActionId.VIEW_FILE);
+            assertThat(service.availableActions(mine))
+                    .filteredOn(action -> action.id() == FailureActionId.VIEW_FILE)
+                    .singleElement()
+                    .satisfies(action -> assertThat(action.enabled()).isTrue());
+        }
+
+        @Test
+        void thePolicyOwnerIsNotHandedADocumentSheNeverTouched() throws Exception {
+            runAndFail("bob", null, "bob-doc-1");
+
+            // She owns the policy and pays for the run, and still has no copy of Bob's file.
+            FileRunEvent theirs = asReviewer("alice");
+            assertThat(service.ownershipOf(theirs)).isEqualTo(Ownership.THEIRS);
+            assertThat(offeredTo(theirs)).doesNotContain(FailureActionId.VIEW_FILE);
+        }
+
+        @Test
+        void theReviewerIsStillOfferedWhatReviewingNeeds() throws Exception {
+            runAndFail("bob", null, "bob-doc-1");
+
+            // Not her document, still her team's incident.
+            assertThat(offeredTo(asReviewer("alice")))
+                    .contains(FailureActionId.VIEW_IN_PROCESSOR, FailureActionId.DISMISS);
+        }
+    }
+
+    @Nested
+    @DisplayName("an unattended sweep pulls a file from a source")
+    class UnattendedSweep {
+
+        @Test
+        void theRowIsOwnedByNobodySoTheReviewerInheritsTheOwnerActions() throws Exception {
+            runAndFail(null, "src-watched-folder", "file-hash-1");
+
+            FileRunEvent unattended = asReviewer("alice");
+            assertThat(service.ownershipOf(unattended)).isEqualTo(Ownership.UNOWNED);
+            // No browser holds this document, so the offer is stated and disabled, not dropped.
+            assertThat(offeredTo(unattended)).contains(FailureActionId.VIEW_FILE);
+            assertThat(service.availableActions(unattended))
+                    .filteredOn(action -> action.id() == FailureActionId.VIEW_FILE)
+                    .singleElement()
+                    .satisfies(
+                            action -> {
+                                assertThat(action.enabled()).isFalse();
+                                assertThat(action.disabledReasonKey())
+                                        .isEqualTo("portal.failures.disabled.unattended");
+                            });
+        }
+
+        @Test
+        void thePolicyOwnerDoesNotInheritItAsHerOwn() throws Exception {
+            // Being billed for the sweep must not become ownership: she gets these as reviewer
+            // only.
+            runAndFail(null, "src-watched-folder", "file-hash-1");
+
+            assertThat(service.ownershipOf(asReviewer("alice"))).isNotEqualTo(Ownership.MINE);
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureRecorderTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureRecorderTest.java
index 841fdec684..7472379d36 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureRecorderTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/PolicyFailureRecorderTest.java
@@ -39,6 +39,7 @@ import tools.jackson.databind.json.JsonMapper;
 class PolicyFailureRecorderTest {
 
     private static final Long TEAM = 11L;
+    private static final String ACTOR = "dana@example.com";
 
     @Mock private PolicyStore policyStore;
 
@@ -89,12 +90,13 @@ class PolicyFailureRecorderTest {
             recorder.recordRunFailure(
                     "run-1",
                     "policy-1",
-                    "dana@example.com",
                     null,
+                    null,
+                    "dana@example.com",
                     "Policy run failed: locked",
                     passwordFailure());
 
-            FileRunEvent event = store.list(TEAM, null, null, 10).getFirst();
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
             assertThat(event.kind()).isEqualTo(FailureKind.INPUT_PASSWORD_PROTECTED);
             assertThat(event.runId()).isEqualTo("run-1");
             assertThat(event.policyId()).isEqualTo("policy-1");
@@ -114,12 +116,13 @@ class PolicyFailureRecorderTest {
             recorder.recordRunFailure(
                     "run-1",
                     "policy-1",
-                    "dana@example.com",
                     null,
+                    null,
+                    "dana@example.com",
                     "Policy run failed: something we do not recognise",
                     new RuntimeException("boom"));
 
-            FileRunEvent event = store.list(TEAM, null, null, 10).getFirst();
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
             assertThat(event.kind()).isEqualTo(FailureKind.UNKNOWN);
             assertThat(event.detail()).contains("something we do not recognise");
         }
@@ -133,10 +136,11 @@ class PolicyFailureRecorderTest {
                     "policy-1",
                     null,
                     null,
+                    null,
                     "Policy run failed: java.lang.NullPointerException",
                     new RuntimeException("npe"));
 
-            FileRunEvent event = store.list(TEAM, null, null, 10).getFirst();
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
             assertThat(event.kind()).isEqualTo(FailureKind.UNKNOWN);
             assertThat(event.detail()).contains("NullPointerException");
         }
@@ -147,9 +151,9 @@ class PolicyFailureRecorderTest {
             when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
 
             recorder.recordRunFailureAs(
-                    FailureKind.UNKNOWN, "run-3", "policy-1", null, "could not be queued");
+                    FailureKind.UNKNOWN, "run-3", "policy-1", null, null, "could not be queued");
 
-            assertThat(store.list(TEAM, null, null, 10)).hasSize(1);
+            assertThat(store.list(TEAM, null, null, null, 10)).hasSize(1);
         }
 
         @Test
@@ -161,11 +165,23 @@ class PolicyFailureRecorderTest {
             when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
 
             recorder.recordRunFailure(
-                    "run-1", "policy-1", "dana@example.com", null, "locked", passwordFailure());
+                    "run-1",
+                    "policy-1",
+                    null,
+                    null,
+                    "dana@example.com",
+                    "locked",
+                    passwordFailure());
             recorder.recordRunFailure(
-                    "run-2", "policy-1", "dana@example.com", null, "locked", passwordFailure());
+                    "run-2",
+                    "policy-1",
+                    null,
+                    null,
+                    "dana@example.com",
+                    "locked",
+                    passwordFailure());
 
-            List<FileRunEvent> events = store.list(TEAM, null, null, 10);
+            List<FileRunEvent> events = store.list(TEAM, null, null, null, 10);
             assertThat(events).hasSize(2);
             assertThat(events).allMatch(event -> event.occurrences() == 1);
             assertThat(events)
@@ -173,16 +189,64 @@ class PolicyFailureRecorderTest {
                     .containsExactlyInAnyOrder("run-1", "run-2");
         }
 
+        @Test
+        void namesTheSourceWhenNoUserWasInvolved() {
+            // An unattended file has no actor, so the source is the only attribution a reviewer
+            // gets: which bucket, folder or webhook fed the run.
+            when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
+
+            recorder.recordRunFailure(
+                    "run-1",
+                    "policy-1",
+                    "src-s3-invoices",
+                    null,
+                    null,
+                    "locked",
+                    passwordFailure());
+
+            FileRunEvent event = store.list(TEAM, null, null, null, 10).getFirst();
+            assertThat(event.sourceId()).isEqualTo("src-s3-invoices");
+            assertThat(event.actor()).isNull();
+        }
+
+        @Test
+        void keepsTwoSourcesApartEvenWhenTheyFailIdentically() {
+            // Same kind, same policy, no user on either: without the source they would be one row.
+            when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
+
+            recorder.recordRunFailureAs(
+                    FailureKind.UNKNOWN, "run-1", "policy-1", "src-a", null, "unreachable");
+            recorder.recordRunFailureAs(
+                    FailureKind.UNKNOWN, "run-2", "policy-1", "src-b", null, "unreachable");
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .hasSize(2)
+                    .extracting(FileRunEvent::sourceId)
+                    .containsExactlyInAnyOrder("src-a", "src-b");
+        }
+
         @Test
         void thatSameRunFailingTwiceStaysOneIncident() {
             when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
 
             recorder.recordRunFailure(
-                    "run-1", "policy-1", "dana@example.com", null, "locked", passwordFailure());
+                    "run-1",
+                    "policy-1",
+                    null,
+                    null,
+                    "dana@example.com",
+                    "locked",
+                    passwordFailure());
             recorder.recordRunFailure(
-                    "run-1", "policy-1", "dana@example.com", null, "locked", passwordFailure());
+                    "run-1",
+                    "policy-1",
+                    null,
+                    null,
+                    "dana@example.com",
+                    "locked",
+                    passwordFailure());
 
-            assertThat(store.list(TEAM, null, null, 10))
+            assertThat(store.list(TEAM, null, null, null, 10))
                     .singleElement()
                     .extracting(FileRunEvent::occurrences)
                     .isEqualTo(2);
@@ -198,19 +262,20 @@ class PolicyFailureRecorderTest {
             when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
 
             recorder.recordRunFailure(
-                    "run-1", "policy-1", null, null, "boom", new RuntimeException());
+                    "run-1", "policy-1", null, null, null, "boom", new RuntimeException());
 
-            assertThat(store.list(TEAM, null, null, 10)).hasSize(1);
+            assertThat(store.list(TEAM, null, null, null, 10)).hasSize(1);
         }
 
         @Test
         void leavesAnAdHocRunUnteamedRatherThanGuessing() {
             // No stored policy means no team to attribute it to. Recorded unteamed rather than
             // attributed to whichever team happened to be nearby.
-            recorder.recordRunFailure("run-1", null, null, null, "boom", new RuntimeException());
+            recorder.recordRunFailure(
+                    "run-1", null, null, null, null, "boom", new RuntimeException());
 
-            assertThat(store.list(null, null, null, 10)).hasSize(1);
-            assertThat(store.list(TEAM, null, null, 10)).isEmpty();
+            assertThat(store.list(null, null, null, null, 10)).hasSize(1);
+            assertThat(store.list(TEAM, null, null, null, 10)).isEmpty();
         }
 
         @Test
@@ -224,11 +289,12 @@ class PolicyFailureRecorderTest {
                                             "policy-1",
                                             null,
                                             null,
+                                            null,
                                             "boom",
                                             new RuntimeException()))
                     .doesNotThrowAnyException();
             // Still recorded, just unteamed: a lookup problem must not lose the incident.
-            assertThat(store.list(null, null, null, 10)).hasSize(1);
+            assertThat(store.list(null, null, null, null, 10)).hasSize(1);
         }
     }
 
@@ -258,6 +324,7 @@ class PolicyFailureRecorderTest {
                                             "policy-1",
                                             null,
                                             null,
+                                            null,
                                             "Policy run failed: locked",
                                             passwordFailure()))
                     .doesNotThrowAnyException();
@@ -270,9 +337,15 @@ class PolicyFailureRecorderTest {
             assertThatCode(
                             () ->
                                     recorder.recordRunFailure(
-                                            "run-1", "policy-1", null, null, "no cause", null))
+                                            "run-1",
+                                            "policy-1",
+                                            null,
+                                            null,
+                                            null,
+                                            "no cause",
+                                            null))
                     .doesNotThrowAnyException();
-            assertThat(store.list(TEAM, null, null, 10).getFirst().kind())
+            assertThat(store.list(TEAM, null, null, null, 10).getFirst().kind())
                     .isEqualTo(FailureKind.UNKNOWN);
         }
     }
@@ -286,11 +359,11 @@ class PolicyFailureRecorderTest {
             when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
 
             recorder.recordRunFailure(
-                    "run-1", "policy-1", null, null, "boom", new IOException("x"));
+                    "run-1", "policy-1", null, null, null, "boom", new IOException("x"));
             recorder.recordRunFailure(
-                    "run-1", "policy-1", null, null, "boom", new IOException("x"));
+                    "run-1", "policy-1", null, null, null, "boom", new IOException("x"));
 
-            List<FileRunEvent> events = store.list(TEAM, null, null, 10);
+            List<FileRunEvent> events = store.list(TEAM, null, null, null, 10);
             assertThat(events).hasSize(1);
             assertThat(events.getFirst().occurrences()).isEqualTo(2);
         }
@@ -301,11 +374,42 @@ class PolicyFailureRecorderTest {
             when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
 
             recorder.recordRunFailure(
-                    "run-1", "policy-1", null, null, "boom", new IOException("x"));
+                    "run-1", "policy-1", null, null, null, "boom", new IOException("x"));
             recorder.recordRunFailure(
-                    "run-2", "policy-1", null, null, "boom", new IOException("x"));
+                    "run-2", "policy-1", null, null, null, "boom", new IOException("x"));
 
-            assertThat(store.list(TEAM, null, null, 10)).hasSize(2);
+            assertThat(store.list(TEAM, null, null, null, 10)).hasSize(2);
+        }
+
+        @Test
+        void theSameDocumentFailingInTwoAttendedRunsIsOneIncident() {
+            // Every upload is a new run, so with no reference the run id stands in for the document
+            // and the same broken file reads as a second incident rather than a second occurrence.
+            when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
+
+            recorder.recordRunFailure(
+                    "run-1", "policy-1", null, "editor-file-1", ACTOR, "locked", passwordFailure());
+            recorder.recordRunFailure(
+                    "run-2", "policy-1", null, "editor-file-1", ACTOR, "locked", passwordFailure());
+
+            List<FileRunEvent> events = store.list(TEAM, null, null, null, 10);
+            assertThat(events).hasSize(1);
+            assertThat(events.getFirst().occurrences()).isEqualTo(2);
+        }
+
+        @Test
+        void twoDocumentsFailingTheSameWayStaySeparateIncidents() {
+            // Folding is per document, so neither row is credited with the other's occurrence.
+            when(policyStore.get("policy-1")).thenReturn(Optional.of(policy("policy-1", TEAM)));
+
+            recorder.recordRunFailure(
+                    "run-1", "policy-1", null, "editor-file-1", ACTOR, "locked", passwordFailure());
+            recorder.recordRunFailure(
+                    "run-2", "policy-1", null, "editor-file-2", ACTOR, "locked", passwordFailure());
+
+            assertThat(store.list(TEAM, null, null, null, 10))
+                    .hasSize(2)
+                    .allMatch(event -> event.occurrences() == 1);
         }
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/failure/RecordFailurePrivacyTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/failure/RecordFailurePrivacyTest.java
index ef9648571f..c876644133 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/failure/RecordFailurePrivacyTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/failure/RecordFailurePrivacyTest.java
@@ -11,6 +11,8 @@ import org.junit.jupiter.api.DisplayName;
 import org.junit.jupiter.api.Nested;
 import org.junit.jupiter.api.Test;
 
+import stirling.software.proprietary.policy.controller.PolicyRunFiles;
+
 /**
  * The privacy contract: a recorded failure carries no document identity of its own. There is no
  * name column and the dedup key is built only from opaque ids, so nothing here derives from what a
@@ -24,7 +26,14 @@ class RecordFailurePrivacyTest {
 
     private static RecordFailure withDetail(String detail) {
         return RecordFailure.forRun(
-                FailureKind.UNKNOWN, 1L, "dana@example.com", "policy-1", "run-1", null, detail);
+                FailureKind.UNKNOWN,
+                1L,
+                "dana@example.com",
+                "policy-1",
+                "run-1",
+                null,
+                null,
+                detail);
     }
 
     @Test
@@ -46,6 +55,16 @@ class RecordFailurePrivacyTest {
                 .doesNotContain("fileName");
     }
 
+    @Test
+    void theRunRequestThatSuppliesADocumentReferenceCarriesNoNameEither() {
+        // The same discipline at the door as in the row: an id and nothing else, or a document name
+        // reaches a table that deliberately has nowhere to put it.
+        assertThat(List.of(PolicyRunFiles.class.getDeclaredFields()))
+                .extracting(Field::getName)
+                .contains("fileId")
+                .doesNotContain("fileName", "documentName", "name");
+    }
+
     @Test
     void dedupKeyIsBuiltOnlyFromOpaqueIdentifiers() {
         // Two files under the same policy hash differently (so they stay separate incidents), but
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/LayoutAnalyzerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/LayoutAnalyzerTest.java
new file mode 100644
index 0000000000..e9aaab0a1a
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/LayoutAnalyzerTest.java
@@ -0,0 +1,286 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+/** Unit tests for the heuristics that decide what a run of text means. */
+class LayoutAnalyzerTest {
+
+    private static final BBox A4 = new BBox(0, 0, 595, 842);
+
+    private static TextLineInfo line(String text, float size, float x, float y) {
+        return line(text, size, x, y, false, 0, 0);
+    }
+
+    private static TextLineInfo line(
+            String text, float size, float x, float y, boolean bold, int start, int end) {
+        List<WordInfo> words = new ArrayList<>();
+        float cursor = x;
+        for (String token : text.strip().split("\\s+")) {
+            float width = token.length() * size * 0.5f;
+            words.add(
+                    new WordInfo(
+                            token,
+                            new BBox(cursor, y, cursor + width, y + size),
+                            start,
+                            end,
+                            size,
+                            bold));
+            cursor += width + size * 0.3f;
+        }
+        return new TextLineInfo(
+                0, text, new BBox(x, y, cursor, y + size), size, bold, start, end, false, words);
+    }
+
+    private static PageContent page(List<TextLineInfo> lines) {
+        return new PageContent(0, lines, List.of(), lines.size(), false, false, false, A4);
+    }
+
+    @Nested
+    @DisplayName("body font size")
+    class BodyFontSize {
+
+        @Test
+        @DisplayName("weights by characters so one huge title does not skew the baseline")
+        void weightsByCharacterCount() {
+            List<TextLineInfo> lines =
+                    List.of(
+                            line("A Very Large Title", 32, 50, 700),
+                            line("Body text line one which is long", 11, 50, 650),
+                            line("Body text line two which is long", 11, 50, 630),
+                            line("Body text line three also long", 11, 50, 610));
+            assertEquals(11f, LayoutAnalyzer.bodyFontSize(List.of(page(lines))));
+        }
+
+        @Test
+        @DisplayName("returns zero when there is no text")
+        void handlesEmptyDocument() {
+            assertEquals(0f, LayoutAnalyzer.bodyFontSize(List.of(page(List.of()))));
+        }
+    }
+
+    @Nested
+    @DisplayName("heading detection")
+    class Headings {
+
+        @Test
+        @DisplayName("assigns distinct sizes to descending levels")
+        void assignsTiers() {
+            List<TextLineInfo> lines =
+                    List.of(
+                            line("Title", 24, 50, 800),
+                            line("Chapter", 18, 50, 750),
+                            line("Section", 14, 50, 700),
+                            line("Body text that is long enough to set a baseline", 11, 50, 650));
+            Map<Float, Integer> tiers = LayoutAnalyzer.headingTiers(List.of(page(lines)), 11f);
+            assertEquals(1, tiers.get(24f));
+            assertEquals(2, tiers.get(18f));
+            assertEquals(3, tiers.get(14f));
+            assertNull(tiers.get(11f), "body size must not be a heading tier");
+        }
+
+        @Test
+        @DisplayName("rejects long lines and full sentences whatever their size")
+        void rejectsProse() {
+            assertFalse(
+                    LayoutAnalyzer.isHeadingCandidate(
+                            line("This line ends like a sentence does.", 20, 50, 700)),
+                    "a line ending in a full stop reads as prose");
+            assertFalse(
+                    LayoutAnalyzer.isHeadingCandidate(
+                            line(
+                                    "one two three four five six seven eight nine ten eleven twelve"
+                                            + " thirteen",
+                                    20,
+                                    50,
+                                    700)),
+                    "a long line is body text however large");
+            assertTrue(LayoutAnalyzer.isHeadingCandidate(line("Financial Results", 20, 50, 700)));
+        }
+
+        @Test
+        @DisplayName("boldness alone never promotes a line to a heading")
+        void boldIsNotAHeadingSignal() {
+            List<TextLineInfo> lines =
+                    List.of(
+                            line("Bold Label", 11, 50, 700, true, 0, 0),
+                            line("Body text long enough to set the baseline here", 11, 50, 650));
+            assertTrue(
+                    LayoutAnalyzer.headingTiers(List.of(page(lines)), 11f).isEmpty(),
+                    "a bold line at body size is emphasis, not a heading");
+        }
+
+        @Test
+        @DisplayName("rewrites skipped levels so H1 is never followed by H3")
+        void normalisesSkippedLevels() {
+            DocumentStructure structure = new DocumentStructure();
+            structure.add(new StructBlock(StructType.H1, 0));
+            structure.add(new StructBlock(StructType.H3, 0));
+            structure.add(new StructBlock(StructType.H4, 0));
+            LayoutAnalyzer.normaliseHeadingLevels(structure);
+
+            assertEquals(StructType.H1, structure.getBlocks().get(0).getType());
+            assertEquals(StructType.H2, structure.getBlocks().get(1).getType());
+            assertEquals(StructType.H3, structure.getBlocks().get(2).getType());
+        }
+    }
+
+    @Nested
+    @DisplayName("lists")
+    class Lists {
+
+        @Test
+        @DisplayName("recognises bullet and ordered markers")
+        void recognisesMarkers() {
+            assertTrue(LayoutAnalyzer.startsListItem(line("• First item", 11, 50, 700)));
+            assertTrue(LayoutAnalyzer.startsListItem(line("- First item", 11, 50, 700)));
+            assertTrue(LayoutAnalyzer.startsListItem(line("1. First item", 11, 50, 700)));
+            assertTrue(LayoutAnalyzer.startsListItem(line("a) First item", 11, 50, 700)));
+            assertFalse(LayoutAnalyzer.startsListItem(line("Ordinary prose here", 11, 50, 700)));
+        }
+    }
+
+    @Nested
+    @DisplayName("table cells")
+    class Tables {
+
+        @Test
+        @DisplayName("splits a row at wide gaps but not at ordinary word spacing")
+        void splitsOnWideGaps() {
+            List<WordInfo> words =
+                    List.of(
+                            new WordInfo("Region", new BBox(50, 700, 90, 711), 0, 0, 11, false),
+                            new WordInfo("name", new BBox(93, 700, 125, 711), 0, 0, 11, false),
+                            new WordInfo("Units", new BBox(250, 700, 285, 711), 1, 1, 11, false));
+            TextLineInfo row =
+                    new TextLineInfo(
+                            0,
+                            "Region name Units",
+                            new BBox(50, 700, 285, 711),
+                            11,
+                            false,
+                            0,
+                            1,
+                            false,
+                            words);
+            List<List<WordInfo>> cells = LayoutAnalyzer.splitCells(row);
+            assertEquals(2, cells.size(), "the small gap is a word space, the large one is a cell");
+            assertEquals(2, cells.get(0).size());
+            assertEquals("Units", cells.get(1).get(0).text());
+        }
+
+        @Test
+        @DisplayName("words sharing an operator cannot become separate cells")
+        void detectsInseparableWords() {
+            List<WordInfo> shared =
+                    List.of(
+                            new WordInfo("A", new BBox(50, 700, 60, 711), 3, 3, 11, false),
+                            new WordInfo("B", new BBox(250, 700, 260, 711), 3, 3, 11, false));
+            TextLineInfo row =
+                    new TextLineInfo(
+                            0, "A B", new BBox(50, 700, 260, 711), 11, false, 3, 3, false, shared);
+            assertFalse(
+                    row.wordsAreSeparable(),
+                    "cells drawn by one operator cannot carry separate marked content ids");
+        }
+    }
+
+    @Nested
+    @DisplayName("running heads")
+    class RunningHeads {
+
+        @Test
+        @DisplayName("treats text repeating in the margin band across pages as an artifact")
+        void findsRepeatedMarginText() {
+            List<PageContent> pages = new ArrayList<>();
+            for (int i = 0; i < 4; i++) {
+                List<TextLineInfo> lines =
+                        List.of(
+                                line("Confidential Report", 9, 50, 800),
+                                line("Body content for the page", 11, 50, 400),
+                                line("Page " + (i + 1), 9, 300, 20));
+                pages.add(new PageContent(i, lines, List.of(), 3, false, false, false, A4));
+            }
+            Map<Integer, List<TextLineInfo>> artifacts = LayoutAnalyzer.repeatedMarginLines(pages);
+            assertEquals(
+                    2, artifacts.get(0).size(), "the running head and the folio are artifacts");
+            assertTrue(
+                    artifacts.get(0).stream().noneMatch(l -> l.text().contains("Body content")),
+                    "body text must never be demoted to an artifact");
+        }
+
+        @Test
+        @DisplayName("does not treat a one-off margin line as a running head")
+        void ignoresUniqueMarginText() {
+            List<String> titles = List.of("Alpha", "Beta", "Gamma", "Delta");
+            List<PageContent> pages = new ArrayList<>();
+            for (int i = 0; i < 4; i++) {
+                List<TextLineInfo> lines =
+                        List.of(
+                                line(titles.get(i) + " overview", 9, 50, 800),
+                                line("Body content", 11, 50, 400));
+                pages.add(new PageContent(i, lines, List.of(), 2, false, false, false, A4));
+            }
+            assertTrue(LayoutAnalyzer.repeatedMarginLines(pages).get(0).isEmpty());
+        }
+
+        @Test
+        @DisplayName("a large heading high on the page stays a heading, not chrome")
+        void doesNotDemoteHeadingsNearTheTop() {
+            List<PageContent> pages = new ArrayList<>();
+            for (int i = 0; i < 4; i++) {
+                List<TextLineInfo> lines =
+                        List.of(
+                                // Masking digits makes these look identical across pages.
+                                line("Section " + (i + 1), 20, 50, 800),
+                                line("Body text long enough to set the baseline", 11, 50, 400));
+                pages.add(new PageContent(i, lines, List.of(), 2, false, false, false, A4));
+            }
+            assertTrue(
+                    LayoutAnalyzer.repeatedMarginLines(pages, 11f).get(0).isEmpty(),
+                    "a heading larger than body text is content, wherever it sits");
+        }
+    }
+
+    @Nested
+    @DisplayName("columns")
+    class Columns {
+
+        @Test
+        @DisplayName("detects a gutter when text sits in two balanced blocks")
+        void detectsTwoColumns() {
+            List<TextLineInfo> lines = new ArrayList<>();
+            for (int i = 0; i < 6; i++) {
+                lines.add(line("Left column text", 10, 50, 700 - i * 14));
+                lines.add(line("Right column text", 10, 320, 700 - i * 14));
+            }
+            assertNotNull(LayoutAnalyzer.detectGutter(page(lines)));
+        }
+
+        @Test
+        @DisplayName("does not split a page whose lines span the full width")
+        void ignoresSingleColumn() {
+            List<TextLineInfo> lines = new ArrayList<>();
+            for (int i = 0; i < 10; i++) {
+                lines.add(
+                        line(
+                                "A full width line of prose that crosses the centre of the page",
+                                10,
+                                50,
+                                700 - i * 14));
+            }
+            assertNull(LayoutAnalyzer.detectGutter(page(lines)));
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/MarkedContentInjectorTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/MarkedContentInjectorTest.java
new file mode 100644
index 0000000000..73d4c64817
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/MarkedContentInjectorTest.java
@@ -0,0 +1,164 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertSame;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.List;
+import java.util.Map;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDPageContentStream;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.font.PDFont;
+import org.apache.pdfbox.pdmodel.font.PDType1Font;
+import org.apache.pdfbox.pdmodel.font.Standard14Fonts;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** Tests the content-stream rewriting that makes tagging possible. */
+class MarkedContentInjectorTest {
+
+    private static byte[] threeLinePdf() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = new PDType1Font(Standard14Fonts.FontName.HELVETICA);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                for (int i = 0; i < 3; i++) {
+                    cs.beginText();
+                    cs.setFont(font, 12);
+                    cs.newLineAtOffset(50, 700 - i * 20);
+                    cs.showText("Line " + i);
+                    cs.endText();
+                }
+            }
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    private static String contentOf(PDDocument document) throws IOException {
+        try (InputStream in = document.getPage(0).getContents()) {
+            return new String(in.readAllBytes(), StandardCharsets.ISO_8859_1);
+        }
+    }
+
+    @Test
+    @DisplayName("wraps claimed content in BDC/EMC with a marked content id")
+    void wrapsClaimedContent() throws Exception {
+        try (PDDocument document = Loader.loadPDF(threeLinePdf())) {
+            StructBlock paragraph = new StructBlock(StructType.P, 0);
+            paragraph.addRange(0, 1);
+
+            int next =
+                    new MarkedContentInjector()
+                            .inject(document, document.getPage(0), List.of(paragraph), 0, true);
+
+            String content = contentOf(document);
+            assertTrue(content.contains("/P"), "the structure type was not written");
+            assertTrue(content.contains("/MCID"), "no marked content id was written");
+            assertTrue(content.contains("BDC"), "no marked content sequence was opened");
+            assertTrue(content.contains("EMC"), "no marked content sequence was closed");
+            assertFalse(paragraph.getMcids().isEmpty(), "the block was given no marked content id");
+            assertTrue(next > 0, "the id counter did not advance");
+        }
+    }
+
+    @Test
+    @DisplayName("marks unclaimed content as an artifact so nothing is left untagged")
+    void unclaimedContentBecomesArtifact() throws Exception {
+        try (PDDocument document = Loader.loadPDF(threeLinePdf())) {
+            StructBlock paragraph = new StructBlock(StructType.P, 0);
+            paragraph.addRange(0, 0);
+
+            new MarkedContentInjector()
+                    .inject(document, document.getPage(0), List.of(paragraph), 0, true);
+
+            String content = contentOf(document);
+            assertTrue(
+                    content.contains("/Artifact"),
+                    "content nobody claimed must be marked as an artifact, or PDF/UA clause 7.1"
+                            + " fails");
+        }
+    }
+
+    @Test
+    @DisplayName("opens and closes sequences in balanced pairs")
+    void sequencesAreBalanced() throws Exception {
+        try (PDDocument document = Loader.loadPDF(threeLinePdf())) {
+            StructBlock first = new StructBlock(StructType.P, 0);
+            first.addRange(0, 0);
+            StructBlock second = new StructBlock(StructType.H1, 0);
+            second.addRange(2, 2);
+
+            new MarkedContentInjector()
+                    .inject(document, document.getPage(0), List.of(first, second), 0, true);
+
+            String content = contentOf(document);
+            int opens = count(content, "BDC") + count(content, "BMC");
+            int closes = count(content, "EMC");
+            assertEquals(opens, closes, "every opened sequence must be closed");
+        }
+    }
+
+    @Test
+    @DisplayName("rewriting does not change what a reader extracts")
+    void textIsUnchanged() throws Exception {
+        byte[] original = threeLinePdf();
+        String before = extract(original);
+
+        byte[] rewritten;
+        try (PDDocument document = Loader.loadPDF(original)) {
+            StructBlock paragraph = new StructBlock(StructType.P, 0);
+            paragraph.addRange(0, 2);
+            new MarkedContentInjector()
+                    .inject(document, document.getPage(0), List.of(paragraph), 0, true);
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            rewritten = out.toByteArray();
+        }
+        assertEquals(before, extract(rewritten), "marked content operators must not render");
+    }
+
+    @Test
+    @DisplayName("two blocks claiming the same content keep the first, not both")
+    void overlappingClaimsAreResolved() {
+        StructBlock first = new StructBlock(StructType.P, 0);
+        first.addRange(0, 2);
+        StructBlock second = new StructBlock(StructType.H1, 0);
+        second.addRange(1, 1);
+
+        Map<Integer, StructBlock> owners =
+                MarkedContentInjector.ownersByOrdinal(List.of(first, second));
+        assertSame(first, owners.get(1), "the first claim wins so reading order stays unambiguous");
+        assertEquals(3, owners.size());
+    }
+
+    private static int count(String haystack, String needle) {
+        int total = 0;
+        int index = 0;
+        while ((index = haystack.indexOf(needle, index)) >= 0) {
+            total++;
+            index += needle.length();
+        }
+        return total;
+    }
+
+    private static String extract(byte[] pdf) throws IOException {
+        try (PDDocument document = Loader.loadPDF(pdf)) {
+            return new org.apache.pdfbox.text.PDFTextStripper()
+                    .getText(document)
+                    .replaceAll("\\s+", " ")
+                    .strip();
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/MarkedContentSafetyTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/MarkedContentSafetyTest.java
new file mode 100644
index 0000000000..29cc18c525
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/MarkedContentSafetyTest.java
@@ -0,0 +1,193 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.List;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDPageContentStream;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.common.PDStream;
+import org.apache.pdfbox.pdmodel.font.PDType1Font;
+import org.apache.pdfbox.pdmodel.font.Standard14Fonts;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** Regression tests for rewriter damage a validator cannot see, so it still passes validation. */
+class MarkedContentSafetyTest {
+
+    private static String contentOf(PDDocument document) throws IOException {
+        try (InputStream in = document.getPage(0).getContents()) {
+            return new String(in.readAllBytes(), StandardCharsets.ISO_8859_1);
+        }
+    }
+
+    private static void setContent(PDDocument document, String content) throws IOException {
+        PDStream stream = new PDStream(document);
+        try (var out = stream.createOutputStream()) {
+            out.write(content.getBytes(StandardCharsets.ISO_8859_1));
+        }
+        document.getPage(0).setContents(stream);
+    }
+
+    private static PDDocument onePage() throws IOException {
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.A4);
+        document.addPage(page);
+        try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+            cs.beginText();
+            cs.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+            cs.newLineAtOffset(50, 700);
+            cs.showText("visible");
+            cs.endText();
+        }
+        return document;
+    }
+
+    @Test
+    @DisplayName("an optional-content layer survives the rebuild, so hidden content stays hidden")
+    void optionalContentIsPreserved() throws Exception {
+        try (PDDocument document = onePage()) {
+            String original = contentOf(document);
+            setContent(document, "/OC /MC0 BDC\n" + original + "\nEMC\n");
+
+            StructBlock paragraph = new StructBlock(StructType.P, 0);
+            paragraph.addRange(0, 0);
+            new MarkedContentInjector()
+                    .inject(document, document.getPage(0), List.of(paragraph), 0, true);
+
+            String rewritten = contentOf(document);
+            assertTrue(
+                    rewritten.contains("/OC"),
+                    "the optional-content wrapper was stripped, which would make a hidden"
+                            + " DRAFT/CONFIDENTIAL or redaction layer permanently visible:\n"
+                            + rewritten);
+            assertEquals(
+                    countOf(rewritten, "BDC") + countOf(rewritten, "BMC"),
+                    countOf(rewritten, "EMC"),
+                    "marked content is unbalanced after preserving the layer");
+        }
+    }
+
+    @Test
+    @DisplayName("replacement text survives the rebuild so ligatures still read correctly")
+    void actualTextIsPreserved() throws Exception {
+        try (PDDocument document = onePage()) {
+            String original = contentOf(document);
+            // A generator marks an ffi ligature with what it really spells.
+            setContent(
+                    document, "/Span <</ActualText (ffi) /MCID 7>> BDC\n" + original + "\nEMC\n");
+
+            StructBlock paragraph = new StructBlock(StructType.P, 0);
+            paragraph.addRange(0, 0);
+            new MarkedContentInjector()
+                    .inject(document, document.getPage(0), List.of(paragraph), 0, true);
+
+            String rewritten = contentOf(document);
+            assertTrue(
+                    rewritten.contains("ActualText"),
+                    "dropping ActualText leaves a screen reader announcing the raw glyph:\n"
+                            + rewritten);
+            assertFalse(
+                    rewritten.contains("/MCID 7"),
+                    "the source's own marked content id is meaningless after a rebuild");
+            assertEquals(
+                    countOf(rewritten, "BDC") + countOf(rewritten, "BMC"),
+                    countOf(rewritten, "EMC"),
+                    "marked content is unbalanced after preserving replacement text");
+        }
+    }
+
+    @Test
+    @DisplayName("a sequence wrapping a fill opens before the path, not inside it")
+    void markedContentNeverOpensInsideAPathObject() throws Exception {
+        try (PDDocument document = onePage()) {
+            setContent(document, "0 0 0 rg\n10 10 50 5 re\nf\n");
+
+            new MarkedContentInjector().inject(document, document.getPage(0), List.of(), 0, true);
+
+            String rewritten = contentOf(document);
+            int reAt = rewritten.indexOf(" re");
+            int openAt = Math.max(rewritten.indexOf("BMC"), rewritten.indexOf("BDC"));
+            assertTrue(openAt >= 0, "no sequence was opened at all: " + rewritten);
+            assertTrue(
+                    openAt < reAt,
+                    "ISO 32000-1 does not permit a marked-content operator inside a path object;"
+                            + " the sequence must open before the path construction:\n"
+                            + rewritten);
+        }
+    }
+
+    @Test
+    @DisplayName("words drawn out of stream order are still claimed, not silently artifacted")
+    void outOfOrderWordsAreClaimed() {
+        // A line whose second word on the page was painted first: ordinals 1 then 0.
+        WordInfo right = new WordInfo("label", new BBox(50, 700, 90, 712), 1, 1, 11, false);
+        WordInfo left = new WordInfo("value", new BBox(200, 700, 240, 712), 0, 0, 11, false);
+        TextLineInfo line =
+                new TextLineInfo(
+                        0,
+                        "label value",
+                        new BBox(50, 700, 240, 712),
+                        11,
+                        false,
+                        0,
+                        1,
+                        false,
+                        List.of(right, left));
+
+        PageContent page =
+                new PageContent(
+                        0,
+                        List.of(line),
+                        List.of(),
+                        2,
+                        false,
+                        false,
+                        false,
+                        new BBox(0, 0, 595, 842));
+        DocumentStructure structure = new LayoutAnalyzer().analyse(List.of(page));
+
+        boolean[] claimed = new boolean[2];
+        structure.visit(
+                block -> {
+                    if (block.isArtifact()) {
+                        return;
+                    }
+                    block.getRanges()
+                            .forEach(
+                                    r -> {
+                                        for (int i = r.start(); i <= r.end() && i < 2; i++) {
+                                            claimed[i] = true;
+                                        }
+                                    });
+                });
+        assertTrue(
+                claimed[0] && claimed[1],
+                "an out-of-order word was left unclaimed and would be hidden from assistive"
+                        + " technology while the file still validated");
+    }
+
+    private static int countOf(String haystack, String needle) {
+        int total = 0;
+        int index = 0;
+        while ((index = haystack.indexOf(needle, index)) >= 0) {
+            total++;
+            index += needle.length();
+        }
+        return total;
+    }
+
+    private static byte[] bytes(PDDocument document) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        document.save(out);
+        return out.toByteArray();
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaFormAndDeclarationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaFormAndDeclarationTest.java
new file mode 100644
index 0000000000..bae4ebed9a
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaFormAndDeclarationTest.java
@@ -0,0 +1,171 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+import java.util.List;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureElement;
+import org.apache.pdfbox.pdmodel.documentinterchange.logicalstructure.PDStructureNode;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationWidget;
+import org.apache.pdfbox.pdmodel.interactive.form.PDAcroForm;
+import org.apache.pdfbox.pdmodel.interactive.form.PDTextField;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** Covers form-field descriptions, widget nesting and withdrawing a conformance claim. */
+class PdfUaFormAndDeclarationTest {
+
+    /** A document with one named text field and one unnamed one. */
+    private static PDDocument formDocument(boolean nameTheSecondField) throws IOException {
+        PDDocument document = new PDDocument();
+        PDPage page = new PDPage(PDRectangle.A4);
+        document.addPage(page);
+
+        PDAcroForm form = new PDAcroForm(document);
+        document.getDocumentCatalog().setAcroForm(form);
+
+        PDTextField named = new PDTextField(form);
+        named.setPartialName("EmailAddress");
+        addWidget(named, page, 700);
+        form.getFields().add(named);
+
+        PDTextField second = new PDTextField(form);
+        if (nameTheSecondField) {
+            second.setPartialName("PostCode");
+        }
+        addWidget(second, page, 650);
+        form.getFields().add(second);
+
+        return document;
+    }
+
+    private static void addWidget(PDTextField field, PDPage page, float y) throws IOException {
+        PDAnnotationWidget widget = field.getWidgets().get(0);
+        PDRectangle rectangle = new PDRectangle();
+        rectangle.setLowerLeftX(50);
+        rectangle.setLowerLeftY(y);
+        rectangle.setUpperRightX(250);
+        rectangle.setUpperRightY(y + 18);
+        widget.setRectangle(rectangle);
+        widget.setPage(page);
+        page.getAnnotations().add(widget);
+    }
+
+    private static String xmpOf(PDDocument document) throws IOException {
+        var metadata = document.getDocumentCatalog().getMetadata();
+        assertNotNull(metadata, "no XMP packet");
+        return new String(metadata.toByteArray(), StandardCharsets.UTF_8);
+    }
+
+    @Test
+    @DisplayName("a form field gets its tooltip from its own name, not an invented one")
+    void derivesTooltipFromFieldName() throws Exception {
+        try (PDDocument document = formDocument(true)) {
+            List<String> warnings =
+                    new PdfUaMetadataWriter()
+                            .applyDocumentRequirements(document, "Form", "en", PdfUaProfile.UA1);
+
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm();
+            assertEquals("EmailAddress", form.getField("EmailAddress").getAlternateFieldName());
+            assertEquals("PostCode", form.getField("PostCode").getAlternateFieldName());
+            assertTrue(warnings.isEmpty(), "nothing needed reporting: " + warnings);
+        }
+    }
+
+    @Test
+    @DisplayName("a field with no name is reported rather than given a placeholder tooltip")
+    void reportsUnnameableField() throws Exception {
+        try (PDDocument document = formDocument(false)) {
+            List<String> warnings =
+                    new PdfUaMetadataWriter()
+                            .applyDocumentRequirements(document, "Form", "en", PdfUaProfile.UA1);
+            assertEquals(1, warnings.size());
+            assertTrue(warnings.get(0).contains("form field"), warnings.get(0));
+        }
+    }
+
+    @Test
+    @DisplayName("an existing description is never overwritten")
+    void keepsExistingDescription() throws Exception {
+        try (PDDocument document = formDocument(true)) {
+            PDAcroForm form = document.getDocumentCatalog().getAcroForm();
+            form.getField("EmailAddress").setAlternateFieldName("Your email address");
+
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(document, "Form", "en", PdfUaProfile.UA1);
+            assertEquals(
+                    "Your email address", form.getField("EmailAddress").getAlternateFieldName());
+        }
+    }
+
+    @Test
+    @DisplayName("widget annotations are nested inside a Form structure element")
+    void widgetsAreNestedInFormElements() throws Exception {
+        try (PDDocument document = formDocument(true)) {
+            DocumentStructure structure = new DocumentStructure();
+            StructBlock paragraph = new StructBlock(StructType.P, 0);
+            paragraph.getMcids().add(0);
+            structure.add(paragraph);
+
+            new StructTreeWriter().write(document, structure, PdfUaProfile.UA1);
+
+            var root = document.getDocumentCatalog().getStructureTreeRoot();
+            assertTrue(
+                    typesUnder(root).contains("Form"),
+                    "clause 7.18.4 requires a widget to sit inside a Form element, found: "
+                            + typesUnder(root));
+        }
+    }
+
+    private static List<String> typesUnder(PDStructureNode node) {
+        List<String> types = new java.util.ArrayList<>();
+        for (Object kid : node.getKids()) {
+            if (kid instanceof PDStructureElement element) {
+                types.add(element.getStructureType());
+                types.addAll(typesUnder(element));
+            }
+        }
+        return types;
+    }
+
+    @Test
+    @DisplayName("withdrawing conformance removes the claim but keeps the other metadata")
+    void withdrawingConformanceRemovesOnlyTheClaim() throws Exception {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage());
+            PdfUaTagger tagger = new PdfUaTagger();
+            PdfUaMetadataWriter writer = new PdfUaMetadataWriter();
+
+            writer.applyDocumentRequirements(document, "Kept Title", "en-GB", PdfUaProfile.UA1);
+            writer.declareConformance(document, PdfUaProfile.UA1);
+            assertTrue(xmpOf(document).contains("pdfuaid"));
+
+            tagger.withdrawConformance(document);
+
+            String xmp = xmpOf(document);
+            assertFalse(xmp.contains("pdfuaid"), "the conformance claim should be gone");
+            assertTrue(xmp.contains("Kept Title"), "the title should survive");
+            assertEquals("en-GB", document.getDocumentCatalog().getLanguage());
+        }
+    }
+
+    @Test
+    @DisplayName("withdrawing conformance on a document that never claimed it is harmless")
+    void withdrawingIsIdempotent() throws Exception {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage());
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(document, "Title", "en", PdfUaProfile.UA1);
+            new PdfUaTagger().withdrawConformance(document);
+            assertFalse(xmpOf(document).contains("pdfuaid"));
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaLanguageTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaLanguageTest.java
new file mode 100644
index 0000000000..ed05e8de0b
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaLanguageTest.java
@@ -0,0 +1,79 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/**
+ * A relabelled language is invisible to every validator, so the tagger must not guess over one the
+ * document already declares.
+ */
+class PdfUaLanguageTest {
+
+    private static PDDocument documentWithLanguage(String language) {
+        PDDocument document = new PDDocument();
+        document.addPage(new PDPage());
+        if (language != null) {
+            document.getDocumentCatalog().setLanguage(language);
+        }
+        return document;
+    }
+
+    private static TaggingOptions.TaggingOptionsBuilder options() {
+        return TaggingOptions.builder()
+                .profile(PdfUaProfile.UA1)
+                .language("en-GB")
+                .title("Rapport")
+                .embedFonts(false);
+    }
+
+    @Test
+    @DisplayName("keeps the language the document already declares")
+    void keepsExistingLanguage() throws Exception {
+        try (PDDocument document = documentWithLanguage("fr-FR")) {
+            TaggingResult result = new PdfUaTagger().tag(document, options().build());
+
+            assertEquals("fr-FR", document.getDocumentCatalog().getLanguage());
+            assertTrue(
+                    result.getWarnings().stream().anyMatch(w -> w.contains("fr-FR")),
+                    "ignoring the requested language must be reported: " + result.getWarnings());
+        }
+    }
+
+    @Test
+    @DisplayName("applies the requested language when the document declares none")
+    void fillsInMissingLanguage() throws Exception {
+        try (PDDocument document = documentWithLanguage(null)) {
+            new PdfUaTagger().tag(document, options().build());
+
+            assertEquals("en-GB", document.getDocumentCatalog().getLanguage());
+        }
+    }
+
+    @Test
+    @DisplayName("replaces the declared language only when the caller asks")
+    void overridesOnRequest() throws Exception {
+        try (PDDocument document = documentWithLanguage("fr-FR")) {
+            new PdfUaTagger().tag(document, options().overrideLanguage(true).build());
+
+            assertEquals("en-GB", document.getDocumentCatalog().getLanguage());
+        }
+    }
+
+    @Test
+    @DisplayName("keeps the existing language when an existing structure tree is left alone")
+    void keepsExistingLanguageWithoutRebuilding() throws Exception {
+        try (PDDocument document = documentWithLanguage("de-DE")) {
+            new PdfUaTagger()
+                    .tag(
+                            document,
+                            options().existingTags(TaggingOptions.ExistingTags.KEEP).build());
+
+            assertEquals("de-DE", document.getDocumentCatalog().getLanguage());
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaMetadataWriterTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaMetadataWriterTest.java
new file mode 100644
index 0000000000..f953488b03
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaMetadataWriterTest.java
@@ -0,0 +1,137 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.nio.charset.StandardCharsets;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** Tests the document-level requirements that have nothing to do with tagging. */
+class PdfUaMetadataWriterTest {
+
+    private static PDDocument twoPageDocument() {
+        PDDocument document = new PDDocument();
+        document.addPage(new PDPage());
+        document.addPage(new PDPage());
+        return document;
+    }
+
+    private static String xmpOf(PDDocument document) throws IOException {
+        var metadata = document.getDocumentCatalog().getMetadata();
+        assertNotNull(metadata, "no XMP packet was written");
+        return new String(metadata.toByteArray(), StandardCharsets.UTF_8);
+    }
+
+    @Test
+    @DisplayName("sets title, language, tab order and the display-title flag")
+    void appliesDocumentRequirements() throws Exception {
+        try (PDDocument document = twoPageDocument()) {
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(
+                            document, "Annual Report", "en-GB", PdfUaProfile.UA1);
+
+            assertEquals("en-GB", document.getDocumentCatalog().getLanguage());
+            assertEquals("Annual Report", document.getDocumentInformation().getTitle());
+            assertTrue(
+                    document.getDocumentCatalog().getViewerPreferences().displayDocTitle(),
+                    "without DisplayDocTitle a viewer shows the filename instead of the title");
+
+            for (PDPage page : document.getPages()) {
+                assertEquals(
+                        "S",
+                        page.getCOSObject().getNameAsString(COSName.getPDFName("Tabs")),
+                        "clause 7.18.1 requires an explicit tab order on every page");
+            }
+        }
+    }
+
+    @Test
+    @DisplayName("writes dc:title into the XMP packet, not just the info dictionary")
+    void writesDublinCoreTitle() throws Exception {
+        try (PDDocument document = twoPageDocument()) {
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(
+                            document, "Annual Report", "en-GB", PdfUaProfile.UA1);
+            assertTrue(xmpOf(document).contains("Annual Report"));
+        }
+    }
+
+    @Test
+    @DisplayName("does not declare conformance as part of applying requirements")
+    void doesNotDeclareEarly() throws Exception {
+        try (PDDocument document = twoPageDocument()) {
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(document, "Report", "en", PdfUaProfile.UA1);
+            assertFalse(
+                    xmpOf(document).contains("pdfuaid"),
+                    "the conformance claim must wait until validation has passed");
+        }
+    }
+
+    @Test
+    @DisplayName("declaring conformance writes pdfuaid with the right part")
+    void declaresConformance() throws Exception {
+        try (PDDocument document = twoPageDocument()) {
+            PdfUaMetadataWriter writer = new PdfUaMetadataWriter();
+            writer.applyDocumentRequirements(document, "Report", "en", PdfUaProfile.UA1);
+            writer.declareConformance(document, PdfUaProfile.UA1);
+
+            String xmp = xmpOf(document);
+            assertTrue(xmp.contains("pdfuaid"), "no PDF/UA identifier was written");
+            assertTrue(xmp.contains("part"), "no conformance part was written");
+        }
+    }
+
+    @Test
+    @DisplayName("UA-2 raises the PDF version to 2.0")
+    void ua2RaisesVersion() throws Exception {
+        try (PDDocument document = twoPageDocument()) {
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(document, "Report", "en", PdfUaProfile.UA2);
+            assertEquals(2.0f, document.getVersion());
+        }
+    }
+
+    @Test
+    @DisplayName("keeps an existing title when none is supplied")
+    void keepsExistingTitle() throws Exception {
+        try (PDDocument document = twoPageDocument()) {
+            var info = document.getDocumentInformation();
+            info.setTitle("Original Title");
+            document.setDocumentInformation(info);
+
+            new PdfUaMetadataWriter()
+                    .applyDocumentRequirements(document, null, "en", PdfUaProfile.UA1);
+            assertEquals("Original Title", document.getDocumentInformation().getTitle());
+        }
+    }
+
+    @Test
+    @DisplayName("survives a round trip through save and reload")
+    void survivesRoundTrip() throws Exception {
+        byte[] saved;
+        try (PDDocument document = twoPageDocument()) {
+            PdfUaMetadataWriter writer = new PdfUaMetadataWriter();
+            writer.applyDocumentRequirements(document, "Round Trip", "fr-FR", PdfUaProfile.UA1);
+            writer.declareConformance(document, PdfUaProfile.UA1);
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            saved = out.toByteArray();
+        }
+        try (PDDocument reloaded = Loader.loadPDF(saved)) {
+            assertEquals("fr-FR", reloaded.getDocumentCatalog().getLanguage());
+            assertEquals("Round Trip", reloaded.getDocumentInformation().getTitle());
+            assertTrue(xmpOf(reloaded).contains("pdfuaid"));
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaModelTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaModelTest.java
new file mode 100644
index 0000000000..de189f2f74
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/PdfUaModelTest.java
@@ -0,0 +1,160 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.params.ParameterizedTest;
+import org.junit.jupiter.params.provider.ValueSource;
+
+/** Tests for the small types the tagger is built from. */
+class PdfUaModelTest {
+
+    @Nested
+    @DisplayName("structure types")
+    class Types {
+
+        @Test
+        @DisplayName("maps levels to heading tags and back")
+        void headingLevelsRoundTrip() {
+            for (int level = 1; level <= 6; level++) {
+                assertEquals(level, StructType.heading(level).headingLevel());
+                assertEquals("H" + level, StructType.heading(level).tag());
+            }
+        }
+
+        @Test
+        @DisplayName("clamps out-of-range levels rather than throwing")
+        void clampsLevels() {
+            assertEquals(StructType.H1, StructType.heading(0));
+            assertEquals(StructType.H1, StructType.heading(-3));
+            assertEquals(StructType.H6, StructType.heading(9));
+        }
+
+        @Test
+        @DisplayName("reports zero for types that are not headings")
+        void nonHeadingsHaveNoLevel() {
+            assertEquals(0, StructType.P.headingLevel());
+            assertFalse(StructType.TABLE.isHeading());
+        }
+    }
+
+    @Nested
+    @DisplayName("markable operators")
+    class Markable {
+
+        @ParameterizedTest
+        @ValueSource(strings = {"Tj", "TJ", "'", "\"", "Do", "BI", "S", "f", "f*", "B", "sh"})
+        @DisplayName("counts text, XObjects and path painting")
+        void counted(String operator) {
+            assertTrue(MarkableOp.isMarkableOperator(operator), operator + " should be markable");
+        }
+
+        @ParameterizedTest
+        @ValueSource(strings = {"q", "Q", "cm", "BT", "ET", "Tf", "Td", "n", "W", "gs", "re"})
+        @DisplayName("ignores operators that paint nothing")
+        void notCounted(String operator) {
+            assertFalse(
+                    MarkableOp.isMarkableOperator(operator), operator + " should not be markable");
+        }
+
+        @Test
+        @DisplayName("n ends a path without painting, so it is not content")
+        void pathEndIsNotPainting() {
+            assertFalse(MarkableOp.isPathPainting("n"));
+            assertTrue(MarkableOp.isPathPainting("f"));
+        }
+    }
+
+    @Nested
+    @DisplayName("profiles")
+    class Profiles {
+
+        @Test
+        @DisplayName("parses the shapes a caller might send")
+        void parsesRequestValues() {
+            assertEquals(PdfUaProfile.UA1, PdfUaProfile.fromRequest("ua1"));
+            assertEquals(PdfUaProfile.UA1, PdfUaProfile.fromRequest(null));
+            assertEquals(PdfUaProfile.UA1, PdfUaProfile.fromRequest(""));
+            assertEquals(PdfUaProfile.UA1, PdfUaProfile.fromRequest("nonsense"));
+            assertEquals(PdfUaProfile.UA2, PdfUaProfile.fromRequest("ua2"));
+            assertEquals(PdfUaProfile.UA2, PdfUaProfile.fromRequest("PDF/UA-2"));
+        }
+
+        @Test
+        @DisplayName("UA-2 requires PDF 2.0")
+        void ua2NeedsPdf2() {
+            assertEquals(2.0f, PdfUaProfile.UA2.pdfVersion());
+            assertEquals(1.7f, PdfUaProfile.UA1.pdfVersion());
+        }
+    }
+
+    @Nested
+    @DisplayName("bounding boxes")
+    class Boxes {
+
+        @Test
+        @DisplayName("union of an empty box is the other box")
+        void unionWithEmpty() {
+            BBox box = new BBox(10, 10, 20, 20);
+            assertEquals(box, box.union(BBox.EMPTY));
+            assertEquals(box, BBox.EMPTY.union(box));
+        }
+
+        @Test
+        @DisplayName("union covers both boxes")
+        void unionCoversBoth() {
+            BBox union = new BBox(0, 0, 10, 10).union(new BBox(20, 5, 30, 25));
+            assertEquals(new BBox(0, 0, 30, 25), union);
+        }
+
+        @Test
+        @DisplayName("reports horizontal overlap as a fraction of the narrower box")
+        void overlapIsRelative() {
+            BBox wide = new BBox(0, 0, 100, 10);
+            BBox narrow = new BBox(40, 0, 60, 10);
+            assertEquals(1.0f, wide.horizontalOverlap(narrow));
+            assertEquals(0f, wide.horizontalOverlap(new BBox(200, 0, 220, 10)));
+        }
+    }
+
+    @Nested
+    @DisplayName("structure blocks")
+    class Blocks {
+
+        @Test
+        @DisplayName("counts content across the whole subtree")
+        void countsDescendantContent() {
+            StructBlock table = new StructBlock(StructType.TABLE, 0);
+            StructBlock row = new StructBlock(StructType.TR, 0);
+            StructBlock cell = new StructBlock(StructType.TD, 0);
+            cell.addRange(3, 5);
+            row.addChild(cell);
+            table.addChild(row);
+            assertEquals(3, table.contentCount());
+        }
+
+        @Test
+        @DisplayName("collects text in tree order")
+        void collectsText() {
+            StructBlock list = new StructBlock(StructType.L, 0);
+            StructBlock first = new StructBlock(StructType.LI, 0);
+            first.setText("one");
+            StructBlock second = new StructBlock(StructType.LI, 0);
+            second.setText("two");
+            list.addChild(first).addChild(second);
+            assertEquals("one two", list.collectText());
+        }
+
+        @Test
+        @DisplayName("an artifact is not a structure element")
+        void artifactsAreDistinct() {
+            StructBlock artifact = StructBlock.artifact(ArtifactType.PAGINATION, 0);
+            assertTrue(artifact.isArtifact());
+            assertEquals("Pagination", artifact.getArtifactType().subtype());
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/VectorAndHeadingTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/VectorAndHeadingTest.java
new file mode 100644
index 0000000000..aa1b13e3b9
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/pdf/ua/VectorAndHeadingTest.java
@@ -0,0 +1,155 @@
+package stirling.software.proprietary.pdf.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.ArrayList;
+import java.util.List;
+import java.util.Map;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+/** Tests the heuristics that decide what counts as a drawing and what counts as a heading. */
+class VectorAndHeadingTest {
+
+    private static final BBox A4 = new BBox(0, 0, 595, 842);
+
+    private static TextLineInfo line(String text, float size, float x, float y) {
+        List<WordInfo> words = new ArrayList<>();
+        float cursor = x;
+        for (String token : text.strip().split("\\s+")) {
+            float width = token.length() * size * 0.5f;
+            words.add(
+                    new WordInfo(
+                            token,
+                            new BBox(cursor, y, cursor + width, y + size),
+                            0,
+                            0,
+                            size,
+                            false));
+            cursor += width + size * 0.3f;
+        }
+        return new TextLineInfo(
+                0, text, new BBox(x, y, cursor, y + size), size, false, 0, 0, false, words);
+    }
+
+    private static MarkableOp vector(int ordinal, BBox box) {
+        return new MarkableOp(ordinal, MarkableOp.Kind.VECTOR, box, null);
+    }
+
+    private static DocumentStructure analyse(List<TextLineInfo> lines, List<MarkableOp> ops) {
+        PageContent page = new PageContent(0, lines, ops, ops.size(), false, false, false, A4);
+        return new LayoutAnalyzer().analyse(List.of(page));
+    }
+
+    private static long countOf(DocumentStructure structure, StructType type) {
+        long[] total = {0};
+        structure.visit(
+                block -> {
+                    if (block.getType() == type) {
+                        total[0]++;
+                    }
+                });
+        return total[0];
+    }
+
+    @Test
+    @DisplayName("a cluster of substantial strokes becomes a figure, not silent decoration")
+    void chartBecomesAFigure() {
+        List<MarkableOp> bars = new ArrayList<>();
+        for (int i = 0; i < 6; i++) {
+            bars.add(vector(i, new BBox(100 + i * 20, 400, 115 + i * 20, 400 + 30 + i * 10)));
+        }
+        DocumentStructure structure = analyse(List.of(), bars);
+
+        assertTrue(
+                countOf(structure, StructType.FIGURE) > 0,
+                "a bar chart drawn with path operators must not vanish as decoration");
+        assertTrue(
+                structure.figuresWithoutAlt().size() > 0,
+                "the report must say the chart needs a description");
+    }
+
+    @Test
+    @DisplayName("thin rules and table borders stay artifacts")
+    void tableRulesStayDecoration() {
+        List<MarkableOp> rules = new ArrayList<>();
+        for (int i = 0; i < 8; i++) {
+            rules.add(vector(i, new BBox(60, 700 - i * 20, 540, 701 - i * 20)));
+        }
+        DocumentStructure structure = analyse(List.of(), rules);
+
+        assertEquals(
+                0,
+                countOf(structure, StructType.FIGURE),
+                "horizontal rules are page furniture and must not demand alt text");
+        assertEquals(0, structure.figuresWithoutAlt().size());
+    }
+
+    @Test
+    @DisplayName("a lone box is ornament, not a chart")
+    void singleBoxIsNotAFigure() {
+        DocumentStructure structure =
+                analyse(List.of(), List.of(vector(0, new BBox(60, 400, 500, 700))));
+        assertEquals(0, countOf(structure, StructType.FIGURE));
+    }
+
+    @Test
+    @DisplayName("shaded table rows behind text are not mistaken for a chart")
+    void shadedTableRowsAreNotFigures() {
+        List<MarkableOp> shading = new ArrayList<>();
+        List<TextLineInfo> rows = new ArrayList<>();
+        for (int i = 0; i < 6; i++) {
+            float y = 600 - i * 20;
+            // A filled row background, tall enough to pass the thinness test.
+            shading.add(vector(i, new BBox(60, y, 540, y + 16)));
+            rows.add(line("Expense line item " + i + " amount", 10, 64, y + 3));
+        }
+        DocumentStructure structure = analyse(rows, shading);
+
+        assertEquals(
+                0,
+                countOf(structure, StructType.FIGURE),
+                "row shading sits behind the text it decorates and is not a drawing");
+    }
+
+    @Test
+    @DisplayName("small print dominating an invoice does not promote addresses to headings")
+    void smallPrintDoesNotCreateHeadings() {
+        List<TextLineInfo> lines = new ArrayList<>();
+        // Address block at ordinary 11pt.
+        lines.add(line("Acme Industries Limited", 11, 60, 780));
+        lines.add(line("14 Example Street", 11, 60, 765));
+        lines.add(line("Manchester M1 2AB", 11, 60, 750));
+        // 40 lines of 9pt line-item small print, which dominates the character count.
+        for (int i = 0; i < 40; i++) {
+            lines.add(line("Item " + i + " widget assembly part number " + i, 9, 60, 700 - i * 12));
+        }
+
+        Map<Float, Integer> tiers =
+                LayoutAnalyzer.headingTiers(
+                        List.of(new PageContent(0, lines, List.of(), 0, false, false, false, A4)),
+                        9f);
+        assertNull(
+                tiers.get(11f),
+                "11pt address lines are body text on an invoice, not headings: " + tiers);
+    }
+
+    @Test
+    @DisplayName("a genuinely rare large size is still a heading")
+    void realHeadingsSurvive() {
+        List<TextLineInfo> lines = new ArrayList<>();
+        lines.add(line("Annual Report", 24, 60, 780));
+        for (int i = 0; i < 40; i++) {
+            lines.add(
+                    line("Body prose line number " + i + " continues here", 11, 60, 700 - i * 12));
+        }
+        Map<Float, Integer> tiers =
+                LayoutAnalyzer.headingTiers(
+                        List.of(new PageContent(0, lines, List.of(), 0, false, false, false, A4)),
+                        11f);
+        assertEquals(1, tiers.get(24f), "a rare large size is exactly what a heading looks like");
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthorityTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthorityTest.java
index 811aae6b4f..0f97fcaf62 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthorityTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/config/AdminPolicyManagementAuthorityTest.java
@@ -39,6 +39,18 @@ class AdminPolicyManagementAuthorityTest {
         assertFalse(authority().canEditPolicies());
     }
 
+    @Test
+    void adminMayTriggerPolicies() {
+        when(userService.isCurrentUserAdmin()).thenReturn(true);
+        assertTrue(authority().canTriggerPolicies());
+    }
+
+    @Test
+    void nonAdminMayNotTriggerPolicies() {
+        when(userService.isCurrentUserAdmin()).thenReturn(false);
+        assertFalse(authority().canTriggerPolicies());
+    }
+
     @Test
     void currentUserTeamIdResolvesFromTheCurrentUsersTeam() {
         Team team = new Team();
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
index 43477aa9ed..c72a30f98a 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/controller/PolicyControllerTest.java
@@ -2,6 +2,7 @@ package stirling.software.proprietary.policy.controller;
 
 import static org.assertj.core.api.Assertions.assertThat;
 import static org.assertj.core.api.Assertions.assertThatThrownBy;
+import static org.junit.jupiter.api.Assertions.assertDoesNotThrow;
 import static org.junit.jupiter.api.Assertions.assertEquals;
 import static org.junit.jupiter.api.Assertions.assertFalse;
 import static org.junit.jupiter.api.Assertions.assertTrue;
@@ -28,6 +29,7 @@ import org.mockito.Mock;
 import org.mockito.junit.jupiter.MockitoExtension;
 import org.springframework.http.HttpStatus;
 import org.springframework.http.ResponseEntity;
+import org.springframework.mock.web.MockMultipartFile;
 import org.springframework.web.server.ResponseStatusException;
 import org.springframework.web.servlet.mvc.method.annotation.SseEmitter;
 
@@ -38,6 +40,7 @@ import stirling.software.common.model.job.JobResponse;
 import stirling.software.common.model.tool.ToolDiagnostic;
 import stirling.software.common.service.JobOwnershipService;
 import stirling.software.common.util.TempFileManager;
+import stirling.software.common.util.TempFileRegistry;
 import stirling.software.proprietary.policy.config.PolicyAccessGuard;
 import stirling.software.proprietary.policy.config.PolicyManagementAuthority;
 import stirling.software.proprietary.policy.engine.PolicyRunHandle;
@@ -82,9 +85,14 @@ class PolicyControllerTest {
 
     @Mock private stirling.software.proprietary.policy.asset.PolicyAssetCleaner assetCleaner;
 
+    @Mock private stirling.software.proprietary.policy.asset.PolicyAssetResolver assetResolver;
+
     @Mock private ProcessedLedger processedLedger;
 
-    @Mock private TempFileManager tempFileManager;
+    // Real, not mocked: the run endpoints spool uploads through it.
+    private final TempFileManager tempFileManager =
+            new TempFileManager(new TempFileRegistry(), new ApplicationProperties());
+
     @Mock private JobOwnershipService jobOwnershipService;
 
     private ApplicationProperties applicationProperties;
@@ -114,6 +122,7 @@ class PolicyControllerTest {
                         policyTriggerManager,
                         policyOverviewService,
                         assetCleaner,
+                        assetResolver,
                         processedLedger,
                         policyTriggers,
                         applicationProperties,
@@ -216,7 +225,7 @@ class PolicyControllerTest {
     }
 
     private static PolicyRunHandle handle(String runId) {
-        PolicyRun run = new PolicyRun(runId, null, definitionWithStep(), null);
+        PolicyRun run = new PolicyRun(runId, null, definitionWithStep(), null, null, null);
         return new PolicyRunHandle(runId, CompletableFuture.completedFuture(run));
     }
 
@@ -231,7 +240,7 @@ class PolicyControllerTest {
                     .thenReturn(handle("run-1"));
 
             ResponseEntity<JobResponse<Void>> response =
-                    controller.run(definitionWithStep(), new PolicyRunFiles());
+                    controller.run(definitionWithStep(), null, new PolicyRunFiles());
 
             assertThat(response.getStatusCode()).isEqualTo(HttpStatus.ACCEPTED);
             assertThat(response.getBody().getJobId()).isEqualTo("run-1");
@@ -244,7 +253,7 @@ class PolicyControllerTest {
                     .thenReturn(handle("run-1"));
             when(sourceAccessGuard.currentTeamId()).thenReturn(3L);
 
-            controller.run(definitionWithStep(), new PolicyRunFiles());
+            controller.run(definitionWithStep(), null, new PolicyRunFiles());
 
             verify(docCounter).record(EditorSource.counterKey(3L), 0L);
         }
@@ -254,7 +263,7 @@ class PolicyControllerTest {
         void rejectsEmptyPipeline() {
             PipelineDefinition empty = new PipelineDefinition("pipe", List.of(), List.of());
 
-            assertThatThrownBy(() -> controller.run(empty, new PolicyRunFiles()))
+            assertThatThrownBy(() -> controller.run(empty, null, new PolicyRunFiles()))
                     .isInstanceOf(ResponseStatusException.class)
                     .satisfies(
                             e ->
@@ -276,7 +285,7 @@ class PolicyControllerTest {
                     .when(policyValidator)
                     .validateOutput(any());
 
-            assertThatThrownBy(() -> controller.run(definition, new PolicyRunFiles()))
+            assertThatThrownBy(() -> controller.run(definition, null, new PolicyRunFiles()))
                     .isInstanceOf(ResponseStatusException.class)
                     .satisfies(
                             e ->
@@ -284,6 +293,38 @@ class PolicyControllerTest {
                                             .isEqualTo(HttpStatus.BAD_REQUEST));
             verify(policyRunner, never()).runAdHoc(any(), any(), any());
         }
+
+        @Test
+        @DisplayName("resolves stored assets from the supplied policy when the caller may edit it")
+        void resolvesStoredAssetsForEditor() throws Exception {
+            applicationProperties.getSecurity().setEnableLogin(false); // editing allowed
+            Policy p = policy("pol-1", 1L);
+            when(policyStore.get("pol-1")).thenReturn(Optional.of(p));
+            when(policyAccessGuard.canAccess(p)).thenReturn(true);
+            when(assetResolver.resolve(eq(p), any())).thenAnswer(inv -> inv.getArgument(1));
+            when(policyRunner.runAdHoc(any(), any(), eq(PolicyProgressListener.NOOP)))
+                    .thenReturn(handle("run-1"));
+
+            controller.run(definitionWithStep(), "pol-1", new PolicyRunFiles());
+
+            verify(assetResolver).resolve(eq(p), any());
+        }
+
+        @Test
+        @DisplayName("does not resolve a policy's stored assets for a caller who cannot edit it")
+        void skipsStoredAssetsForNonEditor() throws Exception {
+            // Gating asset resolution to editors keeps a member from rebinding a policy's stored
+            // asset into an ad-hoc step to read it back.
+            applicationProperties.getSecurity().setEnableLogin(true);
+            when(policyManagementAuthority.canEditPolicies()).thenReturn(false);
+            when(policyRunner.runAdHoc(any(), any(), eq(PolicyProgressListener.NOOP)))
+                    .thenReturn(handle("run-1"));
+
+            controller.run(definitionWithStep(), "pol-1", new PolicyRunFiles());
+
+            verify(assetResolver, never()).resolve(any(), any());
+            verify(policyStore, never()).get(any());
+        }
     }
 
     @Nested
@@ -295,7 +336,8 @@ class PolicyControllerTest {
         void returnsEmitter() throws Exception {
             when(policyRunner.runAdHoc(any(), any(), any())).thenReturn(handle("run-2"));
 
-            SseEmitter emitter = controller.runStream(definitionWithStep(), new PolicyRunFiles());
+            SseEmitter emitter =
+                    controller.runStream(definitionWithStep(), null, new PolicyRunFiles());
 
             assertThat(emitter).isNotNull();
         }
@@ -305,7 +347,7 @@ class PolicyControllerTest {
         void rejectsEmpty() {
             PipelineDefinition empty = new PipelineDefinition("pipe", List.of(), List.of());
 
-            assertThatThrownBy(() -> controller.runStream(empty, new PolicyRunFiles()))
+            assertThatThrownBy(() -> controller.runStream(empty, null, new PolicyRunFiles()))
                     .isInstanceOf(ResponseStatusException.class);
         }
     }
@@ -317,7 +359,7 @@ class PolicyControllerTest {
         @Test
         @DisplayName("returns the run view when present")
         void found() {
-            PolicyRun run = new PolicyRun("run-3", null, definitionWithStep(), null);
+            PolicyRun run = new PolicyRun("run-3", null, definitionWithStep(), null, null, null);
             when(runRegistry.get("run-3")).thenReturn(run);
 
             ResponseEntity<PolicyRunView> response = controller.status("run-3");
@@ -346,9 +388,11 @@ class PolicyControllerTest {
         @Test
         @DisplayName("excludes ad-hoc runs and runs owned by others")
         void filtersRuns() {
-            PolicyRun adHoc = new PolicyRun("adhoc", null, definitionWithStep(), null);
-            PolicyRun ownedStored = new PolicyRun("owned", "policy-A", definitionWithStep(), null);
-            PolicyRun otherStored = new PolicyRun("other", "policy-B", definitionWithStep(), null);
+            PolicyRun adHoc = new PolicyRun("adhoc", null, definitionWithStep(), null, null, null);
+            PolicyRun ownedStored =
+                    new PolicyRun("owned", "policy-A", definitionWithStep(), null, null, null);
+            PolicyRun otherStored =
+                    new PolicyRun("other", "policy-B", definitionWithStep(), null, null, null);
             when(runRegistry.all()).thenReturn(List.of(adHoc, ownedStored, otherStored));
 
             // ownedByCurrentUser: strip then re-apply scope reproduces the key only for the owned
@@ -661,13 +705,46 @@ class PolicyControllerTest {
     @DisplayName("runStoredPolicy")
     class RunStoredPolicy {
 
+        /** What an editor sends: the documents, plus its own id for a single one of them. */
+        private PolicyRunFiles filesWith(String fileId, int documents) {
+            PolicyRunFiles files = new PolicyRunFiles();
+            files.setFileId(fileId);
+            files.setFileInput(
+                    java.util.stream.IntStream.range(0, documents)
+                            .mapToObj(
+                                    i ->
+                                            (org.springframework.web.multipart.MultipartFile)
+                                                    new MockMultipartFile(
+                                                            "fileInput",
+                                                            "doc" + i + ".pdf",
+                                                            "application/pdf",
+                                                            ("pdf-" + i).getBytes()))
+                            .toList());
+            return files;
+        }
+
+        private String documentReferenceOf(PolicyRunFiles files) throws Exception {
+            Policy p = policy("a", 1L);
+            when(policyStore.get("a")).thenReturn(Optional.of(p));
+            when(policyAccessGuard.canAccess(p)).thenReturn(true);
+            when(policyRunner.runWith(eq(p), any(), eq(PolicyProgressListener.NOOP), any()))
+                    .thenReturn(handle("run-9"));
+
+            controller.runStoredPolicy("a", files);
+
+            ArgumentCaptor<String> reference = ArgumentCaptor.forClass(String.class);
+            verify(policyRunner)
+                    .runWith(eq(p), any(), eq(PolicyProgressListener.NOOP), reference.capture());
+            return reference.getValue();
+        }
+
         @Test
         @DisplayName("runs a stored, accessible policy")
         void runsStored() throws Exception {
             Policy p = policy("a", 1L);
             when(policyStore.get("a")).thenReturn(Optional.of(p));
             when(policyAccessGuard.canAccess(p)).thenReturn(true);
-            when(policyRunner.runWith(eq(p), any(), eq(PolicyProgressListener.NOOP)))
+            when(policyRunner.runWith(eq(p), any(), eq(PolicyProgressListener.NOOP), any()))
                     .thenReturn(handle("run-9"));
 
             ResponseEntity<JobResponse<Void>> response =
@@ -677,6 +754,35 @@ class PolicyControllerTest {
             assertThat(response.getBody().getJobId()).isEqualTo("run-9");
         }
 
+        @Test
+        @DisplayName("records the caller's own id for a single-document run")
+        void carriesTheCallersDocumentReference() throws Exception {
+            // The point of the field: a failure names a document the client that started it can
+            // resolve.
+            assertThat(documentReferenceOf(filesWith("editor-file-1", 1)))
+                    .isEqualTo("editor-file-1");
+        }
+
+        @Test
+        @DisplayName("records nothing when the run carries several documents")
+        void refusesToGuessWhichOfSeveralDocumentsItIs() throws Exception {
+            // One incident, one reference: naming one of several would attribute it to whichever
+            // bound first.
+            assertThat(documentReferenceOf(filesWith("editor-file-1", 3))).isNull();
+        }
+
+        @Test
+        @DisplayName("records nothing when the caller sent no id")
+        void toleratesACallerThatSendsNoReference() throws Exception {
+            assertThat(documentReferenceOf(filesWith(null, 1))).isNull();
+        }
+
+        @Test
+        @DisplayName("records nothing for a blank id")
+        void treatsABlankReferenceAsNone() throws Exception {
+            assertThat(documentReferenceOf(filesWith("   ", 1))).isNull();
+        }
+
         @Test
         @DisplayName("not found when the stored policy is inaccessible")
         void notFound() {
@@ -736,5 +842,78 @@ class PolicyControllerTest {
                                     assertThat(((ResponseStatusException) e).getStatusCode())
                                             .isEqualTo(HttpStatus.NOT_FOUND));
         }
+
+        @Test
+        @DisplayName("trigger is forbidden for a team member who cannot manage policies")
+        void triggerForbiddenForMember() {
+            // Sweeping a policy's configured sources is a policy-management capability, so being
+            // in the policy's team is not on its own enough to perform it.
+            applicationProperties.getSecurity().setEnableLogin(true);
+            when(policyManagementAuthority.canTriggerPolicies()).thenReturn(false);
+
+            assertThatThrownBy(() -> controller.trigger("a"))
+                    .isInstanceOf(ResponseStatusException.class)
+                    .satisfies(
+                            e ->
+                                    assertThat(((ResponseStatusException) e).getStatusCode())
+                                            .isEqualTo(HttpStatus.FORBIDDEN));
+            // Rejected before the policy is looked up, so no run starts.
+            verify(policyRunner, never()).run(any());
+            verify(policyStore, never()).get(any());
+        }
+
+        @Test
+        @DisplayName("trigger runs for a caller who may manage policies")
+        void triggerAllowedForLeader() {
+            applicationProperties.getSecurity().setEnableLogin(true);
+            when(policyManagementAuthority.canTriggerPolicies()).thenReturn(true);
+            Policy p = policy("a", 1L);
+            when(policyStore.get("a")).thenReturn(Optional.of(p));
+            when(policyAccessGuard.canAccess(p)).thenReturn(true);
+            SweepOutcome outcome = new SweepOutcome(List.of("run-a"), 1, 0, 0, 0);
+            when(policyRunner.run(p)).thenReturn(outcome);
+
+            ResponseEntity<SweepOutcome> response = controller.trigger("a");
+
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.ACCEPTED);
+            assertThat(response.getBody()).isEqualTo(outcome);
+        }
+
+        @Test
+        @DisplayName("trigger skips the role check when login is disabled")
+        void triggerTrustsTheLocalOperator() {
+            // Single-user deployments have no roles at all; the gate must not lock them out of
+            // their
+            // own sweeps.
+            applicationProperties.getSecurity().setEnableLogin(false);
+            Policy p = policy("a", null);
+            when(policyStore.get("a")).thenReturn(Optional.of(p));
+            when(policyAccessGuard.canAccess(p)).thenReturn(true);
+            SweepOutcome outcome = new SweepOutcome(List.of("run-a"), 1, 0, 0, 0);
+            when(policyRunner.run(p)).thenReturn(outcome);
+
+            assertThat(controller.trigger("a").getStatusCode()).isEqualTo(HttpStatus.ACCEPTED);
+            verify(policyManagementAuthority, never()).canTriggerPolicies();
+        }
+
+        @Test
+        @DisplayName("running a policy over the caller's own files stays open to any member")
+        void storedRunIsNotGatedByRole() {
+            // Editor enforcement: every member's upload/export runs the team's stored policies on
+            // their own documents. Gating this the way the sweep is gated would break the editor.
+            applicationProperties.getSecurity().setEnableLogin(true);
+            Policy p = policy("a", 1L);
+            when(policyStore.get("a")).thenReturn(Optional.of(p));
+            when(policyAccessGuard.canAccess(p)).thenReturn(true);
+            when(policyRunner.runWith(eq(p), any(), eq(PolicyProgressListener.NOOP), any()))
+                    .thenReturn(handle("run-9"));
+
+            ResponseEntity<JobResponse<Void>> response =
+                    assertDoesNotThrow(() -> controller.runStoredPolicy("a", new PolicyRunFiles()));
+
+            assertThat(response.getStatusCode()).isEqualTo(HttpStatus.ACCEPTED);
+            verify(policyManagementAuthority, never()).canTriggerPolicies();
+            verify(policyManagementAuthority, never()).canEditPolicies();
+        }
     }
 }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java
index b3aaf291f9..1efe094fe4 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyEngineTest.java
@@ -9,6 +9,7 @@ import static org.mockito.ArgumentMatchers.anyInt;
 import static org.mockito.ArgumentMatchers.anyLong;
 import static org.mockito.ArgumentMatchers.anyString;
 import static org.mockito.ArgumentMatchers.eq;
+import static org.mockito.ArgumentMatchers.isNull;
 import static org.mockito.Mockito.atLeastOnce;
 import static org.mockito.Mockito.doReturn;
 import static org.mockito.Mockito.doThrow;
@@ -225,7 +226,161 @@ class PolicyEngineTest {
         // A failed run is recorded durably, so an admin can see it after the in-memory run expires.
         verify(failureRecorder)
                 .recordRunFailure(
-                        eq(runId), any(), any(), any(), anyString(), any(Throwable.class));
+                        eq(runId), any(), any(), any(), any(), anyString(), any(Throwable.class));
+    }
+
+    @Test
+    void recordsWhichSourceFedAFailedRun() throws Exception {
+        // The source is threaded onto the run so an unattended failure is attributable: there is no
+        // user to name for a file that arrived from a bucket. The actor is asserted null rather
+        // than
+        // any(): a loose matcher here is what let the owner be recorded as the actor unnoticed.
+        when(toolMetadataService.isMultiInput(ROTATE)).thenReturn(false);
+        when(internalApiClient.post(eq(ROTATE), any())).thenThrow(new RuntimeException("boom"));
+
+        PolicyRunHandle handle =
+                engine.runPolicy(
+                        policyOwnedBy("owner"),
+                        PolicyInputs.of(List.of(pdf("input", "input.pdf"))),
+                        PolicyProgressListener.NOOP,
+                        "src-s3-invoices",
+                        "file-hash-1");
+        handle.completion().get(10, TimeUnit.SECONDS);
+
+        verify(failureRecorder)
+                .recordRunFailure(
+                        anyString(),
+                        any(),
+                        eq("src-s3-invoices"),
+                        eq("file-hash-1"),
+                        isNull(),
+                        anyString(),
+                        any(Throwable.class));
+    }
+
+    @Test
+    void anAttendedFailureIsRecordedAgainstWhoTriggeredItNotThePolicysOwner() throws Exception {
+        // Bob runs Alice's shared policy on his own upload and it fails. The row must name Bob: he
+        // is the one whose browser holds the document, and a member's read scope narrows to their
+        // own rows, so filing it under Alice hides it from the only person who can act on it.
+        when(toolMetadataService.isMultiInput(ROTATE)).thenReturn(false);
+        when(internalApiClient.post(eq(ROTATE), any())).thenThrow(new RuntimeException("boom"));
+
+        MDC.put("auditPrincipal", "bob"); // the request thread's acting user
+        try {
+            engine.runPolicy(
+                            policyOwnedBy("alice"),
+                            PolicyInputs.of(List.of(pdf("input", "input.pdf"))),
+                            PolicyProgressListener.NOOP,
+                            null,
+                            "bob-doc-1")
+                    .completion()
+                    .get(10, TimeUnit.SECONDS);
+        } finally {
+            MDC.remove("auditPrincipal");
+        }
+
+        verify(failureRecorder)
+                .recordRunFailure(
+                        anyString(),
+                        any(),
+                        isNull(),
+                        eq("bob-doc-1"),
+                        eq("bob"),
+                        anyString(),
+                        any(Throwable.class));
+    }
+
+    @Test
+    void anUnattendedFailureIsRecordedWithNoActorWhileStillBillingTheOwner() throws Exception {
+        // The two identities are deliberately different, and this pins both at once: usage is
+        // charged to the owner (MDC audit principal on the worker), but the failure has no actor,
+        // which is what makes it UNOWNED and hands the owner actions to the team's reviewer.
+        when(toolMetadataService.isMultiInput(ROTATE)).thenReturn(false);
+        String[] principalAtDispatch = {"<none>"};
+        when(internalApiClient.post(eq(ROTATE), any()))
+                .thenAnswer(
+                        invocation -> {
+                            principalAtDispatch[0] = MDC.get("auditPrincipal");
+                            throw new RuntimeException("boom");
+                        });
+
+        // No MDC and no security context: exactly a trigger-fired sweep.
+        engine.runPolicy(
+                        policyOwnedBy("alice"),
+                        PolicyInputs.of(List.of(pdf("input", "input.pdf"))),
+                        PolicyProgressListener.NOOP,
+                        "src-watched-folder",
+                        "file-hash-1")
+                .completion()
+                .get(10, TimeUnit.SECONDS);
+
+        assertEquals("alice", principalAtDispatch[0], "billing must still be the policy owner");
+        verify(failureRecorder)
+                .recordRunFailure(
+                        anyString(),
+                        any(),
+                        eq("src-watched-folder"),
+                        eq("file-hash-1"),
+                        isNull(),
+                        anyString(),
+                        any(Throwable.class));
+    }
+
+    @Test
+    void anAdHocFailureIsRecordedAgainstTheSubmittingUser() throws Exception {
+        // An ad-hoc run has no stored policy, so the submitter is both payer and actor. Asserted so
+        // the two entry points cannot drift apart.
+        when(toolMetadataService.isMultiInput(ROTATE)).thenReturn(false);
+        when(internalApiClient.post(eq(ROTATE), any())).thenThrow(new RuntimeException("boom"));
+
+        MDC.put("auditPrincipal", "bob");
+        try {
+            engine.submit(
+                            definition(new PipelineStep(ROTATE, Map.of())),
+                            PolicyInputs.of(List.of(pdf("input", "input.pdf"))),
+                            PolicyProgressListener.NOOP)
+                    .completion()
+                    .get(10, TimeUnit.SECONDS);
+        } finally {
+            MDC.remove("auditPrincipal");
+        }
+
+        verify(failureRecorder)
+                .recordRunFailure(
+                        anyString(),
+                        any(),
+                        any(),
+                        any(),
+                        eq("bob"),
+                        anyString(),
+                        any(Throwable.class));
+    }
+
+    @Test
+    void aRunRefusedAtAdmissionIsRecordedAgainstWhoeverTriggeredIt() throws Exception {
+        // The queue-full path records its own row, and it is attended: the user is still holding
+        // the
+        // document, so it must reach them rather than landing as an ownerless incident.
+        when(resourceMonitor.shouldQueueJob(anyInt())).thenReturn(true);
+        CompletableFuture<Object> rejected = new CompletableFuture<>();
+        rejected.completeExceptionally(new RuntimeException("Job queue full"));
+        doReturn(rejected).when(jobQueue).queueJob(anyString(), anyInt(), any(), anyLong());
+
+        MDC.put("auditPrincipal", "bob");
+        try {
+            engine.runPolicy(
+                    policyOwnedBy("alice"),
+                    PolicyInputs.of(List.of(pdf("input", "input.pdf"))),
+                    PolicyProgressListener.NOOP,
+                    null,
+                    "bob-doc-1");
+        } finally {
+            MDC.remove("auditPrincipal");
+        }
+
+        verify(failureRecorder)
+                .recordRunFailureAs(any(), anyString(), any(), isNull(), eq("bob"), anyString());
     }
 
     @Test
@@ -238,7 +393,7 @@ class PolicyEngineTest {
         doThrow(new RuntimeException("event store unavailable"))
                 .when(failureRecorder)
                 .recordRunFailure(
-                        anyString(), any(), any(), any(), anyString(), any(Throwable.class));
+                        anyString(), any(), any(), any(), any(), anyString(), any(Throwable.class));
 
         PolicyRunHandle handle =
                 engine.submit(
@@ -506,6 +661,17 @@ class PolicyEngineTest {
         return new PipelineDefinition("test", List.of(steps), OutputSpec.inline());
     }
 
+    private static Policy policyOwnedBy(String owner) {
+        return new Policy(
+                "p1",
+                "rotate",
+                owner,
+                true,
+                List.of(),
+                List.of(new PipelineStep(ROTATE, Map.of())),
+                OutputSpec.inline());
+    }
+
     private void stubEndpoint(String endpoint, Resource body) {
         when(internalApiClient.post(eq(endpoint), any())).thenReturn(ResponseEntity.ok(body));
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunRegistryTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunRegistryTest.java
index 784baa207c..692fe84c37 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunRegistryTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunRegistryTest.java
@@ -97,7 +97,12 @@ class PolicyRunRegistryTest {
     private PolicyRun register(String runId) {
         PolicyRun run =
                 new PolicyRun(
-                        runId, null, new PipelineDefinition(runId, List.of(), List.of()), null);
+                        runId,
+                        null,
+                        new PipelineDefinition(runId, List.of(), List.of()),
+                        null,
+                        null,
+                        null);
         registry.register(run);
         return run;
     }
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java
index ba66cb8b2d..ebcf316c25 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/engine/PolicyRunnerTest.java
@@ -32,6 +32,7 @@ import org.springframework.core.io.ByteArrayResource;
 import stirling.software.proprietary.policy.input.InputSource;
 import stirling.software.proprietary.policy.input.ResolveContext;
 import stirling.software.proprietary.policy.input.ResolvedInput;
+import stirling.software.proprietary.policy.ledger.IdentityHasher;
 import stirling.software.proprietary.policy.ledger.InProcessProcessedLedger;
 import stirling.software.proprietary.policy.ledger.ProcessedLedger;
 import stirling.software.proprietary.policy.model.InputSpec;
@@ -78,13 +79,13 @@ class PolicyRunnerTest {
     @Test
     void runsOnceWithNoFilesWhenThePolicyHasNoSources() {
         Policy policy = policy(List.of());
-        when(policyEngine.runPolicy(eq(policy), any(), any(), any()))
+        when(policyEngine.runPolicy(eq(policy), any(), any(), any(), any()))
                 .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
 
         runner.run(policy);
 
         ArgumentCaptor<PolicyInputs> inputs = ArgumentCaptor.forClass(PolicyInputs.class);
-        verify(policyEngine).runPolicy(eq(policy), inputs.capture(), any(), any());
+        verify(policyEngine).runPolicy(eq(policy), inputs.capture(), any(), any(), any());
         assertTrue(inputs.getValue().primary().isEmpty());
         // Ledger hygiene still runs: rows recorded for a generator policy's folder outputs
         // are pruned by its own sweeps rather than accumulating until the policy is deleted.
@@ -137,12 +138,12 @@ class PolicyRunnerTest {
                         List.of(
                                 ResolvedInput.of(PolicyInputs.of(List.of())),
                                 ResolvedInput.of(PolicyInputs.of(List.of()))));
-        when(policyEngine.runPolicy(any(), any(), any(), any()))
+        when(policyEngine.runPolicy(any(), any(), any(), any(), any()))
                 .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
 
         runner.run(policy);
 
-        verify(policyEngine, times(2)).runPolicy(eq(policy), any(), any(), any());
+        verify(policyEngine, times(2)).runPolicy(eq(policy), any(), any(), any(), any());
     }
 
     @Test
@@ -154,7 +155,7 @@ class PolicyRunnerTest {
         when(folderSource.supports(spec)).thenReturn(true);
         when(folderSource.resolve(eq(spec), any())).thenReturn(List.of(unit));
         CompletableFuture<PolicyRun> completion = new CompletableFuture<>();
-        when(policyEngine.runPolicy(any(), any(), any(), any()))
+        when(policyEngine.runPolicy(any(), any(), any(), any(), any()))
                 .thenReturn(new PolicyRunHandle("r", completion));
 
         runner.run(policy);
@@ -175,7 +176,7 @@ class PolicyRunnerTest {
         when(folderSource.supports(spec)).thenReturn(true);
         when(folderSource.resolve(eq(spec), any())).thenReturn(List.of(unit));
         CompletableFuture<PolicyRun> completion = new CompletableFuture<>();
-        when(policyEngine.runPolicy(any(), any(), any(), any()))
+        when(policyEngine.runPolicy(any(), any(), any(), any(), any()))
                 .thenReturn(new PolicyRunHandle("r", completion));
 
         runner.run(policy);
@@ -224,12 +225,12 @@ class PolicyRunnerTest {
         when(folderSource.supports(spec)).thenReturn(true);
         when(folderSource.resolve(eq(spec), any()))
                 .thenReturn(List.of(ResolvedInput.of(PolicyInputs.of(List.of()))));
-        when(policyEngine.runPolicy(any(), any(), any(), any()))
+        when(policyEngine.runPolicy(any(), any(), any(), any(), any()))
                 .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
 
         runner.run(policy, SweepKind.LIGHT);
 
-        verify(policyEngine).runPolicy(eq(policy), any(), any(), any());
+        verify(policyEngine).runPolicy(eq(policy), any(), any(), any(), any());
         verify(processedLedger, never()).markSeen(any(), any());
         verify(processedLedger, never()).deleteUnseen(any(), anyLong());
     }
@@ -244,12 +245,13 @@ class PolicyRunnerTest {
         when(folderSource.resolve(eq(broken), any())).thenThrow(new IOException("mount gone"));
         when(folderSource.resolve(eq(healthy), any()))
                 .thenReturn(List.of(ResolvedInput.of(PolicyInputs.of(List.of()))));
-        when(policyEngine.runPolicy(any(), any(), any(), any()))
+        when(policyEngine.runPolicy(any(), any(), any(), any(), any()))
                 .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
 
         runner.run(policy);
 
-        verify(policyEngine).runPolicy(eq(policy), any(), any(), any()); // healthy source still ran
+        verify(policyEngine)
+                .runPolicy(eq(policy), any(), any(), any(), any()); // healthy source still ran
         verify(processedLedger, never()).deleteUnseen(any(), anyLong()); // history preserved
     }
 
@@ -292,13 +294,56 @@ class PolicyRunnerTest {
         Policy policy = policy(List.of(InputSpec.folder("/in")));
         PolicyInputs inputs = PolicyInputs.of(List.of());
         PolicyRunHandle handle = new PolicyRunHandle("r", new CompletableFuture<>());
-        when(policyEngine.runPolicy(policy, inputs, PolicyProgressListener.NOOP))
+        when(policyEngine.runPolicy(policy, inputs, PolicyProgressListener.NOOP, null, null))
                 .thenReturn(handle);
 
-        assertSame(handle, runner.runWith(policy, inputs, PolicyProgressListener.NOOP));
+        assertSame(handle, runner.runWith(policy, inputs, PolicyProgressListener.NOOP, null));
         verifyNoInteractions(folderSource);
     }
 
+    @Test
+    void anAttendedRunCarriesTheClientsOwnDocumentReferenceAndNoSource() {
+        // A failure of this run can then name the document the user is still holding, and the null
+        // sourceId is what marks the reference as the client's own rather than a source's hash.
+        Policy policy = policy(List.of());
+        PolicyInputs inputs = PolicyInputs.of(List.of(new ByteArrayResource("a".getBytes())));
+        when(policyEngine.runPolicy(
+                        policy, inputs, PolicyProgressListener.NOOP, null, "editor-file-1"))
+                .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
+
+        runner.runWith(policy, inputs, PolicyProgressListener.NOOP, "editor-file-1");
+
+        verify(policyEngine)
+                .runPolicy(policy, inputs, PolicyProgressListener.NOOP, null, "editor-file-1");
+    }
+
+    @Test
+    void anUnattendedRunStillCarriesItsSourcesHashedIdentity() throws Exception {
+        // The other id space, unchanged: a folder identity is a path, and a path is a filename, so
+        // what reaches the run is the one-way hash and never the client-minted kind of reference.
+        InputSpec spec = InputSpec.folder("/in");
+        Policy policy = policy(List.of(spec));
+        String sourceId = policy.inputs().getFirst().sourceId();
+        when(folderSource.supports(spec)).thenReturn(true);
+        when(folderSource.resolve(eq(spec), any()))
+                .thenReturn(
+                        List.of(
+                                ResolvedInput.forFile(
+                                        PolicyInputs.of(List.of()), "/in/doc.pdf", success -> {})));
+        when(policyEngine.runPolicy(any(), any(), any(), any(), any()))
+                .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
+
+        runner.run(policy);
+
+        verify(policyEngine)
+                .runPolicy(
+                        eq(policy),
+                        any(),
+                        any(),
+                        eq(sourceId),
+                        eq(IdentityHasher.identityHash("/in/doc.pdf")));
+    }
+
     @Test
     void runWithRecordsSuppliedDocsAgainstTheEditorSourceForThePolicyTeam() {
         Policy policy =
@@ -316,10 +361,11 @@ class PolicyRunnerTest {
                         List.of(
                                 new ByteArrayResource("a".getBytes()),
                                 new ByteArrayResource("b".getBytes())));
-        when(policyEngine.runPolicy(policy, inputs, PolicyProgressListener.NOOP))
+        when(policyEngine.runPolicy(
+                        policy, inputs, PolicyProgressListener.NOOP, null, "editor-file-1"))
                 .thenReturn(new PolicyRunHandle("r", new CompletableFuture<>()));
 
-        runner.runWith(policy, inputs, PolicyProgressListener.NOOP);
+        runner.runWith(policy, inputs, PolicyProgressListener.NOOP, "editor-file-1");
 
         String key = EditorSource.counterKey(7L);
         assertEquals(2, docCounter.statsFor(List.of(key)).get(key).total());
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java
index 8610926c2a..373b596136 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/overview/PolicyOverviewServiceTest.java
@@ -28,9 +28,11 @@ import stirling.software.proprietary.policy.store.InProcessPolicyStore;
 import stirling.software.proprietary.policy.store.PolicyStore;
 
 /**
- * Tests for {@link PolicyOverviewService}: every policy appears once with its sources resolved to
- * names, its steps and trigger/output summarised, and the KPI strip counting active vs paused.
- * Login is disabled so the team guards pass everything through.
+ * Tests for {@link PolicyOverviewService}: every Pipelines-page policy appears once with its
+ * sources resolved to names, its steps and trigger/output summarised, and the KPI strip counting
+ * active vs paused. Frontend/catalogue policies (owned by the Policies page) are excluded, while a
+ * pipeline that uses a folder-watch trigger stays. Login is disabled so the team guards pass
+ * everything through.
  */
 class PolicyOverviewServiceTest {
 
@@ -95,6 +97,51 @@ class PolicyOverviewServiceTest {
         assertEquals(List.of(2L, 1L, 1L), response.kpis().stream().map(PolicyKpi::value).toList());
     }
 
+    @Test
+    void excludesCataloguePoliciesButKeepsFolderWatchPipelines() {
+        Source inbox = source("Inbox", "/inbox");
+        // A hand-built pipeline: shows.
+        policyStore.save(
+                new Policy(
+                        null,
+                        "Compress pipeline",
+                        "owner",
+                        true,
+                        List.of(),
+                        List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
+                        OutputSpec.inline()));
+        // A folder-watch pipeline is still a pipeline: shows.
+        policyStore.save(
+                new Policy(
+                        null,
+                        "Inbox watcher",
+                        "owner",
+                        true,
+                        List.of(
+                                new PipelineInput(
+                                        inbox.id(), new TriggerConfig("folder-watch", Map.of()))),
+                        List.of(new PipelineStep("/api/v1/misc/compress-pdf", Map.of())),
+                        OutputSpec.inline()));
+        // A frontend/catalogue policy (categoryId in output options): hidden.
+        policyStore.save(
+                new Policy(
+                        null,
+                        "Classification Policy",
+                        "system",
+                        true,
+                        List.of(),
+                        List.of(new PipelineStep("/api/v1/ai/tools/classify-and-label", Map.of())),
+                        new OutputSpec("inline", Map.of("categoryId", "classification"))));
+
+        PoliciesOverviewResponse response = service.overview();
+
+        assertEquals(
+                List.of("Compress pipeline", "Inbox watcher"),
+                response.pipelines().stream().map(PolicyView::name).toList());
+        // KPIs count both visible pipelines, not the hidden catalogue policy.
+        assertEquals(List.of(2L, 2L, 0L), response.kpis().stream().map(PolicyKpi::value).toList());
+    }
+
     @Test
     void anUnresolvedSourceFallsBackToItsId() {
         policyStore.save(
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java
index 49159e7d6e..f6e82bd011 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/policy/seed/DefaultClassificationPolicySeederTest.java
@@ -36,10 +36,14 @@ class DefaultClassificationPolicySeederTest {
     }
 
     private static Policy classificationPolicy(Long teamId) {
+        return classificationPolicy(teamId, null);
+    }
+
+    private static Policy classificationPolicy(Long teamId, String owner) {
         return new Policy(
                 "p1",
                 "Classification Policy",
-                "system",
+                owner,
                 true,
                 List.of(),
                 List.of(),
@@ -77,6 +81,29 @@ class DefaultClassificationPolicySeederTest {
         verify(policyStore, never()).save(any());
     }
 
+    @Test
+    void clearsAPlaceholderOwnerSeededBeforeOwnersHadToBeReal() {
+        when(policyStore.findByTeam(7L)).thenReturn(List.of(classificationPolicy(7L, "system")));
+
+        seeder().onTeamCreated(new TeamCreatedEvent(7L, "Acme"));
+
+        // "system" was never a user row, and a step dispatch authenticates as the owner. Absence
+        // is handled everywhere; a placeholder name is not.
+        ArgumentCaptor<Policy> saved = ArgumentCaptor.forClass(Policy.class);
+        verify(policyStore).save(saved.capture());
+        assertThat(saved.getValue().owner()).isNull();
+        assertThat(saved.getValue().id()).isEqualTo("p1");
+    }
+
+    @Test
+    void leavesADeliberatelyChosenOwnerAlone() {
+        when(policyStore.findByTeam(7L)).thenReturn(List.of(classificationPolicy(7L, "alice")));
+
+        seeder().onTeamCreated(new TeamCreatedEvent(7L, "Acme"));
+
+        verify(policyStore, never()).save(any());
+    }
+
     @Test
     void doesNotSeedForTheInternalTeam() {
         seeder().onTeamCreated(new TeamCreatedEvent(2L, "Internal"));
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditCleanupServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditCleanupServiceTest.java
new file mode 100644
index 0000000000..62e80d5280
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditCleanupServiceTest.java
@@ -0,0 +1,55 @@
+package stirling.software.proprietary.service;
+
+import static org.assertj.core.api.Assertions.assertThat;
+import static org.mockito.Mockito.mock;
+
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.model.ApplicationProperties;
+import stirling.software.proprietary.config.AuditConfigurationProperties;
+import stirling.software.proprietary.repository.PersistentAuditEventRepository;
+
+class AuditCleanupServiceTest {
+
+    private final PersistentAuditEventRepository repository =
+            mock(PersistentAuditEventRepository.class);
+
+    private AuditCleanupService service(boolean runningEE, int retentionDays) {
+        ApplicationProperties props = new ApplicationProperties();
+        var audit = props.getPremium().getEnterpriseFeatures().getAudit();
+        audit.setEnabled(true);
+        audit.setRetentionDays(retentionDays);
+        return new AuditCleanupService(
+                repository, new AuditConfigurationProperties(props), runningEE);
+    }
+
+    @Test
+    @DisplayName("Enterprise keeps the configured retention, including infinite")
+    void enterpriseUsesConfigured() {
+        assertThat(service(true, 90).effectiveRetentionDays()).isEqualTo(90);
+        assertThat(service(true, 365).effectiveRetentionDays()).isEqualTo(365);
+        assertThat(service(true, 0).effectiveRetentionDays()).isEqualTo(0);
+    }
+
+    @Test
+    @DisplayName("non-Enterprise caps retention at 30 days")
+    void nonEnterpriseCapsHigherValues() {
+        assertThat(service(false, 90).effectiveRetentionDays()).isEqualTo(30);
+        assertThat(service(false, 365).effectiveRetentionDays()).isEqualTo(30);
+    }
+
+    @Test
+    @DisplayName("non-Enterprise respects a shorter configured retention")
+    void nonEnterpriseRespectsLower() {
+        assertThat(service(false, 14).effectiveRetentionDays()).isEqualTo(14);
+        assertThat(service(false, 7).effectiveRetentionDays()).isEqualTo(7);
+    }
+
+    @Test
+    @DisplayName("non-Enterprise cannot retain forever (<= 0 becomes the cap)")
+    void nonEnterpriseNoInfinite() {
+        assertThat(service(false, 0).effectiveRetentionDays()).isEqualTo(30);
+        assertThat(service(false, -1).effectiveRetentionDays()).isEqualTo(30);
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditServiceTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditServiceTest.java
index c2d14d1307..ab0b3437bb 100644
--- a/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditServiceTest.java
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/AuditServiceTest.java
@@ -166,6 +166,42 @@ class AuditServiceTest {
             verify(repository, never()).add(any(AuditEvent.class));
         }
 
+        @Test
+        @DisplayName("records document-processing events even without EE (Documents feed)")
+        void recordsDocumentEventsWithoutEE() {
+            AuditService nonEe =
+                    new AuditService(
+                            repository, auditConfig, false, pdfDocumentFactory, jwtService);
+            authenticateAs("alice");
+
+            nonEe.audit(AuditEventType.PDF_PROCESS, new HashMap<>(), AuditLevel.BASIC);
+            nonEe.audit(AuditEventType.FILE_OPERATION, new HashMap<>(), AuditLevel.BASIC);
+
+            org.mockito.ArgumentCaptor<AuditEvent> captor =
+                    org.mockito.ArgumentCaptor.forClass(AuditEvent.class);
+            verify(repository, org.mockito.Mockito.times(2)).add(captor.capture());
+            assertThat(captor.getAllValues())
+                    .extracting(AuditEvent::getType)
+                    .containsExactly(
+                            AuditEventType.PDF_PROCESS.name(),
+                            AuditEventType.FILE_OPERATION.name());
+        }
+
+        @Test
+        @DisplayName("type-aware shouldAudit lets doc events through without EE, blocks others")
+        void typeAwareShouldAuditWithoutEE() throws Exception {
+            AuditService nonEe =
+                    new AuditService(
+                            repository, auditConfig, false, pdfDocumentFactory, jwtService);
+            Method m = Object.class.getMethod("toString");
+
+            assertThat(nonEe.shouldAudit(AuditEventType.PDF_PROCESS, m, auditConfig)).isTrue();
+            assertThat(nonEe.shouldAudit(AuditEventType.FILE_OPERATION, m, auditConfig)).isTrue();
+            assertThat(nonEe.shouldAudit(AuditEventType.USER_LOGIN, m, auditConfig)).isFalse();
+            // With EE, non-doc events at/under the configured level audit too.
+            assertThat(service.shouldAudit(AuditEventType.USER_LOGIN, m, auditConfig)).isTrue();
+        }
+
         @Test
         @DisplayName("skips when audit disabled")
         void skipsWhenDisabled() {
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/AltTextRoundTripTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/AltTextRoundTripTest.java
new file mode 100644
index 0000000000..0f8e52d9ec
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/AltTextRoundTripTest.java
@@ -0,0 +1,115 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.util.Map;
+
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.controller.api.converters.ConvertPdfToPdfUa;
+import stirling.software.proprietary.model.api.ua.AccessibilityReport;
+import stirling.software.proprietary.model.api.ua.FigureDescriptor;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/**
+ * The alt-text loop end to end: the report hands out keys the conversion accepts. The converter
+ * never invents descriptions, so a caller must be able to supply them.
+ */
+class AltTextRoundTripTest {
+
+    private static PdfUaConversionService conversion;
+    private static AccessibilityAuditService audit;
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        conversion =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+        audit = new AccessibilityAuditService(validation);
+    }
+
+    private static TaggingOptions.TaggingOptionsBuilder options() {
+        return TaggingOptions.builder()
+                .profile(PdfUaProfile.UA1)
+                .language("en-GB")
+                .title("Illustrated")
+                .embedFonts(false);
+    }
+
+    @Test
+    @DisplayName("the report names the figures that need describing, with usable keys")
+    void reportEnumeratesFigures() throws Exception {
+        byte[] input = PdfUaTestDocuments.imageDocument();
+        AccessibilityReport report = audit.audit(input, PdfUaProfile.UA1);
+
+        assertFalse(
+                report.getFiguresNeedingDescription().isEmpty(),
+                "a document with an undescribed image must say which figure needs text");
+
+        FigureDescriptor figure = report.getFiguresNeedingDescription().get(0);
+        assertTrue(figure.key().matches("\\d+:\\d+"), "key should be pageIndex:ordinal: " + figure);
+        assertEquals(1, figure.page(), "pages are reported 1-based for humans");
+        assertTrue(figure.width() > 0 && figure.height() > 0, "figure should carry its box");
+    }
+
+    @Test
+    @DisplayName("feeding the report's key back makes the document conform")
+    void suppliedDescriptionClosesTheLoop() throws Exception {
+        byte[] input = PdfUaTestDocuments.imageDocument();
+
+        PdfUaConversionOutcome before = conversion.convert(input, options().build());
+        assertFalse(before.declared(), "an undescribed image must block the claim");
+
+        String key =
+                audit.audit(input, PdfUaProfile.UA1).getFiguresNeedingDescription().get(0).key();
+        PdfUaConversionOutcome after =
+                conversion.convert(
+                        input, options().altTextByFigure(Map.of(key, "A blue rectangle")).build());
+
+        assertEquals(
+                0,
+                after.tagging().figuresNeedingAltText(),
+                "the description supplied against the report's own key was not applied");
+        assertTrue(after.declared(), "with every figure described the document should conform");
+    }
+
+    @Test
+    @DisplayName("the request's key=text form parses the way the report emits keys")
+    void parsesTheWireFormat() {
+        Map<String, String> parsed =
+                ConvertPdfToPdfUa.parseAltText(
+                        "0:12=Bar chart of quarterly revenue\r\n"
+                                + "1:3=Company logo\n"
+                                + "  \n"
+                                + "malformed-line\n"
+                                + "2:7=Diagram showing the approval flow = end to end");
+
+        assertEquals(3, parsed.size(), "blank and malformed lines are skipped: " + parsed);
+        assertEquals("Bar chart of quarterly revenue", parsed.get("0:12"));
+        assertEquals("Company logo", parsed.get("1:3"));
+        assertEquals(
+                "Diagram showing the approval flow = end to end",
+                parsed.get("2:7"),
+                "only the first equals splits, so descriptions may contain one");
+    }
+
+    @Test
+    @DisplayName("no descriptions supplied means none invented")
+    void emptyInputInventsNothing() {
+        assertTrue(ConvertPdfToPdfUa.parseAltText(null).isEmpty());
+        assertTrue(ConvertPdfToPdfUa.parseAltText("   ").isEmpty());
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUa2ProfileTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUa2ProfileTest.java
new file mode 100644
index 0000000000..9cf342824f
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUa2ProfileTest.java
@@ -0,0 +1,92 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.cos.COSName;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/** PDF/UA-2 is not just a metadata number: it needs PDF 2.0 and namespaced structure types. */
+class PdfUa2ProfileTest {
+
+    private static PdfUaConversionService conversion;
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        conversion =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+    }
+
+    private static PdfUaConversionOutcome convertUa2(byte[] input) throws Exception {
+        return conversion.convert(
+                input,
+                TaggingOptions.builder()
+                        .profile(PdfUaProfile.UA2)
+                        .language("en-GB")
+                        .title("UA-2 Document")
+                        .embedFonts(false)
+                        .build());
+    }
+
+    @Test
+    @DisplayName("raises the file to PDF 2.0 and namespaces the structure tree")
+    void producesPdf2WithNamespaces() throws Exception {
+        PdfUaConversionOutcome outcome = convertUa2(PdfUaTestDocuments.headingHierarchy());
+
+        try (PDDocument document = Loader.loadPDF(outcome.pdfBytes())) {
+            assertEquals(2.0f, document.getVersion(), "UA-2 is defined on PDF 2.0");
+
+            var root = document.getDocumentCatalog().getStructureTreeRoot();
+            assertNotNull(root, "no structure tree was written");
+            assertNotNull(
+                    root.getCOSObject().getDictionaryObject(COSName.getPDFName("Namespaces")),
+                    "UA-2 requires the standard structure namespace to be declared");
+        }
+    }
+
+    @Test
+    @DisplayName("validates against the PDF/UA-2 profile, not the UA-1 one")
+    void validatesAgainstUa2() throws Exception {
+        PdfUaConversionOutcome outcome = convertUa2(PdfUaTestDocuments.simpleDocument());
+        assertEquals("PDF/UA-2", outcome.validation().profile());
+    }
+
+    @Test
+    @DisplayName("reaches UA-2 conformance and declares it")
+    void reachesUa2Conformance() throws Exception {
+        PdfUaConversionOutcome outcome = convertUa2(PdfUaTestDocuments.simpleDocument());
+
+        String failures =
+                outcome.validation().issues().stream()
+                        .map(issue -> issue.getClause() + ": " + issue.getTechnicalMessage())
+                        .collect(java.util.stream.Collectors.joining("; "));
+        assertEquals(0, outcome.validation().totalFailures(), "UA-2 checks failed: " + failures);
+        assertTrue(outcome.declared(), "a conforming UA-2 file must carry the declaration");
+        assertTrue(outcome.pdfBytes().length > 0);
+    }
+
+    @Test
+    @DisplayName("an illustrated document still cannot claim UA-2 without descriptions")
+    void undescribedImageBlocksTheUa2Claim() throws Exception {
+        PdfUaConversionOutcome outcome = convertUa2(PdfUaTestDocuments.imageDocument());
+        assertFalse(outcome.declared(), "an undescribed image must block the claim");
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaConversionIntegrationTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaConversionIntegrationTest.java
new file mode 100644
index 0000000000..e785957b7b
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaConversionIntegrationTest.java
@@ -0,0 +1,231 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+import java.util.LinkedHashMap;
+import java.util.Map;
+import java.util.concurrent.Callable;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.model.api.ua.AccessibilityIssue;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.model.api.ua.UaValidationResult;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/**
+ * End-to-end conversion over the fixture corpus, validated with veraPDF. The corpus is deliberately
+ * varied: what breaks a tagger is rarely the simple case.
+ */
+class PdfUaConversionIntegrationTest {
+
+    private static PdfUaConversionService service;
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        service =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+    }
+
+    /** Fixtures already embed fonts, so the Ghostscript pass is off to keep tests hermetic. */
+    private static TaggingOptions options() {
+        return TaggingOptions.builder()
+                .profile(PdfUaProfile.UA1)
+                .language("en-GB")
+                .title("Test Document")
+                .embedFonts(false)
+                .build();
+    }
+
+    private static PdfUaConversionOutcome convert(byte[] input) throws IOException {
+        return service.convert(input, options());
+    }
+
+    private static String extractText(byte[] pdf) throws IOException {
+        try (PDDocument document = Loader.loadPDF(pdf)) {
+            PDFTextStripper stripper = new PDFTextStripper();
+            stripper.setSortByPosition(true);
+            return PdfUaRealCorpusTest.normalise(stripper.getText(document));
+        }
+    }
+
+    @Test
+    @DisplayName("every fixture converts without error and gains a structure tree")
+    void corpusConverts() throws Exception {
+        Map<String, Callable<byte[]>> corpus = corpus();
+        StringBuilder report = new StringBuilder("\nPDF/UA conversion over the fixture corpus\n");
+
+        for (Map.Entry<String, Callable<byte[]>> entry : corpus.entrySet()) {
+            byte[] input =
+                    entry.getKey().equals("empty")
+                            ? entry.getValue().call()
+                            : entry.getValue().call();
+            PdfUaConversionOutcome outcome = convert(input);
+
+            assertNotNull(outcome.pdfBytes(), entry.getKey() + " produced no output");
+            report.append(
+                    String.format(
+                            "  %-18s declared=%-5s failures=%-3d elements=%-3d artifacts=%-3d altNeeded=%d%n",
+                            entry.getKey(),
+                            outcome.declared(),
+                            outcome.validation().totalFailures(),
+                            outcome.tagging().taggedElements(),
+                            outcome.tagging().artifacts(),
+                            outcome.tagging().figuresNeedingAltText()));
+            for (AccessibilityIssue issue : outcome.validation().issues()) {
+                report.append(
+                        String.format(
+                                "      clause %-6s x%-4d %s%n",
+                                issue.getClause(),
+                                issue.getOccurrences(),
+                                issue.getTechnicalMessage()));
+            }
+        }
+        System.out.println(report);
+    }
+
+    @Test
+    @DisplayName("tagging never changes the text content of a page")
+    void textIsPreserved() throws Exception {
+        for (Map.Entry<String, Callable<byte[]>> entry : corpus().entrySet()) {
+            byte[] input = entry.getValue().call();
+            String before = extractText(input);
+            String after = extractText(convert(input).pdfBytes());
+            assertEquals(before, after, "text changed for fixture " + entry.getKey());
+        }
+    }
+
+    @Test
+    @DisplayName("a simple document gains a structure tree with headings and paragraphs")
+    void simpleDocumentIsTagged() throws Exception {
+        PdfUaConversionOutcome outcome = convert(PdfUaTestDocuments.simpleDocument());
+        try (PDDocument document = Loader.loadPDF(outcome.pdfBytes())) {
+            assertNotNull(
+                    document.getDocumentCatalog().getStructureTreeRoot(),
+                    "no structure tree was written");
+            assertTrue(
+                    document.getDocumentCatalog().getMarkInfo() != null
+                            && document.getDocumentCatalog().getMarkInfo().isMarked(),
+                    "MarkInfo/Marked was not set");
+            assertEquals("en-GB", document.getDocumentCatalog().getLanguage());
+            assertEquals("Test Document", document.getDocumentInformation().getTitle());
+        }
+        assertTrue(outcome.tagging().taggedElements() > 0, "nothing was tagged");
+    }
+
+    @Test
+    @DisplayName("running heads and page numbers become artifacts, not content")
+    void runningHeadersBecomeArtifacts() throws Exception {
+        PdfUaConversionOutcome outcome = convert(PdfUaTestDocuments.runningHeadersDocument());
+        assertTrue(
+                outcome.tagging().artifacts() >= 4,
+                "expected the repeated header on each page to become an artifact, got "
+                        + outcome.tagging().artifacts());
+    }
+
+    @Test
+    @DisplayName("an image is tagged as a figure and reported as needing alt text")
+    void imagesNeedAltText() throws Exception {
+        PdfUaConversionOutcome outcome = convert(PdfUaTestDocuments.imageDocument());
+        assertEquals(1, outcome.tagging().figuresNeedingAltText());
+        assertFalse(
+                outcome.declared(),
+                "a document with an undescribed image must not claim conformance");
+    }
+
+    @Test
+    @DisplayName("supplying alt text lets an illustrated document conform")
+    void suppliedAltTextIsApplied() throws Exception {
+        byte[] input = PdfUaTestDocuments.imageDocument();
+        PdfUaConversionOutcome probe = convert(input);
+        assertEquals(1, probe.tagging().figuresNeedingAltText());
+
+        TaggingOptions withAlt =
+                options().toBuilder()
+                        .altTextByFigure(Map.of(figureKey(input), "A blue rectangle"))
+                        .build();
+        PdfUaConversionOutcome outcome = service.convert(input, withAlt);
+        assertEquals(
+                0,
+                outcome.tagging().figuresNeedingAltText(),
+                "alt text supplied by the caller was not applied");
+    }
+
+    @Test
+    @DisplayName("an empty document does not crash the converter")
+    void emptyDocumentIsHandled() throws Exception {
+        PdfUaConversionOutcome outcome = convert(PdfUaTestDocuments.emptyDocument());
+        assertNotNull(outcome.pdfBytes());
+        assertFalse(outcome.warnings().isEmpty(), "an empty document should warn");
+    }
+
+    @Test
+    @DisplayName("an un-OCRed scan is reported rather than silently declared conformant")
+    void scannedDocumentIsNotDeclared() throws Exception {
+        PdfUaConversionOutcome outcome = convert(PdfUaTestDocuments.scannedDocument());
+        assertFalse(outcome.declared(), "a scan with no text layer must not claim conformance");
+    }
+
+    @Test
+    @DisplayName("validation of an untagged document reports the missing structure")
+    void untaggedDocumentFailsValidation() throws Exception {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        UaValidationResult result =
+                validation.validate(PdfUaTestDocuments.simpleDocument(), PdfUaProfile.UA1);
+        assertFalse(result.compliant(), "an untagged document cannot be PDF/UA compliant");
+        assertTrue(result.hasIssues());
+    }
+
+    /** The key the tagger uses for figure alt text is "pageIndex:firstOrdinal". */
+    private static String figureKey(byte[] input) throws IOException {
+        try (PDDocument document = Loader.loadPDF(input)) {
+            var pages =
+                    new stirling.software.proprietary.pdf.ua.TaggedContentExtractor()
+                            .extract(document);
+            for (var page : pages) {
+                for (var op : page.graphics()) {
+                    return page.pageIndex() + ":" + op.ordinal();
+                }
+            }
+        }
+        return "0:0";
+    }
+
+    private static Map<String, Callable<byte[]>> corpus() {
+        Map<String, Callable<byte[]>> corpus = new LinkedHashMap<>();
+        corpus.put("simple", PdfUaTestDocuments::simpleDocument);
+        corpus.put("headings", PdfUaTestDocuments::headingHierarchy);
+        corpus.put("lists", PdfUaTestDocuments::listDocument);
+        corpus.put("table", PdfUaTestDocuments::tableDocument);
+        corpus.put("image", PdfUaTestDocuments::imageDocument);
+        corpus.put("runningHeads", PdfUaTestDocuments::runningHeadersDocument);
+        corpus.put("twoColumn", PdfUaTestDocuments::twoColumnDocument);
+        corpus.put("link", PdfUaTestDocuments::linkDocument);
+        corpus.put("empty", PdfUaTestDocuments::emptyDocument);
+        corpus.put("scanned", PdfUaTestDocuments::scannedDocument);
+        corpus.put("formXObject", PdfUaTestDocuments::formXObjectDocument);
+        corpus.put("multiStream", PdfUaTestDocuments::multiStreamDocument);
+        corpus.put("rotated", PdfUaTestDocuments::rotatedDocument);
+        corpus.put("offsetMediaBox", PdfUaTestDocuments::offsetMediaBoxDocument);
+        return corpus;
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaHardeningTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaHardeningTest.java
new file mode 100644
index 0000000000..cf72013a13
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaHardeningTest.java
@@ -0,0 +1,322 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.charset.StandardCharsets;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.contentstream.operator.Operator;
+import org.apache.pdfbox.pdfparser.PDFStreamParser;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.pdf.ua.PageContent;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.StructBlock;
+import stirling.software.proprietary.pdf.ua.StructType;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/** Covers the document shapes and failure modes the first round of tests missed. */
+class PdfUaHardeningTest {
+
+    private static PdfUaConversionService service;
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        service =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+    }
+
+    private static PdfUaConversionOutcome convert(byte[] input) throws IOException {
+        return service.convert(
+                input,
+                TaggingOptions.builder()
+                        .profile(PdfUaProfile.UA1)
+                        .language("en-GB")
+                        .title("Hardening")
+                        .embedFonts(false)
+                        .build());
+    }
+
+    private static String extract(byte[] pdf) throws IOException {
+        try (PDDocument document = Loader.loadPDF(pdf)) {
+            PDFTextStripper stripper = new PDFTextStripper();
+            stripper.setSortByPosition(true);
+            return PdfUaRealCorpusTest.normalise(stripper.getText(document));
+        }
+    }
+
+    @Nested
+    @DisplayName("document shapes")
+    class Shapes {
+
+        @Test
+        @DisplayName("text inside a form XObject is attributed to the Do and tagged as prose")
+        void formXObjectTextIsTagged() throws Exception {
+            byte[] input = PdfUaTestDocuments.formXObjectDocument();
+            assertTrue(
+                    extract(input).contains("inside the form XObject"),
+                    "fixture must actually draw text inside a form");
+
+            PdfUaConversionOutcome outcome = convert(input);
+            assertTrue(outcome.declared(), warnings(outcome));
+            assertEquals(extract(input), extract(outcome.pdfBytes()));
+            assertEquals(
+                    0,
+                    outcome.tagging().figuresNeedingAltText(),
+                    "a form whose text is reachable must not degrade to an undescribed figure");
+        }
+
+        @Test
+        @DisplayName("a page built from multiple content streams converts as one sequence")
+        void multiStreamPageConverts() throws Exception {
+            byte[] input = PdfUaTestDocuments.multiStreamDocument();
+            PdfUaConversionOutcome outcome = convert(input);
+            assertTrue(outcome.declared(), warnings(outcome));
+            assertEquals(extract(input), extract(outcome.pdfBytes()));
+        }
+
+        @Test
+        @DisplayName("a rotated page keeps its text and converts")
+        void rotatedPageConverts() throws Exception {
+            byte[] input = PdfUaTestDocuments.rotatedDocument();
+            PdfUaConversionOutcome outcome = convert(input);
+            assertEquals(extract(input), extract(outcome.pdfBytes()));
+            assertTrue(outcome.tagging().taggedElements() > 0, "rotated text was not tagged");
+        }
+
+        @Test
+        @DisplayName("a MediaBox that does not start at the origin does not break analysis")
+        void offsetMediaBoxConverts() throws Exception {
+            byte[] input = PdfUaTestDocuments.offsetMediaBoxDocument();
+            PdfUaConversionOutcome outcome = convert(input);
+            assertTrue(outcome.declared(), warnings(outcome));
+            assertEquals(extract(input), extract(outcome.pdfBytes()));
+        }
+
+        private static String warnings(PdfUaConversionOutcome outcome) {
+            return "warnings: "
+                    + String.join(" | ", outcome.warnings())
+                    + " issues: "
+                    + outcome.validation().issues();
+        }
+    }
+
+    @Nested
+    @DisplayName("pre-marked content")
+    class PreMarked {
+
+        @Test
+        @DisplayName("existing BDC/EMC operators are stripped before new ones are written")
+        void stripsExistingMarkedContent() throws Exception {
+            byte[] premarked = premarkedDocument();
+            PdfUaConversionOutcome outcome = convert(premarked);
+
+            try (PDDocument document = Loader.loadPDF(outcome.pdfBytes())) {
+                Counts counts = countMarkedContent(document.getPage(0));
+                assertEquals(
+                        counts.opens(),
+                        counts.closes(),
+                        "unbalanced marked content after stripping and re-injection");
+                assertFalse(
+                        contentOf(document).contains("/OldTag"),
+                        "the source's own marked content survived the rebuild");
+            }
+            assertEquals(extract(premarked), extract(outcome.pdfBytes()));
+        }
+
+        /** A document whose stream already contains a BDC sequence under a custom tag. */
+        private static byte[] premarkedDocument() throws Exception {
+            byte[] plain = PdfUaTestDocuments.simpleDocument();
+            try (PDDocument document = Loader.loadPDF(plain)) {
+                PDPage page = document.getPage(0);
+                String content;
+                try (InputStream in = page.getContents()) {
+                    content = new String(in.readAllBytes(), StandardCharsets.ISO_8859_1);
+                }
+                String wrapped = "/OldTag <</MCID 0>> BDC\n" + content + "\nEMC\n";
+                var stream = new org.apache.pdfbox.pdmodel.common.PDStream(document);
+                try (var out = stream.createOutputStream()) {
+                    out.write(wrapped.getBytes(StandardCharsets.ISO_8859_1));
+                }
+                page.setContents(stream);
+                ByteArrayOutputStream out = new ByteArrayOutputStream();
+                document.save(out);
+                return out.toByteArray();
+            }
+        }
+
+        private record Counts(int opens, int closes) {}
+
+        private static Counts countMarkedContent(PDPage page) throws IOException {
+            int opens = 0;
+            int closes = 0;
+            PDFStreamParser parser = new PDFStreamParser(page);
+            Object token;
+            while ((token = parser.parseNextToken()) != null) {
+                if (token instanceof Operator operator) {
+                    switch (operator.getName()) {
+                        case "BDC", "BMC" -> opens++;
+                        case "EMC" -> closes++;
+                        default -> {}
+                    }
+                }
+            }
+            return new Counts(opens, closes);
+        }
+
+        private static String contentOf(PDDocument document) throws IOException {
+            try (InputStream in = document.getPage(0).getContents()) {
+                return new String(in.readAllBytes(), StandardCharsets.ISO_8859_1);
+            }
+        }
+    }
+
+    @Nested
+    @DisplayName("honesty rules")
+    class Honesty {
+
+        @Test
+        @DisplayName("suppressed text blocks the conformance claim even when validation passes")
+        void suppressedTextBlocksDeclaration() {
+            var structure = new stirling.software.proprietary.pdf.ua.DocumentStructure();
+            structure.setTextSuppressed(true);
+            var result = new stirling.software.proprietary.pdf.ua.TaggingResult(structure, true);
+            assertTrue(
+                    result.isContentSuppressed(),
+                    "the suppression flag must survive into the tagging result");
+        }
+
+        @Test
+        @DisplayName("dropped lines are reported per page by the analyser")
+        void analyserWarnsOnDroppedLines() {
+            PageContent dropped =
+                    new PageContent(
+                            0,
+                            List.of(),
+                            List.of(),
+                            5,
+                            false,
+                            false,
+                            true,
+                            new stirling.software.proprietary.pdf.ua.BBox(0, 0, 595, 842));
+            var structure =
+                    new stirling.software.proprietary.pdf.ua.LayoutAnalyzer()
+                            .analyse(List.of(dropped));
+            assertTrue(structure.isTextSuppressed());
+            assertTrue(
+                    structure.getWarnings().stream().anyMatch(w -> w.contains("page(s) 1")),
+                    "warning should name the affected page: " + structure.getWarnings());
+        }
+    }
+
+    @Nested
+    @DisplayName("clause table")
+    class Clauses {
+
+        @Test
+        @DisplayName("subclauses resolve to their parent entry, not to a string prefix")
+        void subclauseLookupWalksSegments() {
+            assertNotNull(PdfUaValidationService.lookupClause("7.21.4.1"), "7.21.4.1 -> 7.21");
+            assertNotNull(PdfUaValidationService.lookupClause("7.18.1"), "7.18.1 -> 7.18");
+            var toUnicode = PdfUaValidationService.lookupClause("7.21.7");
+            assertNotNull(toUnicode);
+            assertFalse(
+                    toUnicode.autoFixable(),
+                    "a missing ToUnicode map is not fixable by embedding fonts");
+            assertNull(PdfUaValidationService.lookupClause("9.9.9"));
+            assertNull(PdfUaValidationService.lookupClause(null));
+        }
+    }
+
+    @Nested
+    @DisplayName("range claiming")
+    class Claiming {
+
+        @Test
+        @DisplayName("a figure drawn between two text runs on one line stays a figure")
+        void interleavedFigureIsNotSwallowed() throws Exception {
+            // Words at ordinals 0 and 2 with an image at ordinal 1 between them.
+            var line =
+                    new stirling.software.proprietary.pdf.ua.TextLineInfo(
+                            0,
+                            "left right",
+                            new stirling.software.proprietary.pdf.ua.BBox(50, 700, 400, 712),
+                            11,
+                            false,
+                            0,
+                            2,
+                            false,
+                            List.of(
+                                    new stirling.software.proprietary.pdf.ua.WordInfo(
+                                            "left",
+                                            new stirling.software.proprietary.pdf.ua.BBox(
+                                                    50, 700, 90, 712),
+                                            0,
+                                            0,
+                                            11,
+                                            false),
+                                    new stirling.software.proprietary.pdf.ua.WordInfo(
+                                            "right",
+                                            new stirling.software.proprietary.pdf.ua.BBox(
+                                                    360, 700, 400, 712),
+                                            2,
+                                            2,
+                                            11,
+                                            false)));
+            var image =
+                    new stirling.software.proprietary.pdf.ua.MarkableOp(
+                            1,
+                            stirling.software.proprietary.pdf.ua.MarkableOp.Kind.IMAGE,
+                            new stirling.software.proprietary.pdf.ua.BBox(150, 650, 350, 760),
+                            "Im0");
+            PageContent page =
+                    new PageContent(
+                            0,
+                            List.of(line),
+                            List.of(image),
+                            3,
+                            false,
+                            false,
+                            false,
+                            new stirling.software.proprietary.pdf.ua.BBox(0, 0, 595, 842));
+
+            var structure =
+                    new stirling.software.proprietary.pdf.ua.LayoutAnalyzer()
+                            .analyse(List.of(page));
+            List<StructBlock> figures = new java.util.ArrayList<>();
+            structure.visit(
+                    block -> {
+                        if (block.getType() == StructType.FIGURE) {
+                            figures.add(block);
+                        }
+                    });
+            assertEquals(
+                    1,
+                    figures.size(),
+                    "the image between the words must survive as its own figure");
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaHttpEndpointTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaHttpEndpointTest.java
new file mode 100644
index 0000000000..90c40af82b
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaHttpEndpointTest.java
@@ -0,0 +1,183 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+import static org.springframework.test.web.servlet.request.MockMvcRequestBuilders.multipart;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.header;
+import static org.springframework.test.web.servlet.result.MockMvcResultMatchers.status;
+
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+import org.springframework.mock.web.MockMultipartFile;
+import org.springframework.test.web.servlet.MockMvc;
+import org.springframework.test.web.servlet.MvcResult;
+import org.springframework.test.web.servlet.setup.MockMvcBuilders;
+
+import com.fasterxml.jackson.databind.JsonNode;
+import com.fasterxml.jackson.databind.ObjectMapper;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.common.util.TempFileManager;
+import stirling.software.proprietary.controller.api.converters.ConvertPdfToPdfUa;
+import stirling.software.proprietary.controller.api.security.AccessibilityReportController;
+
+/**
+ * Exercises the endpoints over HTTP, not through the service layer. Covers route mapping, multipart
+ * binding, and the headers and JSON a client depends on.
+ */
+class PdfUaHttpEndpointTest {
+
+    private static MockMvc convertMvc;
+    private static MockMvc reportMvc;
+    private static final ObjectMapper JSON = new ObjectMapper();
+
+    @BeforeAll
+    static void setUp() throws Exception {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        PdfUaConversionService conversion =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+
+        // A real TempFileManager, so the streamed response path is exercised rather than mocked.
+        TempFileManager tempFiles =
+                new TempFileManager(
+                        new stirling.software.common.util.TempFileRegistry(),
+                        new stirling.software.common.model.ApplicationProperties());
+
+        // Stand in for the app's advice, which lives in core; without one every rejection is a 500.
+        var advice = new BadRequestAdvice();
+        convertMvc =
+                MockMvcBuilders.standaloneSetup(new ConvertPdfToPdfUa(conversion, tempFiles))
+                        .setControllerAdvice(advice)
+                        .build();
+        reportMvc =
+                MockMvcBuilders.standaloneSetup(
+                                new AccessibilityReportController(
+                                        new AccessibilityAuditService(validation)))
+                        .setControllerAdvice(advice)
+                        .build();
+    }
+
+    private static MockMultipartFile upload(byte[] pdf, String name) {
+        return new MockMultipartFile("fileInput", name, "application/pdf", pdf);
+    }
+
+    /** Mirrors the one rule these endpoints rely on: a rejected input is a 400, not a 500. */
+    @org.springframework.web.bind.annotation.RestControllerAdvice
+    static class BadRequestAdvice {
+        @org.springframework.web.bind.annotation.ExceptionHandler(IllegalArgumentException.class)
+        org.springframework.http.ResponseEntity<String> badRequest(IllegalArgumentException ex) {
+            return org.springframework.http.ResponseEntity.badRequest().body(ex.getMessage());
+        }
+    }
+
+    @Test
+    @DisplayName("POST /api/v1/convert/pdf/ua returns a PDF and reports what it did in headers")
+    void conversionEndpointResponds() throws Exception {
+        MvcResult result =
+                convertMvc
+                        .perform(
+                                multipart("/api/v1/convert/pdf/ua")
+                                        .file(upload(PdfUaTestDocuments.simpleDocument(), "in.pdf"))
+                                        .param("language", "en-GB")
+                                        .param("title", "Over The Wire")
+                                        .param("embedFonts", "false"))
+                        .andExpect(status().isOk())
+                        .andExpect(header().exists("X-Stirling-UA-Declared"))
+                        .andExpect(header().exists("X-Stirling-UA-Failures"))
+                        .andReturn();
+
+        byte[] body = result.getResponse().getContentAsByteArray();
+        assertTrue(body.length > 0, "no document came back");
+        assertEquals(
+                "%PDF",
+                new String(body, 0, 4, java.nio.charset.StandardCharsets.ISO_8859_1),
+                "the response body is not a PDF");
+        assertEquals(
+                "true",
+                result.getResponse().getHeader("X-Stirling-UA-Declared"),
+                "a simple embedded-font document should convert and be declared conformant");
+    }
+
+    @Test
+    @DisplayName("POST /api/v1/security/accessibility-report returns the figure inventory as JSON")
+    void reportEndpointResponds() throws Exception {
+        MvcResult result =
+                reportMvc
+                        .perform(
+                                multipart("/api/v1/security/accessibility-report")
+                                        .file(upload(PdfUaTestDocuments.imageDocument(), "in.pdf"))
+                                        .param("profile", "ua1"))
+                        .andExpect(status().isOk())
+                        .andReturn();
+
+        JsonNode json = JSON.readTree(result.getResponse().getContentAsString());
+        assertEquals("PDF/UA-1", json.get("profile").asText());
+        assertNotNull(json.get("summary"), "the report should carry a summary");
+
+        JsonNode figures = json.get("figuresNeedingDescription");
+        assertNotNull(figures, "the field a caller needs to supply alt text is missing");
+        assertTrue(figures.isArray() && figures.size() > 0, "the image should be listed: " + json);
+        assertTrue(
+                figures.get(0).get("key").asText().matches("\\d+:\\d+"),
+                "the key must be usable in a follow-up conversion request");
+    }
+
+    @Test
+    @DisplayName("alt text supplied as form data reaches the converter over HTTP")
+    void altTextBindsFromFormData() throws Exception {
+        byte[] input = PdfUaTestDocuments.imageDocument();
+
+        // Discover the key the way a client would, through the report endpoint.
+        MvcResult reported =
+                reportMvc
+                        .perform(
+                                multipart("/api/v1/security/accessibility-report")
+                                        .file(upload(input, "in.pdf")))
+                        .andExpect(status().isOk())
+                        .andReturn();
+        String key =
+                JSON.readTree(reported.getResponse().getContentAsString())
+                        .get("figuresNeedingDescription")
+                        .get(0)
+                        .get("key")
+                        .asText();
+
+        MvcResult converted =
+                convertMvc
+                        .perform(
+                                multipart("/api/v1/convert/pdf/ua")
+                                        .file(upload(input, "in.pdf"))
+                                        .param("embedFonts", "false")
+                                        .param("altText", key + "=A blue rectangle"))
+                        .andExpect(status().isOk())
+                        .andReturn();
+
+        assertEquals(
+                "0",
+                converted.getResponse().getHeader("X-Stirling-UA-Figures-Needing-Alt"),
+                "the description posted as form data was not applied");
+    }
+
+    @Test
+    @DisplayName("a request with no file is rejected rather than processed")
+    void missingFileIsRejected() throws Exception {
+        convertMvc
+                .perform(
+                        multipart("/api/v1/convert/pdf/ua")
+                                .file(
+                                        new MockMultipartFile(
+                                                "fileInput",
+                                                "e.pdf",
+                                                "application/pdf",
+                                                new byte[0])))
+                .andExpect(status().is4xxClientError());
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaRealCorpusTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaRealCorpusTest.java
new file mode 100644
index 0000000000..9ebda08736
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaRealCorpusTest.java
@@ -0,0 +1,249 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.IOException;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.Comparator;
+import java.util.List;
+import java.util.stream.Stream;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/**
+ * Runs the converter over every PDF in the repository, where real-tool output breaks assumptions. A
+ * clean refusal counts as a pass; nothing may crash or make a false conformance claim.
+ */
+class PdfUaRealCorpusTest {
+
+    private static PdfUaConversionService service;
+    private static Path repoRoot;
+
+    /** Files the converter is expected to refuse rather than process. */
+    private static final List<String> EXPECTED_REJECTS = List.of("encrypted.pdf", "corrupted.pdf");
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        service =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+        repoRoot = findRepoRoot();
+    }
+
+    private static Path findRepoRoot() {
+        Path current = Path.of("").toAbsolutePath();
+        while (current != null && !Files.exists(current.resolve("settings.gradle"))) {
+            current = current.getParent();
+        }
+        return current;
+    }
+
+    private record Outcome(String name, String status, int failures, int elements, int artifacts) {}
+
+    private static TaggingOptions.TaggingOptionsBuilder options(String fallbackTitle) {
+        return TaggingOptions.builder()
+                .profile(PdfUaProfile.UA1)
+                .language("en-GB")
+                .fallbackTitle(fallbackTitle)
+                .existingTags(TaggingOptions.ExistingTags.REBUILD);
+    }
+
+    @Test
+    @DisplayName("converts every PDF in the repository without crashing or lying about conformance")
+    void realCorpusConverts() throws Exception {
+        assertNotNull(repoRoot, "could not locate the repository root");
+        List<Path> pdfs = findPdfs();
+        assertTrue(pdfs.size() >= 20, "expected a substantial corpus, found " + pdfs.size());
+
+        List<Outcome> outcomes = new ArrayList<>();
+        List<String> crashes = new ArrayList<>();
+        java.util.Map<String, Integer> clauseFiles = new java.util.TreeMap<>();
+        java.util.Map<String, String> clauseText = new java.util.HashMap<>();
+        java.util.Map<String, String> clauseExamples = new java.util.HashMap<>();
+
+        for (Path pdf : pdfs) {
+            String name = repoRoot.relativize(pdf).toString().replace('\\', '/');
+            byte[] input;
+            try {
+                input = Files.readAllBytes(pdf);
+            } catch (IOException e) {
+                continue;
+            }
+            try {
+                String stem = pdf.getFileName().toString().replaceFirst("\\.pdf$", "");
+
+                // Fidelity is a tagging property, so measure it with font embedding off.
+                PdfUaConversionOutcome taggedOnly =
+                        service.convert(input, options(stem).embedFonts(false).build());
+                assertTextPreserved(name, input, taggedOnly.pdfBytes());
+
+                PdfUaConversionOutcome outcome = service.convert(input, options(stem).build());
+                // Full pipeline too: Ghostscript can exit 0 having blanked the document.
+                assertTextPreserved(name + " (with font embedding)", input, outcome.pdfBytes());
+                outcomes.add(
+                        new Outcome(
+                                name,
+                                outcome.declared() ? "CONFORMS" : "improved",
+                                outcome.validation().totalFailures(),
+                                outcome.tagging().taggedElements(),
+                                outcome.tagging().artifacts()));
+                outcome.validation()
+                        .issues()
+                        .forEach(
+                                issue -> {
+                                    clauseFiles.merge(issue.getClause(), 1, Integer::sum);
+                                    clauseText.putIfAbsent(
+                                            issue.getClause(), issue.getTechnicalMessage());
+                                    clauseExamples.putIfAbsent(issue.getClause(), name);
+                                });
+
+            } catch (IOException e) {
+                // A refusal with an explanation is an acceptable outcome.
+                outcomes.add(new Outcome(name, "refused: " + e.getMessage(), 0, 0, 0));
+            } catch (RuntimeException e) {
+                crashes.add(name + " -> " + e);
+                outcomes.add(new Outcome(name, "CRASH: " + e, 0, 0, 0));
+            }
+        }
+
+        System.out.println(render(outcomes));
+
+        StringBuilder clauses =
+                new StringBuilder("\nBlocking clauses, by number of files affected\n");
+        clauseFiles.entrySet().stream()
+                .sorted(java.util.Map.Entry.<String, Integer>comparingByValue().reversed())
+                .forEach(
+                        e ->
+                                clauses.append(
+                                        String.format(
+                                                "  clause %-9s %-3d files  e.g. %s%n      %s%n",
+                                                e.getKey(),
+                                                e.getValue(),
+                                                clauseExamples.get(e.getKey()),
+                                                abbreviate(clauseText.get(e.getKey())))));
+        System.out.println(clauses);
+
+        List<String> unexpectedCrashes =
+                crashes.stream()
+                        .filter(c -> EXPECTED_REJECTS.stream().noneMatch(c::contains))
+                        .toList();
+        assertTrue(
+                unexpectedCrashes.isEmpty(),
+                "converter crashed on: " + String.join("; ", unexpectedCrashes));
+    }
+
+    /** Tagging must not change extracted text; a diff means the rewrite corrupted the page. */
+    private static void assertTextPreserved(String name, byte[] before, byte[] after) {
+        String textBefore = safeExtract(before);
+        if (textBefore == null) {
+            // The source itself is unreadable, so there is nothing to compare against.
+            return;
+        }
+        String textAfter = safeExtract(after);
+        assertTrue(
+                textAfter != null, "the converted file could not be read back at all for " + name);
+        assertTrue(
+                textBefore.equals(textAfter),
+                "tagging changed extracted text for "
+                        + name
+                        + "\n  before: "
+                        + preview(textBefore)
+                        + "\n  after:  "
+                        + preview(textAfter));
+    }
+
+    private static String abbreviate(String text) {
+        if (text == null) {
+            return "";
+        }
+        return text.length() <= 110 ? text : text.substring(0, 110) + "...";
+    }
+
+    private static String preview(String text) {
+        return text.length() <= 160 ? text : text.substring(0, 160) + "...";
+    }
+
+    private static String safeExtract(byte[] pdf) {
+        try (PDDocument document = Loader.loadPDF(pdf)) {
+            PDFTextStripper stripper = new PDFTextStripper();
+            stripper.setSortByPosition(true);
+            return normalise(stripper.getText(document));
+        } catch (Exception e) {
+            return null;
+        }
+    }
+
+    /** Drops invisible formatting characters: a rebuild legitimately loses soft hyphens. */
+    static String normalise(String text) {
+        StringBuilder sb = new StringBuilder(text.length());
+        text.codePoints()
+                .forEach(
+                        cp -> {
+                            if (Character.getType(cp) != Character.FORMAT && cp != 0x00AD) {
+                                sb.appendCodePoint(cp);
+                            }
+                        });
+        return sb.toString().replaceAll("\\s+", " ").strip();
+    }
+
+    private List<Path> findPdfs() throws IOException {
+        try (Stream<Path> stream = Files.walk(repoRoot)) {
+            return stream.filter(Files::isRegularFile)
+                    .filter(p -> p.toString().toLowerCase().endsWith(".pdf"))
+                    .filter(p -> !p.toString().contains("node_modules"))
+                    .filter(p -> !p.toString().contains(File_BUILD))
+                    .filter(p -> !p.toString().contains(".git"))
+                    .sorted(Comparator.comparing(Path::toString))
+                    .toList();
+        }
+    }
+
+    private static final String File_BUILD = "build" + java.io.File.separator;
+
+    private static String render(List<Outcome> outcomes) {
+        StringBuilder sb = new StringBuilder("\nPDF/UA conversion over the repository corpus\n");
+        long conforming = outcomes.stream().filter(o -> "CONFORMS".equals(o.status())).count();
+        long refused = outcomes.stream().filter(o -> o.status().startsWith("refused")).count();
+        sb.append(
+                String.format(
+                        "  %d files: %d conform, %d improved but not conformant, %d refused%n%n",
+                        outcomes.size(),
+                        conforming,
+                        outcomes.size() - conforming - refused,
+                        refused));
+        for (Outcome outcome : outcomes) {
+            sb.append(
+                    String.format(
+                            "  %-62s %-10s fail=%-4d el=%-5d art=%d%n",
+                            outcome.name().length() > 60
+                                    ? "..." + outcome.name().substring(outcome.name().length() - 57)
+                                    : outcome.name(),
+                            outcome.status().length() > 10
+                                    ? outcome.status().substring(0, 10)
+                                    : outcome.status(),
+                            outcome.failures(),
+                            outcome.elements(),
+                            outcome.artifacts()));
+        }
+        return sb.toString();
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaSampleDumpTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaSampleDumpTest.java
new file mode 100644
index 0000000000..46cdb37c76
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaSampleDumpTest.java
@@ -0,0 +1,103 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.stream.Stream;
+
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+import org.junit.jupiter.api.condition.EnabledIfEnvironmentVariable;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/**
+ * Dumps converted output for independent checkers; validating PDFBox with PDFBox is circular. Off
+ * by default as it writes outside the build directory: run with {@code DUMP_UA_SAMPLES=<dir>}.
+ */
+@EnabledIfEnvironmentVariable(named = "DUMP_UA_SAMPLES", matches = ".+")
+class PdfUaSampleDumpTest {
+
+    private static PdfUaConversionService service;
+    private static Path repoRoot;
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService validation = new PdfUaValidationService();
+        validation.initialise();
+        service =
+                new PdfUaConversionService(
+                        validation,
+                        new FontEmbeddingService(),
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+        repoRoot = Path.of("").toAbsolutePath();
+        while (repoRoot != null && !Files.exists(repoRoot.resolve("settings.gradle"))) {
+            repoRoot = repoRoot.getParent();
+        }
+    }
+
+    @Test
+    @DisplayName("writes original and converted pairs for external validation")
+    void dumpSamples() throws Exception {
+        Path out = Path.of(System.getenv("DUMP_UA_SAMPLES"));
+        Files.createDirectories(out);
+
+        List<Path> pdfs;
+        try (Stream<Path> stream = Files.walk(repoRoot)) {
+            pdfs =
+                    stream.filter(Files::isRegularFile)
+                            .filter(p -> p.toString().toLowerCase().endsWith(".pdf"))
+                            .filter(p -> !p.toString().contains("node_modules"))
+                            .filter(p -> !p.toString().contains(java.io.File.separator + "build"))
+                            .filter(p -> !p.toString().contains(".git"))
+                            .sorted()
+                            .toList();
+        }
+
+        List<String> manifest = new ArrayList<>();
+        int written = 0;
+        for (Path pdf : pdfs) {
+            String stem = pdf.getFileName().toString().replaceFirst("\\.pdf$", "");
+            byte[] input;
+            try {
+                input = Files.readAllBytes(pdf);
+            } catch (Exception e) {
+                continue;
+            }
+            try {
+                PdfUaConversionOutcome outcome =
+                        service.convert(
+                                input,
+                                TaggingOptions.builder()
+                                        .profile(PdfUaProfile.UA1)
+                                        .language("en-GB")
+                                        .fallbackTitle(stem)
+                                        .existingTags(TaggingOptions.ExistingTags.REBUILD)
+                                        .build());
+                Files.write(out.resolve(stem + "__before.pdf"), input);
+                Files.write(out.resolve(stem + "__after.pdf"), outcome.pdfBytes());
+                manifest.add(
+                        stem
+                                + "\tdeclared="
+                                + outcome.declared()
+                                + "\tfailures="
+                                + outcome.validation().totalFailures());
+                written++;
+            } catch (Exception e) {
+                manifest.add(stem + "\tREFUSED\t" + e.getMessage());
+            }
+        }
+        Files.write(out.resolve("manifest.tsv"), manifest);
+        System.out.println("Wrote " + written + " before/after pairs to " + out);
+        assertTrue(written > 10, "expected a usable sample set, wrote " + written);
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaServicesTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaServicesTest.java
new file mode 100644
index 0000000000..9d2e14ee0d
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaServicesTest.java
@@ -0,0 +1,319 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertThrows;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDPageContentStream;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.encryption.AccessPermission;
+import org.apache.pdfbox.pdmodel.encryption.StandardProtectionPolicy;
+import org.apache.pdfbox.pdmodel.font.PDType1Font;
+import org.apache.pdfbox.pdmodel.font.Standard14Fonts;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Nested;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.common.service.CustomPDFDocumentFactory;
+import stirling.software.common.service.PdfMetadataService;
+import stirling.software.proprietary.model.api.ua.AccessibilityReport;
+import stirling.software.proprietary.model.api.ua.PdfUaConversionOutcome;
+import stirling.software.proprietary.model.api.ua.UaValidationResult;
+import stirling.software.proprietary.pdf.ua.PdfUaProfile;
+import stirling.software.proprietary.pdf.ua.TaggingOptions;
+
+/** Tests for the services that validate, audit and convert. */
+class PdfUaServicesTest {
+
+    private static PdfUaValidationService validation;
+    private static PdfUaConversionService conversion;
+    private static AccessibilityAuditService audit;
+    private static FontEmbeddingService fonts;
+
+    @BeforeAll
+    static void setUp() {
+        validation = new PdfUaValidationService();
+        validation.initialise();
+        fonts = new FontEmbeddingService();
+        conversion =
+                new PdfUaConversionService(
+                        validation,
+                        fonts,
+                        new CustomPDFDocumentFactory(
+                                org.mockito.Mockito.mock(PdfMetadataService.class)));
+        audit = new AccessibilityAuditService(validation);
+    }
+
+    /** Uses a standard 14 font deliberately: never embedded, which clause 7.21 forbids. */
+    private static byte[] unembeddedFontPdf() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                cs.beginText();
+                cs.setFont(new PDType1Font(Standard14Fonts.FontName.HELVETICA), 12);
+                cs.newLineAtOffset(50, 700);
+                cs.showText("Hello accessibility");
+                cs.endText();
+            }
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    private static byte[] manyPages(int pages) throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            for (int i = 0; i < pages; i++) {
+                document.addPage(new PDPage());
+            }
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    private static byte[] encryptedPdf() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage());
+            AccessPermission permissions = new AccessPermission();
+            document.protect(new StandardProtectionPolicy("owner", "user", permissions));
+            ByteArrayOutputStream out = new ByteArrayOutputStream();
+            document.save(out);
+            return out.toByteArray();
+        }
+    }
+
+    @Nested
+    @DisplayName("validation")
+    class Validation {
+
+        @Test
+        @DisplayName("an untagged document fails and the failures are grouped by rule")
+        void untaggedFails() throws Exception {
+            UaValidationResult result = validation.validate(unembeddedFontPdf(), PdfUaProfile.UA1);
+            assertFalse(result.compliant());
+            assertTrue(result.hasIssues());
+            assertTrue(
+                    result.totalFailures() >= result.issues().size(),
+                    "grouping must not invent failures");
+            assertTrue(
+                    result.issues().stream().allMatch(i -> i.getOccurrences() > 0),
+                    "every grouped issue should count its occurrences");
+        }
+
+        @Test
+        @DisplayName("malformed input reports a failure instead of throwing")
+        void malformedInputIsReported() {
+            UaValidationResult result =
+                    validation.validate("not a pdf".getBytes(), PdfUaProfile.UA1);
+            assertFalse(result.compliant());
+            assertFalse(result.issues().isEmpty());
+        }
+
+        @Test
+        @DisplayName("issues carry plain-English text as well as the validator's own wording")
+        void issuesAreReadable() throws Exception {
+            UaValidationResult result = validation.validate(unembeddedFontPdf(), PdfUaProfile.UA1);
+            assertTrue(
+                    result.issues().stream()
+                            .allMatch(i -> i.getMessage() != null && !i.getMessage().isBlank()));
+        }
+    }
+
+    @Nested
+    @DisplayName("auditing")
+    class Auditing {
+
+        @Test
+        @DisplayName("reports the document facts that drive most failures")
+        void reportsSummary() throws Exception {
+            AccessibilityReport report = audit.audit(unembeddedFontPdf(), PdfUaProfile.UA1);
+
+            assertFalse(report.isTagged(), "the fixture has no structure tree");
+            assertFalse(report.isDeclaresConformance());
+            assertFalse(report.isPassesAutomatedChecks());
+            assertEquals(1, report.getSummary().getPages());
+            assertFalse(report.getSummary().isAllFontsEmbedded());
+            assertTrue(report.getSummary().getUnembeddedFonts() > 0);
+            assertFalse(report.getSummary().isHasLanguage());
+            assertFalse(report.getSummary().isHasTitle());
+        }
+
+        @Test
+        @DisplayName("always lists the checks a person still has to make")
+        void listsHumanChecks() throws Exception {
+            AccessibilityReport report = audit.audit(unembeddedFontPdf(), PdfUaProfile.UA1);
+            assertFalse(
+                    report.getHumanChecks().isEmpty(),
+                    "a report showing only automated results implies the rest does not exist");
+        }
+
+        @Test
+        @DisplayName("splits failures into automatically fixable and needs-input")
+        void splitsRemediability() throws Exception {
+            AccessibilityReport report = audit.audit(unembeddedFontPdf(), PdfUaProfile.UA1);
+            assertEquals(
+                    report.getIssues().size(),
+                    report.getAutomaticallyFixable() + report.getNeedsInput());
+        }
+
+        @Test
+        @DisplayName("refuses a document past the page cap the conversion also applies")
+        void refusesTooManyPages() throws Exception {
+            byte[] oversized = manyPages(2001);
+            assertThrows(
+                    IllegalArgumentException.class,
+                    () -> audit.audit(oversized, PdfUaProfile.UA1),
+                    "an uncapped report walks every page of any document a caller uploads");
+        }
+
+        @Test
+        @DisplayName("a converted document reports as tagged and conformant")
+        void reportsAfterConversion() throws Exception {
+            PdfUaConversionOutcome outcome =
+                    conversion.convert(
+                            unembeddedFontPdf(),
+                            TaggingOptions.builder()
+                                    .profile(PdfUaProfile.UA1)
+                                    .language("en-GB")
+                                    .title("Converted")
+                                    .build());
+            AccessibilityReport report = audit.audit(outcome.pdfBytes(), PdfUaProfile.UA1);
+            assertTrue(report.isTagged());
+            assertTrue(report.getSummary().isHasTitle());
+            assertTrue(report.getSummary().isHasLanguage());
+            assertTrue(report.getSummary().isDisplaysDocTitle());
+        }
+    }
+
+    @Nested
+    @DisplayName("font embedding")
+    class Fonts {
+
+        @Test
+        @DisplayName("detects a standard 14 font as unembedded")
+        void detectsUnembedded() throws Exception {
+            assertTrue(fonts.hasUnembeddedFonts(unembeddedFontPdf()));
+        }
+
+        @Test
+        @DisplayName("embeds fonts, or explains why it could not")
+        void embedsOrExplains() throws Exception {
+            FontEmbeddingService.Result result = fonts.embedFonts(unembeddedFontPdf());
+            assertNotNull(result.pdfBytes());
+            if (result.changed()) {
+                assertFalse(
+                        fonts.hasUnembeddedFonts(result.pdfBytes()),
+                        "embedding reported success but fonts are still missing");
+            } else {
+                assertNotNull(
+                        result.warning(), "failing to embed must be explained, not passed over");
+            }
+        }
+
+        @Test
+        @DisplayName("leaves a document alone when every font is already embedded")
+        void skipsWhenNothingToDo() throws Exception {
+            byte[] embedded = PdfUaTestDocuments.simpleDocument();
+            FontEmbeddingService.Result result = fonts.embedFonts(embedded);
+            assertFalse(result.changed());
+            assertEquals(embedded.length, result.pdfBytes().length);
+        }
+    }
+
+    @Nested
+    @DisplayName("conversion")
+    class Conversion {
+
+        @Test
+        @DisplayName("refuses an encrypted document with an explanation")
+        void refusesEncrypted() throws Exception {
+            byte[] encrypted = encryptedPdf();
+            IOException error =
+                    assertThrows(
+                            IOException.class,
+                            () ->
+                                    conversion.convert(
+                                            encrypted,
+                                            TaggingOptions.builder()
+                                                    .profile(PdfUaProfile.UA1)
+                                                    .build()));
+            assertTrue(error.getMessage().toLowerCase().contains("encrypted"));
+        }
+
+        @Test
+        @DisplayName("keeping existing tags does not rebuild the tree")
+        void keepRespectsExistingTags() throws Exception {
+            byte[] tagged =
+                    conversion
+                            .convert(
+                                    PdfUaTestDocuments.simpleDocument(),
+                                    TaggingOptions.builder()
+                                            .profile(PdfUaProfile.UA1)
+                                            .language("en-GB")
+                                            .title("First pass")
+                                            .embedFonts(false)
+                                            .build())
+                            .pdfBytes();
+
+            PdfUaConversionOutcome second =
+                    conversion.convert(
+                            tagged,
+                            TaggingOptions.builder()
+                                    .profile(PdfUaProfile.UA1)
+                                    .language("en-GB")
+                                    .title("Second pass")
+                                    .embedFonts(false)
+                                    .existingTags(TaggingOptions.ExistingTags.KEEP)
+                                    .build());
+
+            assertFalse(second.tagging().rebuiltStructure(), "KEEP must not rebuild");
+            try (PDDocument document = Loader.loadPDF(second.pdfBytes())) {
+                assertEquals("Second pass", document.getDocumentInformation().getTitle());
+            }
+        }
+
+        @Test
+        @DisplayName("marking images decorative removes the alt-text blocker")
+        void decorativePolicyClearsFigures() throws Exception {
+            PdfUaConversionOutcome outcome =
+                    conversion.convert(
+                            PdfUaTestDocuments.imageDocument(),
+                            TaggingOptions.builder()
+                                    .profile(PdfUaProfile.UA1)
+                                    .language("en-GB")
+                                    .title("Decorative")
+                                    .embedFonts(false)
+                                    .figurePolicy(TaggingOptions.FigurePolicy.MARK_DECORATIVE)
+                                    .build());
+            assertEquals(0, outcome.tagging().figuresNeedingAltText());
+            assertTrue(outcome.declared(), "with no undescribed figures the file should conform");
+        }
+
+        @Test
+        @DisplayName("converting twice produces the same conformance verdict")
+        void conversionIsStable() throws Exception {
+            byte[] input = PdfUaTestDocuments.headingHierarchy();
+            TaggingOptions options =
+                    TaggingOptions.builder()
+                            .profile(PdfUaProfile.UA1)
+                            .language("en-GB")
+                            .title("Stable")
+                            .embedFonts(false)
+                            .build();
+            PdfUaConversionOutcome first = conversion.convert(input, options);
+            PdfUaConversionOutcome second = conversion.convert(first.pdfBytes(), options);
+            assertEquals(first.declared(), second.declared());
+        }
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaTestDocuments.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaTestDocuments.java
new file mode 100644
index 0000000000..589edbc1a2
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfUaTestDocuments.java
@@ -0,0 +1,390 @@
+package stirling.software.proprietary.service.ua;
+
+import java.awt.Color;
+import java.awt.image.BufferedImage;
+import java.io.ByteArrayOutputStream;
+import java.io.IOException;
+import java.io.InputStream;
+import java.nio.file.Files;
+import java.nio.file.Path;
+
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.pdmodel.PDFormContentStream;
+import org.apache.pdfbox.pdmodel.PDPage;
+import org.apache.pdfbox.pdmodel.PDPageContentStream;
+import org.apache.pdfbox.pdmodel.PDResources;
+import org.apache.pdfbox.pdmodel.common.PDRectangle;
+import org.apache.pdfbox.pdmodel.font.PDFont;
+import org.apache.pdfbox.pdmodel.font.PDType0Font;
+import org.apache.pdfbox.pdmodel.graphics.form.PDFormXObject;
+import org.apache.pdfbox.pdmodel.graphics.image.LosslessFactory;
+import org.apache.pdfbox.pdmodel.graphics.image.PDImageXObject;
+import org.apache.pdfbox.pdmodel.interactive.action.PDActionURI;
+import org.apache.pdfbox.pdmodel.interactive.annotation.PDAnnotationLink;
+import org.apache.pdfbox.util.Matrix;
+
+/**
+ * Builds the fixture corpus used by the PDF/UA tests. Fonts are embedded deliberately: the standard
+ * 14 fail clause 7.21 and would mask every result.
+ */
+final class PdfUaTestDocuments {
+
+    private static final String FONT_RESOURCE = "/static/fonts/DejaVuSans.ttf";
+    // The font ships with core's resources, which are not on this module's classpath.
+    private static final String FONT_REPO_PATH =
+            "app/core/src/main/resources/static/fonts/DejaVuSans.ttf";
+    private static final float MARGIN = 60f;
+
+    private PdfUaTestDocuments() {}
+
+    static PDFont font(PDDocument document) throws IOException {
+        try (InputStream in = PdfUaTestDocuments.class.getResourceAsStream(FONT_RESOURCE)) {
+            if (in != null) {
+                return PDType0Font.load(document, in, true);
+            }
+        }
+        Path repoRoot = Path.of("").toAbsolutePath();
+        while (repoRoot != null && !Files.exists(repoRoot.resolve("settings.gradle"))) {
+            repoRoot = repoRoot.getParent();
+        }
+        Path font = repoRoot == null ? null : repoRoot.resolve(FONT_REPO_PATH);
+        if (font == null || !Files.exists(font)) {
+            throw new IOException(
+                    "Test font not found: " + FONT_RESOURCE + " or " + FONT_REPO_PATH);
+        }
+        try (InputStream in = Files.newInputStream(font)) {
+            return PDType0Font.load(document, in, true);
+        }
+    }
+
+    /** A heading followed by two paragraphs: the simplest thing that should convert cleanly. */
+    static byte[] simpleDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float y = 760;
+                y = text(cs, font, 20, MARGIN, y, "Quarterly Report");
+                y -= 14;
+                y = text(cs, font, 11, MARGIN, y, "This document summarises the results for the");
+                y = text(cs, font, 11, MARGIN, y, "period and outlines the outlook for next year.");
+                y -= 14;
+                text(cs, font, 11, MARGIN, y, "A second paragraph follows the first one here.");
+            }
+            return bytes(document);
+        }
+    }
+
+    /** Three heading tiers, to exercise level assignment and the no-skipped-levels rule. */
+    static byte[] headingHierarchy() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float y = 760;
+                y = text(cs, font, 24, MARGIN, y, "Annual Review");
+                y -= 12;
+                y = text(cs, font, 11, MARGIN, y, "Introductory prose sits under the title here.");
+                y -= 16;
+                y = text(cs, font, 17, MARGIN, y, "Financial Results");
+                y -= 10;
+                y = text(cs, font, 11, MARGIN, y, "Revenue grew steadily across every region.");
+                y -= 16;
+                y = text(cs, font, 13, MARGIN, y, "Europe");
+                y -= 10;
+                text(cs, font, 11, MARGIN, y, "European revenue rose by eleven per cent.");
+            }
+            return bytes(document);
+        }
+    }
+
+    /** A bulleted and a numbered list. */
+    static byte[] listDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float y = 760;
+                y = text(cs, font, 18, MARGIN, y, "Checklist");
+                y -= 14;
+                y = text(cs, font, 11, MARGIN, y, "• Review the source document");
+                y = text(cs, font, 11, MARGIN, y, "• Check every heading level");
+                y = text(cs, font, 11, MARGIN, y, "• Describe each image");
+                y -= 16;
+                y = text(cs, font, 11, MARGIN, y, "1. Open the file");
+                y = text(cs, font, 11, MARGIN, y, "2. Run the converter");
+                text(cs, font, 11, MARGIN, y, "3. Validate the result");
+            }
+            return bytes(document);
+        }
+    }
+
+    /** A three-column table whose cells each occupy their own text-showing operator. */
+    static byte[] tableDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float y = 760;
+                y = text(cs, font, 18, MARGIN, y, "Regional Totals");
+                y -= 20;
+                String[][] rows = {
+                    {"Region", "Units", "Revenue"},
+                    {"North", "1200", "48000"},
+                    {"South", "980", "39200"},
+                    {"East", "1430", "57200"}
+                };
+                float[] columns = {MARGIN, MARGIN + 160, MARGIN + 300};
+                for (String[] row : rows) {
+                    tableRow(cs, font, 11, columns, y, row);
+                    y -= 20;
+                }
+            }
+            return bytes(document);
+        }
+    }
+
+    /** A page with a real image, which must end up as a Figure needing alternative text. */
+    static byte[] imageDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            BufferedImage bitmap = new BufferedImage(120, 90, BufferedImage.TYPE_INT_RGB);
+            java.awt.Graphics2D graphics = bitmap.createGraphics();
+            graphics.setColor(Color.BLUE);
+            graphics.fillRect(0, 0, 120, 90);
+            graphics.dispose();
+            PDImageXObject image = LosslessFactory.createFromImage(document, bitmap);
+
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float y = 760;
+                y = text(cs, font, 18, MARGIN, y, "Illustrated Page");
+                y -= 20;
+                y = text(cs, font, 11, MARGIN, y, "The chart below shows the trend.");
+                cs.drawImage(image, MARGIN, y - 120, 180, 100);
+            }
+            return bytes(document);
+        }
+    }
+
+    /** Four pages sharing a running head and a page number, which must become artifacts. */
+    static byte[] runningHeadersDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDFont font = null;
+            for (int i = 1; i <= 4; i++) {
+                PDPage page = new PDPage(PDRectangle.A4);
+                document.addPage(page);
+                if (font == null) {
+                    font = font(document);
+                }
+                try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                    text(cs, font, 9, MARGIN, 810, "Confidential Internal Report");
+                    float y = 750;
+                    y = text(cs, font, 16, MARGIN, y, "Section " + i);
+                    y -= 12;
+                    text(cs, font, 11, MARGIN, y, "Body text for section number " + i + " here.");
+                    text(cs, font, 9, 300, 30, "Page " + i);
+                }
+            }
+            return bytes(document);
+        }
+    }
+
+    /** Two columns of prose, to exercise reading order. */
+    static byte[] twoColumnDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float left = MARGIN;
+                float right = 320;
+                float y = 740;
+                for (int i = 1; i <= 8; i++) {
+                    text(cs, font, 10, left, y - i * 16, "Left column line number " + i);
+                    text(cs, font, 10, right, y - i * 16, "Right column line number " + i);
+                }
+            }
+            return bytes(document);
+        }
+    }
+
+    /** A page carrying a link annotation, which must be reachable from the structure tree. */
+    static byte[] linkDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                float y = 760;
+                y = text(cs, font, 18, MARGIN, y, "Useful Links");
+                text(cs, font, 11, MARGIN, y - 20, "Visit the project home page for details.");
+            }
+            PDAnnotationLink link = new PDAnnotationLink();
+            PDRectangle rectangle = new PDRectangle();
+            rectangle.setLowerLeftX(MARGIN);
+            rectangle.setLowerLeftY(725);
+            rectangle.setUpperRightX(MARGIN + 200);
+            rectangle.setUpperRightY(740);
+            link.setRectangle(rectangle);
+            PDActionURI action = new PDActionURI();
+            action.setURI("https://example.org");
+            link.setAction(action);
+            page.getAnnotations().add(link);
+            return bytes(document);
+        }
+    }
+
+    /** A page with no content at all. */
+    static byte[] emptyDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new PDPage(PDRectangle.A4));
+            return bytes(document);
+        }
+    }
+
+    /** A page whose only content is a full-page image, standing in for an un-OCRed scan. */
+    static byte[] scannedDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            BufferedImage bitmap = new BufferedImage(600, 850, BufferedImage.TYPE_INT_RGB);
+            java.awt.Graphics2D graphics = bitmap.createGraphics();
+            graphics.setColor(Color.WHITE);
+            graphics.fillRect(0, 0, 600, 850);
+            graphics.setColor(Color.BLACK);
+            graphics.drawString("scanned page", 40, 60);
+            graphics.dispose();
+            PDImageXObject image = LosslessFactory.createFromImage(document, bitmap);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                cs.drawImage(image, 0, 0, PDRectangle.A4.getWidth(), PDRectangle.A4.getHeight());
+            }
+            return bytes(document);
+        }
+    }
+
+    /** Text drawn inside a form XObject, attributed to the Do operator that invoked it. */
+    static byte[] formXObjectDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+
+            PDFormXObject form = new PDFormXObject(document);
+            form.setBBox(new PDRectangle(220, 40));
+            form.setResources(new PDResources());
+            try (PDFormContentStream fcs = new PDFormContentStream(form)) {
+                fcs.beginText();
+                fcs.setFont(font, 11);
+                fcs.newLineAtOffset(4, 14);
+                fcs.showText("Text living inside the form XObject");
+                fcs.endText();
+            }
+
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                text(cs, font, 18, MARGIN, 760, "Page With Embedded Form");
+                text(cs, font, 11, MARGIN, 730, "Ordinary page text sits above the form.");
+                cs.saveGraphicsState();
+                cs.transform(Matrix.getTranslateInstance(MARGIN, 650));
+                cs.drawForm(form);
+                cs.restoreGraphicsState();
+            }
+            return bytes(document);
+        }
+    }
+
+    /** Content split across two streams (a PDF array) - the parser must see one sequence. */
+    static byte[] multiStreamDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                text(cs, font, 18, MARGIN, 760, "First Stream Heading");
+            }
+            try (PDPageContentStream cs =
+                    new PDPageContentStream(
+                            document, page, PDPageContentStream.AppendMode.APPEND, true)) {
+                text(cs, font, 11, MARGIN, 720, "Second stream paragraph appended later.");
+            }
+            return bytes(document);
+        }
+    }
+
+    /** A landscape page via /Rotate 90, which flips the frame the text engine reports in. */
+    static byte[] rotatedDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(PDRectangle.A4);
+            page.setRotation(90);
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                // Drawn rotated so the text reads upright on the rotated page.
+                cs.transform(Matrix.getRotateInstance(Math.toRadians(90), 595, 0));
+                text(cs, font, 18, MARGIN, 500, "Rotated Page Title");
+                text(cs, font, 11, MARGIN, 470, "Body text on a landscape page.");
+            }
+            return bytes(document);
+        }
+    }
+
+    /** A MediaBox whose origin is not (0,0), which some scanners produce. */
+    static byte[] offsetMediaBoxDocument() throws IOException {
+        try (PDDocument document = new PDDocument()) {
+            PDPage page = new PDPage(new PDRectangle(100, 200, 595, 842));
+            document.addPage(page);
+            PDFont font = font(document);
+            try (PDPageContentStream cs = new PDPageContentStream(document, page)) {
+                text(cs, font, 18, 160, 960, "Offset Origin Title");
+                text(cs, font, 11, 160, 930, "Text on a page whose MediaBox starts at 100,200.");
+            }
+            return bytes(document);
+        }
+    }
+
+    // --- helpers -----------------------------------------------------------
+
+    private static float text(
+            PDPageContentStream cs, PDFont font, float size, float x, float y, String value)
+            throws IOException {
+        cs.beginText();
+        cs.setFont(font, size);
+        cs.newLineAtOffset(x, y);
+        cs.showText(value);
+        cs.endText();
+        return y - size * 1.35f;
+    }
+
+    /**
+     * Emits one row with a separate show-text operator per cell, so each cell gets its own MCID.
+     */
+    private static void tableRow(
+            PDPageContentStream cs,
+            PDFont font,
+            float size,
+            float[] columns,
+            float y,
+            String[] values)
+            throws IOException {
+        cs.beginText();
+        cs.setFont(font, size);
+        cs.newLineAtOffset(columns[0], y);
+        cs.showText(values[0]);
+        for (int i = 1; i < values.length; i++) {
+            cs.newLineAtOffset(columns[i] - columns[i - 1], 0);
+            cs.showText(values[i]);
+        }
+        cs.endText();
+    }
+
+    private static byte[] bytes(PDDocument document) throws IOException {
+        ByteArrayOutputStream out = new ByteArrayOutputStream();
+        document.save(out);
+        return out.toByteArray();
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfaLevelATest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfaLevelATest.java
new file mode 100644
index 0000000000..367b9d1171
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/PdfaLevelATest.java
@@ -0,0 +1,202 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertEquals;
+import static org.junit.jupiter.api.Assertions.assertFalse;
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.io.ByteArrayInputStream;
+import java.nio.charset.StandardCharsets;
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.List;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+import org.verapdf.pdfa.Foundries;
+import org.verapdf.pdfa.PDFAParser;
+import org.verapdf.pdfa.flavours.PDFAFlavour;
+import org.verapdf.pdfa.results.TestAssertion;
+import org.verapdf.pdfa.results.ValidationResult;
+
+/**
+ * Proves tagging raises a PDF/A file from level B to the accessible level A. veraPDF is the
+ * arbiter: the claim only counts if the validator agrees.
+ */
+class PdfaLevelATest {
+
+    private static PdfaAccessibilityService service;
+    private static Path repoRoot;
+
+    @BeforeAll
+    static void setUp() {
+        PdfUaValidationService uaValidation = new PdfUaValidationService();
+        uaValidation.initialise();
+        service = new PdfaAccessibilityService(uaValidation);
+        repoRoot = Path.of("").toAbsolutePath();
+        while (repoRoot != null && !Files.exists(repoRoot.resolve("settings.gradle"))) {
+            repoRoot = repoRoot.getParent();
+        }
+    }
+
+    private static byte[] fixture(String name) throws Exception {
+        return Files.readAllBytes(
+                repoRoot.resolve("app/core/src/test/resources/pdfa").resolve(name));
+    }
+
+    private static String xmpOf(byte[] pdf) throws Exception {
+        try (PDDocument document = Loader.loadPDF(pdf)) {
+            var metadata = document.getDocumentCatalog().getMetadata();
+            assertNotNull(metadata, "no XMP packet");
+            return new String(metadata.toByteArray(), StandardCharsets.UTF_8);
+        }
+    }
+
+    /** The flavour the file declares in its XMP, which is what a validator picks up by itself. */
+    private static String declaredStandard(byte[] pdf) throws Exception {
+        try (PDFAParser parser =
+                Foundries.defaultInstance().createParser(new ByteArrayInputStream(pdf))) {
+            List<PDFAFlavour> flavours = parser.getFlavours();
+            return flavours == null || flavours.isEmpty() ? null : flavours.get(0).getId();
+        }
+    }
+
+    private static ValidationResult validate(byte[] pdf, PDFAFlavour flavour) throws Exception {
+        try (PDFAParser parser =
+                Foundries.defaultInstance().createParser(new ByteArrayInputStream(pdf), flavour)) {
+            return Foundries.defaultInstance().createValidator(flavour, false).validate(parser);
+        }
+    }
+
+    private static List<String> failures(ValidationResult result) {
+        return result.getTestAssertions().stream()
+                .filter(assertion -> assertion.getStatus() == TestAssertion.Status.FAILED)
+                .map(TestAssertion::getMessage)
+                .toList();
+    }
+
+    @Test
+    @DisplayName("a level B file gains a structure tree and a conformance A claim")
+    void upgradesLevelBToLevelA() throws Exception {
+        byte[] levelB = fixture("valid-pdfa-2b.pdf");
+
+        try (PDDocument before = Loader.loadPDF(levelB)) {
+            assertEquals(
+                    null,
+                    before.getDocumentCatalog().getStructureTreeRoot(),
+                    "the fixture should start untagged, or the test proves nothing");
+        }
+
+        PdfaAccessibilityService.Result result =
+                service.upgradeToLevelA(levelB, 2, "en-GB", "Archived Report");
+        assertTrue(result.levelA(), "upgrade failed: " + result.warnings());
+
+        try (PDDocument after = Loader.loadPDF(result.pdfBytes())) {
+            assertNotNull(
+                    after.getDocumentCatalog().getStructureTreeRoot(), "no structure tree written");
+            assertTrue(after.getDocumentCatalog().getMarkInfo().isMarked());
+            assertEquals("en-GB", after.getDocumentCatalog().getLanguage());
+        }
+
+        String xmp = xmpOf(result.pdfBytes());
+        assertTrue(xmp.contains("part"), "pdfaid:part missing");
+        assertTrue(
+                xmp.contains(">A<") || xmp.contains("conformance=\"A\""),
+                "conformance was not raised to A: " + xmp);
+    }
+
+    @Test
+    @DisplayName("the upgraded file still validates as PDF/A, now at level A")
+    void upgradedFileStillValidates() throws Exception {
+        byte[] levelB = fixture("valid-pdfa-2b.pdf");
+        PdfaAccessibilityService.Result result =
+                service.upgradeToLevelA(levelB, 2, "en-GB", "Archived Report");
+        assertTrue(result.levelA(), "upgrade failed: " + result.warnings());
+
+        assertEquals(
+                "2a", declaredStandard(result.pdfBytes()), "the file should now declare PDF/A-2a");
+
+        ValidationResult pdfa = validate(result.pdfBytes(), PDFAFlavour.PDFA_2_A);
+        assertTrue(pdfa.isCompliant(), () -> "PDF/A-2a validation failed: " + failures(pdfa));
+    }
+
+    @Test
+    @DisplayName("PDF/A-1 keeps its 1.4 version, since level A must not change the part")
+    void partOneKeepsItsVersion() throws Exception {
+        byte[] levelB = fixture("valid-pdfa-1b.pdf");
+        float versionBefore;
+        try (PDDocument document = Loader.loadPDF(levelB)) {
+            versionBefore = document.getVersion();
+        }
+
+        PdfaAccessibilityService.Result result =
+                service.upgradeToLevelA(levelB, 1, "en", "Archived");
+        try (PDDocument document = Loader.loadPDF(result.pdfBytes())) {
+            assertEquals(
+                    versionBefore,
+                    document.getVersion(),
+                    "raising the PDF version would break PDF/A-1 conformance");
+        }
+    }
+
+    @Test
+    @DisplayName("a document with nothing to tag is left at level B rather than mislabelled")
+    void refusesToClaimLevelAWithoutTags() throws Exception {
+        byte[] blank;
+        try (PDDocument document = new PDDocument()) {
+            document.addPage(new org.apache.pdfbox.pdmodel.PDPage());
+            var out = new java.io.ByteArrayOutputStream();
+            document.save(out);
+            blank = out.toByteArray();
+        }
+
+        PdfaAccessibilityService.Result result = service.upgradeToLevelA(blank, 2, "en", "Empty");
+        assertFalse(result.levelA(), "an untaggable document must not claim level A");
+        assertFalse(result.warnings().isEmpty(), "the refusal should be explained");
+    }
+
+    @Test
+    @DisplayName("setting conformance leaves the rest of the XMP packet intact")
+    void conformanceRewritePreservesPacket() throws Exception {
+        byte[] levelB = fixture("valid-pdfa-2b.pdf");
+        byte[] rewritten = PdfaAccessibilityService.setConformance(levelB, 2, "A");
+
+        assertEquals("2a", declaredStandard(rewritten), "the rewritten packet should declare 2a");
+    }
+
+    @Test
+    @DisplayName("a file can declare PDF/A and PDF/UA at once without breaking either")
+    void combinedPdfaAndPdfUa() throws Exception {
+        byte[] levelB = fixture("valid-pdfa-2b.pdf");
+        PdfaAccessibilityService.Result upgraded =
+                service.upgradeToLevelA(levelB, 2, "en-GB", "Archived and Accessible");
+        assertTrue(upgraded.levelA(), "upgrade failed: " + upgraded.warnings());
+
+        byte[] both = PdfaAccessibilityService.declarePdfUaAlongsidePdfa(upgraded.pdfBytes(), 2);
+
+        String xmp = xmpOf(both);
+        assertTrue(xmp.contains("pdfuaid"), "no PDF/UA identifier");
+        assertTrue(
+                xmp.contains("pdfaSchema") || xmp.contains("schemas"),
+                "PDF/A requires an extension schema describing pdfuaid, none found: " + xmp);
+
+        assertEquals(
+                "2a", declaredStandard(both), "the combined file should still declare PDF/A-2a");
+
+        ValidationResult pdfa = validate(both, PDFAFlavour.PDFA_2_A);
+        assertTrue(
+                pdfa.isCompliant(),
+                () -> "adding the PDF/UA identifier broke PDF/A: " + failures(pdfa));
+    }
+
+    @Test
+    @DisplayName("PDFAFlavour exposes the level A profiles the converter now targets")
+    void flavoursExistForLevelA() {
+        assertNotNull(PDFAFlavour.PDFA_1_A);
+        assertNotNull(PDFAFlavour.PDFA_2_A);
+        assertNotNull(PDFAFlavour.PDFA_3_A);
+    }
+}
diff --git a/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/TaggedContentExtractorRealFilesTest.java b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/TaggedContentExtractorRealFilesTest.java
new file mode 100644
index 0000000000..b42a429007
--- /dev/null
+++ b/app/proprietary/src/test/java/stirling/software/proprietary/service/ua/TaggedContentExtractorRealFilesTest.java
@@ -0,0 +1,99 @@
+package stirling.software.proprietary.service.ua;
+
+import static org.junit.jupiter.api.Assertions.assertNotNull;
+import static org.junit.jupiter.api.Assertions.assertTrue;
+
+import java.nio.file.Files;
+import java.nio.file.Path;
+import java.util.ArrayList;
+import java.util.List;
+import java.util.stream.Stream;
+
+import org.apache.pdfbox.Loader;
+import org.apache.pdfbox.pdmodel.PDDocument;
+import org.apache.pdfbox.text.PDFTextStripper;
+import org.junit.jupiter.api.BeforeAll;
+import org.junit.jupiter.api.DisplayName;
+import org.junit.jupiter.api.Test;
+
+import stirling.software.proprietary.pdf.ua.PageContent;
+import stirling.software.proprietary.pdf.ua.TaggedContentExtractor;
+
+/**
+ * Guards the invariant the tagger rests on: the token pass and text pass must agree on ordinals.
+ * They can silently disagree, and the extractor then drops the page rather than mis-tag it.
+ */
+class TaggedContentExtractorRealFilesTest {
+
+    private static Path repoRoot;
+
+    @BeforeAll
+    static void setUp() {
+        repoRoot = Path.of("").toAbsolutePath();
+        while (repoRoot != null && !Files.exists(repoRoot.resolve("settings.gradle"))) {
+            repoRoot = repoRoot.getParent();
+        }
+    }
+
+    @Test
+    @DisplayName("pages with extractable text always yield lines across the repository corpus")
+    void ordinalsAgreeOnRealFiles() throws Exception {
+        assertNotNull(repoRoot, "could not locate the repository root");
+        List<String> dropped = new ArrayList<>();
+        int inspected = 0;
+
+        for (Path pdf : findPdfs()) {
+            byte[] bytes;
+            try {
+                bytes = Files.readAllBytes(pdf);
+            } catch (Exception e) {
+                continue;
+            }
+            try (PDDocument document = Loader.loadPDF(bytes)) {
+                if (document.getNumberOfPages() > 30) {
+                    continue;
+                }
+                inspected++;
+                List<PageContent> pages = new TaggedContentExtractor().extract(document);
+
+                for (PageContent page : pages) {
+                    if (page.markableCount() == 0 || !hasText(document, page.pageIndex())) {
+                        continue;
+                    }
+                    if (page.lines().isEmpty() && page.forms().isEmpty()) {
+                        dropped.add(repoRoot.relativize(pdf) + " page " + page.pageIndex());
+                    }
+                }
+            } catch (Exception e) {
+                // Unreadable files are covered by the conversion tests.
+            }
+        }
+
+        assertTrue(inspected > 15, "expected to inspect a real corpus, saw " + inspected);
+        assertTrue(
+                dropped.isEmpty(),
+                "the two extraction passes disagreed, so these pages were skipped: " + dropped);
+    }
+
+    private static boolean hasText(PDDocument document, int pageIndex) {
+        try {
+            PDFTextStripper stripper = new PDFTextStripper();
+            stripper.setStartPage(pageIndex + 1);
+            stripper.setEndPage(pageIndex + 1);
+            return !stripper.getText(document).isBlank();
+        } catch (Exception e) {
+            return false;
+        }
+    }
+
+    private List<Path> findPdfs() throws Exception {
+        try (Stream<Path> stream = Files.walk(repoRoot)) {
+            return stream.filter(Files::isRegularFile)
+                    .filter(p -> p.toString().toLowerCase().endsWith(".pdf"))
+                    .filter(p -> !p.toString().contains("node_modules"))
+                    .filter(p -> !p.toString().contains(java.io.File.separator + "build"))
+                    .filter(p -> !p.toString().contains(".git"))
+                    .toList();
+        }
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/config/MigrationOwnedSchemaFilter.java b/app/saas/src/main/java/stirling/software/saas/config/MigrationOwnedSchemaFilter.java
new file mode 100644
index 0000000000..4b2496bf15
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/config/MigrationOwnedSchemaFilter.java
@@ -0,0 +1,108 @@
+package stirling.software.saas.config;
+
+import org.hibernate.boot.model.relational.Namespace;
+import org.hibernate.boot.model.relational.Sequence;
+import org.hibernate.mapping.Table;
+import org.hibernate.tool.schema.spi.SchemaFilter;
+import org.hibernate.tool.schema.spi.SchemaFilterProvider;
+
+/**
+ * Hides the migration-owned tables from Hibernate's schema management.
+ *
+ * <p>Wired on the SaaS profile only, via {@code hibernate.hbm2ddl.schema_filter_provider}.
+ * Self-hosted is untouched: there Hibernate rightly owns everything.
+ *
+ * <p>Why a filter rather than simply turning {@code ddl-auto} off: the SaaS database has two
+ * writers. The Supabase migrations own the SaaS tables, and Hibernate owns roughly thirty tables
+ * inherited from the self-hosted app that no migration has ever created. Turn {@code ddl-auto} off
+ * and a fresh preview branch is missing that second half; leave it on and Hibernate is free to
+ * reconcile migration-owned tables, which is how {@code team_memberships.role} ended up widened to
+ * varchar(255) and needed a migration to put back. A filter keeps the first half working and makes
+ * the second impossible.
+ *
+ * <p>Note that this is a per-table filter, not a per-schema one. Hibernate's schema management runs
+ * over every mapped entity regardless of namespace, so moving SaaS tables to their own schema would
+ * not by itself keep Hibernate out of them. {@link SaasSchemaOwnership} is the register; this class
+ * only applies it.
+ *
+ * <p><b>Foreign keys still cross the line, on purpose.</b> Several inherited tables reference
+ * migration-owned ones — {@code folders}, {@code stored_files} and {@code file_shares} all point at
+ * {@code users}/{@code teams}. Hibernate's {@code SchemaCreatorImpl.createForeignKeys} and {@code
+ * AbstractSchemaMigrator.applyForeignKeys} check {@code includeTable} against the *owning* table
+ * only and then emit every foreign key on it, without consulting the referenced table. So excluding
+ * {@code users} does not cost the branch its referential integrity, and a branch ends up matching
+ * staging. It does mean the referenced tables have to exist by the time Hibernate runs, which holds
+ * because a Supabase branch applies its migrations at build time and the app connects afterwards.
+ *
+ * <p><b>Known gap: this cannot detect drift.</b> Filtering means Hibernate never inspects these
+ * tables, and {@link #getValidateFilter()} extends that to {@code validate}, so nothing here
+ * compares a migration-owned table against its entity. Combined with the register being a
+ * hand-maintained list of another repo's contents (see {@link SaasSchemaOwnership}), there is
+ * currently no automated signal when the register, the entities and the database disagree. That is
+ * a deliberate trade for a boot that does not fail on differences we accept, not a claim that drift
+ * cannot happen; a non-fatal drift report is the missing piece and belongs outside this class.
+ */
+public class MigrationOwnedSchemaFilter implements SchemaFilterProvider, SchemaFilter {
+
+    /**
+     * The one decision this class makes. Everything Hibernate might do to a table it does not own —
+     * create, alter, drop, truncate — is refused.
+     */
+    @Override
+    public boolean includeTable(Table table) {
+        return !SaasSchemaOwnership.isMigrationOwned(table.getName());
+    }
+
+    /**
+     * Namespaces are never filtered. The inherited tables and the migration-owned ones share {@code
+     * stirling_pdf}, so excluding the namespace would take both with it.
+     */
+    @Override
+    public boolean includeNamespace(Namespace namespace) {
+        return true;
+    }
+
+    /**
+     * Sequences are left alone. Every id here is an identity column rather than a mapped generator,
+     * so there is nothing for Hibernate to create; filtering them would be dead code pretending to
+     * be a safeguard.
+     */
+    @Override
+    public boolean includeSequence(Sequence sequence) {
+        return true;
+    }
+
+    @Override
+    public SchemaFilter getCreateFilter() {
+        return this;
+    }
+
+    @Override
+    public SchemaFilter getMigrateFilter() {
+        return this;
+    }
+
+    @Override
+    public SchemaFilter getDropFilter() {
+        return this;
+    }
+
+    @Override
+    public SchemaFilter getTruncatorFilter() {
+        return this;
+    }
+
+    /**
+     * Validation is filtered too, which is the one debatable call here.
+     *
+     * <p>Letting it through would give a useful signal when a migration-owned table drifts from its
+     * entity. But {@code ddl-auto=validate} fails startup, and it would fail on differences we have
+     * deliberately accepted — {@code ai_create_sessions} carries columns from a reverted feature
+     * that nothing maps, for instance. A boot failure over a table we have chosen not to manage is
+     * noise, so the rule stays uniform: Hibernate does not concern itself with these tables at all.
+     */
+    @Override
+    public SchemaFilter getValidateFilter() {
+        return this;
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/config/SaasProjectNotice.java b/app/saas/src/main/java/stirling/software/saas/config/SaasProjectNotice.java
new file mode 100644
index 0000000000..39305fcbcd
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/config/SaasProjectNotice.java
@@ -0,0 +1,53 @@
+package stirling.software.saas.config;
+
+import org.springframework.beans.factory.annotation.Value;
+import org.springframework.boot.context.event.ApplicationReadyEvent;
+import org.springframework.context.annotation.Profile;
+import org.springframework.context.event.EventListener;
+import org.springframework.core.env.Environment;
+import org.springframework.stereotype.Component;
+
+import lombok.extern.slf4j.Slf4j;
+
+/** Logs which Supabase project this backend is talking to, and its schema policy. */
+@Slf4j
+@Component
+@Profile({"dev", "staging"})
+public class SaasProjectNotice {
+
+    private final Environment environment;
+    private final String projectRef;
+    private final String ddlAuto;
+
+    public SaasProjectNotice(
+            Environment environment,
+            @Value("${app.supabase.project-ref:unknown}") String projectRef,
+            @Value("${spring.jpa.hibernate.ddl-auto:none}") String ddlAuto) {
+        this.environment = environment;
+        this.projectRef = projectRef;
+        this.ddlAuto = ddlAuto;
+    }
+
+    @EventListener(ApplicationReadyEvent.class)
+    public void announceProject() {
+        boolean staging = environment.matchesProfiles("staging");
+        if (staging) {
+            log.info(
+                    """
+                    SaaS staging profile: Supabase project {}, ddl-auto={}. This is the SHARED \
+                    long-lived environment, so its data and schema are not yours alone. Testing an \
+                    open SaaS PR? Use that PR's preview branch instead \
+                    (SAAS_DEV_PROJECT_REF in app/.env.saas.local); staging will not have its \
+                    migrations.\
+                    """,
+                    projectRef,
+                    ddlAuto);
+            return;
+        }
+        log.info(
+                "SaaS dev profile: Supabase preview branch {}, ddl-auto={}. Disposable, so Hibernate"
+                        + " is allowed to add the inherited tables the migrations do not create.",
+                projectRef,
+                ddlAuto);
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/config/SaasSchemaOwnership.java b/app/saas/src/main/java/stirling/software/saas/config/SaasSchemaOwnership.java
new file mode 100644
index 0000000000..dffd1eccf1
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/config/SaasSchemaOwnership.java
@@ -0,0 +1,117 @@
+package stirling.software.saas.config;
+
+import java.util.Set;
+
+/**
+ * Which side owns each table in the SaaS database.
+ *
+ * <p>The SaaS schema has two writers and always has: the Supabase migrations in the
+ * Stirling-PDF-SaaS repo, and Hibernate's {@code ddl-auto}. That was a convention rather than a
+ * rule, and it leaked twice. An older {@code ddl-auto} run widened {@code team_memberships.role} to
+ * varchar(255), which needed a dedicated migration to repair because RLS policies depended on the
+ * column. Separately {@code payg_instance_usage} went months with an entity and no migration, so it
+ * simply did not exist on a fresh preview branch.
+ *
+ * <p>This class makes the boundary explicit and {@code SaasSchemaOwnershipTest} makes it binding:
+ * every {@code @Entity} the SaaS app maps must appear in exactly one of these two sets. A new
+ * entity fails the build until someone states who owns its table, which is the decision that was
+ * previously made by accident.
+ *
+ * <p>{@link MigrationOwnedSchemaFilter} enforces it at runtime: Hibernate is never shown the
+ * migration-owned tables, so it cannot create, alter or drop them whatever {@code ddl-auto} says.
+ * Inherited tables stay under Hibernate, so a preview branch built from migrations alone still
+ * heals itself on first boot.
+ *
+ * <p><b>What this does not catch.</b> The register is a hand-maintained copy of what lives in
+ * another repository, and only one direction is enforced. The test fails when a *new* entity
+ * appears with no owner. It cannot notice a table changing sides: write a migration for {@code
+ * folders} in Stirling-PDF-SaaS and nothing here changes, the test still passes, and Hibernate
+ * carries on managing a table the migrations now own — which is precisely how {@code
+ * team_memberships.role} got widened. Adding a migration for anything in {@link #HIBERNATE_MANAGED}
+ * therefore means moving it to {@link #MIGRATION_OWNED} in the same change; nothing will remind
+ * you. Making that structural rather than remembered is what moving the SaaS tables into their own
+ * schema would buy, and is the reason this class is a stepping stone rather than the answer.
+ */
+public final class SaasSchemaOwnership {
+
+    /**
+     * Created and altered by the Supabase migrations. Hibernate must not touch these: the
+     * migrations carry constraints, defaults and RLS policies it knows nothing about and would
+     * reconcile away.
+     */
+    public static final Set<String> MIGRATION_OWNED =
+            Set.of(
+                    "ai_create_sessions",
+                    "audit_events",
+                    "authorities",
+                    "billing_subscriptions",
+                    "job_artifact_hash",
+                    "legal_consent",
+                    "linked_instance",
+                    "payg_instance_usage",
+                    "payg_meter_event_log",
+                    "payg_prepaid_bundle",
+                    "payg_shadow_charge",
+                    "payg_team_extensions",
+                    "persistent_logins",
+                    "pricing_policy",
+                    "processing_job",
+                    "processing_job_step",
+                    "procurement_agreement_signature",
+                    "procurement_deal",
+                    "procurement_quote",
+                    "saas_team_extensions",
+                    "saas_user_extensions",
+                    "sessions",
+                    "team_invitations",
+                    "team_memberships",
+                    "teams",
+                    "users",
+                    "wallet_entitlement_snapshot",
+                    "wallet_ledger",
+                    "wallet_policy");
+
+    /**
+     * Inherited from the self-hosted app, where {@code ddl-auto} owns the schema and no Supabase
+     * migration exists. Deliberately left under Hibernate so a fresh branch gets them on first
+     * boot.
+     */
+    public static final Set<String> HIBERNATE_MANAGED =
+            Set.of(
+                    "account_link_device_credential",
+                    "account_link_metered_signature",
+                    "account_link_sync_state",
+                    "account_link_usage_counter",
+                    "api_key_daily_usage",
+                    "api_keys",
+                    "file_encryption_keys",
+                    "file_run_events",
+                    "file_share_accesses",
+                    "file_shares",
+                    "folders",
+                    "integration_configs",
+                    "invite_tokens",
+                    "jwt_signing_keys",
+                    "policies",
+                    "policy_assets",
+                    "policy_completed_migrations",
+                    "policy_processed_files",
+                    "policy_source_doc_counts",
+                    "policy_source_doc_totals",
+                    "policy_sources",
+                    "resource_grants",
+                    "storage_cleanup_entries",
+                    "stored_file_blobs",
+                    "stored_files",
+                    "user_license_settings",
+                    "user_server_certificates",
+                    "workflow_participants",
+                    "workflow_sessions");
+
+    private SaasSchemaOwnership() {}
+
+    /** Case-insensitive: Hibernate hands us whatever casing the mapping used. */
+    public static boolean isMigrationOwned(String tableName) {
+        return tableName != null && MIGRATION_OWNED.contains(tableName.toLowerCase());
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/security/SaasPortalDocumentsScopeResolver.java b/app/saas/src/main/java/stirling/software/saas/security/SaasPortalDocumentsScopeResolver.java
new file mode 100644
index 0000000000..08cd8d3788
--- /dev/null
+++ b/app/saas/src/main/java/stirling/software/saas/security/SaasPortalDocumentsScopeResolver.java
@@ -0,0 +1,46 @@
+package stirling.software.saas.security;
+
+import java.util.List;
+import java.util.Objects;
+
+import org.springframework.context.annotation.Primary;
+import org.springframework.context.annotation.Profile;
+import org.springframework.stereotype.Component;
+
+import lombok.RequiredArgsConstructor;
+
+import stirling.software.proprietary.audit.PortalAuditScope;
+import stirling.software.proprietary.audit.PortalAuditScopeResolver;
+import stirling.software.proprietary.audit.PortalDocumentsScopeResolver;
+import stirling.software.proprietary.security.repository.TeamMembershipRepository;
+
+/**
+ * SaaS documents visibility: platform admins see the whole server; every other portal user sees
+ * their own team's documents (by member email).
+ */
+@Component
+@Primary
+@Profile("saas")
+@RequiredArgsConstructor
+public class SaasPortalDocumentsScopeResolver implements PortalDocumentsScopeResolver {
+
+    private final TeamSecurityExpressions teamSecurity;
+    private final TeamMembershipRepository membershipRepository;
+
+    @Override
+    public PortalAuditScope resolve() {
+        if (PortalAuditScopeResolver.hasAdminAuthority()) {
+            return PortalAuditScope.server();
+        }
+        Long teamId = teamSecurity.currentUserTeamId();
+        if (teamId == null) {
+            return PortalAuditScope.denied();
+        }
+        List<String> memberEmails =
+                membershipRepository.findByTeamId(teamId).stream()
+                        .map(m -> m.getUser() == null ? null : m.getUser().getEmail())
+                        .filter(Objects::nonNull)
+                        .toList();
+        return PortalAuditScope.team("team:" + teamId, memberEmails);
+    }
+}
diff --git a/app/saas/src/main/java/stirling/software/saas/security/SupabaseSecurityConfig.java b/app/saas/src/main/java/stirling/software/saas/security/SupabaseSecurityConfig.java
index ce0c937d6e..36f3a4c06e 100644
--- a/app/saas/src/main/java/stirling/software/saas/security/SupabaseSecurityConfig.java
+++ b/app/saas/src/main/java/stirling/software/saas/security/SupabaseSecurityConfig.java
@@ -316,7 +316,11 @@ public class SupabaseSecurityConfig {
                         "Origin",
                         "X-API-KEY",
                         "X-Browser-Id"));
-        cfg.setExposedHeaders(List.of("WWW-Authenticate"));
+        cfg.setExposedHeaders(
+                List.of(
+                        "WWW-Authenticate",
+                        "X-Stirling-Skipped-Field-Edits",
+                        "X-Stirling-Skipped-Field-Edits-Total"));
         cfg.setAllowCredentials(true);
         cfg.setMaxAge(3600L);
         UrlBasedCorsConfigurationSource source = new UrlBasedCorsConfigurationSource();
diff --git a/app/saas/src/main/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthority.java b/app/saas/src/main/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthority.java
index e2f5b65b47..0ce5e8e308 100644
--- a/app/saas/src/main/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthority.java
+++ b/app/saas/src/main/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthority.java
@@ -25,6 +25,11 @@ public class TeamLeaderPolicyManagementAuthority implements PolicyManagementAuth
         return teamSecurity.isCurrentUserTeamLeader();
     }
 
+    @Override
+    public boolean canTriggerPolicies() {
+        return teamSecurity.isCurrentUserTeamLeader();
+    }
+
     @Override
     public Long currentUserTeamId() {
         return teamSecurity.currentUserTeamId();
diff --git a/app/saas/src/main/resources/application-dev.properties b/app/saas/src/main/resources/application-dev.properties
index ee8bf80ff2..b289fc95cc 100644
--- a/app/saas/src/main/resources/application-dev.properties
+++ b/app/saas/src/main/resources/application-dev.properties
@@ -1,32 +1,40 @@
-# SaaS dev profile. Points at the dev Supabase project.
-# Boot: java -jar stirling-pdf.jar --spring.profiles.include=dev
+# SaaS dev profile: follows the Supabase preview branch of the SaaS PR under test.
+# One variable switches PR, SAAS_DEV_PROJECT_REF; everything else derives from it.
+# Want a stable shared environment instead? Use the staging profile.
+
 spring.config.import=optional:classpath:application-dev-local.properties
 
-app.supabase.project-ref=qacaivhsjtftfwtgjvva
+# Let Hibernate reconcile the entity tables so a fresh preview branch heals itself. A branch is built
+# from the Supabase migrations, which cover the SaaS-owned tables but not the ~28 inherited from the
+# self-hosted app -- those have only ever been created by ddl-auto. Safe here because a preview branch
+# is disposable and `update` only ever adds; staging pins `none`, so keep this profile-scoped.
+spring.jpa.hibernate.ddl-auto=update
 
-stirling.supabase.url=https://qacaivhsjtftfwtgjvva.supabase.co
-stirling.supabase.publishable-key=sb_publishable_nIM8y-9ARPE7EzQwAQHKMg_40fCN6kY # gitleaks:allow
+# From the PR's "Supabase Preview" check. Required with no fallback: ddl-auto=update above must never
+# be aimed at the shared project.
+app.supabase.project-ref=${SAAS_DEV_PROJECT_REF}
 
-spring.datasource.url=${SAAS_DEV_DB_URL:jdbc:postgresql://db.qacaivhsjtftfwtgjvva.supabase.co:5432/postgres?ApplicationName=stirling-consolidation-${user.name}}
+stirling.supabase.url=https://${app.supabase.project-ref}.supabase.co
+# Per-branch, not derivable. Dashboard > Settings > API.
+stirling.supabase.publishable-key=${SAAS_DEV_PUBLISHABLE_KEY}
+
+# Override the whole URL if the branch needs the pooler host rather than the direct one.
+spring.datasource.url=${SAAS_DEV_DB_URL:jdbc:postgresql://db.${app.supabase.project-ref}.supabase.co:5432/postgres?ApplicationName=stirling-dev-${user.name}}
 spring.datasource.username=${SAAS_DEV_DB_USERNAME:postgres}
-# Password not committed; export SAAS_DEV_DB_PASSWORD or pass --spring.datasource.password=...
+# A preview branch has its own password; the parent project's will not authenticate.
 spring.datasource.password=${SAAS_DEV_DB_PASSWORD:}
 
-# Conservative dev pool sizing.
 spring.datasource.hikari.maximum-pool-size=2
 spring.datasource.hikari.minimum-idle=1
 spring.datasource.hikari.idle-timeout=60000
 spring.datasource.hikari.max-lifetime=1800000
 spring.datasource.hikari.keepalive-time=300000
-spring.datasource.hikari.data-source-properties.ApplicationName=stirling-consolidation-${user.name}
+spring.datasource.hikari.data-source-properties.ApplicationName=stirling-dev-${user.name}
 
 logging.level.stirling.software.saas=DEBUG
 logging.level.org.springframework.security.oauth2.jwt=WARN
 logging.level.org.springframework.security.oauth2.server.resource=WARN
 
-# Supabase meter edge fn the Java backend calls (server-to-server, on job close).
-# URL is not a secret; auth rides the existing SUPABASE_EDGE_FUNCTION_SECRET (same
-# shared secret the team-invitation flow uses — no service-role key in the Java env).
-# Blank secret → the meter service no-ops with a WARN, so the app still boots.
-# The billing portal is NOT here — the FE calls create-customer-portal-session directly.
-payg.meter.endpoint=https://qacaivhsjtftfwtgjvva.supabase.co/functions/v1/meter-payg-units
+# Server-to-server meter call. Auth rides SUPABASE_EDGE_FUNCTION_SECRET; blank secret means the meter
+# service no-ops with a WARN rather than failing the boot.
+payg.meter.endpoint=https://${app.supabase.project-ref}.supabase.co/functions/v1/meter-payg-units
diff --git a/app/saas/src/main/resources/application-saas.properties b/app/saas/src/main/resources/application-saas.properties
index f0630aaac1..e3c32c429e 100644
--- a/app/saas/src/main/resources/application-saas.properties
+++ b/app/saas/src/main/resources/application-saas.properties
@@ -27,6 +27,13 @@ spring.jpa.properties.hibernate.hbm2ddl.create_namespaces=true
 
 spring.jpa.hibernate.ddl-auto=update
 
+# ...but only over the tables Hibernate actually owns. The SaaS database has two writers: the
+# Supabase migrations own the SaaS tables, Hibernate owns ~30 inherited from the self-hosted app that
+# no migration has ever created. This filter hides the former from schema management, so ddl-auto can
+# still heal a fresh preview branch without being free to reconcile a migration-owned table — which
+# is how team_memberships.role ended up widened to varchar(255). Register: SaasSchemaOwnership.
+spring.jpa.properties.hibernate.hbm2ddl.schema_filter_provider=stirling.software.saas.config.MigrationOwnedSchemaFilter
+
 # ---------- Supabase JWT auth ----------
 # Required: set SAAS_DB_PROJECT_REF via env.
 app.supabase.project-ref=${SAAS_DB_PROJECT_REF:}
diff --git a/app/saas/src/main/resources/application-staging.properties b/app/saas/src/main/resources/application-staging.properties
new file mode 100644
index 0000000000..4874ed3fb5
--- /dev/null
+++ b/app/saas/src/main/resources/application-staging.properties
@@ -0,0 +1,39 @@
+# SaaS staging profile: the long-lived shared v3 project, pinned so it is still there tomorrow.
+# For work on an open SaaS PR use the dev profile, which follows that PR's preview branch.
+
+spring.config.import=optional:classpath:application-staging-local.properties
+
+# Stated rather than inherited: application-saas.properties defaults to `update`, and staging's
+# schema is shared and RLS-dependent, so it must not be reconciled by Hibernate.
+spring.jpa.hibernate.ddl-auto=none
+
+# Committed as a default rather than a literal, so staging needs no setup but stays repointable.
+# Neither the ref nor the publishable key is secret: the ref is a public subdomain, the key ships in
+# the browser bundle. Everything below derives from the ref, so an override follows through.
+app.supabase.project-ref=${SAAS_STAGING_PROJECT_REF:qacaivhsjtftfwtgjvva}
+
+stirling.supabase.url=https://${app.supabase.project-ref}.supabase.co
+stirling.supabase.publishable-key=${SAAS_STAGING_PUBLISHABLE_KEY:sb_publishable_nIM8y-9ARPE7EzQwAQHKMg_40fCN6kY}
+
+spring.datasource.url=${SAAS_STAGING_DB_URL:jdbc:postgresql://db.${app.supabase.project-ref}.supabase.co:5432/postgres?ApplicationName=stirling-staging-${user.name}}
+spring.datasource.username=${SAAS_STAGING_DB_USERNAME:postgres}
+# Password not committed; export SAAS_STAGING_DB_PASSWORD or pass --spring.datasource.password=...
+spring.datasource.password=${SAAS_STAGING_DB_PASSWORD:}
+
+# Conservative pool sizing: this is a shared project, so don't hold connections others need.
+spring.datasource.hikari.maximum-pool-size=2
+spring.datasource.hikari.minimum-idle=1
+spring.datasource.hikari.idle-timeout=60000
+spring.datasource.hikari.max-lifetime=1800000
+spring.datasource.hikari.keepalive-time=300000
+spring.datasource.hikari.data-source-properties.ApplicationName=stirling-staging-${user.name}
+
+logging.level.stirling.software.saas=DEBUG
+logging.level.org.springframework.security.oauth2.jwt=WARN
+logging.level.org.springframework.security.oauth2.server.resource=WARN
+
+# Supabase meter edge fn the Java backend calls (server-to-server, on job close).
+# URL is not a secret; auth rides the existing SUPABASE_EDGE_FUNCTION_SECRET (same
+# shared secret the team-invitation flow uses — no service-role key in the Java env).
+# Blank secret → the meter service no-ops with a WARN, so the app still boots.
+payg.meter.endpoint=https://${app.supabase.project-ref}.supabase.co/functions/v1/meter-payg-units
diff --git a/app/saas/src/test/java/stirling/software/saas/config/MigrationOwnedSchemaFilterTest.java b/app/saas/src/test/java/stirling/software/saas/config/MigrationOwnedSchemaFilterTest.java
new file mode 100644
index 0000000000..956654384e
--- /dev/null
+++ b/app/saas/src/test/java/stirling/software/saas/config/MigrationOwnedSchemaFilterTest.java
@@ -0,0 +1,129 @@
+package stirling.software.saas.config;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.io.InputStream;
+import java.util.Properties;
+
+import org.hibernate.mapping.Table;
+import org.hibernate.tool.schema.spi.SchemaFilter;
+import org.hibernate.tool.schema.spi.SchemaFilterProvider;
+import org.junit.jupiter.api.Test;
+
+/**
+ * Covers {@link MigrationOwnedSchemaFilter} and, just as importantly, its wiring.
+ *
+ * <p>{@link SaasSchemaOwnershipTest} proves the register is complete; nothing proved the filter
+ * applies it, or that Hibernate is even asking. A typo in the {@code
+ * hibernate.hbm2ddl.schema_filter_provider} key, a stale fully-qualified name after a package move,
+ * or a getter returning null would all leave every migration-owned table exposed to {@code
+ * ddl-auto} with a fully green build. Hence the property assertion below, which is the only thing
+ * here that would catch that.
+ */
+class MigrationOwnedSchemaFilterTest {
+
+    private static final String FILTER_PROPERTY =
+            "spring.jpa.properties.hibernate.hbm2ddl.schema_filter_provider";
+
+    private final MigrationOwnedSchemaFilter filter = new MigrationOwnedSchemaFilter();
+
+    /** "orm" is Hibernate's own default contributor; the value is irrelevant to the filter. */
+    private static Table table(String name) {
+        return new Table("orm", name);
+    }
+
+    @Test
+    void migrationOwnedTablesAreHiddenFromHibernate() {
+        assertThat(filter.includeTable(table("teams"))).isFalse();
+        assertThat(filter.includeTable(table("users"))).isFalse();
+        assertThat(filter.includeTable(table("team_memberships"))).isFalse();
+        assertThat(filter.includeTable(table("payg_instance_usage"))).isFalse();
+    }
+
+    @Test
+    void inheritedTablesStayUnderHibernate() {
+        assertThat(filter.includeTable(table("folders"))).isTrue();
+        assertThat(filter.includeTable(table("stored_files"))).isTrue();
+        assertThat(filter.includeTable(table("api_keys"))).isTrue();
+    }
+
+    @Test
+    void anUnknownTableIsLeftToHibernate() {
+        // Fail-open is the right default: an unrecognised table is either brand new or from a
+        // module
+        // we do not know about, and SaasSchemaOwnershipTest is what stops it staying unrecognised.
+        assertThat(filter.includeTable(table("no_such_table"))).isTrue();
+    }
+
+    @Test
+    void casingDoesNotDefeatTheFilter() {
+        assertThat(filter.includeTable(table("TEAMS"))).isFalse();
+        assertThat(filter.includeTable(table("Team_Memberships"))).isFalse();
+    }
+
+    /**
+     * Foreign keys from an inherited table into a migration-owned one survive the filter.
+     *
+     * <p>Worth pinning, because it is not obvious and it decides whether a preview branch keeps
+     * referential integrity. {@code folders}, {@code stored_files} and {@code file_shares} all
+     * reference {@code users}/{@code teams}, which the filter excludes. Hibernate 7.2's {@code
+     * SchemaCreatorImpl.createForeignKeys} (and {@code AbstractSchemaMigrator.applyForeignKeys})
+     * tests {@code includeTable} against the *owning* table only, then emits every foreign key on
+     * it; the referenced table is never consulted. So the constraints are still created and a
+     * branch matches staging.
+     *
+     * <p>The one thing this depends on is ordering: the referenced tables have to exist first. They
+     * do, because a Supabase branch runs its migrations at build time and the app connects after.
+     */
+    @Test
+    void foreignKeysIntoMigrationOwnedTablesAreStillEmitted() {
+        assertThat(filter.includeTable(table("folders"))).isTrue();
+        assertThat(filter.includeTable(table("file_shares"))).isTrue();
+        assertThat(filter.includeTable(table("users"))).isFalse();
+        assertThat(filter.includeTable(table("teams"))).isFalse();
+    }
+
+    @Test
+    void everySchemaActionGetsTheSameFilter() {
+        assertThat(filter.getCreateFilter()).isSameAs(filter);
+        assertThat(filter.getMigrateFilter()).isSameAs(filter);
+        assertThat(filter.getDropFilter()).isSameAs(filter);
+        assertThat(filter.getTruncatorFilter()).isSameAs(filter);
+        assertThat(filter.getValidateFilter()).isSameAs(filter);
+    }
+
+    @Test
+    void namespacesAndSequencesAreNeverFiltered() {
+        // Both share the stirling_pdf namespace, so filtering it would take the inherited tables
+        // with it. Neither argument is read, so nulls are fine and keep the test free of Hibernate
+        // bootstrap machinery.
+        assertThat(filter.includeNamespace(null)).isTrue();
+        assertThat(filter.includeSequence(null)).isTrue();
+    }
+
+    @Test
+    void theFilterIsActuallyWiredIntoHibernate() throws Exception {
+        Properties properties = new Properties();
+        try (InputStream in = getClass().getResourceAsStream("/application-saas.properties")) {
+            assertThat(in)
+                    .as("application-saas.properties must be on the test classpath to check wiring")
+                    .isNotNull();
+            properties.load(in);
+        }
+
+        String configured = properties.getProperty(FILTER_PROPERTY);
+        assertThat(configured)
+                .as(
+                        "%s is unset, so Hibernate installs its default filter and every"
+                                + " migration-owned table is back under ddl-auto",
+                        FILTER_PROPERTY)
+                .isNotBlank();
+
+        Class<?> wired = Class.forName(configured.trim());
+        assertThat(SchemaFilterProvider.class)
+                .as("Hibernate only accepts a SchemaFilterProvider here")
+                .isAssignableFrom(wired);
+        assertThat(SchemaFilter.class).isAssignableFrom(wired);
+        assertThat(wired).isEqualTo(MigrationOwnedSchemaFilter.class);
+    }
+}
diff --git a/app/saas/src/test/java/stirling/software/saas/config/SaasSchemaOwnershipTest.java b/app/saas/src/test/java/stirling/software/saas/config/SaasSchemaOwnershipTest.java
new file mode 100644
index 0000000000..e07b1042e7
--- /dev/null
+++ b/app/saas/src/test/java/stirling/software/saas/config/SaasSchemaOwnershipTest.java
@@ -0,0 +1,167 @@
+package stirling.software.saas.config;
+
+import static org.assertj.core.api.Assertions.assertThat;
+
+import java.util.Arrays;
+import java.util.List;
+import java.util.Set;
+import java.util.TreeMap;
+import java.util.TreeSet;
+
+import org.junit.jupiter.api.Test;
+import org.springframework.beans.factory.config.BeanDefinition;
+import org.springframework.boot.persistence.autoconfigure.EntityScan;
+import org.springframework.context.annotation.ClassPathScanningCandidateComponentProvider;
+import org.springframework.core.type.filter.AnnotationTypeFilter;
+import org.springframework.util.ClassUtils;
+
+import jakarta.persistence.Entity;
+import jakarta.persistence.Table;
+
+import stirling.software.proprietary.security.configuration.DatabaseConfig;
+
+/**
+ * Makes {@link SaasSchemaOwnership} binding rather than decorative.
+ *
+ * <p>Every {@code @Entity} the SaaS app maps has to be declared as owned by either the Supabase
+ * migrations or Hibernate. Adding an entity without saying which fails here, at build time, instead
+ * of months later on a preview branch that has no such table. That is not hypothetical: {@code
+ * payg_instance_usage} shipped with an entity and no migration and went unnoticed until a branch
+ * tried to use it.
+ *
+ * <p>"Maps" is meant precisely: the scan covers the packages named by the {@code @EntityScan}
+ * declarations the app actually boots with, not everything under {@code stirling.software}. See
+ * {@link #mappedPackages()}. Note this only enforces one direction — {@link SaasSchemaOwnership}
+ * documents the drift it cannot see.
+ */
+class SaasSchemaOwnershipTest {
+
+    /**
+     * The packages the running app actually maps, read off the two {@code @EntityScan} declarations
+     * that define them rather than hardcoded.
+     *
+     * <p>Scanning all of {@code stirling.software} would be easier and wrong in a quiet way: it is
+     * a superset, so it would force ownership declarations for entities Hibernate never sees and
+     * let the register claim tables that do not exist as far as the SaaS app is concerned. Deriving
+     * the list means this test measures the same set Hibernate does, and follows a package being
+     * added or moved without anyone updating it here.
+     */
+    private static Set<String> mappedPackages() {
+        Set<String> packages = new TreeSet<>();
+        for (Class<?> config : List.of(SaasJpaConfig.class, DatabaseConfig.class)) {
+            EntityScan scan = config.getAnnotation(EntityScan.class);
+            assertThat(scan)
+                    .as("%s must carry @EntityScan, or its entities are not mapped", config)
+                    .isNotNull();
+            packages.addAll(Arrays.asList(scan.value()));
+        }
+        return packages;
+    }
+
+    private static TreeMap<String, String> mappedTables() {
+        ClassPathScanningCandidateComponentProvider scanner =
+                new ClassPathScanningCandidateComponentProvider(false);
+        scanner.addIncludeFilter(new AnnotationTypeFilter(Entity.class));
+        TreeMap<String, String> byTable = new TreeMap<>();
+        for (String basePackage : mappedPackages()) {
+            for (BeanDefinition bd : scanner.findCandidateComponents(basePackage)) {
+                String className = bd.getBeanClassName();
+                Class<?> type;
+                try {
+                    type =
+                            ClassUtils.forName(
+                                    className, SaasSchemaOwnershipTest.class.getClassLoader());
+                } catch (ClassNotFoundException | LinkageError e) {
+                    continue; // not on this module's runtime classpath; nothing to own
+                }
+                Table table = type.getAnnotation(Table.class);
+                String name =
+                        table != null && !table.name().isBlank()
+                                ? table.name()
+                                : camelToSnake(type.getSimpleName());
+                byTable.put(name.toLowerCase(), className);
+            }
+        }
+        return byTable;
+    }
+
+    /** Mirrors Spring Boot's default CamelCaseToUnderscoresNamingStrategy for an unnamed @Table. */
+    private static String camelToSnake(String name) {
+        return name.replaceAll("([a-z0-9])([A-Z])", "$1_$2").toLowerCase();
+    }
+
+    @Test
+    void everyEntityTableIsOwnedByExactlyOneSide() {
+        TreeMap<String, String> mapped = mappedTables();
+        assertThat(mapped)
+                .as("entity scan found nothing, so this test proves nothing")
+                .isNotEmpty();
+        // The scan is derived from @EntityScan now, so a package quietly dropped from either
+        // declaration would shrink it and weaken this test rather than fail it. These four straddle
+        // the two declarations, so losing either side fails here instead of silently checking less.
+        assertThat(mapped.keySet())
+                .as("both @EntityScan declarations must have contributed to the scan")
+                .contains("users", "teams", "payg_instance_usage", "folders");
+
+        Set<String> undeclared = new TreeSet<>();
+        Set<String> both = new TreeSet<>();
+        for (String table : mapped.keySet()) {
+            boolean migration = SaasSchemaOwnership.MIGRATION_OWNED.contains(table);
+            boolean hibernate = SaasSchemaOwnership.HIBERNATE_MANAGED.contains(table);
+            if (migration && hibernate) both.add(table);
+            if (!migration && !hibernate) undeclared.add(table);
+        }
+
+        assertThat(undeclared)
+                .as(
+                        """
+                        These entity tables are not declared in SaasSchemaOwnership, so nobody owns \
+                        them. Decide and add each to exactly one set:
+                          - MIGRATION_OWNED: also add a migration in Stirling-PDF-SaaS, or the table \
+                        will not exist on a fresh preview branch.
+                          - HIBERNATE_MANAGED: only correct for a table inherited from the \
+                        self-hosted app that no Supabase migration creates.
+                        Offending tables -> entities: %s"""
+                                .formatted(
+                                        undeclared.stream()
+                                                .map(t -> t + " (" + mapped.get(t) + ")")
+                                                .toList()))
+                .isEmpty();
+
+        assertThat(both)
+                .as("declared as owned by both sides, which is the one thing it cannot be")
+                .isEmpty();
+    }
+
+    @Test
+    void theTwoSetsDoNotOverlap() {
+        Set<String> overlap = new TreeSet<>(SaasSchemaOwnership.MIGRATION_OWNED);
+        overlap.retainAll(SaasSchemaOwnership.HIBERNATE_MANAGED);
+        assertThat(overlap).isEmpty();
+    }
+
+    @Test
+    void tableNamesAreLowercaseSoLookupsCannotMiss() {
+        // isMigrationOwned() lowercases its input; a capital in either set would be unreachable.
+        assertThat(SaasSchemaOwnership.MIGRATION_OWNED)
+                .allSatisfy(t -> assertThat(t).isEqualTo(t.toLowerCase()));
+        assertThat(SaasSchemaOwnership.HIBERNATE_MANAGED)
+                .allSatisfy(t -> assertThat(t).isEqualTo(t.toLowerCase()));
+    }
+
+    @Test
+    void migrationOwnedTablesIncludeTheOnesThatBitUs() {
+        // team_memberships is the table an old ddl-auto run widened; payg_instance_usage is the one
+        // that had an entity and no migration. Both must be on the migrations' side of the line.
+        assertThat(SaasSchemaOwnership.MIGRATION_OWNED)
+                .contains("team_memberships", "payg_instance_usage", "teams", "users");
+    }
+
+    @Test
+    void isMigrationOwnedIsCaseInsensitiveAndNullSafe() {
+        assertThat(SaasSchemaOwnership.isMigrationOwned("TEAM_MEMBERSHIPS")).isTrue();
+        assertThat(SaasSchemaOwnership.isMigrationOwned("team_memberships")).isTrue();
+        assertThat(SaasSchemaOwnership.isMigrationOwned(null)).isFalse();
+        assertThat(SaasSchemaOwnership.isMigrationOwned("no_such_table")).isFalse();
+    }
+}
diff --git a/app/saas/src/test/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthorityTest.java b/app/saas/src/test/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthorityTest.java
index 70cd360d7c..2c37980a5c 100644
--- a/app/saas/src/test/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthorityTest.java
+++ b/app/saas/src/test/java/stirling/software/saas/security/TeamLeaderPolicyManagementAuthorityTest.java
@@ -32,6 +32,18 @@ class TeamLeaderPolicyManagementAuthorityTest {
         assertFalse(authority().canEditPolicies());
     }
 
+    @Test
+    void teamLeaderMayTriggerPolicies() {
+        when(teamSecurity.isCurrentUserTeamLeader()).thenReturn(true);
+        assertTrue(authority().canTriggerPolicies());
+    }
+
+    @Test
+    void nonLeaderMayNotTriggerPolicies() {
+        when(teamSecurity.isCurrentUserTeamLeader()).thenReturn(false);
+        assertFalse(authority().canTriggerPolicies());
+    }
+
     @Test
     void currentUserTeamIdDelegatesToTeamSecurity() {
         when(teamSecurity.currentUserTeamId()).thenReturn(9L);
diff --git a/build.gradle b/build.gradle
index a4a62df0a9..eb4b568f42 100644
--- a/build.gradle
+++ b/build.gradle
@@ -23,14 +23,14 @@ import stirling.software.gradle.ModuleLicenseOverrideFilter
 ext {
     springBootVersion = "4.0.6"
     pdfboxVersion = "3.0.8"
-    imageioVersion = "3.13.1"
+    imageioVersion = "3.14.0"
     lombokVersion = "1.18.46"
     bouncycastleVersion = "1.85"
     springSecuritySamlVersion = "7.1.0"
     openSamlVersion = "5.2.1"
     commonmarkVersion = "0.28.0"
     googleJavaFormatVersion = "1.35.0"
-    logback = "1.5.32"
+    logback = "1.6.3"
     commonsIoVersion = "2.22.0"
     commonsLang3 = "3.20.0"
     rhinoVersion = "1.9.1"
@@ -44,9 +44,9 @@ ext {
     batikVersion = "1.19"
     jpdfiumVersion = "1.0.4"
     jwtVersion = "0.13.0"
-    awsSdkVersion = "2.44.12"
-    jschVersion = "0.2.23"
-    commonsNetVersion = "3.11.1"
+    awsSdkVersion = "2.51.3"
+    jschVersion = "2.28.6"
+    commonsNetVersion = "3.13.0"
     smbjVersion = "0.14.0"
     tinkVersion = "1.23.0"
     testcontainersMinioVersion = "1.21.4"
@@ -108,7 +108,7 @@ springBoot {
 
 allprojects {
     group = 'stirling.software'
-    version = '2.14.2'
+    version = '2.14.3'
 
     configurations.configureEach {
         exclude group: "org.springframework.boot", module: "spring-boot-starter-tomcat"
diff --git a/docker/backend/Dockerfile b/docker/backend/Dockerfile
index 454fdedcfd..39bb60bdef 100644
--- a/docker/backend/Dockerfile
+++ b/docker/backend/Dockerfile
@@ -4,7 +4,7 @@ ARG BASE_VERSION=1.0.2@sha256:c7698687f486707ddef9e0298587ca8b44c4e96185e1bdb0c3
 ARG BASE_IMAGE=stirlingtools/stirling-pdf-base:${BASE_VERSION}
 
 # Stage 1: Build the Java application (backend only, no frontend)
-FROM gradle:9.6.1-jdk25@sha256:e8aeffb8197b17151ce24607811f60e91125f0018f7a3b08dc504ba9168a9c4f AS app-build
+FROM gradle:9.7.1-jdk25@sha256:d868117760a7c92214705f47ed173116a5d13e58d68702f974ff30acd062737e AS app-build
 
 # JDK 25+: --add-exports is no longer accepted via JAVA_TOOL_OPTIONS; use JDK_JAVA_OPTIONS instead
 ENV JDK_JAVA_OPTIONS="--add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNNAMED \
@@ -45,7 +45,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
       --no-daemon
 
 # Stage 2: Extract Spring Boot Layers
-FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS jar-extract
+FROM eclipse-temurin:25-jre-noble@sha256:fbcf915c585659b30eb766ada4d6d7cfc9ec1040bf521e95bf61b10a25af73db AS jar-extract
 WORKDIR /tmp
 COPY --from=app-build /app/app/core/build/libs/*.jar app.jar
 RUN java -Djarmode=tools -jar app.jar extract --layers --destination /layers
diff --git a/docker/base/Dockerfile b/docker/base/Dockerfile
index 6cffbf88f9..06e1b6e601 100644
--- a/docker/base/Dockerfile
+++ b/docker/base/Dockerfile
@@ -7,7 +7,7 @@ ARG TARGETPLATFORM
 # Stage 1: Build and strip Calibre
 FROM ubuntu:noble@sha256:561618e2c15bf2397621dd04f96926663a3b5616c189cf7e38db7e82f5c538ea AS calibre-build
 ARG TARGETPLATFORM
-ARG CALIBRE_VERSION=9.4.0
+ARG CALIBRE_VERSION=9.13.0
 ARG CALIBRE_STRIP_WEBENGINE=false
 
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
@@ -17,7 +17,7 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
       ca-certificates curl xz-utils libnss3 libfontconfig1 \
       libgl1 libegl1 libdbus-1-3 libasound2t64 libxcomposite1 \
       libxrandr2 libxkbcommon0 libxi6 libxtst6 libopengl0 \
-      poppler-utils; \
+      poppler-utils tzdata; \
     rm -rf /var/lib/apt/lists/*; \
     \
     case "$(uname -m)" in \
@@ -218,8 +218,12 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     # Keep iso639.calibre_msgpack (required)
     # Keep only en-US.pak from qtwebengine_locales (required for WebEngine)
     rm -rf /opt/calibre/lib/qt6/translations; \
-    find /opt/calibre/translations -mindepth 1 -maxdepth 1 ! -name 'qtwebengine_locales' -exec rm -rf {} +; \
-    find /opt/calibre/translations/qtwebengine_locales -type f ! -name 'en-US.pak' -delete 2>/dev/null || true; \
+    if [ -d /opt/calibre/translations ]; then \
+      find /opt/calibre/translations -mindepth 1 -maxdepth 1 ! -name 'qtwebengine_locales' -exec rm -rf {} + 2>/dev/null || true; \
+      if [ -d /opt/calibre/translations/qtwebengine_locales ]; then \
+        find /opt/calibre/translations/qtwebengine_locales -type f ! -name 'en-US.pak' -delete 2>/dev/null || true; \
+      fi; \
+    fi; \
     if [ -d /opt/calibre/resources/localization ]; then \
       rm -rf /opt/calibre/resources/localization/locales.zip \
              /opt/calibre/resources/localization/stats.calibre_msgpack \
@@ -272,7 +276,7 @@ RUN if [ "${CALIBRE_STRIP_WEBENGINE}" = "true" ]; then \
 # Stage 2: Build Ghostscript from source
 FROM ubuntu:noble@sha256:561618e2c15bf2397621dd04f96926663a3b5616c189cf7e38db7e82f5c538ea AS gs-build
 ARG TARGETPLATFORM
-ARG GS_VERSION=10.06.0
+ARG GS_VERSION=10.07.1
 
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/tmp/gs-build,id=gs-build-${TARGETPLATFORM:-local} \
@@ -296,8 +300,8 @@ RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
 # Stage 3: Build PDF Tools (QPDF and ImageMagick 7)
 FROM ubuntu:noble@sha256:561618e2c15bf2397621dd04f96926663a3b5616c189cf7e38db7e82f5c538ea AS pdf-tools-build
 ARG TARGETPLATFORM
-ARG QPDF_VERSION=12.3.2
-ARG IM_VERSION=7.1.2-13
+ARG QPDF_VERSION=12.4.0
+ARG IM_VERSION=7.1.2-29
 
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     --mount=type=cache,target=/tmp/pdf-tools-build,id=pdf-tools-${TARGETPLATFORM:-local} \
@@ -341,7 +345,7 @@ RUN mkdir -p /magick-export/usr/bin \
 # Stage 4: Build Python venv
 FROM ubuntu:noble@sha256:561618e2c15bf2397621dd04f96926663a3b5616c189cf7e38db7e82f5c538ea AS python-venv-build
 ARG TARGETPLATFORM
-ARG UNOSERVER_VERSION=3.6
+ARG UNOSERVER_VERSION=3.7
 
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     apt-get update && apt-get install -y --no-install-recommends \
@@ -364,7 +368,7 @@ RUN --mount=type=cache,target=/root/.cache/pip,sharing=locked \
 
 
 # Final runtime image - the actual base image
-FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS runtime
+FROM eclipse-temurin:25-jre-noble@sha256:fbcf915c585659b30eb766ada4d6d7cfc9ec1040bf521e95bf61b10a25af73db AS runtime
 
 SHELL ["/bin/bash", "-o", "pipefail", "-c"]
 
@@ -373,7 +377,7 @@ ENV DEBIAN_FRONTEND=noninteractive \
     LC_ALL=C.UTF-8 \
     TESS_BASE_PATH=/usr/share/tesseract-ocr/5/tessdata
 
-ARG UNOSERVER_VERSION=3.6
+ARG UNOSERVER_VERSION=3.7
 
 RUN --mount=type=cache,target=/var/cache/apt,sharing=locked \
     set -eux; \
diff --git a/docker/embedded/Dockerfile b/docker/embedded/Dockerfile
index de7da3789e..cac30d88b1 100644
--- a/docker/embedded/Dockerfile
+++ b/docker/embedded/Dockerfile
@@ -5,9 +5,9 @@ ARG BASE_VERSION=1.0.2@sha256:c7698687f486707ddef9e0298587ca8b44c4e96185e1bdb0c3
 ARG BASE_IMAGE=stirlingtools/stirling-pdf-base:${BASE_VERSION}
 
 # Stage 1: Build the Java application and frontend
-FROM gradle:9.6.1-jdk25@sha256:e8aeffb8197b17151ce24607811f60e91125f0018f7a3b08dc504ba9168a9c4f AS app-build
+FROM gradle:9.7.1-jdk25@sha256:d868117760a7c92214705f47ed173116a5d13e58d68702f974ff30acd062737e AS app-build
 
-ARG TASK_VERSION=3.49.1
+ARG TASK_VERSION=3.52.0
 RUN apt-get update \
     && apt-get install -y --no-install-recommends curl ca-certificates \
     && update-ca-certificates \
@@ -61,7 +61,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
       --no-daemon
 
 # Stage 2: Extract Spring Boot Layers
-FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS jar-extract
+FROM eclipse-temurin:25-jre-noble@sha256:fbcf915c585659b30eb766ada4d6d7cfc9ec1040bf521e95bf61b10a25af73db AS jar-extract
 WORKDIR /tmp
 COPY --from=app-build /app/app/core/build/libs/*.jar app.jar
 RUN java -Djarmode=tools -jar app.jar extract --layers --destination /layers
diff --git a/docker/embedded/Dockerfile.fat b/docker/embedded/Dockerfile.fat
index 300729e560..42c9a16af2 100644
--- a/docker/embedded/Dockerfile.fat
+++ b/docker/embedded/Dockerfile.fat
@@ -1,3 +1,5 @@
+# syntax=docker/dockerfile:1
+
 # Stirling-PDF - Fat version (embedded frontend)
 # Extra fonts for air-gapped environments
 # Uses pre-built base image for fast builds
@@ -6,9 +8,9 @@ ARG BASE_VERSION=1.0.2@sha256:c7698687f486707ddef9e0298587ca8b44c4e96185e1bdb0c3
 ARG BASE_IMAGE=stirlingtools/stirling-pdf-base:${BASE_VERSION}
 
 # Stage 1: Build the Java application and frontend
-FROM gradle:9.6.1-jdk25@sha256:e8aeffb8197b17151ce24607811f60e91125f0018f7a3b08dc504ba9168a9c4f AS app-build
+FROM gradle:9.7.1-jdk25@sha256:d868117760a7c92214705f47ed173116a5d13e58d68702f974ff30acd062737e AS app-build
 
-ARG TASK_VERSION=3.49.1
+ARG TASK_VERSION=3.52.0
 RUN apt-get update \
     && apt-get install -y --no-install-recommends curl ca-certificates \
     && update-ca-certificates \
@@ -38,7 +40,8 @@ COPY app/common/build.gradle                app/common/
 COPY app/proprietary/build.gradle           app/proprietary/
 
 # Use system gradle instead of gradlew to avoid SSL issues downloading gradle distribution on emulated arm64
-RUN gradle dependencies --no-daemon || true
+RUN --mount=type=cache,id=stirling-pdf-gradle-cache,target=/home/gradle/.gradle,sharing=locked \
+    gradle dependencies --no-daemon || true
 
 COPY . .
 
@@ -46,7 +49,9 @@ COPY . .
 ARG BUILD_PORTAL=false
 # Bundle only the JPDFium native for this image's target arch.
 ARG TARGETARCH
-RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo linux-x64)" && \
+RUN --mount=type=cache,id=stirling-pdf-npm-cache,target=/root/.npm,sharing=locked \
+    --mount=type=cache,id=stirling-pdf-gradle-cache,target=/home/gradle/.gradle,sharing=locked \
+    JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo linux-x64)" && \
     DISABLE_ADDITIONAL_FEATURES=false \
     gradle clean build \
       -PbuildWithFrontend=true \
@@ -56,12 +61,36 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
       --no-daemon
 
 # Stage 2: Extract Spring Boot Layers
-FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175 AS jar-extract
+FROM eclipse-temurin:25-jre-noble@sha256:fbcf915c585659b30eb766ada4d6d7cfc9ec1040bf521e95bf61b10a25af73db AS jar-extract
 WORKDIR /tmp
 COPY --from=app-build /app/app/core/build/libs/*.jar app.jar
 RUN java -Djarmode=tools -jar app.jar extract --layers --destination /layers
 
 
+# Stage 2b: AI engine. Built at its final path so the venv resolves after the copy, on uv's
+# managed CPython because the runtime base ships Python 3.12.
+FROM ghcr.io/astral-sh/uv:bookworm-slim@sha256:22334efe746f1b69217d455049b484d7b8cacfb2d5f42555580b62415a98e0a3 AS engine-build
+ENV UV_PYTHON_INSTALL_DIR=/opt/stirling-engine/python
+WORKDIR /opt/stirling-engine
+COPY engine/pyproject.toml engine/uv.lock ./
+# One layer: trimming in a second RUN would cache the untrimmed copy too, and this build
+# exports every layer to a GHA cache that is capped repo-wide. Trimming saves ~20MB.
+RUN --mount=type=cache,target=/root/.cache/uv \
+    set -eux; \
+    apt-get update && apt-get install -y --no-install-recommends binutils; \
+    uv python install 3.13; \
+    uv sync --frozen --no-dev --no-install-project --group engine --python-preference only-managed; \
+    P="$(ls -d /opt/stirling-engine/python/cpython-*)"; \
+    rm -rf "$P/share" "$P/include" \
+           "$P/lib/python3.13/idlelib" "$P/lib/python3.13/tkinter" \
+           "$P/lib/python3.13/ensurepip" "$P/lib/python3.13/pydoc_data" \
+           "$P/lib/python3.13/test" "$P/lib/python3.13/lib2to3"; \
+    find /opt/stirling-engine -name '__pycache__' -type d -prune -exec rm -rf {} + ; \
+    find /opt/stirling-engine \( -name '*.so' -o -name '*.so.*' \) -print0 \
+      | xargs -0 -r strip --strip-unneeded 2>/dev/null || true; \
+    apt-get purge -y binutils; apt-get autoremove -y; rm -rf /var/lib/apt/lists/*
+
+
 # Stage 3: Final runtime image on top of pre-built base
 FROM ${BASE_IMAGE}
 
@@ -79,6 +108,12 @@ COPY --link --from=app-build --chown=1000:1000 \
      /app/build/libs/restart-helper.jar /restart-helper.jar
 COPY --link --chown=1000:1000 scripts/ /scripts/
 
+# init-without-ocr.sh starts the engine when this directory exists, so other images are unaffected.
+COPY --link --from=engine-build --chown=1000:1000 /opt/stirling-engine/python /opt/stirling-engine/python
+COPY --link --from=engine-build --chown=1000:1000 /opt/stirling-engine/.venv  /opt/stirling-engine/.venv
+COPY --link --chown=1000:1000 engine/.env  /opt/stirling-engine/.env
+COPY --link --chown=1000:1000 engine/src/  /opt/stirling-engine/src/
+
 # Fonts go to system dir, root ownership is correct (world-readable)
 COPY app/core/src/main/resources/static/fonts/*.ttf /usr/share/fonts/truetype/
 
@@ -92,6 +127,8 @@ RUN set -eux; \
     ln -s /storage /app/storage; \
     chown -h stirlingpdfuser:stirlingpdfgroup /app/logs /app/configs /app/customFiles /app/pipeline /app/storage; \
     chown stirlingpdfuser:stirlingpdfgroup /app; \
+    mkdir -p /opt/stirling-engine/data; \
+    chown -R stirlingpdfuser:stirlingpdfgroup /opt/stirling-engine/data; \
     chmod 750 /tmp/stirling-pdf; \
     chmod 750 /tmp/stirling-pdf/heap_dumps; \
     fc-cache -f
@@ -111,6 +148,10 @@ ENV VERSION_TAG=$VERSION_TAG \
     PGID=1000 \
     UMASK=022 \
     FAT_DOCKER=true \
+    AIENGINE_ENABLED=true \
+    STIRLING_ENGINE_HOME=/opt/stirling-engine \
+    STIRLING_ENGINE_PORT=5001 \
+    STIRLING_ENGINE_WORKERS=2 \
     INSTALL_BOOK_AND_ADVANCED_HTML_OPS=false \
     STIRLING_TEMPFILES_DIRECTORY=/tmp/stirling-pdf \
     TMPDIR=/tmp/stirling-pdf \
diff --git a/docker/embedded/Dockerfile.ultra-lite b/docker/embedded/Dockerfile.ultra-lite
index 68a65dea6a..f1389c1600 100644
--- a/docker/embedded/Dockerfile.ultra-lite
+++ b/docker/embedded/Dockerfile.ultra-lite
@@ -1,11 +1,13 @@
+# syntax=docker/dockerfile:1
+
 # Stirling-PDF Dockerfile - Ultra-lite version with embedded frontend
 # Single JAR contains both frontend and backend with minimal dependencies
 
 # Stage 1: Build application with embedded frontend
-FROM gradle:9.6.1-jdk25@sha256:e8aeffb8197b17151ce24607811f60e91125f0018f7a3b08dc504ba9168a9c4f AS build
+FROM gradle:9.7.1-jdk25@sha256:d868117760a7c92214705f47ed173116a5d13e58d68702f974ff30acd062737e AS build
 
 # Install Node.js and npm for frontend build
-ARG TASK_VERSION=3.49.1
+ARG TASK_VERSION=3.52.0
 RUN apt-get update && apt-get install -y --no-install-recommends \
     curl \
     && curl -fsSL https://deb.nodesource.com/setup_22.x | bash - \
@@ -36,7 +38,8 @@ ENV JDK_JAVA_OPTIONS="--add-exports=jdk.compiler/com.sun.tools.javac.api=ALL-UNN
   --add-exports=jdk.compiler/com.sun.tools.javac.tree=ALL-UNNAMED \
   --add-exports=jdk.compiler/com.sun.tools.javac.util=ALL-UNNAMED"
 
-RUN ./gradlew dependencies --no-daemon || true
+RUN --mount=type=cache,id=stirling-pdf-gradle-cache,target=/home/gradle/.gradle,sharing=locked \
+    ./gradlew dependencies --no-daemon || true
 
 # Copy entire project
 COPY . .
@@ -46,7 +49,9 @@ COPY . .
 ARG BUILD_PORTAL=false
 # Bundle only the JPDFium native for this image's target arch.
 ARG TARGETARCH
-RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo linux-x64)" && \
+RUN --mount=type=cache,id=stirling-pdf-npm-cache,target=/root/.npm,sharing=locked \
+    --mount=type=cache,id=stirling-pdf-gradle-cache,target=/home/gradle/.gradle,sharing=locked \
+    JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo linux-x64)" && \
     DISABLE_ADDITIONAL_FEATURES=true \
     ./gradlew clean build \
       -PbuildWithFrontend=true \
@@ -57,7 +62,7 @@ RUN JPDFIUM_PLATFORM="$([ "$TARGETARCH" = arm64 ] && echo linux-arm64 || echo li
 
 # Stage 2: Runtime image
 # glibc base (not Alpine/musl): JPDFium's PDFium natives are glibc-linked.
-FROM eclipse-temurin:25-jre-noble@sha256:2f1da100788559b397bcf48c736169ea5b070bde84e55f203bbee8e83d87a175
+FROM eclipse-temurin:25-jre-noble@sha256:fbcf915c585659b30eb766ada4d6d7cfc9ec1040bf521e95bf61b10a25af73db
 
 ENV DEBIAN_FRONTEND=noninteractive \
     LANG=C.UTF-8 \
diff --git a/docker/unoserver/Dockerfile b/docker/unoserver/Dockerfile
index 5bd887c8ed..da5ba27371 100644
--- a/docker/unoserver/Dockerfile
+++ b/docker/unoserver/Dockerfile
@@ -1,9 +1,9 @@
 # Standalone unoserver image for Stirling-PDF remote UNO mode.
-# Pinned to unoserver 3.6 to match Stirling-PDF's client (avoids 3.4/3.6 wire mismatch).
+# Pinned to unoserver 3.7 to match Stirling-PDF's client (avoids wire mismatch).
 
 FROM ubuntu:noble@sha256:561618e2c15bf2397621dd04f96926663a3b5616c189cf7e38db7e82f5c538ea
 
-ARG UNOSERVER_VERSION=3.6
+ARG UNOSERVER_VERSION=3.7
 # ~120 MB of CJK fonts — opt-in.
 ARG INSTALL_CJK_FONTS=false
 
diff --git a/engine/Dockerfile b/engine/Dockerfile
index d9bde0f89d..575fa82eff 100644
--- a/engine/Dockerfile
+++ b/engine/Dockerfile
@@ -1,35 +1,43 @@
 # syntax=docker/dockerfile:1.5
-FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca
 
-ARG TASK_VERSION=3.49.1
-RUN apt-get update \
-    && apt-get install -y --no-install-recommends curl ca-certificates \
-    && ARCH=$(dpkg --print-architecture) \
-    && curl -fsSL "https://github.com/go-task/task/releases/download/v${TASK_VERSION}/task_${TASK_VERSION}_linux_${ARCH}.deb" -o /tmp/task.deb \
-    && dpkg -i /tmp/task.deb \
-    && rm /tmp/task.deb \
-    && rm -rf /var/lib/apt/lists/*
+# uv resolves the venv here so its ~52MB binary stays out of the runtime image.
+FROM ghcr.io/astral-sh/uv:python3.13-bookworm-slim@sha256:531f855bda2c73cd6ef67d56b733b357cea384185b3022bd09f05e002cd144ca AS builder
 
-# Source under /app/engine/ to match root Taskfile's `includes.engine.dir: engine`.
 WORKDIR /app/engine
-COPY engine/pyproject.toml engine/uv.lock engine/.env ./
-COPY engine/scripts/ ./scripts/
+COPY engine/pyproject.toml engine/uv.lock ./
 RUN --mount=type=cache,target=/root/.cache/uv \
-    uv sync --frozen --no-dev --group engine
+    uv sync --frozen --no-dev --no-install-project --group engine
 
-COPY engine/src/ ./src/
-WORKDIR /app
-COPY Taskfile.yml ./
-COPY .taskfiles/ ./.taskfiles/
+FROM python:3.13-slim-bookworm@sha256:00faa2debb87529f9f0764e9491d8ba400a3678976616c3bd7cb193745ac20d1 AS runtime
+
+# Created before the COPYs so they land owned; a later chown -R duplicates the venv layer.
+RUN set -eux; \
+    groupadd --system --gid 1000 stirling; \
+    useradd --system --uid 1000 --gid 1000 --home /app/engine stirling; \
+    mkdir -p /app/engine/data; \
+    chown stirling:stirling /app/engine /app/engine/data
+
+WORKDIR /app/engine
+COPY --from=builder --chown=stirling:stirling /app/engine/.venv ./.venv
+# settings.py resolves ENGINE_ROOT to /app/engine, so .env must sit here.
+COPY --chown=stirling:stirling engine/.env ./
+COPY --chown=stirling:stirling engine/src/ ./src/
 
 ENV PATH="/app/engine/.venv/bin:$PATH"
 ENV PYTHONUNBUFFERED=1
 ENV STIRLING_ENGINE_WORKERS=4
-# Container runs on a fixed port; skip the host-only free-port probe (its script
-# is not shipped in the image). engine:run honours these.
-ENV ENGINE_PORT_PROBE=false
 ENV STIRLING_ENGINE_PORT=5001
+# Fail closed: without a secret the document routes trust caller-supplied X-User-Id.
+# Set STIRLING_ENGINE_SHARED_SECRET (the backend sends it as X-Engine-Auth), or false to opt out.
+ENV STIRLING_ENGINE_REQUIRE_AUTH=true
+
+# `stirling` resolves from the working directory.
+WORKDIR /app/engine/src
+USER stirling
 
 EXPOSE 5001
 
-CMD ["task", "engine:run"]
+HEALTHCHECK --interval=30s --timeout=5s --start-period=40s --retries=3 \
+  CMD ["python", "-c", "import os,sys,urllib.request; sys.exit(0 if urllib.request.urlopen('http://127.0.0.1:%s/health' % os.environ.get('STIRLING_ENGINE_PORT','5001'), timeout=4).status==200 else 1)"]
+
+CMD ["sh", "-c", "exec uvicorn stirling.api.app:app --host 0.0.0.0 --port ${STIRLING_ENGINE_PORT:-5001} --workers ${STIRLING_ENGINE_WORKERS:-4}"]
diff --git a/engine/pyproject.toml b/engine/pyproject.toml
index 3f2c277fbb..23c3bc078c 100644
--- a/engine/pyproject.toml
+++ b/engine/pyproject.toml
@@ -16,12 +16,13 @@ engine = [
     "psycopg[binary,pool]>=3.3.4",
     "pydantic>=2.13.4",
     # <2 cap: 1.99.0 patches CVE-2026-46678; 2.0 is an untested major migration.
-    "pydantic-ai>=1.107.2,<2.0.0",
-    "pydantic-ai-slim[voyageai]>=1.107.2,<2.0.0",
+    # Explicit extras: the `pydantic-ai` meta-package pulls all 20 providers (~230MB).
+    # No `voyageai` extra either; stirling.documents.voyage speaks its API directly.
+    "pydantic-ai-slim[anthropic,openai]>=1.107.2,<2.0.0",
     "pydantic-settings>=2.15.0",
     "python-dotenv>=1.2.2",
     "sqlite-vec>=0.1.9",
-    "uvicorn>=0.52.1",
+    "uvicorn>=0.52.3",
 ]
 # Type checking, testing, model generation, and formatting tools for the engine.
 engine-dev = [
@@ -49,7 +50,7 @@ tools = [
     "deep-translator>=1.11.4",
     "defusedxml>=0.7.1",
     "fonttools>=4.63.0",
-    "fpdf2>=2.8.7",
+    "fpdf2>=2.8.8",
     "openai>=2.53.0",
     "requests>=2.34.2",
     "tomli-w>=1.2.0",
@@ -64,7 +65,7 @@ updater-signatures = [
 ]
 # Pinned repository-wide pre-commit tooling.
 pre-commit = [
-    "codespell==2.4.2",
+    "codespell==2.4.3",
     "ruff==0.15.5",
     "tomli-w==1.2.0",
 ]
diff --git a/engine/scripts/generate_tool_models.py b/engine/scripts/generate_tool_models.py
index 7587d8c62f..c3cd9e7267 100644
--- a/engine/scripts/generate_tool_models.py
+++ b/engine/scripts/generate_tool_models.py
@@ -149,6 +149,9 @@ class ToolDiscovery:
         "/api/v1/misc/add-image",
         "/api/v1/misc/add-attachments",
         "/api/v1/general/overlay-pdfs",
+        # 5. Server maintenance, not a document operation: releases finished jobs and
+        #    their stored files. Nothing an edit agent should ever call on its own.
+        "/api/v1/general/jobs/cleanup",
     )
 
     def _is_excluded(self, path: str) -> bool:
diff --git a/engine/src/stirling/documents/README.md b/engine/src/stirling/documents/README.md
index 6848d8a101..f73341f8b6 100644
--- a/engine/src/stirling/documents/README.md
+++ b/engine/src/stirling/documents/README.md
@@ -70,6 +70,19 @@ Provider credentials (and any local overrides) go in the uncommitted
 VOYAGE_API_KEY=your-key
 ```
 
+### Embedding providers
+
+`STIRLING_RAG_EMBEDDING_MODEL` is a `provider:model` string. Any OpenAI-compatible
+`/v1/embeddings` endpoint (vLLM, Ollama, TEI, llama.cpp) works by pointing a base URL
+at it. Note `OPENAI_BASE_URL` is global and also redirects chat completions; push
+`provider`/`api_key`/`base_url` through admin AI settings to move embeddings only.
+Ollama reads `OLLAMA_BASE_URL`, and omitting it fails the first embed call, not startup.
+
+```
+STIRLING_RAG_EMBEDDING_MODEL=ollama:nomic-embed-text
+OLLAMA_BASE_URL=http://ollama:11434/v1
+```
+
 ## Backends
 
 **`sqlite`** - Embedded sqlite-vec. Single `.db` file, zero ops. Ideal for dev
diff --git a/engine/src/stirling/documents/embedder.py b/engine/src/stirling/documents/embedder.py
index c92a448149..4ab0508a74 100644
--- a/engine/src/stirling/documents/embedder.py
+++ b/engine/src/stirling/documents/embedder.py
@@ -6,6 +6,7 @@ from pydantic_ai.providers.openai import OpenAIProvider
 
 from stirling.documents.chunker import chunk_text
 from stirling.documents.store import Document
+from stirling.documents.voyage import build_voyage_model
 
 # Keep each upstream embed request under every major provider's per-call limit while
 # still batching large enough that a book-sized document ingests in a reasonable number
@@ -14,6 +15,9 @@ from stirling.documents.store import Document
 DEFAULT_EMBED_BATCH_SIZE = 256
 
 
+VOYAGE_PROVIDER = "voyageai"
+
+
 def _build_embedder(
     model_name: str,
     *,
@@ -23,11 +27,17 @@ def _build_embedder(
 ) -> Embedder:
     """Construct an :class:`Embedder`; explicit provider/api_key/base_url is the config-push path, else env form."""
     if not provider and not api_key and not base_url:
+        # Env form is a "provider:model" string; Voyage needs the SDK-free adapter.
+        env_provider, sep, env_model = model_name.partition(":")
+        if sep and env_provider.lower() == VOYAGE_PROVIDER:
+            return Embedder(build_voyage_model(env_model))
         return Embedder(model_name)
 
     provider_name = (provider or "").lower()
     key = api_key or None
-    if provider_name in ("voyageai", "openai"):
+    if provider_name == VOYAGE_PROVIDER:
+        return Embedder(build_voyage_model(model_name, api_key=key, base_url=base_url or None))
+    if provider_name == "openai":
         return Embedder(f"{provider_name}:{model_name}")
     if provider_name in ("ollama", "custom"):
         openai_provider = OpenAIProvider(base_url=base_url or None, api_key=key or "ollama")
diff --git a/engine/src/stirling/documents/sqlite_vec_store.py b/engine/src/stirling/documents/sqlite_vec_store.py
index 5f909a4bcd..4f5bac7005 100644
--- a/engine/src/stirling/documents/sqlite_vec_store.py
+++ b/engine/src/stirling/documents/sqlite_vec_store.py
@@ -2,9 +2,11 @@ from __future__ import annotations
 
 import asyncio
 import json
+import logging
 import math
 import re
 import sqlite3
+import time
 from datetime import UTC, datetime
 from pathlib import Path
 
@@ -19,11 +21,31 @@ _READ_PERMISSION = "read"
 # write lock. With multiple worker processes opening the same file, they collide on
 # startup schema-init and get "database is locked". Wait for the lock instead.
 _BUSY_TIMEOUT_MS = 5000
+# journal_mode answers SQLITE_BUSY without consulting the busy handler, so it needs its own retry.
+_WAL_SWITCH_ATTEMPTS = 10
+_WAL_RETRY_DELAY_S = 0.1
 # sqlite stores TIMESTAMP as TEXT. We normalise to UTC ISO 8601 ``YYYY-MM-DD HH:MM:SS``
 # so lexicographic comparison against ``datetime('now')`` matches chronological order.
 _SQLITE_DATETIME_FMT = "%Y-%m-%d %H:%M:%S"
 
 
+logger = logging.getLogger(__name__)
+
+
+def _enable_wal(conn: sqlite3.Connection) -> None:
+    """Switch the connection to WAL, tolerating workers racing to do the same."""
+    for _ in range(_WAL_SWITCH_ATTEMPTS):
+        try:
+            conn.execute("PRAGMA journal_mode=WAL")
+            return
+        except sqlite3.OperationalError:
+            row = conn.execute("PRAGMA journal_mode").fetchone()
+            if row is not None and str(row[0]).lower() == "wal":
+                return  # another worker won the race and already switched it
+            time.sleep(_WAL_RETRY_DELAY_S)
+    logger.warning("Could not switch the document store to WAL; continuing on the default journal mode.")
+
+
 def _to_sqlite_utc(dt: datetime | None) -> str | None:
     if dt is None:
         return None
@@ -58,7 +80,7 @@ class SqliteVecStore(DocumentStore):
         if self._db_path is not None:
             # Set before the WAL switch below: that pragma also takes the lock.
             conn.execute(f"PRAGMA busy_timeout={_BUSY_TIMEOUT_MS}")
-            conn.execute("PRAGMA journal_mode=WAL")
+            _enable_wal(conn)
 
         self._conn = conn
         self._lock = asyncio.Lock()
diff --git a/engine/src/stirling/documents/voyage.py b/engine/src/stirling/documents/voyage.py
new file mode 100644
index 0000000000..e308f32ec9
--- /dev/null
+++ b/engine/src/stirling/documents/voyage.py
@@ -0,0 +1,57 @@
+"""VoyageAI embeddings over its OpenAI-shaped REST API.
+
+The `voyageai` SDK pulls PIL, numpy, tokenizers and langchain at import for multimodal,
+chunking and local-inference features the engine never uses (~207MB).
+"""
+
+from __future__ import annotations
+
+import os
+from collections.abc import Sequence
+
+from pydantic_ai.embeddings import EmbeddingResult, EmbeddingSettings
+from pydantic_ai.embeddings.openai import OpenAIEmbeddingModel
+from pydantic_ai.embeddings.result import EmbedInputType
+from pydantic_ai.providers.openai import OpenAIProvider
+
+VOYAGE_BASE_URL = "https://api.voyageai.com/v1"
+VOYAGE_API_KEY_ENV = "VOYAGE_API_KEY"
+
+# Keeps a keyless engine bootable, and stops the client falling back to OPENAI_API_KEY.
+_MISSING_API_KEY = "stirling-voyage-api-key-not-configured"
+
+
+class VoyageEmbeddingModel(OpenAIEmbeddingModel):
+    """Voyage embeddings spoken over the OpenAI wire format."""
+
+    async def embed(
+        self,
+        inputs: str | Sequence[str],
+        *,
+        input_type: EmbedInputType,
+        settings: EmbeddingSettings | None = None,
+    ) -> EmbeddingResult:
+        """Embed `inputs`, forwarding Voyage's `input_type` that the OpenAI model drops."""
+        if self._client.api_key == _MISSING_API_KEY:
+            raise ValueError(
+                f"VoyageAI embeddings need an API key: set {VOYAGE_API_KEY_ENV} or push one via admin AI settings."
+            )
+        merged: EmbeddingSettings = {**(settings or {})}
+        # extra_body is declared `object`, so narrow rather than assume a mapping.
+        current = merged.get("extra_body")
+        extra_body: dict[str, object] = dict(current) if isinstance(current, dict) else {}
+        extra_body.setdefault("input_type", input_type)
+        merged["extra_body"] = extra_body
+        return await super().embed(inputs, input_type=input_type, settings=merged)
+
+
+def build_voyage_model(
+    model_name: str,
+    *,
+    api_key: str | None = None,
+    base_url: str | None = None,
+) -> VoyageEmbeddingModel:
+    """Build a Voyage embedding model; a missing key only fails once an embed is attempted."""
+    key = api_key or os.environ.get(VOYAGE_API_KEY_ENV) or _MISSING_API_KEY
+    provider = OpenAIProvider(base_url=base_url or VOYAGE_BASE_URL, api_key=key)
+    return VoyageEmbeddingModel(model_name, provider=provider)
diff --git a/engine/src/stirling/models/tool_io.py b/engine/src/stirling/models/tool_io.py
index da0cd5b9ae..c9da9cce90 100644
--- a/engine/src/stirling/models/tool_io.py
+++ b/engine/src/stirling/models/tool_io.py
@@ -126,6 +126,7 @@ TOOL_IO: dict[ToolEndpoint, ToolIOSpec] = {
             )
         ],
     ),
+    ToolEndpoint.PDF_TO_UA: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
     ToolEndpoint.PDF_TO_VECTOR: ToolIOSpec(
         accepts=[ToolFormat.PDF],
         produces=ToolFormat.IMAGE,
@@ -246,6 +247,9 @@ TOOL_IO: dict[ToolEndpoint, ToolIOSpec] = {
     ToolEndpoint.SCANNER_EFFECT: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
     ToolEndpoint.UNLOCK_PDF_FORMS: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
     ToolEndpoint.UPDATE_METADATA: ToolIOSpec(accepts=[ToolFormat.PDF], produces=ToolFormat.PDF, arity=ToolArity.SISO),
+    ToolEndpoint.ACCESSIBILITY_REPORT: ToolIOSpec(
+        accepts=[ToolFormat.PDF], produces=ToolFormat.JSON, arity=ToolArity.SISO
+    ),
     ToolEndpoint.ADD_PASSWORD: ToolIOSpec(
         accepts=[ToolFormat.PDF],
         produces=ToolFormat.PDF_ENCRYPTED,
diff --git a/engine/src/stirling/models/tool_models.py b/engine/src/stirling/models/tool_models.py
index 712e3575af..6650942b6f 100644
--- a/engine/src/stirling/models/tool_models.py
+++ b/engine/src/stirling/models/tool_models.py
@@ -11,6 +11,19 @@ from pydantic import Field, RootModel, SecretStr
 from stirling.models.base import ApiModel
 
 
+class Profile(StrEnum):
+    """
+    Profile to check against
+    """
+
+    ua1 = "ua1"
+    ua2 = "ua2"
+
+
+class AccessibilityReportParams(ApiModel):
+    profile: Profile = Field(Profile.ua1, description="Profile to check against")
+
+
 class AddCommentsParams(ApiModel):
     comments: str = Field(
         ...,
@@ -843,11 +856,18 @@ class OutputFormat1(StrEnum):
     pdfa_2b = "pdfa-2b"
     pdfa_3 = "pdfa-3"
     pdfa_3b = "pdfa-3b"
+    pdfa_1a = "pdfa-1a"
+    pdfa_2a = "pdfa-2a"
+    pdfa_3a = "pdfa-3a"
     pdfx = "pdfx"
 
 
 class PdfToPdfaParams(ApiModel):
     output_format: OutputFormat1 = Field(..., description="The output format type (PDF/A or PDF/X)")
+    pdf_ua: bool = Field(
+        False,
+        description="Also declare PDF/UA accessibility alongside PDF/A. Only applies to the level A formats, and the claim is written only if it validates.",
+    )
     strict: bool | None = Field(
         None, description="If true, the conversion will fail if the output is not perfectly compliant"
     )
@@ -886,6 +906,65 @@ class PdfToTextParams(ApiModel):
     output_format: OutputFormat3 = Field(..., description="The output Text or RTF format")
 
 
+class ExistingTags(StrEnum):
+    """
+    What to do with an existing structure tree: keep it, rebuild it, or decide automatically
+    """
+
+    auto = "auto"
+    keep = "keep"
+    rebuild = "rebuild"
+
+
+class FigurePolicy(StrEnum):
+    """
+    How to treat images with no description. require-alt leaves them undescribed so the report asks for input; mark-decorative treats every image as decoration.
+    """
+
+    require_alt = "require-alt"
+    mark_decorative = "mark-decorative"
+
+
+class Profile1(StrEnum):
+    """
+    PDF/UA conformance level to target
+    """
+
+    ua1 = "ua1"
+    ua2 = "ua2"
+
+
+class PdfToUaParams(ApiModel):
+    alt_text: str | None = Field(
+        None,
+        description='Alternative descriptions for figures, as key=text pairs separated by newlines. Keys come from the accessibility-report endpoint\'s figuresNeedingDescription list, for example "0:12=Bar chart of quarterly revenue". Descriptions are never invented, so without these an illustrated document cannot claim conformance.',
+    )
+    embed_fonts: bool = Field(
+        True,
+        description="Embed fonts the document references but does not carry. Required for conformance and needs Ghostscript.",
+    )
+    existing_tags: ExistingTags = Field(
+        ExistingTags.auto,
+        description="What to do with an existing structure tree: keep it, rebuild it, or decide automatically",
+    )
+    figure_policy: FigurePolicy = Field(
+        FigurePolicy.require_alt,
+        description="How to treat images with no description. require-alt leaves them undescribed so the report asks for input; mark-decorative treats every image as decoration.",
+    )
+    language: str = Field(
+        "en-GB",
+        description="Document language as a BCP-47 tag, for example en-GB. Applied only when the document does not already declare one, unless overrideLanguage is set.",
+    )
+    override_language: bool = Field(
+        False,
+        description="Replace the language the document already declares. Off by default, so a document is never relabelled into a language it is not written in.",
+    )
+    profile: Profile1 = Field(Profile1.ua1, description="PDF/UA conformance level to target")
+    title: str | None = Field(
+        None, description="Document title, required by PDF/UA. Falls back to the first heading, then the filename."
+    )
+
+
 class OutputFormat4(StrEnum):
     """
     Target vector format extension
@@ -1451,6 +1530,7 @@ class Model(
         | PdfToPdfaParams
         | PdfToPresentationParams
         | PdfToTextParams
+        | PdfToUaParams
         | PdfToVectorParams
         | PdfToWordParams
         | PdfToXlsxParams
@@ -1495,6 +1575,7 @@ class Model(
         | ScannerEffectParams
         | UnlockPdfFormsParams
         | UpdateMetadataParams
+        | AccessibilityReportParams
         | AddPasswordParams
         | AddWatermarkParams
         | AutoRedactParams
@@ -1525,6 +1606,7 @@ class Model(
         | PdfToPdfaParams
         | PdfToPresentationParams
         | PdfToTextParams
+        | PdfToUaParams
         | PdfToVectorParams
         | PdfToWordParams
         | PdfToXlsxParams
@@ -1569,6 +1651,7 @@ class Model(
         | ScannerEffectParams
         | UnlockPdfFormsParams
         | UpdateMetadataParams
+        | AccessibilityReportParams
         | AddPasswordParams
         | AddWatermarkParams
         | AutoRedactParams
@@ -1600,6 +1683,7 @@ type ParamToolModel = (
     | PdfToPdfaParams
     | PdfToPresentationParams
     | PdfToTextParams
+    | PdfToUaParams
     | PdfToVectorParams
     | PdfToWordParams
     | PdfToXlsxParams
@@ -1644,6 +1728,7 @@ type ParamToolModel = (
     | ScannerEffectParams
     | UnlockPdfFormsParams
     | UpdateMetadataParams
+    | AccessibilityReportParams
     | AddPasswordParams
     | AddWatermarkParams
     | AutoRedactParams
@@ -1676,6 +1761,7 @@ class ToolEndpoint(StrEnum):
     PDF_TO_PDFA = "/api/v1/convert/pdf/pdfa"
     PDF_TO_PRESENTATION = "/api/v1/convert/pdf/presentation"
     PDF_TO_TEXT = "/api/v1/convert/pdf/text"
+    PDF_TO_UA = "/api/v1/convert/pdf/ua"
     PDF_TO_VECTOR = "/api/v1/convert/pdf/vector"
     PDF_TO_WORD = "/api/v1/convert/pdf/word"
     PDF_TO_XLSX = "/api/v1/convert/pdf/xlsx"
@@ -1720,6 +1806,7 @@ class ToolEndpoint(StrEnum):
     SCANNER_EFFECT = "/api/v1/misc/scanner-effect"
     UNLOCK_PDF_FORMS = "/api/v1/misc/unlock-pdf-forms"
     UPDATE_METADATA = "/api/v1/misc/update-metadata"
+    ACCESSIBILITY_REPORT = "/api/v1/security/accessibility-report"
     ADD_PASSWORD = "/api/v1/security/add-password"
     ADD_WATERMARK = "/api/v1/security/add-watermark"
     AUTO_REDACT = "/api/v1/security/auto-redact"
@@ -1750,6 +1837,7 @@ OPERATIONS: dict[ToolEndpoint, ParamToolModelType] = {
     ToolEndpoint.PDF_TO_PDFA: PdfToPdfaParams,
     ToolEndpoint.PDF_TO_PRESENTATION: PdfToPresentationParams,
     ToolEndpoint.PDF_TO_TEXT: PdfToTextParams,
+    ToolEndpoint.PDF_TO_UA: PdfToUaParams,
     ToolEndpoint.PDF_TO_VECTOR: PdfToVectorParams,
     ToolEndpoint.PDF_TO_WORD: PdfToWordParams,
     ToolEndpoint.PDF_TO_XLSX: PdfToXlsxParams,
@@ -1794,6 +1882,7 @@ OPERATIONS: dict[ToolEndpoint, ParamToolModelType] = {
     ToolEndpoint.SCANNER_EFFECT: ScannerEffectParams,
     ToolEndpoint.UNLOCK_PDF_FORMS: UnlockPdfFormsParams,
     ToolEndpoint.UPDATE_METADATA: UpdateMetadataParams,
+    ToolEndpoint.ACCESSIBILITY_REPORT: AccessibilityReportParams,
     ToolEndpoint.ADD_PASSWORD: AddPasswordParams,
     ToolEndpoint.ADD_WATERMARK: AddWatermarkParams,
     ToolEndpoint.AUTO_REDACT: AutoRedactParams,
diff --git a/engine/tests/test_documents.py b/engine/tests/test_documents.py
index 7da5c34804..bee93a134e 100644
--- a/engine/tests/test_documents.py
+++ b/engine/tests/test_documents.py
@@ -1,5 +1,7 @@
 from __future__ import annotations
 
+from pathlib import Path
+
 import pytest
 
 from stirling.contracts import PageText
@@ -647,3 +649,19 @@ def _dummy_tool_def() -> object:
     """Sentinel passed to ``_prepare_search_knowledge``. The callback only inspects
     ``_search_count``; it doesn't read anything off the tool_def or context."""
     return object()
+
+
+# concurrent store startup
+
+
+def test_many_stores_open_the_same_file_without_locking_out(tmp_path: Path) -> None:
+    """Workers all construct a store against one file on boot; the WAL switch races."""
+    import concurrent.futures
+
+    db_path = tmp_path / "rag.db"
+    with concurrent.futures.ThreadPoolExecutor(max_workers=8) as pool:
+        stores = list(pool.map(lambda _: SqliteVecStore(db_path), range(8)))
+
+    assert len(stores) == 8
+    mode = stores[0]._conn.execute("PRAGMA journal_mode").fetchone()[0]
+    assert str(mode).lower() == "wal"
diff --git a/engine/tests/test_voyage_embeddings.py b/engine/tests/test_voyage_embeddings.py
new file mode 100644
index 0000000000..85e267bc73
--- /dev/null
+++ b/engine/tests/test_voyage_embeddings.py
@@ -0,0 +1,205 @@
+from __future__ import annotations
+
+import json
+import math
+import os
+from collections.abc import Sequence
+from dataclasses import dataclass
+from typing import Any
+
+import httpx
+import pytest
+from pydantic_ai import Embedder
+from pydantic_ai.providers.openai import OpenAIProvider
+
+from stirling.documents.embedder import _build_embedder
+from stirling.documents.voyage import VOYAGE_BASE_URL, VoyageEmbeddingModel, build_voyage_model
+
+# Voyage's documented response body: OpenAI's shape, minus prompt_tokens.
+VOYAGE_RESPONSE = {
+    "object": "list",
+    "data": [
+        {"object": "embedding", "embedding": [0.1, 0.2, 0.3], "index": 0},
+        {"object": "embedding", "embedding": [0.4, 0.5, 0.6], "index": 1},
+    ],
+    "model": "voyage-4",
+    "usage": {"total_tokens": 7},
+}
+
+
+@dataclass
+class SentRequest:
+    url: str
+    auth: str | None
+    body: dict[str, Any]
+
+
+def _recording_model(sent: list[SentRequest]) -> VoyageEmbeddingModel:
+
+    def handler(request: httpx.Request) -> httpx.Response:
+        sent.append(
+            SentRequest(
+                url=str(request.url),
+                auth=request.headers.get("authorization"),
+                body=json.loads(request.content),
+            )
+        )
+        return httpx.Response(200, json=VOYAGE_RESPONSE)
+
+    client = httpx.AsyncClient(transport=httpx.MockTransport(handler))
+    provider = OpenAIProvider(base_url=VOYAGE_BASE_URL, api_key="pa-test-key", http_client=client)
+    return VoyageEmbeddingModel("voyage-4", provider=provider)
+
+
+@pytest.mark.anyio
+async def test_posts_to_voyage_embeddings_endpoint_with_bearer_auth() -> None:
+    sent: list[SentRequest] = []
+    await Embedder(_recording_model(sent)).embed_documents(["alpha", "beta"])
+
+    assert sent[0].url == f"{VOYAGE_BASE_URL}/embeddings"
+    assert sent[0].auth == "Bearer pa-test-key"
+    assert sent[0].body["model"] == "voyage-4"
+    assert sent[0].body["input"] == ["alpha", "beta"]
+
+
+@pytest.mark.anyio
+@pytest.mark.parametrize(
+    ("call", "expected"),
+    [("embed_query", "query"), ("embed_documents", "document")],
+)
+async def test_forwards_voyage_input_type(call: str, expected: str) -> None:
+    """The stock OpenAI model drops this field; Voyage needs it."""
+    sent: list[SentRequest] = []
+    embedder = Embedder(_recording_model(sent))
+    await getattr(embedder, call)(["text"])
+
+    assert sent[0].body["input_type"] == expected
+
+
+@pytest.mark.anyio
+async def test_caller_settings_win_over_the_default_input_type() -> None:
+    sent: list[SentRequest] = []
+    await Embedder(_recording_model(sent)).embed_documents(
+        ["text"], settings={"extra_body": {"input_type": "query", "output_dimension": 512}}
+    )
+
+    assert sent[0].body["input_type"] == "query"
+    assert sent[0].body["output_dimension"] == 512
+
+
+@pytest.mark.anyio
+async def test_parses_voyage_response_into_embeddings() -> None:
+    result = await Embedder(_recording_model([])).embed_documents(["alpha", "beta"])
+
+    assert result.embeddings == [[0.1, 0.2, 0.3], [0.4, 0.5, 0.6]]
+
+
+def test_build_voyage_model_reads_the_api_key_from_the_environment(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setenv("VOYAGE_API_KEY", "pa-env-key")
+
+    assert build_voyage_model("voyage-4").model_name == "voyage-4"
+
+
+def test_build_voyage_model_without_a_key_still_constructs(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.delenv("VOYAGE_API_KEY", raising=False)
+
+    assert build_voyage_model("voyage-4").model_name == "voyage-4"
+
+
+@pytest.mark.anyio
+async def test_embedding_without_a_key_fails_with_a_clear_error(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.delenv("VOYAGE_API_KEY", raising=False)
+    model = build_voyage_model("voyage-4")
+
+    with pytest.raises(ValueError, match="VoyageAI embeddings need an API key"):
+        await Embedder(model).embed_documents(["text"])
+
+
+@pytest.mark.anyio
+async def test_an_openai_key_is_never_sent_to_voyage(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.delenv("VOYAGE_API_KEY", raising=False)
+    monkeypatch.setenv("OPENAI_API_KEY", "sk-openai-secret")
+    model = build_voyage_model("voyage-4")
+
+    with pytest.raises(ValueError, match="VoyageAI embeddings need an API key"):
+        await Embedder(model).embed_documents(["text"])
+
+
+def test_env_form_routes_voyageai_through_the_adapter(monkeypatch: pytest.MonkeyPatch) -> None:
+    monkeypatch.setenv("VOYAGE_API_KEY", "pa-env-key")
+
+    embedder = _build_embedder("voyageai:voyage-4")
+
+    assert isinstance(embedder.model, VoyageEmbeddingModel)
+    assert embedder.model.model_name == "voyage-4"
+
+
+def test_config_push_form_routes_voyageai_through_the_adapter() -> None:
+    embedder = _build_embedder("voyage-4", provider="voyageai", api_key="pa-pushed-key")
+
+    assert isinstance(embedder.model, VoyageEmbeddingModel)
+
+
+def test_the_voyageai_sdk_is_not_installed() -> None:
+    """Guards the ~207MB the SDK would add back."""
+    with pytest.raises(ImportError):
+        __import__("voyageai")
+
+
+# Live checks, skipped unless VOYAGE_API_KEY is set so CI stays offline.
+live_only = pytest.mark.skipif(
+    not os.environ.get("VOYAGE_API_KEY"),
+    reason="set VOYAGE_API_KEY to run the live VoyageAI checks",
+)
+
+
+def _cosine(a: Sequence[float], b: Sequence[float]) -> float:
+    dot = sum(x * y for x, y in zip(a, b, strict=True))
+    return dot / (math.sqrt(sum(x * x for x in a)) * math.sqrt(sum(y * y for y in b)))
+
+
+@live_only
+@pytest.mark.anyio
+async def test_live_voyage_returns_usable_embeddings() -> None:
+    result = await Embedder(build_voyage_model("voyage-4")).embed_documents(["alpha", "beta"])
+
+    assert len(result.embeddings) == 2
+    assert len(result.embeddings[0]) == 1024
+
+
+@live_only
+@pytest.mark.anyio
+async def test_live_voyage_honours_input_type_server_side() -> None:
+    """Voyage embeds the same text differently per input_type."""
+    embedder = Embedder(build_voyage_model("voyage-4"))
+    text = "How do I combine two PDFs?"
+
+    as_query = await embedder.embed_query(text)
+    as_document = await embedder.embed_documents([text])
+
+    assert _cosine(as_query.embeddings[0], as_document.embeddings[0]) < 0.999
+
+
+@live_only
+@pytest.mark.anyio
+async def test_live_voyage_ranks_the_relevant_document_first() -> None:
+    embedder = Embedder(build_voyage_model("voyage-4"))
+    docs = await embedder.embed_documents(
+        ["Stirling PDF merges and splits PDF files.", "The capital of France is Paris."]
+    )
+    query = await embedder.embed_query("How do I combine two PDFs?")
+
+    relevant = _cosine(query.embeddings[0], docs.embeddings[0])
+    irrelevant = _cosine(query.embeddings[0], docs.embeddings[1])
+    assert relevant > irrelevant
+
+
+@live_only
+@pytest.mark.anyio
+async def test_live_voyage_accepts_voyage_only_parameters() -> None:
+    """output_dimension has no OpenAI equivalent, so this proves extra_body lands."""
+    result = await Embedder(build_voyage_model("voyage-4")).embed_documents(
+        ["dimension test"], settings={"extra_body": {"output_dimension": 256}}
+    )
+
+    assert len(result.embeddings[0]) == 256
diff --git a/engine/uv.lock b/engine/uv.lock
index 0b25716add..a3286b100d 100644
--- a/engine/uv.lock
+++ b/engine/uv.lock
@@ -2,100 +2,6 @@ version = 1
 revision = 3
 requires-python = "==3.13.*"
 
-[[package]]
-name = "ag-ui-protocol"
-version = "0.1.19"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pydantic" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/a7/10/4ad299267a7d04b89935aa99eef62979758fcf95aee9f8bb5d70c35b1be1/ag_ui_protocol-0.1.19.tar.gz", hash = "sha256:43c27f60d41712dcad0e9e0a203cbdf1c8e248b22417374c5c68321c448af4ea", size = 10720, upload-time = "2026-06-02T17:26:15.627Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/4c/0a/bcad8116eb058e4b4a305e3fc37ebd7efc879deeb86b854f1c5b8b6e97dd/ag_ui_protocol-0.1.19-py3-none-any.whl", hash = "sha256:898843b1410d378824da0c6a776486288b9c5828689d0bf563118868e37f390f", size = 13490, upload-time = "2026-06-02T17:26:16.313Z" },
-]
-
-[[package]]
-name = "aiofile"
-version = "3.12.3"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "caio" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/14/31/edb06aabd8f8f0b56d659f30800795f40b93cba96be946ce179f6931e3a5/aiofile-3.12.3.tar.gz", hash = "sha256:caa6aa746b5e47e2165f7abd741b6415e49cf4d44fddc0f61844612cc3924d41", size = 21600, upload-time = "2026-08-04T22:59:27.171Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/4e/79/6e45e778c4c3cab39e0937b007b720c15f76c50c6453d153282d0fcc3588/aiofile-3.12.3-py3-none-any.whl", hash = "sha256:5c1bcc9e929c50834608e8cc1a4cc1d7503eb60c15a535b779fd39e2f372c017", size = 22122, upload-time = "2026-08-04T22:59:25.838Z" },
-]
-
-[[package]]
-name = "aiohappyeyeballs"
-version = "2.7.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ce/f4/eec0465c2f67b2664688d0240b3212d5196fd89e741df67ddb81f8d35658/aiohappyeyeballs-2.7.1.tar.gz", hash = "sha256:065665c041c42a5938ed220bdcd7230f22527fbec085e1853d2402c8a3615d9d", size = 24757, upload-time = "2026-07-01T17:11:55.501Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/71/43/1947f06babed6b3f1d7f38b0c767f52df66bfb2bc10b468c4a7de9eceff2/aiohappyeyeballs-2.7.1-py3-none-any.whl", hash = "sha256:9243213661e29250eb41368e5daa826fc017156c3b8a11440826b2e3ed376472", size = 15038, upload-time = "2026-07-01T17:11:54.055Z" },
-]
-
-[[package]]
-name = "aiohttp"
-version = "3.14.3"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "aiohappyeyeballs" },
-    { name = "aiosignal" },
-    { name = "attrs" },
-    { name = "frozenlist" },
-    { name = "multidict" },
-    { name = "propcache" },
-    { name = "yarl" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/58/d9/22ce5786ac0c1653ae8b6c23bded02c1686d11f0dbb45b31ce128e0df985/aiohttp-3.14.3.tar.gz", hash = "sha256:9491196535a88924a60afd5b5f434b5b203b6cc616250878dbdb223a8f7844bc", size = 7971213, upload-time = "2026-07-23T01:57:27.037Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/57/be/5afd201cc0ab139029aadb75392efe85a293403d9dd3a3226161c21ce00c/aiohttp-3.14.3-cp313-cp313-android_21_arm64_v8a.whl", hash = "sha256:2e9878ae68e4a5f1c0abe4dd497dbc3d51946f5837b56759e2a02e78fa90ef86", size = 506269, upload-time = "2026-07-23T01:54:49.075Z" },
-    { url = "https://files.pythonhosted.org/packages/22/09/dec8189d62b45ade009f6792a2264b942a90cb88aeaf181239933cd72c3c/aiohttp-3.14.3-cp313-cp313-android_21_x86_64.whl", hash = "sha256:f3d2669fe7dec7fc359ecdb5984b29b50d85d5d00f8c1cb61de4f4a24ee42627", size = 515166, upload-time = "2026-07-23T01:54:51.894Z" },
-    { url = "https://files.pythonhosted.org/packages/28/24/2854869d29ed8a8b19d74f9ec6629515f7e04d02dd329d9d179201e58e47/aiohttp-3.14.3-cp313-cp313-ios_13_0_arm64_iphoneos.whl", hash = "sha256:cc7cb243a68167172f48c1fd43cee91ec4b1d40cefd190edd43369d1a6bc9c82", size = 486263, upload-time = "2026-07-23T01:54:54.223Z" },
-    { url = "https://files.pythonhosted.org/packages/d4/dd/57187c8be2a35aea65eaee3bd2c3dcbbcf0204f5106c89637e3610380cd1/aiohttp-3.14.3-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:78253b573e6ffab5028924fc98bc281aae05445969982a10864bc360dea2016c", size = 492299, upload-time = "2026-07-23T01:54:56.236Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/11/06ae6ed8f0d414edf4068861e233d8fe23ee699bfd4b3ceb8663db948a62/aiohttp-3.14.3-cp313-cp313-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:7041d52c3a7fa20c9e8c182b534704abb19502c8bdcbde7ab23bfda6f642394f", size = 502235, upload-time = "2026-07-23T01:54:58.377Z" },
-    { url = "https://files.pythonhosted.org/packages/7e/a3/559639c34a345d2cf7c52dff6838119f2eaf29eb508227b5b83f573af813/aiohttp-3.14.3-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:ac74facc01463f138b0da5580329cfcc82818dea5656e83ddcd11268fc12ff80", size = 750883, upload-time = "2026-07-23T01:55:00.65Z" },
-    { url = "https://files.pythonhosted.org/packages/91/cd/41e131f13afd1e7b0172a9d9eda085ef90eb8439f41f0d279db81ed3ae60/aiohttp-3.14.3-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:d6218d92e450824e9b4881f44e8c09f1853b490f9a64130801024a4793b1b3b0", size = 508473, upload-time = "2026-07-23T01:55:02.945Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/6b/e7f13410d391c6e55b4c007a8de024355389d7d459e3d64c42b2d33617e5/aiohttp-3.14.3-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:11fb37ef075669eee52ab1928fbf6e1741fada40409fa309ebde9607a962aebf", size = 509190, upload-time = "2026-07-23T01:55:05.173Z" },
-    { url = "https://files.pythonhosted.org/packages/97/21/6464573e53d69672cc1eada3e5c5cb2d2efa82701e8305a0f2047a576967/aiohttp-3.14.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:55bdcc472aafe2de4a253045cc128007a64f1e0264fb675791e132ea5edaa3bd", size = 1761478, upload-time = "2026-07-23T01:55:07.383Z" },
-    { url = "https://files.pythonhosted.org/packages/1a/81/d217043a4c17fbce360905e3b2bdd20139ebc9a2de836d035d179c4da006/aiohttp-3.14.3-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:c39846c3aad97a8530c89d7a3869a8f8e9e3762c6ac0504481e5c80948f7e807", size = 1735092, upload-time = "2026-07-23T01:55:09.803Z" },
-    { url = "https://files.pythonhosted.org/packages/a1/66/e13a02d0eeb1a9a502402a977abb4e4abff9fe4051c26f80558c57a7c975/aiohttp-3.14.3-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:5895ef58c4620afe02fa16044f023dc4dafec08158f9d08874a46a7dbc0341b8", size = 1800546, upload-time = "2026-07-23T01:55:12.012Z" },
-    { url = "https://files.pythonhosted.org/packages/26/5e/57d42fca1d18cb5acc1cad945d017fabc5d6ae71d8a08ad66be8dc3ee544/aiohttp-3.14.3-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:fa9467a8113aa69d3d7c55a70ef0b7c636010a40993f3df9d9d0d73b3eb7ef24", size = 1895250, upload-time = "2026-07-23T01:55:14.357Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/1c/7da8d08e74d56f00070822f9638ff3f1c563f8ad87d1efa996c87bfc8644/aiohttp-3.14.3-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:d7d2deec16eeedf55f2c7cf75b521ea3856a5177e123844f8fd0f114ce252cb5", size = 1789289, upload-time = "2026-07-23T01:55:16.668Z" },
-    { url = "https://files.pythonhosted.org/packages/cd/0f/cf16bcf56896981c1a0319f5d5db9337994b5165730c48a8fa07e9b34be6/aiohttp-3.14.3-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:dd54d0e8717de95939766febac482ac0474d8ac3b048115f9f2b1d23a16e7db4", size = 1586706, upload-time = "2026-07-23T01:55:18.913Z" },
-    { url = "https://files.pythonhosted.org/packages/fe/6f/76eac12a7f2480e1e304f842efdb07db33256b0d9165b866b6ef0806c202/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:df82f3787c940c94986b34222d59c9e38843fba85139f36e85255a82ad5355a9", size = 1724652, upload-time = "2026-07-23T01:55:21.296Z" },
-    { url = "https://files.pythonhosted.org/packages/39/b6/19c8c592baeeb94b75f966547d40c02ac7590902306ec5863d5c027cf506/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:42a67efc36300d052fb4508a53e8b6901b9284b599ae63945c377569c5fcc1e1", size = 1756239, upload-time = "2026-07-23T01:55:23.705Z" },
-    { url = "https://files.pythonhosted.org/packages/dc/c9/4e9383150296f97f873b680c4de8fb2cd88608fb9f48c79edcb111611abc/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:7a75aa63cbf9b21cfaf60dc2657e19df2c2867d91707d653fee171ffeedd1371", size = 1769161, upload-time = "2026-07-23T01:55:26.082Z" },
-    { url = "https://files.pythonhosted.org/packages/aa/1e/147bdc6cc5de5f3ab011be8bf5d6e786633249f22c20bae06f85e45f5387/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:e92eb8acc45eb6a9f4935071a77edf5b85cc6f8dfad5cd99e97653c26593cdde", size = 1578759, upload-time = "2026-07-23T01:55:28.846Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/31/78388a9d6040ece2e11df62ea229a822cf5e52d238374b220ae9975b2623/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:b014a6ed7cf912e787149fdc529166d3ceabac23f26efeea3158c9aba2354e7e", size = 1792025, upload-time = "2026-07-23T01:55:31.457Z" },
-    { url = "https://files.pythonhosted.org/packages/03/51/a3d29fdf2c25d796746af8ad6fe56a45d6256c38b0a8a2ed752e1160b3a2/aiohttp-3.14.3-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:3d4f72af88ac2474bb5bca640030320e3d38a0163a1d7533500e87be458eef71", size = 1768477, upload-time = "2026-07-23T01:55:33.87Z" },
-    { url = "https://files.pythonhosted.org/packages/29/a6/442e18b5afeade534d877a2dc3c3e392aff8d49787890b0cf84790410267/aiohttp-3.14.3-cp313-cp313-win32.whl", hash = "sha256:5f08ec777f35ee70720233b8b9811d3bb5d728137f30ac91b7457709c3261ac0", size = 451069, upload-time = "2026-07-23T01:55:36.121Z" },
-    { url = "https://files.pythonhosted.org/packages/9d/69/3d876ac02659f271cf7f6769f14a8e3de5b6e888ed8b5a7e998086a4cec8/aiohttp-3.14.3-cp313-cp313-win_amd64.whl", hash = "sha256:dff9461ec275f22135650d5ba4b4931a11f3958df7dfbb8db630000d4dee0883", size = 476518, upload-time = "2026-07-23T01:55:38.303Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/0e/50d6e6471cd31edce8b282bdec59375a3a69124d8a989a0b1313355cae52/aiohttp-3.14.3-cp313-cp313-win_arm64.whl", hash = "sha256:ddcac3c6b382e81f1dd0499199d4136b877beb4cb5ef770bbbfba56c4b8f55d2", size = 447676, upload-time = "2026-07-23T01:55:40.451Z" },
-]
-
-[[package]]
-name = "aiolimiter"
-version = "1.2.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f1/23/b52debf471f7a1e42e362d959a3982bdcb4fe13a5d46e63d28868807a79c/aiolimiter-1.2.1.tar.gz", hash = "sha256:e02a37ea1a855d9e832252a105420ad4d15011505512a1a1d814647451b5cca9", size = 7185, upload-time = "2024-12-08T15:31:51.496Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f3/ba/df6e8e1045aebc4778d19b8a3a9bc1808adb1619ba94ca354d9ba17d86c3/aiolimiter-1.2.1-py3-none-any.whl", hash = "sha256:d3f249e9059a20badcb56b61601a83556133655c11d1eb3dd3e04ff069e5f3c7", size = 6711, upload-time = "2024-12-08T15:31:49.874Z" },
-]
-
-[[package]]
-name = "aiosignal"
-version = "1.4.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "frozenlist" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/61/62/06741b579156360248d1ec624842ad0edf697050bbaf7c3e46394e106ad1/aiosignal-1.4.0.tar.gz", hash = "sha256:f47eecd9468083c2029cc99945502cb7708b082c232f9aca65da147157b251c7", size = 25007, upload-time = "2025-07-03T22:54:43.528Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/fb/76/641ae371508676492379f16e2fa48f4e2c11741bd63c48be4b12a6b09cba/aiosignal-1.4.0-py3-none-any.whl", hash = "sha256:053243f8b92b990551949e63930a839ff0cf0b0ebbe0597b0f3fb19e1a0fe82e", size = 7490, upload-time = "2025-07-03T22:54:42.156Z" },
-]
-
 [[package]]
 name = "annotated-doc"
 version = "0.0.5"
@@ -163,19 +69,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/64/b4/17d4b0b2a2dc85a6df63d1157e028ed19f90d4cd97c36717afef2bc2f395/attrs-26.1.0-py3-none-any.whl", hash = "sha256:c647aa4a12dfbad9333ca4e71fe62ddc36f4e63b2d260a37a8b83d2f043ac309", size = 67548, upload-time = "2026-03-19T14:22:23.645Z" },
 ]
 
-[[package]]
-name = "authlib"
-version = "1.7.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "cryptography" },
-    { name = "joserfc" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/36/98/7d93f30d029643c0275dbc0bd6d5a6f670661ee6c9a94d93af7ab4887600/authlib-1.7.2.tar.gz", hash = "sha256:2cea25fefcd4e7173bdf1372c0afc265c8034b23a8cd5dcb6a9164b826c64231", size = 176511, upload-time = "2026-05-06T08:10:23.116Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/fb/95/adcb68e20c34162e9135f370d6e31737719c2b6f94bc953fe7ed1f10fe21/authlib-1.7.2-py2.py3-none-any.whl", hash = "sha256:3e1faedc9d87e7d56a164eca3ccb6ace0d61b94abe83e92242f8dc8bba9b4a9f", size = 259548, upload-time = "2026-05-06T08:10:21.436Z" },
-]
-
 [[package]]
 name = "backoff"
 version = "2.2.1"
@@ -185,15 +78,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/df/73/b6e24bd22e6720ca8ee9a85a0c4a2971af8497d8f3193fa05390cbd46e09/backoff-2.2.1-py3-none-any.whl", hash = "sha256:63579f9a0628e06278f7e47b7d7d5b6ce20dc65c5e96a6f3ca99a6adca0396e8", size = 15148, upload-time = "2022-10-05T19:19:30.546Z" },
 ]
 
-[[package]]
-name = "beartype"
-version = "0.22.9"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/c7/94/1009e248bbfbab11397abca7193bea6626806be9a327d399810d523a07cb/beartype-0.22.9.tar.gz", hash = "sha256:8f82b54aa723a2848a56008d18875f91c1db02c32ef6a62319a002e3e25a975f", size = 1608866, upload-time = "2025-12-13T06:50:30.72Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/71/cc/18245721fa7747065ab478316c7fea7c74777d07f37ae60db2e84f8172e8/beartype-0.22.9-py3-none-any.whl", hash = "sha256:d16c9bbc61ea14637596c5f6fbff2ee99cbe3573e46a716401734ef50c3060c2", size = 1333658, upload-time = "2025-12-13T06:50:28.266Z" },
-]
-
 [[package]]
 name = "beautifulsoup4"
 version = "4.15.0"
@@ -258,34 +142,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/94/51/f975cae76d44274cc2868dc9040ac5d58d464784610234455b4e7b19c6ef/black-26.5.1-py3-none-any.whl", hash = "sha256:4ed7f7da04046d2e488437170797d3b4a4ad83906683bcb7dfc68b673bbce5e2", size = 213693, upload-time = "2026-05-18T16:53:33.964Z" },
 ]
 
-[[package]]
-name = "boto3"
-version = "1.43.67"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "botocore" },
-    { name = "jmespath" },
-    { name = "s3transfer" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/ad/bf/ef5de9b55523bc2141d072fbe6614627088e3e6f97b47850216e99de6a1c/boto3-1.43.67.tar.gz", hash = "sha256:75fe983b70d39cfdc274dc51f9bb02b8a0a104bdad4fa073c1af85a35e707c91", size = 112665, upload-time = "2026-08-07T19:30:20.418Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/77/0f/b41f8968452dc6bf3b83f15f5e9f76a27fd93e246906aeb2e0555f494375/boto3-1.43.67-py3-none-any.whl", hash = "sha256:082cf9df068168cb44028a1703822374c1eb7e48fa49470d7e8a76f0c977d0bc", size = 140025, upload-time = "2026-08-07T19:30:18.49Z" },
-]
-
-[[package]]
-name = "botocore"
-version = "1.43.67"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "jmespath" },
-    { name = "python-dateutil" },
-    { name = "urllib3" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/53/1c/3a75deae60e36bd0ee5c27d040384756b2ea1c90bd7c8c9658335a18b4f5/botocore-1.43.67.tar.gz", hash = "sha256:6fe5cfa0c8676ba809efe505b618ec00f30d1af2d014bf316a7aa4ee86accb20", size = 15889514, upload-time = "2026-08-07T19:30:15.638Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/21/be/38af8e96f3d200c9d34eab8e9f69a4468388ed6030ea04ff012974e5af5a/botocore-1.43.67-py3-none-any.whl", hash = "sha256:48ab8e9fac26fbc2a700d57010251003e6a5f731cf74d8540fb796bc8f3fc0ef", size = 15575924, upload-time = "2026-08-07T19:30:12.116Z" },
-]
-
 [[package]]
 name = "brotli"
 version = "1.2.0"
@@ -320,30 +176,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/d8/ef/e7e485ce5e4ba3843a0a92feb767c7b6098fd6e65ce752918074d175ae71/brotlicffi-1.2.0.1-cp38-abi3-win_amd64.whl", hash = "sha256:da2e82a08e7778b8bc539d27ca03cdd684113e81394bfaaad8d0dfc6a17ddede", size = 379026, upload-time = "2026-03-05T19:54:04.322Z" },
 ]
 
-[[package]]
-name = "cachetools"
-version = "7.1.7"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/70/d2/47e8bc06fe2a06d3f5bdf20f1126ab66c4e99dc48d940e7ba873f7ac7131/cachetools-7.1.7.tar.gz", hash = "sha256:a3e2a00b14d8f8a6b70c1dae7b4685e7ad3bc965c5b42124a2d6ce895da6cf50", size = 40680, upload-time = "2026-08-01T21:20:40.434Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e4/d8/767faeda872075724b95dd675466a645f1b92aadcdcf2d1429dcfd76c176/cachetools-7.1.7-py3-none-any.whl", hash = "sha256:ef98ef375ad188819ef2f9b3645e3987f4b8c5b7550e436ad998c2de78296df0", size = 16830, upload-time = "2026-08-01T21:20:38.977Z" },
-]
-
-[[package]]
-name = "caio"
-version = "0.12.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/75/c8/82b3c760141a1076408164b03e8789b51809add6aecd48aa9d7651cf6b59/caio-0.12.2.tar.gz", hash = "sha256:87a67c0dccc60e432888bd532ec504b66e124a5d8b391aab894583b55abd39ea", size = 80927, upload-time = "2026-08-04T14:43:33.726Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/4f/9b/31f0b49a2542ffa2f9d6140267e2b568e722a1feeb05cfbffea97666c62b/caio-0.12.2-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:40ebea9ebe3a3a66ae85fa00d4112d163654a33c82dcf9b26a99f7d30de13317", size = 84656, upload-time = "2026-08-04T14:43:10.513Z" },
-    { url = "https://files.pythonhosted.org/packages/99/bc/62568d688af9712a34fe3f958d7a98c53bb2017e263260cd5deae67a90e9/caio-0.12.2-cp313-cp313-manylinux_2_34_aarch64.whl", hash = "sha256:6003ec389a68d5ec8f089df82b2dc8915293dd630a4d11322d7e3455045981fd", size = 198443, upload-time = "2026-08-04T14:43:11.767Z" },
-    { url = "https://files.pythonhosted.org/packages/a3/e4/5ed627860285612e5307f06c109913c5918c947fbc223b55599e484c64b0/caio-0.12.2-cp313-cp313-manylinux_2_34_x86_64.whl", hash = "sha256:eee9376d0e2af25b6defc5bce39f6efa90521c803aaf12eba931bd898a397cfc", size = 196356, upload-time = "2026-08-04T14:43:13.206Z" },
-    { url = "https://files.pythonhosted.org/packages/81/e2/2a8cfc6ba3ef3f19e7c778e9fb6f98600f0971cca78bbdfc23a413a66349/caio-0.12.2-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:78e3ccafc98e009fcb00a97ad441585551e52c0ae7ecc50427a3ccd9b11502fd", size = 195893, upload-time = "2026-08-04T14:43:14.649Z" },
-    { url = "https://files.pythonhosted.org/packages/d1/87/77c40fb2301d0b5bb27c2e79ae42fce718ed75396d5fe3e1c09d8e1400b1/caio-0.12.2-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:f2355db8917f5a0f3638bf332fe0d87549c80e978fca01db84a8a14b9df56a05", size = 195969, upload-time = "2026-08-04T14:43:15.946Z" },
-    { url = "https://files.pythonhosted.org/packages/5e/b5/0ceca97eb546fe6bbace3399c8b11dfc503efcc7509d708a7a3f09ab50e9/caio-0.12.2-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:8054cba5e7ee623bea34946e2b59eb7c7c2be8872d0a5d12215d6ff564938d5f", size = 78621, upload-time = "2026-08-04T14:43:17.316Z" },
-    { url = "https://files.pythonhosted.org/packages/61/8a/71b0144f783468ba9f1bbf8a2f8e45c7d85ae31ec192f10650aa46f31702/caio-0.12.2-py3-none-any.whl", hash = "sha256:5233e797c9fe2b541914b1bc2e2df82677e2206b537e44e252188f3c2cbb0ea9", size = 62548, upload-time = "2026-08-04T14:43:32.394Z" },
-]
-
 [[package]]
 name = "certifi"
 version = "2026.7.22"
@@ -414,30 +246,11 @@ wheels = [
 
 [[package]]
 name = "codespell"
-version = "2.4.2"
+version = "2.4.3"
 source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/2d/9d/1d0903dff693160f893ca6abcabad545088e7a2ee0a6deae7c24e958be69/codespell-2.4.2.tar.gz", hash = "sha256:3c33be9ae34543807f088aeb4832dfad8cb2dae38da61cac0a7045dd376cfdf3", size = 352058, upload-time = "2026-03-05T18:10:42.936Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/80/19/45e941380f69c042b43423513d201e6592346f992394347f5e7174c31407/codespell-2.4.3.tar.gz", hash = "sha256:cbe085e331227b37bb86ef8bddd08dc768c704ee9a07ca869852c093fa2793e2", size = 352773, upload-time = "2026-07-15T11:51:54.159Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/42/a1/52fa05533e95fe45bcc09bcf8a503874b1c08f221a4e35608017e0938f55/codespell-2.4.2-py3-none-any.whl", hash = "sha256:97e0c1060cf46bd1d5db89a936c98db8c2b804e1fdd4b5c645e82a1ec6b1f886", size = 353715, upload-time = "2026-03-05T18:10:41.398Z" },
-]
-
-[[package]]
-name = "cohere"
-version = "7.0.8"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "fastavro" },
-    { name = "httpx" },
-    { name = "pydantic" },
-    { name = "pydantic-core" },
-    { name = "requests" },
-    { name = "tokenizers" },
-    { name = "types-requests" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/4b/16/62ba386903ea854a2fce2cc2f959b9e0c8fa1d3e5699a3a523a6c691ffc9/cohere-7.0.8.tar.gz", hash = "sha256:5d9986b9b13cfe5590021474540648ff3c9e9ce4bfddc3d7f8e31acf1898c4d7", size = 213501, upload-time = "2026-07-23T19:31:41.066Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/37/52/255cefc27e058853b8750fcb22c549fd52684214d4fc1e4169ab23320644/cohere-7.0.8-py3-none-any.whl", hash = "sha256:a4fe9b9e148cb277ee152009d3566434b055db9d41fc7433abda78add22632ab", size = 357010, upload-time = "2026-07-23T19:31:39.432Z" },
+    { url = "https://files.pythonhosted.org/packages/8b/bf/bdb951d34eb169140b546f44be9ec4525d1acefb9eb5572071f5492b19fc/codespell-2.4.3-py3-none-any.whl", hash = "sha256:af2505b335e8573dbd2d384d1c4ef498f4006f4ba2d6fceca01e55b91f52628a", size = 340736, upload-time = "2026-07-15T11:51:52.925Z" },
 ]
 
 [[package]]
@@ -517,21 +330,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/f8/2a/894aded5804c76cf148965721cb57fed0d923ddb2747a77c9147f20d58a9/cucumber_tag_expressions-11.0.1-py3-none-any.whl", hash = "sha256:8ee5433a3b1ad16ca607c905fa3bb6d85d57f087ba119b14ea5e82cd35ea98c5", size = 9757, upload-time = "2026-08-05T20:33:19.95Z" },
 ]
 
-[[package]]
-name = "cyclopts"
-version = "4.22.5"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "attrs" },
-    { name = "docstring-parser" },
-    { name = "rich" },
-    { name = "rich-rst" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/be/05/689617b7e86503417c172f577d791524cb13b9697303d5d44409a971ba10/cyclopts-4.22.5.tar.gz", hash = "sha256:94044506317462cad90fb01a917dadce1f48a0915ba3605dc8d178dea1229e24", size = 195144, upload-time = "2026-08-04T13:53:00.303Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/83/58/bcab9c33fb7a25a1f5970f357c5b19729bc81d50615d2f737b20c4255909/cyclopts-4.22.5-py3-none-any.whl", hash = "sha256:cf9ce285836053d156730ea4ea0ad0c75cf63beb3f3d8edf222a795bc57666ab", size = 234557, upload-time = "2026-08-04T13:52:58.509Z" },
-]
-
 [[package]]
 name = "datamodel-code-generator"
 version = "0.64.0"
@@ -587,15 +385,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/12/b3/231ffd4ab1fc9d679809f356cebee130ac7daa00d6d6f3206dd4fd137e9e/distro-1.9.0-py3-none-any.whl", hash = "sha256:7bffd925d65168f85027d8da9af6bddab658135b840670a223589bc0c8ef02b2", size = 20277, upload-time = "2023-12-24T09:54:30.421Z" },
 ]
 
-[[package]]
-name = "dnspython"
-version = "2.8.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/8c/8b/57666417c0f90f08bcafa776861060426765fdb422eb10212086fb811d26/dnspython-2.8.0.tar.gz", hash = "sha256:181d3c6996452cb1189c4046c61599b84a5a86e099562ffde77d26984ff26d0f", size = 368251, upload-time = "2025-09-07T18:58:00.022Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ba/5a/18ad964b0086c6e62e2e7500f7edc89e3faa45033c71c1893d34eed2b2de/dnspython-2.8.0-py3-none-any.whl", hash = "sha256:01d9bbc4a2d76bf0db7c1f729812ded6d912bd318d3b1cf81d30c0f845dbf3af", size = 331094, upload-time = "2025-09-07T18:57:58.071Z" },
-]
-
 [[package]]
 name = "docstring-parser"
 version = "0.18.0"
@@ -605,19 +394,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a7/5f/ed01f9a3cdffbd5a008556fc7b2a08ddb1cc6ace7effa7340604b1d16699/docstring_parser-0.18.0-py3-none-any.whl", hash = "sha256:b3fcbed555c47d8479be0796ef7e19c2670d428d72e96da63f3a40122860374b", size = 22484, upload-time = "2026-04-14T04:09:18.638Z" },
 ]
 
-[[package]]
-name = "email-validator"
-version = "2.3.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "dnspython" },
-    { name = "idna" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/f5/22/900cb125c76b7aaa450ce02fd727f452243f2e91a61af068b40adba60ea9/email_validator-2.3.0.tar.gz", hash = "sha256:9fc05c37f2f6cf439ff414f8fc46d917929974a82244c20eb10231ba60c54426", size = 51238, upload-time = "2025-08-26T13:09:06.831Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/de/15/545e2b6cf2e3be84bc1ed85613edd75b8aea69807a71c26f4ca6a9258e82/email_validator-2.3.0-py3-none-any.whl", hash = "sha256:80f13f623413e6b197ae73bb10bf4eb0908faf509ad8362c5edeb0be7fd450b4", size = 35604, upload-time = "2025-08-26T13:09:05.858Z" },
-]
-
 [[package]]
 name = "engine"
 version = "0.1.0"
@@ -643,8 +419,7 @@ engine = [
     { name = "posthog" },
     { name = "psycopg", extra = ["binary", "pool"] },
     { name = "pydantic" },
-    { name = "pydantic-ai" },
-    { name = "pydantic-ai-slim", extra = ["voyageai"] },
+    { name = "pydantic-ai-slim", extra = ["anthropic", "openai"] },
     { name = "pydantic-settings" },
     { name = "python-dotenv" },
     { name = "sqlite-vec" },
@@ -702,12 +477,11 @@ engine = [
     { name = "posthog", specifier = ">=7.38.3" },
     { name = "psycopg", extras = ["binary", "pool"], specifier = ">=3.3.4" },
     { name = "pydantic", specifier = ">=2.13.4" },
-    { name = "pydantic-ai", specifier = ">=1.107.2,<2.0.0" },
-    { name = "pydantic-ai-slim", extras = ["voyageai"], specifier = ">=1.107.2,<2.0.0" },
+    { name = "pydantic-ai-slim", extras = ["anthropic", "openai"], specifier = ">=1.107.2,<2.0.0" },
     { name = "pydantic-settings", specifier = ">=2.15.0" },
     { name = "python-dotenv", specifier = ">=1.2.2" },
     { name = "sqlite-vec", specifier = ">=0.1.9" },
-    { name = "uvicorn", specifier = ">=0.52.1" },
+    { name = "uvicorn", specifier = ">=0.52.3" },
 ]
 engine-dev = [
     { name = "anyio", specifier = ">=4.14.2" },
@@ -718,7 +492,7 @@ engine-dev = [
     { name = "ruff", specifier = "==0.15.5" },
 ]
 pre-commit = [
-    { name = "codespell", specifier = "==2.4.2" },
+    { name = "codespell", specifier = "==2.4.3" },
     { name = "ruff", specifier = "==0.15.5" },
     { name = "tomli-w", specifier = "==1.2.0" },
 ]
@@ -726,7 +500,7 @@ tools = [
     { name = "deep-translator", specifier = ">=1.11.4" },
     { name = "defusedxml", specifier = ">=0.7.1" },
     { name = "fonttools", specifier = ">=4.63.0" },
-    { name = "fpdf2", specifier = ">=2.8.7" },
+    { name = "fpdf2", specifier = ">=2.8.8" },
     { name = "openai", specifier = ">=2.53.0" },
     { name = "requests", specifier = ">=2.34.2" },
     { name = "tomli-w", specifier = ">=1.2.0" },
@@ -737,33 +511,6 @@ tools = [
 ]
 updater-signatures = [{ name = "cryptography", specifier = ">=50.0.0" }]
 
-[[package]]
-name = "eval-type-backport"
-version = "0.4.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/1c/15/273a4baf8248d6d76220723c3caf039d283774b31a7c46ba686120145b76/eval_type_backport-0.4.0.tar.gz", hash = "sha256:8397d25e6524c2e67b9576bb0636be27dea2192017711220c534ec2de921e9b0", size = 10260, upload-time = "2026-06-02T13:22:06.059Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/50/a7/bb99bf5e6f78736ddb53480f2c3ff3702ffe2196a7c5e1661c03081d398e/eval_type_backport-0.4.0-py3-none-any.whl", hash = "sha256:ad5e2a8db71b6696a56eafb938b0f5a337d3217f256b8e158b469422b4772b20", size = 6432, upload-time = "2026-06-02T13:22:04.827Z" },
-]
-
-[[package]]
-name = "exceptiongroup"
-version = "1.3.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/50/79/66800aadf48771f6b62f7eb014e352e5d06856655206165d775e675a02c9/exceptiongroup-1.3.1.tar.gz", hash = "sha256:8b412432c6055b0b7d14c310000ae93352ed6754f70fa8f7c34141f91c4e3219", size = 30371, upload-time = "2025-11-21T23:01:54.787Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/8a/0e/97c33bf5009bdbac74fd2beace167cab3f978feb69cc36f1ef79360d6c4e/exceptiongroup-1.3.1-py3-none-any.whl", hash = "sha256:a7a39a3bd276781e98394987d3a5701d0c4edffb633bb7a5144577f82c773598", size = 16740, upload-time = "2025-11-21T23:01:53.443Z" },
-]
-
-[[package]]
-name = "executing"
-version = "2.2.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/cc/28/c14e053b6762b1044f34a13aab6859bbf40456d37d23aa286ac24cfd9a5d/executing-2.2.1.tar.gz", hash = "sha256:3632cc370565f6648cc328b32435bd120a1e4ebb20c77e3fdde9a13cd1e533c4", size = 1129488, upload-time = "2025-09-01T09:48:10.866Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c1/ea/53f2148663b321f21b5a606bd5f191517cf40b7072c0497d3c92c4a13b1e/executing-2.2.1-py2.py3-none-any.whl", hash = "sha256:760643d3452b4d777d295bb167ccc74c64a81df23fb5e08eff250c425a4b2017", size = 28317, upload-time = "2025-09-01T09:48:08.5Z" },
-]
-
 [[package]]
 name = "fastapi"
 version = "0.141.1"
@@ -780,98 +527,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cb/03/10388a42375ee7e4ac9b94eb2c5c569c8b5795e377e701c9ac3ad63de890/fastapi-0.141.1-py3-none-any.whl", hash = "sha256:bfb91aa2d334c61cb35ba9a116fc123b3d3df31640b801cf57a7a78ec3f603b3", size = 131954, upload-time = "2026-07-29T17:18:04.364Z" },
 ]
 
-[[package]]
-name = "fastavro"
-version = "1.12.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/6e/5b/ccb338db71f347e3bc031d268bf6dc41e5ead63b6997b8e72af92f05e18e/fastavro-1.12.2.tar.gz", hash = "sha256:3c79502d56cf6b76210032e1c53494ddfbc73c140bccf2ef4092b3f0825323ab", size = 1030127, upload-time = "2026-04-24T14:36:01.269Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/83/39/f489a441d41cc9c0a8449fb1325d7a9c9eb57a5634e6ab19dfb0a1105324/fastavro-1.12.2-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:57bb6b908cb2e05baab63b04c3a31be3b4545a10bfab9748b8763016b5256704", size = 958566, upload-time = "2026-04-24T14:36:45.49Z" },
-    { url = "https://files.pythonhosted.org/packages/31/69/776cc025aee2d02acacb734cf690d2fbc295eaadde1b5d47caf8c77a6a2b/fastavro-1.12.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:3a007f95cc682f56e6d83f1d17c29c00bf719d6fe8e003282b535af3a1ba09c0", size = 3276390, upload-time = "2026-04-24T14:36:47.875Z" },
-    { url = "https://files.pythonhosted.org/packages/8c/bc/b7e15fa788f42cbe65827af2ec06c9ad91bb9f72c213110dbef61b53a5b0/fastavro-1.12.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:5e90460b0cd21f62be3cb26087e706e2cebb7b3fcef9e05b4473b61bb0415b5e", size = 3372779, upload-time = "2026-04-24T14:36:50.122Z" },
-    { url = "https://files.pythonhosted.org/packages/79/c2/98993ca810231fc1397212f48c3d46626983722a24bbaaa5c27ee0963751/fastavro-1.12.2-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:7ccd15966b8218d41b06ec3e7c2556be89a8a693026c771e6564d2e40bbaf8ea", size = 3187591, upload-time = "2026-04-24T14:36:52.451Z" },
-    { url = "https://files.pythonhosted.org/packages/c6/bb/c180f340eba6478f1b20deccdd17e2b4a4d5074dafd812e3c4254fd035f7/fastavro-1.12.2-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:06b6971d3dae10cb34353b857d16ad21ebd6f0ea394e86c96abdcad109005d6e", size = 3320589, upload-time = "2026-04-24T14:36:54.647Z" },
-    { url = "https://files.pythonhosted.org/packages/4d/e9/aca0456216b5b8992e7b0a8542711b66799c05bfe24c8e32ef6f56e7eb93/fastavro-1.12.2-cp313-cp313-win_amd64.whl", hash = "sha256:98dfcdfaf1498ae2f0e2fafe900a82e8320cc81d8ae5a95b8b8879eaa3298c39", size = 440883, upload-time = "2026-04-24T14:36:56.585Z" },
-    { url = "https://files.pythonhosted.org/packages/e3/7e/984896e716af504927be71b80a1e9661aa96c6f9e1e777d52823aacb99f2/fastavro-1.12.2-cp313-cp313-win_arm64.whl", hash = "sha256:3888ef7a51adc77cdf07251bc762566a1be36211e1cff689f13980f3776a2f36", size = 377536, upload-time = "2026-04-24T14:36:58.274Z" },
-    { url = "https://files.pythonhosted.org/packages/e9/42/09a1e1f8d9998d73848a6ff0aad6713ae6abf0dbf99918776f8ef33344a7/fastavro-1.12.2-cp313-cp313t-macosx_10_13_universal2.whl", hash = "sha256:283dcd3129b632021894425974bedd0eb6db3bbf5994e448ccad10db4d803d31", size = 1049506, upload-time = "2026-04-24T14:36:59.797Z" },
-    { url = "https://files.pythonhosted.org/packages/52/ef/80cc16f43919d532f25a707f34b275cccc09dca87a05b000fbbfc8e8f255/fastavro-1.12.2-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:2d125e210d5a0a1f701f12c0ecad9a03f1b04b5eddbce6ca36a1fc217da977ef", size = 3495899, upload-time = "2026-04-24T14:37:02.306Z" },
-    { url = "https://files.pythonhosted.org/packages/c1/54/a0817d1d0236e9e0233f5c996f450cc795b056b8e06edb531f24b9df82ed/fastavro-1.12.2-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:2d4d66afad78e8f47feaa307728a6b71fe3effc63ba2b9eeb109ee687c9bd397", size = 3399232, upload-time = "2026-04-24T14:37:04.837Z" },
-    { url = "https://files.pythonhosted.org/packages/38/0a/650f256c15f5875b6081544b9ba7ed8254329213e7e49e3db0aec68b5bee/fastavro-1.12.2-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:2328ec07925c04c89719e3971c9068a165c7fd474ea87675b1204de0440e71ff", size = 3320222, upload-time = "2026-04-24T14:37:07.281Z" },
-    { url = "https://files.pythonhosted.org/packages/f5/54/8351d388f94fbb0870e8cffaae41d3cc607acc8d6a8a6a217e2794829593/fastavro-1.12.2-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:55dea7e74b834d4b70467fc19c5b9ccb5509fe39abc4d26891187c1b22176423", size = 3337096, upload-time = "2026-04-24T14:37:09.452Z" },
-]
-
-[[package]]
-name = "fastmcp"
-version = "3.4.6"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "fastmcp-slim", extra = ["client", "server"] },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/a9/5a/e2c78e26233cd8a416b21513e1925435d54c008a0ec467dbdaa80369daf7/fastmcp-3.4.6.tar.gz", hash = "sha256:2287938da8364ad7071bec2d2393af6ae10fd4e836f06f506569f1456cc87eb4", size = 28808130, upload-time = "2026-08-05T14:54:42.177Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ca/a5/c02275db111892388972edbb05fbcbfdf1e83cbd1fd03356b3a49b93f839/fastmcp-3.4.6-py3-none-any.whl", hash = "sha256:2a29967be9f68cdd1b4cefb413ede74f83adefd923919a37aaac3611eccdd749", size = 8017, upload-time = "2026-08-05T14:54:38.473Z" },
-]
-
-[[package]]
-name = "fastmcp-slim"
-version = "3.4.6"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "platformdirs" },
-    { name = "pydantic", extra = ["email"] },
-    { name = "pydantic-settings" },
-    { name = "python-dotenv" },
-    { name = "rich" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/ca/b6/b5b9e81e67a3f39534881d2af6aa3fbd2dc367eaa070c3c932770a0c062f/fastmcp_slim-3.4.6.tar.gz", hash = "sha256:6a1e6e42c697ba90abcb1be617a26947d07316f13c6fa138ae7b0de24558e32c", size = 594167, upload-time = "2026-08-05T14:54:15.924Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/11/0b/02c254c46b4323ae5262b76a29af73b50a863efc5739a3454d144d3605ee/fastmcp_slim-3.4.6-py3-none-any.whl", hash = "sha256:3e08e6acb03523a47aa17f4d2ab9943e648a41e20b24084da491a732c46dffdc", size = 769174, upload-time = "2026-08-05T14:54:14.663Z" },
-]
-
-[package.optional-dependencies]
-client = [
-    { name = "authlib" },
-    { name = "exceptiongroup" },
-    { name = "httpx" },
-    { name = "mcp" },
-    { name = "opentelemetry-api" },
-    { name = "py-key-value-aio", extra = ["filetree", "keyring", "memory"] },
-    { name = "starlette" },
-]
-server = [
-    { name = "authlib" },
-    { name = "cyclopts" },
-    { name = "exceptiongroup" },
-    { name = "griffelib" },
-    { name = "httpx" },
-    { name = "joserfc" },
-    { name = "jsonref" },
-    { name = "jsonschema-path" },
-    { name = "mcp" },
-    { name = "openapi-pydantic" },
-    { name = "opentelemetry-api" },
-    { name = "packaging" },
-    { name = "py-key-value-aio", extra = ["filetree", "keyring", "memory"] },
-    { name = "pyperclip" },
-    { name = "python-multipart" },
-    { name = "pyyaml" },
-    { name = "starlette" },
-    { name = "uncalled-for" },
-    { name = "uvicorn" },
-    { name = "watchfiles" },
-    { name = "websockets" },
-]
-
-[[package]]
-name = "filelock"
-version = "3.32.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/f6/57/3ba6e6cb097f85b855b00163d169f35365f44277df044dcf96d55b8f62a3/filelock-3.32.2.tar.gz", hash = "sha256:c33351e1f49cae33414acbc6d56784e6ecee82514ec90795da1161fc4836b5b8", size = 217172, upload-time = "2026-07-29T22:46:04.895Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c1/e8/72f8cef9fdfeffe06213fe8508039396ee48daa0e3259457ed766173bfd6/filelock-3.32.2-py3-none-any.whl", hash = "sha256:87dd94cf281e586d135fa51132b8e3d9a598b316e90377a288663c9321036c82", size = 98830, upload-time = "2026-07-29T22:46:03.52Z" },
-]
-
 [[package]]
 name = "fonttools"
 version = "4.63.0"
@@ -898,66 +553,16 @@ woff = [
 
 [[package]]
 name = "fpdf2"
-version = "2.8.7"
+version = "2.8.8"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "defusedxml" },
     { name = "fonttools" },
     { name = "pillow" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/27/f2/72feae0b2827ed38013e4307b14f95bf0b3d124adfef4d38a7d57533f7be/fpdf2-2.8.7.tar.gz", hash = "sha256:7060ccee5a9c7ab0a271fb765a36a23639f83ef8996c34e3d46af0a17ede57f9", size = 362351, upload-time = "2026-02-28T05:39:16.456Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/1e/bc/8fd4321aed40cadadddc8f311c65b6082346b252bca048f7b476d8f35d72/fpdf2-2.8.8.tar.gz", hash = "sha256:9e94e155e85e8053329a9a1fce8b566fd7a7c5bb79e98a1a3952d379b947c5b9", size = 374689, upload-time = "2026-08-09T23:32:45.334Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/66/0a/cf50ecffa1e3747ed9380a3adfc829259f1f86b3fdbd9e505af789003141/fpdf2-2.8.7-py3-none-any.whl", hash = "sha256:d391fc508a3ce02fc43a577c830cda4fe6f37646f2d143d489839940932fbc19", size = 327056, upload-time = "2026-02-28T05:39:14.619Z" },
-]
-
-[[package]]
-name = "frozenlist"
-version = "1.8.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/2d/f5/c831fac6cc817d26fd54c7eaccd04ef7e0288806943f7cc5bbf69f3ac1f0/frozenlist-1.8.0.tar.gz", hash = "sha256:3ede829ed8d842f6cd48fc7081d7a41001a56f1f38603f9d49bf3020d59a31ad", size = 45875, upload-time = "2025-10-06T05:38:17.865Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/2d/40/0832c31a37d60f60ed79e9dfb5a92e1e2af4f40a16a29abcc7992af9edff/frozenlist-1.8.0-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:8d92f1a84bb12d9e56f818b3a746f3efba93c1b63c8387a73dde655e1e42282a", size = 85717, upload-time = "2025-10-06T05:36:27.341Z" },
-    { url = "https://files.pythonhosted.org/packages/30/ba/b0b3de23f40bc55a7057bd38434e25c34fa48e17f20ee273bbde5e0650f3/frozenlist-1.8.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:96153e77a591c8adc2ee805756c61f59fef4cf4073a9275ee86fe8cba41241f7", size = 49651, upload-time = "2025-10-06T05:36:28.855Z" },
-    { url = "https://files.pythonhosted.org/packages/0c/ab/6e5080ee374f875296c4243c381bbdef97a9ac39c6e3ce1d5f7d42cb78d6/frozenlist-1.8.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:f21f00a91358803399890ab167098c131ec2ddd5f8f5fd5fe9c9f2c6fcd91e40", size = 49417, upload-time = "2025-10-06T05:36:29.877Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/4e/e4691508f9477ce67da2015d8c00acd751e6287739123113a9fca6f1604e/frozenlist-1.8.0-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:fb30f9626572a76dfe4293c7194a09fb1fe93ba94c7d4f720dfae3b646b45027", size = 234391, upload-time = "2025-10-06T05:36:31.301Z" },
-    { url = "https://files.pythonhosted.org/packages/40/76/c202df58e3acdf12969a7895fd6f3bc016c642e6726aa63bd3025e0fc71c/frozenlist-1.8.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:eaa352d7047a31d87dafcacbabe89df0aa506abb5b1b85a2fb91bc3faa02d822", size = 233048, upload-time = "2025-10-06T05:36:32.531Z" },
-    { url = "https://files.pythonhosted.org/packages/f9/c0/8746afb90f17b73ca5979c7a3958116e105ff796e718575175319b5bb4ce/frozenlist-1.8.0-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:03ae967b4e297f58f8c774c7eabcce57fe3c2434817d4385c50661845a058121", size = 226549, upload-time = "2025-10-06T05:36:33.706Z" },
-    { url = "https://files.pythonhosted.org/packages/7e/eb/4c7eefc718ff72f9b6c4893291abaae5fbc0c82226a32dcd8ef4f7a5dbef/frozenlist-1.8.0-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:f6292f1de555ffcc675941d65fffffb0a5bcd992905015f85d0592201793e0e5", size = 239833, upload-time = "2025-10-06T05:36:34.947Z" },
-    { url = "https://files.pythonhosted.org/packages/c2/4e/e5c02187cf704224f8b21bee886f3d713ca379535f16893233b9d672ea71/frozenlist-1.8.0-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:29548f9b5b5e3460ce7378144c3010363d8035cea44bc0bf02d57f5a685e084e", size = 245363, upload-time = "2025-10-06T05:36:36.534Z" },
-    { url = "https://files.pythonhosted.org/packages/1f/96/cb85ec608464472e82ad37a17f844889c36100eed57bea094518bf270692/frozenlist-1.8.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:ec3cc8c5d4084591b4237c0a272cc4f50a5b03396a47d9caaf76f5d7b38a4f11", size = 229314, upload-time = "2025-10-06T05:36:38.582Z" },
-    { url = "https://files.pythonhosted.org/packages/5d/6f/4ae69c550e4cee66b57887daeebe006fe985917c01d0fff9caab9883f6d0/frozenlist-1.8.0-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:517279f58009d0b1f2e7c1b130b377a349405da3f7621ed6bfae50b10adf20c1", size = 243365, upload-time = "2025-10-06T05:36:40.152Z" },
-    { url = "https://files.pythonhosted.org/packages/7a/58/afd56de246cf11780a40a2c28dc7cbabbf06337cc8ddb1c780a2d97e88d8/frozenlist-1.8.0-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:db1e72ede2d0d7ccb213f218df6a078a9c09a7de257c2fe8fcef16d5925230b1", size = 237763, upload-time = "2025-10-06T05:36:41.355Z" },
-    { url = "https://files.pythonhosted.org/packages/cb/36/cdfaf6ed42e2644740d4a10452d8e97fa1c062e2a8006e4b09f1b5fd7d63/frozenlist-1.8.0-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:b4dec9482a65c54a5044486847b8a66bf10c9cb4926d42927ec4e8fd5db7fed8", size = 240110, upload-time = "2025-10-06T05:36:42.716Z" },
-    { url = "https://files.pythonhosted.org/packages/03/a8/9ea226fbefad669f11b52e864c55f0bd57d3c8d7eb07e9f2e9a0b39502e1/frozenlist-1.8.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:21900c48ae04d13d416f0e1e0c4d81f7931f73a9dfa0b7a8746fb2fe7dd970ed", size = 233717, upload-time = "2025-10-06T05:36:44.251Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/0b/1b5531611e83ba7d13ccc9988967ea1b51186af64c42b7a7af465dcc9568/frozenlist-1.8.0-cp313-cp313-win32.whl", hash = "sha256:8b7b94a067d1c504ee0b16def57ad5738701e4ba10cec90529f13fa03c833496", size = 39628, upload-time = "2025-10-06T05:36:45.423Z" },
-    { url = "https://files.pythonhosted.org/packages/d8/cf/174c91dbc9cc49bc7b7aab74d8b734e974d1faa8f191c74af9b7e80848e6/frozenlist-1.8.0-cp313-cp313-win_amd64.whl", hash = "sha256:878be833caa6a3821caf85eb39c5ba92d28e85df26d57afb06b35b2efd937231", size = 43882, upload-time = "2025-10-06T05:36:46.796Z" },
-    { url = "https://files.pythonhosted.org/packages/c1/17/502cd212cbfa96eb1388614fe39a3fc9ab87dbbe042b66f97acb57474834/frozenlist-1.8.0-cp313-cp313-win_arm64.whl", hash = "sha256:44389d135b3ff43ba8cc89ff7f51f5a0bb6b63d829c8300f79a2fe4fe61bcc62", size = 39676, upload-time = "2025-10-06T05:36:47.8Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/5c/3bbfaa920dfab09e76946a5d2833a7cbdf7b9b4a91c714666ac4855b88b4/frozenlist-1.8.0-cp313-cp313t-macosx_10_13_universal2.whl", hash = "sha256:e25ac20a2ef37e91c1b39938b591457666a0fa835c7783c3a8f33ea42870db94", size = 89235, upload-time = "2025-10-06T05:36:48.78Z" },
-    { url = "https://files.pythonhosted.org/packages/d2/d6/f03961ef72166cec1687e84e8925838442b615bd0b8854b54923ce5b7b8a/frozenlist-1.8.0-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:07cdca25a91a4386d2e76ad992916a85038a9b97561bf7a3fd12d5d9ce31870c", size = 50742, upload-time = "2025-10-06T05:36:49.837Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/bb/a6d12b7ba4c3337667d0e421f7181c82dda448ce4e7ad7ecd249a16fa806/frozenlist-1.8.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:4e0c11f2cc6717e0a741f84a527c52616140741cd812a50422f83dc31749fb52", size = 51725, upload-time = "2025-10-06T05:36:50.851Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/71/d1fed0ffe2c2ccd70b43714c6cab0f4188f09f8a67a7914a6b46ee30f274/frozenlist-1.8.0-cp313-cp313t-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:b3210649ee28062ea6099cfda39e147fa1bc039583c8ee4481cb7811e2448c51", size = 284533, upload-time = "2025-10-06T05:36:51.898Z" },
-    { url = "https://files.pythonhosted.org/packages/c9/1f/fb1685a7b009d89f9bf78a42d94461bc06581f6e718c39344754a5d9bada/frozenlist-1.8.0-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:581ef5194c48035a7de2aefc72ac6539823bb71508189e5de01d60c9dcd5fa65", size = 292506, upload-time = "2025-10-06T05:36:53.101Z" },
-    { url = "https://files.pythonhosted.org/packages/e6/3b/b991fe1612703f7e0d05c0cf734c1b77aaf7c7d321df4572e8d36e7048c8/frozenlist-1.8.0-cp313-cp313t-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:3ef2d026f16a2b1866e1d86fc4e1291e1ed8a387b2c333809419a2f8b3a77b82", size = 274161, upload-time = "2025-10-06T05:36:54.309Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/ec/c5c618767bcdf66e88945ec0157d7f6c4a1322f1473392319b7a2501ded7/frozenlist-1.8.0-cp313-cp313t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:5500ef82073f599ac84d888e3a8c1f77ac831183244bfd7f11eaa0289fb30714", size = 294676, upload-time = "2025-10-06T05:36:55.566Z" },
-    { url = "https://files.pythonhosted.org/packages/7c/ce/3934758637d8f8a88d11f0585d6495ef54b2044ed6ec84492a91fa3b27aa/frozenlist-1.8.0-cp313-cp313t-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:50066c3997d0091c411a66e710f4e11752251e6d2d73d70d8d5d4c76442a199d", size = 300638, upload-time = "2025-10-06T05:36:56.758Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/4f/a7e4d0d467298f42de4b41cbc7ddaf19d3cfeabaf9ff97c20c6c7ee409f9/frozenlist-1.8.0-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:5c1c8e78426e59b3f8005e9b19f6ff46e5845895adbde20ece9218319eca6506", size = 283067, upload-time = "2025-10-06T05:36:57.965Z" },
-    { url = "https://files.pythonhosted.org/packages/dc/48/c7b163063d55a83772b268e6d1affb960771b0e203b632cfe09522d67ea5/frozenlist-1.8.0-cp313-cp313t-musllinux_1_2_armv7l.whl", hash = "sha256:eefdba20de0d938cec6a89bd4d70f346a03108a19b9df4248d3cf0d88f1b0f51", size = 292101, upload-time = "2025-10-06T05:36:59.237Z" },
-    { url = "https://files.pythonhosted.org/packages/9f/d0/2366d3c4ecdc2fd391e0afa6e11500bfba0ea772764d631bbf82f0136c9d/frozenlist-1.8.0-cp313-cp313t-musllinux_1_2_ppc64le.whl", hash = "sha256:cf253e0e1c3ceb4aaff6df637ce033ff6535fb8c70a764a8f46aafd3d6ab798e", size = 289901, upload-time = "2025-10-06T05:37:00.811Z" },
-    { url = "https://files.pythonhosted.org/packages/b8/94/daff920e82c1b70e3618a2ac39fbc01ae3e2ff6124e80739ce5d71c9b920/frozenlist-1.8.0-cp313-cp313t-musllinux_1_2_s390x.whl", hash = "sha256:032efa2674356903cd0261c4317a561a6850f3ac864a63fc1583147fb05a79b0", size = 289395, upload-time = "2025-10-06T05:37:02.115Z" },
-    { url = "https://files.pythonhosted.org/packages/e3/20/bba307ab4235a09fdcd3cc5508dbabd17c4634a1af4b96e0f69bfe551ebd/frozenlist-1.8.0-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:6da155091429aeba16851ecb10a9104a108bcd32f6c1642867eadaee401c1c41", size = 283659, upload-time = "2025-10-06T05:37:03.711Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/00/04ca1c3a7a124b6de4f8a9a17cc2fcad138b4608e7a3fc5877804b8715d7/frozenlist-1.8.0-cp313-cp313t-win32.whl", hash = "sha256:0f96534f8bfebc1a394209427d0f8a63d343c9779cda6fc25e8e121b5fd8555b", size = 43492, upload-time = "2025-10-06T05:37:04.915Z" },
-    { url = "https://files.pythonhosted.org/packages/59/5e/c69f733a86a94ab10f68e496dc6b7e8bc078ebb415281d5698313e3af3a1/frozenlist-1.8.0-cp313-cp313t-win_amd64.whl", hash = "sha256:5d63a068f978fc69421fb0e6eb91a9603187527c86b7cd3f534a5b77a592b888", size = 48034, upload-time = "2025-10-06T05:37:06.343Z" },
-    { url = "https://files.pythonhosted.org/packages/16/6c/be9d79775d8abe79b05fa6d23da99ad6e7763a1d080fbae7290b286093fd/frozenlist-1.8.0-cp313-cp313t-win_arm64.whl", hash = "sha256:bf0a7e10b077bf5fb9380ad3ae8ce20ef919a6ad93b4552896419ac7e1d8e042", size = 41749, upload-time = "2025-10-06T05:37:07.431Z" },
-    { url = "https://files.pythonhosted.org/packages/9a/9a/e35b4a917281c0b8419d4207f4334c8e8c5dbf4f3f5f9ada73958d937dcc/frozenlist-1.8.0-py3-none-any.whl", hash = "sha256:0c18a16eab41e82c295618a77502e17b195883241c563b00f0aa5106fc4eaa0d", size = 13409, upload-time = "2025-10-06T05:38:16.721Z" },
-]
-
-[[package]]
-name = "fsspec"
-version = "2026.7.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/00/78/f34251dadb8f3921264a1d9b8946f5e542014ee2614b285261b4e40e6775/fsspec-2026.7.0.tar.gz", hash = "sha256:c803c40f4cf860b49dea58ee3e1c33cb9c790520e233537e1340049f89b82a88", size = 317040, upload-time = "2026-07-28T16:34:51.052Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/fd/3c/6a2bf344106328fd04963664a60b9bb6496fc25df8e962fcdc1367285fb9/fsspec-2026.7.0-py3-none-any.whl", hash = "sha256:b57ddbafedfaef7018c1ecab32aa200a9d7ca26b77965f64e48b70061249d279", size = 206583, upload-time = "2026-07-28T16:34:49.538Z" },
+    { url = "https://files.pythonhosted.org/packages/f5/be/af012eda9507494f28b99b077423806c43a11573eb6225dd46f19ae2d263/fpdf2-2.8.8-py3-none-any.whl", hash = "sha256:3557a478fc577a929c94aace9666aed4dcc432b5ab6764232e6a59f1ccd75f17", size = 337000, upload-time = "2026-08-09T23:32:43.728Z" },
 ]
 
 [[package]]
@@ -982,57 +587,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/16/02/767f744ab6d4cb7761e5008acc3d534b7a0481af62563d52e391fbcb2140/genson-1.4.0-py3-none-any.whl", hash = "sha256:03bc71bbe52defde70660cc4dcd1ea1097997da5a1cbb90a9dbd3acc7c9e1b65", size = 24484, upload-time = "2026-07-06T08:21:49.046Z" },
 ]
 
-[[package]]
-name = "google-auth"
-version = "2.56.3"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "cryptography" },
-    { name = "pyasn1-modules" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/db/4c/fa42116a48bab3f7a143cf5042ecff7df9c8b73f8a376203cd534d1dc966/google_auth-2.56.3.tar.gz", hash = "sha256:40e229fc901f0a305b553050e5fce562d509bee0435be053abfa91582b51b90c", size = 367110, upload-time = "2026-08-06T06:24:01.36Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/b3/6117b2f24065cd7e2c4f140e9a193e215f089ca8ba314cf91eb9d0b7fe0a/google_auth-2.56.3-py3-none-any.whl", hash = "sha256:8ec438808f813ad034535000261eed1067475d229d05bbf4216e78c3f2362e53", size = 259116, upload-time = "2026-08-06T06:22:51.788Z" },
-]
-
-[package.optional-dependencies]
-requests = [
-    { name = "requests" },
-]
-
-[[package]]
-name = "google-genai"
-version = "2.17.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-    { name = "distro" },
-    { name = "google-auth", extra = ["requests"] },
-    { name = "httpx" },
-    { name = "pydantic" },
-    { name = "requests" },
-    { name = "sniffio" },
-    { name = "tenacity" },
-    { name = "typing-extensions" },
-    { name = "websockets" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/58/2e/03a0486e192cde27f7ffbb20c63fa934a132396a667b1a0e1b7e5f606ad7/google_genai-2.17.0.tar.gz", hash = "sha256:6b640a2390c82b4a240873eddb9f518c6d2c33244b2de16ed3d14526a6da7f57", size = 648676, upload-time = "2026-08-06T05:10:41.382Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b3/37/71e397a5b93d9a3c139e95acdcb00b4169ed59ae20e16616f2875170abb7/google_genai-2.17.0-py3-none-any.whl", hash = "sha256:a4835563c60aee646c9c4b261c507aa4a624710d25017012d20dc65abf3d9a54", size = 1044950, upload-time = "2026-08-06T05:10:39.308Z" },
-]
-
-[[package]]
-name = "googleapis-common-protos"
-version = "1.75.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "protobuf" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/72/73/74bcab964c9a7a61f2bb71e8179b0f13e6fa98f7ce00fd168aab291e4a2e/googleapis_common_protos-1.75.1.tar.gz", hash = "sha256:d3042c6c5a2d4e67113104d6b6818b59b6bd92a197f2a91508e801fe815cf071", size = 150967, upload-time = "2026-08-06T06:24:51.972Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9a/51/186c02b8549b69ccda44429cf6ff5081e4b61a602ddfe6a8020d1be31d1b/googleapis_common_protos-1.75.1-py3-none-any.whl", hash = "sha256:28a1934bcd33b9c9da66ac301a0a4227e3367f095a17d0375cb98f0a09d93b79", size = 300626, upload-time = "2026-08-06T06:23:46.696Z" },
-]
-
 [[package]]
 name = "griffelib"
 version = "2.1.0"
@@ -1042,44 +596,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e4/d3/5268aeabf2ad82658c4e2ff3a060648d0f02f3926cb53247c0e4d0dab49e/griffelib-2.1.0-py3-none-any.whl", hash = "sha256:cc7b3d2d2865ad0b909fcc38086e3f554b5ea7acbaa7bbb7ecaa3f5dfb7d9f00", size = 142560, upload-time = "2026-06-19T12:05:38.742Z" },
 ]
 
-[[package]]
-name = "groq"
-version = "1.6.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-    { name = "distro" },
-    { name = "httpx" },
-    { name = "pydantic" },
-    { name = "sniffio" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/67/3e/687064918e861082cb02165872bbda31269126a108a78794dae86ddadae2/groq-1.6.0.tar.gz", hash = "sha256:c4237ecf0053ba85fd926bb31cb4b178996310474b4618867994e3e40d8e3c02", size = 158424, upload-time = "2026-07-24T17:25:49.517Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/20/40/164338d796cf41ea5930a42023e986d8c993720bed670d5aa143e5854873/groq-1.6.0-py3-none-any.whl", hash = "sha256:fa16db582455db324adcff1b5908519474736872e28cd5c8fa2b8bef6860e12a", size = 143693, upload-time = "2026-07-24T17:25:48.2Z" },
-]
-
-[[package]]
-name = "grpcio"
-version = "1.83.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/0c/98/304898ac4e04e2d5e4e4c2eadc178b1f2a16d5f4bc2f91306c87d64680b9/grpcio-1.83.0.tar.gz", hash = "sha256:7674587248fbbb2ac6e4eecf83a8a0f3d91a928f941de571acfd3a2f007fbc24", size = 13428824, upload-time = "2026-07-23T15:20:37.759Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/56/eb/135daaa713f32d33b8f99b4153b3f8dc3b2a124996ac15581bf9ebdad3c3/grpcio-1.83.0-cp313-cp313-linux_armv7l.whl", hash = "sha256:6662f3b1e07cc7493d437351860dc867bddc6a93c83ecf33bbfdaf0c217ab2d0", size = 6304480, upload-time = "2026-07-23T15:19:53.962Z" },
-    { url = "https://files.pythonhosted.org/packages/8f/a1/121806ce69f23138dabe06aa595b0e5f1ae051a37e4c1954eed7d692c800/grpcio-1.83.0-cp313-cp313-macosx_11_0_universal2.whl", hash = "sha256:74fe6f9e8a35c7dbf32255ee154d15e3e5338a81ed39173d079d594d2e544cd1", size = 12154419, upload-time = "2026-07-23T15:19:56.3Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/e8/d0389e09cd6b4c4d3089b92967ae4e3ffd64795bd349bf2f85cd6656d3da/grpcio-1.83.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:10b3fa0475eb572c9a81a6fe37fa16a9c500c0c91cfc148cac15692b7e3c2867", size = 6873200, upload-time = "2026-07-23T15:19:58.701Z" },
-    { url = "https://files.pythonhosted.org/packages/f8/51/f464c1d211fa50d5adbabe1b2e519948d99c13757052bfc9ea7afa28e284/grpcio-1.83.0-cp313-cp313-manylinux2014_i686.manylinux_2_17_i686.whl", hash = "sha256:5f20a988480b0f28207f057f7f7ae1313393c3cef0adcfeae8248f9947eaf881", size = 7618811, upload-time = "2026-07-23T15:20:00.733Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/c0/539fe0832f2dd6500a28f5263071623fb34e8d4867aec632ccf81bd21156/grpcio-1.83.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:7bd82671b39065ba18cd536e9cd45b27ff649053f81ddd2c6a966d595067080f", size = 7042310, upload-time = "2026-07-23T15:20:02.675Z" },
-    { url = "https://files.pythonhosted.org/packages/8c/ca/ccf617d37ffa72567fa8e005ec7090c99da922799be2fb9847c8b21ca18c/grpcio-1.83.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:bc60215b5cb9fc8ca72942c498b551ac2305bd08f6ef8d4e3f0d21b64fbecd61", size = 7575412, upload-time = "2026-07-23T15:20:04.712Z" },
-    { url = "https://files.pythonhosted.org/packages/eb/b9/fd8d5245f823a8e0fd35d90e20ea3aa4acd47f8d5318fa8df307df52dec6/grpcio-1.83.0-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:f1c3e5689d4b90987b1d72022bcfe866a9a3dc66197484cf856d96b6150e7f45", size = 8604248, upload-time = "2026-07-23T15:20:06.77Z" },
-    { url = "https://files.pythonhosted.org/packages/14/1e/f37632fc11db72dfa4bba86c3a43e54358e53030df111ecae5e91a733ad6/grpcio-1.83.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:a21cb4eeeba124443f399be2e8b624943cde864dcbe588cb42e5c483a52a906c", size = 7977458, upload-time = "2026-07-23T15:20:09.109Z" },
-    { url = "https://files.pythonhosted.org/packages/93/b6/d70b69ae5c0cfc341b9ba474980e4ed99cbf05c0e4a14e9eee8cb73db0a5/grpcio-1.83.0-cp313-cp313-win32.whl", hash = "sha256:8fe04f1050a59f875601eb55d42b4f66946fe89817f967e34db1462ccd07dadf", size = 4393993, upload-time = "2026-07-23T15:20:11.017Z" },
-    { url = "https://files.pythonhosted.org/packages/0f/13/45d4cccb555cf4c476226979bf3d2fd0b0254216f7564c3a053e35117efc/grpcio-1.83.0-cp313-cp313-win_amd64.whl", hash = "sha256:6e01ecd9d8ef280abe1365138a4dc318f9a5287f4cb1b41d07816f796653f735", size = 5159650, upload-time = "2026-07-23T15:20:12.979Z" },
-]
-
 [[package]]
 name = "h11"
 version = "0.16.0"
@@ -1089,30 +605,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/04/4b/29cac41a4d98d144bf5f6d33995617b185d14b22401f75ca86f384e87ff1/h11-0.16.0-py3-none-any.whl", hash = "sha256:63cf8bbe7522de3bf65932fda1d9c2772064ffb3dae62d55932da54b31cb6c86", size = 37515, upload-time = "2025-04-24T03:35:24.344Z" },
 ]
 
-[[package]]
-name = "hf-xet"
-version = "1.4.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/53/92/ec9ad04d0b5728dca387a45af7bc98fbb0d73b2118759f5f6038b61a57e8/hf_xet-1.4.3.tar.gz", hash = "sha256:8ddedb73c8c08928c793df2f3401ec26f95be7f7e516a7bee2fbb546f6676113", size = 670477, upload-time = "2026-03-31T22:40:07.874Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/72/43/724d307b34e353da0abd476e02f72f735cdd2bc86082dee1b32ea0bfee1d/hf_xet-1.4.3-cp313-cp313t-macosx_10_12_x86_64.whl", hash = "sha256:7551659ba4f1e1074e9623996f28c3873682530aee0a846b7f2f066239228144", size = 3800935, upload-time = "2026-03-31T22:39:49.618Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/d2/8bee5996b699262edb87dbb54118d287c0e1b2fc78af7cdc41857ba5e3c4/hf_xet-1.4.3-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:bee693ada985e7045997f05f081d0e12c4c08bd7626dc397f8a7c487e6c04f7f", size = 3558942, upload-time = "2026-03-31T22:39:47.938Z" },
-    { url = "https://files.pythonhosted.org/packages/c3/a1/e993d09cbe251196fb60812b09a58901c468127b7259d2bf0f68bf6088eb/hf_xet-1.4.3-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:21644b404bb0100fe3857892f752c4d09642586fd988e61501c95bbf44b393a3", size = 4207657, upload-time = "2026-03-31T22:39:39.69Z" },
-    { url = "https://files.pythonhosted.org/packages/64/44/9eb6d21e5c34c63e5e399803a6932fa983cabdf47c0ecbcfe7ea97684b8c/hf_xet-1.4.3-cp313-cp313t-manylinux_2_28_aarch64.whl", hash = "sha256:987f09cfe418237812896a6736b81b1af02a3a6dcb4b4944425c4c4fca7a7cf8", size = 3986765, upload-time = "2026-03-31T22:39:37.936Z" },
-    { url = "https://files.pythonhosted.org/packages/ea/7b/8ad6f16fdb82f5f7284a34b5ec48645bd575bdcd2f6f0d1644775909c486/hf_xet-1.4.3-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:60cf7fc43a99da0a853345cf86d23738c03983ee5249613a6305d3e57a5dca74", size = 4188162, upload-time = "2026-03-31T22:39:58.382Z" },
-    { url = "https://files.pythonhosted.org/packages/1b/c4/39d6e136cbeea9ca5a23aad4b33024319222adbdc059ebcda5fc7d9d5ff4/hf_xet-1.4.3-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:2815a49a7a59f3e2edf0cf113ae88e8cb2ca2a221bf353fb60c609584f4884d4", size = 4424525, upload-time = "2026-03-31T22:40:00.225Z" },
-    { url = "https://files.pythonhosted.org/packages/46/f2/adc32dae6bdbc367853118b9878139ac869419a4ae7ba07185dc31251b76/hf_xet-1.4.3-cp313-cp313t-win_amd64.whl", hash = "sha256:42ee323265f1e6a81b0e11094564fb7f7e0ec75b5105ffd91ae63f403a11931b", size = 3671610, upload-time = "2026-03-31T22:40:10.42Z" },
-    { url = "https://files.pythonhosted.org/packages/e2/19/25d897dcc3f81953e0c2cde9ec186c7a0fee413eb0c9a7a9130d87d94d3a/hf_xet-1.4.3-cp313-cp313t-win_arm64.whl", hash = "sha256:27c976ba60079fb8217f485b9c5c7fcd21c90b0367753805f87cb9f3cdc4418a", size = 3528529, upload-time = "2026-03-31T22:40:09.106Z" },
-    { url = "https://files.pythonhosted.org/packages/ac/9f/9c23e4a447b8f83120798f9279d0297a4d1360bdbf59ef49ebec78fe2545/hf_xet-1.4.3-cp37-abi3-macosx_10_12_x86_64.whl", hash = "sha256:d0da85329eaf196e03e90b84c2d0aca53bd4573d097a75f99609e80775f98025", size = 3805048, upload-time = "2026-03-31T22:39:53.105Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/f8/7aacb8e5f4a7899d39c787b5984e912e6c18b11be136ef13947d7a66d265/hf_xet-1.4.3-cp37-abi3-macosx_11_0_arm64.whl", hash = "sha256:e23717ce4186b265f69afa66e6f0069fe7efbf331546f5c313d00e123dc84583", size = 3562178, upload-time = "2026-03-31T22:39:51.295Z" },
-    { url = "https://files.pythonhosted.org/packages/df/9a/a24b26dc8a65f0ecc0fe5be981a19e61e7ca963b85e062c083f3a9100529/hf_xet-1.4.3-cp37-abi3-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:fc360b70c815bf340ed56c7b8c63aacf11762a4b099b2fe2c9bd6d6068668c08", size = 4212320, upload-time = "2026-03-31T22:39:42.922Z" },
-    { url = "https://files.pythonhosted.org/packages/53/60/46d493db155d2ee2801b71fb1b0fd67696359047fdd8caee2c914cc50c79/hf_xet-1.4.3-cp37-abi3-manylinux_2_28_aarch64.whl", hash = "sha256:39f2d2e9654cd9b4319885733993807aab6de9dfbd34c42f0b78338d6617421f", size = 3991546, upload-time = "2026-03-31T22:39:41.335Z" },
-    { url = "https://files.pythonhosted.org/packages/bc/f5/067363e1c96c6b17256910830d1b54099d06287e10f4ec6ec4e7e08371fc/hf_xet-1.4.3-cp37-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:49ad8a8cead2b56051aa84d7fce3e1335efe68df3cf6c058f22a65513885baac", size = 4193200, upload-time = "2026-03-31T22:40:01.936Z" },
-    { url = "https://files.pythonhosted.org/packages/42/4b/53951592882d9c23080c7644542fda34a3813104e9e11fa1a7d82d419cb8/hf_xet-1.4.3-cp37-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:7716d62015477a70ea272d2d68cd7cad140f61c52ee452e133e139abfe2c17ba", size = 4429392, upload-time = "2026-03-31T22:40:03.492Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/21/75a6c175b4e79662ad8e62f46a40ce341d8d6b206b06b4320d07d55b188c/hf_xet-1.4.3-cp37-abi3-win_amd64.whl", hash = "sha256:6b591fcad34e272a5b02607485e4f2a1334aebf1bc6d16ce8eb1eb8978ac2021", size = 3677359, upload-time = "2026-03-31T22:40:13.619Z" },
-    { url = "https://files.pythonhosted.org/packages/8a/7c/44314ecd0e89f8b2b51c9d9e5e7a60a9c1c82024ac471d415860557d3cd8/hf_xet-1.4.3-cp37-abi3-win_arm64.whl", hash = "sha256:7c2c7e20bcfcc946dc67187c203463f5e932e395845d098cc2a93f5b67ca0b47", size = 3533664, upload-time = "2026-03-31T22:40:12.152Z" },
-]
-
 [[package]]
 name = "httpcore"
 version = "1.0.9"
@@ -1154,15 +646,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/2a/39/e50c7c3a983047577ee07d2a9e53faf5a69493943ec3f6a384bdc792deb2/httpx-0.28.1-py3-none-any.whl", hash = "sha256:d909fcccc110f8c7faf814ca82a9a4d816bc5a6dbfea25d6591d6985b8ba59ad", size = 73517, upload-time = "2024-12-06T15:37:21.509Z" },
 ]
 
-[[package]]
-name = "httpx-sse"
-version = "0.4.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/0f/4c/751061ffa58615a32c31b2d82e8482be8dd4a89154f003147acee90f2be9/httpx_sse-0.4.3.tar.gz", hash = "sha256:9b1ed0127459a66014aec3c56bebd93da3c1bc8bb6618c8082039a44889a755d", size = 15943, upload-time = "2025-10-10T21:48:22.271Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d2/fd/6668e5aec43ab844de6fc74927e155a3b37bf40d7c3790e49fc0406b6578/httpx_sse-0.4.3-py3-none-any.whl", hash = "sha256:0ac1c9fe3c0afad2e0ebb25a934a59f4c7823b60792691f779fad2c5568830fc", size = 8960, upload-time = "2025-10-10T21:48:21.158Z" },
-]
-
 [[package]]
 name = "httpx2"
 version = "2.10.0"
@@ -1188,27 +671,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/9b/43/832f631d32e4f1211caa2ba368317739fe71f0b8530e4c9d15dc454bac2a/httpx2_jsfetch-1.0-py3-none-any.whl", hash = "sha256:cb916b707601e69a07721aabc8f3f6659be3a6893bc1ff5c6f9e02241df2da32", size = 6382, upload-time = "2026-08-07T00:13:06.567Z" },
 ]
 
-[[package]]
-name = "huggingface-hub"
-version = "1.18.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "click" },
-    { name = "filelock" },
-    { name = "fsspec" },
-    { name = "hf-xet", marker = "platform_machine == 'AMD64' or platform_machine == 'aarch64' or platform_machine == 'amd64' or platform_machine == 'arm64' or platform_machine == 'x86_64'" },
-    { name = "httpx" },
-    { name = "packaging" },
-    { name = "pyyaml" },
-    { name = "tqdm" },
-    { name = "typer" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/fb/d8/748ea0a47f0fa15227fe682f7a80826b4b7c096e4818044b8f56d6cb66d6/huggingface_hub-1.18.0.tar.gz", hash = "sha256:f0c5ecd1ef8c6a60f86f61ee278f2c1570ba9e279c9f54de9094210723b3613b", size = 812699, upload-time = "2026-06-05T09:26:33.401Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/0b/03/40a05316cb6616e5b7efd7773656441ab04b4b022c2199e79bb4622a92a3/huggingface_hub-1.18.0-py3-none-any.whl", hash = "sha256:729be4a976fb706dcc02d176bcda8a3f32bdf21a294e8f4b3dda6fbcbc9c1ab1", size = 684411, upload-time = "2026-06-05T09:26:31.48Z" },
-]
-
 [[package]]
 name = "idna"
 version = "3.18"
@@ -1261,48 +723,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/3e/95/c7c34aa53c16353c56d0b802fba48d5f5caa2cdee7958acbcb795c830416/isort-8.0.1-py3-none-any.whl", hash = "sha256:28b89bc70f751b559aeca209e6120393d43fbe2490de0559662be7a9787e3d75", size = 89733, upload-time = "2026-02-28T10:08:19.466Z" },
 ]
 
-[[package]]
-name = "jaraco-classes"
-version = "3.4.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "more-itertools" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/06/c0/ed4a27bc5571b99e3cff68f8a9fa5b56ff7df1c2251cc715a652ddd26402/jaraco.classes-3.4.0.tar.gz", hash = "sha256:47a024b51d0239c0dd8c8540c6c7f484be3b8fcf0b2d85c13825780d3b3f3acd", size = 11780, upload-time = "2024-03-31T07:27:36.643Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/7f/66/b15ce62552d84bbfcec9a4873ab79d993a1dd4edb922cbfccae192bd5b5f/jaraco.classes-3.4.0-py3-none-any.whl", hash = "sha256:f662826b6bed8cace05e7ff873ce0f9283b5c924470fe664fff1c2f00f581790", size = 6777, upload-time = "2024-03-31T07:27:34.792Z" },
-]
-
-[[package]]
-name = "jaraco-context"
-version = "6.1.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/af/50/4763cd07e722bb6285316d390a164bc7e479db9d90daa769f22578f698b4/jaraco_context-6.1.2.tar.gz", hash = "sha256:f1a6c9d391e661cc5b8d39861ff077a7dc24dc23833ccee564b234b81c82dfe3", size = 16801, upload-time = "2026-03-20T22:13:33.922Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f2/58/bc8954bda5fcda97bd7c19be11b85f91973d67a706ed4a3aec33e7de22db/jaraco_context-6.1.2-py3-none-any.whl", hash = "sha256:bf8150b79a2d5d91ae48629d8b427a8f7ba0e1097dd6202a9059f29a36379535", size = 7871, upload-time = "2026-03-20T22:13:32.808Z" },
-]
-
-[[package]]
-name = "jaraco-functools"
-version = "4.6.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "more-itertools" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/6c/1f/c23395957d41ccf27c4e535c3d334c4051e5395b3752057ba4cbaec35c56/jaraco_functools-4.6.0.tar.gz", hash = "sha256:880c577ec9720b3a052d5bc611fb9f2269b3d87902ef42440df443b88e443280", size = 20837, upload-time = "2026-07-14T01:28:02.544Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/02/36/ecc85bc96c273dc8a11273ed4782272975e6338d4a3e9228621175edf0e3/jaraco_functools-4.6.0-py3-none-any.whl", hash = "sha256:99e3dc0060c5cbe8fcd1cdb36258e2a65ca40f1566b2033b12abb1bb44dd3c30", size = 11677, upload-time = "2026-07-14T01:28:01.59Z" },
-]
-
-[[package]]
-name = "jeepney"
-version = "0.9.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/7b/6f/357efd7602486741aa73ffc0617fb310a29b588ed0fd69c2399acbb85b0c/jeepney-0.9.0.tar.gz", hash = "sha256:cf0e9e845622b81e4a28df94c40345400256ec608d0e55bb8a3feaa9163f5732", size = 106758, upload-time = "2025-02-27T18:51:01.684Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b2/a3/e137168c9c44d18eff0376253da9f1e9234d0239e0ee230d2fee6cea8e55/jeepney-0.9.0-py3-none-any.whl", hash = "sha256:97e5714520c16fc0a45695e5365a2e11b81ea79bba796e26f9f1d178cb182683", size = 49010, upload-time = "2025-02-27T18:51:00.104Z" },
-]
-
 [[package]]
 name = "jinja2"
 version = "3.1.6"
@@ -1337,217 +757,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/19/4b/b390ed59bafb3f31d008d1218578f10327714484b334439947f7e5b11e7f/jiter-0.16.0-cp313-cp313-win_arm64.whl", hash = "sha256:3c1fd2dbe1b0af19e987f03fe66c5f5bd105a2229c1aff4ab14890b24f41d21a", size = 189862, upload-time = "2026-06-29T13:03:55.754Z" },
 ]
 
-[[package]]
-name = "jmespath"
-version = "1.1.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/d3/59/322338183ecda247fb5d1763a6cbe46eff7222eaeebafd9fa65d4bf5cb11/jmespath-1.1.0.tar.gz", hash = "sha256:472c87d80f36026ae83c6ddd0f1d05d4e510134ed462851fd5f754c8c3cbb88d", size = 27377, upload-time = "2026-01-22T16:35:26.279Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/14/2f/967ba146e6d58cf6a652da73885f52fc68001525b4197effc174321d70b4/jmespath-1.1.0-py3-none-any.whl", hash = "sha256:a5663118de4908c91729bea0acadca56526eb2698e83de10cd116ae0f4e97c64", size = 20419, upload-time = "2026-01-22T16:35:24.919Z" },
-]
-
-[[package]]
-name = "joserfc"
-version = "1.7.4"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "cryptography" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/c7/e0/27a6a081ae25420eda6768ceae05d7022a7f2447f420588843f2a44e4298/joserfc-1.7.4.tar.gz", hash = "sha256:b3bc561672ae541b17a9237053b48a03dacddd92d68047b3ecdfb4b5714a88ed", size = 234027, upload-time = "2026-07-19T15:43:02.739Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f9/bf/249dcd99b3376375910b7fa922383b57792975c8758f50d44612e749226c/joserfc-1.7.4-py3-none-any.whl", hash = "sha256:32d46c2cd5e3203c13e87a6c61333cab310b1ba80cd54b4c4f386a848a122463", size = 71000, upload-time = "2026-07-19T15:43:01.299Z" },
-]
-
-[[package]]
-name = "jsonpatch"
-version = "1.33"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "jsonpointer" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/42/78/18813351fe5d63acad16aec57f94ec2b70a09e53ca98145589e185423873/jsonpatch-1.33.tar.gz", hash = "sha256:9fcd4009c41e6d12348b4a0ff2563ba56a2923a7dfee731d004e212e1ee5030c", size = 21699, upload-time = "2023-06-26T12:07:29.144Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/73/07/02e16ed01e04a374e644b575638ec7987ae846d25ad97bcc9945a3ee4b0e/jsonpatch-1.33-py2.py3-none-any.whl", hash = "sha256:0ae28c0cd062bbd8b8ecc26d7d164fbbea9652a1a3693f3b956c1eae5145dade", size = 12898, upload-time = "2023-06-16T21:01:28.466Z" },
-]
-
-[[package]]
-name = "jsonpath-python"
-version = "1.1.6"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/98/18/4ca8742534a5993ff383f7602e325ce2d5d7cc93d72ac5e1cdedbea8a458/jsonpath_python-1.1.6.tar.gz", hash = "sha256:dded9932b4ec41fb8726e09c83afa4e6be618f938c2db287cc2a81723c639671", size = 88178, upload-time = "2026-05-07T01:26:34.482Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/55/8a/1270a6803bd821cbfcdda387eaa13cb41a7b1f7b9bd145979b3bfb9d6cb7/jsonpath_python-1.1.6-py3-none-any.whl", hash = "sha256:a1c50afd8d3fbbaf47a4873bc890dcb3c15da96f5c020327977d844d8731a2d4", size = 14453, upload-time = "2026-05-07T01:26:33.306Z" },
-]
-
-[[package]]
-name = "jsonpointer"
-version = "3.1.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/18/c7/af399a2e7a67fd18d63c40c5e62d3af4e67b836a2107468b6a5ea24c4304/jsonpointer-3.1.1.tar.gz", hash = "sha256:0b801c7db33a904024f6004d526dcc53bbb8a4a0f4e32bfd10beadf60adf1900", size = 9068, upload-time = "2026-03-23T22:32:32.458Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9e/6a/a83720e953b1682d2d109d3c2dbb0bc9bf28cc1cbc205be4ef4be5da709d/jsonpointer-3.1.1-py3-none-any.whl", hash = "sha256:8ff8b95779d071ba472cf5bc913028df06031797532f08a7d5b602d8b2a488ca", size = 7659, upload-time = "2026-03-23T22:32:31.568Z" },
-]
-
-[[package]]
-name = "jsonref"
-version = "1.1.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/aa/0d/c1f3277e90ccdb50d33ed5ba1ec5b3f0a242ed8c1b1a85d3afeb68464dca/jsonref-1.1.0.tar.gz", hash = "sha256:32fe8e1d85af0fdefbebce950af85590b22b60f9e95443176adbde4e1ecea552", size = 8814, upload-time = "2023-01-16T16:10:04.455Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/0c/ec/e1db9922bceb168197a558a2b8c03a7963f1afe93517ddd3cf99f202f996/jsonref-1.1.0-py3-none-any.whl", hash = "sha256:590dc7773df6c21cbf948b5dac07a72a251db28b0238ceecce0a2abfa8ec30a9", size = 9425, upload-time = "2023-01-16T16:10:02.255Z" },
-]
-
-[[package]]
-name = "jsonschema"
-version = "4.26.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "attrs" },
-    { name = "jsonschema-specifications" },
-    { name = "referencing" },
-    { name = "rpds-py" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/b3/fc/e067678238fa451312d4c62bf6e6cf5ec56375422aee02f9cb5f909b3047/jsonschema-4.26.0.tar.gz", hash = "sha256:0c26707e2efad8aa1bfc5b7ce170f3fccc2e4918ff85989ba9ffa9facb2be326", size = 366583, upload-time = "2026-01-07T13:41:07.246Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/69/90/f63fb5873511e014207a475e2bb4e8b2e570d655b00ac19a9a0ca0a385ee/jsonschema-4.26.0-py3-none-any.whl", hash = "sha256:d489f15263b8d200f8387e64b4c3a75f06629559fb73deb8fdfb525f2dab50ce", size = 90630, upload-time = "2026-01-07T13:41:05.306Z" },
-]
-
-[[package]]
-name = "jsonschema-path"
-version = "0.5.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "attrs" },
-    { name = "pathable" },
-    { name = "pyyaml" },
-    { name = "referencing" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/39/79/cd02a4df6d9270efdc7d3feefe6edd730b0820c39eeaa107a2faee8322d5/jsonschema_path-0.5.0.tar.gz", hash = "sha256:493b156ba895c97602655b620a8456caa2ce08c1aa389f5a7addec065e6e855c", size = 19597, upload-time = "2026-05-19T20:45:00.971Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/04/2c/9e69d73c4297508be9e3b64a970ea3971b3eb8db64ffc5802d40bd25981f/jsonschema_path-0.5.0-py3-none-any.whl", hash = "sha256:2790a070bc7abb08ea3dbe4d340ece4efadf639223001f020c7503229ba068e2", size = 24077, upload-time = "2026-05-19T20:44:59.225Z" },
-]
-
-[[package]]
-name = "jsonschema-specifications"
-version = "2025.9.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "referencing" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/19/74/a633ee74eb36c44aa6d1095e7cc5569bebf04342ee146178e2d36600708b/jsonschema_specifications-2025.9.1.tar.gz", hash = "sha256:b540987f239e745613c7a9176f3edb72b832a4ac465cf02712288397832b5e8d", size = 32855, upload-time = "2025-09-08T01:34:59.186Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/41/45/1a4ed80516f02155c51f51e8cedb3c1902296743db0bbc66608a0db2814f/jsonschema_specifications-2025.9.1-py3-none-any.whl", hash = "sha256:98802fee3a11ee76ecaca44429fda8a41bff98b00a0f2838151b113f210cc6fe", size = 18437, upload-time = "2025-09-08T01:34:57.871Z" },
-]
-
-[[package]]
-name = "keyring"
-version = "25.7.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "jaraco-classes" },
-    { name = "jaraco-context" },
-    { name = "jaraco-functools" },
-    { name = "jeepney", marker = "sys_platform == 'linux'" },
-    { name = "pywin32-ctypes", marker = "sys_platform == 'win32'" },
-    { name = "secretstorage", marker = "sys_platform == 'linux'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/43/4b/674af6ef2f97d56f0ab5153bf0bfa28ccb6c3ed4d1babf4305449668807b/keyring-25.7.0.tar.gz", hash = "sha256:fe01bd85eb3f8fb3dd0405defdeac9a5b4f6f0439edbb3149577f244a2e8245b", size = 63516, upload-time = "2025-11-16T16:26:09.482Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/81/db/e655086b7f3a705df045bf0933bdd9c2f79bb3c97bfef1384598bb79a217/keyring-25.7.0-py3-none-any.whl", hash = "sha256:be4a0b195f149690c166e850609a477c532ddbfbaed96a404d4e43f8d5e2689f", size = 39160, upload-time = "2025-11-16T16:26:08.402Z" },
-]
-
-[[package]]
-name = "langchain-core"
-version = "1.5.3"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "jsonpatch" },
-    { name = "langchain-protocol" },
-    { name = "langsmith" },
-    { name = "packaging" },
-    { name = "pydantic" },
-    { name = "pyyaml" },
-    { name = "tenacity" },
-    { name = "typing-extensions" },
-    { name = "uuid-utils" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/65/3e/63af6b9d76d9be907c7c524d6ec18a2efed7e0e2d123fea0230d78dbd73f/langchain_core-1.5.3.tar.gz", hash = "sha256:a56457ac444fef41e9404443c187f0ecea708d36e816ea4ba9573c027f7d1a2d", size = 972461, upload-time = "2026-07-30T14:55:55.833Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/36/e6/c7c39efe0bc7e1b7c3d8f54f85846e04c901913c3d3e99068b218558c6f1/langchain_core-1.5.3-py3-none-any.whl", hash = "sha256:48b56fa580277209594dd7baf837f5b9a2a3651613f34ff9fb1728b429df015f", size = 561687, upload-time = "2026-07-30T14:55:54.419Z" },
-]
-
-[[package]]
-name = "langchain-protocol"
-version = "0.0.18"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/d2/59/b5959aea96faa9146e2e49a7a22882b3528c62efafe9a6a95beab30c2305/langchain_protocol-0.0.18.tar.gz", hash = "sha256:ec3e11782f1ed0c9db38e5a9ed01b0e7a0d3fba406faa8aef6594b73c56a63e6", size = 6150, upload-time = "2026-06-18T17:08:26.959Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/99/2e/d82db9eec13ad0f72e7aaad5c4bc730ab111934fdc83c85523206eb9b0a0/langchain_protocol-0.0.18-py3-none-any.whl", hash = "sha256:70b53a86fbf9cedc863555effe44da192ab02d556ddbf2cf95b8873adcf41b5a", size = 7221, upload-time = "2026-06-18T17:08:25.996Z" },
-]
-
-[[package]]
-name = "langchain-text-splitters"
-version = "1.1.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "langchain-core" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/26/9f/6c545900fefb7b00ddfa3f16b80d61338a0ec68c31c5451eeeab99082760/langchain_text_splitters-1.1.2.tar.gz", hash = "sha256:782a723db0a4746ac91e251c7c1d57fd23636e4f38ed733074e28d7a86f41627", size = 293580, upload-time = "2026-04-16T14:20:39.162Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d3/26/1ef06f56198d631296d646a6223de35bcc6cf9795ceb2442816bc963b84c/langchain_text_splitters-1.1.2-py3-none-any.whl", hash = "sha256:a2de0d799ff31886429fd6e2e0032df275b60ec817c19059a7b46181cc1c2f10", size = 35903, upload-time = "2026-04-16T14:20:38.243Z" },
-]
-
-[[package]]
-name = "langsmith"
-version = "0.10.17"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-    { name = "distro" },
-    { name = "httpx" },
-    { name = "orjson", marker = "platform_python_implementation != 'PyPy'" },
-    { name = "packaging" },
-    { name = "pydantic" },
-    { name = "requests" },
-    { name = "requests-toolbelt" },
-    { name = "sniffio" },
-    { name = "typing-extensions" },
-    { name = "uuid-utils" },
-    { name = "websockets" },
-    { name = "xxhash" },
-    { name = "zstandard" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/62/56/73674bd922fe57509c38075d089017d65e02f50d687fd70ee6c0b153d729/langsmith-0.10.17.tar.gz", hash = "sha256:2bf0e69246ef77282ea93e78eb22dad1ec8d8a002d31cbd607d0d6448f9c6458", size = 4798702, upload-time = "2026-08-07T17:23:04.601Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/7d/e6/e264e87ce79467aa0cc6c5e945e74050d7880394da325b3559cfdb41a186/langsmith-0.10.17-py3-none-any.whl", hash = "sha256:2a1242a0500147ed846ecbd5fe2f41c21b1652f6833b1af0f209231006f67e5e", size = 734484, upload-time = "2026-08-07T17:23:02.598Z" },
-]
-
-[[package]]
-name = "logfire"
-version = "4.40.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "executing" },
-    { name = "opentelemetry-exporter-otlp-proto-http" },
-    { name = "opentelemetry-instrumentation" },
-    { name = "opentelemetry-sdk" },
-    { name = "protobuf" },
-    { name = "rich" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/f9/71/1ed06d124bd7905f60004d60cbe14c79bda00f0604bf0cb76214f8c96348/logfire-4.40.0.tar.gz", hash = "sha256:f50f9637f9b5cc3eb5f8526e473effa1992d45056c89adc7c821ee7ab2520c75", size = 1260846, upload-time = "2026-08-05T11:26:59.605Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e6/65/2ed148a656362ff3b5cce0bfae619cf57ca1df33d0c942b4c1461e57f57c/logfire-4.40.0-py3-none-any.whl", hash = "sha256:0ac2c950968812f27ee68ccec4a362230acffaffb28f04945ee07729d5866fa0", size = 409440, upload-time = "2026-08-05T11:26:56.745Z" },
-]
-
-[package.optional-dependencies]
-httpx = [
-    { name = "opentelemetry-instrumentation-httpx" },
-]
-
 [[package]]
 name = "logfire-api"
 version = "4.40.0"
@@ -1557,18 +766,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/8e/be/ebe35d94e7d567b58d79bd7e1085fe85195ad4b8c8df8882a5a46caa4984/logfire_api-4.40.0-py3-none-any.whl", hash = "sha256:f8b7309235a942368b927f00e0a1869ff0820833f264a30e77a35f1da829c130", size = 140593, upload-time = "2026-08-05T11:26:58.395Z" },
 ]
 
-[[package]]
-name = "markdown-it-py"
-version = "4.2.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "mdurl" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/06/ff/7841249c247aa650a76b9ee4bbaeae59370dc8bfd2f6c01f3630c35eb134/markdown_it_py-4.2.0.tar.gz", hash = "sha256:04a21681d6fbb623de53f6f364d352309d4094dd4194040a10fd51833e418d49", size = 82454, upload-time = "2026-05-07T12:08:28.36Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b3/81/4da04ced5a082363ecfa159c010d200ecbd959ae410c10c0264a38cac0f5/markdown_it_py-4.2.0-py3-none-any.whl", hash = "sha256:9f7ebbcd14fe59494226453aed97c1070d83f8d24b6fc3a3bcf9a38092641c4a", size = 91687, upload-time = "2026-05-07T12:08:27.182Z" },
-]
-
 [[package]]
 name = "markupsafe"
 version = "3.0.3"
@@ -1599,59 +796,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/0e/72/e3cc540f351f316e9ed0f092757459afbc595824ca724cbc5a5d4263713f/markupsafe-3.0.3-cp313-cp313t-win_arm64.whl", hash = "sha256:ad2cf8aa28b8c020ab2fc8287b0f823d0a7d8630784c31e9ee5edea20f406287", size = 13973, upload-time = "2025-09-27T18:37:04.929Z" },
 ]
 
-[[package]]
-name = "mcp"
-version = "1.29.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-    { name = "httpx" },
-    { name = "httpx-sse" },
-    { name = "jsonschema" },
-    { name = "pydantic" },
-    { name = "pydantic-settings" },
-    { name = "pyjwt", extra = ["crypto"] },
-    { name = "python-multipart" },
-    { name = "pywin32", marker = "sys_platform == 'win32'" },
-    { name = "sse-starlette" },
-    { name = "starlette" },
-    { name = "typing-extensions" },
-    { name = "typing-inspection" },
-    { name = "uvicorn", marker = "sys_platform != 'emscripten'" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/30/d3/f9acc21dfc886e4f78e2add1a47db46ce16884346afde53f8a064c02c891/mcp-1.29.0.tar.gz", hash = "sha256:52d01f334de1868cc3bb2d6604931126a67631f99a6c5d3b82ba47290315ec36", size = 643148, upload-time = "2026-07-28T13:41:41.939Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/01/c8/248b201f6d753d69fd5d6506011abbb35a946d9142b2ae311a948fd0be3d/mcp-1.29.0-py3-none-any.whl", hash = "sha256:f5a075bb611f23d6f4d080c6a1699fa62772eebc562ba9e66b306ddde1c755f7", size = 223436, upload-time = "2026-07-28T13:41:40.337Z" },
-]
-
-[[package]]
-name = "mdurl"
-version = "0.1.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/d6/54/cfe61301667036ec958cb99bd3efefba235e65cdeb9c84d24a8293ba1d90/mdurl-0.1.2.tar.gz", hash = "sha256:bb413d29f5eea38f31dd4754dd7377d4465116fb207585f97bf925588687c1ba", size = 8729, upload-time = "2022-08-14T12:40:10.846Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b3/38/89ba8ad64ae25be8de66a6d463314cf1eb366222074cfda9ee839c56a4b4/mdurl-0.1.2-py3-none-any.whl", hash = "sha256:84008a41e51615a49fc9966191ff91509e3c40b939176e643fd50a5c2196b8f8", size = 9979, upload-time = "2022-08-14T12:40:09.779Z" },
-]
-
-[[package]]
-name = "mistralai"
-version = "2.9.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "eval-type-backport" },
-    { name = "httpx" },
-    { name = "jsonpath-python" },
-    { name = "opentelemetry-api" },
-    { name = "opentelemetry-semantic-conventions" },
-    { name = "pydantic" },
-    { name = "python-dateutil" },
-    { name = "typing-inspection" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/d5/e0/9d3e8bcfa73357f997ea297148d16ac243d1a228838334179a9199b713ff/mistralai-2.9.1.tar.gz", hash = "sha256:5b3983c6fddc81b898f1dd5a61a96a59a0e18069c54940cac9b5220dd6b66486", size = 534224, upload-time = "2026-08-04T16:23:45.027Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ff/6e/11d537beb67fd7dc0f1028c4a9f4f8230c6328abf6e2f2c9d0447ea0e4a4/mistralai-2.9.1-py3-none-any.whl", hash = "sha256:6f83177b8c4fdffdd2a054cf9d96fc7c0d7a474e856ecd1f0b7070344128516b", size = 1270991, upload-time = "2026-08-04T16:23:43.001Z" },
-]
-
 [[package]]
 name = "more-itertools"
 version = "11.1.0"
@@ -1661,51 +805,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e8/3d/1087453384dbde46a8c7f9356eead2c58be8a7bf156bca40243377c85715/more_itertools-11.1.0-py3-none-any.whl", hash = "sha256:4b65538ae22f6fed0ce4874efd317463a7489796a0939fa66824dd542125a192", size = 72226, upload-time = "2026-05-22T14:14:28.824Z" },
 ]
 
-[[package]]
-name = "multidict"
-version = "6.7.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/1a/c2/c2d94cbe6ac1753f3fc980da97b3d930efe1da3af3c9f5125354436c073d/multidict-6.7.1.tar.gz", hash = "sha256:ec6652a1bee61c53a3e5776b6049172c53b6aaba34f18c9ad04f82712bac623d", size = 102010, upload-time = "2026-01-26T02:46:45.979Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f2/22/929c141d6c0dba87d3e1d38fbdf1ba8baba86b7776469f2bc2d3227a1e67/multidict-6.7.1-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:2b41f5fed0ed563624f1c17630cb9941cf2309d4df00e494b551b5f3e3d67a23", size = 76174, upload-time = "2026-01-26T02:44:18.509Z" },
-    { url = "https://files.pythonhosted.org/packages/c7/75/bc704ae15fee974f8fccd871305e254754167dce5f9e42d88a2def741a1d/multidict-6.7.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:84e61e3af5463c19b67ced91f6c634effb89ef8bfc5ca0267f954451ed4bb6a2", size = 45116, upload-time = "2026-01-26T02:44:19.745Z" },
-    { url = "https://files.pythonhosted.org/packages/79/76/55cd7186f498ed080a18440c9013011eb548f77ae1b297206d030eb1180a/multidict-6.7.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:935434b9853c7c112eee7ac891bc4cb86455aa631269ae35442cb316790c1445", size = 43524, upload-time = "2026-01-26T02:44:21.571Z" },
-    { url = "https://files.pythonhosted.org/packages/e9/3c/414842ef8d5a1628d68edee29ba0e5bcf235dbfb3ccd3ea303a7fe8c72ff/multidict-6.7.1-cp313-cp313-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:432feb25a1cb67fe82a9680b4d65fb542e4635cb3166cd9c01560651ad60f177", size = 249368, upload-time = "2026-01-26T02:44:22.803Z" },
-    { url = "https://files.pythonhosted.org/packages/f6/32/befed7f74c458b4a525e60519fe8d87eef72bb1e99924fa2b0f9d97a221e/multidict-6.7.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:e82d14e3c948952a1a85503817e038cba5905a3352de76b9a465075d072fba23", size = 256952, upload-time = "2026-01-26T02:44:24.306Z" },
-    { url = "https://files.pythonhosted.org/packages/03/d6/c878a44ba877f366630c860fdf74bfb203c33778f12b6ac274936853c451/multidict-6.7.1-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:4cfb48c6ea66c83bcaaf7e4dfa7ec1b6bbcf751b7db85a328902796dfde4c060", size = 240317, upload-time = "2026-01-26T02:44:25.772Z" },
-    { url = "https://files.pythonhosted.org/packages/68/49/57421b4d7ad2e9e60e25922b08ceb37e077b90444bde6ead629095327a6f/multidict-6.7.1-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:1d540e51b7e8e170174555edecddbd5538105443754539193e3e1061864d444d", size = 267132, upload-time = "2026-01-26T02:44:27.648Z" },
-    { url = "https://files.pythonhosted.org/packages/b7/fe/ec0edd52ddbcea2a2e89e174f0206444a61440b40f39704e64dc807a70bd/multidict-6.7.1-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:273d23f4b40f3dce4d6c8a821c741a86dec62cded82e1175ba3d99be128147ed", size = 268140, upload-time = "2026-01-26T02:44:29.588Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/73/6e1b01cbeb458807aa0831742232dbdd1fa92bfa33f52a3f176b4ff3dc11/multidict-6.7.1-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:9d624335fd4fa1c08a53f8b4be7676ebde19cd092b3895c421045ca87895b429", size = 254277, upload-time = "2026-01-26T02:44:30.902Z" },
-    { url = "https://files.pythonhosted.org/packages/6a/b2/5fb8c124d7561a4974c342bc8c778b471ebbeb3cc17df696f034a7e9afe7/multidict-6.7.1-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:12fad252f8b267cc75b66e8fc51b3079604e8d43a75428ffe193cd9e2195dfd6", size = 252291, upload-time = "2026-01-26T02:44:32.31Z" },
-    { url = "https://files.pythonhosted.org/packages/5a/96/51d4e4e06bcce92577fcd488e22600bd38e4fd59c20cb49434d054903bd2/multidict-6.7.1-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:03ede2a6ffbe8ef936b92cb4529f27f42be7f56afcdab5ab739cd5f27fb1cbf9", size = 250156, upload-time = "2026-01-26T02:44:33.734Z" },
-    { url = "https://files.pythonhosted.org/packages/db/6b/420e173eec5fba721a50e2a9f89eda89d9c98fded1124f8d5c675f7a0c0f/multidict-6.7.1-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:90efbcf47dbe33dcf643a1e400d67d59abeac5db07dc3f27d6bdeae497a2198c", size = 249742, upload-time = "2026-01-26T02:44:35.222Z" },
-    { url = "https://files.pythonhosted.org/packages/44/a3/ec5b5bd98f306bc2aa297b8c6f11a46714a56b1e6ef5ebda50a4f5d7c5fb/multidict-6.7.1-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:5c4b9bfc148f5a91be9244d6264c53035c8a0dcd2f51f1c3c6e30e30ebaa1c84", size = 262221, upload-time = "2026-01-26T02:44:36.604Z" },
-    { url = "https://files.pythonhosted.org/packages/cd/f7/e8c0d0da0cd1e28d10e624604e1a36bcc3353aaebdfdc3a43c72bc683a12/multidict-6.7.1-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:401c5a650f3add2472d1d288c26deebc540f99e2fb83e9525007a74cd2116f1d", size = 258664, upload-time = "2026-01-26T02:44:38.008Z" },
-    { url = "https://files.pythonhosted.org/packages/52/da/151a44e8016dd33feed44f730bd856a66257c1ee7aed4f44b649fb7edeb3/multidict-6.7.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:97891f3b1b3ffbded884e2916cacf3c6fc87b66bb0dde46f7357404750559f33", size = 249490, upload-time = "2026-01-26T02:44:39.386Z" },
-    { url = "https://files.pythonhosted.org/packages/87/af/a3b86bf9630b732897f6fc3f4c4714b90aa4361983ccbdcd6c0339b21b0c/multidict-6.7.1-cp313-cp313-win32.whl", hash = "sha256:e1c5988359516095535c4301af38d8a8838534158f649c05dd1050222321bcb3", size = 41695, upload-time = "2026-01-26T02:44:41.318Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/35/e994121b0e90e46134673422dd564623f93304614f5d11886b1b3e06f503/multidict-6.7.1-cp313-cp313-win_amd64.whl", hash = "sha256:960c83bf01a95b12b08fd54324a4eb1d5b52c88932b5cba5d6e712bb3ed12eb5", size = 45884, upload-time = "2026-01-26T02:44:42.488Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/61/42d3e5dbf661242a69c97ea363f2d7b46c567da8eadef8890022be6e2ab0/multidict-6.7.1-cp313-cp313-win_arm64.whl", hash = "sha256:563fe25c678aaba333d5399408f5ec3c383ca5b663e7f774dd179a520b8144df", size = 43122, upload-time = "2026-01-26T02:44:43.664Z" },
-    { url = "https://files.pythonhosted.org/packages/6d/b3/e6b21c6c4f314bb956016b0b3ef2162590a529b84cb831c257519e7fde44/multidict-6.7.1-cp313-cp313t-macosx_10_13_universal2.whl", hash = "sha256:c76c4bec1538375dad9d452d246ca5368ad6e1c9039dadcf007ae59c70619ea1", size = 83175, upload-time = "2026-01-26T02:44:44.894Z" },
-    { url = "https://files.pythonhosted.org/packages/fb/76/23ecd2abfe0957b234f6c960f4ade497f55f2c16aeb684d4ecdbf1c95791/multidict-6.7.1-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:57b46b24b5d5ebcc978da4ec23a819a9402b4228b8a90d9c656422b4bdd8a963", size = 48460, upload-time = "2026-01-26T02:44:46.106Z" },
-    { url = "https://files.pythonhosted.org/packages/c4/57/a0ed92b23f3a042c36bc4227b72b97eca803f5f1801c1ab77c8a212d455e/multidict-6.7.1-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:e954b24433c768ce78ab7929e84ccf3422e46deb45a4dc9f93438f8217fa2d34", size = 46930, upload-time = "2026-01-26T02:44:47.278Z" },
-    { url = "https://files.pythonhosted.org/packages/b5/66/02ec7ace29162e447f6382c495dc95826bf931d3818799bbef11e8f7df1a/multidict-6.7.1-cp313-cp313t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:3bd231490fa7217cc832528e1cd8752a96f0125ddd2b5749390f7c3ec8721b65", size = 242582, upload-time = "2026-01-26T02:44:48.604Z" },
-    { url = "https://files.pythonhosted.org/packages/58/18/64f5a795e7677670e872673aca234162514696274597b3708b2c0d276cce/multidict-6.7.1-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:253282d70d67885a15c8a7716f3a73edf2d635793ceda8173b9ecc21f2fb8292", size = 250031, upload-time = "2026-01-26T02:44:50.544Z" },
-    { url = "https://files.pythonhosted.org/packages/c8/ed/e192291dbbe51a8290c5686f482084d31bcd9d09af24f63358c3d42fd284/multidict-6.7.1-cp313-cp313t-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:0b4c48648d7649c9335cf1927a8b87fa692de3dcb15faa676c6a6f1f1aabda43", size = 228596, upload-time = "2026-01-26T02:44:51.951Z" },
-    { url = "https://files.pythonhosted.org/packages/1e/7e/3562a15a60cf747397e7f2180b0a11dc0c38d9175a650e75fa1b4d325e15/multidict-6.7.1-cp313-cp313t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:98bc624954ec4d2c7cb074b8eefc2b5d0ce7d482e410df446414355d158fe4ca", size = 257492, upload-time = "2026-01-26T02:44:53.902Z" },
-    { url = "https://files.pythonhosted.org/packages/24/02/7d0f9eae92b5249bb50ac1595b295f10e263dd0078ebb55115c31e0eaccd/multidict-6.7.1-cp313-cp313t-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:1b99af4d9eec0b49927b4402bcbb58dea89d3e0db8806a4086117019939ad3dd", size = 255899, upload-time = "2026-01-26T02:44:55.316Z" },
-    { url = "https://files.pythonhosted.org/packages/00/e3/9b60ed9e23e64c73a5cde95269ef1330678e9c6e34dd4eb6b431b85b5a10/multidict-6.7.1-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:6aac4f16b472d5b7dc6f66a0d49dd57b0e0902090be16594dc9ebfd3d17c47e7", size = 247970, upload-time = "2026-01-26T02:44:56.783Z" },
-    { url = "https://files.pythonhosted.org/packages/3e/06/538e58a63ed5cfb0bd4517e346b91da32fde409d839720f664e9a4ae4f9d/multidict-6.7.1-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:21f830fe223215dffd51f538e78c172ed7c7f60c9b96a2bf05c4848ad49921c3", size = 245060, upload-time = "2026-01-26T02:44:58.195Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/2f/d743a3045a97c895d401e9bd29aaa09b94f5cbdf1bd561609e5a6c431c70/multidict-6.7.1-cp313-cp313t-musllinux_1_2_armv7l.whl", hash = "sha256:f5dd81c45b05518b9aa4da4aa74e1c93d715efa234fd3e8a179df611cc85e5f4", size = 235888, upload-time = "2026-01-26T02:44:59.57Z" },
-    { url = "https://files.pythonhosted.org/packages/38/83/5a325cac191ab28b63c52f14f1131f3b0a55ba3b9aa65a6d0bf2a9b921a0/multidict-6.7.1-cp313-cp313t-musllinux_1_2_i686.whl", hash = "sha256:eb304767bca2bb92fb9c5bd33cedc95baee5bb5f6c88e63706533a1c06ad08c8", size = 243554, upload-time = "2026-01-26T02:45:01.054Z" },
-    { url = "https://files.pythonhosted.org/packages/20/1f/9d2327086bd15da2725ef6aae624208e2ef828ed99892b17f60c344e57ed/multidict-6.7.1-cp313-cp313t-musllinux_1_2_ppc64le.whl", hash = "sha256:c9035dde0f916702850ef66460bc4239d89d08df4d02023a5926e7446724212c", size = 252341, upload-time = "2026-01-26T02:45:02.484Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/2c/2a1aa0280cf579d0f6eed8ee5211c4f1730bd7e06c636ba2ee6aafda302e/multidict-6.7.1-cp313-cp313t-musllinux_1_2_s390x.whl", hash = "sha256:af959b9beeb66c822380f222f0e0a1889331597e81f1ded7f374f3ecb0fd6c52", size = 246391, upload-time = "2026-01-26T02:45:03.862Z" },
-    { url = "https://files.pythonhosted.org/packages/e5/03/7ca022ffc36c5a3f6e03b179a5ceb829be9da5783e6fe395f347c0794680/multidict-6.7.1-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:41f2952231456154ee479651491e94118229844dd7226541788be783be2b5108", size = 243422, upload-time = "2026-01-26T02:45:05.296Z" },
-    { url = "https://files.pythonhosted.org/packages/dc/1d/b31650eab6c5778aceed46ba735bd97f7c7d2f54b319fa916c0f96e7805b/multidict-6.7.1-cp313-cp313t-win32.whl", hash = "sha256:df9f19c28adcb40b6aae30bbaa1478c389efd50c28d541d76760199fc1037c32", size = 47770, upload-time = "2026-01-26T02:45:06.754Z" },
-    { url = "https://files.pythonhosted.org/packages/ac/5b/2d2d1d522e51285bd61b1e20df8f47ae1a9d80839db0b24ea783b3832832/multidict-6.7.1-cp313-cp313t-win_amd64.whl", hash = "sha256:d54ecf9f301853f2c5e802da559604b3e95bb7a3b01a9c295c6ee591b9882de8", size = 53109, upload-time = "2026-01-26T02:45:08.044Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/a3/cc409ba012c83ca024a308516703cf339bdc4b696195644a7215a5164a24/multidict-6.7.1-cp313-cp313t-win_arm64.whl", hash = "sha256:5a37ca18e360377cfda1d62f5f382ff41f2b8c4ccb329ed974cc2e1643440118", size = 45573, upload-time = "2026-01-26T02:45:09.349Z" },
-    { url = "https://files.pythonhosted.org/packages/81/08/7036c080d7117f28a4af526d794aab6a84463126db031b007717c1a6676e/multidict-6.7.1-py3-none-any.whl", hash = "sha256:55d97cc6dae627efa6a6e548885712d4864b81110ac76fa4e534c03819fa4a56", size = 12319, upload-time = "2026-01-26T02:46:44.004Z" },
-]
-
 [[package]]
 name = "mypy-extensions"
 version = "1.1.0"
@@ -1715,18 +814,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/79/7b/2c79738432f5c924bef5071f933bcc9efd0473bac3b4aa584a6f7c1c8df8/mypy_extensions-1.1.0-py3-none-any.whl", hash = "sha256:1be4cccdb0f2482337c4743e60421de3a356cd97508abadd57d47403e94f5505", size = 4963, upload-time = "2025-04-22T14:54:22.983Z" },
 ]
 
-[[package]]
-name = "nexus-rpc"
-version = "1.4.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/35/d5/cd1ffb202b76ebc1b33c1332a3416e55a39929006982adc2b1eb069aaa9b/nexus_rpc-1.4.0.tar.gz", hash = "sha256:3b8b373d4865671789cc43623e3dc0bcbf192562e40e13727e17f1c149050fba", size = 82367, upload-time = "2026-02-25T22:01:34.053Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/11/52/6327a5f4fda01207205038a106a99848a41c83e933cd23ea2cab3d2ebc6c/nexus_rpc-1.4.0-py3-none-any.whl", hash = "sha256:14c953d3519113f8ccec533a9efdb6b10c28afef75d11cdd6d422640c40b3a49", size = 29645, upload-time = "2026-02-25T22:01:33.122Z" },
-]
-
 [[package]]
 name = "nodeenv"
 version = "1.10.0"
@@ -1774,18 +861,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/78/0f/cc6afea3542a5142c5d8fc8211c5e059a8375105d004a41dfa2c7948dbb0/openai-2.53.0-py3-none-any.whl", hash = "sha256:c694ffc747a3c4d1663ef2b07b811315a476164ee5efa3a993967349ebca7618", size = 1659829, upload-time = "2026-08-03T21:41:59.581Z" },
 ]
 
-[[package]]
-name = "openapi-pydantic"
-version = "0.5.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pydantic" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/02/2e/58d83848dd1a79cb92ed8e63f6ba901ca282c5f09d04af9423ec26c56fd7/openapi_pydantic-0.5.1.tar.gz", hash = "sha256:ff6835af6bde7a459fb93eb93bb92b8749b754fc6e51b2f1590a19dc3005ee0d", size = 60892, upload-time = "2025-01-08T19:29:27.083Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/12/cf/03675d8bd8ecbf4445504d8071adab19f5f993676795708e36402ab38263/openapi_pydantic-0.5.1-py3-none-any.whl", hash = "sha256:a3a09ef4586f5bd760a8df7f43028b60cafb6d9f61de2acba9574766255ab146", size = 96381, upload-time = "2025-01-08T19:29:25.275Z" },
-]
-
 [[package]]
 name = "opencv-python-headless"
 version = "5.0.0.93"
@@ -1818,79 +893,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/cf/df/d3f1ddf4bb4cb50ed9b1139cc7b1c54c34a1e7ce8fd1b9a37c0d1551a6bd/opentelemetry_api-1.39.1-py3-none-any.whl", hash = "sha256:2edd8463432a7f8443edce90972169b195e7d6a05500cd29e6d13898187c9950", size = 66356, upload-time = "2025-12-11T13:32:17.304Z" },
 ]
 
-[[package]]
-name = "opentelemetry-exporter-otlp-proto-common"
-version = "1.39.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "opentelemetry-proto" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/e9/9d/22d241b66f7bbde88a3bfa6847a351d2c46b84de23e71222c6aae25c7050/opentelemetry_exporter_otlp_proto_common-1.39.1.tar.gz", hash = "sha256:763370d4737a59741c89a67b50f9e39271639ee4afc999dadfe768541c027464", size = 20409, upload-time = "2025-12-11T13:32:40.885Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/8c/02/ffc3e143d89a27ac21fd557365b98bd0653b98de8a101151d5805b5d4c33/opentelemetry_exporter_otlp_proto_common-1.39.1-py3-none-any.whl", hash = "sha256:08f8a5862d64cc3435105686d0216c1365dc5701f86844a8cd56597d0c764fde", size = 18366, upload-time = "2025-12-11T13:32:20.2Z" },
-]
-
-[[package]]
-name = "opentelemetry-exporter-otlp-proto-http"
-version = "1.39.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "googleapis-common-protos" },
-    { name = "opentelemetry-api" },
-    { name = "opentelemetry-exporter-otlp-proto-common" },
-    { name = "opentelemetry-proto" },
-    { name = "opentelemetry-sdk" },
-    { name = "requests" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/80/04/2a08fa9c0214ae38880df01e8bfae12b067ec0793446578575e5080d6545/opentelemetry_exporter_otlp_proto_http-1.39.1.tar.gz", hash = "sha256:31bdab9745c709ce90a49a0624c2bd445d31a28ba34275951a6a362d16a0b9cb", size = 17288, upload-time = "2025-12-11T13:32:42.029Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/95/f1/b27d3e2e003cd9a3592c43d099d2ed8d0a947c15281bf8463a256db0b46c/opentelemetry_exporter_otlp_proto_http-1.39.1-py3-none-any.whl", hash = "sha256:d9f5207183dd752a412c4cd564ca8875ececba13be6e9c6c370ffb752fd59985", size = 19641, upload-time = "2025-12-11T13:32:22.248Z" },
-]
-
-[[package]]
-name = "opentelemetry-instrumentation"
-version = "0.60b1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "opentelemetry-api" },
-    { name = "opentelemetry-semantic-conventions" },
-    { name = "packaging" },
-    { name = "wrapt" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/41/0f/7e6b713ac117c1f5e4e3300748af699b9902a2e5e34c9cf443dde25a01fa/opentelemetry_instrumentation-0.60b1.tar.gz", hash = "sha256:57ddc7974c6eb35865af0426d1a17132b88b2ed8586897fee187fd5b8944bd6a", size = 31706, upload-time = "2025-12-11T13:36:42.515Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/77/d2/6788e83c5c86a2690101681aeef27eeb2a6bf22df52d3f263a22cee20915/opentelemetry_instrumentation-0.60b1-py3-none-any.whl", hash = "sha256:04480db952b48fb1ed0073f822f0ee26012b7be7c3eac1a3793122737c78632d", size = 33096, upload-time = "2025-12-11T13:35:33.067Z" },
-]
-
-[[package]]
-name = "opentelemetry-instrumentation-httpx"
-version = "0.60b1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "opentelemetry-api" },
-    { name = "opentelemetry-instrumentation" },
-    { name = "opentelemetry-semantic-conventions" },
-    { name = "opentelemetry-util-http" },
-    { name = "wrapt" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/86/08/11208bcfcab4fc2023252c3f322aa397fd9ad948355fea60f5fc98648603/opentelemetry_instrumentation_httpx-0.60b1.tar.gz", hash = "sha256:a506ebaf28c60112cbe70ad4f0338f8603f148938cb7b6794ce1051cd2b270ae", size = 20611, upload-time = "2025-12-11T13:37:01.661Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/43/59/b98e84eebf745ffc75397eaad4763795bff8a30cbf2373a50ed4e70646c5/opentelemetry_instrumentation_httpx-0.60b1-py3-none-any.whl", hash = "sha256:f37636dd742ad2af83d896ba69601ed28da51fa4e25d1ab62fde89ce413e275b", size = 15701, upload-time = "2025-12-11T13:36:04.56Z" },
-]
-
-[[package]]
-name = "opentelemetry-proto"
-version = "1.39.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "protobuf" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/49/1d/f25d76d8260c156c40c97c9ed4511ec0f9ce353f8108ca6e7561f82a06b2/opentelemetry_proto-1.39.1.tar.gz", hash = "sha256:6c8e05144fc0d3ed4d22c2289c6b126e03bcd0e6a7da0f16cedd2e1c2772e2c8", size = 46152, upload-time = "2025-12-11T13:32:48.681Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/51/95/b40c96a7b5203005a0b03d8ce8cd212ff23f1793d5ba289c87a097571b18/opentelemetry_proto-1.39.1-py3-none-any.whl", hash = "sha256:22cdc78efd3b3765d09e68bfbd010d4fc254c9818afd0b6b423387d9dee46007", size = 72535, upload-time = "2025-12-11T13:32:33.866Z" },
-]
-
 [[package]]
 name = "opentelemetry-sdk"
 version = "1.39.1"
@@ -1918,38 +920,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/7a/5e/5958555e09635d09b75de3c4f8b9cae7335ca545d77392ffe7331534c402/opentelemetry_semantic_conventions-0.60b1-py3-none-any.whl", hash = "sha256:9fa8c8b0c110da289809292b0591220d3a7b53c1526a23021e977d68597893fb", size = 219982, upload-time = "2025-12-11T13:32:36.955Z" },
 ]
 
-[[package]]
-name = "opentelemetry-util-http"
-version = "0.60b1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/50/fc/c47bb04a1d8a941a4061307e1eddfa331ed4d0ab13d8a9781e6db256940a/opentelemetry_util_http-0.60b1.tar.gz", hash = "sha256:0d97152ca8c8a41ced7172d29d3622a219317f74ae6bb3027cfbdcf22c3cc0d6", size = 11053, upload-time = "2025-12-11T13:37:25.115Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/16/5c/d3f1733665f7cd582ef0842fb1d2ed0bc1fba10875160593342d22bba375/opentelemetry_util_http-0.60b1-py3-none-any.whl", hash = "sha256:66381ba28550c91bee14dcba8979ace443444af1ed609226634596b4b0faf199", size = 8947, upload-time = "2025-12-11T13:36:37.151Z" },
-]
-
-[[package]]
-name = "orjson"
-version = "3.11.9"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/7e/0c/964746fcafbd16f8ff53219ad9f6b412b34f345c75f384ad434ceaadb538/orjson-3.11.9.tar.gz", hash = "sha256:4fef17e1f8722c11587a6ef18e35902450221da0028e65dbaaa543619e68e48f", size = 5599163, upload-time = "2026-05-06T15:11:08.309Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/32/33/93fcc25907235c344ae73122f8a4e01d2d393ef062b4af7d2e2487a32c37/orjson-3.11.9-cp313-cp313-macosx_10_15_x86_64.macosx_11_0_arm64.macosx_10_15_universal2.whl", hash = "sha256:4bab1b2d6141fe7b32ae71dac905666ece4f94936efbfb13d55bb7739a3a6021", size = 228458, upload-time = "2026-05-06T15:10:20.079Z" },
-    { url = "https://files.pythonhosted.org/packages/8f/27/b1e6dadb3c080313c03fdd8067b85e6a0460c7d8d6a1c3984ef77b904e4d/orjson-3.11.9-cp313-cp313-macosx_15_0_arm64.whl", hash = "sha256:844417969855fc7a41be124aafe83dc424592a7f77cd4501900c67307122b92c", size = 128368, upload-time = "2026-05-06T15:10:21.549Z" },
-    { url = "https://files.pythonhosted.org/packages/21/0f/c9ede0bf052f6b4051e64a7d4fa91b725cccf8321a6a786e86eb03519f00/orjson-3.11.9-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:ffe02797b5e9f3a9d8292ddcd289b474ad13e81ad83cd1891a240811f1d2cb81", size = 132070, upload-time = "2026-05-06T15:10:23.371Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/26/d398e28048dc18205bbe812f2c88cb9b40313db2470778e25964796458fe/orjson-3.11.9-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:0e4eed3b200023042814d2fc8a5d2e880f13b52e1ed2485e83da4f3962f7dc1a", size = 127892, upload-time = "2026-05-06T15:10:24.714Z" },
-    { url = "https://files.pythonhosted.org/packages/66/60/52b0054c4c700d5aa7fc5b7ca96917400d8f061307778578e67a10e25852/orjson-3.11.9-cp313-cp313-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:8aff7da9952a5ad1cef8e68017724d96c7b9a66e99e91d6252e1b133d67a7b10", size = 135217, upload-time = "2026-05-06T15:10:26.084Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/97/1e3dc2b2a28b7b2528f403d2fc1d79ec5f39af3bc143ab65d3ec26426385/orjson-3.11.9-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:4d4e98d6f3b8afed8bc8cd9718ec0cdf46661826beefb53fe8eafb37f2bf0362", size = 145980, upload-time = "2026-05-06T15:10:28.062Z" },
-    { url = "https://files.pythonhosted.org/packages/fc/39/31fbfe7850f2de32dee7e7e5c09f26d403ab01e440ac96001c6b01ad3c99/orjson-3.11.9-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:3a81d52442a7c99b3662333235b3adf96a1715864658b35bb797212be7bddb97", size = 132738, upload-time = "2026-05-06T15:10:29.727Z" },
-    { url = "https://files.pythonhosted.org/packages/a1/08/dca0082dd2a194acb93e5457e73455388e2e2ca464a2672449a9ddbb679d/orjson-3.11.9-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:4e39364e726a8fff737309aff059ff67d8a8c8d5b677be7bb49a8b3e84b7e218", size = 134033, upload-time = "2026-05-06T15:10:31.152Z" },
-    { url = "https://files.pythonhosted.org/packages/11/d4/5bdb0626801230139987385554c5d4c42255218ac906525bf4347f22cd95/orjson-3.11.9-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:4fd66214623f1b17501df9f0543bef0b833979ab5b6ded1e1d123222866aa8c9", size = 141492, upload-time = "2026-05-06T15:10:32.641Z" },
-    { url = "https://files.pythonhosted.org/packages/fa/88/a21fb53b3ede6703aede6dce4710ed4111e5b201cfa6bbff5e544f9d47d7/orjson-3.11.9-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:8ecc30f10465fa1e0ce13fd01d9e22c316e5053a719a8d915d4545a09a5ff677", size = 415087, upload-time = "2026-05-06T15:10:34.438Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/57/1b30daf70f0d8180e9a73cefbfbdd99e4bf19eb020466502b01fba7e0e50/orjson-3.11.9-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:97db4c94a7db398a5bd636273324f0b3fd58b350bbbac8bb380ceb825a9b40f4", size = 148031, upload-time = "2026-05-06T15:10:36.358Z" },
-    { url = "https://files.pythonhosted.org/packages/04/83/45fbb6d962e260807f99441db9613cee868ceda4baceda59b3720a563f97/orjson-3.11.9-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:9f78cf8fec5bd627f4082b8dfeac7871b43d7f3274904492a43dab39f18a19a0", size = 136915, upload-time = "2026-05-06T15:10:38.013Z" },
-    { url = "https://files.pythonhosted.org/packages/5f/cc/2d10025f9056d376e4127ec05a5808b218d46f035fdc08178a5411b34250/orjson-3.11.9-cp313-cp313-win32.whl", hash = "sha256:d4087e5c0209a0a8efe4de3303c234b9c44d1174161dcd851e8eea07c7560b32", size = 131613, upload-time = "2026-05-06T15:10:39.569Z" },
-    { url = "https://files.pythonhosted.org/packages/67/bd/2775ff28bfe883b9aa1ff348300542eb2ef1ee18d8ae0e3a49846817a865/orjson-3.11.9-cp313-cp313-win_amd64.whl", hash = "sha256:051b102c93b4f634e89f3866b07b9a9a98915ada541f4ec30f177067b2694979", size = 127086, upload-time = "2026-05-06T15:10:41.262Z" },
-    { url = "https://files.pythonhosted.org/packages/91/2b/d26799e580939e32a7da9a39531bc9e58e15ca32ffaa6a8cb3e9bb0d22cd/orjson-3.11.9-cp313-cp313-win_arm64.whl", hash = "sha256:cce9127885941bd28f080cecf1f1d288336b7e0d812c345b08be88b572796254", size = 126696, upload-time = "2026-05-06T15:10:42.651Z" },
-]
-
 [[package]]
 name = "packaging"
 version = "25.0"
@@ -1981,15 +951,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/85/8d/eef3d8cdccc32abdd91b1286884c99b8c3a6d3b135affcc2a7a0f383bb32/parse_type-0.6.6-py2.py3-none-any.whl", hash = "sha256:3ca79bbe71e170dfccc8ec6c341edfd1c2a0fc1e5cfd18330f93af938de2348c", size = 27085, upload-time = "2025-08-11T22:53:46.396Z" },
 ]
 
-[[package]]
-name = "pathable"
-version = "0.6.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/66/f3/5a20387de9bcd0607871bfc2198ee0e15836da7baa4592ccd7f24c27c986/pathable-0.6.0.tar.gz", hash = "sha256:6404b8b82aef5ff0fd478934137128b99b12212ba35afdde5525ca4f8388ea58", size = 18970, upload-time = "2026-05-19T18:15:11.911Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/a2/e8/6d75ffd9784bce2e93d1ae4415649427e39a53bb172d4672b2b59c6f0a7b/pathable-0.6.0-py3-none-any.whl", hash = "sha256:82c4ca6c98c502ad12e0d4e9779b6210afee93c38990988c8c5d1b49bdcdf566", size = 18983, upload-time = "2026-05-19T18:15:10.728Z" },
-]
-
 [[package]]
 name = "pathspec"
 version = "1.1.1"
@@ -2073,76 +1034,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/2d/f4/e5a968a7f843dc31215c694e2edfafa0644e9b9e833588c1f4adfc0175ee/posthog-7.38.3-py3-none-any.whl", hash = "sha256:099aeea324b6c20e352a5bf37a43428fce20c76459d3d27da3b8c8df7814179f", size = 496878, upload-time = "2026-08-07T18:05:12.178Z" },
 ]
 
-[[package]]
-name = "prompt-toolkit"
-version = "3.0.53"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "wcwidth" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/7d/ea/39b988c938f75cb75d7045b5c69f8bfed47ee2152c8837fb403de29d6fb8/prompt_toolkit-3.0.53.tar.gz", hash = "sha256:9ec8a0ad96d5c56148b3f914aa79c1564c3fde5d2e6b876e7bc327e353cf8fa6", size = 435492, upload-time = "2026-07-26T20:56:14.758Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/54/6f/84908cad2d6aa5144abcf7b42709fe4fdb459bc640ec7ac5786e7693dabc/prompt_toolkit-3.0.53-py3-none-any.whl", hash = "sha256:01c0891d7f9237d5e339f7d3e42cdae80b7534abb1c7c0e3352efba6231492f2", size = 392288, upload-time = "2026-07-26T20:56:12.512Z" },
-]
-
-[[package]]
-name = "propcache"
-version = "0.5.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/ec/44/c87281c333769159c50594f22610f77398a47ccbfbbf23074e744e86f87c/propcache-0.5.2.tar.gz", hash = "sha256:01c4fc7480cd0598bb4b57022df55b9ca296da7fc5a8760bd8451a7e63a7d427", size = 50208, upload-time = "2026-05-08T21:02:12.199Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c5/09/f049e45385503fe67db75a6b6186a7b9f0c3930366dc960522c312a825b1/propcache-0.5.2-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:099aaf4b4d1a02265b92a977edf00b5c4f63b3b17ac6de39b0d637c9cac0188a", size = 94457, upload-time = "2026-05-08T21:00:36.355Z" },
-    { url = "https://files.pythonhosted.org/packages/6b/65/83d1d05655baf63113731bd5a1008435e14f8d1e5a06cbe4ec5b23ad7a31/propcache-0.5.2-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:68ce1c44c7a813a7f71ea04315a8c7b330b63db99d059a797a4651bb6f69f117", size = 53835, upload-time = "2026-05-08T21:00:38.072Z" },
-    { url = "https://files.pythonhosted.org/packages/a9/12/a6ba6482bb5ea3260c000c9b20881c95fa11c6b30173715668259f844ed7/propcache-0.5.2-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:fc299c129490f55f254cd90be0deca4764e36e9a7c08b4aa588479a3bbed3098", size = 54545, upload-time = "2026-05-08T21:00:39.319Z" },
-    { url = "https://files.pythonhosted.org/packages/a9/19/7fa086f5764c59ec8a8e157cd93aa8497acc00aba9dcdec56bfffb32602d/propcache-0.5.2-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:a6ae2198be502c10f09b2516e7b5d019816924bc3183a43ce792a7bd6625e6f4", size = 59886, upload-time = "2026-05-08T21:00:40.621Z" },
-    { url = "https://files.pythonhosted.org/packages/a1/e4/5d7663dc8235956c8f5281698a3af1d351d8820341ddd890f59d9a9127f2/propcache-0.5.2-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:6041d31504dc1779d700e1edcfb08eea334b357620b06681a4eabb57a74e574e", size = 63261, upload-time = "2026-05-08T21:00:41.775Z" },
-    { url = "https://files.pythonhosted.org/packages/4a/4a/15a03adee24d6350da4292caeac44c34c033d2afe5e87eb370f38854560f/propcache-0.5.2-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:f7eabc04151c78a9f4d5bbb5f1faf571e4defeb4b585e0fe95b60ff2dbe4d3d7", size = 64184, upload-time = "2026-05-08T21:00:43.018Z" },
-    { url = "https://files.pythonhosted.org/packages/8b/c6/979176efdaa3d239e36d503d5af63a0a773b36662ed8f52e5b6a6d9fd40e/propcache-0.5.2-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:4db0ba63d693afd40d249bd93f842b5f144f8fcbb83de05660373bcf30517b1d", size = 61534, upload-time = "2026-05-08T21:00:44.507Z" },
-    { url = "https://files.pythonhosted.org/packages/c8/22/63e8cd1bae4c2d2be6493b6b7d10566ddafad88137cfbc99964a1119853c/propcache-0.5.2-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:1dbcf7675229b35d31abb6547d8ebc8c27a830ac3f9a794edff6254873ec7c0a", size = 61500, upload-time = "2026-05-08T21:00:45.796Z" },
-    { url = "https://files.pythonhosted.org/packages/60/5a/28e5d9acbac1cc9ccb67045e8c1b943aa8d79fdf39c93bd73cacd68008ea/propcache-0.5.2-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:d310c013aad2c72f1c3f2f8dd3279d460a858c551f97aeb8c63e4693cca7b4d2", size = 59994, upload-time = "2026-05-08T21:00:47.093Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/40/db650677f554a95b9c01a7c9d93d629e93a15562f5deb4573c9ee136fed2/propcache-0.5.2-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:06187263ddad280d05b4d8a8b3bb7d164cbebd469236544a42e6d9b28ac6a4fa", size = 56884, upload-time = "2026-05-08T21:00:48.376Z" },
-    { url = "https://files.pythonhosted.org/packages/80/45/70b39b89516ff8b96bf732fa6fded8cef20f293cb1508690101c3c07ec51/propcache-0.5.2-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:3115559b8effafd63b142ea5ed53d63a16ea6469cbc63dce4ee194b42db5d853", size = 63464, upload-time = "2026-05-08T21:00:49.954Z" },
-    { url = "https://files.pythonhosted.org/packages/f9/e2/fa59d3a89eac5534293124af4f1d0d0ada091ce4a0ab4610ce03fd2bdd8d/propcache-0.5.2-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:c60462af8e6dc30c35407c7237ea908d777b22862bbee27bc4699c0d8bcdc45a", size = 61588, upload-time = "2026-05-08T21:00:51.281Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/97/efb547a55c4bc7381cfb202d6a2239ac621045277bc1ea5dfd3a7f0516c0/propcache-0.5.2-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:40314bca9ac559716fe374094fc81c11dcc34b64fd6c585360f5775690505704", size = 64667, upload-time = "2026-05-08T21:00:52.602Z" },
-    { url = "https://files.pythonhosted.org/packages/92/56/f5c7d9b4b7595d5127da38974d791b2153f3d1eae6c674af3583ace92ad3/propcache-0.5.2-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:cfa21e036ce1e1db2be04ba3b85d2df1bb1702fa01932d984c5464c665228ff4", size = 62463, upload-time = "2026-05-08T21:00:54.303Z" },
-    { url = "https://files.pythonhosted.org/packages/bd/3b/484a3a65fc9f9f60c41dcd17b428bace5389544e2c680994534a20755066/propcache-0.5.2-cp313-cp313-win32.whl", hash = "sha256:f156a3529f38063b6dbaf356e15602a7f95f8055b1295a438433a6386f10463d", size = 38621, upload-time = "2026-05-08T21:00:55.808Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/fd/3f0f10dba4dabad3bf53102be007abf55481067952bde0fdddff439e7c61/propcache-0.5.2-cp313-cp313-win_amd64.whl", hash = "sha256:dfed59d0a5aeb01e242e66ff0300bc4a265a7c05f612d30016f0b60b1017d757", size = 41649, upload-time = "2026-05-08T21:00:57.061Z" },
-    { url = "https://files.pythonhosted.org/packages/90/ec/6ce619cc32bb500a482f811f9cd509368b4e58e638d13f2c68f370d6b475/propcache-0.5.2-cp313-cp313-win_arm64.whl", hash = "sha256:ba338430e87ceb9c8f0cf754de38a9860560261e56c00376debd628698a7364f", size = 37636, upload-time = "2026-05-08T21:00:58.646Z" },
-    { url = "https://files.pythonhosted.org/packages/1b/82/c1d268bbbf2ef981c5bf0fbbe746db617c66e3bcefe431a1aa8943fbe23a/propcache-0.5.2-cp313-cp313t-macosx_10_13_universal2.whl", hash = "sha256:a592f5f3da71c8691c788c13cb6734b6d17663d2e1cb8caddf0673d01ef8847d", size = 98872, upload-time = "2026-05-08T21:00:59.889Z" },
-    { url = "https://files.pythonhosted.org/packages/f4/d4/52c871e73e864e6b34c0e2d58ac1ec5ccd149497ddc7ad2137ae98323a35/propcache-0.5.2-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:6a997d0489e9668a384fcfd5061b857aa5361de73191cac204d04b889cfbbafa", size = 56257, upload-time = "2026-05-08T21:01:01.195Z" },
-    { url = "https://files.pythonhosted.org/packages/67/f0/9b90ca2a210b3d09bcfcd96ecd0f55545c091535abce2a45de2775cfd357/propcache-0.5.2-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:10734b5484ea113152ee25a91dccedf81631791805d2c9ccb054958e51842c94", size = 56696, upload-time = "2026-05-08T21:01:02.941Z" },
-    { url = "https://files.pythonhosted.org/packages/9d/0e/6e9d4ba07c8e56e21ddec1e75f12148142b21ca83a51871babce095334f4/propcache-0.5.2-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:cafca7e56c12bb02ae16d283742bef25a61122e9dab2b5b3f2ccbe589ce32164", size = 62378, upload-time = "2026-05-08T21:01:04.475Z" },
-    { url = "https://files.pythonhosted.org/packages/65/19/c10badaa463dde8a27ce884f8ee2ec37e6035b7c9f5ff0c8f74f06f08dac/propcache-0.5.2-cp313-cp313t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:f064f8d2b59177878b7615df1735cd8fe3462ed6be8c7b217d17a276489c2b7f", size = 65283, upload-time = "2026-05-08T21:01:05.959Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/b6/93bea99ca80e19cef6512a8580e5b7857bbe09422d9daa7fd4ef5723306c/propcache-0.5.2-cp313-cp313t-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:f78abfa8dfc32376fd1aacf597b2f2fbbe0ea751419aee718af5d4f82537ef8c", size = 66616, upload-time = "2026-05-08T21:01:07.228Z" },
-    { url = "https://files.pythonhosted.org/packages/83/e4/5c7462e50625f051f37fb38b8224f7639f667184bbd34424ec83819bb1b7/propcache-0.5.2-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:f7467da8a9822bf1a55336f877340c5bcbd3c482afc43a99771169f74a26dedc", size = 63773, upload-time = "2026-05-08T21:01:08.514Z" },
-    { url = "https://files.pythonhosted.org/packages/ca/b6/99238894047b13c823be25027e736626cd414a52a5e30d2c3347c2733529/propcache-0.5.2-cp313-cp313t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:a6ddc6ac9e25de626c1f129c1b467d7ecd33ce2237d3fd0c4e429feef0a7ee1f", size = 63664, upload-time = "2026-05-08T21:01:09.874Z" },
-    { url = "https://files.pythonhosted.org/packages/85/1e/a3a1a63116a2b8edb415a8bb9a6f0c34bd03830b1e18e8ce2904e1dc1cf4/propcache-0.5.2-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:2f22cbbac9e26a8e864c0985ff1268d5d939d53d9d9411a9824279097e03a2cb", size = 62643, upload-time = "2026-05-08T21:01:11.132Z" },
-    { url = "https://files.pythonhosted.org/packages/e4/03/893cf147de2fc6543c5eaa07ad833170e7e2a2385725bbebe8c0503723bb/propcache-0.5.2-cp313-cp313t-musllinux_1_2_armv7l.whl", hash = "sha256:fc76378c62a0f04d0cd82fbb1a2cd2d7e28fcb40d5873f28a6c44e388aaa2751", size = 59595, upload-time = "2026-05-08T21:01:12.387Z" },
-    { url = "https://files.pythonhosted.org/packages/86/3b/04c1a2e12c57766568ba75ba72b3bf2042818d4c1425fab6fc07155c7cff/propcache-0.5.2-cp313-cp313t-musllinux_1_2_ppc64le.whl", hash = "sha256:acd2c8edba48e31e58a363b8cf4e5c7db3b04b3f9e371f601df30d9b0d244836", size = 65711, upload-time = "2026-05-08T21:01:13.676Z" },
-    { url = "https://files.pythonhosted.org/packages/1c/34/80f8d0099f8d6bacc4de1624c85672681c8cd1149ca2da0e38fd120b817f/propcache-0.5.2-cp313-cp313t-musllinux_1_2_riscv64.whl", hash = "sha256:452b5065457eb9991ec5eb38ff41d6cd4c991c9ac7c531c4d5849ae473a9a13f", size = 64247, upload-time = "2026-05-08T21:01:14.936Z" },
-    { url = "https://files.pythonhosted.org/packages/f3/1a/8b08f3a5f1037e9e370c55883ceeeee0f6dd0416fb2d2d67b8bfc91f2a79/propcache-0.5.2-cp313-cp313t-musllinux_1_2_s390x.whl", hash = "sha256:3430bb2bfe1331885c427745a751e774ee679fd4344f80b97bf879815fe8fa55", size = 67102, upload-time = "2026-05-08T21:01:16.281Z" },
-    { url = "https://files.pythonhosted.org/packages/34/68/8bdb7bb7756d76e005490649d10e4a8369e610c74d619f71e1aedf889e9c/propcache-0.5.2-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:cef6cea3922890dd6c9654971001fa797b526c16ab5e1e46c05fd6f877be7568", size = 64964, upload-time = "2026-05-08T21:01:17.57Z" },
-    { url = "https://files.pythonhosted.org/packages/0a/aa/50fb0b5d3968b61a510926ff8b8465f1d6e976b3ab74496d7a4b9fc42515/propcache-0.5.2-cp313-cp313t-win32.whl", hash = "sha256:72d61e16dd78228b58c5d47be830ff3da7e5f139abdf0aef9d86cde1c5cf2191", size = 42546, upload-time = "2026-05-08T21:01:18.946Z" },
-    { url = "https://files.pythonhosted.org/packages/ae/4c/0ddbae64321bd4a95bcbfc19307238016b5b1fee645c84626c8d539e5b74/propcache-0.5.2-cp313-cp313t-win_amd64.whl", hash = "sha256:0958834041a0166d343b8d2cedcd8bcbaeb4fdbe0cf08320c5379f143c3be6e7", size = 46330, upload-time = "2026-05-08T21:01:20.162Z" },
-    { url = "https://files.pythonhosted.org/packages/00/d9/9cddc8efb78d8af264c5ec9f6d10b62f57c515feda8d321595f56010fb23/propcache-0.5.2-cp313-cp313t-win_arm64.whl", hash = "sha256:6de8bd93ddde9b992cf2b2e0d796d501a19026b5b9fd87356d7d0779531a8d96", size = 40521, upload-time = "2026-05-08T21:01:21.399Z" },
-    { url = "https://files.pythonhosted.org/packages/3a/ed/1cdcab6ba3d6ab7feca11fc14f0eeea80755bb53ef4e892079f31b10a25f/propcache-0.5.2-py3-none-any.whl", hash = "sha256:be1ddfcbb376e3de5d2e2db1d58d6d67463e6b4f9f040c000de8e300295465fe", size = 14036, upload-time = "2026-05-08T21:02:10.673Z" },
-]
-
-[[package]]
-name = "protobuf"
-version = "6.33.6"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/66/70/e908e9c5e52ef7c3a6c7902c9dfbb34c7e29c25d2f81ade3856445fd5c94/protobuf-6.33.6.tar.gz", hash = "sha256:a6768d25248312c297558af96a9f9c929e8c4cee0659cb07e780731095f38135", size = 444531, upload-time = "2026-03-18T19:05:00.988Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/fc/9f/2f509339e89cfa6f6a4c4ff50438db9ca488dec341f7e454adad60150b00/protobuf-6.33.6-cp310-abi3-win32.whl", hash = "sha256:7d29d9b65f8afef196f8334e80d6bc1d5d4adedb449971fefd3723824e6e77d3", size = 425739, upload-time = "2026-03-18T19:04:48.373Z" },
-    { url = "https://files.pythonhosted.org/packages/76/5d/683efcd4798e0030c1bab27374fd13a89f7c2515fb1f3123efdfaa5eab57/protobuf-6.33.6-cp310-abi3-win_amd64.whl", hash = "sha256:0cd27b587afca21b7cfa59a74dcbd48a50f0a6400cfb59391340ad729d91d326", size = 437089, upload-time = "2026-03-18T19:04:50.381Z" },
-    { url = "https://files.pythonhosted.org/packages/5c/01/a3c3ed5cd186f39e7880f8303cc51385a198a81469d53d0fdecf1f64d929/protobuf-6.33.6-cp39-abi3-macosx_10_9_universal2.whl", hash = "sha256:9720e6961b251bde64edfdab7d500725a2af5280f3f4c87e57c0208376aa8c3a", size = 427737, upload-time = "2026-03-18T19:04:51.866Z" },
-    { url = "https://files.pythonhosted.org/packages/ee/90/b3c01fdec7d2f627b3a6884243ba328c1217ed2d978def5c12dc50d328a3/protobuf-6.33.6-cp39-abi3-manylinux2014_aarch64.whl", hash = "sha256:e2afbae9b8e1825e3529f88d514754e094278bb95eadc0e199751cdd9a2e82a2", size = 324610, upload-time = "2026-03-18T19:04:53.096Z" },
-    { url = "https://files.pythonhosted.org/packages/9b/ca/25afc144934014700c52e05103c2421997482d561f3101ff352e1292fb81/protobuf-6.33.6-cp39-abi3-manylinux2014_s390x.whl", hash = "sha256:c96c37eec15086b79762ed265d59ab204dabc53056e3443e702d2681f4b39ce3", size = 339381, upload-time = "2026-03-18T19:04:54.616Z" },
-    { url = "https://files.pythonhosted.org/packages/16/92/d1e32e3e0d894fe00b15ce28ad4944ab692713f2e7f0a99787405e43533a/protobuf-6.33.6-cp39-abi3-manylinux2014_x86_64.whl", hash = "sha256:e9db7e292e0ab79dd108d7f1a94fe31601ce1ee3f7b79e0692043423020b0593", size = 323436, upload-time = "2026-03-18T19:04:55.768Z" },
-    { url = "https://files.pythonhosted.org/packages/c4/72/02445137af02769918a93807b2b7890047c32bfb9f90371cbc12688819eb/protobuf-6.33.6-py3-none-any.whl", hash = "sha256:77179e006c476e69bf8e8ce866640091ec42e1beb80b213c3900006ecfba6901", size = 170656, upload-time = "2026-03-18T19:04:59.826Z" },
-]
-
 [[package]]
 name = "psycopg"
 version = "3.3.4"
@@ -2193,52 +1084,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/37/ed/89c2c620af0e1660354cd8aabf9f5b21f911597ce22acb37c805d6c86bc8/psycopg_pool-3.3.1-py3-none-any.whl", hash = "sha256:2af5b432941c4c9ad5c87b3fa410aec910ec8f7c122855897983a06c45f2e4b5", size = 40023, upload-time = "2026-05-01T23:31:53.136Z" },
 ]
 
-[[package]]
-name = "py-key-value-aio"
-version = "0.4.5"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "beartype" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/fb/e2/d689d922894a7ecde73b6daeaf9b13dab5aae06fe6aaaf7514722644d382/py_key_value_aio-0.4.5.tar.gz", hash = "sha256:c6563a2c6abe5da5e20f4f9e875c2a9b425a2244a54fadbf46cf140a9eea45d7", size = 107547, upload-time = "2026-05-27T16:37:08.107Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/f6/95/b8ba862968712caa12a19666175334fa979e1f198b896a430adb3bacfe87/py_key_value_aio-0.4.5-py3-none-any.whl", hash = "sha256:ab862adbcb8c72547d1c57821f22cbbb71ab86509039c96f36e914e0336c8dd7", size = 170005, upload-time = "2026-05-27T16:37:06.629Z" },
-]
-
-[package.optional-dependencies]
-filetree = [
-    { name = "aiofile" },
-    { name = "anyio" },
-]
-keyring = [
-    { name = "keyring" },
-]
-memory = [
-    { name = "cachetools" },
-]
-
-[[package]]
-name = "pyasn1"
-version = "0.6.4"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/a4/9a/23310166d960def5897e91fe20e5b724601b02a22e84ba1f94232c0b7f67/pyasn1-0.6.4.tar.gz", hash = "sha256:9c447d8431c947fe4c8febc4ed9e760bc29011a5b01e5c74b67025bd9fb8ce81", size = 151262, upload-time = "2026-07-09T01:12:33.988Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/9a/3b/6163796d69c3977d1e4287bea4a6979161cbbdd170ebb430511e8e1999ce/pyasn1-0.6.4-py3-none-any.whl", hash = "sha256:deda9277cfd454080ec40b207fb6df82206a3a2688735233cdcd8d3d565f088b", size = 84410, upload-time = "2026-07-09T01:12:32.92Z" },
-]
-
-[[package]]
-name = "pyasn1-modules"
-version = "0.4.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pyasn1" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/e9/e6/78ebbb10a8c8e4b61a59249394a4a594c1a7af95593dc933a349c8d00964/pyasn1_modules-0.4.2.tar.gz", hash = "sha256:677091de870a80aae844b1ca6134f54652fa2c8c5a52aa396440ac3106e941e6", size = 307892, upload-time = "2025-03-28T02:41:22.17Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/47/8d/d529b5d697919ba8c11ad626e835d4039be708a35b0d22de83a269a6682c/pyasn1_modules-0.4.2-py3-none-any.whl", hash = "sha256:29253a9207ce32b64c3ac6600edc75368f98473906e8fd1043bd6b5b1de2c14a", size = 181259, upload-time = "2025-03-28T02:41:19.028Z" },
-]
-
 [[package]]
 name = "pycparser"
 version = "3.0"
@@ -2263,23 +1108,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/fd/7b/122376b1fd3c62c1ed9dc80c931ace4844b3c55407b6fb2d199377c9736f/pydantic-2.13.4-py3-none-any.whl", hash = "sha256:45a282cde31d808236fd7ea9d919b128653c8b38b393d1c4ab335c62924d9aba", size = 472262, upload-time = "2026-05-06T13:43:02.641Z" },
 ]
 
-[package.optional-dependencies]
-email = [
-    { name = "email-validator" },
-]
-
-[[package]]
-name = "pydantic-ai"
-version = "1.107.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pydantic-ai-slim", extra = ["ag-ui", "anthropic", "bedrock", "cli", "cohere", "evals", "fastmcp", "google", "groq", "huggingface", "logfire", "mcp", "mistral", "openai", "retries", "spec", "temporal", "ui", "vertexai", "xai"] },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/5a/ac/2edbefc3b6787d4e96a5c2d9764ceb95113dd6c5ed1db96fb0a6b75620ba/pydantic_ai-1.107.2.tar.gz", hash = "sha256:324f8a67821100b51c7d26667bea73bd6c229c9298093cdaa133478f389964a0", size = 18414, upload-time = "2026-08-08T03:31:43.502Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/82/5d/006df19f193276592def31b87be34d821376753f7a28cd993fde2c3b109f/pydantic_ai-1.107.2-py3-none-any.whl", hash = "sha256:d0705b09b7941f36d9859c6c4b2c32d2b477ba7c2326f33709f8869799cb5c21", size = 7588, upload-time = "2026-08-08T03:31:35.204Z" },
-]
-
 [[package]]
 name = "pydantic-ai-slim"
 version = "1.107.2"
@@ -2299,78 +1127,13 @@ wheels = [
 ]
 
 [package.optional-dependencies]
-ag-ui = [
-    { name = "ag-ui-protocol" },
-    { name = "starlette" },
-]
 anthropic = [
     { name = "anthropic" },
 ]
-bedrock = [
-    { name = "boto3" },
-]
-cli = [
-    { name = "argcomplete" },
-    { name = "prompt-toolkit" },
-    { name = "pyperclip" },
-    { name = "pyyaml" },
-    { name = "rich" },
-]
-cohere = [
-    { name = "cohere", marker = "sys_platform != 'emscripten'" },
-]
-evals = [
-    { name = "pydantic-evals" },
-]
-fastmcp = [
-    { name = "fastmcp" },
-]
-google = [
-    { name = "google-genai" },
-]
-groq = [
-    { name = "groq" },
-]
-huggingface = [
-    { name = "hf-xet", marker = "platform_machine == 'AMD64' or platform_machine == 'aarch64' or platform_machine == 'amd64' or platform_machine == 'arm64' or platform_machine == 'x86_64'" },
-    { name = "huggingface-hub" },
-]
-logfire = [
-    { name = "logfire", extra = ["httpx"] },
-]
-mcp = [
-    { name = "fastmcp-slim", extra = ["client"] },
-]
-mistral = [
-    { name = "mistralai" },
-]
 openai = [
     { name = "openai" },
     { name = "tiktoken" },
 ]
-retries = [
-    { name = "tenacity" },
-]
-spec = [
-    { name = "pydantic-handlebars" },
-    { name = "pyyaml" },
-]
-temporal = [
-    { name = "temporalio" },
-]
-ui = [
-    { name = "starlette" },
-]
-vertexai = [
-    { name = "google-auth" },
-    { name = "requests" },
-]
-voyageai = [
-    { name = "voyageai" },
-]
-xai = [
-    { name = "xai-sdk" },
-]
 
 [[package]]
 name = "pydantic-core"
@@ -2398,23 +1161,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c6/1a/f4aee670d5670e9e148e0c82c7db98d780be566c6e6a97ee8035528ca0b3/pydantic_core-2.46.4-cp313-cp313-win_arm64.whl", hash = "sha256:184c081504d17f1c1066e430e117142b2c77d9448a97f7b65c6ac9fd9aee238d", size = 2027411, upload-time = "2026-05-06T13:40:45.796Z" },
 ]
 
-[[package]]
-name = "pydantic-evals"
-version = "1.107.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-    { name = "logfire-api" },
-    { name = "pydantic" },
-    { name = "pydantic-ai-slim" },
-    { name = "pyyaml" },
-    { name = "rich" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/75/09/ef127d1f56a33759c7f8ed8aa687d338fdc00be0bad07055044db8c2010e/pydantic_evals-1.107.2.tar.gz", hash = "sha256:ead8c28c3d85a5d43df34eab6da9f8ac848e97e20964494713f4605430931de0", size = 78543, upload-time = "2026-08-08T03:31:46.681Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/27/f5/75a23d488201310504040443a9107ca8537d0f2c8c0422e49c143311351e/pydantic_evals-1.107.2-py3-none-any.whl", hash = "sha256:e72d062035cc9c1629476483443fc7e53bfc635c48f1d37bac6af3a86090ee17", size = 93584, upload-time = "2026-08-08T03:31:39.737Z" },
-]
-
 [[package]]
 name = "pydantic-graph"
 version = "1.107.2"
@@ -2430,18 +1176,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/93/84/f790f84728cafba744d8d55cb1d1dd9a659d0cd74d55b49bc514763a006c/pydantic_graph-1.107.2-py3-none-any.whl", hash = "sha256:ec8866d61ec042988f05946140a226d6d8dd5b24a0cb4647a638fc87c493edfd", size = 80106, upload-time = "2026-08-08T03:31:41.271Z" },
 ]
 
-[[package]]
-name = "pydantic-handlebars"
-version = "0.2.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pydantic" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/96/73/e55a1fe1a8788a5fa82d9209e796f4111e28f2d2fecab7173aa6d80516ad/pydantic_handlebars-0.2.1.tar.gz", hash = "sha256:d4124cfbf7d6e3bded9331a08ccccf6f29f3e3a93665b35b5d6061650aeeb49f", size = 176949, upload-time = "2026-05-25T01:24:38.354Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/55/11/364bc401f1d8fdb3947079fc43ffdfbfc9132d065981a03a95d2e87440c4/pydantic_handlebars-0.2.1-py3-none-any.whl", hash = "sha256:c713427d6498cf4b66814447d54753a2748f8a8d3a9f00c194192ddb3df61e52", size = 50476, upload-time = "2026-05-25T01:24:37.104Z" },
-]
-
 [[package]]
 name = "pydantic-settings"
 version = "2.15.0"
@@ -2474,20 +1208,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/f4/7e/a72dd26f3b0f4f2bf1dd8923c85f7ceb43172af56d63c7383eb62b332364/pygments-2.20.0-py3-none-any.whl", hash = "sha256:81a9e26dd42fd28a23a2d169d86d7ac03b46e2f8b59ed4698fb4785f946d0176", size = 1231151, upload-time = "2026-03-29T13:29:30.038Z" },
 ]
 
-[[package]]
-name = "pyjwt"
-version = "2.13.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/3b/81/58d0ac84e1ef3a3843791d6954d94c0b33d526c75eeb1efbce9d0a4c4077/pyjwt-2.13.0.tar.gz", hash = "sha256:41571c89ca91598c79e8ef18a2d07367d4810fbbd6f637794879baf1b7703423", size = 107515, upload-time = "2026-05-21T19:54:36.618Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/a3/5e/ecf12fdb62546d64385c158514e9b2b671f7832108ef2ecd2020ce0af2d1/pyjwt-2.13.0-py3-none-any.whl", hash = "sha256:66adcc2aff09b3f1bbd95fc1e1577df8ac8723c978552fd43304c8a290ac5728", size = 31274, upload-time = "2026-05-21T19:54:35.362Z" },
-]
-
-[package.optional-dependencies]
-crypto = [
-    { name = "cryptography" },
-]
-
 [[package]]
 name = "pypdf"
 version = "6.15.0"
@@ -2502,15 +1222,6 @@ crypto = [
     { name = "cryptography" },
 ]
 
-[[package]]
-name = "pyperclip"
-version = "1.11.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/e8/52/d87eba7cb129b81563019d1679026e7a112ef76855d6159d24754dbd2a51/pyperclip-1.11.0.tar.gz", hash = "sha256:244035963e4428530d9e3a6101a1ef97209c6825edab1567beac148ccc1db1b6", size = 12185, upload-time = "2025-09-26T14:40:37.245Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/df/80/fc9d01d5ed37ba4c42ca2b55b4339ae6e200b456be3a1aaddf4a9fa99b8c/pyperclip-1.11.0-py3-none-any.whl", hash = "sha256:299403e9ff44581cb9ba2ffeed69c7aa96a008622ad0c46cb575ca75b5b84273", size = 11063, upload-time = "2025-09-26T14:40:36.069Z" },
-]
-
 [[package]]
 name = "pyphen"
 version = "0.17.2"
@@ -2549,18 +1260,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/24/25/1de2678b631f5a49215c6c96fff41ba892b0a34df68d6d80292b1b48aa7f/pytest-9.1.1-py3-none-any.whl", hash = "sha256:37a86b45efb9a47a61a36449063e8e18d0cab3161329fc099eb21783169c4f0c", size = 386536, upload-time = "2026-06-19T10:58:31.347Z" },
 ]
 
-[[package]]
-name = "python-dateutil"
-version = "2.9.0.post0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "six" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/66/c0/0c8b6ad9f17a802ee498c46e004a0eb49bc148f2fd230864601a86dcf6db/python-dateutil-2.9.0.post0.tar.gz", hash = "sha256:37dd54208da7e1cd875388217d5e00ebd4179249f90fb72437e91a35459a0ad3", size = 342432, upload-time = "2024-03-01T18:36:20.211Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ec/57/56b9bcc3c9c6a792fcbaf139543cee77261f3651ca9da0c93f5c1221264b/python_dateutil-2.9.0.post0-py2.py3-none-any.whl", hash = "sha256:a8b2bc7bffae282281c8140a97d3aa9c14da0b136dfe83f850eea9a5f7470427", size = 229892, upload-time = "2024-03-01T18:36:18.57Z" },
-]
-
 [[package]]
 name = "python-dotenv"
 version = "1.2.2"
@@ -2570,15 +1269,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/0b/d7/1959b9648791274998a9c3526f6d0ec8fd2233e4d4acce81bbae76b44b2a/python_dotenv-1.2.2-py3-none-any.whl", hash = "sha256:1d8214789a24de455a8b8bd8ae6fe3c6b69a5e3d64aa8a8e5d68e694bbcb285a", size = 22101, upload-time = "2026-03-01T16:00:25.09Z" },
 ]
 
-[[package]]
-name = "python-multipart"
-version = "0.0.32"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/5b/42/55c32bb9b12693c092ad250a0e82edb5b31ddeda6eb772de5f308b3804ad/python_multipart-0.0.32.tar.gz", hash = "sha256:be54b7f3fa167bb83e4fcd936b887b708f4e57fe75911c02aebf53efaf8d938e", size = 46881, upload-time = "2026-06-04T16:18:58.647Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e1/04/e8135ebd1ad02c56ec633277529b2602ff99ff634be76cdba5744cf554fd/python_multipart-0.0.32-py3-none-any.whl", hash = "sha256:ff6d3f776f16878c894e52e107296ffc890e913c611b1a4ec6c44e2821fe2e23", size = 30042, upload-time = "2026-06-04T16:18:57.319Z" },
-]
-
 [[package]]
 name = "pytokens"
 version = "0.4.1"
@@ -2593,25 +1283,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c6/78/397db326746f0a342855b81216ae1f0a32965deccfd7c830a2dbc66d2483/pytokens-0.4.1-py3-none-any.whl", hash = "sha256:26cef14744a8385f35d0e095dc8b3a7583f6c953c2e3d269c7f82484bf5ad2de", size = 13729, upload-time = "2026-01-30T01:03:45.029Z" },
 ]
 
-[[package]]
-name = "pywin32"
-version = "312"
-source = { registry = "https://pypi.org/simple" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/2d/41/12fbfd7f36ed2146d8bc9de96c2741296bf0d490b98508496cff322e274c/pywin32-312-cp313-cp313-win32.whl", hash = "sha256:7a27df850933d16a8eabfbaeb73d52b273e2da667f80d70b01a89d1f6828d02c", size = 6370184, upload-time = "2026-06-04T07:49:36.253Z" },
-    { url = "https://files.pythonhosted.org/packages/ba/db/36a78e3403099d31d9746d13fdcde5accc43c1155f375a34d15983a479a7/pywin32-312-cp313-cp313-win_amd64.whl", hash = "sha256:c53e878d15a1c44788082bfe712a905433473aa38f86375b7cf8b45e3acbaaf9", size = 6914298, upload-time = "2026-06-04T07:49:38.876Z" },
-    { url = "https://files.pythonhosted.org/packages/84/37/c1697194092b76de9ed47ca124323f02c57ffc8a45c06f88a3d5acaf01eb/pywin32-312-cp313-cp313-win_arm64.whl", hash = "sha256:59aba5d5940842075343a5ddc6b11f1cdf0d1567fe745290359dfbcc7c2eb831", size = 6727640, upload-time = "2026-06-04T07:49:41.083Z" },
-]
-
-[[package]]
-name = "pywin32-ctypes"
-version = "0.2.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/85/9f/01a1a99704853cb63f253eea009390c88e7131c67e66a0a02099a8c917cb/pywin32-ctypes-0.2.3.tar.gz", hash = "sha256:d162dc04946d704503b2edc4d55f3dba5c1d539ead017afa00142c38b9885755", size = 29471, upload-time = "2024-08-14T10:15:34.626Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/de/3d/8161f7711c017e01ac9f008dfddd9410dff3674334c233bde66e7ba65bbf/pywin32_ctypes-0.2.3-py3-none-any.whl", hash = "sha256:8a1513379d709975552d202d942d9837758905c8d01eb82b8bcc30918929e7b8", size = 30756, upload-time = "2024-08-14T10:15:33.187Z" },
-]
-
 [[package]]
 name = "pyyaml"
 version = "6.0.3"
@@ -2728,44 +1399,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/a0/f4/c67b0b3f1b9245e8d266f0f112c500d50e5b4e83cb6f3b71b6528104182a/requests-2.34.2-py3-none-any.whl", hash = "sha256:2a0d60c172f83ac6ab31e4554906c0f3b3588d37b5cb939b1c061f4907e278e0", size = 73075, upload-time = "2026-05-14T19:25:26.443Z" },
 ]
 
-[[package]]
-name = "requests-toolbelt"
-version = "1.0.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "requests" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/f3/61/d7545dafb7ac2230c70d38d31cbfe4cc64f7144dc41f6e4e4b78ecd9f5bb/requests-toolbelt-1.0.0.tar.gz", hash = "sha256:7681a0a3d047012b5bdc0ee37d7f8f07ebe76ab08caeccfc3921ce23c88d5bc6", size = 206888, upload-time = "2023-05-01T04:11:33.229Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/3f/51/d4db610ef29373b879047326cbf6fa98b6c1969d6f6dc423279de2b1be2c/requests_toolbelt-1.0.0-py2.py3-none-any.whl", hash = "sha256:cccfdd665f0a24fcf4726e690f65639d272bb0637b9b92dfd91a5568ccf6bd06", size = 54481, upload-time = "2023-05-01T04:11:28.427Z" },
-]
-
-[[package]]
-name = "rich"
-version = "15.0.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "markdown-it-py" },
-    { name = "pygments" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/c0/8f/0722ca900cc807c13a6a0c696dacf35430f72e0ec571c4275d2371fca3e9/rich-15.0.0.tar.gz", hash = "sha256:edd07a4824c6b40189fb7ac9bc4c52536e9780fbbfbddf6f1e2502c31b068c36", size = 230680, upload-time = "2026-04-12T08:24:00.75Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/82/3b/64d4899d73f91ba49a8c18a8ff3f0ea8f1c1d75481760df8c68ef5235bf5/rich-15.0.0-py3-none-any.whl", hash = "sha256:33bd4ef74232fb73fe9279a257718407f169c09b78a87ad3d296f548e27de0bb", size = 310654, upload-time = "2026-04-12T08:24:02.83Z" },
-]
-
-[[package]]
-name = "rich-rst"
-version = "2.1.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "pygments" },
-    { name = "rich" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/e2/d6/d0b9fafc73b65767200da027acab1db1bdb1048f4fea5ebf659df01c700e/rich_rst-2.1.0.tar.gz", hash = "sha256:f4d117b49697f338769759fa5cacf5197da4888b347b9fda2e50aef5cd8d93bd", size = 302732, upload-time = "2026-07-05T02:59:44.308Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/2a/68/1fc93dd759605b5d00fc98b50200739e41ed32bd22d6ba35ca6c3932371b/rich_rst-2.1.0-py3-none-any.whl", hash = "sha256:7ecd1343ee12c879d0e7ae74c3eb6d263b023d2929c6d114212eb1fd91057255", size = 272987, upload-time = "2026-07-05T02:59:42.792Z" },
-]
-
 [[package]]
 name = "rpds-py"
 version = "2026.6.3"
@@ -2814,40 +1447,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/fe/4e/cd76eca6db6115604b7626668e891c9dd03330384082e33662fb0f113614/ruff-0.15.5-py3-none-win_arm64.whl", hash = "sha256:b498d1c60d2fe5c10c45ec3f698901065772730b411f164ae270bb6bfcc4740b", size = 10965572, upload-time = "2026-03-05T20:06:16.984Z" },
 ]
 
-[[package]]
-name = "s3transfer"
-version = "0.19.2"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "botocore" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/76/43/35e4d8aa320bffe8287fe8f65f578fa2d2db0a64212f0e710dce58267854/s3transfer-0.19.2.tar.gz", hash = "sha256:ba0309fd86be3c27dbf78cdd813c13c5e1df16e5874b99d2535ebbdfb9892993", size = 165592, upload-time = "2026-07-22T19:30:44.432Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/bc/e7/5c595c75e9f41a44f30e526eda465ea0b4eec93470e074e4a111b253f13a/s3transfer-0.19.2-py3-none-any.whl", hash = "sha256:d8168eccca828cbb2cd573675333f3bddd254313a9c42494b84c76b539e8ba25", size = 90216, upload-time = "2026-07-22T19:30:43.251Z" },
-]
-
-[[package]]
-name = "secretstorage"
-version = "3.5.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "cryptography" },
-    { name = "jeepney" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/1c/03/e834bcd866f2f8a49a85eaff47340affa3bfa391ee9912a952a1faa68c7b/secretstorage-3.5.0.tar.gz", hash = "sha256:f04b8e4689cbce351744d5537bf6b1329c6fc68f91fa666f60a380edddcd11be", size = 19884, upload-time = "2025-11-23T19:02:53.191Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/b7/46/f5af3402b579fd5e11573ce652019a67074317e18c1935cc0b4ba9b35552/secretstorage-3.5.0-py3-none-any.whl", hash = "sha256:0ce65888c0725fcb2c5bc0fdb8e5438eece02c523557ea40ce0703c266248137", size = 15554, upload-time = "2025-11-23T19:02:51.545Z" },
-]
-
-[[package]]
-name = "shellingham"
-version = "1.5.4"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/58/15/8b3609fd3830ef7b27b655beb4b4e9c62313a4e8da8c676e142cc210d58e/shellingham-1.5.4.tar.gz", hash = "sha256:8dbca0739d487e5bd35ab3ca4b36e11c4078f3a234bfce294b0a0291363404de", size = 10310, upload-time = "2023-10-24T04:13:40.426Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e0/f9/0595336914c5619e5f28a1fb793285925a8cd4b432c9da0a987836c7f822/shellingham-1.5.4-py2.py3-none-any.whl", hash = "sha256:7ecfff8f2fd72616f7481040475a65b2bf8af90a56c89140852d1120324e8686", size = 9755, upload-time = "2023-10-24T04:13:38.866Z" },
-]
-
 [[package]]
 name = "six"
 version = "1.17.0"
@@ -2887,19 +1486,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/42/89/81b2907cda14e566b9bf215e2ad82fc9b349edf07d2010756ffdb902f328/sqlite_vec-0.1.9-py3-none-win_amd64.whl", hash = "sha256:4a28dc12fa4b53d7b1dced22da2488fade444e96b5d16fd2d698cd670675cf32", size = 292804, upload-time = "2026-03-31T08:02:36.035Z" },
 ]
 
-[[package]]
-name = "sse-starlette"
-version = "3.4.8"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-    { name = "starlette" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/f8/00/b42a44342a054d58cb1115d7c8aa9cb4290dd9442f9c1b91a4b8173dba22/sse_starlette-3.4.8.tar.gz", hash = "sha256:ed89ffbb75cbf78a5fe2f2109cd584792ee7f9dfac96f791db546df8f15f3f9c", size = 32548, upload-time = "2026-08-05T11:19:49.982Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/dd/3a/764912c58293d95b6dcdf4cc255f9d10de310580ced547b082eb9d72018c/sse_starlette-3.4.8-py3-none-any.whl", hash = "sha256:6e82314c786709a3cd9520f2285cf9fff90e181e598e8a357b0cf80f66afba0d", size = 16516, upload-time = "2026-08-05T11:19:48.748Z" },
-]
-
 [[package]]
 name = "starlette"
 version = "1.6.0"
@@ -2912,36 +1498,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/c8/cb/6a6a47d5b464bd08695d254f3da6e7986cc70c9fa5d778eda57538edfe56/starlette-1.6.0-py3-none-any.whl", hash = "sha256:a86dd39d14bb45f85a3d18525215a9ef0cfd1f192ac793220e72598c90335f0c", size = 75969, upload-time = "2026-08-08T18:27:56.196Z" },
 ]
 
-[[package]]
-name = "temporalio"
-version = "1.31.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "nexus-rpc" },
-    { name = "protobuf" },
-    { name = "types-protobuf" },
-    { name = "typing-extensions" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/3c/43/676b56efaa64def06d4a9282cfc08d5a5b1c89de0ded47b692f8eaa30ca8/temporalio-1.31.0.tar.gz", hash = "sha256:2993f4b880170825414116dec7d7159a5d199efc279f29570be6b5c4a9f6edd5", size = 2785306, upload-time = "2026-07-29T17:55:10.995Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/c2/7c/b91d831df50651a26562285de7c434a14243504eed853513da6e6afa3f19/temporalio-1.31.0-cp310-abi3-macosx_10_12_x86_64.whl", hash = "sha256:5f9aaf06000768eb80cf5774457d227379dae455a3099aa0a18c4dca631c0d27", size = 14505266, upload-time = "2026-07-29T17:54:52.932Z" },
-    { url = "https://files.pythonhosted.org/packages/d6/d9/4655fc5d7ea662aac2af972e114ffeae45800bcded5ca3d31b2bcd99179d/temporalio-1.31.0-cp310-abi3-macosx_11_0_arm64.whl", hash = "sha256:abbfb486ba00053ccfa57c9c38b38f80f5dbfd08c67beb7a621515a57a9b9e9b", size = 14037187, upload-time = "2026-07-29T17:54:55.771Z" },
-    { url = "https://files.pythonhosted.org/packages/52/8e/52bd6a90cba3d4b257d7aa7426598e622cf05ab39a174b477535eba59c14/temporalio-1.31.0-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:9e840b462125274cb0d4748e7cedc386c303b2a51bf76bab30b96f1ebbc657ae", size = 14445065, upload-time = "2026-07-29T17:54:58.254Z" },
-    { url = "https://files.pythonhosted.org/packages/d9/91/b644c2122943939e02c0e0ff1902b9c6ff7d5e0d6eec334abbfd4ee6bb17/temporalio-1.31.0-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:04d26f0f634f5325f6a19a45cd67cc5a2da4bd35268d27997f6723134d38c8be", size = 14831115, upload-time = "2026-07-29T17:55:00.923Z" },
-    { url = "https://files.pythonhosted.org/packages/8f/42/abc82a89323234026753ac801a1dbc36b4322dcdec5f1e38bee6405f3493/temporalio-1.31.0-cp310-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:f23f36d0e5d2e67f2129fc1cb876cf1e4e614f791a717d692f7c15fb732abe41", size = 14542828, upload-time = "2026-07-29T17:55:03.378Z" },
-    { url = "https://files.pythonhosted.org/packages/8d/67/9260f4544eb5d44867ef58e4a0e63dd3d643e26b2a94e21e027ceaeb0059/temporalio-1.31.0-cp310-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:52f8cc7f0b5a19d49f0c2d748420267aaacc2be0bb614743de8d10faf77a57c9", size = 15019517, upload-time = "2026-07-29T17:55:05.758Z" },
-    { url = "https://files.pythonhosted.org/packages/ce/96/b71e66a1921906f072038286e30946098531fd3363029f3d08c1723aa39a/temporalio-1.31.0-cp310-abi3-win_amd64.whl", hash = "sha256:aa6e9602829584b22037da6ccf99d2e089f02cec86ee7178206b1afb115cf092", size = 15527552, upload-time = "2026-07-29T17:55:08.287Z" },
-]
-
-[[package]]
-name = "tenacity"
-version = "9.1.4"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/47/c6/ee486fd809e357697ee8a44d3d69222b344920433d3b6666ccd9b374630c/tenacity-9.1.4.tar.gz", hash = "sha256:adb31d4c263f2bd041081ab33b498309a57c77f9acf2db65aadf0898179cf93a", size = 49413, upload-time = "2026-02-07T10:45:33.841Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d7/c1/eb8f9debc45d3b7918a32ab756658a0904732f75e555402972246b0b8e71/tenacity-9.1.4-py3-none-any.whl", hash = "sha256:6095a360c919085f28c6527de529e76a06ad89b23659fa881ae0649b867a9d55", size = 28926, upload-time = "2026-02-07T10:45:32.24Z" },
-]
-
 [[package]]
 name = "tiktoken"
 version = "0.13.0"
@@ -2992,33 +1548,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/52/48/01695a036b695f83fea7aef6955d735db0f517b1c8e25ddb399ac0bdbcbf/tinyhtml5-2.1.0-py3-none-any.whl", hash = "sha256:6e11cfff38515834268daf89d5f85bbde0b6dd02e8d9e212d1385c2289b89f0a", size = 39686, upload-time = "2026-03-05T17:06:28.498Z" },
 ]
 
-[[package]]
-name = "tokenizers"
-version = "0.23.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "huggingface-hub" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/c1/60/21f715d9faba5f5407ff759472ade058ec4a507ad62bcea47cb847239a73/tokenizers-0.23.1.tar.gz", hash = "sha256:1feeeadf865a7915adc25445dea30e9933e593c31bb96c277cee36de227c8bfa", size = 365748, upload-time = "2026-04-27T14:43:25.606Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/87/39/b87a87d5bb9470610b80a2d31df42fcffeaf35118b8b97952b2aff598cc7/tokenizers-0.23.1-cp310-abi3-macosx_10_12_x86_64.whl", hash = "sha256:e03d6ffcbe0d56ee9c1ccd070e70a13fa750727c0277e138152acbc0252c2224", size = 3146732, upload-time = "2026-04-27T14:43:15.427Z" },
-    { url = "https://files.pythonhosted.org/packages/e2/6a/068ed9f6e444c9d7e9d55ce134181325700f3d7f30410721bdc8f848d727/tokenizers-0.23.1-cp310-abi3-macosx_11_0_arm64.whl", hash = "sha256:e0948bbb1ac1d7cdfc9fb6d62c596e3b7550036ad60ecd654a66ad273326324e", size = 3054954, upload-time = "2026-04-27T14:43:13.745Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/36/e006edf031154cba92b8416057d92c3abe3635e4c4b0aa0b5b9bb39dde70/tokenizers-0.23.1-cp310-abi3-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:1bf13402aff9bc533c89cb849ec3b412dc3fbeacc9744840e423d7bf3f7dc0e3", size = 3374081, upload-time = "2026-04-27T14:43:01.241Z" },
-    { url = "https://files.pythonhosted.org/packages/a2/ef/7735d226f9c7f874a6bee5e3f27fb25ecabdf207d37b8cf45286d0795893/tokenizers-0.23.1-cp310-abi3-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:f836ca703b89ae07919a309f9651f7a88fd5a33d5f718ba5ad0870ec0256bad6", size = 3247641, upload-time = "2026-04-27T14:43:03.856Z" },
-    { url = "https://files.pythonhosted.org/packages/b9/d9/24827036f6e21297bfffda0768e58eb6096a4f411e932964a01707857931/tokenizers-0.23.1-cp310-abi3-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:ae848657742035523fdf261773630cb819a26995fcd3d9ecae0c1daf6e5a4959", size = 3585624, upload-time = "2026-04-27T14:43:10.664Z" },
-    { url = "https://files.pythonhosted.org/packages/0c/9a/22f3582b3a4f49358293a5206e25317621ee4526bfe9cdaa0f07a12e770e/tokenizers-0.23.1-cp310-abi3-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:53b09e85775d5187941e7bab30e941b4134ab4a7dd8c68e783d231fb7ca27c51", size = 3844062, upload-time = "2026-04-27T14:43:05.643Z" },
-    { url = "https://files.pythonhosted.org/packages/7e/65/b8f8814eef95800f20721384136d9a1d22241d50b2874357cb70542c392f/tokenizers-0.23.1-cp310-abi3-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:ea5a0ce170074329faaa8ea3f6400ecde604b6678192688533af80980daae71a", size = 3460098, upload-time = "2026-04-27T14:43:08.854Z" },
-    { url = "https://files.pythonhosted.org/packages/0d/d5/1353e5f677ec27c2494fb6a6725e82d56c985f53e90ec511369e7e4f02c6/tokenizers-0.23.1-cp310-abi3-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:5075b405006415ea148a992d093699c66eb01952bf59f4d5727089a98bda45a4", size = 3346235, upload-time = "2026-04-27T14:43:12.377Z" },
-    { url = "https://files.pythonhosted.org/packages/71/89/39b6b8fc073fb6d413d0147aa333dc7eff7be65639ac9d19930a0b21bf33/tokenizers-0.23.1-cp310-abi3-manylinux_2_31_riscv64.whl", hash = "sha256:56f3a77de629917652f876294dc9fe6bad4a0c43bc229dc72e59bb23a0f4729a", size = 3426398, upload-time = "2026-04-27T14:43:07.264Z" },
-    { url = "https://files.pythonhosted.org/packages/0f/80/127c854da64827e5b79264ce524993a90dddcb320e5cd42412c5c02f9e8a/tokenizers-0.23.1-cp310-abi3-musllinux_1_2_aarch64.whl", hash = "sha256:9d10a6d957ef01896dc274e890eee27d41bd0e74ef31e60616f0fc311345184e", size = 9823279, upload-time = "2026-04-27T14:43:17.222Z" },
-    { url = "https://files.pythonhosted.org/packages/fe/ba/44c2502feb1a058f096ddfb4e0996ef3225a01a388e1a9b094e91689fe93/tokenizers-0.23.1-cp310-abi3-musllinux_1_2_armv7l.whl", hash = "sha256:1974288a609c343774f1b897c8b482c791ab17b75ab5c8c2b1737565c1d82288", size = 9644986, upload-time = "2026-04-27T14:43:19.45Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/c1/464019a9fb059870bfe4eebb4ba12208f3042035e258bf5e782906bd3847/tokenizers-0.23.1-cp310-abi3-musllinux_1_2_i686.whl", hash = "sha256:120468fb4c24faf0543c835a4fabafa4deb3f20a035c9b6e83d0b553a97615d4", size = 9976181, upload-time = "2026-04-27T14:43:21.463Z" },
-    { url = "https://files.pythonhosted.org/packages/79/94/3ac1432bda31626071e9b6a12709b97ae05131c804b94c8f3ac622c5da32/tokenizers-0.23.1-cp310-abi3-musllinux_1_2_x86_64.whl", hash = "sha256:e3d8f40ea6268047de7046906326abed5134f27d4e8447b23763afe5808c8a96", size = 10113853, upload-time = "2026-04-27T14:43:23.617Z" },
-    { url = "https://files.pythonhosted.org/packages/6a/dd/631b21433c771b1382535326f0eca80b9c9cee2e64961dd993bc9ac4669e/tokenizers-0.23.1-cp310-abi3-win32.whl", hash = "sha256:93120a930b919416da7cd10a2f606ac9919cc69cacae7980fa2140e277660948", size = 2536263, upload-time = "2026-04-27T14:43:29.888Z" },
-    { url = "https://files.pythonhosted.org/packages/97/c9/2553f72aaf65a2797d4229e37fa7fbe38ffbf3e32912d31bdd78b3323e59/tokenizers-0.23.1-cp310-abi3-win_amd64.whl", hash = "sha256:e7bfaf995c1bdbbd21d13539decb6650967013759318627d85daeb7881af16b7", size = 2798223, upload-time = "2026-04-27T14:43:28.51Z" },
-    { url = "https://files.pythonhosted.org/packages/cd/2b/2be299bab55fc595e3d38567edb1a87f86e594842968fa9515a07bdcf422/tokenizers-0.23.1-cp310-abi3-win_arm64.whl", hash = "sha256:a26197957d8e4425dfba746315f3c425ea00cfa8367c5fbc4ec73447893dcea9", size = 2664127, upload-time = "2026-04-27T14:43:26.949Z" },
-]
-
 [[package]]
 name = "tomli-w"
 version = "1.2.0"
@@ -3070,42 +1599,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/8f/eb/461d5f167b6f5c7d97696f397c82f82e3480e003fce3f0a1cd1dd26e2eb2/typeguard-4.6.0-py3-none-any.whl", hash = "sha256:79878165bb86f2cf5d41d159a0ff1792a796cf496882d2fe1b1c6c7049b9cdd7", size = 36884, upload-time = "2026-07-26T08:40:21.868Z" },
 ]
 
-[[package]]
-name = "typer"
-version = "0.25.1"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "annotated-doc" },
-    { name = "click" },
-    { name = "rich" },
-    { name = "shellingham" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/e4/51/9aed62104cea109b820bbd6c14245af756112017d309da813ef107d42e7e/typer-0.25.1.tar.gz", hash = "sha256:9616eb8853a09ffeabab1698952f33c6f29ffdbceb4eaeecf571880e8d7664cc", size = 122276, upload-time = "2026-04-30T19:32:16.964Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/3f/f9/2b3ff4e56e5fa7debfaf9eb135d0da96f3e9a1d5b27222223c7296336e5f/typer-0.25.1-py3-none-any.whl", hash = "sha256:75caa44ed46a03fb2dab8808753ffacdbfea88495e74c85a28c5eefcf5f39c89", size = 58409, upload-time = "2026-04-30T19:32:18.271Z" },
-]
-
-[[package]]
-name = "types-protobuf"
-version = "7.34.1.20260518"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/29/59/e2b13b499d15e6720150c4b1a8d91e31fcacf716b432397475b3151ff7e4/types_protobuf-7.34.1.20260518.tar.gz", hash = "sha256:28cfaded25889cb83ebfb63cfb0a43628f0b6f3785767bec17287dc6468795f2", size = 68936, upload-time = "2026-05-18T06:01:47.332Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/2a/1f/ec5caf72c2e3b688ca3927e0979a04ddad19e1afc4bf1c199bd743e0f419/types_protobuf-7.34.1.20260518-py3-none-any.whl", hash = "sha256:a0a5337413347166439c0e07cbc26c6164d091401c6f01b1dfd8cdb966c4dd8f", size = 85992, upload-time = "2026-05-18T06:01:45.696Z" },
-]
-
-[[package]]
-name = "types-requests"
-version = "2.33.0.20260712"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "urllib3" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/db/51/703318f7b7be8bee126ec13bf615050f932d0179b8784420f3a0199cc769/types_requests-2.33.0.20260712.tar.gz", hash = "sha256:2141b67ab534a5c5cd2dac5034f2a35f42e699c5bf185eee608c5246a069d7fb", size = 25084, upload-time = "2026-07-12T05:14:20.455Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/62/e7/010c87f559e216d83f9dc51e939633fd0d0ead3377340181ab0e223cd3b5/types_requests-2.33.0.20260712-py3-none-any.whl", hash = "sha256:de027e28c171d3da529689cbfa023b0b4eab188c8dfa22fd834eebd2cee6e7bb", size = 21392, upload-time = "2026-07-12T05:14:19.616Z" },
-]
-
 [[package]]
 name = "typing-extensions"
 version = "4.16.0"
@@ -3136,15 +1629,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/e5/6d/b53b99a9f2766d095985947a5782f1702cabb129a34f7a802d7197af832f/tzdata-2026.3-py2.py3-none-any.whl", hash = "sha256:dc096730c87af6cab1b171c9d532be840741ff5d459015e7f6947bd7d7e54931", size = 348168, upload-time = "2026-07-10T08:50:36.46Z" },
 ]
 
-[[package]]
-name = "uncalled-for"
-version = "0.3.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/b5/82/345cc927f7fbdae6065e7768759932fcc827fc20b29b45dfbafa2f1f7da4/uncalled_for-0.3.2.tar.gz", hash = "sha256:89f5dbcd71e2b8f47c030b1fa302e6cce2ec795d1ac565eeb6525c5fe55cb8a2", size = 50032, upload-time = "2026-05-06T13:38:25.204Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/3b/25/2c87754f3a9e692315f7b811244090e68f362979fc8886b3fbd2985a1d8c/uncalled_for-0.3.2-py3-none-any.whl", hash = "sha256:0ff60b142c7d1f8070bde9d42afaa70aedc77dcc10998c227687e9c15713418e", size = 11444, upload-time = "2026-05-06T13:38:24.025Z" },
-]
-
 [[package]]
 name = "unoserver"
 version = "3.7"
@@ -3163,105 +1647,17 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/7f/3e/5db95bcf282c52709639744ca2a8b149baccf648e39c8cc87553df9eae0c/urllib3-2.7.0-py3-none-any.whl", hash = "sha256:9fb4c81ebbb1ce9531cce37674bbc6f1360472bc18ca9a553ede278ef7276897", size = 131087, upload-time = "2026-05-07T16:13:17.151Z" },
 ]
 
-[[package]]
-name = "uuid-utils"
-version = "0.17.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/e7/91/63938e0e7e7876658e5e40178e7c0735b53527886fe11797a11699c55edd/uuid_utils-0.17.0.tar.gz", hash = "sha256:abb5667a36119019b3fa320c4d10c21ebccfcc87c8a739e6a0056cee7f48dde2", size = 43220, upload-time = "2026-07-09T13:49:58.433Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d2/dd/614fb9912157ac0128e6050859ccf06d9f13df9a944a803e8f80f6157e38/uuid_utils-0.17.0-cp313-cp313-macosx_10_12_x86_64.macosx_11_0_arm64.macosx_10_12_universal2.whl", hash = "sha256:d11a7bc1e02da8984d32e6de9e0826c6edac00eac17de270f372bf32f9a0af63", size = 557259, upload-time = "2026-07-09T13:48:45.664Z" },
-    { url = "https://files.pythonhosted.org/packages/3e/11/d072711704de3d21bec08b6c2f36a215200ca1d5e01a390ea1ac434080a0/uuid_utils-0.17.0-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:7a49f47ac26df3e431c56b825c1bae8e6d3d591fdbb7438c227cc9845a7e3d73", size = 286271, upload-time = "2026-07-09T13:48:47.018Z" },
-    { url = "https://files.pythonhosted.org/packages/18/6d/8a63e5eb2d5a6ba69a6c2036e305075bd6f5a022e7ea25fc6ce0eb7c51d2/uuid_utils-0.17.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:32df1944808877702ceea398c103881c09a679bb672a215e01c2a84231266bf9", size = 320025, upload-time = "2026-07-09T13:48:48.208Z" },
-    { url = "https://files.pythonhosted.org/packages/f7/2d/bdc2caf9719d9090d7c46043242ae6136cba4f7a7ee384992ab905ad9aa1/uuid_utils-0.17.0-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:98c88d3edd08e7245562e9815996dbc6f0bd4745e1c76462f24af5ae4e187dd1", size = 327931, upload-time = "2026-07-09T13:48:49.673Z" },
-    { url = "https://files.pythonhosted.org/packages/b6/33/9219d09d51ead282b578b2a4e0a515c2cce3ec52076cada8bfb7e35727d5/uuid_utils-0.17.0-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:5a4370089c8b2e42f1db51d76408c7fa8eaa2934bf854d17983d16179c07c098", size = 438537, upload-time = "2026-07-09T13:48:50.842Z" },
-    { url = "https://files.pythonhosted.org/packages/d8/79/e8e0f8b3955f2081c116157119d87659937893242eb834aa170da04d660b/uuid_utils-0.17.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:09a55b7a5ae764985cb46467496a1787678d0a1400356157a080ad95b1a36869", size = 320656, upload-time = "2026-07-09T13:48:52.164Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/5e/d1ceddc430ff04b6e21704b2030d4438074a2f478b265dab43da957791c1/uuid_utils-0.17.0-cp313-cp313-manylinux_2_5_i686.manylinux1_i686.whl", hash = "sha256:56aa6488b931246fae11924e4bd0e2b32677e63945eecb71c29e3c2ca0dc3131", size = 345310, upload-time = "2026-07-09T13:48:54.076Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/62/89438e12f389a843e626b7e37691319a057b3d6b80914609106891faadda/uuid_utils-0.17.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:309a35f12d99dde19032bc2259cda6431c85eeac0879134dc777cc3087d7e1cb", size = 496771, upload-time = "2026-07-09T13:48:55.365Z" },
-    { url = "https://files.pythonhosted.org/packages/87/d2/eedcd99f522d60e238ead03844f0d51743ba84d33044959e230b756bf212/uuid_utils-0.17.0-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:21c79b61ff750abcf057163dd764ccb6196cde7a26cda1b31b45cd97769e03b3", size = 603631, upload-time = "2026-07-09T13:48:56.746Z" },
-    { url = "https://files.pythonhosted.org/packages/0e/a8/bb1b38aaddd7243b6e562c6694f499bf094800918316192fd8cb2cdc2620/uuid_utils-0.17.0-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:4134353bfe3026ddab8e886002dc52bc5a0ab04611aabb0eaae23c32e6e57f64", size = 562008, upload-time = "2026-07-09T13:48:58.241Z" },
-    { url = "https://files.pythonhosted.org/packages/b4/77/5f7ed930dc105e293845c09e4d5bd84076318a12f45a46783e1af64906d7/uuid_utils-0.17.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:7c89359affecebe2e39e6a116d069b363c936511a9572b308402489a26957d89", size = 525527, upload-time = "2026-07-09T13:48:59.784Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/25/1b55697adf6811a6f92cff6340e6b03e31fd6bc51066a5c10698c29b3679/uuid_utils-0.17.0-cp313-cp313-pyemscripten_2025_0_wasm32.whl", hash = "sha256:6a019a31bc4db89a0903a3e4f6b218571f3a6ff0ad4b3d3fe1c8f91a05ff6e3e", size = 97965, upload-time = "2026-07-09T13:49:01.217Z" },
-    { url = "https://files.pythonhosted.org/packages/26/bf/cd729343de4684230be8a966bad7bfc2cf10ce3e643b1189a8b5370dbe35/uuid_utils-0.17.0-cp313-cp313-win32.whl", hash = "sha256:b3131a82d0c7611f0aa480a6d36929e001a3f54ba0fc029a8118a5863cce513c", size = 167316, upload-time = "2026-07-09T13:49:02.354Z" },
-    { url = "https://files.pythonhosted.org/packages/76/f0/e602ae0a1b139a7826e5189b93d91902564def06d5006324fd2faf82c8fc/uuid_utils-0.17.0-cp313-cp313-win_amd64.whl", hash = "sha256:9e311f908d2f842fca4c7dcebc4f10306b8089b204ef04cf6704b4332c9ff6ff", size = 173630, upload-time = "2026-07-09T13:49:03.529Z" },
-    { url = "https://files.pythonhosted.org/packages/1a/52/024ebece265b387154115dc4f1d9727174ef82623069f4bec8b7ed7e73f7/uuid_utils-0.17.0-cp313-cp313-win_arm64.whl", hash = "sha256:c351737e2e65497c7200ab4ffb8af97e9f48be6488309abdd265fe08d66ee92f", size = 173214, upload-time = "2026-07-09T13:49:04.836Z" },
-]
-
 [[package]]
 name = "uvicorn"
-version = "0.52.1"
+version = "0.52.3"
 source = { registry = "https://pypi.org/simple" }
 dependencies = [
     { name = "click" },
     { name = "h11" },
 ]
-sdist = { url = "https://files.pythonhosted.org/packages/03/18/ccce41535dee1be77735592bd19965f3972c82e07ee703d324709496b716/uvicorn-0.52.1.tar.gz", hash = "sha256:112ec661814189acbccd3f7b86460147cc065fc92c0821afa78918780e4354dd", size = 100571, upload-time = "2026-08-01T18:19:30.732Z" }
+sdist = { url = "https://files.pythonhosted.org/packages/2e/28/64ca011edf31c715b4fad359c587ea52391aaffa125065695590241ff617/uvicorn-0.52.3.tar.gz", hash = "sha256:18857b9e6579300be55c91c0a1cfd37d9a2cf0cabea33b88275f199eb73b8b58", size = 100621, upload-time = "2026-08-13T16:50:02.899Z" }
 wheels = [
-    { url = "https://files.pythonhosted.org/packages/c7/d5/68e6e9bca63c0badf67002890a46d3784c958de45b65e1275ec583ca1f06/uvicorn-0.52.1-py3-none-any.whl", hash = "sha256:e4403f9d93188cf9d1088e9f40e3acd12630e2df8675316704379a7fc20fff6a", size = 79859, upload-time = "2026-08-01T18:19:29.294Z" },
-]
-
-[[package]]
-name = "voyageai"
-version = "0.5.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "aiohttp" },
-    { name = "aiolimiter" },
-    { name = "langchain-text-splitters" },
-    { name = "numpy" },
-    { name = "pillow" },
-    { name = "pydantic" },
-    { name = "requests" },
-    { name = "tenacity" },
-    { name = "tokenizers" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/ae/d3/b96ecab961692dd55fc5b54fef916c2bc37a942ef33fcc937779d2aaa161/voyageai-0.5.0.tar.gz", hash = "sha256:ed2775fe9faeb96cc2b3931edc35d76185d19f34f1523d1f70535f0451126ae9", size = 37000, upload-time = "2026-07-10T20:13:14.884Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/0d/c4/732038d97a0ac02d690f295a9ee28f4d0553894478ca6944411428e544f7/voyageai-0.5.0-py3-none-any.whl", hash = "sha256:5d7e8dc3b74cac4646d4a835a65cf8c9764070c90353e322d84a91a16207e78b", size = 46561, upload-time = "2026-07-10T20:13:13.909Z" },
-]
-
-[[package]]
-name = "watchfiles"
-version = "1.2.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "anyio" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/cd/41/5e1a4bb12aac5f1493fa1bdc11154eca3b258ca4eba65d39c473fe19d8e9/watchfiles-1.2.0.tar.gz", hash = "sha256:c995fba777f1ea992f090f9236e9284cf7a5d1a0130dd5a3d82c598cacd76838", size = 108252, upload-time = "2026-05-18T04:32:04.251Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d1/4d/70a7feced9f87e2ff26dba42667290f41694fc64646c67261fbb8cab5d5c/watchfiles-1.2.0-cp313-cp313-macosx_10_12_x86_64.whl", hash = "sha256:01ea8d66f0693b9b60a6541c8d10263091ca9a9060d242f3c1f3143f9aad2c98", size = 399730, upload-time = "2026-05-18T04:31:38.162Z" },
-    { url = "https://files.pythonhosted.org/packages/31/3a/0da302f2307aee316922806ebd5726c542cbd787c938271cf14a074c7daf/watchfiles-1.2.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:7ba0480b9a74af058f43b337e937a451e109295c420916d68ad24e3dc02f5e44", size = 392842, upload-time = "2026-05-18T04:30:27.051Z" },
-    { url = "https://files.pythonhosted.org/packages/db/ef/d5bdb705c224dbc256aa0c1ec47bf4e61ec52558f2afb44a71a1fe4d7015/watchfiles-1.2.0-cp313-cp313-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:4f34e26a19f91f710c08e0183429f0d1d15df734e6bc78c31e77b9ea9c433658", size = 452989, upload-time = "2026-05-18T04:31:11.945Z" },
-    { url = "https://files.pythonhosted.org/packages/71/29/5495f2c1661949ef7a35e4d71111d129cfe7606414a26887a919d0a55406/watchfiles-1.2.0-cp313-cp313-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:b4e77f6a55f858504069abd35d336a637555c09bca453dde1ee1e5ada8a6a1fb", size = 458978, upload-time = "2026-05-18T04:30:52.606Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/8c/7f9c07c433811c2fffd93e13fdfb7135de9aab5f2ae41be08960fa0047dc/watchfiles-1.2.0-cp313-cp313-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:0cb4d80e212f116474a545c21c912b445f16bb0cef9e6a73a498164223e14e2f", size = 490248, upload-time = "2026-05-18T04:31:36.003Z" },
-    { url = "https://files.pythonhosted.org/packages/3c/11/d93632febc52fbc21be90231bb7c17fd5387f46c9076fd40a5f9c2ae6910/watchfiles-1.2.0-cp313-cp313-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:b974946a10af379d425e2eef5b62f5c6ebeaccf91d45eaad6f5b27ecd4f91aa0", size = 571847, upload-time = "2026-05-18T04:31:10.862Z" },
-    { url = "https://files.pythonhosted.org/packages/55/b4/383173e73aabb07ad1d9c7aa859d95437ac46a6d6a1e11005facda0c9d19/watchfiles-1.2.0-cp313-cp313-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:86bc13c25a8d1fcd70b51d0ce7c9b65e90de5666fcbfd3e34957cc73ee19aeb5", size = 465974, upload-time = "2026-05-18T04:30:17.006Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/6c/89b1a230a78f57c52dd8893adb1f92f94411721b6ec12596c56d98c74356/watchfiles-1.2.0-cp313-cp313-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:ca148d73dea36c9763aaa351e4d7a51780ec1584217c45276f4fe8239c768b71", size = 454782, upload-time = "2026-05-18T04:30:35.656Z" },
-    { url = "https://files.pythonhosted.org/packages/24/62/1732118367cfff0a9fce3bf62ff4bfded09ef5df21d9d446b858b3f70a96/watchfiles-1.2.0-cp313-cp313-manylinux_2_31_riscv64.whl", hash = "sha256:c525543d91961c6955b2636b308569e84a1d1c5f5f2932041ab9ef46422f43e3", size = 465182, upload-time = "2026-05-18T04:30:20.846Z" },
-    { url = "https://files.pythonhosted.org/packages/28/96/716f7e5f51339bf22963f3345f9f27d7f3b30e2eadc597e257c881dd3c53/watchfiles-1.2.0-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:a204794696ffb8f9b10fba6f7cb5216d42f3b2b71860ccac6b6e42f5f10973b0", size = 629841, upload-time = "2026-05-18T04:31:05.397Z" },
-    { url = "https://files.pythonhosted.org/packages/4c/fe/c40783950fd771ccf66ab3ec2722d188a9af1c7f96c6e811f36e40c6e03f/watchfiles-1.2.0-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:10d86db20695afe7997ac9e1717637d6714a8d0220458c33f3d2061f54cec427", size = 658028, upload-time = "2026-05-18T04:31:48.22Z" },
-    { url = "https://files.pythonhosted.org/packages/71/72/4508db1856d1d87fcbb3b63f4839bab1b5682cb0e8d224d122263c09654a/watchfiles-1.2.0-cp313-cp313-win32.whl", hash = "sha256:eb283ee99e21ad6443c8cdb06ac5b34b1308c329cbdf03fa02b445363714c799", size = 275183, upload-time = "2026-05-18T04:30:59.57Z" },
-    { url = "https://files.pythonhosted.org/packages/f9/36/14b76ca57652e5cc5fd1c11f32a261292c08a0d19a00351013c2549cbfb2/watchfiles-1.2.0-cp313-cp313-win_amd64.whl", hash = "sha256:a0f27f01bee51861392bb6b7c4fdb290b27d1eb194e9e28788d68102a0e898d9", size = 288059, upload-time = "2026-05-18T04:32:07.937Z" },
-    { url = "https://files.pythonhosted.org/packages/1b/8d/0a85e395398d8d20fadfe5c5d32c726eee17a519e78fb356f2cf7531bffe/watchfiles-1.2.0-cp313-cp313-win_arm64.whl", hash = "sha256:3651aa7058595e9cfb75d35dd5ada2bf9f48a5b8a0f3562821d3e210c507e077", size = 280186, upload-time = "2026-05-18T04:31:54.484Z" },
-    { url = "https://files.pythonhosted.org/packages/37/68/36db056f1fdcc5f07302f56e631774d6835bcd6fa3ace402304621d5f9e5/watchfiles-1.2.0-cp313-cp313t-macosx_10_12_x86_64.whl", hash = "sha256:faea288b6f0ab1902ef08f4ca6de005dccf856c4e0c4f21b8c5fce02d90a1b08", size = 399031, upload-time = "2026-05-18T04:30:44.576Z" },
-    { url = "https://files.pythonhosted.org/packages/c1/64/01a9d6f66a82a5c101ce939274106cc72759d62427e153f01edd2b9f87c2/watchfiles-1.2.0-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:01859b11fd9fbca670f4d5da00fbac282cfea9bd67a2125d8b2833a3b5617ea9", size = 391205, upload-time = "2026-05-18T04:30:25.413Z" },
-    { url = "https://files.pythonhosted.org/packages/84/2c/0a44fe058cb4bb7b8ede6b6670698bbb7c0400740e378d00022189b7b31d/watchfiles-1.2.0-cp313-cp313t-manylinux_2_17_aarch64.manylinux2014_aarch64.whl", hash = "sha256:fff610d7bb2256a317bb1e96f0d7862c7aa8076733ee5df0fd41bbe76a24a4f4", size = 451892, upload-time = "2026-05-18T04:32:14.005Z" },
-    { url = "https://files.pythonhosted.org/packages/67/a1/351e0d56cd35e6488b5c8b4fb11a809a5bc923e8fe8fed9faf8920be0c89/watchfiles-1.2.0-cp313-cp313t-manylinux_2_17_armv7l.manylinux2014_armv7l.whl", hash = "sha256:b141a4891c995a039cd89e9a49e62df1dc8a559a5d1a6e4c7106d16c12777a55", size = 458867, upload-time = "2026-05-18T04:31:22.279Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/7d/9d09605187f1b838998624049fcf8bf47b73c1a3b76901fcac1782f62277/watchfiles-1.2.0-cp313-cp313t-manylinux_2_17_i686.manylinux2014_i686.whl", hash = "sha256:f22943b7770483f6ea0721c6b11d022947a98eb0acae14694de034f4d0d38925", size = 490217, upload-time = "2026-05-18T04:31:43.657Z" },
-    { url = "https://files.pythonhosted.org/packages/60/5d/a17a16eccb182f04188cd308ec24b1a71a9b5c4e7098269cf35d9fa56d02/watchfiles-1.2.0-cp313-cp313t-manylinux_2_17_ppc64le.manylinux2014_ppc64le.whl", hash = "sha256:1bc6195825b7dcd217968bb1f801a60fd4c16e8eeab5bedc7fe917d7d5995ab4", size = 571458, upload-time = "2026-05-18T04:32:11.875Z" },
-    { url = "https://files.pythonhosted.org/packages/d3/3d/4dd457062083ab1938e5dfd45032eb425cee2ac817287ca8ff4356183e5d/watchfiles-1.2.0-cp313-cp313t-manylinux_2_17_s390x.manylinux2014_s390x.whl", hash = "sha256:d4a4b147f5dca2a5d325a06a832fb43f345751adfbc63204aec30e0d9ca965a2", size = 464707, upload-time = "2026-05-18T04:30:43.492Z" },
-    { url = "https://files.pythonhosted.org/packages/c6/71/ea8c57b128f5383de74d0c7d2d9c57ad7c9a65a930c451bd25d524b295b7/watchfiles-1.2.0-cp313-cp313t-manylinux_2_17_x86_64.manylinux2014_x86_64.whl", hash = "sha256:4543579a9bdb0c9560039b4ffddbdb39545707659fbc430ce4c10f3f68d557f9", size = 454663, upload-time = "2026-05-18T04:30:16.061Z" },
-    { url = "https://files.pythonhosted.org/packages/53/fd/2e812bf938406d7db351f0703ddd3fc6c061cf30d96153a77bc79a943a44/watchfiles-1.2.0-cp313-cp313t-manylinux_2_31_riscv64.whl", hash = "sha256:20aa0e708b920bde876a4aa82dc7dd6ebea228a63a67cda6632c2fc87b787efa", size = 463537, upload-time = "2026-05-18T04:31:44.9Z" },
-    { url = "https://files.pythonhosted.org/packages/86/56/d17a7f1dd1bc3035f1072694a551301272f1739c2d8e319c927cb9e29b38/watchfiles-1.2.0-cp313-cp313t-musllinux_1_1_aarch64.whl", hash = "sha256:d413349d565dab74297f2a63e84a097936be69bf8f3b3801f27f380e32040f44", size = 629194, upload-time = "2026-05-18T04:31:14.141Z" },
-    { url = "https://files.pythonhosted.org/packages/be/06/f1ff66bf5cae50aa4062779a0ecd0bbaf15e466195719074078947d9a17d/watchfiles-1.2.0-cp313-cp313t-musllinux_1_1_x86_64.whl", hash = "sha256:f28b2725eb8cce327b9b3ab02415c853011dc55c95832fe90de6bc56f5315f72", size = 656194, upload-time = "2026-05-18T04:31:47.14Z" },
-]
-
-[[package]]
-name = "wcwidth"
-version = "0.8.2"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/34/74/c6428f875774288bec1396f5bfcbc2d925700a4dad61727fd5f2b12f249d/wcwidth-0.8.2.tar.gz", hash = "sha256:91fbef97204b96a3d4d421609b80340b760cf33e26da123ff243d76b1fda8dda", size = 1466253, upload-time = "2026-06-29T18:11:11.601Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/96/42/3e5985a0a7e57de470b320c6d6a1a67c844f6737a587f3d44dd13d1819e7/wcwidth-0.8.2-py3-none-any.whl", hash = "sha256:d63947694a0539a1d51e01eda7caf800c291020e6cdd7e28ad7b14dd33ad4f85", size = 323166, upload-time = "2026-06-29T18:11:09.888Z" },
+    { url = "https://files.pythonhosted.org/packages/dc/2b/ebd108734a8204c6b4b93c681c9a38c5273b3ccd5d129fee4ffc1d97772c/uvicorn-0.52.3-py3-none-any.whl", hash = "sha256:116af2710dbf47c80f463cd20ee4884b6662f4c9f227d797ddc7279d2fcc2c7c", size = 79859, upload-time = "2026-08-13T16:50:01.323Z" },
 ]
 
 [[package]]
@@ -3292,152 +1688,6 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/f4/24/2a3e3df732393fed8b3ebf2ec078f05546de641fe1b667ee316ec1dcf3b7/webencodings-0.5.1-py2.py3-none-any.whl", hash = "sha256:a0af1213f3c2226497a97e2b3aa01a7e4bee4f403f95be16fc9acd2947514a78", size = 11774, upload-time = "2017-04-05T20:21:32.581Z" },
 ]
 
-[[package]]
-name = "websockets"
-version = "16.1.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/21/f7/bc3a25c5ec26ce62ce487690becc2f3710bbc7b33338f005ad390db0b986/websockets-16.1.1.tar.gz", hash = "sha256:db234eda965dcce15df96bb9709f587cd87d4d52aaf0e80e2f34ec04c7670c57", size = 182204, upload-time = "2026-07-17T22:51:05.858Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/ce/fd/6ec6c6d2850aea25b1b2aa9901a016980bb87d01e89b3eb00470b1b5d471/websockets-16.1.1-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:ab59169ace05dcb49a1d4118f0bde139557adf45091bd85747e36bf5de984dd1", size = 179587, upload-time = "2026-07-17T22:49:38.959Z" },
-    { url = "https://files.pythonhosted.org/packages/5f/d8/1d299d2dd34087db39831a34cc645ef8a6f89d78efada6983093513cd81c/websockets-16.1.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:5e3b7d601f6f84156b08cc4a5e541c2b50ad7b36cfc302b657a12477c904a5df", size = 177272, upload-time = "2026-07-17T22:49:40.293Z" },
-    { url = "https://files.pythonhosted.org/packages/3d/86/0a70d3ae2f0f2256bb41302d9804dbca65d4360281e7feb3e1f94102ac46/websockets-16.1.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:cd2ca96a082a36964aca83e992f72abeb61b7306c1a6cba4c7d06a7b93750cac", size = 177530, upload-time = "2026-07-17T22:49:41.786Z" },
-    { url = "https://files.pythonhosted.org/packages/b5/c2/c676c69444d9db448b3f0a55a98dcc534affce0bce961d9d2f0b8499b10a/websockets-16.1.1-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:f5d497865f05bb222cab7016c6034542e84e5f29f49c6fd3f4939cda7197b5b8", size = 187197, upload-time = "2026-07-17T22:49:43.658Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/13/88137fbaf726ebe29d62c1117fa11fa2bbb6209dc79d4ad738efbe36a2aa/websockets-16.1.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:bae954c382e013d5ea5b190d2830526bfa45ad121c326da0049b8c769f185db6", size = 188433, upload-time = "2026-07-17T22:49:45.147Z" },
-    { url = "https://files.pythonhosted.org/packages/01/6d/46c2f2ce6751cb26f39293e1ecbf8544cb01321397cd476c2756b98c216d/websockets-16.1.1-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:e09f753a169951eb4f28c2c774f71069304f66e7277e0f5a2892423599cfa854", size = 189868, upload-time = "2026-07-17T22:49:46.581Z" },
-    { url = "https://files.pythonhosted.org/packages/29/2b/170a9e8097636cfde4dc3c592b6e00b18a44a2f5407606d96ca542dd5838/websockets-16.1.1-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:024193f8551a2b0eafbdd160911012c4e6c228c28430c84433253299a9e42d6a", size = 189059, upload-time = "2026-07-17T22:49:47.972Z" },
-    { url = "https://files.pythonhosted.org/packages/a7/48/f0d4ebc9ab4b473b8861b9e20fdb663d515d42f7befdf62cdb60fee7a1ec/websockets-16.1.1-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:aabe464bfd13bd25f4821faf111da6fefdc389f870265a53105580e45b0a2e49", size = 187814, upload-time = "2026-07-17T22:49:49.344Z" },
-    { url = "https://files.pythonhosted.org/packages/d5/ba/39a41d3ae8e72696a9492581900611c5a91e2b07563b0bcd2523adea9854/websockets-16.1.1-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:a28fcbc9b6baf54a2e23f8655f308e4ccc6afdd7266f8fe7954f320dcda0f785", size = 185229, upload-time = "2026-07-17T22:49:50.787Z" },
-    { url = "https://files.pythonhosted.org/packages/3c/36/ac15b604f850d1907f0a85ed721cefe47cd45034b3620069b829746cccbe/websockets-16.1.1-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:79eace538c6a97e96d0d03d4f9d314f9677f5ed85a8a984992ffd90b13cb8a56", size = 187874, upload-time = "2026-07-17T22:49:52.228Z" },
-    { url = "https://files.pythonhosted.org/packages/a8/f3/3fbd5d71d59299c3770faa5884d4f45070236ca5a35ab3a61830812c409a/websockets-16.1.1-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:496af849a472b531f758dbd4d61338f5000538cb1a7b3d20d9d32a264517f509", size = 186469, upload-time = "2026-07-17T22:49:53.776Z" },
-    { url = "https://files.pythonhosted.org/packages/b4/fc/dd90349bba58af2a53ef2ddd9c32716c81eb6d59a0687939fff561860878/websockets-16.1.1-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:5283810d2646741a0d8da2aa733d6aefa0545809afccb2a5d105a26bc45125f1", size = 188347, upload-time = "2026-07-17T22:49:55.202Z" },
-    { url = "https://files.pythonhosted.org/packages/4c/f3/f73ba86427682da59b78c11d77ba56d5b801c32e84afe79b274bbd6a9bb2/websockets-16.1.1-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:4e3b680b1e0a27457e727a0d572fd81dffa87b6dbf8b228ab57da64f7d85aead", size = 185903, upload-time = "2026-07-17T22:49:56.75Z" },
-    { url = "https://files.pythonhosted.org/packages/34/7c/f95eb20e80104173b3a0a092291f89ea4047ef6e608e0a57ca06eb14eecb/websockets-16.1.1-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:69159730a823dde3ea8d08783e8d47ef135a6d7e8d44eb127e32b321c9db8e3e", size = 186855, upload-time = "2026-07-17T22:49:58.467Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/35/dd875b3e050ff232d60fa377707f890e369f74d134f1be32e8f68879747c/websockets-16.1.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:ed5bb271084b46530ee2ddc0410537a9961152c5ccba2fc98c5276d992ccba87", size = 187140, upload-time = "2026-07-17T22:50:00.016Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/dc/5cbfcb41824502f6af93b8f3943a4d06c67c23c7d2e31eb18748c4a5b2a7/websockets-16.1.1-cp313-cp313-win32.whl", hash = "sha256:cfb70b4eb56cac4da0a83588f3ad50d46beb0690391082f3d4e2d488c70b68ea", size = 179928, upload-time = "2026-07-17T22:50:01.685Z" },
-    { url = "https://files.pythonhosted.org/packages/b0/c1/71e5deb5b7f8f226997ab64908c184ac3105c0155ce2d486f318e5dd08a8/websockets-16.1.1-cp313-cp313-win_amd64.whl", hash = "sha256:d9531d9cbeac99af6f038fb1bc351403531f7d634a2c2e10e2f7c854c6ed5b68", size = 180242, upload-time = "2026-07-17T22:50:03.117Z" },
-    { url = "https://files.pythonhosted.org/packages/be/4d/2d0d67834092e354d2b0498f014a41249a89556bc406cf86f3e1557bb463/websockets-16.1.1-py3-none-any.whl", hash = "sha256:6abbd3e82c731c8e531714466acd5d87b5e88ac3243465337ba71d68e23ae7e3", size = 173814, upload-time = "2026-07-17T22:51:04.184Z" },
-]
-
-[[package]]
-name = "wrapt"
-version = "1.17.3"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/95/8f/aeb76c5b46e273670962298c23e7ddde79916cb74db802131d49a85e4b7d/wrapt-1.17.3.tar.gz", hash = "sha256:f66eb08feaa410fe4eebd17f2a2c8e2e46d3476e9f8c783daa8e09e0faa666d0", size = 55547, upload-time = "2025-08-12T05:53:21.714Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/fc/f6/759ece88472157acb55fc195e5b116e06730f1b651b5b314c66291729193/wrapt-1.17.3-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:a47681378a0439215912ef542c45a783484d4dd82bac412b71e59cf9c0e1cea0", size = 54003, upload-time = "2025-08-12T05:51:48.627Z" },
-    { url = "https://files.pythonhosted.org/packages/4f/a9/49940b9dc6d47027dc850c116d79b4155f15c08547d04db0f07121499347/wrapt-1.17.3-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:54a30837587c6ee3cd1a4d1c2ec5d24e77984d44e2f34547e2323ddb4e22eb77", size = 39025, upload-time = "2025-08-12T05:51:37.156Z" },
-    { url = "https://files.pythonhosted.org/packages/45/35/6a08de0f2c96dcdd7fe464d7420ddb9a7655a6561150e5fc4da9356aeaab/wrapt-1.17.3-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:16ecf15d6af39246fe33e507105d67e4b81d8f8d2c6598ff7e3ca1b8a37213f7", size = 39108, upload-time = "2025-08-12T05:51:58.425Z" },
-    { url = "https://files.pythonhosted.org/packages/0c/37/6faf15cfa41bf1f3dba80cd3f5ccc6622dfccb660ab26ed79f0178c7497f/wrapt-1.17.3-cp313-cp313-manylinux1_x86_64.manylinux_2_28_x86_64.manylinux_2_5_x86_64.whl", hash = "sha256:6fd1ad24dc235e4ab88cda009e19bf347aabb975e44fd5c2fb22a3f6e4141277", size = 88072, upload-time = "2025-08-12T05:52:37.53Z" },
-    { url = "https://files.pythonhosted.org/packages/78/f2/efe19ada4a38e4e15b6dff39c3e3f3f73f5decf901f66e6f72fe79623a06/wrapt-1.17.3-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:0ed61b7c2d49cee3c027372df5809a59d60cf1b6c2f81ee980a091f3afed6a2d", size = 88214, upload-time = "2025-08-12T05:52:15.886Z" },
-    { url = "https://files.pythonhosted.org/packages/40/90/ca86701e9de1622b16e09689fc24b76f69b06bb0150990f6f4e8b0eeb576/wrapt-1.17.3-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:423ed5420ad5f5529db9ce89eac09c8a2f97da18eb1c870237e84c5a5c2d60aa", size = 87105, upload-time = "2025-08-12T05:52:17.914Z" },
-    { url = "https://files.pythonhosted.org/packages/fd/e0/d10bd257c9a3e15cbf5523025252cc14d77468e8ed644aafb2d6f54cb95d/wrapt-1.17.3-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:e01375f275f010fcbf7f643b4279896d04e571889b8a5b3f848423d91bf07050", size = 87766, upload-time = "2025-08-12T05:52:39.243Z" },
-    { url = "https://files.pythonhosted.org/packages/e8/cf/7d848740203c7b4b27eb55dbfede11aca974a51c3d894f6cc4b865f42f58/wrapt-1.17.3-cp313-cp313-win32.whl", hash = "sha256:53e5e39ff71b3fc484df8a522c933ea2b7cdd0d5d15ae82e5b23fde87d44cbd8", size = 36711, upload-time = "2025-08-12T05:53:10.074Z" },
-    { url = "https://files.pythonhosted.org/packages/57/54/35a84d0a4d23ea675994104e667ceff49227ce473ba6a59ba2c84f250b74/wrapt-1.17.3-cp313-cp313-win_amd64.whl", hash = "sha256:1f0b2f40cf341ee8cc1a97d51ff50dddb9fcc73241b9143ec74b30fc4f44f6cb", size = 38885, upload-time = "2025-08-12T05:53:08.695Z" },
-    { url = "https://files.pythonhosted.org/packages/01/77/66e54407c59d7b02a3c4e0af3783168fff8e5d61def52cda8728439d86bc/wrapt-1.17.3-cp313-cp313-win_arm64.whl", hash = "sha256:7425ac3c54430f5fc5e7b6f41d41e704db073309acfc09305816bc6a0b26bb16", size = 36896, upload-time = "2025-08-12T05:52:55.34Z" },
-    { url = "https://files.pythonhosted.org/packages/1f/f6/a933bd70f98e9cf3e08167fc5cd7aaaca49147e48411c0bd5ae701bb2194/wrapt-1.17.3-py3-none-any.whl", hash = "sha256:7171ae35d2c33d326ac19dd8facb1e82e5fd04ef8c6c0e394d7af55a55051c22", size = 23591, upload-time = "2025-08-12T05:53:20.674Z" },
-]
-
-[[package]]
-name = "xai-sdk"
-version = "1.17.0"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "aiohttp" },
-    { name = "googleapis-common-protos" },
-    { name = "grpcio" },
-    { name = "opentelemetry-sdk" },
-    { name = "packaging" },
-    { name = "protobuf" },
-    { name = "pydantic" },
-    { name = "requests" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/0d/79/722beabb2ffbac413e4e776230ee56db2710e83c02f038f5769f9da748c1/xai_sdk-1.17.0.tar.gz", hash = "sha256:ec695ad8b459a4080c01f6e7bb8abf38ed6a4ec69532bfdd73c4de14db1d485c", size = 452803, upload-time = "2026-06-12T03:44:13.329Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/d9/ad/99ad3209727f6e0e280681c05aa6a49feb130926d939bdb4767ee825b0da/xai_sdk-1.17.0-py3-none-any.whl", hash = "sha256:88a6a53181fa13d55662e3296dafd2a3cf258803450b7d82c7318b8c64e8a485", size = 273997, upload-time = "2026-06-12T03:44:11.828Z" },
-]
-
-[[package]]
-name = "xxhash"
-version = "3.8.1"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/8e/63/71aa56b151a1b28770037a61bd4e461c2619cfc8866a4fcaf1548605e325/xxhash-3.8.1.tar.gz", hash = "sha256:b0de4bf3aa66363552d52c6a89003c479911f12098cd48a53d44a0f7a25f7c46", size = 86223, upload-time = "2026-07-06T10:49:58.937Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/6b/8c/446bb782cd0d27007a917b5569a08dd73219c3e8d6e459014db104b27bdb/xxhash-3.8.1-cp313-cp313-android_21_arm64_v8a.whl", hash = "sha256:3c682fcd96eb4bf64be32a4d95f96107e1588005831bd8a741b324fdda01b913", size = 38562, upload-time = "2026-07-06T10:45:12.425Z" },
-    { url = "https://files.pythonhosted.org/packages/d7/ec/c0c45627eaa6be7a5d6117423adf8f7a15b17ee74b4b17072cca5959a225/xxhash-3.8.1-cp313-cp313-android_21_x86_64.whl", hash = "sha256:036a024d8b9c01f70782e09ed98d532e76fd23f950ae7154bd950fe94e90ebec", size = 36656, upload-time = "2026-07-06T10:45:13.932Z" },
-    { url = "https://files.pythonhosted.org/packages/f6/94/8324c04cc7597154caaeba6c094e01fbd2e7601d01e7a13eea9f5420e77b/xxhash-3.8.1-cp313-cp313-ios_13_0_arm64_iphoneos.whl", hash = "sha256:d6a5c0bce213b23b0166fe0d35bcbbe23ce4b968f257cc7eb6fd57cb8e1e6297", size = 31169, upload-time = "2026-07-06T10:45:15.687Z" },
-    { url = "https://files.pythonhosted.org/packages/40/a4/beb6bb26e1184e126dbe7a5682330214ef54dcfbf882078aa9f4b5428d42/xxhash-3.8.1-cp313-cp313-ios_13_0_arm64_iphonesimulator.whl", hash = "sha256:5177aa44eddaa97c6ef0cc00c6d540edb64d51781d2f8fb941612ec61a92c9ed", size = 32177, upload-time = "2026-07-06T10:45:17.035Z" },
-    { url = "https://files.pythonhosted.org/packages/56/0f/fc4c92a5a528f839b34b6419b2e53c8597f2a629d5a1f5d721f65bfa1fd6/xxhash-3.8.1-cp313-cp313-ios_13_0_x86_64_iphonesimulator.whl", hash = "sha256:7801b7223db017b9c0c9ccf37e44524edb35a1544a1c032add22c061c6af0276", size = 34642, upload-time = "2026-07-06T10:45:18.39Z" },
-    { url = "https://files.pythonhosted.org/packages/d4/58/edbfb141d4000767ac6a9694f8ac0763e2c2e983e65c9e31620ba56e2667/xxhash-3.8.1-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:9e80238259655bf69d7bcd08226a970d7f42605f3157786bfa76dd13472d7fa0", size = 34684, upload-time = "2026-07-06T10:45:20.033Z" },
-    { url = "https://files.pythonhosted.org/packages/07/3f/5072f1f0f5714186f0ac2a0b5a4929ce30d4b845e94886b6c01b6ebda0be/xxhash-3.8.1-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:bcab50a389cc04d87f90092af78a6adba2ab3deca63175a3344ca83514045315", size = 32401, upload-time = "2026-07-06T10:45:21.414Z" },
-    { url = "https://files.pythonhosted.org/packages/49/c7/802ea2f9c2ed59219934d6d65c470d502b1788043eae277a52af8658bda6/xxhash-3.8.1-cp313-cp313-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:a2489d3a776fa380cb8e71f54c7fda268a9baf3de9b1395093fd280f95735907", size = 220617, upload-time = "2026-07-06T10:45:23.234Z" },
-    { url = "https://files.pythonhosted.org/packages/99/a8/e10488efd31fcb13fcd6acbc6e788f10c6f8e3a0cc4ae3eb89dc19c55a12/xxhash-3.8.1-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:32ab1e5432690276e71192be7401b55f96db2d0eedea5d44eb1f164505669cc0", size = 241295, upload-time = "2026-07-06T10:45:25.364Z" },
-    { url = "https://files.pythonhosted.org/packages/18/cc/14180b17d44892a631f8ae7323c30bfbb1328efc8209e528a480293528ac/xxhash-3.8.1-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:b30e01a0b97a4bc3f519a4d7a82da3dc53251fb0de5eeea8660dcd4ff094c0c2", size = 264688, upload-time = "2026-07-06T10:45:27.09Z" },
-    { url = "https://files.pythonhosted.org/packages/a9/72/a14019d0c5f6c41ee407a503036ae32787c91325ca218a96a9b5627be651/xxhash-3.8.1-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:1f44275ddb0978b67a58a951501903f04d49335a91f7681c9ce122ecb8ccb329", size = 242740, upload-time = "2026-07-06T10:45:28.753Z" },
-    { url = "https://files.pythonhosted.org/packages/68/08/92550e556c6fcfcb96c6a336945eb53a431ed43120ed749636debb16c5cf/xxhash-3.8.1-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:e3b87cbd974512c0c5fc7b469c36b2cdc9ee6d76e4ec78bccb2c7184611c49b0", size = 473599, upload-time = "2026-07-06T10:45:30.524Z" },
-    { url = "https://files.pythonhosted.org/packages/29/83/e361d3c1acd1b21e1d489616de6fa4aaf843365d8179f612e3743eac20a9/xxhash-3.8.1-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:98ee81b4b7f3023c9cb04a78cc67610baffcb5812d92f2096cb5a5efc6f19437", size = 220559, upload-time = "2026-07-06T10:45:32.979Z" },
-    { url = "https://files.pythonhosted.org/packages/05/01/006a4243c2c2a6831827f9999f6d1c23feeef100eb023c1f886022a00bf3/xxhash-3.8.1-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:2666f059a1588a99267e33605365ed89cea92f424b3522806a9f4bd8ad2e3d62", size = 310383, upload-time = "2026-07-06T10:45:35.875Z" },
-    { url = "https://files.pythonhosted.org/packages/d8/20/af388e8bf9f9a0f89eeef7d2a1935d176ee1c20bc6adeda05035879379cf/xxhash-3.8.1-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:b0093cf7eeb91b84776e8742113afa4bdf47533d36cf719179aaaf1f56f6f8bf", size = 238228, upload-time = "2026-07-06T10:45:38.02Z" },
-    { url = "https://files.pythonhosted.org/packages/63/6b/4666579a87eebd1744663c404297355fa0658617b015cedfa58810ee7036/xxhash-3.8.1-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:3a800912a2e5e975d4128969d645c4a2a80aa886ccd6c9b1c6f44529e327e8cf", size = 269137, upload-time = "2026-07-06T10:45:39.954Z" },
-    { url = "https://files.pythonhosted.org/packages/de/d3/e963a8a46f900a137d91b02144d8ea07a8f812971b138204a3b2f8b8e55c/xxhash-3.8.1-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:0fe37f72a207223d22a4eddc3149d4298993385aa9daef25c039246ca5a309f3", size = 225068, upload-time = "2026-07-06T10:45:41.718Z" },
-    { url = "https://files.pythonhosted.org/packages/aa/80/9d181dbcde4b0fe48375f48833a5832d4b8cd2b349b15110c92ee472d874/xxhash-3.8.1-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:5db43f249b4be9f99ef4b967863f37094fb40e67effafb78ba4f0356b6396104", size = 240874, upload-time = "2026-07-06T10:45:43.414Z" },
-    { url = "https://files.pythonhosted.org/packages/39/15/ce3ab5a1cd27ead25a5196e55a7284220f6ad6e316da494ffd900b2b600f/xxhash-3.8.1-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:c4ed42965c2cd9081f011be22f69d0e65d3b6165fe7734072fd0c232840bbd4e", size = 300702, upload-time = "2026-07-06T10:45:45.135Z" },
-    { url = "https://files.pythonhosted.org/packages/96/c0/2281a8ab5f2a62dbf57a23c58a01ccc1d98abf40f71193c8a81f59e759b5/xxhash-3.8.1-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:3557bec8fcb11738a8920eeb68974bc76b75262f6947998d3147954ce0a4b893", size = 443351, upload-time = "2026-07-06T10:45:47.188Z" },
-    { url = "https://files.pythonhosted.org/packages/81/2e/071a58c1a53a52d4f7a3aa0987be0c396dffd40da8204805fe1b130a81f4/xxhash-3.8.1-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:00de40f3b42240db23a82a5c682b55d7263d84a26a953240c1aee463409660e3", size = 217396, upload-time = "2026-07-06T10:45:48.925Z" },
-    { url = "https://files.pythonhosted.org/packages/68/44/36ab58134badd9d3433fc7b53c4ca8d113d8e807782885628640f8297a4d/xxhash-3.8.1-cp313-cp313-win32.whl", hash = "sha256:b5196cc2574cfec572a5f3fb7cfa5ade27305ae3d06516a082132441aff4c83a", size = 31974, upload-time = "2026-07-06T10:45:50.591Z" },
-    { url = "https://files.pythonhosted.org/packages/96/2a/2a0b84798448e766f7b89ceed073cb0cb5a43fc9ebbacbdea74a38de18e3/xxhash-3.8.1-cp313-cp313-win_amd64.whl", hash = "sha256:538f5f865df6cd8c32dd63158a0e5b4f5dd08d732a7da8b7228a5a0776c8ce55", size = 32739, upload-time = "2026-07-06T10:45:52.221Z" },
-    { url = "https://files.pythonhosted.org/packages/d4/60/bb51dbf7c363ff88a7cbd50b7959718219577ef44d7cf255929ffc4a2194/xxhash-3.8.1-cp313-cp313-win_arm64.whl", hash = "sha256:a6617f30641ba0d8baa1635fbefb1dffc5165ec36d26921bd5cee13497cd937a", size = 29239, upload-time = "2026-07-06T10:45:53.714Z" },
-    { url = "https://files.pythonhosted.org/packages/56/d3/827ca123c2ee5443a6aaed3c5dd199237dc2f010e2bebd7ec09ef36f3a5f/xxhash-3.8.1-cp313-cp313t-macosx_10_13_x86_64.whl", hash = "sha256:bfcd82852c62a60e314670a9602de354c4460f8adad916e2e42a20860c7870bc", size = 34964, upload-time = "2026-07-06T10:45:55.535Z" },
-    { url = "https://files.pythonhosted.org/packages/05/67/67ae2a3ccdeb8b8ef025d35aee9edd1d26c3abe5051d47da9286232afbf8/xxhash-3.8.1-cp313-cp313t-macosx_11_0_arm64.whl", hash = "sha256:08ea2081f5e88615fec8622a9f87fbe21b8ea58d88cfc02163ca11026ee62a92", size = 32697, upload-time = "2026-07-06T10:45:57.288Z" },
-    { url = "https://files.pythonhosted.org/packages/38/5a/3d3994346e1f45493679cb5c1ffc2bf454e410e9d1e8a662d253becee91e/xxhash-3.8.1-cp313-cp313t-manylinux1_i686.manylinux_2_28_i686.manylinux_2_5_i686.whl", hash = "sha256:2e32855b6f9e5b18f449e59d45e3d5778bdeb660632ef2693cca267a11246c75", size = 225954, upload-time = "2026-07-06T10:45:58.897Z" },
-    { url = "https://files.pythonhosted.org/packages/3f/2c/53169270309b7cd8e05504e07fe123bac053b89d00ac63617faacf0a2ec0/xxhash-3.8.1-cp313-cp313t-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:a6e088bd7870775624256a0d84c2a6714afd223b2eeb56b0ca58398e52a32fda", size = 249776, upload-time = "2026-07-06T10:46:00.977Z" },
-    { url = "https://files.pythonhosted.org/packages/70/e0/5c551d8d592f944506f7c5185e210255c15e672a3c6008c156a1bd9b775e/xxhash-3.8.1-cp313-cp313t-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:72eb5ae575cc7ae2b23f6f8064a8b10f638c7149819ae9cc6d20ebd4d37a1629", size = 274776, upload-time = "2026-07-06T10:46:02.869Z" },
-    { url = "https://files.pythonhosted.org/packages/a0/2a/d3a762270cee2d7bcd0e25e28c623e5f3f5c0dc637b66e3e47dd5b0bb3f0/xxhash-3.8.1-cp313-cp313t-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:d0b48cdf690a64cedf7258c3dc9506cc41fc86edd7739c40e3098952265dc068", size = 252056, upload-time = "2026-07-06T10:46:04.688Z" },
-    { url = "https://files.pythonhosted.org/packages/c1/8f/b78e4373b2cb6d1c42af60ea2d7e9146ad0710b239ac7f706d5d31d5bb98/xxhash-3.8.1-cp313-cp313t-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:fb9e256a357dfcede7818c6d34e70db2d6b664394803d1de4b6984d2de76c0f1", size = 482108, upload-time = "2026-07-06T10:46:06.498Z" },
-    { url = "https://files.pythonhosted.org/packages/e6/0d/642d923336ea61a15f8ce64fc7e078729e6e06c3a026e517fa79b2c23b7a/xxhash-3.8.1-cp313-cp313t-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:51f71a6e2ad071e70c937e41fcb6c19f82c3f9f49831eba850ed4a106ffbb647", size = 226739, upload-time = "2026-07-06T10:46:08.598Z" },
-    { url = "https://files.pythonhosted.org/packages/a6/0a/a37d6da6427d45a8d23e3ee3a0ca9c9d4a90364849c6637fe2963a755f9b/xxhash-3.8.1-cp313-cp313t-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:e4a6443968c4e8dc69967e12776776a5952c119cc1bd94168ad1c5ad667c2be1", size = 319658, upload-time = "2026-07-06T10:46:10.504Z" },
-    { url = "https://files.pythonhosted.org/packages/4a/51/ebbd40da8a3f1bc53b4b7a9a87f8e28bd95c5f21bc14b8a57860cf367d1b/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_aarch64.whl", hash = "sha256:714503083a1f2065c9ad15340dd49ac8a8e948a505a705ffa1750cb951519113", size = 246059, upload-time = "2026-07-06T10:46:12.634Z" },
-    { url = "https://files.pythonhosted.org/packages/24/4c/d9014030147e1f0bb26e7da47aa240dd9ec61c763c573e558111d869f8e1/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_armv7l.whl", hash = "sha256:77f74e45a1e5574bbbf80181c8027b3a4c65c2248fffbd557bd596fff13102f9", size = 275535, upload-time = "2026-07-06T10:46:14.614Z" },
-    { url = "https://files.pythonhosted.org/packages/84/86/caee2db41fadcd5a25aa4323213f9afec5a8586d4e419241e3d659362bd7/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_i686.whl", hash = "sha256:4e0e1b0fb0259c1b75d1251ac0bb4d7ab675d36f7a6bf4ba6aa630dae94f9ffa", size = 231292, upload-time = "2026-07-06T10:46:16.452Z" },
-    { url = "https://files.pythonhosted.org/packages/0b/60/f52f08bcdc904c4514ea5c25caa19e9f3214144434a6ff96dc82dc1cbddd/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_ppc64le.whl", hash = "sha256:10e4393ec33633c2f05ad01869e546ad080b1a18f2650503731f153774608b31", size = 250490, upload-time = "2026-07-06T10:46:18.318Z" },
-    { url = "https://files.pythonhosted.org/packages/24/a0/94dc7ae310838f250669c6ad7168e6d6fca17d49dac1053f06dc232c4a56/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_riscv64.whl", hash = "sha256:b3ba794c3d885803db6c3116686923f1ec13bc86e621e169a375282b63ea1cc6", size = 309861, upload-time = "2026-07-06T10:46:20.503Z" },
-    { url = "https://files.pythonhosted.org/packages/8b/f9/adeead7d0eb28cdfc2832544ea639ffbc6749ccde47a8e228d667459182e/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_s390x.whl", hash = "sha256:57189a69c0891e4818853feaa521c972d22c880a001453addea015f48e3c3398", size = 448739, upload-time = "2026-07-06T10:46:22.79Z" },
-    { url = "https://files.pythonhosted.org/packages/04/a4/22ec0e07db57d901c9298ae98aa3cf2be45bafded6f07c13131e85b89032/xxhash-3.8.1-cp313-cp313t-musllinux_1_2_x86_64.whl", hash = "sha256:d59e71153fe9ff85648d00e18649b07e9b22c797291abb7e27274fa06df8b838", size = 223657, upload-time = "2026-07-06T10:46:24.831Z" },
-    { url = "https://files.pythonhosted.org/packages/94/32/8a9531f37b59e5a013003db7cb7414baf4ce7e0e1268e0d5947cd3d6a2df/xxhash-3.8.1-cp313-cp313t-win32.whl", hash = "sha256:5b96f0024e9840f449bd91b2d005c921a4b666055a0d1b6492463799f32aae22", size = 32377, upload-time = "2026-07-06T10:46:26.86Z" },
-    { url = "https://files.pythonhosted.org/packages/e7/ab/2ca45fd7f671de5f81fc297ef1c95080b40c86ec6be0cc6034b8f7707ac8/xxhash-3.8.1-cp313-cp313t-win_amd64.whl", hash = "sha256:37d5a56c36dcc0b9a87b814cd992598d33863ff683749de6c86081f278d5e629", size = 33274, upload-time = "2026-07-06T10:46:28.39Z" },
-    { url = "https://files.pythonhosted.org/packages/5a/54/20d7163463ddb6438b73a427d1655a77a502cf9b9b0c3ada3599629d9c0a/xxhash-3.8.1-cp313-cp313t-win_arm64.whl", hash = "sha256:6696c8752aded28ff3b16f33ef28ce28fb5d209b80c206746f943199fcf5fd65", size = 29375, upload-time = "2026-07-06T10:46:29.962Z" },
-]
-
-[[package]]
-name = "yarl"
-version = "1.24.5"
-source = { registry = "https://pypi.org/simple" }
-dependencies = [
-    { name = "idna" },
-    { name = "multidict" },
-    { name = "propcache" },
-]
-sdist = { url = "https://files.pythonhosted.org/packages/31/33/ebe9e3d1f86c7a0b51094c0a146392045ca1631d2664889539dec8088a33/yarl-1.24.5.tar.gz", hash = "sha256:e81b83143bee16329c23db3c1b2d82b29892fcbcb849186d2f6e98a5abe9a57f", size = 228679, upload-time = "2026-07-20T02:07:45.435Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/e1/63/64ef361967cc983573149dc1515d531db5da8a4c92d22bb833d59e01b313/yarl-1.24.5-cp313-cp313-macosx_10_13_universal2.whl", hash = "sha256:79af890482fc94648e8cde4c68620378f7fef60932710fa17a66abc039244da2", size = 135075, upload-time = "2026-07-20T02:05:59.671Z" },
-    { url = "https://files.pythonhosted.org/packages/bb/89/55920fd853ce43e608adbc3962456f0d649d6bb15250dc2988321da0fe1c/yarl-1.24.5-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:46c2f213e23a04b93a392942d782eb9e413e6ef6bf7c8c53884e599a5c174dcb", size = 97225, upload-time = "2026-07-20T02:06:01.769Z" },
-    { url = "https://files.pythonhosted.org/packages/15/f0/7688d3f2cfff7590df2af38ec46d969f4281a4dddb08a9ad2eafbcdddf98/yarl-1.24.5-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:92ab3e11448f2ff7bf53c5a26eff0edc086898ec8b21fb154b85839ce1d88075", size = 96751, upload-time = "2026-07-20T02:06:03.676Z" },
-    { url = "https://files.pythonhosted.org/packages/05/1a/a851a0f94aaaf379dd4f901bfc80f634280bec51eb260b47363e2a4cd62e/yarl-1.24.5-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.manylinux_2_28_aarch64.whl", hash = "sha256:ebb0ec7f17803063d5aeb982f3b1bd2b2f4e4fae6751226cbd6ba1fcfe9e63ff", size = 107960, upload-time = "2026-07-20T02:06:05.699Z" },
-    { url = "https://files.pythonhosted.org/packages/6c/a8/faea066c12f9c77ca0de90641f1655f9dd7b412477bf28c76d692f3aecff/yarl-1.24.5-cp313-cp313-manylinux2014_armv7l.manylinux_2_17_armv7l.manylinux_2_31_armv7l.whl", hash = "sha256:82632daed195dcc8ea664e8556dc9bdbd671960fb3776bd92806ce05792c2448", size = 103500, upload-time = "2026-07-20T02:06:07.556Z" },
-    { url = "https://files.pythonhosted.org/packages/fb/9c/1e67084c2a6e2f2db0e3be798328cb3be42c0119b621d25461479a224d21/yarl-1.24.5-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.manylinux_2_28_ppc64le.whl", hash = "sha256:53e549287ef628fecba270045c9701b0c564563a9b0577d24a4ec75b8ab8040f", size = 115780, upload-time = "2026-07-20T02:06:09.599Z" },
-    { url = "https://files.pythonhosted.org/packages/58/86/1f94664e147474337e3359f52012cf3d02f825f694317b178bfba1078c62/yarl-1.24.5-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.manylinux_2_28_s390x.whl", hash = "sha256:fcd3b77e2f17bbe4ca56ec7bcb07992647d19d0b9c05d84886dcd6f9eb810afd", size = 115308, upload-time = "2026-07-20T02:06:11.352Z" },
-    { url = "https://files.pythonhosted.org/packages/0a/43/8e55ae7538ba5f28ccb3c845c6dd4549cf7016d5992e5326512519107cdd/yarl-1.24.5-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.manylinux_2_28_x86_64.whl", hash = "sha256:d46b86567dd4e248c6c159fcbcdcce01e0a5c8a7cd2334a0fff759d0fa075b16", size = 110574, upload-time = "2026-07-20T02:06:13.129Z" },
-    { url = "https://files.pythonhosted.org/packages/ce/ba/a889ec8765cedcf2ac44dcb02d6a21e4861399b243b263c5f2dde27ee740/yarl-1.24.5-cp313-cp313-manylinux_2_31_riscv64.manylinux_2_39_riscv64.whl", hash = "sha256:7f72c74aa99359e27a2ee8d6613fefa28b5f76a983c083074dfc2aaa4ab46213", size = 109914, upload-time = "2026-07-20T02:06:15.243Z" },
-    { url = "https://files.pythonhosted.org/packages/9c/c3/e45f821af67b791c2dbbe4a9f4137a1d33f8d386654a05a0c3f47bdfa25d/yarl-1.24.5-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:3f45789ce415a7ec0820dc4f82925f9b5f7732070be1dec1f5f23ec381435a24", size = 107712, upload-time = "2026-07-20T02:06:17.443Z" },
-    { url = "https://files.pythonhosted.org/packages/02/00/2ab0f42c9857fcb490bfaa6647b14540b53d241ab209f23220b958cc5832/yarl-1.24.5-cp313-cp313-musllinux_1_2_armv7l.whl", hash = "sha256:6e73e7fe93f17a7b191f52ec9da9dd8c06a8fe735a1ecbd13b97d1c723bff385", size = 104251, upload-time = "2026-07-20T02:06:19.259Z" },
-    { url = "https://files.pythonhosted.org/packages/7a/70/709d9a286e98af2c7fd8e4e6cada658b5c0e30d87dd7e2a63c2fb5767217/yarl-1.24.5-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:4a36f9becdd4c5c52a20c3e9484128b070b1dcfc8944c006f3a528295a359a9c", size = 115319, upload-time = "2026-07-20T02:06:21.207Z" },
-    { url = "https://files.pythonhosted.org/packages/5c/6c/3eaa515142991fe84cfc483ff986492211f1978f90161ccefdbec919d09b/yarl-1.24.5-cp313-cp313-musllinux_1_2_riscv64.whl", hash = "sha256:7bcbe0fcf850eae67b6b01749815a4f7161c560a844c769ad7b48fcd99f791c4", size = 109163, upload-time = "2026-07-20T02:06:23.006Z" },
-    { url = "https://files.pythonhosted.org/packages/bb/64/711dafce66c323a3144d470547a71c5384c57623308ac8bb5e4b903ac148/yarl-1.24.5-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:24e861e9630e0daddcb9191fb187f60f034e17a4426f8101279f0c475cd74144", size = 115435, upload-time = "2026-07-20T02:06:24.923Z" },
-    { url = "https://files.pythonhosted.org/packages/cf/f3/9b9d0e6d84bea851eb1ba99e4bdc755b86fd813e49ec86dfe42f26befdef/yarl-1.24.5-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:9335a099ad87287c37fe5d1a982ff392fa5efe5d14b40a730b1ec1d6a41382b4", size = 110691, upload-time = "2026-07-20T02:06:26.973Z" },
-    { url = "https://files.pythonhosted.org/packages/86/e4/62a06b7e87c4246ac76b7c2da136f972eb4a3a1fc94abb07e7022d6fdb0a/yarl-1.24.5-cp313-cp313-win_amd64.whl", hash = "sha256:2dbe06fc16bc91502bca713704022182e5729861ae00277c3a23354b40929740", size = 97454, upload-time = "2026-07-20T02:06:29.163Z" },
-    { url = "https://files.pythonhosted.org/packages/9e/c9/5fc8025b318ab10db413b61056bd0d95c557a70e8df4210c7511f866329c/yarl-1.24.5-cp313-cp313-win_arm64.whl", hash = "sha256:6b8536851f9f65e7f00c7a1d49ba7f2be0ffe2c11555367fc9f50d9f842410a1", size = 92813, upload-time = "2026-07-20T02:06:31.113Z" },
-    { url = "https://files.pythonhosted.org/packages/61/02/962c1cbfc401a30c1d034dc67ff395f64b52302c6d62de556c1fca99acc0/yarl-1.24.5-py3-none-any.whl", hash = "sha256:a33700d13d9b7d84fd10947b09ff69fb9a792e519c8cb9764a3ca70baa6c23a7", size = 58612, upload-time = "2026-07-20T02:07:43.461Z" },
-]
-
 [[package]]
 name = "zipp"
 version = "4.1.0"
@@ -3462,28 +1712,3 @@ wheels = [
     { url = "https://files.pythonhosted.org/packages/9d/3a/4ff4fdead77ef30f5832b38a47eb7a1283e98b3c678576b83f8fdfff53eb/zopfli-0.4.3-cp310-abi3-win_amd64.whl", hash = "sha256:921c2c9907f4364963848da5ad194b46d68865e07fdb975d04fd09bc42d47357", size = 288550, upload-time = "2026-06-10T09:10:13.639Z" },
     { url = "https://files.pythonhosted.org/packages/e6/44/6264f929057236fde72dd6d271f54612b4811ce37288e002f5d5339d696a/zopfli-0.4.3-cp310-abi3-win_arm64.whl", hash = "sha256:7e9703ca6e7ef66c8d05e0826b6f558b680c9db8206f84f05a3ee93430a12e42", size = 451343, upload-time = "2026-06-10T09:10:14.72Z" },
 ]
-
-[[package]]
-name = "zstandard"
-version = "0.25.0"
-source = { registry = "https://pypi.org/simple" }
-sdist = { url = "https://files.pythonhosted.org/packages/fd/aa/3e0508d5a5dd96529cdc5a97011299056e14c6505b678fd58938792794b1/zstandard-0.25.0.tar.gz", hash = "sha256:7713e1179d162cf5c7906da876ec2ccb9c3a9dcbdffef0cc7f70c3667a205f0b", size = 711513, upload-time = "2025-09-14T22:15:54.002Z" }
-wheels = [
-    { url = "https://files.pythonhosted.org/packages/35/0b/8df9c4ad06af91d39e94fa96cc010a24ac4ef1378d3efab9223cc8593d40/zstandard-0.25.0-cp313-cp313-macosx_10_13_x86_64.whl", hash = "sha256:ec996f12524f88e151c339688c3897194821d7f03081ab35d31d1e12ec975e94", size = 795735, upload-time = "2025-09-14T22:17:26.042Z" },
-    { url = "https://files.pythonhosted.org/packages/3f/06/9ae96a3e5dcfd119377ba33d4c42a7d89da1efabd5cb3e366b156c45ff4d/zstandard-0.25.0-cp313-cp313-macosx_11_0_arm64.whl", hash = "sha256:a1a4ae2dec3993a32247995bdfe367fc3266da832d82f8438c8570f989753de1", size = 640440, upload-time = "2025-09-14T22:17:27.366Z" },
-    { url = "https://files.pythonhosted.org/packages/d9/14/933d27204c2bd404229c69f445862454dcc101cd69ef8c6068f15aaec12c/zstandard-0.25.0-cp313-cp313-manylinux2010_i686.manylinux2014_i686.manylinux_2_12_i686.manylinux_2_17_i686.whl", hash = "sha256:e96594a5537722fdfb79951672a2a63aec5ebfb823e7560586f7484819f2a08f", size = 5343070, upload-time = "2025-09-14T22:17:28.896Z" },
-    { url = "https://files.pythonhosted.org/packages/6d/db/ddb11011826ed7db9d0e485d13df79b58586bfdec56e5c84a928a9a78c1c/zstandard-0.25.0-cp313-cp313-manylinux2014_aarch64.manylinux_2_17_aarch64.whl", hash = "sha256:bfc4e20784722098822e3eee42b8e576b379ed72cca4a7cb856ae733e62192ea", size = 5063001, upload-time = "2025-09-14T22:17:31.044Z" },
-    { url = "https://files.pythonhosted.org/packages/db/00/87466ea3f99599d02a5238498b87bf84a6348290c19571051839ca943777/zstandard-0.25.0-cp313-cp313-manylinux2014_ppc64le.manylinux_2_17_ppc64le.whl", hash = "sha256:457ed498fc58cdc12fc48f7950e02740d4f7ae9493dd4ab2168a47c93c31298e", size = 5394120, upload-time = "2025-09-14T22:17:32.711Z" },
-    { url = "https://files.pythonhosted.org/packages/2b/95/fc5531d9c618a679a20ff6c29e2b3ef1d1f4ad66c5e161ae6ff847d102a9/zstandard-0.25.0-cp313-cp313-manylinux2014_s390x.manylinux_2_17_s390x.whl", hash = "sha256:fd7a5004eb1980d3cefe26b2685bcb0b17989901a70a1040d1ac86f1d898c551", size = 5451230, upload-time = "2025-09-14T22:17:34.41Z" },
-    { url = "https://files.pythonhosted.org/packages/63/4b/e3678b4e776db00f9f7b2fe58e547e8928ef32727d7a1ff01dea010f3f13/zstandard-0.25.0-cp313-cp313-manylinux2014_x86_64.manylinux_2_17_x86_64.whl", hash = "sha256:8e735494da3db08694d26480f1493ad2cf86e99bdd53e8e9771b2752a5c0246a", size = 5547173, upload-time = "2025-09-14T22:17:36.084Z" },
-    { url = "https://files.pythonhosted.org/packages/4e/d5/ba05ed95c6b8ec30bd468dfeab20589f2cf709b5c940483e31d991f2ca58/zstandard-0.25.0-cp313-cp313-musllinux_1_1_aarch64.whl", hash = "sha256:3a39c94ad7866160a4a46d772e43311a743c316942037671beb264e395bdd611", size = 5046736, upload-time = "2025-09-14T22:17:37.891Z" },
-    { url = "https://files.pythonhosted.org/packages/50/d5/870aa06b3a76c73eced65c044b92286a3c4e00554005ff51962deef28e28/zstandard-0.25.0-cp313-cp313-musllinux_1_1_x86_64.whl", hash = "sha256:172de1f06947577d3a3005416977cce6168f2261284c02080e7ad0185faeced3", size = 5576368, upload-time = "2025-09-14T22:17:40.206Z" },
-    { url = "https://files.pythonhosted.org/packages/5d/35/398dc2ffc89d304d59bc12f0fdd931b4ce455bddf7038a0a67733a25f550/zstandard-0.25.0-cp313-cp313-musllinux_1_2_aarch64.whl", hash = "sha256:3c83b0188c852a47cd13ef3bf9209fb0a77fa5374958b8c53aaa699398c6bd7b", size = 4954022, upload-time = "2025-09-14T22:17:41.879Z" },
-    { url = "https://files.pythonhosted.org/packages/9a/5c/36ba1e5507d56d2213202ec2b05e8541734af5f2ce378c5d1ceaf4d88dc4/zstandard-0.25.0-cp313-cp313-musllinux_1_2_i686.whl", hash = "sha256:1673b7199bbe763365b81a4f3252b8e80f44c9e323fc42940dc8843bfeaf9851", size = 5267889, upload-time = "2025-09-14T22:17:43.577Z" },
-    { url = "https://files.pythonhosted.org/packages/70/e8/2ec6b6fb7358b2ec0113ae202647ca7c0e9d15b61c005ae5225ad0995df5/zstandard-0.25.0-cp313-cp313-musllinux_1_2_ppc64le.whl", hash = "sha256:0be7622c37c183406f3dbf0cba104118eb16a4ea7359eeb5752f0794882fc250", size = 5433952, upload-time = "2025-09-14T22:17:45.271Z" },
-    { url = "https://files.pythonhosted.org/packages/7b/01/b5f4d4dbc59ef193e870495c6f1275f5b2928e01ff5a81fecb22a06e22fb/zstandard-0.25.0-cp313-cp313-musllinux_1_2_s390x.whl", hash = "sha256:5f5e4c2a23ca271c218ac025bd7d635597048b366d6f31f420aaeb715239fc98", size = 5814054, upload-time = "2025-09-14T22:17:47.08Z" },
-    { url = "https://files.pythonhosted.org/packages/b2/e5/fbd822d5c6f427cf158316d012c5a12f233473c2f9c5fe5ab1ae5d21f3d8/zstandard-0.25.0-cp313-cp313-musllinux_1_2_x86_64.whl", hash = "sha256:4f187a0bb61b35119d1926aee039524d1f93aaf38a9916b8c4b78ac8514a0aaf", size = 5360113, upload-time = "2025-09-14T22:17:48.893Z" },
-    { url = "https://files.pythonhosted.org/packages/8e/e0/69a553d2047f9a2c7347caa225bb3a63b6d7704ad74610cb7823baa08ed7/zstandard-0.25.0-cp313-cp313-win32.whl", hash = "sha256:7030defa83eef3e51ff26f0b7bfb229f0204b66fe18e04359ce3474ac33cbc09", size = 436936, upload-time = "2025-09-14T22:17:52.658Z" },
-    { url = "https://files.pythonhosted.org/packages/d9/82/b9c06c870f3bd8767c201f1edbdf9e8dc34be5b0fbc5682c4f80fe948475/zstandard-0.25.0-cp313-cp313-win_amd64.whl", hash = "sha256:1f830a0dac88719af0ae43b8b2d6aef487d437036468ef3c2ea59c51f9d55fd5", size = 506232, upload-time = "2025-09-14T22:17:50.402Z" },
-    { url = "https://files.pythonhosted.org/packages/d4/57/60c3c01243bb81d381c9916e2a6d9e149ab8627c0c7d7abb2d73384b3c0c/zstandard-0.25.0-cp313-cp313-win_arm64.whl", hash = "sha256:85304a43f4d513f5464ceb938aa02c1e78c2943b29f44a750b48b25ac999a049", size = 462671, upload-time = "2025-09-14T22:17:51.533Z" },
-]
diff --git a/frontend/.oxfmtrc.json b/frontend/.oxfmtrc.json
new file mode 100644
index 0000000000..cb801651b8
--- /dev/null
+++ b/frontend/.oxfmtrc.json
@@ -0,0 +1,33 @@
+{
+  "printWidth": 80,
+  "tabWidth": 2,
+  "useTabs": false,
+  "endOfLine": "lf",
+  "sortPackageJson": false,
+  "ignorePatterns": [
+    "dist/",
+    "editor/dist/",
+    "editor/src-tauri/**/target/",
+    "editor/src-tauri/gen/",
+    "node_modules/",
+    "editor/public/vendor/",
+    "editor/public/mockServiceWorker.js",
+    "editor/public/og-metadata.json",
+    "editor/public/og-metadata.saas.json",
+    "editor/src/core/data/ogImageMap.json",
+    "editor/src/portal/generated/docsManifest.json",
+    "editor/public/pdfjs*/",
+    "editor/public/js/thirdParty/",
+    "editor/public/css/cookieconsent.css",
+    "storybook-static/",
+    "playwright-report/",
+    "editor/playwright-report/",
+    "test-results/",
+    "editor/test-results/",
+    "*.min.*",
+    "*.md",
+    "*.wxs",
+    "*.toml",
+    "editor/src/output.css"
+  ]
+}
diff --git a/frontend/.prettierignore b/frontend/.prettierignore
deleted file mode 100644
index fa8ab6c502..0000000000
--- a/frontend/.prettierignore
+++ /dev/null
@@ -1,30 +0,0 @@
-dist/
-editor/dist/
-# Tauri/Cargo build output (binary assets named *.js etc. confuse Prettier).
-# Match nested target/ dirs too - provisioner/ and thumbnail-handler/ each
-# have their own Cargo workspace under src-tauri/.
-editor/src-tauri/**/target/
-editor/src-tauri/gen/
-node_modules/
-editor/public/vendor/
-# Auto-generated by MSW (`msw init`); regenerated verbatim, not hand-formatted.
-editor/public/mockServiceWorker.js
-# Auto-generated OG/social-preview metadata (scripts/generate-og-metadata.mjs); regenerated verbatim.
-editor/public/og-metadata.json
-editor/public/og-metadata.saas.json
-editor/src/core/data/ogImageMap.json
-# Auto-generated portal docs manifest (scripts/sync-portal-docs.mts); regenerated verbatim.
-editor/src/portal/generated/docsManifest.json
-editor/public/pdfjs*/
-editor/public/js/thirdParty/
-editor/public/css/cookieconsent.css
-# Build / test artifacts that may exist locally even though they're gitignored
-storybook-static/
-playwright-report/
-editor/playwright-report/
-test-results/
-editor/test-results/
-*.min.*
-*.md
-*.wxs
-editor/src/output.css
diff --git a/frontend/.prettierrc b/frontend/.prettierrc
deleted file mode 100644
index 58bc875631..0000000000
--- a/frontend/.prettierrc
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "printWidth": 80,
-  "tabWidth": 2,
-  "useTabs": false,
-  "endOfLine": "lf"
-}
diff --git a/frontend/.storybook/main.ts b/frontend/.storybook/main.ts
index c0436a3a82..e86a8636e3 100644
--- a/frontend/.storybook/main.ts
+++ b/frontend/.storybook/main.ts
@@ -10,6 +10,18 @@ import tsconfigPaths from "vite-tsconfig-paths";
  * the portal layer at editor/src/portal/). MDX docs pages live in
  * editor/src/portal/docs/.
  */
+/**
+ * Editor stories import via `@app/*` (proprietary→core fallback), `@core/*` and
+ * `@proprietary/*`. Resolve them exactly the way the editor's own build does -
+ * through vite-tsconfig-paths against the proprietary vite tsconfig - so the
+ * shared Storybook can host editor components without duplicating the alias map
+ * here. Built per pass: the main bundle and the worker bundle each need their own.
+ */
+const editorPathAliases = () =>
+  tsconfigPaths({
+    projects: [resolve(__dirname, "../editor/tsconfig.proprietary.vite.json")],
+  });
+
 const config: StorybookConfig = {
   stories: [
     "../editor/src/portal/**/*.mdx",
@@ -47,19 +59,15 @@ const config: StorybookConfig = {
       // than a relative path.
       "@public": resolve(__dirname, "../editor/public"),
     };
-    // Editor stories import via @app/* (proprietary→core fallback), @core/* and
-    // @proprietary/*. Resolve them exactly the way the editor's own build does —
-    // through vite-tsconfig-paths against the proprietary vite tsconfig — so the
-    // shared Storybook can host editor components without duplicating the alias
-    // map here.
     config.plugins = config.plugins ?? [];
-    config.plugins.push(
-      tsconfigPaths({
-        projects: [
-          resolve(__dirname, "../editor/tsconfig.proprietary.vite.json"),
-        ],
-      }),
-    );
+    config.plugins.push(editorPathAliases());
+    // Worker bundles are a separate Rollup pass and do NOT inherit `plugins`, so
+    // without this a worker importing @app/* fails to resolve while the same
+    // import works everywhere else. Mirrors editor/vite.config.ts.
+    config.worker = {
+      ...(config.worker ?? {}),
+      plugins: () => [editorPathAliases()],
+    };
     // Point apiClient.saas at a mock origin so the SaaS-backed billing stories
     // (SubscribedPlanView, PaymentMethodCard, InvoicesList) resolve a base URL and
     // their MSW handlers (which match "*/api/v1/payg/...") can intercept. The host
diff --git a/frontend/.storybook/preview.tsx b/frontend/.storybook/preview.tsx
index f568b34347..5d36a0ca16 100644
--- a/frontend/.storybook/preview.tsx
+++ b/frontend/.storybook/preview.tsx
@@ -71,9 +71,9 @@ for (const [path, raw] of Object.entries(localeModules)) {
 }
 
 if (!i18next.isInitialized) {
-  // initImmediate: false → initialise synchronously from the inline resources
-  // (there's no async backend here), so i18next is ready before the first story
-  // renders. Without it the first render can beat init and stick on raw keys.
+  // initAsync: false → initialise synchronously from the inline resources.
+  // There is no asynchronous backend here, so i18next is ready before stories
+  // render.
   void i18next.use(initReactI18next).init({
     lng: "en-US",
     fallbackLng: "en-US",
@@ -81,7 +81,7 @@ if (!i18next.isInitialized) {
     resources,
     interpolation: { escapeValue: false },
     react: { useSuspense: false },
-    initImmediate: false,
+    initAsync: false,
   });
 } else {
   // Something initialised i18next first (e.g. the app's async TOML backend):
diff --git a/frontend/README.md b/frontend/README.md
index ea759538e6..a4945ffae1 100644
--- a/frontend/README.md
+++ b/frontend/README.md
@@ -18,7 +18,7 @@ For desktop app development, see the [Tauri](#tauri) section below.
 `frontend/` is a workspace containing one or more apps. Today it holds the
 PDF editor under `frontend/editor/`; new apps (the developer portal, etc.)
 will sit alongside it as siblings. Shared tooling — `package.json`, `node_modules`,
-`.storybook/`, oxlint, Prettier — lives at `frontend/` so every app installs
+`.storybook/`, oxlint, oxfmt — lives at `frontend/` so every app installs
 once and lints with the same config.
 
 ## Environment Variables
diff --git a/frontend/editor/index.html b/frontend/editor/index.html
index 427b6d1449..1e782db2de 100644
--- a/frontend/editor/index.html
+++ b/frontend/editor/index.html
@@ -4,7 +4,10 @@
     <meta charset="UTF-8" />
     <base href="%BASE_URL%" />
     <link rel="icon" href="modern-logo/favicon.ico" />
-    <meta name="viewport" content="width=device-width, initial-scale=1.0" />
+    <meta
+      name="viewport"
+      content="width=device-width, initial-scale=1.0, viewport-fit=cover"
+    />
     <meta name="theme-color" content="#000000" />
     <meta
       name="description"
diff --git a/frontend/editor/playwright.config.ts b/frontend/editor/playwright.config.ts
index 93e6572392..c4a3885b15 100644
--- a/frontend/editor/playwright.config.ts
+++ b/frontend/editor/playwright.config.ts
@@ -17,9 +17,12 @@ import { defineConfig, devices } from "@playwright/test";
  *
  * @see https://playwright.dev/docs/test-configuration
  */
+/** Shared by every stubbed project so a spec sees one layout on all engines. */
+const STUBBED_VIEWPORT = { width: 1920, height: 1080 };
+
 const chromiumViewport = {
   ...devices["Desktop Chrome"],
-  viewport: { width: 1920, height: 1080 },
+  viewport: STUBBED_VIEWPORT,
 };
 
 export default defineConfig({
@@ -55,7 +58,8 @@ export default defineConfig({
   },
 
   projects: [
-    // Stubbed - no backend required, chromium-only for CI speed
+    // Stubbed - no backend required. The chromium arm of the cross-browser
+    // set below; CI fans all three out, one job per engine.
     {
       name: "stubbed",
       testDir: "./src/core/tests/stubbed",
@@ -93,16 +97,17 @@ export default defineConfig({
       },
     },
 
-    // Cross-browser coverage for the stubbed suite (opt-in locally)
+    // Cross-browser coverage for the stubbed suite. Same viewport as `stubbed`,
+    // or a layout difference here reads as an engine outage.
     {
       name: "stubbed-firefox",
       testDir: "./src/core/tests/stubbed",
-      use: { ...devices["Desktop Firefox"] },
+      use: { ...devices["Desktop Firefox"], viewport: STUBBED_VIEWPORT },
     },
     {
       name: "stubbed-webkit",
       testDir: "./src/core/tests/stubbed",
-      use: { ...devices["Desktop Safari"] },
+      use: { ...devices["Desktop Safari"], viewport: STUBBED_VIEWPORT },
     },
   ],
 
diff --git a/frontend/editor/public/locales/ar-AR/translation.toml b/frontend/editor/public/locales/ar-AR/translation.toml
index 16195a48ed..f61218a944 100644
--- a/frontend/editor/public/locales/ar-AR/translation.toml
+++ b/frontend/editor/public/locales/ar-AR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "الأبجدية"
 apply = "تطبيق"
 applyAndContinue = "تطبيق والمتابعة"
-areYouSure = "هل أنت متأكد أنك تريد المغادرة؟"
 back = "رجوع"
 black = "أسود"
 blue = "أزرق"
@@ -106,6 +105,7 @@ undoSuccess = "تم التراجع عن العملية بنجاح"
 unknown = "غير معروف"
 unpin = "إلغاء تثبيت الملف (استبداله بعد تشغيل الأداة)"
 unsavedChanges = "لديك تغييرات غير محفوظة على ملف PDF. ماذا تريد أن تفعل؟"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "تغييرات غير محفوظة"
 unsupported = "غير مدعوم"
 username = "اسم المستخدم"
@@ -1879,6 +1879,9 @@ width = "العرض"
 [app]
 description = "بديل Adobe Acrobat المجاني (10M+ تنزيلات)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "تحويل إلى PDF/A-3b"
 convertToPdfA3bDescription = "ينشئ ملف PDF للأرشفة مع مرفقات مضمنة"
@@ -2933,12 +2936,16 @@ text = "لجعل هذه الأذونات غير قابلة للتغيير، اس
 [chat.actions]
 copy = "نسخ الرسالة"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "خيارات وكيل Stirling"
+assistant = "AI Assistant"
 clearChat = "مسح الدردشة"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "ستستخدم هذه العملية أرصدة السحابة الخ
 tooltip = "التقاط لون من الشاشة"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "اختر اللون"
 
 [common]
+actions = "Actions"
 back = "رجوع"
 cancel = "إلغاء"
 close = "إغلاق"
+codeSample = "Code sample"
 collapse = "طيّ"
 confirm = "تأكيد"
 continue = "متابعة"
 copied = "تم النسخ!"
 copy = "نسخ"
 done = "تم"
+enterValue = "Enter value"
 error = "خطأ"
 expand = "توسيع"
 loading = "جارٍ التحميل..."
 next = "التالي"
+open = "Open"
 preview = "معاينة"
 previous = "السابق"
 refresh = "تحديث"
 remaining = "المتبقي"
 retry = "إعادة المحاولة"
 save = "حفظ"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "مسح المحدد"
@@ -3185,6 +3199,7 @@ title = "طريقة الضغط"
 [compress.settings]
 desiredSize = "حجم الملف المطلوب"
 desiredSizePlaceholder = "أدخل الحجم"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "الضغط طريقة سهلة لتقليل حجم ملفك. اختر حجم الملف لإدخال حجم مستهدف وسنعدّل الجودة من أجلك. اختر الجودة لضبط قوة الضغط يدويًا."
@@ -3387,6 +3402,24 @@ pdfOptions = "خيارات PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "حدّد أولًا صيغة المصدر"
 settings = "إعدادات"
 single = "مفرد"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "بحث..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "تحرير"
@@ -3824,11 +3861,13 @@ shareSelected = "مشاركة المحدد"
 sharing = "مشاركة"
 showAll = "عرض الكل"
 showHistory = "عرض السجلّ"
+sortBy = "Sort files"
 sortByDate = "فرز حسب التاريخ"
 sortByName = "فرز حسب الاسم"
 sortBySize = "فرز حسب الحجم"
 storage = "التخزين"
 storageState = "التخزين"
+storageUsed = "Storage used"
 synced = "تمت المزامنة"
 title = "تحميل ملفات PDF"
 toolChain = "الأدوات المطبّقة"
@@ -3874,8 +3913,12 @@ addFiles = "إضافة ملفات"
 addingFiles = "جارٍ إضافة الملفات…"
 collapse = "طيّ الشريط الجانبي"
 customizeGroups = "تخصيص المجموعات"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "افتح ملفات للبدء"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "توسيع الشريط الجانبي"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive غير مُكوَّن"
@@ -3888,15 +3931,17 @@ openFromComputer = "فتح من الكمبيوتر"
 openSettings = "فتح الإعدادات"
 other = "أخرى"
 recent = "الأحدث"
-search = "بحث"
-searchPlaceholder = "ابحث في الملفات..."
 viewAll = "عرض كل ملفات {{count}}"
 
 [fileSidebar.fileItem]
 closeViewer = "إغلاق العارض"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "فتح في العارض"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "إعادة التعيين إلى الافتراضيات"
 subtitle = "جمّع ملفاتك ضمن فئات رئيسية. أضف تسميات موجودة أو جديدة إلى فئة، أو أعد تسميتها، أو أنشئ فئتك الخاصة. تظهر الملفات غير الموجودة ضمن أي من فئاتك تحت “أخرى”."
 title = "فئات الشريط الجانبي"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "إضافة إلى مساحة العمل"
 addToWorkspaceCount = "إضافة {{count}} إلى مساحة العمل"
@@ -3918,7 +3971,6 @@ backToMyFiles = "الرجوع إلى ملفاتي"
 breadcrumbs = "مسار المجلد"
 cancel = "إلغاء"
 classification = "التصنيف"
-clearSearch = "مسح البحث"
 clearSelection = "مسح التحديد"
 closeDetails = "إغلاق التفاصيل"
 create = "إنشاء"
@@ -3950,6 +4002,7 @@ downloadAll = "تنزيل الكل"
 downloadVersion = "تنزيل هذا الإصدار"
 dropOverlay = "أفلِت الملفات للرفع"
 dropOverlaySub = "تبدأ الملفات محلياً. استخدم 'نقل إلى' أو 'حفظ إلى السحابة' لتنظيمها في مجلد."
+duplicate = "Duplicate"
 file = "ملف"
 fileInfo = "File info"
 fileMenu = "إجراءات الملف"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "تغيير حجم شجرة المجلدات (مفاتيح ا
 save = "حفظ"
 saveToServer = "حفظ إلى الخادم"
 saveToServerDisabledHint = "الحفظ إلى الخادم غير مفعّل على هذا الخادم. اطلب من المسؤول تمكينه."
-search = "بحث"
-searchPlaceholder = "ابحث في هذا المجلد والمجلدات الفرعية"
 selectAll = "تحديد الكل"
 selectAllHint = "انقر لتحديد الكل. تلميح: اضغط Ctrl (أو Cmd) لإضافة الملفات واحداً تلو الآخر، وShift لتحديد نطاق."
 selectedCount = "{{count}} محدد"
@@ -4044,6 +4095,10 @@ title = "لا توجد ملفات سحابية بعد"
 hint = "الملفات المحفوظة دون رفع تبقى هنا. أسقط ملفاً لإضافته."
 title = "لا توجد ملفات محلية فقط"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "الملفات التي تفتحها أو تعدّلها ستظهر هنا."
 title = "لم يتم تعديل أي شيء بعد"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "تعذّر حذف المجلد."
 deleteFolderFailedDetail = "تعذّر حذف المجلد: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "تعذّر تحديث مظهر المجلد."
 folderAppearanceFailedDetail = "تعذّر تحديث مظهر المجلد: {{message}}"
 moveFilesFailed = "تعذّر نقل الملفات."
@@ -4113,6 +4170,11 @@ localHint = "مخزّن فقط في هذا المتصفح"
 shared = "مُشترك"
 sharedHint = "تمت مشاركته معك عبر رابط"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "الأقدم أولاً"
 modifiedDesc = "الأحدث أولاً"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "لا توجد ملفات في التخزين. افتح 
 open = "فتح"
 openFile = "فتح ملف"
 openFiles = "فتح ملفات"
+selectFile = "Select {{name}}"
 selectFromStorage = "الاختيار من التخزين"
 upload = "تحميل"
 uploadFile = "تحميل ملف"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "تم حفظ الكل"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "فشل استخراج CSV"
 extractXlsxError = "فشل استخراج XLSX"
+filled = "filled"
 flattenAfterFilling = "تسطيح بعد التعبئة"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "مطلوب"
 requiredFieldsError = "يُرجى ملء جميع الحقول المطلوبة"
 rescanFields = "إعادة فحص الحقول"
@@ -4795,9 +4863,6 @@ title = "صورة إلى PDF"
 [imageToPdf]
 tags = "تحويل,صورة,jpg,صورة,صورة فوتوغرافية"
 
-[infoBanner]
-dismiss = "تجاهل"
-
 [invite]
 acceptError = "فشل إنشاء الحساب"
 accountFor = "إنشاء حساب لـ"
@@ -4979,6 +5044,34 @@ uploadSuccess = "تم الرفع بنجاح!"
 uploadSuccessMessage = "تم نقل صورك."
 validating = "جارٍ التحقق من الجلسة..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "امسح ضوئيًا لرفع الصور. تتحول الصور تلقائيًا إلى PDF."
 descriptionNoConvert = "امسح ضوئيًا لرفع الصور من جهازك المحمول."
@@ -4997,8 +5090,13 @@ title = "رفع من الهاتف المحمول"
 tags = "أداة متعددة,عملية متعددة,واجهة مستخدم,النقر والسحب,واجهة أمامية,جانب العميل"
 title = "أداة متعددة PDF"
 
-[navbar]
-search = "البحث"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "لم تتم المصادقة بنجاح. يمكنك إغلاق هذه النافذة والمحاولة مجدداً."
@@ -5127,6 +5225,7 @@ activeFiles = "تعرض واجهة <strong>الملفات النشطة</strong>
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "إغلاق"
 cropSettings = "بعد أن اخترنا الملف الذي نريد قصّه، يمكننا تهيئة أداة القص لاختيار المنطقة التي سنقصّ إليها ملف PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "يؤدي النقر على أحد الملفات إلى اختياره للمعالجة. يمكنك تحديد عدة ملفات لتنفيذ العمليات الدُفعية."
 fileReplacement = "سيحل الملف المعدّل محل الملف الأصلي في منضدة العمل تلقائيًا، مما يتيح لك تشغيله بسهولة عبر مزيد من الأدوات."
 filesButton = "يتيح زر <strong>الملفات</strong> في شريط الوصول السريع رفع ملفات PDF لاستخدام الأدوات عليها."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF إلى PDF/A"
 tags = "أرشيف,طويل الأجل,معيار,تحويل,تخزين,حفظ"
 title = "PDF إلى PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "طباعة,معيار,تحويل,إنتاج,ما قبل الطباعة,أرشفة"
 title = "PDF إلى PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 رصيد"
 xsmall = "100 رصيد"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "اختر الخطة التي تناسب احتياجاتك"
 title = "الخطط المتاحة"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "تم بلوغ حد الإنفاق الشهري"
 title = "تعذر فتح بوابة Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "من {{allowance}} ملفات PDF مجانية مستخدمة"
 capSuffix_other = "من {{allowance}} ملفات PDF مجانية مستخدمة"
 eyebrow = "تجربة Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "أرسل مستندًا أو إشعارًا بالبريد الإلكتروني عندما تعمل سياسة."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "حفظ المستندات المعالجة في Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDKs الرسمية"
 beta = "Beta"
 deprecated = "مهمل"
 
-[portal.docs.search]
-empty = "لا توجد مستندات مطابقة"
-placeholder = "بحث في المستندات"
-results = "{{count}} نتيجة"
-
 [portal.docs.skills]
 eyebrow = "المهارات"
 lead = "قدرات مدمجة ومسمّاة يستدعيها وكيلك كأداة واحدة. كل مهارة هي سلسلة عمليات حتمية مع تقييمات مرفقة."
@@ -7180,11 +7309,11 @@ editorAction = "المحرر"
 empty = "لا توجد مستندات تطابق عامل التصفية هذا."
 rowActions = "إجراءات الصف"
 sensitiveLabel = "حساس"
-sensitiveTitle = "حساس — الوصول مطلوب"
 
 [portal.documents.table.columns]
 action = "مسار العمل / الإجراء"
 document = "المستند"
+labels = "Labels"
 product = "المنتج"
 status = "الحالة"
 time = "الوقت"
@@ -7200,6 +7329,7 @@ host = "المضيف"
 lastSeen = "آخر ظهور"
 region = "المنطقة"
 status = "الحالة"
+target = "Target"
 version = "الإصدار"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "واجه هذا العرض خطأً غير متوقع. حاول 
 retry = "حاول مرة أخرى"
 title = "حدث خطأ ما في هذه الصفحة"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "رجوع"
 body = "نزّل تطبيق سطح المكتب أو استضف الخادم ذاتيًا."
@@ -7380,11 +7560,6 @@ cancel = "إلغاء"
 confirm = "إبطال المفتاح"
 title = "إبطال مفتاح API"
 
-[portal.infrastructure.attestationLabel]
-attested = "مُصدق عليه"
-inScope = "ضمن النطاق"
-notApplicable = "غير منطبق"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "تصفية أحداث التدقيق حسب الفئة"
 heading = "سجلات التدقيق"
@@ -7456,11 +7631,6 @@ info = "معلومات"
 success = "نجاح"
 warning = "تحذير"
 
-[portal.infrastructure.certLabel]
-certified = "معتمد"
-inProgress = "قيد التقدم"
-notStarted = "لم يبدأ"
-
 [portal.infrastructure.createKey]
 cancel = "إلغاء"
 createKey = "إنشاء مفتاح"
@@ -7474,238 +7644,10 @@ subtitleCreated = "انسخ هذا السر الآن — لن يتم عرضه م
 title = "إنشاء مفتاح API"
 titleCreated = "تم إنشاء المفتاح"
 
-[portal.infrastructure.deployLabel]
-live = "مباشر"
-queued = "في قائمة الانتظار"
-rolledBack = "تم التراجع"
-rolling = "جارٍ النشر"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/دقيقة"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "تم النشر بواسطة"
-environment = "البيئة"
-product = "المنتج"
-status = "الحالة"
-version = "الإصدار"
-when = "متى"
-
-[portal.infrastructure.deployments.recent]
-heading = "عمليات النشر الأخيرة"
-subheading = "أحدث عمليات الطرح عبر المنتجات والبيئات."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "المثيلات"
-latency = "زمن الاستجابة"
-load = "الحمل"
-p99 = "P99"
-region = "المنطقة"
-status = "الحالة"
-throughput = "الإنتاجية"
-uptime = "وقت التشغيل"
-version = "الإصدار"
-
-[portal.infrastructure.deployments.regions]
-heading = "المناطق"
-subheading = "صحة حية لكل منطقة Stirling منشورة — زمن الاستجابة والحمل وإصدار الطرح."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "ستظهر المناطق المنشورة هنا بمجرد تزويد مساحة عملك."
-title = "لا توجد مناطق منشورة"
-
 [portal.infrastructure.keyLabel]
 active = "نشط"
 revoked = "مُبطل"
 
-[portal.infrastructure.modelLabel]
-active = "نشط"
-degraded = "متدهور"
-disabled = "معطل"
-
-[portal.infrastructure.models]
-heading = "النماذج"
-msValue = "{{value}} ms"
-subheading = "كتالوج النماذج والتوجيه الذي يشغل معالجة المستندات عبر مساحة عملك."
-
-[portal.infrastructure.models.byom]
-description = "سجّل نموذجًا داخل المؤسسة أو مستضافًا ذاتيًا وثبّته في منطقة للمعالجة المقيدة بإقامة البيانات."
-title = "أحضر نموذجك الخاص"
-
-[portal.infrastructure.models.catalogue]
-heading = "الكتالوج"
-sub = "النماذج المُدارة المتاحة لمساحة عملك، مع زمن استجابة وتكلفة حيين."
-subEnterprise = "نماذج مُدارة، وأحضر نموذجك الخاص، ونماذج داخل المؤسسة — مع إمكانية التثبيت لكل منطقة."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "ستظهر النماذج في كتالوج مساحة عملك هنا."
-title = "لا توجد نماذج متاحة"
-
-[portal.infrastructure.models.columns]
-cost = "التكلفة"
-latency = "زمن الاستجابة"
-load = "الحمل"
-model = "النموذج"
-status = "الحالة"
-type = "النوع"
-version = "الإصدار"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/استدعاء"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "النماذج النشطة"
-avgLatency = "متوسط زمن الاستجابة"
-included = "مضمن"
-monthlySpend = "الإنفاق الشهري على النماذج"
-
-[portal.infrastructure.models.routing]
-empty = "لا توجد قواعد توجيه مكوّنة."
-heading = "قواعد التوجيه"
-sub = "أي نموذج يتولى كل عملية. ينطبق الافتراضي عندما لا تطابق قاعدة أضيق."
-subLocked = "وجّه العمليات إلى نماذج محددة — متاح في الخطط المدفوعة."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "قم بالترقية إلى Pro للتحكم في النموذج الذي يتولى كل عملية ونوع مستند."
-title = "توجيه النماذج ميزة مدفوعة"
-
-[portal.infrastructure.models.routingColumns]
-default = "افتراضي"
-docType = "نوع المستند"
-modelForAria = "نموذج لـ {{operation}}"
-operation = "العملية"
-routedTo = "موجّه إلى"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "التصنيف"
-extraction = "الاستخراج"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "متدهور"
-down = "متوقف"
-healthy = "سليم"
-
-[portal.infrastructure.security.access.byok]
-description = "قدّم مفتاحًا من KMS الخاص بك. يقوم Stirling بالتشفير به لكنه لا يزال قادرًا على القراءة."
-label = "أحضر مفتاحك الخاص (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "لا تغادر المفاتيح KMS الخاص بك أبدًا. يحتفظ Stirling بالنص المشفر فقط."
-label = "احتفظ بمفتاحك الخاص (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "يدير Stirling مفاتيح التشفير. الأبسط — لا عمليات مفاتيح من جانبك."
-label = "مفاتيح يحتفظ بها Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "سياسة الوصول إلى المستندات"
-subheading = "تتحكم في من يمكنه فك تشفير المستندات المعالجة أثناء السكون."
-
-[portal.infrastructure.security.attestations]
-heading = "إثباتات الامتثال"
-noReport = "لا يوجد تقرير متاح"
-subheading = "وضع التدقيق حسب إطار العمل، مع تقارير متاحة للضوابط المثبتة."
-viewReport = "عرض التقرير ←"
-
-[portal.infrastructure.security.compliance]
-heading = "الامتثال"
-subheading = "إثباتات وشهادات تغطي منصة Stirling."
-
-[portal.infrastructure.security.empty]
-description = "سيظهر تكوين الأمان لمساحة عملك هنا."
-title = "وضع الأمان غير متاح"
-
-[portal.infrastructure.security.hyokBanner]
-description = "مع HYOK، لا تغادر مفاتيح التشفير KMS الخاص بك أبدًا. يخزن Stirling ويعالج فقط النص المشفر الذي يمكنك إلغاؤه في أي وقت."
-title = "لا يستطيع Stirling فك تشفير مستنداتك"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "لا توجد نطاقات IP مكوّنة — كل عناوين IP مسموح بها."
-heading = "قائمة سماح IP"
-sub = "وصول API مقيد بهذه نطاقات CIDR."
-subLocked = "قيّد وصول API إلى نطاقات IP معروفة — متاح في الخطط المدفوعة."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "قم بالترقية إلى Pro لتقييد وصول API إلى شبكات محددة."
-title = "قائمة سماح IP ميزة مدفوعة"
-
-[portal.infrastructure.security.ipColumns]
-added = "تمت الإضافة"
-addedBy = "أضيف بواسطة"
-cidr = "CIDR"
-label = "التسمية"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "الخوارزمية"
-heading = "إدارة مفاتيح التشفير"
-keyId = "معرّف المفتاح"
-lastRotated = "آخر تدوير"
-rotateKey = "تدوير المفتاح"
-rotationPolicy = "سياسة التدوير"
-subheading = "حيازة المفاتيح التي تشفر المستندات أثناء السكون — من يمكنه فك التشفير، وكيف يتم تدوير المفاتيح."
-
-[portal.infrastructure.security.managedBanner]
-description = "حيازة أحضر مفتاحك الخاص (BYOK) واحتفظ بمفتاحك الخاص (HYOK) متاحة في Enterprise. قم بالترقية لتقديم مفاتيح من KMS الخاص بك."
-title = "يدير Stirling المفاتيح في خطتك"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "آسيا والمحيط الهادئ"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · حدود بيانات GDPR"
-label = "الاتحاد الأوروبي"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "الولايات المتحدة"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "إقامة البيانات"
-subheading = "مكان تخزين المستندات ومعالجتها."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} مستخدم"
-
-[portal.infrastructure.storage.empty]
-description = "سيظهر التخزين المتصل والاستخدام هنا."
-title = "لا يوجد تخزين مكوّن"
-
-[portal.infrastructure.storage.lifecycle]
-active = "نشط"
-activeRange = "0–{{value}} يوم"
-archived = "مؤرشف"
-coldStorage = "تخزين بارد"
-deleted = "محذوف"
-never = "أبدًا"
-purged = "تمت إزالته نهائيًا"
-
-[portal.infrastructure.storage.providers]
-connect = "ربط"
-connected = "متصل"
-heading = "الموفرون المتصلون"
-subheading = "مكان كتابة المخرجات المعالجة."
-
-[portal.infrastructure.storage.retention]
-heading = "الاحتفاظ"
-subheading = "مدة الاحتفاظ بالمخرجات قبل حذف دورة الحياة."
-windowLabel = "نافذة الاحتفاظ الافتراضية"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} يوم"
-days_other = "{{count}} أيام"
-never = "عدم الحذف أبدًا"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "إجمالي الاستخدام"
-progressLabel = "التخزين المستخدم"
-subheading = "التخزين المستهلك عبر جميع الموفرين المتصلين."
-
 [portal.infrastructure.tabs]
 apiKeys = "مفاتيح API"
 audit = "سجلات التدقيق"
@@ -7715,11 +7657,9 @@ security = "الأمان"
 storage = "التخزين"
 
 [portal.integrations]
-addAnother = "إضافة آخر"
 availableHeading = "متاح"
 comingSoonHeading = "قريبًا"
 connect = "اتصال"
-connectedHeading = "متصل"
 connectionCount_one = "{{count}} اتصال"
 connectionCount_other = "{{count}} اتصالات"
 customApi = "API مخصص"
@@ -7737,6 +7677,10 @@ security = "الأمان"
 signing = "التوقيع"
 storage = "التخزين"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "متصل"
 
@@ -7767,7 +7711,6 @@ integrations = "التكاملات"
 pipelines = "مسارات العمل"
 policies = "السياسات"
 procurement = "المشتريات"
-settings = "الإعدادات"
 sources = "المصادر"
 usage = "الاستخدام والفوترة"
 users = "المستخدمون"
@@ -7784,7 +7727,7 @@ title = "مسارات العمل"
 newPipeline = "مسار عمل جديد"
 
 [portal.pipelines.builder]
-addStep = "إضافة أداة"
+activate = "Activate"
 back = "العودة إلى مسارات العمل"
 cannotFollow = "لا يمكن أخذ {{produced}}"
 chooseAccount = "اختر حسابًا"
@@ -7792,28 +7735,38 @@ chooseDestination = "اختر وجهة"
 chooseOperation = "اختر ما تفعله هذه الخطوة"
 chooseSource = "اختر مصدرًا"
 discard = "تجاهل التغييرات"
-enabled = "مفعّل"
 inputs = "الإدخال"
 inputSource = "مصدر الإدخال"
 inputTrigger = "المشغّل"
 keepEditing = "متابعة التحرير"
+moreActions = "More actions"
 needsConfiguring = "يحتاج إلى إعداد"
-needsUpload = "يحتاج إلى ملف مرفوع"
-noSources = "لا توجد مصادر متصلة بعد. أنشئ واحدًا لاستخدامه كإدخال."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "لا توجد أدوات تطابق بحثك."
-pipelineSettings = "إعدادات مسار العمل"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "البحث في الأدوات"
-selectToolBody = "أضف أداة لإنشاء مسار عملك."
-selectToolTitle = "لا توجد أدوات بعد"
 sendToSystem = "إرسال إلى نظام آخر"
 stepsIncompatible = "لا يمكن تشغيل هذه الخطوات على ما تنتجه الخطوة السابقة: {{tools}}."
 stepsNeedSetup = "لا تزال هذه الخطوات بحاجة إلى إعداد قبل الحفظ: {{tools}}."
-toolSettings = "إعدادات الأداة"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "عملية غير معروفة، تم الإبقاء عليها كما هي."
 unsavedBody = "لديك تغييرات غير محفوظة. احفظها قبل المغادرة، أم تتجاهلها؟"
 unsavedTitle = "تغييرات غير محفوظة"
-uploadUnsupported = "الملفات المرفوعة غير مدعومة في مسارات العمل بعد، لذلك لا يمكن حفظ هذه الخطوات: {{tools}}."
 usesDefaults = "يعمل بالإعدادات الافتراضية"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "يجمع كل ملف من الخطوة السابقة"
@@ -7825,31 +7778,36 @@ undeclared-operation = "لا يمكن التحقق مما تقبله هذه ال
 
 [portal.pipelines.composer]
 addTool = "إضافة أداة"
-cancel = "إلغاء"
-chainEmpty = "أضف أداة لبدء إنشاء مسار عملك."
 create = "إنشاء مسار عمل"
+createPaused = "Create paused"
 editingUnsupported = "عرض معاملات هذه الأداة للتحرير غير مدعوم بعد."
-moveDown = "نقل إلى الأسفل"
-moveUp = "نقل إلى الأعلى"
+editSource = "Edit source"
 name = "الاسم"
 namePlaceholder = "مثال: مسح التنقيح"
 noToolSettings = "لا تحتوي هذه الأداة على إعدادات قابلة للتكوين."
-operations_one = "عملية ({{count}})"
-operations_other = "عمليات ({{count}})"
 output = "الإخراج"
-removeStep = "إزالة العملية"
 save = "حفظ التغييرات"
 scheduleEvery = "تشغيل كل"
-sources = "المصادر"
-sourcesLoading = "جارٍ تحميل المصادر..."
 trigger = "المشغّل"
 triggerManual = "يدوي فقط"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "أيام"
 hours = "ساعات"
 minutes = "دقائق"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "حذف \"{{name}}\"؟ لا يمكن التراجع عن هذا."
 cancel = "إلغاء"
@@ -7867,6 +7825,37 @@ connectSource = "اتصال بمصدر"
 description = "أنشئ مسار عملك الأول: اختر المصادر التي يعمل عليها، وسلسلة العمليات، ومكان انتقال الإخراج."
 title = "لا توجد مسارات عمل بعد"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "نشطة"
 paused = "متوقفة مؤقتًا"
@@ -7879,7 +7868,6 @@ completed_one = "اكتمل التشغيل."
 completed_other = "اكتملت كل عمليات التشغيل البالغ عددها {{count}}."
 empty = "لا يوجد شيء لتشغيله: لم تكن لدى المصادر مستندات للمعالجة."
 failed = "فشل التشغيل: {{error}}"
-historyCleared = "تم مسح السجل. ستعيد عملية التشغيل التالية معالجة كل ما هو موجود حاليًا في المصادر."
 inFlight = "لا يوجد شيء جديد لتشغيله: لا تزال المستندات قيد المعالجة من عملية تشغيل سابقة."
 parked_one = "لا يوجد ما يمكن تشغيله: فشل مستند {{count}} سابقًا وتم إيقافه. أصلح السبب، ثم امسح السجل لإعادة المحاولة."
 parked_other = "لا يوجد ما يمكن تشغيله: فشلت مستندات عددها {{count}} سابقًا وتم إيقافها. أصلح السبب، ثم امسح السجل لإعادة المحاولة."
@@ -7895,6 +7883,7 @@ name = "مسار العمل"
 sources = "المصادر"
 status = "الحالة"
 steps = "الخطوات"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "مراقبة المجلد"
@@ -8209,6 +8198,24 @@ label = "إرفاق بمشكلة Jira"
 description = "يرسل المستند المعالج كمرفق."
 label = "إرسال المستند بالبريد الإلكتروني (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "يكتب المستند المعالج في مجلد."
 label = "رفع إلى Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "بلغ الحد الأقصى"
 subtitle = "تستمر تجربتك المجانية حتى {{date}}. لا حاجة إلى بطاقة."
 title = "تجربة Enterprise"
 
-[portal.search]
-ariaLabel = "بحث"
-placeholder = "ابحث في Stirling — endpoints، المسارات، المستندات…"
-
-[portal.search.empty]
-noActionsDescription = "ستظهر الإجراءات السريعة هنا بمجرد توفرها."
-noActionsTitle = "لا توجد إجراءات سريعة"
-noMatches = "لا توجد نتائج لـ \"{{query}}\""
-noMatchesDescription = "جرّب كلمة مفتاحية مختلفة أو تصفح الفهرس."
-
 [portal.settings.groups]
 admin = "المسؤول"
 
@@ -8743,10 +8740,6 @@ cancel = "إلغاء"
 confirm = "حذف"
 title = "حذف المصدر؟"
 
-[portal.sources.empty]
-description = "وصّل مجلدًا (وقريبًا، التخزين السحابي) حتى يكون لدى سياساتك مكان تسحب منه المستندات."
-title = "لا توجد مصادر متصلة بعد"
-
 [portal.sources.kpi]
 inUse = "قيد الاستخدام"
 total = "الاتصالات"
@@ -8785,6 +8778,7 @@ unused = "غير مستخدم"
 documents = "المستندات"
 source = "المصدر"
 status = "الحالة"
+type = "Type"
 usedBy = "السياسات"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "السياسات والخصوصية"
 [settings.preferences]
 title = "التفضيلات"
 
-[settings.search]
-placeholder = "ابحث في صفحات الإعدادات..."
-
 [settings.security]
 description = "حدّث كلمة مرورك للحفاظ على أمان حسابك."
 title = "الأمان"
@@ -10128,6 +10119,7 @@ last = "الصفحة الأخيرة"
 maintainRatio = "تبديل الحفاظ على نسبة الأبعاد"
 next = "الصفحة التالية"
 noSavedSigs = "لم يتم العثور على توقيعات محفوظة"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "توقيعات شخصية"
 previous = "الصفحة السابقة"
 redo = "إعادة"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "فشل إزالة الخلفية"
 hint = "ارفع صورة PNG أو JPG لتوقيعك"
 label = "رفع صورة التوقيع"
 placeholder = "اختر ملف صورة"
+previewAlt = "Current image signature"
 processing = "جارٍ معالجة الصورة..."
 removeBackground = "إزالة الخلفية البيضاء (جعلها شفافة)"
 
@@ -10179,6 +10172,17 @@ saved = "اختر توقيعاً محفوظاً أعلاه، ثم انقر في
 text = "بعد إدخال اسمك أعلاه، انقر في أي مكان على ملف PDF لوضع توقيعك."
 title = "كيفية إضافة توقيع"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "تحريك التوقيع"
 pause = "إيقاف الوضع مؤقتاً"
@@ -10625,6 +10629,23 @@ title = "التحميل إلى الخادم"
 updateButton = "تحديث على الخادم"
 uploadButton = "تحميل إلى الخادم"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "رجوع"
 pdfTools = "أدوات PDF"
 placeholder = "اختر أداة للبدء"
 premiumFeature = "ميزة Premium:"
-searchTools = "البحث في الأدوات"
 toolsHeader = "الأدوات"
 viewAllTools = "عرض كل الأدوات"
 
@@ -10822,6 +10842,9 @@ removal = "إزالة"
 signing = "توقيع"
 verification = "تحقق"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "لم يتم العثور على أدوات"
 noTools = "لا توجد أدوات متاحة"
@@ -10979,6 +11002,13 @@ approver = "يعتمد السياسة"
 editor = "المحرر"
 processor = "المعالج"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "إلغاء الدعوة إلى {{email}}؟ لن يتمكنوا من الانضمام باستخدام الرابط الحالي."
 cancelInviteTitle = "إلغاء الدعوة"
@@ -10998,10 +11028,8 @@ title = "لا يوجد أعضاء بعد"
 addToTeam = "إضافة إلى فريق"
 guestCount = "{{count}} ضيف"
 guests = "الضيوف"
-guestsDesc = "متعاونون خارجيون، ضمن نطاق ما شاركته. المحرر فقط."
 ledBy = "بقيادة {{owner}}"
 org = "المؤسسة"
-orgDesc = "مالكون بسلطة على مستوى المؤسسة واعتماد السياسات"
 owners = "{{count}} مالك"
 team = "فريق {{name}}"
 teamMeta = "{{count}} شخص"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "تمت الدعوة بواسطة {{who}}"
 cancel = "إلغاء"
-count = "{{count}} معلقة"
-desc = "الأشخاص المدعوون الذين لم ينضموا بعد. يحتفظون بمقعد حتى يقبلوا."
 expiresInDays_one = "تنتهي خلال يوم واحد"
 expiresInDays_other = "تنتهي خلال {{count}} أيام"
 expiresToday = "تنتهي اليوم"
 title = "الدعوات المعلقة"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "حدث خطأ ما أثناء الوصول إلى الخادم الخلفي، أو ليس لديك صلاحية الوصول. حاول مرة أخرى."
 title = "تعذر تحميل الأعضاء"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "ابحث في المرفقات"
 title = "المرفقات"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "عنوان الإشارة المرجعية"
 bookmarkTitleRequired = "عنوان الإشارة المرجعية مطلوب"
 closeSidebar = "إغلاق الشريط الجانبي للإشارات المرجعية"
 collapseAll = "طي جميع الإشارات المرجعية"
+empty = "No bookmarks in this document"
 expandAll = "توسيع جميع الإشارات المرجعية"
 searchPlaceholder = "البحث في الإشارات المرجعية"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "إضافة تعليق"
@@ -11264,10 +11297,12 @@ locateAnnotation = "تحديد الموقع في المستند"
 moreActions = "إجراءات أخرى"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "الصفحة {{page}}"
 placingHint = "انقر على صفحة لوضع… (إلغاء)"
 removeCommentOnly = "إزالة التعليق فقط"
 saveReply = "حفظ الرد"
+searchPlaceholder = "Search comments"
 title = "التعليقات"
 typeComment = "تعليق"
 typeInsertText = "إدراج نص"
@@ -11290,6 +11325,7 @@ unsavedDesc = "لديك تغييرات غير محفوظة"
 closeSidebar = "إغلاق الشريط الجانبي للطبقات"
 hideAll = "إخفاء جميع الطبقات"
 showAll = "إظهار جميع الطبقات"
+title = "Layers"
 
 [viewer.link]
 delete = "حذف الرابط"
@@ -11646,6 +11682,7 @@ exitRedaction = "إنهاء وضع التنقيح"
 exportAll = "تصدير PDF"
 exportSelected = "تصدير الصفحات المحددة"
 formFill = "تعبئة النموذج"
+hideToolbar = "Hide toolbar"
 multiTool = "الأداة المتعددة"
 panMode = "وضع التحريك"
 print = "طباعة PDF"
@@ -11666,6 +11703,7 @@ selectAll = "تحديد الكل"
 selectByNumber = "تحديد حسب أرقام الصفحات"
 selectLanguage = "اختر اللغة"
 share = "مشاركة"
+showToolbar = "Show toolbar"
 toggleAnnotations = "تبديل ظهور الشروح"
 toggleAttachments = "تبديل عرض المرفقات"
 toggleBookmarks = "تبديل الإشارات المرجعية"
diff --git a/frontend/editor/public/locales/az-AZ/translation.toml b/frontend/editor/public/locales/az-AZ/translation.toml
index 9df31ec5b0..c89316720f 100644
--- a/frontend/editor/public/locales/az-AZ/translation.toml
+++ b/frontend/editor/public/locales/az-AZ/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Əlifba"
 apply = "Tətbiq et"
 applyAndContinue = "Saxla və çıx"
-areYouSure = "Çıxmaq istədiyinizə əminsiniz?"
 back = "Geri"
 black = "Qara"
 blue = "Mavi"
@@ -106,6 +105,7 @@ undoSuccess = "Əməliyyat uğurla geri alındı"
 unknown = "Bilinməyən"
 unpin = "Faylın bərkidilməsini ləğv et (alət icrasından sonra əvəzlə)"
 unsavedChanges = "PDF-də saxlanmamış dəyişiklikləriniz var."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Saxlanmamış dəyişikliklər"
 unsupported = "Dəstəklənmir"
 username = "İstifadəçi Adı"
@@ -1879,6 +1879,9 @@ width = "Genişlik"
 [app]
 description = "Pulsuz Adobe Acrobat alternativi (10M+ yükləmə)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b-ə çevir"
 convertToPdfA3bDescription = "Daxil edilmiş qoşmalarla arxivləmə üçün PDF yaradır"
@@ -2933,12 +2936,16 @@ text = "Bu icazələri dəyişdirilməz etmək üçün, Parol əlavə etmə alə
 [chat.actions]
 copy = "Mesajı kopyala"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling agent seçimləri"
+assistant = "AI Assistant"
 clearChat = "Söhbəti təmizlə"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Bu əməliyyat bulud kreditlərinizi istifadə edəcək"
 tooltip = "Ekrandan rəng seç"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Rəng seçin"
 
 [common]
+actions = "Actions"
 back = "Geri"
 cancel = "Ləğv et"
 close = "Bağla"
+codeSample = "Code sample"
 collapse = "Yığ"
 confirm = "Təsdiqlə"
 continue = "Davam et"
 copied = "Kopyalandı!"
 copy = "Kopyala"
 done = "Bitdi"
+enterValue = "Enter value"
 error = "Xəta"
 expand = "Genişləndir"
 loading = "Yüklənir..."
 next = "Növbəti"
+open = "Open"
 preview = "Önizləmə"
 previous = "Əvvəlki"
 refresh = "Yenilə"
 remaining = "Qalıb"
 retry = "Yenidən cəhd et"
 save = "Yadda saxla"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Seçilənləri təmizlə"
@@ -3185,6 +3199,7 @@ title = "Sıxma metodu"
 [compress.settings]
 desiredSize = "İstənilən fayl ölçüsü"
 desiredSizePlaceholder = "Ölçünü daxil edin"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Sıxma fayl ölçüsünü azaltmağın asan yoludur. 'Fayl ölçüsü'nü seçərək hədəf ölçünü daxil edin və keyfiyyəti sizin üçün tənzimləyək. 'Keyfiyyət'i seçərək sıxma gücünü əl ilə təyin edin."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF seçimləri"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Əvvəlcə mənbə formatını seçin"
 settings = "Parametrlər"
 single = "Tək"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Axtar..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Redaktə et"
@@ -3824,11 +3861,13 @@ shareSelected = "Seçilənləri paylaş"
 sharing = "Paylaşma"
 showAll = "Hamısını göstər"
 showHistory = "Tarixçəni göstər"
+sortBy = "Sort files"
 sortByDate = "Tarixə görə sırala"
 sortByName = "Ada görə sırala"
 sortBySize = "Ölçüyə görə sırala"
 storage = "Saxlama"
 storageState = "Saxlama"
+storageUsed = "Storage used"
 synced = "Sinxronlaşdırılıb"
 title = "PDF Fayllarını Yüklə"
 toolChain = "Tətbiq olunan alətlər"
@@ -3874,8 +3913,12 @@ addFiles = "Fayllar əlavə et"
 addingFiles = "Fayllar əlavə edilir…"
 collapse = "Yan paneli yığ"
 customizeGroups = "Qrupları fərdiləşdir"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Başlamaq üçün faylları açın"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Yan paneli genişləndir"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive konfiqurasiya edilməyib"
@@ -3888,15 +3931,17 @@ openFromComputer = "Kompüterdən aç"
 openSettings = "Ayarları aç"
 other = "Digər"
 recent = "Son"
-search = "Axtar"
-searchPlaceholder = "Fayllarda axtar..."
 viewAll = "Bütün {{count}} faylı göstər"
 
 [fileSidebar.fileItem]
 closeViewer = "Görüntüləyicini bağla"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Görüntüləyicidə aç"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Defoltlara sıfırla"
 subtitle = "Fayllarınızı əsas kateqoriyalara qruplaşdırın. Kateqoriyaya mövcud və ya yeni etiketlər əlavə edin, adını dəyişin və ya özünüz yaradın. Kateqoriyalarınızdan heç birində olmayan fayllar “Digər” altında görünür."
 title = "Yan panel kateqoriyaları"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "İş sahəsinə əlavə et"
 addToWorkspaceCount = "{{count}} faylı iş sahəsinə əlavə et"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Mənim Fayllarıma geri"
 breadcrumbs = "Qovluq yolu"
 cancel = "Ləğv et"
 classification = "Təsnifat"
-clearSearch = "Axtarışı təmizlə"
 clearSelection = "Seçimi təmizlə"
 closeDetails = "Təfərrüatları bağla"
 create = "Yarat"
@@ -3950,6 +4002,7 @@ downloadAll = "Hamısını endir"
 downloadVersion = "Bu versiyanı endir"
 dropOverlay = "Yükləmək üçün faylları buraxın"
 dropOverlaySub = "Fayllar əvvəlcə Lokal bölmədə başlayır. Onları qovluğa yerləşdirmək üçün 'Köçür' və ya 'Buluda saxla'dan istifadə edin."
+duplicate = "Duplicate"
 file = "Fayl"
 fileInfo = "File info"
 fileMenu = "Fayl əməliyyatları"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Qovluq ağacının ölçüsünü dəyiş (ox düymələri, d
 save = "Saxla"
 saveToServer = "Serverə saxla"
 saveToServerDisabledHint = "Bu serverdə serverə saxlama aktiv deyil. Administratorunuzdan bunu aktivləşdirməsini xahiş edin."
-search = "Axtar"
-searchPlaceholder = "Bu qovluqda və alt qovluqlarda axtar"
 selectAll = "Hamısını seç"
 selectAllHint = "Hamısını seçmək üçün klikləyin. Məsləhət: faylları tək-tək əlavə etmək üçün Ctrl (və ya Cmd), aralığı seçmək üçün Shift basın."
 selectedCount = "{{count}} seçilib"
@@ -4044,6 +4095,10 @@ title = "Hələ bulud faylı yoxdur"
 hint = "Yüklənmədən saxlanılan fayllar burada qalır. Əlavə etmək üçün faylı buraxın."
 title = "Yalnız lokal fayl yoxdur"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Açdığınız və ya redaktə etdiyiniz fayllar burada görünəcək."
 title = "Hələ heç nə dəyişdirilməyib"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Qovluğu silmək mümkün olmadı."
 deleteFolderFailedDetail = "Qovluğu silmək mümkün olmadı: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Qovluğun görünüşünü yeniləmək mümkün olmadı."
 folderAppearanceFailedDetail = "Qovluğun görünüşünü yeniləmək mümkün olmadı: {{message}}"
 moveFilesFailed = "Faylları köçürmək mümkün olmadı."
@@ -4113,6 +4170,11 @@ localHint = "Yalnız bu brauzerdə saxlanılır"
 shared = "Paylaşılan"
 sharedHint = "Keçid vasitəsilə sizinlə paylaşılıb"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Ən köhnə əvvəlcə"
 modifiedDesc = "Ən yenilər əvvəlcə"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Yaddaşda fayl yoxdur. Əvvəlcə bəzi faylları açın
 open = "Aç"
 openFile = "Faylı aç"
 openFiles = "Faylları aç"
+selectFile = "Select {{name}}"
 selectFromStorage = "Saxlamadan seç"
 upload = "Yüklə"
 uploadFile = "Fayl yüklə"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Hamısı saxlanıldı"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV çıxarmaq alınmadı"
 extractXlsxError = "XLSX çıxarmaq alınmadı"
+filled = "filled"
 flattenAfterFilling = "Doldurduqdan sonra yastılaşdır"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "təl."
 requiredFieldsError = "Bütün tələb olunan sahələri doldurun"
 rescanFields = "Sahələri yenidən skan et"
@@ -4795,9 +4863,6 @@ title = "Şəkli PDF-ə"
 [imageToPdf]
 tags = "çevirmə,şəkil,jpg,fotoşəkil,foto"
 
-[infoBanner]
-dismiss = "Bağla"
-
 [invite]
 acceptError = "Hesabın yaradılması alınmadı"
 accountFor = "üçün hesab yaradılır"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Uğurla yükləndi!"
 uploadSuccessMessage = "Şəkilləriniz köçürüldü."
 validating = "Sessiya yoxlanılır..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Skan edib fotoları yükləyin. Şəkillər avtomatik olaraq PDF-ə çevrilir."
 descriptionNoConvert = "Mobil cihazınızdan fotoları yükləmək üçün skan edin."
@@ -4997,8 +5090,13 @@ title = "Mobil cihazdan yüklə"
 tags = "Multi-alət,Çoxlu əməliyyat,UI,tut-sürüşdür,front end,istifadəçi-tərəf,interaktiv,qarşılıqlı,yerini dəyiş,sil,köçür,böl"
 title = "PDF Multi-Alət"
 
-[navbar]
-search = "Axtar"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Təsdiqləmə uğurlu olmadı. Bu pəncərəni bağlayıb yenidən cəhd edə bilərsiniz."
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>Aktiv Fayllar</strong> görünüşü alətə yüklədiyin
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Bağla"
 cropSettings = "Artıq kəsmək istədiyimiz faylı seçdiyimizə görə, PDF-i kəsmək istədiyimiz sahəni seçmək üçün Kəsmə alətini tənzimləyə bilərik."
+dialogLabel = "Onboarding"
 fileCheckbox = "Fayllardan birinə klikləmək onu emal üçün seçir. Toplu əməliyyatlar üçün bir neçə faylı seçə bilərsiniz."
 fileReplacement = "Dəyişdirilmiş fayl İş Masasında orijinal faylı avtomatik əvəz edəcək və onu asanlıqla daha çox alətdən keçirməyə imkan verəcək."
 filesButton = "Sürətli Giriş panelindəki <strong>Fayllar</strong> düyməsi PDF-ləri alətlərdə istifadə etmək üçün yükləməyə imkan verir."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF-i PDF/A-ya"
 tags = "arxiv,uzunmüddətli,standard,çevirmə,yaddaş,saxlama"
 title = "PDF-i PDF/A-ya"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "çap,standart,çevrilmə,istehsal,prepress,arxiv"
 title = "PDF-dən PDF/X-ə"
@@ -6045,6 +6151,7 @@ small = "500 Credits"
 xsmall = "100 Credits"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Ehtiyaclarınıza uyğun planı seçin"
 title = "Mövcud Planlar"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Aylıq xərc limitinə çatıldı"
 title = "Stripe portalını açmaq mümkün olmadı"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "{{allowance}} pulsuz PDF-dən istifadə olunub"
 capSuffix_other = "{{allowance}} pulsuz PDF-dən istifadə olunub"
 eyebrow = "Processor sınağı"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Siyasət işlədikdə sənəd və ya bildirişi email ilə göndərin."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Emal edilmiş sənədləri Nextcloud-a yerləşdirin."
@@ -7077,11 +7211,6 @@ title = "Rəsmi SDK-lar"
 beta = "Beta"
 deprecated = "Köhnəlmiş"
 
-[portal.docs.search]
-empty = "Uyğun sənəd yoxdur"
-placeholder = "Sənədlərdə axtar"
-results = "{{count}} nəticə"
-
 [portal.docs.skills]
 eyebrow = "BACARIQLAR"
 lead = "Agentinizin tək alət kimi çağırdığı paketlənmiş, adlandırılmış imkanlar. Hər bacarıq əlavə edilmiş qiymətləndirmələri olan deterministik əməliyyat zənciridir."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Bu filtrə uyğun sənəd yoxdur."
 rowActions = "Sətir əməliyyatları"
 sensitiveLabel = "Həssas"
-sensitiveTitle = "Həssas — giriş tələb olunur"
 
 [portal.documents.table.columns]
 action = "Pipeline / Əməliyyat"
 document = "Sənəd"
+labels = "Labels"
 product = "Məhsul"
 status = "Status"
 time = "Vaxt"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Son görünmə"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Versiya"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Bu görünüşdə gözlənilməz xəta baş verdi. Yenidən cəhd
 retry = "Yenidən cəhd et"
 title = "Bu səhifədə nəsə səhv getdi"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Geri"
 body = "Desktop tətbiqini yükləyin və ya serveri self-host edin."
@@ -7380,11 +7560,6 @@ cancel = "Ləğv et"
 confirm = "Açarı ləğv et"
 title = "API açarını ləğv et"
 
-[portal.infrastructure.attestationLabel]
-attested = "Təsdiqlənib"
-inScope = "Əhatə dairəsində"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Audit hadisələrini kateqoriyaya görə filtrlə"
 heading = "Audit jurnalları"
@@ -7456,11 +7631,6 @@ info = "Məlumat"
 success = "Uğur"
 warning = "Xəbərdarlıq"
 
-[portal.infrastructure.certLabel]
-certified = "Sertifikatlaşdırılıb"
-inProgress = "Davam edir"
-notStarted = "Başlamayıb"
-
 [portal.infrastructure.createKey]
 cancel = "Ləğv et"
 createKey = "Açar yarat"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Bu sirri indi kopyalayın — bir daha göstərilməyəcək."
 title = "API açarı yarat"
 titleCreated = "Açar yaradıldı"
 
-[portal.infrastructure.deployLabel]
-live = "Canlı"
-queued = "Növbədə"
-rolledBack = "Geri qaytarılıb"
-rolling = "Yayılır"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/dəq"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Yerləşdirən"
-environment = "Mühit"
-product = "Məhsul"
-status = "Status"
-version = "Versiya"
-when = "Nə vaxt"
-
-[portal.infrastructure.deployments.recent]
-heading = "Son yerləşdirmələr"
-subheading = "Məhsullar və mühitlər üzrə ən son rollout-lar."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instansiyalar"
-latency = "Gecikmə"
-load = "Yük"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Ötürücülük"
-uptime = "İşləmə vaxtı"
-version = "Versiya"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regionlar"
-subheading = "Hər yerləşdirilmiş Stirling regionu üçün canlı sağlamlıq — gecikmə, yük və rollout versiyası."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "İş sahəniz təmin edildikdən sonra yerləşdirilmiş regionlar burada görünəcək."
-title = "Yerləşdirilmiş region yoxdur"
-
 [portal.infrastructure.keyLabel]
 active = "Aktiv"
 revoked = "Ləğv edilib"
 
-[portal.infrastructure.modelLabel]
-active = "Aktiv"
-degraded = "Zəifləmiş"
-disabled = "Deaktiv edilib"
-
-[portal.infrastructure.models]
-heading = "Modellər"
-msValue = "{{value}} ms"
-subheading = "İş sahəniz üzrə sənəd emalını təmin edən model kataloqu və yönləndirmə."
-
-[portal.infrastructure.models.byom]
-description = "On-prem və ya öz hostinqinizdə olan modeli qeydiyyatdan keçirin və data residency ilə bağlı emal üçün onu regiona bərkidin."
-title = "Öz modelinizi gətirin"
-
-[portal.infrastructure.models.catalogue]
-heading = "Kataloq"
-sub = "İş sahəniz üçün əlçatan idarə olunan modellər, canlı gecikmə və xərclə."
-subEnterprise = "İdarə olunan, özünüzün gətirdiyiniz və on-prem modellər — region üzrə bərkitmə imkanı ilə."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "İş sahənizin kataloqundakı modellər burada görünür."
-title = "Əlçatan model yoxdur"
-
-[portal.infrastructure.models.columns]
-cost = "Xərc"
-latency = "Gecikmə"
-load = "Yük"
-model = "Model"
-status = "Status"
-type = "Növ"
-version = "Versiya"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/zəng"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktiv modellər"
-avgLatency = "Orta gecikmə"
-included = "Daxildir"
-monthlySpend = "Aylıq model xərci"
-
-[portal.infrastructure.models.routing]
-empty = "Yönləndirmə qaydası konfiqurasiya edilməyib."
-heading = "Yönləndirmə qaydaları"
-sub = "Hər əməliyyatı hansı modelin idarə etdiyi. Daha dar qayda uyğun gəlmədikdə standart tətbiq olunur."
-subLocked = "Əməliyyatları konkret modellərə yönləndirin — ödənişli planlarda əlçatandır."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Hər əməliyyatı və sənəd növünü hansı modelin idarə etdiyinə nəzarət etmək üçün Pro-ya yüksəldin."
-title = "Model yönləndirməsi ödənişli funksiyadır"
-
-[portal.infrastructure.models.routingColumns]
-default = "Standart"
-docType = "Sənəd növü"
-modelForAria = "{{operation}} üçün model"
-operation = "Əməliyyat"
-routedTo = "Yönləndirilib"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Təsnifat"
-extraction = "Çıxarma"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Zəifləmiş"
-down = "İşləmir"
-healthy = "Sağlam"
-
-[portal.infrastructure.security.access.byok]
-description = "Öz KMS-inizdən açar təqdim edin. Stirling onunla şifrələyir, lakin yenə də oxuya bilir."
-label = "Öz açarınızı gətirin (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Açarlar KMS-inizi heç vaxt tərk etmir. Stirling yalnız ciphertext saxlayır."
-label = "Öz açarınızı saxlayın (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling şifrələmə açarlarını idarə edir. Ən sadə variant — sizin tərəfdə sıfır açar əməliyyatı."
-label = "Stirling-də saxlanılan açarlar"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Sənəd giriş siyasəti"
-subheading = "Emal edilmiş sənədləri saxlanma vəziyyətində kimin deşifr edə biləcəyinə nəzarət edir."
-
-[portal.infrastructure.security.attestations]
-heading = "Uyğunluq attestatları"
-noReport = "Hesabat əlçatan deyil"
-subheading = "Attestasiya edilmiş nəzarətlər üzrə hesabatlarla framework üzrə audit vəziyyəti."
-viewReport = "Hesabata bax →"
-
-[portal.infrastructure.security.compliance]
-heading = "Uyğunluq"
-subheading = "Stirling platformasını əhatə edən attestatlar və sertifikatlar."
-
-[portal.infrastructure.security.empty]
-description = "İş sahənizin təhlükəsizlik konfiqurasiyası burada görünəcək."
-title = "Təhlükəsizlik vəziyyəti əlçatan deyil"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK ilə şifrələmə açarları KMS-inizi heç vaxt tərk etmir. Stirling yalnız istənilən vaxt ləğv edə biləcəyiniz ciphertext-i saxlayır və emal edir."
-title = "Stirling sənədlərinizi deşifr edə bilmir"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "IP aralığı konfiqurasiya edilməyib — bütün IP-lərə icazə verilir."
-heading = "IP allowlist"
-sub = "API girişi bu CIDR aralıqları ilə məhdudlaşdırılıb."
-subLocked = "API girişini tanınmış IP aralıqları ilə məhdudlaşdırın — ödənişli planlarda əlçatandır."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "API girişini konkret şəbəkələrlə məhdudlaşdırmaq üçün Pro-ya yüksəldin."
-title = "IP allowlisting ödənişli funksiyadır"
-
-[portal.infrastructure.security.ipColumns]
-added = "Əlavə edilib"
-addedBy = "Əlavə edən"
-cidr = "CIDR"
-label = "Etiket"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Alqoritm"
-heading = "Şifrələmə açarlarının idarə edilməsi"
-keyId = "Açar identifikatoru"
-lastRotated = "Son dövr edilmə"
-rotateKey = "Açarı dövr et"
-rotationPolicy = "Dövr etmə siyasəti"
-subheading = "Sənədləri saxlanma vəziyyətində şifrələyən açarların saxlanması — kim deşifr edə bilər və açarlar necə dövr edilir."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) və hold-your-own-key (HYOK) saxlanması Enterprise-də əlçatandır. Öz KMS-inizdən açarlar təqdim etmək üçün yüksəldin."
-title = "Planınızda açarlar Stirling tərəfindən idarə olunur"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asiya-Sakit okean"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "Avropa İttifaqı"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Amerika Birləşmiş Ştatları"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "Sənədlərin saxlandığı və emal edildiyi yer."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} istifadə edilib"
-
-[portal.infrastructure.storage.empty]
-description = "Qoşulmuş saxlama və istifadə burada görünəcək."
-title = "Saxlama konfiqurasiya edilməyib"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktiv"
-activeRange = "0–{{value}}g"
-archived = "Arxivləşdirilib"
-coldStorage = "cold storage"
-deleted = "Silinib"
-never = "heç vaxt"
-purged = "təmizlənib"
-
-[portal.infrastructure.storage.providers]
-connect = "Qoş"
-connected = "Qoşulub"
-heading = "Qoşulmuş provayderlər"
-subheading = "Emal edilmiş artefaktların yazıldığı yer."
-
-[portal.infrastructure.storage.retention]
-heading = "Saxlama müddəti"
-subheading = "Artefaktların lifecycle silinməsindən əvvəl nə qədər saxlanıldığı."
-windowLabel = "Standart saxlama pəncərəsi"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} gün"
-days_other = "{{count}} gün"
-never = "Heç vaxt silmə"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Ümumi istifadə"
-progressLabel = "İstifadə edilmiş saxlama"
-subheading = "Bütün qoşulmuş provayderlər üzrə istifadə edilmiş saxlama."
-
 [portal.infrastructure.tabs]
 apiKeys = "API açarları"
 audit = "Audit jurnalları"
@@ -7715,11 +7657,9 @@ security = "Təhlükəsizlik"
 storage = "Saxlama"
 
 [portal.integrations]
-addAnother = "Başqasını əlavə et"
 availableHeading = "Mövcud"
 comingSoonHeading = "Tezliklə"
 connect = "Qoşul"
-connectedHeading = "Qoşulub"
 connectionCount_one = "{{count}} bağlantı"
 connectionCount_other = "{{count}} bağlantı"
 customApi = "Xüsusi API"
@@ -7737,6 +7677,10 @@ security = "Təhlükəsizlik"
 signing = "İmzalama"
 storage = "Yaddaş"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Qoşulub"
 
@@ -7767,7 +7711,6 @@ integrations = "İnteqrasiyalar"
 pipelines = "Pipeline-lar"
 policies = "Siyasətlər"
 procurement = "Satınalma"
-settings = "Parametrlər"
 sources = "Mənbələr"
 usage = "İstifadə və fakturalama"
 users = "İstifadəçilər"
@@ -7784,7 +7727,7 @@ title = "Pipeline-lar"
 newPipeline = "Yeni pipeline"
 
 [portal.pipelines.builder]
-addStep = "Alət əlavə et"
+activate = "Activate"
 back = "Pipeline-lara qayıt"
 cannotFollow = "{{produced}} qəbul edə bilmir"
 chooseAccount = "Hesab seçin"
@@ -7792,28 +7735,38 @@ chooseDestination = "Təyinat seçin"
 chooseOperation = "Bu addımın nə edəcəyini seçin"
 chooseSource = "Mənbə seçin"
 discard = "Dəyişiklikləri at"
-enabled = "Aktivdir"
 inputs = "Giriş"
 inputSource = "Giriş mənbəyi"
 inputTrigger = "Trigger"
 keepEditing = "Redaktəyə davam et"
+moreActions = "More actions"
 needsConfiguring = "Quraşdırma tələb olunur"
-needsUpload = "Yüklənmiş fayl tələb olunur"
-noSources = "Hələ heç bir mənbə qoşulmayıb. Onu giriş kimi istifadə etmək üçün birini yaradın."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Axtarışınıza uyğun alət yoxdur."
-pipelineSettings = "Pipeline parametrləri"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Alətləri axtar"
-selectToolBody = "Pipeline qurmaq üçün alət əlavə edin."
-selectToolTitle = "Hələ alət yoxdur"
 sendToSystem = "Başqa sistemə göndər"
 stepsIncompatible = "Bu addımlar əvvəlki addımın yaratdığı ilə işləyə bilmir: {{tools}}."
 stepsNeedSetup = "Saxlamadan əvvəl bu addımların hələ quraşdırılması lazımdır: {{tools}}."
-toolSettings = "Alət parametrləri"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Tanınmayan əməliyyat, olduğu kimi saxlanıldı."
 unsavedBody = "Saxlanmamış dəyişiklikləriniz var. Çıxmadan əvvəl onları saxlayırsınız, yoxsa atırsınız?"
 unsavedTitle = "Saxlanmamış dəyişikliklər"
-uploadUnsupported = "Yüklənmiş fayllar hələ pipeline-larda dəstəklənmir, buna görə bu addımlar saxlanıla bilməz: {{tools}}."
 usesDefaults = "Standart parametrlərlə işləyir"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Əvvəlki addımdan bütün faylları birləşdirir"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Bu addımın nə qəbul etdiyini yoxlamaq olmur"
 
 [portal.pipelines.composer]
 addTool = "Alət əlavə et"
-cancel = "Ləğv et"
-chainEmpty = "Pipeline qurmağa başlamaq üçün alət əlavə edin."
 create = "Pipeline yarat"
+createPaused = "Create paused"
 editingUnsupported = "Bu alət parametrlərinin redaktə üçün göstərilməsi hələ dəstəklənmir."
-moveDown = "Aşağı köçür"
-moveUp = "Yuxarı köçür"
+editSource = "Edit source"
 name = "Ad"
 namePlaceholder = "məs. Redaction sweep"
 noToolSettings = "Bu alətin konfiqurasiya edilə bilən parametri yoxdur."
-operations_one = "Əməliyyat ({{count}})"
-operations_other = "Əməliyyatlar ({{count}})"
 output = "Çıxış"
-removeStep = "Əməliyyatı sil"
 save = "Dəyişiklikləri saxla"
 scheduleEvery = "Hər"
-sources = "Mənbələr"
-sourcesLoading = "Mənbələr yüklənir..."
 trigger = "Trigger"
 triggerManual = "Yalnız manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "gün"
 hours = "saat"
 minutes = "dəqiqə"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" pipeline-ı silinsin? Bu əməliyyat geri qaytarıla bilməz."
 cancel = "Ləğv et"
@@ -7867,6 +7825,37 @@ connectSource = "Mənbə qoş"
 description = "İlk pipeline-ınızı yaradın: işləyəcəyi mənbələri seçin, əməliyyatları zəncirləyin və çıxışın hara gedəcəyini seçin."
 title = "Hələ pipeline yoxdur"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktiv"
 paused = "Dayandırılıb"
@@ -7879,7 +7868,6 @@ completed_one = "İşlətmə tamamlandı."
 completed_other = "Bütün {{count}} işlətmə tamamlandı."
 empty = "İşlətmək üçün heç nə yoxdur: mənbələrdə emal ediləcək sənəd yox idi."
 failed = "İşlətmə alınmadı: {{error}}"
-historyCleared = "Tarixçə təmizləndi. Növbəti işə salma hazırda mənbələrdə olan hər şeyi yenidən emal edir."
 inFlight = "İşlədiləcək yeni heç nə yoxdur: sənədlər əvvəlki işə salmadan hələ də emal olunur."
 parked_one = "İşlədiləcək heç nə yoxdur: {{count}} sənəd əvvəl uğursuz olub və gözləməyə qoyulub. Səbəbi düzəldin, sonra yenidən cəhd etmək üçün tarixçəni təmizləyin."
 parked_other = "İşlədiləcək heç nə yoxdur: {{count}} sənəd əvvəl uğursuz olub və gözləməyə qoyulub. Səbəbi düzəldin, sonra yenidən cəhd etmək üçün tarixçəni təmizləyin."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Mənbələr"
 status = "Status"
 steps = "Addımlar"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Qovluq izləmə"
@@ -8209,6 +8198,24 @@ label = "Jira issue-suna əlavə et"
 description = "Emal edilmiş sənədi əlavə kimi göndərir."
 label = "Sənədi email ilə göndər (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Emal edilmiş sənədi qovluğa yazır."
 label = "Nextcloud-a yüklə"
@@ -8683,16 +8690,6 @@ maxed = "Limitə çatıb"
 subtitle = "Pulsuz sınağınız {{date}} tarixinə qədər davam edir. Kart tələb olunmur."
 title = "Enterprise sınağı"
 
-[portal.search]
-ariaLabel = "Axtar"
-placeholder = "Stirling-də axtar — son nöqtələr, pipeline-lar, sənədlər…"
-
-[portal.search.empty]
-noActionsDescription = "Sürətli əməliyyatlar əlçatan olduqda burada görünəcək."
-noActionsTitle = "Sürətli əməliyyat yoxdur"
-noMatches = "\"{{query}}\" üçün uyğunluq yoxdur"
-noMatchesDescription = "Fərqli açar söz sınayın və ya kataloqa baxın."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Ləğv et"
 confirm = "Sil"
 title = "Mənbə silinsin?"
 
-[portal.sources.empty]
-description = "Qovluğu (və tezliklə cloud storage-i) qoşun ki, siyasətlərinizin sənədləri götürəcəyi yer olsun."
-title = "Hələ heç bir mənbə qoşulmayıb"
-
 [portal.sources.kpi]
 inUse = "İstifadədə"
 total = "Bağlantılar"
@@ -8785,6 +8778,7 @@ unused = "İstifadə olunmur"
 documents = "Sənədlər"
 source = "Mənbə"
 status = "Status"
+type = "Type"
 usedBy = "Siyasətlər"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Siyasətlər və Məxfilik"
 [settings.preferences]
 title = "Seçimlər"
 
-[settings.search]
-placeholder = "Ayar səhifələrində axtarın..."
-
 [settings.security]
 description = "Hesabınızı təhlükəsiz saxlamaq üçün parolunuzu yeniləyin."
 title = "Təhlükəsizlik"
@@ -10128,6 +10119,7 @@ last = "Son səhifə"
 maintainRatio = "Nisbətin qorunmasını dəyiş"
 next = "Növbəti səhifə"
 noSavedSigs = "Saxlanmış imza tapılmadı"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Şəxsi İmzalar"
 previous = "Əvvəlki səhifə"
 redo = "Yenidən et"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Arxa fonun silinməsi alınmadı"
 hint = "İmzanızın PNG və ya JPG şəklini yükləyin"
 label = "İmza şəklini yüklə"
 placeholder = "Şəkil faylı seç"
+previewAlt = "Current image signature"
 processing = "Şəkil emal edilir..."
 removeBackground = "Ağ arxa fonu sil (şəffaf et)"
 
@@ -10179,6 +10172,17 @@ saved = "Yuxarıdan saxlanmış imza seçin, sonra yerləşdirmək üçün PDF-i
 text = "Yuxarıda adınızı daxil etdikdən sonra, imzanızı yerləşdirmək üçün PDF üzərində istənilən yerə klikləyin."
 title = "İmza necə əlavə olunur"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "İmzanı hərəkət etdir"
 pause = "Yerləşdirməni dayandır"
@@ -10625,6 +10629,23 @@ title = "Serverə yüklə"
 updateButton = "Serverdə yenilə"
 uploadButton = "Serverə yüklə"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Geri qayıt"
 pdfTools = "PDF alətləri"
 placeholder = "Başlamaq üçün alət seçin"
 premiumFeature = "Premium xüsusiyyət:"
-searchTools = "Alətləri axtar"
 toolsHeader = "Alətlər"
 viewAllTools = "Bütün alətlərə bax"
 
@@ -10822,6 +10842,9 @@ removal = "Silmə"
 signing = "İmzalama"
 verification = "Yoxlama"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Heç bir alət tapılmadı"
 noTools = "Heç bir alət mövcud deyil"
@@ -10979,6 +11002,13 @@ approver = "Siyasəti təsdiqləyir"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}} ünvanına dəvət ləğv edilsin? Onlar cari linklə qoşula bilməyəcəklər."
 cancelInviteTitle = "Dəvəti ləğv et"
@@ -10998,10 +11028,8 @@ title = "Hələ üzv yoxdur"
 addToTeam = "Komandaya əlavə et"
 guestCount = "{{count}} qonaq"
 guests = "Qonaqlar"
-guestsDesc = "Xarici əməkdaşlar, paylaşdıqlarınızla məhdudlaşdırılıb. Yalnız Editor."
 ledBy = "{{owner}} tərəfindən idarə olunur"
 org = "Təşkilat"
-orgDesc = "Təşkilat üzrə səlahiyyətə və siyasət təsdiqinə malik sahiblər"
 owners = "{{count}} sahib"
 team = "{{name}} komandası"
 teamMeta = "{{count}} nəfər"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "{{who}} tərəfindən dəvət olunub"
 cancel = "Ləğv et"
-count = "{{count}} gözləmədə"
-desc = "Hələ qoşulmamış dəvət olunan şəxslər. Qəbul edənədək yer tuturlar."
 expiresInDays_one = "Müddəti {{count}} gün sonra bitir"
 expiresInDays_other = "Müddəti {{count}} gün sonra bitir"
 expiresToday = "Müddəti bu gün bitir"
 title = "Gözləmədə olan dəvətlər"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Backend-ə qoşularkən xəta baş verdi və ya giriş icazəniz yoxdur. Yenidən cəhd edin."
 title = "Üzvlər yüklənə bilmədi"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Qoşmalarda axtar"
 title = "Qoşmalar"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Əlfəcin başlığı"
 bookmarkTitleRequired = "Əlfəcin başlığı tələb olunur"
 closeSidebar = "Əlfəcinlər yan panelini bağla"
 collapseAll = "Bütün əlfəcinləri yığ"
+empty = "No bookmarks in this document"
 expandAll = "Bütün əlfəcinləri genişləndir"
 searchPlaceholder = "Əlfəcinləri axtar"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Şərh əlavə et"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Sənəddə tap"
 moreActions = "Daha çox əməl"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Səhifə {{page}}"
 placingHint = "Yerləşdirmək üçün bir səhifəyə klikləyin… (ləğv et)"
 removeCommentOnly = "Yalnız şərhi sil"
 saveReply = "Cavabı saxla"
+searchPlaceholder = "Search comments"
 title = "Şərhlər"
 typeComment = "Şərh"
 typeInsertText = "Mətn əlavə et"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Yadda saxlanılmamış dəyişiklikləriniz var"
 closeSidebar = "Qatlar yan panelini bağla"
 hideAll = "Bütün qatları gizlət"
 showAll = "Bütün qatları göstər"
+title = "Layers"
 
 [viewer.link]
 delete = "Keçidi sil"
@@ -11646,6 +11682,7 @@ exitRedaction = "Gizlətmə rejimindən çıx"
 exportAll = "PDF-i ixrac et"
 exportSelected = "Seçilmiş səhifələri ixrac et"
 formFill = "Formu doldur"
+hideToolbar = "Hide toolbar"
 multiTool = "Çoxfunksiyalı alət"
 panMode = "Sürüşdürmə rejimi"
 print = "PDF-i çap et"
@@ -11666,6 +11703,7 @@ selectAll = "Hamısını seç"
 selectByNumber = "Səhifə nömrələrinə görə seç"
 selectLanguage = "Dili seçin"
 share = "Paylaş"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Annotasiyaların görünməsini dəyiş"
 toggleAttachments = "Qoşmaları aç/bağla"
 toggleBookmarks = "Əlfəcinləri aç/bağla"
diff --git a/frontend/editor/public/locales/bg-BG/translation.toml b/frontend/editor/public/locales/bg-BG/translation.toml
index c744c2c8c0..512acbe237 100644
--- a/frontend/editor/public/locales/bg-BG/translation.toml
+++ b/frontend/editor/public/locales/bg-BG/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Азбука"
 apply = "Приложи"
 applyAndContinue = "Запази и излез"
-areYouSure = "Сигурни ли сте, че искате да напуснете?"
 back = "Назад"
 black = "Черно"
 blue = "Синьо"
@@ -106,6 +105,7 @@ undoSuccess = "Операцията е отменена успешно"
 unknown = "Непознат"
 unpin = "Откачи файл (замяна след изпълнение на инструмента)"
 unsavedChanges = "Имате незаписани промени във вашия PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Незаписани промени"
 unsupported = "Неподдържано"
 username = "Потребителско име"
@@ -1879,6 +1879,9 @@ width = "Ширина"
 [app]
 description = "Безплатната алтернатива на Adobe Acrobat (10M+ изтегляния)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Конвертиране в PDF/A-3b"
 convertToPdfA3bDescription = "Създава архивен PDF с вградени прикачени файлове"
@@ -2933,12 +2936,16 @@ text = "За да направите тези разрешения непром
 [chat.actions]
 copy = "Копирайте съобщение"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Опции на агента Stirling"
+assistant = "AI Assistant"
 clearChat = "Изчистете чата"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Тази операция ще използва вашите обла
 tooltip = "Изберете цвят от екрана"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Изберете цвят"
 
 [common]
+actions = "Actions"
 back = "Назад"
 cancel = "Отказ"
 close = "Затвори"
+codeSample = "Code sample"
 collapse = "Свий"
 confirm = "Потвърди"
 continue = "Продължи"
 copied = "Копирано!"
 copy = "Копирай"
 done = "Готово"
+enterValue = "Enter value"
 error = "Грешка"
 expand = "Разгъни"
 loading = "Зареждане..."
 next = "Напред"
+open = "Open"
 preview = "Преглед"
 previous = "Назад"
 refresh = "Опресни"
 remaining = "Оставащи"
 retry = "Повтори"
 save = "Запазване"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Изчисти избраните"
@@ -3185,6 +3199,7 @@ title = "Метод на компресиране"
 [compress.settings]
 desiredSize = "Желан размер на файла"
 desiredSizePlaceholder = "Въведете размер"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Компресията е лесен начин да намалите размера на файла си. Изберете File Size, за да въведете целеви размер и ние ще нагласим качеството вместо вас. Изберете Quality, за да зададете силата на компресията ръчно."
@@ -3387,6 +3402,24 @@ pdfOptions = "Опции за PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Първо изберете изходен формат"
 settings = "Настройки"
 single = "Единичен"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Търсене..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Редактиране"
@@ -3824,11 +3861,13 @@ shareSelected = "Сподели избраните"
 sharing = "Споделяне"
 showAll = "Покажи всички"
 showHistory = "Покажи история"
+sortBy = "Sort files"
 sortByDate = "Сортирай по дата"
 sortByName = "Сортирай по име"
 sortBySize = "Сортирай по размер"
 storage = "Хранилище"
 storageState = "Съхранение"
+storageUsed = "Storage used"
 synced = "Синхронизирано"
 title = "Качване на PDF файлове"
 toolChain = "Приложени инструменти"
@@ -3874,8 +3913,12 @@ addFiles = "Добавяне на файлове"
 addingFiles = "Добавяне на файлове…"
 collapse = "Свиване на страничната лента"
 customizeGroups = "Персонализиране на групи"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Отворете файлове, за да започнете"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Разгъване на страничната лента"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive не е конфигуриран"
@@ -3888,15 +3931,17 @@ openFromComputer = "Отваряне от компютър"
 openSettings = "Отваряне на настройките"
 other = "Други"
 recent = "Скорошни"
-search = "Търсене"
-searchPlaceholder = "Търсене на файлове..."
 viewAll = "Виж всички {{count}} файла"
 
 [fileSidebar.fileItem]
 closeViewer = "Затворете визуализатора"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Отворете във визуализатора"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Възстанови по подразбиране"
 subtitle = "Групирайте файловете си в родителски категории. Добавете съществуващи или нови етикети към категория, преименувайте я или създайте своя. Файловете, които не са в нито една от вашите категории, се показват под „Други“."
 title = "Категории в страничната лента"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Добавете към работната зона"
 addToWorkspaceCount = "Добавете {{count}} към работната зона"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Назад към Моите файлове"
 breadcrumbs = "Път на папката"
 cancel = "Отказ"
 classification = "Класификация"
-clearSearch = "Изчистете търсенето"
 clearSelection = "Изчистете избора"
 closeDetails = "Затворете подробностите"
 create = "Създайте"
@@ -3950,6 +4002,7 @@ downloadAll = "Изтеглете всички"
 downloadVersion = "Изтеглете тази версия"
 dropOverlay = "Пуснете файлове за качване"
 dropOverlaySub = "Файловете започват като Local. Използвайте 'Move to' или 'Save to cloud', за да ги организирате в папка."
+duplicate = "Duplicate"
 file = "Файл"
 fileInfo = "File info"
 fileMenu = "Действия за файл"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Преоразмерете дървото на папкит
 save = "Запазете"
 saveToServer = "Запазете на сървъра"
 saveToServerDisabledHint = "Запазването към сървъра не е активирано на този сървър. Помолете администратора да го активира."
-search = "Търсене"
-searchPlaceholder = "Търсене в тази папка и подпапките"
 selectAll = "Изберете всички"
 selectAllHint = "Кликнете, за да изберете всички. Съвет: задръжте Ctrl (или Cmd), за да добавяте файлове поотделно, Shift за избор на диапазон."
 selectedCount = "{{count}} избрани"
@@ -4044,6 +4095,10 @@ title = "Още няма облачни файлове"
 hint = "Файловете, записани без качване, остават тук. Пуснете файл, за да добавите такъв."
 title = "Няма само локални файлове"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Файловете, които отваряте или редактирате, ще се показват тук."
 title = "Все още няма промени"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Папката не можа да бъде изтрита."
 deleteFolderFailedDetail = "Папката не можа да бъде изтрита: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Неуспешно обновяване на външния вид на папката."
 folderAppearanceFailedDetail = "Неуспешно обновяване на външния вид на папката: {{message}}"
 moveFilesFailed = "Файловете не можаха да бъдат преместени."
@@ -4113,6 +4170,11 @@ localHint = "Съхранява се само в този браузър"
 shared = "Споделени"
 sharedHint = "Споделени с вас чрез връзка"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Най-старите първо"
 modifiedDesc = "Най-новите първо"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Няма налични файлове в хранили
 open = "Отвори"
 openFile = "Отвори файл"
 openFiles = "Отвори файлове"
+selectFile = "Select {{name}}"
 selectFromStorage = "Изберете от хранилище"
 upload = "Качване"
 uploadFile = "Качване на файл"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Всичко е запазено"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Неуспешно извличане на CSV"
 extractXlsxError = "Неуспешно извличане на XLSX"
+filled = "filled"
 flattenAfterFilling = "Фиксиране след попълване"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "зад."
 requiredFieldsError = "Моля, попълнете всички задължителни полета"
 rescanFields = "Пресканирайте полетата"
@@ -4795,9 +4863,6 @@ title = "Изображение към PDF"
 [imageToPdf]
 tags = "преобразуване,img,jpg,изображение,снимка"
 
-[infoBanner]
-dismiss = "Отхвърлете"
-
 [invite]
 acceptError = "Неуспешно създаване на акаунт"
 accountFor = "Създаване на акаунт за"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Качването е успешно!"
 uploadSuccessMessage = "Вашите изображения бяха прехвърлени."
 validating = "Валидиране на сесията..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Сканирайте, за да качите снимки. Изображенията се конвертират автоматично в PDF."
 descriptionNoConvert = "Сканирайте, за да качвате снимки от мобилното си устройство."
@@ -4997,8 +5090,13 @@ title = "Качване от мобилно устройство"
 tags = "Мултиинструмент,Мулти операции,UI,плъзгане с щракване,потребителска част,страна на клиента,интерактивен,неразрешим,преместване"
 title = "PDF Мулти инструмент"
 
-[navbar]
-search = "Търсене"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Удостоверяването беше неуспешно. Можете да затворите този прозорец и да опитате отново."
@@ -5127,6 +5225,7 @@ activeFiles = "Изгледът <strong>Активни файлове</strong> 
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Затвори"
 cropSettings = "След като избрахме файла за изрязване, можем да конфигурираме инструмента Изрязване, за да изберем областта, до която да изрежем PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Кликването върху файл го избира за обработка. Можете да избирате множество файлове за пакетни операции."
 fileReplacement = "Промененият файл автоматично ще замени оригинала в Работната зона, което позволява лесно да го пуснете през още инструменти."
 filesButton = "Бутонът <strong>Файлове</strong> в лентата за бърз достъп ви позволява да качите PDF файлове, върху които да използвате инструментите."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF към PDF/A"
 tags = "архив,дълготраен,стандартен,преобразуване,съхранение,консервиране"
 title = "PDF към PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "печат,стандарт,конвертиране,производство,предпечат,архив"
 title = "PDF към PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 кредита"
 xsmall = "100 кредита"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Изберете план, който отговаря на нуждите ви"
 title = "Налични планове"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Месечният лимит на разходите е дос
 title = "Stripe порталът не можа да бъде отворен"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "от {{allowance}} безплатни PDF използвани"
 capSuffix_other = "от {{allowance}} безплатни PDF използвани"
 eyebrow = "Пробен Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Изпратете документ или известие по email, когато правило се изпълнява."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Записвайте обработени документи в Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Официални SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
-[portal.docs.search]
-empty = "Няма съвпадащи документи"
-placeholder = "Търсене в документи"
-results = "{{count}} резултата"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Включени, именувани способности, които вашият агент извиква като един инструмент. Всяко skill е детерминирана верига от операции с прикачени evals."
@@ -7180,11 +7309,11 @@ editorAction = "Редактор"
 empty = "Няма документи, отговарящи на този филтър."
 rowActions = "Действия за реда"
 sensitiveLabel = "Чувствителен"
-sensitiveTitle = "Чувствителен — необходим е достъп"
 
 [portal.documents.table.columns]
 action = "Pipeline / Действие"
 document = "Документ"
+labels = "Labels"
 product = "Продукт"
 status = "Статус"
 time = "Време"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Последно видян"
 region = "Регион"
 status = "Статус"
+target = "Target"
 version = "Версия"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Този изглед срещна неочаквана греш
 retry = "Опитайте отново"
 title = "Нещо се обърка на тази страница"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Назад"
 body = "Изтеглете desktop app или self-host-нете server-а."
@@ -7380,11 +7560,6 @@ cancel = "Отказ"
 confirm = "Отмяна на ключ"
 title = "Отмяна на API ключ"
 
-[portal.infrastructure.attestationLabel]
-attested = "Удостоверено"
-inScope = "В обхвата"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Филтриране на одитни събития по категория"
 heading = "Одитни logs"
@@ -7456,11 +7631,6 @@ info = "Информация"
 success = "Успех"
 warning = "Предупреждение"
 
-[portal.infrastructure.certLabel]
-certified = "Сертифицирано"
-inProgress = "В процес"
-notStarted = "Не е започнато"
-
 [portal.infrastructure.createKey]
 cancel = "Отказ"
 createKey = "Създай ключ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Копирайте тази тайна сега — няма
 title = "Създай API ключ"
 titleCreated = "Ключът е създаден"
 
-[portal.infrastructure.deployLabel]
-live = "На живо"
-queued = "На опашка"
-rolledBack = "Върнато назад"
-rolling = "Разгръща се"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Разгърнато от"
-environment = "Среда"
-product = "Продукт"
-status = "Статус"
-version = "Версия"
-when = "Кога"
-
-[portal.infrastructure.deployments.recent]
-heading = "Скорошни разгръщания"
-subheading = "Най-новите внедрявания в продукти и среди."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Инстанции"
-latency = "Латентност"
-load = "Натоварване"
-p99 = "P99"
-region = "Регион"
-status = "Статус"
-throughput = "Пропускателност"
-uptime = "Uptime"
-version = "Версия"
-
-[portal.infrastructure.deployments.regions]
-heading = "Региони"
-subheading = "Здраве на живо за всеки разгърнат Stirling регион — латентност, натоварване и версия на внедряването."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Разгърнатите региони ще се появят тук, след като работното ви пространство бъде provisioned."
-title = "Няма разгърнати региони"
-
 [portal.infrastructure.keyLabel]
 active = "Активен"
 revoked = "Отменен"
 
-[portal.infrastructure.modelLabel]
-active = "Активен"
-degraded = "Влошен"
-disabled = "Деактивиран"
-
-[portal.infrastructure.models]
-heading = "Модели"
-msValue = "{{value}} ms"
-subheading = "Каталогът с модели и routing, които задвижват обработката на документи във вашето работно пространство."
-
-[portal.infrastructure.models.byom]
-description = "Регистрирайте on-prem или самостоятелно хостван модел и го фиксирайте към регион за обработка, обвързана с местонахождението на данните."
-title = "Bring your own model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Каталог"
-sub = "Управлявани модели, достъпни за вашето работно пространство, с латентност и цена на живо."
-subEnterprise = "Управлявани, bring-your-own и on-prem модели — с налично фиксиране по регион."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Моделите в каталога на вашето работно пространство ще се появят тук."
-title = "Няма налични модели"
-
-[portal.infrastructure.models.columns]
-cost = "Цена"
-latency = "Латентност"
-load = "Натоварване"
-model = "Модел"
-status = "Статус"
-type = "Тип"
-version = "Версия"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/извикване"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Активни модели"
-avgLatency = "Средна латентност"
-included = "Включено"
-monthlySpend = "Месечни разходи за модели"
-
-[portal.infrastructure.models.routing]
-empty = "Няма конфигурирани правила за routing."
-heading = "Правила за routing"
-sub = "Кой модел обработва всяка операция. Стойността по подразбиране се прилага, когато няма по-тясно правило."
-subLocked = "Насочвайте операции към конкретни модели — достъпно в платени планове."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Надстройте до Pro, за да контролирате кой модел обработва всяка операция и тип документ."
-title = "Model routing е платена функция"
-
-[portal.infrastructure.models.routingColumns]
-default = "По подразбиране"
-docType = "Тип документ"
-modelForAria = "Модел за {{operation}}"
-operation = "Операция"
-routedTo = "Насочено към"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Класификация"
-extraction = "Извличане"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Влошен"
-down = "Недостъпен"
-healthy = "Здрав"
-
-[portal.infrastructure.security.access.byok]
-description = "Предоставете ключ от вашия собствен KMS. Stirling криптира с него, но все още може да чете."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ключовете никога не напускат вашия KMS. Stirling държи само ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling управлява ключовете за криптиране. Най-просто — нулеви операции с ключове от ваша страна."
-label = "Ключове, държани от Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Политика за достъп до документи"
-subheading = "Контролира кой може да декриптира обработени документи в покой."
-
-[portal.infrastructure.security.attestations]
-heading = "Атестации за съответствие"
-noReport = "Няма наличен отчет"
-subheading = "Одитно състояние по рамки, с налични отчети за атестирани контроли."
-viewReport = "Вижте отчета →"
-
-[portal.infrastructure.security.compliance]
-heading = "Съответствие"
-subheading = "Атестации и сертификации, покриващи платформата Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Конфигурацията за сигурност на вашето работно пространство ще се появи тук."
-title = "Състоянието на сигурността не е налично"
-
-[portal.infrastructure.security.hyokBanner]
-description = "С HYOK ключовете за криптиране никога не напускат вашия KMS. Stirling съхранява и обработва само ciphertext, който можете да оттеглите по всяко време."
-title = "Stirling не може да декриптира вашите документи"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Няма конфигурирани IP диапазони — всички IP адреси са разрешени."
-heading = "IP allowlist"
-sub = "API достъпът е ограничен до тези CIDR диапазони."
-subLocked = "Ограничете API достъпа до известни IP диапазони — достъпно в платени планове."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Надстройте до Pro, за да ограничите API достъпа до конкретни мрежи."
-title = "IP allowlisting е платена функция"
-
-[portal.infrastructure.security.ipColumns]
-added = "Добавено"
-addedBy = "Добавено от"
-cidr = "CIDR"
-label = "Етикет"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Алгоритъм"
-heading = "Управление на ключове за криптиране"
-keyId = "Идентификатор на ключ"
-lastRotated = "Последно ротиран"
-rotateKey = "Ротирай ключ"
-rotationPolicy = "Политика за ротация"
-subheading = "Попечителство на ключовете, които криптират документи в покой — кой може да декриптира и как се ротират ключовете."
-
-[portal.infrastructure.security.managedBanner]
-description = "Попечителството bring-your-own-key (BYOK) и hold-your-own-key (HYOK) е достъпно в Enterprise. Надстройте, за да предоставяте ключове от вашия собствен KMS."
-title = "Ключовете се управляват от Stirling във вашия план"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Азиатско-тихоокеански регион"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR граница на данните"
-label = "Европейски съюз"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Съединени щати"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Местонахождение на данните"
-subheading = "Къде се съхраняват и обработват документите."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} използвани"
-
-[portal.infrastructure.storage.empty]
-description = "Свързаното storage и използване ще се появят тук."
-title = "Няма конфигурирано storage"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Активно"
-activeRange = "0–{{value}}d"
-archived = "Архивирано"
-coldStorage = "cold storage"
-deleted = "Изтрито"
-never = "никога"
-purged = "изчистено"
-
-[portal.infrastructure.storage.providers]
-connect = "Свържи"
-connected = "Свързано"
-heading = "Свързани доставчици"
-subheading = "Къде се записват обработените артефакти."
-
-[portal.infrastructure.storage.retention]
-heading = "Задържане"
-subheading = "Колко дълго се пазят артефактите преди изтриване по lifecycle."
-windowLabel = "Прозорец за задържане по подразбиране"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} ден"
-days_other = "{{count}} дни"
-never = "Никога не изтривай"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Общо използване"
-progressLabel = "Използвано storage"
-subheading = "Storage, използвано във всички свързани доставчици."
-
 [portal.infrastructure.tabs]
 apiKeys = "API ключове"
 audit = "Одитни logs"
@@ -7715,11 +7657,9 @@ security = "Сигурност"
 storage = "Storage"
 
 [portal.integrations]
-addAnother = "Добавяне на още една"
 availableHeading = "Налични"
 comingSoonHeading = "Очаквайте скоро"
 connect = "Свързване"
-connectedHeading = "Свързани"
 connectionCount_one = "{{count}} връзка"
 connectionCount_other = "{{count}} връзки"
 customApi = "Персонализиран API"
@@ -7737,6 +7677,10 @@ security = "Сигурност"
 signing = "Подписване"
 storage = "Съхранение"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Свързано"
 
@@ -7767,7 +7711,6 @@ integrations = "Интеграции"
 pipelines = "Pipelines"
 policies = "Политики"
 procurement = "Снабдяване"
-settings = "Настройки"
 sources = "Източници"
 usage = "Използване и фактуриране"
 users = "Потребители"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Нов pipeline"
 
 [portal.pipelines.builder]
-addStep = "Добави инструмент"
+activate = "Activate"
 back = "Назад към pipelines"
 cannotFollow = "Не може да приеме {{produced}}"
 chooseAccount = "Изберете акаунт"
@@ -7792,28 +7735,38 @@ chooseDestination = "Изберете дестинация"
 chooseOperation = "Изберете какво прави тази стъпка"
 chooseSource = "Изберете източник"
 discard = "Отхвърли промените"
-enabled = "Активирано"
 inputs = "Вход"
 inputSource = "Входен източник"
 inputTrigger = "Тригер"
 keepEditing = "Продължи редактирането"
+moreActions = "More actions"
 needsConfiguring = "Нуждае се от настройка"
-needsUpload = "Нуждае се от качен файл"
-noSources = "Все още няма свързани източници. Създайте такъв, за да го използвате като вход."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Няма инструменти, отговарящи на търсенето ви."
-pipelineSettings = "Настройки на pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Търсене на инструменти"
-selectToolBody = "Добавете инструмент, за да изградите вашия pipeline."
-selectToolTitle = "Все още няма инструменти"
 sendToSystem = "Изпращане към друга система"
 stepsIncompatible = "Тези стъпки не могат да се изпълнят върху това, което произвежда предишната им стъпка: {{tools}}."
 stepsNeedSetup = "Тези стъпки все още трябва да бъдат настроени преди запазване: {{tools}}."
-toolSettings = "Настройки на инструмента"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Неразпозната операция, запазена както е."
 unsavedBody = "Имате незапазени промени. Запазете ги преди да напуснете или ги отхвърлете?"
 unsavedTitle = "Незапазени промени"
-uploadUnsupported = "Качените файлове все още не се поддържат в pipelines, затова тези стъпки не могат да бъдат запазени: {{tools}}."
 usesDefaults = "Изпълнява се с настройки по подразбиране"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Комбинира всеки файл от предишната стъпка"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Не може да се провери какво при
 
 [portal.pipelines.composer]
 addTool = "Добави инструмент"
-cancel = "Отказ"
-chainEmpty = "Добавете инструмент, за да започнете да изграждате вашия pipeline."
 create = "Създай pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Показването на тези параметри на инструмента за редактиране все още не се поддържа."
-moveDown = "Премести надолу"
-moveUp = "Премести нагоре"
+editSource = "Edit source"
 name = "Име"
 namePlaceholder = "напр. Redaction sweep"
 noToolSettings = "Този инструмент няма конфигурируеми настройки."
-operations_one = "Операция ({{count}})"
-operations_other = "Операции ({{count}})"
 output = "Изход"
-removeStep = "Премахни операция"
 save = "Запази промените"
 scheduleEvery = "Изпълнявай на всеки"
-sources = "Източници"
-sourcesLoading = "Зареждане на източници..."
 trigger = "Trigger"
 triggerManual = "Само ръчно"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "дни"
 hours = "часа"
 minutes = "минути"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Да се изтрие ли \"{{name}}\"? Това не може да бъде отменено."
 cancel = "Отказ"
@@ -7867,6 +7825,37 @@ connectSource = "Свързване на източник"
 description = "Създайте първия си pipeline: изберете източниците, върху които се изпълнява, свържете операциите и изберете къде да отива изходът."
 title = "Все още няма pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Активни"
 paused = "Поставени на пауза"
@@ -7879,7 +7868,6 @@ completed_one = "Изпълнението завърши."
 completed_other = "Всички {{count}} изпълнения завършиха."
 empty = "Няма какво да се изпълни: източниците нямаха документи за обработка."
 failed = "Изпълнението не бе успешно: {{error}}"
-historyCleared = "Историята е изчистена. Следващото изпълнение ще обработи отново всичко, което в момента е в източниците."
 inFlight = "Няма нищо ново за изпълнение: документи все още се обработват от предишно изпълнение."
 parked_one = "Няма нищо за изпълнение: {{count}} документ е бил неуспешен преди и е паркиран. Отстранете причината, след това изчистете историята, за да опитате отново."
 parked_other = "Няма нищо за изпълнение: {{count}} документа са били неуспешни преди и са паркирани. Отстранете причината, след това изчистете историята, за да опитате отново."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Източници"
 status = "Статус"
 steps = "Стъпки"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Наблюдение на папка"
@@ -8209,6 +8198,24 @@ label = "Прикачване към Jira issue"
 description = "Изпраща обработения документ като прикачен файл."
 label = "Изпращане на документа по имейл (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Записва обработения документ в папка."
 label = "Качване в Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Достигнат максимум"
 subtitle = "Вашият безплатен trial продължава до {{date}}. Не се изисква карта."
 title = "Enterprise trial"
 
-[portal.search]
-ariaLabel = "Търсене"
-placeholder = "Търсене в Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Бързите действия ще се появят тук, когато са налични."
-noActionsTitle = "Няма бързи действия"
-noMatches = "Няма съвпадения за „{{query}}“"
-noMatchesDescription = "Опитайте с друга ключова дума или разгледайте каталога."
-
 [portal.settings.groups]
 admin = "Администратор"
 
@@ -8743,10 +8740,6 @@ cancel = "Отказ"
 confirm = "Изтриване"
 title = "Да се изтрие ли източникът?"
 
-[portal.sources.empty]
-description = "Свържете папка (а скоро и cloud storage), така че вашите политики да имат откъде да вземат документи."
-title = "Все още няма свързани източници"
-
 [portal.sources.kpi]
 inUse = "В употреба"
 total = "Връзки"
@@ -8785,6 +8778,7 @@ unused = "Неизползван"
 documents = "Документи"
 source = "Източник"
 status = "Статус"
+type = "Type"
 usedBy = "Политики"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Политики и поверителност"
 [settings.preferences]
 title = "Предпочитания"
 
-[settings.search]
-placeholder = "Търсене в страниците с настройки..."
-
 [settings.security]
 description = "Актуализирайте паролата си, за да запазите акаунта си защитен."
 title = "Сигурност"
@@ -10128,6 +10119,7 @@ last = "Последна страница"
 maintainRatio = "Превключване за поддържане на съотношението на страните"
 next = "Следваща страница"
 noSavedSigs = "Не са намерени запазени подписи"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Лични подписи"
 previous = "Предишна стараница"
 redo = "Повтори"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Неуспешно премахване на ф
 hint = "Качете PNG или JPG изображение на вашия подпис"
 label = "Качете изображение на подпис"
 placeholder = "Изберете файл с изображение"
+previewAlt = "Current image signature"
 processing = "Обработка на изображението..."
 removeBackground = "Премахване на бял фон (прозрачен)"
 
@@ -10179,6 +10172,17 @@ saved = "Изберете запазен подпис по-горе, след т
 text = "След като въведете името си по-горе, щракнете навсякъде върху PDF-а, за да поставите подписа."
 title = "Как да добавите подпис"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Преместване на подпис"
 pause = "Пауза на поставянето"
@@ -10625,6 +10629,23 @@ title = "Качване на сървъра"
 updateButton = "Актуализиране на сървъра"
 uploadButton = "Качване на сървъра"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Върнете се"
 pdfTools = "PDF инструменти"
 placeholder = "Изберете инструмент, за да започнете"
 premiumFeature = "Премиум функция:"
-searchTools = "Търсене на инструменти"
 toolsHeader = "Инструменти"
 viewAllTools = "Виж всички инструменти"
 
@@ -10822,6 +10842,9 @@ removal = "Премахване"
 signing = "Подписване"
 verification = "Проверка"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Няма намерени инструменти"
 noTools = "Няма налични инструменти"
@@ -10979,6 +11002,13 @@ approver = "Одобрява политика"
 editor = "Редактор"
 processor = "Процесор"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Да се отмени ли поканата до {{email}}? Те няма да могат да се присъединят с текущата връзка."
 cancelInviteTitle = "Отмяна на поканата"
@@ -10998,10 +11028,8 @@ title = "Все още няма членове"
 addToTeam = "Добавяне към екип"
 guestCount = "{{count}} гост"
 guests = "Гости"
-guestsDesc = "Външни сътрудници, ограничени до това, което сте споделили. Само редактор."
 ledBy = "воден от {{owner}}"
 org = "Организация"
-orgDesc = "Собственици с правомощия в цялата организация и одобрение на политики"
 owners = "{{count}} собственик"
 team = "Екип {{name}}"
 teamMeta = "{{count}} души"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Поканен от {{who}}"
 cancel = "Отказ"
-count = "{{count}} чакащи"
-desc = "Поканени хора, които още не са се присъединили. Те заемат място, докато не приемат."
 expiresInDays_one = "Изтича след {{count}} ден"
 expiresInDays_other = "Изтича след {{count}} дни"
 expiresToday = "Изтича днес"
 title = "Чакащи покани"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Нещо се обърка при свързването със сървърната част или нямате достъп. Опитайте отново."
 title = "Членовете не можаха да бъдат заредени"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Търсене в прикачените файлове"
 title = "Прикачени файлове"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Заглавие на отметката"
 bookmarkTitleRequired = "Заглавието на отметката е задължително"
 closeSidebar = "Затвори страничната лента с отметки"
 collapseAll = "Свий всички отметки"
+empty = "No bookmarks in this document"
 expandAll = "Разгъни всички отметки"
 searchPlaceholder = "Търсене в отметките"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Добавяне на коментар"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Намиране в документа"
 moreActions = "Още действия"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Страница {{page}}"
 placingHint = "Щракнете върху страница, за да поставите… (отказ)"
 removeCommentOnly = "Премахване само на коментара"
 saveReply = "Запис на отговора"
+searchPlaceholder = "Search comments"
 title = "Коментари"
 typeComment = "Коментар"
 typeInsertText = "Вмъкване на текст"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Имате незаписани промени"
 closeSidebar = "Затвори страничната лента със слоеве"
 hideAll = "Скрий всички слоеве"
 showAll = "Покажи всички слоеве"
+title = "Layers"
 
 [viewer.link]
 delete = "Изтриване на връзка"
@@ -11646,6 +11682,7 @@ exitRedaction = "Изход от режим на заличаване"
 exportAll = "Експортиране на PDF"
 exportSelected = "Експортиране на избраните страници"
 formFill = "Попълване на формуляр"
+hideToolbar = "Hide toolbar"
 multiTool = "Мултиинструмент"
 panMode = "Режим на преместване"
 print = "Печат на PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Избиране на всички"
 selectByNumber = "Избор по номера на страници"
 selectLanguage = "Избор на език"
 share = "Сподели"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Превключване на видимостта на анотациите"
 toggleAttachments = "Превключване на прикачените файлове"
 toggleBookmarks = "Превключване на отметките"
diff --git a/frontend/editor/public/locales/bo-CN/translation.toml b/frontend/editor/public/locales/bo-CN/translation.toml
index 92b86f483a..7d0c65d14b 100644
--- a/frontend/editor/public/locales/bo-CN/translation.toml
+++ b/frontend/editor/public/locales/bo-CN/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "ཡི་གེ།"
 apply = "འཇུག"
 applyAndContinue = "སྲུང་དང་ཕྱིར་འབུད།"
-areYouSure = "ཁྱེད་རང་འགྲོ་འདོད་ཡོད་དམ།"
 back = "ཕྱིར་ལོག"
 black = "ནག་པོ"
 blue = "སྔོན་པོ"
@@ -106,6 +105,7 @@ undoSuccess = "ལས་དོན་ལེགས་འགྲུབ་བྱུ
 unknown = "མི་ཤེས"
 unpin = "ཨན་པིན་ཡིག་ཆ། (ལག་ཆའི་བཀོལ་སྤྱོད་རྗེས་ཚབ་བྱེད་པ)"
 unsavedChanges = "ཁྱེད་རང་ལ་ཁྱེད་རང་གི་PDFལ་འགྱུར་བ་མེད་པའི་འགྱུར་བ་ཡོད།"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "གསོག་འཇོག་མེད་པའི་འགྱུར་བ།"
 unsupported = "རྒྱབ་སྐྱོར་མེད་པ།"
 username = "མིང་།"
@@ -1879,6 +1879,9 @@ width = "ཞེང་ཚད"
 [app]
 description = "ཕི་རི་ཨེ་ཌོབ་ཨེ་ཀྲོ་བྷཊ་ཐབས་གཞན་ཞིག (10M+ ཕབ་ལེན།)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b ལ་སྒྱུར་བ།"
 convertToPdfA3bDescription = "ཡིག་ཚགས་ཀྱི་PDFཞིག་བཙུགས་ནས་བཙུགས་པའི་མཐུད་ཁ་བཟོས།"
@@ -2933,12 +2936,16 @@ text = "ཆོག་མཆན་འདི་དག་འགྱུར་བ་མ
 [chat.actions]
 copy = "འཕྲིན་དོན་འདྲ་བཤུས"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling agent འདེམས་ཚན"
+assistant = "AI Assistant"
 clearChat = "གླེང་མོལ་བཤོལ"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "བཀོལ་སྤྱོད་འདིས་ཁྱེད་ཀྱ
 tooltip = "བརྙན་ཡོལ་ནས་ཁ་དོག་འདེམས"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "ཁ་དོག་འདེམས།"
 
 [common]
+actions = "Actions"
 back = "རྒྱབ་ངོས"
 cancel = "འདོར་བ"
 close = "གཏན་པ"
+codeSample = "Code sample"
 collapse = "རྡིབ་པ"
 confirm = "གཏན་འཁེལ"
 continue = "མུ་མཐུད"
 copied = "འདྲ་བཤུས་བྱས།"
 copy = "འདྲ་བཤུས།"
 done = "བགྱིས་པ"
+enterValue = "Enter value"
 error = "ནོར་འཁྲུལ"
 expand = "རྒྱ་སྐྱེད་གཏོང"
 loading = "ཁུར་པོ།"
 next = "རྗེས་མ"
+open = "Open"
 preview = "སྔོན་ལྟ།"
 previous = "སྔོན་ཆད་ཀྱི"
 refresh = "གསར་སྐྲུན་བྱེད་པ།"
 remaining = "ལྷག་མ"
 retry = "ངལ་གསོ་ཡང་བསྐྱར་བྱེད་པ།"
 save = "སྐྱོབ་པ"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "བདམས་ཐོན་བྱུང་བར་གསལ་བ།"
@@ -3185,6 +3199,7 @@ title = "བསྡམས་སྒྲིལ་ཐབས་ལམ།"
 [compress.settings]
 desiredSize = "དགོས་མཁོའི་ཡིག་ཆའི་ཆེ་ཆུང"
 desiredSizePlaceholder = "ཆེ་ཆུང་བཙུགས"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "ཁྱེད་ཀྱི་ཡིག་ཆའི་ཆེ་ཆུང་ཉུང་དུ་གཏོང་བའི་ཐབས་ཤེས་སྟབས་བདེ་ཞིག་ཡིན། དམིགས་འབེན་གྱི་ཚད་གཞི་ནང་འཇུག་བྱེད་པར་ཡིག་ཆའི་ཚད་གཞི་འདེམས་ནས་ང་ཚོ་ཁྱེད་ཀྱི་ཆེད་དུ་སྤུས་ཚད་སྙོམ་སྒྲིག་བྱེད་དགོས། ལག་ཐོག་ནས་བསྡམས་སྒྲིལ་གྱི་ཤུགས་ཚད་སྒྲིག་པའི་སྤུས་ཚད་འདེམས།"
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF གདམ་ག།"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "ཐོན་ཁུངས་རྣམ་གཞག་ཐོག་མར་འདེམས།"
 settings = "སྒྲིག་སྟངས།"
 single = "ཁེར་ཧྲེང"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "འཚོལ..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "ཞུན་དག"
@@ -3824,11 +3861,13 @@ shareSelected = "འདེམས་པ་མཉམ་སྤྱོད"
 sharing = "མཉམ་སྤྱོད"
 showAll = "ཚང་མ་སྟོན་དང་།"
 showHistory = "ལོ་རྒྱུས།"
+sortBy = "Sort files"
 sortByDate = "ཚེས་གྲངས་ཀྱིས་དབྱེ་བ།"
 sortByName = "མིང་གིས་དབྱེ་བ།"
 sortBySize = "ཚད་གཞི་ལྟར་དབྱེ་བ།"
 storage = "ཤོང་ཚད"
 storageState = "གསོག་འཇོག"
+storageUsed = "Storage used"
 synced = "མཉམ་བསྒྲིག"
 title = "Upload PDF ཡིག་ཆ།"
 toolChain = "ལག་ཆས་བཀོལ་སྤྱོད་བྱས།"
@@ -3874,8 +3913,12 @@ addFiles = "ཡིག་ཆ་ཁ་སྣོན"
 addingFiles = "ཡིག་ཆ་སྣོན་བཞིན་པ…"
 collapse = "ཟུར་པང་བསྡམས"
 customizeGroups = "ཚོགས་པ་རང་སྒྲིག"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "འགོ་རྩོམ་བྱེད་པར་ཡིག་ཆ་ཁ་ཕྱེ"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "ཟུར་པང་རྒྱས"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive སྒྲིག་འགོད་མ་བྱས"
@@ -3888,15 +3931,17 @@ openFromComputer = "གློག་ཀླད་ནས་ཁ་ཕྱེ"
 openSettings = "སྒྲིག་སྟངས་ཁ་ཕྱེ"
 other = "གཞན"
 recent = "ཉེ་ཆར"
-search = "འཚོལ"
-searchPlaceholder = "ཡིག་ཆ་འཚོལ..."
 viewAll = "{{count}} ཡིག་ཆ་ཚང་མ་ལྟ"
 
 [fileSidebar.fileItem]
 closeViewer = "མཐོང་ཆས་ཁ་རྒྱག"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "མཐོང་ཆས་ནང་ཁ་ཕྱེ"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "ཚང་མ་སྟོན"
 subtitle = "ཡིག་ཆའི་ཟུར་སྟོན་ནང་གི་རིགས་དབྱེ་སྟོན་པའམ་སྦས་པ།"
 title = "ཟུར་སྟོན་རིགས་དབྱེ"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "ལས་གནས་ལ་ཁ་སྣོན"
 addToWorkspaceCount = "{{count}} ལས་གནས་ལ་ཁ་སྣོན"
@@ -3918,7 +3971,6 @@ backToMyFiles = "ངའི་ཡིག་ཆར་ཕྱིར་ལོག"
 breadcrumbs = "སྣོད་ཁུངས་ལམ"
 cancel = "འདོར"
 classification = "རིགས་དབྱེ"
-clearSearch = "འཚོལ་བཤོལ"
 clearSelection = "འདེམས་བཤོལ"
 closeDetails = "ཞིབ་ཕྲ་ཁ་རྒྱག"
 create = "གསར་བཟོ"
@@ -3950,6 +4002,7 @@ downloadAll = "ཚང་མ་ཕབ་ལེན"
 downloadVersion = "པར་གཞི་འདི་ཕབ་ལེན"
 dropOverlay = "ཡིག་ཆ་བཀོག་ནས་ཡར་འཇུག"
 dropOverlaySub = "ཡིག་ཆ་ཚང་མ Local ནས་འགོ་བཙུགས། 'Move to' ཡང་ན 'Save to cloud' བེད་སྤྱོད་ནས་སྣོད་འགེངས་ནང་སྒྲིག་འགོད་བྱེད།"
+duplicate = "Duplicate"
 file = "ཡིག་ཆ"
 fileInfo = "File info"
 fileMenu = "ཡིག་ཆའི་བྱ་བ"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "སྣོད་འགེངས་རྩ་འབྲེལ་
 save = "སྲུངས"
 saveToServer = "སར་བར་ཉར"
 saveToServerDisabledHint = "སར་བར་ལ་ཉར་བ་འདི་སར་བར་འདིར་སྤྱོད་མེད། དོ་དམ་པ་ལ་དབང་སྤྲོད་རོགས།"
-search = "འཚོལ"
-searchPlaceholder = "སྣོད་འགེངས་འདི་དང་ཡན་ལག་སྣོད་འགེངས་ནང་འཚོལ"
 selectAll = "སྤྱིར་འདེམས"
 selectAllHint = "མཐེབ་གནོན་ནས་ཚང་མ་འདེམས། ཕན་བསླབ: Ctrl (ཡང་ན Cmd) བཟུང་ནས་ཡིག་ཆ་རྡོག་རྡོག་སྣོན ཡང་ན Shift བཟུང་ནས་ཁྱབ་ཁོངས་འདེམས།"
 selectedCount = "{{count}} འདེམས་ཟིན"
@@ -4044,6 +4095,10 @@ title = "cloud ཡིག་ཆ་ད་དུང་མེད"
 hint = "ཡར་འཇུག་མ་བྱས་པའི་ཡིག་ཆ་ཚང་མ་འདིར་སྲུངས། ཡིག་ཆ་བཀོག་ནས་ཁ་སྣོན།"
 title = "Local ཙམ་གྱི་ཡིག་ཆ་མེད"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "ཁྱེད་ཀྱིས་ཁ་ཕྱེ་བ་དང་ཞུན་དག་བྱས་པ་ཚང་མ་འདིར་མངོན།"
 title = "ད་དུང་བཟོ་བཅོས་མི་བྱས"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "སྣོད་འགེངས་སུབ་མ་ཐུབ།"
 deleteFolderFailedDetail = "སྣོད་འགེངས་སུབ་མ་ཐུབ: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "སྣོད་འགེངས་ཚོར་སྣང་བསྒྱུར་མ་ཐུབ།"
 folderAppearanceFailedDetail = "སྣོད་འགེངས་ཚོར་སྣང་བསྒྱུར་མ་ཐུབ: {{message}}"
 moveFilesFailed = "ཡིག་ཆ་སྤོ་མ་ཐུབ།"
@@ -4113,6 +4170,11 @@ localHint = "མི་སྣང་ཆས་འདི་ནང་ཙམ་ཉར"
 shared = "མཉམ་སྤྱོད"
 sharedHint = "འབྲེལ་མཐུད་བརྒྱུད་ནས་མཉམ་སྤྱོད"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "དུས་རྙིང་བ་སོང་མ"
 modifiedDesc = "ཉེ་ཆར་སྔོན"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "གསོག་འཇོག་ནང་ཡིག་ཆ
 open = "འབྱེད"
 openFile = "ཁ་ཕྱེ་བའི་ཡིག་ཆ།"
 openFiles = "ཁ་ཕྱེ་བའི་ཡིག་ཆ།"
+selectFile = "Select {{name}}"
 selectFromStorage = "གསོག་འཇོག་ཁང་ནས་འདེམས།"
 upload = "Upན།"
 uploadFile = "Upload ཡིག་ཆ།"
@@ -4241,9 +4304,14 @@ issues = "གྷི་ཊི་ཧབ།"
 
 [formFill]
 allSaved = "ཚང་མ་ཉར་ཚགས་བྱས་ཟིན"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV ཕྱིར་འདོན་མ་ཐུབ"
 extractXlsxError = "XLSX ཕྱིར་འདོན་མ་ཐུབ"
+filled = "filled"
 flattenAfterFilling = "བཀངས་རྗེས་རྡོག་བཟོ"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "དགོས"
 requiredFieldsError = "ངེས་པར་དགོས་པའི་ས་སྒོ་ཚང་མ་སྐོང་རོགས"
 rescanFields = "ས་ཁོངས་བསྐྱར་ཞིབ"
@@ -4795,9 +4863,6 @@ title = "PDF ནས་པར་རིས།"
 [imageToPdf]
 tags = "སྒྱུར་བཅོས། ཨམ་གྷི་,jpg, པར་རིས། པར་རིས།"
 
-[infoBanner]
-dismiss = "འདོར"
-
 [invite]
 acceptError = "རྩིས་ཁྲ་བཟོ་མ་ཐུབ་པ།"
 accountFor = "རྩིས་ཁྲ་བཟོ་རྒྱུ།"
@@ -4979,6 +5044,34 @@ uploadSuccess = "ཡར་འཇུག་ལེགས་འགྲུབ!"
 uploadSuccessMessage = "ཁྱེད་ཀྱི་པར་རིས་སྤོ་ལེན་བྱས་ཟིན།"
 validating = "Session བདེན་བཤད་བཤེར་བཞིན..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "བཤར་འབེབས་བསྣུན་ནས་པར་རིས་ཡར་འཇུག། པར་རིས་ PDF ལ་རང་འགུལ་བརྗེ་སྒྱུར།"
 descriptionNoConvert = "ཁ་པར་ཐབས་འཕྲུལ་ནས་པར་རིས་བསྣུན་ནས་ཡར་འཇུག།"
@@ -4997,8 +5090,13 @@ title = "ཁ་པར་ནས་ཡར་འཇུག"
 tags = "ལག་ཆ་སྣ་མང་། སྣ་མང་བཀོལ་སྤྱོད། UI། སྣུན་དྲུག མདུན་གྱི་མཐའ་མཚམས། འབྲེལ་གཏུག་བྱེད་མཁན།"
 title = "PDF སྣ་མང་ལག་ཆ།"
 
-[navbar]
-search = "བཤེར་འཚོལ"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "བདེན་དཔང་དེ་གྲུབ་འབྲས་ཐོབ་མེད། ཁྱོད་ཀྱིས་སྒེའུ་ཁུང་འདི་ཁ་རྒྱག་ནས་བསྐྱར་དུ་ཚོད་ལྟ་བྱེད་ཐུབ།"
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>Active Files</strong> མཐོང་སྣང་གི
 allTools = "འདི་ནི་<strong>ལག་ཆ</strong> གྱི་སྒྲོམ་གཞི་ཡིན། དེར་ཁྱེད་ཀྱིས་ཡོད་པའི་PDFལག་ཆ་ཚང་མ་ནས་བལྟ་ཐུབ་པ་དང་འདེམས་ཐུབ།"
 close = "ཁ་རྒྱག"
 cropSettings = "ད་ལྟ་ང་ཚོས་ང་ཚོར་སྟོན་ཐོག་དགོས་པའི་ཡིག་ཆ་དེ་འདེམས་སྒྲུག་བྱས་པས་ང་ཚོས་PDFདེ་བསྡུ་རུབ་བྱེད་འདོད་པའི་ས་ཁུལ་དེ་འདེམས་རྒྱུའི་ཆེད་དུ་Cropལག་ཆ་སྒྲིག་བཀོད་བྱེད་ཐུབ།"
+dialogLabel = "Onboarding"
 fileCheckbox = "ཡིག་ཆ་གཅིག་ལ་སྣུན་ན་ལས་སྣོན་ཆེད་དུ་དེ་འདེམས་སྒྲུག་བྱེད། ཁྱེད་ཀྱིས་སྡེ་ཚན་བཀོལ་སྤྱོད་ཀྱི་ཆེད་དུ་ཡིག་ཆ་སྣ་ཚོགས་འདེམས་ཐུབ།"
 fileReplacement = "བསྒྱུར་བཅོས་བྱས་པའི་ཡིག་ཆ་དེས་ལས་ཀའི་སྟེགས་བུའི་ནང་དུ་ཡིག་ཆ་ངོ་མ་དེ་རང་འགུལ་གྱིས་ཚབ་བྱེད་པ་དང་།"
 filesButton = "མགྱོགས་མྱུར་འཛུལ་སྤྱོད་ཕྲ་རིང་སྟེང་གི་ <strong>ཡིག་ཆ་</strong> མཐེབ་གཞོང་གིས་ཁྱེད་ལ་ལག་ཆ་བཀོལ་སྤྱོད་བྱེད་པར་PDFs ཡར་བསྐུར་ཐུབ།"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF ནས་PDF/A"
 tags = "ཡིག་ཚགས། ཡུན་རིང་ཚད་ལྡན་དང་། བསྒྱུར་བཅོས། དངོས་ཟོག་སྲུང་སྐྱོབ། སྲུང་སྐྱོབ།"
 title = "PDF ནས་PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "པར་འདེབས,ཚད་ལྡན,བརྗེ་སྤོ,བཟོ་ལས,པར་སྔོན་འགྲིལ,མཛོད་སྣོད"
 title = "PDF ལས་ PDF/X ལ་བརྗེ་བ"
@@ -6045,6 +6151,7 @@ small = "བཀོལ་གྲངས 500"
 xsmall = "བཀོལ་གྲངས 100"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "ཁྱེད་རང་གི་དགོས་མཁོ་དང་འཚམ་པའི་འཆར་གཞི་འདེམས།"
 title = "འཆར་གཞི།"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "ཟླ་རེའི་འགྲོ་གྲོན་ཚད་
 title = "Stripe སྒོ་མོ་ཁ་ཕྱེ་མ་ཐུབ་"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "རིན་མེད PDFs {{allowance}} ནས་སྤྱད་པ་"
 capSuffix_other = "རིན་མེད PDFs {{allowance}} ནས་སྤྱད་པ་"
 eyebrow = "སྒྲིག་གཅོད་ཆས་ཚོད་སྤྱོད་"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "སྲིད་ཇུས་འཁོར་སྐབས་ཡིག་ཆ་ཞིག་ཡང་ན་བརྡ་ཐོ་ཞིག་གློག་འཕྲིན་གྱིས་སྐུར།"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ Nextcloud ནང་ཉར།"
@@ -7077,11 +7211,6 @@ title = "དངོས་གཞི SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
-[portal.docs.search]
-empty = "མཐུན་པའི docs མེད"
-placeholder = "Docs འཚོལ"
-results = "{{count}} གྲུབ་འབྲས"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "ཁྱེད་ཀྱི agent གིས་ལག་ཆ་གཅིག་ལྟར་འབོད་སྤྱོད་བྱེད་པའི་མཉམ་སྒྲིལ་དང་མིང་ཅན་ནུས་པ། skill རེ་རེ་ནི evals མཐུད་པའི་གཏན་འཁེལ་ཅན op chain ཡིན།"
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "ཡིག་ཆ་གང་ཡང་འཚག་ཆས་འདི་དང་མི་མཐུན།"
 rowActions = "ཕྲེང་བྱ་སྤྱོད"
 sensitiveLabel = "ཚོར་སླ"
-sensitiveTitle = "ཚོར་སླ — ཐོབ་དབང་དགོས"
 
 [portal.documents.table.columns]
 action = "Pipeline / བྱ་སྤྱོད"
 document = "ཡིག་ཆ"
+labels = "Labels"
 product = "ཐོན་རྫས"
 status = "གནས་ཚུལ"
 time = "དུས་ཚོད"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "མཐའ་མར་མཐོང་བ"
 region = "ས་ཁུལ"
 status = "གནས་ཚུལ"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "མཐོང་ངོས་འདིར་མ་བསམ་པ
 retry = "ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས"
 title = "ཤོག་ངོས་འདིར་གནད་དོན་ཞིག་བྱུང་།"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "ཕྱིར་ལོག"
 body = "ཅོག་ངོས་ཉེར་སྤྱོད་ཕབ་ལེན་བྱོས། ཡང་ན server རང་གིས་གནས་སྡོད་བྱོས།"
@@ -7380,11 +7560,6 @@ cancel = "དོར་བ"
 confirm = "ལྡེ་མིག་ཕྱིར་འཐེན"
 title = "API ལྡེ་མིག་ཕྱིར་འཐེན"
 
-[portal.infrastructure.attestationLabel]
-attested = "དཔང་འདོན་བྱས་པ"
-inScope = "ཁྱབ་ཁོངས་ནང"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "རིགས་དབྱེ་ལྟར་ཞིབ་བཤེར་དོན་རྐྱེན་འཚག་བྱོས"
 heading = "ཞིབ་བཤེར་ཉིན་ཐོ"
@@ -7456,11 +7631,6 @@ info = "ཆ་འཕྲིན"
 success = "ལེགས་གྲུབ"
 warning = "ཉེན་བརྡ"
 
-[portal.infrastructure.certLabel]
-certified = "ལག་ཁྱེར་ཐོབ་པ"
-inProgress = "ལས་སྒྲུབ་བཞིན"
-notStarted = "འགོ་བཙུགས་མེད་པ"
-
 [portal.infrastructure.createKey]
 cancel = "དོར་བ"
 createKey = "ལྡེ་མིག་གསར་སྐྲུན"
@@ -7474,238 +7644,10 @@ subtitleCreated = "ད་ལྟ་གསང་བ་འདི་འདྲ་བ
 title = "API ལྡེ་མིག་གསར་སྐྲུན"
 titleCreated = "ལྡེ་མིག་གསར་སྐྲུན་ཟིན་པ"
 
-[portal.infrastructure.deployLabel]
-live = "ད་ལྟ་འཁོར་སྐྱོད"
-queued = "གྲལ་དུ་བསྒུགས་པ"
-rolledBack = "ཕྱིར་ལོག་བྱས་པ"
-rolling = "ཁྱབ་སྤེལ་བྱེད་བཞིན་པ"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "བཀོད་སྤྱོད་བྱེད་མཁན"
-environment = "ཁོར་ཡུག"
-product = "ཐོན་རྫས"
-status = "གནས་ཚུལ"
-version = "པར་གཞི"
-when = "དུས་ཚོད"
-
-[portal.infrastructure.deployments.recent]
-heading = "ཉེ་ཆར་གྱི་བཀོད་སྤྱོད"
-subheading = "ཐོན་རྫས་དང་ཁོར་ཡུག་ཁག་གི་ཁྱབ་སྤེལ་གསར་ཤོས།"
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "དཔེ་ཚན"
-latency = "འགོར་འགྱངས"
-load = "ཁུར་པོ"
-p99 = "P99"
-region = "ས་ཁུལ"
-status = "གནས་ཚུལ"
-throughput = "ཐོན་ཚད"
-uptime = "འཁོར་སྐྱོད་དུས་ཡུན"
-version = "པར་གཞི"
-
-[portal.infrastructure.deployments.regions]
-heading = "ས་ཁུལ"
-subheading = "བཀོད་སྤྱོད་ཟིན་པའི Stirling ས་ཁུལ་རེ་རེའི་དངོས་སྐབས་བདེ་ཐང་ — འགོར་འགྱངས། ཁུར་པོ། ཁྱབ་སྤེལ་པར་གཞི།"
-
-[portal.infrastructure.deployments.regions.empty]
-description = "ཁྱེད་ཀྱི་ལས་ས་མཁོ་སྒྲུབ་ཟིན་རྗེས། བཀོད་སྤྱོད་ཟིན་པའི་ས་ཁུལ་འདིར་མངོན་ཡོང་།"
-title = "ས་ཁུལ་གང་ཡང་བཀོད་སྤྱོད་བྱས་མེད"
-
 [portal.infrastructure.keyLabel]
 active = "ཤུགས་ལྡན"
 revoked = "ཕྱིར་འཐེན་བྱས་པ"
 
-[portal.infrastructure.modelLabel]
-active = "ཤུགས་ལྡན"
-degraded = "ཉམས་པ"
-disabled = "ནུས་མེད"
-
-[portal.infrastructure.models]
-heading = "མོ་ཌེལ"
-msValue = "{{value}} ms"
-subheading = "ཁྱེད་ཀྱི་ལས་ས་ཡོངས་སུ་ཡིག་ཆ་ལས་སྣོན་ལ་ནུས་ཤུགས་སྤྲོད་པའི་མོ་ཌེལ་དཀར་ཆག་དང་ལམ་སྟོན།"
-
-[portal.infrastructure.models.byom]
-description = "ས་གནས་ནང་གི་ཡང་ན་རང་སྐྱོང་གི་མོ་ཌེལ་ཞིག་ཐོ་འགོད་བྱས་ནས། གཞི་གྲངས་གནས་སྡོད་ཚད་བཀག་ལྡན་པའི་ལས་སྣོན་ཆེད་ས་ཁུལ་ཞིག་ལ་གཏན་འཛིན་བྱོས།"
-title = "རང་གི་མོ་ཌེལ་འཁྱེར་ཡོང་"
-
-[portal.infrastructure.models.catalogue]
-heading = "དཀར་ཆག"
-sub = "དངོས་སྐབས་འགོར་འགྱངས་དང་རིན་གོང་ལྡན་པའི། ཁྱེད་ཀྱི་ལས་ས་ལ་སྤྱོད་རུང་བའི་དོ་དམ་མོ་ཌེལ།"
-subEnterprise = "དོ་དམ་མོ་ཌེལ། རང་གི་མོ་ཌེལ། ས་གནས་ནང་གི་མོ་ཌེལ་ — ས་ཁུལ་རེ་རེར་གཏན་འཛིན་བྱེད་ནུས་ལྡན།"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "ཁྱེད་ཀྱི་ལས་སའི་དཀར་ཆག་ནང་གི་མོ་ཌེལ་འདིར་མངོན་ཡོང་།"
-title = "མོ་ཌེལ་སྤྱོད་རུང་གང་ཡང་མེད"
-
-[portal.infrastructure.models.columns]
-cost = "རིན་གོང"
-latency = "འགོར་འགྱངས"
-load = "ཁུར་པོ"
-model = "མོ་ཌེལ"
-status = "གནས་ཚུལ"
-type = "རིགས"
-version = "པར་གཞི"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/འབོད་ཐེངས"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "ཤུགས་ལྡན་མོ་ཌེལ"
-avgLatency = "ཆ་སྙོམས་འགོར་འགྱངས"
-included = "ཚུད་པ"
-monthlySpend = "ཟླ་རེའི་མོ་ཌེལ་འགྲོ་སོང་"
-
-[portal.infrastructure.models.routing]
-empty = "ལམ་སྟོན་སྒྲིག་སྲོལ་གང་ཡང་སྒྲིག་མེད།"
-heading = "ལམ་སྟོན་སྒྲིག་སྲོལ"
-sub = "བཀོལ་སྤྱོད་རེ་རེ་གང་གིས་མོ་ཌེལ་གང་སྤྱོད་པ། སྔོན་སྒྲིག་ནི་དེ་ལས་ཞིབ་ཚགས་པའི་སྒྲིག་སྲོལ་མ་འཚམས་སྐབས་སྤྱོད།"
-subLocked = "བཀོལ་སྤྱོད་རྣམས་མོ་ཌེལ་ངེས་ཅན་ལ་ལམ་སྟོན་བྱོས — རིན་སྤྲོད་འཆར་གཞི་ཐོག་སྤྱོད་རུང་།"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Pro ལ་རིམ་སྤར་བྱས་ནས་བཀོལ་སྤྱོད་དང་ཡིག་ཆའི་རིགས་རེ་རེ་གང་གིས་མོ་ཌེལ་གང་སྤྱོད་པ་ཚོད་འཛིན་བྱོས།"
-title = "མོ་ཌེལ་ལམ་སྟོན་ནི་རིན་སྤྲོད་ཁྱད་ཆོས་ཡིན"
-
-[portal.infrastructure.models.routingColumns]
-default = "སྔོན་སྒྲིག"
-docType = "ཡིག་ཆའི་རིགས"
-modelForAria = "{{operation}} ཆེད་ཀྱི་མོ་ཌེལ"
-operation = "བཀོལ་སྤྱོད"
-routedTo = "ལམ་སྟོན་བྱས་ཡུལ"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "དབྱེ་སྒྲིག"
-extraction = "འདོན་ལེན"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "ཉམས་པ"
-down = "འཁོར་སྐྱོད་མེད་པ"
-healthy = "བདེ་ཐང"
-
-[portal.infrastructure.security.access.byok]
-description = "རང་གི KMS ནས་ལྡེ་མིག་ཞིག་མཁོ་འདོན་བྱོས། Stirling གིས་དེས་གསང་སྡོམ་བྱེད་ཀྱང་ད་དུང་ཀློག་ཐུབ།"
-label = "རང་གི་ལྡེ་མིག་འཁྱེར་ཡོང་ (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "ལྡེ་མིག་རྣམས་ཁྱེད་ཀྱི KMS ནས་ནམ་ཡང་མི་ཐོན། Stirling གིས་གསང་ཡིག་ཁོ་ན་ཉར།"
-label = "རང་གི་ལྡེ་མིག་རང་ཉར་ (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling གིས་གསང་སྡོམ་ལྡེ་མིག་དོ་དམ་བྱེད། སྟབས་བདེ་ཤོས་ — ཁྱེད་ཕྱོགས་ནས་ལྡེ་མིག་ལས་སྒོ་གང་ཡང་མེད།"
-label = "Stirling གིས་ཉར་བའི་ལྡེ་མིག"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "ཡིག་ཆའི་འཛུལ་སྤྱོད་སྲིད་ཇུས"
-subheading = "འཇགས་གནས་སྐབས་སུ་ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་སུས་གསང་འགྲོལ་བྱེད་ཐུབ་པ་ཚོད་འཛིན་བྱེད།"
-
-[portal.infrastructure.security.attestations]
-heading = "མཐུན་སྒྲིག་དཔང་འཛིན"
-noReport = "སྙན་ཐོ་སྤྱོད་རུང་མེད"
-subheading = "སྒྲོམ་གཞི་རེ་རེའི་ཞིབ་བཤེར་གནས་བབ། དཔང་འཛིན་ཟིན་པའི་ཚོད་འཛིན་ཐོག་སྙན་ཐོ་སྤྱོད་རུང་།"
-viewReport = "སྙན་ཐོ་ལྟ་བ →"
-
-[portal.infrastructure.security.compliance]
-heading = "མཐུན་སྒྲིག"
-subheading = "Stirling སྟེགས་བུར་ཁྱབ་པའི་དཔང་འཛིན་དང་ལག་ཁྱེར།"
-
-[portal.infrastructure.security.empty]
-description = "ཁྱེད་ཀྱི་ལས་སའི་བདེ་འཇགས་སྒྲིག་བཀོད་འདིར་མངོན་ཡོང་།"
-title = "བདེ་འཇགས་གནས་བབ་སྤྱོད་རུང་མེད"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK སྤྱད་ན། གསང་སྡོམ་ལྡེ་མིག་རྣམས་ཁྱེད་ཀྱི KMS ནས་ནམ་ཡང་མི་ཐོན། Stirling གིས་ཁྱེད་ཀྱིས་དུས་ནམ་ཡང་ཕྱིར་འཐེན་བྱེད་ཐུབ་པའི་གསང་ཡིག་ཁོ་ན་ཉར་ཞིང་ལས་སྣོན་བྱེད།"
-title = "Stirling གིས་ཁྱེད་ཀྱི་ཡིག་ཆ་གསང་འགྲོལ་བྱེད་མི་ཐུབ"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "IP ཁྱབ་ཁོངས་གང་ཡང་སྒྲིག་མེད་ — IP ཚང་མ་ཆོག"
-heading = "IP ཆོག་ཐོ"
-sub = "API འཛུལ་སྤྱོད་ནི CIDR ཁྱབ་ཁོངས་འདི་དག་ལ་ཚད་བཀག་བྱས་ཡོད།"
-subLocked = "ངོ་ཤེས་པའི IP ཁྱབ་ཁོངས་ལ API འཛུལ་སྤྱོད་ཚད་བཀག་བྱོས — རིན་སྤྲོད་འཆར་གཞི་ཐོག་སྤྱོད་རུང་།"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Pro ལ་རིམ་སྤར་བྱས་ནས API འཛུལ་སྤྱོད་དྲ་རྒྱ་ངེས་ཅན་ལ་ཚད་བཀག་བྱོས།"
-title = "IP ཆོག་ཐོ་ནི་རིན་སྤྲོད་ཁྱད་ཆོས་ཡིན"
-
-[portal.infrastructure.security.ipColumns]
-added = "ཁ་སྣོན་བྱས་པ"
-addedBy = "ཁ་སྣོན་བྱེད་མཁན"
-cidr = "CIDR"
-label = "མཚོན་རྟགས"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "རྩིས་ཐབས"
-heading = "གསང་སྡོམ་ལྡེ་མིག་དོ་དམ"
-keyId = "ལྡེ་མིག་ངོས་འཛིན་རྟགས"
-lastRotated = "མཐའ་མར་བསྐོར་བ"
-rotateKey = "ལྡེ་མིག་བསྐོར་སྤོར"
-rotationPolicy = "བསྐོར་སྤོར་སྲིད་ཇུས"
-subheading = "འཇགས་གནས་སྐབས་ཡིག་ཆ་གསང་སྡོམ་བྱེད་པའི་ལྡེ་མིག་གི་ཉར་དབང་ — སུས་གསང་འགྲོལ་བྱེད་ཐུབ་པ་དང་། ལྡེ་མིག་ཇི་ལྟར་བསྐོར་སྤོར་བྱེད་པ།"
-
-[portal.infrastructure.security.managedBanner]
-description = "རང་གི་ལྡེ་མིག་འཁྱེར་ཡོང་ (BYOK) དང་རང་གི་ལྡེ་མིག་རང་ཉར་ (HYOK) ཉར་དབང་ནི Enterprise ཐོག་སྤྱོད་རུང་། རང་གི KMS ནས་ལྡེ་མིག་མཁོ་འདོན་བྱེད་ཆེད་རིམ་སྤར་བྱོས།"
-title = "ཁྱེད་ཀྱི་འཆར་གཞི་ཐོག་ལྡེ་མིག་རྣམས Stirling གིས་དོ་དམ་བྱེད།"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "ཨེ་ཤེ་ཡ་པ་སི་ཕིག"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR གཞི་གྲངས་མཚམས་མངའ"
-label = "ཡོ་རོབ་མཉམ་འབྲེལ"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "ཨ་རི"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "གཞི་གྲངས་གནས་སྡོད"
-subheading = "ཡིག་ཆ་གང་དུ་ཉར་བ་དང་ལས་སྣོན་བྱེད་པ།"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} སྤྱད་པ"
-
-[portal.infrastructure.storage.empty]
-description = "མཐུད་ཟིན་པའི་ཉར་མཛོད་དང་སྤྱོད་ཚད་འདིར་མངོན་ཡོང་།"
-title = "ཉར་མཛོད་གང་ཡང་སྒྲིག་མེད"
-
-[portal.infrastructure.storage.lifecycle]
-active = "ཤུགས་ལྡན"
-activeRange = "0–{{value}}d"
-archived = "ཡིག་ཚགས་སུ་ཉར་བ"
-coldStorage = "གྲང་ཉར"
-deleted = "སུབ་ཟིན་པ"
-never = "ནམ་ཡང་མིན"
-purged = "གཙང་སེལ་བྱས་པ"
-
-[portal.infrastructure.storage.providers]
-connect = "མཐུད་པ"
-connected = "མཐུད་ཟིན་པ"
-heading = "མཐུད་ཟིན་པའི་མཁོ་འདོན་པ"
-subheading = "ལས་སྣོན་བྱས་པའི་འབྲས་ཆས་འབྲི་ས།"
-
-[portal.infrastructure.storage.retention]
-heading = "ཉར་འཇོག"
-subheading = "འཚོ་རིམ་སུབ་པའི་སྔོན་ལ་འབྲས་ཆས་དུས་ཡུན་ག་ཚོད་ཉར་བ།"
-windowLabel = "སྔོན་སྒྲིག་ཉར་འཇོག་དུས་ཡུན"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} ཉིན"
-days_other = "{{count}} ཉིན"
-never = "ནམ་ཡང་མ་སུབ"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "བེད་སྤྱོད་ཁྱོན་བསྡོམས"
-progressLabel = "སྤྱད་ཟིན་པའི་གསོག་ཉར"
-subheading = "འབྲེལ་མཐུད་བྱས་པའི་མཁོ་སྤྲོད་པ་ཚང་མའི་ནང་སྤྱད་པའི་གསོག་ཉར།"
-
 [portal.infrastructure.tabs]
 apiKeys = "API ལྡེ་མིག"
 audit = "རྩིས་བཤེར་ཉིན་ཐོ"
@@ -7715,11 +7657,9 @@ security = "བདེ་འཇགས"
 storage = "གསོག་ཉར"
 
 [portal.integrations]
-addAnother = "གཞན་ཞིག་ཁ་སྣོན"
 availableHeading = "སྤྱོད་རུང"
 comingSoonHeading = "མི་འགྱངས་པར་འཐོན་རྒྱུ"
 connect = "འབྲེལ་མཐུད"
-connectedHeading = "འབྲེལ་མཐུད་ཟིན"
 connectionCount_one = "{{count}} འབྲེལ་མཐུད"
 connectionCount_other = "{{count}} འབྲེལ་མཐུད"
 customApi = "རང་སྒྲིག API"
@@ -7737,6 +7677,10 @@ security = "བདེ་འཇགས"
 signing = "མིང་རྟགས་འགོད་པ"
 storage = "གསོག་ཉར"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "འབྲེལ་མཐུད་ཟིན"
 
@@ -7767,7 +7711,6 @@ integrations = "མཉམ་འདྲེས"
 pipelines = "ལས་རིམ་རྒྱུན"
 policies = "སྲིད་ཇུས"
 procurement = "ཉོ་སྒྲུབ"
-settings = "སྒྲིག་འགོད"
 sources = "ཁུངས"
 usage = "བེད་སྤྱོད་དང་རྩིས་འབོར"
 users = "སྤྱོད་མཁན"
@@ -7784,7 +7727,7 @@ title = "ལས་རིམ་རྒྱུན"
 newPipeline = "ལས་རིམ་རྒྱུན་གསར་པ"
 
 [portal.pipelines.builder]
-addStep = "ལག་ཆ་ཁ་སྣོན"
+activate = "Activate"
 back = "ལས་རིམ་རྒྱུན་ལ་ཕྱིར་ལོག"
 cannotFollow = "{{produced}} ལེན་མི་ཐུབ"
 chooseAccount = "རྩིས་ཐོ་ཞིག་འདེམས"
@@ -7792,28 +7735,38 @@ chooseDestination = "དམིགས་ས་ཞིག་འདེམས"
 chooseOperation = "གོམ་པ་འདིས་ཅི་བྱེད་འདེམས"
 chooseSource = "ཁུངས་ཤིག་འདེམས"
 discard = "འགྱུར་བ་དོར"
-enabled = "ནུས་སྤེལ་ཟིན"
 inputs = "ནང་འཇུག"
 inputSource = "ནང་འཇུག་ཁུངས"
 inputTrigger = "སྐུལ་རྐྱེན"
 keepEditing = "རྩོམ་སྒྲིག་མུ་མཐུད"
+moreActions = "More actions"
 needsConfiguring = "སྒྲིག་སྦྱོར་དགོས"
-needsUpload = "ཡར་སྤྲོད་བྱས་པའི་ཡིག་ཆ་དགོས"
-noSources = "ད་དུང་ཁུངས་གང་ཡང་འབྲེལ་མཐུད་མ་བྱས། དེ་ནང་འཇུག་ལ་སྤྱོད་ཕྱིར་གཅིག་བཟོས།"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "ཁྱེད་ཀྱི་འཚོལ་བཤེར་དང་མཐུན་པའི་ལག་ཆ་མེད།"
-pipelineSettings = "ལས་རིམ་རྒྱུན་སྒྲིག་འགོད"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "ལག་ཆ་འཚོལ"
-selectToolBody = "ཁྱེད་ཀྱི་ལས་རིམ་རྒྱུན་བཟོ་ཕྱིར་ལག་ཆ་ཞིག་ཁ་སྣོན།"
-selectToolTitle = "ད་དུང་ལག་ཆ་མེད"
 sendToSystem = "མ་ལག་གཞན་ཞིག་ལ་སྐུར"
 stepsIncompatible = "གོམ་པ་འདི་དག་དེའི་གོམ་པ་སྔོན་མས་བཟོས་པའི་ཐོན་འབྲས་སྟེང་འཁོར་མི་ཐུབ། {{tools}}"
 stepsNeedSetup = "གོམ་པ་འདི་དག་ཉར་ཚགས་མ་བྱས་གོང་ད་དུང་སྒྲིག་སྦྱོར་དགོས། {{tools}}"
-toolSettings = "ལག་ཆ་སྒྲིག་འགོད"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "ངོས་འཛིན་མ་ཐུབ་པའི་བཀོལ་སྤྱོད། རང་འཇགས་ཉར་ཡོད།"
 unsavedBody = "ཁྱེད་ལ་ཉར་ཚགས་མ་བྱས་པའི་འགྱུར་བ་ཡོད། ཕྱིར་མ་ཐོན་གོང་དེ་དག་ཉར་ཚགས་བྱེད་དམ། ཡང་ན་དོར་རམ།"
 unsavedTitle = "ཉར་ཚགས་མ་བྱས་པའི་འགྱུར་བ"
-uploadUnsupported = "ལས་རིམ་རྒྱུན་ནང་ད་དུང་ཡར་སྤྲོད་བྱས་པའི་ཡིག་ཆ་རྒྱབ་སྐྱོར་མེད་པས། གོམ་པ་འདི་དག་ཉར་ཚགས་བྱེད་མི་ཐུབ། {{tools}}"
 usesDefaults = "སྔོན་སྒྲིག་སྒྲིག་འགོད་ཀྱིས་འཁོར"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "གོམ་པ་སྔོན་མ་ནས་ཡིག་ཆ་ཚང་མ་ཟླ་སྒྲིལ་བྱེད"
@@ -7825,31 +7778,36 @@ undeclared-operation = "གོམ་པ་འདིས་གང་ལེན་
 
 [portal.pipelines.composer]
 addTool = "ལག་ཆ་ཁ་སྣོན"
-cancel = "དོར"
-chainEmpty = "ཁྱེད་ཀྱི་ལས་རིམ་རྒྱུན་བཟོ་འགོ་ཚུགས་ཕྱིར་ལག་ཆ་ཞིག་ཁ་སྣོན།"
 create = "ལས་རིམ་རྒྱུན་བཟོ"
+createPaused = "Create paused"
 editingUnsupported = "རྩོམ་སྒྲིག་ཆེད་ལག་ཆ་འདི་དག་གི་ཞུགས་གྲངས་སྟོན་པ་ད་དུང་རྒྱབ་སྐྱོར་མེད།"
-moveDown = "མར་སྤོ"
-moveUp = "ཡར་སྤོ"
+editSource = "Edit source"
 name = "མིང"
 namePlaceholder = "དཔེར་ན། ནག་སུབ་བཤེར་བ"
 noToolSettings = "ལག་ཆ་འདིར་སྒྲིག་སྦྱོར་བྱ་རུང་གི་སྒྲིག་འགོད་མེད།"
-operations_one = "བཀོལ་སྤྱོད ({{count}})"
-operations_other = "བཀོལ་སྤྱོད ({{count}})"
 output = "དམིགས་ས"
-removeStep = "བཀོལ་སྤྱོད་སུབ"
 save = "འགྱུར་བ་ཉར་ཚགས"
 scheduleEvery = "འཁོར་ཚད"
-sources = "ཁུངས"
-sourcesLoading = "ཁུངས་འཇུག་བཞིན..."
 trigger = "སྐུལ་རྐྱེན"
 triggerManual = "ལག་བཟོ་ཁོ་ན"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "ཉིན"
 hours = "ཆུ་ཚོད"
 minutes = "སྐར་མ"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" སུབ་བམ། འདི་ཕྱིར་ལྡོག་བྱེད་མི་ཐུབ།"
 cancel = "དོར"
@@ -7867,6 +7825,37 @@ connectSource = "ཁུངས་ཤིག་འབྲེལ་མཐུད"
 description = "ཁྱེད་ཀྱི་ལས་རིམ་རྒྱུན་དང་པོ་བཟོ། དེ་འཁོར་སའི་ཁུངས་འདེམས། བཀོལ་སྤྱོད་ཕྲེང་བར་སྦྲེལ། དེ་ནས་ཐོན་འབྲས་གང་དུ་འགྲོ་བ་འདེམས།"
 title = "ད་དུང་ལས་རིམ་རྒྱུན་མེད"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "འཁོར་བཞིན"
 paused = "མཚམས་བཞག"
@@ -7879,7 +7868,6 @@ completed_one = "འཁོར་བ་ལེགས་གྲུབ།"
 completed_other = "འཁོར་བ་{{count}} ཚང་མ་ལེགས་གྲུབ།"
 empty = "འཁོར་རྒྱུ་མེད། ཁུངས་ནང་སྒྲིག་གཅོད་བྱ་རྒྱུའི་ཡིག་ཆ་མེད།"
 failed = "འཁོར་བ་ཕམ་སོང་། {{error}}"
-historyCleared = "ལོ་རྒྱུས་གཙང་སེལ་བྱས་ཟིན། འཁོར་ཐེངས་རྗེས་མས་ད་ལྟ་ཁུངས་ནང་ཡོད་པ་ཚང་མ་ཡང་བསྐྱར་སྒྲིག་གཅོད་བྱེད།"
 inFlight = "འཁོར་རྒྱུ་གསར་པ་མེད། སྔོན་གྱི་འཁོར་ཐེངས་ཤིག་ནས་ཡིག་ཆ་ད་དུང་སྒྲིག་གཅོད་བྱེད་བཞིན་ཡོད།"
 parked_one = "འཁོར་རྒྱུ་མེད། ཡིག་ཆ་{{count}} སྔོན་མར་ཕམ་སོང་ནས་ཟུར་དུ་བཞག་ཡོད། རྒྱུ་རྐྱེན་བཅོས་རྗེས། ཡང་བསྐྱར་ཚོད་ལྟ་བྱ་ཕྱིར་ལོ་རྒྱུས་གཙང་སེལ་བྱོས།"
 parked_other = "འཁོར་རྒྱུ་མེད། ཡིག་ཆ་{{count}} སྔོན་མར་ཕམ་སོང་ནས་ཟུར་དུ་བཞག་ཡོད། རྒྱུ་རྐྱེན་བཅོས་རྗེས། ཡང་བསྐྱར་ཚོད་ལྟ་བྱ་ཕྱིར་ལོ་རྒྱུས་གཙང་སེལ་བྱོས།"
@@ -7895,6 +7883,7 @@ name = "ལས་རིམ་རྒྱུན"
 sources = "ཁུངས"
 status = "གནས་ཚུལ"
 steps = "གོམ་པ"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "ཡིག་ཁུག་ལྟ་སྲུང"
@@ -8209,6 +8198,24 @@ label = "Jira དོན་ཚན་ཞིག་ལ་སྦྱར"
 description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ཟུར་སྦྱར་ལྟར་སྐུར།"
 label = "ཡིག་ཆ email སྐུར (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "ལས་སྣོན་བྱས་པའི་ཡིག་ཆ་ཡིག་ཁུག་ཞིག་ནང་འབྲི།"
 label = "Nextcloud ལ་ཡར་འཇུག"
@@ -8683,16 +8690,6 @@ maxed = "མཐོ་ཚད་ལ་སླེབས"
 subtitle = "ཁྱེད་ཀྱི་རིན་མེད་ཚོད་སྤྱོད {{date}} བར་འགྲོ སྤྱོད་བྱང་མི་དགོས།"
 title = "ཁེ་ལས་ཚོད་སྤྱོད"
 
-[portal.search]
-ariaLabel = "འཚོལ"
-placeholder = "Stirling ནང་འཚོལ — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "མགྱོགས་བྱ་སྤྱོད་ཆོག་པ་ཆགས་སྐབས་འདིར་མངོན་ཡོང་།"
-noActionsTitle = "མགྱོགས་བྱ་མེད"
-noMatches = "\"{{query}}\" ལ་མཐུན་པ་མེད"
-noMatchesDescription = "ལྡེ་ཚིག་གཞན་ཞིག་ཚོད་ལྟ་བྱོས་སམ་དཀར་ཆག་ལ་ལྟོས།"
-
 [portal.settings.groups]
 admin = "དོ་དམ་པ"
 
@@ -8743,10 +8740,6 @@ cancel = "འདོར"
 confirm = "སུབ"
 title = "ཁུངས་སུབ་བམ།"
 
-[portal.sources.empty]
-description = "ཁྱེད་ཀྱི་སྲིད་ཇུས་ལ་གཞི་གྲངས་འཐེན་ས་ཡོད་པའི་ཆེད་ཉར་ཚགས་གནས་ཤིག་འབྲེལ་མཐུད་བྱོས།"
-title = "ད་དུང་ཁུངས་འབྲེལ་མཐུད་བྱས་མེད"
-
 [portal.sources.kpi]
 inUse = "སྤྱོད་བཞིན"
 total = "འབྲེལ་མཐུད"
@@ -8785,6 +8778,7 @@ unused = "སྤྱོད་མེད"
 documents = "ཡིག་ཆ"
 source = "ཁུངས"
 status = "གནས་ཚུལ"
+type = "Type"
 usedBy = "སྲིད་ཇུས"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "སྲིད་ཇུས་དང་གསང་བ།"
 [settings.preferences]
 title = "འདོད་པ།"
 
-[settings.search]
-placeholder = "སྒྲིག་འགོད་ཤོག་ངོས་འཚོལ..."
-
 [settings.security]
 description = "ཁྱེད་རང་གི་རྩིས་ཁྲ་དེ་བདེ་འཇགས་ཡོང་བའི་ཆེད་དུ་གསང་གྲངས་གསར་བརྗེ་བྱེད་དགོས།"
 title = "ཉེན་སྲུང"
@@ -10128,6 +10119,7 @@ last = "ཤོག་ངོས་མཐའ་མ།"
 maintainRatio = "འགྱུར་ལྡོག་རྒྱུན་འཛིན་གྱི་ཆ་སྙོམས།"
 next = "ཤོག་ངོས་རྗེས་མ།"
 noSavedSigs = "ཉར་ཚགས་བྱས་པའི་མཚན་རྟགས་རྙེད་མེད།"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "མི་སྒེར་གྱི་མཚན་རྟགས།"
 previous = "ཤོག་ངོས་གོང་མ།"
 redo = "བསྐྱར་དུ་བྱེད།"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "རྒྱབ་ལྗོངས་མེད་པ
 hint = "ཁྱེད་རང་གི་མིང་རྟགས་བཀོད་པའི་PNG ཡང་ན་JPG པར་རིས་ཤིག་བླངས།"
 label = "Upload མཚན་རྟགས་པར་རིས།"
 placeholder = "པར་རིས་ཡིག་ཆ་འདེམས།"
+previewAlt = "Current image signature"
 processing = "ལས་སྣོན་པར་རིས་..."
 removeBackground = "རྒྱབ་ཤ་དཀར་པོའི་རྒྱབ་ལྗོངས་མེད་པར་བཟོས།"
 
@@ -10179,6 +10172,17 @@ saved = "གོང་དུ་ཉར་ཚགས་བྱས་པའི་མ
 text = "གོང་དུ་ཁྱེད་ཀྱི་མིང་བླུགས་རྗེས་PDFསྟེང་གང་དུ་ཡང་སྣུན་ནས་མིང་རྟགས་བཀོད་དགོས།"
 title = "མཚན་རྟགས་ཁ་སྣོན་བྱེད་ཐབས།"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "སྒུལ་བདེའི་མཚན་རྟགས།"
 pause = "བར་མཚམས་བཞག་པ།"
@@ -10625,6 +10629,23 @@ title = "སར་བར་ལ་ཡར་བསྐུར།"
 updateButton = "སར་བར་ནང་གསར་སྒྱུར།"
 uploadButton = "སར་བར་ལ་ཡར་བསྐུར།"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "ཕྱིར་ལོག"
 pdfTools = "PDF ལག་ཆ།"
 placeholder = "འགོ་འཛུགས་བྱེད་པའི་ལག་ཆ་ཞིག་འདེམས།"
 premiumFeature = "གོང་ཚད་མཐོ་བའི་ཁྱད་ཆོས།"
-searchTools = "ལག་ཆ་འཚོལ།"
 toolsHeader = "ལག་ཆས"
 viewAllTools = "ལག་ཆས་ཡོངས་ལྟ"
 
@@ -10822,6 +10842,9 @@ removal = "བཏོན་པ།"
 signing = "མིང་རྟགས་བཀོད་པ།"
 verification = "བདེན་དཔང་།"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "ལག་ཆ་གང་ཡང་མཐོང་མ་བྱུང་།"
 noTools = "ལག་ཆ་མེད་པ།"
@@ -10979,6 +11002,13 @@ approver = "སྲིད་ཇུས་ཆོག་མཆན་སྤྲོད
 editor = "རྩོམ་སྒྲིག་པ།"
 processor = "ལས་སྣོན་པ།"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}} ལ་བསྐུར་བའི་གདན་ཞུ་མེད་པར་བཟོ་དགོས་སམ། ཁོང་ཚོས་ད་ལྟའི་སྦྲེལ་ཐག་སྤྱད་ནས་ཞུགས་མི་ཐུབ།"
 cancelInviteTitle = "གདན་ཞུ་མེད་པར་བཟོ།"
@@ -10998,10 +11028,8 @@ title = "ད་དུང་ཁོངས་མི་མེད།"
 addToTeam = "ཚོགས་ཆུང་ལ་སྣོན།"
 guestCount = "མགྲོན་པོ་{{count}}"
 guests = "མགྲོན་པོ།"
-guestsDesc = "ཕྱི་ཁུལ་མཉམ་ལས་པ། ཁྱེད་ཀྱིས་མཉམ་སྤྱོད་བྱས་པའི་ཁྱབ་ཁོངས་ནང་ཚད་བཀག་ཡོད། རྩོམ་སྒྲིག་པ་ཁོ་ན།"
 ledBy = "{{owner}} ཡིས་འགོ་ཁྲིད་བྱས།"
 org = "རྩ་འཛུགས།"
-orgDesc = "རྩ་འཛུགས་ཡོངས་ཀྱི་དབང་ཚད་དང་སྲིད་ཇུས་ཆོག་མཆན་ཡོད་པའི་བདག་པོ།"
 owners = "བདག་པོ་{{count}}"
 team = "{{name}} ཚོགས་ཆུང་།"
 teamMeta = "མི་{{count}}"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "{{who}} ཡིས་གདན་ཞུ་བྱས།"
 cancel = "མེད་པར་བཟོ།"
-count = "ངང་སྒུག་{{count}}"
-desc = "ད་དུང་མ་ཞུགས་པའི་གདན་ཞུ་བྱས་པའི་མི་སྣ། ཁོང་ཚོས་དང་ལེན་མ་བྱས་བར་སྡོད་ས་ཞིག་ཉར་ཡོད།"
 expiresInDays_one = "ཉིན་{{count}} ནང་དུས་ཚོད་ཡོལ།"
 expiresInDays_other = "ཉིན་{{count}} ནང་དུས་ཚོད་ཡོལ།"
 expiresToday = "དེ་རིང་དུས་ཚོད་ཡོལ།"
 title = "ངང་སྒུག་གདན་ཞུ།"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "backend ལ་འབྲེལ་སྐབས་གནད་དོན་ཞིག་བྱུང་ངམ། ཡང་ན་ཁྱེད་ལ་འཛུལ་སྤྱོད་དབང་ཚད་མེད། ཡང་བསྐྱར་ཚོད་ལྟ་བྱོས།"
 title = "ཁོངས་མི་འཇུག་མ་ཐུབ།"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "ཟུར་སྣོན་འཚོལ"
 title = "ཟུར་སྣོན"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "དཔེ་རྟགས་ཁ་བྱང"
 bookmarkTitleRequired = "དཔེ་རྟགས་ཁ་བྱང་དགོས་ངེས་ཡིན།"
 closeSidebar = "དཔེ་རྟགས་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
 collapseAll = "དཔེ་རྟགས་ཚང་མ་བསྡུ"
+empty = "No bookmarks in this document"
 expandAll = "དཔེ་རྟགས་ཚང་མ་རྒྱ་སྐྱེད"
 searchPlaceholder = "དཔེ་རྟགས་འཚོལ"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "བསམ་བཀོད་ཁ་སྣོན"
@@ -11264,10 +11297,12 @@ locateAnnotation = "ཡིག་ཆ་ནང་ས་གནས་འཚོལ"
 moreActions = "བྱ་བ་མང་བ"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "ཤོག་ངོས་ {{page}}"
 placingHint = "ཤོག་ངོས་ཞིག་ལ་གནས་བཞག་བྱས་ནས་མནན… (འདོར)"
 removeCommentOnly = "བསམ་བཀོད་ཙམ་སུབ"
 saveReply = "ལན་སློག་སྲུང་"
+searchPlaceholder = "Search comments"
 title = "བསམ་བཀོད"
 typeComment = "བསམ་བཀོད"
 typeInsertText = "ཡིག་གེ་འཇུག"
@@ -11290,6 +11325,7 @@ unsavedDesc = "ཁྱེད་ལ་མ་ཉར་པའི་བཟོ་བ
 closeSidebar = "རིམ་པ་ཟུར་སྒྲོམ་ཁ་རྒྱོབ"
 hideAll = "རིམ་པ་ཚང་མ་སྦས"
 showAll = "རིམ་པ་ཚང་མ་སྟོན"
+title = "Layers"
 
 [viewer.link]
 delete = "འབྲེལ་མཐུད་སུབ"
@@ -11646,6 +11682,7 @@ exitRedaction = "སྦ་བཅོས་ཐབས་ལམ་ནས་ཕྱི
 exportAll = "PDF ཕྱིར་འདྲེན"
 exportSelected = "འདེམས་ཟིན་པའི་ཤོག་ངོས་ཕྱིར་འདྲེན"
 formFill = "རྣམ་གཞག་ཁ་སྐོང་"
+hideToolbar = "Hide toolbar"
 multiTool = "སྣ་ཚོགས་ལག་ཆས"
 panMode = "སྤོ་བཤུད་ཐབས་ལམ"
 print = "PDF དཔར་བསྐྲུན"
@@ -11666,6 +11703,7 @@ selectAll = "ཚང་མ་འདེམས"
 selectByNumber = "ཤོག་ངོས་གྲངས་ཀྱིས་འདེམས"
 selectLanguage = "སྐད་ཡིག་འདེམས"
 share = "མཉམ་སྤྱོད"
+showToolbar = "Show toolbar"
 toggleAnnotations = "མཆན་བཀོད་མཐོང་རུང་བ་བསྒྱུར"
 toggleAttachments = "ཟུང་འདྲེན་བསྒྱུར"
 toggleBookmarks = "མཚོན་རྟ་བསྒྱུར"
diff --git a/frontend/editor/public/locales/ca-CA/translation.toml b/frontend/editor/public/locales/ca-CA/translation.toml
index 8b26bc7f3d..3a1ccb7e35 100644
--- a/frontend/editor/public/locales/ca-CA/translation.toml
+++ b/frontend/editor/public/locales/ca-CA/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Aplica"
 applyAndContinue = "Desa i surt"
-areYouSure = "Segur que vols sortir?"
 back = "Enrere"
 black = "Negre"
 blue = "Blau"
@@ -106,6 +105,7 @@ undoSuccess = "Operació desfeta correctament"
 unknown = "Desconegut"
 unpin = "Desfixa el fitxer (substitueix-lo després d'executar l'eina)"
 unsavedChanges = "Tens canvis sense desar al teu PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Canvis sense desar"
 unsupported = "No compatible"
 username = "Usuari"
@@ -1879,6 +1879,9 @@ width = "Amplada"
 [app]
 description = "L'alternativa gratuïta a Adobe Acrobat (més de 10 M de descàrregues)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Converteix a PDF/A-3b"
 convertToPdfA3bDescription = "Crea un PDF d'arxiu amb fitxers adjunts incrustats"
@@ -2933,12 +2936,16 @@ text = "Per fer que aquests permisos no es puguin canviar, utilitzeu l’eina Af
 [chat.actions]
 copy = "Copia el missatge"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opcions de l'agent Stirling"
+assistant = "AI Assistant"
 clearChat = "Neteja el xat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Aquesta operació utilitzarà els vostres crèdits del núvol"
 tooltip = "Tria el color de la pantalla"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Tria el color"
 
 [common]
+actions = "Actions"
 back = "Enrere"
 cancel = "Cancel·la"
 close = "Tanca"
+codeSample = "Code sample"
 collapse = "Replega"
 confirm = "Confirma"
 continue = "Continua"
 copied = "Copiat!"
 copy = "Copia"
 done = "Fet"
+enterValue = "Enter value"
 error = "Error"
 expand = "Desplega"
 loading = "Carregant..."
 next = "Següent"
+open = "Open"
 preview = "Vista prèvia"
 previous = "Anterior"
 refresh = "Actualitza"
 remaining = "Restant"
 retry = "Reintenta"
 save = "Desa"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Esborra la selecció"
@@ -3185,6 +3199,7 @@ title = "Mètode de compressió"
 [compress.settings]
 desiredSize = "Mida de fitxer desitjada"
 desiredSizePlaceholder = "Introdueix la mida"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "La compressió és una manera fàcil de reduir la mida del fitxer. Trieu Mida de fitxer per introduir una mida objectiu i que ajustem la qualitat per vosaltres. Trieu Qualitat per establir manualment la intensitat de la compressió."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opcions de PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Selecciona primer un format d'origen"
 settings = "Opcions"
 single = "Únic"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Cerca..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Edita"
@@ -3824,11 +3861,13 @@ shareSelected = "Comparteix els seleccionats"
 sharing = "Compartició"
 showAll = "Mostra-ho tot"
 showHistory = "Mostra l'historial"
+sortBy = "Sort files"
 sortByDate = "Ordena per data"
 sortByName = "Ordena per nom"
 sortBySize = "Ordena per mida"
 storage = "Emmagatzematge"
 storageState = "Emmagatzematge"
+storageUsed = "Storage used"
 synced = "Sincronitzat"
 title = "Puja fitxers PDF"
 toolChain = "Eines aplicades"
@@ -3874,8 +3913,12 @@ addFiles = "Afegeix fitxers"
 addingFiles = "S'estan afegint fitxers…"
 collapse = "Redueix la barra lateral"
 customizeGroups = "Personalitza els grups"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Obre fitxers per començar"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Amplia la barra lateral"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive no està configurat"
@@ -3888,15 +3931,17 @@ openFromComputer = "Obre des de l’ordinador"
 openSettings = "Obre la configuració"
 other = "Altres"
 recent = "Recents"
-search = "Cerca"
-searchPlaceholder = "Cerca fitxers..."
 viewAll = "Mostra tots els {{count}} fitxers"
 
 [fileSidebar.fileItem]
 closeViewer = "Tanca el visor"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Obre al visor"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Restableix els valors predeterminats"
 subtitle = "Agrupa els teus fitxers en categories principals. Afegeix etiquetes existents o noves a una categoria, canvia'n el nom o crea'n una de pròpia. Els fitxers que no pertanyen a cap de les teves categories apareixen a “Altres”."
 title = "Categories de la barra lateral"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Afegeix a l'espai de treball"
 addToWorkspaceCount = "Afegeix {{count}} a l'espai de treball"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Torna a Els meus fitxers"
 breadcrumbs = "Ruta de la carpeta"
 cancel = "Cancel·la"
 classification = "Classificació"
-clearSearch = "Neteja la cerca"
 clearSelection = "Neteja la selecció"
 closeDetails = "Tanca els detalls"
 create = "Crea"
@@ -3950,6 +4002,7 @@ downloadAll = "Descarrega-ho tot"
 downloadVersion = "Descarrega aquesta versió"
 dropOverlay = "Deixa anar fitxers per pujar-los"
 dropOverlaySub = "Els fitxers comencen a Local. Utilitza 'Mou a' o 'Desa al núvol' per organitzar-los en una carpeta."
+duplicate = "Duplicate"
 file = "Fitxer"
 fileInfo = "File info"
 fileMenu = "Accions del fitxer"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Canvia la mida de l'arbre de carpetes (tecles de fletxa, Maj
 save = "Desa"
 saveToServer = "Desa al servidor"
 saveToServerDisabledHint = "Desar al servidor no està habilitat en aquest servidor. Demana a l'administrador que ho activi."
-search = "Cerca"
-searchPlaceholder = "Cerca en aquesta carpeta i subcarpetes"
 selectAll = "Selecciona-ho tot"
 selectAllHint = "Fes clic per seleccionar-ho tot. Consell: mantén Ctrl (o Cmd) per afegir fitxers d'un en un, Maj per seleccionar un interval."
 selectedCount = "{{count}} seleccionats"
@@ -4044,6 +4095,10 @@ title = "Encara no hi ha fitxers al núvol"
 hint = "Els fitxers desats sense pujar es queden aquí. Deixa anar un fitxer per afegir-ne un."
 title = "Sense fitxers només locals"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Els fitxers que obris o editis apareixeran aquí."
 title = "Encara no s'ha modificat res"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "No s'ha pogut suprimir la carpeta."
 deleteFolderFailedDetail = "No s'ha pogut suprimir la carpeta: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "No s'ha pogut actualitzar l'aparença de la carpeta."
 folderAppearanceFailedDetail = "No s'ha pogut actualitzar l'aparença de la carpeta: {{message}}"
 moveFilesFailed = "No s'han pogut moure els fitxers."
@@ -4113,6 +4170,11 @@ localHint = "Només emmagatzemat en aquest navegador"
 shared = "Compartit"
 sharedHint = "Compartit amb tu mitjançant enllaç"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Més antic primer"
 modifiedDesc = "Més recent primer"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "No hi ha fitxers disponibles a l'emmagatzematge. Obre al
 open = "Obre"
 openFile = "Obre fitxer"
 openFiles = "Obre fitxers"
+selectFile = "Select {{name}}"
 selectFromStorage = "Seleccioneu de l'emmagatzematge"
 upload = "Puja"
 uploadFile = "Puja fitxer"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Tot desat"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "No s'ha pogut extreure el CSV"
 extractXlsxError = "No s'ha pogut extreure l'XLSX"
+filled = "filled"
 flattenAfterFilling = "Aplana després d'emplenar"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obl."
 requiredFieldsError = "Emplena tots els camps obligatoris"
 rescanFields = "Torna a analitzar els camps"
@@ -4795,9 +4863,6 @@ title = "Imatge a PDF"
 [imageToPdf]
 tags = "conversió,img,jpg,imatge,foto"
 
-[infoBanner]
-dismiss = "Descarta"
-
 [invite]
 acceptError = "No s’ha pogut crear el compte"
 accountFor = "Creant compte per a"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Pujada correcta!"
 uploadSuccessMessage = "Les imatges s'han transferit."
 validating = "Validant la sessió..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Escaneja per pujar fotos. Les imatges es converteixen automàticament a PDF."
 descriptionNoConvert = "Escaneja per pujar fotos des del dispositiu mòbil."
@@ -4997,8 +5090,13 @@ title = "Puja des del mòbil"
 tags = "Eina Multifunció,operacions múltiples,UI,clic i arrossega,costat frontal,client"
 title = "Eina multifunció de PDF"
 
-[navbar]
-search = "Cerca"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "L'autenticació no ha estat correcta. Pots tancar aquesta finestra i tornar-ho a provar."
@@ -5127,6 +5225,7 @@ activeFiles = "La vista de <strong>Fitxers actius</strong> mostra tots els PDF q
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Tanca"
 cropSettings = "Ara que hem seleccionat el fitxer que volem retallar, podem configurar l’eina Retalla per triar l’àrea a la qual volem retallar el PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Si feu clic en un dels fitxers, es selecciona per al processament. Podeu seleccionar diversos fitxers per a operacions en lot."
 fileReplacement = "El fitxer modificat substituirà automàticament l’original a la Taula de treball, cosa que us permetrà passar-lo fàcilment per més eines."
 filesButton = "El botó de <strong>Fitxers</strong> a la barra d’accés ràpid us permet pujar PDF per utilitzar les eines."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF a PDF/A"
 tags = "arxiu,llarg termini,estàndard,conversió,emmagatzematge,preservació"
 title = "PDF a PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "impressió,estàndard,conversió,producció,preimpressió,arxiu"
 title = "PDF a PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 crèdits"
 xsmall = "100 crèdits"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Trieu el pla que s’adapta a les vostres necessitats"
 title = "Plans disponibles"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "S'ha assolit el límit de despesa mensual"
 title = "No s'ha pogut obrir el portal de Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "de {{allowance}} PDF gratuïts utilitzats"
 capSuffix_other = "de {{allowance}} PDF gratuïts utilitzats"
 eyebrow = "Prova de Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Envia un document o una notificació per correu electrònic quan s'executi una política."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Arxiva documents processats a Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDK oficials"
 beta = "Beta"
 deprecated = "Obsolet"
 
-[portal.docs.search]
-empty = "No hi ha documentació coincident"
-placeholder = "Cerca a la documentació"
-results = "{{count}} resultats"
-
 [portal.docs.skills]
 eyebrow = "HABILITATS"
 lead = "Capacitats incloses i amb nom que el teu agent invoca com una sola eina. Cada habilitat és una cadena d'operacions determinista amb avaluacions associades."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Cap document coincideix amb aquest filtre."
 rowActions = "Accions de fila"
 sensitiveLabel = "Sensible"
-sensitiveTitle = "Sensible — cal accés"
 
 [portal.documents.table.columns]
 action = "Canalització / Acció"
 document = "Document"
+labels = "Labels"
 product = "Producte"
 status = "Estat"
 time = "Hora"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Vist per última vegada"
 region = "Regió"
 status = "Estat"
+target = "Target"
 version = "Versió"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Aquesta vista ha trobat un error inesperat. Torna-ho a provar o t
 retry = "Torna-ho a provar"
 title = "Alguna cosa ha anat malament en aquesta pàgina"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Enrere"
 body = "Baixa l'aplicació d'escriptori o autoallotja el servidor."
@@ -7380,11 +7560,6 @@ cancel = "Cancel·la"
 confirm = "Revoca la clau"
 title = "Revoca la clau API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestat"
-inScope = "Dins de l'abast"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtra esdeveniments d'auditoria per categoria"
 heading = "Registres d'auditoria"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Correcte"
 warning = "Advertiment"
 
-[portal.infrastructure.certLabel]
-certified = "Certificat"
-inProgress = "En curs"
-notStarted = "No iniciat"
-
 [portal.infrastructure.createKey]
 cancel = "Cancel·la"
 createKey = "Crea una clau"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copia aquest secret ara — no es tornarà a mostrar."
 title = "Crea una clau API"
 titleCreated = "Clau creada"
 
-[portal.infrastructure.deployLabel]
-live = "En directe"
-queued = "A la cua"
-rolledBack = "Revertit"
-rolling = "Desplegant"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Desplegat per"
-environment = "Entorn"
-product = "Producte"
-status = "Estat"
-version = "Versió"
-when = "Quan"
-
-[portal.infrastructure.deployments.recent]
-heading = "Desplegaments recents"
-subheading = "Els darrers desplegaments en productes i entorns."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instàncies"
-latency = "Latència"
-load = "Càrrega"
-p99 = "P99"
-region = "Regió"
-status = "Estat"
-throughput = "Rendiment"
-uptime = "Temps d'activitat"
-version = "Versió"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regions"
-subheading = "Salut en directe de cada regió Stirling desplegada — latència, càrrega i versió del desplegament."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Les regions desplegades apareixen aquí un cop s'hagi proveït el teu espai de treball."
-title = "No hi ha regions desplegades"
-
 [portal.infrastructure.keyLabel]
 active = "Activa"
 revoked = "Revocada"
 
-[portal.infrastructure.modelLabel]
-active = "Actiu"
-degraded = "Degradat"
-disabled = "Desactivat"
-
-[portal.infrastructure.models]
-heading = "Models"
-msValue = "{{value}} ms"
-subheading = "El catàleg de models i l'encaminament que impulsen el processament de documents al teu espai de treball."
-
-[portal.infrastructure.models.byom]
-description = "Registra un model on-prem o self-hosted i fixa'l a una regió per a processament subjecte a residència de dades."
-title = "Porta el teu propi model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catàleg"
-sub = "Models gestionats disponibles al teu espai de treball, amb latència i cost en directe."
-subEnterprise = "Models gestionats, porta-el-teu-propi i on-prem — amb fixació per regió disponible."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Els models del catàleg del teu espai de treball apareixen aquí."
-title = "No hi ha models disponibles"
-
-[portal.infrastructure.models.columns]
-cost = "Cost"
-latency = "Latència"
-load = "Càrrega"
-model = "Model"
-status = "Estat"
-type = "Tipus"
-version = "Versió"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/crida"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Models actius"
-avgLatency = "Latència mitjana"
-included = "Inclòs"
-monthlySpend = "Despesa mensual en models"
-
-[portal.infrastructure.models.routing]
-empty = "No hi ha regles d'encaminament configurades."
-heading = "Regles d'encaminament"
-sub = "Quin model gestiona cada operació. El valor predeterminat s'aplica quan no coincideix cap regla més específica."
-subLocked = "Encamina operacions a models específics — disponible en plans de pagament."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Actualitza a Pro per controlar quin model gestiona cada operació i tipus de document."
-title = "L'encaminament de models és una funció de pagament"
-
-[portal.infrastructure.models.routingColumns]
-default = "Predeterminat"
-docType = "Tipus de document"
-modelForAria = "Model per a {{operation}}"
-operation = "Operació"
-routedTo = "Encaminat a"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classificació"
-extraction = "Extracció"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradat"
-down = "Caigut"
-healthy = "Correcte"
-
-[portal.infrastructure.security.access.byok]
-description = "Proporciona una clau del teu propi KMS. Stirling hi xifra però encara pot llegir."
-label = "Porta la teva pròpia clau (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Les claus no surten mai del teu KMS. Stirling només conserva text xifrat."
-label = "Conserva la teva pròpia clau (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling gestiona les claus de xifratge. El més senzill — zero operacions de claus per part teva."
-label = "Claus conservades per Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Política d'accés a documents"
-subheading = "Controla qui pot desxifrar documents processats en repòs."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestacions de compliment"
-noReport = "No hi ha cap informe disponible"
-subheading = "Postura d'auditoria per marc, amb informes disponibles sobre controls atestats."
-viewReport = "Mostra l'informe →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliment"
-subheading = "Atestacions i certificacions que cobreixen la plataforma Stirling."
-
-[portal.infrastructure.security.empty]
-description = "La configuració de seguretat del teu espai de treball apareixerà aquí."
-title = "Postura de seguretat no disponible"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Amb HYOK, les claus de xifratge no surten mai del teu KMS. Stirling emmagatzema i processa només text xifrat que pots revocar en qualsevol moment."
-title = "Stirling no pot desxifrar els teus documents"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "No hi ha intervals IP configurats — es permeten totes les IP."
-heading = "Llista d'IP permeses"
-sub = "L'accés API està restringit a aquests intervals CIDR."
-subLocked = "Restringeix l'accés API a intervals IP coneguts — disponible en plans de pagament."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Actualitza a Pro per restringir l'accés API a xarxes específiques."
-title = "La llista d'IP permeses és una funció de pagament"
-
-[portal.infrastructure.security.ipColumns]
-added = "Afegit"
-addedBy = "Afegit per"
-cidr = "CIDR"
-label = "Etiqueta"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorisme"
-heading = "Gestió de claus de xifratge"
-keyId = "Identificador de clau"
-lastRotated = "Rotada per última vegada"
-rotateKey = "Rota la clau"
-rotationPolicy = "Política de rotació"
-subheading = "Custòdia de les claus que xifren documents en repòs — qui pot desxifrar i com roten les claus."
-
-[portal.infrastructure.security.managedBanner]
-description = "La custòdia porta-la-teva-pròpia-clau (BYOK) i conserva-la-teva-pròpia-clau (HYOK) està disponible a Enterprise. Actualitza per proporcionar claus del teu propi KMS."
-title = "Les claus les gestiona Stirling al teu pla"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Àsia-Pacífic"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · límit de dades GDPR"
-label = "Unió Europea"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Estats Units"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Residència de dades"
-subheading = "On s'emmagatzemen i es processen els documents."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} utilitzat"
-
-[portal.infrastructure.storage.empty]
-description = "L'emmagatzematge connectat i l'ús apareixen aquí."
-title = "No hi ha emmagatzematge configurat"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Actiu"
-activeRange = "0–{{value}}d"
-archived = "Arxivat"
-coldStorage = "emmagatzematge fred"
-deleted = "Eliminat"
-never = "mai"
-purged = "purgat"
-
-[portal.infrastructure.storage.providers]
-connect = "Connecta"
-connected = "Connectat"
-heading = "Proveïdors connectats"
-subheading = "On s'escriuen els artefactes processats."
-
-[portal.infrastructure.storage.retention]
-heading = "Retenció"
-subheading = "Quant de temps es conserven els artefactes abans de l'eliminació del cicle de vida."
-windowLabel = "Finestra de retenció predeterminada"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dia"
-days_other = "{{count}} dies"
-never = "No eliminis mai"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Ús total"
-progressLabel = "Emmagatzematge utilitzat"
-subheading = "Emmagatzematge consumit a tots els proveïdors connectats."
-
 [portal.infrastructure.tabs]
 apiKeys = "Claus API"
 audit = "Registres d'auditoria"
@@ -7715,11 +7657,9 @@ security = "Seguretat"
 storage = "Emmagatzematge"
 
 [portal.integrations]
-addAnother = "Afegeix-ne una altra"
 availableHeading = "Disponibles"
 comingSoonHeading = "Properament"
 connect = "Connecta"
-connectedHeading = "Connectades"
 connectionCount_one = "{{count}} connexió"
 connectionCount_other = "{{count}} connexions"
 customApi = "API personalitzada"
@@ -7737,6 +7677,10 @@ security = "Seguretat"
 signing = "Signatura"
 storage = "Emmagatzematge"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Connectada"
 
@@ -7767,7 +7711,6 @@ integrations = "Integracions"
 pipelines = "Canalitzacions"
 policies = "Polítiques"
 procurement = "Compres"
-settings = "Configuració"
 sources = "Fonts"
 usage = "Ús i facturació"
 users = "Usuaris"
@@ -7784,7 +7727,7 @@ title = "Canalitzacions"
 newPipeline = "Canalització nova"
 
 [portal.pipelines.builder]
-addStep = "Afegeix una eina"
+activate = "Activate"
 back = "Torna a les canalitzacions"
 cannotFollow = "No es pot prendre {{produced}}"
 chooseAccount = "Tria un compte"
@@ -7792,28 +7735,38 @@ chooseDestination = "Tria una destinació"
 chooseOperation = "Tria què fa aquest pas"
 chooseSource = "Tria una font"
 discard = "Descarta els canvis"
-enabled = "Activat"
 inputs = "Entrada"
 inputSource = "Font d'entrada"
 inputTrigger = "Activador"
 keepEditing = "Continua editant"
+moreActions = "More actions"
 needsConfiguring = "Cal configurar-ho"
-needsUpload = "Cal un fitxer pujat"
-noSources = "Encara no hi ha cap font connectada. Crea'n una per utilitzar-la com a entrada."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Cap eina coincideix amb la cerca."
-pipelineSettings = "Configuració de la canalització"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Cerca eines"
-selectToolBody = "Afegeix una eina per construir la teva canalització."
-selectToolTitle = "Encara no hi ha eines"
 sendToSystem = "Envia a un altre sistema"
 stepsIncompatible = "Aquests passos no es poden executar amb el que produeix el pas anterior: {{tools}}."
 stepsNeedSetup = "Aquests passos encara s'han de configurar abans de desar: {{tools}}."
-toolSettings = "Configuració de l'eina"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operació no reconeguda, conservada tal com està."
 unsavedBody = "Tens canvis sense desar. Desa'ls abans de sortir o els vols descartar?"
 unsavedTitle = "Canvis sense desar"
-uploadUnsupported = "Els fitxers pujats encara no són compatibles amb les canalitzacions, així que aquests passos no es poden desar: {{tools}}."
 usesDefaults = "S'executa amb la configuració predeterminada"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combina tots els fitxers del pas anterior"
@@ -7825,31 +7778,36 @@ undeclared-operation = "No es pot comprovar què accepta aquest pas"
 
 [portal.pipelines.composer]
 addTool = "Afegeix una eina"
-cancel = "Cancel·la"
-chainEmpty = "Afegeix una eina per començar a construir la teva canalització."
 create = "Crea una canalització"
+createPaused = "Create paused"
 editingUnsupported = "Encara no és compatible mostrar aquests paràmetres d'eina per editar-los."
-moveDown = "Mou avall"
-moveUp = "Mou amunt"
+editSource = "Edit source"
 name = "Nom"
 namePlaceholder = "p. ex. Revisió de redacció"
 noToolSettings = "Aquesta eina no té configuració ajustable."
-operations_one = "Operació ({{count}})"
-operations_other = "Operacions ({{count}})"
 output = "Sortida"
-removeStep = "Elimina l'operació"
 save = "Desa els canvis"
 scheduleEvery = "Executa cada"
-sources = "Fonts"
-sourcesLoading = "Carregant fonts..."
 trigger = "Disparador"
 triggerManual = "Només manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dies"
 hours = "hores"
 minutes = "minuts"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Vols eliminar \"{{name}}\"? Això no es pot desfer."
 cancel = "Cancel·la"
@@ -7867,6 +7825,37 @@ connectSource = "Connecta una font"
 description = "Crea la teva primera canalització: tria les fonts sobre les quals s'executa, encadena les operacions i tria on va la sortida."
 title = "Encara no hi ha canalitzacions"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Actives"
 paused = "En pausa"
@@ -7879,7 +7868,6 @@ completed_one = "Execució completada."
 completed_other = "Totes les {{count}} execucions completades."
 empty = "No hi ha res per executar: les fonts no tenien documents per processar."
 failed = "L'execució ha fallat: {{error}}"
-historyCleared = "Historial esborrat. La propera execució tornarà a processar tot el que hi hagi actualment a les fonts."
 inFlight = "No hi ha res nou per executar: encara s'estan processant documents d'una execució anterior."
 parked_one = "No hi ha res per executar: {{count}} document ha fallat anteriorment i està aparcat. Corregeix-ne la causa i després esborra l'historial per tornar-ho a provar."
 parked_other = "No hi ha res per executar: {{count}} documents han fallat anteriorment i estan aparcats. Corregeix-ne la causa i després esborra l'historial per tornar-ho a provar."
@@ -7895,6 +7883,7 @@ name = "Canalització"
 sources = "Fonts"
 status = "Estat"
 steps = "Passos"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Supervisió de carpeta"
@@ -8209,6 +8198,24 @@ label = "Adjunta a una incidència de Jira"
 description = "Envia el document processat com a fitxer adjunt."
 label = "Envia el document per correu electrònic (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Escriu el document processat en una carpeta."
 label = "Puja a Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Límit assolit"
 subtitle = "La teva prova gratuïta dura fins al {{date}}. No cal targeta."
 title = "Prova Enterprise"
 
-[portal.search]
-ariaLabel = "Cerca"
-placeholder = "Cerca a Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Les accions ràpides apareixeran aquí quan estiguin disponibles."
-noActionsTitle = "No hi ha accions ràpides"
-noMatches = "No hi ha coincidències per a \"{{query}}\""
-noMatchesDescription = "Prova una paraula clau diferent o navega pel catàleg."
-
 [portal.settings.groups]
 admin = "Administració"
 
@@ -8743,10 +8740,6 @@ cancel = "Cancel·la"
 confirm = "Suprimeix"
 title = "Vols suprimir la font?"
 
-[portal.sources.empty]
-description = "Connecta una carpeta (i, aviat, emmagatzematge al núvol) perquè les teves polítiques tinguin un lloc d'on obtenir documents."
-title = "Encara no hi ha fonts connectades"
-
 [portal.sources.kpi]
 inUse = "En ús"
 total = "Connexions"
@@ -8785,6 +8778,7 @@ unused = "Sense utilitzar"
 documents = "Documents"
 source = "Font"
 status = "Estat"
+type = "Type"
 usedBy = "Polítiques"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Polítiques i privadesa"
 [settings.preferences]
 title = "Preferències"
 
-[settings.search]
-placeholder = "Cerca a les pàgines de configuració..."
-
 [settings.security]
 description = "Actualitza la contrasenya per mantenir segur el compte."
 title = "Seguretat"
@@ -10128,6 +10119,7 @@ last = "Última pàgina"
 maintainRatio = "Activa/desactiva mantenir la relació d'aspecte"
 next = "Pàgina següent"
 noSavedSigs = "No s'han trobat signatures desades"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Signatures Personals"
 previous = "Pàgina anterior"
 redo = "Refer"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "No s'ha pogut eliminar el fons"
 hint = "Carrega una imatge PNG o JPG de la teva signatura"
 label = "Carrega la imatge de la signatura"
 placeholder = "Selecciona el fitxer d'imatge"
+previewAlt = "Current image signature"
 processing = "Processant la imatge..."
 removeBackground = "Elimina el fons blanc (fes-lo transparent)"
 
@@ -10179,6 +10172,17 @@ saved = "Selecciona una signatura desada a dalt i fes clic a qualsevol lloc del
 text = "Després d'introduir el teu nom a dalt, fes clic en qualsevol lloc del PDF per col·locar la signatura."
 title = "Com afegir la signatura"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Mou la signatura"
 pause = "Pausa la col·locació"
@@ -10625,6 +10629,23 @@ title = "Pujar al servidor"
 updateButton = "Actualitza al servidor"
 uploadButton = "Puja al servidor"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Torna enrere"
 pdfTools = "Eines PDF"
 placeholder = "Tria una eina per començar"
 premiumFeature = "Funció premium:"
-searchTools = "Cerca eines"
 toolsHeader = "Eines"
 viewAllTools = "Mostra totes les eines"
 
@@ -10822,6 +10842,9 @@ removal = "Eliminació"
 signing = "Signatura"
 verification = "Verificació"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "No s’han trobat eines"
 noTools = "No hi ha eines disponibles"
@@ -10979,6 +11002,13 @@ approver = "Aprova la política"
 editor = "Editor"
 processor = "Processador"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Vols cancel·lar la invitació a {{email}}? No es podrà unir amb l'enllaç actual."
 cancelInviteTitle = "Cancel·la la invitació"
@@ -10998,10 +11028,8 @@ title = "Encara no hi ha membres"
 addToTeam = "Afegeix a l'equip"
 guestCount = "{{count}} convidat"
 guests = "Convidats"
-guestsDesc = "Col·laboradors externs, limitats al que has compartit. Només Editor."
 ledBy = "dirigit per {{owner}}"
 org = "Organització"
-orgDesc = "Propietaris amb autoritat a tota l'organització i aprovació de polítiques"
 owners = "{{count}} propietari"
 team = "Equip {{name}}"
 teamMeta = "{{count}} persones"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Convidat per {{who}}"
 cancel = "Cancel·la"
-count = "{{count}} pendents"
-desc = "Persones convidades que encara no s'han unit. Ocupen una plaça fins que acceptin."
 expiresInDays_one = "Caduca d'aquí a {{count}} dia"
 expiresInDays_other = "Caduca d'aquí a {{count}} dies"
 expiresToday = "Caduca avui"
 title = "Invitacions pendents"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "S'ha produït un error en contactar amb el backend, o no hi tens accés. Torna-ho a provar."
 title = "No s'han pogut carregar els membres"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Cerca adjunts"
 title = "Adjunts"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Títol del marcador"
 bookmarkTitleRequired = "El títol del marcador és obligatori"
 closeSidebar = "Tanca la barra lateral de marcadors"
 collapseAll = "Replega tots els marcadors"
+empty = "No bookmarks in this document"
 expandAll = "Desplega tots els marcadors"
 searchPlaceholder = "Cerca marcadors"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Afegeix un comentari"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Localitza al document"
 moreActions = "Més accions"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Pàgina {{page}}"
 placingHint = "Feu clic a una pàgina per col·locar… (cancel·la)"
 removeCommentOnly = "Elimina només el comentari"
 saveReply = "Desa la resposta"
+searchPlaceholder = "Search comments"
 title = "Comentaris"
 typeComment = "Comentari"
 typeInsertText = "Insereix text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Tens canvis no desats"
 closeSidebar = "Tanca la barra lateral de capes"
 hideAll = "Amaga totes les capes"
 showAll = "Mostra totes les capes"
+title = "Layers"
 
 [viewer.link]
 delete = "Suprimeix l'enllaç"
@@ -11646,6 +11682,7 @@ exitRedaction = "Surt del mode de censura"
 exportAll = "Exporta el PDF"
 exportSelected = "Exporta les pàgines seleccionades"
 formFill = "Omple el formulari"
+hideToolbar = "Hide toolbar"
 multiTool = "Eina múltiple"
 panMode = "Mode de desplaçament"
 print = "Imprimeix el PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Selecciona-ho tot"
 selectByNumber = "Selecciona per números de pàgina"
 selectLanguage = "Selecciona l’idioma"
 share = "Comparteix"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Mostra/oculta les anotacions"
 toggleAttachments = "Mostra/oculta els adjunts"
 toggleBookmarks = "Mostra/oculta els marcadors"
diff --git a/frontend/editor/public/locales/cs-CZ/translation.toml b/frontend/editor/public/locales/cs-CZ/translation.toml
index e4b31516a7..ead7dcab24 100644
--- a/frontend/editor/public/locales/cs-CZ/translation.toml
+++ b/frontend/editor/public/locales/cs-CZ/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Abeceda"
 apply = "Použít"
 applyAndContinue = "Uložit a odejít"
-areYouSure = "Opravdu chcete odejít?"
 back = "Zpět"
 black = "Černá"
 blue = "Modrá"
@@ -106,6 +105,7 @@ undoSuccess = "Operace úspěšně vrácena"
 unknown = "Neznámý"
 unpin = "Odepnout soubor (nahradit po spuštění nástroje)"
 unsavedChanges = "Máte neuložené změny v PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Neuložené změny"
 unsupported = "Nepodporováno"
 username = "Uživatelské jméno"
@@ -1879,6 +1879,9 @@ width = "Šířka"
 [app]
 description = "Bezplatná alternativa k Adobe Acrobat (10+ mil. stažení)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Convert to PDF/A-3b"
 convertToPdfA3bDescription = "Creates an archival PDF with embedded attachments"
@@ -2933,12 +2936,16 @@ text = "Abyste tato oprávnění učinili nezměnitelnými, použijte nástroj P
 [chat.actions]
 copy = "Kopírovat zprávu"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Možnosti agenta Stirling"
+assistant = "AI Assistant"
 clearChat = "Vymazat chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Tato operace využije vaše cloudové kredity"
 tooltip = "Vybrat barvu z obrazovky"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Zvolte barvu"
 
 [common]
+actions = "Actions"
 back = "Zpět"
 cancel = "Zrušit"
 close = "Zavřít"
+codeSample = "Code sample"
 collapse = "Sbalit"
 confirm = "Potvrdit"
 continue = "Pokračovat"
 copied = "Zkopírováno!"
 copy = "Kopírovat"
 done = "Hotovo"
+enterValue = "Enter value"
 error = "Chyba"
 expand = "Rozbalit"
 loading = "Načítání..."
 next = "Další"
+open = "Open"
 preview = "Náhled"
 previous = "Předchozí"
 refresh = "Obnovit"
 remaining = "Zbývá"
 retry = "Zkusit znovu"
 save = "Save"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Vymazat vybrané"
@@ -3185,6 +3199,7 @@ title = "Metoda komprese"
 [compress.settings]
 desiredSize = "Požadovaná velikost souboru"
 desiredSizePlaceholder = "Zadejte velikost"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Komprese je snadný způsob, jak zmenšit velikost souboru. Zvolte Velikost souboru pro zadání cílové velikosti a my upravíme kvalitu za vás. Zvolte Kvalitu pro ruční nastavení síly komprese."
@@ -3387,6 +3402,24 @@ pdfOptions = "Možnosti PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Nejprve vyberte zdrojový formát"
 settings = "Nastavení"
 single = "Jeden"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Hledat..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Upravit"
@@ -3824,11 +3861,13 @@ shareSelected = "Sdílet vybrané"
 sharing = "Sdílení"
 showAll = "Zobrazit vše"
 showHistory = "Zobrazit historii"
+sortBy = "Sort files"
 sortByDate = "Seřadit podle data"
 sortByName = "Seřadit podle názvu"
 sortBySize = "Seřadit podle velikosti"
 storage = "Úložiště"
 storageState = "Úložiště"
+storageUsed = "Storage used"
 synced = "Synchronizováno"
 title = "Nahrát soubory PDF"
 toolChain = "Použité nástroje"
@@ -3874,8 +3913,12 @@ addFiles = "Přidat soubory"
 addingFiles = "Přidávání souborů…"
 collapse = "Sbalit postranní panel"
 customizeGroups = "Přizpůsobit skupiny"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Otevřete soubory a začněte"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Rozbalit postranní panel"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive není nakonfigurován"
@@ -3888,15 +3931,17 @@ openFromComputer = "Otevřít z počítače"
 openSettings = "Otevřít nastavení"
 other = "Ostatní"
 recent = "Nedávné"
-search = "Hledat"
-searchPlaceholder = "Hledat soubory..."
 viewAll = "Zobrazit všech {{count}} souborů"
 
 [fileSidebar.fileItem]
 closeViewer = "Zavřít prohlížeč"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Otevřít v prohlížeči"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Obnovit výchozí nastavení"
 subtitle = "Seskupte soubory do nadřazených kategorií. Přidejte do kategorie existující nebo nové štítky, přejmenujte ji nebo si vytvořte vlastní. Soubory, které nejsou v žádné z vašich kategorií, se zobrazí pod „Ostatní“."
 title = "Kategorie postranního panelu"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Přidat do pracovního prostoru"
 addToWorkspaceCount = "Přidat {{count}} do pracovního prostoru"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Zpět na Moje soubory"
 breadcrumbs = "Cesta ke složce"
 cancel = "Zrušit"
 classification = "Klasifikace"
-clearSearch = "Vymazat hledání"
 clearSelection = "Zrušit výběr"
 closeDetails = "Zavřít podrobnosti"
 create = "Vytvořit"
@@ -3950,6 +4002,7 @@ downloadAll = "Stáhnout vše"
 downloadVersion = "Stáhnout tuto verzi"
 dropOverlay = "Přetáhněte soubory pro nahrání"
 dropOverlaySub = "Soubory začínají v Místní. K jejich uspořádání do složky použijte 'Přesunout do' nebo 'Uložit do cloudu'."
+duplicate = "Duplicate"
 file = "Soubor"
 fileInfo = "File info"
 fileMenu = "Akce souboru"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Změnit velikost stromu složek (šipky, Shift pro větší
 save = "Uložit"
 saveToServer = "Uložit na server"
 saveToServerDisabledHint = "Ukládání na server není na tomto serveru povoleno. Požádejte správce o povolení."
-search = "Hledat"
-searchPlaceholder = "Hledat v této složce a podsložkách"
 selectAll = "Vybrat vše"
 selectAllHint = "Kliknutím vyberete vše. Tip: podržte Ctrl (nebo Cmd) pro přidání jednotlivých souborů, Shift pro výběr rozsahu."
 selectedCount = "Vybráno: {{count}}"
@@ -4044,6 +4095,10 @@ title = "Zatím žádné cloudové soubory"
 hint = "Soubory uložené bez nahrání zůstávají zde. Přetáhněte soubor pro přidání."
 title = "Žádné pouze místní soubory"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Soubory, které otevřete nebo upravíte, se zobrazí zde."
 title = "Zatím nic nebylo upraveno"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Nepodařilo se smazat složku."
 deleteFolderFailedDetail = "Nepodařilo se smazat složku: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nepodařilo se upravit vzhled složky."
 folderAppearanceFailedDetail = "Nepodařilo se upravit vzhled složky: {{message}}"
 moveFilesFailed = "Nepodařilo se přesunout soubory."
@@ -4113,6 +4170,11 @@ localHint = "Uloženo pouze v tomto prohlížeči"
 shared = "Sdílené"
 sharedHint = "Sdíleno s vámi přes odkaz"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Od nejstarších"
 modifiedDesc = "Od nejnovějších"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "V úložišti nejsou k dispozici žádné soubory. Nejpr
 open = "Otevřít"
 openFile = "Otevřít soubor"
 openFiles = "Otevřít soubory"
+selectFile = "Select {{name}}"
 selectFromStorage = "Vybrat z úložiště"
 upload = "Nahrát"
 uploadFile = "Nahrát soubor"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Vše uloženo"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Nepodařilo se extrahovat CSV"
 extractXlsxError = "Nepodařilo se extrahovat XLSX"
+filled = "filled"
 flattenAfterFilling = "Zploštit po vyplnění"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "pov."
 requiredFieldsError = "Vyplňte prosím všechna povinná pole"
 rescanFields = "Znovu detekovat pole"
@@ -4795,9 +4863,6 @@ title = "Obrázek na PDF"
 [imageToPdf]
 tags = "převod,img,jpg,obrázek,fotka"
 
-[infoBanner]
-dismiss = "Zavřít"
-
 [invite]
 acceptError = "Nepodařilo se vytvořit účet"
 accountFor = "Vytváření účtu pro"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Nahrávání úspěšné!"
 uploadSuccessMessage = "Vaše obrázky byly přeneseny."
 validating = "Ověřuje se relace..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Naskenujte pro nahrání fotografií. Obrázky se automaticky převedou do PDF."
 descriptionNoConvert = "Naskenujte pro nahrání fotografií z mobilního zařízení."
@@ -4997,8 +5090,13 @@ title = "Nahrát z mobilu"
 tags = "Multi nástroj,Více operací,UI,kliknutí a přetažení,přední strana,klientská strana,interaktivní,pohyb,smazat,přesunout,rozdělit"
 title = "PDF Multi nástroj"
 
-[navbar]
-search = "Hledat"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Ověření nebylo úspěšné. Toto okno můžete zavřít a zkusit to znovu."
@@ -5127,6 +5225,7 @@ activeFiles = "Zobrazení <strong>Aktivní soubory</strong> ukazuje všechna PDF
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Zavřít"
 cropSettings = "Teď, když jsme vybrali soubor, který chceme oříznout, můžeme nakonfigurovat nástroj Oříznout a zvolit oblast, na kterou PDF ořízneme."
+dialogLabel = "Onboarding"
 fileCheckbox = "Kliknutím na soubor ho vyberete ke zpracování. Pro dávkové operace můžete vybrat více souborů."
 fileReplacement = "Upravený soubor automaticky nahradí původní soubor na Pracovní ploše, takže jej můžete snadno poslat do dalších nástrojů."
 filesButton = "Tlačítko <strong>Soubory</strong> na panelu Rychlý přístup umožňuje nahrát PDF, na kterých chcete nástroje použít."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF na PDF/A"
 tags = "archiv,dlouhodobý,standard,převod,úložiště,uchování"
 title = "PDF na PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "tisk,standard,konverze,produkce,předtisk,archiv"
 title = "PDF na PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kreditů"
 xsmall = "100 kreditů"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Vyberte plán, který vám vyhovuje"
 title = "Dostupné plány"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Měsíční limit výdajů dosažen"
 title = "Nepodařilo se otevřít portál Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "z {{allowance}} bezplatných PDFs použito"
 capSuffix_other = "z {{allowance}} bezplatných PDFs použito"
 eyebrow = "Zkušební Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Odeslat dokument nebo oznámení e-mailem, když se spustí zásada."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Ukládat zpracované dokumenty do Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Oficiální SDKs"
 beta = "Beta"
 deprecated = "Zastaralé"
 
-[portal.docs.search]
-empty = "Žádná odpovídající dokumentace"
-placeholder = "Hledat v dokumentaci"
-results = "{{count}} výsledků"
-
 [portal.docs.skills]
 eyebrow = "DOVEDNOSTI"
 lead = "Přibalené pojmenované schopnosti, které váš agent vyvolává jako jeden nástroj. Každá dovednost je deterministický řetězec operací s připojenými evals."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Tomuto filtru neodpovídají žádné dokumenty."
 rowActions = "Akce řádku"
 sensitiveLabel = "Citlivé"
-sensitiveTitle = "Citlivé — je vyžadován přístup"
 
 [portal.documents.table.columns]
 action = "Pipeline / Akce"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Stav"
 time = "Čas"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Naposledy viděno"
 region = "Region"
 status = "Stav"
+target = "Target"
 version = "Verze"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "V tomto zobrazení došlo k neočekávané chybě. Zkuste to znov
 retry = "Zkusit znovu"
 title = "Na této stránce se něco pokazilo"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Zpět"
 body = "Stáhněte si desktopovou aplikaci nebo provozujte server self-hosted."
@@ -7380,11 +7560,6 @@ cancel = "Zrušit"
 confirm = "Odvolat klíč"
 title = "Odvolat API klíč"
 
-[portal.infrastructure.attestationLabel]
-attested = "Ověřeno"
-inScope = "V rozsahu"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrovat auditní události podle kategorie"
 heading = "Auditní protokoly"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Úspěch"
 warning = "Varování"
 
-[portal.infrastructure.certLabel]
-certified = "Certifikováno"
-inProgress = "Probíhá"
-notStarted = "Nezahájeno"
-
 [portal.infrastructure.createKey]
 cancel = "Zrušit"
 createKey = "Vytvořit klíč"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Zkopírujte si toto tajemství nyní — znovu se nezobrazí.
 title = "Vytvořit API klíč"
 titleCreated = "Klíč vytvořen"
 
-[portal.infrastructure.deployLabel]
-live = "Živě"
-queued = "Ve frontě"
-rolledBack = "Vráceno zpět"
-rolling = "Nasazuje se"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Nasadil"
-environment = "Prostředí"
-product = "Produkt"
-status = "Stav"
-version = "Verze"
-when = "Kdy"
-
-[portal.infrastructure.deployments.recent]
-heading = "Nedávná nasazení"
-subheading = "Nejnovější rollouty napříč produkty a prostředími."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instance"
-latency = "Latence"
-load = "Zatížení"
-p99 = "P99"
-region = "Region"
-status = "Stav"
-throughput = "Propustnost"
-uptime = "Doba provozu"
-version = "Verze"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regiony"
-subheading = "Živý stav každého nasazeného regionu Stirling — latence, zatížení a verze rolloutů."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Nasazené regiony se zde zobrazí, jakmile bude váš pracovní prostor zřízen."
-title = "Žádné regiony nejsou nasazeny"
-
 [portal.infrastructure.keyLabel]
 active = "Aktivní"
 revoked = "Odvoláno"
 
-[portal.infrastructure.modelLabel]
-active = "Aktivní"
-degraded = "Zhoršené"
-disabled = "Zakázáno"
-
-[portal.infrastructure.models]
-heading = "Modely"
-msValue = "{{value}} ms"
-subheading = "Katalog modelů a směrování, které pohání zpracování dokumentů napříč vaším pracovním prostorem."
-
-[portal.infrastructure.models.byom]
-description = "Zaregistrujte on-prem nebo self-hosted model a připněte jej k regionu pro zpracování vázané na datovou rezidenci."
-title = "Přineste si vlastní model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Spravované modely dostupné pro váš pracovní prostor, s živou latencí a náklady."
-subEnterprise = "Spravované, vlastní a on-prem modely — s možností připnutí podle regionu."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modely v katalogu vašeho pracovního prostoru se zobrazí zde."
-title = "Žádné modely nejsou dostupné"
-
-[portal.infrastructure.models.columns]
-cost = "Náklady"
-latency = "Latence"
-load = "Zatížení"
-model = "Model"
-status = "Stav"
-type = "Typ"
-version = "Verze"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/volání"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktivní modely"
-avgLatency = "Průměrná latence"
-included = "Zahrnuto"
-monthlySpend = "Měsíční výdaje za modely"
-
-[portal.infrastructure.models.routing]
-empty = "Nejsou nakonfigurována žádná pravidla směrování."
-heading = "Pravidla směrování"
-sub = "Který model zpracovává jednotlivé operace. Výchozí se použije, když neodpovídá žádné užší pravidlo."
-subLocked = "Směrujte operace na konkrétní modely — dostupné v placených plánech."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Upgradujte na Pro a určete, který model zpracovává jednotlivé operace a typy dokumentů."
-title = "Směrování modelů je placená funkce"
-
-[portal.infrastructure.models.routingColumns]
-default = "Výchozí"
-docType = "Typ dokumentu"
-modelForAria = "Model pro {{operation}}"
-operation = "Operace"
-routedTo = "Směrováno na"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasifikace"
-extraction = "Extrakce"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Zhoršené"
-down = "Mimo provoz"
-healthy = "V pořádku"
-
-[portal.infrastructure.security.access.byok]
-description = "Poskytněte klíč z vlastního KMS. Stirling s ním šifruje, ale stále může číst."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Klíče nikdy neopustí váš KMS. Stirling uchovává pouze ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling spravuje šifrovací klíče. Nejjednodušší — na vaší straně žádné operace s klíči."
-label = "Klíče držené Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Zásady přístupu k dokumentům"
-subheading = "Řídí, kdo může dešifrovat zpracované dokumenty v klidu."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestace souladu"
-noReport = "Není dostupná žádná zpráva"
-subheading = "Auditní postoj podle jednotlivých rámců, se zprávami dostupnými u atestovaných kontrol."
-viewReport = "Zobrazit zprávu →"
-
-[portal.infrastructure.security.compliance]
-heading = "Soulad"
-subheading = "Atestace a certifikace pokrývající platformu Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Konfigurace zabezpečení vašeho pracovního prostoru se zobrazí zde."
-title = "Bezpečnostní postoj není dostupný"
-
-[portal.infrastructure.security.hyokBanner]
-description = "S HYOK šifrovací klíče nikdy neopustí váš KMS. Stirling ukládá a zpracovává pouze ciphertext, který můžete kdykoli odvolat."
-title = "Stirling nemůže dešifrovat vaše dokumenty"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nejsou nakonfigurovány žádné IP rozsahy — všechny IP jsou povoleny."
-heading = "IP allowlist"
-sub = "API přístup je omezen na tyto CIDR rozsahy."
-subLocked = "Omezte API přístup na známé IP rozsahy — dostupné v placených plánech."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Upgradujte na Pro a omezte API přístup na konkrétní sítě."
-title = "IP allowlisting je placená funkce"
-
-[portal.infrastructure.security.ipColumns]
-added = "Přidáno"
-addedBy = "Přidal"
-cidr = "CIDR"
-label = "Štítek"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmus"
-heading = "Správa šifrovacích klíčů"
-keyId = "Identifikátor klíče"
-lastRotated = "Naposledy rotováno"
-rotateKey = "Rotovat klíč"
-rotationPolicy = "Zásady rotace"
-subheading = "Správa klíčů, které šifrují dokumenty v klidu — kdo může dešifrovat a jak se klíče rotují."
-
-[portal.infrastructure.security.managedBanner]
-description = "Správa klíčů bring-your-own-key (BYOK) a hold-your-own-key (HYOK) je dostupná v Enterprise. Upgradujte a poskytněte klíče z vlastního KMS."
-title = "Klíče jsou ve vašem plánu spravovány Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asie a Pacifik"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · hranice dat GDPR"
-label = "Evropská unie"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Spojené státy"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Datová rezidence"
-subheading = "Kde jsou dokumenty ukládány a zpracovávány."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} využito"
-
-[portal.infrastructure.storage.empty]
-description = "Připojené úložiště a využití se zobrazí zde."
-title = "Není nakonfigurováno žádné úložiště"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktivní"
-activeRange = "0–{{value}} d"
-archived = "Archivováno"
-coldStorage = "cold storage"
-deleted = "Smazáno"
-never = "nikdy"
-purged = "vymazáno"
-
-[portal.infrastructure.storage.providers]
-connect = "Připojit"
-connected = "Připojeno"
-heading = "Připojení poskytovatelé"
-subheading = "Kam se zapisují zpracované artefakty."
-
-[portal.infrastructure.storage.retention]
-heading = "Uchovávání"
-subheading = "Jak dlouho se artefakty uchovávají před odstraněním v rámci životního cyklu."
-windowLabel = "Výchozí okno uchovávání"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} den"
-days_other = "{{count}} dní"
-never = "Nikdy nemazat"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Celkové využití"
-progressLabel = "Využité úložiště"
-subheading = "Úložiště spotřebované napříč všemi připojenými poskytovateli."
-
 [portal.infrastructure.tabs]
 apiKeys = "API klíče"
 audit = "Auditní protokoly"
@@ -7715,11 +7657,9 @@ security = "Zabezpečení"
 storage = "Úložiště"
 
 [portal.integrations]
-addAnother = "Přidat další"
 availableHeading = "Dostupné"
 comingSoonHeading = "Již brzy"
 connect = "Připojit"
-connectedHeading = "Připojeno"
 connectionCount_one = "{{count}} připojení"
 connectionCount_other = "{{count}} připojení"
 customApi = "Vlastní API"
@@ -7737,6 +7677,10 @@ security = "Zabezpečení"
 signing = "Podepisování"
 storage = "Úložiště"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Připojeno"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrace"
 pipelines = "Pipeline"
 policies = "Zásady"
 procurement = "Nákup"
-settings = "Nastavení"
 sources = "Zdroje"
 usage = "Využití a fakturace"
 users = "Uživatelé"
@@ -7784,7 +7727,7 @@ title = "Pipeline"
 newPipeline = "Nová pipeline"
 
 [portal.pipelines.builder]
-addStep = "Přidat nástroj"
+activate = "Activate"
 back = "Zpět na pipeline"
 cannotFollow = "Nelze přijmout {{produced}}"
 chooseAccount = "Vyberte účet"
@@ -7792,28 +7735,38 @@ chooseDestination = "Vyberte cíl"
 chooseOperation = "Vyberte, co tento krok provede"
 chooseSource = "Vyberte zdroj"
 discard = "Zahodit změny"
-enabled = "Povoleno"
 inputs = "Vstup"
 inputSource = "Vstupní zdroj"
 inputTrigger = "Spouštěč"
 keepEditing = "Pokračovat v úpravách"
+moreActions = "More actions"
 needsConfiguring = "Vyžaduje nastavení"
-needsUpload = "Vyžaduje nahraný soubor"
-noSources = "Zatím nejsou připojeny žádné zdroje. Vytvořte jeden, abyste jej mohli použít jako vstup."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Vašemu hledání neodpovídají žádné nástroje."
-pipelineSettings = "Nastavení pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Hledat nástroje"
-selectToolBody = "Přidejte nástroj a vytvořte svou pipeline."
-selectToolTitle = "Zatím žádné nástroje"
 sendToSystem = "Odeslat do jiného systému"
 stepsIncompatible = "Tyto kroky nelze spustit nad tím, co vytváří jejich předchozí krok: {{tools}}."
 stepsNeedSetup = "Tyto kroky je před uložením stále nutné nastavit: {{tools}}."
-toolSettings = "Nastavení nástroje"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Nerozpoznaná operace, ponechána beze změny."
 unsavedBody = "Máte neuložené změny. Uložte je před odchodem, nebo je zahoďte?"
 unsavedTitle = "Neuložené změny"
-uploadUnsupported = "Nahrané soubory zatím nejsou v pipeline podporovány, takže tyto kroky nelze uložit: {{tools}}."
 usesDefaults = "Spouští se s výchozím nastavením"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinuje každý soubor z předchozího kroku"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nelze zkontrolovat, co tento krok přijímá"
 
 [portal.pipelines.composer]
 addTool = "Přidat nástroj"
-cancel = "Zrušit"
-chainEmpty = "Přidejte nástroj a začněte vytvářet svou pipeline."
 create = "Vytvořit pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Zobrazení těchto parametrů nástroje pro úpravy zatím není podporováno."
-moveDown = "Přesunout dolů"
-moveUp = "Přesunout nahoru"
+editSource = "Edit source"
 name = "Název"
 namePlaceholder = "např. Kontrola redakcí"
 noToolSettings = "Tento nástroj nemá žádná konfigurovatelná nastavení."
-operations_one = "Operace ({{count}})"
-operations_other = "Operace ({{count}})"
 output = "Výstup"
-removeStep = "Odebrat operaci"
 save = "Uložit změny"
 scheduleEvery = "Spustit každých"
-sources = "Zdroje"
-sourcesLoading = "Načítání zdrojů..."
 trigger = "Trigger"
 triggerManual = "Pouze ručně"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dní"
 hours = "hodin"
 minutes = "minut"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Smazat „{{name}}“? Tuto akci nelze vrátit zpět."
 cancel = "Zrušit"
@@ -7867,6 +7825,37 @@ connectSource = "Připojit zdroj"
 description = "Vytvořte svou první pipeline: vyberte zdroje, nad kterými běží, zřetězte operace a zvolte, kam půjde výstup."
 title = "Zatím žádné pipeline"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktivní"
 paused = "Pozastaveno"
@@ -7879,7 +7868,6 @@ completed_one = "Běh dokončen."
 completed_other = "Všech {{count}} běhů dokončeno."
 empty = "Není co spustit: zdroje neměly žádné dokumenty ke zpracování."
 failed = "Běh selhal: {{error}}"
-historyCleared = "Historie vymazána. Příští spuštění znovu zpracuje vše, co je aktuálně ve zdrojích."
 inFlight = "Není co nového spustit: dokumenty se stále zpracovávají z dřívějšího spuštění."
 parked_one = "Není co spustit: {{count}} dokument dříve selhal a je odložen. Opravte příčinu a poté vymažte historii, abyste jej zkusili znovu."
 parked_other = "Není co spustit: {{count}} dokumentů dříve selhalo a jsou odloženy. Opravte příčinu a poté vymažte historii, abyste je zkusili znovu."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Zdroje"
 status = "Stav"
 steps = "Kroky"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Sledování složky"
@@ -8209,6 +8198,24 @@ label = "Připojit k issue Jira"
 description = "Odešle zpracovaný dokument jako přílohu."
 label = "Odeslat dokument e-mailem (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Zapíše zpracovaný dokument do složky."
 label = "Nahrát do Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Vyčerpáno"
 subtitle = "Váš bezplatný trial běží do {{date}}. Karta není vyžadována."
 title = "Enterprise trial"
 
-[portal.search]
-ariaLabel = "Hledat"
-placeholder = "Hledat ve Stirling — endpointy, pipeline, dokumentace…"
-
-[portal.search.empty]
-noActionsDescription = "Rychlé akce se zde zobrazí, jakmile budou dostupné."
-noActionsTitle = "Žádné rychlé akce"
-noMatches = "Žádné shody pro „{{query}}“"
-noMatchesDescription = "Zkuste jiné klíčové slovo nebo procházejte katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Zrušit"
 confirm = "Odstranit"
 title = "Odstranit zdroj?"
 
-[portal.sources.empty]
-description = "Připojte složku (a brzy i cloudové úložiště), aby vaše zásady měly odkud dokumenty načítat."
-title = "Zatím nejsou připojeny žádné zdroje"
-
 [portal.sources.kpi]
 inUse = "Používá se"
 total = "Připojení"
@@ -8785,6 +8778,7 @@ unused = "Nepoužito"
 documents = "Dokumenty"
 source = "Zdroj"
 status = "Stav"
+type = "Type"
 usedBy = "Zásady"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Zásady a soukromí"
 [settings.preferences]
 title = "Předvolby"
 
-[settings.search]
-placeholder = "Hledat na stránkách nastavení..."
-
 [settings.security]
 description = "Update your password to keep your account secure."
 title = "Security"
@@ -10128,6 +10119,7 @@ last = "Poslední stránka"
 maintainRatio = "Přepnout zachování poměru stran"
 next = "Další stránka"
 noSavedSigs = "Nebyly nalezeny žádné uložené podpisy"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Osobní podpisy"
 previous = "Předchozí stránka"
 redo = "Znovu"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Background removal failed"
 hint = "Nahrajte PNG nebo JPG s vaším podpisem"
 label = "Nahrát obrázek podpisu"
 placeholder = "Vyberte obrazový soubor"
+previewAlt = "Current image signature"
 processing = "Processing image..."
 removeBackground = "Remove white background (make transparent)"
 
@@ -10179,6 +10172,17 @@ saved = "Vyberte výše uložený podpis a poté klikněte kamkoli do PDF pro je
 text = "Po zadání jména výše klikněte kamkoli do PDF pro umístění podpisu."
 title = "Jak přidat podpis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Přesunout podpis"
 pause = "Pozastavit umisťování"
@@ -10625,6 +10629,23 @@ title = "Nahrát na server"
 updateButton = "Aktualizovat na serveru"
 uploadButton = "Nahrát na server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Vrátit se"
 pdfTools = "Nástroje PDF"
 placeholder = "Vyberte nástroj pro začátek"
 premiumFeature = "Prémiová funkce:"
-searchTools = "Hledat nástroje"
 toolsHeader = "Nástroje"
 viewAllTools = "Zobrazit všechny nástroje"
 
@@ -10822,6 +10842,9 @@ removal = "Odstranění"
 signing = "Podepisování"
 verification = "Ověření"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nebyly nalezeny žádné nástroje"
 noTools = "Žádné dostupné nástroje"
@@ -10979,6 +11002,13 @@ approver = "Schvaluje zásadu"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Zrušit pozvánku pro {{email}}? S aktuálním odkazem se nebudou moci připojit."
 cancelInviteTitle = "Zrušit pozvánku"
@@ -10998,10 +11028,8 @@ title = "Zatím žádní členové"
 addToTeam = "Přidat do týmu"
 guestCount = "{{count}} host"
 guests = "Hosté"
-guestsDesc = "Externí spolupracovníci, omezení na to, co jste sdíleli. Pouze Editor."
 ledBy = "vedeno uživatelem {{owner}}"
 org = "Organizace"
-orgDesc = "Vlastníci s pravomocí v celé org. a schvalováním zásad"
 owners = "{{count}} vlastník"
 team = "Tým {{name}}"
 teamMeta = "{{count}} lidí"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Pozval(a) {{who}}"
 cancel = "Zrušit"
-count = "{{count}} čeká"
-desc = "Pozvaní lidé, kteří se ještě nepřipojili. Drží místo, dokud pozvánku nepřijmou."
 expiresInDays_one = "Vyprší za {{count}} den"
 expiresInDays_other = "Vyprší za {{count}} dní"
 expiresToday = "Vyprší dnes"
 title = "Čekající pozvánky"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Při spojení s backendem došlo k chybě, nebo nemáte přístup. Zkuste to znovu."
 title = "Členy se nepodařilo načíst"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Hledat přílohy"
 title = "Přílohy"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Název záložky"
 bookmarkTitleRequired = "Název záložky je povinný"
 closeSidebar = "Zavřít postranní panel záložek"
 collapseAll = "Sbalit všechny záložky"
+empty = "No bookmarks in this document"
 expandAll = "Rozbalit všechny záložky"
 searchPlaceholder = "Hledat záložky"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Přidat komentář"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Najít v dokumentu"
 moreActions = "Další akce"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Stránka {{page}}"
 placingHint = "Klikněte na stránku pro umístění… (zrušit)"
 removeCommentOnly = "Odebrat pouze komentář"
 saveReply = "Uložit odpověď"
+searchPlaceholder = "Search comments"
 title = "Komentáře"
 typeComment = "Komentář"
 typeInsertText = "Vložit text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Máte neuložené změny"
 closeSidebar = "Zavřít postranní panel vrstev"
 hideAll = "Skrýt všechny vrstvy"
 showAll = "Zobrazit všechny vrstvy"
+title = "Layers"
 
 [viewer.link]
 delete = "Smazat odkaz"
@@ -11646,6 +11682,7 @@ exitRedaction = "Opustit režim začernění"
 exportAll = "Exportovat PDF"
 exportSelected = "Exportovat vybrané stránky"
 formFill = "Vyplnit formulář"
+hideToolbar = "Hide toolbar"
 multiTool = "Multinástroj"
 panMode = "Režim posunu"
 print = "Tisk PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Vybrat vše"
 selectByNumber = "Vybrat podle čísel stránek"
 selectLanguage = "Vyberte jazyk"
 share = "Sdílet"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Přepnout viditelnost anotací"
 toggleAttachments = "Přepnout přílohy"
 toggleBookmarks = "Přepnout záložky"
diff --git a/frontend/editor/public/locales/da-DK/translation.toml b/frontend/editor/public/locales/da-DK/translation.toml
index 057c6e8c16..90f17c7d0f 100644
--- a/frontend/editor/public/locales/da-DK/translation.toml
+++ b/frontend/editor/public/locales/da-DK/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Anvend"
 applyAndContinue = "Gem og forlad"
-areYouSure = "Er du sikker på, at du vil forlade?"
 back = "Tilbage"
 black = "Sort"
 blue = "Blå"
@@ -106,6 +105,7 @@ undoSuccess = "Handling fortrudt"
 unknown = "Ukendt"
 unpin = "Frigør fil (erstat efter værktøjskørsel)"
 unsavedChanges = "Du har ikke-gemte ændringer i din PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Ikke-gemte ændringer"
 unsupported = "Ikke understøttet"
 username = "Brugernavn"
@@ -1879,6 +1879,9 @@ width = "Bredde"
 [app]
 description = "Det gratis alternativ til Adobe Acrobat (10M+ downloads)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konverter til PDF/A-3b"
 convertToPdfA3bDescription = "Opretter en arkiv-PDF med indlejrede vedhæftninger"
@@ -2933,12 +2936,16 @@ text = "For at gøre disse tilladelser uændrerlige skal du bruge værktøjet Ti
 [chat.actions]
 copy = "Kopiér besked"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling-agentindstillinger"
+assistant = "AI Assistant"
 clearChat = "Ryd chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Denne handling vil bruge dine cloud-kreditter"
 tooltip = "Vælg farve fra skærmen"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Vælg farve"
 
 [common]
+actions = "Actions"
 back = "Tilbage"
 cancel = "Annullér"
 close = "Luk"
+codeSample = "Code sample"
 collapse = "Skjul"
 confirm = "Bekræft"
 continue = "Fortsæt"
 copied = "Kopieret!"
 copy = "Kopiér"
 done = "Færdig"
+enterValue = "Enter value"
 error = "Fejl"
 expand = "Udvid"
 loading = "Indlæser..."
 next = "Næste"
+open = "Open"
 preview = "Forhåndsvisning"
 previous = "Forrige"
 refresh = "Opdatér"
 remaining = "Resterende"
 retry = "Prøv igen"
 save = "Gem"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Ryd valgte"
@@ -3185,6 +3199,7 @@ title = "Komprimeringsmetode"
 [compress.settings]
 desiredSize = "Ønsket filstørrelse"
 desiredSizePlaceholder = "Indtast størrelse"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Komprimering er en nem måde at reducere filstørrelsen på. Vælg filstørrelse for at angive en målstørrelse og lad os justere kvaliteten for dig. Vælg kvalitet for at indstille komprimeringsstyrken manuelt."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF-indstillinger"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Vælg først et kildeformat"
 settings = "Indstillinger"
 single = "Enkelt"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Søg..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Redigér"
@@ -3824,11 +3861,13 @@ shareSelected = "Del valgte"
 sharing = "Deling"
 showAll = "Vis alle"
 showHistory = "Vis historik"
+sortBy = "Sort files"
 sortByDate = "Sorter efter dato"
 sortByName = "Sorter efter navn"
 sortBySize = "Sorter efter størrelse"
 storage = "Lagerplads"
 storageState = "Lagring"
+storageUsed = "Storage used"
 synced = "Synkroniseret"
 title = "Upload PDF-filer"
 toolChain = "Anvendte værktøjer"
@@ -3874,8 +3913,12 @@ addFiles = "Tilføj filer"
 addingFiles = "Tilføjer filer…"
 collapse = "Sammenfold sidepanel"
 customizeGroups = "Tilpas grupper"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Åbn filer for at komme i gang"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Udvid sidepanel"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive er ikke konfigureret"
@@ -3888,15 +3931,17 @@ openFromComputer = "Åbn fra computer"
 openSettings = "Åbn indstillinger"
 other = "Andet"
 recent = "Seneste"
-search = "Søg"
-searchPlaceholder = "Søg i filer..."
 viewAll = "Vis alle {{count}} filer"
 
 [fileSidebar.fileItem]
 closeViewer = "Luk fremviser"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Åbn i fremviser"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Nulstil til standarder"
 subtitle = "Gruppér dine filer i overordnede kategorier. Føj eksisterende eller nye etiketter til en kategori, omdøb den, eller opret din egen. Filer, der ikke er i nogen af dine kategorier, vises under “Andet”."
 title = "Sidebjælkekategorier"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Føj til arbejdsområde"
 addToWorkspaceCount = "Føj {{count}} til arbejdsområde"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Tilbage til Mine filer"
 breadcrumbs = "Mappesti"
 cancel = "Annuller"
 classification = "Klassifikation"
-clearSearch = "Ryd søgning"
 clearSelection = "Ryd markering"
 closeDetails = "Luk detaljer"
 create = "Opret"
@@ -3950,6 +4002,7 @@ downloadAll = "Download alle"
 downloadVersion = "Download denne version"
 dropOverlay = "Slip filer for at uploade"
 dropOverlaySub = "Filer starter i Lokal. Brug 'Flyt til' eller 'Gem til skyen' for at organisere dem i en mappe."
+duplicate = "Duplicate"
 file = "Fil"
 fileInfo = "File info"
 fileMenu = "Filhandlinger"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Ændr størrelse på mappetræ (piletaster, Shift for størr
 save = "Gem"
 saveToServer = "Gem til server"
 saveToServerDisabledHint = "Lagring til serveren er ikke aktiveret på denne server. Bed din administrator om at aktivere det."
-search = "Søg"
-searchPlaceholder = "Søg i denne mappe og undermapper"
 selectAll = "Vælg alle"
 selectAllHint = "Klik for at vælge alle. Tip: hold Ctrl (eller Cmd) for at tilføje filer én ad gangen, Shift for at vælge et område."
 selectedCount = "{{count}} valgt"
@@ -4044,6 +4095,10 @@ title = "Ingen skyfiler endnu"
 hint = "Filer gemt uden upload bliver her. Slip en fil for at tilføje en."
 title = "Ingen filer kun lokale"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Filer, du åbner eller redigerer, vil blive vist her."
 title = "Intet ændret endnu"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Kunne ikke slette mappen."
 deleteFolderFailedDetail = "Kunne ikke slette mappen: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Kunne ikke opdatere mappens udseende."
 folderAppearanceFailedDetail = "Kunne ikke opdatere mappens udseende: {{message}}"
 moveFilesFailed = "Kunne ikke flytte filer."
@@ -4113,6 +4170,11 @@ localHint = "Kun gemt i denne browser"
 shared = "Delt"
 sharedHint = "Delt med dig via link"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Ældst først"
 modifiedDesc = "Nyest først"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Ingen filer tilgængelige i lageret. Åbn nogle filer f
 open = "Åbn"
 openFile = "Åbn fil"
 openFiles = "Åbn filer"
+selectFile = "Select {{name}}"
 selectFromStorage = "Vælg fra lager"
 upload = "Upload"
 uploadFile = "Upload fil"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Alt gemt"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Kunne ikke udtrække CSV"
 extractXlsxError = "Kunne ikke udtrække XLSX"
+filled = "filled"
 flattenAfterFilling = "Fladgør efter udfyldning"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obl"
 requiredFieldsError = "Udfyld alle obligatoriske felter"
 rescanFields = "Scan felter igen"
@@ -4795,9 +4863,6 @@ title = "Billede til PDF"
 [imageToPdf]
 tags = "konvertering,img,jpg,billede,foto"
 
-[infoBanner]
-dismiss = "Afvis"
-
 [invite]
 acceptError = "Kunne ikke oprette konto"
 accountFor = "Opretter konto for"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Upload gennemført!"
 uploadSuccessMessage = "Dine billeder er overført."
 validating = "Validerer session..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scan for at uploade fotos. Billeder konverteres automatisk til PDF."
 descriptionNoConvert = "Scan for at uploade fotos fra din mobilenhed."
@@ -4997,8 +5090,13 @@ title = "Upload fra mobil"
 tags = "Multi Værktøj,Multi operation,UI,klik træk,front end,klient side,interaktiv,interagerbar,flyt"
 title = "PDF Multi Værktøj"
 
-[navbar]
-search = "Søg"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Godkendelsen var ikke vellykket. Du kan lukke dette vindue og prøve igen."
@@ -5127,6 +5225,7 @@ activeFiles = "Visningen <strong>Aktive filer</strong> viser alle PDF'er, du har
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Luk"
 cropSettings = "Nu hvor vi har valgt den fil, vi vil beskære, kan vi konfigurere Beskær-værktøjet til at vælge det område, vi vil beskære PDF'en til."
+dialogLabel = "Onboarding"
 fileCheckbox = "Klik på en af filerne for at vælge den til behandling. Du kan vælge flere filer til batchhandlinger."
 fileReplacement = "Den ændrede fil erstatter automatisk den originale fil i Arbejdsbordet, så du nemt kan køre den gennem flere værktøjer."
 filesButton = "Knappen <strong>Filer</strong> på værktøjslinjen til hurtig adgang lader dig uploade PDF'er til brug i værktøjerne."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF Til PDF/A"
 tags = "arkiv,langtids,standard,konvertering,opbevaring,bevaring"
 title = "PDF Til PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "udskrivning,standard,konvertering,produktion,førtryk,arkiv"
 title = "PDF til PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kreditter"
 xsmall = "100 kreditter"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Vælg den plan, der passer til dine behov"
 title = "Tilgængelige planer"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Månedlig forbrugsgrænse nået"
 title = "Kunne ikke åbne Stripe-portalen"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "af {{allowance}} gratis PDFs brugt"
 capSuffix_other = "af {{allowance}} gratis PDFs brugt"
 eyebrow = "Processor-prøveperiode"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Send et dokument eller en notifikation via email, når en politik kører."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Arkivér behandlede dokumenter i Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Officielle SDKs"
 beta = "Beta"
 deprecated = "Forældet"
 
-[portal.docs.search]
-empty = "Ingen matchende docs"
-placeholder = "Søg i docs"
-results = "{{count}} resultater"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Medfølgende, navngivne kapabiliteter, som din agent kalder som ét enkelt værktøj. Hver skill er en deterministisk operationskæde med evals tilknyttet."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Ingen dokumenter matcher dette filter."
 rowActions = "Rækkehandlinger"
 sensitiveLabel = "Følsom"
-sensitiveTitle = "Følsom — adgang påkrævet"
 
 [portal.documents.table.columns]
 action = "Pipeline / handling"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Status"
 time = "Tidspunkt"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Sidst set"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Denne visning ramte en uventet fejl. Prøv igen, eller vælg en a
 retry = "Prøv igen"
 title = "Noget gik galt på denne side"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Tilbage"
 body = "Download desktop-appen, eller self-host serveren."
@@ -7380,11 +7560,6 @@ cancel = "Annuller"
 confirm = "Tilbagekald nøgle"
 title = "Tilbagekald API-nøgle"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attesteret"
-inScope = "Inden for scope"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrer revisionshændelser efter kategori"
 heading = "Revisionslogge"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Succes"
 warning = "Advarsel"
 
-[portal.infrastructure.certLabel]
-certified = "Certificeret"
-inProgress = "I gang"
-notStarted = "Ikke startet"
-
 [portal.infrastructure.createKey]
 cancel = "Annuller"
 createKey = "Opret nøgle"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopiér denne hemmelighed nu — den vises ikke igen."
 title = "Opret API-nøgle"
 titleCreated = "Nøgle oprettet"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "I kø"
-rolledBack = "Rullet tilbage"
-rolling = "Udrulles"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Udrullet af"
-environment = "Miljø"
-product = "Produkt"
-status = "Status"
-version = "Version"
-when = "Hvornår"
-
-[portal.infrastructure.deployments.recent]
-heading = "Seneste udrulninger"
-subheading = "De seneste udrulninger på tværs af produkter og miljøer."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instanser"
-latency = "Latens"
-load = "Belastning"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Gennemløb"
-uptime = "Oppetid"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regioner"
-subheading = "Live tilstand for hver udrullet Stirling-region — latens, belastning og udrulningsversion."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Udrullede regioner vises her, når dit arbejdsområde er provisioneret."
-title = "Ingen regioner udrullet"
-
 [portal.infrastructure.keyLabel]
 active = "Aktiv"
 revoked = "Tilbagekaldt"
 
-[portal.infrastructure.modelLabel]
-active = "Aktiv"
-degraded = "Forringet"
-disabled = "Deaktiveret"
-
-[portal.infrastructure.models]
-heading = "Modeller"
-msValue = "{{value}} ms"
-subheading = "Modelkataloget og routingen, der driver dokumentbehandling på tværs af dit arbejdsområde."
-
-[portal.infrastructure.models.byom]
-description = "Registrer en on-prem- eller selvhostet model, og fastgør den til en region til behandling bundet af dataplacering."
-title = "Brug din egen model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Administrerede modeller tilgængelige for dit arbejdsområde med live latens og omkostning."
-subEnterprise = "Administrerede, bring-your-own og on-prem-modeller — med fastgørelse pr. region tilgængelig."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modeller i dit arbejdsområdes katalog vises her."
-title = "Ingen modeller tilgængelige"
-
-[portal.infrastructure.models.columns]
-cost = "Omkostning"
-latency = "Latens"
-load = "Belastning"
-model = "Model"
-status = "Status"
-type = "Type"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/kald"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktive modeller"
-avgLatency = "Gns. latens"
-included = "Inkluderet"
-monthlySpend = "Månedligt modelforbrug"
-
-[portal.infrastructure.models.routing]
-empty = "Ingen routingregler konfigureret."
-heading = "Routingregler"
-sub = "Hvilken model håndterer hver operation. Standarden anvendes, når ingen snævrere regel matcher."
-subLocked = "Route operationer til specifikke modeller — tilgængeligt på betalte planer."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Opgrader til Pro for at styre, hvilken model der håndterer hver operation og dokumenttype."
-title = "Model-routing er en betalt funktion"
-
-[portal.infrastructure.models.routingColumns]
-default = "Standard"
-docType = "Dokumenttype"
-modelForAria = "Model for {{operation}}"
-operation = "Operation"
-routedTo = "Routet til"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klassifikation"
-extraction = "Udtrækning"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Forringet"
-down = "Nede"
-healthy = "Sund"
-
-[portal.infrastructure.security.access.byok]
-description = "Lever en nøgle fra dit eget KMS. Stirling krypterer med den, men kan stadig læse."
-label = "Brug din egen nøgle (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Nøgler forlader aldrig dit KMS. Stirling har kun ciphertext."
-label = "Behold din egen nøgle (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling administrerer krypteringsnøgler. Enklest — nul nøgleoperationer fra din side."
-label = "Stirling-holdte nøgler"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Politik for dokumentadgang"
-subheading = "Styrer, hvem der kan dekryptere behandlede dokumenter i hvile."
-
-[portal.infrastructure.security.attestations]
-heading = "Complianceattestationer"
-noReport = "Ingen rapport tilgængelig"
-subheading = "Revisionsstatus framework for framework med rapporter tilgængelige for attesterede kontroller."
-viewReport = "Se rapport →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Attestationer og certificeringer, der dækker Stirling-platformen."
-
-[portal.infrastructure.security.empty]
-description = "Dit arbejdsområdes sikkerhedskonfiguration vises her."
-title = "Sikkerhedsstatus utilgængelig"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Med HYOK forlader krypteringsnøgler aldrig dit KMS. Stirling gemmer og behandler kun ciphertext, som du kan tilbagekalde når som helst."
-title = "Stirling kan ikke dekryptere dine dokumenter"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Ingen IP-intervaller konfigureret — alle IP'er tilladt."
-heading = "IP allowlist"
-sub = "API-adgang er begrænset til disse CIDR-intervaller."
-subLocked = "Begræns API-adgang til kendte IP-intervaller — tilgængeligt på betalte planer."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Opgrader til Pro for at begrænse API-adgang til specifikke netværk."
-title = "IP allowlisting er en betalt funktion"
-
-[portal.infrastructure.security.ipColumns]
-added = "Tilføjet"
-addedBy = "Tilføjet af"
-cidr = "CIDR"
-label = "Etiket"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritme"
-heading = "Administration af krypteringsnøgler"
-keyId = "Nøgleidentifikator"
-lastRotated = "Sidst roteret"
-rotateKey = "Rotér nøgle"
-rotationPolicy = "Rotationspolitik"
-subheading = "Forvaltning af nøglerne, der krypterer dokumenter i hvile — hvem der kan dekryptere, og hvordan nøgler roteres."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) og hold-your-own-key (HYOK) forvaltning er tilgængelige på Enterprise. Opgrader for at levere nøgler fra dit eget KMS."
-title = "Nøgler administreres af Stirling på din plan"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asien-Stillehavsområdet"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR-datagrænse"
-label = "Den Europæiske Union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "USA"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Dataplacering"
-subheading = "Hvor dokumenter gemmes og behandles."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} brugt"
-
-[portal.infrastructure.storage.empty]
-description = "Forbundet lager og forbrug vises her."
-title = "Intet lager konfigureret"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktiv"
-activeRange = "0–{{value}}d"
-archived = "Arkiveret"
-coldStorage = "kold lagring"
-deleted = "Slettet"
-never = "aldrig"
-purged = "renset"
-
-[portal.infrastructure.storage.providers]
-connect = "Forbind"
-connected = "Forbundet"
-heading = "Forbundne udbydere"
-subheading = "Hvor behandlede artefakter skrives."
-
-[portal.infrastructure.storage.retention]
-heading = "Opbevaring"
-subheading = "Hvor længe artefakter bevares før livscyklussletning."
-windowLabel = "Standard opbevaringsvindue"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dag"
-days_other = "{{count}} dage"
-never = "Slet aldrig"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Samlet forbrug"
-progressLabel = "Lager brugt"
-subheading = "Lager forbrugt på tværs af alle forbundne udbydere."
-
 [portal.infrastructure.tabs]
 apiKeys = "API-nøgler"
 audit = "Revisionslogge"
@@ -7715,11 +7657,9 @@ security = "Sikkerhed"
 storage = "Lager"
 
 [portal.integrations]
-addAnother = "Tilføj en mere"
 availableHeading = "Tilgængelige"
 comingSoonHeading = "Kommer snart"
 connect = "Forbind"
-connectedHeading = "Forbundet"
 connectionCount_one = "{{count}} forbindelse"
 connectionCount_other = "{{count}} forbindelser"
 customApi = "Brugerdefineret API"
@@ -7737,6 +7677,10 @@ security = "Sikkerhed"
 signing = "Signering"
 storage = "Lager"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Forbundet"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrationer"
 pipelines = "Pipelines"
 policies = "Politikker"
 procurement = "Indkøb"
-settings = "Indstillinger"
 sources = "Kilder"
 usage = "Forbrug og fakturering"
 users = "Brugere"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Ny pipeline"
 
 [portal.pipelines.builder]
-addStep = "Tilføj værktøj"
+activate = "Activate"
 back = "Tilbage til pipelines"
 cannotFollow = "Kan ikke tage {{produced}}"
 chooseAccount = "Vælg en konto"
@@ -7792,28 +7735,38 @@ chooseDestination = "Vælg en destination"
 chooseOperation = "Vælg, hvad dette trin gør"
 chooseSource = "Vælg en kilde"
 discard = "Kassér ændringer"
-enabled = "Aktiveret"
 inputs = "Input"
 inputSource = "Inputkilde"
 inputTrigger = "Trigger"
 keepEditing = "Fortsæt redigering"
+moreActions = "More actions"
 needsConfiguring = "Skal opsættes"
-needsUpload = "Kræver en uploadet fil"
-noSources = "Ingen kilder er forbundet endnu. Opret en for at bruge den som input."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Ingen værktøjer matcher din søgning."
-pipelineSettings = "Pipelineindstillinger"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Søg i værktøjer"
-selectToolBody = "Tilføj et værktøj for at bygge din pipeline."
-selectToolTitle = "Ingen værktøjer endnu"
 sendToSystem = "Send til et andet system"
 stepsIncompatible = "Disse trin kan ikke køre på det, deres forrige trin producerer: {{tools}}."
 stepsNeedSetup = "Disse trin skal stadig opsættes før lagring: {{tools}}."
-toolSettings = "Værktøjsindstillinger"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Ukendt operation, bevaret som den er."
 unsavedBody = "Du har ændringer, der ikke er gemt. Gem dem, før du forlader siden, eller kassér dem?"
 unsavedTitle = "Ikke-gemte ændringer"
-uploadUnsupported = "Uploadede filer understøttes endnu ikke i pipelines, så disse trin kan ikke gemmes: {{tools}}."
 usesDefaults = "Kører med standardindstillinger"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinerer alle filer fra det forrige trin"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Kan ikke kontrollere, hvad dette trin accepterer"
 
 [portal.pipelines.composer]
 addTool = "Tilføj værktøj"
-cancel = "Annuller"
-chainEmpty = "Tilføj et værktøj for at begynde at bygge din pipeline."
 create = "Opret pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Visning af disse værktøjsparametre til redigering understøttes endnu ikke."
-moveDown = "Flyt ned"
-moveUp = "Flyt op"
+editSource = "Edit source"
 name = "Navn"
 namePlaceholder = "f.eks. Redaction sweep"
 noToolSettings = "Dette værktøj har ingen konfigurerbare indstillinger."
-operations_one = "Operation ({{count}})"
-operations_other = "Operationer ({{count}})"
 output = "Output"
-removeStep = "Fjern operation"
 save = "Gem ændringer"
 scheduleEvery = "Kør hver"
-sources = "Kilder"
-sourcesLoading = "Indlæser kilder..."
 trigger = "Trigger"
 triggerManual = "Kun manuel"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dage"
 hours = "timer"
 minutes = "minutter"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Slet \"{{name}}\"? Dette kan ikke fortrydes."
 cancel = "Annuller"
@@ -7867,6 +7825,37 @@ connectSource = "Forbind en kilde"
 description = "Opret din første pipeline: vælg de kilder, den kører over, kæd operationerne sammen, og vælg, hvor output skal placeres."
 title = "Ingen pipelines endnu"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktive"
 paused = "Sat på pause"
@@ -7879,7 +7868,6 @@ completed_one = "Kørsel fuldført."
 completed_other = "Alle {{count}} kørsler fuldført."
 empty = "Intet at køre: kilderne havde ingen dokumenter at behandle."
 failed = "Kørsel mislykkedes: {{error}}"
-historyCleared = "Historik ryddet. Næste kørsel genbehandler alt, der aktuelt er i kilderne."
 inFlight = "Intet nyt at køre: dokumenter behandles stadig fra en tidligere kørsel."
 parked_one = "Intet at køre: {{count}} dokument fejlede tidligere og er parkeret. Ret årsagen, og ryd derefter historikken for at prøve igen."
 parked_other = "Intet at køre: {{count}} dokumenter fejlede tidligere og er parkeret. Ret årsagen, og ryd derefter historikken for at prøve igen."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Kilder"
 status = "Status"
 steps = "Trin"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Mappeovervågning"
@@ -8209,6 +8198,24 @@ label = "Vedhæft til en Jira-sag"
 description = "Sender det behandlede dokument som en vedhæftning."
 label = "Send dokumentet via email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Skriver det behandlede dokument til en mappe."
 label = "Upload til Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maksimum nået"
 subtitle = "Din gratis prøveperiode løber til {{date}}. Intet kort kræves."
 title = "Enterprise-prøveperiode"
 
-[portal.search]
-ariaLabel = "Søg"
-placeholder = "Søg i Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Hurtighandlinger vises her, når de er tilgængelige."
-noActionsTitle = "Ingen hurtighandlinger"
-noMatches = "Ingen matches for \"{{query}}\""
-noMatchesDescription = "Prøv et andet søgeord, eller gennemse kataloget."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Annuller"
 confirm = "Slet"
 title = "Slet kilde?"
 
-[portal.sources.empty]
-description = "Forbind en mappe (og snart cloud storage), så dine politikker har et sted at hente dokumenter fra."
-title = "Ingen kilder forbundet endnu"
-
 [portal.sources.kpi]
 inUse = "I brug"
 total = "Forbindelser"
@@ -8785,6 +8778,7 @@ unused = "Ubrugt"
 documents = "Dokumenter"
 source = "Kilde"
 status = "Status"
+type = "Type"
 usedBy = "Politikker"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politikker & Privatliv"
 [settings.preferences]
 title = "Præferencer"
 
-[settings.search]
-placeholder = "Søg i indstillingssider..."
-
 [settings.security]
 description = "Opdater din adgangskode for at holde din konto sikker."
 title = "Sikkerhed"
@@ -10128,6 +10119,7 @@ last = "Sidste side"
 maintainRatio = "Skift bevarelse af billedforhold"
 next = "Næste side"
 noSavedSigs = "Ingen Gemte Signaturer Fundet"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Personlige Signaturer"
 previous = "Forrige side"
 redo = "Gentag"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Fjernelse af baggrund mislykkedes"
 hint = "Upload et PNG- eller JPG-billede af din underskrift"
 label = "Upload billede af underskrift"
 placeholder = "Vælg billedfil"
+previewAlt = "Current image signature"
 processing = "Behandler billede..."
 removeBackground = "Fjern hvid baggrund (gør gennemsigtig)"
 
@@ -10179,6 +10172,17 @@ saved = "Vælg en gemt signatur ovenfor, og klik derefter hvor som helst på PDF
 text = "Når du har indtastet dit navn ovenfor, klik hvor som helst på PDF'en for at placere din underskrift."
 title = "Sådan tilføjer du underskrift"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Flyt underskrift"
 pause = "Sæt placering på pause"
@@ -10625,6 +10629,23 @@ title = "Upload til server"
 updateButton = "Opdater på server"
 uploadButton = "Upload til server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Gå tilbage"
 pdfTools = "PDF-værktøjer"
 placeholder = "Vælg et værktøj for at komme i gang"
 premiumFeature = "Premium-funktion:"
-searchTools = "Søg i værktøjer"
 toolsHeader = "Værktøjer"
 viewAllTools = "Vis alle værktøjer"
 
@@ -10822,6 +10842,9 @@ removal = "Fjernelse"
 signing = "Signering"
 verification = "Verifikation"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Ingen værktøjer fundet"
 noTools = "Ingen værktøjer tilgængelige"
@@ -10979,6 +11002,13 @@ approver = "Godkender politik"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Annuller invitationen til {{email}}? De vil ikke kunne deltage med det aktuelle link."
 cancelInviteTitle = "Annuller invitation"
@@ -10998,10 +11028,8 @@ title = "Ingen medlemmer endnu"
 addToTeam = "Føj til team"
 guestCount = "{{count}} gæst"
 guests = "Gæster"
-guestsDesc = "Eksterne samarbejdspartnere, begrænset til det, du har delt. Kun Editor."
 ledBy = "ledet af {{owner}}"
 org = "Organisation"
-orgDesc = "Ejere med organisationsdækkende autoritet og politikgodkendelse"
 owners = "{{count}} ejer"
 team = "{{name}}-team"
 teamMeta = "{{count}} personer"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Inviteret af {{who}}"
 cancel = "Annuller"
-count = "{{count}} afventende"
-desc = "Inviterede personer, som ikke har tilmeldt sig endnu. De optager en plads, indtil de accepterer."
 expiresInDays_one = "Udløber om {{count}} dag"
 expiresInDays_other = "Udløber om {{count}} dage"
 expiresToday = "Udløber i dag"
 title = "Afventende invitationer"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Noget gik galt ved kontakt til backend, eller du har ikke adgang. Prøv igen."
 title = "Kunne ikke indlæse medlemmer"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Søg i vedhæftninger"
 title = "Vedhæftninger"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Bogmærketitel"
 bookmarkTitleRequired = "Bogmærketitel er påkrævet"
 closeSidebar = "Luk sidepanelet for bogmærker"
 collapseAll = "Skjul alle bogmærker"
+empty = "No bookmarks in this document"
 expandAll = "Udvid alle bogmærker"
 searchPlaceholder = "Søg i bogmærker"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Tilføj kommentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Find i dokument"
 moreActions = "Flere handlinger"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Side {{page}}"
 placingHint = "Klik på en side for at placere… (annuller)"
 removeCommentOnly = "Fjern kun kommentar"
 saveReply = "Gem svar"
+searchPlaceholder = "Search comments"
 title = "Kommentarer"
 typeComment = "Kommentar"
 typeInsertText = "Indsæt tekst"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Du har ikke-gemte ændringer"
 closeSidebar = "Luk sidepanelet for lag"
 hideAll = "Skjul alle lag"
 showAll = "Vis alle lag"
+title = "Layers"
 
 [viewer.link]
 delete = "Slet link"
@@ -11646,6 +11682,7 @@ exitRedaction = "Afslut maskeringstilstand"
 exportAll = "Eksporter PDF"
 exportSelected = "Eksporter valgte sider"
 formFill = "Udfyld formular"
+hideToolbar = "Hide toolbar"
 multiTool = "Multiværktøj"
 panMode = "Panoreringstilstand"
 print = "Udskriv PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Vælg alle"
 selectByNumber = "Vælg efter sidetal"
 selectLanguage = "Vælg sprog"
 share = "Del"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Slå anmærkninger til/fra"
 toggleAttachments = "Slå vedhæftede filer til/fra"
 toggleBookmarks = "Slå bogmærker til/fra"
diff --git a/frontend/editor/public/locales/de-DE/translation.toml b/frontend/editor/public/locales/de-DE/translation.toml
index 75fcb2376a..d4de81d3ee 100644
--- a/frontend/editor/public/locales/de-DE/translation.toml
+++ b/frontend/editor/public/locales/de-DE/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alphabet"
 apply = "Anwenden"
 applyAndContinue = "Anwenden & Fortfahren"
-areYouSure = "Möchten Sie die Seite wirklich verlassen?"
 back = "Zurück"
 black = "Schwarz"
 blue = "Blau"
@@ -106,6 +105,7 @@ undoSuccess = "Vorgang erfolgreich rückgängig gemacht"
 unknown = "Unbekannt"
 unpin = "Datei lösen (nach Tool-Ausführung ersetzen)"
 unsavedChanges = "Sie haben ungespeicherte Änderungen an Ihrer PDF. Was möchten Sie tun?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Ungespeicherte Änderungen"
 unsupported = "Nicht unterstützt"
 username = "Benutzername"
@@ -1879,6 +1879,9 @@ width = "Width"
 [app]
 description = "Die kostenlose Adobe Acrobat Alternative (über 10 Millionen Downloads)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "In PDF/A-3b konvertieren"
 convertToPdfA3bDescription = "Erstellt ein Archiv-PDF mit eingebetteten Anhängen"
@@ -2933,12 +2936,16 @@ text = "Um diese Berechtigungen unveränderlich zu machen, verwenden Sie das Pas
 [chat.actions]
 copy = "Nachricht kopieren"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling-Agent-Optionen"
+assistant = "AI Assistant"
 clearChat = "Chat löschen"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Dieser Vorgang verwendet Ihre Cloud-Credits"
 tooltip = "Farbe vom Bildschirm aufnehmen"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Farbe wählen"
 
 [common]
+actions = "Actions"
 back = "Zurück"
 cancel = "Abbrechen"
 close = "Schließen"
+codeSample = "Code sample"
 collapse = "Einklappen"
 confirm = "Bestätigen"
 continue = "Weiter"
 copied = "Kopiert!"
 copy = "Kopieren"
 done = "Fertig"
+enterValue = "Enter value"
 error = "Fehler"
 expand = "Ausklappen"
 loading = "Laden..."
 next = "Weiter"
+open = "Open"
 preview = "Vorschau"
 previous = "Zurück"
 refresh = "Aktualisieren"
 remaining = "Verbleibend"
 retry = "Wiederholen"
 save = "Save"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Auswahl löschen"
@@ -3185,6 +3199,7 @@ title = "Kompressions-Methode"
 [compress.settings]
 desiredSize = "Gewünschte Dateigröße"
 desiredSizePlaceholder = "Größe eingeben"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Komprimierung ist eine einfache Möglichkeit, Ihre Dateigröße zu reduzieren. Wählen Sie Dateigröße, um eine Zielgröße einzugeben und wir passen die Qualität für Sie an. Wählen Sie Qualität, um die Komprimierungsstärke manuell festzulegen."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF-Optionen"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Wählen Sie zuerst ein Quellformat aus"
 settings = "Einstellungen"
 single = "Einzeln"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Suchen..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Bearbeiten"
@@ -3824,11 +3861,13 @@ shareSelected = "Auswahl freigeben"
 sharing = "Freigabe"
 showAll = "Alle anzeigen"
 showHistory = "Verlauf anzeigen"
+sortBy = "Sort files"
 sortByDate = "Nach Datum sortieren"
 sortByName = "Nach Name sortieren"
 sortBySize = "Nach Größe sortieren"
 storage = "Speicher"
 storageState = "Speicher"
+storageUsed = "Storage used"
 synced = "Synchronisiert"
 title = "PDF-Dateien hochladen"
 toolChain = "Angewendete Werkzeuge"
@@ -3874,8 +3913,12 @@ addFiles = "Dateien hinzufügen"
 addingFiles = "Dateien werden hinzugefügt…"
 collapse = "Seitenleiste einklappen"
 customizeGroups = "Gruppen anpassen"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Öffnen Sie Dateien, um zu beginnen"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Seitenleiste ausklappen"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ist nicht konfiguriert"
@@ -3888,15 +3931,17 @@ openFromComputer = "Vom Computer öffnen"
 openSettings = "Einstellungen öffnen"
 other = "Andere"
 recent = "Zuletzt verwendet"
-search = "Suchen"
-searchPlaceholder = "Dateien suchen..."
 viewAll = "Alle {{count}} Dateien anzeigen"
 
 [fileSidebar.fileItem]
 closeViewer = "Viewer schließen"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Im Viewer öffnen"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Auf Standardwerte zurücksetzen"
 subtitle = "Gruppieren Sie Ihre Dateien in übergeordnete Kategorien. Fügen Sie vorhandene oder neue Labels zu einer Kategorie hinzu, benennen Sie sie um oder erstellen Sie eine eigene. Dateien, die in keiner Ihrer Kategorien sind, erscheinen unter „Andere“."
 title = "Seitenleisten-Kategorien"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Zum Arbeitsbereich hinzufügen"
 addToWorkspaceCount = "{{count}} zum Arbeitsbereich hinzufügen"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Zurück zu Meine Dateien"
 breadcrumbs = "Ordnerpfad"
 cancel = "Abbrechen"
 classification = "Klassifizierung"
-clearSearch = "Suche löschen"
 clearSelection = "Auswahl aufheben"
 closeDetails = "Details schließen"
 create = "Erstellen"
@@ -3950,6 +4002,7 @@ downloadAll = "Alle herunterladen"
 downloadVersion = "Diese Version herunterladen"
 dropOverlay = "Dateien zum Hochladen hier ablegen"
 dropOverlaySub = "Dateien starten in Lokal. Verwenden Sie 'Verschieben nach' oder 'In die Cloud speichern', um sie in einem Ordner zu organisieren."
+duplicate = "Duplicate"
 file = "Datei"
 fileInfo = "File info"
 fileMenu = "Dateiaktionen"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Ordnerbaum skalieren (Pfeiltasten, Umschalt für größere S
 save = "Speichern"
 saveToServer = "Auf dem Server speichern"
 saveToServerDisabledHint = "Speichern auf dem Server ist auf diesem Server nicht aktiviert. Bitten Sie Ihren Administrator, es zu aktivieren."
-search = "Suchen"
-searchPlaceholder = "Diesen Ordner & Unterordner durchsuchen"
 selectAll = "Alle auswählen"
 selectAllHint = "Klicken, um alles auszuwählen. Tipp: Halten Sie Strg (oder Cmd), um Dateien einzeln hinzuzufügen, Umschalt zum Auswählen eines Bereichs."
 selectedCount = "{{count}} ausgewählt"
@@ -4044,6 +4095,10 @@ title = "Noch keine Cloud-Dateien"
 hint = "Ohne Hochladen gespeicherte Dateien bleiben hier. Legen Sie eine Datei ab, um eine hinzuzufügen."
 title = "Keine nur lokalen Dateien"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Dateien, die Sie öffnen oder bearbeiten, erscheinen hier."
 title = "Noch nichts geändert"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Ordner konnte nicht gelöscht werden."
 deleteFolderFailedDetail = "Ordner konnte nicht gelöscht werden: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Ordner-Erscheinungsbild konnte nicht aktualisiert werden."
 folderAppearanceFailedDetail = "Ordner-Erscheinungsbild konnte nicht aktualisiert werden: {{message}}"
 moveFilesFailed = "Dateien konnten nicht verschoben werden."
@@ -4113,6 +4170,11 @@ localHint = "Nur in diesem Browser gespeichert"
 shared = "Geteilt"
 sharedHint = "Über Link mit Ihnen geteilt"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Älteste zuerst"
 modifiedDesc = "Neueste zuerst"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Keine Dateien im Speicher verfügbar. Öffnen Sie zuerst
 open = "Öffnen"
 openFile = "Datei öffnen"
 openFiles = "Dateien öffnen"
+selectFile = "Select {{name}}"
 selectFromStorage = "Aus Speicher auswählen"
 upload = "Hochladen"
 uploadFile = "Datei hochladen"
@@ -4800,9 +4863,6 @@ title = "Bild zu PDF"
 [imageToPdf]
 tags = "konvertierung,img,jpg,bild,foto"
 
-[infoBanner]
-dismiss = "Ausblenden"
-
 [invite]
 acceptError = "Konto konnte nicht erstellt werden"
 accountFor = "Konto wird erstellt für"
@@ -4984,6 +5044,34 @@ uploadSuccess = "Upload Successful!"
 uploadSuccessMessage = "Ihre Bilder wurden übertragen."
 validating = "Validating session..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scannen Sie, um Fotos hochzuladen. Bilder werden automatisch in PDF konvertiert."
 descriptionNoConvert = "Scannen Sie, um Fotos von Ihrem Mobilgerät hochzuladen."
@@ -5002,8 +5090,13 @@ title = "Von Mobilgerät hochladen"
 tags = "Multi-Tool,Mehrfachoperation,UI,Klicken und Ziehen,Frontend,clientseitig"
 title = "PDF-Multitool"
 
-[navbar]
-search = "Suche"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Die Authentifizierung war nicht erfolgreich. Sie können dieses Fenster schließen und es erneut versuchen."
@@ -5132,6 +5225,7 @@ activeFiles = "Die Ansicht <strong>Aktive Dateien</strong> zeigt alle PDFs, die
 allTools = "Dies ist das Panel <strong>Alle Tools</strong>, in dem Sie alle verfügbaren PDF-Tools durchsuchen und auswählen können."
 close = "Schließen"
 cropSettings = "Nachdem wir die Datei ausgewählt haben, die wir zuschneiden möchten, können wir das Tool Zuschneiden konfigurieren, um den Bereich auszuwählen, auf den das PDF zugeschnitten werden soll."
+dialogLabel = "Onboarding"
 fileCheckbox = "Durch Klicken auf eine der Dateien wählen Sie diese zur Verarbeitung aus. Sie können mehrere Dateien für Batch-Operationen auswählen."
 fileReplacement = "Die geänderte Datei ersetzt automatisch die Originaldatei im Arbeitsbereich, sodass Sie sie einfach mit weiteren Tools verarbeiten können."
 filesButton = "Mit der Schaltfläche <strong>Dateien</strong> in der Schnellzugriffsleiste können Sie PDFs hochladen, um die Tools darauf anzuwenden."
@@ -5568,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5647,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5975,6 +6071,11 @@ header = "PDF zu PDF/A"
 tags = "archiv,langfristig,standard,konvertierung,speicherung,aufbewahrung"
 title = "PDF zu PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "druck,standard,konvertierung,produktion,vorstufe,archiv"
 title = "PDF in PDF/X"
@@ -6050,6 +6151,7 @@ small = "500 Credits"
 xsmall = "100 Credits"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Wählen Sie den Plan, der Ihren Anforderungen entspricht"
 title = "Verfügbare Pläne"
 
@@ -6629,6 +6731,7 @@ reachedTitle = "Monatliches Ausgabenlimit erreicht"
 title = "Stripe-Portal konnte nicht geöffnet werden"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "von {{allowance}} kostenlosen PDFs genutzt"
 capSuffix_other = "von {{allowance}} kostenlosen PDFs genutzt"
 eyebrow = "Processor-Testversion"
@@ -6878,6 +6981,32 @@ label = "Jira"
 description = "Ein Dokument oder eine Benachrichtigung per E-Mail senden, wenn eine Richtlinie ausgeführt wird."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Verarbeitete Dokumente in Nextcloud ablegen."
@@ -7082,11 +7211,6 @@ title = "Offizielle SDKs"
 beta = "Beta"
 deprecated = "Veraltet"
 
-[portal.docs.search]
-empty = "Keine passenden Dokumente"
-placeholder = "Dokumentation suchen"
-results = "{{count}} Ergebnisse"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Gebündelte, benannte Fähigkeiten, die Ihr Agent als einzelnes Tool aufruft. Jeder Skill ist eine deterministische Operationskette mit angehängten Evals."
@@ -7185,11 +7309,11 @@ editorAction = "Editor"
 empty = "Keine Dokumente entsprechen diesem Filter."
 rowActions = "Zeilenaktionen"
 sensitiveLabel = "Sensibel"
-sensitiveTitle = "Sensibel — Zugriff erforderlich"
 
 [portal.documents.table.columns]
 action = "Pipeline / Aktion"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Status"
 time = "Zeit"
@@ -7205,6 +7329,7 @@ host = "Host"
 lastSeen = "Zuletzt gesehen"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7279,6 +7404,56 @@ description = "In dieser Ansicht ist ein unerwarteter Fehler aufgetreten. Versuc
 retry = "Erneut versuchen"
 title = "Auf dieser Seite ist etwas schiefgelaufen"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Zurück"
 body = "Laden Sie die Desktop-App herunter oder hosten Sie den Server selbst."
@@ -7385,11 +7560,6 @@ cancel = "Abbrechen"
 confirm = "Schlüssel widerrufen"
 title = "API-Schlüssel widerrufen"
 
-[portal.infrastructure.attestationLabel]
-attested = "Bestätigt"
-inScope = "Im Geltungsbereich"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Audit-Ereignisse nach Kategorie filtern"
 heading = "Audit-Protokolle"
@@ -7461,11 +7631,6 @@ info = "Info"
 success = "Erfolg"
 warning = "Warnung"
 
-[portal.infrastructure.certLabel]
-certified = "Zertifiziert"
-inProgress = "In Bearbeitung"
-notStarted = "Nicht gestartet"
-
 [portal.infrastructure.createKey]
 cancel = "Abbrechen"
 createKey = "Schlüssel erstellen"
@@ -7479,238 +7644,10 @@ subtitleCreated = "Kopieren Sie dieses Secret jetzt — es wird nicht erneut ang
 title = "API-Schlüssel erstellen"
 titleCreated = "Schlüssel erstellt"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "In Warteschlange"
-rolledBack = "Zurückgesetzt"
-rolling = "Wird ausgerollt"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Bereitgestellt von"
-environment = "Umgebung"
-product = "Produkt"
-status = "Status"
-version = "Version"
-when = "Wann"
-
-[portal.infrastructure.deployments.recent]
-heading = "Letzte Bereitstellungen"
-subheading = "Die neuesten Rollouts über Produkte und Umgebungen hinweg."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instanzen"
-latency = "Latenz"
-load = "Last"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Durchsatz"
-uptime = "Uptime"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regionen"
-subheading = "Live-Zustand für jede bereitgestellte Stirling-Region — Latenz, Last und Rollout-Version."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Bereitgestellte Regionen erscheinen hier, sobald Ihr Arbeitsbereich bereitgestellt ist."
-title = "Keine Regionen bereitgestellt"
-
 [portal.infrastructure.keyLabel]
 active = "Aktiv"
 revoked = "Widerrufen"
 
-[portal.infrastructure.modelLabel]
-active = "Aktiv"
-degraded = "Beeinträchtigt"
-disabled = "Deaktiviert"
-
-[portal.infrastructure.models]
-heading = "Modelle"
-msValue = "{{value}} ms"
-subheading = "Der Modellkatalog und das Routing, die die Dokumentverarbeitung in Ihrem Arbeitsbereich antreiben."
-
-[portal.infrastructure.models.byom]
-description = "Registrieren Sie ein On-Prem- oder selbst gehostetes Modell und pinnen Sie es an eine Region für datenresidenzgebundene Verarbeitung."
-title = "Eigenes Modell verwenden"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Verwaltete Modelle, die Ihrem Arbeitsbereich zur Verfügung stehen, mit Live-Latenz und Kosten."
-subEnterprise = "Verwaltete, eigene und On-Prem-Modelle — mit verfügbarem Pinning pro Region."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modelle im Katalog Ihres Arbeitsbereichs erscheinen hier."
-title = "Keine Modelle verfügbar"
-
-[portal.infrastructure.models.columns]
-cost = "Kosten"
-latency = "Latenz"
-load = "Last"
-model = "Modell"
-status = "Status"
-type = "Typ"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/Aufruf"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktive Modelle"
-avgLatency = "Durchschn. Latenz"
-included = "Enthalten"
-monthlySpend = "Monatliche Modellausgaben"
-
-[portal.infrastructure.models.routing]
-empty = "Keine Routing-Regeln konfiguriert."
-heading = "Routing-Regeln"
-sub = "Welches Modell welche Operation verarbeitet. Die Standardeinstellung gilt, wenn keine spezifischere Regel passt."
-subLocked = "Leiten Sie Operationen an bestimmte Modelle weiter — verfügbar in kostenpflichtigen Plänen."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Upgraden Sie auf Pro, um zu steuern, welches Modell welche Operation und welchen Dokumenttyp verarbeitet."
-title = "Modell-Routing ist eine kostenpflichtige Funktion"
-
-[portal.infrastructure.models.routingColumns]
-default = "Standard"
-docType = "Dokumenttyp"
-modelForAria = "Modell für {{operation}}"
-operation = "Operation"
-routedTo = "Weitergeleitet an"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klassifizierung"
-extraction = "Extraktion"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Beeinträchtigt"
-down = "Ausgefallen"
-healthy = "Fehlerfrei"
-
-[portal.infrastructure.security.access.byok]
-description = "Stellen Sie einen Schlüssel aus Ihrem eigenen KMS bereit. Stirling verschlüsselt damit, kann aber weiterhin lesen."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Schlüssel verlassen niemals Ihr KMS. Stirling hält nur Ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling verwaltet Verschlüsselungsschlüssel. Am einfachsten — kein Schlüsselbetrieb auf Ihrer Seite."
-label = "Von Stirling gehaltene Schlüssel"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Dokumentzugriffsrichtlinie"
-subheading = "Steuert, wer verarbeitete ruhende Dokumente entschlüsseln kann."
-
-[portal.infrastructure.security.attestations]
-heading = "Compliance-Attestierungen"
-noReport = "Kein Bericht verfügbar"
-subheading = "Audit-Status nach Framework, mit Berichten zu attestierten Kontrollen."
-viewReport = "Bericht anzeigen →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Attestierungen und Zertifizierungen für die Stirling-Plattform."
-
-[portal.infrastructure.security.empty]
-description = "Die Sicherheitskonfiguration Ihres Arbeitsbereichs erscheint hier."
-title = "Sicherheitsstatus nicht verfügbar"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Mit HYOK verlassen Verschlüsselungsschlüssel niemals Ihr KMS. Stirling speichert und verarbeitet nur Ciphertext, den Sie jederzeit widerrufen können."
-title = "Stirling kann Ihre Dokumente nicht entschlüsseln"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Keine IP-Bereiche konfiguriert — alle IPs erlaubt."
-heading = "IP-Allowlist"
-sub = "API-Zugriff ist auf diese CIDR-Bereiche beschränkt."
-subLocked = "Beschränken Sie API-Zugriff auf bekannte IP-Bereiche — verfügbar in kostenpflichtigen Plänen."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Upgraden Sie auf Pro, um API-Zugriff auf bestimmte Netzwerke zu beschränken."
-title = "IP-Allowlisting ist eine kostenpflichtige Funktion"
-
-[portal.infrastructure.security.ipColumns]
-added = "Hinzugefügt"
-addedBy = "Hinzugefügt von"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithmus"
-heading = "Verwaltung von Verschlüsselungsschlüsseln"
-keyId = "Schlüsselkennung"
-lastRotated = "Zuletzt rotiert"
-rotateKey = "Schlüssel rotieren"
-rotationPolicy = "Rotationsrichtlinie"
-subheading = "Verwahrung der Schlüssel, die ruhende Dokumente verschlüsseln — wer entschlüsseln kann und wie Schlüssel rotieren."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) und hold-your-own-key (HYOK) sind in Enterprise verfügbar. Upgraden Sie, um Schlüssel aus Ihrem eigenen KMS bereitzustellen."
-title = "Schlüssel werden in Ihrem Plan von Stirling verwaltet"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asien-Pazifik"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR-Datengrenze"
-label = "Europäische Union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Vereinigte Staaten"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Datenresidenz"
-subheading = "Wo Dokumente gespeichert und verarbeitet werden."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} genutzt"
-
-[portal.infrastructure.storage.empty]
-description = "Verbundener Speicher und Nutzung erscheinen hier."
-title = "Kein Speicher konfiguriert"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktiv"
-activeRange = "0–{{value}} T"
-archived = "Archiviert"
-coldStorage = "Cold Storage"
-deleted = "Gelöscht"
-never = "nie"
-purged = "endgültig gelöscht"
-
-[portal.infrastructure.storage.providers]
-connect = "Verbinden"
-connected = "Verbunden"
-heading = "Verbundene Anbieter"
-subheading = "Wohin verarbeitete Artefakte geschrieben werden."
-
-[portal.infrastructure.storage.retention]
-heading = "Aufbewahrung"
-subheading = "Wie lange Artefakte vor der Lifecycle-Löschung aufbewahrt werden."
-windowLabel = "Standard-Aufbewahrungsfenster"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} Tag"
-days_other = "{{count}} Tage"
-never = "Nie löschen"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Gesamtnutzung"
-progressLabel = "Genutzter Speicher"
-subheading = "Speicherverbrauch über alle verbundenen Anbieter hinweg."
-
 [portal.infrastructure.tabs]
 apiKeys = "API-Schlüssel"
 audit = "Audit-Protokolle"
@@ -7720,11 +7657,9 @@ security = "Sicherheit"
 storage = "Speicher"
 
 [portal.integrations]
-addAnother = "Weitere hinzufügen"
 availableHeading = "Verfügbar"
 comingSoonHeading = "Demnächst"
 connect = "Verbinden"
-connectedHeading = "Verbunden"
 connectionCount_one = "{{count}} Verbindung"
 connectionCount_other = "{{count}} Verbindungen"
 customApi = "Benutzerdefinierte API"
@@ -7742,6 +7677,10 @@ security = "Sicherheit"
 signing = "Signieren"
 storage = "Speicher"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Verbunden"
 
@@ -7772,7 +7711,6 @@ integrations = "Integrationen"
 pipelines = "Pipelines"
 policies = "Richtlinien"
 procurement = "Beschaffung"
-settings = "Einstellungen"
 sources = "Quellen"
 usage = "Nutzung & Abrechnung"
 users = "Benutzer"
@@ -7789,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Neue Pipeline"
 
 [portal.pipelines.builder]
-addStep = "Tool hinzufügen"
+activate = "Activate"
 back = "Zurück zu Pipelines"
 cannotFollow = "Kann {{produced}} nicht übernehmen"
 chooseAccount = "Konto auswählen"
@@ -7797,28 +7735,38 @@ chooseDestination = "Ziel auswählen"
 chooseOperation = "Auswählen, was dieser Schritt tut"
 chooseSource = "Quelle auswählen"
 discard = "Änderungen verwerfen"
-enabled = "Aktiviert"
 inputs = "Eingabe"
 inputSource = "Eingabequelle"
 inputTrigger = "Trigger"
 keepEditing = "Weiter bearbeiten"
+moreActions = "More actions"
 needsConfiguring = "Einrichtung erforderlich"
-needsUpload = "Benötigt eine hochgeladene Datei"
-noSources = "Noch keine Quellen verbunden. Erstellen Sie eine, um sie als Eingabe zu verwenden."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Keine Tools entsprechen Ihrer Suche."
-pipelineSettings = "Pipeline-Einstellungen"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Tools suchen"
-selectToolBody = "Fügen Sie ein Tool hinzu, um Ihre Pipeline zu erstellen."
-selectToolTitle = "Noch keine Tools"
 sendToSystem = "An ein anderes System senden"
 stepsIncompatible = "Diese Schritte können nicht mit dem ausgeführt werden, was der vorherige Schritt erzeugt: {{tools}}."
 stepsNeedSetup = "Diese Schritte müssen vor dem Speichern noch eingerichtet werden: {{tools}}."
-toolSettings = "Tool-Einstellungen"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Nicht erkannte Operation, unverändert beibehalten."
 unsavedBody = "Sie haben ungespeicherte Änderungen. Speichern Sie sie vor dem Verlassen oder verwerfen Sie sie?"
 unsavedTitle = "Ungespeicherte Änderungen"
-uploadUnsupported = "Hochgeladene Dateien werden in Pipelines noch nicht unterstützt, daher können diese Schritte nicht gespeichert werden: {{tools}}."
 usesDefaults = "Läuft mit Standardeinstellungen"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombiniert jede Datei aus dem vorherigen Schritt"
@@ -7830,31 +7778,36 @@ undeclared-operation = "Kann nicht prüfen, was dieser Schritt akzeptiert"
 
 [portal.pipelines.composer]
 addTool = "Tool hinzufügen"
-cancel = "Abbrechen"
-chainEmpty = "Fügen Sie ein Tool hinzu, um mit dem Erstellen Ihrer Pipeline zu beginnen."
 create = "Pipeline erstellen"
+createPaused = "Create paused"
 editingUnsupported = "Die Anzeige dieser Tool-Parameter zur Bearbeitung wird noch nicht unterstützt."
-moveDown = "Nach unten verschieben"
-moveUp = "Nach oben verschieben"
+editSource = "Edit source"
 name = "Name"
 namePlaceholder = "z. B. Schwärzungsprüfung"
 noToolSettings = "Dieses Tool hat keine konfigurierbaren Einstellungen."
-operations_one = "Operation ({{count}})"
-operations_other = "Operationen ({{count}})"
 output = "Ausgabe"
-removeStep = "Operation entfernen"
 save = "Änderungen speichern"
 scheduleEvery = "Ausführen alle"
-sources = "Quellen"
-sourcesLoading = "Quellen werden geladen..."
 trigger = "Trigger"
 triggerManual = "Nur manuell"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "Tage"
 hours = "Stunden"
 minutes = "Minuten"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" löschen? Dies kann nicht rückgängig gemacht werden."
 cancel = "Abbrechen"
@@ -7872,6 +7825,37 @@ connectSource = "Quelle verbinden"
 description = "Erstellen Sie Ihre erste Pipeline: Wählen Sie die Quellen aus, über die sie läuft, verketten Sie die Operationen und wählen Sie, wohin die Ausgabe geht."
 title = "Noch keine Pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktiv"
 paused = "Pausiert"
@@ -7884,7 +7868,6 @@ completed_one = "Ausführung abgeschlossen."
 completed_other = "Alle {{count}} Ausführungen abgeschlossen."
 empty = "Nichts auszuführen: Die Quellen hatten keine zu verarbeitenden Dokumente."
 failed = "Ausführung fehlgeschlagen: {{error}}"
-historyCleared = "Verlauf gelöscht. Der nächste Lauf verarbeitet alles erneut, was sich derzeit in den Quellen befindet."
 inFlight = "Nichts Neues auszuführen: Dokumente werden noch aus einem früheren Lauf verarbeitet."
 parked_one = "Nichts auszuführen: {{count}} Dokument ist zuvor fehlgeschlagen und geparkt. Beheben Sie die Ursache und löschen Sie dann den Verlauf, um es erneut zu versuchen."
 parked_other = "Nichts auszuführen: {{count}} Dokumente sind zuvor fehlgeschlagen und geparkt. Beheben Sie die Ursache und löschen Sie dann den Verlauf, um sie erneut zu versuchen."
@@ -7900,6 +7883,7 @@ name = "Pipeline"
 sources = "Quellen"
 status = "Status"
 steps = "Schritte"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Ordnerüberwachung"
@@ -8214,6 +8198,24 @@ label = "An einen Jira-Issue anhängen"
 description = "Sendet das verarbeitete Dokument als Anhang."
 label = "Dokument per E-Mail senden (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Schreibt das verarbeitete Dokument in einen Ordner."
 label = "In Nextcloud hochladen"
@@ -8688,16 +8690,6 @@ maxed = "Ausgeschöpft"
 subtitle = "Ihre kostenlose Testversion läuft bis {{date}}. Keine Karte erforderlich."
 title = "Enterprise-Testversion"
 
-[portal.search]
-ariaLabel = "Suchen"
-placeholder = "Stirling durchsuchen — Endpoints, Pipelines, Dokumente…"
-
-[portal.search.empty]
-noActionsDescription = "Schnellaktionen werden hier angezeigt, sobald sie verfügbar sind."
-noActionsTitle = "Keine Schnellaktionen"
-noMatches = "Keine Treffer für „{{query}}“"
-noMatchesDescription = "Versuchen Sie ein anderes Schlüsselwort oder durchsuchen Sie den Katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8748,10 +8740,6 @@ cancel = "Abbrechen"
 confirm = "Löschen"
 title = "Quelle löschen?"
 
-[portal.sources.empty]
-description = "Verbinden Sie einen Ordner (und bald Cloud-Speicher), damit Ihre Richtlinien einen Ort haben, von dem sie Dokumente abrufen können."
-title = "Noch keine Quellen verbunden"
-
 [portal.sources.kpi]
 inUse = "In Verwendung"
 total = "Verbindungen"
@@ -8790,6 +8778,7 @@ unused = "Unbenutzt"
 documents = "Dokumente"
 source = "Quelle"
 status = "Status"
+type = "Type"
 usedBy = "Richtlinien"
 
 [portal.sources.types.box]
@@ -9985,9 +9974,6 @@ title = "Richtlinien & Datenschutz"
 [settings.preferences]
 title = "Einstellungen"
 
-[settings.search]
-placeholder = "Einstellungen durchsuchen..."
-
 [settings.security]
 description = "Aktualisieren Sie Ihr Passwort, um Ihr Konto zu schützen."
 title = "Sicherheit"
@@ -10133,6 +10119,7 @@ last = "Letzte Seite"
 maintainRatio = "Seitenverhältnis beibehalten ein-/ausschalten"
 next = "Nächste Seite"
 noSavedSigs = "Es wurden keine gespeicherten Signaturen gefunden"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Persönliche Signaturen"
 previous = "Vorherige Seite"
 redo = "Wiederherstellen"
@@ -10171,6 +10158,7 @@ backgroundRemovalFailedTitle = "Hintergrund konnte nicht entfernt werden"
 hint = "Laden Sie ein PNG- oder JPG-Bild Ihrer Unterschrift hoch"
 label = "Unterschriftsbild hochladen"
 placeholder = "Bilddatei auswählen"
+previewAlt = "Current image signature"
 processing = "Bild wird verarbeitet..."
 removeBackground = "Weißen Hintergrund entfernen (transparent machen)"
 
@@ -10184,6 +10172,17 @@ saved = "Wählen Sie oben eine gespeicherte Unterschrift und klicken Sie dann in
 text = "Nachdem Sie oben Ihren Namen eingegeben haben, klicken Sie irgendwo auf das PDF, um Ihre Signatur zu platzieren."
 title = "So fügen Sie eine Unterschrift hinzu"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Signatur bewegen"
 pause = "Platzieren pausieren"
@@ -10630,6 +10629,23 @@ title = "Auf Server hochladen"
 updateButton = "Auf Server aktualisieren"
 uploadButton = "Auf Server hochladen"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10779,7 +10795,6 @@ goBack = "Zurück"
 pdfTools = "PDF-Tools"
 placeholder = "Wählen Sie ein Tool, um zu starten"
 premiumFeature = "Premium-Funktion:"
-searchTools = "Tools suchen"
 toolsHeader = "Tools"
 viewAllTools = "Alle Tools anzeigen"
 
@@ -10827,6 +10842,9 @@ removal = "Entfernung"
 signing = "Signierung"
 verification = "Verifizierung"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Keine Tools gefunden"
 noTools = "Keine Tools verfügbar"
@@ -10984,6 +11002,13 @@ approver = "Genehmigt Richtlinie"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Einladung an {{email}} zurückziehen? Diese Person kann dem Team mit dem aktuellen Link nicht mehr beitreten."
 cancelInviteTitle = "Einladung zurückziehen"
@@ -11003,10 +11028,8 @@ title = "Noch keine Mitglieder"
 addToTeam = "Zum Team hinzufügen"
 guestCount = "{{count}} Gast"
 guests = "Gäste"
-guestsDesc = "Externe Mitwirkende, beschränkt auf das, was Sie geteilt haben. Nur Editor."
 ledBy = "geleitet von {{owner}}"
 org = "Organisation"
-orgDesc = "Inhaber mit organisationsweiter Befugnis und Richtliniengenehmigung"
 owners = "{{count}} Inhaber"
 team = "Team {{name}}"
 teamMeta = "{{count}} Personen"
@@ -11046,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Eingeladen von {{who}}"
 cancel = "Zurückziehen"
-count = "{{count}} ausstehend"
-desc = "Eingeladene Personen, die noch nicht beigetreten sind. Sie belegen einen Platz, bis sie die Einladung annehmen."
 expiresInDays_one = "Läuft in {{count}} Tag ab"
 expiresInDays_other = "Läuft in {{count}} Tagen ab"
 expiresToday = "Läuft heute ab"
 title = "Ausstehende Einladungen"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Beim Zugriff auf das Backend ist etwas schiefgelaufen, oder Sie haben keinen Zugriff. Versuchen Sie es erneut."
 title = "Mitglieder konnten nicht geladen werden"
@@ -11242,12 +11267,15 @@ searchPlaceholder = "Search attachments"
 title = "Attachments"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Lesezeichentitel"
 bookmarkTitleRequired = "Ein Lesezeichentitel ist erforderlich"
 closeSidebar = "Seitenleiste für Lesezeichen schließen"
 collapseAll = "Alle Lesezeichen einklappen"
+empty = "No bookmarks in this document"
 expandAll = "Alle Lesezeichen ausklappen"
 searchPlaceholder = "Lesezeichen durchsuchen"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Kommentar hinzufügen"
@@ -11269,10 +11297,12 @@ locateAnnotation = "Im Dokument anzeigen"
 moreActions = "Weitere Aktionen"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Seite {{page}}"
 placingHint = "Zum Platzieren auf eine Seite klicken… (Abbrechen)"
 removeCommentOnly = "Nur Kommentar entfernen"
 saveReply = "Antwort speichern"
+searchPlaceholder = "Search comments"
 title = "Kommentare"
 typeComment = "Kommentar"
 typeInsertText = "Text einfügen"
@@ -11295,6 +11325,7 @@ unsavedDesc = "Sie haben ungespeicherte Änderungen"
 closeSidebar = "Seitenleiste für Ebenen schließen"
 hideAll = "Alle Ebenen ausblenden"
 showAll = "Alle Ebenen anzeigen"
+title = "Layers"
 
 [viewer.link]
 delete = "Link löschen"
@@ -11651,6 +11682,7 @@ exitRedaction = "Schwärzungsmodus beenden"
 exportAll = "PDF exportieren"
 exportSelected = "Ausgewählte Seiten exportieren"
 formFill = "Formular ausfüllen"
+hideToolbar = "Hide toolbar"
 multiTool = "Multitool"
 panMode = "Verschiebemodus"
 print = "PDF drucken"
@@ -11671,6 +11703,7 @@ selectAll = "Alle auswählen"
 selectByNumber = "Nach Seitenzahlen auswählen"
 selectLanguage = "Sprache auswählen"
 share = "Teilen"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Anmerkungen ein-/ausblenden"
 toggleAttachments = "Anhänge ein-/ausblenden"
 toggleBookmarks = "Lesezeichen ein-/ausblenden"
diff --git a/frontend/editor/public/locales/el-GR/translation.toml b/frontend/editor/public/locales/el-GR/translation.toml
index 9b40dd49ca..4c380b9447 100644
--- a/frontend/editor/public/locales/el-GR/translation.toml
+++ b/frontend/editor/public/locales/el-GR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Αλφάβητο"
 apply = "Εφαρμογή"
 applyAndContinue = "Αποθήκευση & Έξοδος"
-areYouSure = "Είστε βέβαιοι ότι θέλετε να αποχωρήσετε;"
 back = "Πίσω"
 black = "Μαύρο"
 blue = "Μπλε"
@@ -106,6 +105,7 @@ undoSuccess = "Η ενέργεια αναιρέθηκε με επιτυχία"
 unknown = "Άγνωστο"
 unpin = "Ξεκαρφίτσωμα αρχείου (αντικατάσταση μετά την εκτέλεση εργαλείου)"
 unsavedChanges = "Έχετε μη αποθηκευμένες αλλαγές στο PDF σας."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Μη αποθηκευμένες αλλαγές"
 unsupported = "Μη υποστηριζόμενο"
 username = "Όνομα χρήστη"
@@ -1879,6 +1879,9 @@ width = "Πλάτος"
 [app]
 description = "Η δωρεάν εναλλακτική του Adobe Acrobat (10M+ λήψεις)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Μετατροπή σε PDF/A-3b"
 convertToPdfA3bDescription = "Δημιουργεί αρχειακό PDF με ενσωματωμένα συνημμένα"
@@ -2933,12 +2936,16 @@ text = "Για να καταστούν αυτά τα δικαιώματα μη 
 [chat.actions]
 copy = "Αντιγραφή μηνύματος"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Επιλογές πράκτορα Stirling"
+assistant = "AI Assistant"
 clearChat = "Καθαρισμός συνομιλίας"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Αυτή η λειτουργία θα χρησιμοποιήσει τ
 tooltip = "Επιλογή χρώματος από την οθόνη"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Επιλέξτε χρώμα"
 
 [common]
+actions = "Actions"
 back = "Πίσω"
 cancel = "Άκυρο"
 close = "Κλείσιμο"
+codeSample = "Code sample"
 collapse = "Σύμπτυξη"
 confirm = "Επιβεβαίωση"
 continue = "Συνέχεια"
 copied = "Αντιγράφηκε!"
 copy = "Αντιγραφή"
 done = "Τέλος"
+enterValue = "Enter value"
 error = "Σφάλμα"
 expand = "Ανάπτυξη"
 loading = "Φόρτωση..."
 next = "Επόμενο"
+open = "Open"
 preview = "Προεπισκόπηση"
 previous = "Προηγούμενο"
 refresh = "Ανανέωση"
 remaining = "Απομένουν"
 retry = "Επανάληψη"
 save = "Αποθήκευση"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Καθαρισμός επιλεγμένων"
@@ -3185,6 +3199,7 @@ title = "Μέθοδος συμπίεσης"
 [compress.settings]
 desiredSize = "Επιθυμητό μέγεθος αρχείου"
 desiredSizePlaceholder = "Εισαγάγετε μέγεθος"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Η συμπίεση είναι ένας εύκολος τρόπος να μειώσετε το μέγεθος του αρχείου σας. Επιλέξτε Μέγεθος αρχείου για να εισαγάγετε έναν στόχο και να προσαρμόσουμε την ποιότητα για εσάς. Επιλέξτε Ποιότητα για να ρυθμίσετε χειροκίνητα την ισχύ συμπίεσης."
@@ -3387,6 +3402,24 @@ pdfOptions = "Επιλογές PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Επιλέξτε πρώτα μορφή προέλευσης"
 settings = "Ρυθμίσεις"
 single = "Μονό"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Αναζήτηση..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Επεξεργασία"
@@ -3824,11 +3861,13 @@ shareSelected = "Κοινή χρήση επιλεγμένων"
 sharing = "Κοινή χρήση"
 showAll = "Προβολή όλων"
 showHistory = "Εμφάνιση ιστορικού"
+sortBy = "Sort files"
 sortByDate = "Ταξινόμηση κατά ημερομηνία"
 sortByName = "Ταξινόμηση κατά όνομα"
 sortBySize = "Ταξινόμηση κατά μέγεθος"
 storage = "Αποθήκευση"
 storageState = "Αποθήκευση"
+storageUsed = "Storage used"
 synced = "Συγχρονισμένο"
 title = "Μεταφόρτωση αρχείων PDF"
 toolChain = "Εργαλεία που εφαρμόστηκαν"
@@ -3874,8 +3913,12 @@ addFiles = "Προσθήκη αρχείων"
 addingFiles = "Προσθήκη αρχείων…"
 collapse = "Σύμπτυξη πλευρικής στήλης"
 customizeGroups = "Προσαρμογή ομάδων"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Ανοίξτε αρχεία για να ξεκινήσετε"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Ανάπτυξη πλευρικής στήλης"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Το Google Drive δεν έχει ρυθμιστεί"
@@ -3888,15 +3931,17 @@ openFromComputer = "Άνοιγμα από υπολογιστή"
 openSettings = "Άνοιγμα ρυθμίσεων"
 other = "Άλλα"
 recent = "Πρόσφατα"
-search = "Αναζήτηση"
-searchPlaceholder = "Αναζήτηση αρχείων..."
 viewAll = "Προβολή όλων των {{count}} αρχείων"
 
 [fileSidebar.fileItem]
 closeViewer = "Κλείσιμο προβολέα"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Άνοιγμα στον προβολέα"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Επαναφορά προεπιλογών"
 subtitle = "Ομαδοποιήστε τα αρχεία σας σε γονικές κατηγορίες. Προσθέστε υπάρχουσες ή νέες ετικέτες σε μια κατηγορία, μετονομάστε την ή δημιουργήστε τη δική σας. Τα αρχεία που δεν ανήκουν σε καμία από τις κατηγορίες σας εμφανίζονται στην ενότητα «Άλλα»."
 title = "Κατηγορίες πλαϊνής γραμμής"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Προσθήκη σε χώρο εργασίας"
 addToWorkspaceCount = "Προσθήκη {{count}} σε χώρο εργασίας"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Πίσω στα Αρχεία μου"
 breadcrumbs = "Διαδρομή φακέλου"
 cancel = "Άκυρο"
 classification = "Ταξινόμηση"
-clearSearch = "Καθαρισμός αναζήτησης"
 clearSelection = "Εκκαθάριση επιλογής"
 closeDetails = "Κλείσιμο λεπτομερειών"
 create = "Δημιουργία"
@@ -3950,6 +4002,7 @@ downloadAll = "Λήψη όλων"
 downloadVersion = "Λήψη αυτής της έκδοσης"
 dropOverlay = "Αποθέστε αρχεία για μεταφόρτωση"
 dropOverlaySub = "Τα αρχεία ξεκινούν στο Local. Χρησιμοποιήστε 'Μετακίνηση σε' ή 'Αποθήκευση στο cloud' για να τα οργανώσετε σε φάκελο."
+duplicate = "Duplicate"
 file = "Αρχείο"
 fileInfo = "File info"
 fileMenu = "Ενέργειες αρχείου"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Αλλαγή μεγέθους δέντρου φακέλων
 save = "Αποθήκευση"
 saveToServer = "Αποθήκευση στον διακομιστή"
 saveToServerDisabledHint = "Η αποθήκευση στον διακομιστή δεν είναι ενεργοποιημένη σε αυτόν τον διακομιστή. Ζητήστε από τον διαχειριστή σας να την ενεργοποιήσει."
-search = "Αναζήτηση"
-searchPlaceholder = "Αναζήτηση σε αυτόν τον φάκελο & υποφακέλους"
 selectAll = "Επιλογή όλων"
 selectAllHint = "Κάντε κλικ για επιλογή όλων. Συμβουλή: κρατήστε πατημένο το Ctrl (ή Cmd) για να προσθέτετε αρχεία ένα-ένα, Shift για επιλογή εύρους."
 selectedCount = "{{count}} επιλεγμένα"
@@ -4044,6 +4095,10 @@ title = "Δεν υπάρχουν ακόμη αρχεία cloud"
 hint = "Αρχεία που αποθηκεύτηκαν χωρίς μεταφόρτωση μένουν εδώ. Αποθέστε ένα αρχείο για προσθήκη."
 title = "Δεν υπάρχουν μόνο-τοπικά αρχεία"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Αρχεία που ανοίγετε ή επεξεργάζεστε θα εμφανιστούν εδώ."
 title = "Δεν έχει τροποποιηθεί ακόμα τίποτα"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Δεν ήταν δυνατή η διαγραφή φακέλου."
 deleteFolderFailedDetail = "Δεν ήταν δυνατή η διαγραφή φακέλου: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Δεν ήταν δυνατή η ενημέρωση εμφάνισης φακέλου."
 folderAppearanceFailedDetail = "Δεν ήταν δυνατή η ενημέρωση εμφάνισης φακέλου: {{message}}"
 moveFilesFailed = "Δεν ήταν δυνατή η μετακίνηση αρχείων."
@@ -4113,6 +4170,11 @@ localHint = "Αποθηκευμένο μόνο σε αυτό το πρόγραμ
 shared = "Κοινοποιημένο"
 sharedHint = "Κοινοποιήθηκε σε εσάς μέσω συνδέσμου"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Παλαιότερα πρώτα"
 modifiedDesc = "Πιο πρόσφατα πρώτα"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Δεν υπάρχουν αρχεία στην αποθή
 open = "Άνοιγμα"
 openFile = "Άνοιγμα αρχείου"
 openFiles = "Άνοιγμα αρχείων"
+selectFile = "Select {{name}}"
 selectFromStorage = "Επιλογή από αποθήκευση"
 upload = "Μεταφόρτωση"
 uploadFile = "Μεταφόρτωση αρχείου"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Όλα αποθηκεύτηκαν"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Απέτυχε η εξαγωγή CSV"
 extractXlsxError = "Απέτυχε η εξαγωγή XLSX"
+filled = "filled"
 flattenAfterFilling = "Επιπεδοποίηση μετά τη συμπλήρωση"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "απαιτ."
 requiredFieldsError = "Συμπληρώστε όλα τα απαιτούμενα πεδία"
 rescanFields = "Επανασάρωση πεδίων"
@@ -4795,9 +4863,6 @@ title = "Εικόνα σε PDF"
 [imageToPdf]
 tags = "μετατροπή,εικόνα,jpg,φωτογραφία"
 
-[infoBanner]
-dismiss = "Απόρριψη"
-
 [invite]
 acceptError = "Αποτυχία δημιουργίας λογαριασμού"
 accountFor = "Δημιουργία λογαριασμού για"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Η μεταφόρτωση ολοκληρώθηκε!"
 uploadSuccessMessage = "Οι εικόνες σας μεταφέρθηκαν."
 validating = "Γίνεται επικύρωση συνεδρίας..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Σαρώστε για μεταφόρτωση φωτογραφιών. Οι εικόνες μετατρέπονται αυτόματα σε PDF."
 descriptionNoConvert = "Σαρώστε για μεταφόρτωση φωτογραφιών από την κινητή συσκευή σας."
@@ -4997,8 +5090,13 @@ title = "Μεταφόρτωση από κινητό"
 tags = "Πολυεργαλείο,Πολλαπλές λειτουργίες,UI,κλικ και σύρσιμο,frontend,πλευρά πελάτη,διαδραστικό,διαχειρίσιμο,μετακίνηση,διαγραφή,μετανάστευση,διαίρεση"
 title = "Πολυεργαλείο PDF"
 
-[navbar]
-search = "Αναζήτηση"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Η ταυτοποίηση δεν ήταν επιτυχής. Μπορείτε να κλείσετε αυτό το παράθυρο και να δοκιμάσετε ξανά."
@@ -5127,6 +5225,7 @@ activeFiles = "Η προβολή <strong>Ενεργά αρχεία</strong> εμ
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Κλείσιμο"
 cropSettings = "Τώρα που επιλέξαμε το αρχείο που θέλουμε να περικόψουμε, μπορούμε να ρυθμίσουμε το εργαλείο Περικοπή για να ορίσουμε την περιοχή στην οποία θέλουμε να περικοπεί το PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Κάνοντας κλικ σε ένα από τα αρχεία το επιλέγετε για επεξεργασία. Μπορείτε να επιλέξετε πολλαπλά αρχεία για ομαδικές ενέργειες."
 fileReplacement = "Το τροποποιημένο αρχείο θα αντικαταστήσει αυτόματα το πρωτότυπο στην Επιφάνεια εργασίας, ώστε να μπορείτε εύκολα να το περάσετε από περισσότερα εργαλεία."
 filesButton = "Το κουμπί <strong>Αρχεία</strong> στη Γραμμή Γρήγορης Πρόσβασης σάς επιτρέπει να ανεβάσετε PDF για χρήση με τα εργαλεία."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF σε PDF/A"
 tags = "αρχείο,μακροχρόνιο,πρότυπο,μετατροπή,αποθήκευση,διατήρηση"
 title = "PDF σε PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "εκτύπωση,πρότυπο,μετατροπή,παραγωγή,προεκτύπωση,αρχειοθέτηση"
 title = "PDF σε PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 μονάδες"
 xsmall = "100 μονάδες"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Επιλέξτε το πλάνο που ταιριάζει στις ανάγκες σας"
 title = "Διαθέσιμα πλάνα"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Το μηνιαίο όριο δαπανών επιτεύχθηκ
 title = "Δεν ήταν δυνατό το άνοιγμα του portal του Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "από {{allowance}} δωρεάν PDFs χρησιμοποιήθηκε"
 capSuffix_other = "από {{allowance}} δωρεάν PDFs χρησιμοποιήθηκαν"
 eyebrow = "Δοκιμή Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Αποστολή email με έγγραφο ή ειδοποίηση όταν εκτελείται μια πολιτική."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Αρχειοθέτηση επεξεργασμένων εγγράφων στο Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Επίσημα SDKs"
 beta = "Beta"
 deprecated = "Καταργημένο"
 
-[portal.docs.search]
-empty = "Δεν υπάρχουν αντίστοιχα docs"
-placeholder = "Αναζήτηση docs"
-results = "{{count}} αποτελέσματα"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Συσκευασμένες, ονομασμένες δυνατότητες που ο πράκτοράς σας καλεί ως ένα ενιαίο εργαλείο. Κάθε skill είναι μια ντετερμινιστική αλυσίδα λειτουργιών με συνδεδεμένα evals."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Κανένα έγγραφο δεν αντιστοιχεί σε αυτό το φίλτρο."
 rowActions = "Ενέργειες γραμμής"
 sensitiveLabel = "Ευαίσθητο"
-sensitiveTitle = "Ευαίσθητο — απαιτείται πρόσβαση"
 
 [portal.documents.table.columns]
 action = "Ροή εργασίας / Ενέργεια"
 document = "Έγγραφο"
+labels = "Labels"
 product = "Προϊόν"
 status = "Κατάσταση"
 time = "Ώρα"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Τελευταία εμφάνιση"
 region = "Περιοχή"
 status = "Κατάσταση"
+target = "Target"
 version = "Έκδοση"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Αυτή η προβολή αντιμετώπισε ένα απρ
 retry = "Δοκιμάστε ξανά"
 title = "Κάτι πήγε στραβά σε αυτήν τη σελίδα"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Πίσω"
 body = "Κατεβάστε την εφαρμογή desktop ή φιλοξενήστε μόνοι σας τον server."
@@ -7380,11 +7560,6 @@ cancel = "Ακύρωση"
 confirm = "Ανάκληση κλειδιού"
 title = "Ανάκληση API κλειδιού"
 
-[portal.infrastructure.attestationLabel]
-attested = "Βεβαιωμένο"
-inScope = "Εντός πεδίου"
-notApplicable = "Δ/Υ"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Φιλτράρισμα συμβάντων ελέγχου κατά κατηγορία"
 heading = "Αρχεία καταγραφής ελέγχου"
@@ -7456,11 +7631,6 @@ info = "Πληροφορίες"
 success = "Επιτυχία"
 warning = "Προειδοποίηση"
 
-[portal.infrastructure.certLabel]
-certified = "Πιστοποιημένο"
-inProgress = "Σε εξέλιξη"
-notStarted = "Δεν έχει ξεκινήσει"
-
 [portal.infrastructure.createKey]
 cancel = "Ακύρωση"
 createKey = "Δημιουργία key"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Αντιγράψτε αυτό το secret τώρα — δεν
 title = "Δημιουργία API key"
 titleCreated = "Το key δημιουργήθηκε"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "Σε ουρά"
-rolledBack = "Έγινε rollback"
-rolling = "Σε ανάπτυξη"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/λεπτό"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Αναπτύχθηκε από"
-environment = "Περιβάλλον"
-product = "Προϊόν"
-status = "Κατάσταση"
-version = "Έκδοση"
-when = "Πότε"
-
-[portal.infrastructure.deployments.recent]
-heading = "Πρόσφατες αναπτύξεις"
-subheading = "Τα πιο πρόσφατα rollouts σε προϊόντα και περιβάλλοντα."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Παρουσίες"
-latency = "Καθυστέρηση"
-load = "Φόρτος"
-p99 = "P99"
-region = "Περιοχή"
-status = "Κατάσταση"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Έκδοση"
-
-[portal.infrastructure.deployments.regions]
-heading = "Περιοχές"
-subheading = "Ζωντανή υγεία για κάθε αναπτυγμένη περιοχή Stirling — καθυστέρηση, φόρτος και έκδοση rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Οι αναπτυγμένες περιοχές εμφανίζονται εδώ μόλις γίνει provision ο χώρος εργασίας σας."
-title = "Δεν έχουν αναπτυχθεί περιοχές"
-
 [portal.infrastructure.keyLabel]
 active = "Ενεργό"
 revoked = "Ανακλημένο"
 
-[portal.infrastructure.modelLabel]
-active = "Ενεργό"
-degraded = "Υποβαθμισμένο"
-disabled = "Απενεργοποιημένο"
-
-[portal.infrastructure.models]
-heading = "Μοντέλα"
-msValue = "{{value}} ms"
-subheading = "Ο κατάλογος μοντέλων και η δρομολόγηση που τροφοδοτούν την επεξεργασία εγγράφων σε όλο τον χώρο εργασίας σας."
-
-[portal.infrastructure.models.byom]
-description = "Καταχωρίστε ένα on-prem ή self-hosted μοντέλο και καρφιτσώστε το σε μια περιοχή για επεξεργασία με δέσμευση παραμονής δεδομένων."
-title = "Φέρτε το δικό σας μοντέλο"
-
-[portal.infrastructure.models.catalogue]
-heading = "Κατάλογος"
-sub = "Managed μοντέλα διαθέσιμα στον χώρο εργασίας σας, με ζωντανή καθυστέρηση και κόστος."
-subEnterprise = "Managed, bring-your-own και on-prem μοντέλα — με διαθέσιμο καρφίτσωμα ανά περιοχή."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Τα μοντέλα στον κατάλογο του χώρου εργασίας σας εμφανίζονται εδώ."
-title = "Δεν υπάρχουν διαθέσιμα μοντέλα"
-
-[portal.infrastructure.models.columns]
-cost = "Κόστος"
-latency = "Καθυστέρηση"
-load = "Φόρτος"
-model = "Μοντέλο"
-status = "Κατάσταση"
-type = "Τύπος"
-version = "Έκδοση"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/κλήση"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Ενεργά μοντέλα"
-avgLatency = "Μέση καθυστέρηση"
-included = "Περιλαμβάνεται"
-monthlySpend = "Μηνιαία δαπάνη μοντέλων"
-
-[portal.infrastructure.models.routing]
-empty = "Δεν έχουν διαμορφωθεί κανόνες δρομολόγησης."
-heading = "Κανόνες δρομολόγησης"
-sub = "Ποιο μοντέλο χειρίζεται κάθε λειτουργία. Η προεπιλογή εφαρμόζεται όταν δεν ταιριάζει πιο συγκεκριμένος κανόνας."
-subLocked = "Δρομολογήστε λειτουργίες σε συγκεκριμένα μοντέλα — διαθέσιμο σε πληρωμένα πλάνα."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Αναβαθμίστε σε Pro για να ελέγχετε ποιο μοντέλο χειρίζεται κάθε λειτουργία και τύπο εγγράφου."
-title = "Η δρομολόγηση μοντέλων είναι πληρωμένη λειτουργία"
-
-[portal.infrastructure.models.routingColumns]
-default = "Προεπιλογή"
-docType = "Τύπος εγγράφου"
-modelForAria = "Μοντέλο για {{operation}}"
-operation = "Λειτουργία"
-routedTo = "Δρομολογείται σε"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Ταξινόμηση"
-extraction = "Εξαγωγή"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Υποβαθμισμένη"
-down = "Εκτός λειτουργίας"
-healthy = "Υγιής"
-
-[portal.infrastructure.security.access.byok]
-description = "Παρέχετε ένα key από το δικό σας KMS. Το Stirling κρυπτογραφεί με αυτό αλλά μπορεί ακόμα να διαβάζει."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Τα keys δεν φεύγουν ποτέ από το KMS σας. Το Stirling κρατά μόνο ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Το Stirling διαχειρίζεται τα encryption keys. Το απλούστερο — μηδενικές εργασίες key από την πλευρά σας."
-label = "Keys που κρατούνται από το Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Πολιτική πρόσβασης εγγράφων"
-subheading = "Ελέγχει ποιος μπορεί να αποκρυπτογραφήσει επεξεργασμένα έγγραφα σε κατάσταση αδράνειας."
-
-[portal.infrastructure.security.attestations]
-heading = "Βεβαιώσεις συμμόρφωσης"
-noReport = "Δεν υπάρχει διαθέσιμη αναφορά"
-subheading = "Στάση ελέγχου ανά πλαίσιο, με διαθέσιμες αναφορές για βεβαιωμένους ελέγχους."
-viewReport = "Προβολή αναφοράς →"
-
-[portal.infrastructure.security.compliance]
-heading = "Συμμόρφωση"
-subheading = "Βεβαιώσεις και πιστοποιήσεις που καλύπτουν την πλατφόρμα Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Η διαμόρφωση ασφαλείας του χώρου εργασίας σας θα εμφανίζεται εδώ."
-title = "Η στάση ασφαλείας δεν είναι διαθέσιμη"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Με HYOK, τα encryption keys δεν φεύγουν ποτέ από το KMS σας. Το Stirling αποθηκεύει και επεξεργάζεται μόνο ciphertext που μπορείτε να ανακαλέσετε ανά πάσα στιγμή."
-title = "Το Stirling δεν μπορεί να αποκρυπτογραφήσει τα έγγραφά σας"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Δεν έχουν διαμορφωθεί IP ranges — επιτρέπονται όλες οι IPs."
-heading = "IP allowlist"
-sub = "Η πρόσβαση API περιορίζεται σε αυτά τα CIDR ranges."
-subLocked = "Περιορίστε την πρόσβαση API σε γνωστά IP ranges — διαθέσιμο σε πληρωμένα πλάνα."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Αναβαθμίστε σε Pro για να περιορίσετε την πρόσβαση API σε συγκεκριμένα δίκτυα."
-title = "Το IP allowlisting είναι πληρωμένη λειτουργία"
-
-[portal.infrastructure.security.ipColumns]
-added = "Προστέθηκε"
-addedBy = "Προστέθηκε από"
-cidr = "CIDR"
-label = "Ετικέτα"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Αλγόριθμος"
-heading = "Διαχείριση encryption keys"
-keyId = "Αναγνωριστικό key"
-lastRotated = "Τελευταία περιστροφή"
-rotateKey = "Περιστροφή key"
-rotationPolicy = "Πολιτική περιστροφής"
-subheading = "Φύλαξη των keys που κρυπτογραφούν έγγραφα σε κατάσταση αδράνειας — ποιος μπορεί να αποκρυπτογραφήσει και πώς περιστρέφονται τα keys."
-
-[portal.infrastructure.security.managedBanner]
-description = "Η φύλαξη bring-your-own-key (BYOK) και hold-your-own-key (HYOK) είναι διαθέσιμη στο Enterprise. Αναβαθμίστε για να παρέχετε keys από το δικό σας KMS."
-title = "Τα keys διαχειρίζονται από το Stirling στο πλάνο σας"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Ασία-Ειρηνικός"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "Ευρωπαϊκή Ένωση"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Ηνωμένες Πολιτείες"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Παραμονή δεδομένων"
-subheading = "Πού αποθηκεύονται και επεξεργάζονται τα έγγραφα."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} χρησιμοποιήθηκε"
-
-[portal.infrastructure.storage.empty]
-description = "Η συνδεδεμένη αποθήκευση και η χρήση εμφανίζονται εδώ."
-title = "Δεν έχει διαμορφωθεί αποθήκευση"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Ενεργό"
-activeRange = "0–{{value}}d"
-archived = "Αρχειοθετημένο"
-coldStorage = "cold storage"
-deleted = "Διαγραμμένο"
-never = "ποτέ"
-purged = "εκκαθαρίστηκε"
-
-[portal.infrastructure.storage.providers]
-connect = "Σύνδεση"
-connected = "Συνδεδεμένο"
-heading = "Συνδεδεμένοι πάροχοι"
-subheading = "Πού γράφονται τα επεξεργασμένα artifacts."
-
-[portal.infrastructure.storage.retention]
-heading = "Διατήρηση"
-subheading = "Πόσο καιρό διατηρούνται τα artifacts πριν από τη διαγραφή κύκλου ζωής."
-windowLabel = "Προεπιλεγμένο παράθυρο διατήρησης"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} ημέρα"
-days_other = "{{count}} ημέρες"
-never = "Να μην διαγράφεται ποτέ"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Συνολική χρήση"
-progressLabel = "Χρησιμοποιημένη αποθήκευση"
-subheading = "Αποθήκευση που καταναλώνεται σε όλους τους συνδεδεμένους παρόχους."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Keys"
 audit = "Αρχεία καταγραφής ελέγχου"
@@ -7715,11 +7657,9 @@ security = "Ασφάλεια"
 storage = "Αποθήκευση"
 
 [portal.integrations]
-addAnother = "Προσθήκη άλλου"
 availableHeading = "Διαθέσιμες"
 comingSoonHeading = "Προσεχώς"
 connect = "Σύνδεση"
-connectedHeading = "Συνδεδεμένες"
 connectionCount_one = "{{count}} σύνδεση"
 connectionCount_other = "{{count}} συνδέσεις"
 customApi = "Προσαρμοσμένο API"
@@ -7737,6 +7677,10 @@ security = "Ασφάλεια"
 signing = "Υπογραφή"
 storage = "Αποθήκευση"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Συνδεδεμένο"
 
@@ -7767,7 +7711,6 @@ integrations = "Ενσωματώσεις"
 pipelines = "Ροές εργασίας"
 policies = "Πολιτικές"
 procurement = "Προμήθειες"
-settings = "Ρυθμίσεις"
 sources = "Πηγές"
 usage = "Χρήση & Χρέωση"
 users = "Χρήστες"
@@ -7784,7 +7727,7 @@ title = "Ροές εργασίας"
 newPipeline = "Νέα ροή εργασίας"
 
 [portal.pipelines.builder]
-addStep = "Προσθήκη εργαλείου"
+activate = "Activate"
 back = "Πίσω στις ροές εργασίας"
 cannotFollow = "Δεν μπορεί να δεχτεί {{produced}}"
 chooseAccount = "Επιλέξτε λογαριασμό"
@@ -7792,28 +7735,38 @@ chooseDestination = "Επιλέξτε προορισμό"
 chooseOperation = "Επιλέξτε τι κάνει αυτό το βήμα"
 chooseSource = "Επιλέξτε πηγή"
 discard = "Απόρριψη αλλαγών"
-enabled = "Ενεργό"
 inputs = "Είσοδος"
 inputSource = "Πηγή εισόδου"
 inputTrigger = "Trigger"
 keepEditing = "Συνέχιση επεξεργασίας"
+moreActions = "More actions"
 needsConfiguring = "Χρειάζεται ρύθμιση"
-needsUpload = "Χρειάζεται μεταφορτωμένο αρχείο"
-noSources = "Δεν έχουν συνδεθεί ακόμα πηγές. Δημιουργήστε μία για να τη χρησιμοποιήσετε ως είσοδο."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Κανένα εργαλείο δεν ταιριάζει στην αναζήτησή σας."
-pipelineSettings = "Ρυθμίσεις ροής εργασίας"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Αναζήτηση εργαλείων"
-selectToolBody = "Προσθέστε ένα εργαλείο για να δημιουργήσετε τη ροή εργασίας σας."
-selectToolTitle = "Δεν υπάρχουν εργαλεία ακόμα"
 sendToSystem = "Αποστολή σε άλλο σύστημα"
 stepsIncompatible = "Αυτά τα βήματα δεν μπορούν να εκτελεστούν σε αυτό που παράγει το προηγούμενο βήμα τους: {{tools}}."
 stepsNeedSetup = "Αυτά τα βήματα χρειάζονται ακόμα ρύθμιση πριν από την αποθήκευση: {{tools}}."
-toolSettings = "Ρυθμίσεις εργαλείου"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Μη αναγνωρισμένη λειτουργία, διατηρήθηκε ως έχει."
 unsavedBody = "Έχετε μη αποθηκευμένες αλλαγές. Αποθηκεύστε τις πριν φύγετε ή απορρίψτε τις;"
 unsavedTitle = "Μη αποθηκευμένες αλλαγές"
-uploadUnsupported = "Τα μεταφορτωμένα αρχεία δεν υποστηρίζονται ακόμα στις ροές εργασίας, επομένως αυτά τα βήματα δεν μπορούν να αποθηκευτούν: {{tools}}."
 usesDefaults = "Εκτελείται με προεπιλεγμένες ρυθμίσεις"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Συνδυάζει κάθε αρχείο από το προηγούμενο βήμα"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Δεν μπορεί να ελεγχθεί τι δέχε
 
 [portal.pipelines.composer]
 addTool = "Προσθήκη εργαλείου"
-cancel = "Ακύρωση"
-chainEmpty = "Προσθέστε ένα εργαλείο για να αρχίσετε να δημιουργείτε τη ροή εργασίας σας."
 create = "Δημιουργία ροής εργασίας"
+createPaused = "Create paused"
 editingUnsupported = "Η εμφάνιση αυτών των παραμέτρων εργαλείου για επεξεργασία δεν υποστηρίζεται ακόμα."
-moveDown = "Μετακίνηση κάτω"
-moveUp = "Μετακίνηση πάνω"
+editSource = "Edit source"
 name = "Όνομα"
 namePlaceholder = "π.χ. Redaction sweep"
 noToolSettings = "Αυτό το εργαλείο δεν έχει διαμορφώσιμες ρυθμίσεις."
-operations_one = "Λειτουργία ({{count}})"
-operations_other = "Λειτουργίες ({{count}})"
 output = "Έξοδος"
-removeStep = "Αφαίρεση λειτουργίας"
 save = "Αποθήκευση αλλαγών"
 scheduleEvery = "Εκτέλεση κάθε"
-sources = "Πηγές"
-sourcesLoading = "Φόρτωση πηγών..."
 trigger = "Trigger"
 triggerManual = "Μόνο χειροκίνητα"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "ημέρες"
 hours = "ώρες"
 minutes = "λεπτά"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Διαγραφή του \"{{name}}\"; Αυτό δεν μπορεί να αναιρεθεί."
 cancel = "Ακύρωση"
@@ -7867,6 +7825,37 @@ connectSource = "Σύνδεση πηγής"
 description = "Δημιουργήστε την πρώτη σας ροή εργασίας: επιλέξτε τις πηγές πάνω στις οποίες εκτελείται, συνδέστε τις λειτουργίες σε αλυσίδα και επιλέξτε πού πηγαίνει η έξοδος."
 title = "Δεν υπάρχουν ροές εργασίας ακόμα"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Ενεργές"
 paused = "Σε παύση"
@@ -7879,7 +7868,6 @@ completed_one = "Η εκτέλεση ολοκληρώθηκε."
 completed_other = "Και οι {{count}} εκτελέσεις ολοκληρώθηκαν."
 empty = "Δεν υπάρχει τίποτα για εκτέλεση: οι πηγές δεν είχαν έγγραφα για επεξεργασία."
 failed = "Η εκτέλεση απέτυχε: {{error}}"
-historyCleared = "Το ιστορικό εκκαθαρίστηκε. Η επόμενη εκτέλεση επεξεργάζεται ξανά όλα όσα βρίσκονται τώρα στις πηγές."
 inFlight = "Δεν υπάρχει κάτι νέο για εκτέλεση: τα έγγραφα εξακολουθούν να επεξεργάζονται από προηγούμενη εκτέλεση."
 parked_one = "Δεν υπάρχει τίποτα για εκτέλεση: {{count}} έγγραφο απέτυχε προηγουμένως και έχει τεθεί σε αναμονή. Διορθώστε την αιτία και έπειτα εκκαθαρίστε το ιστορικό για να το δοκιμάσετε ξανά."
 parked_other = "Δεν υπάρχει τίποτα για εκτέλεση: {{count}} έγγραφα απέτυχαν προηγουμένως και έχουν τεθεί σε αναμονή. Διορθώστε την αιτία και έπειτα εκκαθαρίστε το ιστορικό για να τα δοκιμάσετε ξανά."
@@ -7895,6 +7883,7 @@ name = "Ροή εργασίας"
 sources = "Πηγές"
 status = "Κατάσταση"
 steps = "Βήματα"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Παρακολούθηση φακέλου"
@@ -8209,6 +8198,24 @@ label = "Επισύναψη σε ζήτημα Jira"
 description = "Στέλνει το επεξεργασμένο έγγραφο ως συνημμένο."
 label = "Αποστολή του εγγράφου με email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Γράφει το επεξεργασμένο έγγραφο σε έναν φάκελο."
 label = "Μεταφόρτωση στο Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Εξαντλήθηκε"
 subtitle = "Η δωρεάν δοκιμή σας διαρκεί έως {{date}}. Δεν απαιτείται κάρτα."
 title = "Enterprise δοκιμή"
 
-[portal.search]
-ariaLabel = "Αναζήτηση"
-placeholder = "Αναζήτηση στο Stirling — endpoints, pipelines, έγγραφα…"
-
-[portal.search.empty]
-noActionsDescription = "Οι γρήγορες ενέργειες θα εμφανιστούν εδώ μόλις γίνουν διαθέσιμες."
-noActionsTitle = "Δεν υπάρχουν γρήγορες ενέργειες"
-noMatches = "Δεν υπάρχουν αντιστοιχίες για \"{{query}}\""
-noMatchesDescription = "Δοκιμάστε διαφορετική λέξη-κλειδί ή περιηγηθείτε στον κατάλογο."
-
 [portal.settings.groups]
 admin = "Διαχειριστής"
 
@@ -8743,10 +8740,6 @@ cancel = "Ακύρωση"
 confirm = "Διαγραφή"
 title = "Διαγραφή πηγής;"
 
-[portal.sources.empty]
-description = "Συνδέστε έναν φάκελο (και, σύντομα, cloud storage) ώστε οι πολιτικές σας να έχουν από πού να αντλούν έγγραφα."
-title = "Δεν έχουν συνδεθεί ακόμη πηγές"
-
 [portal.sources.kpi]
 inUse = "Σε χρήση"
 total = "Συνδέσεις"
@@ -8785,6 +8778,7 @@ unused = "Αχρησιμοποίητο"
 documents = "Έγγραφα"
 source = "Πηγή"
 status = "Κατάσταση"
+type = "Type"
 usedBy = "Πολιτικές"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Πολιτικές & Απόρρητο"
 [settings.preferences]
 title = "Προτιμήσεις"
 
-[settings.search]
-placeholder = "Αναζήτηση στις σελίδες ρυθμίσεων..."
-
 [settings.security]
 description = "Ενημερώστε τον κωδικό σας για να διατηρήσετε τον λογαριασμό σας ασφαλή."
 title = "Ασφάλεια"
@@ -10128,6 +10119,7 @@ last = "Τελευταία σελίδα"
 maintainRatio = "Εναλλαγή διατήρησης αναλογίας διαστάσεων"
 next = "Επόμενη σελίδα"
 noSavedSigs = "Δεν βρέθηκαν αποθηκευμένες υπογραφές"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Προσωπικές υπογραφές"
 previous = "Προηγούμενη σελίδα"
 redo = "Επανάληψη"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Αποτυχία αφαίρεσης φόντου
 hint = "Μεταφορτώστε εικόνα PNG ή JPG της υπογραφής σας"
 label = "Μεταφορτώστε εικόνα υπογραφής"
 placeholder = "Επιλέξτε αρχείο εικόνας"
+previewAlt = "Current image signature"
 processing = "Επεξεργασία εικόνας..."
 removeBackground = "Αφαίρεση λευκού φόντου (διαφάνεια)"
 
@@ -10179,6 +10172,17 @@ saved = "Επιλέξτε μια αποθηκευμένη υπογραφή πα
 text = "Αφού εισαγάγετε το όνομά σας παραπάνω, κάντε κλικ οπουδήποτε στο PDF για να τοποθετήσετε την υπογραφή σας."
 title = "Πώς να προσθέσετε υπογραφή"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Μετακίνηση υπογραφής"
 pause = "Παύση τοποθέτησης"
@@ -10625,6 +10629,23 @@ title = "Μεταφόρτωση στον διακομιστή"
 updateButton = "Ενημέρωση στον διακομιστή"
 uploadButton = "Μεταφόρτωση στον διακομιστή"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Επιστροφή"
 pdfTools = "Εργαλεία PDF"
 placeholder = "Επιλέξτε ένα εργαλείο για να ξεκινήσετε"
 premiumFeature = "Premium λειτουργία:"
-searchTools = "Αναζήτηση εργαλείων"
 toolsHeader = "Εργαλεία"
 viewAllTools = "Προβολή όλων των εργαλείων"
 
@@ -10822,6 +10842,9 @@ removal = "Αφαίρεση"
 signing = "Υπογραφή"
 verification = "Επαλήθευση"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Δεν βρέθηκαν εργαλεία"
 noTools = "Δεν υπάρχουν διαθέσιμα εργαλεία"
@@ -10979,6 +11002,13 @@ approver = "Εγκρίνει πολιτική"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Να ακυρωθεί η πρόσκληση προς {{email}}; Δεν θα μπορούν να συμμετάσχουν με τον τρέχοντα σύνδεσμο."
 cancelInviteTitle = "Ακύρωση πρόσκλησης"
@@ -10998,10 +11028,8 @@ title = "Δεν υπάρχουν ακόμη μέλη"
 addToTeam = "Προσθήκη σε ομάδα"
 guestCount = "{{count}} επισκέπτης"
 guests = "Επισκέπτες"
-guestsDesc = "Εξωτερικοί συνεργάτες, περιορισμένοι σε όσα μοιραστήκατε. Μόνο Editor."
 ledBy = "με επικεφαλής {{owner}}"
 org = "Οργανισμός"
-orgDesc = "Κάτοχοι με εξουσία σε όλο τον οργανισμό και έγκριση πολιτικών"
 owners = "{{count}} κάτοχος"
 team = "Ομάδα {{name}}"
 teamMeta = "{{count}} άτομα"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Προσκλήθηκε από {{who}}"
 cancel = "Ακύρωση"
-count = "{{count}} σε εκκρεμότητα"
-desc = "Προσκεκλημένα άτομα που δεν έχουν συμμετάσχει ακόμη. Καταλαμβάνουν μια θέση μέχρι να αποδεχτούν."
 expiresInDays_one = "Λήγει σε {{count}} ημέρα"
 expiresInDays_other = "Λήγει σε {{count}} ημέρες"
 expiresToday = "Λήγει σήμερα"
 title = "Εκκρεμείς προσκλήσεις"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Κάτι πήγε στραβά κατά την επικοινωνία με το backend ή δεν έχετε πρόσβαση. Δοκιμάστε ξανά."
 title = "Δεν ήταν δυνατή η φόρτωση των μελών"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Αναζήτηση συνημμένων"
 title = "Συνημμένα"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Τίτλος σελιδοδείκτη"
 bookmarkTitleRequired = "Απαιτείται τίτλος σελιδοδείκτη"
 closeSidebar = "Κλείσιμο πλαϊνής γραμμής σελιδοδεικτών"
 collapseAll = "Σύμπτυξη όλων των σελιδοδεικτών"
+empty = "No bookmarks in this document"
 expandAll = "Ανάπτυξη όλων των σελιδοδεικτών"
 searchPlaceholder = "Αναζήτηση σελιδοδεικτών"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Προσθήκη σχολίου"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Εντοπισμός στο έγγραφο"
 moreActions = "Περισσότερες ενέργειες"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Σελίδα {{page}}"
 placingHint = "Κάντε κλικ σε μια σελίδα για τοποθέτηση… (ακύρωση)"
 removeCommentOnly = "Κατάργηση μόνο του σχολίου"
 saveReply = "Αποθήκευση απάντησης"
+searchPlaceholder = "Search comments"
 title = "Σχόλια"
 typeComment = "Σχόλιο"
 typeInsertText = "Εισαγωγή κειμένου"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Έχετε μη αποθηκευμένες αλλαγές"
 closeSidebar = "Κλείσιμο πλαϊνής γραμμής επιπέδων"
 hideAll = "Απόκρυψη όλων των επιπέδων"
 showAll = "Εμφάνιση όλων των επιπέδων"
+title = "Layers"
 
 [viewer.link]
 delete = "Διαγραφή συνδέσμου"
@@ -11646,6 +11682,7 @@ exitRedaction = "Έξοδος από λειτουργία απόκρυψης"
 exportAll = "Εξαγωγή PDF"
 exportSelected = "Εξαγωγή επιλεγμένων σελίδων"
 formFill = "Συμπλήρωση φόρμας"
+hideToolbar = "Hide toolbar"
 multiTool = "Πολυεργαλείο"
 panMode = "Λειτουργία μετακίνησης"
 print = "Εκτύπωση PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Επιλογή όλων"
 selectByNumber = "Επιλογή βάσει αριθμών σελίδων"
 selectLanguage = "Επιλέξτε γλώσσα"
 share = "Κοινή χρήση"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Εναλλαγή ορατότητας σχολιασμών"
 toggleAttachments = "Εναλλαγή συνημμένων"
 toggleBookmarks = "Εναλλαγή σελιδοδεικτών"
diff --git a/frontend/editor/public/locales/en-GB/translation.toml b/frontend/editor/public/locales/en-GB/translation.toml
index 348c901e06..20547a9064 100644
--- a/frontend/editor/public/locales/en-GB/translation.toml
+++ b/frontend/editor/public/locales/en-GB/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alphabet"
 apply = "Apply"
 applyAndContinue = "Save & Leave"
-areYouSure = "Are you sure you want to leave?"
 back = "Back"
 black = "Black"
 blue = "Blue"
@@ -106,6 +105,7 @@ undoSuccess = "Operation undone successfully"
 unknown = "Unknown"
 unpin = "Unpin File (replace after tool run)"
 unsavedChanges = "You have unsaved changes to your PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Unsaved Changes"
 unsupported = "Unsupported"
 username = "Username"
@@ -1879,6 +1879,9 @@ width = "Width"
 [app]
 description = "The Free Adobe Acrobat alternative (10M+ Downloads)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Convert to PDF/A-3b"
 convertToPdfA3bDescription = "Creates an archival PDF with embedded attachments"
@@ -2940,12 +2943,16 @@ text = "To make these permissions unchangeable, use the Add Password tool to set
 [chat.actions]
 copy = "Copy message"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling agent options"
+assistant = "AI Assistant"
 clearChat = "Clear chat"
 
 [chat.input]
@@ -3013,6 +3020,7 @@ saturation = "Saturation and brightness"
 title = "Choose colour"
 
 [common]
+actions = "Actions"
 back = "Back"
 cancel = "Cancel"
 close = "Close"
@@ -3023,10 +3031,12 @@ continue = "Continue"
 copied = "Copied!"
 copy = "Copy"
 done = "Done"
+enterValue = "Enter value"
 error = "Error"
 expand = "Expand"
 loading = "Loading..."
 next = "Next"
+open = "Open"
 preview = "Preview"
 previous = "Previous"
 refresh = "Refresh"
@@ -3399,6 +3409,24 @@ pdfOptions = "PDF Options"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Choose a source format first"
 settings = "Settings"
 single = "Single"
@@ -3577,7 +3605,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Search..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Edit"
@@ -3888,8 +3920,12 @@ addFiles = "Add files"
 addingFiles = "Adding files…"
 collapse = "Collapse sidebar"
 customizeGroups = "Customise groups"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Open files to get started"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Expand sidebar"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive is not configured"
@@ -3906,9 +3942,13 @@ viewAll = "View all {{count}} files"
 
 [fileSidebar.fileItem]
 closeViewer = "Close viewer"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Open in viewer"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3920,6 +3960,14 @@ reset = "Reset to defaults"
 subtitle = "Group your files into parent categories. Add existing or new labels to a category, rename it, or create your own. Files in none of your categories appear under “Other”."
 title = "Sidebar categories"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Add to workspace"
 addToWorkspaceCount = "Add {{count}} to workspace"
@@ -3961,6 +4009,7 @@ downloadAll = "Download all"
 downloadVersion = "Download this version"
 dropOverlay = "Drop files to upload"
 dropOverlaySub = "Files start in Local. Use 'Move to' or 'Save to cloud' to organise them into a folder."
+duplicate = "Duplicate"
 file = "File"
 fileInfo = "File info"
 fileMenu = "File actions"
@@ -4076,6 +4125,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Could not delete folder."
 deleteFolderFailedDetail = "Could not delete folder: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Could not update folder appearance."
 folderAppearanceFailedDetail = "Could not update folder appearance: {{message}}"
 moveFilesFailed = "Could not move files."
@@ -4260,9 +4311,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "All saved"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Failed to extract CSV"
 extractXlsxError = "Failed to extract XLSX"
+filled = "filled"
 flattenAfterFilling = "Flatten after filling"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "req"
 requiredFieldsError = "Please fill in all required fields"
 rescanFields = "Re-scan fields"
@@ -4814,9 +4870,6 @@ title = "Image to PDF"
 [imageToPdf]
 tags = "conversion,img,jpg,picture,photo"
 
-[infoBanner]
-dismiss = "Dismiss"
-
 [invite]
 acceptError = "Failed to create account"
 accountFor = "Creating account for"
@@ -4998,6 +5051,34 @@ uploadSuccess = "Upload Successful!"
 uploadSuccessMessage = "Your images have been transferred."
 validating = "Validating session..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scan to upload photos. Images auto-convert to PDF."
 descriptionNoConvert = "Scan to upload photos from your mobile device."
@@ -5016,6 +5097,14 @@ title = "Upload from Mobile"
 tags = "Multi Tool,Multi operation,UI,click drag,front end,client side,interactive,intractable,move,delete,migrate,divide"
 title = "PDF Multi Tool"
 
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
+
 [oauth.error]
 message = "Authentication was not successful. You can close this window and try again."
 title = "Authentication Failed"
@@ -5989,6 +6078,11 @@ header = "PDF To PDF/A"
 tags = "archive,long-term,standard,conversion,storage,preservation"
 title = "PDF To PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "print,standard,conversion,production,prepress,archive"
 title = "PDF To PDF/X"
@@ -6300,7 +6394,6 @@ revoked = "Revoked"
 unnamed = "Unnamed instance"
 
 [portal.accountLink.instances.columns]
-actions = "Actions"
 instance = "Instance"
 lastSeen = "Last seen"
 linked = "Linked"
@@ -6895,6 +6988,32 @@ label = "Jira"
 description = "Email a document or a notification when a policy runs."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "File processed documents into Nextcloud."
@@ -7197,12 +7316,11 @@ editorAction = "Editor"
 empty = "No documents match this filter."
 rowActions = "Row actions"
 sensitiveLabel = "Sensitive"
-sensitiveTitle = "Sensitive — access required"
 
 [portal.documents.table.columns]
 action = "Pipeline / Action"
-actions = "Actions"
 document = "Document"
+labels = "Labels"
 product = "Product"
 status = "Status"
 time = "Time"
@@ -7218,6 +7336,7 @@ host = "Host"
 lastSeen = "Last seen"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7292,6 +7411,56 @@ description = "This view hit an unexpected error. Try again, or pick another sec
 retry = "Try again"
 title = "Something went wrong on this page"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Back"
 body = "Download the desktop app or self-host the server."
@@ -7398,11 +7567,6 @@ cancel = "Cancel"
 confirm = "Revoke key"
 title = "Revoke API key"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attested"
-inScope = "In scope"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filter audit events by category"
 heading = "Audit logs"
@@ -7474,11 +7638,6 @@ info = "Info"
 success = "Success"
 warning = "Warning"
 
-[portal.infrastructure.certLabel]
-certified = "Certified"
-inProgress = "In progress"
-notStarted = "Not started"
-
 [portal.infrastructure.createKey]
 cancel = "Cancel"
 createKey = "Create key"
@@ -7492,240 +7651,10 @@ subtitleCreated = "Copy this secret now — it won't be shown again."
 title = "Create API key"
 titleCreated = "Key created"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "Queued"
-rolledBack = "Rolled back"
-rolling = "Rolling out"
-
-[portal.infrastructure.deployments]
-loadAria = "Load for {{name}}"
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Deployed by"
-environment = "Environment"
-product = "Product"
-status = "Status"
-version = "Version"
-when = "When"
-
-[portal.infrastructure.deployments.recent]
-heading = "Recent deployments"
-subheading = "The latest rollouts across products and environments."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instances"
-latency = "Latency"
-load = "Load"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regions"
-subheading = "Live health for every deployed Stirling region — latency, load, and rollout version."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Deployed regions appear here once your workspace is provisioned."
-title = "No regions deployed"
-
 [portal.infrastructure.keyLabel]
 active = "Active"
 revoked = "Revoked"
 
-[portal.infrastructure.modelLabel]
-active = "Active"
-degraded = "Degraded"
-disabled = "Disabled"
-
-[portal.infrastructure.models]
-heading = "Models"
-loadAria = "Load for {{name}}"
-msValue = "{{value}} ms"
-subheading = "The model catalogue and routing that powers document processing across your workspace."
-
-[portal.infrastructure.models.byom]
-description = "Register an on-prem or self-hosted model and pin it to a region for data-residency-bound processing."
-title = "Bring your own model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogue"
-sub = "Managed models available to your workspace, with live latency and cost."
-subEnterprise = "Managed, bring-your-own, and on-prem models — with per-region pinning available."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Models in your workspace's catalogue appear here."
-title = "No models available"
-
-[portal.infrastructure.models.columns]
-cost = "Cost"
-latency = "Latency"
-load = "Load"
-model = "Model"
-status = "Status"
-type = "Type"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/call"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Active models"
-avgLatency = "Avg latency"
-included = "Included"
-monthlySpend = "Monthly model spend"
-
-[portal.infrastructure.models.routing]
-empty = "No routing rules configured."
-heading = "Routing rules"
-sub = "Which model handles each operation. The default applies when no narrower rule matches."
-subLocked = "Route operations to specific models — available on paid plans."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Upgrade to Pro to control which model handles each operation and document type."
-title = "Model routing is a paid feature"
-
-[portal.infrastructure.models.routingColumns]
-default = "Default"
-docType = "Document type"
-modelForAria = "Model for {{operation}}"
-operation = "Operation"
-routedTo = "Routed to"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classification"
-extraction = "Extraction"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degraded"
-down = "Down"
-healthy = "Healthy"
-
-[portal.infrastructure.security.access.byok]
-description = "Supply a key from your own KMS. Stirling encrypts with it but can still read."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Keys never leave your KMS. Stirling holds only ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling manages encryption keys. Simplest — zero key ops on your side."
-label = "Stirling-held keys"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Document access policy"
-subheading = "Controls who can decrypt processed documents at rest."
-
-[portal.infrastructure.security.attestations]
-heading = "Compliance attestations"
-noReport = "No report available"
-subheading = "Framework-by-framework audit posture, with reports available on attested controls."
-viewReport = "View report →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Attestations and certifications covering the Stirling platform."
-
-[portal.infrastructure.security.empty]
-description = "Your workspace's security configuration will appear here."
-title = "Security posture unavailable"
-
-[portal.infrastructure.security.hyokBanner]
-description = "With HYOK, encryption keys never leave your KMS. Stirling stores and processes only ciphertext you can revoke at any time."
-title = "Stirling cannot decrypt your documents"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "No IP ranges configured — all IPs allowed."
-heading = "IP allowlist"
-sub = "API access is restricted to these CIDR ranges."
-subLocked = "Restrict API access to known IP ranges — available on paid plans."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Upgrade to Pro to restrict API access to specific networks."
-title = "IP allowlisting is a paid feature"
-
-[portal.infrastructure.security.ipColumns]
-added = "Added"
-addedBy = "Added by"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Encryption key management"
-keyId = "Key identifier"
-lastRotated = "Last rotated"
-rotateKey = "Rotate key"
-rotationPolicy = "Rotation policy"
-subheading = "Custody of the keys that encrypt documents at rest — who can decrypt, and how keys rotate."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) and hold-your-own-key (HYOK) custody are available on Enterprise. Upgrade to supply keys from your own KMS."
-title = "Keys are managed by Stirling on your plan"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "European Union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "United States"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "Where documents are stored and processed."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} used"
-
-[portal.infrastructure.storage.empty]
-description = "Connected storage and usage appear here."
-title = "No storage configured"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Active"
-activeRange = "0–{{value}}d"
-archived = "Archived"
-coldStorage = "cold storage"
-deleted = "Deleted"
-never = "never"
-purged = "purged"
-
-[portal.infrastructure.storage.providers]
-connect = "Connect"
-connected = "Connected"
-heading = "Connected providers"
-subheading = "Where processed artefacts are written."
-
-[portal.infrastructure.storage.retention]
-heading = "Retention"
-subheading = "How long artefacts are kept before lifecycle deletion."
-windowLabel = "Default retention window"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} day"
-days_other = "{{count}} days"
-never = "Never delete"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Total usage"
-progressLabel = "Storage used"
-subheading = "Storage consumed across all connected providers."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Keys"
 audit = "Audit Logs"
@@ -7735,11 +7664,9 @@ security = "Security"
 storage = "Storage"
 
 [portal.integrations]
-addAnother = "Add another"
 availableHeading = "Available"
 comingSoonHeading = "Coming soon"
 connect = "Connect"
-connectedHeading = "Connected"
 connectionCount_one = "{{count}} connection"
 connectionCount_other = "{{count}} connections"
 customApi = "Custom API"
@@ -7757,6 +7684,10 @@ security = "Security"
 signing = "Signing"
 storage = "Storage"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Connected"
 
@@ -7787,7 +7718,6 @@ integrations = "Integrations"
 pipelines = "Pipelines"
 policies = "Policies"
 procurement = "Procurement"
-settings = "Settings"
 sources = "Sources"
 usage = "Usage & Billing"
 users = "Users"
@@ -7804,7 +7734,7 @@ title = "Pipelines"
 newPipeline = "New pipeline"
 
 [portal.pipelines.builder]
-addStep = "Add tool"
+activate = "Activate"
 back = "Back to pipelines"
 cannotFollow = "Can't take {{produced}}"
 chooseAccount = "Choose an account"
@@ -7812,28 +7742,38 @@ chooseDestination = "Choose a destination"
 chooseOperation = "Choose what this step does"
 chooseSource = "Choose a source"
 discard = "Discard changes"
-enabled = "Enabled"
 inputs = "Input"
 inputSource = "Input source"
 inputTrigger = "Trigger"
 keepEditing = "Keep editing"
+moreActions = "More actions"
 needsConfiguring = "Needs setting up"
-needsUpload = "Needs an uploaded file"
-noSources = "No sources connected yet. Create one to use it as an input."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "No tools match your search."
-pipelineSettings = "Pipeline settings"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Search tools"
-selectToolBody = "Add a tool to build your pipeline."
-selectToolTitle = "No tools yet"
 sendToSystem = "Send to another system"
 stepsIncompatible = "These steps can't run on what their prior step produces: {{tools}}."
 stepsNeedSetup = "These steps still need setting up before saving: {{tools}}."
-toolSettings = "Tool settings"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Unrecognised operation, kept as-is."
 unsavedBody = "You have unsaved changes. Save them before leaving, or discard them?"
 unsavedTitle = "Unsaved changes"
-uploadUnsupported = "Uploaded files aren't supported in pipelines yet, so these steps can't be saved: {{tools}}."
 usesDefaults = "Runs with default settings"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combines every file from the previous step"
@@ -7845,31 +7785,36 @@ undeclared-operation = "Can't check what this step accepts"
 
 [portal.pipelines.composer]
 addTool = "Add tool"
-cancel = "Cancel"
-chainEmpty = "Add a tool to start building your pipeline."
 create = "Create pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Displaying these tool params for editing is not supported yet."
-moveDown = "Move down"
-moveUp = "Move up"
+editSource = "Edit source"
 name = "Name"
 namePlaceholder = "e.g. Redaction sweep"
 noToolSettings = "This tool has no configurable settings."
-operations_one = "Operation ({{count}})"
-operations_other = "Operations ({{count}})"
 output = "Output"
-removeStep = "Remove operation"
 save = "Save changes"
 scheduleEvery = "Run every"
-sources = "Sources"
-sourcesLoading = "Loading sources..."
 trigger = "Trigger"
 triggerManual = "Manual only"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "days"
 hours = "hours"
 minutes = "minutes"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Delete \"{{name}}\"? This can't be undone."
 cancel = "Cancel"
@@ -7887,6 +7832,37 @@ connectSource = "Connect a source"
 description = "Create your first pipeline: pick the sources it runs over, chain the operations, and choose where output goes."
 title = "No pipelines yet"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Active"
 paused = "Paused"
@@ -7899,7 +7875,6 @@ completed_one = "Run completed."
 completed_other = "All {{count}} runs completed."
 empty = "Nothing to run: the sources had no documents to process."
 failed = "Run failed: {{error}}"
-historyCleared = "History cleared. The next run reprocesses everything currently in the sources."
 inFlight = "Nothing new to run: documents are still being processed from an earlier run."
 parked_one = "Nothing to run: {{count}} document failed previously and is parked. Fix the cause, then clear history to retry it."
 parked_other = "Nothing to run: {{count}} documents failed previously and are parked. Fix the cause, then clear history to retry them."
@@ -7912,10 +7887,10 @@ paused = "Paused"
 
 [portal.pipelines.table]
 name = "Pipeline"
-open = "Open"
 sources = "Sources"
 status = "Status"
 steps = "Steps"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Folder watch"
@@ -8230,6 +8205,24 @@ label = "Attach to a Jira issue"
 description = "Sends the processed document as an attachment."
 label = "Email the document (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Writes the processed document into a folder."
 label = "Upload to Nextcloud"
@@ -8754,10 +8747,6 @@ cancel = "Cancel"
 confirm = "Delete"
 title = "Delete source?"
 
-[portal.sources.empty]
-description = "Connect a folder (and, soon, cloud storage) so your policies have somewhere to pull documents from."
-title = "No sources connected yet"
-
 [portal.sources.kpi]
 inUse = "In use"
 total = "Connections"
@@ -8794,9 +8783,9 @@ unused = "Unused"
 
 [portal.sources.table]
 documents = "Documents"
-open = "Open"
 source = "Source"
 status = "Status"
+type = "Type"
 usedBy = "Policies"
 
 [portal.sources.types.box]
@@ -10137,6 +10126,7 @@ last = "Last page"
 maintainRatio = "Toggle maintain aspect ratio"
 next = "Next page"
 noSavedSigs = "No saved signatures found"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Personal Signatures"
 previous = "Previous page"
 redo = "Redo"
@@ -10175,6 +10165,7 @@ backgroundRemovalFailedTitle = "Background removal failed"
 hint = "Upload a PNG or JPG image of your signature"
 label = "Upload signature image"
 placeholder = "Select image file"
+previewAlt = "Current image signature"
 processing = "Processing image..."
 removeBackground = "Remove white background (make transparent)"
 
@@ -10188,6 +10179,17 @@ saved = "Select a saved signature above, then click anywhere on the PDF to place
 text = "After entering your name above, click anywhere on the PDF to place your signature."
 title = "How to add signature"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Move Signature"
 pause = "Pause placement"
@@ -10847,6 +10849,9 @@ removal = "Removal"
 signing = "Signing"
 verification = "Verification"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "No tools found"
 noTools = "No tools available"
@@ -11004,6 +11009,13 @@ approver = "Approves policy"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Cancel the invitation to {{email}}? They won't be able to join with the current link."
 cancelInviteTitle = "Cancel invitation"
@@ -11023,10 +11035,8 @@ title = "No members yet"
 addToTeam = "Add to team"
 guestCount = "{{count}} guest"
 guests = "Guests"
-guestsDesc = "External collaborators, scoped to what you shared. Editor only."
 ledBy = "led by {{owner}}"
 org = "Organisation"
-orgDesc = "Owners with org-wide authority and policy approval"
 owners = "{{count}} owner"
 team = "{{name}} team"
 teamMeta = "{{count}} people"
@@ -11066,13 +11076,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invited by {{who}}"
 cancel = "Cancel"
-count = "{{count}} pending"
-desc = "Invited people who haven't joined yet. They hold a seat until they accept."
 expiresInDays_one = "Expires in {{count}} day"
 expiresInDays_other = "Expires in {{count}} days"
 expiresToday = "Expires today"
 title = "Pending invitations"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Something went wrong reaching the back end, or you don't have access. Try again."
 title = "Couldn't load members"
@@ -11262,12 +11274,15 @@ searchPlaceholder = "Search attachments"
 title = "Attachments"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Bookmark title"
 bookmarkTitleRequired = "Bookmark title is required"
 closeSidebar = "Close bookmarks sidebar"
 collapseAll = "Collapse all bookmarks"
+empty = "No bookmarks in this document"
 expandAll = "Expand all bookmarks"
 searchPlaceholder = "Search bookmarks"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Add comment"
@@ -11289,10 +11304,12 @@ locateAnnotation = "Locate in document"
 moreActions = "More actions"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Page {{page}}"
 placingHint = "Click a page to place… (cancel)"
 removeCommentOnly = "Remove comment only"
 saveReply = "Save reply"
+searchPlaceholder = "Search comments"
 title = "Comments"
 typeComment = "Comment"
 typeInsertText = "Insert Text"
@@ -11315,6 +11332,7 @@ unsavedDesc = "You have unsaved changes"
 closeSidebar = "Close layers sidebar"
 hideAll = "Hide all layers"
 showAll = "Show all layers"
+title = "Layers"
 
 [viewer.link]
 delete = "Delete link"
diff --git a/frontend/editor/public/locales/en-US/translation.toml b/frontend/editor/public/locales/en-US/translation.toml
index 775901fac6..26eb7836b9 100644
--- a/frontend/editor/public/locales/en-US/translation.toml
+++ b/frontend/editor/public/locales/en-US/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alphabet"
 apply = "Apply"
 applyAndContinue = "Save & Leave"
-areYouSure = "Are you sure you want to leave?"
 back = "Back"
 black = "Black"
 blue = "Blue"
@@ -106,6 +105,7 @@ undoSuccess = "Operation undone successfully"
 unknown = "Unknown"
 unpin = "Unpin File (replace after tool run)"
 unsavedChanges = "You have unsaved changes to your PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Unsaved Changes"
 unsupported = "Unsupported"
 username = "Username"
@@ -1879,6 +1879,9 @@ width = "Width"
 [app]
 description = "The Free Adobe Acrobat alternative (10M+ Downloads)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Convert to PDF/A-3b"
 convertToPdfA3bDescription = "Creates an archival PDF with embedded attachments"
@@ -3017,6 +3020,7 @@ saturation = "Saturation and brightness"
 title = "Choose color"
 
 [common]
+actions = "Actions"
 back = "Back"
 cancel = "Cancel"
 close = "Close"
@@ -3032,6 +3036,7 @@ error = "Error"
 expand = "Expand"
 loading = "Loading..."
 next = "Next"
+open = "Open"
 preview = "Preview"
 previous = "Previous"
 refresh = "Refresh"
@@ -3404,6 +3409,24 @@ pdfOptions = "PDF Options"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Choose a source format first"
 settings = "Settings"
 single = "Single"
@@ -3897,8 +3920,12 @@ addFiles = "Add files"
 addingFiles = "Adding files…"
 collapse = "Collapse sidebar"
 customizeGroups = "Customize groups"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Open files to get started"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Expand sidebar"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive is not configured"
@@ -3915,9 +3942,13 @@ viewAll = "View all {{count}} files"
 
 [fileSidebar.fileItem]
 closeViewer = "Close viewer"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Open in viewer"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3929,6 +3960,14 @@ reset = "Show all"
 subtitle = "Show or hide categories in the files sidebar."
 title = "Sidebar categories"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Add to workspace"
 addToWorkspaceCount = "Add {{count}} to workspace"
@@ -3937,6 +3976,7 @@ back = "Back"
 backToFolder = "Back to {{folder}}"
 backToMyFiles = "Back to My Files"
 breadcrumbs = "Folder path"
+bulkActions = "Actions"
 cancel = "Cancel"
 classification = "Classification"
 clearSelection = "Clear selection"
@@ -3970,6 +4010,7 @@ downloadAll = "Download all"
 downloadVersion = "Download this version"
 dropOverlay = "Drop files to upload"
 dropOverlaySub = "Files start in Local. Use 'Move to' or 'Save to cloud' to organize them into a folder."
+duplicate = "Duplicate"
 file = "File"
 fileInfo = "File info"
 fileMenu = "File actions"
@@ -4085,6 +4126,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Could not delete folder."
 deleteFolderFailedDetail = "Could not delete folder: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Could not update folder appearance."
 folderAppearanceFailedDetail = "Could not update folder appearance: {{message}}"
 moveFilesFailed = "Could not move files."
@@ -4107,6 +4150,11 @@ totalSize = "Total size"
 type = "Type"
 versionHistory = "Version journey"
 
+[filesPage.filters]
+activeCount = "{{count}} filters active"
+clearAll = "Clear filters"
+label = "Filters"
+
 [filesPage.folderName]
 cancel = "Cancel"
 error = "Could not save folder. Try again."
@@ -4141,6 +4189,7 @@ label = "Filter files by name"
 placeholder = "Filter files…"
 
 [filesPage.sort]
+label = "Sort files"
 modifiedAsc = "Oldest first"
 modifiedDesc = "Recent first"
 nameAsc = "Name A→Z"
@@ -4270,11 +4319,14 @@ issues = "GitHub"
 [formFill]
 allSaved = "All saved"
 analyzingFields = "Analysing form fields..."
+applyFailed = "Could not apply the changes"
 extractCsvError = "Failed to extract CSV"
 extractXlsxError = "Failed to extract XLSX"
 filled = "filled"
 flattenAfterFilling = "Flatten after filling"
+goToPage = "Go to this page"
 noFields = "No fillable form fields found in this PDF."
+page = "Page"
 placeholderEnter = "Enter"
 placeholderSelect = "Select"
 requiredAbbreviation = "req"
@@ -4283,8 +4335,83 @@ rescanFields = "Re-scan fields"
 rescanFormFields = "Re-scan form fields"
 save = "Save"
 saveShortcut = "Ctrl+S to save"
+skippedEdits_one = "1 change could not be applied:"
+skippedEdits_other = "{{count}} changes could not be applied:"
+skippedEditsTruncated = "{{count}} more not listed."
 unsavedChanges = "Unsaved changes"
 
+[formFill.create]
+commit = "Add {{count}} field(s) to PDF"
+empty = "No fields drawn yet."
+failed = "Failed to add fields"
+goToField = "Go to this field"
+hint = "Pick a field type, then draw it on the page."
+placing = "Draw a {{type}} field on the page. Press Esc to stop."
+preview = "Hold to preview"
+previewHelp = "Hold to see the fields as they will look once added, without the editing outlines."
+removeField = "Remove field"
+
+[formFill.editor]
+action = "Button action"
+actionHelp = "What the button does when clicked."
+actionNone = "None"
+actionPrint = "Print"
+actionReset = "Reset form"
+actionSubmit = "Submit to URL"
+actionUri = "Open URL"
+actionUrl = "URL"
+actionUrlHelp = "The address the button opens or submits to."
+addOption = "Add option"
+caption = "Button caption"
+captionHelp = "The text printed on the button face."
+defaultValue = "Default value"
+defaultValueHelp = "What the field contains before anyone fills it in. Leave blank for an empty field."
+fontSize = "Font size"
+fontSizeHelp = "Text size inside the field. Leave blank to let the reader size it to fit."
+label = "Label"
+labelHelp = "The wording shown to whoever fills the form. Leave it blank to fall back to the field name."
+maxLength = "Max length (comb)"
+maxLengthHelp = "Caps how many characters fit, drawn as evenly spaced boxes."
+multiline = "Multi-line"
+multilineHelp = "Allows more than one line of text and wraps at the field's edge."
+multiSelect = "Allow multiple selection"
+multiSelectHelp = "Lets more than one option be chosen at once."
+name = "Field name"
+nameHelp = "The field's internal name. Used when exporting data or filling the form from another system, so keep it unique and free of spaces."
+optionGap = "Option spacing"
+optionGapHelp = "Gap between buttons, in points. Leave blank to spread them evenly down the box."
+optionPlaceholder = "Option {{n}}"
+options = "Options"
+optionsEmpty = "Add at least one option."
+optionsHelp = "The choices offered in the list. Each one is stored as typed, so keep them short and distinct."
+optionSize = "Option size"
+optionSizeHelp = "Width and height of each button, in points. Leave blank to fit them to the box you drew."
+readOnly = "Read-only"
+readOnlyHelp = "Shows a value but stops anyone editing it."
+removeOption = "Remove option"
+required = "Required"
+requiredHelp = "The form cannot be submitted until this field is filled in."
+signatureNote = "Placeholder only - you don't sign here. It marks where a signature belongs so a PDF signer (Adobe Acrobat, a signing service, etc.) places the signature in this spot when the document is signed."
+tooltip = "Tooltip"
+tooltipHelp = "The hint shown when someone hovers the field in a PDF reader."
+type = "Type"
+typeHelp = "What kind of field this is. Changing it rebuilds the field, so its current value is not carried over."
+
+[formFill.mode]
+create = "Create"
+fill = "Fill"
+label = "Form editor mode"
+modify = "Modify"
+
+[formFill.modify]
+commit = "Save {{count}} change(s)"
+delete = "Delete"
+empty = "This PDF has no form fields yet."
+failed = "Failed to save changes"
+groupSizeHint = "Use Option size"
+hint = "Select a field to edit its properties, drag it on the page, or delete it."
+restore = "Restore"
+
 [formFill.sidebar]
 close = "Close sidebar"
 
@@ -4550,6 +4677,10 @@ desc = "Change document restrictions and permissions"
 tags = "permissions,restrictions,rights,access control,allow,deny,printing,copying,editing,modify permissions,security settings,user rights"
 title = "Change Permissions"
 
+[home.classify]
+desc = "Identify what kind of document this is and tag it."
+title = "Classify"
+
 [home.compare]
 desc = "Compares and shows the differences between 2 PDF Documents"
 tags = "difference,compare,diff,compare PDFs,compare documents,find differences,show differences,changes,what changed,track changes,revisions,version compare,side by side,contrast,delta"
@@ -4611,8 +4742,8 @@ tags = "simplify,remove,interactive,flatten,flatten form,remove form fields,make
 title = "Flatten"
 
 [home.formFill]
-desc = "Fill PDF form fields interactively with a visual editor"
-title = "Fill Form"
+desc = "Fill, create, edit, and delete PDF form fields with a visual editor"
+title = "Form Editor"
 
 [home.getPdfInfo]
 desc = "Grabs any and all information possible on PDFs"
@@ -4828,9 +4959,6 @@ title = "Image to PDF"
 [imageToPdf]
 tags = "conversion,img,jpg,picture,photo"
 
-[infoBanner]
-dismiss = "Dismiss"
-
 [invite]
 acceptError = "Failed to create account"
 accountFor = "Creating account for"
@@ -5058,6 +5186,38 @@ title = "Upload from Mobile"
 tags = "Multi Tool,Multi operation,UI,click drag,front end,client side,interactive,intractable,move,delete,migrate,divide"
 title = "PDF Multi Tool"
 
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
+
+[notifications]
+empty = "Nothing to report."
+handoffUnavailable = "This browser will not let the processor pass the document to the editor. Open it from the editor instead."
+noDocumentLinked = "This failure is not linked to a specific document, so there is nothing to open here."
+notOnThisDevice = "This document is not on this device, so it cannot be opened here."
+occurrences = "{{count}} times"
+open = "Notifications"
+title = "Notifications"
+unread = "Unread"
+
+[notifications.action]
+failed = "That did not work. Try again in a moment."
+unavailable = "Not available for this notification."
+
+[notifications.detail]
+copied = "Copied"
+copy = "Copy error"
+less = "Show less"
+more = "Show full message"
+
+[notifications.section]
+earlier = "Earlier"
+new = "New"
+
 [oauth.error]
 message = "Authentication was not successful. You can close this window and try again."
 title = "Authentication Failed"
@@ -5622,8 +5782,8 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
-barAria = "Free PDFs used"
-capSuffix = "/ {{limit}} free PDFs"
+barAria = "Free PDFs remaining"
+capSuffix = "of {{limit}} free PDFs left"
 metaCategories = "Automation · AI · API requests"
 
 [payg.free.member]
@@ -6031,6 +6191,11 @@ header = "PDF To PDF/A"
 tags = "archive,long-term,standard,conversion,storage,preservation"
 title = "PDF To PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "print,standard,conversion,production,prepress,archive"
 title = "PDF To PDF/X"
@@ -6342,7 +6507,6 @@ revoked = "Revoked"
 unnamed = "Unnamed instance"
 
 [portal.accountLink.instances.columns]
-actions = "Actions"
 instance = "Instance"
 lastSeen = "Last seen"
 linked = "Linked"
@@ -6687,12 +6851,12 @@ reachedTitle = "Monthly spend limit reached"
 title = "Couldn't open Stripe portal"
 
 [portal.billing.walletMeter]
-barAria = "Free PDFs used"
-capSuffix_one = "of {{allowance}} free PDFs used"
-capSuffix_other = "of {{allowance}} free PDFs used"
+barAria = "Free PDFs remaining"
+capSuffix_one = "of {{allowance}} free PDF left"
+capSuffix_other = "of {{allowance}} free PDFs left"
 eyebrow = "Processor trial"
-statusLabel_one = "{{remaining}} left"
-statusLabel_other = "{{remaining}} left"
+statusLabel_one = "{{used}} used"
+statusLabel_other = "{{used}} used"
 sub = "Use the PDF Editor for free. Pay to process PDFs automatically."
 title_one = "Process {{allowance}} PDFs free"
 title_other = "Process {{allowance}} PDFs free"
@@ -6937,6 +7101,32 @@ label = "Jira"
 description = "Email a document or a notification when a policy runs."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "File processed documents into Nextcloud."
@@ -7239,12 +7429,11 @@ editorAction = "Editor"
 empty = "No documents match this filter."
 rowActions = "Row actions"
 sensitiveLabel = "Sensitive"
-sensitiveTitle = "Sensitive — access required"
 
 [portal.documents.table.columns]
 action = "Pipeline / Action"
-actions = "Actions"
 document = "Document"
+labels = "Labels"
 product = "Product"
 status = "Status"
 time = "Time"
@@ -7260,6 +7449,7 @@ host = "Host"
 lastSeen = "Last seen"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7335,9 +7525,11 @@ retry = "Try again"
 title = "Something went wrong on this page"
 
 [portal.failures]
+fromSource = "From source {{source}}"
 occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
 runReference = "Run {{runId}}"
-subtitle = "Failures recorded from your policy runs, with the actions you can take."
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
 title = "Failures"
 
 [portal.failures.action]
@@ -7345,9 +7537,21 @@ acknowledge = "Acknowledge"
 confirm = "Are you sure?"
 dismiss = "Dismiss"
 dismissSkipFile = "Skip this file"
+viewFile = "View file"
+viewInProcessor = "View in processor"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
 
 [portal.failures.disabled]
 closed = "This failure is already closed."
+noDocument = "This failure was not recorded against a specific document, so there is nothing here to open."
+unattended = "This file was fed by a folder, bucket or webhook, so nobody's browser is holding it to open."
 unavailable = "Not available for this failure."
 
 [portal.failures.empty]
@@ -7362,6 +7566,11 @@ title = "Password-protected document"
 description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
 title = "Unrecognised failure"
 
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
 [portal.failures.stage]
 blocked = "Blocked"
 input = "Input"
@@ -7447,7 +7656,7 @@ morning = "Good morning"
 [portal.infrastructure]
 manageEditorDeployment = "Manage Editor deployment"
 sectionsAriaLabel = "Infrastructure sections"
-subtitle = "Deployments, credentials, security posture, storage, and the audit trail for your Stirling workspace."
+subtitle = "API credentials and the audit trail for your Stirling workspace."
 title = "Infrastructure"
 
 [portal.infrastructure.apiKeys]
@@ -7475,11 +7684,6 @@ cancel = "Cancel"
 confirm = "Revoke key"
 title = "Revoke API key"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attested"
-inScope = "In scope"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filter audit events by category"
 heading = "Audit logs"
@@ -7551,11 +7755,6 @@ info = "Info"
 success = "Success"
 warning = "Warning"
 
-[portal.infrastructure.certLabel]
-certified = "Certified"
-inProgress = "In progress"
-notStarted = "Not started"
-
 [portal.infrastructure.createKey]
 cancel = "Cancel"
 createKey = "Create key"
@@ -7569,240 +7768,10 @@ subtitleCreated = "Copy this secret now — it won't be shown again."
 title = "Create API key"
 titleCreated = "Key created"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "Queued"
-rolledBack = "Rolled back"
-rolling = "Rolling out"
-
-[portal.infrastructure.deployments]
-loadAria = "Load for {{name}}"
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Deployed by"
-environment = "Environment"
-product = "Product"
-status = "Status"
-version = "Version"
-when = "When"
-
-[portal.infrastructure.deployments.recent]
-heading = "Recent deployments"
-subheading = "The latest rollouts across products and environments."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instances"
-latency = "Latency"
-load = "Load"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regions"
-subheading = "Live health for every deployed Stirling region — latency, load, and rollout version."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Deployed regions appear here once your workspace is provisioned."
-title = "No regions deployed"
-
 [portal.infrastructure.keyLabel]
 active = "Active"
 revoked = "Revoked"
 
-[portal.infrastructure.modelLabel]
-active = "Active"
-degraded = "Degraded"
-disabled = "Disabled"
-
-[portal.infrastructure.models]
-heading = "Models"
-loadAria = "Load for {{name}}"
-msValue = "{{value}} ms"
-subheading = "The model catalogue and routing that powers document processing across your workspace."
-
-[portal.infrastructure.models.byom]
-description = "Register an on-prem or self-hosted model and pin it to a region for data-residency-bound processing."
-title = "Bring your own model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogue"
-sub = "Managed models available to your workspace, with live latency and cost."
-subEnterprise = "Managed, bring-your-own, and on-prem models — with per-region pinning available."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Models in your workspace's catalogue appear here."
-title = "No models available"
-
-[portal.infrastructure.models.columns]
-cost = "Cost"
-latency = "Latency"
-load = "Load"
-model = "Model"
-status = "Status"
-type = "Type"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/call"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Active models"
-avgLatency = "Avg latency"
-included = "Included"
-monthlySpend = "Monthly model spend"
-
-[portal.infrastructure.models.routing]
-empty = "No routing rules configured."
-heading = "Routing rules"
-sub = "Which model handles each operation. The default applies when no narrower rule matches."
-subLocked = "Route operations to specific models — available on paid plans."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Upgrade to Pro to control which model handles each operation and document type."
-title = "Model routing is a paid feature"
-
-[portal.infrastructure.models.routingColumns]
-default = "Default"
-docType = "Document type"
-modelForAria = "Model for {{operation}}"
-operation = "Operation"
-routedTo = "Routed to"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classification"
-extraction = "Extraction"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degraded"
-down = "Down"
-healthy = "Healthy"
-
-[portal.infrastructure.security.access.byok]
-description = "Supply a key from your own KMS. Stirling encrypts with it but can still read."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Keys never leave your KMS. Stirling holds only ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling manages encryption keys. Simplest — zero key ops on your side."
-label = "Stirling-held keys"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Document access policy"
-subheading = "Controls who can decrypt processed documents at rest."
-
-[portal.infrastructure.security.attestations]
-heading = "Compliance attestations"
-noReport = "No report available"
-subheading = "Framework-by-framework audit posture, with reports available on attested controls."
-viewReport = "View report →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Attestations and certifications covering the Stirling platform."
-
-[portal.infrastructure.security.empty]
-description = "Your workspace's security configuration will appear here."
-title = "Security posture unavailable"
-
-[portal.infrastructure.security.hyokBanner]
-description = "With HYOK, encryption keys never leave your KMS. Stirling stores and processes only ciphertext you can revoke at any time."
-title = "Stirling cannot decrypt your documents"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "No IP ranges configured — all IPs allowed."
-heading = "IP allowlist"
-sub = "API access is restricted to these CIDR ranges."
-subLocked = "Restrict API access to known IP ranges — available on paid plans."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Upgrade to Pro to restrict API access to specific networks."
-title = "IP allowlisting is a paid feature"
-
-[portal.infrastructure.security.ipColumns]
-added = "Added"
-addedBy = "Added by"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Encryption key management"
-keyId = "Key identifier"
-lastRotated = "Last rotated"
-rotateKey = "Rotate key"
-rotationPolicy = "Rotation policy"
-subheading = "Custody of the keys that encrypt documents at rest — who can decrypt, and how keys rotate."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) and hold-your-own-key (HYOK) custody are available on Enterprise. Upgrade to supply keys from your own KMS."
-title = "Keys are managed by Stirling on your plan"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "European Union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "United States"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "Where documents are stored and processed."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} used"
-
-[portal.infrastructure.storage.empty]
-description = "Connected storage and usage appear here."
-title = "No storage configured"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Active"
-activeRange = "0–{{value}}d"
-archived = "Archived"
-coldStorage = "cold storage"
-deleted = "Deleted"
-never = "never"
-purged = "purged"
-
-[portal.infrastructure.storage.providers]
-connect = "Connect"
-connected = "Connected"
-heading = "Connected providers"
-subheading = "Where processed artifacts are written."
-
-[portal.infrastructure.storage.retention]
-heading = "Retention"
-subheading = "How long artifacts are kept before lifecycle deletion."
-windowLabel = "Default retention window"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} day"
-days_other = "{{count}} days"
-never = "Never delete"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Total usage"
-progressLabel = "Storage used"
-subheading = "Storage consumed across all connected providers."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Keys"
 audit = "Audit Logs"
@@ -7812,11 +7781,9 @@ security = "Security"
 storage = "Storage"
 
 [portal.integrations]
-addAnother = "Add another"
 availableHeading = "Available"
 comingSoonHeading = "Coming soon"
 connect = "Connect"
-connectedHeading = "Connected"
 connectionCount_one = "{{count}} connection"
 connectionCount_other = "{{count}} connections"
 customApi = "Custom API"
@@ -7834,6 +7801,10 @@ security = "Security"
 signing = "Signing"
 storage = "Storage"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Connected"
 
@@ -7864,7 +7835,6 @@ integrations = "Integrations"
 pipelines = "Pipelines"
 policies = "Policies"
 procurement = "Procurement"
-settings = "Settings"
 sources = "Sources"
 usage = "Usage & Billing"
 users = "Users"
@@ -7881,6 +7851,7 @@ title = "Pipelines"
 newPipeline = "New pipeline"
 
 [portal.pipelines.builder]
+activate = "Activate"
 back = "Back to pipelines"
 cannotFollow = "Can't take {{produced}}"
 chooseAccount = "Choose an account"
@@ -7888,7 +7859,6 @@ chooseDestination = "Choose a destination"
 chooseOperation = "Choose what this step does"
 chooseSource = "Choose a source"
 discard = "Discard changes"
-enabled = "Enabled"
 inputs = "Input"
 inputSource = "Input source"
 inputTrigger = "Trigger"
@@ -7897,20 +7867,31 @@ moreActions = "More actions"
 needsConfiguring = "Needs setting up"
 needsDestination = "No destination chosen"
 needsSource = "No source chosen"
-needsUpload = "Needs an uploaded file"
 noToolMatches = "No tools match your search."
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Search tools"
 sendToSystem = "Send to another system"
 stepsIncompatible = "These steps can't run on what their prior step produces: {{tools}}."
 stepsNeedSetup = "These steps still need setting up before saving: {{tools}}."
+supportingFiles = "Supporting files"
 testRun = "Test with a file"
 unknownStep = "Unrecognized operation, kept as-is."
 unsavedBody = "You have unsaved changes. Save them before leaving, or discard them?"
 unsavedTitle = "Unsaved changes"
-uploadUnsupported = "Uploaded files aren't supported in pipelines yet, so these steps can't be saved: {{tools}}."
 usesDefaults = "Runs with default settings"
 viewDefinition = "View definition"
 
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
+
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combines every incoming file"
 fan-out = "Runs once per incoming file"
@@ -7921,12 +7902,12 @@ undeclared-operation = "Can't check what this step accepts"
 
 [portal.pipelines.composer]
 addTool = "Add a tool"
-cancel = "Cancel"
 create = "Create pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Displaying these tool params for editing is not supported yet."
 editSource = "Edit source"
 name = "Name"
-namePlaceholder = "e.g. Redaction sweep"
+namePlaceholder = "Pipeline name"
 noToolSettings = "This tool has no configurable settings."
 output = "Destination"
 save = "Save changes"
@@ -7958,7 +7939,7 @@ confirm = "Delete"
 title = "Delete pipeline?"
 
 [portal.pipelines.detail]
-clearHistory = "Clear history"
+clearHistory = "Process ignored files in source"
 delete = "Delete pipeline"
 run = "Run now"
 
@@ -8011,10 +7992,9 @@ completed_one = "Run completed."
 completed_other = "All {{count}} runs completed."
 empty = "Nothing to run: the sources had no documents to process."
 failed = "Run failed: {{error}}"
-historyCleared = "History cleared. The next run reprocesses everything currently in the sources."
 inFlight = "Nothing new to run: documents are still being processed from an earlier run."
-parked_one = "Nothing to run: {{count}} document failed previously and is parked. Fix the cause, then clear history to retry it."
-parked_other = "Nothing to run: {{count}} documents failed previously and are parked. Fix the cause, then clear history to retry them."
+parked_one = "Nothing to run: {{count}} document failed previously and is parked. Fix the cause, then reprocess the source to retry it."
+parked_other = "Nothing to run: {{count}} documents failed previously and are parked. Fix the cause, then reprocess the source to retry them."
 running = "Run started; still in progress."
 timeout = "Run is taking longer than expected; it may still finish in the background."
 
@@ -8024,10 +8004,10 @@ paused = "Paused"
 
 [portal.pipelines.table]
 name = "Pipeline"
-open = "Open"
 sources = "Sources"
 status = "Status"
 steps = "Steps"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Folder watch"
@@ -8342,6 +8322,24 @@ label = "Attach to a Jira issue"
 description = "Sends the processed document as an attachment."
 label = "Email the document (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Writes the processed document into a folder."
 label = "Upload to Nextcloud"
@@ -8842,7 +8840,9 @@ title = "Sources"
 connectSource = "Connect source"
 
 [portal.sources.builder]
+advanced = "Advanced"
 back = "Back to sources"
+backToSource = "Back to source setup"
 backToTypes = "All source types"
 cancel = "Cancel"
 chooseHint = "Choose where documents come from. Greyed-out connectors are on the way."
@@ -8852,7 +8852,6 @@ create = "Create source"
 createTitle = "Connect a source"
 delete = "Delete"
 editTitle = "Edit source"
-enabled = "Enabled"
 save = "Save changes"
 
 [portal.sources.builder.folderAccess]
@@ -8866,33 +8865,30 @@ cancel = "Cancel"
 confirm = "Delete"
 title = "Delete source?"
 
-[portal.sources.empty]
-description = "Connect a storage location so your policies have somewhere to pull data from."
-title = "No sources connected yet"
-
 [portal.sources.kpi]
 inUse = "In use"
 total = "Connections"
 unused = "Unused"
 
 [portal.sources.networkFields.connection]
-helperText = "The stored connection with the server address and credentials. Reused by every source that references it."
+helperText = "The saved connection with the server address and credentials. Shared by every source that uses it."
 label = "Connection"
 
 [portal.sources.networkFields.directory]
-helperText = "Folder on the server to poll, relative to the login home or share root. Leave blank for the root."
+helperText = "The folder on the server to watch, relative to the login home or share root."
 label = "Folder"
-placeholder = "incoming/"
+placeholder = "Login home or share root"
 
 [portal.sources.networkFields.mode]
-helperText = "Consume removes each file from the server once every policy has processed it."
-label = "Read mode"
+helperText = "Whether to leave the original file in place after it has been processed. If the original file is left in place, it will be re-processed next time the pipeline scans the source."
+label = "After processing"
 
 [portal.sources.networkFields.mode.options]
-consume = "Consume: process each file once"
-snapshot = "Snapshot: re-read the folder every run"
+consume = "Delete the file"
+snapshot = "Leave it in place"
 
 [portal.sources.networkFields.recursive]
+helperText = "Include subfolders if your files are organised into nested folders, or watch only the top level."
 label = "Folder depth"
 
 [portal.sources.networkFields.recursive.options]
@@ -8906,9 +8902,9 @@ unused = "Unused"
 
 [portal.sources.table]
 documents = "Documents"
-open = "Open"
 source = "Source"
 status = "Status"
+type = "Type"
 usedBy = "Policies"
 
 [portal.sources.types.box]
@@ -8933,26 +8929,28 @@ description = "Watch a directory on the server for new documents."
 label = "Folder"
 
 [portal.sources.types.folder.fields.directory]
-helperText = "Absolute path Stirling watches for files to process."
-label = "Directory path"
+helperText = "The absolute path to the folder to watch for new files."
+label = "Folder"
 placeholder = "/data/incoming"
 
 [portal.sources.types.folder.fields.identity]
-helperText = "Content check reads each changed file, so renames and touches that don't alter content are not reprocessed."
+helperText = "Using the file contents for change detection is slower but more accurate."
 label = "Change detection"
 
 [portal.sources.types.folder.fields.identity.options]
-hash = "Size, date and content check"
-stat = "Size and date modified"
+hash = "File Metadata & Content"
+stat = "File Metadata"
 
 [portal.sources.types.folder.fields.mode]
-label = "Read mode"
+helperText = "Whether to leave the original file in place after it has been processed. If the original file is left in place, it will be re-processed next time the pipeline scans the source."
+label = "After processing"
 
 [portal.sources.types.folder.fields.mode.options]
-consume = "Consume: process each file once"
-snapshot = "Snapshot: re-read the folder every run"
+consume = "Delete the file"
+snapshot = "Leave it in place"
 
 [portal.sources.types.folder.fields.recursive]
+helperText = "Include subfolders if your files are organised into nested folders, or watch only the top level."
 label = "Folder depth"
 
 [portal.sources.types.folder.fields.recursive.options]
@@ -8980,21 +8978,21 @@ description = "Pull documents from an Amazon S3 or S3-compatible bucket."
 label = "Amazon S3"
 
 [portal.sources.types.s3.fields.connection]
-helperText = "The stored connection holding the bucket and credentials. Reused by every source and pipeline output that references it."
+helperText = "The saved connection with the bucket and credentials. Shared by every source and pipeline output that uses it."
 label = "Connection"
 
 [portal.sources.types.s3.fields.mode]
-helperText = "Consume removes each object from the bucket once every policy has processed it."
-label = "Read mode"
+helperText = "Whether to leave the original object in place after it has been processed. If the original object is left in place, it will be re-processed next time the pipeline scans the source."
+label = "After processing"
 
 [portal.sources.types.s3.fields.mode.options]
-consume = "Consume: process each object once"
-snapshot = "Snapshot: re-read the bucket every run"
+consume = "Delete the object"
+snapshot = "Leave it in place"
 
 [portal.sources.types.s3.fields.prefix]
-helperText = "Only objects whose keys start with this prefix are processed."
-label = "Key prefix"
-placeholder = "incoming/"
+helperText = "The folder (key prefix) within the bucket to watch."
+label = "Folder"
+placeholder = "Whole bucket"
 
 [portal.sources.types.sftp]
 description = "Poll an SFTP drop folder for new documents."
@@ -9826,7 +9824,9 @@ toolNotAvailableLocally = "Your Stirling-PDF server is offline and \"{{endpoint}
 expired = "Your session has expired. Please refresh the page and try again."
 
 [settings]
+backToSections = "All settings"
 close = "Close"
+title = "Settings"
 
 [settings.ai]
 documents = "Documents & RAG"
@@ -10765,6 +10765,7 @@ ariaLabel = "Super search"
 filtersAriaLabel = "Search filters"
 hint = "Type to search"
 placeholder = "Search Stirling"
+placeholderShort = "Search"
 showLess = "Show less"
 showMore = "Show {{count}} more"
 
@@ -10961,6 +10962,7 @@ searchPlaceholder = "Search tools..."
 
 [toolPicker.subcategories]
 advancedFormatting = "Advanced Formatting"
+ai = "AI"
 automation = "Automation"
 developerTools = "Developer Tools"
 documentReview = "Document Review"
@@ -11132,6 +11134,13 @@ approver = "Approves policy"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Cancel the invitation to {{email}}? They won't be able to join with the current link."
 cancelInviteTitle = "Cancel invitation"
@@ -11151,10 +11160,8 @@ title = "No members yet"
 addToTeam = "Add to team"
 guestCount = "{{count}} guest"
 guests = "Guests"
-guestsDesc = "External collaborators, scoped to what you shared. Editor only."
 ledBy = "led by {{owner}}"
 org = "Organization"
-orgDesc = "Owners with org-wide authority and policy approval"
 owners = "{{count}} owner"
 team = "{{name}} team"
 teamMeta = "{{count}} people"
@@ -11194,13 +11201,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invited by {{who}}"
 cancel = "Cancel"
-count = "{{count}} pending"
-desc = "Invited people who haven't joined yet. They hold a seat until they accept."
 expiresInDays_one = "Expires in {{count}} day"
 expiresInDays_other = "Expires in {{count}} days"
 expiresToday = "Expires today"
 title = "Pending invitations"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Something went wrong reaching the backend, or you don't have access. Try again."
 title = "Couldn't load members"
@@ -11458,8 +11467,11 @@ columnDefault = "Column {{index}}"
 convertToPdf = "Convert to PDF"
 csvStats = "{{rows}} rows · {{columns}} columns · {{size}}"
 emptyFile = "Empty file"
+htmlHidePreview = "Hide preview"
 htmlPreview = "HTML preview"
+htmlPreviewMobileHidden = "HTML pages are laid out for desktop widths, so the preview is off by default here."
 htmlPreviewWarning = "HTML preview - external resources may not load · {{size}}"
+htmlShowPreview = "Show preview anyway"
 invalidJson = "Invalid JSON - showing raw content"
 lineNumbers = "Line numbers"
 loading = "Loading..."
@@ -11804,8 +11816,9 @@ downloadAll = "Download All"
 exitRedaction = "Exit Redaction Mode"
 exportAll = "Export PDF"
 exportSelected = "Export Selected Pages"
-formFill = "Fill Form"
+formFill = "Form Editor"
 hideToolbar = "Hide toolbar"
+moreActions = "More actions"
 multiTool = "Multi-Tool"
 panMode = "Pan Mode"
 print = "Print PDF"
@@ -11826,6 +11839,8 @@ selectAll = "Select All"
 selectByNumber = "Select by Page Numbers"
 selectLanguage = "Select language"
 share = "Share"
+showAllTools = "Show all tools"
+showFewerTools = "Collapse toolbar"
 showToolbar = "Show toolbar"
 toggleAnnotations = "Toggle Annotations Visibility"
 toggleAttachments = "Toggle Attachments"
diff --git a/frontend/editor/public/locales/es-ES/translation.toml b/frontend/editor/public/locales/es-ES/translation.toml
index 68f0cb4ecc..bc1300bceb 100644
--- a/frontend/editor/public/locales/es-ES/translation.toml
+++ b/frontend/editor/public/locales/es-ES/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabeto"
 apply = "Aplicar"
 applyAndContinue = "Guardar y salir"
-areYouSure = "¿Seguro que quieres salir?"
 back = "Atrás"
 black = "Negro"
 blue = "Azul"
@@ -106,6 +105,7 @@ undoSuccess = "Operación deshecha correctamente"
 unknown = "Desconocido"
 unpin = "Desfijar archivo (reemplazar tras ejecutar la herramienta)"
 unsavedChanges = "Tienes cambios sin guardar en tu PDF. ¿Qué te gustaría hacer?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Cambios sin guardar"
 unsupported = "No compatible"
 username = "Nombre de usuario"
@@ -1879,6 +1879,9 @@ width = "Ancho"
 [app]
 description = "La alternativa gratuita a Adobe Acrobat (más de 10 millones de descargas)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Convertir a PDF/A-3b"
 convertToPdfA3bDescription = "Crea un PDF para archivo con adjuntos incrustados"
@@ -2933,12 +2936,16 @@ text = "Para hacer estos permisos inmutables, usa la herramienta Agregar Contras
 [chat.actions]
 copy = "Copiar mensaje"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opciones del agente Stirling"
+assistant = "AI Assistant"
 clearChat = "Borrar chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Esta operación usará tus créditos en la nube"
 tooltip = "Tomar color de la pantalla"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Elija el color"
 
 [common]
+actions = "Actions"
 back = "Atrás"
 cancel = "Cancelar"
 close = "Cerrar"
+codeSample = "Code sample"
 collapse = "Contraer"
 confirm = "Confirmar"
 continue = "Continuar"
 copied = "¡Copiado!"
 copy = "Copiar"
 done = "Hecho"
+enterValue = "Enter value"
 error = "Error"
 expand = "Expandir"
 loading = "Cargando..."
 next = "Siguiente"
+open = "Open"
 preview = "Vista previa"
 previous = "Anterior"
 refresh = "Actualizar"
 remaining = "Restante"
 retry = "Reintentar"
 save = "Guardar"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Borrar selección"
@@ -3185,6 +3199,7 @@ title = "Método de Compresión"
 [compress.settings]
 desiredSize = "Tamaño de archivo deseado"
 desiredSizePlaceholder = "Introduce el tamaño"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "La compresión es una forma fácil de reducir el tamaño de su archivo. Elija Tamaño de Archivo para ingresar un tamaño objetivo y nosotros ajustaremos la calidad por usted. Elija Calidad para establecer la intensidad de compresión manualmente."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opciones de PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Seleccione primero un formato de origen"
 settings = "Configuración"
 single = "Individual"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Buscar..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Editar"
@@ -3824,11 +3861,13 @@ shareSelected = "Compartir seleccionados"
 sharing = "Uso compartido"
 showAll = "Mostrar todo"
 showHistory = "Mostrar Historial"
+sortBy = "Sort files"
 sortByDate = "Ordenar por fecha"
 sortByName = "Ordenar por nombre"
 sortBySize = "Ordenar por tamaño"
 storage = "Almacenamiento"
 storageState = "Almacenamiento"
+storageUsed = "Storage used"
 synced = "Sincronizado"
 title = "Cargar Archivos PDF"
 toolChain = "Herramientas Aplicadas"
@@ -3874,8 +3913,12 @@ addFiles = "Añadir archivos"
 addingFiles = "Añadiendo archivos…"
 collapse = "Contraer barra lateral"
 customizeGroups = "Personalizar grupos"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Abre archivos para empezar"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Expandir barra lateral"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive no está configurado"
@@ -3888,15 +3931,17 @@ openFromComputer = "Abrir desde el ordenador"
 openSettings = "Abrir configuración"
 other = "Otros"
 recent = "Recientes"
-search = "Buscar"
-searchPlaceholder = "Buscar archivos..."
 viewAll = "Ver los {{count}} archivos"
 
 [fileSidebar.fileItem]
 closeViewer = "Cerrar visor"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Abrir en el visor"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Restablecer valores predeterminados"
 subtitle = "Agrupa tus archivos en categorías principales. Añade etiquetas existentes o nuevas a una categoría, cámbiale el nombre o crea la tuya propia. Los archivos que no estén en ninguna de tus categorías aparecen en “Otros”."
 title = "Categorías de la barra lateral"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Añadir al espacio de trabajo"
 addToWorkspaceCount = "Añadir {{count}} al espacio de trabajo"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Volver a Mis archivos"
 breadcrumbs = "Ruta de carpeta"
 cancel = "Cancelar"
 classification = "Clasificación"
-clearSearch = "Borrar búsqueda"
 clearSelection = "Borrar selección"
 closeDetails = "Cerrar detalles"
 create = "Crear"
@@ -3950,6 +4002,7 @@ downloadAll = "Descargar todo"
 downloadVersion = "Descargar esta versión"
 dropOverlay = "Suelta archivos para subirlos"
 dropOverlaySub = "Los archivos empiezan en Local. Usa 'Mover a' o 'Guardar en la nube' para organizarlos en una carpeta."
+duplicate = "Duplicate"
 file = "Archivo"
 fileInfo = "File info"
 fileMenu = "Acciones de archivo"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Redimensionar árbol de carpetas (teclas de flecha, Mayús p
 save = "Guardar"
 saveToServer = "Guardar en el servidor"
 saveToServerDisabledHint = "Guardar en el servidor no está habilitado en este servidor. Pide a tu administrador que lo habilite."
-search = "Buscar"
-searchPlaceholder = "Buscar en esta carpeta y subcarpetas"
 selectAll = "Seleccionar todo"
 selectAllHint = "Haz clic para seleccionar todo. Consejo: mantén pulsado Ctrl (o Cmd) para añadir archivos uno a uno, Mayús para seleccionar un rango."
 selectedCount = "{{count}} seleccionados"
@@ -4044,6 +4095,10 @@ title = "Aún no hay archivos en la nube"
 hint = "Los archivos guardados sin subir se quedan aquí. Suelta un archivo para añadir uno."
 title = "No hay archivos solo locales"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Los archivos que abras o edites aparecerán aquí."
 title = "Nada modificado aún"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "No se pudo eliminar la carpeta."
 deleteFolderFailedDetail = "No se pudo eliminar la carpeta: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "No se pudo actualizar la apariencia de la carpeta."
 folderAppearanceFailedDetail = "No se pudo actualizar la apariencia de la carpeta: {{message}}"
 moveFilesFailed = "No se pudieron mover los archivos."
@@ -4113,6 +4170,11 @@ localHint = "Solo almacenado en este navegador"
 shared = "Compartido"
 sharedHint = "Compartido contigo mediante enlace"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Más antiguos primero"
 modifiedDesc = "Más recientes primero"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "No hay archivos disponibles en el almacenamiento. Abra a
 open = "Abrir"
 openFile = "Abrir archivo"
 openFiles = "Abrir archivos"
+selectFile = "Select {{name}}"
 selectFromStorage = "Seleccionar del Almacenamiento"
 upload = "Cargar"
 uploadFile = "Cargar Archivo"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Todo guardado"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "No se pudo extraer CSV"
 extractXlsxError = "No se pudo extraer XLSX"
+filled = "filled"
 flattenAfterFilling = "Aplanar después de rellenar"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "oblig."
 requiredFieldsError = "Rellena todos los campos obligatorios"
 rescanFields = "Volver a escanear campos"
@@ -4795,9 +4863,6 @@ title = "Imagen a PDF"
 [imageToPdf]
 tags = "conversión,img,jpg,imagen,fotografía"
 
-[infoBanner]
-dismiss = "Descartar"
-
 [invite]
 acceptError = "No se pudo crear la cuenta"
 accountFor = "Creando cuenta para"
@@ -4979,6 +5044,34 @@ uploadSuccess = "¡Subida correcta!"
 uploadSuccessMessage = "Tus imágenes han sido transferidas."
 validating = "Validando la sesión..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Escanea para subir fotos. Las imágenes se convierten automáticamente a PDF."
 descriptionNoConvert = "Escanea para subir fotos desde tu dispositivo móvil."
@@ -4997,8 +5090,13 @@ title = "Subir desde el móvil"
 tags = "Multi-herramienta,Multi-operación,Interfaz de usuario,Arrastrar con un click,front end,lado del cliente"
 title = "Multi-herramienta PDF"
 
-[navbar]
-search = "Buscar"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "La autenticación no se realizó correctamente. Puede cerrar esta ventana e intentarlo de nuevo."
@@ -5127,6 +5225,7 @@ activeFiles = "La vista de <strong>Archivos activos</strong> muestra todos los P
 allTools = "Este es el panel de <strong>Todas las herramientas</strong>, donde puedes buscar y seleccionar entre todas las herramientas PDF disponibles."
 close = "Cerrar"
 cropSettings = "Ahora que hemos seleccionado el archivo que queremos recortar, podemos configurar la herramienta Recortar para elegir el área a la que queremos recortar el PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Al hacer clic en uno de los archivos lo seleccionas para procesarlo. Puedes seleccionar varios archivos para operaciones por lotes."
 fileReplacement = "El archivo modificado reemplazará automáticamente al original en el Workbench, lo que te permitirá pasarlo fácilmente por más herramientas."
 filesButton = "El botón <strong>Archivos</strong> en la barra de acceso rápido te permite subir PDFs sobre los que usar las herramientas."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF a PDF/A"
 tags = "archivo,largo plazo,estándar,conversión,almacenamiento,conservación"
 title = "PDF a PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "impresión,estándar,conversión,producción,preimpresión,archivo"
 title = "PDF a PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Créditos"
 xsmall = "100 Créditos"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Elige el plan que se ajuste a tus necesidades"
 title = "Planes disponibles"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Límite de gasto mensual alcanzado"
 title = "No se ha podido abrir el portal de Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "de {{allowance}} PDFs gratuitos usados"
 capSuffix_other = "de {{allowance}} PDFs gratuitos usados"
 eyebrow = "Prueba de Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Envía por email un documento o una notificación cuando se ejecute una política."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Archiva documentos procesados en Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDKs oficiales"
 beta = "Beta"
 deprecated = "Obsoleto"
 
-[portal.docs.search]
-empty = "No hay documentación coincidente"
-placeholder = "Buscar en documentación"
-results = "{{count}} resultados"
-
 [portal.docs.skills]
 eyebrow = "HABILIDADES"
 lead = "Capacidades incluidas y con nombre que tu agente invoca como una sola herramienta. Cada habilidad es una cadena de operaciones determinista con evaluaciones adjuntas."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Ningún documento coincide con este filtro."
 rowActions = "Acciones de fila"
 sensitiveLabel = "Sensible"
-sensitiveTitle = "Sensible — se requiere acceso"
 
 [portal.documents.table.columns]
 action = "Pipeline / Acción"
 document = "Documento"
+labels = "Labels"
 product = "Producto"
 status = "Estado"
 time = "Hora"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Última vez visto"
 region = "Región"
 status = "Estado"
+target = "Target"
 version = "Versión"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Esta vista ha encontrado un error inesperado. Inténtalo de nuevo
 retry = "Intentarlo de nuevo"
 title = "Algo ha salido mal en esta página"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Atrás"
 body = "Descarga la aplicación de escritorio o autoaloja el servidor."
@@ -7380,11 +7560,6 @@ cancel = "Cancelar"
 confirm = "Revocar clave"
 title = "Revocar clave de API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestiguado"
-inScope = "Dentro del alcance"
-notApplicable = "N/D"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrar eventos de auditoría por categoría"
 heading = "Registros de auditoría"
@@ -7456,11 +7631,6 @@ info = "Información"
 success = "Correcto"
 warning = "Advertencia"
 
-[portal.infrastructure.certLabel]
-certified = "Certificado"
-inProgress = "En curso"
-notStarted = "No iniciado"
-
 [portal.infrastructure.createKey]
 cancel = "Cancelar"
 createKey = "Crear clave"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copia este secreto ahora — no se volverá a mostrar."
 title = "Crear clave API"
 titleCreated = "Clave creada"
 
-[portal.infrastructure.deployLabel]
-live = "En vivo"
-queued = "En cola"
-rolledBack = "Revertido"
-rolling = "Desplegando"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Desplegado por"
-environment = "Entorno"
-product = "Producto"
-status = "Estado"
-version = "Versión"
-when = "Cuándo"
-
-[portal.infrastructure.deployments.recent]
-heading = "Despliegues recientes"
-subheading = "Los últimos despliegues en productos y entornos."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instancias"
-latency = "Latencia"
-load = "Carga"
-p99 = "P99"
-region = "Región"
-status = "Estado"
-throughput = "Rendimiento"
-uptime = "Tiempo de actividad"
-version = "Versión"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regiones"
-subheading = "Estado en vivo de cada región Stirling desplegada — latencia, carga y versión de despliegue."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Las regiones desplegadas aparecerán aquí cuando se aprovisione tu espacio de trabajo."
-title = "No hay regiones desplegadas"
-
 [portal.infrastructure.keyLabel]
 active = "Activa"
 revoked = "Revocada"
 
-[portal.infrastructure.modelLabel]
-active = "Activo"
-degraded = "Degradado"
-disabled = "Deshabilitado"
-
-[portal.infrastructure.models]
-heading = "Modelos"
-msValue = "{{value}} ms"
-subheading = "El catálogo de modelos y el enrutamiento que impulsa el procesamiento de documentos en todo tu espacio de trabajo."
-
-[portal.infrastructure.models.byom]
-description = "Registra un modelo on-prem o autoalojado y fíjalo a una región para procesamiento sujeto a residencia de datos."
-title = "Trae tu propio modelo"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catálogo"
-sub = "Modelos gestionados disponibles para tu espacio de trabajo, con latencia y coste en vivo."
-subEnterprise = "Modelos gestionados, propios y on-prem — con fijación por región disponible."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Los modelos del catálogo de tu espacio de trabajo aparecen aquí."
-title = "No hay modelos disponibles"
-
-[portal.infrastructure.models.columns]
-cost = "Coste"
-latency = "Latencia"
-load = "Carga"
-model = "Modelo"
-status = "Estado"
-type = "Tipo"
-version = "Versión"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/llamada"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modelos activos"
-avgLatency = "Latencia media"
-included = "Incluido"
-monthlySpend = "Gasto mensual en modelos"
-
-[portal.infrastructure.models.routing]
-empty = "No hay reglas de enrutamiento configuradas."
-heading = "Reglas de enrutamiento"
-sub = "Qué modelo gestiona cada operación. El valor predeterminado se aplica cuando no coincide ninguna regla más específica."
-subLocked = "Dirige operaciones a modelos específicos — disponible en planes de pago."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Mejora a Pro para controlar qué modelo gestiona cada operación y tipo de documento."
-title = "El enrutamiento de modelos es una función de pago"
-
-[portal.infrastructure.models.routingColumns]
-default = "Predeterminado"
-docType = "Tipo de documento"
-modelForAria = "Modelo para {{operation}}"
-operation = "Operación"
-routedTo = "Enrutado a"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Clasificación"
-extraction = "Extracción"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradado"
-down = "Caído"
-healthy = "Correcto"
-
-[portal.infrastructure.security.access.byok]
-description = "Proporciona una clave de tu propio KMS. Stirling cifra con ella, pero aún puede leer."
-label = "Trae tu propia clave (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Las claves nunca salen de tu KMS. Stirling solo conserva texto cifrado."
-label = "Conserva tu propia clave (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling gestiona las claves de cifrado. Lo más sencillo — cero operaciones de claves por tu parte."
-label = "Claves conservadas por Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Política de acceso a documentos"
-subheading = "Controla quién puede descifrar documentos procesados en reposo."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestaciones de cumplimiento"
-noReport = "No hay informe disponible"
-subheading = "Postura de auditoría marco por marco, con informes disponibles sobre controles atestados."
-viewReport = "Ver informe →"
-
-[portal.infrastructure.security.compliance]
-heading = "Cumplimiento"
-subheading = "Atestaciones y certificaciones que cubren la plataforma Stirling."
-
-[portal.infrastructure.security.empty]
-description = "La configuración de seguridad de tu espacio de trabajo aparecerá aquí."
-title = "Postura de seguridad no disponible"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Con HYOK, las claves de cifrado nunca salen de tu KMS. Stirling almacena y procesa solo texto cifrado que puedes revocar en cualquier momento."
-title = "Stirling no puede descifrar tus documentos"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "No hay rangos IP configurados — todas las IP están permitidas."
-heading = "Lista de IP permitidas"
-sub = "El acceso a API está restringido a estos rangos CIDR."
-subLocked = "Restringe el acceso a API a rangos IP conocidos — disponible en planes de pago."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Mejora a Pro para restringir el acceso a API a redes específicas."
-title = "La lista de IP permitidas es una función de pago"
-
-[portal.infrastructure.security.ipColumns]
-added = "Añadido"
-addedBy = "Añadido por"
-cidr = "CIDR"
-label = "Etiqueta"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmo"
-heading = "Gestión de claves de cifrado"
-keyId = "Identificador de clave"
-lastRotated = "Última rotación"
-rotateKey = "Rotar clave"
-rotationPolicy = "Política de rotación"
-subheading = "Custodia de las claves que cifran documentos en reposo — quién puede descifrar y cómo rotan las claves."
-
-[portal.infrastructure.security.managedBanner]
-description = "La custodia trae-tu-propia-clave (BYOK) y conserva-tu-propia-clave (HYOK) está disponible en Enterprise. Mejora para proporcionar claves desde tu propio KMS."
-title = "Las claves las gestiona Stirling en tu plan"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia-Pacífico"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · límite de datos GDPR"
-label = "Unión Europea"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Estados Unidos"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Residencia de datos"
-subheading = "Dónde se almacenan y procesan los documentos."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} usado"
-
-[portal.infrastructure.storage.empty]
-description = "El almacenamiento conectado y el uso aparecerán aquí."
-title = "No hay almacenamiento configurado"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Activo"
-activeRange = "0–{{value}} d"
-archived = "Archivado"
-coldStorage = "almacenamiento en frío"
-deleted = "Eliminado"
-never = "nunca"
-purged = "purgado"
-
-[portal.infrastructure.storage.providers]
-connect = "Conectar"
-connected = "Conectado"
-heading = "Proveedores conectados"
-subheading = "Dónde se escriben los artefactos procesados."
-
-[portal.infrastructure.storage.retention]
-heading = "Retención"
-subheading = "Cuánto tiempo se conservan los artefactos antes de la eliminación del ciclo de vida."
-windowLabel = "Ventana de retención predeterminada"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} día"
-days_other = "{{count}} días"
-never = "No eliminar nunca"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Uso total"
-progressLabel = "Almacenamiento usado"
-subheading = "Almacenamiento consumido en todos los proveedores conectados."
-
 [portal.infrastructure.tabs]
 apiKeys = "Claves API"
 audit = "Registros de auditoría"
@@ -7715,11 +7657,9 @@ security = "Seguridad"
 storage = "Almacenamiento"
 
 [portal.integrations]
-addAnother = "Añadir otra"
 availableHeading = "Disponibles"
 comingSoonHeading = "Próximamente"
 connect = "Conectar"
-connectedHeading = "Conectadas"
 connectionCount_one = "{{count}} conexión"
 connectionCount_other = "{{count}} conexiones"
 customApi = "API personalizada"
@@ -7737,6 +7677,10 @@ security = "Seguridad"
 signing = "Firma"
 storage = "Almacenamiento"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Conectada"
 
@@ -7767,7 +7711,6 @@ integrations = "Integraciones"
 pipelines = "Pipelines"
 policies = "Políticas"
 procurement = "Compras"
-settings = "Configuración"
 sources = "Orígenes"
 usage = "Uso y facturación"
 users = "Usuarios"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Nuevo pipeline"
 
 [portal.pipelines.builder]
-addStep = "Añadir herramienta"
+activate = "Activate"
 back = "Volver a pipelines"
 cannotFollow = "No puede tomar {{produced}}"
 chooseAccount = "Elige una cuenta"
@@ -7792,28 +7735,38 @@ chooseDestination = "Elige un destino"
 chooseOperation = "Elige qué hace este paso"
 chooseSource = "Elige un origen"
 discard = "Descartar cambios"
-enabled = "Activado"
 inputs = "Entrada"
 inputSource = "Origen de entrada"
 inputTrigger = "Disparador"
 keepEditing = "Seguir editando"
+moreActions = "More actions"
 needsConfiguring = "Necesita configuración"
-needsUpload = "Necesita un archivo subido"
-noSources = "Aún no hay orígenes conectados. Crea uno para usarlo como entrada."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Ninguna herramienta coincide con tu búsqueda."
-pipelineSettings = "Configuración del pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Buscar herramientas"
-selectToolBody = "Añade una herramienta para crear tu pipeline."
-selectToolTitle = "Aún no hay herramientas"
 sendToSystem = "Enviar a otro sistema"
 stepsIncompatible = "Estos pasos no se pueden ejecutar sobre lo que produce su paso anterior: {{tools}}."
 stepsNeedSetup = "Estos pasos aún necesitan configuración antes de guardar: {{tools}}."
-toolSettings = "Configuración de la herramienta"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operación no reconocida, conservada tal cual."
 unsavedBody = "Tienes cambios sin guardar. ¿Guardarlos antes de salir o descartarlos?"
 unsavedTitle = "Cambios sin guardar"
-uploadUnsupported = "Los archivos subidos aún no son compatibles con pipelines, por lo que estos pasos no se pueden guardar: {{tools}}."
 usesDefaults = "Se ejecuta con la configuración predeterminada"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combina todos los archivos del paso anterior"
@@ -7825,31 +7778,36 @@ undeclared-operation = "No se puede comprobar qué acepta este paso"
 
 [portal.pipelines.composer]
 addTool = "Añadir herramienta"
-cancel = "Cancelar"
-chainEmpty = "Añade una herramienta para empezar a crear tu pipeline."
 create = "Crear pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Aún no se admite mostrar estos parámetros de herramienta para editarlos."
-moveDown = "Mover abajo"
-moveUp = "Mover arriba"
+editSource = "Edit source"
 name = "Nombre"
 namePlaceholder = "p. ej. Barrido de censura"
 noToolSettings = "Esta herramienta no tiene ajustes configurables."
-operations_one = "Operación ({{count}})"
-operations_other = "Operaciones ({{count}})"
 output = "Salida"
-removeStep = "Eliminar operación"
 save = "Guardar cambios"
 scheduleEvery = "Ejecutar cada"
-sources = "Orígenes"
-sourcesLoading = "Cargando orígenes..."
 trigger = "Desencadenador"
 triggerManual = "Solo manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "días"
 hours = "horas"
 minutes = "minutos"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "¿Eliminar \"{{name}}\"? Esta acción no se puede deshacer."
 cancel = "Cancelar"
@@ -7867,6 +7825,37 @@ connectSource = "Conectar un origen"
 description = "Crea tu primer pipeline: elige los orígenes sobre los que se ejecuta, encadena las operaciones y elige dónde va la salida."
 title = "Aún no hay pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Activos"
 paused = "Pausados"
@@ -7879,7 +7868,6 @@ completed_one = "Ejecución completada."
 completed_other = "Las {{count}} ejecuciones se han completado."
 empty = "Nada que ejecutar: los orígenes no tenían documentos que procesar."
 failed = "La ejecución ha fallado: {{error}}"
-historyCleared = "Historial borrado. La próxima ejecución vuelve a procesar todo lo que haya actualmente en los orígenes."
 inFlight = "Nada nuevo que ejecutar: todavía se están procesando documentos de una ejecución anterior."
 parked_one = "Nada que ejecutar: {{count}} documento falló anteriormente y está aparcado. Corrige la causa y luego borra el historial para reintentarlo."
 parked_other = "Nada que ejecutar: {{count}} documentos fallaron anteriormente y están aparcados. Corrige la causa y luego borra el historial para reintentarlos."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Orígenes"
 status = "Estado"
 steps = "Pasos"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Supervisión de carpeta"
@@ -8209,6 +8198,24 @@ label = "Adjuntar a una incidencia de Jira"
 description = "Envía el documento procesado como adjunto."
 label = "Enviar el documento por correo electrónico (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Escribe el documento procesado en una carpeta."
 label = "Subir a Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Agotadas"
 subtitle = "Tu prueba gratuita se extiende hasta {{date}}. No se requiere tarjeta."
 title = "Prueba Enterprise"
 
-[portal.search]
-ariaLabel = "Buscar"
-placeholder = "Buscar en Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Las acciones rápidas aparecerán aquí cuando estén disponibles."
-noActionsTitle = "Sin acciones rápidas"
-noMatches = "No hay coincidencias para \"{{query}}\""
-noMatchesDescription = "Prueba con otra palabra clave o explora el catálogo."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Cancelar"
 confirm = "Eliminar"
 title = "¿Eliminar fuente?"
 
-[portal.sources.empty]
-description = "Conecta una carpeta (y, pronto, almacenamiento en la nube) para que tus políticas tengan de dónde extraer documentos."
-title = "Aún no hay fuentes conectadas"
-
 [portal.sources.kpi]
 inUse = "En uso"
 total = "Conexiones"
@@ -8785,6 +8778,7 @@ unused = "Sin usar"
 documents = "Documentos"
 source = "Fuente"
 status = "Estado"
+type = "Type"
 usedBy = "Políticas"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Políticas y privacidad"
 [settings.preferences]
 title = "Preferencias"
 
-[settings.search]
-placeholder = "Buscar en las páginas de ajustes..."
-
 [settings.security]
 description = "Actualiza tu contraseña para mantener tu cuenta segura."
 title = "Seguridad"
@@ -10128,6 +10119,7 @@ last = "Última página"
 maintainRatio = "Activar/desactivar la relación de aspecto"
 next = "Siguiente página"
 noSavedSigs = "No se encontraron firmas guardadas"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Firmas Personales"
 previous = "Página anterior"
 redo = "Rehacer"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Error al eliminar el fondo"
 hint = "Cargue una imagen PNG o JPG de su firma"
 label = "Cargar imagen de firma"
 placeholder = "Seleccionar archivo de imagen"
+previewAlt = "Current image signature"
 processing = "Procesando imagen..."
 removeBackground = "Eliminar fondo blanco (hacer transparente)"
 
@@ -10179,6 +10172,17 @@ saved = "Seleccione una firma guardada arriba y haga clic en cualquier parte del
 text = "Tras introducir tu nombre arriba, haz clic en cualquier parte del PDF para colocar tu firma."
 title = "Cómo añadir firma"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Mover firma"
 pause = "Pausar colocación"
@@ -10625,6 +10629,23 @@ title = "Subir al servidor"
 updateButton = "Actualizar en el servidor"
 uploadButton = "Subir al servidor"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Volver"
 pdfTools = "Herramientas PDF"
 placeholder = "Elige una herramienta para empezar"
 premiumFeature = "Función Premium:"
-searchTools = "Buscar herramientas"
 toolsHeader = "Herramientas"
 viewAllTools = "Ver todas las herramientas"
 
@@ -10822,6 +10842,9 @@ removal = "Eliminación"
 signing = "Firma"
 verification = "Verificación"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "No se encontraron herramientas"
 noTools = "No hay herramientas disponibles"
@@ -10979,6 +11002,13 @@ approver = "Aprueba política"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "¿Cancelar la invitación a {{email}}? No podrá unirse con el enlace actual."
 cancelInviteTitle = "Cancelar invitación"
@@ -10998,10 +11028,8 @@ title = "Aún no hay miembros"
 addToTeam = "Añadir al equipo"
 guestCount = "{{count}} invitado"
 guests = "Invitados"
-guestsDesc = "Colaboradores externos, limitados a lo que hayas compartido. Solo Editor."
 ledBy = "dirigido por {{owner}}"
 org = "Organización"
-orgDesc = "Propietarios con autoridad en toda la org y aprobación de políticas"
 owners = "{{count}} propietario"
 team = "Equipo {{name}}"
 teamMeta = "{{count}} personas"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invitado por {{who}}"
 cancel = "Cancelar"
-count = "{{count}} pendientes"
-desc = "Personas invitadas que aún no se han unido. Ocupan una plaza hasta que acepten."
 expiresInDays_one = "Caduca en {{count}} día"
 expiresInDays_other = "Caduca en {{count}} días"
 expiresToday = "Caduca hoy"
 title = "Invitaciones pendientes"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Algo ha fallado al contactar con el backend, o no tienes acceso. Inténtalo de nuevo."
 title = "No se han podido cargar los miembros"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Buscar adjuntos"
 title = "Adjuntos"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Título del marcador"
 bookmarkTitleRequired = "El título del marcador es obligatorio"
 closeSidebar = "Cerrar barra lateral de marcadores"
 collapseAll = "Contraer todos los marcadores"
+empty = "No bookmarks in this document"
 expandAll = "Expandir todos los marcadores"
 searchPlaceholder = "Buscar marcadores"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Añadir comentario"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Localizar en el documento"
 moreActions = "Más acciones"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Página {{page}}"
 placingHint = "Haz clic en una página para colocar… (cancelar)"
 removeCommentOnly = "Quitar solo el comentario"
 saveReply = "Guardar respuesta"
+searchPlaceholder = "Search comments"
 title = "Comentarios"
 typeComment = "Comentario"
 typeInsertText = "Insertar texto"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Tienes cambios sin guardar"
 closeSidebar = "Cerrar barra lateral de capas"
 hideAll = "Ocultar todas las capas"
 showAll = "Mostrar todas las capas"
+title = "Layers"
 
 [viewer.link]
 delete = "Eliminar enlace"
@@ -11646,6 +11682,7 @@ exitRedaction = "Salir del modo de redacción"
 exportAll = "Exportar PDF"
 exportSelected = "Exportar páginas seleccionadas"
 formFill = "Rellenar formulario"
+hideToolbar = "Hide toolbar"
 multiTool = "Multiherramienta"
 panMode = "Modo desplazar"
 print = "Imprimir PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Seleccionar todo"
 selectByNumber = "Seleccionar por números de página"
 selectLanguage = "Seleccionar idioma"
 share = "Compartir"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Alternar visibilidad de las anotaciones"
 toggleAttachments = "Alternar adjuntos"
 toggleBookmarks = "Alternar marcadores"
diff --git a/frontend/editor/public/locales/eu-ES/translation.toml b/frontend/editor/public/locales/eu-ES/translation.toml
index e951d9413d..4b41940aae 100644
--- a/frontend/editor/public/locales/eu-ES/translation.toml
+++ b/frontend/editor/public/locales/eu-ES/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabetoa"
 apply = "Aplikatu"
 applyAndContinue = "Gorde eta irten"
-areYouSure = "Ziur zaude irten nahi duzula?"
 back = "Atzera"
 black = "Beltza"
 blue = "Urdina"
@@ -106,6 +105,7 @@ undoSuccess = "Eragiketa ongi desegin da"
 unknown = "Ezezaguna"
 unpin = "Kendu aingura fitxategiari (ordeztu tresna exekutatu ondoren)"
 unsavedChanges = "Gorde gabeko aldaketak dituzu zure PDFan."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Gorde gabeko aldaketak"
 unsupported = "Ez da onartzen"
 username = "Erabiltzaile izena"
@@ -1879,6 +1879,9 @@ width = "Zabalera"
 [app]
 description = "Adobe Acrobat-en doako alternatiba (10M+ deskarga)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Bihurtu PDF/A-3b formatura"
 convertToPdfA3bDescription = "Eranskinak txertatuta dituen artxibatzeko PDF bat sortzen du"
@@ -2933,12 +2936,16 @@ text = "Baimen hauek aldaezinak bihurtzeko, erabili Gehitu Pasahitza tresna jabe
 [chat.actions]
 copy = "Kopiatu mezua"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling agentearen aukerak"
+assistant = "AI Assistant"
 clearChat = "Garbitu txata"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Eragiketa honek zure hodeiko kredituak erabiliko ditu"
 tooltip = "Hautatu kolorea pantailatik"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Aukeratu kolorea"
 
 [common]
+actions = "Actions"
 back = "Atzera"
 cancel = "Utzi"
 close = "Itxi"
+codeSample = "Code sample"
 collapse = "Tolestu"
 confirm = "Berretsi"
 continue = "Jarraitu"
 copied = "Kopiatuta!"
 copy = "Kopiatu"
 done = "Eginda"
+enterValue = "Enter value"
 error = "Errorea"
 expand = "Zabaldu"
 loading = "Kargatzen..."
 next = "Hurrengoa"
+open = "Open"
 preview = "Aurrebista"
 previous = "Aurrekoa"
 refresh = "Freskatu"
 remaining = "Geratzen dena"
 retry = "Saiatu berriro"
 save = "Gorde"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Garbitu hautatutakoa"
@@ -3185,6 +3199,7 @@ title = "Konpresio-metodoa"
 [compress.settings]
 desiredSize = "Nahi den fitxategi-tamaina"
 desiredSizePlaceholder = "Sartu tamaina"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Konpresioa modu erraza da fitxategi-tamaina murrizteko. Aukeratu Fitxategiaren tamaina helburu tamaina bat sartzeko eta guk kalitatea doitzeko. Aukeratu Kalitatea konpresio-indarra eskuz ezartzeko."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF aukerak"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Lehenik hautatu iturburu formatua"
 settings = "Ezarpenak"
 single = "Bakarra"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Bilatu..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Editatu"
@@ -3824,11 +3861,13 @@ shareSelected = "Partekatu hautatutakoak"
 sharing = "Partekatzea"
 showAll = "Erakutsi denak"
 showHistory = "Historia erakutsi"
+sortBy = "Sort files"
 sortByDate = "Ordenatu dataren arabera"
 sortByName = "Ordenatu izenaren arabera"
 sortBySize = "Ordenatu tamainaren arabera"
 storage = "Biltegia"
 storageState = "Biltegiratzea"
+storageUsed = "Storage used"
 synced = "Sinkronizatuta"
 title = "PDF fitxategiak igo"
 toolChain = "Aplikatutako tresnak"
@@ -3874,8 +3913,12 @@ addFiles = "Gehitu fitxategiak"
 addingFiles = "Fitxategiak gehitzen…"
 collapse = "Tolestu alboko barra"
 customizeGroups = "Pertsonalizatu taldeak"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Ireki fitxategiak hasteko"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Zabaldu alboko barra"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ez dago konfiguratuta"
@@ -3888,15 +3931,17 @@ openFromComputer = "Ireki ordenagailutik"
 openSettings = "Ireki ezarpenak"
 other = "Besteak"
 recent = "Azkenak"
-search = "Bilatu"
-searchPlaceholder = "Bilatu fitxategiak..."
 viewAll = "Ikusi {{count}} fitxategi guztiak"
 
 [fileSidebar.fileItem]
 closeViewer = "Itxi ikustailea"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Ireki ikustailean"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Berrezarri lehenetsietara"
 subtitle = "Taldekatu zure fitxategiak kategoria nagusietan. Gehitu kategoria bati lehendik dauden edo etiketa berriak, aldatu izena edo sortu zurea. Zure kategorietako batean ez dauden fitxategiak “Besteak” atalean agertuko dira."
 title = "Alboko barrako kategoriak"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Gehitu lan-eremura"
 addToWorkspaceCount = "Gehitu {{count}} lan-eremura"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Itzuli Nire Fitxategietara"
 breadcrumbs = "Karpetaren bidea"
 cancel = "Utzi"
 classification = "Sailkapena"
-clearSearch = "Garbitu bilaketa"
 clearSelection = "Garbitu hautapena"
 closeDetails = "Itxi xehetasunak"
 create = "Sortu"
@@ -3950,6 +4002,7 @@ downloadAll = "Deskargatu dena"
 downloadVersion = "Deskargatu bertsio hau"
 dropOverlay = "Jaregin fitxategiak igotzeko"
 dropOverlaySub = "Fitxategiak Tokikoan hasten dira. Erabili 'Eraman hona' edo 'Gorde hodeian' karpeta batean antolatzeko."
+duplicate = "Duplicate"
 file = "Fitxategia"
 fileInfo = "File info"
 fileMenu = "Fitxategi-ekintzak"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Aldatu karpeta-zuhaitzaren tamaina (gezi-teklak, Shift pauso
 save = "Gorde"
 saveToServer = "Gorde zerbitzarian"
 saveToServerDisabledHint = "Zerbitzarian gordetzea ez dago gaituta zerbitzari honetan. Eskatu administratzaileari gaitzeko."
-search = "Bilatu"
-searchPlaceholder = "Bilatu karpeta honetan eta azpikarpetetan"
 selectAll = "Hautatu dena"
 selectAllHint = "Egin klik dena hautatzeko. Aholkua: eutsi Ctrl (edo Cmd) tekla fitxategiak banaka gehitzeko, Shift tarte bat hautatzeko."
 selectedCount = "{{count}} hautatuta"
@@ -4044,6 +4095,10 @@ title = "Oraindik ez dago hodeiko fitxategirik"
 hint = "Igo gabe gordetako fitxategiak hemen geratzen dira. Jaregin fitxategi bat gehitzeko."
 title = "Ez dago tokiko soilik diren fitxategirik"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Irekiko edo editatuko dituzun fitxategiak hemen agertuko dira."
 title = "Oraindik ez da ezer aldatu"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Ezin izan da karpeta ezabatu."
 deleteFolderFailedDetail = "Ezin izan da karpeta ezabatu: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Ezin izan da karpetaren itxura eguneratu."
 folderAppearanceFailedDetail = "Ezin izan da karpetaren itxura eguneratu: {{message}}"
 moveFilesFailed = "Ezin izan dira fitxategiak mugitu."
@@ -4113,6 +4170,11 @@ localHint = "Nabigatzaile honetan soilik gordeta"
 shared = "Partekatuak"
 sharedHint = "Zurekin estekaz partekatuta"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Zaharrenak lehenik"
 modifiedDesc = "Berrienak lehenik"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Ez dago fitxategirik biltegian. Ireki lehenik fitxategi
 open = "Ireki"
 openFile = "Fitxategia ireki"
 openFiles = "Fitxategiak ireki"
+selectFile = "Select {{name}}"
 selectFromStorage = "Biltegitik hautatu"
 upload = "Igo"
 uploadFile = "Fitxategia igo"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Dena gordeta"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Ezin izan da CSV erauzi"
 extractXlsxError = "Ezin izan da XLSX erauzi"
+filled = "filled"
 flattenAfterFilling = "Lautu betetze ondoren"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "behar."
 requiredFieldsError = "Bete beharrezko eremu guztiak"
 rescanFields = "Eremuak berriro eskaneatu"
@@ -4795,9 +4863,6 @@ title = "Irudia PDF bihurtu"
 [imageToPdf]
 tags = "conversion,img,jpg,picture,photo,psd,photoshop"
 
-[infoBanner]
-dismiss = "Baztertu"
-
 [invite]
 acceptError = "Ezin izan da kontua sortu"
 accountFor = "Kontua sortzen honentzat"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Kargaketa arrakastatsua!"
 uploadSuccessMessage = "Zure irudiak transferitu dira."
 validating = "Saioa balioztatzen..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Eskaneatu argazkiak igotzeko. Irudiak automatikoki PDFra bihurtzen dira."
 descriptionNoConvert = "Eskaneatu argazkiak zure gailu mugikorretik igotzeko."
@@ -4997,8 +5090,13 @@ title = "Kargatu mugikorretik"
 tags = "Multi Tool,Multi operation,UI,click drag,front end,client side"
 title = "PDF erabilera anitzeko tresna"
 
-[navbar]
-search = "Bilatu"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentifikazioa ez da ongi burutu. Leiho hau itxi eta saiatu berriro."
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>Fitxategi Aktiboak</strong> ikuspegiak tresnan kargatuta
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Itxi"
 cropSettings = "Orain moztu nahi dugun fitxategia hautatu dugunez, <strong>Moztu</strong> tresna konfigura dezakegu PDFa moztu nahi dugun eremua aukeratzeko."
+dialogLabel = "Onboarding"
 fileCheckbox = "Fitxategietako bat sakatzean, prozesatzeko hautatzen da. Hainbat fitxategi hauta ditzakezu batch eragiketetarako."
 fileReplacement = "Aldatutako fitxategiak automatikoki ordezkatuko du jatorrizkoa Lan-mahaian, errazago beste tresna batzuekin berriz prozesatzeko."
 filesButton = "Sarbide azkarreko barrako <strong>Fitxategiak</strong> botoiak PDFak igotzea ahalbidetzen dizu tresnekin erabiltzeko."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDFa PDF/A bihurtu"
 tags = "artxibo,epe-luze,estandar,bihurketa,biltegiratzea,kontserbazioa"
 title = "PDFa PDF/A bihurtu"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "inprimaketa,estandarra,bihurketa,produkzioa,aurre-inprimaketa,artxiboa"
 title = "PDFtik PDF/Xera"
@@ -6045,6 +6151,7 @@ small = "500 kreditu"
 xsmall = "100 kreditu"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Aukeratu zure beharretara egokitzen den plana"
 title = "Plan eskuragarriak"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Hileko gastu-mugara iritsi da"
 title = "Ezin izan da Stripe ataria ireki"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "{{allowance}} doako PDFetatik erabilita"
 capSuffix_other = "{{allowance}} doako PDFetatik erabilita"
 eyebrow = "Processor proba"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Bidali dokumentu bat edo jakinarazpen bat email bidez politika bat exekutatzen denean."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Gorde prozesatutako dokumentuak Nextcloud-en."
@@ -7077,11 +7211,6 @@ title = "SDK ofizialak"
 beta = "Beta"
 deprecated = "Zaharkitua"
 
-[portal.docs.search]
-empty = "Ez dago bat datorren dokumentaziorik"
-placeholder = "Bilatu dokumentazioan"
-results = "{{count}} emaitza"
-
 [portal.docs.skills]
 eyebrow = "TREBETASUNAK"
 lead = "Agenteak tresna bakar gisa deitzen dituen gaitasun integratu eta izendatuak. Trebetasun bakoitza ebaluazioak lotuta dituen eragiketa-kate determinista bat da."
@@ -7180,11 +7309,11 @@ editorAction = "Editorea"
 empty = "Ez dago iragazki honekin bat datorren dokumenturik."
 rowActions = "Errenkadako ekintzak"
 sensitiveLabel = "Sentikorra"
-sensitiveTitle = "Sentikorra — sarbidea behar da"
 
 [portal.documents.table.columns]
 action = "Pipelinea / Ekintza"
 document = "Dokumentua"
+labels = "Labels"
 product = "Produktua"
 status = "Egoera"
 time = "Ordua"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Azken aldiz ikusita"
 region = "Eskualdea"
 status = "Egoera"
+target = "Target"
 version = "Bertsioa"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Ikuspegi honek ustekabeko errore bat izan du. Saiatu berriro, edo
 retry = "Saiatu berriro"
 title = "Zerbait gaizki atera da orri honetan"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Atzera"
 body = "Deskargatu mahaigaineko aplikazioa edo egin zerbitzaria self-hosted."
@@ -7380,11 +7560,6 @@ cancel = "Utzi"
 confirm = "Ezeztatu gakoa"
 title = "Ezeztatu API gakoa"
 
-[portal.infrastructure.attestationLabel]
-attested = "Egiaztatuta"
-inScope = "Eremuan"
-notApplicable = "E/E"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Iragazi auditoria-gertaerak kategoriaren arabera"
 heading = "Auditoria-erregistroak"
@@ -7456,11 +7631,6 @@ info = "Informazioa"
 success = "Arrakasta"
 warning = "Abisua"
 
-[portal.infrastructure.certLabel]
-certified = "Ziurtatuta"
-inProgress = "Abian"
-notStarted = "Hasi gabe"
-
 [portal.infrastructure.createKey]
 cancel = "Utzi"
 createKey = "Sortu gakoa"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopiatu sekretu hau orain — ez da berriro erakutsiko."
 title = "Sortu API gakoa"
 titleCreated = "Gakoa sortuta"
 
-[portal.infrastructure.deployLabel]
-live = "Martxan"
-queued = "Ilaran"
-rolledBack = "Atzera itzulita"
-rolling = "Zabaltzen"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Hedatu duena"
-environment = "Ingurunea"
-product = "Produktua"
-status = "Egoera"
-version = "Bertsioa"
-when = "Noiz"
-
-[portal.infrastructure.deployments.recent]
-heading = "Azken hedapenak"
-subheading = "Produktu eta inguruneetako azken zabalkundeak."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instantziak"
-latency = "Latentzia"
-load = "Karga"
-p99 = "P99"
-region = "Eskualdea"
-status = "Egoera"
-throughput = "Errendimendua"
-uptime = "Erabilgarritasun-denbora"
-version = "Bertsioa"
-
-[portal.infrastructure.deployments.regions]
-heading = "Eskualdeak"
-subheading = "Hedatutako Stirling eskualde bakoitzaren zuzeneko osasuna — latentzia, karga eta zabalkunde-bertsioa."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Hedatutako eskualdeak hemen agertuko dira zure lan-eremua hornitu ondoren."
-title = "Ez dago eskualderik hedatuta"
-
 [portal.infrastructure.keyLabel]
 active = "Aktibo"
 revoked = "Ezeztatuta"
 
-[portal.infrastructure.modelLabel]
-active = "Aktibo"
-degraded = "Degradatuta"
-disabled = "Desgaituta"
-
-[portal.infrastructure.models]
-heading = "Modeloak"
-msValue = "{{value}} ms"
-subheading = "Zure lan-eremuan dokumentuen prozesamendua elikatzen duten modelo-katalogoa eta bideratzea."
-
-[portal.infrastructure.models.byom]
-description = "Erregistratu on-prem edo norberak ostatatutako modelo bat eta lotu eskualde bati datu-egoitzak mugatutako prozesamendurako."
-title = "Ekarri zure modeloa"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalogoa"
-sub = "Zure lan-eremurako eskuragarri dauden kudeatutako modeloak, zuzeneko latentziarekin eta kostuarekin."
-subEnterprise = "Kudeatutako, norberak ekarritako eta on-prem modeloak — eskualdeka lotzeko aukerarekin."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Zure lan-eremuko katalogoko modeloak hemen agertuko dira."
-title = "Ez dago modelorik erabilgarri"
-
-[portal.infrastructure.models.columns]
-cost = "Kostua"
-latency = "Latentzia"
-load = "Karga"
-model = "Modeloa"
-status = "Egoera"
-type = "Mota"
-version = "Bertsioa"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/dei"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modelo aktiboak"
-avgLatency = "Batez besteko latentzia"
-included = "Barne"
-monthlySpend = "Hileko modelo-gastua"
-
-[portal.infrastructure.models.routing]
-empty = "Ez dago bideratze-arau konfiguraturik."
-heading = "Bideratze-arauak"
-sub = "Zein modelok kudeatzen duen eragiketa bakoitza. Lehenetsia aplikatzen da arau zehatzagorik bat ez datorrenean."
-subLocked = "Bideratu eragiketak modelo zehatzetara — ordaindutako planetan eskuragarri."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Berritu Pro planera eragiketa eta dokumentu mota bakoitza zein modelok kudeatzen duen kontrolatzeko."
-title = "Modeloen bideratzea ordaindutako eginbidea da"
-
-[portal.infrastructure.models.routingColumns]
-default = "Lehenetsia"
-docType = "Dokumentu mota"
-modelForAria = "{{operation}} eragiketarako modeloa"
-operation = "Eragiketa"
-routedTo = "Hona bideratua"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Sailkapena"
-extraction = "Erauzketa"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradatuta"
-down = "Erorita"
-healthy = "Osasuntsu"
-
-[portal.infrastructure.security.access.byok]
-description = "Eman zure KMS propioaren gako bat. Stirling-ek harekin zifratzen du, baina oraindik irakur dezake."
-label = "Ekarri zure gakoa (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Gakoak ez dira inoiz zure KMS-tik irteten. Stirling-ek zifratu-testua baino ez du gordetzen."
-label = "Gorde zure gakoa (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling-ek zifratze-gakoak kudeatzen ditu. Errazena — zure aldetik gako-eragiketarik gabe."
-label = "Stirling-ek gordetako gakoak"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Dokumentuetarako sarbide-gidalerroa"
-subheading = "Atsedenean dauden prozesatutako dokumentuak nork deszifratu ditzakeen kontrolatzen du."
-
-[portal.infrastructure.security.attestations]
-heading = "Betetze-egiaztapenak"
-noReport = "Ez dago txostenik eskuragarri"
-subheading = "Esparruz esparruko auditoria-jarrera, egiaztatutako kontroletan txostenak eskuragarri direla."
-viewReport = "Ikusi txostena →"
-
-[portal.infrastructure.security.compliance]
-heading = "Betetzea"
-subheading = "Stirling plataforma estaltzen duten egiaztapenak eta ziurtagiriak."
-
-[portal.infrastructure.security.empty]
-description = "Zure lan-eremuko segurtasun-konfigurazioa hemen agertuko da."
-title = "Segurtasun-jarrera ez dago eskuragarri"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK erabiliz, zifratze-gakoak ez dira inoiz zure KMS-tik irteten. Stirling-ek edozein unetan baliogabetu dezakezun zifratu-testua baino ez du gordetzen eta prozesatzen."
-title = "Stirling-ek ezin ditu zure dokumentuak deszifratu"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Ez dago IP barrutirik konfiguratuta — IP guztiak baimenduta daude."
-heading = "IP baimen-zerrenda"
-sub = "API sarbidea CIDR barruti hauetara mugatuta dago."
-subLocked = "Mugatu API sarbidea IP barruti ezagunetara — ordaindutako planetan eskuragarri."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Berritu Pro planera API sarbidea sare zehatzetara mugatzeko."
-title = "IP baimen-zerrendak ordaindutako eginbidea dira"
-
-[portal.infrastructure.security.ipColumns]
-added = "Gehituta"
-addedBy = "Gehitu duena"
-cidr = "CIDR"
-label = "Etiketa"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmoa"
-heading = "Zifratze-gakoen kudeaketa"
-keyId = "Gako-identifikatzailea"
-lastRotated = "Azken biraketa"
-rotateKey = "Biratu gakoa"
-rotationPolicy = "Biraketa-gidalerroa"
-subheading = "Atsedenean dokumentuak zifratzen dituzten gakoen zaintza — nork deszifratu dezakeen eta gakoak nola biratzen diren."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) eta hold-your-own-key (HYOK) zaintza Enterprise planean daude eskuragarri. Berritu zure KMS propioko gakoak emateko."
-title = "Zure planean, gakoak Stirling-ek kudeatzen ditu"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pazifikoa"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR datu-muga"
-label = "Europar Batasuna"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Estatu Batuak"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Datu-egoitza"
-subheading = "Dokumentuak non gordetzen eta prozesatzen diren."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} erabilita"
-
-[portal.infrastructure.storage.empty]
-description = "Konektatutako biltegiratzea eta erabilera hemen agertuko dira."
-title = "Ez dago biltegiratzerik konfiguratuta"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktibo"
-activeRange = "0–{{value}}d"
-archived = "Artxibatuta"
-coldStorage = "biltegiratze hotza"
-deleted = "Ezabatuta"
-never = "inoiz ez"
-purged = "garbituta"
-
-[portal.infrastructure.storage.providers]
-connect = "Konektatu"
-connected = "Konektatuta"
-heading = "Konektatutako hornitzaileak"
-subheading = "Prozesatutako artefaktuak non idazten diren."
-
-[portal.infrastructure.storage.retention]
-heading = "Atxikipena"
-subheading = "Artefaktuak bizi-zikloko ezabaketaren aurretik zenbat denboraz mantentzen diren."
-windowLabel = "Atxikipen-leiho lehenetsia"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} egun"
-days_other = "{{count}} egun"
-never = "Ez ezabatu inoiz"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Erabilera guztira"
-progressLabel = "Erabilitako biltegiratzea"
-subheading = "Konektatutako hornitzaile guztietan kontsumitutako biltegiratzea."
-
 [portal.infrastructure.tabs]
 apiKeys = "API gakoak"
 audit = "Auditoria-erregistroak"
@@ -7715,11 +7657,9 @@ security = "Segurtasuna"
 storage = "Biltegiratzea"
 
 [portal.integrations]
-addAnother = "Gehitu beste bat"
 availableHeading = "Eskuragarri"
 comingSoonHeading = "Laster"
 connect = "Konektatu"
-connectedHeading = "Konektatuta"
 connectionCount_one = "{{count}} konexio"
 connectionCount_other = "{{count}} konexio"
 customApi = "API pertsonalizatua"
@@ -7737,6 +7677,10 @@ security = "Segurtasuna"
 signing = "Sinatzea"
 storage = "Biltegiratzea"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Konektatuta"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrazioak"
 pipelines = "Pipelineak"
 policies = "Gidalerroak"
 procurement = "Erosketak"
-settings = "Ezarpenak"
 sources = "Iturburuak"
 usage = "Erabilera eta fakturazioa"
 users = "Erabiltzaileak"
@@ -7784,7 +7727,7 @@ title = "Pipelineak"
 newPipeline = "Pipeline berria"
 
 [portal.pipelines.builder]
-addStep = "Gehitu tresna"
+activate = "Activate"
 back = "Itzuli pipelineetara"
 cannotFollow = "Ezin du {{produced}} hartu"
 chooseAccount = "Aukeratu kontu bat"
@@ -7792,28 +7735,38 @@ chooseDestination = "Aukeratu helmuga bat"
 chooseOperation = "Aukeratu urrats honek zer egiten duen"
 chooseSource = "Aukeratu iturburu bat"
 discard = "Baztertu aldaketak"
-enabled = "Gaituta"
 inputs = "Sarrera"
 inputSource = "Sarrera-iturburua"
 inputTrigger = "Abiarazlea"
 keepEditing = "Jarraitu editatzen"
+moreActions = "More actions"
 needsConfiguring = "Konfiguratu behar da"
-needsUpload = "Kargatutako fitxategi bat behar du"
-noSources = "Oraindik ez dago iturbururik konektatuta. Sortu bat sarrera gisa erabiltzeko."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Ez dago zure bilaketarekin bat datorren tresnarik."
-pipelineSettings = "Pipelinearen ezarpenak"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Bilatu tresnak"
-selectToolBody = "Gehitu tresna bat zure pipelinea eraikitzeko."
-selectToolTitle = "Oraindik ez dago tresnarik"
 sendToSystem = "Bidali beste sistema batera"
 stepsIncompatible = "Urrats hauek ezin dira exekutatu aurreko urratsak sortzen duenarekin: {{tools}}."
 stepsNeedSetup = "Urrats hauek oraindik konfiguratu behar dira gorde aurretik: {{tools}}."
-toolSettings = "Tresnaren ezarpenak"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Eragiketa ezezaguna, bere horretan mantendu da."
 unsavedBody = "Gorde gabeko aldaketak dituzu. Gorde irten aurretik, edo baztertu?"
 unsavedTitle = "Gorde gabeko aldaketak"
-uploadUnsupported = "Kargatutako fitxategiak oraindik ez dira onartzen pipelineetan; beraz, urrats hauek ezin dira gorde: {{tools}}."
 usesDefaults = "Ezarpen lehenetsiekin exekutatzen da"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Aurreko urratseko fitxategi guztiak konbinatzen ditu"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Ezin da egiaztatu urrats honek zer onartzen duen"
 
 [portal.pipelines.composer]
 addTool = "Gehitu tresna"
-cancel = "Utzi"
-chainEmpty = "Gehitu tresna bat zure pipelinea eraikitzen hasteko."
 create = "Sortu pipelinea"
+createPaused = "Create paused"
 editingUnsupported = "Tresna-parametro hauek editatzeko bistaratzea oraindik ez da onartzen."
-moveDown = "Mugitu behera"
-moveUp = "Mugitu gora"
+editSource = "Edit source"
 name = "Izena"
 namePlaceholder = "adib. Erredakzio-ekorketa"
 noToolSettings = "Tresna honek ez du ezarpen konfiguragarririk."
-operations_one = "Eragiketa ({{count}})"
-operations_other = "Eragiketak ({{count}})"
 output = "Irteera"
-removeStep = "Kendu eragiketa"
 save = "Gorde aldaketak"
 scheduleEvery = "Exekutatu behin"
-sources = "Iturburuak"
-sourcesLoading = "Iturburuak kargatzen..."
 trigger = "Abiarazlea"
 triggerManual = "Eskuz bakarrik"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "egun"
 hours = "ordu"
 minutes = "minutu"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Ezabatu \"{{name}}\"? Hau ezin da desegin."
 cancel = "Utzi"
@@ -7867,6 +7825,37 @@ connectSource = "Konektatu iturburu bat"
 description = "Sortu zure lehen pipelinea: aukeratu zein iturburutan exekutatuko den, kateatu eragiketak eta aukeratu irteera nora joango den."
 title = "Oraindik ez dago pipelinerik"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktibo"
 paused = "Pausatuta"
@@ -7879,7 +7868,6 @@ completed_one = "Exekuzioa osatu da."
 completed_other = "{{count}} exekuzio guztiak osatu dira."
 empty = "Ez dago exekutatzeko ezer: iturburuek ez zuten prozesatzeko dokumenturik."
 failed = "Exekuzioak huts egin du: {{error}}"
-historyCleared = "Historia garbitu da. Hurrengo exekuzioak une honetan iturburuetan dagoen guztia berriro prozesatuko du."
 inFlight = "Ez dago exekutatzeko ezer berririk: dokumentuak oraindik aurreko exekuzio batetik prozesatzen ari dira."
 parked_one = "Ez dago exekutatzeko ezer: {{count}} dokumentuk huts egin zuen lehenago eta aparkatuta dago. Konpondu arrazoia, eta gero garbitu historia berriro saiatzeko."
 parked_other = "Ez dago exekutatzeko ezer: {{count}} dokumentuk huts egin zuten lehenago eta aparkatuta daude. Konpondu arrazoia, eta gero garbitu historia berriro saiatzeko."
@@ -7895,6 +7883,7 @@ name = "Pipelinea"
 sources = "Iturburuak"
 status = "Egoera"
 steps = "Urratsak"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Karpetaren zaintza"
@@ -8209,6 +8198,24 @@ label = "Erantsi Jira issue bati"
 description = "Prozesatutako dokumentua eranskin gisa bidaltzen du."
 label = "Bidali dokumentua email bidez (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Prozesatutako dokumentua karpeta batean idazten du."
 label = "Igo Nextcloud-era"
@@ -8683,16 +8690,6 @@ maxed = "Mugara iritsita"
 subtitle = "Zure doako probaldia {{date}} arte doa. Ez da txartelik behar."
 title = "Enterprise probaldia"
 
-[portal.search]
-ariaLabel = "Bilatu"
-placeholder = "Bilatu Stirling — endpointak, pipelineak, dokumentuak…"
-
-[portal.search.empty]
-noActionsDescription = "Ekintza azkarrak hemen agertuko dira erabilgarri daudenean."
-noActionsTitle = "Ez dago ekintza azkarrik"
-noMatches = "Ez dago bat-etortzerik \"{{query}}\"-rentzat"
-noMatchesDescription = "Saiatu beste gako-hitz batekin edo arakatu katalogoa."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Utzi"
 confirm = "Ezabatu"
 title = "Ezabatu iturburua?"
 
-[portal.sources.empty]
-description = "Konektatu karpeta bat (eta, laster, hodeiko biltegiratzea), zure politikek dokumentuak nondik hartu izan dezaten."
-title = "Oraindik ez dago iturbururik konektatuta"
-
 [portal.sources.kpi]
 inUse = "Erabiltzen"
 total = "Konexioak"
@@ -8785,6 +8778,7 @@ unused = "Erabili gabe"
 documents = "Dokumentuak"
 source = "Iturburua"
 status = "Egoera"
+type = "Type"
 usedBy = "Politikak"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politikak eta Pribatutasuna"
 [settings.preferences]
 title = "Hobespenak"
 
-[settings.search]
-placeholder = "Bilatu ezarpen-orrietan..."
-
 [settings.security]
 description = "Eguneratu pasahitza kontua seguru mantentzeko."
 title = "Segurtasuna"
@@ -10128,6 +10119,7 @@ last = "Azken orria"
 maintainRatio = "Aldatu aspektu-erlazioa mantentzea"
 next = "Hurrengo orria"
 noSavedSigs = "Ez da gordetako sinadurarik aurkitu"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Sinadura pertsonalak"
 previous = "Aurreko orria"
 redo = "Berregin"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Atzeko planoa kentzeak huts egin du"
 hint = "Igo zure sinaduraren PNG edo JPG irudia"
 label = "Igo sinaduraren irudia"
 placeholder = "Hautatu irudi-fitxategia"
+previewAlt = "Current image signature"
 processing = "Irudia prozesatzen..."
 removeBackground = "Kendu atzeko plano zuria (gardendu)"
 
@@ -10179,6 +10172,17 @@ saved = "Hautatu goiko gordetako sinadura, ondoren egin klik PDFan edozein lekut
 text = "Goian zure izena sartu ondoren, egin klik PDFn edonon zure sinadura kokatzeko."
 title = "Nola gehitu sinadura"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Mugitu sinadura"
 pause = "Kokatzea pausatu"
@@ -10625,6 +10629,23 @@ title = "Igo zerbitzarira"
 updateButton = "Eguneratu zerbitzarian"
 uploadButton = "Igo zerbitzarira"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Itzuli atzera"
 pdfTools = "PDF tresnak"
 placeholder = "Aukeratu tresna bat hasteko"
 premiumFeature = "Premium ezaugarria:"
-searchTools = "Bilatu tresnak"
 toolsHeader = "Tresnak"
 viewAllTools = "Ikusi tresna guztiak"
 
@@ -10822,6 +10842,9 @@ removal = "Kentzea"
 signing = "Sinatzea"
 verification = "Egiaztapena"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Ez da tresnarik aurkitu"
 noTools = "Ez dago tresnarik eskuragarri"
@@ -10979,6 +11002,13 @@ approver = "Politika onartzen du"
 editor = "Editorea"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}} helbiderako gonbidapena bertan behera utzi? Ezingo dute uneko estekarekin bat egin."
 cancelInviteTitle = "Utzi gonbidapena bertan behera"
@@ -10998,10 +11028,8 @@ title = "Oraindik ez dago kiderik"
 addToTeam = "Gehitu taldera"
 guestCount = "{{count}} gonbidatu"
 guests = "Gonbidatuak"
-guestsDesc = "Kanpoko kolaboratzaileak, partekatu duzunera mugatuak. Editorea soilik."
 ledBy = "{{owner}}-k gidatua"
 org = "Erakundea"
-orgDesc = "Erakunde osoko agintea eta politika-onarpena dituzten jabeak"
 owners = "{{count}} jabe"
 team = "{{name}} taldea"
 teamMeta = "{{count}} pertsona"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "{{who}} erabiltzaileak gonbidatua"
 cancel = "Utzi bertan behera"
-count = "{{count}} zain"
-desc = "Oraindik sartu ez diren gonbidatuak. Eserleku bat mantentzen dute onartu arte."
 expiresInDays_one = "{{count}} egun barru iraungiko da"
 expiresInDays_other = "{{count}} egun barru iraungiko da"
 expiresToday = "Gaur iraungiko da"
 title = "Zain dauden gonbidapenak"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Zerbait gaizki joan da backend-era konektatzean, edo ez duzu sarbiderik. Saiatu berriro."
 title = "Ezin izan dira kideak kargatu"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Bilatu eranskinak"
 title = "Eranskinak"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Laster-markaren izenburua"
 bookmarkTitleRequired = "Laster-markaren izenburua beharrezkoa da"
 closeSidebar = "Itxi laster-marken alboko barra"
 collapseAll = "Tolestu laster-marka guztiak"
+empty = "No bookmarks in this document"
 expandAll = "Zabaldu laster-marka guztiak"
 searchPlaceholder = "Bilatu laster-markak"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Gehitu iruzkina"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Kokatu dokumentuan"
 moreActions = "Ekintza gehiago"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Orrialdea {{page}}"
 placingHint = "Egin klik orri batean kokatzeko… (utzi)"
 removeCommentOnly = "Kendu iruzkina bakarrik"
 saveReply = "Gorde erantzuna"
+searchPlaceholder = "Search comments"
 title = "Iruzkinak"
 typeComment = "Iruzkina"
 typeInsertText = "Testua txertatu"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Gorde gabeko aldaketak dituzu"
 closeSidebar = "Itxi geruzen alboko barra"
 hideAll = "Ezkutatu geruza guztiak"
 showAll = "Erakutsi geruza guztiak"
+title = "Layers"
 
 [viewer.link]
 delete = "Ezabatu esteka"
@@ -11646,6 +11682,7 @@ exitRedaction = "Irten zentsura modutik"
 exportAll = "Esportatu PDFa"
 exportSelected = "Esportatu hautatutako orriak"
 formFill = "Bete inprimakia"
+hideToolbar = "Hide toolbar"
 multiTool = "Multi-tresna"
 panMode = "Pan modua"
 print = "Inprimatu PDFa"
@@ -11666,6 +11703,7 @@ selectAll = "Hautatu dena"
 selectByNumber = "Hautatu orri-zenbakien arabera"
 selectLanguage = "Hautatu hizkuntza"
 share = "Partekatu"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Txandakatu anotazioen ikusgarritasuna"
 toggleAttachments = "Txandakatu eranskinak"
 toggleBookmarks = "Txandakatu laster-markak"
diff --git a/frontend/editor/public/locales/fa-IR/translation.toml b/frontend/editor/public/locales/fa-IR/translation.toml
index fdde8d6ae8..8dabf9598d 100644
--- a/frontend/editor/public/locales/fa-IR/translation.toml
+++ b/frontend/editor/public/locales/fa-IR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "حروف الفبا"
 apply = "اعمال"
 applyAndContinue = "ذخیره و خروج"
-areYouSure = "مطمئنید می‌خواهید خارج شوید؟"
 back = "بازگشت"
 black = "سیاه"
 blue = "آبی"
@@ -106,6 +105,7 @@ undoSuccess = "عملیات با موفقیت واگردانی شد"
 unknown = "نامعلوم"
 unpin = "برداشتن سنجاق فایل (پس از اجرای ابزار جایگزین شود)"
 unsavedChanges = "شما تغییرات ذخیره‌نشده‌ای در PDF دارید."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "تغییرات ذخیره‌نشده"
 unsupported = "پشتیبانی نمی‌شود"
 username = "نام کاربری"
@@ -1879,6 +1879,9 @@ width = "عرض"
 [app]
 description = "جایگزین رایگان Adobe Acrobat (10M+ دانلود)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "تبدیل به PDF/A-3b"
 convertToPdfA3bDescription = "یک PDF آرشیوی با پیوست‌های توکار ایجاد می‌کند"
@@ -2933,12 +2936,16 @@ text = "برای غیرقابل‌تغییر کردن این مجوزها، از
 [chat.actions]
 copy = "کپی پیام"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "گزینه‌های عامل Stirling"
+assistant = "AI Assistant"
 clearChat = "پاک‌کردن چت"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "این عملیات از اعتبارهای ابری شما استف
 tooltip = "برداشت رنگ از صفحه"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "انتخاب رنگ"
 
 [common]
+actions = "Actions"
 back = "بازگشت"
 cancel = "انصراف"
 close = "بستن"
+codeSample = "Code sample"
 collapse = "جمع کردن"
 confirm = "تأیید"
 continue = "ادامه"
 copied = "کپی شد!"
 copy = "کپی"
 done = "انجام شد"
+enterValue = "Enter value"
 error = "خطا"
 expand = "گسترش دادن"
 loading = "در حال بارگذاری..."
 next = "بعدی"
+open = "Open"
 preview = "پیش‌نمایش"
 previous = "قبلی"
 refresh = "تازه‌سازی"
 remaining = "باقی‌مانده"
 retry = "تلاش مجدد"
 save = "ذخیره"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "پاک کردن انتخاب‌شده‌ها"
@@ -3185,6 +3199,7 @@ title = "روش فشرده‌سازی"
 [compress.settings]
 desiredSize = "حجم فایل موردنظر"
 desiredSizePlaceholder = "اندازه را وارد کنید"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "فشرده‌سازی راهی آسان برای کاهش اندازه فایل است. «اندازه فایل» را انتخاب کنید تا اندازه هدف را وارد کنید و ما کیفیت را برای شما تنظیم کنیم. «کیفیت» را انتخاب کنید تا قدرت فشرده‌سازی را به‌صورت دستی تنظیم کنید."
@@ -3387,6 +3402,24 @@ pdfOptions = "گزینه‌های PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "ابتدا قالب مبدأ را انتخاب کنید"
 settings = "تنظیمات"
 single = "تکی"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "جستجو..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "ویرایش"
@@ -3824,11 +3861,13 @@ shareSelected = "اشتراک‌گذاری موارد انتخاب‌شده"
 sharing = "اشتراک‌گذاری"
 showAll = "نمایش همه"
 showHistory = "نمایش تاریخچه"
+sortBy = "Sort files"
 sortByDate = "مرتب‌سازی بر اساس تاریخ"
 sortByName = "مرتب‌سازی بر اساس نام"
 sortBySize = "مرتب‌سازی بر اساس حجم"
 storage = "فضای ذخیره"
 storageState = "ذخیره‌سازی"
+storageUsed = "Storage used"
 synced = "همگام شد"
 title = "بارگذاری فایل‌های PDF"
 toolChain = "ابزارهای اعمال‌شده"
@@ -3874,8 +3913,12 @@ addFiles = "افزودن فایل‌ها"
 addingFiles = "در حال افزودن فایل‌ها…"
 collapse = "جمع کردن نوار کناری"
 customizeGroups = "سفارشی‌سازی گروه‌ها"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "برای شروع فایل‌ها را باز کنید"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "گسترش نوار کناری"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive پیکربندی نشده است"
@@ -3888,15 +3931,17 @@ openFromComputer = "باز کردن از رایانه"
 openSettings = "باز کردن تنظیمات"
 other = "سایر"
 recent = "اخیر"
-search = "جستجو"
-searchPlaceholder = "جستجوی فایل‌ها..."
 viewAll = "مشاهده همه {{count}} فایل"
 
 [fileSidebar.fileItem]
 closeViewer = "بستن نمایشگر"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "باز کردن در نمایشگر"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "بازنشانی به پیش‌فرض‌ها"
 subtitle = "فایل‌های خود را در دسته‌های والد گروه‌بندی کنید. برچسب‌های موجود یا جدید را به یک دسته اضافه کنید، نام آن را تغییر دهید، یا دسته خودتان را بسازید. فایل‌هایی که در هیچ‌یک از دسته‌های شما نیستند زیر «سایر» نمایش داده می‌شوند."
 title = "دسته‌های نوار کناری"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "افزودن به فضای کاری"
 addToWorkspaceCount = "افزودن {{count}} مورد به فضای کاری"
@@ -3918,7 +3971,6 @@ backToMyFiles = "بازگشت به فایل‌های من"
 breadcrumbs = "مسیر پوشه"
 cancel = "لغو"
 classification = "طبقه‌بندی"
-clearSearch = "پاک‌کردن جستجو"
 clearSelection = "پاک‌کردن انتخاب"
 closeDetails = "بستن جزئیات"
 create = "ایجاد"
@@ -3950,6 +4002,7 @@ downloadAll = "دانلود همه"
 downloadVersion = "دانلود این نسخه"
 dropOverlay = "فایل‌ها را برای بارگذاری رها کنید"
 dropOverlaySub = "فایل‌ها در «محلی» شروع می‌شوند. برای سازمان‌دهی آن‌ها در یک پوشه از 'انتقال به' یا 'ذخیره در ابر' استفاده کنید."
+duplicate = "Duplicate"
 file = "فایل"
 fileInfo = "File info"
 fileMenu = "اقدامات فایل"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "تغییر اندازهٔ درخت پوشه‌ها (کلید
 save = "ذخیره"
 saveToServer = "ذخیره در سرور"
 saveToServerDisabledHint = "ذخیره در سرور روی این سرور فعال نیست. از مدیر خود بخواهید آن را فعال کند."
-search = "جستجو"
-searchPlaceholder = "جستجوی این پوشه و زیرپوشه‌ها"
 selectAll = "انتخاب همه"
 selectAllHint = "برای انتخاب همه کلیک کنید. نکته: برای افزودن فایل‌ها به‌صورت تکی Ctrl (یا Cmd) را نگه دارید، و برای انتخاب یک بازه از Shift استفاده کنید."
 selectedCount = "{{count}} مورد انتخاب‌شده"
@@ -4044,6 +4095,10 @@ title = "هنوز فایلی در ابر نیست"
 hint = "فایل‌هایی که بدون بارگذاری ذخیره می‌کنید اینجا می‌مانند. برای افزودن، یک فایل را رها کنید."
 title = "هیچ فایل صرفاً محلی نیست"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "فایل‌هایی که باز یا ویرایش می‌کنید اینجا نمایش داده می‌شوند."
 title = "هنوز موردی تغییر نکرده است"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "امکان حذف پوشه نبود."
 deleteFolderFailedDetail = "امکان حذف پوشه نبود: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "امکان به‌روزرسانی ظاهر پوشه نبود."
 folderAppearanceFailedDetail = "امکان به‌روزرسانی ظاهر پوشه نبود: {{message}}"
 moveFilesFailed = "امکان جابه‌جایی فایل‌ها نبود."
@@ -4113,6 +4170,11 @@ localHint = "فقط در این مرورگر ذخیره شده است"
 shared = "اشتراکی"
 sharedHint = "از طریق لینک با شما به اشتراک گذاشته شده"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "قدیمی‌ترین ابتدا"
 modifiedDesc = "جدیدترین ابتدا"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "فایلی در فضای ذخیره‌سازی موجو
 open = "باز کردن"
 openFile = "باز کردن فایل"
 openFiles = "باز کردن فایل‌ها"
+selectFile = "Select {{name}}"
 selectFromStorage = "انتخاب از فضای ذخیره"
 upload = "بارگذاری"
 uploadFile = "بارگذاری فایل"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "همه ذخیره شد"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "استخراج CSV ناموفق بود"
 extractXlsxError = "استخراج XLSX ناموفق بود"
+filled = "filled"
 flattenAfterFilling = "مسطح‌سازی پس از پرکردن"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "الزامی"
 requiredFieldsError = "لطفاً همه فیلدهای الزامی را پر کنید"
 rescanFields = "اسکن دوبارهٔ فیلدها"
@@ -4795,9 +4863,6 @@ title = "تبدیل تصویر به PDF"
 [imageToPdf]
 tags = "تبدیل،عکس،jpg،تصویر،عکس"
 
-[infoBanner]
-dismiss = "بستن"
-
 [invite]
 acceptError = "ایجاد حساب ناموفق بود"
 accountFor = "در حال ایجاد حساب برای"
@@ -4979,6 +5044,34 @@ uploadSuccess = "آپلود موفق!"
 uploadSuccessMessage = "تصاویر شما منتقل شدند."
 validating = "در حال اعتبارسنجی نشست..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "برای آپلود عکس‌ها اسکن کنید. تصاویر به‌صورت خودکار به PDF تبدیل می‌شوند."
 descriptionNoConvert = "برای آپلود عکس‌ها از دستگاه موبایل خود اسکن کنید."
@@ -4997,8 +5090,13 @@ title = "آپلود از موبایل"
 tags = "ابزار چندگانه،عملیات چندگانه،واسط کاربری،کلیک و کشیدن،فرانت‌اند،کاربردی،قابل تعامل،جابجایی،حذف،تقسیم"
 title = "ابزار چندگانه PDF"
 
-[navbar]
-search = "جستجو"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "احراز هویت موفق نبود. می‌توانید این پنجره را ببندید و دوباره تلاش کنید."
@@ -5127,6 +5225,7 @@ activeFiles = "نمای <strong>Active Files</strong> همه PDFهایی را ک
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "بستن"
 cropSettings = "حالا که فایلی را که می‌خواهیم برش دهیم انتخاب کرده‌ایم، می‌توانیم ابزار Crop را پیکربندی کنیم تا ناحیه‌ای را که می‌خواهیم PDF به آن برش داده شود انتخاب کنیم."
+dialogLabel = "Onboarding"
 fileCheckbox = "با کلیک روی یکی از فایل‌ها، آن برای پردازش انتخاب می‌شود. می‌توانید چندین فایل را برای عملیات دسته‌ای انتخاب کنید."
 fileReplacement = "فایل تغییر‌یافته به‌طور خودکار در Workbench جایگزین فایل اصلی می‌شود و امکان می‌دهد به‌راحتی آن را از ابزارهای بیشتری عبور دهید."
 filesButton = "دکمه <strong>Files</strong> در نوار دسترسی سریع به شما امکان می‌دهد PDFها را برای استفاده در ابزارها بارگذاری کنید."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF به PDF/A"
 tags = "آرشیو،ذخیره‌سازی بلندمدت،استاندارد،تبدیل،ذخیره‌سازی،حفظ"
 title = "PDF به PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "چاپ,استاندارد,تبدیل,تولید,پیش‌ازچاپ,آرشیو"
 title = "تبدیل PDF به PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 اعتبار"
 xsmall = "100 اعتبار"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "طرحی را انتخاب کنید که با نیازهای شما سازگار است"
 title = "طرح‌های موجود"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "حد هزینه ماهانه رسیده است"
 title = "امکان باز کردن پورتال Stripe وجود نداشت"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "از {{allowance}} PDF رایگان استفاده شده"
 capSuffix_other = "از {{allowance}} PDF رایگان استفاده شده"
 eyebrow = "آزمایشی Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "وقتی یک خط‌مشی اجرا می‌شود، سند یا اعلان را ایمیل کنید."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "اسناد پردازش‌شده را در Nextcloud قرار دهید."
@@ -7077,11 +7211,6 @@ title = "SDKهای رسمی"
 beta = "Beta"
 deprecated = "منسوخ‌شده"
 
-[portal.docs.search]
-empty = "مستندات مطابقی وجود ندارد"
-placeholder = "جست‌وجوی مستندات"
-results = "{{count}} نتیجه"
-
 [portal.docs.skills]
 eyebrow = "مهارت‌ها"
 lead = "قابلیت‌های بسته‌بندی‌شده و نام‌دار که عامل شما به‌عنوان یک ابزار واحد فراخوانی می‌کند. هر مهارت یک زنجیره عملیات قطعی با ارزیابی‌های پیوست‌شده است."
@@ -7180,11 +7309,11 @@ editorAction = "ویرایشگر"
 empty = "هیچ سندی با این فیلتر مطابقت ندارد."
 rowActions = "اقدامات ردیف"
 sensitiveLabel = "حساس"
-sensitiveTitle = "حساس — دسترسی لازم است"
 
 [portal.documents.table.columns]
 action = "Pipeline / اقدام"
 document = "سند"
+labels = "Labels"
 product = "محصول"
 status = "وضعیت"
 time = "زمان"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "آخرین مشاهده"
 region = "Region"
 status = "وضعیت"
+target = "Target"
 version = "نسخه"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "این نما با خطای غیرمنتظره‌ای روبه‌
 retry = "دوباره تلاش کنید"
 title = "در این صفحه مشکلی پیش آمد"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "بازگشت"
 body = "برنامه دسکتاپ را دانلود کنید یا سرور را خودمیزبان کنید."
@@ -7380,11 +7560,6 @@ cancel = "لغو"
 confirm = "لغو کلید"
 title = "لغو کلید API"
 
-[portal.infrastructure.attestationLabel]
-attested = "تأییدشده"
-inScope = "در محدوده"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "فیلتر کردن رویدادهای حسابرسی بر اساس دسته"
 heading = "گزارش‌های حسابرسی"
@@ -7456,11 +7631,6 @@ info = "اطلاعات"
 success = "موفقیت"
 warning = "هشدار"
 
-[portal.infrastructure.certLabel]
-certified = "گواهی‌شده"
-inProgress = "در حال انجام"
-notStarted = "شروع نشده"
-
 [portal.infrastructure.createKey]
 cancel = "لغو"
 createKey = "ایجاد کلید"
@@ -7474,238 +7644,10 @@ subtitleCreated = "این secret را اکنون کپی کنید — دوبار
 title = "ایجاد کلید API"
 titleCreated = "کلید ایجاد شد"
 
-[portal.infrastructure.deployLabel]
-live = "فعال"
-queued = "در صف"
-rolledBack = "بازگردانی‌شده"
-rolling = "در حال انتشار"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/دقیقه"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "مستقرشده توسط"
-environment = "محیط"
-product = "محصول"
-status = "وضعیت"
-version = "نسخه"
-when = "زمان"
-
-[portal.infrastructure.deployments.recent]
-heading = "استقرارهای اخیر"
-subheading = "آخرین rolloutها در محصولات و محیط‌ها."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "نمونه‌ها"
-latency = "Latency"
-load = "بار"
-p99 = "P99"
-region = "Region"
-status = "وضعیت"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "نسخه"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regions"
-subheading = "سلامت زنده برای هر Stirling region مستقرشده — latency، بار و نسخه rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "پس از تأمین فضای کاری شما، regionهای مستقرشده اینجا نمایش داده می‌شوند."
-title = "هیچ regionی مستقر نشده است"
-
 [portal.infrastructure.keyLabel]
 active = "فعال"
 revoked = "لغوشده"
 
-[portal.infrastructure.modelLabel]
-active = "فعال"
-degraded = "دارای اختلال"
-disabled = "غیرفعال"
-
-[portal.infrastructure.models]
-heading = "مدل‌ها"
-msValue = "{{value}} ms"
-subheading = "کاتالوگ مدل و routing که پردازش سند را در سراسر فضای کاری شما توانمند می‌کند."
-
-[portal.infrastructure.models.byom]
-description = "یک مدل on-prem یا خودمیزبان ثبت کنید و آن را برای پردازش محدود به data residency به یک region پین کنید."
-title = "مدل خودتان را بیاورید"
-
-[portal.infrastructure.models.catalogue]
-heading = "کاتالوگ"
-sub = "مدل‌های مدیریت‌شده در دسترس فضای کاری شما، با latency و هزینه زنده."
-subEnterprise = "مدل‌های مدیریت‌شده، bring-your-own و on-prem — با امکان پین کردن برای هر region."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "مدل‌های موجود در کاتالوگ فضای کاری شما اینجا نمایش داده می‌شوند."
-title = "هیچ مدلی در دسترس نیست"
-
-[portal.infrastructure.models.columns]
-cost = "هزینه"
-latency = "Latency"
-load = "بار"
-model = "مدل"
-status = "وضعیت"
-type = "نوع"
-version = "نسخه"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/فراخوانی"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "مدل‌های فعال"
-avgLatency = "میانگین latency"
-included = "شامل‌شده"
-monthlySpend = "هزینه ماهانه مدل"
-
-[portal.infrastructure.models.routing]
-empty = "هیچ قانون routing پیکربندی نشده است."
-heading = "قوانین routing"
-sub = "کدام مدل هر عملیات را مدیریت می‌کند. حالت پیش‌فرض زمانی اعمال می‌شود که هیچ قانون محدودتری مطابقت نداشته باشد."
-subLocked = "هدایت عملیات به مدل‌های مشخص — در طرح‌های پولی در دسترس است."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "برای کنترل اینکه کدام مدل هر عملیات و نوع سند را مدیریت کند، به Pro ارتقا دهید."
-title = "Model routing یک قابلیت پولی است"
-
-[portal.infrastructure.models.routingColumns]
-default = "پیش‌فرض"
-docType = "نوع سند"
-modelForAria = "مدل برای {{operation}}"
-operation = "عملیات"
-routedTo = "هدایت‌شده به"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "طبقه‌بندی"
-extraction = "استخراج"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "دارای اختلال"
-down = "از کار افتاده"
-healthy = "سالم"
-
-[portal.infrastructure.security.access.byok]
-description = "یک کلید از KMS خودتان ارائه دهید. Stirling با آن رمزنگاری می‌کند اما همچنان می‌تواند بخواند."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "کلیدها هرگز KMS شما را ترک نمی‌کنند. Stirling فقط ciphertext را نگه می‌دارد."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling کلیدهای رمزنگاری را مدیریت می‌کند. ساده‌ترین حالت — بدون عملیات کلید از سمت شما."
-label = "کلیدهای نگه‌داری‌شده توسط Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "سیاست دسترسی سند"
-subheading = "کنترل می‌کند چه کسانی می‌توانند اسناد پردازش‌شده در حالت at rest را رمزگشایی کنند."
-
-[portal.infrastructure.security.attestations]
-heading = "گواهی‌های انطباق"
-noReport = "هیچ گزارشی در دسترس نیست"
-subheading = "وضعیت حسابرسی چارچوب‌به‌چارچوب، با گزارش‌های در دسترس برای کنترل‌های گواهی‌شده."
-viewReport = "مشاهده گزارش →"
-
-[portal.infrastructure.security.compliance]
-heading = "انطباق"
-subheading = "گواهی‌ها و تأییدیه‌هایی که پلتفرم Stirling را پوشش می‌دهند."
-
-[portal.infrastructure.security.empty]
-description = "پیکربندی امنیتی فضای کاری شما اینجا نمایش داده می‌شود."
-title = "وضعیت امنیتی در دسترس نیست"
-
-[portal.infrastructure.security.hyokBanner]
-description = "با HYOK، کلیدهای رمزنگاری هرگز KMS شما را ترک نمی‌کنند. Stirling فقط ciphertext را ذخیره و پردازش می‌کند که می‌توانید هر زمان لغو کنید."
-title = "Stirling نمی‌تواند اسناد شما را رمزگشایی کند"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "هیچ محدوده IP پیکربندی نشده است — همه IPها مجاز هستند."
-heading = "IP allowlist"
-sub = "دسترسی API به این محدوده‌های CIDR محدود شده است."
-subLocked = "محدود کردن دسترسی API به محدوده‌های IP شناخته‌شده — در طرح‌های پولی در دسترس است."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "برای محدود کردن دسترسی API به شبکه‌های مشخص، به Pro ارتقا دهید."
-title = "IP allowlisting یک قابلیت پولی است"
-
-[portal.infrastructure.security.ipColumns]
-added = "افزوده‌شده"
-addedBy = "افزوده‌شده توسط"
-cidr = "CIDR"
-label = "برچسب"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "مدیریت کلید رمزنگاری"
-keyId = "شناسه کلید"
-lastRotated = "آخرین چرخش"
-rotateKey = "چرخش کلید"
-rotationPolicy = "سیاست چرخش"
-subheading = "نگه‌داری کلیدهایی که اسناد at rest را رمزنگاری می‌کنند — چه کسی می‌تواند رمزگشایی کند و کلیدها چگونه می‌چرخند."
-
-[portal.infrastructure.security.managedBanner]
-description = "نگه‌داری bring-your-own-key (BYOK) و hold-your-own-key (HYOK) در Enterprise در دسترس است. برای ارائه کلیدها از KMS خودتان ارتقا دهید."
-title = "در طرح شما، کلیدها توسط Stirling مدیریت می‌شوند"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "آسیا-اقیانوسیه"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · مرز داده GDPR"
-label = "اتحادیه اروپا"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "ایالات متحده"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "محل ذخیره و پردازش اسناد."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} استفاده‌شده"
-
-[portal.infrastructure.storage.empty]
-description = "ذخیره‌سازی متصل و مصرف اینجا نمایش داده می‌شود."
-title = "هیچ ذخیره‌سازی پیکربندی نشده است"
-
-[portal.infrastructure.storage.lifecycle]
-active = "فعال"
-activeRange = "0–{{value}} روز"
-archived = "آرشیوشده"
-coldStorage = "ذخیره‌سازی سرد"
-deleted = "حذف‌شده"
-never = "هرگز"
-purged = "پاک‌سازی‌شده"
-
-[portal.infrastructure.storage.providers]
-connect = "اتصال"
-connected = "متصل"
-heading = "ارائه‌دهندگان متصل"
-subheading = "محل نوشتن artifactهای پردازش‌شده."
-
-[portal.infrastructure.storage.retention]
-heading = "نگه‌داری"
-subheading = "مدت نگه‌داری artifactها پیش از حذف چرخه عمر."
-windowLabel = "بازه نگه‌داری پیش‌فرض"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} روز"
-days_other = "{{count}} روز"
-never = "هرگز حذف نکن"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "مصرف کل"
-progressLabel = "ذخیره‌سازی استفاده‌شده"
-subheading = "ذخیره‌سازی مصرف‌شده در همه ارائه‌دهندگان متصل."
-
 [portal.infrastructure.tabs]
 apiKeys = "کلیدهای API"
 audit = "گزارش‌های حسابرسی"
@@ -7715,11 +7657,9 @@ security = "امنیت"
 storage = "ذخیره‌سازی"
 
 [portal.integrations]
-addAnother = "افزودن مورد دیگر"
 availableHeading = "در دسترس"
 comingSoonHeading = "به‌زودی"
 connect = "متصل کردن"
-connectedHeading = "متصل‌شده"
 connectionCount_one = "{{count}} اتصال"
 connectionCount_other = "{{count}} اتصال"
 customApi = "API سفارشی"
@@ -7737,6 +7677,10 @@ security = "امنیت"
 signing = "امضا"
 storage = "ذخیره‌سازی"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "متصل‌شده"
 
@@ -7767,7 +7711,6 @@ integrations = "یکپارچه‌سازی‌ها"
 pipelines = "پایپ‌لاین‌ها"
 policies = "سیاست‌ها"
 procurement = "تدارکات"
-settings = "تنظیمات"
 sources = "منابع"
 usage = "مصرف و صورت‌حساب"
 users = "کاربران"
@@ -7784,7 +7727,7 @@ title = "پایپ‌لاین‌ها"
 newPipeline = "پایپ‌لاین جدید"
 
 [portal.pipelines.builder]
-addStep = "افزودن ابزار"
+activate = "Activate"
 back = "بازگشت به پایپ‌لاین‌ها"
 cannotFollow = "نمی‌تواند {{produced}} را بگیرد"
 chooseAccount = "یک حساب انتخاب کنید"
@@ -7792,28 +7735,38 @@ chooseDestination = "یک مقصد انتخاب کنید"
 chooseOperation = "انتخاب کنید این مرحله چه کاری انجام دهد"
 chooseSource = "یک منبع انتخاب کنید"
 discard = "دور انداختن تغییرات"
-enabled = "فعال"
 inputs = "ورودی"
 inputSource = "منبع ورودی"
 inputTrigger = "محرک"
 keepEditing = "ادامه ویرایش"
+moreActions = "More actions"
 needsConfiguring = "نیاز به راه‌اندازی دارد"
-needsUpload = "به یک فایل آپلودشده نیاز دارد"
-noSources = "هنوز هیچ منبعی متصل نشده است. یکی بسازید تا از آن به‌عنوان ورودی استفاده کنید."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "هیچ ابزاری با جستجوی شما مطابقت ندارد."
-pipelineSettings = "تنظیمات پایپ‌لاین"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "جستجوی ابزارها"
-selectToolBody = "برای ساخت پایپ‌لاین خود، یک ابزار اضافه کنید."
-selectToolTitle = "هنوز ابزاری وجود ندارد"
 sendToSystem = "ارسال به سیستم دیگر"
 stepsIncompatible = "این مراحل نمی‌توانند روی خروجی مرحله قبلی خود اجرا شوند: {{tools}}."
 stepsNeedSetup = "این مراحل پیش از ذخیره هنوز به راه‌اندازی نیاز دارند: {{tools}}."
-toolSettings = "تنظیمات ابزار"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "عملیات ناشناخته، بدون تغییر نگه داشته شد."
 unsavedBody = "تغییرات ذخیره‌نشده دارید. پیش از خروج آن‌ها را ذخیره می‌کنید یا دور می‌اندازید؟"
 unsavedTitle = "تغییرات ذخیره‌نشده"
-uploadUnsupported = "فایل‌های آپلودشده هنوز در پایپ‌لاین‌ها پشتیبانی نمی‌شوند، بنابراین این مراحل قابل ذخیره نیستند: {{tools}}."
 usesDefaults = "با تنظیمات پیش‌فرض اجرا می‌شود"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "همه فایل‌های مرحله قبلی را ترکیب می‌کند"
@@ -7825,31 +7778,36 @@ undeclared-operation = "نمی‌توان بررسی کرد این مرحله چ
 
 [portal.pipelines.composer]
 addTool = "افزودن ابزار"
-cancel = "لغو"
-chainEmpty = "برای شروع ساخت پایپ‌لاین خود، یک ابزار اضافه کنید."
 create = "ایجاد پایپ‌لاین"
+createPaused = "Create paused"
 editingUnsupported = "نمایش این params ابزار برای ویرایش هنوز پشتیبانی نمی‌شود."
-moveDown = "انتقال به پایین"
-moveUp = "انتقال به بالا"
+editSource = "Edit source"
 name = "نام"
 namePlaceholder = "مثلاً Redaction sweep"
 noToolSettings = "این ابزار تنظیمات قابل پیکربندی ندارد."
-operations_one = "عملیات ({{count}})"
-operations_other = "عملیات ({{count}})"
 output = "خروجی"
-removeStep = "حذف عملیات"
 save = "ذخیره تغییرات"
 scheduleEvery = "اجرا هر"
-sources = "منابع"
-sourcesLoading = "در حال بارگذاری منابع..."
 trigger = "Trigger"
 triggerManual = "فقط دستی"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "روز"
 hours = "ساعت"
 minutes = "دقیقه"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "«{{name}}» حذف شود؟ این کار قابل بازگشت نیست."
 cancel = "لغو"
@@ -7867,6 +7825,37 @@ connectSource = "اتصال یک منبع"
 description = "اولین پایپ‌لاین خود را ایجاد کنید: منابعی را که روی آن‌ها اجرا می‌شود انتخاب کنید، عملیات را زنجیره کنید و محل خروجی را انتخاب کنید."
 title = "هنوز پایپ‌لاینی وجود ندارد"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "فعال"
 paused = "متوقف‌شده"
@@ -7879,7 +7868,6 @@ completed_one = "اجرا کامل شد."
 completed_other = "همه {{count}} اجرا کامل شد."
 empty = "چیزی برای اجرا نیست: منابع سندی برای پردازش نداشتند."
 failed = "اجرا ناموفق بود: {{error}}"
-historyCleared = "تاریخچه پاک شد. اجرای بعدی همه موارد فعلی در منابع را دوباره پردازش می‌کند."
 inFlight = "مورد جدیدی برای اجرا نیست: اسناد هنوز از اجرای قبلی در حال پردازش هستند."
 parked_one = "چیزی برای اجرا نیست: {{count}} سند قبلاً ناموفق بوده و کنار گذاشته شده است. علت را رفع کنید، سپس برای تلاش مجدد تاریخچه را پاک کنید."
 parked_other = "چیزی برای اجرا نیست: {{count}} سند قبلاً ناموفق بوده‌اند و کنار گذاشته شده‌اند. علت را رفع کنید، سپس برای تلاش مجدد تاریخچه را پاک کنید."
@@ -7895,6 +7883,7 @@ name = "پایپ‌لاین"
 sources = "منابع"
 status = "وضعیت"
 steps = "مراحل"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "پایش پوشه"
@@ -8209,6 +8198,24 @@ label = "پیوست به یک issue در Jira"
 description = "سند پردازش‌شده را به‌عنوان پیوست ارسال می‌کند."
 label = "ایمیل کردن سند (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "سند پردازش‌شده را داخل یک پوشه می‌نویسد."
 label = "آپلود به Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "به سقف رسیده"
 subtitle = "دوره آزمایشی رایگان شما تا {{date}} ادامه دارد. کارت لازم نیست."
 title = "دوره آزمایشی Enterprise"
 
-[portal.search]
-ariaLabel = "جستجو"
-placeholder = "جستجو در Stirling — endpoints، پایپ‌لاین‌ها، مستندات…"
-
-[portal.search.empty]
-noActionsDescription = "وقتی اقدامات سریع در دسترس باشند، اینجا نمایش داده می‌شوند."
-noActionsTitle = "اقدام سریعی وجود ندارد"
-noMatches = "هیچ نتیجه‌ای برای «{{query}}» یافت نشد"
-noMatchesDescription = "یک کلیدواژه دیگر امتحان کنید یا کاتالوگ را مرور کنید."
-
 [portal.settings.groups]
 admin = "مدیر"
 
@@ -8743,10 +8740,6 @@ cancel = "لغو"
 confirm = "حذف"
 title = "منبع حذف شود؟"
 
-[portal.sources.empty]
-description = "یک پوشه (و به‌زودی فضای ذخیره‌سازی ابری) را متصل کنید تا خط‌مشی‌های شما جایی برای دریافت اسناد داشته باشند."
-title = "هنوز هیچ منبعی متصل نشده است"
-
 [portal.sources.kpi]
 inUse = "در حال استفاده"
 total = "اتصالات"
@@ -8785,6 +8778,7 @@ unused = "استفاده‌نشده"
 documents = "اسناد"
 source = "منبع"
 status = "وضعیت"
+type = "Type"
 usedBy = "خط‌مشی‌ها"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "سیاست‌ها و حریم خصوصی"
 [settings.preferences]
 title = "ترجیحات"
 
-[settings.search]
-placeholder = "جستجوی صفحات تنظیمات..."
-
 [settings.security]
 description = "رمز عبور خود را به‌روزرسانی کنید تا حسابتان ایمن بماند."
 title = "امنیت"
@@ -10128,6 +10119,7 @@ last = "صفحه آخر"
 maintainRatio = "تغییر حفظ نسبت ابعاد"
 next = "صفحه بعدی"
 noSavedSigs = "هیچ امضای ذخیره‌شده‌ای یافت نشد"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "امضاهای شخصی"
 previous = "صفحه قبلی"
 redo = "انجام مجدد"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "حذف پس‌زمینه ناموفق بود"
 hint = "یک تصویر PNG یا JPG از امضای خود بارگذاری کنید"
 label = "بارگذاری تصویر امضا"
 placeholder = "انتخاب فایل تصویر"
+previewAlt = "Current image signature"
 processing = "در حال پردازش تصویر..."
 removeBackground = "حذف پس‌زمینه سفید (شفاف‌سازی)"
 
@@ -10179,6 +10172,17 @@ saved = "یک امضای ذخیره‌شده را انتخاب کنید، سپس
 text = "پس از وارد کردن نام خود در بالا، هرجای PDF کلیک کنید تا امضای شما قرار گیرد."
 title = "چگونه امضا اضافه کنیم"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "جابجایی امضا"
 pause = "مکث جانمایی"
@@ -10625,6 +10629,23 @@ title = "بارگذاری در سرور"
 updateButton = "به‌روزرسانی روی سرور"
 uploadButton = "بارگذاری در سرور"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "بازگشت"
 pdfTools = "ابزارهای PDF"
 placeholder = "برای شروع یک ابزار انتخاب کنید"
 premiumFeature = "ویژگی پرمیوم:"
-searchTools = "جستجوی ابزارها"
 toolsHeader = "ابزارها"
 viewAllTools = "مشاهدهٔ همهٔ ابزارها"
 
@@ -10822,6 +10842,9 @@ removal = "حذف"
 signing = "امضا"
 verification = "تأیید"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "هیچ ابزاری یافت نشد"
 noTools = "هیچ ابزاری موجود نیست"
@@ -10979,6 +11002,13 @@ approver = "تأیید خط‌مشی"
 editor = "ویرایشگر"
 processor = "پردازشگر"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "دعوت به {{email}} لغو شود؟ آن‌ها دیگر نمی‌توانند با لینک فعلی بپیوندند."
 cancelInviteTitle = "لغو دعوت"
@@ -10998,10 +11028,8 @@ title = "هنوز عضوی وجود ندارد"
 addToTeam = "افزودن به تیم"
 guestCount = "{{count}} مهمان"
 guests = "مهمانان"
-guestsDesc = "همکاران خارجی، محدود به آنچه به اشتراک گذاشته‌اید. فقط ویرایشگر."
 ledBy = "به رهبری {{owner}}"
 org = "سازمان"
-orgDesc = "مالکانی با اختیار در سراسر سازمان و تأیید خط‌مشی"
 owners = "{{count}} مالک"
 team = "تیم {{name}}"
 teamMeta = "{{count}} نفر"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "دعوت‌شده توسط {{who}}"
 cancel = "لغو"
-count = "{{count}} در انتظار"
-desc = "افراد دعوت‌شده‌ای که هنوز نپیوسته‌اند. تا زمانی که دعوت را بپذیرند، یک جایگاه را اشغال می‌کنند."
 expiresInDays_one = "{{count}} روز دیگر منقضی می‌شود"
 expiresInDays_other = "{{count}} روز دیگر منقضی می‌شود"
 expiresToday = "امروز منقضی می‌شود"
 title = "دعوت‌های در انتظار"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "در برقراری ارتباط با بک‌اند مشکلی پیش آمد، یا شما دسترسی ندارید. دوباره تلاش کنید."
 title = "امکان بارگیری اعضا نبود"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "جستجوی پیوست‌ها"
 title = "پیوست‌ها"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "عنوان نشانک"
 bookmarkTitleRequired = "عنوان نشانک الزامی است"
 closeSidebar = "بستن نوار کناری نشانک‌ها"
 collapseAll = "جمع کردن همه نشانک‌ها"
+empty = "No bookmarks in this document"
 expandAll = "باز کردن همه نشانک‌ها"
 searchPlaceholder = "جستجوی نشانک‌ها"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "افزودن نظر"
@@ -11264,10 +11297,12 @@ locateAnnotation = "یافتن در سند"
 moreActions = "عملیات بیشتر"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "صفحه {{page}}"
 placingHint = "برای قرار دادن، روی یک صفحه کلیک کنید… (لغو)"
 removeCommentOnly = "فقط حذف نظر"
 saveReply = "ذخیره پاسخ"
+searchPlaceholder = "Search comments"
 title = "نظرات"
 typeComment = "نظر"
 typeInsertText = "درج متن"
@@ -11290,6 +11325,7 @@ unsavedDesc = "تغییرات ذخیره‌نشده دارید"
 closeSidebar = "بستن نوار کناری لایه‌ها"
 hideAll = "پنهان کردن همه لایه‌ها"
 showAll = "نمایش همه لایه‌ها"
+title = "Layers"
 
 [viewer.link]
 delete = "حذف لینک"
@@ -11646,6 +11682,7 @@ exitRedaction = "خروج از حالت پنهان‌سازی"
 exportAll = "خروجی گرفتن از PDF"
 exportSelected = "خروجی گرفتن از صفحات منتخب"
 formFill = "پر کردن فرم"
+hideToolbar = "Hide toolbar"
 multiTool = "ابزار چندگانه"
 panMode = "حالت جابه‌جایی"
 print = "چاپ PDF"
@@ -11666,6 +11703,7 @@ selectAll = "انتخاب همه"
 selectByNumber = "انتخاب بر اساس شماره‌های صفحه"
 selectLanguage = "انتخاب زبان"
 share = "اشتراک‌گذاری"
+showToolbar = "Show toolbar"
 toggleAnnotations = "نمایش/مخفی کردن حاشیه‌نویسی‌ها"
 toggleAttachments = "نمایش/مخفی کردن پیوست‌ها"
 toggleBookmarks = "نمایش/مخفی کردن نشانک‌ها"
diff --git a/frontend/editor/public/locales/fr-FR/translation.toml b/frontend/editor/public/locales/fr-FR/translation.toml
index 9c38d2209a..8734944054 100644
--- a/frontend/editor/public/locales/fr-FR/translation.toml
+++ b/frontend/editor/public/locales/fr-FR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alphabet"
 apply = "Appliquer"
 applyAndContinue = "Appliquer et continuer"
-areYouSure = "Voulez-vous vraiment quitter ?"
 back = "Retour"
 black = "Noir"
 blue = "Bleu"
@@ -106,6 +105,7 @@ undoSuccess = "Opération annulée avec succès"
 unknown = "Inconnu"
 unpin = "Désépingler le fichier (remplacer après l’exécution de l’outil)"
 unsavedChanges = "Vous avez des modifications non enregistrées sur votre PDF. Que souhaitez-vous faire ?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Modifications non enregistrées"
 unsupported = "Non pris en charge"
 username = "Nom d'utilisateur"
@@ -1879,6 +1879,9 @@ width = "Largeur"
 [app]
 description = "L’alternative gratuite à Adobe Acrobat (10M+ téléchargements)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Convertir en PDF/A-3b"
 convertToPdfA3bDescription = "Crée un PDF d’archivage avec pièces jointes intégrées"
@@ -2933,12 +2936,16 @@ text = "Pour rendre ces permissions non modifiables, utilisez l’outil Ajouter
 [chat.actions]
 copy = "Copier le message"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Options de l’agent Stirling"
+assistant = "AI Assistant"
 clearChat = "Effacer la discussion"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Cette opération utilisera vos crédits cloud"
 tooltip = "Prélever une couleur à l’écran"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Choisir la couleur"
 
 [common]
+actions = "Actions"
 back = "Retour"
 cancel = "Annuler"
 close = "Fermer"
+codeSample = "Code sample"
 collapse = "Réduire"
 confirm = "Confirmer"
 continue = "Continuer"
 copied = "Copié !"
 copy = "Copier"
 done = "Terminé"
+enterValue = "Enter value"
 error = "Erreur"
 expand = "Développer"
 loading = "Chargement…"
 next = "Suivant"
+open = "Open"
 preview = "Aperçu"
 previous = "Précédent"
 refresh = "Actualiser"
 remaining = "Restant"
 retry = "Réessayer"
 save = "Enregistrer"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Effacer la sélection"
@@ -3185,6 +3199,7 @@ title = "Méthode de compression"
 [compress.settings]
 desiredSize = "Taille de fichier souhaitée"
 desiredSizePlaceholder = "Saisir la taille"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "La compression est un moyen simple de réduire la taille de votre fichier. Choisissez Taille de fichier pour saisir une taille cible et nous ajusterons la qualité pour vous. Choisissez Qualité pour régler manuellement la force de compression."
@@ -3387,6 +3402,24 @@ pdfOptions = "Options PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Sélectionnez d’abord un format source"
 settings = "Paramètres"
 single = "Unique"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Rechercher..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Modifier"
@@ -3824,11 +3861,13 @@ shareSelected = "Partager la sélection"
 sharing = "Partage"
 showAll = "Tout afficher"
 showHistory = "Afficher l’historique"
+sortBy = "Sort files"
 sortByDate = "Trier par date"
 sortByName = "Trier par nom"
 sortBySize = "Trier par taille"
 storage = "Stockage"
 storageState = "Stockage"
+storageUsed = "Storage used"
 synced = "Synchronisé"
 title = "Téléverser des fichiers PDF"
 toolChain = "Outils appliqués"
@@ -3874,8 +3913,12 @@ addFiles = "Ajouter des fichiers"
 addingFiles = "Ajout de fichiers…"
 collapse = "Réduire la barre latérale"
 customizeGroups = "Personnaliser les groupes"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Ouvrez des fichiers pour commencer"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Développer la barre latérale"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive n’est pas configuré"
@@ -3888,15 +3931,17 @@ openFromComputer = "Ouvrir depuis l’ordinateur"
 openSettings = "Ouvrir les paramètres"
 other = "Autre"
 recent = "Récent"
-search = "Rechercher"
-searchPlaceholder = "Rechercher des fichiers..."
 viewAll = "Voir les {{count}} fichiers"
 
 [fileSidebar.fileItem]
 closeViewer = "Fermer la visionneuse"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Ouvrir dans la visionneuse"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Réinitialiser aux valeurs par défaut"
 subtitle = "Regroupez vos fichiers dans des catégories parentes. Ajoutez des étiquettes existantes ou nouvelles à une catégorie, renommez-la ou créez la vôtre. Les fichiers qui ne figurent dans aucune de vos catégories apparaissent sous « Autre »."
 title = "Catégories de la barre latérale"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Ajouter à l’espace de travail"
 addToWorkspaceCount = "Ajouter {{count}} à l’espace de travail"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Retour à Mes fichiers"
 breadcrumbs = "Chemin du dossier"
 cancel = "Annuler"
 classification = "Classification"
-clearSearch = "Effacer la recherche"
 clearSelection = "Effacer la sélection"
 closeDetails = "Fermer les détails"
 create = "Créer"
@@ -3950,6 +4002,7 @@ downloadAll = "Tout télécharger"
 downloadVersion = "Télécharger cette version"
 dropOverlay = "Déposez les fichiers pour téléverser"
 dropOverlaySub = "Les fichiers commencent en Local. Utilisez « Déplacer vers » ou « Enregistrer dans le cloud » pour les organiser dans un dossier."
+duplicate = "Duplicate"
 file = "Fichier"
 fileInfo = "File info"
 fileMenu = "Actions sur le fichier"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Redimensionner l’arborescence des dossiers (touches fléch
 save = "Enregistrer"
 saveToServer = "Enregistrer sur le serveur"
 saveToServerDisabledHint = "L’enregistrement sur le serveur n’est pas activé sur ce serveur. Demandez à votre administrateur de l’activer."
-search = "Rechercher"
-searchPlaceholder = "Rechercher dans ce dossier et les sous-dossiers"
 selectAll = "Tout sélectionner"
 selectAllHint = "Cliquez pour tout sélectionner. Astuce : maintenez Ctrl (ou Cmd) pour ajouter des fichiers un par un, Maj pour sélectionner une plage."
 selectedCount = "{{count}} sélectionné(s)"
@@ -4044,6 +4095,10 @@ title = "Pas encore de fichiers cloud"
 hint = "Les fichiers enregistrés sans téléversement restent ici. Déposez un fichier pour en ajouter un."
 title = "Aucun fichier local uniquement"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Les fichiers que vous ouvrez ou modifiez apparaîtront ici."
 title = "Aucune modification pour l’instant"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Impossible de supprimer le dossier."
 deleteFolderFailedDetail = "Impossible de supprimer le dossier : {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Impossible de mettre à jour l’apparence du dossier."
 folderAppearanceFailedDetail = "Impossible de mettre à jour l’apparence du dossier : {{message}}"
 moveFilesFailed = "Impossible de déplacer les fichiers."
@@ -4113,6 +4170,11 @@ localHint = "Stocké uniquement dans ce navigateur"
 shared = "Partagé"
 sharedHint = "Partagé avec vous via un lien"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Plus ancien d’abord"
 modifiedDesc = "Plus récent d’abord"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Aucun fichier disponible dans le stockage. Ouvrez d’ab
 open = "Ouvrir"
 openFile = "Ouvrir un fichier"
 openFiles = "Ouvrir des fichiers"
+selectFile = "Select {{name}}"
 selectFromStorage = "Sélectionner depuis le stockage"
 upload = "Téléverser"
 uploadFile = "Téléverser un fichier"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Tout est enregistré"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Échec de l’extraction du CSV"
 extractXlsxError = "Échec de l’extraction du XLSX"
+filled = "filled"
 flattenAfterFilling = "Aplatir après remplissage"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obl."
 requiredFieldsError = "Veuillez remplir tous les champs obligatoires"
 rescanFields = "Réanalyser les champs"
@@ -4795,9 +4863,6 @@ title = "Image en PDF"
 [imageToPdf]
 tags = "pdf,conversion,img,jpg,image,photo"
 
-[infoBanner]
-dismiss = "Fermer"
-
 [invite]
 acceptError = "Échec de la création du compte"
 accountFor = "Création du compte pour"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Téléversement réussi !"
 uploadSuccessMessage = "Vos images ont été transférées."
 validating = "Validation de la session..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scannez pour téléverser des photos. Les images se convertissent automatiquement en PDF."
 descriptionNoConvert = "Scannez pour téléverser des photos depuis votre appareil mobile."
@@ -4997,8 +5090,13 @@ title = "Téléverser depuis un mobile"
 tags = "outil multifonction,opération multifonction,interface utilisateur,glisser déposer,front-end,client side,interactif,intransigeant,déplacer,multi tool"
 title = "Outil multifonction PDF"
 
-[navbar]
-search = "Rechercher"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "L'authentification n'a pas abouti. Vous pouvez fermer cette fenêtre et réessayer."
@@ -5127,6 +5225,7 @@ activeFiles = "La vue <strong>Fichiers actifs</strong> affiche tous les PDF char
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Fermer"
 cropSettings = "Maintenant que nous avons sélectionné le fichier que nous voulons rogner, nous pouvons configurer l’outil Rogner pour définir la zone de rognage du PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Cliquer sur l’un des fichiers le sélectionne pour le traitement. Vous pouvez en sélectionner plusieurs pour des opérations par lots."
 fileReplacement = "Le fichier modifié remplacera automatiquement le fichier d’origine dans le Workbench, ce qui vous permettra de le faire passer facilement par d’autres outils."
 filesButton = "Le bouton <strong>Fichiers</strong> de la barre d’accès rapide vous permet de téléverser des PDF à utiliser avec les outils."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF en PDF/A"
 tags = "convertion,archive,long-term,standard,conversion,storage,préservation,preservation"
 title = "PDF en PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "impression,standard,conversion,production,prépresse,archive"
 title = "PDF vers PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Credits"
 xsmall = "100 Credits"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Choisissez le forfait adapté à vos besoins"
 title = "Forfaits disponibles"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Limite de dépenses mensuelle atteinte"
 title = "Impossible d’ouvrir le portail Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "sur {{allowance}} PDF gratuits utilisés"
 capSuffix_other = "sur {{allowance}} PDF gratuits utilisés"
 eyebrow = "Essai Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Envoyer un document ou une notification par email lorsqu’une politique s’exécute."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Classer les documents traités dans Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDK officiels"
 beta = "Beta"
 deprecated = "Obsolète"
 
-[portal.docs.search]
-empty = "Aucune doc correspondante"
-placeholder = "Rechercher dans les docs"
-results = "{{count}} résultats"
-
 [portal.docs.skills]
 eyebrow = "COMPÉTENCES"
 lead = "Capacités nommées et groupées que votre agent invoque comme un seul outil. Chaque compétence est une chaîne d’opérations déterministe avec des évaluations associées."
@@ -7180,11 +7309,11 @@ editorAction = "Éditeur"
 empty = "Aucun document ne correspond à ce filtre."
 rowActions = "Actions de ligne"
 sensitiveLabel = "Sensible"
-sensitiveTitle = "Sensible — accès requis"
 
 [portal.documents.table.columns]
 action = "Pipeline / Action"
 document = "Document"
+labels = "Labels"
 product = "Produit"
 status = "Statut"
 time = "Heure"
@@ -7200,6 +7329,7 @@ host = "Hôte"
 lastSeen = "Dernière activité"
 region = "Région"
 status = "Statut"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Cette vue a rencontré une erreur inattendue. Réessayez ou chois
 retry = "Réessayer"
 title = "Un problème est survenu sur cette page"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Retour"
 body = "Téléchargez l’application de bureau ou auto-hébergez le serveur."
@@ -7380,11 +7560,6 @@ cancel = "Annuler"
 confirm = "Révoquer la clé"
 title = "Révoquer la clé API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attesté"
-inScope = "Dans le périmètre"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrer les événements d’audit par catégorie"
 heading = "Journaux d’audit"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Succès"
 warning = "Avertissement"
 
-[portal.infrastructure.certLabel]
-certified = "Certifié"
-inProgress = "En cours"
-notStarted = "Non démarré"
-
 [portal.infrastructure.createKey]
 cancel = "Annuler"
 createKey = "Créer une clé"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copiez ce secret maintenant — il ne sera plus affiché."
 title = "Créer une clé API"
 titleCreated = "Clé créée"
 
-[portal.infrastructure.deployLabel]
-live = "En ligne"
-queued = "En file d’attente"
-rolledBack = "Restauré"
-rolling = "Déploiement en cours"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Déployé par"
-environment = "Environnement"
-product = "Produit"
-status = "Statut"
-version = "Version"
-when = "Quand"
-
-[portal.infrastructure.deployments.recent]
-heading = "Déploiements récents"
-subheading = "Les derniers déploiements sur les produits et environnements."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instances"
-latency = "Latence"
-load = "Charge"
-p99 = "P99"
-region = "Région"
-status = "Statut"
-throughput = "Débit"
-uptime = "Temps de disponibilité"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Régions"
-subheading = "Santé en direct de chaque région Stirling déployée — latence, charge et version de déploiement."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Les régions déployées apparaissent ici une fois votre espace de travail provisionné."
-title = "Aucune région déployée"
-
 [portal.infrastructure.keyLabel]
 active = "Active"
 revoked = "Révoquée"
 
-[portal.infrastructure.modelLabel]
-active = "Actif"
-degraded = "Dégradé"
-disabled = "Désactivé"
-
-[portal.infrastructure.models]
-heading = "Modèles"
-msValue = "{{value}} ms"
-subheading = "Le catalogue de modèles et le routage qui alimentent le traitement des documents dans votre espace de travail."
-
-[portal.infrastructure.models.byom]
-description = "Enregistrez un modèle on-prem ou auto-hébergé et épinglez-le à une région pour un traitement lié à la résidence des données."
-title = "Apportez votre propre modèle"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogue"
-sub = "Modèles gérés disponibles pour votre espace de travail, avec latence et coût en direct."
-subEnterprise = "Modèles gérés, apportez-votre-propre-modèle et on-prem — avec épinglage par région disponible."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Les modèles du catalogue de votre espace de travail apparaissent ici."
-title = "Aucun modèle disponible"
-
-[portal.infrastructure.models.columns]
-cost = "Coût"
-latency = "Latence"
-load = "Charge"
-model = "Modèle"
-status = "Statut"
-type = "Type"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/appel"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modèles actifs"
-avgLatency = "Latence moy."
-included = "Inclus"
-monthlySpend = "Dépense mensuelle des modèles"
-
-[portal.infrastructure.models.routing]
-empty = "Aucune règle de routage configurée."
-heading = "Règles de routage"
-sub = "Quel modèle gère chaque opération. La valeur par défaut s’applique lorsqu’aucune règle plus précise ne correspond."
-subLocked = "Acheminez les opérations vers des modèles spécifiques — disponible sur les plans payants."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Passez à Pro pour contrôler quel modèle gère chaque opération et type de document."
-title = "Le routage des modèles est une fonctionnalité payante"
-
-[portal.infrastructure.models.routingColumns]
-default = "Par défaut"
-docType = "Type de document"
-modelForAria = "Modèle pour {{operation}}"
-operation = "Opération"
-routedTo = "Acheminé vers"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classification"
-extraction = "Extraction"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Dégradé"
-down = "Indisponible"
-healthy = "Sain"
-
-[portal.infrastructure.security.access.byok]
-description = "Fournissez une clé depuis votre propre KMS. Stirling chiffre avec celle-ci mais peut toujours lire."
-label = "Apportez votre propre clé (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Les clés ne quittent jamais votre KMS. Stirling ne détient que du texte chiffré."
-label = "Conservez votre propre clé (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling gère les clés de chiffrement. Le plus simple — aucune opération de clé de votre côté."
-label = "Clés détenues par Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Politique d’accès aux documents"
-subheading = "Contrôle qui peut déchiffrer les documents traités au repos."
-
-[portal.infrastructure.security.attestations]
-heading = "Attestations de conformité"
-noReport = "Aucun rapport disponible"
-subheading = "Posture d’audit cadre par cadre, avec rapports disponibles sur les contrôles attestés."
-viewReport = "Voir le rapport →"
-
-[portal.infrastructure.security.compliance]
-heading = "Conformité"
-subheading = "Attestations et certifications couvrant la plateforme Stirling."
-
-[portal.infrastructure.security.empty]
-description = "La configuration de sécurité de votre espace de travail apparaîtra ici."
-title = "Posture de sécurité indisponible"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Avec HYOK, les clés de chiffrement ne quittent jamais votre KMS. Stirling stocke et traite uniquement du texte chiffré que vous pouvez révoquer à tout moment."
-title = "Stirling ne peut pas déchiffrer vos documents"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Aucune plage IP configurée — toutes les IP sont autorisées."
-heading = "Liste d’autorisation IP"
-sub = "L’accès API est limité à ces plages CIDR."
-subLocked = "Limitez l’accès API aux plages IP connues — disponible sur les plans payants."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Passez à Pro pour limiter l’accès API à des réseaux spécifiques."
-title = "La liste d’autorisation IP est une fonctionnalité payante"
-
-[portal.infrastructure.security.ipColumns]
-added = "Ajouté"
-addedBy = "Ajouté par"
-cidr = "CIDR"
-label = "Libellé"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithme"
-heading = "Gestion des clés de chiffrement"
-keyId = "Identifiant de clé"
-lastRotated = "Dernière rotation"
-rotateKey = "Faire tourner la clé"
-rotationPolicy = "Politique de rotation"
-subheading = "Garde des clés qui chiffrent les documents au repos — qui peut déchiffrer et comment les clés tournent."
-
-[portal.infrastructure.security.managedBanner]
-description = "La garde apportez-votre-propre-clé (BYOK) et conservez-votre-propre-clé (HYOK) est disponible sur Enterprise. Mettez à niveau pour fournir des clés depuis votre propre KMS."
-title = "Les clés sont gérées par Stirling avec votre plan"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asie-Pacifique"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · limite des données GDPR"
-label = "Union européenne"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "États-Unis"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Résidence des données"
-subheading = "Où les documents sont stockés et traités."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} utilisé"
-
-[portal.infrastructure.storage.empty]
-description = "Le stockage connecté et l’utilisation apparaissent ici."
-title = "Aucun stockage configuré"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Actif"
-activeRange = "0–{{value}}j"
-archived = "Archivé"
-coldStorage = "stockage froid"
-deleted = "Supprimé"
-never = "jamais"
-purged = "purgé"
-
-[portal.infrastructure.storage.providers]
-connect = "Connecter"
-connected = "Connecté"
-heading = "Fournisseurs connectés"
-subheading = "Où les artefacts traités sont écrits."
-
-[portal.infrastructure.storage.retention]
-heading = "Rétention"
-subheading = "Durée de conservation des artefacts avant suppression du cycle de vie."
-windowLabel = "Fenêtre de rétention par défaut"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} jour"
-days_other = "{{count}} jours"
-never = "Ne jamais supprimer"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Utilisation totale"
-progressLabel = "Stockage utilisé"
-subheading = "Stockage consommé sur tous les fournisseurs connectés."
-
 [portal.infrastructure.tabs]
 apiKeys = "Clés API"
 audit = "Journaux d’audit"
@@ -7715,11 +7657,9 @@ security = "Sécurité"
 storage = "Stockage"
 
 [portal.integrations]
-addAnother = "Ajouter un autre"
 availableHeading = "Disponible"
 comingSoonHeading = "Bientôt disponible"
 connect = "Connecter"
-connectedHeading = "Connecté"
 connectionCount_one = "{{count}} connexion"
 connectionCount_other = "{{count}} connexions"
 customApi = "API personnalisée"
@@ -7737,6 +7677,10 @@ security = "Sécurité"
 signing = "Signature"
 storage = "Stockage"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Connecté"
 
@@ -7767,7 +7711,6 @@ integrations = "Intégrations"
 pipelines = "Pipelines"
 policies = "Politiques"
 procurement = "Achats"
-settings = "Paramètres"
 sources = "Sources"
 usage = "Utilisation et facturation"
 users = "Utilisateurs"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Nouveau pipeline"
 
 [portal.pipelines.builder]
-addStep = "Ajouter un outil"
+activate = "Activate"
 back = "Retour aux pipelines"
 cannotFollow = "Impossible d’accepter {{produced}}"
 chooseAccount = "Choisir un compte"
@@ -7792,28 +7735,38 @@ chooseDestination = "Choisir une destination"
 chooseOperation = "Choisir l’action de cette étape"
 chooseSource = "Choisir une source"
 discard = "Abandonner les modifications"
-enabled = "Activé"
 inputs = "Entrée"
 inputSource = "Source d’entrée"
 inputTrigger = "Déclencheur"
 keepEditing = "Continuer à modifier"
+moreActions = "More actions"
 needsConfiguring = "Configuration requise"
-needsUpload = "Nécessite un fichier téléversé"
-noSources = "Aucune source connectée pour le moment. Créez-en une pour l’utiliser comme entrée."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Aucun outil ne correspond à votre recherche."
-pipelineSettings = "Paramètres du pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Rechercher des outils"
-selectToolBody = "Ajoutez un outil pour construire votre pipeline."
-selectToolTitle = "Aucun outil pour le moment"
 sendToSystem = "Envoyer vers un autre système"
 stepsIncompatible = "Ces étapes ne peuvent pas s’exécuter sur ce que produit leur étape précédente : {{tools}}."
 stepsNeedSetup = "Ces étapes doivent encore être configurées avant l’enregistrement : {{tools}}."
-toolSettings = "Paramètres de l’outil"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Opération non reconnue, conservée telle quelle."
 unsavedBody = "Vous avez des modifications non enregistrées. Enregistrez-les avant de quitter ou abandonnez-les ?"
 unsavedTitle = "Modifications non enregistrées"
-uploadUnsupported = "Les fichiers téléversés ne sont pas encore pris en charge dans les pipelines, ces étapes ne peuvent donc pas être enregistrées : {{tools}}."
 usesDefaults = "S’exécute avec les paramètres par défaut"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combine tous les fichiers de l’étape précédente"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Impossible de vérifier ce que cette étape accepte"
 
 [portal.pipelines.composer]
 addTool = "Ajouter un outil"
-cancel = "Annuler"
-chainEmpty = "Ajoutez un outil pour commencer à construire votre pipeline."
 create = "Créer le pipeline"
+createPaused = "Create paused"
 editingUnsupported = "L’affichage de ces paramètres d’outil pour modification n’est pas encore pris en charge."
-moveDown = "Déplacer vers le bas"
-moveUp = "Déplacer vers le haut"
+editSource = "Edit source"
 name = "Nom"
 namePlaceholder = "p. ex. Passage de caviardage"
 noToolSettings = "Cet outil n’a aucun paramètre configurable."
-operations_one = "Opération ({{count}})"
-operations_other = "Opérations ({{count}})"
 output = "Sortie"
-removeStep = "Supprimer l’opération"
 save = "Enregistrer les modifications"
 scheduleEvery = "Exécuter tous les"
-sources = "Sources"
-sourcesLoading = "Chargement des sources..."
 trigger = "Déclencheur"
 triggerManual = "Manuel uniquement"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "jours"
 hours = "heures"
 minutes = "minutes"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Supprimer \"{{name}}\" ? Cette action est irréversible."
 cancel = "Annuler"
@@ -7867,6 +7825,37 @@ connectSource = "Connecter une source"
 description = "Créez votre premier pipeline : choisissez les sources sur lesquelles il s’exécute, enchaînez les opérations et choisissez où va la sortie."
 title = "Aucun pipeline pour le moment"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Actifs"
 paused = "En pause"
@@ -7879,7 +7868,6 @@ completed_one = "Exécution terminée."
 completed_other = "Les {{count}} exécutions sont terminées."
 empty = "Rien à exécuter : les sources n’avaient aucun document à traiter."
 failed = "Échec de l’exécution : {{error}}"
-historyCleared = "Historique effacé. La prochaine exécution retraitera tout ce qui se trouve actuellement dans les sources."
 inFlight = "Rien de nouveau à exécuter : des documents sont encore en cours de traitement depuis une exécution précédente."
 parked_one = "Rien à exécuter : {{count}} document a échoué précédemment et est mis en attente. Corrigez la cause, puis effacez l’historique pour le réessayer."
 parked_other = "Rien à exécuter : {{count}} documents ont échoué précédemment et sont mis en attente. Corrigez la cause, puis effacez l’historique pour les réessayer."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Sources"
 status = "Statut"
 steps = "Étapes"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Surveillance de dossier"
@@ -8209,6 +8198,24 @@ label = "Joindre à un ticket Jira"
 description = "Envoie le document traité en pièce jointe."
 label = "Envoyer le document par e-mail (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Écrit le document traité dans un dossier."
 label = "Téléverser vers Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Limite atteinte"
 subtitle = "Votre essai gratuit est valable jusqu’au {{date}}. Aucune carte requise."
 title = "Essai Enterprise"
 
-[portal.search]
-ariaLabel = "Rechercher"
-placeholder = "Rechercher dans Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Les actions rapides apparaîtront ici une fois disponibles."
-noActionsTitle = "Aucune action rapide"
-noMatches = "Aucune correspondance pour \"{{query}}\""
-noMatchesDescription = "Essayez un autre mot-clé ou parcourez le catalogue."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Annuler"
 confirm = "Supprimer"
 title = "Supprimer la source ?"
 
-[portal.sources.empty]
-description = "Connectez un dossier (et bientôt un stockage cloud) afin que vos politiques disposent d’un emplacement où récupérer des documents."
-title = "Aucune source connectée pour le moment"
-
 [portal.sources.kpi]
 inUse = "En cours d’utilisation"
 total = "Connexions"
@@ -8785,6 +8778,7 @@ unused = "Inutilisé"
 documents = "Documents"
 source = "Source"
 status = "Statut"
+type = "Type"
 usedBy = "Politiques"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politiques et confidentialité"
 [settings.preferences]
 title = "Préférences"
 
-[settings.search]
-placeholder = "Rechercher dans les paramètres…"
-
 [settings.security]
 description = "Mettez à jour votre mot de passe pour sécuriser votre compte."
 title = "Sécurité"
@@ -10128,6 +10119,7 @@ last = "Dernière page"
 maintainRatio = "Conserver les proportions"
 next = "Page suivante"
 noSavedSigs = "Aucun sceau enregistré trouvé"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Sceaux personnels"
 previous = "Page précédente"
 redo = "Refaire"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Échec de la suppression du fond"
 hint = "Téléversez une image PNG ou JPG de votre signature"
 label = "Téléverser une image de signature"
 placeholder = "Sélectionner un fichier image"
+previewAlt = "Current image signature"
 processing = "Traitement de l’image..."
 removeBackground = "Supprimer le fond blanc (le rendre transparent)"
 
@@ -10179,6 +10172,17 @@ saved = "Sélectionnez une signature enregistrée ci-dessus, puis cliquez n’im
 text = "Après avoir saisi votre nom ci-dessus, cliquez n’importe où sur le PDF pour placer votre signature."
 title = "Comment ajouter une signature"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Déplacer la signature"
 pause = "Suspendre le placement"
@@ -10625,6 +10629,23 @@ title = "Téléverser sur le serveur"
 updateButton = "Mettre à jour sur le serveur"
 uploadButton = "Téléverser sur le serveur"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Revenir en arrière"
 pdfTools = "Outils PDF"
 placeholder = "Choisissez un outil pour commencer"
 premiumFeature = "Fonctionnalité Premium :"
-searchTools = "Rechercher des outils"
 toolsHeader = "Outils"
 viewAllTools = "Voir tous les outils"
 
@@ -10822,6 +10842,9 @@ removal = "Suppression"
 signing = "Signature"
 verification = "Vérification"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Aucun outil trouvé"
 noTools = "Aucun outil disponible"
@@ -10979,6 +11002,13 @@ approver = "Approuve la politique"
 editor = "Éditeur"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Annuler l’invitation envoyée à {{email}} ? Cette personne ne pourra pas rejoindre avec le lien actuel."
 cancelInviteTitle = "Annuler l’invitation"
@@ -10998,10 +11028,8 @@ title = "Aucun membre pour le moment"
 addToTeam = "Ajouter à l’équipe"
 guestCount = "{{count}} invité"
 guests = "Invités"
-guestsDesc = "Collaborateurs externes, limités à ce que vous avez partagé. Éditeur uniquement."
 ledBy = "dirigée par {{owner}}"
 org = "Organisation"
-orgDesc = "Propriétaires avec autorité à l’échelle de l’organisation et approbation des politiques"
 owners = "{{count}} propriétaire"
 team = "Équipe {{name}}"
 teamMeta = "{{count}} personnes"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invité par {{who}}"
 cancel = "Annuler"
-count = "{{count}} en attente"
-desc = "Personnes invitées qui n’ont pas encore rejoint. Elles occupent une place jusqu’à leur acceptation."
 expiresInDays_one = "Expire dans {{count}} jour"
 expiresInDays_other = "Expire dans {{count}} jours"
 expiresToday = "Expire aujourd’hui"
 title = "Invitations en attente"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Une erreur s’est produite lors de l’accès au backend, ou vous n’avez pas accès. Réessayez."
 title = "Impossible de charger les membres"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Rechercher des pièces jointes"
 title = "Pièces jointes"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Titre du signet"
 bookmarkTitleRequired = "Le titre du signet est requis"
 closeSidebar = "Fermer le panneau latéral des signets"
 collapseAll = "Réduire tous les signets"
+empty = "No bookmarks in this document"
 expandAll = "Développer tous les signets"
 searchPlaceholder = "Rechercher des signets"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Ajouter un commentaire"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Chercher dans le document"
 moreActions = "Plus d'actions"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Page {{page}}"
 placingHint = "Cliquez sur une page pour placer… (annuler)"
 removeCommentOnly = "Supprimer seulement le commentaire"
 saveReply = "Sauvegarder la réponse"
+searchPlaceholder = "Search comments"
 title = "Commentaires"
 typeComment = "Commentaire"
 typeInsertText = "Insérer du text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Vous avez des modifications non enregistrées"
 closeSidebar = "Fermer le panneau latéral des calques"
 hideAll = "Masquer tous les calques"
 showAll = "Afficher tous les calques"
+title = "Layers"
 
 [viewer.link]
 delete = "Supprimer le lien"
@@ -11646,6 +11682,7 @@ exitRedaction = "Quitter le mode Rédaction"
 exportAll = "Exporter le PDF"
 exportSelected = "Exporter les pages sélectionnées"
 formFill = "Remplir le formulaire"
+hideToolbar = "Hide toolbar"
 multiTool = "Outil multifonction"
 panMode = "Mode panoramique"
 print = "Imprimer le PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Tout sélectionner"
 selectByNumber = "Sélectionner par numéros de pages"
 selectLanguage = "Sélectionner la langue"
 share = "Partager"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Basculer la visibilité des annotations"
 toggleAttachments = "Basculer les pièces jointes"
 toggleBookmarks = "Basculer les signets"
diff --git a/frontend/editor/public/locales/ga-IE/translation.toml b/frontend/editor/public/locales/ga-IE/translation.toml
index 8b6209d3d3..718b2c593f 100644
--- a/frontend/editor/public/locales/ga-IE/translation.toml
+++ b/frontend/editor/public/locales/ga-IE/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Aibítir"
 apply = "Cuir i bhFeidhm"
 applyAndContinue = "Sábháil & Fág"
-areYouSure = "An bhfuil tú cinnte gur mian leat imeacht?"
 back = "Siar"
 black = "Dubh"
 blue = "Gorm"
@@ -106,6 +105,7 @@ undoSuccess = "Oibríocht cealaithe go rathúil"
 unknown = "Anaithnid"
 unpin = "Díphionnáil Comhad (cuir ina ionad tar éis rith na huirlise)"
 unsavedChanges = "Tá athruithe gan sábháil agat ar do PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Athruithe Gan Sábháil"
 unsupported = "Gan tacaíocht"
 username = "Ainm úsáideora"
@@ -1879,6 +1879,9 @@ width = "Leithead"
 [app]
 description = "An rogha saor in aisce seachas Adobe Acrobat (10M+ íoslódálacha)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Tiontaigh go PDF/A-3b"
 convertToPdfA3bDescription = "Cruthaíonn sé PDF cartlannaithe le ceangaltáin leabaithe"
@@ -2933,12 +2936,16 @@ text = "Chun na ceadanna seo a dhéanamh dodhéanta a athrú, úsáid an uirlis
 [chat.actions]
 copy = "Cóipeáil teachtaireacht"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Roghanna gníomhaire Stirling"
+assistant = "AI Assistant"
 clearChat = "Glan comhrá"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Úsáidfidh an oibríocht seo do chreidmheasanna scamall"
 tooltip = "Roghnaigh dath ón scáileán"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Roghnaigh dath"
 
 [common]
+actions = "Actions"
 back = "Siar"
 cancel = "Cealaigh"
 close = "Dún"
+codeSample = "Code sample"
 collapse = "Fill"
 confirm = "Deimhnigh"
 continue = "Lean ar aghaidh"
 copied = "Cóipeáilte!"
 copy = "Cóipeáil"
 done = "Déanta"
+enterValue = "Enter value"
 error = "Earráid"
 expand = "Leathnaigh"
 loading = "Á lódáil..."
 next = "Ar Aghaidh"
+open = "Open"
 preview = "Réamhamharc"
 previous = "Roimhe Seo"
 refresh = "Athnuaigh"
 remaining = "Fágtha"
 retry = "Bain triail eile as"
 save = "Sábháil"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Glan roghnaithe"
@@ -3185,6 +3199,7 @@ title = "Modh Comhbhrúite"
 [compress.settings]
 desiredSize = "Méid comhaid inmhianaithe"
 desiredSizePlaceholder = "Iontráil an méid"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Is bealach éasca é comhbhrú chun do mhéid comhaid a laghdú. Roghnaigh Méid Comhaid chun spriocmhéid a iontráil agus ligean dúinn an cháilíocht a choigeartú duitse. Roghnaigh Cáilíocht chun neart an chomhbhrú a shocrú de láimh."
@@ -3387,6 +3402,24 @@ pdfOptions = "Roghanna PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Roghnaigh formáid foinse ar dtús"
 settings = "Socruithe"
 single = "Aonair"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Cuardaigh..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Cuir in eagar"
@@ -3824,11 +3861,13 @@ shareSelected = "Comhroinn Roghnaithe"
 sharing = "Comhroinnt"
 showAll = "Taispeáin Uile"
 showHistory = "Taispeáin Stair"
+sortBy = "Sort files"
 sortByDate = "Sórtáil de réir Dáta"
 sortByName = "Sórtáil de réir Ainm"
 sortBySize = "Sórtáil de réir Méid"
 storage = "Stóráil"
 storageState = "Stóráil"
+storageUsed = "Storage used"
 synced = "Sioncrónaithe"
 title = "Uaslódáil Comhaid PDF"
 toolChain = "Uirlisí a Cuireadh i bhFeidhm"
@@ -3874,8 +3913,12 @@ addFiles = "Cuir comhaid leis"
 addingFiles = "Comhaid á gcur leis…"
 collapse = "Fill an barra taoibh"
 customizeGroups = "Saincheap grúpaí"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Oscail comhaid chun tosú"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Leathnaigh an barra taoibh"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Níl Google Drive cumraithe"
@@ -3888,15 +3931,17 @@ openFromComputer = "Oscail ón ríomhaire"
 openSettings = "Oscail socruithe"
 other = "Eile"
 recent = "Le déanaí"
-search = "Cuardaigh"
-searchPlaceholder = "Cuardaigh comhaid..."
 viewAll = "Amharc ar gach {{count}} comhad"
 
 [fileSidebar.fileItem]
 closeViewer = "Dún an t-amharcán"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Oscail san amharcán"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Athshocraigh go réamhshocruithe"
 subtitle = "Cuir do chuid comhad i ngrúpaí mar mháthairchatagóirí. Cuir lipéid atá ann cheana nó lipéid nua le catagóir, athainmnigh í, nó cruthaigh do cheann féin. Taispeántar comhaid nach bhfuil in aon cheann de do chatagóirí faoi “Eile”."
 title = "Catagóirí an bharra taoibh"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Cuir leis an spás oibre"
 addToWorkspaceCount = "Cuir {{count}} leis an spás oibre"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Ar ais go Mo Chomhaid"
 breadcrumbs = "Conair an fhillteáin"
 cancel = "Cealaigh"
 classification = "Aicmiú"
-clearSearch = "Glan an cuardach"
 clearSelection = "Glan an roghnú"
 closeDetails = "Dún na sonraí"
 create = "Cruthaigh"
@@ -3950,6 +4002,7 @@ downloadAll = "Íoslódáil gach ceann"
 downloadVersion = "Íoslódáil an leagan seo"
 dropOverlay = "Scaoil comhaid chun uaslódáil"
 dropOverlaySub = "Tosaíonn comhaid san Áitiúil. Úsáid 'Bog go' nó 'Sábháil sa scamall' chun iad a eagrú i bhfillteán."
+duplicate = "Duplicate"
 file = "Comhad"
 fileInfo = "File info"
 fileMenu = "Gníomhartha comhaid"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Athraigh méid chrann na bhfillteán (eochracha saigheada, S
 save = "Sábháil"
 saveToServer = "Sábháil chuig an bhfreastalaí"
 saveToServerDisabledHint = "Níl sábháil chuig an bhfreastalaí cumasaithe ar an bhfreastalaí seo. Iarr ar do riarthóir é a chumasú."
-search = "Cuardaigh"
-searchPlaceholder = "Cuardaigh an fillteán seo agus fofhillteáin"
 selectAll = "Roghnaigh gach rud"
 selectAllHint = "Cliceáil chun gach rud a roghnú. Leid: coinnigh Ctrl (nó Cmd) síos chun comhaid a chur leis ceann ar cheann, Shift chun raon a roghnú."
 selectedCount = "Roghnaithe: {{count}}"
@@ -4044,6 +4095,10 @@ title = "Níl aon chomhaid scamaill fós"
 hint = "Fanann comhaid a sábháladh gan uaslódáil anseo. Scaoil comhad chun ceann a chur leis."
 title = "Níl aon chomhad áitiúil amháin"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Beidh comhaid a osclaíonn nó a chuireann tú in eagar le feiceáil anseo."
 title = "Níor athraíodh aon rud fós"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Níorbh fhéidir an fillteán a scriosadh."
 deleteFolderFailedDetail = "Níorbh fhéidir an fillteán a scriosadh: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Níorbh fhéidir cuma an fhillteáin a nuashonrú."
 folderAppearanceFailedDetail = "Níorbh fhéidir cuma an fhillteáin a nuashonrú: {{message}}"
 moveFilesFailed = "Níorbh fhéidir comhaid a bhogadh."
@@ -4113,6 +4170,11 @@ localHint = "Stóráilte sa bhrabhsálaí seo amháin"
 shared = "Roinnte"
 sharedHint = "Roinnte leat trí nasc"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Is sine ar dtús"
 modifiedDesc = "Is nua ar dtús"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Níl comhaid ar fáil sa stóráil. Oscail roinnt comhad
 open = "Oscail"
 openFile = "Oscail Comhad"
 openFiles = "Oscail Comhaid"
+selectFile = "Select {{name}}"
 selectFromStorage = "Roghnaigh ón Stóráil"
 upload = "Uaslódáil"
 uploadFile = "Uaslódáil Comhad"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Sábháilte go léir"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Theip ar eastóscadh CSV"
 extractXlsxError = "Theip ar eastóscadh XLSX"
+filled = "filled"
 flattenAfterFilling = "Cothromaigh tar éis líonadh"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "riach"
 requiredFieldsError = "Líon isteach gach réimse riachtanach le do thoil"
 rescanFields = "Athscan na réimsí"
@@ -4795,9 +4863,6 @@ title = "Íomhá go PDF"
 [imageToPdf]
 tags = "comhshó, img, jpg, pictiúr, grianghraf"
 
-[infoBanner]
-dismiss = "Díchuir"
-
 [invite]
 acceptError = "Theip ar chuntas a chruthú"
 accountFor = "Cuntas á chruthú do"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Uaslódáil Rathúil!"
 uploadSuccessMessage = "Tá do chuid íomhánna aistrithe."
 validating = "Ag bailíochtú an tseisiúin..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scan an cód QR seo le do ghléas soghluaiste chun grianghraif a uaslódáil go díreach chuig an leathanach seo."
 descriptionNoConvert = "Scanáil chun grianghraif a uaslódáil ó do ghléas soghluaiste."
@@ -4997,8 +5090,13 @@ title = "Uaslódáil ó Shoghluaiste"
 tags = "Il-Uirlis, Iloibríocht, Chomhéadain, cliceáil tarraing, ceann tosaigh, taobh an chliaint, idirghníomhach, intractable, bog"
 title = "Il-uirlis PDF"
 
-[navbar]
-search = "Cuardach"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Níor éirigh leis an bhfíordheimhniú. Is féidir leat an fhuinneog seo a dhúnadh agus triail eile a bhaint as."
@@ -5127,6 +5225,7 @@ activeFiles = "Taispeánann an radharc <strong>Comhaid Ghníomhacha</strong> na
 allTools = "Seo é an painéal <strong>Gach Uirlis</strong>, áit ar féidir leat brabhsáil agus roghnú astu na huirlisí PDF uile atá ar fáil."
 close = "Dún"
 cropSettings = "Anois go bhfuil an comhad roghnaithe atá uainn a bhearradh, is féidir linn an uirlis Bearrtha a chumrú chun an limistéar a roghnú ar mian linn an PDF a bhearradh chuige."
+dialogLabel = "Onboarding"
 fileCheckbox = "Roghnaítear comhad le próiseáil nuair a chliceálann tú air. Is féidir leat ilchomhaid a roghnú le haghaidh oibríochtaí baisc."
 fileReplacement = "Cuirfear an comhad athraithe in ionad an bhunchomhaid ar an mBinse Oibre go huathoibríoch, rud a fhágfaidh gur féidir leat é a rith trí níos mó uirlisí go héasca."
 filesButton = "Ligeann an cnaipe <strong>Comhaid</strong> ar an mBarra Rochtana Thapa duit PDFanna a uaslódáil chun na huirlisí a úsáid orthu."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF Go PDF/A"
 tags = "cartlann, fadtéarmach, caighdeánach, comhshó, stóráil, caomhnú"
 title = "PDF Go PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "priontáil,caighdeán,tiontú,táirgeadh,réamhphriontáil,cartlann"
 title = "PDF go PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Creidiúintí"
 xsmall = "100 Creidiúintí"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Roghnaigh an plean a oireann do do riachtanais"
 title = "Pleananna atá ar fáil"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Sroicheadh teorainn chaiteachais mhíosúil"
 title = "Níorbh fhéidir portal Stripe a oscailt"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "as {{allowance}} PDF saor in aisce úsáidte"
 capSuffix_other = "as {{allowance}} PDFs saor in aisce úsáidte"
 eyebrow = "Triail Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Seol doiciméad nó fógra ar Email nuair a ritheann polasaí."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Cuir doiciméid phróiseáilte i Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDKs oifigiúla"
 beta = "Beta"
 deprecated = "Dulta i léig"
 
-[portal.docs.search]
-empty = "Níl aon docs meaitseála"
-placeholder = "Cuardaigh docs"
-results = "{{count}} toradh"
-
 [portal.docs.skills]
 eyebrow = "SCILEANNA"
 lead = "Cumasachtaí cuachta, ainmnithe a ghlaonn do ghníomhaire mar uirlis aonair. Is slabhra oibríochtaí cinntitheach gach scil, le measúnuithe ceangailte."
@@ -7180,11 +7309,11 @@ editorAction = "Eagarthóir"
 empty = "Ní mheaitseálann aon doiciméid an scagaire seo."
 rowActions = "Gníomhartha ró"
 sensitiveLabel = "Íogair"
-sensitiveTitle = "Íogair — rochtain de dhíth"
 
 [portal.documents.table.columns]
 action = "Píblíne / Gníomh"
 document = "Doiciméad"
+labels = "Labels"
 product = "Táirge"
 status = "Stádas"
 time = "Am"
@@ -7200,6 +7329,7 @@ host = "Óstach"
 lastSeen = "Feicthe go deireanach"
 region = "Réigiún"
 status = "Stádas"
+target = "Target"
 version = "Leagan"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Bhuail an radharc seo earráid gan choinne. Bain triail eile as,
 retry = "Bain triail eile as"
 title = "Chuaigh rud éigin mícheart ar an leathanach seo"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Siar"
 body = "Íoslódáil an aip deisce nó féin-óstáil an freastalaí."
@@ -7380,11 +7560,6 @@ cancel = "Cealaigh"
 confirm = "Cúlghair eochair"
 title = "Cúlghair eochair API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Fianaithe"
-inScope = "Faoi raon"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Scag imeachtaí iniúchta de réir catagóire"
 heading = "Logaí iniúchta"
@@ -7456,11 +7631,6 @@ info = "Eolas"
 success = "D'éirigh leis"
 warning = "Rabhadh"
 
-[portal.infrastructure.certLabel]
-certified = "Deimhnithe"
-inProgress = "Ar siúl"
-notStarted = "Gan tosú"
-
 [portal.infrastructure.createKey]
 cancel = "Cealaigh"
 createKey = "Cruthaigh eochair"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Cóipeáil an rún seo anois — ní thaispeánfar arís é."
 title = "Cruthaigh eochair API"
 titleCreated = "Eochair cruthaithe"
 
-[portal.infrastructure.deployLabel]
-live = "Beo"
-queued = "I scuaine"
-rolledBack = "Rollta siar"
-rolling = "Á rolladh amach"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Imscartha ag"
-environment = "Timpeallacht"
-product = "Táirge"
-status = "Stádas"
-version = "Leagan"
-when = "Cathain"
-
-[portal.infrastructure.deployments.recent]
-heading = "Imscarthaí le déanaí"
-subheading = "Na rollouts is déanaí ar fud táirgí agus timpeallachtaí."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Insteansanna"
-latency = "Foighne"
-load = "Ualach"
-p99 = "P99"
-region = "Réigiún"
-status = "Stádas"
-throughput = "Tréchur"
-uptime = "Aga fónaimh"
-version = "Leagan"
-
-[portal.infrastructure.deployments.regions]
-heading = "Réigiúin"
-subheading = "Sláinte bheo do gach réigiún Stirling imscartha — foighne, ualach, agus leagan rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Taispeánfar réigiúin imscartha anseo nuair a bheidh do spás oibre soláthraithe."
-title = "Níl aon réigiúin imscartha"
-
 [portal.infrastructure.keyLabel]
 active = "Gníomhach"
 revoked = "Cúlghairthe"
 
-[portal.infrastructure.modelLabel]
-active = "Gníomhach"
-degraded = "Díghrádaithe"
-disabled = "Díchumasaithe"
-
-[portal.infrastructure.models]
-heading = "Samhlacha"
-msValue = "{{value}} ms"
-subheading = "An chatalóg samhlacha agus an ródú a chumhachtaíonn próiseáil doiciméad ar fud do spáis oibre."
-
-[portal.infrastructure.models.byom]
-description = "Cláraigh samhail on-prem nó féin-óstáilte agus pináil í le réigiún le haghaidh próiseála atá faoi cheangal cónaitheachta sonraí."
-title = "Tabhair leat do shamhail féin"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalóg"
-sub = "Samhlacha bainistithe atá ar fáil do do spás oibre, le foighne agus costas beo."
-subEnterprise = "Samhlacha bainistithe, tabhair-leat-do-cheann-féin, agus on-prem — le pináil in aghaidh an réigiúin ar fáil."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Taispeánfar samhlacha i gcatalóg do spáis oibre anseo."
-title = "Níl aon samhlacha ar fáil"
-
-[portal.infrastructure.models.columns]
-cost = "Costas"
-latency = "Foighne"
-load = "Ualach"
-model = "Samhail"
-status = "Stádas"
-type = "Cineál"
-version = "Leagan"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/glao"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Samhlacha gníomhacha"
-avgLatency = "Meánfhoighne"
-included = "San áireamh"
-monthlySpend = "Caiteachas míosúil ar shamhlacha"
-
-[portal.infrastructure.models.routing]
-empty = "Níl aon rialacha ródaithe cumraithe."
-heading = "Rialacha ródaithe"
-sub = "Cén tsamhail a láimhseálann gach oibríocht. Cuirtear an réamhshocrú i bhfeidhm nuair nach meaitseálann riail níos cúinge."
-subLocked = "Ródáil oibríochtaí chuig samhlacha ar leith — ar fáil ar phleananna íoctha."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Uasghrádaigh go Pro chun rialú a dhéanamh ar cén tsamhail a láimhseálann gach oibríocht agus cineál doiciméid."
-title = "Is gné íoctha é ródú samhlacha"
-
-[portal.infrastructure.models.routingColumns]
-default = "Réamhshocrú"
-docType = "Cineál doiciméid"
-modelForAria = "Samhail do {{operation}}"
-operation = "Oibríocht"
-routedTo = "Ródaithe chuig"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Aicmiú"
-extraction = "Eastóscadh"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Díghrádaithe"
-down = "As feidhm"
-healthy = "Sláintiúil"
-
-[portal.infrastructure.security.access.byok]
-description = "Soláthair eochair ó do KMS féin. Criptíonn Stirling léi ach is féidir leis léamh fós."
-label = "Tabhair leat d’eochair féin (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ní fhágann eochracha do KMS riamh. Ní choinníonn Stirling ach ciphertext."
-label = "Coinnigh d’eochair féin (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Bainistíonn Stirling eochracha criptithe. Is simplí é — gan aon ops eochrach ar do thaobh."
-label = "Eochracha á gcoinneáil ag Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Beartas rochtana doiciméad"
-subheading = "Rialaíonn sé cé atá in ann doiciméid phróiseáilte atá ar fos a dhíchriptiú."
-
-[portal.infrastructure.security.attestations]
-heading = "Fianuithe comhlíonta"
-noReport = "Níl aon tuairisc ar fáil"
-subheading = "Seasamh iniúchta de réir creatlaí, le tuairiscí ar fáil ar rialuithe fianaithe."
-viewReport = "Féach ar thuairisc →"
-
-[portal.infrastructure.security.compliance]
-heading = "Comhlíonadh"
-subheading = "Fianuithe agus deimhnithe a chlúdaíonn ardán Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Taispeánfar cumraíocht slándála do spáis oibre anseo."
-title = "Níl seasamh slándála ar fáil"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Le HYOK, ní fhágann eochracha criptithe do KMS riamh. Ní stórálann ná ní phróiseálann Stirling ach ciphertext ar féidir leat a chúlghairm am ar bith."
-title = "Ní féidir le Stirling do dhoiciméid a dhíchriptiú"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Níl aon raonta IP cumraithe — ceadaítear gach IP."
-heading = "Liosta ceadaithe IP"
-sub = "Tá rochtain API srianta do na raonta CIDR seo."
-subLocked = "Srian rochtain API do raonta IP aitheanta — ar fáil ar phleananna íoctha."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Uasghrádaigh go Pro chun rochtain API a shrianadh do líonraí ar leith."
-title = "Is gné íoctha é liostú ceadaithe IP"
-
-[portal.infrastructure.security.ipColumns]
-added = "Curtha leis"
-addedBy = "Curtha leis ag"
-cidr = "CIDR"
-label = "Lipéad"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algartam"
-heading = "Bainistiú eochracha criptithe"
-keyId = "Aitheantóir eochrach"
-lastRotated = "Rothlaithe go deireanach"
-rotateKey = "Rothlaigh eochair"
-rotationPolicy = "Beartas rothlaithe"
-subheading = "Coimeád na n-eochracha a chriptíonn doiciméid atá ar fos — cé atá in ann díchriptiú, agus conas a rothlaítear eochracha."
-
-[portal.infrastructure.security.managedBanner]
-description = "Tá coimeád tabhair-leat-d’eochair-féin (BYOK) agus coimeád coinnigh-d’eochair-féin (HYOK) ar fáil ar Enterprise. Uasghrádaigh chun eochracha a sholáthar ó do KMS féin."
-title = "Tá eochracha á mbainistiú ag Stirling ar do phlean"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · teorainn sonraí GDPR"
-label = "An tAontas Eorpach"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Stáit Aontaithe Mheiriceá"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Cónaitheacht sonraí"
-subheading = "An áit a stóráiltear agus a phróiseáiltear doiciméid."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} úsáidte"
-
-[portal.infrastructure.storage.empty]
-description = "Taispeánfar stóráil cheangailte agus úsáid anseo."
-title = "Níl aon stóráil cumraithe"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Gníomhach"
-activeRange = "0–{{value}}d"
-archived = "Cartlannaithe"
-coldStorage = "stóráil fhuar"
-deleted = "Scriosta"
-never = "riamh"
-purged = "glanta"
-
-[portal.infrastructure.storage.providers]
-connect = "Ceangail"
-connected = "Ceangailte"
-heading = "Soláthraithe ceangailte"
-subheading = "An áit a scríobhtar déantáin phróiseáilte."
-
-[portal.infrastructure.storage.retention]
-heading = "Coinneáil"
-subheading = "Cá fhad a choinnítear déantáin sula scriostar iad de réir saolré."
-windowLabel = "Fuinneog choinneála réamhshocraithe"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} lá"
-days_other = "{{count}} lá"
-never = "Ná scrios riamh"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Úsáid iomlán"
-progressLabel = "Stóráil úsáidte"
-subheading = "Stóráil ídithe ar fud gach soláthraí ceangailte."
-
 [portal.infrastructure.tabs]
 apiKeys = "Eochracha API"
 audit = "Logaí Iniúchta"
@@ -7715,11 +7657,9 @@ security = "Slándáil"
 storage = "Stóráil"
 
 [portal.integrations]
-addAnother = "Cuir ceann eile leis"
 availableHeading = "Ar fáil"
 comingSoonHeading = "Ag teacht go luath"
 connect = "Ceangail"
-connectedHeading = "Ceangailte"
 connectionCount_one = "{{count}} nasc"
 connectionCount_other = "{{count}} nasc"
 customApi = "API saincheaptha"
@@ -7737,6 +7677,10 @@ security = "Slándáil"
 signing = "Síniú"
 storage = "Stóráil"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Ceangailte"
 
@@ -7767,7 +7711,6 @@ integrations = "Comhtháthuithe"
 pipelines = "Píblínte"
 policies = "Beartais"
 procurement = "Soláthar"
-settings = "Socruithe"
 sources = "Foinsí"
 usage = "Úsáid & Billeáil"
 users = "Úsáideoirí"
@@ -7784,7 +7727,7 @@ title = "Píblínte"
 newPipeline = "Píblíne nua"
 
 [portal.pipelines.builder]
-addStep = "Cuir uirlis leis"
+activate = "Activate"
 back = "Ar ais chuig píblínte"
 cannotFollow = "Ní féidir {{produced}} a ghlacadh"
 chooseAccount = "Roghnaigh cuntas"
@@ -7792,28 +7735,38 @@ chooseDestination = "Roghnaigh ceann scríbe"
 chooseOperation = "Roghnaigh cad a dhéanann an chéim seo"
 chooseSource = "Roghnaigh foinse"
 discard = "Caith athruithe amach"
-enabled = "Cumasaithe"
 inputs = "Ionchur"
 inputSource = "Foinse ionchuir"
 inputTrigger = "Truicear"
 keepEditing = "Lean den eagarthóireacht"
+moreActions = "More actions"
 needsConfiguring = "Teastaíonn socrú"
-needsUpload = "Teastaíonn comhad uaslódáilte"
-noSources = "Níl aon fhoinsí ceangailte fós. Cruthaigh ceann chun é a úsáid mar ionchur."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Ní mheaitseálann aon uirlisí do chuardach."
-pipelineSettings = "Socruithe píblíne"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Cuardaigh uirlisí"
-selectToolBody = "Cuir uirlis leis chun do phíblíne a thógáil."
-selectToolTitle = "Níl aon uirlisí fós"
 sendToSystem = "Seol chuig córas eile"
 stepsIncompatible = "Ní féidir leis na céimeanna seo rith ar an méid a tháirgeann an chéim roimhe seo: {{tools}}."
 stepsNeedSetup = "Tá socrú fós ag teastáil ó na céimeanna seo sula sábhálfar: {{tools}}."
-toolSettings = "Socruithe uirlise"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Oibríocht neamhaitheanta, coinnithe mar atá."
 unsavedBody = "Tá athruithe gan sábháil agat. Sábháil iad sula bhfágann tú, nó caith amach iad?"
 unsavedTitle = "Athruithe gan sábháil"
-uploadUnsupported = "Ní thacaítear le comhaid uaslódáilte i bpíblínte fós, mar sin ní féidir na céimeanna seo a shábháil: {{tools}}."
 usesDefaults = "Ritheann le socruithe réamhshocraithe"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Comhcheanglaíonn sé gach comhad ón gcéim roimhe seo"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Ní féidir a sheiceáil cad a ghlacann an chéim seo"
 
 [portal.pipelines.composer]
 addTool = "Cuir uirlis leis"
-cancel = "Cealaigh"
-chainEmpty = "Cuir uirlis leis chun tosú ag tógáil do phíblíne."
 create = "Cruthaigh píblíne"
+createPaused = "Create paused"
 editingUnsupported = "Ní thacaítear fós le taispeáint na bparaiméadar uirlise seo le haghaidh eagarthóireachta."
-moveDown = "Bog síos"
-moveUp = "Bog suas"
+editSource = "Edit source"
 name = "Ainm"
 namePlaceholder = "m.sh. Scuabadh eagarthóireachta"
 noToolSettings = "Níl aon socruithe inchumraithe ag an uirlis seo."
-operations_one = "Oibríocht ({{count}})"
-operations_other = "Oibríochtaí ({{count}})"
 output = "Aschur"
-removeStep = "Bain oibríocht"
 save = "Sábháil athruithe"
 scheduleEvery = "Rith gach"
-sources = "Foinsí"
-sourcesLoading = "Foinsí á luchtú..."
 trigger = "Truicear"
 triggerManual = "Láimhe amháin"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "lá"
 hours = "uair"
 minutes = "nóiméad"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Scrios \"{{name}}\"? Ní féidir é seo a chealú."
 cancel = "Cealaigh"
@@ -7867,6 +7825,37 @@ connectSource = "Ceangail foinse"
 description = "Cruthaigh do chéad phíblíne: roghnaigh na foinsí a ritheann sí orthu, slabhraigh na hoibríochtaí, agus roghnaigh cá dtéann an t-aschur."
 title = "Níl aon phíblínte fós"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Gníomhach"
 paused = "Ar sos"
@@ -7879,7 +7868,6 @@ completed_one = "Rith críochnaithe."
 completed_other = "Críochnaíodh gach {{count}} rith."
 empty = "Níl aon rud le rith: ní raibh aon doiciméid le próiseáil ag na foinsí."
 failed = "Theip ar an rith: {{error}}"
-historyCleared = "Glanadh an stair. Próiseálfaidh an chéad rith eile gach rud atá sna foinsí faoi láthair arís."
 inFlight = "Níl aon rud nua le rith: tá doiciméid fós á bpróiseáil ó rith níos luaithe."
 parked_one = "Níl aon rud le rith: theip ar {{count}} doiciméad roimhe seo agus tá sé páirceáilte. Ceartaigh an chúis, ansin glan an stair chun triail eile a bhaint as."
 parked_other = "Níl aon rud le rith: theip ar {{count}} doiciméad roimhe seo agus tá siad páirceáilte. Ceartaigh an chúis, ansin glan an stair chun triail eile a bhaint astu."
@@ -7895,6 +7883,7 @@ name = "Píblíne"
 sources = "Foinsí"
 status = "Stádas"
 steps = "Céimeanna"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Faire fillteáin"
@@ -8209,6 +8198,24 @@ label = "Ceangail le saincheist Jira"
 description = "Seolann sé an doiciméad próiseáilte mar cheangaltán."
 label = "Seol an doiciméad ar ríomhphost (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Scríobhann sé an doiciméad próiseáilte isteach i bhfillteán."
 label = "Uaslódáil chuig Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Uasmhéadaithe"
 subtitle = "Maireann do thriail saor in aisce go dtí {{date}}. Níl cárta de dhíth."
 title = "Triail Enterprise"
 
-[portal.search]
-ariaLabel = "Cuardaigh"
-placeholder = "Cuardaigh Stirling — endpoints, píblínte, cáipéisí…"
-
-[portal.search.empty]
-noActionsDescription = "Beidh gníomhartha tapa le feiceáil anseo nuair a bheidh siad ar fáil."
-noActionsTitle = "Níl aon ghníomhartha tapa"
-noMatches = "Níl aon mheaitseálacha do \"{{query}}\""
-noMatchesDescription = "Bain triail as eochairfhocal eile nó brabhsáil an chatalóg."
-
 [portal.settings.groups]
 admin = "Riarachán"
 
@@ -8743,10 +8740,6 @@ cancel = "Cealaigh"
 confirm = "Scrios"
 title = "Scrios foinse?"
 
-[portal.sources.empty]
-description = "Ceangail fillteán (agus, go luath, stóráil scamall) ionas go mbeidh áit ag do bheartais le cáipéisí a tharraingt uaithi."
-title = "Níl aon fhoinsí ceangailte fós"
-
 [portal.sources.kpi]
 inUse = "In úsáid"
 total = "Naisc"
@@ -8785,6 +8778,7 @@ unused = "Gan úsáid"
 documents = "Doiciméid"
 source = "Foinse"
 status = "Stádas"
+type = "Type"
 usedBy = "Beartais"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Polasaithe agus Príobháideachas"
 [settings.preferences]
 title = "Sainroghanna"
 
-[settings.search]
-placeholder = "Déan cuardach ar leathanaigh socruithe..."
-
 [settings.security]
 description = "Nuashonraigh do phasfhocal chun do chuntas a choinneáil slán."
 title = "Slándáil"
@@ -10128,6 +10119,7 @@ last = "An leathanach deiridh"
 maintainRatio = "Scoránaigh, coinnigh an cóimheas gné"
 next = "An chéad leathanach eile"
 noSavedSigs = "Níor aimsíodh aon síniú sábháilte"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Sínithe Pearsanta"
 previous = "Leathanach roimhe seo"
 redo = "Athdhéan"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Theip ar bhaint an chúlra"
 hint = "Uaslódáil íomhá PNG nó JPG de do shíniú"
 label = "Uaslódáil íomhá sínithe"
 placeholder = "Roghnaigh comhad íomhá"
+previewAlt = "Current image signature"
 processing = "Íomhá á phróiseáil..."
 removeBackground = "Bain an cúlra bán (déan trédhearcach)"
 
@@ -10179,6 +10172,17 @@ saved = "Roghnaigh síniú sábháilte thuas, ansin cliceáil áit ar bith ar an
 text = "Tar éis duit d’ainm a chur isteach thuas, cliceáil áit ar bith ar an PDF chun do shíniú a chur."
 title = "Conas síniú a chur leis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Bog an Síniú"
 pause = "Cuir suíniú ar sos"
@@ -10625,6 +10629,23 @@ title = "Uaslódáil chuig an bhfreastalaí"
 updateButton = "Nuashonraigh ar an bhfreastalaí"
 uploadButton = "Uaslódáil chuig an bhfreastalaí"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Téigh ar ais"
 pdfTools = "Uirlisí PDF"
 placeholder = "Roghnaigh uirlis chun tosú"
 premiumFeature = "Gné Préimhe:"
-searchTools = "Cuardaigh uirlisí"
 toolsHeader = "Uirlisí"
 viewAllTools = "Féach ar gach uirlis"
 
@@ -10822,6 +10842,9 @@ removal = "Baint"
 signing = "Síniú"
 verification = "Fíorú"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Níor aimsíodh uirlisí"
 noTools = "Níl aon uirlisí ar fáil"
@@ -10979,6 +11002,13 @@ approver = "Faomhann beartas"
 editor = "Eagarthóir"
 processor = "Próiseálaí"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Cealaigh an cuireadh chuig {{email}}? Ní bheidh siad in ann dul isteach leis an nasc reatha."
 cancelInviteTitle = "Cealaigh cuireadh"
@@ -10998,10 +11028,8 @@ title = "Níl aon bhaill fós"
 addToTeam = "Cuir le foireann"
 guestCount = "{{count}} aoi"
 guests = "Aíonna"
-guestsDesc = "Comhoibrithe seachtracha, teoranta don rud a chomhroinn tú. Eagarthóir amháin."
 ledBy = "faoi stiúir {{owner}}"
 org = "Eagraíocht"
-orgDesc = "Úinéirí le húdarás ar fud na heagraíochta agus faomhadh beartas"
 owners = "{{count}} úinéir"
 team = "foireann {{name}}"
 teamMeta = "{{count}} duine"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Cuireadh ó {{who}}"
 cancel = "Cealaigh"
-count = "{{count}} ar feitheamh"
-desc = "Daoine ar tugadh cuireadh dóibh nár tháinig isteach fós. Coinníonn siad suíochán go dtí go nglacann siad leis."
 expiresInDays_one = "Rachaidh sé in éag i gceann {{count}} lá"
 expiresInDays_other = "Rachaidh sé in éag i gceann {{count}} lá"
 expiresToday = "Rachaidh sé in éag inniu"
 title = "Cuirí ar feitheamh"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Chuaigh rud éigin mícheart agus an backend á bhaint amach, nó níl rochtain agat. Bain triail eile as."
 title = "Níorbh fhéidir baill a lódáil"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Cuardaigh iatáin"
 title = "Iatáin"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Teideal an leabharmhairc"
 bookmarkTitleRequired = "Tá teideal an leabharmhairc riachtanach"
 closeSidebar = "Dún barra taoibh na leabharmharcanna"
 collapseAll = "Laghdaigh gach leabharmharc"
+empty = "No bookmarks in this document"
 expandAll = "Leathnaigh gach leabharmharc"
 searchPlaceholder = "Cuardaigh leabharmharcanna"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Cuir trácht leis"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Aimsigh sa doiciméad"
 moreActions = "Tuilleadh gníomhartha"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Leathanach {{page}}"
 placingHint = "Cliceáil ar leathanach chun é a chur… (cealaigh)"
 removeCommentOnly = "Bain an trácht amháin"
 saveReply = "Sábháil freagra"
+searchPlaceholder = "Search comments"
 title = "Tráchtanna"
 typeComment = "Trácht"
 typeInsertText = "Ionsáigh Téacs"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Tá athruithe gan sábháil agat"
 closeSidebar = "Dún barra taoibh na sraitheanna"
 hideAll = "Folaigh gach sraith"
 showAll = "Taispeáin gach sraith"
+title = "Layers"
 
 [viewer.link]
 delete = "Scrios nasc"
@@ -11646,6 +11682,7 @@ exitRedaction = "Scoir de mhód ceilte"
 exportAll = "Easpórtáil PDF"
 exportSelected = "Easpórtáil na leathanaigh roghnaithe"
 formFill = "Líon foirm"
+hideToolbar = "Hide toolbar"
 multiTool = "Il-uirlis"
 panMode = "Mód pánála"
 print = "Priontáil PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Roghnaigh uile"
 selectByNumber = "Roghnaigh de réir uimhreacha leathanaigh"
 selectLanguage = "Roghnaigh teanga"
 share = "Roinn"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Scoránaigh infheictheacht na n-anótálacha"
 toggleAttachments = "Scoránaigh iatáin"
 toggleBookmarks = "Scoránaigh leabharmharcanna"
diff --git a/frontend/editor/public/locales/hi-IN/translation.toml b/frontend/editor/public/locales/hi-IN/translation.toml
index 01a20654dc..0e122c9980 100644
--- a/frontend/editor/public/locales/hi-IN/translation.toml
+++ b/frontend/editor/public/locales/hi-IN/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "वर्णमाला"
 apply = "लागू करें"
 applyAndContinue = "सहेजें और बाहर निकलें"
-areYouSure = "क्या आप वाकई छोड़ना चाहते हैं?"
 back = "वापस"
 black = "काला"
 blue = "नीला"
@@ -106,6 +105,7 @@ undoSuccess = "ऑपरेशन सफलतापूर्वक पूर्
 unknown = "अज्ञात"
 unpin = "फ़ाइल अनपिन करें (टूल चलने के बाद प्रतिस्थापित करें)"
 unsavedChanges = "आपके PDF में असहेजे परिवर्तन हैं।"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "असहेजे परिवर्तन"
 unsupported = "असमर्थित"
 username = "उपयोगकर्ता नाम"
@@ -1879,6 +1879,9 @@ width = "चौड़ाई"
 [app]
 description = "मुफ़्त Adobe Acrobat विकल्प (10M+ डाउनलोड)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b में बदलें"
 convertToPdfA3bDescription = "एम्बेडेड अटैचमेंट्स के साथ एक आर्काइवल PDF बनाता है"
@@ -2933,12 +2936,16 @@ text = "इन अनुमतियों को अपरिवर्तनी
 [chat.actions]
 copy = "संदेश कॉपी करें"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling एजेंट विकल्प"
+assistant = "AI Assistant"
 clearChat = "चैट साफ़ करें"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "यह ऑपरेशन आपके क्लाउड क्र
 tooltip = "स्क्रीन से रंग चुनें"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "रंग चुनें"
 
 [common]
+actions = "Actions"
 back = "वापस"
 cancel = "रद्द करें"
 close = "बंद करें"
+codeSample = "Code sample"
 collapse = "समेटें"
 confirm = "पुष्टि करें"
 continue = "जारी रखें"
 copied = "कॉपी हो गया!"
 copy = "कॉपी करें"
 done = "पूर्ण"
+enterValue = "Enter value"
 error = "त्रुटि"
 expand = "विस्तारित करें"
 loading = "लोड हो रहा है..."
 next = "अगला"
+open = "Open"
 preview = "पूर्वावलोकन"
 previous = "पिछला"
 refresh = "रीफ़्रेश करें"
 remaining = "शेष"
 retry = "फिर से प्रयास करें"
 save = "सहेजें"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "चयनित साफ़ करें"
@@ -3185,6 +3199,7 @@ title = "संपीड़न विधि"
 [compress.settings]
 desiredSize = "वांछित फ़ाइल आकार"
 desiredSizePlaceholder = "आकार दर्ज करें"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "संपीड़न फ़ाइल आकार कम करने का आसान तरीका है। 'File Size' चुनें और लक्ष्य आकार दर्ज करें ताकि हम आपके लिए गुणवत्ता समायोजित कर दें। 'Quality' चुनें ताकि आप संपीड़न की तीव्रता मैन्युअल रूप से सेट कर सकें।"
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF विकल्प"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "पहले एक स्रोत फ़ॉर्मेट चुनें"
 settings = "सेटिंग्स"
 single = "एकल"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "खोजें..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "संपादित करें"
@@ -3824,11 +3861,13 @@ shareSelected = "चयनित साझा करें"
 sharing = "शेयरिंग"
 showAll = "सभी दिखाएँ"
 showHistory = "इतिहास दिखाएँ"
+sortBy = "Sort files"
 sortByDate = "तिथि के अनुसार क्रमबद्ध करें"
 sortByName = "नाम के अनुसार क्रमबद्ध करें"
 sortBySize = "आकार के अनुसार क्रमबद्ध करें"
 storage = "स्टोरेज"
 storageState = "भंडारण"
+storageUsed = "Storage used"
 synced = "सिंक किया गया"
 title = "PDF फ़ाइलें अपलोड करें"
 toolChain = "लागू किए गए टूल"
@@ -3874,8 +3913,12 @@ addFiles = "फ़ाइलें जोड़ें"
 addingFiles = "फ़ाइलें जोड़ी जा रही हैं…"
 collapse = "साइडबार समेटें"
 customizeGroups = "समूह अनुकूलित करें"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "शुरू करने के लिए फ़ाइलें खोलें"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "साइडबार फैलाएँ"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive कॉन्फ़िगर नहीं है"
@@ -3888,15 +3931,17 @@ openFromComputer = "कंप्यूटर से खोलें"
 openSettings = "सेटिंग्स खोलें"
 other = "अन्य"
 recent = "हाल के"
-search = "खोजें"
-searchPlaceholder = "फ़ाइलें खोजें..."
 viewAll = "सभी {{count}} फ़ाइलें देखें"
 
 [fileSidebar.fileItem]
 closeViewer = "व्यूअर बंद करें"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "व्यूअर में खोलें"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "डिफ़ॉल्ट पर रीसेट करें"
 subtitle = "अपनी फ़ाइलों को मूल श्रेणियों में समूहित करें। किसी श्रेणी में मौजूदा या नए लेबल जोड़ें, उसका नाम बदलें, या अपनी खुद की श्रेणी बनाएँ। आपकी किसी भी श्रेणी में न आने वाली फ़ाइलें “अन्य” के अंतर्गत दिखाई देती हैं।"
 title = "Sidebar श्रेणियाँ"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "वर्कस्पेस में जोड़ें"
 addToWorkspaceCount = "{{count}} को वर्कस्पेस में जोड़ें"
@@ -3918,7 +3971,6 @@ backToMyFiles = "मेरी फ़ाइलों पर वापस"
 breadcrumbs = "फ़ोल्डर पथ"
 cancel = "रद्द करें"
 classification = "वर्गीकरण"
-clearSearch = "खोज साफ़ करें"
 clearSelection = "चयन साफ़ करें"
 closeDetails = "विवरण बंद करें"
 create = "बनाएं"
@@ -3950,6 +4002,7 @@ downloadAll = "सभी डाउनलोड करें"
 downloadVersion = "यह संस्करण डाउनलोड करें"
 dropOverlay = "अपलोड करने के लिए फ़ाइलें छोड़ें"
 dropOverlaySub = "फ़ाइलें Local में शुरू होती हैं। उन्हें किसी फ़ोल्डर में व्यवस्थित करने के लिए 'Move to' या 'Save to cloud' का उपयोग करें।"
+duplicate = "Duplicate"
 file = "फ़ाइल"
 fileInfo = "File info"
 fileMenu = "फ़ाइल क्रियाएँ"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "फ़ोल्डर ट्री का आकार ब
 save = "सहेजें"
 saveToServer = "सर्वर पर सहेजें"
 saveToServerDisabledHint = "इस सर्वर पर सहेजना सक्षम नहीं है। अपने प्रशासक से इसे सक्षम करने के लिए कहें।"
-search = "खोज"
-searchPlaceholder = "इस फ़ोल्डर और उप-फ़ोल्डरों में खोजें"
 selectAll = "सभी चुनें"
 selectAllHint = "सभी चुनने के लिए क्लिक करें। सुझाव: एक-एक करके फ़ाइलें जोड़ने के लिए Ctrl (या Cmd) दबाए रखें, रेंज चुनने के लिए Shift।"
 selectedCount = "{{count}} चयनित"
@@ -4044,6 +4095,10 @@ title = "अभी तक कोई क्लाउड फ़ाइल नही
 hint = "बिना अपलोड सहेजी गई फ़ाइलें यहाँ रहती हैं। जोड़ने के लिए कोई फ़ाइल छोड़ें।"
 title = "कोई केवल-लोकल फ़ाइल नहीं"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "जो फ़ाइलें आप खोलते या संपादित करते हैं, वे यहाँ दिखाई देंगी।"
 title = "अभी तक कुछ संशोधित नहीं"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "फ़ोल्डर हटाया नहीं जा सका।"
 deleteFolderFailedDetail = "फ़ोल्डर हटाया नहीं जा सका: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "फ़ोल्डर दिखावट अपडेट नहीं हो सकी।"
 folderAppearanceFailedDetail = "फ़ोल्डर दिखावट अपडेट नहीं हो सकी: {{message}}"
 moveFilesFailed = "फ़ाइलें ले जाई नहीं जा सकीं।"
@@ -4113,6 +4170,11 @@ localHint = "केवल इस ब्राउज़र में संग्
 shared = "शेयर किया गया"
 sharedHint = "लिंक के माध्यम से आपके साथ साझा"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "सबसे पुराने पहले"
 modifiedDesc = "हाल के पहले"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "स्टोरेज में कोई फ़ाइ
 open = "खोलें"
 openFile = "फ़ाइल खोलें"
 openFiles = "फ़ाइलें खोलें"
+selectFile = "Select {{name}}"
 selectFromStorage = "स्टोरेज से चुनें"
 upload = "अपलोड"
 uploadFile = "फ़ाइल अपलोड करें"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "सब सहेजा गया"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV extract करने में विफल"
 extractXlsxError = "XLSX extract करने में विफल"
+filled = "filled"
 flattenAfterFilling = "भरने के बाद समतल करें"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "आव."
 requiredFieldsError = "कृपया सभी आवश्यक fields भरें"
 rescanFields = "फ़ील्ड्स दोबारा स्कैन करें"
@@ -4795,9 +4863,6 @@ title = "छवि से PDF"
 [imageToPdf]
 tags = "रूपांतरण,img,jpg,चित्र,फोटो"
 
-[infoBanner]
-dismiss = "खारिज करें"
-
 [invite]
 acceptError = "खाता बनाने में विफल"
 accountFor = "के लिए खाता बना रहे हैं"
@@ -4979,6 +5044,34 @@ uploadSuccess = "अपलोड सफल!"
 uploadSuccessMessage = "आपकी छवियाँ स्थानांतरित कर दी गई हैं।"
 validating = "सेशन सत्यापित किया जा रहा है..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "फ़ोटो अपलोड करने के लिए स्कैन करें। छवियाँ स्वतः PDF में बदल जाती हैं।"
 descriptionNoConvert = "अपने मोबाइल डिवाइस से फ़ोटो अपलोड करने के लिए स्कैन करें।"
@@ -4997,8 +5090,13 @@ title = "मोबाइल से अपलोड करें"
 tags = "मल्टी टूल,मल्टी ऑपरेशन,UI,क्लिक ड्रैग,फ्रंट एंड,क्लाइंट साइड,इंटरैक्टिव,इंटरैक्टेबल,मूव,डिलीट,माइग्रेट,डिवाइड"
 title = "PDF मल्टी टूल"
 
-[navbar]
-search = "खोजें"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "प्रमाणीकरण सफल नहीं हुआ। आप यह विंडो बंद कर फिर से प्रयास कर सकते हैं।"
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>Active Files</strong> दृश्य उन सभी PD
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "बंद करें"
 cropSettings = "अब जब हमने वह फ़ाइल चुन ली है जिसे क्रॉप करना है, तो हम Crop टूल को कॉन्फ़िगर कर सकते हैं ताकि वह क्षेत्र चुनें जहाँ तक PDF को क्रॉप करना है।"
+dialogLabel = "Onboarding"
 fileCheckbox = "किसी फ़ाइल पर क्लिक करने से वह प्रोसेसिंग के लिए चुनी जाती है। बैच ऑपरेशंस के लिए आप कई फ़ाइलें चुन सकते हैं।"
 fileReplacement = "संशोधित फ़ाइल Workbench में मूल फ़ाइल को स्वचालित रूप से बदल देगी, जिससे आपको इसे और टूल्स से चलाना आसान हो जाएगा।"
 filesButton = "क्विक एक्सेस बार पर <strong>Files</strong> बटन आपको PDF अपलोड करने देता है जिन पर आप टूल्स का उपयोग कर सकते हैं।"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF से PDF/A"
 tags = "संग्रह,लंबी अवधि,मानक,रूपांतरण,भंडारण,संरक्षण"
 title = "PDF से PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "print,standard,conversion,production,prepress,archive"
 title = "PDF से PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 क्रेडिट्स"
 xsmall = "100 क्रेडिट्स"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "अपनी जरूरतों के अनुसार प्लान चुनें"
 title = "उपलब्ध प्लान"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "मासिक spend limit पहुँच गई"
 title = "Stripe portal नहीं खोला जा सका"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "{{allowance}} मुफ़्त PDFs में से उपयोग हुआ"
 capSuffix_other = "{{allowance}} मुफ़्त PDFs में से उपयोग हुआ"
 eyebrow = "Processor trial"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "policy run होने पर document या notification email करें।"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "processed documents को Nextcloud में file करें।"
@@ -7077,11 +7211,6 @@ title = "Official SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
-[portal.docs.search]
-empty = "कोई matching docs नहीं"
-placeholder = "docs search करें"
-results = "{{count}} results"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Bundled, named capabilities जिन्हें आपका agent single tool के रूप में invoke करता है। हर skill deterministic op chain है जिसके साथ evals attached हैं।"
@@ -7180,11 +7309,11 @@ editorAction = "संपादक"
 empty = "इस फ़िल्टर से कोई दस्तावेज़ मेल नहीं खाते।"
 rowActions = "पंक्ति कार्रवाइयाँ"
 sensitiveLabel = "संवेदनशील"
-sensitiveTitle = "संवेदनशील — एक्सेस आवश्यक"
 
 [portal.documents.table.columns]
 action = "पाइपलाइन / कार्रवाई"
 document = "दस्तावेज़"
+labels = "Labels"
 product = "उत्पाद"
 status = "स्थिति"
 time = "समय"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "अंतिम बार देखा गया"
 region = "क्षेत्र"
 status = "स्थिति"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "इस व्यू में अनपेक्षित त्
 retry = "फिर से कोशिश करें"
 title = "इस पेज पर कुछ गलत हो गया"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "वापस"
 body = "desktop app download करें या server self-host करें।"
@@ -7380,11 +7560,6 @@ cancel = "रद्द करें"
 confirm = "key रद्द करें"
 title = "API key रद्द करें"
 
-[portal.infrastructure.attestationLabel]
-attested = "प्रमाणित"
-inScope = "दायरे में"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "श्रेणी के आधार पर audit events फ़िल्टर करें"
 heading = "Audit logs"
@@ -7456,11 +7631,6 @@ info = "जानकारी"
 success = "सफलता"
 warning = "चेतावनी"
 
-[portal.infrastructure.certLabel]
-certified = "प्रमाणित"
-inProgress = "प्रगति में"
-notStarted = "शुरू नहीं हुआ"
-
 [portal.infrastructure.createKey]
 cancel = "रद्द करें"
 createKey = "key बनाएँ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "इस secret को अभी कॉपी करें —
 title = "API key बनाएँ"
 titleCreated = "Key बनाई गई"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "कतार में"
-rolledBack = "रोल बैक किया गया"
-rolling = "रोल आउट हो रहा है"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "डिप्लॉय किया"
-environment = "Environment"
-product = "उत्पाद"
-status = "स्थिति"
-version = "Version"
-when = "कब"
-
-[portal.infrastructure.deployments.recent]
-heading = "हाल के डिप्लॉयमेंट"
-subheading = "Products और environments में नवीनतम rollouts."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "इंस्टेंस"
-latency = "Latency"
-load = "Load"
-p99 = "P99"
-region = "क्षेत्र"
-status = "स्थिति"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "क्षेत्र"
-subheading = "हर डिप्लॉय किए गए Stirling क्षेत्र का live health — latency, load, और rollout version."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "आपका workspace provision होने के बाद डिप्लॉय किए गए क्षेत्र यहाँ दिखाई देंगे।"
-title = "कोई क्षेत्र डिप्लॉय नहीं"
-
 [portal.infrastructure.keyLabel]
 active = "सक्रिय"
 revoked = "रद्द"
 
-[portal.infrastructure.modelLabel]
-active = "सक्रिय"
-degraded = "कमज़ोर"
-disabled = "अक्षम"
-
-[portal.infrastructure.models]
-heading = "Models"
-msValue = "{{value}} ms"
-subheading = "आपके workspace में document processing को power देने वाला model catalogue और routing."
-
-[portal.infrastructure.models.byom]
-description = "On-prem या self-hosted model रजिस्टर करें और data-residency-bound processing के लिए उसे किसी क्षेत्र में pin करें।"
-title = "अपना model लाएँ"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogue"
-sub = "आपके workspace के लिए उपलब्ध managed models, live latency और cost के साथ।"
-subEnterprise = "Managed, bring-your-own, और on-prem models — per-region pinning उपलब्ध।"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "आपके workspace के catalogue में models यहाँ दिखाई देंगे।"
-title = "कोई models उपलब्ध नहीं"
-
-[portal.infrastructure.models.columns]
-cost = "लागत"
-latency = "Latency"
-load = "Load"
-model = "Model"
-status = "स्थिति"
-type = "प्रकार"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/call"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "सक्रिय models"
-avgLatency = "औसत latency"
-included = "शामिल"
-monthlySpend = "मासिक model खर्च"
-
-[portal.infrastructure.models.routing]
-empty = "कोई routing rules कॉन्फ़िगर नहीं।"
-heading = "Routing rules"
-sub = "प्रत्येक operation को कौन सा model संभालता है। जब कोई संकीर्ण rule मेल नहीं खाता, तो default लागू होता है।"
-subLocked = "Operations को विशिष्ट models तक route करें — paid plans पर उपलब्ध।"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "प्रत्येक operation और document type को कौन सा model संभालता है, इसे नियंत्रित करने के लिए Pro में अपग्रेड करें।"
-title = "Model routing एक paid feature है"
-
-[portal.infrastructure.models.routingColumns]
-default = "Default"
-docType = "दस्तावेज़ प्रकार"
-modelForAria = "{{operation}} के लिए model"
-operation = "Operation"
-routedTo = "Route किया गया"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "वर्गीकरण"
-extraction = "निष्कर्षण"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "कमज़ोर"
-down = "Down"
-healthy = "स्वस्थ"
-
-[portal.infrastructure.security.access.byok]
-description = "अपने KMS से key दें। Stirling इसके साथ encrypt करता है लेकिन अभी भी पढ़ सकता है।"
-label = "अपनी key लाएँ (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Keys कभी आपके KMS से बाहर नहीं जातीं। Stirling केवल ciphertext रखता है।"
-label = "अपनी key अपने पास रखें (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling encryption keys प्रबंधित करता है। सबसे सरल — आपकी ओर से zero key ops."
-label = "Stirling-held keys"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "दस्तावेज़ एक्सेस पॉलिसी"
-subheading = "यह नियंत्रित करता है कि rest पर processed documents को कौन decrypt कर सकता है।"
-
-[portal.infrastructure.security.attestations]
-heading = "Compliance attestations"
-noReport = "कोई report उपलब्ध नहीं"
-subheading = "Framework-by-framework audit posture, attested controls पर reports उपलब्ध।"
-viewReport = "Report देखें →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Stirling platform को कवर करने वाले attestations और certifications."
-
-[portal.infrastructure.security.empty]
-description = "आपके workspace की security configuration यहाँ दिखाई देगी।"
-title = "Security posture उपलब्ध नहीं"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK के साथ, encryption keys कभी आपके KMS से बाहर नहीं जातीं। Stirling केवल ciphertext स्टोर और process करता है, जिसे आप किसी भी समय revoke कर सकते हैं।"
-title = "Stirling आपके दस्तावेज़ decrypt नहीं कर सकता"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "कोई IP ranges कॉन्फ़िगर नहीं — सभी IPs अनुमत।"
-heading = "IP allowlist"
-sub = "API access इन CIDR ranges तक सीमित है।"
-subLocked = "API access को ज्ञात IP ranges तक सीमित करें — paid plans पर उपलब्ध।"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "API access को विशिष्ट networks तक सीमित करने के लिए Pro में अपग्रेड करें।"
-title = "IP allowlisting एक paid feature है"
-
-[portal.infrastructure.security.ipColumns]
-added = "जोड़ा गया"
-addedBy = "जोड़ा"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Encryption key management"
-keyId = "Key identifier"
-lastRotated = "अंतिम बार रोटेट किया गया"
-rotateKey = "key रोटेट करें"
-rotationPolicy = "Rotation policy"
-subheading = "वे keys जो rest पर documents को encrypt करती हैं — कौन decrypt कर सकता है, और keys कैसे rotate होती हैं।"
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) और hold-your-own-key (HYOK) custody Enterprise पर उपलब्ध हैं। अपने KMS से keys देने के लिए अपग्रेड करें।"
-title = "आपके plan पर keys Stirling द्वारा managed हैं"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "एशिया प्रशांत"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "यूरोपीय संघ"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "संयुक्त राज्य"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "जहाँ दस्तावेज़ स्टोर और process किए जाते हैं।"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} उपयोग किया गया"
-
-[portal.infrastructure.storage.empty]
-description = "Connected storage और उपयोग यहाँ दिखाई देंगे।"
-title = "कोई storage कॉन्फ़िगर नहीं"
-
-[portal.infrastructure.storage.lifecycle]
-active = "सक्रिय"
-activeRange = "0–{{value}}d"
-archived = "Archived"
-coldStorage = "cold storage"
-deleted = "हटाया गया"
-never = "कभी नहीं"
-purged = "purged"
-
-[portal.infrastructure.storage.providers]
-connect = "कनेक्ट करें"
-connected = "कनेक्टेड"
-heading = "Connected providers"
-subheading = "जहाँ processed artifacts लिखे जाते हैं।"
-
-[portal.infrastructure.storage.retention]
-heading = "Retention"
-subheading = "Lifecycle deletion से पहले artifacts कितने समय तक रखे जाते हैं।"
-windowLabel = "Default retention window"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} दिन"
-days_other = "{{count}} दिन"
-never = "कभी न हटाएँ"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "कुल उपयोग"
-progressLabel = "उपयोग किया गया storage"
-subheading = "सभी connected providers में खपत हुआ storage."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Keys"
 audit = "Audit Logs"
@@ -7715,11 +7657,9 @@ security = "Security"
 storage = "Storage"
 
 [portal.integrations]
-addAnother = "एक और जोड़ें"
 availableHeading = "उपलब्ध"
 comingSoonHeading = "जल्द आ रहा है"
 connect = "कनेक्ट करें"
-connectedHeading = "कनेक्टेड"
 connectionCount_one = "{{count}} कनेक्शन"
 connectionCount_other = "{{count}} कनेक्शन"
 customApi = "कस्टम API"
@@ -7737,6 +7677,10 @@ security = "सुरक्षा"
 signing = "हस्ताक्षर"
 storage = "स्टोरेज"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "कनेक्टेड"
 
@@ -7767,7 +7711,6 @@ integrations = "इंटीग्रेशन"
 pipelines = "पाइपलाइन्स"
 policies = "पॉलिसियाँ"
 procurement = "Procurement"
-settings = "सेटिंग्स"
 sources = "स्रोत"
 usage = "Usage & Billing"
 users = "उपयोगकर्ता"
@@ -7784,7 +7727,7 @@ title = "पाइपलाइन्स"
 newPipeline = "नई पाइपलाइन"
 
 [portal.pipelines.builder]
-addStep = "टूल जोड़ें"
+activate = "Activate"
 back = "पाइपलाइन्स पर वापस जाएँ"
 cannotFollow = "{{produced}} नहीं ले सकता"
 chooseAccount = "एक खाता चुनें"
@@ -7792,28 +7735,38 @@ chooseDestination = "एक गंतव्य चुनें"
 chooseOperation = "चुनें कि यह चरण क्या करता है"
 chooseSource = "एक स्रोत चुनें"
 discard = "बदलाव छोड़ें"
-enabled = "सक्षम"
 inputs = "इनपुट"
 inputSource = "इनपुट स्रोत"
 inputTrigger = "ट्रिगर"
 keepEditing = "संपादन जारी रखें"
+moreActions = "More actions"
 needsConfiguring = "सेटअप आवश्यक है"
-needsUpload = "अपलोड की गई फ़ाइल आवश्यक"
-noSources = "अभी तक कोई स्रोत कनेक्ट नहीं है। इसे इनपुट के रूप में उपयोग करने के लिए एक बनाएँ।"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "आपकी खोज से कोई टूल मेल नहीं खाते।"
-pipelineSettings = "पाइपलाइन सेटिंग्स"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "टूल खोजें"
-selectToolBody = "अपनी पाइपलाइन बनाने के लिए एक टूल जोड़ें।"
-selectToolTitle = "अभी कोई टूल नहीं"
 sendToSystem = "दूसरे सिस्टम को भेजें"
 stepsIncompatible = "ये चरण उनके पिछले चरण द्वारा उत्पन्न चीज़ पर नहीं चल सकते: {{tools}}।"
 stepsNeedSetup = "सेव करने से पहले इन चरणों का सेटअप अभी भी आवश्यक है: {{tools}}।"
-toolSettings = "टूल सेटिंग्स"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "अपरिचित operation, जैसा है वैसा रखा गया।"
 unsavedBody = "आपके पास unsaved बदलाव हैं। बाहर निकलने से पहले उन्हें save करें, या छोड़ दें?"
 unsavedTitle = "Unsaved बदलाव"
-uploadUnsupported = "Uploaded files अभी pipelines में supported नहीं हैं, इसलिए ये steps save नहीं किए जा सकते: {{tools}}."
 usesDefaults = "Default settings के साथ चलता है"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "पिछले चरण की हर फ़ाइल को जोड़ता है"
@@ -7825,31 +7778,36 @@ undeclared-operation = "जाँच नहीं कर सकता कि य
 
 [portal.pipelines.composer]
 addTool = "टूल जोड़ें"
-cancel = "रद्द करें"
-chainEmpty = "अपनी पाइपलाइन बनाना शुरू करने के लिए एक टूल जोड़ें।"
 create = "पाइपलाइन बनाएँ"
+createPaused = "Create paused"
 editingUnsupported = "Editing के लिए इन tool params को दिखाना अभी supported नहीं है।"
-moveDown = "नीचे ले जाएँ"
-moveUp = "ऊपर ले जाएँ"
+editSource = "Edit source"
 name = "नाम"
 namePlaceholder = "उदा. Redaction sweep"
 noToolSettings = "इस टूल में कोई configurable settings नहीं हैं।"
-operations_one = "Operation ({{count}})"
-operations_other = "Operations ({{count}})"
 output = "Output"
-removeStep = "Operation हटाएँ"
 save = "बदलाव save करें"
 scheduleEvery = "हर"
-sources = "स्रोत"
-sourcesLoading = "स्रोत लोड हो रहे हैं..."
 trigger = "Trigger"
 triggerManual = "केवल Manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "दिन"
 hours = "घंटे"
 minutes = "मिनट"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" हटाएँ? इसे पूर्ववत नहीं किया जा सकता।"
 cancel = "रद्द करें"
@@ -7867,6 +7825,37 @@ connectSource = "स्रोत कनेक्ट करें"
 description = "अपनी पहली पाइपलाइन बनाएँ: वे स्रोत चुनें जिन पर यह चलती है, operations को chain करें, और output कहाँ जाए चुनें।"
 title = "अभी कोई पाइपलाइन नहीं"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "सक्रिय"
 paused = "रोकी गई"
@@ -7879,7 +7868,6 @@ completed_one = "Run पूरा हुआ।"
 completed_other = "सभी {{count}} runs पूरे हुए।"
 empty = "चलाने के लिए कुछ नहीं: sources में process करने के लिए कोई documents नहीं थे।"
 failed = "Run विफल रहा: {{error}}"
-historyCleared = "इतिहास साफ़ किया गया। अगला रन स्रोतों में वर्तमान में मौजूद सब कुछ फिर से प्रोसेस करेगा।"
 inFlight = "चलाने के लिए कुछ नया नहीं: दस्तावेज़ अभी भी पहले के रन से प्रोसेस हो रहे हैं।"
 parked_one = "चलाने के लिए कुछ नहीं: {{count}} दस्तावेज़ पहले विफल हुआ और पार्क किया गया है। कारण ठीक करें, फिर इसे फिर से प्रयास करने के लिए इतिहास साफ़ करें।"
 parked_other = "चलाने के लिए कुछ नहीं: {{count}} दस्तावेज़ पहले विफल हुए और पार्क किए गए हैं। कारण ठीक करें, फिर इन्हें फिर से प्रयास करने के लिए इतिहास साफ़ करें।"
@@ -7895,6 +7883,7 @@ name = "पाइपलाइन"
 sources = "स्रोत"
 status = "स्थिति"
 steps = "Steps"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Folder watch"
@@ -8209,6 +8198,24 @@ label = "Jira issue में संलग्न करें"
 description = "प्रोसेस किए गए दस्तावेज़ को attachment के रूप में भेजता है।"
 label = "दस्तावेज़ email करें (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "प्रोसेस किए गए दस्तावेज़ को folder में लिखता है।"
 label = "Nextcloud पर अपलोड करें"
@@ -8683,16 +8690,6 @@ maxed = "अधिकतम हो गया"
 subtitle = "आपका free trial {{date}} तक चलता है। Card आवश्यक नहीं।"
 title = "Enterprise trial"
 
-[portal.search]
-ariaLabel = "खोजें"
-placeholder = "Stirling खोजें — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "उपलब्ध होने पर quick actions यहां दिखाई देंगी।"
-noActionsTitle = "कोई quick actions नहीं"
-noMatches = "\"{{query}}\" के लिए कोई मिलान नहीं"
-noMatchesDescription = "कोई अलग keyword आज़माएं या catalogue browse करें।"
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "रद्द करें"
 confirm = "हटाएं"
 title = "स्रोत हटाएं?"
 
-[portal.sources.empty]
-description = "एक folder (और जल्द ही, cloud storage) कनेक्ट करें ताकि आपकी policies के पास दस्तावेज़ खींचने की जगह हो।"
-title = "अभी तक कोई स्रोत कनेक्ट नहीं"
-
 [portal.sources.kpi]
 inUse = "उपयोग में"
 total = "Connections"
@@ -8785,6 +8778,7 @@ unused = "Unused"
 documents = "दस्तावेज़"
 source = "स्रोत"
 status = "स्थिति"
+type = "Type"
 usedBy = "Policies"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "नीतियाँ और गोपनीयता"
 [settings.preferences]
 title = "प्राथमिकताएँ"
 
-[settings.search]
-placeholder = "सेटिंग्स पेज खोजें..."
-
 [settings.security]
 description = "अपने खाते को सुरक्षित रखने के लिए अपना पासवर्ड अपडेट करें।"
 title = "सुरक्षा"
@@ -10128,6 +10119,7 @@ last = "अंतिम पृष्ठ"
 maintainRatio = "आनुपातिक अनुपात बनाए रखें टॉगल करें"
 next = "अगला पृष्ठ"
 noSavedSigs = "कोई सहेजा गया हस्ताक्षर नहीं मिला"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "व्यक्तिगत हस्ताक्षर"
 previous = "पिछला पृष्ठ"
 redo = "फिर करें"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "पृष्ठभूमि हटाना व
 hint = "अपने हस्ताक्षर की PNG या JPG इमेज अपलोड करें"
 label = "हस्ताक्षर की इमेज अपलोड करें"
 placeholder = "इमेज फ़ाइल चुनें"
+previewAlt = "Current image signature"
 processing = "छवि संसाधित हो रही है..."
 removeBackground = "सफेद पृष्ठभूमि हटाएँ (पारदर्शी बनाएँ)"
 
@@ -10179,6 +10172,17 @@ saved = "ऊपर से एक सहेजा हुआ हस्ताक्
 text = "ऊपर अपना नाम दर्ज करने के बाद, PDF पर कहीं भी क्लिक करके अपना हस्ताक्षर रखें।"
 title = "हस्ताक्षर कैसे जोड़ें"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "हस्ताक्षर को स्थानांतरित करें"
 pause = "प्लेसमेंट रोकें"
@@ -10625,6 +10629,23 @@ title = "सर्वर पर अपलोड करें"
 updateButton = "सर्वर पर अपडेट करें"
 uploadButton = "सर्वर पर अपलोड करें"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "वापस जाएं"
 pdfTools = "PDF Tools"
 placeholder = "शुरू करने के लिए कोई टूल चुनें"
 premiumFeature = "प्रीमियम फीचर:"
-searchTools = "टूल खोजें"
 toolsHeader = "उपकरण"
 viewAllTools = "सभी उपकरण देखें"
 
@@ -10822,6 +10842,9 @@ removal = "हटाना"
 signing = "हस्ताक्षर"
 verification = "सत्यापन"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "कोई टूल नहीं मिला"
 noTools = "कोई टूल उपलब्ध नहीं"
@@ -10979,6 +11002,13 @@ approver = "Policy approve करता है"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}} को भेजा गया आमंत्रण रद्द करें? वे मौजूदा लिंक से शामिल नहीं हो पाएँगे।"
 cancelInviteTitle = "आमंत्रण रद्द करें"
@@ -10998,10 +11028,8 @@ title = "अभी तक कोई member नहीं"
 addToTeam = "Team में जोड़ें"
 guestCount = "{{count}} guest"
 guests = "Guests"
-guestsDesc = "बाहरी collaborators, आपके द्वारा साझा की गई चीज़ों तक सीमित। केवल Editor।"
 ledBy = "{{owner}} द्वारा नेतृत्व"
 org = "Organization"
-orgDesc = "Org-wide authority और policy approval वाले owners"
 owners = "{{count}} owner"
 team = "{{name}} team"
 teamMeta = "{{count}} लोग"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "{{who}} द्वारा आमंत्रित"
 cancel = "रद्द करें"
-count = "{{count}} लंबित"
-desc = "आमंत्रित लोग जो अभी तक शामिल नहीं हुए हैं। वे स्वीकार करने तक एक सीट रखते हैं।"
 expiresInDays_one = "{{count}} दिन में समाप्त होगा"
 expiresInDays_other = "{{count}} दिनों में समाप्त होगा"
 expiresToday = "आज समाप्त होगा"
 title = "लंबित आमंत्रण"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "backend तक पहुँचने में कुछ गलत हुआ, या आपके पास पहुँच नहीं है। फिर से कोशिश करें।"
 title = "सदस्यों को लोड नहीं किया जा सका"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "संलग्नक खोजें"
 title = "संलग्नक"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "बुकमार्क शीर्षक"
 bookmarkTitleRequired = "बुकमार्क शीर्षक आवश्यक है"
 closeSidebar = "बुकमार्क sidebar बंद करें"
 collapseAll = "सभी बुकमार्क संक्षिप्त करें"
+empty = "No bookmarks in this document"
 expandAll = "सभी बुकमार्क विस्तृत करें"
 searchPlaceholder = "बुकमार्क खोजें"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "टिप्पणी जोड़ें"
@@ -11264,10 +11297,12 @@ locateAnnotation = "दस्तावेज़ में ढूँढें"
 moreActions = "और क्रियाएँ"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "पेज {{page}}"
 placingHint = "रखने के लिए किसी पृष्ठ पर क्लिक करें… (रद्द करें)"
 removeCommentOnly = "केवल टिप्पणी हटाएँ"
 saveReply = "उत्तर सहेजें"
+searchPlaceholder = "Search comments"
 title = "टिप्पणियाँ"
 typeComment = "टिप्पणी"
 typeInsertText = "पाठ डालें"
@@ -11290,6 +11325,7 @@ unsavedDesc = "आपके पास असहेजे परिवर्त
 closeSidebar = "layers sidebar बंद करें"
 hideAll = "सभी layers छिपाएँ"
 showAll = "सभी layers दिखाएँ"
+title = "Layers"
 
 [viewer.link]
 delete = "लिंक हटाएं"
@@ -11646,6 +11682,7 @@ exitRedaction = "रिडैक्शन मोड से बाहर नि
 exportAll = "PDF निर्यात करें"
 exportSelected = "चयनित पृष्ठ निर्यात करें"
 formFill = "फ़ॉर्म भरें"
+hideToolbar = "Hide toolbar"
 multiTool = "मल्टी-टूल"
 panMode = "पैन मोड"
 print = "PDF प्रिंट करें"
@@ -11666,6 +11703,7 @@ selectAll = "सभी चुनें"
 selectByNumber = "पृष्ठ संख्याओं से चुनें"
 selectLanguage = "भाषा चुनें"
 share = "साझा करें"
+showToolbar = "Show toolbar"
 toggleAnnotations = "एनोटेशन की दृश्यता टॉगल करें"
 toggleAttachments = "संलग्नक टॉगल करें"
 toggleBookmarks = "बुकमार्क टॉगल करें"
diff --git a/frontend/editor/public/locales/hr-HR/translation.toml b/frontend/editor/public/locales/hr-HR/translation.toml
index 29dc3b9de6..0b2aa9b82c 100644
--- a/frontend/editor/public/locales/hr-HR/translation.toml
+++ b/frontend/editor/public/locales/hr-HR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Abeceda"
 apply = "Primijeni"
 applyAndContinue = "Spremi i izađi"
-areYouSure = "Jeste li sigurni da želite izaći?"
 back = "Natrag"
 black = "Crno"
 blue = "Plavo"
@@ -106,6 +105,7 @@ undoSuccess = "Radnja je uspješno poništena"
 unknown = "Nepoznato"
 unpin = "Otkači datoteku (zamijeni nakon pokretanja alata)"
 unsavedChanges = "Imate nespremljene promjene u svom PDF-u."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Nespremljene promjene"
 unsupported = "Nepodržano"
 username = "Korisničko ime"
@@ -1879,6 +1879,9 @@ width = "Širina"
 [app]
 description = "Besplatna alternativa Adobe Acrobatu (10M+ preuzimanja)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Pretvori u PDF/A-3b"
 convertToPdfA3bDescription = "Stvara arhivski PDF s ugrađenim privicima"
@@ -2933,12 +2936,16 @@ text = "Kako bi ove dozvole bile nepromjenjive, upotrijebite alat Dodaj lozinku
 [chat.actions]
 copy = "Kopiraj poruku"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opcije Stirling agenta"
+assistant = "AI Assistant"
 clearChat = "Obriši chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Ova radnja će iskoristiti vaše kredite u oblaku"
 tooltip = "Odaberi boju sa zaslona"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Odaberite boju"
 
 [common]
+actions = "Actions"
 back = "Natrag"
 cancel = "Odustani"
 close = "Zatvori"
+codeSample = "Code sample"
 collapse = "Sažmi"
 confirm = "Potvrdi"
 continue = "Nastavi"
 copied = "Kopirano!"
 copy = "Kopiraj"
 done = "Gotovo"
+enterValue = "Enter value"
 error = "Pogreška"
 expand = "Proširi"
 loading = "Učitavanje..."
 next = "Sljedeće"
+open = "Open"
 preview = "Pregled"
 previous = "Prethodno"
 refresh = "Osvježi"
 remaining = "Preostalo"
 retry = "Pokušaj ponovno"
 save = "Spremi"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Očisti odabrano"
@@ -3185,6 +3199,7 @@ title = "Metoda kompresije"
 [compress.settings]
 desiredSize = "Željena veličina datoteke"
 desiredSizePlaceholder = "Unesite veličinu"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Kompresija je jednostavan način smanjenja veličine datoteke. Odaberite Veličinu datoteke za unos ciljne veličine i da mi prilagodimo kvalitetu umjesto vas. Odaberite Kvaliteta za ručno postavljanje jačine kompresije."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF opcije"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Najprije odaberite izvorni format"
 settings = "Postavke"
 single = "Jedan"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Pretraži..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Uredi"
@@ -3824,11 +3861,13 @@ shareSelected = "Podijeli odabrano"
 sharing = "Dijeljenje"
 showAll = "Prikaži sve"
 showHistory = "Prikaži povijest"
+sortBy = "Sort files"
 sortByDate = "Sortiraj po datumu"
 sortByName = "Sortiraj po imenu"
 sortBySize = "Sortiraj po veličini"
 storage = "Spremište"
 storageState = "Pohrana"
+storageUsed = "Storage used"
 synced = "Sinkronizirano"
 title = "Otpremi PDF datoteke"
 toolChain = "Primijenjeni alati"
@@ -3874,8 +3913,12 @@ addFiles = "Dodaj datoteke"
 addingFiles = "Dodavanje datoteka…"
 collapse = "Sažmi bočnu traku"
 customizeGroups = "Prilagodi grupe"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Otvorite datoteke za početak"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Proširi bočnu traku"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nije konfiguriran"
@@ -3888,15 +3931,17 @@ openFromComputer = "Otvori s računala"
 openSettings = "Otvori postavke"
 other = "Ostalo"
 recent = "Nedavno"
-search = "Pretraži"
-searchPlaceholder = "Pretraži datoteke..."
 viewAll = "Prikaži svih {{count}} datoteka"
 
 [fileSidebar.fileItem]
 closeViewer = "Zatvori preglednik"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Otvori u pregledniku"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Vrati na zadane vrijednosti"
 subtitle = "Grupirajte svoje datoteke u nadređene kategorije. Dodajte postojeće ili nove oznake u kategoriju, preimenujte je ili stvorite vlastitu. Datoteke koje nisu ni u jednoj od vaših kategorija prikazuju se pod “Ostalo”."
 title = "Kategorije bočne trake"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Dodaj u radni prostor"
 addToWorkspaceCount = "Dodaj {{count}} u radni prostor"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Natrag na Moje datoteke"
 breadcrumbs = "Putanja mape"
 cancel = "Odustani"
 classification = "Klasifikacija"
-clearSearch = "Očisti pretragu"
 clearSelection = "Poništi odabir"
 closeDetails = "Zatvori detalje"
 create = "Stvori"
@@ -3950,6 +4002,7 @@ downloadAll = "Preuzmi sve"
 downloadVersion = "Preuzmi ovu verziju"
 dropOverlay = "Ispusti datoteke za prijenos"
 dropOverlaySub = "Datoteke započinju u Lokalno. Upotrijebite 'Premjesti u' ili 'Spremi u oblak' da ih organizirate u mapu."
+duplicate = "Duplicate"
 file = "Datoteka"
 fileInfo = "File info"
 fileMenu = "Radnje nad datotekom"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Promijeni veličinu stabla mapa (strelice, Shift za veće ko
 save = "Spremi"
 saveToServer = "Spremi na poslužitelj"
 saveToServerDisabledHint = "Spremanje na poslužitelj nije omogućeno na ovom poslužitelju. Zamolite administratora da to omogući."
-search = "Pretraži"
-searchPlaceholder = "Pretraži ovu mapu i podmape"
 selectAll = "Odaberi sve"
 selectAllHint = "Kliknite za odabir svega. Savjet: držite Ctrl (ili Cmd) za dodavanje datoteka jednu po jednu, Shift za odabir raspona."
 selectedCount = "{{count}} odabrano"
@@ -4044,6 +4095,10 @@ title = "Još nema datoteka u oblaku"
 hint = "Datoteke spremljene bez prijenosa ostaju ovdje. Ispustite datoteku da biste je dodali."
 title = "Nema lokalnih datoteka"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Datoteke koje otvorite ili uredite pojavit će se ovdje."
 title = "Još ništa nije izmijenjeno"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Nije moguće izbrisati mapu."
 deleteFolderFailedDetail = "Nije moguće izbrisati mapu: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nije moguće ažurirati izgled mape."
 folderAppearanceFailedDetail = "Nije moguće ažurirati izgled mape: {{message}}"
 moveFilesFailed = "Nije moguće premjestiti datoteke."
@@ -4113,6 +4170,11 @@ localHint = "Pohranjeno samo u ovom pregledniku"
 shared = "Dijeljeno"
 sharedHint = "Podijeljeno s vama putem veze"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Najstarije prvo"
 modifiedDesc = "Najnovije prvo"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Nema datoteka u pohrani. Najprije otvorite neke datoteke
 open = "Otvori"
 openFile = "Otvori datoteku"
 openFiles = "Otvori datoteke"
+selectFile = "Select {{name}}"
 selectFromStorage = "Odaberite iz spremišta"
 upload = "Otpremi"
 uploadFile = "Otpremi datoteku"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Sve spremljeno"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Izdvajanje CSV-a nije uspjelo"
 extractXlsxError = "Izdvajanje XLSX-a nije uspjelo"
+filled = "filled"
 flattenAfterFilling = "Izravnaj nakon ispunjavanja"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obv"
 requiredFieldsError = "Ispunite sva obavezna polja"
 rescanFields = "Ponovno skeniraj polja"
@@ -4795,9 +4863,6 @@ title = "Slika u PDF"
 [imageToPdf]
 tags = "konverzija,pretvaranje,img,jpg,slika,foto"
 
-[infoBanner]
-dismiss = "Odbaci"
-
 [invite]
 acceptError = "Neuspjelo stvaranje računa"
 accountFor = "Stvaranje računa za"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Otpremanje uspješno!"
 uploadSuccessMessage = "Vaše slike su prenesene."
 validating = "Provjera sesije..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Skenirajte za otpremu fotografija. Slike se automatski pretvaraju u PDF."
 descriptionNoConvert = "Skenirajte za otpremu fotografija s mobilnog uređaja."
@@ -4997,8 +5090,13 @@ title = "Otpremanje s mobitela"
 tags = "Višestruki alat, više operacija, korisničko sučelje, povlačenje klikom, prednji kraj, strana klijenta, interaktivno, nepopravljivo, pomicanje"
 title = "PDF Višenamjenski alat"
 
-[navbar]
-search = "Pretraži"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentikacija nije bila uspješna. Možete zatvoriti ovaj prozor i pokušati ponovno."
@@ -5127,6 +5225,7 @@ activeFiles = "Prikaz <strong>Aktivne datoteke</strong> pokazuje sve PDF-ove koj
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Zatvori"
 cropSettings = "Sada kada smo odabrali datoteku koju želimo obrezati, možemo konfigurirati alat Obrezivanje i odabrati područje na koje želimo obrezati PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Klikom na jednu od datoteka odabirete je za obradu. Možete odabrati više datoteka za skupne radnje."
 fileReplacement = "Izmijenjena datoteka automatski će zamijeniti izvornu datoteku na Radnoj ploči, što vam omogućuje da je lako proslijedite kroz još alata."
 filesButton = "Gumb <strong>Datoteke</strong> na traci brzog pristupa omogućuje učitavanje PDF-ova na koje ćete primijeniti alate."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF u PDF/A"
 tags = "arhiva,dugoročno,standardno,konverzija,čuvanje,čuvanje"
 title = "PDF u PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "tisak,standard,pretvorba,produkcija,priprema za tisak,arhiva"
 title = "PDF u PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kredita"
 xsmall = "100 kredita"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Odaberite plan koji odgovara vašim potrebama"
 title = "Dostupni planovi"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Dosegnuto je mjesečno ograničenje potrošnje"
 title = "Nije moguće otvoriti Stripe portal"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "od {{allowance}} besplatnih PDF-ova iskorišteno"
 capSuffix_other = "od {{allowance}} besplatnih PDF-ova iskorišteno"
 eyebrow = "Probno razdoblje za Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Pošaljite dokument ili obavijest emailom kada se pravilo pokrene."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Spremite obrađene dokumente u Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Službeni SDK-ovi"
 beta = "Beta"
 deprecated = "Zastarjelo"
 
-[portal.docs.search]
-empty = "Nema odgovarajuće dokumentacije"
-placeholder = "Pretraži dokumentaciju"
-results = "{{count}} rezultata"
-
 [portal.docs.skills]
 eyebrow = "VJEŠTINE"
 lead = "Ugrađene, imenovane sposobnosti koje vaš agent poziva kao jedan alat. Svaka vještina je deterministički lanac operacija s priloženim evaluacijama."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Nijedan dokument ne odgovara ovom filtru."
 rowActions = "Radnje retka"
 sensitiveLabel = "Osjetljivo"
-sensitiveTitle = "Osjetljivo — potreban je pristup"
 
 [portal.documents.table.columns]
 action = "Pipeline / Radnja"
 document = "Dokument"
+labels = "Labels"
 product = "Proizvod"
 status = "Status"
 time = "Vrijeme"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Zadnji put viđeno"
 region = "Regija"
 status = "Status"
+target = "Target"
 version = "Verzija"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Ovaj prikaz naišao je na neočekivanu pogrešku. Pokušajte pono
 retry = "Pokušaj ponovno"
 title = "Nešto je pošlo po zlu na ovoj stranici"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Natrag"
 body = "Preuzmite desktop aplikaciju ili samostalno hostirajte poslužitelj."
@@ -7380,11 +7560,6 @@ cancel = "Odustani"
 confirm = "Opozovi ključ"
 title = "Opozovi API ključ"
 
-[portal.infrastructure.attestationLabel]
-attested = "Potvrđeno"
-inScope = "U opsegu"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtriraj revizijske događaje prema kategoriji"
 heading = "Revizijski zapisi"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Uspjeh"
 warning = "Upozorenje"
 
-[portal.infrastructure.certLabel]
-certified = "Certificirano"
-inProgress = "U tijeku"
-notStarted = "Nije započeto"
-
 [portal.infrastructure.createKey]
 cancel = "Odustani"
 createKey = "Izradi ključ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopirajte ovu tajnu sada — neće se ponovno prikazati."
 title = "Izradi API ključ"
 titleCreated = "Ključ izrađen"
 
-[portal.infrastructure.deployLabel]
-live = "Aktivno"
-queued = "U redu čekanja"
-rolledBack = "Vraćeno"
-rolling = "Uvođenje u tijeku"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Implementirao"
-environment = "Okruženje"
-product = "Proizvod"
-status = "Status"
-version = "Verzija"
-when = "Kada"
-
-[portal.infrastructure.deployments.recent]
-heading = "Nedavne implementacije"
-subheading = "Najnovija uvođenja kroz proizvode i okruženja."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instance"
-latency = "Latencija"
-load = "Opterećenje"
-p99 = "P99"
-region = "Regija"
-status = "Status"
-throughput = "Propusnost"
-uptime = "Vrijeme rada"
-version = "Verzija"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regije"
-subheading = "Živo zdravlje za svaku implementiranu Stirling regiju — latencija, opterećenje i verzija uvođenja."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Implementirane regije pojavit će se ovdje nakon što vaš radni prostor bude provisioniran."
-title = "Nema implementiranih regija"
-
 [portal.infrastructure.keyLabel]
 active = "Aktivno"
 revoked = "Opozvano"
 
-[portal.infrastructure.modelLabel]
-active = "Aktivno"
-degraded = "Smanjena učinkovitost"
-disabled = "Onemogućeno"
-
-[portal.infrastructure.models]
-heading = "Modeli"
-msValue = "{{value}} ms"
-subheading = "Katalog modela i usmjeravanje koje pokreće obradu dokumenata u vašem radnom prostoru."
-
-[portal.infrastructure.models.byom]
-description = "Registrirajte on-prem ili samostalno hostani model i vežite ga uz regiju za obradu vezanu uz rezidenciju podataka."
-title = "Donesite vlastiti model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Upravljani modeli dostupni vašem radnom prostoru, s latencijom i troškom uživo."
-subEnterprise = "Upravljani, vlastiti i on-prem modeli — s dostupnim vezivanjem po regiji."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modeli u katalogu vašeg radnog prostora pojavit će se ovdje."
-title = "Nema dostupnih modela"
-
-[portal.infrastructure.models.columns]
-cost = "Trošak"
-latency = "Latencija"
-load = "Opterećenje"
-model = "Model"
-status = "Status"
-type = "Vrsta"
-version = "Verzija"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/poziv"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktivni modeli"
-avgLatency = "Prosj. latencija"
-included = "Uključeno"
-monthlySpend = "Mjesečna potrošnja za modele"
-
-[portal.infrastructure.models.routing]
-empty = "Nema konfiguriranih pravila usmjeravanja."
-heading = "Pravila usmjeravanja"
-sub = "Koji model obrađuje svaku operaciju. Zadano se primjenjuje kada ne odgovara nijedno uže pravilo."
-subLocked = "Usmjerite operacije na određene modele — dostupno na plaćenim planovima."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Nadogradite na Pro kako biste kontrolirali koji model obrađuje svaku operaciju i vrstu dokumenta."
-title = "Usmjeravanje modela je plaćena značajka"
-
-[portal.infrastructure.models.routingColumns]
-default = "Zadano"
-docType = "Vrsta dokumenta"
-modelForAria = "Model za {{operation}}"
-operation = "Operacija"
-routedTo = "Usmjereno na"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasifikacija"
-extraction = "Izdvajanje"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Smanjena učinkovitost"
-down = "Nedostupno"
-healthy = "Ispravno"
-
-[portal.infrastructure.security.access.byok]
-description = "Dostavite ključ iz vlastitog KMS. Stirling njime šifrira, ali i dalje može čitati."
-label = "Koristite vlastiti ključ (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ključevi nikada ne napuštaju vaš KMS. Stirling drži samo šifrirani tekst."
-label = "Držite vlastiti ključ (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling upravlja ključevima za šifriranje. Najjednostavnije — bez operacija s ključevima s vaše strane."
-label = "Ključevi koje drži Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Pravilo pristupa dokumentima"
-subheading = "Kontrolira tko može dešifrirati obrađene dokumente u mirovanju."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestacije usklađenosti"
-noReport = "Nema dostupnog izvješća"
-subheading = "Revizijski položaj po okvirima, s izvješćima dostupnima za atestirane kontrole."
-viewReport = "Prikaži izvješće →"
-
-[portal.infrastructure.security.compliance]
-heading = "Usklađenost"
-subheading = "Atestacije i certifikati koji pokrivaju Stirling platformu."
-
-[portal.infrastructure.security.empty]
-description = "Sigurnosna konfiguracija vašeg radnog prostora pojavit će se ovdje."
-title = "Sigurnosni položaj nije dostupan"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Uz HYOK, ključevi za šifriranje nikada ne napuštaju vaš KMS. Stirling pohranjuje i obrađuje samo šifrirani tekst koji možete opozvati u bilo kojem trenutku."
-title = "Stirling ne može dešifrirati vaše dokumente"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nema konfiguriranih IP raspona — sve IP adrese su dopuštene."
-heading = "IP allowlista"
-sub = "API pristup ograničen je na ove CIDR raspone."
-subLocked = "Ograničite API pristup na poznate IP raspone — dostupno na plaćenim planovima."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Nadogradite na Pro kako biste ograničili API pristup na određene mreže."
-title = "IP allowlista je plaćena značajka"
-
-[portal.infrastructure.security.ipColumns]
-added = "Dodano"
-addedBy = "Dodao"
-cidr = "CIDR"
-label = "Oznaka"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritam"
-heading = "Upravljanje ključevima za šifriranje"
-keyId = "Identifikator ključa"
-lastRotated = "Zadnja rotacija"
-rotateKey = "Rotiraj ključ"
-rotationPolicy = "Pravilo rotacije"
-subheading = "Skrbništvo nad ključevima koji šifriraju dokumente u mirovanju — tko može dešifrirati i kako se ključevi rotiraju."
-
-[portal.infrastructure.security.managedBanner]
-description = "Skrbništvo Bring-your-own-key (BYOK) i hold-your-own-key (HYOK) dostupno je na Enterprise planu. Nadogradite kako biste dostavili ključeve iz vlastitog KMS."
-title = "Ključevima na vašem planu upravlja Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Azija i Pacifik"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR granica podataka"
-label = "Europska unija"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Sjedinjene Američke Države"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Rezidencija podataka"
-subheading = "Gdje se dokumenti pohranjuju i obrađuju."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} iskorišteno"
-
-[portal.infrastructure.storage.empty]
-description = "Povezana pohrana i korištenje pojavit će se ovdje."
-title = "Nema konfigurirane pohrane"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktivno"
-activeRange = "0–{{value}}d"
-archived = "Arhivirano"
-coldStorage = "hladna pohrana"
-deleted = "Izbrisano"
-never = "nikad"
-purged = "trajno izbrisano"
-
-[portal.infrastructure.storage.providers]
-connect = "Poveži"
-connected = "Povezano"
-heading = "Povezani pružatelji"
-subheading = "Gdje se zapisuju obrađeni artefakti."
-
-[portal.infrastructure.storage.retention]
-heading = "Zadržavanje"
-subheading = "Koliko se dugo artefakti čuvaju prije brisanja u životnom ciklusu."
-windowLabel = "Zadani prozor zadržavanja"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dan"
-days_other = "{{count}} dana"
-never = "Nikad ne briši"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Ukupno korištenje"
-progressLabel = "Iskorištena pohrana"
-subheading = "Pohrana iskorištena kroz sve povezane pružatelje."
-
 [portal.infrastructure.tabs]
 apiKeys = "API ključevi"
 audit = "Revizijski zapisi"
@@ -7715,11 +7657,9 @@ security = "Sigurnost"
 storage = "Pohrana"
 
 [portal.integrations]
-addAnother = "Dodaj još jednu"
 availableHeading = "Dostupno"
 comingSoonHeading = "Uskoro"
 connect = "Poveži"
-connectedHeading = "Povezano"
 connectionCount_one = "{{count}} veza"
 connectionCount_other = "{{count}} veza"
 customApi = "Prilagođeni API"
@@ -7737,6 +7677,10 @@ security = "Sigurnost"
 signing = "Potpisivanje"
 storage = "Pohrana"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Povezano"
 
@@ -7767,7 +7711,6 @@ integrations = "Integracije"
 pipelines = "Pipelineovi"
 policies = "Pravila"
 procurement = "Nabava"
-settings = "Postavke"
 sources = "Izvori"
 usage = "Korištenje i naplata"
 users = "Korisnici"
@@ -7784,7 +7727,7 @@ title = "Pipelineovi"
 newPipeline = "Novi pipeline"
 
 [portal.pipelines.builder]
-addStep = "Dodaj alat"
+activate = "Activate"
 back = "Natrag na pipelineove"
 cannotFollow = "Ne može primiti {{produced}}"
 chooseAccount = "Odaberite račun"
@@ -7792,28 +7735,38 @@ chooseDestination = "Odaberite odredište"
 chooseOperation = "Odaberite što ovaj korak radi"
 chooseSource = "Odaberite izvor"
 discard = "Odbaci promjene"
-enabled = "Omogućeno"
 inputs = "Ulaz"
 inputSource = "Ulazni izvor"
 inputTrigger = "Okidač"
 keepEditing = "Nastavi uređivati"
+moreActions = "More actions"
 needsConfiguring = "Potrebno je postavljanje"
-needsUpload = "Potrebna je učitana datoteka"
-noSources = "Još nema povezanih izvora. Izradite jedan da biste ga koristili kao ulaz."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nijedan alat ne odgovara vašem pretraživanju."
-pipelineSettings = "Postavke pipelinea"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Pretraži alate"
-selectToolBody = "Dodajte alat za izradu pipelinea."
-selectToolTitle = "Još nema alata"
 sendToSystem = "Pošalji u drugi sustav"
 stepsIncompatible = "Ovi se koraci ne mogu pokrenuti na onome što proizvodi njihov prethodni korak: {{tools}}."
 stepsNeedSetup = "Ove korake još treba postaviti prije spremanja: {{tools}}."
-toolSettings = "Postavke alata"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Neprepoznata operacija, zadržana takva kakva jest."
 unsavedBody = "Imate nespremljene promjene. Spremiti ih prije odlaska ili ih odbaciti?"
 unsavedTitle = "Nespremljene promjene"
-uploadUnsupported = "Učitane datoteke još nisu podržane u pipelineovima, pa se ovi koraci ne mogu spremiti: {{tools}}."
 usesDefaults = "Pokreće se sa zadanim postavkama"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinira svaku datoteku iz prethodnog koraka"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nije moguće provjeriti što ovaj korak prihvaća"
 
 [portal.pipelines.composer]
 addTool = "Dodaj alat"
-cancel = "Odustani"
-chainEmpty = "Dodajte alat za početak izrade pipelinea."
 create = "Izradi pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Prikaz ovih parametara alata za uređivanje još nije podržan."
-moveDown = "Pomakni dolje"
-moveUp = "Pomakni gore"
+editSource = "Edit source"
 name = "Naziv"
 namePlaceholder = "npr. Pregled redakcija"
 noToolSettings = "Ovaj alat nema konfigurabilnih postavki."
-operations_one = "Operacija ({{count}})"
-operations_other = "Operacije ({{count}})"
 output = "Izlaz"
-removeStep = "Ukloni operaciju"
 save = "Spremi promjene"
 scheduleEvery = "Pokreni svakih"
-sources = "Izvori"
-sourcesLoading = "Učitavanje izvora..."
 trigger = "Okidač"
 triggerManual = "Samo ručno"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dana"
 hours = "sati"
 minutes = "minuta"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Izbrisati \"{{name}}\"? Ovo se ne može poništiti."
 cancel = "Odustani"
@@ -7867,6 +7825,37 @@ connectSource = "Poveži izvor"
 description = "Izradite svoj prvi pipeline: odaberite izvore nad kojima se pokreće, povežite operacije i odaberite kamo ide izlaz."
 title = "Još nema pipelineova"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktivno"
 paused = "Pauzirano"
@@ -7879,7 +7868,6 @@ completed_one = "Pokretanje dovršeno."
 completed_other = "Svih {{count}} pokretanja je dovršeno."
 empty = "Nema ništa za pokretanje: izvori nisu imali dokumente za obradu."
 failed = "Pokretanje nije uspjelo: {{error}}"
-historyCleared = "Povijest je očišćena. Sljedeće pokretanje ponovno obrađuje sve što je trenutačno u izvorima."
 inFlight = "Nema ničeg novog za pokretanje: dokumenti se još obrađuju iz ranijeg pokretanja."
 parked_one = "Nema ničega za pokretanje: {{count}} dokument prethodno nije uspio i parkiran je. Ispravite uzrok, zatim očistite povijest da biste ga ponovno pokušali obraditi."
 parked_other = "Nema ničega za pokretanje: {{count}} dokumenata prethodno nije uspjelo i parkirano je. Ispravite uzrok, zatim očistite povijest da biste ih ponovno pokušali obraditi."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Izvori"
 status = "Status"
 steps = "Koraci"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Nadzor mape"
@@ -8209,6 +8198,24 @@ label = "Priloži na Jira zadatak"
 description = "Šalje obrađeni dokument kao privitak."
 label = "Pošalji dokument emailom (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Zapisuje obrađeni dokument u mapu."
 label = "Prenesi na Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Dosegnut maksimum"
 subtitle = "Vaše besplatno probno razdoblje traje do {{date}}. Kartica nije potrebna."
 title = "Enterprise probno razdoblje"
 
-[portal.search]
-ariaLabel = "Pretraživanje"
-placeholder = "Pretražite Stirling — endpoints, pipelines, dokumente…"
-
-[portal.search.empty]
-noActionsDescription = "Brze radnje pojavit će se ovdje kada budu dostupne."
-noActionsTitle = "Nema brzih radnji"
-noMatches = "Nema podudaranja za \"{{query}}\""
-noMatchesDescription = "Pokušajte s drugom ključnom riječi ili pregledajte katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Odustani"
 confirm = "Izbriši"
 title = "Izbrisati izvor?"
 
-[portal.sources.empty]
-description = "Povežite mapu (a uskoro i cloud storage) kako bi vaša pravila imala odakle povlačiti dokumente."
-title = "Još nema povezanih izvora"
-
 [portal.sources.kpi]
 inUse = "U upotrebi"
 total = "Veze"
@@ -8785,6 +8778,7 @@ unused = "Neiskorišteno"
 documents = "Dokumenti"
 source = "Izvor"
 status = "Status"
+type = "Type"
 usedBy = "Pravila"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Pravila i privatnost"
 [settings.preferences]
 title = "Preferencije"
 
-[settings.search]
-placeholder = "Pretraži stranice postavki..."
-
 [settings.security]
 description = "Ažurirajte svoju lozinku kako biste osigurali račun."
 title = "Sigurnost"
@@ -10128,6 +10119,7 @@ last = "Zadnja stranica"
 maintainRatio = "Uključi/isključi održavanje omjera"
 next = "Sljedeća stranica"
 noSavedSigs = "Nema sacuvanih potpisa pronađenih"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Osobni potpisi"
 previous = "Prethodna stranica"
 redo = "Ponovi"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Uklanjanje pozadine nije uspjelo"
 hint = "Učitajte PNG ili JPG sliku svojega potpisa"
 label = "Učitaj sliku potpisa"
 placeholder = "Odaberite slikovnu datoteku"
+previewAlt = "Current image signature"
 processing = "Obrada slike..."
 removeBackground = "Ukloni bijelu pozadinu (učini prozirnom)"
 
@@ -10179,6 +10172,17 @@ saved = "Odaberite spremljeni potpis iznad, zatim kliknite bilo gdje na PDF da b
 text = "Nakon što iznad unesete svoje ime, kliknite bilo gdje na PDF-u da postavite svoj potpis."
 title = "Kako dodati potpis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Pomakni potpis"
 pause = "Pauziraj postavljanje"
@@ -10625,6 +10629,23 @@ title = "Prenesi na poslužitelj"
 updateButton = "Ažuriraj na poslužitelju"
 uploadButton = "Prenesi na poslužitelj"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Vrati se"
 pdfTools = "PDF alati"
 placeholder = "Odaberite alat za početak"
 premiumFeature = "Premium značajka:"
-searchTools = "Pretraži alate"
 toolsHeader = "Alati"
 viewAllTools = "Prikaži sve alate"
 
@@ -10822,6 +10842,9 @@ removal = "Uklanjanje"
 signing = "Potpisivanje"
 verification = "Provjera"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nije pronađen nijedan alat"
 noTools = "Nema dostupnih alata"
@@ -10979,6 +11002,13 @@ approver = "Odobrava pravilo"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Otkazati pozivnicu za {{email}}? Neće se moći pridružiti putem trenutačne poveznice."
 cancelInviteTitle = "Otkaži pozivnicu"
@@ -10998,10 +11028,8 @@ title = "Još nema članova"
 addToTeam = "Dodaj u tim"
 guestCount = "{{count}} gost"
 guests = "Gosti"
-guestsDesc = "Vanjski suradnici, ograničeni na ono što ste podijelili. Samo Editor."
 ledBy = "vodi {{owner}}"
 org = "Organizacija"
-orgDesc = "Vlasnici s ovlastima na razini organizacije i odobravanjem pravila"
 owners = "{{count}} vlasnik"
 team = "{{name}} tim"
 teamMeta = "{{count}} osoba"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Poziv poslao/la {{who}}"
 cancel = "Otkaži"
-count = "{{count}} na čekanju"
-desc = "Pozvane osobe koje se još nisu pridružile. Zauzimaju mjesto dok ne prihvate."
 expiresInDays_one = "Istječe za {{count}} dan"
 expiresInDays_other = "Istječe za {{count}} dana"
 expiresToday = "Istječe danas"
 title = "Pozivnice na čekanju"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Nešto je pošlo po zlu pri povezivanju s pozadinskim sustavom ili nemate pristup. Pokušajte ponovno."
 title = "Nije moguće učitati članove"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Pretraži priloge"
 title = "Prilozi"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Naslov knjižne oznake"
 bookmarkTitleRequired = "Naslov knjižne oznake je obavezan"
 closeSidebar = "Zatvori bočnu traku knjižnih oznaka"
 collapseAll = "Sažmi sve knjižne oznake"
+empty = "No bookmarks in this document"
 expandAll = "Proširi sve knjižne oznake"
 searchPlaceholder = "Pretraži knjižne oznake"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Dodaj komentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Pronađi u dokumentu"
 moreActions = "Više radnji"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Stranica {{page}}"
 placingHint = "Kliknite stranicu za postavljanje… (odustani)"
 removeCommentOnly = "Ukloni samo komentar"
 saveReply = "Spremi odgovor"
+searchPlaceholder = "Search comments"
 title = "Komentari"
 typeComment = "Komentar"
 typeInsertText = "Umetni tekst"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Imate nespremljene promjene"
 closeSidebar = "Zatvori bočnu traku slojeva"
 hideAll = "Sakrij sve slojeve"
 showAll = "Prikaži sve slojeve"
+title = "Layers"
 
 [viewer.link]
 delete = "Izbriši poveznicu"
@@ -11646,6 +11682,7 @@ exitRedaction = "Izađi iz načina zatamnjivanja"
 exportAll = "Izvezi PDF"
 exportSelected = "Izvezi odabrane stranice"
 formFill = "Ispuni obrazac"
+hideToolbar = "Hide toolbar"
 multiTool = "Višenamjenski alat"
 panMode = "Način pomicanja"
 print = "Ispis PDF-a"
@@ -11666,6 +11703,7 @@ selectAll = "Odaberi sve"
 selectByNumber = "Odaberi po brojevima stranica"
 selectLanguage = "Odaberi jezik"
 share = "Dijeli"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Uključi/isključi vidljivost anotacija"
 toggleAttachments = "Uključi/isključi privitke"
 toggleBookmarks = "Uključi/isključi oznake"
diff --git a/frontend/editor/public/locales/hu-HU/translation.toml b/frontend/editor/public/locales/hu-HU/translation.toml
index 30f75b7b72..cebcbeb964 100644
--- a/frontend/editor/public/locales/hu-HU/translation.toml
+++ b/frontend/editor/public/locales/hu-HU/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "ABC"
 apply = "Alkalmaz"
 applyAndContinue = "Mentés és kilépés"
-areYouSure = "Biztosan elhagyja az oldalt?"
 back = "Vissza"
 black = "Fekete"
 blue = "Kék"
@@ -106,6 +105,7 @@ undoSuccess = "A művelet sikeresen visszavonva"
 unknown = "Ismeretlen"
 unpin = "Rögzítés feloldása (csere az eszköz futtatása után)"
 unsavedChanges = "Mentetlen változtatásai vannak a PDF-en."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Mentetlen változtatások"
 unsupported = "Nem támogatott"
 username = "Felhasználónév"
@@ -1879,6 +1879,9 @@ width = "Szélesség"
 [app]
 description = "Az ingyenes Adobe Acrobat alternatíva (10M+ letöltés)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Átalakítás PDF/A-3b formátumba"
 convertToPdfA3bDescription = "Beágyazott mellékleteket tartalmazó archiválási PDF-et hoz létre"
@@ -2933,12 +2936,16 @@ text = "Ezeket a jogosultságokat tegye megváltoztathatatlanná a \"Jelszó hoz
 [chat.actions]
 copy = "Üzenet másolása"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling ügynök beállításai"
+assistant = "AI Assistant"
 clearChat = "Csevegés törlése"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Ez a művelet a felhőkrediteket használja"
 tooltip = "Szín kiválasztása a képernyőről"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Szín kiválasztása"
 
 [common]
+actions = "Actions"
 back = "Vissza"
 cancel = "Mégse"
 close = "Bezárás"
+codeSample = "Code sample"
 collapse = "Összecsukás"
 confirm = "Megerősítés"
 continue = "Folytatás"
 copied = "Másolva!"
 copy = "Másolás"
 done = "Kész"
+enterValue = "Enter value"
 error = "Hiba"
 expand = "Kibontás"
 loading = "Betöltés..."
 next = "Következő"
+open = "Open"
 preview = "Előnézet"
 previous = "Előző"
 refresh = "Frissítés"
 remaining = "Hátralévő"
 retry = "Újra"
 save = "Mentés"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Kijelöltek törlése"
@@ -3185,6 +3199,7 @@ title = "Tömörítési mód"
 [compress.settings]
 desiredSize = "Kívánt fájlméret"
 desiredSizePlaceholder = "Méret megadása"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "A tömörítés egyszerű módja a fájlméret csökkentésének. Válassza a Fájlméret lehetőséget a célméret megadásához, és mi ehhez igazítjuk a minőséget. Válassza a Minőség lehetőséget a tömörítés erősségének kézi beállításához."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF beállítások"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Először válasszon forrásformátumot"
 settings = "Beállítások"
 single = "Egyetlen"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Keresés..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Szerkesztés"
@@ -3824,11 +3861,13 @@ shareSelected = "Kijelöltek megosztása"
 sharing = "Megosztás"
 showAll = "Összes megjelenítése"
 showHistory = "Előzmények megjelenítése"
+sortBy = "Sort files"
 sortByDate = "Rendezés dátum szerint"
 sortByName = "Rendezés név szerint"
 sortBySize = "Rendezés méret szerint"
 storage = "Tárhely"
 storageState = "Tárhely"
+storageUsed = "Storage used"
 synced = "Szinkronizálva"
 title = "PDF fájlok feltöltése"
 toolChain = "Alkalmazott eszközök"
@@ -3874,8 +3913,12 @@ addFiles = "Fájlok hozzáadása"
 addingFiles = "Fájlok hozzáadása…"
 collapse = "Oldalsáv összecsukása"
 customizeGroups = "Csoportok testreszabása"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "A kezdéshez nyisson meg fájlokat"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Oldalsáv kinyitása"
 googleDrive = "Google Drive"
 googleDriveDisabled = "A Google Drive nincs beállítva"
@@ -3888,15 +3931,17 @@ openFromComputer = "Megnyitás a számítógépről"
 openSettings = "Beállítások megnyitása"
 other = "Egyéb"
 recent = "Legutóbbi"
-search = "Keresés"
-searchPlaceholder = "Fájlok keresése..."
 viewAll = "Mind a(z) {{count}} fájl megtekintése"
 
 [fileSidebar.fileItem]
 closeViewer = "Megjelenítő bezárása"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Megnyitás a megjelenítőben"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Alapértelmezések visszaállítása"
 subtitle = "Csoportosítsa fájljait szülőkategóriákba. Adjon meglévő vagy új címkéket egy kategóriához, nevezze át, vagy hozzon létre sajátot. Azok a fájlok, amelyek egyik kategóriájába sem tartoznak, az „Egyéb” alatt jelennek meg."
 title = "Oldalsáv kategóriái"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Hozzáadás a munkaterülethez"
 addToWorkspaceCount = "{{count}} hozzáadása a munkaterülethez"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Vissza a Saját fájlokhoz"
 breadcrumbs = "Mappaútvonal"
 cancel = "Mégse"
 classification = "Besorolás"
-clearSearch = "Keresés törlése"
 clearSelection = "Kijelölés törlése"
 closeDetails = "Részletek bezárása"
 create = "Létrehozás"
@@ -3950,6 +4002,7 @@ downloadAll = "Összes letöltése"
 downloadVersion = "E verzió letöltése"
 dropOverlay = "Húzza ide a fájlokat a feltöltéshez"
 dropOverlaySub = "A fájlok a Helyi fülön jelennek meg. Használja az 'Áthelyezés' vagy a 'Mentés felhőbe' lehetőséget a mappába rendezéshez."
+duplicate = "Duplicate"
 file = "Fájl"
 fileInfo = "File info"
 fileMenu = "Fájlműveletek"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Mappafa átméretezése (nyilak, Shift a nagyobb lépésekhe
 save = "Mentés"
 saveToServer = "Mentés a szerverre"
 saveToServerDisabledHint = "A mentés a szerverre ezen a szerveren nincs engedélyezve. Kérje meg az adminisztrátort, hogy engedélyezze."
-search = "Keresés"
-searchPlaceholder = "Keresés ebben a mappában és almappáiban"
 selectAll = "Összes kijelölése"
 selectAllHint = "Kattintson az összes kijelöléséhez. Tipp: tartsa lenyomva a Ctrl-t (vagy Cmd-et) az egyenkénti hozzáadáshoz, a Shiftet a tartomány kijelöléséhez."
 selectedCount = "{{count}} kijelölve"
@@ -4044,6 +4095,10 @@ title = "Még nincsenek felhőfájlok"
 hint = "A feltöltés nélkül mentett fájlok itt maradnak. Húzzon ide egy fájlt a hozzáadáshoz."
 title = "Nincsenek csak helyi fájlok"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Az Ön által megnyitott vagy szerkesztett fájlok itt jelennek meg."
 title = "Még semmi sem módosult"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Nem sikerült a mappát törölni."
 deleteFolderFailedDetail = "Nem sikerült törölni a mappát: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nem sikerült módosítani a mappa megjelenését."
 folderAppearanceFailedDetail = "Nem sikerült módosítani a mappa megjelenését: {{message}}"
 moveFilesFailed = "Nem sikerült áthelyezni a fájlokat."
@@ -4113,6 +4170,11 @@ localHint = "Csak ebben a böngészőben tárolva"
 shared = "Megosztott"
 sharedHint = "Önnel linken keresztül megosztva"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Legrégebbi elöl"
 modifiedDesc = "Legújabb elöl"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Nincsenek fájlok a tárhelyen. Először nyisson meg n
 open = "Megnyitás"
 openFile = "Fájl megnyitása"
 openFiles = "Fájlok megnyitása"
+selectFile = "Select {{name}}"
 selectFromStorage = "Kiválasztás a tárhelyről"
 upload = "Feltöltés"
 uploadFile = "Fájl feltöltése"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Minden mentve"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV kinyerése sikertelen"
 extractXlsxError = "XLSX kinyerése sikertelen"
+filled = "filled"
 flattenAfterFilling = "Kitöltés után lapítás"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "kötelező"
 requiredFieldsError = "Kérjük, töltse ki az összes kötelező mezőt"
 rescanFields = "Mezők újraolvasása"
@@ -4795,9 +4863,6 @@ title = "Kép PDF-be"
 [imageToPdf]
 tags = "konverzió,kép,jpg,fotó,fénykép"
 
-[infoBanner]
-dismiss = "Bezárás"
-
 [invite]
 acceptError = "Nem sikerült létrehozni a fiókot"
 accountFor = "Fiók létrehozása ehhez:"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Sikeres feltöltés!"
 uploadSuccessMessage = "A képei átkerültek."
 validating = "Munkamenet ellenőrzése..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Szkenneljen a fotók feltöltéséhez. A képek automatikusan PDF-be konvertálódnak."
 descriptionNoConvert = "Szkenneljen a fotók feltöltéséhez a mobileszközéről."
@@ -4997,8 +5090,13 @@ title = "Feltöltés mobilról"
 tags = "Többfunkciós eszköz,Több művelet,UI,húzd és ejtsd,frontend,kliens oldali,interaktív,kezelhető,mozgatás"
 title = "PDF többfunkciós eszköz"
 
-[navbar]
-search = "Keresés"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "A hitelesítés nem volt sikeres. Bezárhatja ezt az ablakot, és megpróbálhatja újra."
@@ -5127,6 +5225,7 @@ activeFiles = "Az <strong>Aktív fájlok</strong> nézet megmutatja az összes o
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Bezárás"
 cropSettings = "Most, hogy kiválasztottuk a vágandó fájlt, beállíthatjuk a Vágás eszközt, hogy megadjuk a PDF kivágandó területét."
+dialogLabel = "Onboarding"
 fileCheckbox = "Egy fájlra kattintva kijelöli azt feldolgozásra. Több fájlt is kijelölhet kötegelt műveletekhez."
 fileReplacement = "A módosított fájl automatikusan felülírja az eredetit a Munkaterületen, így könnyen további eszközökön futtathatja."
 filesButton = "A Gyors hozzáférés sávon lévő <strong>Fájlok</strong> gombbal tölthet fel PDF-eket az eszközök használatához."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF konvertálása PDF/A formátumba"
 tags = "archívum,hosszú távú,szabvány,konvertálás,tárolás,megőrzés"
 title = "PDF konvertálása PDF/A formátumba"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "nyomtatás,szabvány,átalakítás,gyártás,előnyomdai,archiválás"
 title = "PDF PDF/X-re"
@@ -6045,6 +6151,7 @@ small = "500 kredit"
 xsmall = "100 kredit"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Válassza ki az igényeinek megfelelő csomagot"
 title = "Elérhető csomagok"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Havi költési limit elérve"
 title = "Nem sikerült megnyitni a Stripe portált"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "felhasználva a(z) {{allowance}} ingyenes PDF-ből"
 capSuffix_other = "felhasználva a(z) {{allowance}} ingyenes PDF-ből"
 eyebrow = "Processor próbaidőszak"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Dokumentum vagy értesítés küldése emailben, amikor egy szabály fut."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Feldolgozott dokumentumok elhelyezése a Nextcloudban."
@@ -7077,11 +7211,6 @@ title = "Hivatalos SDK-k"
 beta = "Beta"
 deprecated = "Elavult"
 
-[portal.docs.search]
-empty = "Nincs egyező dokumentáció"
-placeholder = "Dokumentáció keresése"
-results = "{{count}} találat"
-
 [portal.docs.skills]
 eyebrow = "KÉSZSÉGEK"
 lead = "Csomagolt, névvel ellátott képességek, amelyeket az ügynöke egyetlen eszközként hív meg. Minden készség determinisztikus műveletlánc, csatolt evalokkal."
@@ -7180,11 +7309,11 @@ editorAction = "Szerkesztő"
 empty = "Egy dokumentum sem felel meg ennek a szűrőnek."
 rowActions = "Sorműveletek"
 sensitiveLabel = "Érzékeny"
-sensitiveTitle = "Érzékeny — hozzáférés szükséges"
 
 [portal.documents.table.columns]
 action = "Pipeline / művelet"
 document = "Dokumentum"
+labels = "Labels"
 product = "Termék"
 status = "Állapot"
 time = "Idő"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Utoljára látható"
 region = "Régió"
 status = "Állapot"
+target = "Target"
 version = "Verzió"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Ez a nézet váratlan hibába ütközött. Próbálja újra, vagy
 retry = "Próbálja újra"
 title = "Valami hiba történt ezen az oldalon"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Vissza"
 body = "Töltse le az asztali alkalmazást, vagy üzemeltesse saját maga a szervert."
@@ -7380,11 +7560,6 @@ cancel = "Mégse"
 confirm = "Kulcs visszavonása"
 title = "API-kulcs visszavonása"
 
-[portal.infrastructure.attestationLabel]
-attested = "Hitelesítve"
-inScope = "Hatókörben"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Audit események szűrése kategória szerint"
 heading = "Auditnaplók"
@@ -7456,11 +7631,6 @@ info = "Információ"
 success = "Sikeres"
 warning = "Figyelmeztetés"
 
-[portal.infrastructure.certLabel]
-certified = "Tanúsított"
-inProgress = "Folyamatban"
-notStarted = "Nincs elkezdve"
-
 [portal.infrastructure.createKey]
 cancel = "Mégse"
 createKey = "Kulcs létrehozása"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Másolja ki most ezt a titkot — többé nem jelenik meg."
 title = "API kulcs létrehozása"
 titleCreated = "Kulcs létrehozva"
 
-[portal.infrastructure.deployLabel]
-live = "Élő"
-queued = "Sorban áll"
-rolledBack = "Visszagörgetve"
-rolling = "Kiterítés folyamatban"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/perc"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Telepítette"
-environment = "Környezet"
-product = "Termék"
-status = "Állapot"
-version = "Verzió"
-when = "Mikor"
-
-[portal.infrastructure.deployments.recent]
-heading = "Legutóbbi telepítések"
-subheading = "A legújabb bevezetések termékek és környezetek szerint."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Példányok"
-latency = "Késleltetés"
-load = "Terhelés"
-p99 = "P99"
-region = "Régió"
-status = "Állapot"
-throughput = "Átbocsátás"
-uptime = "Üzemidő"
-version = "Verzió"
-
-[portal.infrastructure.deployments.regions]
-heading = "Régiók"
-subheading = "Élő állapot minden telepített Stirling régióhoz — késleltetés, terhelés és bevezetési verzió."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "A telepített régiók itt jelennek meg, amint a munkaterülete ki van építve."
-title = "Nincsenek telepített régiók"
-
 [portal.infrastructure.keyLabel]
 active = "Aktív"
 revoked = "Visszavonva"
 
-[portal.infrastructure.modelLabel]
-active = "Aktív"
-degraded = "Leromlott"
-disabled = "Letiltva"
-
-[portal.infrastructure.models]
-heading = "Modellek"
-msValue = "{{value}} ms"
-subheading = "A modellkatalógus és az útválasztás, amely a dokumentumfeldolgozást működteti a munkaterületén."
-
-[portal.infrastructure.models.byom]
-description = "Regisztráljon egy on-prem vagy self-hosted modellt, és rögzítse egy régióhoz adatrezidencia-kötött feldolgozáshoz."
-title = "Hozza saját modelljét"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalógus"
-sub = "A munkaterületéhez elérhető kezelt modellek élő késleltetéssel és költséggel."
-subEnterprise = "Kezelt, saját és on-prem modellek — régiónkénti rögzítéssel."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "A munkaterület katalógusában lévő modellek itt jelennek meg."
-title = "Nincsenek elérhető modellek"
-
-[portal.infrastructure.models.columns]
-cost = "Költség"
-latency = "Késleltetés"
-load = "Terhelés"
-model = "Modell"
-status = "Állapot"
-type = "Típus"
-version = "Verzió"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/hívás"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktív modellek"
-avgLatency = "Átlagos késleltetés"
-included = "Tartalmazza"
-monthlySpend = "Havi modellköltség"
-
-[portal.infrastructure.models.routing]
-empty = "Nincsenek konfigurált útválasztási szabályok."
-heading = "Útválasztási szabályok"
-sub = "Melyik modell kezeli az egyes műveleteket. Az alapértelmezett akkor érvényes, ha nincs szűkebb egyező szabály."
-subLocked = "Műveletek irányítása adott modellekhez — fizetős csomagokban érhető el."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Frissítsen Pro csomagra annak szabályozásához, hogy melyik modell kezelje az egyes műveleteket és dokumentumtípusokat."
-title = "A modellútválasztás fizetős funkció"
-
-[portal.infrastructure.models.routingColumns]
-default = "Alapértelmezett"
-docType = "Dokumentumtípus"
-modelForAria = "Modell ehhez: {{operation}}"
-operation = "Művelet"
-routedTo = "Ide irányítva"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Osztályozás"
-extraction = "Kinyerés"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Leromlott"
-down = "Nem elérhető"
-healthy = "Egészséges"
-
-[portal.infrastructure.security.access.byok]
-description = "Adjon meg egy kulcsot a saját KMS-éből. A Stirling ezzel titkosít, de továbbra is olvasni tud."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "A kulcsok soha nem hagyják el a KMS-ét. A Stirling csak titkosított szöveget tárol."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "A Stirling kezeli a titkosítási kulcsokat. A legegyszerűbb — nincs kulcsművelet az Ön oldalán."
-label = "Stirling által tárolt kulcsok"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Dokumentum-hozzáférési szabályzat"
-subheading = "Szabályozza, hogy ki fejtheti vissza a feldolgozott dokumentumokat nyugalmi állapotban."
-
-[portal.infrastructure.security.attestations]
-heading = "Megfelelőségi tanúsítások"
-noReport = "Nincs elérhető jelentés"
-subheading = "Keretrendszerenkénti auditállapot, jelentésekkel a tanúsított kontrollokról."
-viewReport = "Jelentés megtekintése →"
-
-[portal.infrastructure.security.compliance]
-heading = "Megfelelőség"
-subheading = "A Stirling platformot lefedő tanúsítások és minősítések."
-
-[portal.infrastructure.security.empty]
-description = "A munkaterület biztonsági konfigurációja itt fog megjelenni."
-title = "A biztonsági állapot nem érhető el"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK esetén a titkosítási kulcsok soha nem hagyják el a KMS-ét. A Stirling csak olyan titkosított szöveget tárol és dolgoz fel, amelyet bármikor visszavonhat."
-title = "A Stirling nem tudja visszafejteni a dokumentumait"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nincsenek konfigurált IP tartományok — minden IP engedélyezett."
-heading = "IP allowlist"
-sub = "Az API hozzáférés ezekre a CIDR tartományokra van korlátozva."
-subLocked = "API hozzáférés korlátozása ismert IP tartományokra — fizetős csomagokban érhető el."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Frissítsen Pro csomagra az API hozzáférés adott hálózatokra korlátozásához."
-title = "Az IP allowlist fizetős funkció"
-
-[portal.infrastructure.security.ipColumns]
-added = "Hozzáadva"
-addedBy = "Hozzáadta"
-cidr = "CIDR"
-label = "Címke"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmus"
-heading = "Titkosítási kulcsok kezelése"
-keyId = "Kulcsazonosító"
-lastRotated = "Utolsó rotálás"
-rotateKey = "Kulcs rotálása"
-rotationPolicy = "Rotálási szabályzat"
-subheading = "A dokumentumokat nyugalmi állapotban titkosító kulcsok felügyelete — ki fejthet vissza, és hogyan rotálódnak a kulcsok."
-
-[portal.infrastructure.security.managedBanner]
-description = "A bring-your-own-key (BYOK) és hold-your-own-key (HYOK) kulcsfelügyelet Enterprise csomagban érhető el. Frissítsen, hogy kulcsokat adjon meg a saját KMS-éből."
-title = "A kulcsokat a Stirling kezeli az Ön csomagjában"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Ázsia és Csendes-óceáni térség"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR adatperem"
-label = "Európai Unió"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Egyesült Államok"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Adatrezidencia"
-subheading = "Ahol a dokumentumok tárolása és feldolgozása történik."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} felhasználva"
-
-[portal.infrastructure.storage.empty]
-description = "A csatlakoztatott tárhely és használat itt jelenik meg."
-title = "Nincs konfigurált tárhely"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktív"
-activeRange = "0–{{value}} nap"
-archived = "Archiválva"
-coldStorage = "hideg tároló"
-deleted = "Törölve"
-never = "soha"
-purged = "véglegesen törölve"
-
-[portal.infrastructure.storage.providers]
-connect = "Csatlakozás"
-connected = "Csatlakoztatva"
-heading = "Csatlakoztatott szolgáltatók"
-subheading = "Ahol a feldolgozott artefaktumok íródnak."
-
-[portal.infrastructure.storage.retention]
-heading = "Megőrzés"
-subheading = "Meddig maradnak meg az artefaktumok az életciklus szerinti törlés előtt."
-windowLabel = "Alapértelmezett megőrzési időszak"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} nap"
-days_other = "{{count}} nap"
-never = "Soha ne törölje"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Teljes használat"
-progressLabel = "Felhasznált tárhely"
-subheading = "Az összes csatlakoztatott szolgáltatónál felhasznált tárhely."
-
 [portal.infrastructure.tabs]
 apiKeys = "API kulcsok"
 audit = "Auditnaplók"
@@ -7715,11 +7657,9 @@ security = "Biztonság"
 storage = "Tárhely"
 
 [portal.integrations]
-addAnother = "Másik hozzáadása"
 availableHeading = "Elérhető"
 comingSoonHeading = "Hamarosan"
 connect = "Csatlakoztatás"
-connectedHeading = "Csatlakoztatva"
 connectionCount_one = "{{count}} kapcsolat"
 connectionCount_other = "{{count}} kapcsolat"
 customApi = "Egyéni API"
@@ -7737,6 +7677,10 @@ security = "Biztonság"
 signing = "Aláírás"
 storage = "Tárolás"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Csatlakoztatva"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrációk"
 pipelines = "Pipeline-ok"
 policies = "Szabályzatok"
 procurement = "Beszerzés"
-settings = "Beállítások"
 sources = "Források"
 usage = "Használat és számlázás"
 users = "Felhasználók"
@@ -7784,7 +7727,7 @@ title = "Pipeline-ok"
 newPipeline = "Új pipeline"
 
 [portal.pipelines.builder]
-addStep = "Eszköz hozzáadása"
+activate = "Activate"
 back = "Vissza a pipeline-okhoz"
 cannotFollow = "Nem tudja fogadni ezt: {{produced}}"
 chooseAccount = "Válasszon fiókot"
@@ -7792,28 +7735,38 @@ chooseDestination = "Válasszon célhelyet"
 chooseOperation = "Válassza ki, mit végezzen ez a lépés"
 chooseSource = "Válasszon forrást"
 discard = "Módosítások elvetése"
-enabled = "Engedélyezve"
 inputs = "Bemenet"
 inputSource = "Bemeneti forrás"
 inputTrigger = "Trigger"
 keepEditing = "Szerkesztés folytatása"
+moreActions = "More actions"
 needsConfiguring = "Beállítás szükséges"
-needsUpload = "Feltöltött fájl szükséges"
-noSources = "Még nincs csatlakoztatott forrás. Hozzon létre egyet, hogy bemenetként használhassa."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nincs a keresésnek megfelelő eszköz."
-pipelineSettings = "Pipeline beállításai"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Eszközök keresése"
-selectToolBody = "Adjon hozzá egy eszközt a pipeline felépítéséhez."
-selectToolTitle = "Még nincsenek eszközök"
 sendToSystem = "Küldés másik rendszerbe"
 stepsIncompatible = "Ezek a lépések nem futtathatók azon, amit az előző lépés előállít: {{tools}}."
 stepsNeedSetup = "Ezeket a lépéseket mentés előtt még be kell állítani: {{tools}}."
-toolSettings = "Eszköz beállításai"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Ismeretlen művelet, változatlanul megtartva."
 unsavedBody = "Nem mentett módosításai vannak. Mentse őket kilépés előtt, vagy elveti őket?"
 unsavedTitle = "Nem mentett módosítások"
-uploadUnsupported = "A feltöltött fájlok még nem támogatottak pipeline-okban, ezért ezek a lépések nem menthetők: {{tools}}."
 usesDefaults = "Alapértelmezett beállításokkal fut"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Az előző lépés összes fájlját egyesíti"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nem ellenőrizhető, hogy ez a lépés mit fogad el"
 
 [portal.pipelines.composer]
 addTool = "Eszköz hozzáadása"
-cancel = "Mégse"
-chainEmpty = "Adjon hozzá egy eszközt a pipeline építésének megkezdéséhez."
 create = "Pipeline létrehozása"
+createPaused = "Create paused"
 editingUnsupported = "Ezeknek az eszközparamétereknek a szerkesztésre való megjelenítése még nem támogatott."
-moveDown = "Mozgatás le"
-moveUp = "Mozgatás fel"
+editSource = "Edit source"
 name = "Név"
 namePlaceholder = "pl. Kitakarítási átvizsgálás"
 noToolSettings = "Ennek az eszköznek nincsenek konfigurálható beállításai."
-operations_one = "Művelet ({{count}})"
-operations_other = "Műveletek ({{count}})"
 output = "Kimenet"
-removeStep = "Művelet eltávolítása"
 save = "Módosítások mentése"
 scheduleEvery = "Futtatás minden"
-sources = "Források"
-sourcesLoading = "Források betöltése..."
 trigger = "Trigger"
 triggerManual = "Csak manuális"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "nap"
 hours = "óra"
 minutes = "perc"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Törli ezt: \"{{name}}\"? Ez nem vonható vissza."
 cancel = "Mégse"
@@ -7867,6 +7825,37 @@ connectSource = "Forrás csatlakoztatása"
 description = "Hozza létre első pipeline-ját: válassza ki a forrásokat, amelyeken fut, fűzze össze a műveleteket, és adja meg, hová kerüljön a kimenet."
 title = "Még nincsenek pipeline-ok"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktív"
 paused = "Szüneteltetve"
@@ -7879,7 +7868,6 @@ completed_one = "Futtatás befejezve."
 completed_other = "Mind a(z) {{count}} futtatás befejeződött."
 empty = "Nincs mit futtatni: a forrásoknak nem voltak feldolgozandó dokumentumaik."
 failed = "A futtatás sikertelen: {{error}}"
-historyCleared = "Az előzmények törölve. A következő futtatás újrafeldolgoz mindent, ami jelenleg a forrásokban van."
 inFlight = "Nincs új futtatnivaló: a dokumentumok feldolgozása még folyamatban van egy korábbi futtatásból."
 parked_one = "Nincs mit futtatni: {{count}} dokumentum korábban meghiúsult és félre lett téve. Javítsa ki az okot, majd törölje az előzményeket az újrapróbálkozáshoz."
 parked_other = "Nincs mit futtatni: {{count}} dokumentum korábban meghiúsult és félre lett téve. Javítsa ki az okot, majd törölje az előzményeket az újrapróbálkozáshoz."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Források"
 status = "Állapot"
 steps = "Lépések"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Mappafigyelés"
@@ -8209,6 +8198,24 @@ label = "Csatolás Jira issue-hoz"
 description = "Elküldi a feldolgozott dokumentumot mellékletként."
 label = "Dokumentum küldése e-mailben (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "A feldolgozott dokumentumot egy mappába írja."
 label = "Feltöltés Nextcloudba"
@@ -8683,16 +8690,6 @@ maxed = "Elérte a maximumot"
 subtitle = "Az ingyenes próbaidőszak {{date}} dátumig tart. Kártya nem szükséges."
 title = "Enterprise próbaidőszak"
 
-[portal.search]
-ariaLabel = "Keresés"
-placeholder = "Keresés a Stirlingben — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "A gyorsműveletek itt jelennek meg, amint elérhetők."
-noActionsTitle = "Nincsenek gyorsműveletek"
-noMatches = "Nincs találat erre: \"{{query}}\""
-noMatchesDescription = "Próbáljon másik kulcsszót, vagy böngéssze a katalógust."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Mégse"
 confirm = "Törlés"
 title = "Törli a forrást?"
 
-[portal.sources.empty]
-description = "Csatlakoztasson egy mappát (és hamarosan felhőtárhelyet), hogy a házirendeknek legyen honnan dokumentumokat beolvasniuk."
-title = "Még nincs csatlakoztatott forrás"
-
 [portal.sources.kpi]
 inUse = "Használatban"
 total = "Kapcsolatok"
@@ -8785,6 +8778,7 @@ unused = "Nem használt"
 documents = "Dokumentumok"
 source = "Forrás"
 status = "Állapot"
+type = "Type"
 usedBy = "Házirendek"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Irányelvek és adatvédelem"
 [settings.preferences]
 title = "Beállítások"
 
-[settings.search]
-placeholder = "Keresés a beállítások között..."
-
 [settings.security]
 description = "Frissítse jelszavát fiókja biztonságáért."
 title = "Biztonság"
@@ -10128,6 +10119,7 @@ last = "Utolsó oldal"
 maintainRatio = "Képarány fenntartása váltása"
 next = "Következő oldal"
 noSavedSigs = "Nincsenek mentett aláírások"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Személyes aláírások"
 previous = "Előző oldal"
 redo = "Újra"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "A háttér eltávolítása nem sikerült"
 hint = "Töltse fel az aláírását tartalmazó PNG vagy JPG képet"
 label = "Aláíráskép feltöltése"
 placeholder = "Képfájl kiválasztása"
+previewAlt = "Current image signature"
 processing = "Kép feldolgozása..."
 removeBackground = "Fehér háttér eltávolítása (átlátszóvá tétel)"
 
@@ -10179,6 +10172,17 @@ saved = "Válasszon ki fent egy mentett aláírást, majd kattintson a PDF bárm
 text = "Miután megadta a nevét fent, kattintson bárhová a PDF-ben az aláírás elhelyezéséhez."
 title = "Hogyan adjon hozzá aláírást"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Aláírás mozgatása"
 pause = "Elhelyezés szüneteltetése"
@@ -10625,6 +10629,23 @@ title = "Feltöltés a szerverre"
 updateButton = "Frissítés a szerveren"
 uploadButton = "Feltöltés a szerverre"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Vissza"
 pdfTools = "PDF-eszközök"
 placeholder = "Válasszon egy eszközt a kezdéshez"
 premiumFeature = "Prémium funkció:"
-searchTools = "Eszközök keresése"
 toolsHeader = "Eszközök"
 viewAllTools = "Összes eszköz megtekintése"
 
@@ -10822,6 +10842,9 @@ removal = "Eltávolítás"
 signing = "Aláírás"
 verification = "Ellenőrzés"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nem találhatók eszközök"
 noTools = "Nem állnak rendelkezésre eszközök"
@@ -10979,6 +11002,13 @@ approver = "Jóváhagyja a házirendet"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Visszavonja a(z) {{email}} címre küldött meghívást? A jelenlegi hivatkozással nem fog tudni csatlakozni."
 cancelInviteTitle = "Meghívás visszavonása"
@@ -10998,10 +11028,8 @@ title = "Még nincsenek tagok"
 addToTeam = "Hozzáadás csapathoz"
 guestCount = "{{count}} vendég"
 guests = "Vendégek"
-guestsDesc = "Külső együttműködők, a megosztott tartalomra korlátozva. Csak Editor."
 ledBy = "vezeti: {{owner}}"
 org = "Szervezet"
-orgDesc = "Tulajdonosok szervezetszintű jogosultsággal és házirend-jóváhagyással"
 owners = "{{count}} tulajdonos"
 team = "{{name}} csapat"
 teamMeta = "{{count}} ember"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Meghívta: {{who}}"
 cancel = "Visszavonás"
-count = "{{count}} függőben"
-desc = "Meghívott személyek, akik még nem csatlakoztak. Helyet foglalnak, amíg el nem fogadják."
 expiresInDays_one = "{{count}} nap múlva lejár"
 expiresInDays_other = "{{count}} nap múlva lejár"
 expiresToday = "Ma lejár"
 title = "Függőben lévő meghívások"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Hiba történt a backend elérésekor, vagy nincs hozzáférésed. Próbáld újra."
 title = "Nem sikerült betölteni a tagokat"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Mellékletek keresése"
 title = "Mellékletek"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Könyvjelző címe"
 bookmarkTitleRequired = "A könyvjelző címe kötelező"
 closeSidebar = "Könyvjelzők oldalsávjának bezárása"
 collapseAll = "Összes könyvjelző összecsukása"
+empty = "No bookmarks in this document"
 expandAll = "Összes könyvjelző kibontása"
 searchPlaceholder = "Könyvjelzők keresése"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Megjegyzés hozzáadása"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Megkeresés a dokumentumban"
 moreActions = "További műveletek"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Oldal {{page}}"
 placingHint = "Kattintson egy oldalra az elhelyezéshez… (mégse)"
 removeCommentOnly = "Csak a megjegyzés eltávolítása"
 saveReply = "Válasz mentése"
+searchPlaceholder = "Search comments"
 title = "Megjegyzések"
 typeComment = "Megjegyzés"
 typeInsertText = "Szöveg beszúrása"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Mentetlen módosításai vannak"
 closeSidebar = "Rétegek oldalsávjának bezárása"
 hideAll = "Összes réteg elrejtése"
 showAll = "Összes réteg megjelenítése"
+title = "Layers"
 
 [viewer.link]
 delete = "Hivatkozás törlése"
@@ -11646,6 +11682,7 @@ exitRedaction = "Kilépés a kitakarási módból"
 exportAll = "PDF exportálása"
 exportSelected = "Kijelölt oldalak exportálása"
 formFill = "Űrlap kitöltése"
+hideToolbar = "Hide toolbar"
 multiTool = "Többfunkciós eszköz"
 panMode = "Mozgatás mód"
 print = "PDF nyomtatása"
@@ -11666,6 +11703,7 @@ selectAll = "Összes kijelölése"
 selectByNumber = "Kiválasztás oldalszámok szerint"
 selectLanguage = "Nyelv kiválasztása"
 share = "Megosztás"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Annotációk láthatóságának be-/kikapcsolása"
 toggleAttachments = "Mellékletek be-/kikapcsolása"
 toggleBookmarks = "Könyvjelzők be-/kikapcsolása"
diff --git a/frontend/editor/public/locales/id-ID/translation.toml b/frontend/editor/public/locales/id-ID/translation.toml
index de785b819d..5b3a35918a 100644
--- a/frontend/editor/public/locales/id-ID/translation.toml
+++ b/frontend/editor/public/locales/id-ID/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Abjad"
 apply = "Terapkan"
 applyAndContinue = "Simpan & Keluar"
-areYouSure = "Apakah Anda yakin ingin keluar?"
 back = "Kembali"
 black = "Hitam"
 blue = "Biru"
@@ -106,6 +105,7 @@ undoSuccess = "Operasi berhasil dibatalkan"
 unknown = "Tidak diketahui"
 unpin = "Lepas Sematan File (ganti setelah alat dijalankan)"
 unsavedChanges = "Anda memiliki perubahan yang belum disimpan pada PDF Anda."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Perubahan Belum Disimpan"
 unsupported = "Tidak didukung"
 username = "Nama pengguna"
@@ -1879,6 +1879,9 @@ width = "Lebar"
 [app]
 description = "Alternatif Adobe Acrobat Gratis (10M+ Unduhan)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konversi ke PDF/A-3b"
 convertToPdfA3bDescription = "Membuat PDF arsip dengan lampiran tersemat"
@@ -2933,12 +2936,16 @@ text = "Agar izin ini tidak dapat diubah, gunakan alat Tambah Kata Sandi untuk m
 [chat.actions]
 copy = "Salin pesan"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opsi agen Stirling"
+assistant = "AI Assistant"
 clearChat = "Hapus obrolan"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Operasi ini akan menggunakan kredit cloud Anda"
 tooltip = "Pilih warna dari layar"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Pilih warna"
 
 [common]
+actions = "Actions"
 back = "Kembali"
 cancel = "Batal"
 close = "Tutup"
+codeSample = "Code sample"
 collapse = "Ciutkan"
 confirm = "Konfirmasi"
 continue = "Lanjut"
 copied = "Disalin!"
 copy = "Salin"
 done = "Selesai"
+enterValue = "Enter value"
 error = "Error"
 expand = "Perluas"
 loading = "Memuat..."
 next = "Berikutnya"
+open = "Open"
 preview = "Pratinjau"
 previous = "Sebelumnya"
 refresh = "Muat Ulang"
 remaining = "Tersisa"
 retry = "Coba Lagi"
 save = "Simpan"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Bersihkan yang dipilih"
@@ -3185,6 +3199,7 @@ title = "Metode Kompresi"
 [compress.settings]
 desiredSize = "Ukuran file yang diinginkan"
 desiredSizePlaceholder = "Masukkan ukuran"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Kompresi adalah cara mudah untuk mengurangi ukuran file. Pilih Ukuran File untuk memasukkan ukuran target dan biarkan kami menyesuaikan kualitas untuk Anda. Pilih Kualitas untuk mengatur kekuatan kompresi secara manual."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opsi PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Pilih format sumber terlebih dahulu"
 settings = "Pengaturan"
 single = "Tunggal"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Cari..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Edit"
@@ -3824,11 +3861,13 @@ shareSelected = "Bagikan yang Dipilih"
 sharing = "Berbagi"
 showAll = "Tampilkan Semua"
 showHistory = "Tampilkan Riwayat"
+sortBy = "Sort files"
 sortByDate = "Urutkan berdasarkan Tanggal"
 sortByName = "Urutkan berdasarkan Nama"
 sortBySize = "Urutkan berdasarkan Ukuran"
 storage = "Penyimpanan"
 storageState = "Penyimpanan"
+storageUsed = "Storage used"
 synced = "Tersinkron"
 title = "Unggah File PDF"
 toolChain = "Alat yang Diterapkan"
@@ -3874,8 +3913,12 @@ addFiles = "Tambahkan file"
 addingFiles = "Menambahkan file…"
 collapse = "Ciutkan bilah samping"
 customizeGroups = "Sesuaikan grup"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Buka file untuk memulai"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Perluas bilah samping"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive belum dikonfigurasi"
@@ -3888,15 +3931,17 @@ openFromComputer = "Buka dari komputer"
 openSettings = "Buka pengaturan"
 other = "Lainnya"
 recent = "Terbaru"
-search = "Cari"
-searchPlaceholder = "Cari file..."
 viewAll = "Lihat semua {{count}} file"
 
 [fileSidebar.fileItem]
 closeViewer = "Tutup penampil"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Buka di penampil"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Reset ke default"
 subtitle = "Kelompokkan file Anda ke dalam kategori induk. Tambahkan label yang sudah ada atau label baru ke kategori, ganti namanya, atau buat sendiri. File yang tidak termasuk dalam kategori mana pun akan muncul di “Lainnya”."
 title = "Kategori sidebar"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Tambahkan ke ruang kerja"
 addToWorkspaceCount = "Tambahkan {{count}} ke ruang kerja"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Kembali ke File Saya"
 breadcrumbs = "Jalur folder"
 cancel = "Batal"
 classification = "Klasifikasi"
-clearSearch = "Hapus pencarian"
 clearSelection = "Hapus pilihan"
 closeDetails = "Tutup detail"
 create = "Buat"
@@ -3950,6 +4002,7 @@ downloadAll = "Unduh semua"
 downloadVersion = "Unduh versi ini"
 dropOverlay = "Lepaskan file untuk mengunggah"
 dropOverlaySub = "File dimulai di Lokal. Gunakan 'Pindahkan ke' atau 'Simpan ke cloud' untuk mengaturnya ke dalam folder."
+duplicate = "Duplicate"
 file = "File"
 fileInfo = "File info"
 fileMenu = "Tindakan file"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Ubah ukuran pohon folder (tombol panah, Shift untuk langkah
 save = "Simpan"
 saveToServer = "Simpan ke server"
 saveToServerDisabledHint = "Menyimpan ke server tidak diaktifkan di server ini. Minta administrator Anda untuk mengaktifkannya."
-search = "Cari"
-searchPlaceholder = "Cari folder ini & subfoldernya"
 selectAll = "Pilih semua"
 selectAllHint = "Klik untuk memilih semua. Tip: tahan Ctrl (atau Cmd) untuk menambah file satu per satu, Shift untuk memilih rentang."
 selectedCount = "{{count}} dipilih"
@@ -4044,6 +4095,10 @@ title = "Belum ada file cloud"
 hint = "File yang disimpan tanpa mengunggah tetap di sini. Lepaskan file untuk menambahkannya."
 title = "Tidak ada file khusus lokal"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "File yang Anda buka atau edit akan muncul di sini."
 title = "Belum ada yang diubah"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Tidak dapat menghapus folder."
 deleteFolderFailedDetail = "Tidak dapat menghapus folder: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Tidak dapat memperbarui tampilan folder."
 folderAppearanceFailedDetail = "Tidak dapat memperbarui tampilan folder: {{message}}"
 moveFilesFailed = "Tidak dapat memindahkan file."
@@ -4113,6 +4170,11 @@ localHint = "Hanya disimpan di peramban ini"
 shared = "Dibagikan"
 sharedHint = "Dibagikan kepada Anda melalui tautan"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Terlama dulu"
 modifiedDesc = "Terbaru dulu"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Tidak ada file di penyimpanan. Buka beberapa file terleb
 open = "Buka"
 openFile = "Buka File"
 openFiles = "Buka File"
+selectFile = "Select {{name}}"
 selectFromStorage = "Pilih dari Penyimpanan"
 upload = "Unggah"
 uploadFile = "Unggah File"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Semua tersimpan"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Gagal mengekstrak CSV"
 extractXlsxError = "Gagal mengekstrak XLSX"
+filled = "filled"
 flattenAfterFilling = "Ratakan setelah mengisi"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "wajib"
 requiredFieldsError = "Harap isi semua bidang wajib"
 rescanFields = "Pindai ulang bidang"
@@ -4795,9 +4863,6 @@ title = "Gambar ke PDF"
 [imageToPdf]
 tags = "konversi,img,jpg,gambar,foto"
 
-[infoBanner]
-dismiss = "Tutup"
-
 [invite]
 acceptError = "Gagal membuat akun"
 accountFor = "Membuat akun untuk"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Unggah Berhasil!"
 uploadSuccessMessage = "Gambar Anda telah ditransfer."
 validating = "Memvalidasi sesi..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Pindai untuk mengunggah foto. Gambar otomatis dikonversi ke PDF."
 descriptionNoConvert = "Pindai untuk mengunggah foto dari perangkat seluler Anda."
@@ -4997,8 +5090,13 @@ title = "Unggah dari Ponsel"
 tags = "Alat multi,Operasi multi,UI,klik seret,front end,sisi klien,interaktif,sulit diatur,pindah"
 title = "Alat Multi PDF"
 
-[navbar]
-search = "Cari"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentikasi tidak berhasil. Anda dapat menutup jendela ini dan mencoba lagi."
@@ -5127,6 +5225,7 @@ activeFiles = "Tampilan <strong>Active Files</strong> menampilkan semua PDF yang
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Tutup"
 cropSettings = "Sekarang setelah kita memilih file yang ingin dipotong, kita dapat mengonfigurasi alat Crop untuk memilih area yang ingin kita potong pada PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Mengklik salah satu file akan memilihnya untuk diproses. Anda dapat memilih beberapa file untuk operasi batch."
 fileReplacement = "File yang telah diubah akan menggantikan file asli di Workbench secara otomatis, sehingga Anda dapat dengan mudah menjalankannya melalui lebih banyak alat."
 filesButton = "Tombol <strong>Files</strong> pada bilah Akses Cepat memungkinkan Anda mengunggah PDF untuk menggunakan alat."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF ke PDF/A"
 tags = "arsip, jangka panjang, standar, konversi, penyimpanan, pelestarian"
 title = "PDF Ke PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "cetak,standar,konversi,produksi,pracetak,arsip"
 title = "PDF ke PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Kredit"
 xsmall = "100 Kredit"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Pilih paket yang sesuai kebutuhan Anda"
 title = "Paket yang Tersedia"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Batas pengeluaran bulanan tercapai"
 title = "Tidak dapat membuka portal Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "dari {{allowance}} PDF gratis digunakan"
 capSuffix_other = "dari {{allowance}} PDF gratis digunakan"
 eyebrow = "Uji coba Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Kirim email dokumen atau notifikasi saat kebijakan berjalan."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Simpan dokumen yang diproses ke Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDK resmi"
 beta = "Beta"
 deprecated = "Deprecated"
 
-[portal.docs.search]
-empty = "Tidak ada dokumentasi yang cocok"
-placeholder = "Cari dokumentasi"
-results = "{{count}} hasil"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Kemampuan bernama yang dibundel dan dipanggil agen Anda sebagai satu alat. Setiap skill adalah rantai operasi deterministik dengan evaluasi terlampir."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Tidak ada dokumen yang cocok dengan filter ini."
 rowActions = "Tindakan baris"
 sensitiveLabel = "Sensitif"
-sensitiveTitle = "Sensitif — akses diperlukan"
 
 [portal.documents.table.columns]
 action = "Pipeline / Tindakan"
 document = "Dokumen"
+labels = "Labels"
 product = "Produk"
 status = "Status"
 time = "Waktu"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Terakhir terlihat"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Versi"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Tampilan ini mengalami error tak terduga. Coba lagi, atau pilih b
 retry = "Coba lagi"
 title = "Terjadi kesalahan pada halaman ini"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Kembali"
 body = "Unduh aplikasi desktop atau self-host server."
@@ -7380,11 +7560,6 @@ cancel = "Batal"
 confirm = "Cabut key"
 title = "Cabut API key"
 
-[portal.infrastructure.attestationLabel]
-attested = "Teratestasi"
-inScope = "Dalam cakupan"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filter peristiwa audit berdasarkan kategori"
 heading = "Log audit"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Berhasil"
 warning = "Peringatan"
 
-[portal.infrastructure.certLabel]
-certified = "Tersertifikasi"
-inProgress = "Sedang berlangsung"
-notStarted = "Belum dimulai"
-
 [portal.infrastructure.createKey]
 cancel = "Batal"
 createKey = "Buat kunci"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Salin rahasia ini sekarang — tidak akan ditampilkan lagi."
 title = "Buat API key"
 titleCreated = "Kunci dibuat"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "Dalam antrean"
-rolledBack = "Di-rollback"
-rolling = "Sedang diluncurkan"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Diterapkan oleh"
-environment = "Environment"
-product = "Produk"
-status = "Status"
-version = "Versi"
-when = "Kapan"
-
-[portal.infrastructure.deployments.recent]
-heading = "Penerapan terbaru"
-subheading = "Rollout terbaru di seluruh produk dan environment."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instans"
-latency = "Latensi"
-load = "Beban"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Versi"
-
-[portal.infrastructure.deployments.regions]
-heading = "Region"
-subheading = "Kesehatan langsung untuk setiap region Stirling yang diterapkan — latensi, beban, dan versi rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Region yang diterapkan muncul di sini setelah workspace Anda disediakan."
-title = "Tidak ada region yang diterapkan"
-
 [portal.infrastructure.keyLabel]
 active = "Aktif"
 revoked = "Dicabut"
 
-[portal.infrastructure.modelLabel]
-active = "Aktif"
-degraded = "Menurun"
-disabled = "Dinonaktifkan"
-
-[portal.infrastructure.models]
-heading = "Model"
-msValue = "{{value}} ms"
-subheading = "Katalog model dan routing yang mendukung pemrosesan dokumen di seluruh workspace Anda."
-
-[portal.infrastructure.models.byom]
-description = "Daftarkan model on-prem atau yang dihosting sendiri dan pin ke region untuk pemrosesan terikat residensi data."
-title = "Bawa model Anda sendiri"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Model terkelola yang tersedia untuk workspace Anda, dengan latensi dan biaya langsung."
-subEnterprise = "Model terkelola, bawa-sendiri, dan on-prem — dengan pinning per region tersedia."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Model dalam katalog workspace Anda muncul di sini."
-title = "Tidak ada model tersedia"
-
-[portal.infrastructure.models.columns]
-cost = "Biaya"
-latency = "Latensi"
-load = "Beban"
-model = "Model"
-status = "Status"
-type = "Jenis"
-version = "Versi"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/panggilan"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Model aktif"
-avgLatency = "Latensi rata-rata"
-included = "Termasuk"
-monthlySpend = "Pengeluaran model bulanan"
-
-[portal.infrastructure.models.routing]
-empty = "Tidak ada aturan routing yang dikonfigurasi."
-heading = "Aturan routing"
-sub = "Model mana yang menangani setiap operasi. Default berlaku saat tidak ada aturan yang lebih spesifik yang cocok."
-subLocked = "Rutekan operasi ke model tertentu — tersedia pada paket berbayar."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Tingkatkan ke Pro untuk mengontrol model mana yang menangani setiap operasi dan jenis dokumen."
-title = "Routing model adalah fitur berbayar"
-
-[portal.infrastructure.models.routingColumns]
-default = "Default"
-docType = "Jenis dokumen"
-modelForAria = "Model untuk {{operation}}"
-operation = "Operasi"
-routedTo = "Dirutekan ke"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasifikasi"
-extraction = "Ekstraksi"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Menurun"
-down = "Down"
-healthy = "Sehat"
-
-[portal.infrastructure.security.access.byok]
-description = "Sediakan kunci dari KMS Anda sendiri. Stirling mengenkripsi dengannya tetapi masih dapat membaca."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Kunci tidak pernah meninggalkan KMS Anda. Stirling hanya menyimpan ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling mengelola kunci enkripsi. Paling sederhana — tanpa operasi kunci di sisi Anda."
-label = "Kunci yang dipegang Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Kebijakan akses dokumen"
-subheading = "Mengontrol siapa yang dapat mendekripsi dokumen yang diproses saat disimpan."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestasi kepatuhan"
-noReport = "Tidak ada laporan tersedia"
-subheading = "Postur audit per framework, dengan laporan tersedia pada kontrol yang diaudit."
-viewReport = "Lihat laporan →"
-
-[portal.infrastructure.security.compliance]
-heading = "Kepatuhan"
-subheading = "Atestasi dan sertifikasi yang mencakup platform Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Konfigurasi keamanan workspace Anda akan muncul di sini."
-title = "Postur keamanan tidak tersedia"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Dengan HYOK, kunci enkripsi tidak pernah meninggalkan KMS Anda. Stirling menyimpan dan memproses hanya ciphertext yang dapat Anda cabut kapan saja."
-title = "Stirling tidak dapat mendekripsi dokumen Anda"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Tidak ada rentang IP yang dikonfigurasi — semua IP diizinkan."
-heading = "IP allowlist"
-sub = "Akses API dibatasi ke rentang CIDR ini."
-subLocked = "Batasi akses API ke rentang IP yang dikenal — tersedia pada paket berbayar."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Tingkatkan ke Pro untuk membatasi akses API ke jaringan tertentu."
-title = "IP allowlisting adalah fitur berbayar"
-
-[portal.infrastructure.security.ipColumns]
-added = "Ditambahkan"
-addedBy = "Ditambahkan oleh"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Manajemen kunci enkripsi"
-keyId = "Pengidentifikasi kunci"
-lastRotated = "Terakhir dirotasi"
-rotateKey = "Rotasi kunci"
-rotationPolicy = "Kebijakan rotasi"
-subheading = "Penitipan kunci yang mengenkripsi dokumen saat disimpan — siapa yang dapat mendekripsi, dan bagaimana kunci dirotasi."
-
-[portal.infrastructure.security.managedBanner]
-description = "Penitipan bring-your-own-key (BYOK) dan hold-your-own-key (HYOK) tersedia pada Enterprise. Tingkatkan untuk menyediakan kunci dari KMS Anda sendiri."
-title = "Kunci dikelola oleh Stirling pada paket Anda"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · batas data GDPR"
-label = "European Union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "United States"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Residensi data"
-subheading = "Tempat dokumen disimpan dan diproses."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} digunakan"
-
-[portal.infrastructure.storage.empty]
-description = "Penyimpanan yang terhubung dan penggunaan muncul di sini."
-title = "Tidak ada penyimpanan yang dikonfigurasi"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktif"
-activeRange = "0–{{value}}h"
-archived = "Diarsipkan"
-coldStorage = "cold storage"
-deleted = "Dihapus"
-never = "tidak pernah"
-purged = "dibersihkan"
-
-[portal.infrastructure.storage.providers]
-connect = "Hubungkan"
-connected = "Terhubung"
-heading = "Penyedia terhubung"
-subheading = "Tempat artefak yang diproses ditulis."
-
-[portal.infrastructure.storage.retention]
-heading = "Retensi"
-subheading = "Berapa lama artefak disimpan sebelum penghapusan siklus hidup."
-windowLabel = "Jendela retensi default"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} hari"
-days_other = "{{count}} hari"
-never = "Jangan pernah hapus"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Total penggunaan"
-progressLabel = "Penyimpanan digunakan"
-subheading = "Penyimpanan yang digunakan di seluruh penyedia terhubung."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Key"
 audit = "Log Audit"
@@ -7715,11 +7657,9 @@ security = "Keamanan"
 storage = "Penyimpanan"
 
 [portal.integrations]
-addAnother = "Tambah lagi"
 availableHeading = "Tersedia"
 comingSoonHeading = "Segera hadir"
 connect = "Hubungkan"
-connectedHeading = "Terhubung"
 connectionCount_one = "{{count}} koneksi"
 connectionCount_other = "{{count}} koneksi"
 customApi = "API kustom"
@@ -7737,6 +7677,10 @@ security = "Keamanan"
 signing = "Penandatanganan"
 storage = "Penyimpanan"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Terhubung"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrasi"
 pipelines = "Pipeline"
 policies = "Kebijakan"
 procurement = "Pengadaan"
-settings = "Pengaturan"
 sources = "Sumber"
 usage = "Penggunaan & Penagihan"
 users = "Pengguna"
@@ -7784,7 +7727,7 @@ title = "Pipeline"
 newPipeline = "Pipeline baru"
 
 [portal.pipelines.builder]
-addStep = "Tambah alat"
+activate = "Activate"
 back = "Kembali ke pipeline"
 cannotFollow = "Tidak dapat mengambil {{produced}}"
 chooseAccount = "Pilih akun"
@@ -7792,28 +7735,38 @@ chooseDestination = "Pilih tujuan"
 chooseOperation = "Pilih apa yang dilakukan langkah ini"
 chooseSource = "Pilih sumber"
 discard = "Buang perubahan"
-enabled = "Diaktifkan"
 inputs = "Input"
 inputSource = "Sumber input"
 inputTrigger = "Pemicu"
 keepEditing = "Lanjutkan mengedit"
+moreActions = "More actions"
 needsConfiguring = "Perlu disiapkan"
-needsUpload = "Memerlukan file yang di-upload"
-noSources = "Belum ada sumber yang terhubung. Buat satu untuk digunakan sebagai input."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Tidak ada alat yang cocok dengan pencarian Anda."
-pipelineSettings = "Pengaturan pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Cari alat"
-selectToolBody = "Tambahkan alat untuk membangun pipeline Anda."
-selectToolTitle = "Belum ada alat"
 sendToSystem = "Kirim ke sistem lain"
 stepsIncompatible = "Langkah-langkah ini tidak dapat berjalan pada hasil dari langkah sebelumnya: {{tools}}."
 stepsNeedSetup = "Langkah-langkah ini masih perlu disiapkan sebelum menyimpan: {{tools}}."
-toolSettings = "Pengaturan alat"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operasi tidak dikenali, dipertahankan apa adanya."
 unsavedBody = "Anda memiliki perubahan yang belum disimpan. Simpan sebelum keluar, atau buang?"
 unsavedTitle = "Perubahan belum disimpan"
-uploadUnsupported = "File yang di-upload belum didukung di pipeline, jadi langkah ini tidak dapat disimpan: {{tools}}."
 usesDefaults = "Berjalan dengan pengaturan default"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Menggabungkan setiap file dari langkah sebelumnya"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Tidak dapat memeriksa apa yang diterima langkah ini"
 
 [portal.pipelines.composer]
 addTool = "Tambah alat"
-cancel = "Batal"
-chainEmpty = "Tambahkan alat untuk mulai membangun pipeline Anda."
 create = "Buat pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Menampilkan parameter alat ini untuk diedit belum didukung."
-moveDown = "Pindah ke bawah"
-moveUp = "Pindah ke atas"
+editSource = "Edit source"
 name = "Nama"
 namePlaceholder = "mis. Redaction sweep"
 noToolSettings = "Alat ini tidak memiliki pengaturan yang dapat dikonfigurasi."
-operations_one = "Operasi ({{count}})"
-operations_other = "Operasi ({{count}})"
 output = "Output"
-removeStep = "Hapus operasi"
 save = "Simpan perubahan"
 scheduleEvery = "Jalankan setiap"
-sources = "Sumber"
-sourcesLoading = "Memuat sumber..."
 trigger = "Trigger"
 triggerManual = "Hanya manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "hari"
 hours = "jam"
 minutes = "menit"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Hapus \"{{name}}\"? Ini tidak dapat dibatalkan."
 cancel = "Batal"
@@ -7867,6 +7825,37 @@ connectSource = "Hubungkan sumber"
 description = "Buat pipeline pertama Anda: pilih sumber yang dijalankannya, rangkai operasi, dan pilih tempat output dituju."
 title = "Belum ada pipeline"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktif"
 paused = "Dijeda"
@@ -7879,7 +7868,6 @@ completed_one = "Jalankan selesai."
 completed_other = "Semua {{count}} proses berjalan selesai."
 empty = "Tidak ada yang dijalankan: sumber tidak memiliki dokumen untuk diproses."
 failed = "Proses berjalan gagal: {{error}}"
-historyCleared = "Riwayat dihapus. Proses berikutnya memproses ulang semua yang saat ini ada di sumber."
 inFlight = "Tidak ada yang baru untuk dijalankan: dokumen masih diproses dari proses sebelumnya."
 parked_one = "Tidak ada yang dijalankan: {{count}} dokumen sebelumnya gagal dan diparkir. Perbaiki penyebabnya, lalu hapus riwayat untuk mencobanya lagi."
 parked_other = "Tidak ada yang dijalankan: {{count}} dokumen sebelumnya gagal dan diparkir. Perbaiki penyebabnya, lalu hapus riwayat untuk mencobanya lagi."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Sumber"
 status = "Status"
 steps = "Langkah"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Pemantauan folder"
@@ -8209,6 +8198,24 @@ label = "Lampirkan ke issue Jira"
 description = "Mengirim dokumen yang diproses sebagai lampiran."
 label = "Email dokumen (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Menulis dokumen yang diproses ke dalam folder."
 label = "Upload ke Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maksimal"
 subtitle = "Uji coba gratis Anda berjalan hingga {{date}}. Tidak perlu kartu."
 title = "Uji coba Enterprise"
 
-[portal.search]
-ariaLabel = "Cari"
-placeholder = "Cari Stirling — endpoint, pipeline, dokumen…"
-
-[portal.search.empty]
-noActionsDescription = "Tindakan cepat akan muncul di sini setelah tersedia."
-noActionsTitle = "Tidak ada tindakan cepat"
-noMatches = "Tidak ada kecocokan untuk \"{{query}}\""
-noMatchesDescription = "Coba kata kunci lain atau jelajahi katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Batal"
 confirm = "Hapus"
 title = "Hapus sumber?"
 
-[portal.sources.empty]
-description = "Hubungkan folder (dan, segera, cloud storage) agar kebijakan Anda memiliki tempat untuk menarik dokumen."
-title = "Belum ada sumber yang terhubung"
-
 [portal.sources.kpi]
 inUse = "Digunakan"
 total = "Koneksi"
@@ -8785,6 +8778,7 @@ unused = "Tidak digunakan"
 documents = "Dokumen"
 source = "Sumber"
 status = "Status"
+type = "Type"
 usedBy = "Kebijakan"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Kebijakan & Privasi"
 [settings.preferences]
 title = "Preferensi"
 
-[settings.search]
-placeholder = "Cari halaman pengaturan..."
-
 [settings.security]
 description = "Perbarui kata sandi Anda untuk menjaga keamanan akun."
 title = "Keamanan"
@@ -10128,6 +10119,7 @@ last = "Halaman terakhir"
 maintainRatio = "Alihkan pertahankan rasio aspek"
 next = "Halaman berikutnya"
 noSavedSigs = "Tidak ditemukan tanda tangan yang disimpan"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Tanda Tangan Pribadi"
 previous = "Halaman sebelumnya"
 redo = "Ulangi"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Penghapusan latar belakang gagal"
 hint = "Unggah gambar PNG atau JPG dari tanda tangan Anda"
 label = "Unggah gambar tanda tangan"
 placeholder = "Pilih berkas gambar"
+previewAlt = "Current image signature"
 processing = "Memproses gambar..."
 removeBackground = "Hapus latar belakang putih (buat transparan)"
 
@@ -10179,6 +10172,17 @@ saved = "Pilih tanda tangan tersimpan di atas, lalu klik di mana saja pada PDF u
 text = "Setelah memasukkan nama Anda di atas, klik di mana saja pada PDF untuk menempatkan tanda tangan Anda."
 title = "Cara menambahkan tanda tangan"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Pindahkan Tanda Tangan"
 pause = "Jeda penempatan"
@@ -10625,6 +10629,23 @@ title = "Unggah ke Server"
 updateButton = "Perbarui di Server"
 uploadButton = "Unggah ke Server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Kembali"
 pdfTools = "Alat PDF"
 placeholder = "Pilih alat untuk memulai"
 premiumFeature = "Fitur premium:"
-searchTools = "Cari alat"
 toolsHeader = "Alat"
 viewAllTools = "Lihat semua alat"
 
@@ -10822,6 +10842,9 @@ removal = "Penghapusan"
 signing = "Penandatanganan"
 verification = "Verifikasi"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Tidak ada alat ditemukan"
 noTools = "Tidak ada alat tersedia"
@@ -10979,6 +11002,13 @@ approver = "Menyetujui kebijakan"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Batalkan undangan ke {{email}}? Mereka tidak akan dapat bergabung dengan tautan saat ini."
 cancelInviteTitle = "Batalkan undangan"
@@ -10998,10 +11028,8 @@ title = "Belum ada anggota"
 addToTeam = "Tambahkan ke tim"
 guestCount = "{{count}} tamu"
 guests = "Tamu"
-guestsDesc = "Kolaborator eksternal, dibatasi pada yang Anda bagikan. Hanya Editor."
 ledBy = "dipimpin oleh {{owner}}"
 org = "Organisasi"
-orgDesc = "Pemilik dengan otoritas seluruh org dan persetujuan kebijakan"
 owners = "{{count}} pemilik"
 team = "Tim {{name}}"
 teamMeta = "{{count}} orang"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Diundang oleh {{who}}"
 cancel = "Batal"
-count = "{{count}} tertunda"
-desc = "Orang yang diundang yang belum bergabung. Mereka menempati satu kursi hingga menerima."
 expiresInDays_one = "Kedaluwarsa dalam {{count}} hari"
 expiresInDays_other = "Kedaluwarsa dalam {{count}} hari"
 expiresToday = "Kedaluwarsa hari ini"
 title = "Undangan tertunda"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Terjadi kesalahan saat menghubungi backend, atau Anda tidak memiliki akses. Coba lagi."
 title = "Tidak dapat memuat anggota"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Cari lampiran"
 title = "Lampiran"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Judul bookmark"
 bookmarkTitleRequired = "Judul bookmark wajib diisi"
 closeSidebar = "Tutup bilah sisi bookmark"
 collapseAll = "Ciutkan semua bookmark"
+empty = "No bookmarks in this document"
 expandAll = "Luaskan semua bookmark"
 searchPlaceholder = "Cari bookmark"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Tambahkan komentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Temukan di dokumen"
 moreActions = "Tindakan lainnya"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Halaman {{page}}"
 placingHint = "Klik sebuah halaman untuk menempatkan… (batalkan)"
 removeCommentOnly = "Hanya hapus komentar"
 saveReply = "Simpan balasan"
+searchPlaceholder = "Search comments"
 title = "Komentar"
 typeComment = "Komentar"
 typeInsertText = "Sisipkan Teks"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Anda memiliki perubahan yang belum disimpan"
 closeSidebar = "Tutup bilah sisi layer"
 hideAll = "Sembunyikan semua layer"
 showAll = "Tampilkan semua layer"
+title = "Layers"
 
 [viewer.link]
 delete = "Hapus tautan"
@@ -11646,6 +11682,7 @@ exitRedaction = "Keluar dari Mode Redaksi"
 exportAll = "Ekspor PDF"
 exportSelected = "Ekspor Halaman yang Dipilih"
 formFill = "Isi Formulir"
+hideToolbar = "Hide toolbar"
 multiTool = "Multi-Tool"
 panMode = "Mode Geser"
 print = "Cetak PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Pilih Semua"
 selectByNumber = "Pilih berdasarkan Nomor Halaman"
 selectLanguage = "Pilih bahasa"
 share = "Bagikan"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Tampilkan/Sembunyikan Anotasi"
 toggleAttachments = "Tampilkan/Sembunyikan Lampiran"
 toggleBookmarks = "Tampilkan/Sembunyikan Penanda Halaman"
diff --git a/frontend/editor/public/locales/it-IT/translation.toml b/frontend/editor/public/locales/it-IT/translation.toml
index f47347b349..53bfd1fd46 100644
--- a/frontend/editor/public/locales/it-IT/translation.toml
+++ b/frontend/editor/public/locales/it-IT/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabeto"
 apply = "Applica"
 applyAndContinue = "Applica e continua"
-areYouSure = "Sei sicuro di voler uscire?"
 back = "Indietro"
 black = "Nero"
 blue = "Blu"
@@ -106,6 +105,7 @@ undoSuccess = "Operazione annullata con successo"
 unknown = "Sconosciuto"
 unpin = "Sblocca file (sostituisci dopo l'esecuzione dello strumento)"
 unsavedChanges = "Hai modifiche non salvate al tuo PDF. Cosa vuoi fare?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Modifiche non salvate"
 unsupported = "Non supportato"
 username = "Nome utente"
@@ -1879,6 +1879,9 @@ width = "Spessore"
 [app]
 description = "L’alternativa gratuita ad Adobe Acrobat (10M+ download)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Converti in PDF/A-3b"
 convertToPdfA3bDescription = "Crea un PDF per archiviazione con allegati incorporati"
@@ -2933,12 +2936,16 @@ text = "Per rendere questi permessi immodificabili, usa lo strumento Aggiungi pa
 [chat.actions]
 copy = "Copia messaggio"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Chiudi chat"
 open = "Apri Stirling assistente IA"
 
 [chat.header]
 agentMenu = "Opzioni agente Stirling"
+assistant = "AI Assistant"
 clearChat = "Cancella chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Questa operazione utilizzerà i tuoi crediti cloud"
 tooltip = "Preleva il colore dallo schermo"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Scegli il colore"
 
 [common]
+actions = "Actions"
 back = "Indietro"
 cancel = "Annulla"
 close = "Chiudi"
+codeSample = "Code sample"
 collapse = "Comprimi"
 confirm = "Conferma"
 continue = "Continua"
 copied = "Copiato!"
 copy = "Copia"
 done = "Fatto"
+enterValue = "Enter value"
 error = "Errore"
 expand = "Espandi"
 loading = "Caricamento..."
 next = "Successivo"
+open = "Open"
 preview = "Anteprima"
 previous = "Precedente"
 refresh = "Aggiorna"
 remaining = "Rimanenti"
 retry = "Riprova"
 save = "Salva"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Cancella selezionati"
@@ -3185,6 +3199,7 @@ title = "Metodo di compressione"
 [compress.settings]
 desiredSize = "Dimensione file desiderata"
 desiredSizePlaceholder = "Inserisci dimensione"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "La compressione è un modo semplice per ridurre la dimensione del file. Scegli Dimensione File per inserire una dimensione obiettivo e lascia che regoliamo la qualità per te. Scegli Qualità per impostare manualmente l’intensità della compressione."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opzioni PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Seleziona prima un formato sorgente"
 settings = "Impostazioni"
 single = "Singolo"
@@ -3565,7 +3598,11 @@ tags = "automazione,cartella,scansione,cartella di controllo,cartella di tendenz
 tags = "SSO,single sign-on,autenticazione,SAML,OAuth,OIDC,login,enterprise,provider di identità,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Cerca..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Modifica"
@@ -3824,11 +3861,13 @@ shareSelected = "Condividi selezionati"
 sharing = "Condivisione"
 showAll = "Mostra tutto"
 showHistory = "Mostra cronologia"
+sortBy = "Sort files"
 sortByDate = "Ordina per data"
 sortByName = "Ordina per nome"
 sortBySize = "Ordina per dimensione"
 storage = "Archiviazione"
 storageState = "Archiviazione"
+storageUsed = "Storage used"
 synced = "Sincronizzato"
 title = "Carica file PDF"
 toolChain = "Strumenti applicati"
@@ -3874,8 +3913,12 @@ addFiles = "Aggiungi file"
 addingFiles = "Aggiunta file…"
 collapse = "Comprimi barra laterale"
 customizeGroups = "Personalizza gruppi"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Apri file per iniziare"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Espandi barra laterale"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive non è configurato"
@@ -3888,15 +3931,17 @@ openFromComputer = "Apri dal computer"
 openSettings = "Apri impostazioni"
 other = "Altro"
 recent = "Recenti"
-search = "Cerca"
-searchPlaceholder = "Cerca file..."
 viewAll = "Visualizza tutti i {{count}} file"
 
 [fileSidebar.fileItem]
 closeViewer = "Chiudi visualizzatore"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Elimina"
+duplicate = "Duplicate"
 moreActions = "Altre azioni"
 openInViewer = "Apri nel visualizzatore"
+rename = "Rename"
 savedToServer = "Salvato sul server"
 updateOnServer = "Aggiorna sul server"
 uploadToServer = "Carica sul server"
@@ -3908,6 +3953,14 @@ reset = "Ripristina impostazioni predefinite"
 subtitle = "Raggruppa i tuoi file in categorie principali. Aggiungi etichette esistenti o nuove a una categoria, rinominala o creane una tua. I file che non rientrano in nessuna delle tue categorie vengono visualizzati in “Altro”."
 title = "Categorie della barra laterale"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Aggiungi allo spazio di lavoro"
 addToWorkspaceCount = "Aggiungi {{count}} allo spazio di lavoro"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Torna ai miei file"
 breadcrumbs = "Percorso cartella"
 cancel = "Annulla"
 classification = "Classificazione"
-clearSearch = "Cancella ricerca"
 clearSelection = "Cancella selezione"
 closeDetails = "Chiudi dettagli"
 create = "Crea"
@@ -3950,6 +4002,7 @@ downloadAll = "Scarica tutto"
 downloadVersion = "Scarica questa versione"
 dropOverlay = "Rilascia i file per caricarli"
 dropOverlaySub = "I file iniziano in Locale. Usa 'Sposta in' o 'Salva nel cloud' per organizzarli in una cartella."
+duplicate = "Duplicate"
 file = "File"
 fileInfo = "File info"
 fileMenu = "Azioni file"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Ridimensiona albero cartelle (tasti freccia, Shift per passi
 save = "Salva"
 saveToServer = "Salva sul server"
 saveToServerDisabledHint = "Il salvataggio sul server non è abilitato su questo server. Chiedi al tuo amministratore di abilitarlo."
-search = "Cerca"
-searchPlaceholder = "Cerca in questa cartella e sottocartelle"
 selectAll = "Seleziona tutto"
 selectAllHint = "Fai clic per selezionare tutto. Suggerimento: tieni premuto Ctrl (o Cmd) per aggiungere i file uno alla volta, Shift per selezionare un intervallo."
 selectedCount = "{{count}} selezionati"
@@ -4044,6 +4095,10 @@ title = "Nessun file cloud ancora"
 hint = "I file salvati senza caricamento restano qui. Rilascia un file per aggiungerne uno."
 title = "Nessun file solo locale"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "I file che apri o modifichi appariranno qui."
 title = "Ancora nulla di modificato"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Impossibile eliminare la cartella."
 deleteFolderFailedDetail = "Impossibile eliminare la cartella: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Impossibile aggiornare l'aspetto della cartella."
 folderAppearanceFailedDetail = "Impossibile aggiornare l'aspetto della cartella: {{message}}"
 moveFilesFailed = "Impossibile spostare i file."
@@ -4113,6 +4170,11 @@ localHint = "Archiviato solo in questo browser"
 shared = "Condivisi"
 sharedHint = "Condivisi con te tramite link"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Più vecchi prima"
 modifiedDesc = "Più recenti prima"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Nessun file disponibile nell'archivio. Apri prima alcuni
 open = "Apri"
 openFile = "Apri file"
 openFiles = "Apri file"
+selectFile = "Select {{name}}"
 selectFromStorage = "Seleziona dall’archiviazione"
 upload = "Carica"
 uploadFile = "Carica file"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Tutto salvato"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Impossibile estrarre CSV"
 extractXlsxError = "Impossibile estrarre XLSX"
+filled = "filled"
 flattenAfterFilling = "Appiattisci dopo la compilazione"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obb"
 requiredFieldsError = "Compila tutti i campi obbligatori"
 rescanFields = "Riscansiona campi"
@@ -4795,9 +4863,6 @@ title = "Immagine a PDF"
 [imageToPdf]
 tags = "conversione,img,jpg,immagine,foto"
 
-[infoBanner]
-dismiss = "Ignora"
-
 [invite]
 acceptError = "Impossibile creare l'account"
 accountFor = "Creazione account per"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Caricamento riuscito!"
 uploadSuccessMessage = "Le tue immagini sono state trasferite."
 validating = "Validazione della sessione..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scansiona per caricare foto. Le immagini vengono convertite automaticamente in PDF."
 descriptionNoConvert = "Scansiona per caricare foto dal tuo dispositivo mobile."
@@ -4997,8 +5090,13 @@ title = "Carica da dispositivo mobile"
 tags = "Strumento multiplo,operazione multipla,interfaccia utente,trascinamento clic,front-end,lato client"
 title = "Multifunzione PDF"
 
-[navbar]
-search = "Cerca"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "L'autenticazione non è andata a buon fine. Puoi chiudere questa finestra e riprovare."
@@ -5127,6 +5225,7 @@ activeFiles = "La vista <strong>File attivi</strong> mostra tutti i PDF caricati
 allTools = "Questo è il pannello <strong>Tutti gli Strumenti</strong>, dove puoi sfogliare e selezionare tutti gli strumenti PDF disponibili."
 close = "Chiudi"
 cropSettings = "Ora che abbiamo selezionato il file che vogliamo ritagliare, possiamo configurare lo strumento Ritaglia per scegliere l'area a cui ritagliare il PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Facendo clic su uno dei file lo selezioni per l'elaborazione. Puoi selezionare più file per operazioni in blocco."
 fileReplacement = "Il file modificato sostituirà automaticamente l'originale nel Banco di lavoro, consentendoti di farlo passare facilmente attraverso altri strumenti."
 filesButton = "Il pulsante <strong>File</strong> sulla barra di accesso rapido consente di caricare PDF su cui usare gli strumenti."
@@ -5563,6 +5662,7 @@ freeBody = "Visualizza, modifica, unisci, dividi, firma, inserisci filigrana, co
 freeTitle = "Modifica PDF illimitata"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} PDF gratuiti"
 metaCategories = "Automazione · IA · Richieste API"
 
@@ -5642,6 +5742,7 @@ automation = "le automazioni"
 default = "questa funzionalità"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ limite di {{amount}}"
 metaCategories = "Automazione · IA · Spesa API"
 resets = "Si azzera a ogni periodo di fatturazione"
@@ -5970,6 +6071,11 @@ header = "Da PDF a PDF/A"
 tags = "archivio,a lungo termine,standard,conversione,archiviazione,conservazione"
 title = "Da PDF a PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "stampa,standard,conversione,produzione,prestampa,archiviazione"
 title = "PDF in PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Crediti"
 xsmall = "100 Crediti"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Scegli il piano adatto alle tue esigenze"
 title = "Piani disponibili"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Limite di spesa mensile raggiunto"
 title = "Impossibile aprire il portale Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "di {{allowance}} PDF gratuiti usati"
 capSuffix_other = "di {{allowance}} PDF gratuiti usati"
 eyebrow = "Prova Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Invia un documento o una notifica via email quando una policy viene eseguita."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Archivia documenti elaborati in Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDK ufficiali"
 beta = "Beta"
 deprecated = "Deprecato"
 
-[portal.docs.search]
-empty = "Nessun docs corrispondente"
-placeholder = "Cerca docs"
-results = "{{count}} risultati"
-
 [portal.docs.skills]
 eyebrow = "SKILL"
 lead = "Capacità incluse e denominate che il tuo agente invoca come singolo strumento. Ogni skill è una catena di operazioni deterministica con valutazioni associate."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Nessun documento corrisponde a questo filtro."
 rowActions = "Azioni riga"
 sensitiveLabel = "Sensibile"
-sensitiveTitle = "Sensibile: accesso richiesto"
 
 [portal.documents.table.columns]
 action = "Pipeline / Azione"
 document = "Documento"
+labels = "Labels"
 product = "Prodotto"
 status = "Stato"
 time = "Ora"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Ultima visualizzazione"
 region = "Regione"
 status = "Stato"
+target = "Target"
 version = "Versione"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Questa vista ha riscontrato un errore imprevisto. Riprova oppure
 retry = "Riprova"
 title = "Qualcosa è andato storto in questa pagina"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Indietro"
 body = "Scarica l'app desktop o ospita autonomamente il server."
@@ -7380,11 +7560,6 @@ cancel = "Annulla"
 confirm = "Revoca chiave"
 title = "Revoca chiave API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attestato"
-inScope = "In ambito"
-notApplicable = "N/D"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtra gli eventi di audit per categoria"
 heading = "Log di audit"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Successo"
 warning = "Avviso"
 
-[portal.infrastructure.certLabel]
-certified = "Certificato"
-inProgress = "In corso"
-notStarted = "Non avviato"
-
 [portal.infrastructure.createKey]
 cancel = "Annulla"
 createKey = "Crea chiave"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copia ora questo segreto: non verrà mostrato di nuovo."
 title = "Crea chiave API"
 titleCreated = "Chiave creata"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "In coda"
-rolledBack = "Ripristinato"
-rolling = "Distribuzione in corso"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Distribuito da"
-environment = "Ambiente"
-product = "Prodotto"
-status = "Stato"
-version = "Versione"
-when = "Quando"
-
-[portal.infrastructure.deployments.recent]
-heading = "Distribuzioni recenti"
-subheading = "Gli ultimi rollout tra prodotti e ambienti."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Istanze"
-latency = "Latenza"
-load = "Carico"
-p99 = "P99"
-region = "Regione"
-status = "Stato"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Versione"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regioni"
-subheading = "Integrità in tempo reale per ogni regione Stirling distribuita: latenza, carico e versione di rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Le regioni distribuite appariranno qui una volta eseguito il provisioning del tuo workspace."
-title = "Nessuna regione distribuita"
-
 [portal.infrastructure.keyLabel]
 active = "Attiva"
 revoked = "Revocata"
 
-[portal.infrastructure.modelLabel]
-active = "Attivo"
-degraded = "Degradato"
-disabled = "Disabilitato"
-
-[portal.infrastructure.models]
-heading = "Modelli"
-msValue = "{{value}} ms"
-subheading = "Il catalogo dei modelli e il routing che alimentano l'elaborazione dei documenti nel tuo workspace."
-
-[portal.infrastructure.models.byom]
-description = "Registra un modello on-prem o self-hosted e fissalo a una regione per l'elaborazione vincolata alla residenza dei dati."
-title = "Porta il tuo modello"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogo"
-sub = "Modelli gestiti disponibili per il tuo workspace, con latenza e costi in tempo reale."
-subEnterprise = "Modelli gestiti, bring-your-own e on-prem, con pinning per regione disponibile."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "I modelli nel catalogo del tuo workspace appariranno qui."
-title = "Nessun modello disponibile"
-
-[portal.infrastructure.models.columns]
-cost = "Costo"
-latency = "Latenza"
-load = "Carico"
-model = "Modello"
-status = "Stato"
-type = "Tipo"
-version = "Versione"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/chiamata"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modelli attivi"
-avgLatency = "Latenza media"
-included = "Incluso"
-monthlySpend = "Spesa mensile modelli"
-
-[portal.infrastructure.models.routing]
-empty = "Nessuna regola di routing configurata."
-heading = "Regole di routing"
-sub = "Quale modello gestisce ogni operazione. Il predefinito si applica quando nessuna regola più specifica corrisponde."
-subLocked = "Instrada le operazioni a modelli specifici: disponibile nei piani a pagamento."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Passa a Pro per controllare quale modello gestisce ogni operazione e tipo di documento."
-title = "Il routing dei modelli è una funzionalità a pagamento"
-
-[portal.infrastructure.models.routingColumns]
-default = "Predefinito"
-docType = "Tipo di documento"
-modelForAria = "Modello per {{operation}}"
-operation = "Operazione"
-routedTo = "Instradato a"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classificazione"
-extraction = "Estrazione"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradato"
-down = "Non disponibile"
-healthy = "Integro"
-
-[portal.infrastructure.security.access.byok]
-description = "Fornisci una chiave dal tuo KMS. Stirling cifra con essa ma può comunque leggere."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Le chiavi non lasciano mai il tuo KMS. Stirling conserva solo ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling gestisce le chiavi di crittografia. Il più semplice: zero operazioni sulle chiavi da parte tua."
-label = "Chiavi detenute da Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Criterio di accesso ai documenti"
-subheading = "Controlla chi può decifrare i documenti elaborati a riposo."
-
-[portal.infrastructure.security.attestations]
-heading = "Attestazioni di conformità"
-noReport = "Nessun report disponibile"
-subheading = "Postura di audit framework per framework, con report disponibili sui controlli attestati."
-viewReport = "Visualizza report →"
-
-[portal.infrastructure.security.compliance]
-heading = "Conformità"
-subheading = "Attestazioni e certificazioni che coprono la piattaforma Stirling."
-
-[portal.infrastructure.security.empty]
-description = "La configurazione di sicurezza del tuo workspace apparirà qui."
-title = "Postura di sicurezza non disponibile"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Con HYOK, le chiavi di crittografia non lasciano mai il tuo KMS. Stirling archivia ed elabora solo ciphertext che puoi revocare in qualsiasi momento."
-title = "Stirling non può decifrare i tuoi documenti"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nessun intervallo IP configurato: tutti gli IP sono consentiti."
-heading = "Allowlist IP"
-sub = "L'accesso API è limitato a questi intervalli CIDR."
-subLocked = "Limita l'accesso API a intervalli IP noti: disponibile nei piani a pagamento."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Passa a Pro per limitare l'accesso API a reti specifiche."
-title = "L'allowlist IP è una funzionalità a pagamento"
-
-[portal.infrastructure.security.ipColumns]
-added = "Aggiunto"
-addedBy = "Aggiunto da"
-cidr = "CIDR"
-label = "Etichetta"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmo"
-heading = "Gestione delle chiavi di crittografia"
-keyId = "Identificatore chiave"
-lastRotated = "Ultima rotazione"
-rotateKey = "Ruota chiave"
-rotationPolicy = "Criterio di rotazione"
-subheading = "Custodia delle chiavi che cifrano i documenti a riposo: chi può decifrare e come ruotano le chiavi."
-
-[portal.infrastructure.security.managedBanner]
-description = "La custodia bring-your-own-key (BYOK) e hold-your-own-key (HYOK) è disponibile su Enterprise. Aggiorna per fornire chiavi dal tuo KMS."
-title = "Le chiavi sono gestite da Stirling nel tuo piano"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacifico"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · limite dati GDPR"
-label = "Unione Europea"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Stati Uniti"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Residenza dei dati"
-subheading = "Dove i documenti vengono archiviati ed elaborati."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} usato"
-
-[portal.infrastructure.storage.empty]
-description = "Lo storage connesso e l'utilizzo appariranno qui."
-title = "Nessuno storage configurato"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Attivo"
-activeRange = "0–{{value}}d"
-archived = "Archiviato"
-coldStorage = "cold storage"
-deleted = "Eliminato"
-never = "mai"
-purged = "eliminato definitivamente"
-
-[portal.infrastructure.storage.providers]
-connect = "Connetti"
-connected = "Connesso"
-heading = "Provider connessi"
-subheading = "Dove vengono scritti gli artefatti elaborati."
-
-[portal.infrastructure.storage.retention]
-heading = "Conservazione"
-subheading = "Per quanto tempo gli artefatti vengono conservati prima dell'eliminazione del ciclo di vita."
-windowLabel = "Finestra di conservazione predefinita"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} giorno"
-days_other = "{{count}} giorni"
-never = "Non eliminare mai"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Utilizzo totale"
-progressLabel = "Storage utilizzato"
-subheading = "Storage consumato su tutti i provider connessi."
-
 [portal.infrastructure.tabs]
 apiKeys = "Chiavi API"
 audit = "Log di audit"
@@ -7715,11 +7657,9 @@ security = "Sicurezza"
 storage = "Storage"
 
 [portal.integrations]
-addAnother = "Aggiungi un'altra"
 availableHeading = "Disponibili"
 comingSoonHeading = "In arrivo"
 connect = "Connetti"
-connectedHeading = "Connesse"
 connectionCount_one = "{{count}} connessione"
 connectionCount_other = "{{count}} connessioni"
 customApi = "API personalizzata"
@@ -7737,6 +7677,10 @@ security = "Sicurezza"
 signing = "Firma"
 storage = "Archiviazione"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Connessa"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrazioni"
 pipelines = "Pipeline"
 policies = "Criteri"
 procurement = "Approvvigionamento"
-settings = "Impostazioni"
 sources = "Origini"
 usage = "Utilizzo e fatturazione"
 users = "Utenti"
@@ -7784,7 +7727,7 @@ title = "Pipeline"
 newPipeline = "Nuova pipeline"
 
 [portal.pipelines.builder]
-addStep = "Aggiungi strumento"
+activate = "Activate"
 back = "Torna alle pipeline"
 cannotFollow = "Impossibile accettare {{produced}}"
 chooseAccount = "Scegli un account"
@@ -7792,28 +7735,38 @@ chooseDestination = "Scegli una destinazione"
 chooseOperation = "Scegli cosa fa questo passaggio"
 chooseSource = "Scegli un'origine"
 discard = "Scarta modifiche"
-enabled = "Abilitata"
 inputs = "Input"
 inputSource = "Origine input"
 inputTrigger = "Trigger"
 keepEditing = "Continua a modificare"
+moreActions = "More actions"
 needsConfiguring = "Richiede configurazione"
-needsUpload = "Richiede un file caricato"
-noSources = "Nessuna origine ancora connessa. Creane una per usarla come input."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nessuno strumento corrisponde alla tua ricerca."
-pipelineSettings = "Impostazioni pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Cerca strumenti"
-selectToolBody = "Aggiungi uno strumento per creare la tua pipeline."
-selectToolTitle = "Ancora nessuno strumento"
 sendToSystem = "Invia a un altro sistema"
 stepsIncompatible = "Questi passaggi non possono essere eseguiti su ciò che produce il passaggio precedente: {{tools}}."
 stepsNeedSetup = "Questi passaggi devono ancora essere configurati prima del salvataggio: {{tools}}."
-toolSettings = "Impostazioni strumento"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operazione non riconosciuta, mantenuta così com'è."
 unsavedBody = "Hai modifiche non salvate. Salvale prima di uscire o scartarle?"
 unsavedTitle = "Modifiche non salvate"
-uploadUnsupported = "I file caricati non sono ancora supportati nelle pipeline, quindi questi passaggi non possono essere salvati: {{tools}}."
 usesDefaults = "Esegue con impostazioni predefinite"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combina ogni file del passaggio precedente"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Impossibile verificare cosa accetta questo passaggio"
 
 [portal.pipelines.composer]
 addTool = "Aggiungi strumento"
-cancel = "Annulla"
-chainEmpty = "Aggiungi uno strumento per iniziare a creare la tua pipeline."
 create = "Crea pipeline"
+createPaused = "Create paused"
 editingUnsupported = "La visualizzazione di questi parametri dello strumento per la modifica non è ancora supportata."
-moveDown = "Sposta giù"
-moveUp = "Sposta su"
+editSource = "Edit source"
 name = "Nome"
 namePlaceholder = "es. Scansione redazione"
 noToolSettings = "Questo strumento non ha impostazioni configurabili."
-operations_one = "Operazione ({{count}})"
-operations_other = "Operazioni ({{count}})"
 output = "Output"
-removeStep = "Rimuovi operazione"
 save = "Salva modifiche"
 scheduleEvery = "Esegui ogni"
-sources = "Origini"
-sourcesLoading = "Caricamento origini..."
 trigger = "Trigger"
 triggerManual = "Solo manuale"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "giorni"
 hours = "ore"
 minutes = "minuti"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Eliminare \"{{name}}\"? Questa azione non può essere annullata."
 cancel = "Annulla"
@@ -7867,6 +7825,37 @@ connectSource = "Connetti un'origine"
 description = "Crea la tua prima pipeline: scegli le origini su cui viene eseguita, concatena le operazioni e scegli dove inviare l'output."
 title = "Ancora nessuna pipeline"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Attive"
 paused = "In pausa"
@@ -7879,7 +7868,6 @@ completed_one = "Esecuzione completata."
 completed_other = "Tutte le {{count}} esecuzioni completate."
 empty = "Niente da eseguire: le origini non avevano documenti da elaborare."
 failed = "Esecuzione non riuscita: {{error}}"
-historyCleared = "Cronologia cancellata. La prossima esecuzione rielabora tutto ciò che è attualmente nelle origini."
 inFlight = "Niente di nuovo da eseguire: i documenti sono ancora in elaborazione da un'esecuzione precedente."
 parked_one = "Niente da eseguire: {{count}} documento non è riuscito in precedenza ed è parcheggiato. Correggi la causa, poi cancella la cronologia per riprovarlo."
 parked_other = "Niente da eseguire: {{count}} documenti non sono riusciti in precedenza e sono parcheggiati. Correggi la causa, poi cancella la cronologia per riprovarli."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Origini"
 status = "Stato"
 steps = "Passaggi"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Monitoraggio cartella"
@@ -8209,6 +8198,24 @@ label = "Allega a una issue Jira"
 description = "Invia il documento elaborato come allegato."
 label = "Invia il documento via Email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Scrive il documento elaborato in una cartella."
 label = "Carica su Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Limite raggiunto"
 subtitle = "La tua trial gratuita dura fino al {{date}}. Nessuna carta richiesta."
 title = "Trial Enterprise"
 
-[portal.search]
-ariaLabel = "Cerca"
-placeholder = "Cerca in Stirling — endpoint, pipeline, doc…"
-
-[portal.search.empty]
-noActionsDescription = "Le azioni rapide appariranno qui quando saranno disponibili."
-noActionsTitle = "Nessuna azione rapida"
-noMatches = "Nessuna corrispondenza per \"{{query}}\""
-noMatchesDescription = "Prova una parola chiave diversa o sfoglia il catalogo."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Annulla"
 confirm = "Elimina"
 title = "Eliminare origine?"
 
-[portal.sources.empty]
-description = "Collega una cartella (e, presto, cloud storage) così i tuoi criteri avranno un posto da cui prelevare documenti."
-title = "Nessuna origine collegata ancora"
-
 [portal.sources.kpi]
 inUse = "In uso"
 total = "Connessioni"
@@ -8785,6 +8778,7 @@ unused = "Non usata"
 documents = "Documenti"
 source = "Origine"
 status = "Stato"
+type = "Type"
 usedBy = "Criteri"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Policy e privacy"
 [settings.preferences]
 title = "Preferenze"
 
-[settings.search]
-placeholder = "Cerca nelle pagine delle impostazioni..."
-
 [settings.security]
 description = "Aggiorna la password per mantenere sicuro il tuo account."
 title = "Sicurezza"
@@ -10128,6 +10119,7 @@ last = "Ultima pagina"
 maintainRatio = "Attiva il mantenimento delle proporzioni"
 next = "Prossima pagina"
 noSavedSigs = "Nessuna firma salvata trovata"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Firme personali"
 previous = "Pagina precedente"
 redo = "Rifare"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Rimozione dello sfondo non riuscita"
 hint = "Carica un'immagine PNG o JPG della tua firma"
 label = "Carica immagine firma"
 placeholder = "Seleziona file immagine"
+previewAlt = "Current image signature"
 processing = "Elaborazione immagine..."
 removeBackground = "Rimuovi sfondo bianco (rendi trasparente)"
 
@@ -10179,6 +10172,17 @@ saved = "Seleziona una firma salvata sopra, poi clicca ovunque sul PDF per posiz
 text = "Dopo aver inserito il tuo nome sopra, clicca in un punto del PDF per inserire la tua firma."
 title = "Come aggiungere la firma"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Sposta firma"
 pause = "Metti in pausa posizionamento"
@@ -10625,6 +10629,23 @@ title = "Carica sul server"
 updateButton = "Aggiorna sul server"
 uploadButton = "Carica sul server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Sondaggio su Stirling-PDF"
 
@@ -10774,7 +10795,6 @@ goBack = "Torna indietro"
 pdfTools = "Strumenti PDF"
 placeholder = "Scegli uno strumento per iniziare"
 premiumFeature = "Funzione Premium:"
-searchTools = "Cerca strumenti"
 toolsHeader = "Strumenti"
 viewAllTools = "Visualizza tutti gli strumenti"
 
@@ -10822,6 +10842,9 @@ removal = "Rimozione"
 signing = "Firma"
 verification = "Verifica"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nessuno strumento trovato"
 noTools = "Nessuno strumento disponibile"
@@ -10979,6 +11002,13 @@ approver = "Approva criterio"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Annullare l'invito a {{email}}? Non potrà unirsi con il link attuale."
 cancelInviteTitle = "Annulla invito"
@@ -10998,10 +11028,8 @@ title = "Nessun membro ancora"
 addToTeam = "Aggiungi al team"
 guestCount = "{{count}} ospiti"
 guests = "Ospite"
-guestsDesc = "Collaboratori esterni, limitati a ciò che hai condiviso. Solo Editor."
 ledBy = "guidato da {{owner}}"
 org = "Organizzazione"
-orgDesc = "Proprietari con autorità su tutta l'organizzazione e approvazione dei criteri"
 owners = "{{count}} proprietario"
 team = "Team {{name}}"
 teamMeta = "{{count}} persone"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invitato da {{who}}"
 cancel = "Annulla"
-count = "{{count}} in sospeso"
-desc = "Persone invitate che non si sono ancora unite. Occupano un posto finché non accettano."
 expiresInDays_one = "Scade tra {{count}} giorno"
 expiresInDays_other = "Scade tra {{count}} giorni"
 expiresToday = "Scade oggi"
 title = "Inviti in sospeso"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Qualcosa è andato storto nel contattare il backend, oppure non hai accesso. Riprova."
 title = "Impossibile caricare i membri"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Cerca allegati"
 title = "Allegati"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Titolo del segnalibro"
 bookmarkTitleRequired = "Il titolo del segnalibro è obbligatorio"
 closeSidebar = "Chiudi la barra laterale dei segnalibri"
 collapseAll = "Comprimi tutti i segnalibri"
+empty = "No bookmarks in this document"
 expandAll = "Espandi tutti i segnalibri"
 searchPlaceholder = "Cerca segnalibri"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Aggiungi commento"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Individua nel documento"
 moreActions = "Altre azioni"
 nComments_one = "{{count}} commento"
 nComments_other = "{{count}} commenti"
+noMatch = "No comments match your search"
 pageLabel = "Pagina {{page}}"
 placingHint = "Fai clic su una pagina per posizionare… (annulla)"
 removeCommentOnly = "Rimuovi solo il commento"
 saveReply = "Salva risposta"
+searchPlaceholder = "Search comments"
 title = "Commenti"
 typeComment = "Commento"
 typeInsertText = "Inserisci testo"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Hai modifiche non salvate"
 closeSidebar = "Chiudi la barra laterale dei livelli"
 hideAll = "Nascondi tutti i livelli"
 showAll = "Mostra tutti i livelli"
+title = "Layers"
 
 [viewer.link]
 delete = "Elimina link"
@@ -11646,6 +11682,7 @@ exitRedaction = "Esci dalla modalità di oscuramento"
 exportAll = "Esporta PDF"
 exportSelected = "Esporta pagine selezionate"
 formFill = "Compila modulo"
+hideToolbar = "Hide toolbar"
 multiTool = "Strumento multiplo"
 panMode = "Modalità mano"
 print = "Stampa PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Seleziona tutto"
 selectByNumber = "Seleziona per numeri di pagina"
 selectLanguage = "Seleziona lingua"
 share = "Condividi"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Mostra/Nascondi annotazioni"
 toggleAttachments = "Mostra/Nascondi allegati"
 toggleBookmarks = "Mostra/Nascondi segnalibri"
diff --git a/frontend/editor/public/locales/ja-JP/translation.toml b/frontend/editor/public/locales/ja-JP/translation.toml
index 292d39f7e0..2d67a7427a 100644
--- a/frontend/editor/public/locales/ja-JP/translation.toml
+++ b/frontend/editor/public/locales/ja-JP/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "アルファベット"
 apply = "適用"
 applyAndContinue = "適用して続行"
-areYouSure = "本当に離れますか？"
 back = "戻る"
 black = "黒"
 blue = "青"
@@ -106,6 +105,7 @@ undoSuccess = "操作を元に戻しました"
 unknown = "不明"
 unpin = "ピン留めを解除（ツール実行後に置き換え）"
 unsavedChanges = "PDF に未保存の変更があります。"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "未保存の変更"
 unsupported = "未対応"
 username = "ユーザー名"
@@ -1879,6 +1879,9 @@ width = "幅"
 [app]
 description = "無料の Adobe Acrobat 代替（1,000万+ ダウンロード）"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b に変換"
 convertToPdfA3bDescription = "添付ファイルを埋め込んだアーカイブ用 PDF を作成します"
@@ -2933,12 +2936,16 @@ text = "これらの権限を変更不可にするには、パスワード追加
 [chat.actions]
 copy = "メッセージをコピー"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling エージェントのオプション"
+assistant = "AI Assistant"
 clearChat = "チャットをクリア"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "この操作はクラウドクレジットを消費します"
 tooltip = "画面から色を取得"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "色を選択"
 
 [common]
+actions = "Actions"
 back = "戻る"
 cancel = "キャンセル"
 close = "閉じる"
+codeSample = "Code sample"
 collapse = "折りたたむ"
 confirm = "確認"
 continue = "続行"
 copied = "コピーしました！"
 copy = "コピー"
 done = "完了"
+enterValue = "Enter value"
 error = "エラー"
 expand = "展開"
 loading = "読み込み中..."
 next = "次へ"
+open = "Open"
 preview = "プレビュー"
 previous = "前へ"
 refresh = "更新"
 remaining = "残り"
 retry = "再試行"
 save = "保存"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "選択をクリア"
@@ -3185,6 +3199,7 @@ title = "圧縮方式"
 [compress.settings]
 desiredSize = "目標ファイルサイズ"
 desiredSizePlaceholder = "サイズを入力"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "圧縮はファイルサイズを簡単に減らす方法です。「ファイルサイズ」を選ぶと目標サイズを入力でき、品質は自動調整します。「品質」を選ぶと圧縮強度を手動設定できます。"
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF オプション"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "先に変換元形式を選択してください"
 settings = "設定"
 single = "単一"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "検索..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "編集"
@@ -3824,11 +3861,13 @@ shareSelected = "選択項目を共有"
 sharing = "共有"
 showAll = "すべて表示"
 showHistory = "履歴を表示"
+sortBy = "Sort files"
 sortByDate = "日付で並べ替え"
 sortByName = "名前で並べ替え"
 sortBySize = "サイズで並べ替え"
 storage = "ストレージ"
 storageState = "ストレージ"
+storageUsed = "Storage used"
 synced = "同期済み"
 title = "PDF ファイルをアップロード"
 toolChain = "適用ツール"
@@ -3874,8 +3913,12 @@ addFiles = "ファイルを追加"
 addingFiles = "ファイルを追加中…"
 collapse = "サイドバーを折りたたむ"
 customizeGroups = "グループをカスタマイズ"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "開始するにはファイルを開いてください"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "サイドバーを展開"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive が未設定です"
@@ -3888,15 +3931,17 @@ openFromComputer = "コンピューターから開く"
 openSettings = "設定を開く"
 other = "その他"
 recent = "最近"
-search = "検索"
-searchPlaceholder = "ファイルを検索..."
 viewAll = "{{count}} 個のファイルをすべて表示"
 
 [fileSidebar.fileItem]
 closeViewer = "ビューアを閉じる"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "ビューアで開く"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "デフォルトにリセット"
 subtitle = "ファイルを親カテゴリにグループ化します。既存または新しいラベルをカテゴリに追加したり、名前を変更したり、独自のカテゴリを作成したりできます。どのカテゴリにも属さないファイルは「その他」に表示されます。"
 title = "サイドバーのカテゴリ"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "ワークスペースに追加"
 addToWorkspaceCount = "{{count}} 件をワークスペースに追加"
@@ -3918,7 +3971,6 @@ backToMyFiles = "マイファイルに戻る"
 breadcrumbs = "フォルダパス"
 cancel = "キャンセル"
 classification = "分類"
-clearSearch = "検索をクリア"
 clearSelection = "選択をクリア"
 closeDetails = "詳細を閉じる"
 create = "作成"
@@ -3950,6 +4002,7 @@ downloadAll = "すべてダウンロード"
 downloadVersion = "このバージョンをダウンロード"
 dropOverlay = "ドロップしてアップロード"
 dropOverlaySub = "ファイルは最初はローカルに追加されます。フォルダに整理するには『Move to』または『Save to cloud』を使用してください。"
+duplicate = "Duplicate"
 file = "ファイル"
 fileInfo = "File info"
 fileMenu = "ファイルの操作"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "フォルダツリーのサイズ変更（矢印キー、Shi
 save = "保存"
 saveToServer = "サーバーに保存"
 saveToServerDisabledHint = "このサーバーでサーバーへの保存は有効になっていません。管理者に有効化を依頼してください。"
-search = "検索"
-searchPlaceholder = "このフォルダとサブフォルダを検索"
 selectAll = "すべて選択"
 selectAllHint = "クリックですべて選択。ヒント: Ctrl（または Cmd）でファイルを個別に追加、Shift で範囲選択。"
 selectedCount = "{{count}} 件を選択"
@@ -4044,6 +4095,10 @@ title = "まだクラウドファイルがありません"
 hint = "アップロードせずに保存したファイルはここに残ります。ファイルをドロップして追加できます。"
 title = "ローカル専用のファイルはありません"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "開いたり編集したファイルがここに表示されます。"
 title = "まだ変更はありません"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "フォルダを削除できませんでした。"
 deleteFolderFailedDetail = "フォルダを削除できませんでした: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "フォルダの外観を更新できませんでした。"
 folderAppearanceFailedDetail = "フォルダの外観を更新できませんでした: {{message}}"
 moveFilesFailed = "ファイルを移動できませんでした。"
@@ -4113,6 +4170,11 @@ localHint = "このブラウザにのみ保存"
 shared = "共有"
 sharedHint = "リンクであなたと共有"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "古い順"
 modifiedDesc = "新しい順"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "ストレージに利用可能なファイルがあり
 open = "開く"
 openFile = "ファイルを開く"
 openFiles = "複数ファイルを開く"
+selectFile = "Select {{name}}"
 selectFromStorage = "ストレージから選択"
 upload = "アップロード"
 uploadFile = "ファイルをアップロード"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "すべて保存済み"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV の抽出に失敗しました"
 extractXlsxError = "XLSX の抽出に失敗しました"
+filled = "filled"
 flattenAfterFilling = "入力後にフラット化"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "必須"
 requiredFieldsError = "必須フィールドをすべて入力してください"
 rescanFields = "フィールドを再スキャン"
@@ -4795,9 +4863,6 @@ title = "画像をPDFに変換"
 [imageToPdf]
 tags = "conversion,img,jpg,picture,photo,psd,photoshop"
 
-[infoBanner]
-dismiss = "閉じる"
-
 [invite]
 acceptError = "アカウントの作成に失敗しました"
 accountFor = "次のユーザーのアカウントを作成:"
@@ -4979,6 +5044,34 @@ uploadSuccess = "アップロード成功！"
 uploadSuccessMessage = "画像の転送が完了しました。"
 validating = "セッションを検証中..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "スキャンして写真をアップロード。画像は自動で PDF に変換されます。"
 descriptionNoConvert = "モバイルデバイスから写真をアップロードするためにスキャンします。"
@@ -4997,8 +5090,13 @@ title = "モバイルからアップロード"
 tags = "マルチツール,マルチ操作,UI,クリック&ドラッグ,フロントエンド,クライアントサイド,インタラクティブ,操作可能,移動,削除,移行,分割"
 title = "PDFマルチツール"
 
-[navbar]
-search = "検索"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "認証に失敗しました。このウィンドウを閉じて、もう一度お試しください。"
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>アクティブファイル</strong> ビューには、
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "閉じる"
 cropSettings = "切り抜きたいファイルを選択したら、PDF を切り抜く範囲を指定するために切り抜きツールを設定できます。"
+dialogLabel = "Onboarding"
 fileCheckbox = "ファイルをクリックすると、処理対象として選択されます。バッチ処理のために複数選択も可能です。"
 fileReplacement = "変更されたファイルはワークベンチ内で元のファイルを自動的に置き換えるため、さらに別のツールに簡単に回せます。"
 filesButton = "クイックアクセスバーの <strong>ファイル</strong> ボタンから、ツールで使用する PDF をアップロードできます。"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDFをPDF/Aに変換"
 tags = "アーカイブ,長期,標準,変換,保存,保全"
 title = "PDFをPDF/Aに変換"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "印刷,標準,変換,制作,プリプレス,アーカイブ"
 title = "PDF を PDF/X に"
@@ -6045,6 +6151,7 @@ small = "500 クレジット"
 xsmall = "100 クレジット"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "ニーズに合ったプランを選択"
 title = "利用可能なプラン"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "月間利用額上限に達しました"
 title = "Stripe ポータルを開けませんでした"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "{{allowance}} 件の無料PDFのうち使用済み"
 capSuffix_other = "{{allowance}} 件の無料PDFのうち使用済み"
 eyebrow = "Processor トライアル"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "policy 実行時にドキュメントまたは通知をメール送信します。"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "処理済みドキュメントを Nextcloud に保存します。"
@@ -7077,11 +7211,6 @@ title = "公式 SDKs"
 beta = "Beta"
 deprecated = "非推奨"
 
-[portal.docs.search]
-empty = "一致するドキュメントはありません"
-placeholder = "ドキュメントを検索"
-results = "{{count}} 件の結果"
-
 [portal.docs.skills]
 eyebrow = "スキル"
 lead = "エージェントが単一ツールとして呼び出す、バンドルされた名前付き機能です。各スキルは評価付きの決定論的な操作チェーンです。"
@@ -7180,11 +7309,11 @@ editorAction = "エディター"
 empty = "このフィルターに一致するドキュメントはありません。"
 rowActions = "行のアクション"
 sensitiveLabel = "機密"
-sensitiveTitle = "機密 — アクセスが必要"
 
 [portal.documents.table.columns]
 action = "パイプライン / アクション"
 document = "ドキュメント"
+labels = "Labels"
 product = "製品"
 status = "ステータス"
 time = "時刻"
@@ -7200,6 +7329,7 @@ host = "ホスト"
 lastSeen = "最終確認"
 region = "リージョン"
 status = "ステータス"
+target = "Target"
 version = "バージョン"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "このビューで予期しないエラーが発生しました
 retry = "再試行"
 title = "このページで問題が発生しました"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "戻る"
 body = "デスクトップアプリをダウンロードするか、サーバーをセルフホストします。"
@@ -7380,11 +7560,6 @@ cancel = "キャンセル"
 confirm = "キーを取り消す"
 title = "API キーを取り消す"
 
-[portal.infrastructure.attestationLabel]
-attested = "証明済み"
-inScope = "対象範囲内"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "カテゴリで監査イベントをフィルター"
 heading = "監査ログ"
@@ -7456,11 +7631,6 @@ info = "情報"
 success = "成功"
 warning = "警告"
 
-[portal.infrastructure.certLabel]
-certified = "認定済み"
-inProgress = "進行中"
-notStarted = "未開始"
-
 [portal.infrastructure.createKey]
 cancel = "キャンセル"
 createKey = "キーを作成"
@@ -7474,238 +7644,10 @@ subtitleCreated = "今すぐこのシークレットをコピーしてくださ
 title = "API キーを作成"
 titleCreated = "キーが作成されました"
 
-[portal.infrastructure.deployLabel]
-live = "ライブ"
-queued = "キュー済み"
-rolledBack = "ロールバック済み"
-rolling = "ロールアウト中"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "デプロイ者"
-environment = "環境"
-product = "製品"
-status = "ステータス"
-version = "バージョン"
-when = "日時"
-
-[portal.infrastructure.deployments.recent]
-heading = "最近のデプロイメント"
-subheading = "製品と環境全体の最新のロールアウト。"
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "インスタンス"
-latency = "レイテンシ"
-load = "負荷"
-p99 = "P99"
-region = "リージョン"
-status = "ステータス"
-throughput = "スループット"
-uptime = "稼働時間"
-version = "バージョン"
-
-[portal.infrastructure.deployments.regions]
-heading = "リージョン"
-subheading = "デプロイ済みのすべての Stirling リージョンのライブ健全性 — レイテンシ、負荷、ロールアウトバージョン。"
-
-[portal.infrastructure.deployments.regions.empty]
-description = "ワークスペースがプロビジョニングされると、デプロイ済みリージョンがここに表示されます。"
-title = "デプロイ済みリージョンはありません"
-
 [portal.infrastructure.keyLabel]
 active = "アクティブ"
 revoked = "取り消し済み"
 
-[portal.infrastructure.modelLabel]
-active = "アクティブ"
-degraded = "低下"
-disabled = "無効"
-
-[portal.infrastructure.models]
-heading = "モデル"
-msValue = "{{value}} ms"
-subheading = "ワークスペース全体のドキュメント処理を支えるモデルカタログとルーティング。"
-
-[portal.infrastructure.models.byom]
-description = "オンプレミスまたはセルフホスト型モデルを登録し、データレジデンシー制約のある処理のためにリージョンに固定します。"
-title = "独自モデルを持ち込む"
-
-[portal.infrastructure.models.catalogue]
-heading = "カタログ"
-sub = "ワークスペースで利用可能なマネージドモデル。ライブのレイテンシとコスト付き。"
-subEnterprise = "マネージド、持ち込み、オンプレミスモデル — リージョンごとの固定が利用可能。"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "ワークスペースのカタログ内のモデルがここに表示されます。"
-title = "利用可能なモデルはありません"
-
-[portal.infrastructure.models.columns]
-cost = "コスト"
-latency = "レイテンシ"
-load = "負荷"
-model = "モデル"
-status = "ステータス"
-type = "種類"
-version = "バージョン"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/call"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "アクティブモデル"
-avgLatency = "平均レイテンシ"
-included = "含まれる"
-monthlySpend = "月間モデル費用"
-
-[portal.infrastructure.models.routing]
-empty = "ルーティングルールは設定されていません。"
-heading = "ルーティングルール"
-sub = "各操作をどのモデルが処理するか。より限定的なルールに一致しない場合はデフォルトが適用されます。"
-subLocked = "操作を特定のモデルにルーティング — 有料プランで利用可能です。"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Pro にアップグレードすると、各操作とドキュメントタイプをどのモデルが処理するかを制御できます。"
-title = "モデルルーティングは有料機能です"
-
-[portal.infrastructure.models.routingColumns]
-default = "デフォルト"
-docType = "ドキュメントタイプ"
-modelForAria = "{{operation}} のモデル"
-operation = "操作"
-routedTo = "ルーティング先"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "分類"
-extraction = "抽出"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "低下"
-down = "停止"
-healthy = "正常"
-
-[portal.infrastructure.security.access.byok]
-description = "独自の KMS からキーを提供します。Stirling はそのキーで暗号化しますが、引き続き読み取り可能です。"
-label = "独自キーを持ち込む（BYOK）"
-
-[portal.infrastructure.security.access.hyok]
-description = "キーは KMS から外に出ません。Stirling は暗号文のみを保持します。"
-label = "独自キーを保持する（HYOK）"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling が暗号化キーを管理します。最も簡単で、ユーザー側のキー運用は不要です。"
-label = "Stirling 保持のキー"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "ドキュメントアクセスポリシー"
-subheading = "保存中の処理済みドキュメントを誰が復号できるかを制御します。"
-
-[portal.infrastructure.security.attestations]
-heading = "コンプライアンス証明"
-noReport = "利用可能なレポートはありません"
-subheading = "フレームワークごとの監査態勢。証明済み統制についてはレポートを利用できます。"
-viewReport = "レポートを表示 →"
-
-[portal.infrastructure.security.compliance]
-heading = "コンプライアンス"
-subheading = "Stirling プラットフォームを対象とする証明と認証。"
-
-[portal.infrastructure.security.empty]
-description = "ワークスペースのセキュリティ設定がここに表示されます。"
-title = "セキュリティ態勢を利用できません"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK では、暗号化キーが KMS から外に出ることはありません。Stirling は暗号文のみを保存および処理し、いつでも取り消すことができます。"
-title = "Stirling はドキュメントを復号できません"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "設定された IP 範囲はありません — すべての IP が許可されています。"
-heading = "IP allowlist"
-sub = "API アクセスはこれらの CIDR 範囲に制限されています。"
-subLocked = "API アクセスを既知の IP 範囲に制限 — 有料プランで利用可能です。"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Pro にアップグレードすると、API アクセスを特定のネットワークに制限できます。"
-title = "IP allowlist は有料機能です"
-
-[portal.infrastructure.security.ipColumns]
-added = "追加日"
-addedBy = "追加者"
-cidr = "CIDR"
-label = "ラベル"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "アルゴリズム"
-heading = "暗号化キー管理"
-keyId = "キー識別子"
-lastRotated = "最終ローテーション"
-rotateKey = "キーをローテーション"
-rotationPolicy = "ローテーションポリシー"
-subheading = "保存中のドキュメントを暗号化するキーの管理 — 誰が復号できるか、キーをどのようにローテーションするか。"
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key（BYOK）と hold-your-own-key（HYOK）の管理は Enterprise で利用できます。独自の KMS からキーを提供するにはアップグレードしてください。"
-title = "お使いのプランではキーは Stirling によって管理されます"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "アジア太平洋"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR データ境界"
-label = "欧州連合"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "米国"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "データレジデンシー"
-subheading = "ドキュメントが保存および処理される場所。"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} 使用済み"
-
-[portal.infrastructure.storage.empty]
-description = "接続されたストレージと使用量がここに表示されます。"
-title = "ストレージが設定されていません"
-
-[portal.infrastructure.storage.lifecycle]
-active = "アクティブ"
-activeRange = "0–{{value}}d"
-archived = "アーカイブ済み"
-coldStorage = "コールドストレージ"
-deleted = "削除済み"
-never = "なし"
-purged = "パージ済み"
-
-[portal.infrastructure.storage.providers]
-connect = "接続"
-connected = "接続済み"
-heading = "接続済みプロバイダー"
-subheading = "処理済みアーティファクトの書き込み先。"
-
-[portal.infrastructure.storage.retention]
-heading = "保持"
-subheading = "ライフサイクル削除までアーティファクトを保持する期間。"
-windowLabel = "デフォルトの保持期間"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} 日"
-days_other = "{{count}} 日"
-never = "削除しない"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "合計使用量"
-progressLabel = "使用済みストレージ"
-subheading = "接続済みプロバイダー全体で消費されたストレージ。"
-
 [portal.infrastructure.tabs]
 apiKeys = "API キー"
 audit = "監査ログ"
@@ -7715,11 +7657,9 @@ security = "セキュリティ"
 storage = "ストレージ"
 
 [portal.integrations]
-addAnother = "別のものを追加"
 availableHeading = "利用可能"
 comingSoonHeading = "近日対応予定"
 connect = "接続"
-connectedHeading = "接続済み"
 connectionCount_one = "{{count}} 件の接続"
 connectionCount_other = "{{count}} 件の接続"
 customApi = "カスタム API"
@@ -7737,6 +7677,10 @@ security = "セキュリティ"
 signing = "署名"
 storage = "ストレージ"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "接続済み"
 
@@ -7767,7 +7711,6 @@ integrations = "連携"
 pipelines = "パイプライン"
 policies = "ポリシー"
 procurement = "調達"
-settings = "設定"
 sources = "ソース"
 usage = "使用量と請求"
 users = "ユーザー"
@@ -7784,7 +7727,7 @@ title = "パイプライン"
 newPipeline = "新しいパイプライン"
 
 [portal.pipelines.builder]
-addStep = "ツールを追加"
+activate = "Activate"
 back = "パイプラインに戻る"
 cannotFollow = "{{produced}} を受け取れません"
 chooseAccount = "アカウントを選択"
@@ -7792,28 +7735,38 @@ chooseDestination = "宛先を選択"
 chooseOperation = "このステップの処理を選択"
 chooseSource = "ソースを選択"
 discard = "変更を破棄"
-enabled = "有効"
 inputs = "入力"
 inputSource = "入力ソース"
 inputTrigger = "トリガー"
 keepEditing = "編集を続ける"
+moreActions = "More actions"
 needsConfiguring = "設定が必要です"
-needsUpload = "アップロードされたファイルが必要"
-noSources = "まだ接続済みのソースがありません。入力として使用するには作成してください。"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "検索に一致するツールはありません。"
-pipelineSettings = "パイプライン設定"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "ツールを検索"
-selectToolBody = "ツールを追加してパイプラインを構築します。"
-selectToolTitle = "ツールはまだありません"
 sendToSystem = "別のシステムへ送信"
 stepsIncompatible = "これらのステップは、前のステップが生成するものでは実行できません: {{tools}}。"
 stepsNeedSetup = "保存する前に、これらのステップの設定がまだ必要です: {{tools}}。"
-toolSettings = "ツール設定"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "認識できない操作です。そのまま保持されました。"
 unsavedBody = "未保存の変更があります。離れる前に保存しますか、それとも破棄しますか？"
 unsavedTitle = "未保存の変更"
-uploadUnsupported = "アップロードされたファイルはまだパイプラインでサポートされていないため、これらのステップは保存できません: {{tools}}。"
 usesDefaults = "デフォルト設定で実行"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "前のステップからのすべてのファイルを結合します"
@@ -7825,31 +7778,36 @@ undeclared-operation = "このステップが受け付けるものを確認で
 
 [portal.pipelines.composer]
 addTool = "ツールを追加"
-cancel = "キャンセル"
-chainEmpty = "ツールを追加してパイプラインの構築を開始します。"
 create = "パイプラインを作成"
+createPaused = "Create paused"
 editingUnsupported = "これらのツールパラメーターを編集用に表示することはまだサポートされていません。"
-moveDown = "下へ移動"
-moveUp = "上へ移動"
+editSource = "Edit source"
 name = "名前"
 namePlaceholder = "例: Redaction sweep"
 noToolSettings = "このツールには設定可能な項目がありません。"
-operations_one = "操作（{{count}}）"
-operations_other = "操作（{{count}}）"
 output = "出力"
-removeStep = "操作を削除"
 save = "変更を保存"
 scheduleEvery = "実行間隔"
-sources = "ソース"
-sourcesLoading = "ソースを読み込み中..."
 trigger = "トリガー"
 triggerManual = "手動のみ"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "日"
 hours = "時間"
 minutes = "分"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" を削除しますか？この操作は元に戻せません。"
 cancel = "キャンセル"
@@ -7867,6 +7825,37 @@ connectSource = "ソースを接続"
 description = "最初のパイプラインを作成します: 実行対象のソースを選び、操作を連結し、出力先を選択します。"
 title = "パイプラインはまだありません"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "アクティブ"
 paused = "一時停止中"
@@ -7879,7 +7868,6 @@ completed_one = "実行が完了しました。"
 completed_other = "{{count}} 件の実行がすべて完了しました。"
 empty = "実行するものがありません: ソースに処理対象のドキュメントがありませんでした。"
 failed = "実行に失敗しました: {{error}}"
-historyCleared = "履歴をクリアしました。次回の実行では、現在ソース内にあるすべてを再処理します。"
 inFlight = "新しく実行するものがありません: 以前の実行のドキュメントがまだ処理中です。"
 parked_one = "実行するものがありません: {{count}} 件のドキュメントは以前に失敗して保留中です。原因を修正してから、履歴をクリアして再試行してください。"
 parked_other = "実行するものがありません: {{count}} 件のドキュメントは以前に失敗して保留中です。原因を修正してから、履歴をクリアして再試行してください。"
@@ -7895,6 +7883,7 @@ name = "パイプライン"
 sources = "ソース"
 status = "ステータス"
 steps = "ステップ"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "フォルダー監視"
@@ -8209,6 +8198,24 @@ label = "Jira 課題に添付"
 description = "処理済みドキュメントを添付ファイルとして送信します。"
 label = "ドキュメントをメール送信（Mailgun）"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "処理済みドキュメントをフォルダーに書き込みます。"
 label = "Nextcloud にアップロード"
@@ -8683,16 +8690,6 @@ maxed = "上限に達しました"
 subtitle = "無料トライアルは {{date}} まで有効です。カードは不要です。"
 title = "Enterprise トライアル"
 
-[portal.search]
-ariaLabel = "検索"
-placeholder = "Stirling を検索 — エンドポイント、パイプライン、ドキュメント…"
-
-[portal.search.empty]
-noActionsDescription = "利用可能になると、クイックアクションがここに表示されます。"
-noActionsTitle = "クイックアクションはありません"
-noMatches = "「{{query}}」に一致するものはありません"
-noMatchesDescription = "別のキーワードを試すか、カタログを参照してください。"
-
 [portal.settings.groups]
 admin = "管理者"
 
@@ -8743,10 +8740,6 @@ cancel = "キャンセル"
 confirm = "削除"
 title = "ソースを削除しますか？"
 
-[portal.sources.empty]
-description = "フォルダー（まもなくクラウドストレージも）を接続して、ポリシーがドキュメントを取得できる場所を用意します。"
-title = "まだソースが接続されていません"
-
 [portal.sources.kpi]
 inUse = "使用中"
 total = "接続"
@@ -8785,6 +8778,7 @@ unused = "未使用"
 documents = "ドキュメント"
 source = "ソース"
 status = "ステータス"
+type = "Type"
 usedBy = "ポリシー"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "ポリシーとプライバシー"
 [settings.preferences]
 title = "環境設定"
 
-[settings.search]
-placeholder = "設定ページを検索..."
-
 [settings.security]
 description = "アカウントを安全に保つため、パスワードを更新してください。"
 title = "セキュリティ"
@@ -10128,6 +10119,7 @@ last = "最後のページ"
 maintainRatio = "アスペクト比を維持を切替え"
 next = "次のページ"
 noSavedSigs = "保存された署名が見つかりません"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "個人署名"
 previous = "前のページ"
 redo = "やり直す"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "背景の削除に失敗"
 hint = "署名の PNG または JPG 画像をアップロードしてください"
 label = "署名画像をアップロード"
 placeholder = "画像ファイルを選択"
+previewAlt = "Current image signature"
 processing = "画像を処理中..."
 removeBackground = "白背景を削除（透過化）"
 
@@ -10179,6 +10172,17 @@ saved = "上の保存済み署名を選択し、PDF上の任意の場所をク
 text = "上で氏名を入力した後、PDF 上の任意の場所をクリックして署名を配置します。"
 title = "署名の追加方法"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "署名を移動"
 pause = "配置を一時停止"
@@ -10625,6 +10629,23 @@ title = "サーバーにアップロード"
 updateButton = "サーバー上で更新"
 uploadButton = "サーバーにアップロード"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "戻る"
 pdfTools = "PDF ツール"
 placeholder = "ツールを選択して開始"
 premiumFeature = "プレミアム機能:"
-searchTools = "ツールを検索"
 toolsHeader = "ツール"
 viewAllTools = "すべてのツールを表示"
 
@@ -10822,6 +10842,9 @@ removal = "削除"
 signing = "署名"
 verification = "検証"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "ツールが見つかりません"
 noTools = "利用可能なツールがありません"
@@ -10979,6 +11002,13 @@ approver = "ポリシーを承認"
 editor = "エディター"
 processor = "プロセッサー"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}} への招待をキャンセルしますか？現在のリンクでは参加できなくなります。"
 cancelInviteTitle = "招待をキャンセル"
@@ -10998,10 +11028,8 @@ title = "まだメンバーはいません"
 addToTeam = "チームに追加"
 guestCount = "{{count}}人のゲスト"
 guests = "ゲスト"
-guestsDesc = "外部共同作業者。共有された範囲に限定されます。エディターのみ。"
 ledBy = "{{owner}} が主導"
 org = "組織"
-orgDesc = "組織全体の権限とポリシー承認権を持つオーナー"
 owners = "{{count}}人のオーナー"
 team = "{{name}} チーム"
 teamMeta = "{{count}}人"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "{{who}} による招待"
 cancel = "キャンセル"
-count = "{{count}}件保留中"
-desc = "まだ参加していない招待済みのユーザーです。承諾するまでシートを保持します。"
 expiresInDays_one = "{{count}}日後に期限切れ"
 expiresInDays_other = "{{count}}日後に期限切れ"
 expiresToday = "今日期限切れ"
 title = "保留中の招待"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "バックエンドへの接続で問題が発生したか、アクセス権がありません。もう一度お試しください。"
 title = "メンバーを読み込めませんでした"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "添付ファイルを検索"
 title = "添付ファイル"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "ブックマークのタイトル"
 bookmarkTitleRequired = "ブックマークのタイトルは必須です"
 closeSidebar = "ブックマークのサイドバーを閉じる"
 collapseAll = "すべてのブックマークを折りたたむ"
+empty = "No bookmarks in this document"
 expandAll = "すべてのブックマークを展開"
 searchPlaceholder = "ブックマークを検索"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "コメントを追加"
@@ -11264,10 +11297,12 @@ locateAnnotation = "ドキュメント内で表示"
 moreActions = "その他の操作"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "ページ {{page}}"
 placingHint = "配置するにはページをクリック…（キャンセル）"
 removeCommentOnly = "コメントのみ削除"
 saveReply = "返信を保存"
+searchPlaceholder = "Search comments"
 title = "コメント"
 typeComment = "コメント"
 typeInsertText = "テキストを挿入"
@@ -11290,6 +11325,7 @@ unsavedDesc = "未保存の変更があります"
 closeSidebar = "レイヤーのサイドバーを閉じる"
 hideAll = "すべてのレイヤーを非表示"
 showAll = "すべてのレイヤーを表示"
+title = "Layers"
 
 [viewer.link]
 delete = "リンクを削除"
@@ -11646,6 +11682,7 @@ exitRedaction = "墨消しモードを終了"
 exportAll = "PDF をエクスポート"
 exportSelected = "選択したページをエクスポート"
 formFill = "フォーム入力"
+hideToolbar = "Hide toolbar"
 multiTool = "マルチツール"
 panMode = "パンモード"
 print = "PDF を印刷"
@@ -11666,6 +11703,7 @@ selectAll = "すべて選択"
 selectByNumber = "ページ番号で選択"
 selectLanguage = "言語を選択"
 share = "共有"
+showToolbar = "Show toolbar"
 toggleAnnotations = "注釈の表示を切り替え"
 toggleAttachments = "添付ファイルを切り替え"
 toggleBookmarks = "ブックマークを切り替え"
diff --git a/frontend/editor/public/locales/ko-KR/translation.toml b/frontend/editor/public/locales/ko-KR/translation.toml
index 067de0c365..415ef009f1 100644
--- a/frontend/editor/public/locales/ko-KR/translation.toml
+++ b/frontend/editor/public/locales/ko-KR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "알파벳"
 apply = "적용"
 applyAndContinue = "저장하고 나가기"
-areYouSure = "정말 떠나시겠습니까?"
 back = "뒤로"
 black = "검정"
 blue = "파랑"
@@ -106,6 +105,7 @@ undoSuccess = "작업을 성공적으로 취소했습니다"
 unknown = "알 수 없음"
 unpin = "파일 고정 해제(도구 실행 후 교체)"
 unsavedChanges = "PDF에 저장되지 않은 변경 사항이 있습니다."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "저장되지 않은 변경 사항"
 unsupported = "지원되지 않음"
 username = "사용자 이름"
@@ -1879,6 +1879,9 @@ width = "너비"
 [app]
 description = "무료 Adobe Acrobat 대안(1,000만+ 다운로드)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b로 변환"
 convertToPdfA3bDescription = "첨부 파일이 포함된 보관용 PDF를 생성합니다"
@@ -2933,12 +2936,16 @@ text = "이 권한을 변경할 수 없도록 하려면, 비밀번호 추가 도
 [chat.actions]
 copy = "메시지 복사"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling 에이전트 옵션"
+assistant = "AI Assistant"
 clearChat = "채팅 지우기"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "이 작업은 클라우드 크레딧을 사용합니다"
 tooltip = "화면에서 색상 선택"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "색상 선택"
 
 [common]
+actions = "Actions"
 back = "뒤로"
 cancel = "취소"
 close = "닫기"
+codeSample = "Code sample"
 collapse = "접기"
 confirm = "확인"
 continue = "계속"
 copied = "복사됨!"
 copy = "복사"
 done = "완료"
+enterValue = "Enter value"
 error = "오류"
 expand = "펼치기"
 loading = "불러오는 중..."
 next = "다음"
+open = "Open"
 preview = "미리보기"
 previous = "이전"
 refresh = "새로고침"
 remaining = "남음"
 retry = "다시 시도"
 save = "저장"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "선택 항목 지우기"
@@ -3185,6 +3199,7 @@ title = "압축 방식"
 [compress.settings]
 desiredSize = "원하는 파일 크기"
 desiredSizePlaceholder = "크기 입력"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "압축은 파일 크기를 줄이는 쉬운 방법입니다. 파일 크기를 선택하면 목표 크기를 입력하고 품질은 저희가 조정합니다. 품질을 선택하면 압축 강도를 직접 설정할 수 있습니다."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF 옵션"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "먼저 원본 형식을 선택하세요"
 settings = "설정"
 single = "단일"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "검색..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "편집"
@@ -3824,11 +3861,13 @@ shareSelected = "선택 항목 공유"
 sharing = "공유"
 showAll = "모두 표시"
 showHistory = "기록 표시"
+sortBy = "Sort files"
 sortByDate = "날짜순 정렬"
 sortByName = "이름순 정렬"
 sortBySize = "크기순 정렬"
 storage = "저장소"
 storageState = "저장소"
+storageUsed = "Storage used"
 synced = "동기화됨"
 title = "PDF 파일 업로드"
 toolChain = "적용된 도구"
@@ -3874,8 +3913,12 @@ addFiles = "파일 추가"
 addingFiles = "파일 추가 중…"
 collapse = "사이드바 접기"
 customizeGroups = "그룹 사용자 지정"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "시작하려면 파일을 여세요"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "사이드바 펼치기"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive가 구성되지 않았습니다"
@@ -3888,15 +3931,17 @@ openFromComputer = "컴퓨터에서 열기"
 openSettings = "설정 열기"
 other = "기타"
 recent = "최근"
-search = "검색"
-searchPlaceholder = "파일 검색..."
 viewAll = "{{count}}개 파일 모두 보기"
 
 [fileSidebar.fileItem]
 closeViewer = "뷰어 닫기"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "뷰어에서 열기"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "기본값으로 재설정"
 subtitle = "파일을 상위 카테고리로 그룹화하세요. 기존 또는 새 라벨을 카테고리에 추가하거나, 이름을 변경하거나, 직접 만들 수 있습니다. 어떤 카테고리에도 속하지 않는 파일은 “기타” 아래에 표시됩니다."
 title = "사이드바 카테고리"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "작업 공간에 추가"
 addToWorkspaceCount = "{{count}}개를 작업 공간에 추가"
@@ -3918,7 +3971,6 @@ backToMyFiles = "내 파일로 돌아가기"
 breadcrumbs = "폴더 경로"
 cancel = "취소"
 classification = "분류"
-clearSearch = "검색 지우기"
 clearSelection = "선택 해제"
 closeDetails = "세부정보 닫기"
 create = "생성"
@@ -3950,6 +4002,7 @@ downloadAll = "전체 다운로드"
 downloadVersion = "이 버전 다운로드"
 dropOverlay = "업로드하려면 파일을 놓으세요"
 dropOverlaySub = "파일은 로컬에서 시작됩니다. '이동' 또는 '클라우드에 저장'으로 폴더에 정리하세요."
+duplicate = "Duplicate"
 file = "파일"
 fileInfo = "File info"
 fileMenu = "파일 작업"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "폴더 트리 크기 조절(화살표 키, 크게 조절은
 save = "저장"
 saveToServer = "서버에 저장"
 saveToServerDisabledHint = "이 서버에서는 서버로 저장이 활성화되어 있지 않습니다. 관리자에게 활성화를 요청하세요."
-search = "검색"
-searchPlaceholder = "이 폴더 및 하위 폴더 검색"
 selectAll = "모두 선택"
 selectAllHint = "모두 선택하려면 클릭. 팁: Ctrl(또는 Cmd)로 하나씩 추가, Shift로 범위 선택."
 selectedCount = "{{count}}개 선택됨"
@@ -4044,6 +4095,10 @@ title = "아직 클라우드 파일이 없습니다"
 hint = "업로드하지 않고 저장한 파일은 여기에 남습니다. 파일을 놓아 추가하세요."
 title = "로컬 전용 파일 없음"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "열거나 편집한 파일이 여기에 표시됩니다."
 title = "아직 수정된 항목이 없습니다"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "폴더를 삭제할 수 없습니다."
 deleteFolderFailedDetail = "폴더를 삭제할 수 없습니다: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "폴더 모양을 업데이트할 수 없습니다."
 folderAppearanceFailedDetail = "폴더 모양을 업데이트할 수 없습니다: {{message}}"
 moveFilesFailed = "파일을 이동할 수 없습니다."
@@ -4113,6 +4170,11 @@ localHint = "이 브라우저에만 저장됨"
 shared = "공유됨"
 sharedHint = "링크로 공유됨"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "오래된 순"
 modifiedDesc = "최신 순"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "저장소에 파일이 없습니다. 먼저 파일을 
 open = "열기"
 openFile = "파일 열기"
 openFiles = "여러 파일 열기"
+selectFile = "Select {{name}}"
 selectFromStorage = "저장소에서 선택"
 upload = "업로드"
 uploadFile = "파일 업로드"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "모두 저장됨"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV 추출 실패"
 extractXlsxError = "XLSX 추출 실패"
+filled = "filled"
 flattenAfterFilling = "채운 후 평면화"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "필수"
 requiredFieldsError = "모든 필수 필드를 입력하세요"
 rescanFields = "필드 재검색"
@@ -4795,9 +4863,6 @@ title = "이미지를 PDF로"
 [imageToPdf]
 tags = "변환,이미지,jpg,사진"
 
-[infoBanner]
-dismiss = "닫기"
-
 [invite]
 acceptError = "계정 생성에 실패했습니다"
 accountFor = "계정 생성 대상"
@@ -4979,6 +5044,34 @@ uploadSuccess = "업로드 성공!"
 uploadSuccessMessage = "이미지가 전송되었습니다."
 validating = "세션 검증 중..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "스캔하여 사진을 업로드하세요. 이미지는 자동으로 PDF로 변환됩니다."
 descriptionNoConvert = "모바일 기기에서 사진을 스캔해 업로드하세요."
@@ -4997,8 +5090,13 @@ title = "모바일에서 업로드"
 tags = "멀티 도구,다중 작업,UI,클릭 드래그,프론트엔드,클라이언트 사이드,대화형,상호작용,이동,삭제,마이그레이션,분할"
 title = "PDF 멀티 도구"
 
-[navbar]
-search = "검색"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "인증에 성공하지 못했습니다. 이 창을 닫고 다시 시도하세요."
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>활성 파일</strong> 보기에는 도구에 로드한 
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "닫기"
 cropSettings = "이제 자르려는 파일을 선택했으므로, 자르기 도구를 구성하여 PDF를 자를 영역을 지정할 수 있습니다."
+dialogLabel = "Onboarding"
 fileCheckbox = "파일을 클릭하면 처리 대상으로 선택됩니다. 배치 작업을 위해 여러 파일을 선택할 수 있습니다."
 fileReplacement = "수정된 파일은 워크벤치에서 원본 파일을 자동으로 대체하므로, 더 많은 도구로 쉽게 이어서 작업할 수 있습니다."
 filesButton = "빠른 액세스 막대의 <strong>파일</strong> 버튼을 사용하면 도구로 처리할 PDF를 업로드할 수 있습니다."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF를 PDF/A로"
 tags = "아카이브,장기,표준,변환,저장,보존"
 title = "PDF를 PDF/A로"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "인쇄,표준,변환,제작,프리프레스,보관"
 title = "PDF를 PDF/X로"
@@ -6045,6 +6151,7 @@ small = "500 크레딧"
 xsmall = "100 크레딧"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "필요에 맞는 요금제를 선택하세요"
 title = "이용 가능한 요금제"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "월별 지출 한도에 도달했습니다"
 title = "Stripe portal을 열 수 없음"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "무료 PDFs {{allowance}}개 중 사용됨"
 capSuffix_other = "무료 PDFs {{allowance}}개 중 사용됨"
 eyebrow = "Processor 평가판"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "정책이 실행될 때 문서 또는 알림을 Email로 보냅니다."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "처리된 문서를 Nextcloud에 파일로 저장합니다."
@@ -7077,11 +7211,6 @@ title = "공식 SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
-[portal.docs.search]
-empty = "일치하는 문서 없음"
-placeholder = "문서 검색"
-results = "결과 {{count}}개"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "agent가 단일 도구로 호출하는 번들형 명명된 기능입니다. 각 skill은 eval이 연결된 결정적 작업 체인입니다."
@@ -7180,11 +7309,11 @@ editorAction = "편집자"
 empty = "이 필터와 일치하는 문서가 없습니다."
 rowActions = "행 작업"
 sensitiveLabel = "민감"
-sensitiveTitle = "민감 — 접근 필요"
 
 [portal.documents.table.columns]
 action = "파이프라인 / 작업"
 document = "문서"
+labels = "Labels"
 product = "제품"
 status = "상태"
 time = "시간"
@@ -7200,6 +7329,7 @@ host = "호스트"
 lastSeen = "마지막 확인"
 region = "지역"
 status = "상태"
+target = "Target"
 version = "버전"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "이 보기에서 예기치 않은 오류가 발생했습니다. 
 retry = "다시 시도"
 title = "이 페이지에서 문제가 발생했습니다"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "뒤로"
 body = "데스크톱 앱을 다운로드하거나 서버를 자체 호스팅하세요."
@@ -7380,11 +7560,6 @@ cancel = "취소"
 confirm = "키 폐기"
 title = "API 키 폐기"
 
-[portal.infrastructure.attestationLabel]
-attested = "증명됨"
-inScope = "범위 내"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "카테고리별 감사 이벤트 필터링"
 heading = "감사 로그"
@@ -7456,11 +7631,6 @@ info = "정보"
 success = "성공"
 warning = "경고"
 
-[portal.infrastructure.certLabel]
-certified = "인증됨"
-inProgress = "진행 중"
-notStarted = "시작 안 됨"
-
 [portal.infrastructure.createKey]
 cancel = "취소"
 createKey = "키 생성"
@@ -7474,238 +7644,10 @@ subtitleCreated = "지금 이 비밀을 복사하세요 — 다시 표시되지
 title = "API 키 생성"
 titleCreated = "키 생성됨"
 
-[portal.infrastructure.deployLabel]
-live = "라이브"
-queued = "대기 중"
-rolledBack = "롤백됨"
-rolling = "롤아웃 중"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "배포자"
-environment = "환경"
-product = "제품"
-status = "상태"
-version = "버전"
-when = "시점"
-
-[portal.infrastructure.deployments.recent]
-heading = "최근 배포"
-subheading = "제품 및 환경 전반의 최신 롤아웃입니다."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "인스턴스"
-latency = "지연 시간"
-load = "부하"
-p99 = "P99"
-region = "지역"
-status = "상태"
-throughput = "처리량"
-uptime = "가동 시간"
-version = "버전"
-
-[portal.infrastructure.deployments.regions]
-heading = "지역"
-subheading = "배포된 모든 Stirling 지역의 실시간 상태 — 지연 시간, 부하, 롤아웃 버전."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "워크스페이스가 프로비저닝되면 배포된 지역이 여기에 표시됩니다."
-title = "배포된 지역 없음"
-
 [portal.infrastructure.keyLabel]
 active = "활성"
 revoked = "폐기됨"
 
-[portal.infrastructure.modelLabel]
-active = "활성"
-degraded = "성능 저하"
-disabled = "비활성화됨"
-
-[portal.infrastructure.models]
-heading = "모델"
-msValue = "{{value}} ms"
-subheading = "워크스페이스 전반의 문서 처리를 구동하는 모델 카탈로그 및 라우팅입니다."
-
-[portal.infrastructure.models.byom]
-description = "온프레미스 또는 셀프 호스팅 모델을 등록하고 데이터 레지던시 기반 처리를 위해 지역에 고정하세요."
-title = "자체 모델 가져오기"
-
-[portal.infrastructure.models.catalogue]
-heading = "카탈로그"
-sub = "워크스페이스에서 사용할 수 있는 관리형 모델이며, 실시간 지연 시간과 비용을 포함합니다."
-subEnterprise = "관리형, 자체 제공, 온프레미스 모델 — 지역별 고정 사용 가능."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "워크스페이스 카탈로그의 모델이 여기에 표시됩니다."
-title = "사용 가능한 모델 없음"
-
-[portal.infrastructure.models.columns]
-cost = "비용"
-latency = "지연 시간"
-load = "부하"
-model = "모델"
-status = "상태"
-type = "유형"
-version = "버전"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/호출"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "활성 모델"
-avgLatency = "평균 지연 시간"
-included = "포함됨"
-monthlySpend = "월별 모델 지출"
-
-[portal.infrastructure.models.routing]
-empty = "구성된 라우팅 규칙이 없습니다."
-heading = "라우팅 규칙"
-sub = "각 작업을 처리할 모델입니다. 더 구체적인 규칙과 일치하지 않을 때 기본값이 적용됩니다."
-subLocked = "작업을 특정 모델로 라우팅 — 유료 플랜에서 사용 가능."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "각 작업과 문서 유형을 처리할 모델을 제어하려면 Pro로 업그레이드하세요."
-title = "모델 라우팅은 유료 기능입니다"
-
-[portal.infrastructure.models.routingColumns]
-default = "기본값"
-docType = "문서 유형"
-modelForAria = "{{operation}}용 모델"
-operation = "작업"
-routedTo = "라우팅 대상"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "분류"
-extraction = "추출"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "성능 저하"
-down = "중단"
-healthy = "정상"
-
-[portal.infrastructure.security.access.byok]
-description = "자체 KMS의 키를 제공하세요. Stirling은 이 키로 암호화하지만 여전히 읽을 수 있습니다."
-label = "자체 키 가져오기(BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "키는 KMS를 벗어나지 않습니다. Stirling은 암호문만 보유합니다."
-label = "자체 키 보유(HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling이 암호화 키를 관리합니다. 가장 간단하며 사용자가 키 작업을 할 필요가 없습니다."
-label = "Stirling 보유 키"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "문서 접근 정책"
-subheading = "저장된 처리 완료 문서를 복호화할 수 있는 사용자를 제어합니다."
-
-[portal.infrastructure.security.attestations]
-heading = "컴플라이언스 증명"
-noReport = "사용 가능한 보고서 없음"
-subheading = "증명된 제어에 대한 보고서가 제공되는 프레임워크별 감사 상태입니다."
-viewReport = "보고서 보기 →"
-
-[portal.infrastructure.security.compliance]
-heading = "컴플라이언스"
-subheading = "Stirling 플랫폼을 포괄하는 증명 및 인증입니다."
-
-[portal.infrastructure.security.empty]
-description = "워크스페이스의 보안 구성이 여기에 표시됩니다."
-title = "보안 상태를 사용할 수 없음"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK를 사용하면 암호화 키가 KMS를 벗어나지 않습니다. Stirling은 언제든지 취소할 수 있는 암호문만 저장하고 처리합니다."
-title = "Stirling은 문서를 복호화할 수 없습니다"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "구성된 IP 범위가 없습니다 — 모든 IP가 허용됩니다."
-heading = "IP 허용 목록"
-sub = "API 접근이 이러한 CIDR 범위로 제한됩니다."
-subLocked = "API 접근을 알려진 IP 범위로 제한 — 유료 플랜에서 사용 가능."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "API 접근을 특정 네트워크로 제한하려면 Pro로 업그레이드하세요."
-title = "IP 허용 목록은 유료 기능입니다"
-
-[portal.infrastructure.security.ipColumns]
-added = "추가됨"
-addedBy = "추가한 사람"
-cidr = "CIDR"
-label = "레이블"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "암호화 키 관리"
-keyId = "키 식별자"
-lastRotated = "마지막 교체"
-rotateKey = "키 교체"
-rotationPolicy = "교체 정책"
-subheading = "저장된 문서를 암호화하는 키의 보관 관리 — 복호화 가능 주체 및 키 교체 방식."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key(BYOK) 및 hold-your-own-key(HYOK) 보관 관리는 Enterprise에서 사용할 수 있습니다. 자체 KMS의 키를 제공하려면 업그레이드하세요."
-title = "현재 플랜에서는 키가 Stirling에서 관리됩니다"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "아시아 태평양"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR 데이터 경계"
-label = "유럽 연합"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "미국"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "데이터 레지던시"
-subheading = "문서가 저장되고 처리되는 위치입니다."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} 사용됨"
-
-[portal.infrastructure.storage.empty]
-description = "연결된 스토리지와 사용량이 여기에 표시됩니다."
-title = "구성된 스토리지 없음"
-
-[portal.infrastructure.storage.lifecycle]
-active = "활성"
-activeRange = "0–{{value}}d"
-archived = "보관됨"
-coldStorage = "cold storage"
-deleted = "삭제됨"
-never = "없음"
-purged = "영구 삭제됨"
-
-[portal.infrastructure.storage.providers]
-connect = "연결"
-connected = "연결됨"
-heading = "연결된 제공업체"
-subheading = "처리된 아티팩트가 기록되는 위치입니다."
-
-[portal.infrastructure.storage.retention]
-heading = "보존"
-subheading = "수명 주기 삭제 전 아티팩트가 보관되는 기간입니다."
-windowLabel = "기본 보존 기간"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}}일"
-days_other = "{{count}}일"
-never = "삭제하지 않음"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "총 사용량"
-progressLabel = "사용된 스토리지"
-subheading = "연결된 모든 제공업체에서 소비된 스토리지입니다."
-
 [portal.infrastructure.tabs]
 apiKeys = "API 키"
 audit = "감사 로그"
@@ -7715,11 +7657,9 @@ security = "보안"
 storage = "스토리지"
 
 [portal.integrations]
-addAnother = "다른 항목 추가"
 availableHeading = "사용 가능"
 comingSoonHeading = "곧 제공 예정"
 connect = "연결"
-connectedHeading = "연결됨"
 connectionCount_one = "{{count}}개 연결"
 connectionCount_other = "{{count}}개 연결"
 customApi = "사용자 지정 API"
@@ -7737,6 +7677,10 @@ security = "보안"
 signing = "서명"
 storage = "스토리지"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "연결됨"
 
@@ -7767,7 +7711,6 @@ integrations = "통합"
 pipelines = "파이프라인"
 policies = "정책"
 procurement = "구매"
-settings = "설정"
 sources = "소스"
 usage = "사용량 및 청구"
 users = "사용자"
@@ -7784,7 +7727,7 @@ title = "파이프라인"
 newPipeline = "새 파이프라인"
 
 [portal.pipelines.builder]
-addStep = "도구 추가"
+activate = "Activate"
 back = "파이프라인으로 돌아가기"
 cannotFollow = "{{produced}}을(를) 사용할 수 없습니다"
 chooseAccount = "계정 선택"
@@ -7792,28 +7735,38 @@ chooseDestination = "대상 선택"
 chooseOperation = "이 단계에서 수행할 작업 선택"
 chooseSource = "소스 선택"
 discard = "변경 사항 버리기"
-enabled = "활성화됨"
 inputs = "입력"
 inputSource = "입력 소스"
 inputTrigger = "트리거"
 keepEditing = "계속 편집"
+moreActions = "More actions"
 needsConfiguring = "설정 필요"
-needsUpload = "업로드된 파일 필요"
-noSources = "아직 연결된 소스가 없습니다. 입력으로 사용하려면 하나를 생성하세요."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "검색과 일치하는 도구가 없습니다."
-pipelineSettings = "파이프라인 설정"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "도구 검색"
-selectToolBody = "파이프라인을 구축하려면 도구를 추가하세요."
-selectToolTitle = "아직 도구가 없습니다"
 sendToSystem = "다른 시스템으로 보내기"
 stepsIncompatible = "이 단계들은 이전 단계가 생성한 항목에서 실행할 수 없습니다: {{tools}}."
 stepsNeedSetup = "저장하기 전에 아직 설정이 필요한 단계입니다: {{tools}}."
-toolSettings = "도구 설정"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "인식되지 않는 작업이며, 그대로 유지되었습니다."
 unsavedBody = "저장되지 않은 변경 사항이 있습니다. 나가기 전에 저장하시겠습니까, 아니면 버리시겠습니까?"
 unsavedTitle = "저장되지 않은 변경 사항"
-uploadUnsupported = "업로드된 파일은 아직 파이프라인에서 지원되지 않으므로 다음 단계는 저장할 수 없습니다: {{tools}}."
 usesDefaults = "기본 설정으로 실행"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "이전 단계의 모든 파일을 결합합니다"
@@ -7825,31 +7778,36 @@ undeclared-operation = "이 단계가 무엇을 허용하는지 확인할 수 
 
 [portal.pipelines.composer]
 addTool = "도구 추가"
-cancel = "취소"
-chainEmpty = "파이프라인 구축을 시작하려면 도구를 추가하세요."
 create = "파이프라인 생성"
+createPaused = "Create paused"
 editingUnsupported = "편집을 위해 이러한 도구 매개변수를 표시하는 기능은 아직 지원되지 않습니다."
-moveDown = "아래로 이동"
-moveUp = "위로 이동"
+editSource = "Edit source"
 name = "이름"
 namePlaceholder = "예: Redaction sweep"
 noToolSettings = "이 도구에는 구성 가능한 설정이 없습니다."
-operations_one = "작업({{count}})"
-operations_other = "작업({{count}})"
 output = "출력"
-removeStep = "작업 제거"
 save = "변경 사항 저장"
 scheduleEvery = "실행 주기"
-sources = "소스"
-sourcesLoading = "소스 로드 중..."
 trigger = "트리거"
 triggerManual = "수동만"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "일"
 hours = "시간"
 minutes = "분"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\"을(를) 삭제하시겠습니까? 이 작업은 취소할 수 없습니다."
 cancel = "취소"
@@ -7867,6 +7825,37 @@ connectSource = "소스 연결"
 description = "첫 번째 파이프라인을 생성하세요. 실행할 소스를 선택하고, 작업을 연결하며, 출력 위치를 선택하세요."
 title = "아직 파이프라인이 없습니다"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "활성"
 paused = "일시 중지됨"
@@ -7879,7 +7868,6 @@ completed_one = "실행이 완료되었습니다."
 completed_other = "{{count}}개 실행이 모두 완료되었습니다."
 empty = "실행할 항목이 없습니다. 소스에 처리할 문서가 없습니다."
 failed = "실행 실패: {{error}}"
-historyCleared = "기록이 지워졌습니다. 다음 실행에서는 현재 소스에 있는 모든 항목을 다시 처리합니다."
 inFlight = "새로 실행할 항목이 없습니다: 이전 실행의 문서가 아직 처리 중입니다."
 parked_one = "실행할 항목이 없습니다: 문서 {{count}}개가 이전에 실패하여 보류되어 있습니다. 원인을 수정한 다음 기록을 지워 다시 시도하세요."
 parked_other = "실행할 항목이 없습니다: 문서 {{count}}개가 이전에 실패하여 보류되어 있습니다. 원인을 수정한 다음 기록을 지워 다시 시도하세요."
@@ -7895,6 +7883,7 @@ name = "파이프라인"
 sources = "소스"
 status = "상태"
 steps = "단계"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "폴더 감시"
@@ -8209,6 +8198,24 @@ label = "Jira 이슈에 첨부"
 description = "처리된 문서를 첨부 파일로 보냅니다."
 label = "문서 이메일 보내기(Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "처리된 문서를 폴더에 기록합니다."
 label = "Nextcloud에 업로드"
@@ -8683,16 +8690,6 @@ maxed = "한도 도달"
 subtitle = "무료 평가판은 {{date}}까지 진행됩니다. 카드가 필요하지 않습니다."
 title = "Enterprise 평가판"
 
-[portal.search]
-ariaLabel = "검색"
-placeholder = "Stirling 검색 — 엔드포인트, 파이프라인, 문서…"
-
-[portal.search.empty]
-noActionsDescription = "빠른 작업을 사용할 수 있게 되면 여기에 표시됩니다."
-noActionsTitle = "빠른 작업 없음"
-noMatches = "\"{{query}}\"에 대한 일치 항목 없음"
-noMatchesDescription = "다른 키워드를 시도하거나 카탈로그를 찾아보세요."
-
 [portal.settings.groups]
 admin = "관리자"
 
@@ -8743,10 +8740,6 @@ cancel = "취소"
 confirm = "삭제"
 title = "소스를 삭제하시겠습니까?"
 
-[portal.sources.empty]
-description = "정책이 문서를 가져올 위치를 가질 수 있도록 폴더(곧 cloud storage도)를 연결하세요."
-title = "아직 연결된 소스 없음"
-
 [portal.sources.kpi]
 inUse = "사용 중"
 total = "연결"
@@ -8785,6 +8778,7 @@ unused = "미사용"
 documents = "문서"
 source = "소스"
 status = "상태"
+type = "Type"
 usedBy = "정책"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "정책 및 개인정보 보호"
 [settings.preferences]
 title = "환경설정"
 
-[settings.search]
-placeholder = "설정 페이지 검색..."
-
 [settings.security]
 description = "계정을 안전하게 유지하려면 비밀번호를 업데이트하세요."
 title = "보안"
@@ -10128,6 +10119,7 @@ last = "마지막 페이지"
 maintainRatio = "종횡비 유지 토글"
 next = "다음 페이지"
 noSavedSigs = "저장된 서명이 없습니다"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "개인 서명"
 previous = "이전 페이지"
 redo = "다시 실행"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "배경 제거 실패"
 hint = "서명 PNG 또는 JPG 이미지를 업로드하세요"
 label = "서명 이미지 업로드"
 placeholder = "이미지 파일 선택"
+previewAlt = "Current image signature"
 processing = "이미지 처리 중..."
 removeBackground = "흰색 배경 제거(투명 처리)"
 
@@ -10179,6 +10172,17 @@ saved = "위에서 저장된 서명을 선택한 뒤, PDF를 클릭하여 배치
 text = "위에 이름을 입력한 후, PDF의 아무 곳이나 클릭하여 서명을 배치하세요."
 title = "서명 추가 방법"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "서명 이동"
 pause = "배치 일시중지"
@@ -10625,6 +10629,23 @@ title = "서버로 업로드"
 updateButton = "서버에서 업데이트"
 uploadButton = "서버로 업로드"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "뒤로 가기"
 pdfTools = "PDF 도구"
 placeholder = "시작하려면 도구를 선택하세요"
 premiumFeature = "프리미엄 기능:"
-searchTools = "도구 검색"
 toolsHeader = "도구"
 viewAllTools = "모든 도구 보기"
 
@@ -10822,6 +10842,9 @@ removal = "제거"
 signing = "서명"
 verification = "검증"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "도구를 찾을 수 없습니다"
 noTools = "사용 가능한 도구가 없습니다"
@@ -10979,6 +11002,13 @@ approver = "정책 승인"
 editor = "편집기"
 processor = "프로세서"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}}에 대한 초대를 취소하시겠습니까? 현재 링크로는 참여할 수 없게 됩니다."
 cancelInviteTitle = "초대 취소"
@@ -10998,10 +11028,8 @@ title = "아직 구성원 없음"
 addToTeam = "팀에 추가"
 guestCount = "{{count}}명 게스트"
 guests = "게스트"
-guestsDesc = "외부 협업자, 공유한 범위로 제한됨. 편집기만 사용."
 ledBy = "{{owner}}이(가) 이끎"
 org = "조직"
-orgDesc = "조직 전체 권한 및 정책 승인을 가진 소유자"
 owners = "{{count}}명 소유자"
 team = "{{name}} 팀"
 teamMeta = "{{count}}명"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "{{who}}님이 초대함"
 cancel = "취소"
-count = "{{count}}개 대기 중"
-desc = "아직 참여하지 않은 초대받은 사람들입니다. 수락할 때까지 시트를 차지합니다."
 expiresInDays_one = "{{count}}일 후 만료"
 expiresInDays_other = "{{count}}일 후 만료"
 expiresToday = "오늘 만료"
 title = "대기 중인 초대"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "백엔드에 연결하는 중 문제가 발생했거나 접근 권한이 없습니다. 다시 시도하세요."
 title = "멤버를 불러올 수 없습니다"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "첨부 파일 검색"
 title = "첨부 파일"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "북마크 제목"
 bookmarkTitleRequired = "북마크 제목은 필수입니다"
 closeSidebar = "북마크 사이드바 닫기"
 collapseAll = "모든 북마크 접기"
+empty = "No bookmarks in this document"
 expandAll = "모든 북마크 펼치기"
 searchPlaceholder = "북마크 검색"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "댓글 추가"
@@ -11264,10 +11297,12 @@ locateAnnotation = "문서에서 찾기"
 moreActions = "추가 작업"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "페이지 {{page}}"
 placingHint = "페이지를 클릭하여 배치… (취소)"
 removeCommentOnly = "댓글만 제거"
 saveReply = "답글 저장"
+searchPlaceholder = "Search comments"
 title = "댓글"
 typeComment = "댓글"
 typeInsertText = "텍스트 삽입"
@@ -11290,6 +11325,7 @@ unsavedDesc = "저장되지 않은 변경 사항이 있습니다"
 closeSidebar = "레이어 사이드바 닫기"
 hideAll = "모든 레이어 숨기기"
 showAll = "모든 레이어 표시"
+title = "Layers"
 
 [viewer.link]
 delete = "링크 삭제"
@@ -11646,6 +11682,7 @@ exitRedaction = "가리기 모드 종료"
 exportAll = "PDF 내보내기"
 exportSelected = "선택한 페이지 내보내기"
 formFill = "양식 채우기"
+hideToolbar = "Hide toolbar"
 multiTool = "멀티 도구"
 panMode = "이동 모드"
 print = "PDF 인쇄"
@@ -11666,6 +11703,7 @@ selectAll = "모두 선택"
 selectByNumber = "페이지 번호로 선택"
 selectLanguage = "언어 선택"
 share = "공유"
+showToolbar = "Show toolbar"
 toggleAnnotations = "주석 표시 전환"
 toggleAttachments = "첨부 파일 표시 전환"
 toggleBookmarks = "책갈피 표시 전환"
diff --git a/frontend/editor/public/locales/ml-ML/translation.toml b/frontend/editor/public/locales/ml-ML/translation.toml
index 84e43479a3..ac5f6c5967 100644
--- a/frontend/editor/public/locales/ml-ML/translation.toml
+++ b/frontend/editor/public/locales/ml-ML/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "അക്ഷരമാല"
 apply = "പ്രയോഗിക്കുക"
 applyAndContinue = "സേവ് ചെയ്ത് പുറത്ത് പോകുക"
-areYouSure = "നിങ്ങൾക്ക് പോകണമെന്ന് തീർച്ചയാണോ?"
 back = "തിരികെ"
 black = "കറുപ്പ്"
 blue = "നീല"
@@ -106,6 +105,7 @@ undoSuccess = "പ്രവർത്തനം വിജയകരമായി റ
 unknown = "അജ്ഞാതം"
 unpin = "പിൻ നീക്കം ചെയ്യുക (ടൂൾ പ്രവർത്തനത്തിന് ശേഷം മാറ്റിസ്ഥാപിക്കുക)"
 unsavedChanges = "നിങ്ങളുടെ PDF-ിൽ സംരക്ഷിക്കാത്ത മാറ്റങ്ങൾ ഉണ്ട്."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "സംരക്ഷിക്കാത്ത മാറ്റങ്ങൾ"
 unsupported = "പിന്തുണയില്ല"
 username = "ഉപയോക്തൃനാമം"
@@ -1879,6 +1879,9 @@ width = "വീതി"
 [app]
 description = "സൗജന്യ Adobe Acrobat പകരം (10M+ ഡൗൺലോഡുകൾ)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b ആയി മാറ്റുക"
 convertToPdfA3bDescription = "എംബെഡുചെയ്ത അറ്റാച്ച്മെന്റുകളോടുകൂടിയ ആർക്കൈവൽ PDF സൃഷ്ടിക്കുന്നു"
@@ -2933,12 +2936,16 @@ text = "ഈ അനുമതികൾ മാറ്റാൻ പറ്റാത്
 [chat.actions]
 copy = "സന്ദേശം പകർത്തുക"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling ഏജന്റ് ഓപ്ഷനുകൾ"
+assistant = "AI Assistant"
 clearChat = "ചാറ്റ് മായ്ക്കുക"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "ഈ പ്രവർത്തനം നിങ്ങളുടെ ക്
 tooltip = "സ്ക്രീനിൽ നിന്ന് നിറം എടുക്കുക"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "നിറം തിരഞ്ഞെടുക്കുക"
 
 [common]
+actions = "Actions"
 back = "തിരികെ"
 cancel = "റദ്ദാക്കുക"
 close = "അടയ്ക്കുക"
+codeSample = "Code sample"
 collapse = "ചുരുക്കുക"
 confirm = "സ്ഥിരീകരിക്കുക"
 continue = "തുടരുക"
 copied = "പകർത്തി!"
 copy = "പകർത്തുക"
 done = "പൂർത്തിയായി"
+enterValue = "Enter value"
 error = "പിശക്"
 expand = "വിപുലീകരിക്കുക"
 loading = "ലോഡുചെയ്യുന്നു..."
 next = "അടുത്തത്"
+open = "Open"
 preview = "മുന്‍കാഴ്ച"
 previous = "മുൻപ്"
 refresh = "പുതുക്കുക"
 remaining = "ബാക്കി"
 retry = "വീണ്ടും ശ്രമിക്കുക"
 save = "സംരക്ഷിക്കുക"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "തിരഞ്ഞെടുത്തത് ക്ലിയർ ചെയ്യുക"
@@ -3185,6 +3199,7 @@ title = "കംപ്രഷൻ രീതി"
 [compress.settings]
 desiredSize = "ആവശ്യമായ ഫയൽ വലുപ്പം"
 desiredSizePlaceholder = "വലുപ്പം നൽകുക"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "കംപ്രഷൻ ഫയൽ വലിപ്പം കുറയ്ക്കാനുള്ള എളുപ്പ മാർഗമാണ്. File Size തിരഞ്ഞെടുക്കുക, ലക്ഷ്യ വലിപ്പം നൽകുക, ഞങ്ങൾ ഗുണനിലവാരം ക്രമീകരിക്കും. Quality തിരഞ്ഞെടുക്കുക, കംപ്രഷൻ ശക്തി കൈയോടെ സജ്ജമാക്കാൻ."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF ഓപ്ഷനുകൾ"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "ആദ്യം ഒരു ഉറവിട ഫോർമാറ്റ് തിരഞ്ഞെടുക്കുക"
 settings = "ക്രമീകരണങ്ങൾ"
 single = "ഒറ്റ"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "തിരയുക..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "തിരുത്തുക"
@@ -3824,11 +3861,13 @@ shareSelected = "തിരഞ്ഞെടുത്തത് പങ്കിട
 sharing = "പങ്കിടൽ"
 showAll = "എല്ലാം കാണിക്കുക"
 showHistory = "ചരിത്രം കാണിക്കുക"
+sortBy = "Sort files"
 sortByDate = "തീയതി അനുസരിച്ച് ക്രമീകരിക്കുക"
 sortByName = "പേര് അനുസരിച്ച് ക്രമീകരിക്കുക"
 sortBySize = "വലുപ്പം അനുസരിച്ച് ക്രമീകരിക്കുക"
 storage = "സ്റ്റോറേജ്"
 storageState = "സംഭരണം"
+storageUsed = "Storage used"
 synced = "സിങ്ക് ചെയ്തു"
 title = "PDF ഫയലുകൾ അപ്‌ലോഡ് ചെയ്യുക"
 toolChain = "പ്രയോഗിച്ച ടൂളുകൾ"
@@ -3874,8 +3913,12 @@ addFiles = "ഫയലുകൾ ചേർക്കുക"
 addingFiles = "ഫയലുകൾ ചേർക്കുന്നു…"
 collapse = "സൈഡ്ബാർ ചുരുക്കുക"
 customizeGroups = "ഗ്രൂപ്പുകൾ ഇഷ്ടാനുസൃതമാക്കുക"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "തുടങ്ങാൻ ഫയലുകൾ തുറക്കുക"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "സൈഡ്ബാർ വിപുലീകരിക്കുക"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ക്രമീകരിച്ചിട്ടില്ല"
@@ -3888,15 +3931,17 @@ openFromComputer = "കമ്പ്യൂട്ടറിൽ നിന്ന് 
 openSettings = "ക്രമീകരണങ്ങൾ തുറക്കുക"
 other = "മറ്റുള്ളവ"
 recent = "സമീപകാലം"
-search = "തിരയുക"
-searchPlaceholder = "ഫയലുകൾ തിരയുക..."
 viewAll = "എല്ലാ {{count}} ഫയലുകളും കാണുക"
 
 [fileSidebar.fileItem]
 closeViewer = "വ്യൂവർ അടയ്ക്കുക"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "വ്യൂവറിൽ തുറക്കുക"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "ഡിഫോൾട്ടുകളിലേക്ക് പുനഃസ
 subtitle = "നിങ്ങളുടെ ഫയലുകൾ പാരന്റ് വിഭാഗങ്ങളായി ഗ്രൂപ്പ് ചെയ്യുക. നിലവിലുള്ളതോ പുതിയതോ ആയ ലേബലുകൾ ഒരു വിഭാഗത്തിലേക്ക് ചേർക്കുക, അതിന്റെ പേര് മാറ്റുക, അല്ലെങ്കിൽ നിങ്ങളുടെ സ്വന്തം വിഭാഗം സൃഷ്ടിക്കുക. നിങ്ങളുടെ വിഭാഗങ്ങളിലൊന്നിലും ഇല്ലാത്ത ഫയലുകൾ “മറ്റുള്ളവ” എന്നതിന് കീഴിൽ കാണിക്കും."
 title = "സൈഡ്‌ബാർ വിഭാഗങ്ങൾ"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "വർക്ക്‌സ്‌പേസിലേക്ക് ചേർക്കുക"
 addToWorkspaceCount = "{{count}} എണ്ണം വർക്ക്‌സ്‌പേസിലേക്ക് ചേർക്കുക"
@@ -3918,7 +3971,6 @@ backToMyFiles = "എന്റെ ഫയലുകളിലേക്ക് തി
 breadcrumbs = "ഫോൾഡർ പാത"
 cancel = "റദ്ദാക്കുക"
 classification = "വർഗ്ഗീകരണം"
-clearSearch = "തിരയൽ മായ്ക്കുക"
 clearSelection = "തിരഞ്ഞെടുപ്പ് നീക്കുക"
 closeDetails = "വിശദാംശങ്ങൾ അടയ്ക്കുക"
 create = "സൃഷ്ടിക്കുക"
@@ -3950,6 +4002,7 @@ downloadAll = "എല്ലാം ഡൗൺലോഡ് ചെയ്യുക"
 downloadVersion = "ഈ വേർഷൻ ഡൗൺലോഡ് ചെയ്യുക"
 dropOverlay = "അപ്‌ലോഡ് ചെയ്യാൻ ഫയലുകൾ ഇടുക"
 dropOverlaySub = "ഫയലുകൾ ആദ്യം Local-ലാണ് തുടങ്ങുന്നത്. ഫോൾഡറിലാക്കാൻ 'Move to' അല്ലെങ്കിൽ 'Save to cloud' ഉപയോഗിക്കുക."
+duplicate = "Duplicate"
 file = "ഫയൽ"
 fileInfo = "File info"
 fileMenu = "ഫയൽ പ്രവർത്തനങ്ങൾ"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "ഫോൾഡർ ട്രിയുടെ വലുപ്പ
 save = "സംരക്ഷിക്കുക"
 saveToServer = "സെർവറിലേക്ക് സംരക്ഷിക്കുക"
 saveToServerDisabledHint = "ഈ സെർവറിൽ സെർവറിലേക്ക് സംരക്ഷിക്കൽ പ്രവർത്തനക്ഷമമാക്കിയിട്ടില്ല. അത് പ്രവർത്തനക്ഷമമാക്കാൻ അഡ്മിനെ ബന്ധപ്പെടുക."
-search = "തിരയുക"
-searchPlaceholder = "ഈ ഫോൾഡറിലും ഉപഫോൾഡറുകളിലും തിരയുക"
 selectAll = "എല്ലാം തിരഞ്ഞെടുക്കുക"
 selectAllHint = "എല്ലാം തിരഞ്ഞെടുക്കാൻ ക്ലിക്ക് ചെയ്യുക. ടിപ്പ്: ഓരോന്നായി ചേർക്കാൻ Ctrl (അല്ലെങ്കിൽ Cmd) അമർത്തി പിടിക്കുക, പരിധി തിരഞ്ഞെടുക്കാൻ Shift."
 selectedCount = "{{count}} തെരഞ്ഞെടുത്തു"
@@ -4044,6 +4095,10 @@ title = "ഇനിയും ക്ലൗഡ് ഫയലുകളില്ല"
 hint = "അപ്‌ലോഡ് ചെയ്യാതെ സംരക്ഷിച്ച ഫയലുകൾ ഇവിടെ തന്നെ. ചേർക്കാൻ ഒരു ഫയൽ ഇടുക."
 title = "ലോകൽ-മാത്രമായ ഫയലുകളില്ല"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "നിങ്ങൾ തുറക്കുന്നോ എഡിറ്റ് ചെയ്യുന്നോ ചെയ്യുന്ന ഫയലുകൾ ഇവിടെ പ്രത്യക്ഷപ്പെടും."
 title = "ഇനിയും ഒന്നും മാറ്റിയിട്ടില്ല"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "ഫോൾഡർ ഇല്ലാതാക്കാൻ കഴിഞ്ഞില്ല."
 deleteFolderFailedDetail = "ഫോൾഡർ ഇല്ലാതാക്കാൻ കഴിഞ്ഞില്ല: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "ഫോൾഡർ രൂപഭാവം അപ്‌ഡേറ്റ് ചെയ്യാൻ കഴിഞ്ഞില്ല."
 folderAppearanceFailedDetail = "ഫോൾഡർ രൂപഭാവം അപ്‌ഡേറ്റ് ചെയ്യാൻ കഴിഞ്ഞില്ല: {{message}}"
 moveFilesFailed = "ഫയലുകൾ മാറ്റാൻ കഴിഞ്ഞില്ല."
@@ -4113,6 +4170,11 @@ localHint = "ഈ ബ്രൗസറിൽ മാത്രം സംഭരിച
 shared = "പങ്കിട്ടത്"
 sharedHint = "ലിങ്ക് വഴി നിങ്ങളോടൊപ്പം പങ്കിട്ടത്"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "പഴയത് ആദ്യം"
 modifiedDesc = "പുതിയത് ആദ്യം"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "സ്റ്റോറേജിൽ ഫയലുകളി
 open = "തുറക്കുക"
 openFile = "ഫയൽ തുറക്കുക"
 openFiles = "ഫയലുകൾ തുറക്കുക"
+selectFile = "Select {{name}}"
 selectFromStorage = "സ്റ്റോറേജിൽ നിന്ന് തിരഞ്ഞെടുക്കുക"
 upload = "അപ്‌ലോഡ്"
 uploadFile = "ഫയൽ അപ്‌ലോഡ് ചെയ്യുക"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "എല്ലാം സേവ് ചെയ്തു"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV extract ചെയ്യാനായില്ല"
 extractXlsxError = "XLSX extract ചെയ്യാനായില്ല"
+filled = "filled"
 flattenAfterFilling = "പൂരിപ്പിച്ചതിന് ശേഷം ഫ്ലാറ്റൻ ചെയ്യുക"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "ആവ."
 requiredFieldsError = "ആവശ്യമായ എല്ലാ fields-ഉം പൂരിപ്പിക്കുക"
 rescanFields = "ഫീൽഡുകൾ വീണ്ടും സ്കാൻ ചെയ്യുക"
@@ -4795,9 +4863,6 @@ title = "ചിത്രം PDF-ലേക്ക്"
 [imageToPdf]
 tags = "പരിവർത്തനം,img,jpg,ചിത്രം,ഫോട്ടോ"
 
-[infoBanner]
-dismiss = "അടയ്ക്കുക"
-
 [invite]
 acceptError = "അക്കൗണ്ട് സൃഷ്ടിക്കൽ പരാജയപ്പെട്ടു"
 accountFor = "അക്കൗണ്ട് സൃഷ്ടിക്കുന്നത്"
@@ -4979,6 +5044,34 @@ uploadSuccess = "അപ്‌ലോഡ് വിജയകരം!"
 uploadSuccessMessage = "നിങ്ങളുടെ ചിത്രങ്ങൾ മാറ്റി."
 validating = "സെഷൻ ശരിവെയ്ക്കുന്നു..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "സ്കാൻ ചെയ്ത് ചിത്രങ്ങൾ അപ്‌ലോഡ് ചെയ്യുക. ചിത്രങ്ങൾ സ്വയമേവ PDF-യായി മാറും."
 descriptionNoConvert = "നിങ്ങളുടെ മൊബൈൽ ഉപകരണത്തിൽ നിന്ന് ചിത്രങ്ങൾ അപ്‌ലോഡ് ചെയ്യാൻ സ്കാൻ ചെയ്യുക."
@@ -4997,8 +5090,13 @@ title = "മൊബൈലിൽ നിന്ന് അപ്‌ലോഡ് ച
 tags = "മൾട്ടി ടൂൾ,മൾട്ടി ഓപ്പറേഷൻ,യുഐ,ക്ലിക്ക് ഡ്രാഗ്,ഫ്രണ്ട് എൻഡ്,ക്ലയിന്റ് സൈഡ്,ഇന്ററാക്ടീവ്,അനങ്ങാത്ത,നീക്കുക,ഇല്ലാതാക്കുക,കൈമാറുക,വിഭജിക്കുക"
 title = "PDF മൾട്ടി ടൂൾ"
 
-[navbar]
-search = "തിരയുക"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "ഓതന്റിക്കേഷൻ വിജയിച്ചില്ല. ഈ വിൻഡോ അടച്ച് വീണ്ടും ശ്രമിക്കാം."
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>ആക്ടീവ് ഫയലുകൾ</strong> കാ
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "അടയ്ക്കുക"
 cropSettings = "ഇപ്പോൾ നമുക്ക് ക്രോപ്പ് ചെയ്യാൻ വേണ്ട ഫയൽ തെരഞ്ഞെടുത്തതിനാൽ, PDF ക്രോപ്പ് ചെയ്യേണ്ട പ്രദേശം തീരുമാനിക്കാൻ ക്രോപ്പ് ടൂൾ ക്രമീകരിക്കാം."
+dialogLabel = "Onboarding"
 fileCheckbox = "ഫയലുകളിൽ ഒന്നിൽ ക്ലിക്കുചെയ്താൽ അത് പ്രോസസിംഗിനായി തിരഞ്ഞെടുക്കപ്പെടും. ബാച്ച് പ്രവർത്തനങ്ങൾക്ക് നിങ്ങൾക്ക് ഒന്നിലധികം ഫയലുകൾ തിരഞ്ഞെടുക്കാം."
 fileReplacement = "മാറ്റം വരുത്തിയ ഫയൽ വർക്ക്ബെഞ്ചിലെ യഥാർത്ഥ ഫയലിനെ സ്വമേധയായി മാറ്റിസ്ഥാപിക്കും, ഇതിലൂടെ കൂടുതൽ ടൂളുകൾ പ്രവർത്തിപ്പിക്കുന്നത് എളുപ്പമാകും."
 filesButton = "ക്വിക് ആക്സസ് ബാറിലെ <strong>ഫയലുകൾ</strong> ബട്ടൺ ഉപയോഗിച്ച് നിങ്ങൾക്ക് ടൂളുകളിൽ ഉപയോഗിക്കാൻ PDFകൾ അപ്‌ലോഡ് ചെയ്യാം."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF PDF/A-ലേക്ക്"
 tags = "ആർക്കൈവ്,ദീർഘകാല,മാനദണ്ഡം,പരിവർത്തനം,സംഭരണം,സംരക്ഷണം"
 title = "PDF PDF/A-ലേക്ക്"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "പ്രിന്റ്,സ്റ്റാൻഡേർഡ്,കൺവർഷൻ,പ്രൊഡക്ഷൻ,പ്രീപ്രസ്,ആർക്കൈവ്"
 title = "PDF-നെ PDF/X-ലേക്ക്"
@@ -6045,6 +6151,7 @@ small = "500 ക്രെഡിറ്റുകൾ"
 xsmall = "100 ക്രെഡിറ്റുകൾ"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "നിങ്ങളുടെ ആവശ്യങ്ങൾക്ക് അനുയോജ്യമായ പ്ലാൻ തിരഞ്ഞെടുക്കുക"
 title = "ലഭ്യമായ പ്ലാനുകൾ"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Monthly spend limit എത്തി"
 title = "Stripe portal തുറക്കാനായില്ല"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "{{allowance}} free PDFs-ൽ ഉപയോഗിച്ചത്"
 capSuffix_other = "{{allowance}} free PDFs-ൽ ഉപയോഗിച്ചത്"
 eyebrow = "Processor trial"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "ഒരു policy run ചെയ്യുമ്പോൾ document അല്ലെങ്കിൽ notification email ചെയ്യുക."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "processed documents Nextcloud-ലേക്ക് file ചെയ്യുക."
@@ -7077,11 +7211,6 @@ title = "Official SDKs"
 beta = "Beta"
 deprecated = "Deprecated"
 
-[portal.docs.search]
-empty = "പൊരുത്തപ്പെടുന്ന docs ഇല്ല"
-placeholder = "docs search ചെയ്യുക"
-results = "{{count}} ഫലങ്ങൾ"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "നിങ്ങളുടെ agent ഒരൊറ്റ tool ആയി invoke ചെയ്യുന്ന bundled, named capabilities. ഓരോ skill-വും evals attached ആയ deterministic op chain ആണ്."
@@ -7180,11 +7309,11 @@ editorAction = "എഡിറ്റർ"
 empty = "ഈ ഫിൽട്ടറുമായി പൊരുത്തപ്പെടുന്ന ഡോക്യുമെന്റുകളില്ല."
 rowActions = "വരി പ്രവർത്തനങ്ങൾ"
 sensitiveLabel = "സെൻസിറ്റീവ്"
-sensitiveTitle = "സെൻസിറ്റീവ് — പ്രവേശനം ആവശ്യമാണ്"
 
 [portal.documents.table.columns]
 action = "പൈപ്പ്‌ലൈൻ / പ്രവർത്തനം"
 document = "ഡോക്യുമെന്റ്"
+labels = "Labels"
 product = "ഉൽപ്പന്നം"
 status = "സ്ഥിതി"
 time = "സമയം"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "അവസാനം കണ്ടത്"
 region = "Region"
 status = "സ്ഥിതി"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "ഈ view-ൽ അപ്രതീക്ഷിത പിശക് 
 retry = "വീണ്ടും ശ്രമിക്കുക"
 title = "ഈ പേജിൽ എന്തോ പിഴച്ചു"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Back"
 body = "desktop app download ചെയ്യുക അല്ലെങ്കിൽ server self-host ചെയ്യുക."
@@ -7380,11 +7560,6 @@ cancel = "റദ്ദാക്കുക"
 confirm = "key revoke ചെയ്യുക"
 title = "API key revoke ചെയ്യുക"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attested"
-inScope = "പരിധിയിൽ"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Category പ്രകാരം audit events ഫിൽട്ടർ ചെയ്യുക"
 heading = "Audit logs"
@@ -7456,11 +7631,6 @@ info = "വിവരം"
 success = "വിജയം"
 warning = "മുന്നറിയിപ്പ്"
 
-[portal.infrastructure.certLabel]
-certified = "Certified"
-inProgress = "പുരോഗമിക്കുന്നു"
-notStarted = "ആരംഭിച്ചിട്ടില്ല"
-
 [portal.infrastructure.createKey]
 cancel = "റദ്ദാക്കുക"
 createKey = "Key സൃഷ്ടിക്കുക"
@@ -7474,238 +7644,10 @@ subtitleCreated = "ഈ secret ഇപ്പോൾ copy ചെയ്യുക —
 title = "API key സൃഷ്ടിക്കുക"
 titleCreated = "Key സൃഷ്ടിച്ചു"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "Queued"
-rolledBack = "Rolled back"
-rolling = "Rolling out"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "വിന്യസിച്ചത്"
-environment = "Environment"
-product = "ഉൽപ്പന്നം"
-status = "സ്ഥിതി"
-version = "Version"
-when = "എപ്പോൾ"
-
-[portal.infrastructure.deployments.recent]
-heading = "സമീപകാല deployments"
-subheading = "ഉൽപ്പന്നങ്ങളിലെയും environments-കളിലെയും ഏറ്റവും പുതിയ rollouts."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instances"
-latency = "Latency"
-load = "Load"
-p99 = "P99"
-region = "Region"
-status = "സ്ഥിതി"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regions"
-subheading = "വിന്യസിച്ച ഓരോ Stirling region-ന്റെയും live health — latency, load, rollout version."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "നിങ്ങളുടെ workspace provision ചെയ്തുകഴിഞ്ഞാൽ deployed regions ഇവിടെ ദൃശ്യമാകും."
-title = "Regions വിന്യസിച്ചിട്ടില്ല"
-
 [portal.infrastructure.keyLabel]
 active = "Active"
 revoked = "Revoked"
 
-[portal.infrastructure.modelLabel]
-active = "Active"
-degraded = "Degraded"
-disabled = "Disabled"
-
-[portal.infrastructure.models]
-heading = "Models"
-msValue = "{{value}} ms"
-subheading = "നിങ്ങളുടെ workspace-ിലുടനീളം document processing പ്രവർത്തിപ്പിക്കുന്ന model catalogue, routing എന്നിവ."
-
-[portal.infrastructure.models.byom]
-description = "Data-residency-bound processing-നായി on-prem അല്ലെങ്കിൽ self-hosted model register ചെയ്ത് ഒരു region-ലേക്ക് pin ചെയ്യുക."
-title = "നിങ്ങളുടെ സ്വന്തം model കൊണ്ടുവരിക"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogue"
-sub = "Live latency, cost എന്നിവയോടെ നിങ്ങളുടെ workspace-ന് ലഭ്യമായ managed models."
-subEnterprise = "Managed, bring-your-own, on-prem models — per-region pinning ലഭ്യമാണ്."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "നിങ്ങളുടെ workspace-ന്റെ catalogue-ിലുള്ള models ഇവിടെ ദൃശ്യമാകും."
-title = "Models ലഭ്യമല്ല"
-
-[portal.infrastructure.models.columns]
-cost = "ചെലവ്"
-latency = "Latency"
-load = "Load"
-model = "Model"
-status = "സ്ഥിതി"
-type = "തരം"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/call"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "സജീവ models"
-avgLatency = "ശരാശരി latency"
-included = "ഉൾപ്പെടുത്തി"
-monthlySpend = "മാസിക model ചെലവ്"
-
-[portal.infrastructure.models.routing]
-empty = "Routing rules configured ചെയ്തിട്ടില്ല."
-heading = "Routing rules"
-sub = "ഓരോ operation-യും ഏത് model കൈകാര്യം ചെയ്യുന്നു. കൂടുതൽ narrow rule ഒന്നും match ചെയ്യാത്തപ്പോൾ default ബാധകമാണ്."
-subLocked = "Operations പ്രത്യേക models-ലേക്ക് route ചെയ്യുക — paid plans-ൽ ലഭ്യമാണ്."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "ഓരോ operation, document type എന്നിവ ഏത് model കൈകാര്യം ചെയ്യണമെന്ന് നിയന്ത്രിക്കാൻ Pro-യിലേക്ക് upgrade ചെയ്യുക."
-title = "Model routing ഒരു paid feature ആണ്"
-
-[portal.infrastructure.models.routingColumns]
-default = "Default"
-docType = "ഡോക്യുമെന്റ് തരം"
-modelForAria = "{{operation}}-ക്കുള്ള model"
-operation = "Operation"
-routedTo = "Route ചെയ്തത്"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "വർഗ്ഗീകരണം"
-extraction = "Extraction"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degraded"
-down = "Down"
-healthy = "Healthy"
-
-[portal.infrastructure.security.access.byok]
-description = "നിങ്ങളുടെ സ്വന്തം KMS-ൽ നിന്ന് key നൽകുക. Stirling അത് ഉപയോഗിച്ച് encrypt ചെയ്യുന്നു, പക്ഷേ ഇപ്പോഴും വായിക്കാം."
-label = "നിങ്ങളുടെ സ്വന്തം key കൊണ്ടുവരിക (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Keys ഒരിക്കലും നിങ്ങളുടെ KMS വിട്ടുപോകില്ല. Stirling ciphertext മാത്രം കൈവശം വയ്ക്കുന്നു."
-label = "നിങ്ങളുടെ സ്വന്തം key കൈവശം വയ്ക്കുക (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling encryption keys കൈകാര്യം ചെയ്യുന്നു. ഏറ്റവും ലളിതം — നിങ്ങളുടെ ഭാഗത്ത് key ops ഒന്നുമില്ല."
-label = "Stirling-held keys"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "ഡോക്യുമെന്റ് access policy"
-subheading = "At rest ഉള്ള processed documents ആർക്കെല്ലാം decrypt ചെയ്യാനാകുമെന്ന് നിയന്ത്രിക്കുന്നു."
-
-[portal.infrastructure.security.attestations]
-heading = "Compliance attestations"
-noReport = "Report ലഭ്യമല്ല"
-subheading = "Attested controls-ൽ reports ലഭ്യമായ framework-by-framework audit posture."
-viewReport = "Report കാണുക →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Stirling platform-നെ ഉൾക്കൊള്ളുന്ന attestations, certifications."
-
-[portal.infrastructure.security.empty]
-description = "നിങ്ങളുടെ workspace-ന്റെ security configuration ഇവിടെ ദൃശ്യമാകും."
-title = "Security posture ലഭ്യമല്ല"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK ഉപയോഗിക്കുമ്പോൾ encryption keys നിങ്ങളുടെ KMS വിട്ടുപോകില്ല. Stirling നിങ്ങൾക്ക് ഏത് സമയത്തും revoke ചെയ്യാനാകുന്ന ciphertext മാത്രം store, process ചെയ്യുന്നു."
-title = "Stirling-ന് നിങ്ങളുടെ ഡോക്യുമെന്റുകൾ decrypt ചെയ്യാനാവില്ല"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "IP ranges configured ചെയ്തിട്ടില്ല — എല്ലാ IPs-ഉം അനുവദിച്ചിരിക്കുന്നു."
-heading = "IP allowlist"
-sub = "API access ഈ CIDR ranges-ലേക്ക് പരിമിതപ്പെടുത്തിയിരിക്കുന്നു."
-subLocked = "പരിചിതമായ IP ranges-ലേക്ക് API access പരിമിതപ്പെടുത്തുക — paid plans-ൽ ലഭ്യമാണ്."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "നിർദ്ദിഷ്ട networks-ലേക്ക് API access പരിമിതപ്പെടുത്താൻ Pro-യിലേക്ക് upgrade ചെയ്യുക."
-title = "IP allowlisting ഒരു paid feature ആണ്"
-
-[portal.infrastructure.security.ipColumns]
-added = "ചേർത്തത്"
-addedBy = "ചേർത്തത്"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Encryption key management"
-keyId = "Key identifier"
-lastRotated = "അവസാനം rotated"
-rotateKey = "Key rotate ചെയ്യുക"
-rotationPolicy = "Rotation policy"
-subheading = "At rest ഉള്ള documents encrypt ചെയ്യുന്ന keys-ന്റെ custody — ആർക്കെല്ലാം decrypt ചെയ്യാം, keys എങ്ങനെ rotate ചെയ്യും."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK), hold-your-own-key (HYOK) custody എന്നിവ Enterprise-ൽ ലഭ്യമാണ്. നിങ്ങളുടെ സ്വന്തം KMS-ൽ നിന്ന് keys നൽകാൻ upgrade ചെയ്യുക."
-title = "നിങ്ങളുടെ plan-ൽ keys Stirling കൈകാര്യം ചെയ്യുന്നു"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "European Union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "United States"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "ഡോക്യുമെന്റുകൾ എവിടെ store, process ചെയ്യുന്നു."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} ഉപയോഗിച്ചു"
-
-[portal.infrastructure.storage.empty]
-description = "Connected storage, usage എന്നിവ ഇവിടെ ദൃശ്യമാകും."
-title = "Storage configured ചെയ്തിട്ടില്ല"
-
-[portal.infrastructure.storage.lifecycle]
-active = "സജീവം"
-activeRange = "0–{{value}}d"
-archived = "Archived"
-coldStorage = "cold storage"
-deleted = "Deleted"
-never = "ഒരിക്കലും"
-purged = "purged"
-
-[portal.infrastructure.storage.providers]
-connect = "Connect"
-connected = "Connected"
-heading = "Connected providers"
-subheading = "Processed artifacts എഴുതുന്ന ഇടം."
-
-[portal.infrastructure.storage.retention]
-heading = "Retention"
-subheading = "Lifecycle deletion-ന് മുമ്പ് artifacts എത്രകാലം സൂക്ഷിക്കും."
-windowLabel = "Default retention window"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} ദിവസം"
-days_other = "{{count}} ദിവസം"
-never = "ഒരിക്കലും delete ചെയ്യരുത്"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "ആകെ ഉപയോഗം"
-progressLabel = "ഉപയോഗിച്ച storage"
-subheading = "Connected providers മുഴുവൻ ഉപയോഗിച്ച storage."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Keys"
 audit = "Audit Logs"
@@ -7715,11 +7657,9 @@ security = "Security"
 storage = "Storage"
 
 [portal.integrations]
-addAnother = "മറ്റൊന്ന് ചേർക്കുക"
 availableHeading = "ലഭ്യമാണ്"
 comingSoonHeading = "ഉടൻ വരുന്നു"
 connect = "ബന്ധിപ്പിക്കുക"
-connectedHeading = "ബന്ധിപ്പിച്ചു"
 connectionCount_one = "{{count}} കണക്ഷൻ"
 connectionCount_other = "{{count}} കണക്ഷനുകൾ"
 customApi = "Custom API"
@@ -7737,6 +7677,10 @@ security = "Security"
 signing = "Signing"
 storage = "Storage"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "ബന്ധിപ്പിച്ചു"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrations"
 pipelines = "പൈപ്പ്‌ലൈനുകൾ"
 policies = "നയങ്ങൾ"
 procurement = "Procurement"
-settings = "Settings"
 sources = "ഉറവിടങ്ങൾ"
 usage = "Usage & Billing"
 users = "Users"
@@ -7784,7 +7727,7 @@ title = "പൈപ്പ്‌ലൈനുകൾ"
 newPipeline = "പുതിയ പൈപ്പ്‌ലൈൻ"
 
 [portal.pipelines.builder]
-addStep = "Tool ചേർക്കുക"
+activate = "Activate"
 back = "പൈപ്പ്‌ലൈനുകളിലേക്ക് മടങ്ങുക"
 cannotFollow = "{{produced}} സ്വീകരിക്കാൻ കഴിയില്ല"
 chooseAccount = "ഒരു account തിരഞ്ഞെടുക്കുക"
@@ -7792,28 +7735,38 @@ chooseDestination = "ഒരു destination തിരഞ്ഞെടുക്ക
 chooseOperation = "ഈ step ചെയ്യേണ്ടത് തിരഞ്ഞെടുക്കുക"
 chooseSource = "ഒരു source തിരഞ്ഞെടുക്കുക"
 discard = "മാറ്റങ്ങൾ ഉപേക്ഷിക്കുക"
-enabled = "Enabled"
 inputs = "Input"
 inputSource = "Input source"
 inputTrigger = "Trigger"
 keepEditing = "Editing തുടരുക"
+moreActions = "More actions"
 needsConfiguring = "സജ്ജീകരണം ആവശ്യമാണ്"
-needsUpload = "Uploaded file ആവശ്യമാണ്"
-noSources = "ഇതുവരെ sources ഒന്നും ബന്ധിപ്പിച്ചിട്ടില്ല. Input ആയി ഉപയോഗിക്കാൻ ഒന്ന് സൃഷ്ടിക്കുക."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "നിങ്ങളുടെ search-നോട് പൊരുത്തപ്പെടുന്ന tools ഇല്ല."
-pipelineSettings = "പൈപ്പ്‌ലൈൻ settings"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Tools search ചെയ്യുക"
-selectToolBody = "നിങ്ങളുടെ പൈപ്പ്‌ലൈൻ നിർമ്മിക്കാൻ ഒരു tool ചേർക്കുക."
-selectToolTitle = "ഇതുവരെ tools ഇല്ല"
 sendToSystem = "മറ്റൊരു system-ലേക്ക് അയയ്ക്കുക"
 stepsIncompatible = "മുമ്പത്തെ step സൃഷ്ടിക്കുന്നതിൽ ഈ steps പ്രവർത്തിക്കാൻ കഴിയില്ല: {{tools}}."
 stepsNeedSetup = "save ചെയ്യുന്നതിന് മുമ്പ് ഈ steps-ന് ഇനിയും സജ്ജീകരണം ആവശ്യമാണ്: {{tools}}."
-toolSettings = "Tool settings"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "തിരിച്ചറിയാത്ത operation, അതേപടി സൂക്ഷിച്ചു."
 unsavedBody = "നിങ്ങൾക്ക് save ചെയ്യാത്ത മാറ്റങ്ങളുണ്ട്. പോകുന്നതിനുമുമ്പ് അവ save ചെയ്യണോ, അല്ലെങ്കിൽ ഉപേക്ഷിക്കണോ?"
 unsavedTitle = "Save ചെയ്യാത്ത മാറ്റങ്ങൾ"
-uploadUnsupported = "Uploaded files ഇതുവരെ pipelines-ൽ support ചെയ്യുന്നില്ല, അതിനാൽ ഈ steps save ചെയ്യാൻ കഴിയില്ല: {{tools}}."
 usesDefaults = "Default settings ഉപയോഗിച്ച് run ചെയ്യുന്നു"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "മുമ്പത്തെ step-ൽ നിന്നുള്ള ഓരോ file-ഉം സംയോജിപ്പിക്കുന്നു"
@@ -7825,31 +7778,36 @@ undeclared-operation = "ഈ step എന്താണ് സ്വീകരിക
 
 [portal.pipelines.composer]
 addTool = "Tool ചേർക്കുക"
-cancel = "റദ്ദാക്കുക"
-chainEmpty = "നിങ്ങളുടെ പൈപ്പ്‌ലൈൻ നിർമ്മിക്കാൻ ഒരു tool ചേർക്കുക."
 create = "പൈപ്പ്‌ലൈൻ സൃഷ്ടിക്കുക"
+createPaused = "Create paused"
 editingUnsupported = "Editing-നായി ഈ tool params പ്രദർശിപ്പിക്കുന്നത് ഇതുവരെ support ചെയ്യുന്നില്ല."
-moveDown = "താഴേക്ക് നീക്കുക"
-moveUp = "മുകളിലേക്ക് നീക്കുക"
+editSource = "Edit source"
 name = "പേര്"
 namePlaceholder = "ഉദാ. Redaction sweep"
 noToolSettings = "ഈ tool-ന് configurable settings ഇല്ല."
-operations_one = "Operation ({{count}})"
-operations_other = "Operations ({{count}})"
 output = "Output"
-removeStep = "Operation നീക്കം ചെയ്യുക"
 save = "മാറ്റങ്ങൾ save ചെയ്യുക"
 scheduleEvery = "ഓരോ"
-sources = "ഉറവിടങ്ങൾ"
-sourcesLoading = "Sources load ചെയ്യുന്നു..."
 trigger = "Trigger"
 triggerManual = "Manual മാത്രം"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "ദിവസങ്ങൾ"
 hours = "മണിക്കൂറുകൾ"
 minutes = "മിനിറ്റുകൾ"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" delete ചെയ്യണോ? ഇത് പഴയപടി ആക്കാൻ കഴിയില്ല."
 cancel = "റദ്ദാക്കുക"
@@ -7867,6 +7825,37 @@ connectSource = "ഒരു source ബന്ധിപ്പിക്കുക"
 description = "നിങ്ങളുടെ ആദ്യ പൈപ്പ്‌ലൈൻ സൃഷ്ടിക്കുക: അത് run ചെയ്യുന്ന sources തിരഞ്ഞെടുക്കുക, operations chain ചെയ്യുക, output എവിടേക്ക് പോകണമെന്ന് തിരഞ്ഞെടുക്കുക."
 title = "ഇതുവരെ പൈപ്പ്‌ലൈനുകളില്ല"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "സജീവം"
 paused = "Paused"
@@ -7879,7 +7868,6 @@ completed_one = "Run പൂർത്തിയായി."
 completed_other = "എല്ലാ {{count}} runs പൂർത്തിയായി."
 empty = "Run ചെയ്യാൻ ഒന്നുമില്ല: sources-ൽ process ചെയ്യാൻ documents ഇല്ലായിരുന്നു."
 failed = "Run പരാജയപ്പെട്ടു: {{error}}"
-historyCleared = "history മായ്ച്ചു. അടുത്ത run sources-ൽ ഇപ്പോഴുള്ള എല്ലാം വീണ്ടും process ചെയ്യും."
 inFlight = "പ്രവർത്തിപ്പിക്കാൻ പുതിയത് ഒന്നുമില്ല: മുമ്പത്തെ run-ൽ നിന്നുള്ള ഡോക്യുമെന്റുകൾ ഇപ്പോഴും process ചെയ്യുന്നു."
 parked_one = "പ്രവർത്തിപ്പിക്കാൻ ഒന്നുമില്ല: {{count}} ഡോക്യുമെന്റ് മുമ്പ് പരാജയപ്പെട്ടു, parked ആണ്. കാരണം പരിഹരിക്കുക, തുടർന്ന് വീണ്ടും ശ്രമിക്കാൻ history മായ്ക്കുക."
 parked_other = "പ്രവർത്തിപ്പിക്കാൻ ഒന്നുമില്ല: {{count}} ഡോക്യുമെന്റുകൾ മുമ്പ് പരാജയപ്പെട്ടു, parked ആണ്. കാരണം പരിഹരിക്കുക, തുടർന്ന് വീണ്ടും ശ്രമിക്കാൻ history മായ്ക്കുക."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "ഉറവിടങ്ങൾ"
 status = "സ്ഥിതി"
 steps = "Steps"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Folder watch"
@@ -8209,6 +8198,24 @@ label = "Jira issue-ലേക്ക് attach ചെയ്യുക"
 description = "processed ഡോക്യുമെന്റ് attachment ആയി അയയ്ക്കുന്നു."
 label = "ഡോക്യുമെന്റ് email ചെയ്യുക (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "processed ഡോക്യുമെന്റ് ഒരു folder-ലേക്ക് എഴുതുന്നു."
 label = "Nextcloud-ലേക്ക് upload ചെയ്യുക"
@@ -8683,16 +8690,6 @@ maxed = "പരമാവധി എത്തി"
 subtitle = "നിങ്ങളുടെ free trial {{date}} വരെ പ്രവർത്തിക്കും. കാർഡ് ആവശ്യമില്ല."
 title = "Enterprise trial"
 
-[portal.search]
-ariaLabel = "തിരയുക"
-placeholder = "Stirling തിരയുക — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Quick actions ലഭ്യമാകുമ്പോൾ ഇവിടെ പ്രത്യക്ഷപ്പെടും."
-noActionsTitle = "Quick actions ഇല്ല"
-noMatches = "\"{{query}}\" എന്നതിനൊന്നും പൊരുത്തങ്ങളില്ല"
-noMatchesDescription = "മറ്റൊരു keyword ശ്രമിക്കുക അല്ലെങ്കിൽ catalogue browse ചെയ്യുക."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "റദ്ദാക്കുക"
 confirm = "ഇല്ലാതാക്കുക"
 title = "ഉറവിടം ഇല്ലാതാക്കണോ?"
 
-[portal.sources.empty]
-description = "നിങ്ങളുടെ നയങ്ങൾക്ക് ഡോക്യുമെന്റുകൾ എടുക്കാൻ ഇടമുണ്ടാകാൻ ഒരു folder (ഉടൻ cloud storage-ും) കണക്റ്റ് ചെയ്യുക."
-title = "ഇതുവരെ ഉറവിടങ്ങൾ കണക്റ്റ് ചെയ്തിട്ടില്ല"
-
 [portal.sources.kpi]
 inUse = "ഉപയോഗത്തിലാണ്"
 total = "Connections"
@@ -8785,6 +8778,7 @@ unused = "ഉപയോഗിക്കാത്തത്"
 documents = "Documents"
 source = "ഉറവിടം"
 status = "സ്ഥിതി"
+type = "Type"
 usedBy = "നയങ്ങൾ"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "നയങ്ങളും സ്വകാര്യതയും"
 [settings.preferences]
 title = "അഭിരുചികൾ"
 
-[settings.search]
-placeholder = "സജ്ജീകരണ പേജുകൾ തിരയുക..."
-
 [settings.security]
 description = "അക്കൗണ്ട് സുരക്ഷിതമായി നിലനിർത്താൻ പാസ്‌വേഡ് അപ്‌ഡേറ്റ് ചെയ്യുക."
 title = "സുരക്ഷ"
@@ -10128,6 +10119,7 @@ last = "അവസാന പേജ്"
 maintainRatio = "വീക്ഷണാനുപാതം നിലനിർത്തുക ടോഗിൾ ചെയ്യുക"
 next = "അടുത്ത പേജ്"
 noSavedSigs = "സംരക്ഷിച്ച ഒപ്പുകളൊന്നും കണ്ടെത്തിയില്ല"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "വ്യക്തിഗത ഒപ്പുകൾ"
 previous = "മുമ്പത്തെ പേജ്"
 redo = "വീണ്ടും ചെയ്യുക"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "ബാക്ക്ഗ്രൗണ്ട് ന
 hint = "നിങ്ങളുടെ ഒപ്പിന്റെ PNG അല്ലെങ്കിൽ JPG ചിത്രം അപ്‌ലോഡ് ചെയ്യുക"
 label = "ഒപ്പിന്റെ ചിത്രം അപ്‌ലോഡ് ചെയ്യുക"
 placeholder = "ഇമേജ് ഫയൽ തിരഞ്ഞെടുക്കുക"
+previewAlt = "Current image signature"
 processing = "ഇമേജ് പ്രോസസ്സ് ചെയ്യുന്നു..."
 removeBackground = "വെള്ള ബാക്ക്ഗ്രൗണ്ട് നീക്കംചെയ്യുക (ട്രാൻസ്‌പാരന്റ് ആക്കുക)"
 
@@ -10179,6 +10172,17 @@ saved = "മുകളിൽ നിന്ന് ഒരു സേവ് ചെയ
 text = "മുകളിൽ നിങ്ങളുടെ പേര് നൽകിയ ശേഷം, PDF-ിലെ ഏതെങ്കിലും സ്ഥലത്ത് ക്ലിക്ക് ചെയ്ത് ഒപ്പ് സ്ഥാപിക്കുക."
 title = "ഒപ്പ് എങ്ങനെ ചേർക്കാം"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "ഒപ്പ് നീക്കുക"
 pause = "സ്ഥാപിക്കൽ നിർത്തുക"
@@ -10625,6 +10629,23 @@ title = "സെർവറിലേക്ക് അപ്‌ലോഡ് ചെയ
 updateButton = "സെർവറിൽ അപ്‌ഡേറ്റ് ചെയ്യുക"
 uploadButton = "സെർവറിലേക്ക് അപ്‌ലോഡ് ചെയ്യുക"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "തിരികെ പോകുക"
 pdfTools = "PDF ടൂളുകൾ"
 placeholder = "തുടങ്ങാൻ ഒരു ടൂൾ തിരഞ്ഞെടുക്കുക"
 premiumFeature = "പ്രീമിയം ഫീച്ചർ:"
-searchTools = "ടൂളുകൾ തിരയുക"
 toolsHeader = "ടൂളുകൾ"
 viewAllTools = "എല്ലാ ടൂളുകളും കാണുക"
 
@@ -10822,6 +10842,9 @@ removal = "നീക്കം"
 signing = "ഒപ്പിടൽ"
 verification = "സ്ഥിരീകരണം"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "ഒരു ടൂളും കണ്ടെത്തിയില്ല"
 noTools = "ടൂളുകൾ ലഭ്യമല്ല"
@@ -10979,6 +11002,13 @@ approver = "നയം അംഗീകരിക്കുന്നു"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}}-ലേക്കുള്ള ക്ഷണം റദ്ദാക്കണോ? നിലവിലെ ലിങ്ക് ഉപയോഗിച്ച് അവർക്ക് ചേരാൻ കഴിയില്ല."
 cancelInviteTitle = "ക്ഷണം റദ്ദാക്കുക"
@@ -10998,10 +11028,8 @@ title = "ഇതുവരെ members ഇല്ല"
 addToTeam = "Team-ലേക്ക് ചേർക്കുക"
 guestCount = "{{count}} guest"
 guests = "Guests"
-guestsDesc = "External collaborators, നിങ്ങൾ പങ്കിട്ടതിലേക്കു മാത്രം പരിമിതം. Editor മാത്രം."
 ledBy = "{{owner}} നയിക്കുന്നു"
 org = "Organization"
-orgDesc = "Org-wide authority-യും policy approval-ഉം ഉള്ള owners"
 owners = "{{count}} owner"
 team = "{{name}} team"
 teamMeta = "{{count}} ആളുകൾ"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "ക്ഷണിച്ചത് {{who}}"
 cancel = "റദ്ദാക്കുക"
-count = "{{count}} തീർപ്പാകാത്തത്"
-desc = "ഇതുവരെ ചേർന്നിട്ടില്ലാത്ത ക്ഷണിക്കപ്പെട്ടവർ. അവർ അംഗീകരിക്കുന്നതുവരെ അവർ ഒരു സീറ്റ് കൈവശം വയ്ക്കും."
 expiresInDays_one = "{{count}} ദിവസത്തിനകം കാലഹരണപ്പെടും"
 expiresInDays_other = "{{count}} ദിവസത്തിനകം കാലഹരണപ്പെടും"
 expiresToday = "ഇന്ന് കാലഹരണപ്പെടും"
 title = "തീർപ്പാകാത്ത ക്ഷണങ്ങൾ"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "ബാക്കെൻഡുമായി ബന്ധപ്പെടുന്നതിൽ എന്തോ പിശക് സംഭവിച്ചു, അല്ലെങ്കിൽ നിങ്ങൾക്ക് ആക്സസ് ഇല്ല. വീണ്ടും ശ്രമിക്കുക."
 title = "അംഗങ്ങളെ ലോഡ് ചെയ്യാനായില്ല"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "അറ്റാച്ച്മെന്റുകൾ തി
 title = "അറ്റാച്ച്മെന്റുകൾ"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "ബുക്ക്‌മാർക്ക് ശീർഷകം"
 bookmarkTitleRequired = "ബുക്ക്‌മാർക്ക് ശീർഷകം ആവശ്യമാണ്"
 closeSidebar = "ബുക്ക്‌മാർക്കുകളുടെ സൈഡ്‌ബാർ അടയ്ക്കുക"
 collapseAll = "എല്ലാ ബുക്ക്‌മാർക്കുകളും ചുരുക്കുക"
+empty = "No bookmarks in this document"
 expandAll = "എല്ലാ ബുക്ക്‌മാർക്കുകളും വിപുലീകരിക്കുക"
 searchPlaceholder = "ബുക്ക്‌മാർക്കുകൾ തിരയുക"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "കമന്റ് ചേർക്കുക"
@@ -11264,10 +11297,12 @@ locateAnnotation = "ഡോക്യുമെന്റിൽ കണ്ടെത
 moreActions = "കൂടുതൽ പ്രവർത്തികൾ"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "പേജ് {{page}}"
 placingHint = "ഇടാൻ ഒരു പേജിൽ ക്ലിക്ക് ചെയ്യുക… (റദ്ദാക്കുക)"
 removeCommentOnly = "കമന്റ് മാത്രം നീക്കുക"
 saveReply = "മറുപടി സംരക്ഷിക്കുക"
+searchPlaceholder = "Search comments"
 title = "കമന്റുകൾ"
 typeComment = "കമന്റ്"
 typeInsertText = "ടെക്സ്റ്റ് ചേർക്കുക"
@@ -11290,6 +11325,7 @@ unsavedDesc = "നിങ്ങൾക്ക് സംരക്ഷിക്കാ
 closeSidebar = "ലെയറുകളുടെ സൈഡ്‌ബാർ അടയ്ക്കുക"
 hideAll = "എല്ലാ ലെയറുകളും മറയ്ക്കുക"
 showAll = "എല്ലാ ലെയറുകളും കാണിക്കുക"
+title = "Layers"
 
 [viewer.link]
 delete = "ലിങ്ക് ഇല്ലാതാക്കുക"
@@ -11646,6 +11682,7 @@ exitRedaction = "റെഡാക്ഷൻ മോഡിൽ നിന്ന് പ
 exportAll = "PDF എക്സ്പോർട്ട് ചെയ്യുക"
 exportSelected = "തിരഞ്ഞെടുത്ത പേജുകൾ എക്സ്പോർട്ട് ചെയ്യുക"
 formFill = "ഫോം പൂരിപ്പിക്കുക"
+hideToolbar = "Hide toolbar"
 multiTool = "മൾട്ടി-ടൂൾ"
 panMode = "പാൻ മോഡ്"
 print = "PDF അച്ചടിക്കുക"
@@ -11666,6 +11703,7 @@ selectAll = "എല്ലാം തിരഞ്ഞെടുക്കുക"
 selectByNumber = "പേജ് നമ്പർ പ്രകാരം തിരഞ്ഞെടുക്കുക"
 selectLanguage = "ഭാഷ തിരഞ്ഞെടുക്കുക"
 share = "പങ്കിടുക"
+showToolbar = "Show toolbar"
 toggleAnnotations = "അനോട്ടേഷനുകളുടെ ദൃശ്യത ടോഗിൾ ചെയ്യുക"
 toggleAttachments = "അറ്റാച്ച്മെന്റുകൾ ടോഗിൾ ചെയ്യുക"
 toggleBookmarks = "ബുക്ക്മാർക്കുകൾ ടോഗിൾ ചെയ്യുക"
diff --git a/frontend/editor/public/locales/nl-NL/translation.toml b/frontend/editor/public/locales/nl-NL/translation.toml
index 095989e21d..e65bda307b 100644
--- a/frontend/editor/public/locales/nl-NL/translation.toml
+++ b/frontend/editor/public/locales/nl-NL/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Toepassen"
 applyAndContinue = "Opslaan en verlaten"
-areYouSure = "Weet u zeker dat u wilt vertrekken?"
 back = "Terug"
 black = "Zwart"
 blue = "Blauw"
@@ -106,6 +105,7 @@ undoSuccess = "Bewerking succesvol ongedaan gemaakt"
 unknown = "Onbekend"
 unpin = "Bestand losmaken (vervangen na tooluitvoering)"
 unsavedChanges = "U heeft niet-opgeslagen wijzigingen in uw PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Niet-opgeslagen wijzigingen"
 unsupported = "Niet ondersteund"
 username = "Gebruikersnaam"
@@ -1879,6 +1879,9 @@ width = "Breedte"
 [app]
 description = "Het gratis alternatief voor Adobe Acrobat (10M+ downloads)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Converteren naar PDF/A-3b"
 convertToPdfA3bDescription = "Maakt een archief-PDF met ingesloten bijlagen"
@@ -2933,12 +2936,16 @@ text = "Om deze machtigingen niet wijzigbaar te maken, gebruik de tool Wachtwoor
 [chat.actions]
 copy = "Bericht kopiëren"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling-agentopties"
+assistant = "AI Assistant"
 clearChat = "Chat wissen"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Deze bewerking gebruikt je cloud-credits"
 tooltip = "Kleur van het scherm kiezen"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Kies kleur"
 
 [common]
+actions = "Actions"
 back = "Terug"
 cancel = "Annuleren"
 close = "Sluiten"
+codeSample = "Code sample"
 collapse = "Samenvouwen"
 confirm = "Bevestigen"
 continue = "Doorgaan"
 copied = "Gekopieerd!"
 copy = "Kopiëren"
 done = "Gereed"
+enterValue = "Enter value"
 error = "Fout"
 expand = "Uitvouwen"
 loading = "Laden..."
 next = "Volgende"
+open = "Open"
 preview = "Voorbeeld"
 previous = "Vorige"
 refresh = "Vernieuwen"
 remaining = "Resterend"
 retry = "Opnieuw proberen"
 save = "Opslaan"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Selectie wissen"
@@ -3185,6 +3199,7 @@ title = "Compressiemethode"
 [compress.settings]
 desiredSize = "Gewenste bestandsgrootte"
 desiredSizePlaceholder = "Grootte invoeren"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Compressie is een eenvoudige manier om uw bestandsgrootte te verkleinen. Kies Bestandsgrootte om een doelformaat in te voeren en laat ons de kwaliteit voor u aanpassen. Kies Kwaliteit om de compressiesterkte handmatig in te stellen."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF-opties"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Selecteer eerst een bronformaat"
 settings = "Instellingen"
 single = "Enkel"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Zoeken..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Bewerken"
@@ -3824,11 +3861,13 @@ shareSelected = "Geselecteerde delen"
 sharing = "Delen"
 showAll = "Alles weergeven"
 showHistory = "Geschiedenis weergeven"
+sortBy = "Sort files"
 sortByDate = "Sorteren op datum"
 sortByName = "Sorteren op naam"
 sortBySize = "Sorteren op grootte"
 storage = "Opslag"
 storageState = "Opslag"
+storageUsed = "Storage used"
 synced = "Gesynchroniseerd"
 title = "PDF-bestanden uploaden"
 toolChain = "Toegepaste tools"
@@ -3874,8 +3913,12 @@ addFiles = "Bestanden toevoegen"
 addingFiles = "Bestanden toevoegen…"
 collapse = "Zijbalk samenvouwen"
 customizeGroups = "Groepen aanpassen"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Open bestanden om te beginnen"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Zijbalk uitvouwen"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive is niet geconfigureerd"
@@ -3888,15 +3931,17 @@ openFromComputer = "Openen vanaf computer"
 openSettings = "Instellingen openen"
 other = "Overig"
 recent = "Recent"
-search = "Zoeken"
-searchPlaceholder = "Bestanden zoeken..."
 viewAll = "Alle {{count}} bestanden bekijken"
 
 [fileSidebar.fileItem]
 closeViewer = "Viewer sluiten"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Openen in viewer"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Terugzetten naar standaardinstellingen"
 subtitle = "Groepeer je bestanden in hoofdcategorieën. Voeg bestaande of nieuwe labels toe aan een categorie, wijzig de naam ervan of maak je eigen categorie. Bestanden die in geen van je categorieën staan, verschijnen onder “Overig”."
 title = "Zijbalkcategorieën"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Aan werkruimte toevoegen"
 addToWorkspaceCount = "{{count}} aan werkruimte toevoegen"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Terug naar Mijn bestanden"
 breadcrumbs = "Mappad"
 cancel = "Annuleren"
 classification = "Classificatie"
-clearSearch = "Zoekopdracht wissen"
 clearSelection = "Selectie wissen"
 closeDetails = "Details sluiten"
 create = "Maken"
@@ -3950,6 +4002,7 @@ downloadAll = "Alles downloaden"
 downloadVersion = "Deze versie downloaden"
 dropOverlay = "Sleep bestanden hierheen om te uploaden"
 dropOverlaySub = "Bestanden beginnen in Lokaal. Gebruik 'Verplaatsen naar' of 'Opslaan in cloud' om ze in een map te organiseren."
+duplicate = "Duplicate"
 file = "Bestand"
 fileInfo = "File info"
 fileMenu = "Bestandsacties"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Mapstructuur vergroten/verkleinen (pijltjestoetsen, Shift vo
 save = "Opslaan"
 saveToServer = "Opslaan op server"
 saveToServerDisabledHint = "Opslaan op de server is niet ingeschakeld op deze server. Vraag uw beheerder om dit in te schakelen."
-search = "Zoeken"
-searchPlaceholder = "Deze map en submappen doorzoeken"
 selectAll = "Alles selecteren"
 selectAllHint = "Klik om alles te selecteren. Tip: houd Ctrl (of Cmd) ingedrukt om bestanden één voor één toe te voegen, Shift om een bereik te selecteren."
 selectedCount = "{{count}} geselecteerd"
@@ -4044,6 +4095,10 @@ title = "Nog geen cloudbestanden"
 hint = "Bestanden die zijn opgeslagen zonder te uploaden blijven hier. Zet een bestand neer om er een toe te voegen."
 title = "Geen alleen-lokale bestanden"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Bestanden die u opent of bewerkt, verschijnen hier."
 title = "Nog niets gewijzigd"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Kan map niet verwijderen."
 deleteFolderFailedDetail = "Kan map niet verwijderen: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Kan mapuiterlijk niet bijwerken."
 folderAppearanceFailedDetail = "Kan mapuiterlijk niet bijwerken: {{message}}"
 moveFilesFailed = "Kan bestanden niet verplaatsen."
@@ -4113,6 +4170,11 @@ localHint = "Alleen opgeslagen in deze browser"
 shared = "Gedeeld"
 sharedHint = "Met u gedeeld via link"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Oudste eerst"
 modifiedDesc = "Recent eerst"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Geen bestanden beschikbaar in opslag. Open eerst enkele
 open = "Openen"
 openFile = "Bestand openen"
 openFiles = "Bestanden openen"
+selectFile = "Select {{name}}"
 selectFromStorage = "Selecteren uit opslag"
 upload = "Uploaden"
 uploadFile = "Bestand uploaden"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Alles opgeslagen"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV extraheren mislukt"
 extractXlsxError = "XLSX extraheren mislukt"
+filled = "filled"
 flattenAfterFilling = "Afvlakken na invullen"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "verpl."
 requiredFieldsError = "Vul alle verplichte velden in"
 rescanFields = "Velden opnieuw scannen"
@@ -4795,9 +4863,6 @@ title = "Afbeelding naar PDF"
 [imageToPdf]
 tags = "conversie,img,jpg,foto"
 
-[infoBanner]
-dismiss = "Negeren"
-
 [invite]
 acceptError = "Account aanmaken mislukt"
 accountFor = "Account aanmaken voor"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Upload Successful!"
 uploadSuccessMessage = "Your images have been transferred."
 validating = "Validating session..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scan to upload photos. Images auto-convert to PDF."
 descriptionNoConvert = "Scan to upload photos from your mobile device."
@@ -4997,8 +5090,13 @@ title = "Upload from Mobile"
 tags = "Multitool,meerdere bewerkingen,UI,klik sleep,voorkant,clientzijde,interactief,beweegbaar,verplaats"
 title = "PDF Multitool"
 
-[navbar]
-search = "Zoeken"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Authenticatie is niet geslaagd. U kunt dit venster sluiten en het opnieuw proberen."
@@ -5127,6 +5225,7 @@ activeFiles = "De weergave <strong>Actieve bestanden</strong> toont alle PDF's d
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Sluiten"
 cropSettings = "Nu we het bestand hebben geselecteerd dat we willen bijsnijden, kunnen we de tool Bijsnijden configureren om het gebied te kiezen waarnaar we de PDF willen bijsnijden."
+dialogLabel = "Onboarding"
 fileCheckbox = "Door op een van de bestanden te klikken selecteert u het voor verwerking. U kunt meerdere bestanden selecteren voor batchbewerkingen."
 fileReplacement = "Het gewijzigde bestand vervangt automatisch het originele bestand in de Werkbank, zodat u het eenvoudig door meer tools kunt halen."
 filesButton = "Met de knop <strong>Bestanden</strong> op de sneltoegangsbalk kunt u PDF's uploaden om de tools op toe te passen."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF naar PDF/A"
 tags = "archief,langdurig,standaard,conversie,opslag,bewaring"
 title = "PDF naar PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "print,standaard,conversie,productie,prepress,archief"
 title = "PDF naar PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Credits"
 xsmall = "100 Credits"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Kies het abonnement dat bij uw behoeften past"
 title = "Beschikbare abonnementen"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Maandelijkse uitgavelimiet bereikt"
 title = "Kon Stripe-portal niet openen"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "van {{allowance}} gratis PDF's gebruikt"
 capSuffix_other = "van {{allowance}} gratis PDF's gebruikt"
 eyebrow = "Processor-proefperiode"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "E-mail een document of melding wanneer een beleidsregel wordt uitgevoerd."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Sla verwerkte documenten op in Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Officiële SDKs"
 beta = "Beta"
 deprecated = "Verouderd"
 
-[portal.docs.search]
-empty = "Geen overeenkomende documentatie"
-placeholder = "Documentatie zoeken"
-results = "{{count}} resultaten"
-
 [portal.docs.skills]
 eyebrow = "VAARDIGHEDEN"
 lead = "Gebundelde, benoemde mogelijkheden die je agent als één tool aanroept. Elke vaardigheid is een deterministische op-chain met gekoppelde evals."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Geen documenten komen overeen met dit filter."
 rowActions = "Rijacties"
 sensitiveLabel = "Gevoelig"
-sensitiveTitle = "Gevoelig — toegang vereist"
 
 [portal.documents.table.columns]
 action = "Pipeline / Actie"
 document = "Document"
+labels = "Labels"
 product = "Product"
 status = "Status"
 time = "Tijd"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Laatst gezien"
 region = "Regio"
 status = "Status"
+target = "Target"
 version = "Versie"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Deze weergave heeft een onverwachte fout aangetroffen. Probeer he
 retry = "Opnieuw proberen"
 title = "Er is iets misgegaan op deze pagina"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Terug"
 body = "Download de desktop-app of host de server zelf."
@@ -7380,11 +7560,6 @@ cancel = "Annuleren"
 confirm = "Sleutel intrekken"
 title = "API-sleutel intrekken"
 
-[portal.infrastructure.attestationLabel]
-attested = "Geattesteerd"
-inScope = "Binnen scope"
-notApplicable = "N.v.t."
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Auditgebeurtenissen filteren op categorie"
 heading = "Auditlogs"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Succes"
 warning = "Waarschuwing"
 
-[portal.infrastructure.certLabel]
-certified = "Gecertificeerd"
-inProgress = "In behandeling"
-notStarted = "Niet gestart"
-
 [portal.infrastructure.createKey]
 cancel = "Annuleren"
 createKey = "Sleutel maken"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopieer dit geheim nu — het wordt niet opnieuw getoond."
 title = "API-sleutel maken"
 titleCreated = "Sleutel aangemaakt"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "In wachtrij"
-rolledBack = "Teruggedraaid"
-rolling = "Wordt uitgerold"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Geïmplementeerd door"
-environment = "Omgeving"
-product = "Product"
-status = "Status"
-version = "Versie"
-when = "Wanneer"
-
-[portal.infrastructure.deployments.recent]
-heading = "Recente implementaties"
-subheading = "De nieuwste rollouts over producten en omgevingen."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instanties"
-latency = "Latentie"
-load = "Belasting"
-p99 = "P99"
-region = "Regio"
-status = "Status"
-throughput = "Doorvoer"
-uptime = "Uptime"
-version = "Versie"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regio's"
-subheading = "Live gezondheid voor elke geïmplementeerde Stirling-regio — latentie, belasting en rolloutversie."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Geïmplementeerde regio's verschijnen hier zodra je werkruimte is ingericht."
-title = "Geen regio's geïmplementeerd"
-
 [portal.infrastructure.keyLabel]
 active = "Actief"
 revoked = "Ingetrokken"
 
-[portal.infrastructure.modelLabel]
-active = "Actief"
-degraded = "Verslechterd"
-disabled = "Uitgeschakeld"
-
-[portal.infrastructure.models]
-heading = "Modellen"
-msValue = "{{value}} ms"
-subheading = "De modelcatalogus en routering die documentverwerking in je werkruimte aandrijven."
-
-[portal.infrastructure.models.byom]
-description = "Registreer een on-prem of zelfgehost model en pin het aan een regio voor verwerking gebonden aan data residency."
-title = "Bring your own model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalogus"
-sub = "Beheerde modellen beschikbaar voor je werkruimte, met live latentie en kosten."
-subEnterprise = "Beheerde, bring-your-own en on-prem modellen — met pinning per regio beschikbaar."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modellen in de catalogus van je werkruimte verschijnen hier."
-title = "Geen modellen beschikbaar"
-
-[portal.infrastructure.models.columns]
-cost = "Kosten"
-latency = "Latentie"
-load = "Belasting"
-model = "Model"
-status = "Status"
-type = "Type"
-version = "Versie"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/aanroep"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Actieve modellen"
-avgLatency = "Gem. latentie"
-included = "Inbegrepen"
-monthlySpend = "Maandelijkse modeluitgaven"
-
-[portal.infrastructure.models.routing]
-empty = "Geen routeringsregels geconfigureerd."
-heading = "Routeringsregels"
-sub = "Welk model elke bewerking afhandelt. De standaard wordt toegepast wanneer geen specifiekere regel overeenkomt."
-subLocked = "Routeer bewerkingen naar specifieke modellen — beschikbaar met betaalde abonnementen."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Upgrade naar Pro om te bepalen welk model elke bewerking en elk documenttype afhandelt."
-title = "Modelroutering is een betaalde functie"
-
-[portal.infrastructure.models.routingColumns]
-default = "Standaard"
-docType = "Documenttype"
-modelForAria = "Model voor {{operation}}"
-operation = "Bewerking"
-routedTo = "Gerouteerd naar"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classificatie"
-extraction = "Extractie"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Verslechterd"
-down = "Uitgevallen"
-healthy = "Gezond"
-
-[portal.infrastructure.security.access.byok]
-description = "Lever een sleutel uit je eigen KMS. Stirling versleutelt ermee, maar kan nog steeds lezen."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Sleutels verlaten je KMS nooit. Stirling bewaart alleen ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling beheert encryptiesleutels. Het eenvoudigst — geen key ops aan jouw kant."
-label = "Door Stirling beheerde sleutels"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Documenttoegangsbeleid"
-subheading = "Bepaalt wie verwerkte documenten in rust kan ontsleutelen."
-
-[portal.infrastructure.security.attestations]
-heading = "Compliance-attestaties"
-noReport = "Geen rapport beschikbaar"
-subheading = "Auditpostuur per framework, met rapporten beschikbaar voor geattesteerde controles."
-viewReport = "Rapport bekijken →"
-
-[portal.infrastructure.security.compliance]
-heading = "Compliance"
-subheading = "Attestaties en certificeringen die het Stirling-platform dekken."
-
-[portal.infrastructure.security.empty]
-description = "De beveiligingsconfiguratie van je werkruimte verschijnt hier."
-title = "Beveiligingspostuur niet beschikbaar"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Met HYOK verlaten encryptiesleutels je KMS nooit. Stirling bewaart en verwerkt alleen ciphertext die je op elk moment kunt intrekken."
-title = "Stirling kan je documenten niet ontsleutelen"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Geen IP-bereiken geconfigureerd — alle IP's toegestaan."
-heading = "IP allowlist"
-sub = "API-toegang is beperkt tot deze CIDR-bereiken."
-subLocked = "Beperk API-toegang tot bekende IP-bereiken — beschikbaar met betaalde abonnementen."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Upgrade naar Pro om API-toegang tot specifieke netwerken te beperken."
-title = "IP allowlisting is een betaalde functie"
-
-[portal.infrastructure.security.ipColumns]
-added = "Toegevoegd"
-addedBy = "Toegevoegd door"
-cidr = "CIDR"
-label = "Label"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritme"
-heading = "Beheer van encryptiesleutels"
-keyId = "Sleutel-ID"
-lastRotated = "Laatst geroteerd"
-rotateKey = "Sleutel roteren"
-rotationPolicy = "Rotatiebeleid"
-subheading = "Beheer van de sleutels die documenten in rust versleutelen — wie kan ontsleutelen en hoe sleutels roteren."
-
-[portal.infrastructure.security.managedBanner]
-description = "Bring-your-own-key (BYOK) en hold-your-own-key (HYOK) sleutelbeheer zijn beschikbaar met Enterprise. Upgrade om sleutels uit je eigen KMS te leveren."
-title = "Sleutels worden door Stirling beheerd in je abonnement"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Azië-Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "Europese Unie"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Verenigde Staten"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Data residency"
-subheading = "Waar documenten worden opgeslagen en verwerkt."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} gebruikt"
-
-[portal.infrastructure.storage.empty]
-description = "Verbonden opslag en gebruik verschijnen hier."
-title = "Geen opslag geconfigureerd"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Actief"
-activeRange = "0–{{value}}d"
-archived = "Gearchiveerd"
-coldStorage = "koude opslag"
-deleted = "Verwijderd"
-never = "nooit"
-purged = "opgeschoond"
-
-[portal.infrastructure.storage.providers]
-connect = "Verbinden"
-connected = "Verbonden"
-heading = "Verbonden providers"
-subheading = "Waar verwerkte artefacten worden weggeschreven."
-
-[portal.infrastructure.storage.retention]
-heading = "Bewaartermijn"
-subheading = "Hoe lang artefacten worden bewaard vóór lifecycle-verwijdering."
-windowLabel = "Standaard bewaarperiode"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dag"
-days_other = "{{count}} dagen"
-never = "Nooit verwijderen"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Totaal gebruik"
-progressLabel = "Gebruikte opslag"
-subheading = "Opslag gebruikt over alle verbonden providers."
-
 [portal.infrastructure.tabs]
 apiKeys = "API-sleutels"
 audit = "Auditlogs"
@@ -7715,11 +7657,9 @@ security = "Beveiliging"
 storage = "Opslag"
 
 [portal.integrations]
-addAnother = "Nog een toevoegen"
 availableHeading = "Beschikbaar"
 comingSoonHeading = "Binnenkort beschikbaar"
 connect = "Verbinden"
-connectedHeading = "Verbonden"
 connectionCount_one = "{{count}} verbinding"
 connectionCount_other = "{{count}} verbindingen"
 customApi = "Aangepaste API"
@@ -7737,6 +7677,10 @@ security = "Beveiliging"
 signing = "Ondertekening"
 storage = "Opslag"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Verbonden"
 
@@ -7767,7 +7711,6 @@ integrations = "Integraties"
 pipelines = "Pipelines"
 policies = "Beleid"
 procurement = "Inkoop"
-settings = "Instellingen"
 sources = "Bronnen"
 usage = "Gebruik en facturering"
 users = "Gebruikers"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Nieuwe pipeline"
 
 [portal.pipelines.builder]
-addStep = "Tool toevoegen"
+activate = "Activate"
 back = "Terug naar pipelines"
 cannotFollow = "Kan {{produced}} niet verwerken"
 chooseAccount = "Kies een account"
@@ -7792,28 +7735,38 @@ chooseDestination = "Kies een bestemming"
 chooseOperation = "Kies wat deze stap doet"
 chooseSource = "Kies een bron"
 discard = "Wijzigingen verwerpen"
-enabled = "Ingeschakeld"
 inputs = "Invoer"
 inputSource = "Invoerbron"
 inputTrigger = "Trigger"
 keepEditing = "Blijven bewerken"
+moreActions = "More actions"
 needsConfiguring = "Moet worden ingesteld"
-needsUpload = "Vereist een geüpload bestand"
-noSources = "Nog geen bronnen verbonden. Maak er een aan om deze als invoer te gebruiken."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Geen tools komen overeen met je zoekopdracht."
-pipelineSettings = "Pipeline-instellingen"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Tools zoeken"
-selectToolBody = "Voeg een tool toe om je pipeline te bouwen."
-selectToolTitle = "Nog geen tools"
 sendToSystem = "Naar een ander systeem verzenden"
 stepsIncompatible = "Deze stappen kunnen niet worden uitgevoerd op wat hun vorige stap oplevert: {{tools}}."
 stepsNeedSetup = "Deze stappen moeten nog worden ingesteld voordat je kunt opslaan: {{tools}}."
-toolSettings = "Toolinstellingen"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Niet-herkende bewerking, ongewijzigd behouden."
 unsavedBody = "Je hebt niet-opgeslagen wijzigingen. Sla ze op voordat je weggaat, of verwerp ze?"
 unsavedTitle = "Niet-opgeslagen wijzigingen"
-uploadUnsupported = "Geüploade bestanden worden nog niet ondersteund in pipelines, dus deze stappen kunnen niet worden opgeslagen: {{tools}}."
 usesDefaults = "Wordt uitgevoerd met standaardinstellingen"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combineert elk bestand uit de vorige stap"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Kan niet controleren wat deze stap accepteert"
 
 [portal.pipelines.composer]
 addTool = "Tool toevoegen"
-cancel = "Annuleren"
-chainEmpty = "Voeg een tool toe om je pipeline te bouwen."
 create = "Pipeline maken"
+createPaused = "Create paused"
 editingUnsupported = "Het weergeven van deze toolparams voor bewerking wordt nog niet ondersteund."
-moveDown = "Omlaag verplaatsen"
-moveUp = "Omhoog verplaatsen"
+editSource = "Edit source"
 name = "Naam"
 namePlaceholder = "bijv. Redactiesweep"
 noToolSettings = "Deze tool heeft geen configureerbare instellingen."
-operations_one = "Bewerking ({{count}})"
-operations_other = "Bewerkingen ({{count}})"
 output = "Uitvoer"
-removeStep = "Bewerking verwijderen"
 save = "Wijzigingen opslaan"
 scheduleEvery = "Uitvoeren elke"
-sources = "Bronnen"
-sourcesLoading = "Bronnen laden..."
 trigger = "Trigger"
 triggerManual = "Alleen handmatig"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dagen"
 hours = "uur"
 minutes = "minuten"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" verwijderen? Dit kan niet ongedaan worden gemaakt."
 cancel = "Annuleren"
@@ -7867,6 +7825,37 @@ connectSource = "Een bron verbinden"
 description = "Maak je eerste pipeline: kies de bronnen waarop deze draait, koppel de bewerkingen en kies waar de uitvoer naartoe gaat."
 title = "Nog geen pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Actief"
 paused = "Gepauzeerd"
@@ -7879,7 +7868,6 @@ completed_one = "Run voltooid."
 completed_other = "Alle {{count}} runs voltooid."
 empty = "Niets om uit te voeren: de bronnen hadden geen documenten om te verwerken."
 failed = "Run mislukt: {{error}}"
-historyCleared = "Geschiedenis gewist. De volgende uitvoering verwerkt alles opnieuw dat momenteel in de bronnen staat."
 inFlight = "Niets nieuws om uit te voeren: documenten worden nog verwerkt vanuit een eerdere uitvoering."
 parked_one = "Niets om uit te voeren: {{count}} document is eerder mislukt en is geparkeerd. Los de oorzaak op en wis daarna de geschiedenis om het opnieuw te proberen."
 parked_other = "Niets om uit te voeren: {{count}} documenten zijn eerder mislukt en zijn geparkeerd. Los de oorzaak op en wis daarna de geschiedenis om ze opnieuw te proberen."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Bronnen"
 status = "Status"
 steps = "Stappen"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Mapbewaking"
@@ -8209,6 +8198,24 @@ label = "Aan een Jira-issue toevoegen"
 description = "Verzendt het verwerkte document als bijlage."
 label = "Het document e-mailen (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Schrijft het verwerkte document naar een map."
 label = "Uploaden naar Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maximum bereikt"
 subtitle = "Je gratis trial loopt tot en met {{date}}. Geen kaart vereist."
 title = "Enterprise-trial"
 
-[portal.search]
-ariaLabel = "Zoeken"
-placeholder = "Zoek in Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Snelle acties verschijnen hier zodra ze beschikbaar zijn."
-noActionsTitle = "Geen snelle acties"
-noMatches = "Geen overeenkomsten voor \"{{query}}\""
-noMatchesDescription = "Probeer een ander trefwoord of blader door de catalogus."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Annuleren"
 confirm = "Verwijderen"
 title = "Bron verwijderen?"
 
-[portal.sources.empty]
-description = "Verbind een map (en binnenkort cloudopslag) zodat je beleidsregels ergens documenten vandaan kunnen halen."
-title = "Nog geen bronnen verbonden"
-
 [portal.sources.kpi]
 inUse = "In gebruik"
 total = "Verbindingen"
@@ -8785,6 +8778,7 @@ unused = "Ongebruikt"
 documents = "Documenten"
 source = "Bron"
 status = "Status"
+type = "Type"
 usedBy = "Beleidsregels"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Beleid & Privacy"
 [settings.preferences]
 title = "Voorkeuren"
 
-[settings.search]
-placeholder = "Instellingen doorzoeken..."
-
 [settings.security]
 description = "Werk uw wachtwoord bij om uw account veilig te houden."
 title = "Beveiliging"
@@ -10128,6 +10119,7 @@ last = "Laatste pagina"
 maintainRatio = "Aspectverhouding behouden"
 next = "Volgende pagina"
 noSavedSigs = "Geen opgeslagen signatuuren gevonden"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Persoonlijke Signatuuren"
 previous = "Vorige pagina"
 redo = "Opnieuw"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Verwijdering van achtergrond is mislukt"
 hint = "Upload een PNG- of JPG-afbeelding van uw handtekening"
 label = "Handtekeningafbeelding uploaden"
 placeholder = "Afbeeldingsbestand selecteren"
+previewAlt = "Current image signature"
 processing = "Afbeelding verwerken..."
 removeBackground = "Witte achtergrond verwijderen (transparant maken)"
 
@@ -10179,6 +10172,17 @@ saved = "Selecteer hierboven een opgeslagen handtekening en klik vervolgens erge
 text = "Na het invoeren van uw naam hierboven, klik ergens op de PDF om uw handtekening te plaatsen."
 title = "Hoe een handtekening toevoegen"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Handtekening verplaatsen"
 pause = "Plaatsing pauzeren"
@@ -10625,6 +10629,23 @@ title = "Uploaden naar server"
 updateButton = "Bijwerken op server"
 uploadButton = "Uploaden naar server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Ga terug"
 pdfTools = "PDF-tools"
 placeholder = "Kies een tool om te beginnen"
 premiumFeature = "Premiumfunctie:"
-searchTools = "Tools zoeken"
 toolsHeader = "Tools"
 viewAllTools = "Alle tools weergeven"
 
@@ -10822,6 +10842,9 @@ removal = "Verwijdering"
 signing = "Ondertekenen"
 verification = "Verificatie"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Geen tools gevonden"
 noTools = "Geen tools beschikbaar"
@@ -10979,6 +11002,13 @@ approver = "Keurt beleidsregel goed"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Uitnodiging voor {{email}} annuleren? Deze persoon kan niet deelnemen met de huidige link."
 cancelInviteTitle = "Uitnodiging annuleren"
@@ -10998,10 +11028,8 @@ title = "Nog geen leden"
 addToTeam = "Toevoegen aan team"
 guestCount = "{{count}} gast"
 guests = "Gasten"
-guestsDesc = "Externe samenwerkers, beperkt tot wat je hebt gedeeld. Alleen Editor."
 ledBy = "geleid door {{owner}}"
 org = "Organisatie"
-orgDesc = "Eigenaren met organisatiebrede bevoegdheid en beleidsgoedkeuring"
 owners = "{{count}} eigenaar"
 team = "Team {{name}}"
 teamMeta = "{{count}} personen"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Uitgenodigd door {{who}}"
 cancel = "Annuleren"
-count = "{{count}} in behandeling"
-desc = "Uitgenodigde personen die nog niet zijn toegetreden. Ze houden een plek bezet totdat ze accepteren."
 expiresInDays_one = "Verloopt over {{count}} dag"
 expiresInDays_other = "Verloopt over {{count}} dagen"
 expiresToday = "Verloopt vandaag"
 title = "Uitnodigingen in behandeling"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Er is iets misgegaan bij het bereiken van de backend, of je hebt geen toegang. Probeer het opnieuw."
 title = "Kon leden niet laden"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Bijlagen zoeken"
 title = "Bijlagen"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Bladwijzertitel"
 bookmarkTitleRequired = "Bladwijzertitel is vereist"
 closeSidebar = "Zijbalk met bladwijzers sluiten"
 collapseAll = "Alle bladwijzers samenvouwen"
+empty = "No bookmarks in this document"
 expandAll = "Alle bladwijzers uitvouwen"
 searchPlaceholder = "Bladwijzers zoeken"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Opmerking toevoegen"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Zoeken in document"
 moreActions = "Meer acties"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Pagina {{page}}"
 placingHint = "Klik op een pagina om te plaatsen… (annuleren)"
 removeCommentOnly = "Alleen opmerking verwijderen"
 saveReply = "Antwoord opslaan"
+searchPlaceholder = "Search comments"
 title = "Opmerkingen"
 typeComment = "Opmerking"
 typeInsertText = "Tekst invoegen"
@@ -11290,6 +11325,7 @@ unsavedDesc = "U heeft niet-opgeslagen wijzigingen"
 closeSidebar = "Zijbalk met lagen sluiten"
 hideAll = "Alle lagen verbergen"
 showAll = "Alle lagen tonen"
+title = "Layers"
 
 [viewer.link]
 delete = "Link verwijderen"
@@ -11646,6 +11682,7 @@ exitRedaction = "Zwartlakmodus afsluiten"
 exportAll = "PDF exporteren"
 exportSelected = "Geselecteerde pagina's exporteren"
 formFill = "Formulier invullen"
+hideToolbar = "Hide toolbar"
 multiTool = "Multi-tool"
 panMode = "Pan-modus"
 print = "PDF afdrukken"
@@ -11666,6 +11703,7 @@ selectAll = "Alles selecteren"
 selectByNumber = "Selecteren op paginanummers"
 selectLanguage = "Taal selecteren"
 share = "Delen"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Annotaties tonen/verbergen"
 toggleAttachments = "Bijlagen tonen/verbergen"
 toggleBookmarks = "Bladwijzers tonen/verbergen"
diff --git a/frontend/editor/public/locales/no-NB/translation.toml b/frontend/editor/public/locales/no-NB/translation.toml
index eef3319e76..307e603d81 100644
--- a/frontend/editor/public/locales/no-NB/translation.toml
+++ b/frontend/editor/public/locales/no-NB/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Bruk"
 applyAndContinue = "Lagre og forlat"
-areYouSure = "Er du sikker på at du vil forlate?"
 back = "Tilbake"
 black = "Svart"
 blue = "Blå"
@@ -106,6 +105,7 @@ undoSuccess = "Operasjon angret"
 unknown = "Ukjent"
 unpin = "Løsne fil (erstatt etter verktøykjøring)"
 unsavedChanges = "Du har ulagrede endringer i PDF-en."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Ulagrede endringer"
 unsupported = "Ikke støttet"
 username = "Brukernavn"
@@ -1879,6 +1879,9 @@ width = "Bredde"
 [app]
 description = "Det gratis alternativet til Adobe Acrobat (10M+ nedlastinger)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konverter til PDF/A-3b"
 convertToPdfA3bDescription = "Oppretter en arkiv-PDF med innebygde vedlegg"
@@ -2933,12 +2936,16 @@ text = "For å gjøre disse tillatelsene uforanderlige, bruk verktøyet Legg til
 [chat.actions]
 copy = "Kopier melding"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling-agentalternativer"
+assistant = "AI Assistant"
 clearChat = "Tøm chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Denne operasjonen vil bruke skykreditter"
 tooltip = "Velg farge fra skjermen"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Velg farge"
 
 [common]
+actions = "Actions"
 back = "Tilbake"
 cancel = "Avbryt"
 close = "Lukk"
+codeSample = "Code sample"
 collapse = "Slå sammen"
 confirm = "Bekreft"
 continue = "Fortsett"
 copied = "Kopiert!"
 copy = "Kopier"
 done = "Ferdig"
+enterValue = "Enter value"
 error = "Feil"
 expand = "Utvid"
 loading = "Laster..."
 next = "Neste"
+open = "Open"
 preview = "Forhåndsvis"
 previous = "Forrige"
 refresh = "Oppdater"
 remaining = "Gjenstår"
 retry = "Prøv igjen"
 save = "Lagre"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Tøm valgte"
@@ -3185,6 +3199,7 @@ title = "Komprimeringsmetode"
 [compress.settings]
 desiredSize = "Ønsket filstørrelse"
 desiredSizePlaceholder = "Angi størrelse"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Komprimering er en enkel måte å redusere filstørrelsen på. Velg Filstørrelse for å angi en målstørrelse og la oss justere kvaliteten for deg. Velg Kvalitet for å sette komprimeringsstyrke manuelt."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF-alternativer"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Velg et kildeformat først"
 settings = "Innstillinger"
 single = "Enkel"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Søk..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Rediger"
@@ -3824,11 +3861,13 @@ shareSelected = "Del valgte"
 sharing = "Deling"
 showAll = "Vis alle"
 showHistory = "Vis historikk"
+sortBy = "Sort files"
 sortByDate = "Sorter etter dato"
 sortByName = "Sorter etter navn"
 sortBySize = "Sorter etter størrelse"
 storage = "Lagring"
 storageState = "Lagring"
+storageUsed = "Storage used"
 synced = "Synkronisert"
 title = "Last opp PDF-filer"
 toolChain = "Brukte verktøy"
@@ -3874,8 +3913,12 @@ addFiles = "Legg til filer"
 addingFiles = "Legger til filer…"
 collapse = "Skjul sidepanel"
 customizeGroups = "Tilpass grupper"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Åpne filer for å komme i gang"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Utvid sidepanel"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive er ikke konfigurert"
@@ -3888,15 +3931,17 @@ openFromComputer = "Åpne fra datamaskin"
 openSettings = "Åpne innstillinger"
 other = "Annet"
 recent = "Nylig"
-search = "Søk"
-searchPlaceholder = "Søk i filer..."
 viewAll = "Vis alle {{count}} filer"
 
 [fileSidebar.fileItem]
 closeViewer = "Lukk fremviser"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Åpne i fremviser"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Tilbakestill til standarder"
 subtitle = "Grupper filene dine i overordnede kategorier. Legg til eksisterende eller nye etiketter i en kategori, gi den nytt navn, eller opprett din egen. Filer som ikke er i noen av kategoriene dine, vises under «Annet»."
 title = "Sidefeltkategorier"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Legg til i arbeidsområde"
 addToWorkspaceCount = "Legg {{count}} til i arbeidsområde"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Tilbake til Mine filer"
 breadcrumbs = "Mappesti"
 cancel = "Avbryt"
 classification = "Klassifisering"
-clearSearch = "Tøm søk"
 clearSelection = "Tøm utvalg"
 closeDetails = "Lukk detaljer"
 create = "Opprett"
@@ -3950,6 +4002,7 @@ downloadAll = "Last ned alle"
 downloadVersion = "Last ned denne versjonen"
 dropOverlay = "Slipp filer for å laste opp"
 dropOverlaySub = "Filer starter i Lokal. Bruk 'Flytt til' eller 'Lagre til skyen' for å organisere dem i en mappe."
+duplicate = "Duplicate"
 file = "Fil"
 fileInfo = "File info"
 fileMenu = "Filhandlinger"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Endre størrelse på mappetre (piltaster, Shift for større
 save = "Lagre"
 saveToServer = "Lagre til server"
 saveToServerDisabledHint = "Lagring til serveren er ikke aktivert på denne serveren. Be administratoren om å aktivere det."
-search = "Søk"
-searchPlaceholder = "Søk i denne mappen og undermapper"
 selectAll = "Velg alt"
 selectAllHint = "Klikk for å velge alt. Tips: hold Ctrl (eller Cmd) for å legge til filer én om gangen, Shift for å velge et område."
 selectedCount = "{{count}} valgt"
@@ -4044,6 +4095,10 @@ title = "Ingen skyfiler ennå"
 hint = "Filer lagret uten opplasting blir værende her. Slipp en fil for å legge til en."
 title = "Ingen kun-lokale filer"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Filer du åpner eller redigerer, vises her."
 title = "Ingenting endret ennå"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Kunne ikke slette mappe."
 deleteFolderFailedDetail = "Kunne ikke slette mappe: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Kunne ikke oppdatere mappeutseende."
 folderAppearanceFailedDetail = "Kunne ikke oppdatere mappeutseende: {{message}}"
 moveFilesFailed = "Kunne ikke flytte filer."
@@ -4113,6 +4170,11 @@ localHint = "Kun lagret i denne nettleseren"
 shared = "Delt"
 sharedHint = "Delt med deg via lenke"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Eldste først"
 modifiedDesc = "Nyeste først"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Ingen filer tilgjengelig i lagringen. Åpne noen filer f
 open = "Åpne"
 openFile = "Åpne fil"
 openFiles = "Åpne filer"
+selectFile = "Select {{name}}"
 selectFromStorage = "Velg fra lagring"
 upload = "Last opp"
 uploadFile = "Last opp fil"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Alt lagret"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Kunne ikke trekke ut CSV"
 extractXlsxError = "Kunne ikke trekke ut XLSX"
+filled = "filled"
 flattenAfterFilling = "Flate ut etter utfylling"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obl"
 requiredFieldsError = "Fyll ut alle obligatoriske felt"
 rescanFields = "Skann felter på nytt"
@@ -4795,9 +4863,6 @@ title = "Bilde til PDF"
 [imageToPdf]
 tags = "konvertering,bilde,jpg,foto"
 
-[infoBanner]
-dismiss = "Lukk"
-
 [invite]
 acceptError = "Kunne ikke opprette konto"
 accountFor = "Oppretter konto for"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Opplasting vellykket!"
 uploadSuccessMessage = "Bildene dine er overført."
 validating = "Validerer økt..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Skann for å laste opp bilder. Bilder konverteres automatisk til PDF."
 descriptionNoConvert = "Skann for å laste opp bilder fra mobilenheten din."
@@ -4997,8 +5090,13 @@ title = "Last opp fra mobil"
 tags = "Multi Verktøy,Multi operasjon,UI,klikk dra,frontend,klientside,interaktiv,bevegelig"
 title = "PDF-multiverktøy"
 
-[navbar]
-search = "Søk"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentiseringen var ikke vellykket. Du kan lukke dette vinduet og prøve igjen."
@@ -5127,6 +5225,7 @@ activeFiles = "Visningen <strong>Aktive filer</strong> viser alle PDF-ene du har
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Lukk"
 cropSettings = "Nå som vi har valgt filen vi vil beskjære, kan vi konfigurere Beskjær-verktøyet til å velge området vi vil beskjære PDF-en til."
+dialogLabel = "Onboarding"
 fileCheckbox = "Å klikke på en av filene velger den for behandling. Du kan velge flere filer for batchoperasjoner."
 fileReplacement = "Den endrede filen vil erstatte originalfilen i Arbeidsbenken automatisk, slik at du enkelt kan kjøre den gjennom flere verktøy."
 filesButton = "Knappen <strong>Filer</strong> på hurtigtilgangslinjen lar deg laste opp PDF-er til bruk i verktøyene."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF til PDF/A"
 tags = "arkiv,langtidslagring,standard,konvertering,lagring,bevaring"
 title = "PDF til PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "utskrift,standard,konvertering,produksjon,trykklargjøring,arkiv"
 title = "PDF til PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kreditter"
 xsmall = "100 kreditter"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Velg planen som passer dine behov"
 title = "Tilgjengelige planer"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Månedlig forbruksgrense nådd"
 title = "Kunne ikke åpne Stripe-portalen"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "av {{allowance}} gratis PDF-er brukt"
 capSuffix_other = "av {{allowance}} gratis PDF-er brukt"
 eyebrow = "Processor-prøveperiode"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Send et dokument eller et varsel på e-post når en policy kjører."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Arkiver behandlede dokumenter i Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Offisielle SDK-er"
 beta = "Beta"
 deprecated = "Utdatert"
 
-[portal.docs.search]
-empty = "Ingen samsvarende dokumentasjon"
-placeholder = "Søk i dokumentasjon"
-results = "{{count}} resultater"
-
 [portal.docs.skills]
 eyebrow = "FERDIGHETER"
 lead = "Samlede, navngitte kapabiliteter agenten din påkaller som ett enkelt verktøy. Hver ferdighet er en deterministisk operasjonskjede med evalueringer vedlagt."
@@ -7180,11 +7309,11 @@ editorAction = "Redigerer"
 empty = "Ingen dokumenter samsvarer med dette filteret."
 rowActions = "Radhandlinger"
 sensitiveLabel = "Sensitivt"
-sensitiveTitle = "Sensitivt — tilgang kreves"
 
 [portal.documents.table.columns]
 action = "Pipeline / handling"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Status"
 time = "Tid"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Sist sett"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Versjon"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Denne visningen traff en uventet feil. Prøv igjen, eller velg en
 retry = "Prøv igjen"
 title = "Noe gikk galt på denne siden"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Tilbake"
 body = "Last ned skrivebordsappen eller selvhost serveren."
@@ -7380,11 +7560,6 @@ cancel = "Avbryt"
 confirm = "Tilbakekall nøkkel"
 title = "Tilbakekall API-nøkkel"
 
-[portal.infrastructure.attestationLabel]
-attested = "Attestert"
-inScope = "Innenfor omfang"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrer revisjonshendelser etter kategori"
 heading = "Revisjonslogger"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Vellykket"
 warning = "Advarsel"
 
-[portal.infrastructure.certLabel]
-certified = "Sertifisert"
-inProgress = "Pågår"
-notStarted = "Ikke startet"
-
 [portal.infrastructure.createKey]
 cancel = "Avbryt"
 createKey = "Opprett nøkkel"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopier denne hemmeligheten nå — den vises ikke igjen."
 title = "Opprett API-nøkkel"
 titleCreated = "Nøkkel opprettet"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "I kø"
-rolledBack = "Rullet tilbake"
-rolling = "Ruller ut"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Distribuert av"
-environment = "Miljø"
-product = "Produkt"
-status = "Status"
-version = "Versjon"
-when = "Når"
-
-[portal.infrastructure.deployments.recent]
-heading = "Nylige distribusjoner"
-subheading = "De nyeste utrullingene på tvers av produkter og miljøer."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instanser"
-latency = "Latens"
-load = "Belastning"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Gjennomstrømning"
-uptime = "Oppetid"
-version = "Versjon"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regioner"
-subheading = "Sanntidshelse for hver distribuerte Stirling-region — latens, belastning og utrullingsversjon."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Distribuerte regioner vises her når arbeidsområdet ditt er klargjort."
-title = "Ingen regioner distribuert"
-
 [portal.infrastructure.keyLabel]
 active = "Aktiv"
 revoked = "Tilbakekalt"
 
-[portal.infrastructure.modelLabel]
-active = "Aktiv"
-degraded = "Redusert"
-disabled = "Deaktivert"
-
-[portal.infrastructure.models]
-heading = "Modeller"
-msValue = "{{value}} ms"
-subheading = "Modellkatalogen og rutingen som driver dokumentbehandling på tvers av arbeidsområdet ditt."
-
-[portal.infrastructure.models.byom]
-description = "Registrer en lokal eller selvhostet modell og fest den til en region for behandling bundet til datalokalitet."
-title = "Ta med din egen modell"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Administrerte modeller tilgjengelige for arbeidsområdet ditt, med sanntidslatens og kostnad."
-subEnterprise = "Administrerte, egne og lokale modeller — med festing per region tilgjengelig."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modeller i katalogen til arbeidsområdet ditt vises her."
-title = "Ingen modeller tilgjengelige"
-
-[portal.infrastructure.models.columns]
-cost = "Kostnad"
-latency = "Latens"
-load = "Belastning"
-model = "Modell"
-status = "Status"
-type = "Type"
-version = "Versjon"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/kall"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktive modeller"
-avgLatency = "Gj.sn. latens"
-included = "Inkludert"
-monthlySpend = "Månedlige modellkostnader"
-
-[portal.infrastructure.models.routing]
-empty = "Ingen rutingsregler konfigurert."
-heading = "Rutingsregler"
-sub = "Hvilken modell som håndterer hver operasjon. Standarden brukes når ingen smalere regel samsvarer."
-subLocked = "Rut operasjoner til spesifikke modeller — tilgjengelig med betalte planer."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Oppgrader til Pro for å kontrollere hvilken modell som håndterer hver operasjon og dokumenttype."
-title = "Modellruting er en betalt funksjon"
-
-[portal.infrastructure.models.routingColumns]
-default = "Standard"
-docType = "Dokumenttype"
-modelForAria = "Modell for {{operation}}"
-operation = "Operasjon"
-routedTo = "Rutet til"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klassifisering"
-extraction = "Ekstraksjon"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Redusert"
-down = "Nede"
-healthy = "Frisk"
-
-[portal.infrastructure.security.access.byok]
-description = "Oppgi en nøkkel fra din egen KMS. Stirling krypterer med den, men kan fortsatt lese."
-label = "Ta med din egen nøkkel (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Nøkler forlater aldri din KMS. Stirling holder bare chiffertekst."
-label = "Hold din egen nøkkel (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling administrerer krypteringsnøkler. Enklest — null nøkkeldrift på din side."
-label = "Nøkler holdt av Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Policy for dokumenttilgang"
-subheading = "Kontrollerer hvem som kan dekryptere behandlede dokumenter i ro."
-
-[portal.infrastructure.security.attestations]
-heading = "Samsvarsattestasjoner"
-noReport = "Ingen rapport tilgjengelig"
-subheading = "Revisjonsstilling rammeverk for rammeverk, med rapporter tilgjengelige for attesterte kontroller."
-viewReport = "Vis rapport →"
-
-[portal.infrastructure.security.compliance]
-heading = "Samsvar"
-subheading = "Attestasjoner og sertifiseringer som dekker Stirling-plattformen."
-
-[portal.infrastructure.security.empty]
-description = "Sikkerhetskonfigurasjonen for arbeidsområdet ditt vises her."
-title = "Sikkerhetsstilling utilgjengelig"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Med HYOK forlater krypteringsnøkler aldri din KMS. Stirling lagrer og behandler bare chiffertekst som du kan tilbakekalle når som helst."
-title = "Stirling kan ikke dekryptere dokumentene dine"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Ingen IP-områder konfigurert — alle IP-er tillatt."
-heading = "IP-tillatelsesliste"
-sub = "API-tilgang er begrenset til disse CIDR-områdene."
-subLocked = "Begrens API-tilgang til kjente IP-områder — tilgjengelig med betalte planer."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Oppgrader til Pro for å begrense API-tilgang til spesifikke nettverk."
-title = "IP-tillatelseslisting er en betalt funksjon"
-
-[portal.infrastructure.security.ipColumns]
-added = "Lagt til"
-addedBy = "Lagt til av"
-cidr = "CIDR"
-label = "Etikett"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritme"
-heading = "Administrasjon av krypteringsnøkler"
-keyId = "Nøkkelidentifikator"
-lastRotated = "Sist rotert"
-rotateKey = "Roter nøkkel"
-rotationPolicy = "Rotasjonspolicy"
-subheading = "Forvaring av nøklene som krypterer dokumenter i ro — hvem som kan dekryptere, og hvordan nøkler roteres."
-
-[portal.infrastructure.security.managedBanner]
-description = "Forvaring med ta-med-din-egen-nøkkel (BYOK) og hold-din-egen-nøkkel (HYOK) er tilgjengelig på Enterprise. Oppgrader for å oppgi nøkler fra din egen KMS."
-title = "Nøkler administreres av Stirling på planen din"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia-Stillehavet"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR-datagrense"
-label = "Den europeiske union"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "USA"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Datalokalitet"
-subheading = "Hvor dokumenter lagres og behandles."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} brukt"
-
-[portal.infrastructure.storage.empty]
-description = "Tilkoblet lagring og bruk vises her."
-title = "Ingen lagring konfigurert"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktiv"
-activeRange = "0–{{value}}d"
-archived = "Arkivert"
-coldStorage = "kaldlagring"
-deleted = "Slettet"
-never = "aldri"
-purged = "slettet permanent"
-
-[portal.infrastructure.storage.providers]
-connect = "Koble til"
-connected = "Tilkoblet"
-heading = "Tilkoblede leverandører"
-subheading = "Hvor behandlede artefakter skrives."
-
-[portal.infrastructure.storage.retention]
-heading = "Oppbevaring"
-subheading = "Hvor lenge artefakter beholdes før livssyklussletting."
-windowLabel = "Standard oppbevaringsvindu"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dag"
-days_other = "{{count}} dager"
-never = "Slett aldri"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Total bruk"
-progressLabel = "Lagring brukt"
-subheading = "Lagring brukt på tvers av alle tilkoblede leverandører."
-
 [portal.infrastructure.tabs]
 apiKeys = "API-nøkler"
 audit = "Revisjonslogger"
@@ -7715,11 +7657,9 @@ security = "Sikkerhet"
 storage = "Lagring"
 
 [portal.integrations]
-addAnother = "Legg til en til"
 availableHeading = "Tilgjengelig"
 comingSoonHeading = "Kommer snart"
 connect = "Koble til"
-connectedHeading = "Tilkoblet"
 connectionCount_one = "{{count}} tilkobling"
 connectionCount_other = "{{count}} tilkoblinger"
 customApi = "Tilpasset API"
@@ -7737,6 +7677,10 @@ security = "Sikkerhet"
 signing = "Signering"
 storage = "Lagring"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Tilkoblet"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrasjoner"
 pipelines = "Pipelines"
 policies = "Policyer"
 procurement = "Innkjøp"
-settings = "Innstillinger"
 sources = "Kilder"
 usage = "Bruk og fakturering"
 users = "Brukere"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Ny pipeline"
 
 [portal.pipelines.builder]
-addStep = "Legg til verktøy"
+activate = "Activate"
 back = "Tilbake til pipelines"
 cannotFollow = "Kan ikke ta {{produced}}"
 chooseAccount = "Velg en konto"
@@ -7792,28 +7735,38 @@ chooseDestination = "Velg en destinasjon"
 chooseOperation = "Velg hva dette trinnet gjør"
 chooseSource = "Velg en kilde"
 discard = "Forkast endringer"
-enabled = "Aktivert"
 inputs = "Inndata"
 inputSource = "Inndatakilde"
 inputTrigger = "Utløser"
 keepEditing = "Fortsett å redigere"
+moreActions = "More actions"
 needsConfiguring = "Må settes opp"
-needsUpload = "Trenger en opplastet fil"
-noSources = "Ingen kilder er tilkoblet ennå. Opprett en for å bruke den som inndata."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Ingen verktøy samsvarer med søket ditt."
-pipelineSettings = "Pipeline-innstillinger"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Søk i verktøy"
-selectToolBody = "Legg til et verktøy for å bygge pipelinen din."
-selectToolTitle = "Ingen verktøy ennå"
 sendToSystem = "Send til et annet system"
 stepsIncompatible = "Disse trinnene kan ikke kjøres på det forrige trinnet produserer: {{tools}}."
 stepsNeedSetup = "Disse trinnene må fortsatt settes opp før lagring: {{tools}}."
-toolSettings = "Verktøyinnstillinger"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Ukjent operasjon, beholdt som den er."
 unsavedBody = "Du har ulagrede endringer. Lagre dem før du forlater, eller forkast dem?"
 unsavedTitle = "Ulagrede endringer"
-uploadUnsupported = "Opplastede filer støttes ikke i pipelines ennå, så disse trinnene kan ikke lagres: {{tools}}."
 usesDefaults = "Kjører med standardinnstillinger"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinerer hver fil fra forrige trinn"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Kan ikke sjekke hva dette trinnet godtar"
 
 [portal.pipelines.composer]
 addTool = "Legg til verktøy"
-cancel = "Avbryt"
-chainEmpty = "Legg til et verktøy for å begynne å bygge pipelinen din."
 create = "Opprett pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Visning av disse verktøyparametrene for redigering støttes ikke ennå."
-moveDown = "Flytt ned"
-moveUp = "Flytt opp"
+editSource = "Edit source"
 name = "Navn"
 namePlaceholder = "f.eks. Redigeringsgjennomgang"
 noToolSettings = "Dette verktøyet har ingen konfigurerbare innstillinger."
-operations_one = "Operasjon ({{count}})"
-operations_other = "Operasjoner ({{count}})"
 output = "Utdata"
-removeStep = "Fjern operasjon"
 save = "Lagre endringer"
 scheduleEvery = "Kjør hver"
-sources = "Kilder"
-sourcesLoading = "Laster kilder..."
 trigger = "Utløser"
 triggerManual = "Kun manuelt"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dager"
 hours = "timer"
 minutes = "minutter"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Slette \"{{name}}\"? Dette kan ikke angres."
 cancel = "Avbryt"
@@ -7867,6 +7825,37 @@ connectSource = "Koble til en kilde"
 description = "Opprett din første pipeline: velg kildene den kjører over, kjed operasjonene, og velg hvor utdata skal gå."
 title = "Ingen pipelines ennå"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktive"
 paused = "Satt på pause"
@@ -7879,7 +7868,6 @@ completed_one = "Kjøring fullført."
 completed_other = "Alle {{count}} kjøringer fullført."
 empty = "Ingenting å kjøre: kildene hadde ingen dokumenter å behandle."
 failed = "Kjøring mislyktes: {{error}}"
-historyCleared = "Historikk tømt. Neste kjøring behandler alt som for øyeblikket er i kildene, på nytt."
 inFlight = "Ingenting nytt å kjøre: dokumenter behandles fortsatt fra en tidligere kjøring."
 parked_one = "Ingenting å kjøre: {{count}} dokument feilet tidligere og er parkert. Rett årsaken, og tøm deretter historikken for å prøve på nytt."
 parked_other = "Ingenting å kjøre: {{count}} dokumenter feilet tidligere og er parkert. Rett årsaken, og tøm deretter historikken for å prøve dem på nytt."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Kilder"
 status = "Status"
 steps = "Trinn"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Mappeovervåking"
@@ -8209,6 +8198,24 @@ label = "Legg ved i en Jira-sak"
 description = "Sender det behandlede dokumentet som et vedlegg."
 label = "Send dokumentet på e-post (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Skriver det behandlede dokumentet til en mappe."
 label = "Last opp til Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maksimert"
 subtitle = "Den gratis prøveperioden din varer til {{date}}. Ingen kort kreves."
 title = "Enterprise-prøveperiode"
 
-[portal.search]
-ariaLabel = "Søk"
-placeholder = "Søk i Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Hurtighandlinger vises her når de er tilgjengelige."
-noActionsTitle = "Ingen hurtighandlinger"
-noMatches = "Ingen treff for \"{{query}}\""
-noMatchesDescription = "Prøv et annet søkeord eller bla gjennom katalogen."
-
 [portal.settings.groups]
 admin = "Administrator"
 
@@ -8743,10 +8740,6 @@ cancel = "Avbryt"
 confirm = "Slett"
 title = "Slette kilde?"
 
-[portal.sources.empty]
-description = "Koble til en mappe (og snart skylagring) slik at policyene dine har et sted å hente dokumenter fra."
-title = "Ingen kilder koblet til ennå"
-
 [portal.sources.kpi]
 inUse = "I bruk"
 total = "Koblinger"
@@ -8785,6 +8778,7 @@ unused = "Ubrukt"
 documents = "Dokumenter"
 source = "Kilde"
 status = "Status"
+type = "Type"
 usedBy = "Policyer"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Retningslinjer og personvern"
 [settings.preferences]
 title = "Preferanser"
 
-[settings.search]
-placeholder = "Søk i innstillingssider..."
-
 [settings.security]
 description = "Oppdater passordet ditt for å holde kontoen sikker."
 title = "Sikkerhet"
@@ -10128,6 +10119,7 @@ last = "Siste side"
 maintainRatio = "Bytt behold sideforhold"
 next = "Neste side"
 noSavedSigs = "Ingen lagrede signaturer funnet"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Personlige signaturer"
 previous = "Forrige side"
 redo = "Gjør om"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Fjerning av bakgrunn mislyktes"
 hint = "Last opp et PNG- eller JPG-bilde av signaturen din"
 label = "Last opp signaturbilde"
 placeholder = "Velg bildefil"
+previewAlt = "Current image signature"
 processing = "Behandler bilde..."
 removeBackground = "Fjern hvit bakgrunn (gjør gjennomsiktig)"
 
@@ -10179,6 +10172,17 @@ saved = "Velg en lagret signatur ovenfor, og klikk hvor som helst på PDF-en for
 text = "Når du har skrevet inn navnet ditt over, klikk hvor som helst i PDF-en for å plassere signaturen."
 title = "Slik legger du til signatur"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Flytt signatur"
 pause = "Pause plassering"
@@ -10625,6 +10629,23 @@ title = "Last opp til server"
 updateButton = "Oppdater på server"
 uploadButton = "Last opp til server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Gå tilbake"
 pdfTools = "PDF-verktøy"
 placeholder = "Velg et verktøy for å komme i gang"
 premiumFeature = "Premium-funksjon:"
-searchTools = "Søk etter verktøy"
 toolsHeader = "Verktøy"
 viewAllTools = "Vis alle verktøy"
 
@@ -10822,6 +10842,9 @@ removal = "Fjerning"
 signing = "Signering"
 verification = "Verifisering"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Ingen verktøy funnet"
 noTools = "Ingen verktøy tilgjengelig"
@@ -10979,6 +11002,13 @@ approver = "Godkjenner policy"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Avbryt invitasjonen til {{email}}? De vil ikke kunne bli med med den nåværende lenken."
 cancelInviteTitle = "Avbryt invitasjon"
@@ -10998,10 +11028,8 @@ title = "Ingen medlemmer ennå"
 addToTeam = "Legg til i team"
 guestCount = "{{count}} gjest"
 guests = "Gjester"
-guestsDesc = "Eksterne samarbeidspartnere, begrenset til det du delte. Kun Editor."
 ledBy = "ledet av {{owner}}"
 org = "Organisasjon"
-orgDesc = "Eiere med myndighet på tvers av organisasjonen og policygodkjenning"
 owners = "{{count}} eier"
 team = "{{name}}-team"
 teamMeta = "{{count}} personer"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invitert av {{who}}"
 cancel = "Avbryt"
-count = "{{count}} ventende"
-desc = "Inviterte personer som ikke har blitt med ennå. De opptar en plass til de godtar."
 expiresInDays_one = "Utløper om {{count}} dag"
 expiresInDays_other = "Utløper om {{count}} dager"
 expiresToday = "Utløper i dag"
 title = "Ventende invitasjoner"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Noe gikk galt ved kontakt med backend, eller du har ikke tilgang. Prøv igjen."
 title = "Kunne ikke laste inn medlemmer"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Søk i vedlegg"
 title = "Vedlegg"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Bokmerketittel"
 bookmarkTitleRequired = "Bokmerketittel er påkrevd"
 closeSidebar = "Lukk sidepanelet for bokmerker"
 collapseAll = "Skjul alle bokmerker"
+empty = "No bookmarks in this document"
 expandAll = "Utvid alle bokmerker"
 searchPlaceholder = "Søk i bokmerker"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Legg til kommentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Finn i dokument"
 moreActions = "Flere handlinger"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Side {{page}}"
 placingHint = "Klikk på en side for å plassere… (avbryt)"
 removeCommentOnly = "Fjern bare kommentaren"
 saveReply = "Lagre svar"
+searchPlaceholder = "Search comments"
 title = "Kommentarer"
 typeComment = "Kommentar"
 typeInsertText = "Sett inn tekst"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Du har ulagrede endringer"
 closeSidebar = "Lukk sidepanelet for lag"
 hideAll = "Skjul alle lag"
 showAll = "Vis alle lag"
+title = "Layers"
 
 [viewer.link]
 delete = "Slett lenke"
@@ -11646,6 +11682,7 @@ exitRedaction = "Avslutt sladdemodus"
 exportAll = "Eksporter PDF"
 exportSelected = "Eksporter valgte sider"
 formFill = "Fyll ut skjema"
+hideToolbar = "Hide toolbar"
 multiTool = "Multiverktøy"
 panMode = "Panoreringsmodus"
 print = "Skriv ut PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Velg alle"
 selectByNumber = "Velg etter sidenummer"
 selectLanguage = "Velg språk"
 share = "Del"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Veksle synlighet for annoteringer"
 toggleAttachments = "Veksle vedlegg"
 toggleBookmarks = "Veksle bokmerker"
diff --git a/frontend/editor/public/locales/pl-PL/translation.toml b/frontend/editor/public/locales/pl-PL/translation.toml
index 60accc86f2..18568884ff 100644
--- a/frontend/editor/public/locales/pl-PL/translation.toml
+++ b/frontend/editor/public/locales/pl-PL/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Zastosuj"
 applyAndContinue = "Zapisz i wyjdź"
-areYouSure = "Na pewno chcesz wyjść?"
 back = "Wstecz"
 black = "czarny"
 blue = "niebieski"
@@ -106,6 +105,7 @@ undoSuccess = "Pomyślnie cofnięto operację"
 unknown = "Nieznany"
 unpin = "Odepnij plik (zastąp po uruchomieniu narzędzia)"
 unsavedChanges = "Masz niezapisane zmiany w swoim PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Niezapisane zmiany"
 unsupported = "Nieobsługiwane"
 username = "nazwa użytkownika"
@@ -1879,6 +1879,9 @@ width = "Szerokość"
 [app]
 description = "Darmowa alternatywa dla Adobe Acrobat (10 mln+ pobrań)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konwertuj do PDF/A-3b"
 convertToPdfA3bDescription = "Tworzy archiwalny PDF z osadzonymi załącznikami"
@@ -2933,12 +2936,16 @@ text = "Aby uniemożliwić zmianę tych uprawnień, użyj narzędzia Dodaj hasł
 [chat.actions]
 copy = "Kopiuj wiadomość"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opcje agenta Stirling"
+assistant = "AI Assistant"
 clearChat = "Wyczyść czat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Ta operacja wykorzysta Twoje kredyty w chmurze"
 tooltip = "Wybierz kolor z ekranu"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Wybierz kolor"
 
 [common]
+actions = "Actions"
 back = "Wstecz"
 cancel = "Anuluj"
 close = "Zamknij"
+codeSample = "Code sample"
 collapse = "Zwiń"
 confirm = "Potwierdź"
 continue = "Kontynuuj"
 copied = "Skopiowano!"
 copy = "Kopiuj"
 done = "Gotowe"
+enterValue = "Enter value"
 error = "Błąd"
 expand = "Rozwiń"
 loading = "Wczytywanie..."
 next = "Dalej"
+open = "Open"
 preview = "Podgląd"
 previous = "Wstecz"
 refresh = "Odśwież"
 remaining = "Pozostało"
 retry = "Ponów"
 save = "Zapisz"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Wyczyść zaznaczone"
@@ -3185,6 +3199,7 @@ title = "Metoda kompresji"
 [compress.settings]
 desiredSize = "Docelowy rozmiar pliku"
 desiredSizePlaceholder = "Wprowadź rozmiar"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Kompresja to prosty sposób na zmniejszenie rozmiaru pliku. Wybierz File Size, aby podać docelowy rozmiar, a my dostosujemy jakość za Ciebie. Wybierz Quality, aby ręcznie ustawić siłę kompresji."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opcje PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Najpierw wybierz format źródłowy"
 settings = "Ustawienia"
 single = "Pojedynczy"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Szukaj..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Edytuj"
@@ -3824,11 +3861,13 @@ shareSelected = "Udostępnij wybrane"
 sharing = "Udostępnianie"
 showAll = "Pokaż wszystko"
 showHistory = "Pokaż historię"
+sortBy = "Sort files"
 sortByDate = "Sortuj według daty"
 sortByName = "Sortuj według nazwy"
 sortBySize = "Sortuj według rozmiaru"
 storage = "Magazyn"
 storageState = "Przechowywanie"
+storageUsed = "Storage used"
 synced = "Zsynchronizowano"
 title = "Prześlij pliki PDF"
 toolChain = "Zastosowane narzędzia"
@@ -3874,8 +3913,12 @@ addFiles = "Dodaj pliki"
 addingFiles = "Dodawanie plików…"
 collapse = "Zwiń pasek boczny"
 customizeGroups = "Dostosuj grupy"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Otwórz pliki, aby rozpocząć"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Rozwiń pasek boczny"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nie jest skonfigurowany"
@@ -3888,15 +3931,17 @@ openFromComputer = "Otwórz z komputera"
 openSettings = "Otwórz ustawienia"
 other = "Inne"
 recent = "Ostatnie"
-search = "Szukaj"
-searchPlaceholder = "Szukaj plików..."
 viewAll = "Wyświetl wszystkie pliki ({{count}})"
 
 [fileSidebar.fileItem]
 closeViewer = "Zamknij przeglądarkę"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Otwórz w przeglądarce"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Przywróć domyślne"
 subtitle = "Grupuj pliki w kategorie nadrzędne. Dodaj istniejące lub nowe etykiety do kategorii, zmień jej nazwę albo utwórz własną. Pliki spoza Twoich kategorii pojawią się w sekcji „Inne”."
 title = "Kategorie paska bocznego"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Dodaj do przestrzeni roboczej"
 addToWorkspaceCount = "Dodaj {{count}} do przestrzeni roboczej"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Wróć do Moich plików"
 breadcrumbs = "Ścieżka folderu"
 cancel = "Anuluj"
 classification = "Klasyfikacja"
-clearSearch = "Wyczyść wyszukiwanie"
 clearSelection = "Wyczyść zaznaczenie"
 closeDetails = "Zamknij szczegóły"
 create = "Utwórz"
@@ -3950,6 +4002,7 @@ downloadAll = "Pobierz wszystko"
 downloadVersion = "Pobierz tę wersję"
 dropOverlay = "Upuść pliki, aby je przesłać"
 dropOverlaySub = "Pliki trafiają najpierw do Lokalnych. Użyj 'Przenieś do' lub 'Zapisz w chmurze', aby umieścić je w folderze."
+duplicate = "Duplicate"
 file = "Plik"
 fileInfo = "File info"
 fileMenu = "Akcje pliku"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Zmień rozmiar drzewa folderów (strzałki, Shift dla więks
 save = "Zapisz"
 saveToServer = "Zapisz na serwerze"
 saveToServerDisabledHint = "Zapisywanie na serwerze nie jest włączone na tym serwerze. Poproś administratora, aby je włączył."
-search = "Szukaj"
-searchPlaceholder = "Przeszukaj ten folder i podfoldery"
 selectAll = "Zaznacz wszystko"
 selectAllHint = "Kliknij, aby zaznaczyć wszystko. Wskazówka: przytrzymaj Ctrl (lub Cmd), aby dodawać pliki pojedynczo, a Shift, aby zaznaczyć zakres."
 selectedCount = "Wybrano: {{count}}"
@@ -4044,6 +4095,10 @@ title = "Brak plików w chmurze"
 hint = "Pliki zapisane bez przesłania pozostają tutaj. Upuść plik, aby dodać."
 title = "Brak plików tylko lokalnych"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Pliki, które otwierasz lub edytujesz, pojawią się tutaj."
 title = "Jeszcze nic nie zmodyfikowano"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Nie można było usunąć folderu."
 deleteFolderFailedDetail = "Nie można było usunąć folderu: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nie można było zaktualizować wyglądu folderu."
 folderAppearanceFailedDetail = "Nie można było zaktualizować wyglądu folderu: {{message}}"
 moveFilesFailed = "Nie można było przenieść plików."
@@ -4113,6 +4170,11 @@ localHint = "Przechowywane tylko w tej przeglądarce"
 shared = "Udostępnione"
 sharedHint = "Udostępnione Tobie przez link"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Najpierw najstarsze"
 modifiedDesc = "Najpierw najnowsze"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Brak plików w pamięci. Najpierw otwórz jakieś pliki.
 open = "Otwórz"
 openFile = "Otwórz plik"
 openFiles = "Otwórz pliki"
+selectFile = "Select {{name}}"
 selectFromStorage = "Wybierz z magazynu"
 upload = "Prześlij"
 uploadFile = "Prześlij plik"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Wszystko zapisano"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Nie udało się wyodrębnić CSV"
 extractXlsxError = "Nie udało się wyodrębnić XLSX"
+filled = "filled"
 flattenAfterFilling = "Spłaszcz po wypełnieniu"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "wym."
 requiredFieldsError = "Wypełnij wszystkie wymagane pola"
 rescanFields = "Skanuj pola ponownie"
@@ -4795,9 +4863,6 @@ title = "Obraz na PDF"
 [imageToPdf]
 tags = "konwersja,img,jpg,obraz,zdjęcie"
 
-[infoBanner]
-dismiss = "Zamknij"
-
 [invite]
 acceptError = "Nie udało się utworzyć konta"
 accountFor = "Tworzenie konta dla"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Przesyłanie zakończone!"
 uploadSuccessMessage = "Twoje obrazy zostały przesłane."
 validating = "Weryfikowanie sesji..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Zeskanuj, aby przesłać zdjęcia. Obrazy są automatycznie konwertowane do PDF."
 descriptionNoConvert = "Zeskanuj, aby przesłać zdjęcia z urządzenia mobilnego."
@@ -4997,8 +5090,13 @@ title = "Prześlij z telefonu"
 tags = "Wielofunkcyjne narzędzie, obsługa wielu operacji, interfejs użytkownika, przeciąganie kliknięć, front-end, strona klienta"
 title = "Narzędzie Wielofunkcyjne PDF"
 
-[navbar]
-search = "Szukaj"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Uwierzytelnienie nie zakończyło się pomyślnie. Możesz zamknąć to okno i spróbować ponownie."
@@ -5127,6 +5225,7 @@ activeFiles = "Widok <strong>Aktywne pliki</strong> pokazuje wszystkie PDF-y za
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Zamknij"
 cropSettings = "Teraz, gdy wybraliśmy plik, który chcemy przyciąć, możemy skonfigurować narzędzie Przytnij, aby wybrać obszar, do którego chcemy przyciąć PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Kliknięcie jednego z plików wybiera go do przetwarzania. Możesz wybrać wiele plików do operacji wsadowych."
 fileReplacement = "Zmodyfikowany plik automatycznie zastąpi oryginalny na Stole roboczym, co pozwoli łatwo przepuścić go przez kolejne narzędzia."
 filesButton = "Przycisk <strong>Pliki</strong> na pasku szybkiego dostępu umożliwia przesyłanie PDF-ów do użycia w narzędziach."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF na PDF/A"
 tags = "archiwum, długoterminowe, standardowe, konwersja, przechowywanie, konserwacja"
 title = "PDF na PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "druk,standard,konwersja,produkcja,prepress,archiwizacja"
 title = "PDF do PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kredytów"
 xsmall = "100 kredytów"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Wybierz plan dopasowany do Twoich potrzeb"
 title = "Dostępne plany"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Osiągnięto miesięczny limit wydatków"
 title = "Nie udało się otworzyć portalu Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "z {{allowance}} bezpłatnych PDF wykorzystano"
 capSuffix_other = "z {{allowance}} bezpłatnych PDF wykorzystano"
 eyebrow = "Okres próbny Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Wyślij dokument lub powiadomienie e-mailem, gdy działa zasada."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Zapisuj przetworzone dokumenty w Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Oficjalne SDK"
 beta = "Beta"
 deprecated = "Przestarzałe"
 
-[portal.docs.search]
-empty = "Brak pasującej dokumentacji"
-placeholder = "Szukaj dokumentacji"
-results = "{{count}} wyników"
-
 [portal.docs.skills]
 eyebrow = "UMIEJĘTNOŚCI"
 lead = "Dołączone, nazwane możliwości, które agent wywołuje jako pojedyncze narzędzie. Każda umiejętność to deterministyczny łańcuch operacji z dołączonymi ewaluacjami."
@@ -7180,11 +7309,11 @@ editorAction = "Edytor"
 empty = "Żadne dokumenty nie pasują do tego filtra."
 rowActions = "Działania wiersza"
 sensitiveLabel = "Wrażliwe"
-sensitiveTitle = "Wrażliwe — wymagany dostęp"
 
 [portal.documents.table.columns]
 action = "Potok / Działanie"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Status"
 time = "Czas"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Ostatnio widziano"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Wersja"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Ten widok napotkał nieoczekiwany błąd. Spróbuj ponownie albo
 retry = "Spróbuj ponownie"
 title = "Coś poszło nie tak na tej stronie"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Wstecz"
 body = "Pobierz aplikację desktopową lub hostuj serwer samodzielnie."
@@ -7380,11 +7560,6 @@ cancel = "Anuluj"
 confirm = "Unieważnij klucz"
 title = "Unieważnij klucz API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Poświadczone"
-inScope = "W zakresie"
-notApplicable = "N/D"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtruj zdarzenia audytu według kategorii"
 heading = "Dzienniki audytu"
@@ -7456,11 +7631,6 @@ info = "Informacja"
 success = "Sukces"
 warning = "Ostrzeżenie"
 
-[portal.infrastructure.certLabel]
-certified = "Certyfikowane"
-inProgress = "W toku"
-notStarted = "Nie rozpoczęto"
-
 [portal.infrastructure.createKey]
 cancel = "Anuluj"
 createKey = "Utwórz klucz"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Skopiuj ten sekret teraz — nie zostanie pokazany ponownie."
 title = "Utwórz klucz API"
 titleCreated = "Klucz utworzony"
 
-[portal.infrastructure.deployLabel]
-live = "Działa"
-queued = "W kolejce"
-rolledBack = "Wycofano"
-rolling = "Wdrażanie"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Wdrożone przez"
-environment = "Środowisko"
-product = "Produkt"
-status = "Status"
-version = "Wersja"
-when = "Kiedy"
-
-[portal.infrastructure.deployments.recent]
-heading = "Ostatnie wdrożenia"
-subheading = "Najnowsze wdrożenia produktów i środowisk."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instancje"
-latency = "Opóźnienie"
-load = "Obciążenie"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Przepustowość"
-uptime = "Czas działania"
-version = "Wersja"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regiony"
-subheading = "Bieżąca kondycja każdego wdrożonego regionu Stirling — opóźnienie, obciążenie i wersja wdrożenia."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Wdrożone regiony pojawią się tutaj po aprowizacji przestrzeni roboczej."
-title = "Brak wdrożonych regionów"
-
 [portal.infrastructure.keyLabel]
 active = "Aktywny"
 revoked = "Unieważniony"
 
-[portal.infrastructure.modelLabel]
-active = "Aktywny"
-degraded = "Obniżona wydajność"
-disabled = "Wyłączony"
-
-[portal.infrastructure.models]
-heading = "Modele"
-msValue = "{{value}} ms"
-subheading = "Katalog modeli i routing, które napędzają przetwarzanie dokumentów w całej przestrzeni roboczej."
-
-[portal.infrastructure.models.byom]
-description = "Zarejestruj model on-prem lub hostowany samodzielnie i przypnij go do regionu w celu przetwarzania związanego z rezydencją danych."
-title = "Bring your own model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Modele zarządzane dostępne w Twojej przestrzeni roboczej, z bieżącym opóźnieniem i kosztem."
-subEnterprise = "Modele zarządzane, bring-your-own i on-prem — z dostępnym przypinaniem do regionów."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modele w katalogu Twojej przestrzeni roboczej pojawią się tutaj."
-title = "Brak dostępnych modeli"
-
-[portal.infrastructure.models.columns]
-cost = "Koszt"
-latency = "Opóźnienie"
-load = "Obciążenie"
-model = "Model"
-status = "Status"
-type = "Typ"
-version = "Wersja"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/wywołanie"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktywne modele"
-avgLatency = "Śr. opóźnienie"
-included = "Wliczone"
-monthlySpend = "Miesięczne wydatki na modele"
-
-[portal.infrastructure.models.routing]
-empty = "Nie skonfigurowano reguł routingu."
-heading = "Reguły routingu"
-sub = "Który model obsługuje każdą operację. Domyślny jest stosowany, gdy nie pasuje żadna węższa reguła."
-subLocked = "Kieruj operacje do określonych modeli — dostępne w płatnych planach."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Ulepsz do Pro, aby kontrolować, który model obsługuje każdą operację i typ dokumentu."
-title = "Routing modeli to funkcja płatna"
-
-[portal.infrastructure.models.routingColumns]
-default = "Domyślny"
-docType = "Typ dokumentu"
-modelForAria = "Model dla {{operation}}"
-operation = "Operacja"
-routedTo = "Kierowane do"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasyfikacja"
-extraction = "Ekstrakcja"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Obniżona wydajność"
-down = "Niedostępny"
-healthy = "Sprawny"
-
-[portal.infrastructure.security.access.byok]
-description = "Dostarcz klucz z własnego KMS. Stirling szyfruje nim, ale nadal może odczytywać."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Klucze nigdy nie opuszczają Twojego KMS. Stirling przechowuje tylko szyfrogram."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling zarządza kluczami szyfrowania. Najprostsze — zero operacji na kluczach po Twojej stronie."
-label = "Klucze przechowywane przez Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Zasada dostępu do dokumentów"
-subheading = "Kontroluje, kto może odszyfrować przetworzone dokumenty w spoczynku."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestacje zgodności"
-noReport = "Brak dostępnego raportu"
-subheading = "Stan audytu według frameworków, z raportami dostępnymi dla poświadczonych kontroli."
-viewReport = "Wyświetl raport →"
-
-[portal.infrastructure.security.compliance]
-heading = "Zgodność"
-subheading = "Atestacje i certyfikaty obejmujące platformę Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Konfiguracja bezpieczeństwa Twojej przestrzeni roboczej pojawi się tutaj."
-title = "Stan bezpieczeństwa niedostępny"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Dzięki HYOK klucze szyfrowania nigdy nie opuszczają Twojego KMS. Stirling przechowuje i przetwarza tylko szyfrogram, który możesz w każdej chwili unieważnić."
-title = "Stirling nie może odszyfrować Twoich dokumentów"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nie skonfigurowano zakresów IP — wszystkie IP są dozwolone."
-heading = "Lista dozwolonych IP"
-sub = "Dostęp do API jest ograniczony do tych zakresów CIDR."
-subLocked = "Ogranicz dostęp do API do znanych zakresów IP — dostępne w płatnych planach."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Ulepsz do Pro, aby ograniczyć dostęp do API do określonych sieci."
-title = "Lista dozwolonych IP to funkcja płatna"
-
-[portal.infrastructure.security.ipColumns]
-added = "Dodano"
-addedBy = "Dodane przez"
-cidr = "CIDR"
-label = "Etykieta"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorytm"
-heading = "Zarządzanie kluczami szyfrowania"
-keyId = "Identyfikator klucza"
-lastRotated = "Ostatnio rotowano"
-rotateKey = "Rotuj klucz"
-rotationPolicy = "Zasada rotacji"
-subheading = "Opieka nad kluczami szyfrującymi dokumenty w spoczynku — kto może odszyfrować i jak rotują klucze."
-
-[portal.infrastructure.security.managedBanner]
-description = "Opieka bring-your-own-key (BYOK) i hold-your-own-key (HYOK) jest dostępna w Enterprise. Ulepsz, aby dostarczać klucze z własnego KMS."
-title = "Klucze są zarządzane przez Stirling w Twoim planie"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Azja i Pacyfik"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · granica danych GDPR"
-label = "Unia Europejska"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Stany Zjednoczone"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Rezydencja danych"
-subheading = "Gdzie dokumenty są przechowywane i przetwarzane."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} użyte"
-
-[portal.infrastructure.storage.empty]
-description = "Połączony magazyn i użycie pojawią się tutaj."
-title = "Brak skonfigurowanego magazynu"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktywne"
-activeRange = "0–{{value}}d"
-archived = "Zarchiwizowane"
-coldStorage = "cold storage"
-deleted = "Usunięte"
-never = "nigdy"
-purged = "wyczyszczone"
-
-[portal.infrastructure.storage.providers]
-connect = "Połącz"
-connected = "Połączono"
-heading = "Połączeni dostawcy"
-subheading = "Gdzie zapisywane są przetworzone artefakty."
-
-[portal.infrastructure.storage.retention]
-heading = "Retencja"
-subheading = "Jak długo artefakty są przechowywane przed usunięciem w cyklu życia."
-windowLabel = "Domyślne okno retencji"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dzień"
-days_other = "{{count}} dni"
-never = "Nigdy nie usuwaj"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Łączne użycie"
-progressLabel = "Użyty magazyn"
-subheading = "Magazyn wykorzystany we wszystkich połączonych dostawcach."
-
 [portal.infrastructure.tabs]
 apiKeys = "Klucze API"
 audit = "Dzienniki audytu"
@@ -7715,11 +7657,9 @@ security = "Bezpieczeństwo"
 storage = "Magazyn"
 
 [portal.integrations]
-addAnother = "Dodaj kolejną"
 availableHeading = "Dostępne"
 comingSoonHeading = "Wkrótce"
 connect = "Połącz"
-connectedHeading = "Połączone"
 connectionCount_one = "{{count}} połączenie"
 connectionCount_other = "{{count}} połączeń"
 customApi = "Niestandardowe API"
@@ -7737,6 +7677,10 @@ security = "Bezpieczeństwo"
 signing = "Podpisywanie"
 storage = "Magazyn"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Połączono"
 
@@ -7767,7 +7711,6 @@ integrations = "Integracje"
 pipelines = "Potoki"
 policies = "Zasady"
 procurement = "Zakupy"
-settings = "Ustawienia"
 sources = "Źródła"
 usage = "Użycie i rozliczenia"
 users = "Użytkownicy"
@@ -7784,7 +7727,7 @@ title = "Potoki"
 newPipeline = "Nowy potok"
 
 [portal.pipelines.builder]
-addStep = "Dodaj narzędzie"
+activate = "Activate"
 back = "Wróć do potoków"
 cannotFollow = "Nie może przyjąć {{produced}}"
 chooseAccount = "Wybierz konto"
@@ -7792,28 +7735,38 @@ chooseDestination = "Wybierz miejsce docelowe"
 chooseOperation = "Wybierz, co robi ten krok"
 chooseSource = "Wybierz źródło"
 discard = "Odrzuć zmiany"
-enabled = "Włączone"
 inputs = "Wejście"
 inputSource = "Źródło wejściowe"
 inputTrigger = "Wyzwalacz"
 keepEditing = "Kontynuuj edycję"
+moreActions = "More actions"
 needsConfiguring = "Wymaga konfiguracji"
-needsUpload = "Wymaga przesłanego pliku"
-noSources = "Nie połączono jeszcze żadnych źródeł. Utwórz źródło, aby użyć go jako wejścia."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Żadne narzędzia nie pasują do wyszukiwania."
-pipelineSettings = "Ustawienia potoku"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Szukaj narzędzi"
-selectToolBody = "Dodaj narzędzie, aby zbudować potok."
-selectToolTitle = "Brak narzędzi"
 sendToSystem = "Wyślij do innego systemu"
 stepsIncompatible = "Te kroki nie mogą działać na tym, co wytwarza poprzedni krok: {{tools}}."
 stepsNeedSetup = "Te kroki nadal wymagają konfiguracji przed zapisaniem: {{tools}}."
-toolSettings = "Ustawienia narzędzia"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Nierozpoznana operacja, zachowana bez zmian."
 unsavedBody = "Masz niezapisane zmiany. Zapisać je przed opuszczeniem czy odrzucić?"
 unsavedTitle = "Niezapisane zmiany"
-uploadUnsupported = "Przesłane pliki nie są jeszcze obsługiwane w potokach, więc tych kroków nie można zapisać: {{tools}}."
 usesDefaults = "Uruchamia się z ustawieniami domyślnymi"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Łączy każdy plik z poprzedniego kroku"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nie można sprawdzić, co akceptuje ten krok"
 
 [portal.pipelines.composer]
 addTool = "Dodaj narzędzie"
-cancel = "Anuluj"
-chainEmpty = "Dodaj narzędzie, aby rozpocząć budowanie potoku."
 create = "Utwórz potok"
+createPaused = "Create paused"
 editingUnsupported = "Wyświetlanie tych parametrów narzędzia do edycji nie jest jeszcze obsługiwane."
-moveDown = "Przenieś w dół"
-moveUp = "Przenieś w górę"
+editSource = "Edit source"
 name = "Nazwa"
 namePlaceholder = "np. Przegląd redakcji"
 noToolSettings = "To narzędzie nie ma konfigurowalnych ustawień."
-operations_one = "Operacja ({{count}})"
-operations_other = "Operacje ({{count}})"
 output = "Wyjście"
-removeStep = "Usuń operację"
 save = "Zapisz zmiany"
 scheduleEvery = "Uruchamiaj co"
-sources = "Źródła"
-sourcesLoading = "Ładowanie źródeł..."
 trigger = "Wyzwalacz"
 triggerManual = "Tylko ręcznie"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dni"
 hours = "godzin"
 minutes = "minut"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Usunąć \"{{name}}\"? Tego nie można cofnąć."
 cancel = "Anuluj"
@@ -7867,6 +7825,37 @@ connectSource = "Połącz źródło"
 description = "Utwórz swój pierwszy potok: wybierz źródła, na których działa, połącz operacje w łańcuch i wybierz miejsce zapisu wyjścia."
 title = "Brak potoków"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktywne"
 paused = "Wstrzymane"
@@ -7879,7 +7868,6 @@ completed_one = "Uruchomienie zakończone."
 completed_other = "Wszystkie {{count}} uruchomienia zakończone."
 empty = "Nie ma nic do uruchomienia: źródła nie miały dokumentów do przetworzenia."
 failed = "Uruchomienie nie powiodło się: {{error}}"
-historyCleared = "Historia wyczyszczona. Następne uruchomienie ponownie przetworzy wszystko, co obecnie znajduje się w źródłach."
 inFlight = "Nic nowego do uruchomienia: dokumenty są nadal przetwarzane z wcześniejszego uruchomienia."
 parked_one = "Nic do uruchomienia: {{count}} dokument wcześniej zakończył się niepowodzeniem i jest zaparkowany. Usuń przyczynę, a następnie wyczyść historię, aby spróbować ponownie."
 parked_other = "Nic do uruchomienia: {{count}} dokumentów wcześniej zakończyło się niepowodzeniem i jest zaparkowanych. Usuń przyczynę, a następnie wyczyść historię, aby spróbować ponownie."
@@ -7895,6 +7883,7 @@ name = "Potok"
 sources = "Źródła"
 status = "Status"
 steps = "Kroki"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Obserwacja folderu"
@@ -8209,6 +8198,24 @@ label = "Dołącz do zgłoszenia Jira"
 description = "Wysyła przetworzony dokument jako załącznik."
 label = "Wyślij dokument emailem (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Zapisuje przetworzony dokument w folderze."
 label = "Prześlij do Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Limit wyczerpany"
 subtitle = "Twoja bezpłatna wersja próbna działa do {{date}}. Karta nie jest wymagana."
 title = "Wersja próbna Enterprise"
 
-[portal.search]
-ariaLabel = "Szukaj"
-placeholder = "Szukaj w Stirling — endpointy, potoki, dokumenty…"
-
-[portal.search.empty]
-noActionsDescription = "Szybkie działania pojawią się tutaj, gdy będą dostępne."
-noActionsTitle = "Brak szybkich działań"
-noMatches = "Brak wyników dla „{{query}}”"
-noMatchesDescription = "Spróbuj innego słowa kluczowego lub przejrzyj katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Anuluj"
 confirm = "Usuń"
 title = "Usunąć źródło?"
 
-[portal.sources.empty]
-description = "Połącz folder (a wkrótce także magazyn w chmurze), aby Twoje polityki miały skąd pobierać dokumenty."
-title = "Nie połączono jeszcze żadnych źródeł"
-
 [portal.sources.kpi]
 inUse = "W użyciu"
 total = "Połączenia"
@@ -8785,6 +8778,7 @@ unused = "Nieużywane"
 documents = "Dokumenty"
 source = "Źródło"
 status = "Status"
+type = "Type"
 usedBy = "Polityki"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Zasady i prywatność"
 [settings.preferences]
 title = "Preferencje"
 
-[settings.search]
-placeholder = "Szukaj stron ustawień..."
-
 [settings.security]
 description = "Zmień hasło, aby zachować bezpieczeństwo konta."
 title = "Bezpieczeństwo"
@@ -10128,6 +10119,7 @@ last = "Ostatnia strona"
 maintainRatio = "Przełącz zachowanie proporcji"
 next = "Następna strona"
 noSavedSigs = "Nie znaleziono zapisanych podpisów"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Podpisy osobiste"
 previous = "Poprzednia strona"
 redo = "Ponów"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Nie udało się usunąć tła"
 hint = "Prześlij obraz podpisu w formacie PNG lub JPG"
 label = "Prześlij obraz podpisu"
 placeholder = "Wybierz plik obrazu"
+previewAlt = "Current image signature"
 processing = "Przetwarzanie obrazu..."
 removeBackground = "Usuń białe tło (uczyń przezroczystym)"
 
@@ -10179,6 +10172,17 @@ saved = "Wybierz zapisany podpis powyżej, a następnie kliknij w dowolnym miejs
 text = "Po wpisaniu swojego imienia i nazwiska kliknij w dowolnym miejscu PDF, aby umieścić podpis."
 title = "Jak dodać podpis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Przesuń podpis"
 pause = "Wstrzymaj umieszczanie"
@@ -10625,6 +10629,23 @@ title = "Prześlij na serwer"
 updateButton = "Zaktualizuj na serwerze"
 uploadButton = "Prześlij na serwer"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Wróć"
 pdfTools = "Narzędzia PDF"
 placeholder = "Wybierz narzędzie, aby zacząć"
 premiumFeature = "Funkcja premium:"
-searchTools = "Szukaj narzędzi"
 toolsHeader = "Narzędzia"
 viewAllTools = "Wyświetl wszystkie narzędzia"
 
@@ -10822,6 +10842,9 @@ removal = "Usuwanie"
 signing = "Podpisywanie"
 verification = "Weryfikacja"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nie znaleziono narzędzi"
 noTools = "Brak dostępnych narzędzi"
@@ -10979,6 +11002,13 @@ approver = "Zatwierdza politykę"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Anulować zaproszenie dla {{email}}? Ta osoba nie będzie mogła dołączyć za pomocą bieżącego linku."
 cancelInviteTitle = "Anuluj zaproszenie"
@@ -10998,10 +11028,8 @@ title = "Brak członków"
 addToTeam = "Dodaj do zespołu"
 guestCount = "{{count}} gość"
 guests = "Goście"
-guestsDesc = "Zewnętrzni współpracownicy, ograniczeni do tego, co udostępniono. Tylko Editor."
 ledBy = "prowadzony przez {{owner}}"
 org = "Organizacja"
-orgDesc = "Właściciele z uprawnieniami w całej organizacji i zatwierdzaniem polityk"
 owners = "{{count}} właściciel"
 team = "Zespół {{name}}"
 teamMeta = "{{count}} osób"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Zaprosił(a): {{who}}"
 cancel = "Anuluj"
-count = "{{count}} oczekujących"
-desc = "Zaproszone osoby, które jeszcze nie dołączyły. Zajmują miejsce, dopóki nie zaakceptują zaproszenia."
 expiresInDays_one = "Wygasa za {{count}} dzień"
 expiresInDays_other = "Wygasa za {{count}} dni"
 expiresToday = "Wygasa dzisiaj"
 title = "Oczekujące zaproszenia"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Coś poszło nie tak podczas łączenia z backendem albo nie masz dostępu. Spróbuj ponownie."
 title = "Nie udało się załadować członków"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Szukaj w załącznikach"
 title = "Załączniki"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Tytuł zakładki"
 bookmarkTitleRequired = "Tytuł zakładki jest wymagany"
 closeSidebar = "Zamknij panel boczny zakładek"
 collapseAll = "Zwiń wszystkie zakładki"
+empty = "No bookmarks in this document"
 expandAll = "Rozwiń wszystkie zakładki"
 searchPlaceholder = "Szukaj zakładek"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Dodaj komentarz"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Zlokalizuj w dokumencie"
 moreActions = "Więcej działań"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Strona {{page}}"
 placingHint = "Kliknij stronę, aby umieścić… (anuluj)"
 removeCommentOnly = "Usuń tylko komentarz"
 saveReply = "Zapisz odpowiedź"
+searchPlaceholder = "Search comments"
 title = "Komentarze"
 typeComment = "Komentarz"
 typeInsertText = "Wstaw tekst"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Masz niezapisane zmiany"
 closeSidebar = "Zamknij panel boczny warstw"
 hideAll = "Ukryj wszystkie warstwy"
 showAll = "Pokaż wszystkie warstwy"
+title = "Layers"
 
 [viewer.link]
 delete = "Usuń link"
@@ -11646,6 +11682,7 @@ exitRedaction = "Zakończ tryb zaczerniania"
 exportAll = "Eksportuj PDF"
 exportSelected = "Eksportuj wybrane strony"
 formFill = "Wypełnij formularz"
+hideToolbar = "Hide toolbar"
 multiTool = "Wielofunkcyjne narzędzie"
 panMode = "Tryb przesuwania"
 print = "Drukuj PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Zaznacz wszystko"
 selectByNumber = "Zaznacz według numerów stron"
 selectLanguage = "Wybierz język"
 share = "Udostępnij"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Pokaż/ukryj adnotacje"
 toggleAttachments = "Pokaż/ukryj załączniki"
 toggleBookmarks = "Pokaż/ukryj zakładki"
diff --git a/frontend/editor/public/locales/pt-BR/translation.toml b/frontend/editor/public/locales/pt-BR/translation.toml
index e725bf5682..b897248eb8 100644
--- a/frontend/editor/public/locales/pt-BR/translation.toml
+++ b/frontend/editor/public/locales/pt-BR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabeto"
 apply = "Aplicar"
 applyAndContinue = "Aplicar e continuar"
-areYouSure = "Tem certeza de que deseja sair?"
 back = "Voltar"
 black = "Preto"
 blue = "Azul"
@@ -106,6 +105,7 @@ undoSuccess = "Operação desfeita com sucesso"
 unknown = "Desconhecido"
 unpin = "Desafixar arquivo (substituir após execução da ferramenta)"
 unsavedChanges = "Você tem alterações não salvas no seu PDF. O que você gostaria de fazer?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Alterações não salvas"
 unsupported = "Não suportado"
 username = "Usuário"
@@ -1879,6 +1879,9 @@ width = "Largura"
 [app]
 description = "A alternativa gratuita ao Adobe Acrobat (10M+ downloads)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Converter para PDF/A-3b"
 convertToPdfA3bDescription = "Cria um PDF de arquivamento com anexos incorporados"
@@ -2933,12 +2936,16 @@ text = "Para tornar essas permissões imutáveis, use a ferramenta Adicionar sen
 [chat.actions]
 copy = "Copiar mensagem"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opções do agente Stirling"
+assistant = "AI Assistant"
 clearChat = "Limpar chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Esta operação usará seus créditos de nuvem"
 tooltip = "Selecionar cor da tela"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Escolha a cor"
 
 [common]
+actions = "Actions"
 back = "Voltar"
 cancel = "Cancelar"
 close = "Fechar"
+codeSample = "Code sample"
 collapse = "Recolher"
 confirm = "Confirmar"
 continue = "Continuar"
 copied = "Copiado!"
 copy = "Copiar"
 done = "Concluído"
+enterValue = "Enter value"
 error = "Erro"
 expand = "Expandir"
 loading = "Carregando..."
 next = "Próximo"
+open = "Open"
 preview = "Pré-visualização"
 previous = "Anterior"
 refresh = "Atualizar"
 remaining = "Restante"
 retry = "Tentar novamente"
 save = "Salvar"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Limpar selecionados"
@@ -3185,6 +3199,7 @@ title = "Método de compressão"
 [compress.settings]
 desiredSize = "Tamanho de arquivo desejado"
 desiredSizePlaceholder = "Insira o tamanho"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "A compressão é uma forma fácil de reduzir o tamanho do arquivo. Escolha Tamanho do arquivo para informar um tamanho alvo e deixarmos a qualidade ajustada para você. Escolha Qualidade para definir manualmente a intensidade da compressão."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opções de PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Selecione primeiro um formato de origem"
 settings = "Configurações"
 single = "Único"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Pesquisar..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Editar"
@@ -3824,11 +3861,13 @@ shareSelected = "Compartilhar selecionados"
 sharing = "Compartilhamento"
 showAll = "Mostrar tudo"
 showHistory = "Mostrar histórico"
+sortBy = "Sort files"
 sortByDate = "Ordenar por data"
 sortByName = "Ordenar por nome"
 sortBySize = "Ordenar por tamanho"
 storage = "Armazenamento"
 storageState = "Armazenamento"
+storageUsed = "Storage used"
 synced = "Sincronizado"
 title = "Fazer upload de arquivos PDF"
 toolChain = "Ferramentas aplicadas"
@@ -3874,8 +3913,12 @@ addFiles = "Adicionar arquivos"
 addingFiles = "Adicionando arquivos…"
 collapse = "Recolher barra lateral"
 customizeGroups = "Personalizar grupos"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Abra arquivos para começar"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Expandir barra lateral"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive não está configurado"
@@ -3888,15 +3931,17 @@ openFromComputer = "Abrir do computador"
 openSettings = "Abrir configurações"
 other = "Outro"
 recent = "Recentes"
-search = "Pesquisar"
-searchPlaceholder = "Pesquisar arquivos..."
 viewAll = "Ver todos os {{count}} arquivos"
 
 [fileSidebar.fileItem]
 closeViewer = "Fechar visualizador"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Abrir no visualizador"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Redefinir para os padrões"
 subtitle = "Agrupe seus arquivos em categorias principais. Adicione rótulos existentes ou novos a uma categoria, renomeie-a ou crie a sua própria. Arquivos que não estão em nenhuma das suas categorias aparecem em “Outro”."
 title = "Categorias da barra lateral"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Adicionar ao espaço de trabalho"
 addToWorkspaceCount = "Adicionar {{count}} ao espaço de trabalho"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Voltar para Meus arquivos"
 breadcrumbs = "Caminho da pasta"
 cancel = "Cancelar"
 classification = "Classificação"
-clearSearch = "Limpar busca"
 clearSelection = "Limpar seleção"
 closeDetails = "Fechar detalhes"
 create = "Criar"
@@ -3950,6 +4002,7 @@ downloadAll = "Baixar tudo"
 downloadVersion = "Baixar esta versão"
 dropOverlay = "Solte arquivos para enviar"
 dropOverlaySub = "Os arquivos começam em Local. Use 'Move to' ou 'Save to cloud' para organizá-los em uma pasta."
+duplicate = "Duplicate"
 file = "Arquivo"
 fileInfo = "File info"
 fileMenu = "Ações do arquivo"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Redimensionar árvore de pastas (setas, Shift para passos ma
 save = "Salvar"
 saveToServer = "Salvar no servidor"
 saveToServerDisabledHint = "Salvar no servidor não está habilitado neste servidor. Peça ao seu administrador para habilitar."
-search = "Pesquisar"
-searchPlaceholder = "Pesquisar nesta pasta e subpastas"
 selectAll = "Selecionar tudo"
 selectAllHint = "Clique para selecionar tudo. Dica: mantenha Ctrl (ou Cmd) para adicionar arquivos um a um, e Shift para selecionar um intervalo."
 selectedCount = "{{count}} selecionado(s)"
@@ -4044,6 +4095,10 @@ title = "Ainda não há arquivos na nuvem"
 hint = "Arquivos salvos sem enviar ficam aqui. Solte um arquivo para adicionar."
 title = "Nenhum arquivo somente local"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Arquivos que você abrir ou editar aparecerão aqui."
 title = "Nada modificado ainda"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Não foi possível excluir a pasta."
 deleteFolderFailedDetail = "Não foi possível excluir a pasta: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Não foi possível atualizar a aparência da pasta."
 folderAppearanceFailedDetail = "Não foi possível atualizar a aparência da pasta: {{message}}"
 moveFilesFailed = "Não foi possível mover os arquivos."
@@ -4113,6 +4170,11 @@ localHint = "Armazenado apenas neste navegador"
 shared = "Compartilhado"
 sharedHint = "Compartilhado com você via link"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Mais antigo primeiro"
 modifiedDesc = "Mais recente primeiro"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Nenhum arquivo disponível no armazenamento. Abra alguns
 open = "Abrir"
 openFile = "Abrir arquivo"
 openFiles = "Abrir arquivos"
+selectFile = "Select {{name}}"
 selectFromStorage = "Selecionar do armazenamento"
 upload = "Fazer upload"
 uploadFile = "Fazer upload de arquivo"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Tudo salvo"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Falha ao extrair CSV"
 extractXlsxError = "Falha ao extrair XLSX"
+filled = "filled"
 flattenAfterFilling = "Achatar após o preenchimento"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obr"
 requiredFieldsError = "Preencha todos os campos obrigatórios"
 rescanFields = "Escanear campos novamente"
@@ -4795,9 +4863,6 @@ title = "Imagem para PDF"
 [imageToPdf]
 tags = "conversão,img,jpg,imagem,foto"
 
-[infoBanner]
-dismiss = "Dispensar"
-
 [invite]
 acceptError = "Falha ao criar conta"
 accountFor = "Criando conta para"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Envio concluído!"
 uploadSuccessMessage = "Suas imagens foram transferidas."
 validating = "Validando sessão..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Escaneie para enviar fotos. As imagens convertem automaticamente para PDF."
 descriptionNoConvert = "Escaneie para enviar fotos do seu dispositivo móvel."
@@ -4997,8 +5090,13 @@ title = "Enviar do celular"
 tags = "Multiferramentas,múltiplas operações,Interface do Usuário,Clique e arraste,front-end,lado do cliente,interativo,intratável,movimento,excluir,migrar,dividir"
 title = "Multiferramentas de PDF"
 
-[navbar]
-search = "Pesquisar"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "A autenticação não foi bem-sucedida. Você pode fechar esta janela e tentar novamente."
@@ -5127,6 +5225,7 @@ activeFiles = "A visualização de <strong>Arquivos Ativos</strong> mostra todos
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Fechar"
 cropSettings = "Agora que selecionamos o arquivo que queremos recortar, podemos configurar a ferramenta Recortar para escolher a área para a qual queremos recortar o PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Clicar em um dos arquivos o seleciona para processamento. Você pode selecionar vários arquivos para operações em lote."
 fileReplacement = "O arquivo modificado substituirá automaticamente o arquivo original no Workbench, permitindo que você o passe facilmente por mais ferramentas."
 filesButton = "O botão <strong>Arquivos</strong> na barra de Acesso Rápido permite fazer upload de PDFs para usar nas ferramentas."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF para PDF/A"
 tags = "arquivo,longo prazo,padrão,conversão,armazenamento,preservação"
 title = "PDF para PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "impressão,padrão,conversão,produção,pré-impressão,arquivo"
 title = "PDF para PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 créditos"
 xsmall = "100 créditos"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Escolha o plano que atende às suas necessidades"
 title = "Planos disponíveis"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Limite de gastos mensal atingido"
 title = "Não foi possível abrir o portal do Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "de {{allowance}} PDFs gratuitos usados"
 capSuffix_other = "de {{allowance}} PDFs gratuitos usados"
 eyebrow = "Teste do Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Envie um documento ou uma notificação por email quando uma política for executada."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Arquive documentos processados no Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDKs oficiais"
 beta = "Beta"
 deprecated = "Obsoleto"
 
-[portal.docs.search]
-empty = "Nenhum doc correspondente"
-placeholder = "Buscar docs"
-results = "{{count}} resultados"
-
 [portal.docs.skills]
 eyebrow = "HABILIDADES"
 lead = "Capacidades agrupadas e nomeadas que seu agente invoca como uma única ferramenta. Cada habilidade é uma cadeia determinística de operações com avaliações anexadas."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Nenhum documento corresponde a este filtro."
 rowActions = "Ações da linha"
 sensitiveLabel = "Sensível"
-sensitiveTitle = "Sensível — acesso necessário"
 
 [portal.documents.table.columns]
 action = "Pipeline / Ação"
 document = "Documento"
+labels = "Labels"
 product = "Produto"
 status = "Status"
 time = "Hora"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Visto por último"
 region = "Região"
 status = "Status"
+target = "Target"
 version = "Versão"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Esta visualização encontrou um erro inesperado. Tente novamente
 retry = "Tentar novamente"
 title = "Algo deu errado nesta página"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Voltar"
 body = "Baixe o app para desktop ou auto-hospede o servidor."
@@ -7380,11 +7560,6 @@ cancel = "Cancelar"
 confirm = "Revogar chave"
 title = "Revogar chave API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestado"
-inScope = "No escopo"
-notApplicable = "N/D"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrar eventos de auditoria por categoria"
 heading = "Logs de auditoria"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Sucesso"
 warning = "Aviso"
 
-[portal.infrastructure.certLabel]
-certified = "Certificado"
-inProgress = "Em andamento"
-notStarted = "Não iniciado"
-
 [portal.infrastructure.createKey]
 cancel = "Cancelar"
 createKey = "Criar chave"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copie este segredo agora — ele não será exibido novamente
 title = "Criar chave de API"
 titleCreated = "Chave criada"
 
-[portal.infrastructure.deployLabel]
-live = "No ar"
-queued = "Na fila"
-rolledBack = "Revertido"
-rolling = "Em implantação"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Implantado por"
-environment = "Ambiente"
-product = "Produto"
-status = "Status"
-version = "Versão"
-when = "Quando"
-
-[portal.infrastructure.deployments.recent]
-heading = "Implantações recentes"
-subheading = "Os lançamentos mais recentes entre produtos e ambientes."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instâncias"
-latency = "Latência"
-load = "Carga"
-p99 = "P99"
-region = "Região"
-status = "Status"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "Versão"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regiões"
-subheading = "Integridade ao vivo de cada região Stirling implantada — latência, carga e versão de rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "As regiões implantadas aparecerão aqui assim que seu workspace for provisionado."
-title = "Nenhuma região implantada"
-
 [portal.infrastructure.keyLabel]
 active = "Ativo"
 revoked = "Revogado"
 
-[portal.infrastructure.modelLabel]
-active = "Ativo"
-degraded = "Degradado"
-disabled = "Desativado"
-
-[portal.infrastructure.models]
-heading = "Modelos"
-msValue = "{{value}} ms"
-subheading = "O catálogo de modelos e roteamento que impulsiona o processamento de documentos em todo o seu workspace."
-
-[portal.infrastructure.models.byom]
-description = "Registre um modelo on-prem ou auto-hospedado e fixe-o a uma região para processamento vinculado à residência de dados."
-title = "Traga seu próprio modelo"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catálogo"
-sub = "Modelos gerenciados disponíveis para seu workspace, com latência e custo ao vivo."
-subEnterprise = "Modelos gerenciados, próprios e on-prem — com fixação por região disponível."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Os modelos no catálogo do seu workspace aparecem aqui."
-title = "Nenhum modelo disponível"
-
-[portal.infrastructure.models.columns]
-cost = "Custo"
-latency = "Latência"
-load = "Carga"
-model = "Modelo"
-status = "Status"
-type = "Tipo"
-version = "Versão"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/chamada"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modelos ativos"
-avgLatency = "Latência média"
-included = "Incluído"
-monthlySpend = "Gasto mensal com modelos"
-
-[portal.infrastructure.models.routing]
-empty = "Nenhuma regra de roteamento configurada."
-heading = "Regras de roteamento"
-sub = "Qual modelo lida com cada operação. O padrão se aplica quando nenhuma regra mais específica corresponde."
-subLocked = "Direcione operações para modelos específicos — disponível em planos pagos."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Atualize para Pro para controlar qual modelo lida com cada operação e tipo de documento."
-title = "Roteamento de modelos é um recurso pago"
-
-[portal.infrastructure.models.routingColumns]
-default = "Padrão"
-docType = "Tipo de documento"
-modelForAria = "Modelo para {{operation}}"
-operation = "Operação"
-routedTo = "Roteado para"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classificação"
-extraction = "Extração"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradado"
-down = "Indisponível"
-healthy = "Íntegro"
-
-[portal.infrastructure.security.access.byok]
-description = "Forneça uma chave do seu próprio KMS. O Stirling criptografa com ela, mas ainda consegue ler."
-label = "Traga sua própria chave (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "As chaves nunca saem do seu KMS. O Stirling mantém apenas ciphertext."
-label = "Mantenha sua própria chave (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "O Stirling gerencia as chaves de criptografia. O mais simples — zero operações de chave do seu lado."
-label = "Chaves mantidas pelo Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Política de acesso a documentos"
-subheading = "Controla quem pode descriptografar documentos processados em repouso."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestados de conformidade"
-noReport = "Nenhum relatório disponível"
-subheading = "Postura de auditoria framework por framework, com relatórios disponíveis para controles atestados."
-viewReport = "Ver relatório →"
-
-[portal.infrastructure.security.compliance]
-heading = "Conformidade"
-subheading = "Atestados e certificações que cobrem a plataforma Stirling."
-
-[portal.infrastructure.security.empty]
-description = "A configuração de segurança do seu workspace aparecerá aqui."
-title = "Postura de segurança indisponível"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Com HYOK, as chaves de criptografia nunca saem do seu KMS. O Stirling armazena e processa apenas ciphertext que você pode revogar a qualquer momento."
-title = "O Stirling não consegue descriptografar seus documentos"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nenhum intervalo de IP configurado — todos os IPs permitidos."
-heading = "Allowlist de IP"
-sub = "O acesso à API é restrito a estes intervalos CIDR."
-subLocked = "Restrinja o acesso à API a intervalos de IP conhecidos — disponível em planos pagos."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Atualize para Pro para restringir o acesso à API a redes específicas."
-title = "Allowlist de IP é um recurso pago"
-
-[portal.infrastructure.security.ipColumns]
-added = "Adicionado"
-addedBy = "Adicionado por"
-cidr = "CIDR"
-label = "Rótulo"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmo"
-heading = "Gerenciamento de chaves de criptografia"
-keyId = "Identificador da chave"
-lastRotated = "Rotacionada pela última vez"
-rotateKey = "Rotacionar chave"
-rotationPolicy = "Política de rotação"
-subheading = "Custódia das chaves que criptografam documentos em repouso — quem pode descriptografar e como as chaves são rotacionadas."
-
-[portal.infrastructure.security.managedBanner]
-description = "Custódia bring-your-own-key (BYOK) e hold-your-own-key (HYOK) estão disponíveis no Enterprise. Atualize para fornecer chaves do seu próprio KMS."
-title = "As chaves são gerenciadas pelo Stirling no seu plano"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Ásia-Pacífico"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · limite de dados GDPR"
-label = "União Europeia"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Estados Unidos"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Residência de dados"
-subheading = "Onde os documentos são armazenados e processados."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} usado"
-
-[portal.infrastructure.storage.empty]
-description = "Armazenamento conectado e uso aparecem aqui."
-title = "Nenhum armazenamento configurado"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Ativo"
-activeRange = "0–{{value}}d"
-archived = "Arquivado"
-coldStorage = "cold storage"
-deleted = "Excluído"
-never = "nunca"
-purged = "expurgado"
-
-[portal.infrastructure.storage.providers]
-connect = "Conectar"
-connected = "Conectado"
-heading = "Provedores conectados"
-subheading = "Onde os artefatos processados são gravados."
-
-[portal.infrastructure.storage.retention]
-heading = "Retenção"
-subheading = "Por quanto tempo os artefatos são mantidos antes da exclusão do ciclo de vida."
-windowLabel = "Janela de retenção padrão"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dia"
-days_other = "{{count}} dias"
-never = "Nunca excluir"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Uso total"
-progressLabel = "Armazenamento usado"
-subheading = "Armazenamento consumido em todos os provedores conectados."
-
 [portal.infrastructure.tabs]
 apiKeys = "Chaves de API"
 audit = "Logs de auditoria"
@@ -7715,11 +7657,9 @@ security = "Segurança"
 storage = "Armazenamento"
 
 [portal.integrations]
-addAnother = "Adicionar outro"
 availableHeading = "Disponíveis"
 comingSoonHeading = "Em breve"
 connect = "Conectar"
-connectedHeading = "Conectadas"
 connectionCount_one = "{{count}} conexão"
 connectionCount_other = "{{count}} conexões"
 customApi = "API personalizada"
@@ -7737,6 +7677,10 @@ security = "Segurança"
 signing = "Assinatura"
 storage = "Armazenamento"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Conectado"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrações"
 pipelines = "Pipelines"
 policies = "Políticas"
 procurement = "Compras"
-settings = "Configurações"
 sources = "Fontes"
 usage = "Uso e faturamento"
 users = "Usuários"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Novo pipeline"
 
 [portal.pipelines.builder]
-addStep = "Adicionar ferramenta"
+activate = "Activate"
 back = "Voltar para pipelines"
 cannotFollow = "Não é possível receber {{produced}}"
 chooseAccount = "Escolha uma conta"
@@ -7792,28 +7735,38 @@ chooseDestination = "Escolha um destino"
 chooseOperation = "Escolha o que esta etapa faz"
 chooseSource = "Escolha uma fonte"
 discard = "Descartar alterações"
-enabled = "Ativado"
 inputs = "Entrada"
 inputSource = "Fonte de entrada"
 inputTrigger = "Acionador"
 keepEditing = "Continuar editando"
+moreActions = "More actions"
 needsConfiguring = "Precisa ser configurado"
-needsUpload = "Precisa de um arquivo enviado"
-noSources = "Nenhuma fonte conectada ainda. Crie uma para usá-la como entrada."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nenhuma ferramenta corresponde à sua busca."
-pipelineSettings = "Configurações do pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Buscar ferramentas"
-selectToolBody = "Adicione uma ferramenta para criar seu pipeline."
-selectToolTitle = "Ainda não há ferramentas"
 sendToSystem = "Enviar para outro sistema"
 stepsIncompatible = "Estas etapas não podem ser executadas no que a etapa anterior produz: {{tools}}."
 stepsNeedSetup = "Estas etapas ainda precisam ser configuradas antes de salvar: {{tools}}."
-toolSettings = "Configurações da ferramenta"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operação não reconhecida, mantida como está."
 unsavedBody = "Você tem alterações não salvas. Salve-as antes de sair ou descarte-as?"
 unsavedTitle = "Alterações não salvas"
-uploadUnsupported = "Arquivos enviados ainda não são suportados em pipelines, então estas etapas não podem ser salvas: {{tools}}."
 usesDefaults = "Executa com configurações padrão"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combina todos os arquivos da etapa anterior"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Não é possível verificar o que esta etapa aceita"
 
 [portal.pipelines.composer]
 addTool = "Adicionar ferramenta"
-cancel = "Cancelar"
-chainEmpty = "Adicione uma ferramenta para começar a criar seu pipeline."
 create = "Criar pipeline"
+createPaused = "Create paused"
 editingUnsupported = "A exibição destes parâmetros da ferramenta para edição ainda não é suportada."
-moveDown = "Mover para baixo"
-moveUp = "Mover para cima"
+editSource = "Edit source"
 name = "Nome"
 namePlaceholder = "ex.: Varredura de redação"
 noToolSettings = "Esta ferramenta não tem configurações ajustáveis."
-operations_one = "Operação ({{count}})"
-operations_other = "Operações ({{count}})"
 output = "Saída"
-removeStep = "Remover operação"
 save = "Salvar alterações"
 scheduleEvery = "Executar a cada"
-sources = "Fontes"
-sourcesLoading = "Carregando fontes..."
 trigger = "Gatilho"
 triggerManual = "Somente manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dias"
 hours = "horas"
 minutes = "minutos"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Excluir \"{{name}}\"? Isso não pode ser desfeito."
 cancel = "Cancelar"
@@ -7867,6 +7825,37 @@ connectSource = "Conectar uma fonte"
 description = "Crie seu primeiro pipeline: escolha as fontes em que ele é executado, encadeie as operações e escolha para onde vai a saída."
 title = "Ainda não há pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Ativos"
 paused = "Pausados"
@@ -7879,7 +7868,6 @@ completed_one = "Execução concluída."
 completed_other = "Todas as {{count}} execuções concluídas."
 empty = "Nada para executar: as fontes não tinham documentos para processar."
 failed = "Falha na execução: {{error}}"
-historyCleared = "Histórico limpo. A próxima execução reprocessa tudo que está atualmente nas fontes."
 inFlight = "Nada novo para executar: documentos ainda estão sendo processados de uma execução anterior."
 parked_one = "Nada para executar: {{count}} documento falhou anteriormente e está estacionado. Corrija a causa e limpe o histórico para tentar novamente."
 parked_other = "Nada para executar: {{count}} documentos falharam anteriormente e estão estacionados. Corrija a causa e limpe o histórico para tentar novamente."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Fontes"
 status = "Status"
 steps = "Etapas"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Monitoramento de pasta"
@@ -8209,6 +8198,24 @@ label = "Anexar a uma issue do Jira"
 description = "Envia o documento processado como anexo."
 label = "Enviar o documento por email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Grava o documento processado em uma pasta."
 label = "Upload para Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Esgotado"
 subtitle = "Seu teste gratuito vai até {{date}}. Não é necessário cartão."
 title = "Teste Enterprise"
 
-[portal.search]
-ariaLabel = "Pesquisar"
-placeholder = "Pesquisar no Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Ações rápidas aparecerão aqui assim que estiverem disponíveis."
-noActionsTitle = "Nenhuma ação rápida"
-noMatches = "Nenhuma correspondência para \"{{query}}\""
-noMatchesDescription = "Tente uma palavra-chave diferente ou navegue pelo catálogo."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Cancelar"
 confirm = "Excluir"
 title = "Excluir fonte?"
 
-[portal.sources.empty]
-description = "Conecte uma pasta (e, em breve, armazenamento em nuvem) para que suas políticas tenham de onde puxar documentos."
-title = "Nenhuma fonte conectada ainda"
-
 [portal.sources.kpi]
 inUse = "Em uso"
 total = "Conexões"
@@ -8785,6 +8778,7 @@ unused = "Não usada"
 documents = "Documentos"
 source = "Fonte"
 status = "Status"
+type = "Type"
 usedBy = "Políticas"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Policies & Privacy"
 [settings.preferences]
 title = "Preferences"
 
-[settings.search]
-placeholder = "Search settings pages..."
-
 [settings.security]
 description = "Update your password to keep your account secure."
 title = "Security"
@@ -10128,6 +10119,7 @@ last = "Last page"
 maintainRatio = "Toggle maintain aspect ratio"
 next = "Next page"
 noSavedSigs = "No saved signatures found"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Personal Signatures"
 previous = "Previous page"
 redo = "Redo"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Background removal failed"
 hint = "Upload a PNG or JPG image of your signature"
 label = "Upload signature image"
 placeholder = "Select image file"
+previewAlt = "Current image signature"
 processing = "Processing image..."
 removeBackground = "Remove white background (make transparent)"
 
@@ -10179,6 +10172,17 @@ saved = "Select a saved signature above, then click anywhere on the PDF to place
 text = "After entering your name above, click anywhere on the PDF to place your signature."
 title = "How to add signature"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Move Signature"
 pause = "Pause placement"
@@ -10625,6 +10629,23 @@ title = "Upload to Server"
 updateButton = "Update on Server"
 uploadButton = "Upload to Server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Go back"
 pdfTools = "Ferramentas PDF"
 placeholder = "Choose a tool to get started"
 premiumFeature = "Premium feature:"
-searchTools = "Pesquisar ferramentas"
 toolsHeader = "Tools"
 viewAllTools = "View all tools"
 
@@ -10822,6 +10842,9 @@ removal = "Removal"
 signing = "Signing"
 verification = "Verification"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "No tools found"
 noTools = "No tools available"
@@ -10979,6 +11002,13 @@ approver = "Aprova política"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Cancelar o convite para {{email}}? A pessoa não poderá entrar com o link atual."
 cancelInviteTitle = "Cancelar convite"
@@ -10998,10 +11028,8 @@ title = "Nenhum membro ainda"
 addToTeam = "Adicionar à equipe"
 guestCount = "{{count}} convidado"
 guests = "Convidados"
-guestsDesc = "Colaboradores externos, limitados ao que você compartilhou. Somente Editor."
 ledBy = "liderada por {{owner}}"
 org = "Organização"
-orgDesc = "Proprietários com autoridade em toda a organização e aprovação de políticas"
 owners = "{{count}} proprietário"
 team = "Equipe {{name}}"
 teamMeta = "{{count}} pessoas"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Convidado por {{who}}"
 cancel = "Cancelar"
-count = "{{count}} pendentes"
-desc = "Pessoas convidadas que ainda não entraram. Elas ocupam uma vaga até aceitarem."
 expiresInDays_one = "Expira em {{count}} dia"
 expiresInDays_other = "Expira em {{count}} dias"
 expiresToday = "Expira hoje"
 title = "Convites pendentes"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Algo deu errado ao acessar o backend, ou você não tem acesso. Tente novamente."
 title = "Não foi possível carregar os membros"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Search attachments"
 title = "Attachments"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Título do marcador"
 bookmarkTitleRequired = "O título do marcador é obrigatório"
 closeSidebar = "Fechar barra lateral de marcadores"
 collapseAll = "Recolher todos os marcadores"
+empty = "No bookmarks in this document"
 expandAll = "Expandir todos os marcadores"
 searchPlaceholder = "Pesquisar marcadores"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Add comment"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Locate in document"
 moreActions = "More actions"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Page {{page}}"
 placingHint = "Clique em uma página para posicionar… (cancelar)"
 removeCommentOnly = "Remove comment only"
 saveReply = "Save reply"
+searchPlaceholder = "Search comments"
 title = "Comments"
 typeComment = "Comment"
 typeInsertText = "Insert Text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "You have unsaved changes"
 closeSidebar = "Fechar barra lateral de camadas"
 hideAll = "Ocultar todas as camadas"
 showAll = "Mostrar todas as camadas"
+title = "Layers"
 
 [viewer.link]
 delete = "Delete link"
@@ -11646,6 +11682,7 @@ exitRedaction = "Exit Redaction Mode"
 exportAll = "Export PDF"
 exportSelected = "Export Selected Pages"
 formFill = "Fill Form"
+hideToolbar = "Hide toolbar"
 multiTool = "Multi-Tool"
 panMode = "Pan Mode"
 print = "Print PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Select All"
 selectByNumber = "Select by Page Numbers"
 selectLanguage = "Select language"
 share = "Compartilhar"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Toggle Annotations Visibility"
 toggleAttachments = "Toggle Attachments"
 toggleBookmarks = "Toggle Bookmarks"
diff --git a/frontend/editor/public/locales/pt-PT/translation.toml b/frontend/editor/public/locales/pt-PT/translation.toml
index de2b6efa79..159dd5439d 100644
--- a/frontend/editor/public/locales/pt-PT/translation.toml
+++ b/frontend/editor/public/locales/pt-PT/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabeto"
 apply = "Aplicar"
 applyAndContinue = "Guardar e sair"
-areYouSure = "Tem a certeza de que pretende sair?"
 back = "Voltar"
 black = "Preto"
 blue = "Azul"
@@ -106,6 +105,7 @@ undoSuccess = "Operação desfeita com sucesso"
 unknown = "Desconhecido"
 unpin = "Desafixar ficheiro (substituir após executar a ferramenta)"
 unsavedChanges = "Tem alterações não guardadas no seu PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Alterações não guardadas"
 unsupported = "Não suportado"
 username = "Nome de utilizador"
@@ -1879,6 +1879,9 @@ width = "Largura"
 [app]
 description = "A alternativa gratuita ao Adobe Acrobat (10M+ transferências)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Converter para PDF/A-3b"
 convertToPdfA3bDescription = "Cria um PDF de arquivo com anexos incorporados"
@@ -2933,12 +2936,16 @@ text = "Para tornar estas permissões imutáveis, use a ferramenta Adicionar pal
 [chat.actions]
 copy = "Copiar mensagem"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opções do agente Stirling"
+assistant = "AI Assistant"
 clearChat = "Limpar chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Esta operação irá usar os seus créditos cloud"
 tooltip = "Escolher cor do ecrã"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Escolher cor"
 
 [common]
+actions = "Actions"
 back = "Voltar"
 cancel = "Cancelar"
 close = "Fechar"
+codeSample = "Code sample"
 collapse = "Recolher"
 confirm = "Confirmar"
 continue = "Continuar"
 copied = "Copiado!"
 copy = "Copiar"
 done = "Concluído"
+enterValue = "Enter value"
 error = "Erro"
 expand = "Expandir"
 loading = "A carregar..."
 next = "Seguinte"
+open = "Open"
 preview = "Pré-visualizar"
 previous = "Anterior"
 refresh = "Atualizar"
 remaining = "Restantes"
 retry = "Tentar novamente"
 save = "Guardar"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Limpar selecionados"
@@ -3185,6 +3199,7 @@ title = "Método de compressão"
 [compress.settings]
 desiredSize = "Tamanho de ficheiro pretendido"
 desiredSizePlaceholder = "Introduzir tamanho"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "A compressão é uma forma simples de reduzir o tamanho do seu ficheiro. Escolha Tamanho do ficheiro para introduzir um tamanho alvo e deixarmos ajustar a qualidade por si. Escolha Qualidade para definir manualmente a intensidade da compressão."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opções de PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Selecione primeiro um formato de origem"
 settings = "Definições"
 single = "Único"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Pesquisar..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Editar"
@@ -3824,11 +3861,13 @@ shareSelected = "Partilhar selecionados"
 sharing = "Partilha"
 showAll = "Mostrar tudo"
 showHistory = "Mostrar histórico"
+sortBy = "Sort files"
 sortByDate = "Ordenar por data"
 sortByName = "Ordenar por nome"
 sortBySize = "Ordenar por tamanho"
 storage = "Armazenamento"
 storageState = "Armazenamento"
+storageUsed = "Storage used"
 synced = "Sincronizado"
 title = "Carregar ficheiros PDF"
 toolChain = "Ferramentas aplicadas"
@@ -3874,8 +3913,12 @@ addFiles = "Adicionar ficheiros"
 addingFiles = "A adicionar ficheiros…"
 collapse = "Recolher barra lateral"
 customizeGroups = "Personalizar grupos"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Abra ficheiros para começar"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Expandir barra lateral"
 googleDrive = "Google Drive"
 googleDriveDisabled = "O Google Drive não está configurado"
@@ -3888,15 +3931,17 @@ openFromComputer = "Abrir do computador"
 openSettings = "Abrir definições"
 other = "Outro"
 recent = "Recente"
-search = "Pesquisar"
-searchPlaceholder = "Pesquisar ficheiros..."
 viewAll = "Ver todos os {{count}} ficheiros"
 
 [fileSidebar.fileItem]
 closeViewer = "Fechar visualizador"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Abrir no visualizador"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Repor predefinições"
 subtitle = "Agrupe os seus ficheiros em categorias principais. Adicione etiquetas existentes ou novas a uma categoria, mude o nome ou crie a sua própria. Ficheiros que não estejam em nenhuma das suas categorias aparecem em “Outro”."
 title = "Categorias da barra lateral"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Adicionar ao espaço de trabalho"
 addToWorkspaceCount = "Adicionar {{count}} ao espaço de trabalho"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Voltar a Os meus ficheiros"
 breadcrumbs = "Caminho da pasta"
 cancel = "Cancelar"
 classification = "Classificação"
-clearSearch = "Limpar pesquisa"
 clearSelection = "Limpar seleção"
 closeDetails = "Fechar detalhes"
 create = "Criar"
@@ -3950,6 +4002,7 @@ downloadAll = "Transferir todos"
 downloadVersion = "Transferir esta versão"
 dropOverlay = "Largar ficheiros para carregar"
 dropOverlaySub = "Os ficheiros começam em Local. Use 'Mover para' ou 'Guardar na nuvem' para os organizar numa pasta."
+duplicate = "Duplicate"
 file = "Ficheiro"
 fileInfo = "File info"
 fileMenu = "Ações do ficheiro"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Redimensionar árvore de pastas (teclas de seta, Shift para
 save = "Guardar"
 saveToServer = "Guardar no servidor"
 saveToServerDisabledHint = "Guardar no servidor não está ativado neste servidor. Peça ao seu administrador para o ativar."
-search = "Pesquisar"
-searchPlaceholder = "Pesquisar nesta pasta e subpastas"
 selectAll = "Selecionar tudo"
 selectAllHint = "Clique para selecionar tudo. Dica: mantenha Ctrl (ou Cmd) para adicionar ficheiros um a um, Shift para selecionar um intervalo."
 selectedCount = "{{count}} selecionados"
@@ -4044,6 +4095,10 @@ title = "Ainda não há ficheiros na nuvem"
 hint = "Os ficheiros guardados sem carregar ficam aqui. Largue um ficheiro para adicionar."
 title = "Sem ficheiros apenas locais"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Os ficheiros que abrir ou editar aparecerão aqui."
 title = "Ainda nada modificado"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Não foi possível eliminar a pasta."
 deleteFolderFailedDetail = "Não foi possível eliminar a pasta: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Não foi possível atualizar a aparência da pasta."
 folderAppearanceFailedDetail = "Não foi possível atualizar a aparência da pasta: {{message}}"
 moveFilesFailed = "Não foi possível mover os ficheiros."
@@ -4113,6 +4170,11 @@ localHint = "Apenas armazenado neste navegador"
 shared = "Partilhado"
 sharedHint = "Partilhado consigo via ligação"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Mais antigos primeiro"
 modifiedDesc = "Mais recentes primeiro"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Sem ficheiros disponíveis no armazenamento. Abra alguns
 open = "Abrir"
 openFile = "Abrir ficheiro"
 openFiles = "Abrir ficheiros"
+selectFile = "Select {{name}}"
 selectFromStorage = "Selecionar do armazenamento"
 upload = "Carregar"
 uploadFile = "Carregar ficheiro"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Tudo guardado"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Falha ao extrair CSV"
 extractXlsxError = "Falha ao extrair XLSX"
+filled = "filled"
 flattenAfterFilling = "Achatar após o preenchimento"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obrig."
 requiredFieldsError = "Preencha todos os campos obrigatórios"
 rescanFields = "Reanalisar campos"
@@ -4795,9 +4863,6 @@ title = "Imagem para PDF"
 [imageToPdf]
 tags = "conversão,img,jpg,imagem,foto"
 
-[infoBanner]
-dismiss = "Ignorar"
-
 [invite]
 acceptError = "Falha ao criar conta"
 accountFor = "A criar conta para"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Carregamento concluído!"
 uploadSuccessMessage = "As suas imagens foram enviadas."
 validating = "A validar a sessão..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Digitalize para carregar fotos. As imagens convertem-se automaticamente em PDF."
 descriptionNoConvert = "Digitalize para carregar fotos a partir do seu dispositivo móvel."
@@ -4997,8 +5090,13 @@ title = "Carregar do telemóvel"
 tags = "Multi Ferramenta,Multi operação,UI,clicar arrastar,front end,lado cliente,interativo,interagível,mover,eliminar,migrar,dividir"
 title = "Multi Ferramenta PDF"
 
-[navbar]
-search = "Pesquisar"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "A autenticação não foi bem-sucedida. Pode fechar esta janela e tentar novamente."
@@ -5127,6 +5225,7 @@ activeFiles = "A vista <strong>Ficheiros ativos</strong> mostra todos os PDFs qu
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Fechar"
 cropSettings = "Agora que selecionámos o ficheiro que queremos recortar, podemos configurar a ferramenta Cortar para escolher a área para a qual queremos recortar o PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Clicar num dos ficheiros seleciona-o para processamento. Pode selecionar múltiplos ficheiros para operações em lote."
 fileReplacement = "O ficheiro modificado substituirá automaticamente o ficheiro original na Área de trabalho, permitindo-lhe executá-lo facilmente em mais ferramentas."
 filesButton = "O botão <strong>Ficheiros</strong> na barra de Acesso Rápido permite-lhe carregar PDFs para usar as ferramentas."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF Para PDF/A"
 tags = "arquivo,longo prazo,padrão,conversão,armazenamento,preservação"
 title = "PDF Para PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "impressão,padrão,conversão,produção,pré-impressão,arquivo"
 title = "PDF para PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 créditos"
 xsmall = "100 créditos"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Escolha o plano que se adapta às suas necessidades"
 title = "Planos disponíveis"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Limite mensal de gastos atingido"
 title = "Não foi possível abrir o portal Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "de {{allowance}} PDF gratuitos utilizados"
 capSuffix_other = "de {{allowance}} PDF gratuitos utilizados"
 eyebrow = "Avaliação do Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Envie um documento ou uma notificação por email quando uma política for executada."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Arquive documentos processados no Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDKs oficiais"
 beta = "Beta"
 deprecated = "Obsoleto"
 
-[portal.docs.search]
-empty = "Nenhuma documentação correspondente"
-placeholder = "Pesquisar documentação"
-results = "{{count}} resultados"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Capacidades incorporadas e nomeadas que o seu agente invoca como uma única ferramenta. Cada skill é uma cadeia de operações determinística com avaliações associadas."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Nenhum documento corresponde a este filtro."
 rowActions = "Ações da linha"
 sensitiveLabel = "Sensível"
-sensitiveTitle = "Sensível — acesso necessário"
 
 [portal.documents.table.columns]
 action = "Pipeline / Ação"
 document = "Documento"
+labels = "Labels"
 product = "Produto"
 status = "Estado"
 time = "Hora"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Visto pela última vez"
 region = "Região"
 status = "Estado"
+target = "Target"
 version = "Versão"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Esta vista encontrou um erro inesperado. Tente novamente ou escol
 retry = "Tentar novamente"
 title = "Algo correu mal nesta página"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Voltar"
 body = "Transfira a aplicação de desktop ou autoaloje o servidor."
@@ -7380,11 +7560,6 @@ cancel = "Cancelar"
 confirm = "Revogar chave"
 title = "Revogar chave API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestado"
-inScope = "No âmbito"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrar eventos de auditoria por categoria"
 heading = "Registos de auditoria"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Sucesso"
 warning = "Aviso"
 
-[portal.infrastructure.certLabel]
-certified = "Certificado"
-inProgress = "Em curso"
-notStarted = "Não iniciado"
-
 [portal.infrastructure.createKey]
 cancel = "Cancelar"
 createKey = "Criar chave"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copie este segredo agora — não será mostrado novamente."
 title = "Criar chave API"
 titleCreated = "Chave criada"
 
-[portal.infrastructure.deployLabel]
-live = "Em direto"
-queued = "Em fila"
-rolledBack = "Revertido"
-rolling = "A implementar"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Implementado por"
-environment = "Ambiente"
-product = "Produto"
-status = "Estado"
-version = "Versão"
-when = "Quando"
-
-[portal.infrastructure.deployments.recent]
-heading = "Implementações recentes"
-subheading = "Os rollouts mais recentes em produtos e ambientes."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instâncias"
-latency = "Latência"
-load = "Carga"
-p99 = "P99"
-region = "Região"
-status = "Estado"
-throughput = "Débito"
-uptime = "Tempo de atividade"
-version = "Versão"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regiões"
-subheading = "Estado em tempo real de cada região Stirling implementada — latência, carga e versão do rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "As regiões implementadas aparecem aqui assim que o seu espaço de trabalho for aprovisionado."
-title = "Nenhuma região implementada"
-
 [portal.infrastructure.keyLabel]
 active = "Ativa"
 revoked = "Revogada"
 
-[portal.infrastructure.modelLabel]
-active = "Ativo"
-degraded = "Degradado"
-disabled = "Desativado"
-
-[portal.infrastructure.models]
-heading = "Modelos"
-msValue = "{{value}} ms"
-subheading = "O catálogo de modelos e encaminhamento que alimenta o processamento de documentos em todo o seu espaço de trabalho."
-
-[portal.infrastructure.models.byom]
-description = "Registe um modelo on-prem ou autoalojado e fixe-o a uma região para processamento vinculado à residência dos dados."
-title = "Traga o seu próprio modelo"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catálogo"
-sub = "Modelos geridos disponíveis para o seu espaço de trabalho, com latência e custo em tempo real."
-subEnterprise = "Modelos geridos, próprios e on-prem — com fixação por região disponível."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Os modelos no catálogo do seu espaço de trabalho aparecem aqui."
-title = "Não há modelos disponíveis"
-
-[portal.infrastructure.models.columns]
-cost = "Custo"
-latency = "Latência"
-load = "Carga"
-model = "Modelo"
-status = "Estado"
-type = "Tipo"
-version = "Versão"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/chamada"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modelos ativos"
-avgLatency = "Latência média"
-included = "Incluído"
-monthlySpend = "Gasto mensal com modelos"
-
-[portal.infrastructure.models.routing]
-empty = "Não há regras de encaminhamento configuradas."
-heading = "Regras de encaminhamento"
-sub = "Qual o modelo que trata cada operação. A predefinição aplica-se quando nenhuma regra mais específica corresponde."
-subLocked = "Encaminhe operações para modelos específicos — disponível em planos pagos."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Atualize para Pro para controlar qual o modelo que trata cada operação e tipo de documento."
-title = "O encaminhamento de modelos é uma funcionalidade paga"
-
-[portal.infrastructure.models.routingColumns]
-default = "Predefinição"
-docType = "Tipo de documento"
-modelForAria = "Modelo para {{operation}}"
-operation = "Operação"
-routedTo = "Encaminhado para"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Classificação"
-extraction = "Extração"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradado"
-down = "Indisponível"
-healthy = "Saudável"
-
-[portal.infrastructure.security.access.byok]
-description = "Forneça uma chave do seu próprio KMS. O Stirling cifra com ela, mas ainda consegue ler."
-label = "Traga a sua própria chave (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "As chaves nunca saem do seu KMS. O Stirling mantém apenas texto cifrado."
-label = "Mantenha a sua própria chave (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "O Stirling gere as chaves de cifra. O mais simples — zero operações de chaves do seu lado."
-label = "Chaves detidas pelo Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Política de acesso a documentos"
-subheading = "Controla quem pode decifrar documentos processados em repouso."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestados de conformidade"
-noReport = "Nenhum relatório disponível"
-subheading = "Postura de auditoria por framework, com relatórios disponíveis sobre controlos atestados."
-viewReport = "Ver relatório →"
-
-[portal.infrastructure.security.compliance]
-heading = "Conformidade"
-subheading = "Atestados e certificações que abrangem a plataforma Stirling."
-
-[portal.infrastructure.security.empty]
-description = "A configuração de segurança do seu espaço de trabalho aparecerá aqui."
-title = "Postura de segurança indisponível"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Com HYOK, as chaves de cifra nunca saem do seu KMS. O Stirling armazena e processa apenas texto cifrado que pode revogar a qualquer momento."
-title = "O Stirling não consegue decifrar os seus documentos"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Não há intervalos de IP configurados — todos os IPs são permitidos."
-heading = "Lista de permissões de IP"
-sub = "O acesso à API está restrito a estes intervalos CIDR."
-subLocked = "Restrinja o acesso à API a intervalos de IP conhecidos — disponível em planos pagos."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Atualize para Pro para restringir o acesso à API a redes específicas."
-title = "A lista de permissões de IP é uma funcionalidade paga"
-
-[portal.infrastructure.security.ipColumns]
-added = "Adicionado"
-addedBy = "Adicionado por"
-cidr = "CIDR"
-label = "Etiqueta"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmo"
-heading = "Gestão de chaves de cifra"
-keyId = "Identificador da chave"
-lastRotated = "Rodada pela última vez"
-rotateKey = "Rodar chave"
-rotationPolicy = "Política de rotação"
-subheading = "Custódia das chaves que cifram documentos em repouso — quem pode decifrar e como as chaves rodam."
-
-[portal.infrastructure.security.managedBanner]
-description = "A custódia traga-a-sua-própria-chave (BYOK) e mantenha-a-sua-própria-chave (HYOK) está disponível no Enterprise. Atualize para fornecer chaves do seu próprio KMS."
-title = "As chaves são geridas pelo Stirling no seu plano"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Ásia-Pacífico"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · limite de dados GDPR"
-label = "União Europeia"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Estados Unidos"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Residência dos dados"
-subheading = "Onde os documentos são armazenados e processados."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} usado"
-
-[portal.infrastructure.storage.empty]
-description = "O armazenamento ligado e a utilização aparecem aqui."
-title = "Nenhum armazenamento configurado"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Ativo"
-activeRange = "0–{{value}}d"
-archived = "Arquivado"
-coldStorage = "armazenamento frio"
-deleted = "Eliminado"
-never = "nunca"
-purged = "purgado"
-
-[portal.infrastructure.storage.providers]
-connect = "Ligar"
-connected = "Ligado"
-heading = "Fornecedores ligados"
-subheading = "Onde os artefactos processados são escritos."
-
-[portal.infrastructure.storage.retention]
-heading = "Retenção"
-subheading = "Durante quanto tempo os artefactos são mantidos antes da eliminação do ciclo de vida."
-windowLabel = "Janela de retenção predefinida"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dia"
-days_other = "{{count}} dias"
-never = "Nunca eliminar"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Utilização total"
-progressLabel = "Armazenamento usado"
-subheading = "Armazenamento consumido em todos os fornecedores ligados."
-
 [portal.infrastructure.tabs]
 apiKeys = "Chaves API"
 audit = "Registos de auditoria"
@@ -7715,11 +7657,9 @@ security = "Segurança"
 storage = "Armazenamento"
 
 [portal.integrations]
-addAnother = "Adicionar outra"
 availableHeading = "Disponíveis"
 comingSoonHeading = "Brevemente"
 connect = "Ligar"
-connectedHeading = "Ligadas"
 connectionCount_one = "{{count}} ligação"
 connectionCount_other = "{{count}} ligações"
 customApi = "API personalizada"
@@ -7737,6 +7677,10 @@ security = "Segurança"
 signing = "Assinatura"
 storage = "Armazenamento"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Ligada"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrações"
 pipelines = "Pipelines"
 policies = "Políticas"
 procurement = "Aquisições"
-settings = "Definições"
 sources = "Fontes"
 usage = "Utilização e faturação"
 users = "Utilizadores"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Nova pipeline"
 
 [portal.pipelines.builder]
-addStep = "Adicionar ferramenta"
+activate = "Activate"
 back = "Voltar às pipelines"
 cannotFollow = "Não é possível receber {{produced}}"
 chooseAccount = "Escolha uma conta"
@@ -7792,28 +7735,38 @@ chooseDestination = "Escolha um destino"
 chooseOperation = "Escolha o que este passo faz"
 chooseSource = "Escolha uma fonte"
 discard = "Descartar alterações"
-enabled = "Ativada"
 inputs = "Entrada"
 inputSource = "Fonte de entrada"
 inputTrigger = "Acionador"
 keepEditing = "Continuar a editar"
+moreActions = "More actions"
 needsConfiguring = "Precisa de configuração"
-needsUpload = "Precisa de um ficheiro carregado"
-noSources = "Ainda não há fontes ligadas. Crie uma para a usar como entrada."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nenhuma ferramenta corresponde à sua pesquisa."
-pipelineSettings = "Definições da pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Pesquisar ferramentas"
-selectToolBody = "Adicione uma ferramenta para criar a sua pipeline."
-selectToolTitle = "Ainda não há ferramentas"
 sendToSystem = "Enviar para outro sistema"
 stepsIncompatible = "Estes passos não podem ser executados sobre o que o passo anterior produz: {{tools}}."
 stepsNeedSetup = "Estes passos ainda precisam de configuração antes de guardar: {{tools}}."
-toolSettings = "Definições da ferramenta"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operação não reconhecida, mantida tal como está."
 unsavedBody = "Tem alterações não guardadas. Guarde-as antes de sair ou descarte-as?"
 unsavedTitle = "Alterações não guardadas"
-uploadUnsupported = "Os ficheiros carregados ainda não são suportados em pipelines, por isso estes passos não podem ser guardados: {{tools}}."
 usesDefaults = "Executa com definições predefinidas"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combina todos os ficheiros do passo anterior"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Não é possível verificar o que este passo aceita"
 
 [portal.pipelines.composer]
 addTool = "Adicionar ferramenta"
-cancel = "Cancelar"
-chainEmpty = "Adicione uma ferramenta para começar a criar a sua pipeline."
 create = "Criar pipeline"
+createPaused = "Create paused"
 editingUnsupported = "A apresentação destes parâmetros da ferramenta para edição ainda não é suportada."
-moveDown = "Mover para baixo"
-moveUp = "Mover para cima"
+editSource = "Edit source"
 name = "Nome"
 namePlaceholder = "ex.: Varredura de redação"
 noToolSettings = "Esta ferramenta não tem definições configuráveis."
-operations_one = "Operação ({{count}})"
-operations_other = "Operações ({{count}})"
 output = "Saída"
-removeStep = "Remover operação"
 save = "Guardar alterações"
 scheduleEvery = "Executar a cada"
-sources = "Fontes"
-sourcesLoading = "A carregar fontes..."
 trigger = "Acionador"
 triggerManual = "Apenas manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dias"
 hours = "horas"
 minutes = "minutos"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Eliminar \"{{name}}\"? Esta ação não pode ser anulada."
 cancel = "Cancelar"
@@ -7867,6 +7825,37 @@ connectSource = "Ligar uma fonte"
 description = "Crie a sua primeira pipeline: escolha as fontes sobre as quais é executada, encadeie as operações e escolha para onde vai a saída."
 title = "Ainda não há pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Ativas"
 paused = "Em pausa"
@@ -7879,7 +7868,6 @@ completed_one = "Execução concluída."
 completed_other = "Todas as {{count}} execuções foram concluídas."
 empty = "Nada para executar: as fontes não tinham documentos para processar."
 failed = "Falha na execução: {{error}}"
-historyCleared = "Histórico limpo. A próxima execução reprocessa tudo o que está atualmente nas fontes."
 inFlight = "Nada de novo a executar: os documentos ainda estão a ser processados a partir de uma execução anterior."
 parked_one = "Nada a executar: {{count}} documento falhou anteriormente e está estacionado. Corrija a causa e depois limpe o histórico para o tentar novamente."
 parked_other = "Nada a executar: {{count}} documentos falharam anteriormente e estão estacionados. Corrija a causa e depois limpe o histórico para os tentar novamente."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Fontes"
 status = "Estado"
 steps = "Passos"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Monitorização de pasta"
@@ -8209,6 +8198,24 @@ label = "Anexar a uma incidência Jira"
 description = "Envia o documento processado como anexo."
 label = "Enviar o documento por email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Grava o documento processado numa pasta."
 label = "Carregar para Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Esgotado"
 subtitle = "O seu teste gratuito decorre até {{date}}. Não é necessário cartão."
 title = "Teste Enterprise"
 
-[portal.search]
-ariaLabel = "Pesquisar"
-placeholder = "Pesquisar no Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "As ações rápidas aparecerão aqui assim que estiverem disponíveis."
-noActionsTitle = "Sem ações rápidas"
-noMatches = "Sem resultados para \"{{query}}\""
-noMatchesDescription = "Experimente uma palavra-chave diferente ou navegue pelo catálogo."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Cancelar"
 confirm = "Eliminar"
 title = "Eliminar origem?"
 
-[portal.sources.empty]
-description = "Ligue uma pasta (e, em breve, armazenamento na cloud) para que as suas políticas tenham de onde obter documentos."
-title = "Ainda não há origens ligadas"
-
 [portal.sources.kpi]
 inUse = "Em utilização"
 total = "Ligações"
@@ -8785,6 +8778,7 @@ unused = "Não utilizada"
 documents = "Documentos"
 source = "Origem"
 status = "Estado"
+type = "Type"
 usedBy = "Políticas"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Políticas e Privacidade"
 [settings.preferences]
 title = "Preferências"
 
-[settings.search]
-placeholder = "Procurar páginas de definições..."
-
 [settings.security]
 description = "Atualize a sua palavra-passe para manter a sua conta segura."
 title = "Segurança"
@@ -10128,6 +10119,7 @@ last = "Última página"
 maintainRatio = "Alternar manter proporção"
 next = "Próxima página"
 noSavedSigs = "Nenhuma assinatura guardada encontrada"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Assinaturas Pessoais"
 previous = "Página anterior"
 redo = "Refazer"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Falha na remoção do fundo"
 hint = "Carregue uma imagem PNG ou JPG da sua assinatura"
 label = "Carregar imagem da assinatura"
 placeholder = "Selecione ficheiro de imagem"
+previewAlt = "Current image signature"
 processing = "A processar imagem..."
 removeBackground = "Remover fundo branco (tornar transparente)"
 
@@ -10179,6 +10172,17 @@ saved = "Selecione uma assinatura guardada acima e depois clique em qualquer par
 text = "Depois de introduzir o seu nome acima, clique em qualquer lugar no PDF para colocar a sua assinatura."
 title = "Como adicionar a assinatura"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Mover Assinatura"
 pause = "Pausar colocação"
@@ -10625,6 +10629,23 @@ title = "Carregar para o servidor"
 updateButton = "Atualizar no servidor"
 uploadButton = "Carregar para o servidor"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Voltar"
 pdfTools = "Ferramentas PDF"
 placeholder = "Escolha uma ferramenta para começar"
 premiumFeature = "Funcionalidade premium:"
-searchTools = "Pesquisar ferramentas"
 toolsHeader = "Ferramentas"
 viewAllTools = "Ver todas as ferramentas"
 
@@ -10822,6 +10842,9 @@ removal = "Remoção"
 signing = "Assinatura"
 verification = "Verificação"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nenhuma ferramenta encontrada"
 noTools = "Nenhuma ferramenta disponível"
@@ -10979,6 +11002,13 @@ approver = "Aprova política"
 editor = "Editor"
 processor = "Processador"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Cancelar o convite para {{email}}? A pessoa não poderá aderir com a ligação atual."
 cancelInviteTitle = "Cancelar convite"
@@ -10998,10 +11028,8 @@ title = "Ainda sem membros"
 addToTeam = "Adicionar à equipa"
 guestCount = "{{count}} convidado"
 guests = "Convidados"
-guestsDesc = "Colaboradores externos, limitados ao que partilhou. Apenas Editor."
 ledBy = "liderada por {{owner}}"
 org = "Organização"
-orgDesc = "Proprietários com autoridade em toda a organização e aprovação de políticas"
 owners = "{{count}} proprietário"
 team = "Equipa {{name}}"
 teamMeta = "{{count}} pessoas"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Convidado por {{who}}"
 cancel = "Cancelar"
-count = "{{count}} pendentes"
-desc = "Pessoas convidadas que ainda não aderiram. Ocupam um lugar até aceitarem."
 expiresInDays_one = "Expira em {{count}} dia"
 expiresInDays_other = "Expira em {{count}} dias"
 expiresToday = "Expira hoje"
 title = "Convites pendentes"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Ocorreu um erro ao contactar o backend, ou não tem acesso. Tente novamente."
 title = "Não foi possível carregar os membros"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Pesquisar anexos"
 title = "Anexos"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Título do marcador"
 bookmarkTitleRequired = "O título do marcador é obrigatório"
 closeSidebar = "Fechar barra lateral de marcadores"
 collapseAll = "Recolher todos os marcadores"
+empty = "No bookmarks in this document"
 expandAll = "Expandir todos os marcadores"
 searchPlaceholder = "Pesquisar marcadores"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Adicionar comentário"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Localizar no documento"
 moreActions = "Mais ações"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Página {{page}}"
 placingHint = "Clique numa página para colocar… (cancelar)"
 removeCommentOnly = "Remover apenas o comentário"
 saveReply = "Guardar resposta"
+searchPlaceholder = "Search comments"
 title = "Comentários"
 typeComment = "Comentário"
 typeInsertText = "Inserir texto"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Tem alterações por guardar"
 closeSidebar = "Fechar barra lateral de camadas"
 hideAll = "Ocultar todas as camadas"
 showAll = "Mostrar todas as camadas"
+title = "Layers"
 
 [viewer.link]
 delete = "Eliminar ligação"
@@ -11646,6 +11682,7 @@ exitRedaction = "Sair do modo de expurgo"
 exportAll = "Exportar PDF"
 exportSelected = "Exportar páginas selecionadas"
 formFill = "Preencher formulário"
+hideToolbar = "Hide toolbar"
 multiTool = "Multi-ferramenta"
 panMode = "Modo de deslocação"
 print = "Imprimir PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Selecionar tudo"
 selectByNumber = "Selecionar por números de página"
 selectLanguage = "Selecionar idioma"
 share = "Partilhar"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Alternar visibilidade das anotações"
 toggleAttachments = "Alternar anexos"
 toggleBookmarks = "Alternar marcadores"
diff --git a/frontend/editor/public/locales/ro-RO/translation.toml b/frontend/editor/public/locales/ro-RO/translation.toml
index 56477b43d5..721c051539 100644
--- a/frontend/editor/public/locales/ro-RO/translation.toml
+++ b/frontend/editor/public/locales/ro-RO/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Aplicare"
 applyAndContinue = "Salvați și ieșiți"
-areYouSure = "Sigur doriți să părăsiți?"
 back = "Înapoi"
 black = "Negru"
 blue = "Albastru"
@@ -106,6 +105,7 @@ undoSuccess = "Operațiune anulată cu succes"
 unknown = "Necunoscut"
 unpin = "Anulare fixare fișier (înlocuiește după rularea instrumentului)"
 unsavedChanges = "Aveți modificări nesalvate în PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Modificări nesalvate"
 unsupported = "Nesuportat"
 username = "Nume de utilizator"
@@ -1879,6 +1879,9 @@ width = "Lățime"
 [app]
 description = "Alternativa gratuită la Adobe Acrobat (10M+ descărcări)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Convertește la PDF/A-3b"
 convertToPdfA3bDescription = "Creează un PDF pentru arhivare cu atașamente încorporate"
@@ -2933,12 +2936,16 @@ text = "Pentru ca aceste permisiuni să nu poată fi schimbate, utilizați instr
 [chat.actions]
 copy = "Copiați mesajul"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opțiuni agent Stirling"
+assistant = "AI Assistant"
 clearChat = "Goliți chatul"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Această operație va folosi creditele din cloud"
 tooltip = "Alegeți culoarea de pe ecran"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Alege culoarea"
 
 [common]
+actions = "Actions"
 back = "Înapoi"
 cancel = "Anulați"
 close = "Închide"
+codeSample = "Code sample"
 collapse = "Restrânge"
 confirm = "Confirmă"
 continue = "Continuă"
 copied = "Copiat!"
 copy = "Copiați"
 done = "Gata"
+enterValue = "Enter value"
 error = "Eroare"
 expand = "Extinde"
 loading = "Se încarcă..."
 next = "Înainte"
+open = "Open"
 preview = "Previzualizare"
 previous = "Înapoi"
 refresh = "Reîmprospătați"
 remaining = "Rămas"
 retry = "Reîncercați"
 save = "Salvează"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Șterge selecția"
@@ -3185,6 +3199,7 @@ title = "Metodă de comprimare"
 [compress.settings]
 desiredSize = "Dimensiunea dorită a fișierului"
 desiredSizePlaceholder = "Introduceți dimensiunea"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Comprimarea este o modalitate ușoară de a reduce dimensiunea fișierului. Alegeți Dimensiunea fișierului pentru a introduce o dimensiune țintă și vom ajusta noi calitatea. Alegeți Calitate pentru a seta manual intensitatea comprimării."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opțiuni PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Selectați mai întâi un format sursă"
 settings = "Setări"
 single = "Unic"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Căutați..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Editați"
@@ -3824,11 +3861,13 @@ shareSelected = "Partajați elementele selectate"
 sharing = "Partajare"
 showAll = "Afișați tot"
 showHistory = "Afișați istoricul"
+sortBy = "Sort files"
 sortByDate = "Sortează după dată"
 sortByName = "Sortează după nume"
 sortBySize = "Sortează după dimensiune"
 storage = "Stocare"
 storageState = "Stocare"
+storageUsed = "Storage used"
 synced = "Sincronizat"
 title = "Încărcați fișiere PDF"
 toolChain = "Instrumente aplicate"
@@ -3874,8 +3913,12 @@ addFiles = "Adaugă fișiere"
 addingFiles = "Se adaugă fișiere…"
 collapse = "Restrânge bara laterală"
 customizeGroups = "Personalizează grupurile"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Deschide fișiere pentru a începe"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Extinde bara laterală"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nu este configurat"
@@ -3888,15 +3931,17 @@ openFromComputer = "Deschide de pe calculator"
 openSettings = "Deschide setările"
 other = "Altele"
 recent = "Recente"
-search = "Căutare"
-searchPlaceholder = "Caută fișiere..."
 viewAll = "Vezi toate cele {{count}} fișiere"
 
 [fileSidebar.fileItem]
 closeViewer = "Închideți vizualizatorul"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Deschideți în vizualizator"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Resetează la valorile implicite"
 subtitle = "Grupează fișierele în categorii părinte. Adaugă etichete existente sau noi într-o categorie, redenumește-o sau creează una proprie. Fișierele care nu se află în niciuna dintre categoriile tale apar sub „Altele”."
 title = "Categorii bară laterală"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Adăugați la spațiul de lucru"
 addToWorkspaceCount = "Adăugați {{count}} la spațiul de lucru"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Înapoi la Fișierele mele"
 breadcrumbs = "Calea folderului"
 cancel = "Anulați"
 classification = "Clasificare"
-clearSearch = "Ștergeți căutarea"
 clearSelection = "Goliți selecția"
 closeDetails = "Închideți detaliile"
 create = "Creați"
@@ -3950,6 +4002,7 @@ downloadAll = "Descărcați tot"
 downloadVersion = "Descărcați această versiune"
 dropOverlay = "Plasați fișierele pentru a încărca"
 dropOverlaySub = "Fișierele pornesc în Local. Folosiți „Mută în” sau „Salvează în cloud” pentru a le organiza într-un folder."
+duplicate = "Duplicate"
 file = "Fișier"
 fileInfo = "File info"
 fileMenu = "Acțiuni fișier"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Redimensionați arborele de foldere (tastele săgeți, Shift
 save = "Salvați"
 saveToServer = "Salvați pe server"
 saveToServerDisabledHint = "Salvarea pe server nu este activată pe acest server. Rugați administratorul să o activeze."
-search = "Căutați"
-searchPlaceholder = "Căutați în acest folder și subfoldere"
 selectAll = "Selectați tot"
 selectAllHint = "Faceți clic pentru a selecta tot. Sfat: țineți apăsat Ctrl (sau Cmd) pentru a adăuga fișiere pe rând, Shift pentru a selecta un interval."
 selectedCount = "{{count}} selectate"
@@ -4044,6 +4095,10 @@ title = "Încă nu există fișiere în cloud"
 hint = "Fișierele salvate fără încărcare rămân aici. Plasați un fișier pentru a adăuga unul."
 title = "Niciun fișier doar local"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Fișierele pe care le deschideți sau editați vor apărea aici."
 title = "Nimic modificat încă"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Nu s-a putut șterge folderul."
 deleteFolderFailedDetail = "Nu s-a putut șterge folderul: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nu s-a putut actualiza aspectul folderului."
 folderAppearanceFailedDetail = "Nu s-a putut actualiza aspectul folderului: {{message}}"
 moveFilesFailed = "Nu s-au putut muta fișierele."
@@ -4113,6 +4170,11 @@ localHint = "Stocat doar în acest browser"
 shared = "Partajat"
 sharedHint = "Partajat cu dvs. prin link"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Cele mai vechi mai întâi"
 modifiedDesc = "Cele mai recente mai întâi"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Nu există fișiere în stocare. Deschide mai întâi c
 open = "Deschide"
 openFile = "Deschide fișier"
 openFiles = "Deschide fișiere"
+selectFile = "Select {{name}}"
 selectFromStorage = "Selectați din stocare"
 upload = "Încărcați"
 uploadFile = "Încărcați fișier"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Totul salvat"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Extragerea CSV a eșuat"
 extractXlsxError = "Extragerea XLSX a eșuat"
+filled = "filled"
 flattenAfterFilling = "Aplatizați după completare"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obl"
 requiredFieldsError = "Completați toate câmpurile obligatorii"
 rescanFields = "Rescanați câmpurile"
@@ -4795,9 +4863,6 @@ title = "Imagine în PDF"
 [imageToPdf]
 tags = "conversie,img,jpg,poză,fotografie"
 
-[infoBanner]
-dismiss = "Închideți"
-
 [invite]
 acceptError = "Crearea contului a eșuat"
 accountFor = "Se creează cont pentru"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Încărcare reușită!"
 uploadSuccessMessage = "Imaginile au fost transferate."
 validating = "Se validează sesiunea..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Scanați pentru a încărca fotografii. Imaginile se convertesc automat în PDF."
 descriptionNoConvert = "Scanați pentru a încărca fotografii de pe dispozitivul mobil."
@@ -4997,8 +5090,13 @@ title = "Încărcare de pe mobil"
 tags = "Instrument Multiplu,Operație multiplă,UI,clic tragere,front end,client side"
 title = "Instrument PDF multiplu"
 
-[navbar]
-search = "Căutare"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentificarea nu a reușit. Puteți închide această fereastră și să încercați din nou."
@@ -5127,6 +5225,7 @@ activeFiles = "Vizualizarea <strong>Fișiere active</strong> arată toate PDF-ur
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Închide"
 cropSettings = "Acum că am selectat fișierul pe care dorim să-l decupăm, putem configura instrumentul Decupare pentru a alege zona la care vrem să decupăm PDF-ul."
+dialogLabel = "Onboarding"
 fileCheckbox = "Un clic pe unul dintre fișiere îl selectează pentru procesare. Puteți selecta mai multe fișiere pentru operațiuni în lot."
 fileReplacement = "Fișierul modificat va înlocui automat fișierul original în Bancul de lucru, permițându-vă să îl treceți ușor prin mai multe instrumente."
 filesButton = "Butonul <strong>Fișiere</strong> din bara de acces rapid vă permite să încărcați PDF-uri pe care să folosiți instrumentele."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF către PDF/A"
 tags = "arhivă,termen-lung,standard,conversie,stocare,conservare"
 title = "PDF către PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "tipărire,standard,conversie,producție,pregătire pentru tipar,arhivă"
 title = "PDF în PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 de credite"
 xsmall = "100 de credite"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Alegeți planul care se potrivește nevoilor dvs."
 title = "Planuri disponibile"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Limita lunară de cheltuieli a fost atinsă"
 title = "Nu s-a putut deschide portalul Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "din {{allowance}} PDF-uri gratuite folosite"
 capSuffix_other = "din {{allowance}} PDF-uri gratuite folosite"
 eyebrow = "Perioadă de încercare Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Trimiteți prin email un document sau o notificare când rulează o politică."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Încărcați documentele procesate în Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDK-uri oficiale"
 beta = "Beta"
 deprecated = "Depreciat"
 
-[portal.docs.search]
-empty = "Nicio documentație potrivită"
-placeholder = "Căutați în documentație"
-results = "{{count}} rezultate"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Capabilități incluse, denumite, pe care agentul tău le invocă drept un singur instrument. Fiecare skill este un lanț determinist de operațiuni, cu evals atașate."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Niciun document nu corespunde acestui filtru."
 rowActions = "Acțiuni rând"
 sensitiveLabel = "Sensibil"
-sensitiveTitle = "Sensibil — acces necesar"
 
 [portal.documents.table.columns]
 action = "Pipeline / Acțiune"
 document = "Document"
+labels = "Labels"
 product = "Produs"
 status = "Stare"
 time = "Timp"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Văzut ultima dată"
 region = "Regiune"
 status = "Stare"
+target = "Target"
 version = "Versiune"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Această vizualizare a întâmpinat o eroare neașteptată. Înce
 retry = "Încercați din nou"
 title = "Ceva nu a mers bine pe această pagină"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Înapoi"
 body = "Descărcați aplicația desktop sau găzduiți serverul self-hosted."
@@ -7380,11 +7560,6 @@ cancel = "Anulați"
 confirm = "Revocați cheia"
 title = "Revocați cheia API"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestat"
-inScope = "În domeniu"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrați evenimentele de audit după categorie"
 heading = "Jurnale de audit"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Succes"
 warning = "Avertisment"
 
-[portal.infrastructure.certLabel]
-certified = "Certificat"
-inProgress = "În desfășurare"
-notStarted = "Neînceput"
-
 [portal.infrastructure.createKey]
 cancel = "Anulați"
 createKey = "Creați cheie"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Copiați acest secret acum — nu va mai fi afișat."
 title = "Creați cheie API"
 titleCreated = "Cheie creată"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "În coadă"
-rolledBack = "Revenit la versiunea anterioară"
-rolling = "În curs de lansare"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Implementat de"
-environment = "Mediu"
-product = "Produs"
-status = "Stare"
-version = "Versiune"
-when = "Când"
-
-[portal.infrastructure.deployments.recent]
-heading = "Implementări recente"
-subheading = "Cele mai recente lansări pe produse și medii."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instanțe"
-latency = "Latență"
-load = "Încărcare"
-p99 = "P99"
-region = "Regiune"
-status = "Stare"
-throughput = "Debit"
-uptime = "Timp de funcționare"
-version = "Versiune"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regiuni"
-subheading = "Sănătate în timp real pentru fiecare regiune Stirling implementată — latență, încărcare și versiune de lansare."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Regiunile implementate apar aici după ce spațiul dvs. de lucru este provisionat."
-title = "Nu există regiuni implementate"
-
 [portal.infrastructure.keyLabel]
 active = "Activă"
 revoked = "Revocată"
 
-[portal.infrastructure.modelLabel]
-active = "Activ"
-degraded = "Degradat"
-disabled = "Dezactivat"
-
-[portal.infrastructure.models]
-heading = "Modele"
-msValue = "{{value}} ms"
-subheading = "Catalogul de modele și rutarea care susțin procesarea documentelor în spațiul dvs. de lucru."
-
-[portal.infrastructure.models.byom]
-description = "Înregistrați un model on-prem sau self-hosted și fixați-l într-o regiune pentru procesare cu rezidență a datelor."
-title = "Aduceți propriul model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Catalog"
-sub = "Modele gestionate disponibile pentru spațiul dvs. de lucru, cu latență și cost în timp real."
-subEnterprise = "Modele gestionate, proprii și on-prem — cu fixare per regiune disponibilă."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modelele din catalogul spațiului dvs. de lucru apar aici."
-title = "Nu există modele disponibile"
-
-[portal.infrastructure.models.columns]
-cost = "Cost"
-latency = "Latență"
-load = "Încărcare"
-model = "Model"
-status = "Stare"
-type = "Tip"
-version = "Versiune"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/apel"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Modele active"
-avgLatency = "Latență medie"
-included = "Inclus"
-monthlySpend = "Cheltuială lunară pentru modele"
-
-[portal.infrastructure.models.routing]
-empty = "Nu sunt configurate reguli de rutare."
-heading = "Reguli de rutare"
-sub = "Ce model gestionează fiecare operațiune. Valoarea implicită se aplică atunci când nu se potrivește nicio regulă mai restrânsă."
-subLocked = "Rutați operațiunile către modele specifice — disponibil în planurile plătite."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Actualizați la Pro pentru a controla ce model gestionează fiecare operațiune și tip de document."
-title = "Rutarea modelelor este o funcție plătită"
-
-[portal.infrastructure.models.routingColumns]
-default = "Implicit"
-docType = "Tip document"
-modelForAria = "Model pentru {{operation}}"
-operation = "Operațiune"
-routedTo = "Rutat către"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Clasificare"
-extraction = "Extragere"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradată"
-down = "Căzută"
-healthy = "Sănătoasă"
-
-[portal.infrastructure.security.access.byok]
-description = "Furnizați o cheie din propriul KMS. Stirling criptează cu ea, dar poate încă citi."
-label = "Aduceți propria cheie (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Cheile nu părăsesc niciodată KMS-ul dvs. Stirling deține doar ciphertext."
-label = "Păstrați propria cheie (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling gestionează cheile de criptare. Cel mai simplu — zero operațiuni cu chei din partea dvs."
-label = "Chei deținute de Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Politică de acces la documente"
-subheading = "Controlează cine poate decripta documentele procesate în repaus."
-
-[portal.infrastructure.security.attestations]
-heading = "Atestări de conformitate"
-noReport = "Niciun raport disponibil"
-subheading = "Postură de audit cadru cu cadru, cu rapoarte disponibile pentru controalele atestate."
-viewReport = "Vizualizați raportul →"
-
-[portal.infrastructure.security.compliance]
-heading = "Conformitate"
-subheading = "Atestări și certificări care acoperă platforma Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Configurația de securitate a spațiului dvs. de lucru va apărea aici."
-title = "Postura de securitate indisponibilă"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Cu HYOK, cheile de criptare nu părăsesc niciodată KMS-ul dvs. Stirling stochează și procesează doar ciphertext pe care îl puteți revoca oricând."
-title = "Stirling nu poate decripta documentele dvs."
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nu sunt configurate intervale IP — toate IP-urile sunt permise."
-heading = "Listă de permisiuni IP"
-sub = "Accesul API este restricționat la aceste intervale CIDR."
-subLocked = "Restricționați accesul API la intervale IP cunoscute — disponibil în planurile plătite."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Actualizați la Pro pentru a restricționa accesul API la anumite rețele."
-title = "Lista de permisiuni IP este o funcție plătită"
-
-[portal.infrastructure.security.ipColumns]
-added = "Adăugat"
-addedBy = "Adăugat de"
-cidr = "CIDR"
-label = "Etichetă"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritm"
-heading = "Gestionarea cheilor de criptare"
-keyId = "Identificator cheie"
-lastRotated = "Rotită ultima dată"
-rotateKey = "Rotiți cheia"
-rotationPolicy = "Politică de rotație"
-subheading = "Custodia cheilor care criptează documentele în repaus — cine poate decripta și cum se rotesc cheile."
-
-[portal.infrastructure.security.managedBanner]
-description = "Custodia bring-your-own-key (BYOK) și hold-your-own-key (HYOK) este disponibilă în Enterprise. Actualizați pentru a furniza chei din propriul KMS."
-title = "Cheile sunt gestionate de Stirling în planul dvs."
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asia Pacific"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · limită de date GDPR"
-label = "Uniunea Europeană"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Statele Unite"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Rezidența datelor"
-subheading = "Unde sunt stocate și procesate documentele."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} utilizat"
-
-[portal.infrastructure.storage.empty]
-description = "Stocarea conectată și utilizarea apar aici."
-title = "Nu este configurată nicio stocare"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Activ"
-activeRange = "0–{{value}}d"
-archived = "Arhivat"
-coldStorage = "stocare rece"
-deleted = "Șters"
-never = "niciodată"
-purged = "epurat"
-
-[portal.infrastructure.storage.providers]
-connect = "Conectați"
-connected = "Conectat"
-heading = "Furnizori conectați"
-subheading = "Unde sunt scrise artefactele procesate."
-
-[portal.infrastructure.storage.retention]
-heading = "Păstrare"
-subheading = "Cât timp sunt păstrate artefactele înainte de ștergerea prin ciclu de viață."
-windowLabel = "Fereastră implicită de păstrare"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} zi"
-days_other = "{{count}} zile"
-never = "Nu ștergeți niciodată"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Utilizare totală"
-progressLabel = "Stocare utilizată"
-subheading = "Stocare consumată pe toți furnizorii conectați."
-
 [portal.infrastructure.tabs]
 apiKeys = "Chei API"
 audit = "Jurnale de audit"
@@ -7715,11 +7657,9 @@ security = "Securitate"
 storage = "Stocare"
 
 [portal.integrations]
-addAnother = "Adăugați alta"
 availableHeading = "Disponibile"
 comingSoonHeading = "În curând"
 connect = "Conectați"
-connectedHeading = "Conectate"
 connectionCount_one = "{{count}} conexiune"
 connectionCount_other = "{{count}} conexiuni"
 customApi = "API personalizat"
@@ -7737,6 +7677,10 @@ security = "Securitate"
 signing = "Semnare"
 storage = "Stocare"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Conectat"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrări"
 pipelines = "Pipeline-uri"
 policies = "Politici"
 procurement = "Achiziții"
-settings = "Setări"
 sources = "Surse"
 usage = "Utilizare și facturare"
 users = "Utilizatori"
@@ -7784,7 +7727,7 @@ title = "Pipeline-uri"
 newPipeline = "Pipeline nou"
 
 [portal.pipelines.builder]
-addStep = "Adăugați instrument"
+activate = "Activate"
 back = "Înapoi la pipeline-uri"
 cannotFollow = "Nu poate prelua {{produced}}"
 chooseAccount = "Alegeți un cont"
@@ -7792,28 +7735,38 @@ chooseDestination = "Alegeți o destinație"
 chooseOperation = "Alegeți ce face acest pas"
 chooseSource = "Alegeți o sursă"
 discard = "Renunțați la modificări"
-enabled = "Activat"
 inputs = "Intrare"
 inputSource = "Sursă de intrare"
 inputTrigger = "Declanșator"
 keepEditing = "Continuați editarea"
+moreActions = "More actions"
 needsConfiguring = "Necesită configurare"
-needsUpload = "Necesită un fișier încărcat"
-noSources = "Nu există surse conectate încă. Creați una pentru a o folosi ca intrare."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Niciun instrument nu corespunde căutării dvs."
-pipelineSettings = "Setări pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Căutați instrumente"
-selectToolBody = "Adăugați un instrument pentru a construi pipeline-ul."
-selectToolTitle = "Nu există încă instrumente"
 sendToSystem = "Trimiteți către alt sistem"
 stepsIncompatible = "Acești pași nu pot rula pe ceea ce produce pasul lor anterior: {{tools}}."
 stepsNeedSetup = "Acești pași necesită încă configurare înainte de salvare: {{tools}}."
-toolSettings = "Setări instrument"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Operațiune nerecunoscută, păstrată ca atare."
 unsavedBody = "Aveți modificări nesalvate. Salvați-le înainte de a pleca sau renunțați la ele?"
 unsavedTitle = "Modificări nesalvate"
-uploadUnsupported = "Fișierele încărcate nu sunt încă acceptate în pipeline-uri, deci acești pași nu pot fi salvați: {{tools}}."
 usesDefaults = "Rulează cu setările implicite"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Combină fiecare fișier din pasul anterior"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nu se poate verifica ce acceptă acest pas"
 
 [portal.pipelines.composer]
 addTool = "Adăugați instrument"
-cancel = "Anulați"
-chainEmpty = "Adăugați un instrument pentru a începe să construiți pipeline-ul."
 create = "Creați pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Afișarea acestor parametri ai instrumentului pentru editare nu este încă acceptată."
-moveDown = "Mutați în jos"
-moveUp = "Mutați în sus"
+editSource = "Edit source"
 name = "Nume"
 namePlaceholder = "de ex. Scanare de redactare"
 noToolSettings = "Acest instrument nu are setări configurabile."
-operations_one = "Operațiune ({{count}})"
-operations_other = "Operațiuni ({{count}})"
 output = "Ieșire"
-removeStep = "Eliminați operațiunea"
 save = "Salvați modificările"
 scheduleEvery = "Rulați la fiecare"
-sources = "Surse"
-sourcesLoading = "Se încarcă sursele..."
 trigger = "Declanșator"
 triggerManual = "Doar manual"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "zile"
 hours = "ore"
 minutes = "minute"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Ștergeți „{{name}}”? Această acțiune nu poate fi anulată."
 cancel = "Anulați"
@@ -7867,6 +7825,37 @@ connectSource = "Conectați o sursă"
 description = "Creați primul pipeline: alegeți sursele peste care rulează, înlănțuiți operațiunile și alegeți unde ajunge ieșirea."
 title = "Nu există încă pipeline-uri"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Active"
 paused = "În pauză"
@@ -7879,7 +7868,6 @@ completed_one = "Rulare finalizată."
 completed_other = "Toate cele {{count}} rulări au fost finalizate."
 empty = "Nimic de rulat: sursele nu au avut documente de procesat."
 failed = "Rularea a eșuat: {{error}}"
-historyCleared = "Istoric șters. Următoarea rulare reprocesează tot ce se află în prezent în surse."
 inFlight = "Nimic nou de rulat: documentele sunt încă procesate dintr-o rulare anterioară."
 parked_one = "Nimic de rulat: {{count}} document a eșuat anterior și este parcat. Remediați cauza, apoi ștergeți istoricul pentru a-l reîncerca."
 parked_other = "Nimic de rulat: {{count}} documente au eșuat anterior și sunt parcate. Remediați cauza, apoi ștergeți istoricul pentru a le reîncerca."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Surse"
 status = "Stare"
 steps = "Pași"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Monitorizare folder"
@@ -8209,6 +8198,24 @@ label = "Atașați la o problemă Jira"
 description = "Trimite documentul procesat ca atașament."
 label = "Trimiteți documentul prin email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Scrie documentul procesat într-un folder."
 label = "Încărcați în Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Limită atinsă"
 subtitle = "Trialul tău gratuit rulează până la {{date}}. Nu este necesar cardul."
 title = "Trial Enterprise"
 
-[portal.search]
-ariaLabel = "Caută"
-placeholder = "Caută în Stirling — endpoint-uri, pipeline-uri, documente…"
-
-[portal.search.empty]
-noActionsDescription = "Acțiunile rapide vor apărea aici după ce devin disponibile."
-noActionsTitle = "Nicio acțiune rapidă"
-noMatches = "Nicio potrivire pentru \"{{query}}\""
-noMatchesDescription = "Încearcă un alt cuvânt cheie sau răsfoiește catalogul."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Anulează"
 confirm = "Șterge"
 title = "Ștergi sursa?"
 
-[portal.sources.empty]
-description = "Conectează un folder (și, în curând, stocare cloud) astfel încât politicile tale să aibă de unde prelua documente."
-title = "Încă nu există surse conectate"
-
 [portal.sources.kpi]
 inUse = "În uz"
 total = "Conexiuni"
@@ -8785,6 +8778,7 @@ unused = "Nefolosit"
 documents = "Documente"
 source = "Sursă"
 status = "Stare"
+type = "Type"
 usedBy = "Politici"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politici și confidențialitate"
 [settings.preferences]
 title = "Preferințe"
 
-[settings.search]
-placeholder = "Căutați în paginile de setări..."
-
 [settings.security]
 description = "Actualizați parola pentru a vă menține contul în siguranță."
 title = "Securitate"
@@ -10128,6 +10119,7 @@ last = "Ultima pagină"
 maintainRatio = "Comută menținerea raportului de aspect"
 next = "Pagina următoare"
 noSavedSigs = "Nu s-au găsit semnături salvate"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Semnături personale"
 previous = "Pagina anterioară"
 redo = "Refă"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Eliminarea fundalului a eșuat"
 hint = "Încărcați o imagine PNG sau JPG a semnăturii dvs."
 label = "Încarcă imaginea semnăturii"
 placeholder = "Selectați fișierul imagine"
+previewAlt = "Current image signature"
 processing = "Se procesează imaginea..."
 removeBackground = "Elimină fundalul alb (transparentizează)"
 
@@ -10179,6 +10172,17 @@ saved = "Selectează o semnătură salvată mai sus, apoi fă clic oriunde pe PD
 text = "După ce introduceți numele mai sus, faceți clic oriunde pe PDF pentru a plasa semnătura."
 title = "Cum să adăugați semnătura"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Mută semnătura"
 pause = "Pauză plasare"
@@ -10625,6 +10629,23 @@ title = "Încărcați pe server"
 updateButton = "Actualizați pe server"
 uploadButton = "Încărcați pe server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Înapoi"
 pdfTools = "Instrumente PDF"
 placeholder = "Alegeți un instrument pentru a începe"
 premiumFeature = "Funcție premium:"
-searchTools = "Caută instrumente"
 toolsHeader = "Instrumente"
 viewAllTools = "Vedeți toate instrumentele"
 
@@ -10822,6 +10842,9 @@ removal = "Eliminare"
 signing = "Semnare"
 verification = "Verificare"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nu s-au găsit instrumente"
 noTools = "Niciun instrument disponibil"
@@ -10979,6 +11002,13 @@ approver = "Aprobă politica"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Anulați invitația către {{email}}? Nu va putea să se alăture cu linkul actual."
 cancelInviteTitle = "Anulează invitația"
@@ -10998,10 +11028,8 @@ title = "Încă nu există membri"
 addToTeam = "Adaugă în echipă"
 guestCount = "{{count}} invitat"
 guests = "Invitați"
-guestsDesc = "Colaboratori externi, limitați la ce ai partajat. Doar Editor."
 ledBy = "condusă de {{owner}}"
 org = "Organizație"
-orgDesc = "Proprietari cu autoritate la nivel de org și aprobare de politici"
 owners = "{{count}} proprietar"
 team = "Echipa {{name}}"
 teamMeta = "{{count}} persoane"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Invitat de {{who}}"
 cancel = "Anulează"
-count = "{{count}} în așteptare"
-desc = "Persoanele invitate care nu s-au alăturat încă. Ocupă un loc până când acceptă."
 expiresInDays_one = "Expiră peste {{count}} zi"
 expiresInDays_other = "Expiră peste {{count}} zile"
 expiresToday = "Expiră astăzi"
 title = "Invitații în așteptare"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Ceva nu a mers bine la conectarea cu backend-ul sau nu aveți acces. Încercați din nou."
 title = "Nu s-au putut încărca membrii"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Caută în atașamente"
 title = "Atașamente"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Titlul marcajului"
 bookmarkTitleRequired = "Titlul marcajului este obligatoriu"
 closeSidebar = "Închide bara laterală a marcajelor"
 collapseAll = "Restrânge toate marcajele"
+empty = "No bookmarks in this document"
 expandAll = "Extinde toate marcajele"
 searchPlaceholder = "Caută marcaje"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Adăugați comentariu"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Localizați în document"
 moreActions = "Mai multe acțiuni"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Pagina {{page}}"
 placingHint = "Faceți clic pe o pagină pentru a plasa… (anulare)"
 removeCommentOnly = "Eliminați doar comentariul"
 saveReply = "Salvați răspunsul"
+searchPlaceholder = "Search comments"
 title = "Comentarii"
 typeComment = "Comentariu"
 typeInsertText = "Inserare text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Ai modificări nesalvate"
 closeSidebar = "Închide bara laterală a straturilor"
 hideAll = "Ascunde toate straturile"
 showAll = "Afișează toate straturile"
+title = "Layers"
 
 [viewer.link]
 delete = "Ștergeți linkul"
@@ -11646,6 +11682,7 @@ exitRedaction = "Ieși din modul de redactare"
 exportAll = "Exportă PDF"
 exportSelected = "Exportă paginile selectate"
 formFill = "Completează formularul"
+hideToolbar = "Hide toolbar"
 multiTool = "Instrument multiplu"
 panMode = "Mod panoramare"
 print = "Tipărește PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Selectează tot"
 selectByNumber = "Selectează după numerele paginilor"
 selectLanguage = "Selectează limba"
 share = "Partajează"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Comută vizibilitatea adnotărilor"
 toggleAttachments = "Comută atașamentele"
 toggleBookmarks = "Comută semnele de carte"
diff --git a/frontend/editor/public/locales/ru-RU/translation.toml b/frontend/editor/public/locales/ru-RU/translation.toml
index 71926b7be7..9f6321bc64 100644
--- a/frontend/editor/public/locales/ru-RU/translation.toml
+++ b/frontend/editor/public/locales/ru-RU/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Алфавит"
 apply = "Применить"
 applyAndContinue = "Применить и продолжить"
-areYouSure = "Вы уверены, что хотите уйти?"
 back = "Назад"
 black = "Черный"
 blue = "Синий"
@@ -106,6 +105,7 @@ undoSuccess = "Операция успешно отменена"
 unknown = "Неизвестно"
 unpin = "Открепить файл (заменить после выполнения инструмента)"
 unsavedChanges = "У вас есть несохранённые изменения в вашем PDF. Что вы хотите сделать?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Несохранённые изменения"
 unsupported = "Не поддерживается"
 username = "Имя пользователя"
@@ -1879,6 +1879,9 @@ width = "Ширина"
 [app]
 description = "Бесплатная альтернатива Adobe Acrobat (10M+ загрузок)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Преобразовать в PDF/A-3b"
 convertToPdfA3bDescription = "Создаёт архивный PDF со встроенными вложениями"
@@ -2933,12 +2936,16 @@ text = "Чтобы сделать эти разрешения неизменяе
 [chat.actions]
 copy = "Копировать сообщение"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Параметры агента Stirling"
+assistant = "AI Assistant"
 clearChat = "Очистить чат"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Эта операция использует ваши облачны
 tooltip = "Выбрать цвет с экрана"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Выберите цвет"
 
 [common]
+actions = "Actions"
 back = "Назад"
 cancel = "Отмена"
 close = "Закрыть"
+codeSample = "Code sample"
 collapse = "Свернуть"
 confirm = "Подтвердить"
 continue = "Продолжить"
 copied = "Скопировано!"
 copy = "Копировать"
 done = "Готово"
+enterValue = "Enter value"
 error = "Ошибка"
 expand = "Развернуть"
 loading = "Загрузка..."
 next = "Далее"
+open = "Open"
 preview = "Предпросмотр"
 previous = "Предыдущий"
 refresh = "Обновить"
 remaining = "Осталось"
 retry = "Повторить"
 save = "Сохранить"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Очистить выбранное"
@@ -3185,6 +3199,7 @@ title = "Метод сжатия"
 [compress.settings]
 desiredSize = "Желаемый размер файла"
 desiredSizePlaceholder = "Введите размер"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Сжатие — простой способ уменьшить размер файла. Выберите «Размер файла», чтобы указать целевой размер, а мы подберём качество. Выберите «Качество», чтобы задать силу сжатия вручную."
@@ -3387,6 +3402,24 @@ pdfOptions = "Параметры PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Сначала выберите исходный формат"
 settings = "Настройки"
 single = "Один"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Поиск..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Изменить"
@@ -3824,11 +3861,13 @@ shareSelected = "Поделиться выбранными"
 sharing = "Общий доступ"
 showAll = "Показать все"
 showHistory = "Показать историю"
+sortBy = "Sort files"
 sortByDate = "Сортировать по дате"
 sortByName = "Сортировать по имени"
 sortBySize = "Сортировать по размеру"
 storage = "Хранилище"
 storageState = "Хранилище"
+storageUsed = "Storage used"
 synced = "Синхронизировано"
 title = "Загрузить PDF-файлы"
 toolChain = "Применённые инструменты"
@@ -3874,8 +3913,12 @@ addFiles = "Добавить файлы"
 addingFiles = "Добавление файлов…"
 collapse = "Свернуть боковую панель"
 customizeGroups = "Настроить группы"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Откройте файлы, чтобы начать"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Развернуть боковую панель"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive не настроен"
@@ -3888,15 +3931,17 @@ openFromComputer = "Открыть с компьютера"
 openSettings = "Открыть настройки"
 other = "Другое"
 recent = "Недавние"
-search = "Поиск"
-searchPlaceholder = "Поиск файлов..."
 viewAll = "Показать все {{count}} файлов"
 
 [fileSidebar.fileItem]
 closeViewer = "Закрыть просмотрщик"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Открыть в просмотрщике"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Сбросить к значениям по умолчанию"
 subtitle = "Группируйте файлы по родительским категориям. Добавляйте существующие или новые метки в категорию, переименовывайте её или создавайте свою. Файлы, не входящие ни в одну из ваших категорий, отображаются в разделе «Другое»."
 title = "Категории боковой панели"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Добавить в рабочую область"
 addToWorkspaceCount = "Добавить {{count}} в рабочую область"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Назад к Моим файлам"
 breadcrumbs = "Путь к папке"
 cancel = "Отмена"
 classification = "Классификация"
-clearSearch = "Очистить поиск"
 clearSelection = "Очистить выбор"
 closeDetails = "Закрыть сведения"
 create = "Создать"
@@ -3950,6 +4002,7 @@ downloadAll = "Скачать все"
 downloadVersion = "Скачать эту версию"
 dropOverlay = "Перетащите файлы для загрузки"
 dropOverlaySub = "Файлы сначала попадают в Локальные. Используйте «Переместить в» или «Сохранить в облако», чтобы разместить их в папке."
+duplicate = "Duplicate"
 file = "Файл"
 fileInfo = "File info"
 fileMenu = "Действия с файлом"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Изменить размер дерева папок (ст
 save = "Сохранить"
 saveToServer = "Сохранить на сервер"
 saveToServerDisabledHint = "Сохранение на сервер не включено на этом сервере. Попросите администратора включить его."
-search = "Поиск"
-searchPlaceholder = "Искать в этой папке и подпапках"
 selectAll = "Выбрать всё"
 selectAllHint = "Нажмите, чтобы выбрать всё. Совет: удерживайте Ctrl (или Cmd), чтобы добавлять файлы по одному, Shift — для выбора диапазона."
 selectedCount = "Выбрано: {{count}}"
@@ -4044,6 +4095,10 @@ title = "Пока нет облачных файлов"
 hint = "Файлы, сохранённые без загрузки, остаются здесь. Перетащите файл, чтобы добавить его."
 title = "Нет локальных файлов"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Здесь будут отображаться файлы, которые вы открывали или редактировали."
 title = "Пока ничего не изменено"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Не удалось удалить папку."
 deleteFolderFailedDetail = "Не удалось удалить папку: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Не удалось обновить оформление папки."
 folderAppearanceFailedDetail = "Не удалось обновить оформление папки: {{message}}"
 moveFilesFailed = "Не удалось переместить файлы."
@@ -4113,6 +4170,11 @@ localHint = "Хранится только в этом браузере"
 shared = "Общий доступ"
 sharedHint = "Предоставлен по ссылке"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Сначала старые"
 modifiedDesc = "Сначала новые"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "В хранилище нет файлов. Сначал
 open = "Открыть"
 openFile = "Открыть файл"
 openFiles = "Открыть файлы"
+selectFile = "Select {{name}}"
 selectFromStorage = "Выбрать из хранилища"
 upload = "Загрузить"
 uploadFile = "Загрузить файл"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Все сохранено"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Не удалось извлечь CSV"
 extractXlsxError = "Не удалось извлечь XLSX"
+filled = "filled"
 flattenAfterFilling = "Сплющить после заполнения"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "обяз."
 requiredFieldsError = "Заполните все обязательные поля"
 rescanFields = "Пересканировать поля"
@@ -4795,9 +4863,6 @@ title = "Изображение в PDF"
 [imageToPdf]
 tags = "конвертация,изображение,jpg,картинка,фото"
 
-[infoBanner]
-dismiss = "Закрыть"
-
 [invite]
 acceptError = "Не удалось создать учетную запись"
 accountFor = "Создание учетной записи для"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Загрузка выполнена!"
 uploadSuccessMessage = "Ваши изображения переданы."
 validating = "Проверка сеанса..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Сканируйте для загрузки фото. Изображения автоматически преобразуются в PDF."
 descriptionNoConvert = "Сканируйте, чтобы загрузить фото с мобильного устройства."
@@ -4997,8 +5090,13 @@ title = "Загрузка с мобильного"
 tags = "Мультиинструмент,Многооперационный,UI,перетаскивание,клиентская часть,интерактивный"
 title = "Мультиинструмент PDF"
 
-[navbar]
-search = "Поиск"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Аутентификация не выполнена. Закройте окно и попробуйте снова."
@@ -5127,6 +5225,7 @@ activeFiles = "Вид <strong>Активные файлы</strong> показы
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Закрыть"
 cropSettings = "Теперь, когда мы выбрали файл для обрезки, можно настроить инструмент «Обрезка», чтобы выбрать область, до которой нужно обрезать PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Щелчок по файлу выбирает его для обработки. Можно выбрать несколько файлов для пакетных операций."
 fileReplacement = "Измененный файл автоматически заменит исходный файл в Рабочей области, что позволит легко прогнать его через другие инструменты."
 filesButton = "Кнопка <strong>Файлы</strong> на панели быстрого доступа позволяет загружать PDF, с которыми будут работать инструменты."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF в PDF/A"
 tags = "архив,долгосрочный,стандарт,конвертация,хранение,сохранение"
 title = "PDF в PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "печать,стандарт,конвертация,производство,допечатная подготовка,архив"
 title = "PDF в PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 кредитов"
 xsmall = "100 кредитов"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Выберите план, подходящий вашим потребностям"
 title = "Доступные планы"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Месячный лимит расходов достигнут"
 title = "Не удалось открыть портал Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "из {{allowance}} бесплатных PDF использовано"
 capSuffix_other = "из {{allowance}} бесплатных PDF использовано"
 eyebrow = "Пробный период Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Отправляйте документ или уведомление по Email, когда выполняется политика."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Сохраняйте обработанные документы в Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Официальные SDK"
 beta = "Beta"
 deprecated = "Устарело"
 
-[portal.docs.search]
-empty = "Подходящих документов нет"
-placeholder = "Искать в документации"
-results = "{{count}} результатов"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Встроенные именованные возможности, которые ваш агент вызывает как единый инструмент. Каждый skill — детерминированная цепочка операций с привязанными evals."
@@ -7180,11 +7309,11 @@ editorAction = "Редактор"
 empty = "Нет документов, соответствующих этому фильтру."
 rowActions = "Действия со строкой"
 sensitiveLabel = "Конфиденциально"
-sensitiveTitle = "Конфиденциально — требуется доступ"
 
 [portal.documents.table.columns]
 action = "Pipeline / Действие"
 document = "Документ"
+labels = "Labels"
 product = "Продукт"
 status = "Статус"
 time = "Время"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Последний сеанс"
 region = "Регион"
 status = "Статус"
+target = "Target"
 version = "Версия"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "В этом представлении произошла неп
 retry = "Попробовать еще раз"
 title = "На этой странице что-то пошло не так"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Назад"
 body = "Скачайте настольное приложение или самостоятельно разместите сервер."
@@ -7380,11 +7560,6 @@ cancel = "Отмена"
 confirm = "Отозвать ключ"
 title = "Отозвать API ключ"
 
-[portal.infrastructure.attestationLabel]
-attested = "Подтверждено"
-inScope = "В области действия"
-notApplicable = "Н/Д"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Фильтровать события аудита по категории"
 heading = "Журналы аудита"
@@ -7456,11 +7631,6 @@ info = "Информация"
 success = "Успешно"
 warning = "Предупреждение"
 
-[portal.infrastructure.certLabel]
-certified = "Сертифицировано"
-inProgress = "В процессе"
-notStarted = "Не начато"
-
 [portal.infrastructure.createKey]
 cancel = "Отмена"
 createKey = "Создать ключ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Скопируйте этот секрет сейчас — 
 title = "Создать ключ API"
 titleCreated = "Ключ создан"
 
-[portal.infrastructure.deployLabel]
-live = "Работает"
-queued = "В очереди"
-rolledBack = "Откат выполнен"
-rolling = "Развертывается"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} мс"
-throughputValue = "{{value}}/мин"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Развернул"
-environment = "Среда"
-product = "Продукт"
-status = "Статус"
-version = "Версия"
-when = "Когда"
-
-[portal.infrastructure.deployments.recent]
-heading = "Недавние развертывания"
-subheading = "Последние выпуски по продуктам и средам."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Экземпляры"
-latency = "Задержка"
-load = "Нагрузка"
-p99 = "P99"
-region = "Регион"
-status = "Статус"
-throughput = "Пропускная способность"
-uptime = "Uptime"
-version = "Версия"
-
-[portal.infrastructure.deployments.regions]
-heading = "Регионы"
-subheading = "Текущее состояние каждого развернутого региона Stirling — задержка, нагрузка и версия выпуска."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Развернутые регионы появятся здесь после подготовки вашего рабочего пространства."
-title = "Нет развернутых регионов"
-
 [portal.infrastructure.keyLabel]
 active = "Активен"
 revoked = "Отозван"
 
-[portal.infrastructure.modelLabel]
-active = "Активна"
-degraded = "Снижена производительность"
-disabled = "Отключена"
-
-[portal.infrastructure.models]
-heading = "Модели"
-msValue = "{{value}} мс"
-subheading = "Каталог моделей и маршрутизация, обеспечивающие обработку документов во всем вашем рабочем пространстве."
-
-[portal.infrastructure.models.byom]
-description = "Зарегистрируйте локальную или самостоятельно размещенную модель и закрепите ее за регионом для обработки с учетом резидентности данных."
-title = "Используйте свою модель"
-
-[portal.infrastructure.models.catalogue]
-heading = "Каталог"
-sub = "Управляемые модели, доступные вашему рабочему пространству, с текущей задержкой и стоимостью."
-subEnterprise = "Управляемые, собственные и локальные модели — с возможностью закрепления по регионам."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Модели из каталога вашего рабочего пространства появятся здесь."
-title = "Нет доступных моделей"
-
-[portal.infrastructure.models.columns]
-cost = "Стоимость"
-latency = "Задержка"
-load = "Нагрузка"
-model = "Модель"
-status = "Статус"
-type = "Тип"
-version = "Версия"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/вызов"
-perThousand = "{{price}}/1 тыс."
-
-[portal.infrastructure.models.metrics]
-activeModels = "Активные модели"
-avgLatency = "Средняя задержка"
-included = "Включено"
-monthlySpend = "Ежемесячные расходы на модели"
-
-[portal.infrastructure.models.routing]
-empty = "Правила маршрутизации не настроены."
-heading = "Правила маршрутизации"
-sub = "Какая модель обрабатывает каждую операцию. Значение по умолчанию применяется, когда нет более узкого подходящего правила."
-subLocked = "Направляйте операции к определенным моделям — доступно на платных планах."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Перейдите на Pro, чтобы управлять тем, какая модель обрабатывает каждую операцию и тип документа."
-title = "Маршрутизация моделей — платная функция"
-
-[portal.infrastructure.models.routingColumns]
-default = "По умолчанию"
-docType = "Тип документа"
-modelForAria = "Модель для {{operation}}"
-operation = "Операция"
-routedTo = "Направлено в"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Классификация"
-extraction = "Извлечение"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Снижена производительность"
-down = "Недоступен"
-healthy = "Исправен"
-
-[portal.infrastructure.security.access.byok]
-description = "Предоставьте ключ из собственного KMS. Stirling шифрует им, но все еще может читать."
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ключи никогда не покидают ваш KMS. Stirling хранит только ciphertext."
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling управляет ключами шифрования. Самый простой вариант — нулевые операции с ключами с вашей стороны."
-label = "Ключи хранятся в Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Политика доступа к документам"
-subheading = "Управляет тем, кто может расшифровывать обработанные документы в состоянии покоя."
-
-[portal.infrastructure.security.attestations]
-heading = "Подтверждения соответствия"
-noReport = "Отчет недоступен"
-subheading = "Состояние аудита по каждому фреймворку, с отчетами по подтвержденным контролям."
-viewReport = "Просмотреть отчет →"
-
-[portal.infrastructure.security.compliance]
-heading = "Соответствие требованиям"
-subheading = "Подтверждения и сертификации, охватывающие платформу Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Конфигурация безопасности вашего рабочего пространства появится здесь."
-title = "Состояние безопасности недоступно"
-
-[portal.infrastructure.security.hyokBanner]
-description = "С HYOK ключи шифрования никогда не покидают ваш KMS. Stirling хранит и обрабатывает только ciphertext, который вы можете отозвать в любое время."
-title = "Stirling не может расшифровать ваши документы"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Диапазоны IP не настроены — разрешены все IP."
-heading = "IP allowlist"
-sub = "Доступ к API ограничен этими диапазонами CIDR."
-subLocked = "Ограничьте доступ к API известными диапазонами IP — доступно на платных планах."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Перейдите на Pro, чтобы ограничить доступ к API определенными сетями."
-title = "IP allowlisting — платная функция"
-
-[portal.infrastructure.security.ipColumns]
-added = "Добавлено"
-addedBy = "Добавил"
-cidr = "CIDR"
-label = "Метка"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Алгоритм"
-heading = "Управление ключами шифрования"
-keyId = "Идентификатор ключа"
-lastRotated = "Последняя смена"
-rotateKey = "Сменить ключ"
-rotationPolicy = "Политика смены"
-subheading = "Хранение ключей, шифрующих документы в состоянии покоя — кто может расшифровать и как меняются ключи."
-
-[portal.infrastructure.security.managedBanner]
-description = "Хранение ключей Bring-your-own-key (BYOK) и hold-your-own-key (HYOK) доступно в Enterprise. Улучшите план, чтобы предоставлять ключи из собственного KMS."
-title = "На вашем плане ключами управляет Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Азиатско-Тихоокеанский регион"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · граница данных GDPR"
-label = "Европейский союз"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "США"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Резидентность данных"
-subheading = "Где документы хранятся и обрабатываются."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "Использовано {{value}}"
-
-[portal.infrastructure.storage.empty]
-description = "Подключенное хранилище и использование появятся здесь."
-title = "Хранилище не настроено"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Активно"
-activeRange = "0–{{value}}d"
-archived = "В архиве"
-coldStorage = "холодное хранилище"
-deleted = "Удалено"
-never = "никогда"
-purged = "очищено"
-
-[portal.infrastructure.storage.providers]
-connect = "Подключить"
-connected = "Подключено"
-heading = "Подключенные провайдеры"
-subheading = "Куда записываются обработанные артефакты."
-
-[portal.infrastructure.storage.retention]
-heading = "Хранение"
-subheading = "Как долго артефакты хранятся перед удалением по жизненному циклу."
-windowLabel = "Окно хранения по умолчанию"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} день"
-days_other = "{{count}} дней"
-never = "Никогда не удалять"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Общее использование"
-progressLabel = "Использовано хранилища"
-subheading = "Хранилище, использованное во всех подключенных провайдерах."
-
 [portal.infrastructure.tabs]
 apiKeys = "Ключи API"
 audit = "Журналы аудита"
@@ -7715,11 +7657,9 @@ security = "Безопасность"
 storage = "Хранилище"
 
 [portal.integrations]
-addAnother = "Добавить еще"
 availableHeading = "Доступно"
 comingSoonHeading = "Скоро"
 connect = "Подключить"
-connectedHeading = "Подключено"
 connectionCount_one = "{{count}} подключение"
 connectionCount_other = "{{count}} подключений"
 customApi = "Пользовательский API"
@@ -7737,6 +7677,10 @@ security = "Безопасность"
 signing = "Подписание"
 storage = "Хранилище"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Подключено"
 
@@ -7767,7 +7711,6 @@ integrations = "Интеграции"
 pipelines = "Pipelines"
 policies = "Политики"
 procurement = "Закупки"
-settings = "Настройки"
 sources = "Источники"
 usage = "Использование и оплата"
 users = "Пользователи"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Новый pipeline"
 
 [portal.pipelines.builder]
-addStep = "Добавить инструмент"
+activate = "Activate"
 back = "Назад к pipelines"
 cannotFollow = "Не удается принять {{produced}}"
 chooseAccount = "Выберите учетную запись"
@@ -7792,28 +7735,38 @@ chooseDestination = "Выберите место назначения"
 chooseOperation = "Выберите, что делает этот шаг"
 chooseSource = "Выберите источник"
 discard = "Отменить изменения"
-enabled = "Включено"
 inputs = "Ввод"
 inputSource = "Источник ввода"
 inputTrigger = "Триггер"
 keepEditing = "Продолжить редактирование"
+moreActions = "More actions"
 needsConfiguring = "Требуется настройка"
-needsUpload = "Требуется загруженный файл"
-noSources = "Источники еще не подключены. Создайте источник, чтобы использовать его как ввод."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Нет инструментов, соответствующих вашему поиску."
-pipelineSettings = "Настройки pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Искать инструменты"
-selectToolBody = "Добавьте инструмент, чтобы создать свой pipeline."
-selectToolTitle = "Инструментов пока нет"
 sendToSystem = "Отправить в другую систему"
 stepsIncompatible = "Эти шаги не могут работать с тем, что производит предыдущий шаг: {{tools}}."
 stepsNeedSetup = "Эти шаги все еще нужно настроить перед сохранением: {{tools}}."
-toolSettings = "Настройки инструмента"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Нераспознанная операция, сохранена как есть."
 unsavedBody = "У вас есть несохраненные изменения. Сохранить их перед выходом или отменить?"
 unsavedTitle = "Несохраненные изменения"
-uploadUnsupported = "Загруженные файлы пока не поддерживаются в pipelines, поэтому эти шаги нельзя сохранить: {{tools}}."
 usesDefaults = "Запускается с настройками по умолчанию"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Объединяет каждый файл из предыдущего шага"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Не удается проверить, что прин
 
 [portal.pipelines.composer]
 addTool = "Добавить инструмент"
-cancel = "Отмена"
-chainEmpty = "Добавьте инструмент, чтобы начать создавать свой pipeline."
 create = "Создать pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Отображение этих параметров инструмента для редактирования пока не поддерживается."
-moveDown = "Переместить вниз"
-moveUp = "Переместить вверх"
+editSource = "Edit source"
 name = "Имя"
 namePlaceholder = "например, проверка редактирования"
 noToolSettings = "У этого инструмента нет настраиваемых параметров."
-operations_one = "Операция ({{count}})"
-operations_other = "Операции ({{count}})"
 output = "Вывод"
-removeStep = "Удалить операцию"
 save = "Сохранить изменения"
 scheduleEvery = "Запускать каждые"
-sources = "Источники"
-sourcesLoading = "Загрузка источников..."
 trigger = "Триггер"
 triggerManual = "Только вручную"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "дней"
 hours = "часов"
 minutes = "минут"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Удалить \"{{name}}\"? Это действие нельзя отменить."
 cancel = "Отмена"
@@ -7867,6 +7825,37 @@ connectSource = "Подключить источник"
 description = "Создайте первый pipeline: выберите источники, над которыми он запускается, свяжите операции и выберите, куда отправлять вывод."
 title = "Pipelines пока нет"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Активные"
 paused = "Приостановленные"
@@ -7879,7 +7868,6 @@ completed_one = "Запуск завершен."
 completed_other = "Все {{count}} запусков завершены."
 empty = "Нечего запускать: в источниках не было документов для обработки."
 failed = "Запуск не удался: {{error}}"
-historyCleared = "История очищена. При следующем запуске будет заново обработано все, что сейчас находится в источниках."
 inFlight = "Нет ничего нового для запуска: документы все еще обрабатываются после предыдущего запуска."
 parked_one = "Нечего запускать: {{count}} документ ранее завершился с ошибкой и отложен. Устраните причину, затем очистите историю, чтобы повторить попытку."
 parked_other = "Нечего запускать: {{count}} документов ранее завершились с ошибкой и отложены. Устраните причину, затем очистите историю, чтобы повторить попытку."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Источники"
 status = "Статус"
 steps = "Шаги"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Отслеживание папки"
@@ -8209,6 +8198,24 @@ label = "Прикрепить к задаче Jira"
 description = "Отправляет обработанный документ как вложение."
 label = "Отправить документ по email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Записывает обработанный документ в папку."
 label = "Загрузить в Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Лимит исчерпан"
 subtitle = "Ваш бесплатный пробный период действует до {{date}}. Карта не требуется."
 title = "Пробный период Enterprise"
 
-[portal.search]
-ariaLabel = "Поиск"
-placeholder = "Поиск в Stirling — endpoints, конвейеры, документы…"
-
-[portal.search.empty]
-noActionsDescription = "Быстрые действия появятся здесь, когда станут доступны."
-noActionsTitle = "Нет быстрых действий"
-noMatches = "Нет совпадений для «{{query}}»"
-noMatchesDescription = "Попробуйте другое ключевое слово или просмотрите каталог."
-
 [portal.settings.groups]
 admin = "Администратор"
 
@@ -8743,10 +8740,6 @@ cancel = "Отмена"
 confirm = "Удалить"
 title = "Удалить источник?"
 
-[portal.sources.empty]
-description = "Подключите папку (а скоро и облачное хранилище), чтобы вашим политикам было откуда получать документы."
-title = "Источники пока не подключены"
-
 [portal.sources.kpi]
 inUse = "Используются"
 total = "Подключения"
@@ -8785,6 +8778,7 @@ unused = "Не используется"
 documents = "Документы"
 source = "Источник"
 status = "Статус"
+type = "Type"
 usedBy = "Политики"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Политики и конфиденциальность"
 [settings.preferences]
 title = "Настройки"
 
-[settings.search]
-placeholder = "Поиск по страницам настроек..."
-
 [settings.security]
 description = "Обновите пароль, чтобы защитить свою учётную запись."
 title = "Безопасность"
@@ -10128,6 +10119,7 @@ last = "Последняя страница"
 maintainRatio = "Переключить сохранение пропорций"
 next = "Следующая страница"
 noSavedSigs = "Сохраненные подписи не найдены"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Личные подписи"
 previous = "Предыдущая страница"
 redo = "Повторить"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Не удалось удалить фон"
 hint = "Загрузите PNG или JPG с вашей подписью"
 label = "Загрузить изображение подписи"
 placeholder = "Выберите файл изображения"
+previewAlt = "Current image signature"
 processing = "Обработка изображения..."
 removeBackground = "Удалить белый фон (сделать прозрачным)"
 
@@ -10179,6 +10172,17 @@ saved = "Выберите сохранённую подпись выше, зат
 text = "После ввода вашего имени выше щелкните в любом месте PDF, чтобы поставить подпись."
 title = "Как добавить подпись"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Переместить подпись"
 pause = "Пауза размещения"
@@ -10625,6 +10629,23 @@ title = "Загрузить на сервер"
 updateButton = "Обновить на сервере"
 uploadButton = "Загрузить на сервер"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Вернуться"
 pdfTools = "Инструменты PDF"
 placeholder = "Выберите инструмент, чтобы начать"
 premiumFeature = "Премиум‑функция:"
-searchTools = "Поиск инструментов"
 toolsHeader = "Инструменты"
 viewAllTools = "Показать все инструменты"
 
@@ -10822,6 +10842,9 @@ removal = "Удаление"
 signing = "Подписание"
 verification = "Проверка"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Инструменты не найдены"
 noTools = "Нет доступных инструментов"
@@ -10979,6 +11002,13 @@ approver = "Утверждает политику"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Отменить приглашение для {{email}}? Они не смогут присоединиться по текущей ссылке."
 cancelInviteTitle = "Отменить приглашение"
@@ -10998,10 +11028,8 @@ title = "Участников пока нет"
 addToTeam = "Добавить в команду"
 guestCount = "{{count}} гость"
 guests = "Гости"
-guestsDesc = "Внешние участники с доступом только к тому, чем вы поделились. Только Editor."
 ledBy = "руководит {{owner}}"
 org = "Организация"
-orgDesc = "Владельцы с полномочиями на уровне всей организации и утверждением политик"
 owners = "{{count}} владельцев"
 team = "Команда {{name}}"
 teamMeta = "{{count}} человек"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Пригласил(а) {{who}}"
 cancel = "Отменить"
-count = "{{count}} в ожидании"
-desc = "Приглашенные люди, которые еще не присоединились. Они занимают место, пока не примут приглашение."
 expiresInDays_one = "Истекает через {{count}} день"
 expiresInDays_other = "Истекает через {{count}} дн."
 expiresToday = "Истекает сегодня"
 title = "Ожидающие приглашения"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Что-то пошло не так при обращении к серверной части, или у вас нет доступа. Попробуйте снова."
 title = "Не удалось загрузить участников"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Поиск вложений"
 title = "Вложения"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Название закладки"
 bookmarkTitleRequired = "Название закладки обязательно"
 closeSidebar = "Закрыть боковую панель закладок"
 collapseAll = "Свернуть все закладки"
+empty = "No bookmarks in this document"
 expandAll = "Развернуть все закладки"
 searchPlaceholder = "Поиск закладок"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Добавить комментарий"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Найти в документе"
 moreActions = "Другие действия"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Страница {{page}}"
 placingHint = "Щёлкните по странице, чтобы разместить… (отмена)"
 removeCommentOnly = "Удалить только комментарий"
 saveReply = "Сохранить ответ"
+searchPlaceholder = "Search comments"
 title = "Комментарии"
 typeComment = "Комментарий"
 typeInsertText = "Вставить текст"
@@ -11290,6 +11325,7 @@ unsavedDesc = "У вас есть несохранённые изменения"
 closeSidebar = "Закрыть боковую панель слоев"
 hideAll = "Скрыть все слои"
 showAll = "Показать все слои"
+title = "Layers"
 
 [viewer.link]
 delete = "Удалить ссылку"
@@ -11646,6 +11682,7 @@ exitRedaction = "Выйти из режима скрытия данных"
 exportAll = "Экспортировать PDF"
 exportSelected = "Экспортировать выбранные страницы"
 formFill = "Заполнить форму"
+hideToolbar = "Hide toolbar"
 multiTool = "Мультиинструмент"
 panMode = "Режим перемещения"
 print = "Печать PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Выбрать все"
 selectByNumber = "Выбрать по номерам страниц"
 selectLanguage = "Выбрать язык"
 share = "Поделиться"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Показать/скрыть аннотации"
 toggleAttachments = "Показать/скрыть вложения"
 toggleBookmarks = "Показать/скрыть закладки"
diff --git a/frontend/editor/public/locales/sk-SK/translation.toml b/frontend/editor/public/locales/sk-SK/translation.toml
index 22d992b1b7..fc43937505 100644
--- a/frontend/editor/public/locales/sk-SK/translation.toml
+++ b/frontend/editor/public/locales/sk-SK/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Abeceda"
 apply = "Použiť"
 applyAndContinue = "Uložiť a odísť"
-areYouSure = "Naozaj chcete odísť?"
 back = "Späť"
 black = "Čierna"
 blue = "Modrá"
@@ -106,6 +105,7 @@ undoSuccess = "Operácia bola úspešne vrátená"
 unknown = "Neznáme"
 unpin = "Zrušiť pripnutie súboru (nahradiť po spustení nástroja)"
 unsavedChanges = "Máte neuložené zmeny v PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Neuložené zmeny"
 unsupported = "Nepodporované"
 username = "Používateľské meno"
@@ -1879,6 +1879,9 @@ width = "Šírka"
 [app]
 description = "Bezplatná alternatíva k Adobe Acrobat (10M+ stiahnutí)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konvertovať na PDF/A-3b"
 convertToPdfA3bDescription = "Vytvorí archívne PDF s vloženými prílohami"
@@ -2933,12 +2936,16 @@ text = "Aby boli tieto povolenia nezmeniteľné, použite nástroj Add Password
 [chat.actions]
 copy = "Kopírovať správu"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Možnosti agenta Stirling"
+assistant = "AI Assistant"
 clearChat = "Vyčistiť chat"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Táto operácia použije vaše cloudové kredity"
 tooltip = "Vybrať farbu z obrazovky"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Vyberte farbu"
 
 [common]
+actions = "Actions"
 back = "Späť"
 cancel = "Zrušiť"
 close = "Zavrieť"
+codeSample = "Code sample"
 collapse = "Zbaliť"
 confirm = "Potvrdiť"
 continue = "Pokračovať"
 copied = "Skopírované!"
 copy = "Kopírovať"
 done = "Hotovo"
+enterValue = "Enter value"
 error = "Chyba"
 expand = "Rozbaliť"
 loading = "Načítava sa..."
 next = "Ďalej"
+open = "Open"
 preview = "Náhľad"
 previous = "Predchádzajúce"
 refresh = "Obnoviť"
 remaining = "Zostáva"
 retry = "Skúsiť znova"
 save = "Uložiť"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Vymazať výber"
@@ -3185,6 +3199,7 @@ title = "Metóda kompresie"
 [compress.settings]
 desiredSize = "Požadovaná veľkosť súboru"
 desiredSizePlaceholder = "Zadajte veľkosť"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Kompresia je jednoduchý spôsob, ako zmenšiť veľkosť súboru. Zvoľte Veľkosť súboru a zadajte cieľovú veľkosť, pričom kvalitu upravíme za vás. Zvoľte Kvalita a nastavte silu kompresie manuálne."
@@ -3387,6 +3402,24 @@ pdfOptions = "Možnosti PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Najprv vyberte zdrojový formát"
 settings = "Nastavenia"
 single = "Jeden"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Hľadať..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Upraviť"
@@ -3824,11 +3861,13 @@ shareSelected = "Zdieľať vybrané"
 sharing = "Zdieľanie"
 showAll = "Zobraziť všetko"
 showHistory = "Zobraziť históriu"
+sortBy = "Sort files"
 sortByDate = "Zoradiť podľa dátumu"
 sortByName = "Zoradiť podľa názvu"
 sortBySize = "Zoradiť podľa veľkosti"
 storage = "Úložisko"
 storageState = "Úložisko"
+storageUsed = "Storage used"
 synced = "Synchronizované"
 title = "Nahrať súbory PDF"
 toolChain = "Použité nástroje"
@@ -3874,8 +3913,12 @@ addFiles = "Pridať súbory"
 addingFiles = "Pridávajú sa súbory…"
 collapse = "Zbaliť bočný panel"
 customizeGroups = "Prispôsobiť skupiny"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Ak chcete začať, otvorte súbory"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Rozbaliť bočný panel"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nie je nakonfigurovaný"
@@ -3888,15 +3931,17 @@ openFromComputer = "Otvoriť z počítača"
 openSettings = "Otvoriť nastavenia"
 other = "Ostatné"
 recent = "Nedávne"
-search = "Hľadať"
-searchPlaceholder = "Hľadať súbory..."
 viewAll = "Zobraziť všetkých {{count}} súborov"
 
 [fileSidebar.fileItem]
 closeViewer = "Zavrieť prehliadač"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Otvoriť v prehliadači"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Obnoviť predvolené nastavenia"
 subtitle = "Zoskupte svoje súbory do nadradených kategórií. Pridajte existujúce alebo nové štítky do kategórie, premenujte ju alebo si vytvorte vlastnú. Súbory, ktoré nie sú v žiadnej z vašich kategórií, sa zobrazia v časti „Ostatné“."
 title = "Kategórie bočného panela"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Pridať do pracovného priestoru"
 addToWorkspaceCount = "Pridať {{count}} do pracovného priestoru"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Späť na Moje súbory"
 breadcrumbs = "Cesta k priečinku"
 cancel = "Zrušiť"
 classification = "Klasifikácia"
-clearSearch = "Vymazať vyhľadávanie"
 clearSelection = "Zrušiť výber"
 closeDetails = "Zavrieť podrobnosti"
 create = "Vytvoriť"
@@ -3950,6 +4002,7 @@ downloadAll = "Stiahnuť všetko"
 downloadVersion = "Stiahnuť túto verziu"
 dropOverlay = "Pustite súbory sem na nahratie"
 dropOverlaySub = "Súbory začnú v Lokálne. Použite 'Presunúť do' alebo 'Uložiť do cloudu' na ich usporiadanie do priečinka."
+duplicate = "Duplicate"
 file = "Súbor"
 fileInfo = "File info"
 fileMenu = "Akcie súboru"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Zmeniť veľkosť stromu priečinkov (šípkami, Shift pre v
 save = "Uložiť"
 saveToServer = "Uložiť na server"
 saveToServerDisabledHint = "Ukladanie na server nie je na tomto serveri povolené. Požiadajte správcu, aby ho povolil."
-search = "Hľadať"
-searchPlaceholder = "Hľadať v tomto priečinku a podpriečinkoch"
 selectAll = "Vybrať všetko"
 selectAllHint = "Kliknutím vyberiete všetko. Tip: podržte Ctrl (alebo Cmd) na pridávanie súborov po jednom, Shift na výber rozsahu."
 selectedCount = "Vybrané: {{count}}"
@@ -4044,6 +4095,10 @@ title = "Zatiaľ žiadne cloudové súbory"
 hint = "Súbory uložené bez nahrania zostanú tu. Pretiahnite súbor, aby ste pridali nový."
 title = "Žiadne iba lokálne súbory"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Súbory, ktoré otvoríte alebo upravíte, sa zobrazia tu."
 title = "Zatiaľ nič upravené"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Priečinok sa nepodarilo odstrániť."
 deleteFolderFailedDetail = "Priečinok sa nepodarilo odstrániť: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nepodarilo sa aktualizovať vzhľad priečinka."
 folderAppearanceFailedDetail = "Nepodarilo sa aktualizovať vzhľad priečinka: {{message}}"
 moveFilesFailed = "Nepodarilo sa presunúť súbory."
@@ -4113,6 +4170,11 @@ localHint = "Uložené len v tomto prehliadači"
 shared = "Zdieľané"
 sharedHint = "Zdieľané s vami cez odkaz"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Najstaršie ako prvé"
 modifiedDesc = "Najnovšie ako prvé"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "V úložisku nie sú dostupné žiadne súbory. Najprv o
 open = "Otvoriť"
 openFile = "Otvoriť súbor"
 openFiles = "Otvoriť súbory"
+selectFile = "Select {{name}}"
 selectFromStorage = "Vybrať z úložiska"
 upload = "Nahrať"
 uploadFile = "Nahrať súbor"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Všetko uložené"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Nepodarilo sa extrahovať CSV"
 extractXlsxError = "Nepodarilo sa extrahovať XLSX"
+filled = "filled"
 flattenAfterFilling = "Spľoštiť po vyplnení"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "pov"
 requiredFieldsError = "Vyplňte všetky povinné polia"
 rescanFields = "Znovu naskenovať polia"
@@ -4795,9 +4863,6 @@ title = "Obrázok na PDF"
 [imageToPdf]
 tags = "konverzia,img,jpg,obrázok,fotografia"
 
-[infoBanner]
-dismiss = "Zavrieť"
-
 [invite]
 acceptError = "Nepodarilo sa vytvoriť účet"
 accountFor = "Vytvára sa účet pre"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Nahrávanie úspešné!"
 uploadSuccessMessage = "Vaše obrázky boli prenesené."
 validating = "Overuje sa relácia..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Naskenujte na nahratie fotiek. Obrázky sa automaticky konvertujú na PDF."
 descriptionNoConvert = "Naskenujte na nahratie fotiek z mobilného zariadenia."
@@ -4997,8 +5090,13 @@ title = "Nahratie z mobilu"
 tags = "Multi Tool,Multi operácie,UI,klik drag,front end,beží na klientovi,interaktívne,intraktívne,posunúť"
 title = "PDF Multi Nástroj"
 
-[navbar]
-search = "Hľadať"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Overenie nebolo úspešné. Môžete zavrieť toto okno a skúsiť znova."
@@ -5127,6 +5225,7 @@ activeFiles = "Zobrazenie <strong>Aktívne súbory</strong> zobrazuje všetky PD
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Zavrieť"
 cropSettings = "Keď sme vybrali súbor, ktorý chceme orezať, môžeme nakonfigurovať nástroj Orez tak, aby sme zvolili oblasť, na ktorú chceme PDF orezať."
+dialogLabel = "Onboarding"
 fileCheckbox = "Kliknutím na niektorý zo súborov ho vyberiete na spracovanie. Môžete vybrať viac súborov pre hromadné operácie."
 fileReplacement = "Upravený súbor automaticky nahradí pôvodný súbor na pracovnej ploche, čo vám umožní ľahko ho spracovať ďalšími nástrojmi."
 filesButton = "Tlačidlo <strong>Súbory</strong> na paneli rýchleho prístupu umožňuje nahrať PDF, na ktorých môžete nástroje používať."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF na PDF/A"
 tags = "archív,dĺhodobé,štandard,konverzia,uchovanie"
 title = "PDF na PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "tlač,štandard,konverzia,produkcia,predtlačová príprava,archív"
 title = "PDF na PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kreditov"
 xsmall = "100 kreditov"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Vyberte si plán, ktorý vám vyhovuje"
 title = "Dostupné plány"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Mesačný limit výdavkov bol dosiahnutý"
 title = "Portál Stripe sa nepodarilo otvoriť"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "z {{allowance}} bezplatných PDF použitých"
 capSuffix_other = "z {{allowance}} bezplatných PDF použitých"
 eyebrow = "Skúšobná verzia Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Odošlite dokument alebo upozornenie e-mailom, keď sa spustí pravidlo."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Uložte spracované dokumenty do Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Oficiálne SDKs"
 beta = "Beta"
 deprecated = "Zastarané"
 
-[portal.docs.search]
-empty = "Žiadna zodpovedajúca dokumentácia"
-placeholder = "Hľadať v dokumentácii"
-results = "{{count}} výsledkov"
-
 [portal.docs.skills]
 eyebrow = "ZRUČNOSTI"
 lead = "Zabalené pomenované schopnosti, ktoré váš agent vyvoláva ako jeden nástroj. Každá zručnosť je deterministický reťazec operácií s pripojenými evals."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Tomuto filtru nezodpovedajú žiadne dokumenty."
 rowActions = "Akcie riadka"
 sensitiveLabel = "Citlivé"
-sensitiveTitle = "Citlivé — vyžaduje sa prístup"
 
 [portal.documents.table.columns]
 action = "Pipeline / Akcia"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Stav"
 time = "Čas"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Naposledy videné"
 region = "Región"
 status = "Stav"
+target = "Target"
 version = "Verzia"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "V tomto zobrazení nastala neočakávaná chyba. Skúste to znova
 retry = "Skúsiť znova"
 title = "Na tejto stránke sa niečo pokazilo"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Späť"
 body = "Stiahnite si desktopovú aplikáciu alebo self-hostujte server."
@@ -7380,11 +7560,6 @@ cancel = "Zrušiť"
 confirm = "Odvolať kľúč"
 title = "Odvolať API kľúč"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestované"
-inScope = "V rozsahu"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrovať auditné udalosti podľa kategórie"
 heading = "Auditné záznamy"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Úspech"
 warning = "Upozornenie"
 
-[portal.infrastructure.certLabel]
-certified = "Certifikované"
-inProgress = "Prebieha"
-notStarted = "Nezačaté"
-
 [portal.infrastructure.createKey]
 cancel = "Zrušiť"
 createKey = "Vytvoriť kľúč"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Skopírujte tento tajný kľúč teraz — znova sa už nezob
 title = "Vytvoriť API kľúč"
 titleCreated = "Kľúč vytvorený"
 
-[portal.infrastructure.deployLabel]
-live = "Naživo"
-queued = "Vo fronte"
-rolledBack = "Vrátené späť"
-rolling = "Prebieha nasadzovanie"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Nasadil"
-environment = "Prostredie"
-product = "Produkt"
-status = "Stav"
-version = "Verzia"
-when = "Kedy"
-
-[portal.infrastructure.deployments.recent]
-heading = "Nedávne nasadenia"
-subheading = "Najnovšie nasadenia naprieč produktmi a prostrediami."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Inštancie"
-latency = "Latencia"
-load = "Zaťaženie"
-p99 = "P99"
-region = "Región"
-status = "Stav"
-throughput = "Priepustnosť"
-uptime = "Dostupnosť"
-version = "Verzia"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regióny"
-subheading = "Živý stav pre každý nasadený región Stirling — latencia, zaťaženie a verzia rollout."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Nasadené regióny sa tu zobrazia po zriadení vášho pracovného priestoru."
-title = "Žiadne nasadené regióny"
-
 [portal.infrastructure.keyLabel]
 active = "Aktívny"
 revoked = "Odvolaný"
 
-[portal.infrastructure.modelLabel]
-active = "Aktívny"
-degraded = "Zhoršený"
-disabled = "Zakázaný"
-
-[portal.infrastructure.models]
-heading = "Modely"
-msValue = "{{value}} ms"
-subheading = "Katalóg modelov a smerovanie, ktoré poháňa spracovanie dokumentov vo vašom pracovnom priestore."
-
-[portal.infrastructure.models.byom]
-description = "Zaregistrujte on-prem alebo self-hosted model a pripnite ho k regiónu na spracovanie viazané na rezidenciu dát."
-title = "Prineste si vlastný model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalóg"
-sub = "Spravované modely dostupné pre váš pracovný priestor, so živou latenciou a nákladmi."
-subEnterprise = "Spravované, vlastné a on-prem modely — s dostupným pripnutím podľa regiónu."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modely v katalógu vášho pracovného priestoru sa zobrazia tu."
-title = "Nie sú dostupné žiadne modely"
-
-[portal.infrastructure.models.columns]
-cost = "Náklady"
-latency = "Latencia"
-load = "Zaťaženie"
-model = "Model"
-status = "Stav"
-type = "Typ"
-version = "Verzia"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/volanie"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktívne modely"
-avgLatency = "Priem. latencia"
-included = "Zahrnuté"
-monthlySpend = "Mesačné náklady na modely"
-
-[portal.infrastructure.models.routing]
-empty = "Nie sú nakonfigurované žiadne pravidlá smerovania."
-heading = "Pravidlá smerovania"
-sub = "Ktorý model obsluhuje jednotlivé operácie. Predvolené pravidlo sa použije, keď sa nezhoduje žiadne užšie pravidlo."
-subLocked = "Smerujte operácie na konkrétne modely — dostupné v platených plánoch."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Inovujte na Pro a ovládajte, ktorý model obsluhuje jednotlivé operácie a typy dokumentov."
-title = "Smerovanie modelov je platená funkcia"
-
-[portal.infrastructure.models.routingColumns]
-default = "Predvolené"
-docType = "Typ dokumentu"
-modelForAria = "Model pre {{operation}}"
-operation = "Operácia"
-routedTo = "Smerované na"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasifikácia"
-extraction = "Extrakcia"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Zhoršené"
-down = "Nedostupné"
-healthy = "V poriadku"
-
-[portal.infrastructure.security.access.byok]
-description = "Dodajte kľúč z vlastného KMS. Stirling ním šifruje, ale stále môže čítať."
-label = "Prineste si vlastný kľúč (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Kľúče nikdy neopustia váš KMS. Stirling uchováva iba ciphertext."
-label = "Držte si vlastný kľúč (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling spravuje šifrovacie kľúče. Najjednoduchšie — žiadne operácie s kľúčmi na vašej strane."
-label = "Kľúče držané službou Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Politika prístupu k dokumentom"
-subheading = "Riadi, kto môže dešifrovať spracované dokumenty v pokoji."
-
-[portal.infrastructure.security.attestations]
-heading = "Potvrdenia zhody"
-noReport = "Nie je dostupná žiadna správa"
-subheading = "Auditný stav podľa jednotlivých rámcov, so správami dostupnými pre potvrdené kontroly."
-viewReport = "Zobraziť správu →"
-
-[portal.infrastructure.security.compliance]
-heading = "Zhoda"
-subheading = "Potvrdenia a certifikácie pokrývajúce platformu Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Bezpečnostná konfigurácia vášho pracovného priestoru sa zobrazí tu."
-title = "Bezpečnostný stav nie je dostupný"
-
-[portal.infrastructure.security.hyokBanner]
-description = "S HYOK šifrovacie kľúče nikdy neopustia váš KMS. Stirling ukladá a spracúva iba ciphertext, ktorý môžete kedykoľvek odvolať."
-title = "Stirling nemôže dešifrovať vaše dokumenty"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nie sú nakonfigurované žiadne rozsahy IP adries — všetky IP adresy sú povolené."
-heading = "IP allowlist"
-sub = "Prístup k API je obmedzený na tieto rozsahy CIDR."
-subLocked = "Obmedzte prístup k API na známe rozsahy IP adries — dostupné v platených plánoch."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Inovujte na Pro a obmedzte prístup k API na konkrétne siete."
-title = "IP allowlisting je platená funkcia"
-
-[portal.infrastructure.security.ipColumns]
-added = "Pridané"
-addedBy = "Pridal"
-cidr = "CIDR"
-label = "Štítok"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritmus"
-heading = "Správa šifrovacích kľúčov"
-keyId = "Identifikátor kľúča"
-lastRotated = "Naposledy rotované"
-rotateKey = "Rotovať kľúč"
-rotationPolicy = "Politika rotácie"
-subheading = "Správa kľúčov, ktoré šifrujú dokumenty v pokoji — kto môže dešifrovať a ako sa kľúče rotujú."
-
-[portal.infrastructure.security.managedBanner]
-description = "Správa kľúčov bring-your-own-key (BYOK) a hold-your-own-key (HYOK) je dostupná v Enterprise. Inovujte a dodajte kľúče z vlastného KMS."
-title = "Kľúče vo vašom pláne spravuje Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Ázia a Tichomorie"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · dátová hranica GDPR"
-label = "Európska únia"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Spojené štáty"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Rezidencia dát"
-subheading = "Kde sa dokumenty ukladajú a spracúvajú."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} použité"
-
-[portal.infrastructure.storage.empty]
-description = "Pripojené úložisko a použitie sa zobrazia tu."
-title = "Nie je nakonfigurované žiadne úložisko"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktívne"
-activeRange = "0–{{value}} d"
-archived = "Archivované"
-coldStorage = "studené úložisko"
-deleted = "Odstránené"
-never = "nikdy"
-purged = "vyčistené"
-
-[portal.infrastructure.storage.providers]
-connect = "Pripojiť"
-connected = "Pripojené"
-heading = "Pripojení poskytovatelia"
-subheading = "Kam sa zapisujú spracované artefakty."
-
-[portal.infrastructure.storage.retention]
-heading = "Uchovávanie"
-subheading = "Ako dlho sa artefakty uchovávajú pred odstránením v životnom cykle."
-windowLabel = "Predvolené okno uchovávania"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} deň"
-days_other = "{{count}} dní"
-never = "Nikdy neodstraňovať"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Celkové použitie"
-progressLabel = "Použité úložisko"
-subheading = "Úložisko spotrebované naprieč všetkými pripojenými poskytovateľmi."
-
 [portal.infrastructure.tabs]
 apiKeys = "API kľúče"
 audit = "Auditné záznamy"
@@ -7715,11 +7657,9 @@ security = "Bezpečnosť"
 storage = "Úložisko"
 
 [portal.integrations]
-addAnother = "Pridať ďalšiu"
 availableHeading = "Dostupné"
 comingSoonHeading = "Čoskoro"
 connect = "Pripojiť"
-connectedHeading = "Pripojené"
 connectionCount_one = "{{count}} pripojenie"
 connectionCount_other = "{{count}} pripojení"
 customApi = "Vlastné API"
@@ -7737,6 +7677,10 @@ security = "Zabezpečenie"
 signing = "Podpisovanie"
 storage = "Úložisko"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Pripojené"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrácie"
 pipelines = "Pipeline"
 policies = "Politiky"
 procurement = "Obstarávanie"
-settings = "Nastavenia"
 sources = "Zdroje"
 usage = "Používanie a fakturácia"
 users = "Používatelia"
@@ -7784,7 +7727,7 @@ title = "Pipeline"
 newPipeline = "Nový pipeline"
 
 [portal.pipelines.builder]
-addStep = "Pridať nástroj"
+activate = "Activate"
 back = "Späť na pipeline"
 cannotFollow = "Nie je možné prevziať {{produced}}"
 chooseAccount = "Vyberte účet"
@@ -7792,28 +7735,38 @@ chooseDestination = "Vyberte cieľ"
 chooseOperation = "Vyberte, čo tento krok vykoná"
 chooseSource = "Vyberte zdroj"
 discard = "Zahodiť zmeny"
-enabled = "Povolené"
 inputs = "Vstup"
 inputSource = "Vstupný zdroj"
 inputTrigger = "Spúšťač"
 keepEditing = "Pokračovať v úpravách"
+moreActions = "More actions"
 needsConfiguring = "Vyžaduje nastavenie"
-needsUpload = "Vyžaduje nahraný súbor"
-noSources = "Zatiaľ nie sú pripojené žiadne zdroje. Vytvorte jeden, aby ste ho mohli použiť ako vstup."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Vašemu vyhľadávaniu nezodpovedajú žiadne nástroje."
-pipelineSettings = "Nastavenia pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Hľadať nástroje"
-selectToolBody = "Pridajte nástroj na vytvorenie pipeline."
-selectToolTitle = "Zatiaľ žiadne nástroje"
 sendToSystem = "Odoslať do iného systému"
 stepsIncompatible = "Tieto kroky nemožno spustiť na tom, čo vytvára ich predchádzajúci krok: {{tools}}."
 stepsNeedSetup = "Tieto kroky je pred uložením ešte potrebné nastaviť: {{tools}}."
-toolSettings = "Nastavenia nástroja"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Nerozpoznaná operácia, ponechaná bez zmeny."
 unsavedBody = "Máte neuložené zmeny. Uložte ich pred odchodom alebo ich zahodiť?"
 unsavedTitle = "Neuložené zmeny"
-uploadUnsupported = "Nahrané súbory ešte nie sú v pipeline podporované, takže tieto kroky sa nedajú uložiť: {{tools}}."
 usesDefaults = "Spúšťa sa s predvolenými nastaveniami"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinuje každý súbor z predchádzajúceho kroku"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nie je možné skontrolovať, čo tento krok prijíma"
 
 [portal.pipelines.composer]
 addTool = "Pridať nástroj"
-cancel = "Zrušiť"
-chainEmpty = "Pridajte nástroj a začnite vytvárať pipeline."
 create = "Vytvoriť pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Zobrazenie týchto parametrov nástroja na úpravu zatiaľ nie je podporované."
-moveDown = "Presunúť nadol"
-moveUp = "Presunúť nahor"
+editSource = "Edit source"
 name = "Názov"
 namePlaceholder = "napr. Prechod redakciou"
 noToolSettings = "Tento nástroj nemá žiadne konfigurovateľné nastavenia."
-operations_one = "Operácia ({{count}})"
-operations_other = "Operácie ({{count}})"
 output = "Výstup"
-removeStep = "Odstrániť operáciu"
 save = "Uložiť zmeny"
 scheduleEvery = "Spúšťať každých"
-sources = "Zdroje"
-sourcesLoading = "Načítavajú sa zdroje..."
 trigger = "Trigger"
 triggerManual = "Iba manuálne"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dní"
 hours = "hodín"
 minutes = "minút"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Odstrániť \"{{name}}\"? Túto akciu nie je možné vrátiť späť."
 cancel = "Zrušiť"
@@ -7867,6 +7825,37 @@ connectSource = "Pripojiť zdroj"
 description = "Vytvorte svoj prvý pipeline: vyberte zdroje, nad ktorými beží, spojte operácie do reťazca a vyberte, kam pôjde výstup."
 title = "Zatiaľ žiadne pipeline"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktívne"
 paused = "Pozastavené"
@@ -7879,7 +7868,6 @@ completed_one = "Spustenie dokončené."
 completed_other = "Všetkých {{count}} spustení dokončených."
 empty = "Nie je čo spustiť: zdroje nemali žiadne dokumenty na spracovanie."
 failed = "Spustenie zlyhalo: {{error}}"
-historyCleared = "História bola vymazaná. Ďalšie spustenie znova spracuje všetko, čo sa aktuálne nachádza v zdrojoch."
 inFlight = "Nie je nič nové na spustenie: dokumenty sa stále spracúvajú z predchádzajúceho spustenia."
 parked_one = "Nie je čo spustiť: {{count}} dokument predtým zlyhal a je pozastavený. Opravte príčinu a potom vymažte históriu, aby ste ho skúsili znova."
 parked_other = "Nie je čo spustiť: {{count}} dokumentov predtým zlyhalo a sú pozastavené. Opravte príčinu a potom vymažte históriu, aby ste ich skúsili znova."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Zdroje"
 status = "Stav"
 steps = "Kroky"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Sledovanie priečinka"
@@ -8209,6 +8198,24 @@ label = "Pripojiť k Jira issue"
 description = "Odošle spracovaný dokument ako prílohu."
 label = "Odoslať dokument emailom (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Zapíše spracovaný dokument do priečinka."
 label = "Nahrať do Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maximum dosiahnuté"
 subtitle = "Vaša bezplatná skúšobná verzia trvá do {{date}}. Karta nie je potrebná."
 title = "Enterprise skúšobná verzia"
 
-[portal.search]
-ariaLabel = "Hľadať"
-placeholder = "Hľadať v Stirling — endpointy, pipeline, dokumenty…"
-
-[portal.search.empty]
-noActionsDescription = "Rýchle akcie sa tu zobrazia, keď budú dostupné."
-noActionsTitle = "Žiadne rýchle akcie"
-noMatches = "Žiadne zhody pre „{{query}}“"
-noMatchesDescription = "Skúste iné kľúčové slovo alebo prejdite katalóg."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Zrušiť"
 confirm = "Odstrániť"
 title = "Odstrániť zdroj?"
 
-[portal.sources.empty]
-description = "Pripojte priečinok (a čoskoro aj cloudové úložisko), aby mali vaše politiky odkiaľ získavať dokumenty."
-title = "Zatiaľ nie sú pripojené žiadne zdroje"
-
 [portal.sources.kpi]
 inUse = "Používa sa"
 total = "Pripojenia"
@@ -8785,6 +8778,7 @@ unused = "Nepoužité"
 documents = "Dokumenty"
 source = "Zdroj"
 status = "Stav"
+type = "Type"
 usedBy = "Politiky"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Zásady a súkromie"
 [settings.preferences]
 title = "Predvoľby"
 
-[settings.search]
-placeholder = "Hľadať na stránkach nastavení..."
-
 [settings.security]
 description = "Aktualizujte svoje heslo, aby bol váš účet v bezpečí."
 title = "Zabezpečenie"
@@ -10128,6 +10119,7 @@ last = "Posledná strana"
 maintainRatio = "Prepnúť zachovanie pomeru strán"
 next = "Ďalšia strana"
 noSavedSigs = "Nenašli sa žiadne uložené podpisy"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Osobné podpisy"
 previous = "Predchádzajúca strana"
 redo = "Znova"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Odstránenie pozadia zlyhalo"
 hint = "Nahrajte obrázok vášho podpisu vo formáte PNG alebo JPG"
 label = "Nahrať obrázok podpisu"
 placeholder = "Vyberte súbor obrázka"
+previewAlt = "Current image signature"
 processing = "Spracovanie obrázka..."
 removeBackground = "Odstrániť biele pozadie (spriehľadniť)"
 
@@ -10179,6 +10172,17 @@ saved = "Vyberte uložený podpis vyššie, potom kliknite kdekoľvek do PDF na
 text = "Po zadaní svojho mena vyššie kliknite kdekoľvek do PDF, aby ste umiestnili svoj podpis."
 title = "Ako pridať podpis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Presúvať podpis"
 pause = "Pozastaviť umiestňovanie"
@@ -10625,6 +10629,23 @@ title = "Nahrať na server"
 updateButton = "Aktualizovať na serveri"
 uploadButton = "Nahrať na server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Prejsť späť"
 pdfTools = "Nástroje PDF"
 placeholder = "Vyberte nástroj, aby ste začali"
 premiumFeature = "Prémiová funkcia:"
-searchTools = "Hľadať nástroje"
 toolsHeader = "Nástroje"
 viewAllTools = "Zobraziť všetky nástroje"
 
@@ -10822,6 +10842,9 @@ removal = "Odstraňovanie"
 signing = "Podpisovanie"
 verification = "Overovanie"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nenašli sa žiadne nástroje"
 noTools = "Nie sú dostupné žiadne nástroje"
@@ -10979,6 +11002,13 @@ approver = "Schvaľuje politiku"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Zrušiť pozvanie pre {{email}}? S aktuálnym odkazom sa nebudú môcť pripojiť."
 cancelInviteTitle = "Zrušiť pozvanie"
@@ -10998,10 +11028,8 @@ title = "Zatiaľ žiadni členovia"
 addToTeam = "Pridať do tímu"
 guestCount = "{{count}} hosť"
 guests = "Hostia"
-guestsDesc = "Externí spolupracovníci, obmedzení na to, čo ste zdieľali. Iba Editor."
 ledBy = "vedie {{owner}}"
 org = "Organizácia"
-orgDesc = "Vlastníci s celofiremnou autoritou a schvaľovaním politík"
 owners = "{{count}} vlastník"
 team = "Tím {{name}}"
 teamMeta = "{{count}} ľudí"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Pozvanie od {{who}}"
 cancel = "Zrušiť"
-count = "{{count}} čaká"
-desc = "Pozvaní ľudia, ktorí sa ešte nepripojili. Zaberajú miesto, kým pozvanie neprijmú."
 expiresInDays_one = "Platnosť vyprší o {{count}} deň"
 expiresInDays_other = "Platnosť vyprší o {{count}} dní"
 expiresToday = "Platnosť vyprší dnes"
 title = "Čakajúce pozvania"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Pri pripájaní k backendu sa niečo pokazilo alebo nemáte prístup. Skúste to znova."
 title = "Nepodarilo sa načítať členov"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Hľadať prílohy"
 title = "Prílohy"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Názov záložky"
 bookmarkTitleRequired = "Názov záložky je povinný"
 closeSidebar = "Zavrieť bočný panel záložiek"
 collapseAll = "Zbaliť všetky záložky"
+empty = "No bookmarks in this document"
 expandAll = "Rozbaliť všetky záložky"
 searchPlaceholder = "Hľadať záložky"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Pridať komentár"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Vyhľadať v dokumente"
 moreActions = "Ďalšie akcie"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Strana {{page}}"
 placingHint = "Kliknite na stránku a umiestnite… (zrušiť)"
 removeCommentOnly = "Odstrániť iba komentár"
 saveReply = "Uložiť odpoveď"
+searchPlaceholder = "Search comments"
 title = "Komentáre"
 typeComment = "Komentár"
 typeInsertText = "Vložiť text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Máte neuložené zmeny"
 closeSidebar = "Zavrieť bočný panel vrstiev"
 hideAll = "Skryť všetky vrstvy"
 showAll = "Zobraziť všetky vrstvy"
+title = "Layers"
 
 [viewer.link]
 delete = "Odstrániť odkaz"
@@ -11646,6 +11682,7 @@ exitRedaction = "Ukončiť režim začiernenia"
 exportAll = "Exportovať PDF"
 exportSelected = "Exportovať vybrané strany"
 formFill = "Vyplniť formulár"
+hideToolbar = "Hide toolbar"
 multiTool = "Multinástroj"
 panMode = "Režim posunu"
 print = "Tlačiť PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Vybrať všetko"
 selectByNumber = "Vybrať podľa čísel strán"
 selectLanguage = "Vybrať jazyk"
 share = "Zdieľať"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Prepnúť viditeľnosť anotácií"
 toggleAttachments = "Prepnúť prílohy"
 toggleBookmarks = "Prepnúť záložky"
diff --git a/frontend/editor/public/locales/sl-SI/translation.toml b/frontend/editor/public/locales/sl-SI/translation.toml
index 6c0e56dca9..dda187e356 100644
--- a/frontend/editor/public/locales/sl-SI/translation.toml
+++ b/frontend/editor/public/locales/sl-SI/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Abeceda"
 apply = "Uporabi"
 applyAndContinue = "Shrani in zapusti"
-areYouSure = "Ali ste prepričani, da želite oditi?"
 back = "Nazaj"
 black = "črna"
 blue = "modra"
@@ -106,6 +105,7 @@ undoSuccess = "Operacija uspešno razveljavljena"
 unknown = "Neznano"
 unpin = "Odpni datoteko (zamenjaj po zagonu orodja)"
 unsavedChanges = "Imate neshranjene spremembe v vašem PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Neshranjene spremembe"
 unsupported = "Nepodprto"
 username = "Uporabniško ime"
@@ -1879,6 +1879,9 @@ width = "Širina"
 [app]
 description = "Brezplačna alternativa Adobe Acrobat (10M+ prenosov)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Pretvori v PDF/A-3b"
 convertToPdfA3bDescription = "Ustvari arhivski PDF z vdelanimi prilogami"
@@ -2933,12 +2936,16 @@ text = "Da bodo ta dovoljenja nespremenljiva, uporabite orodje Dodaj geslo za na
 [chat.actions]
 copy = "Kopiraj sporočilo"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Možnosti agenta Stirling"
+assistant = "AI Assistant"
 clearChat = "Počisti klepet"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Ta operacija bo uporabila vaše kredite v oblaku"
 tooltip = "Izberi barvo z zaslona"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Izberite barvo"
 
 [common]
+actions = "Actions"
 back = "Nazaj"
 cancel = "Prekliči"
 close = "Zapri"
+codeSample = "Code sample"
 collapse = "Strni"
 confirm = "Potrdi"
 continue = "Nadaljuj"
 copied = "Kopirano!"
 copy = "Kopiraj"
 done = "Končano"
+enterValue = "Enter value"
 error = "Napaka"
 expand = "Razširi"
 loading = "Nalaganje..."
 next = "Naslednje"
+open = "Open"
 preview = "Predogled"
 previous = "Prejšnje"
 refresh = "Osveži"
 remaining = "Preostalo"
 retry = "Poskusi znova"
 save = "Shrani"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Počisti izbrano"
@@ -3185,6 +3199,7 @@ title = "Način stiskanja"
 [compress.settings]
 desiredSize = "Želena velikost datoteke"
 desiredSizePlaceholder = "Vnesite velikost"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Stiskanje je enostaven način za zmanjšanje velikosti datoteke. Izberite Velikost datoteke za vnos ciljne velikosti in mi bomo prilagodili kakovost namesto vas. Izberite Kakovost, če želite ročno nastaviti moč stiskanja."
@@ -3387,6 +3402,24 @@ pdfOptions = "Možnosti PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Najprej izberite izvorni format"
 settings = "Nastavitve"
 single = "Posamezna"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Išči..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Uredi"
@@ -3824,11 +3861,13 @@ shareSelected = "Daj v skupno rabo izbrano"
 sharing = "Skupna raba"
 showAll = "Prikaži vse"
 showHistory = "Prikaži zgodovino"
+sortBy = "Sort files"
 sortByDate = "Razvrsti po datumu"
 sortByName = "Razvrsti po imenu"
 sortBySize = "Razvrsti po velikosti"
 storage = "Shramba"
 storageState = "Shramba"
+storageUsed = "Storage used"
 synced = "Sinhronizirano"
 title = "Naloži datoteke PDF"
 toolChain = "Uporabljena orodja"
@@ -3874,8 +3913,12 @@ addFiles = "Dodaj datoteke"
 addingFiles = "Dodajanje datotek…"
 collapse = "Strni stransko vrstico"
 customizeGroups = "Prilagodi skupine"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Odprite datoteke, da začnete"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Razširi stransko vrstico"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive ni konfiguriran"
@@ -3888,15 +3931,17 @@ openFromComputer = "Odpri iz računalnika"
 openSettings = "Odpri nastavitve"
 other = "Drugo"
 recent = "Nedavno"
-search = "Išči"
-searchPlaceholder = "Išči datoteke..."
 viewAll = "Prikaži vseh {{count}} datotek"
 
 [fileSidebar.fileItem]
 closeViewer = "Zapri pregledovalnik"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Odpri v pregledovalniku"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Ponastavi na privzeto"
 subtitle = "Združite svoje datoteke v nadrejene kategorije. V kategorijo dodajte obstoječe ali nove oznake, jo preimenujte ali ustvarite svojo. Datoteke, ki niso v nobeni od vaših kategorij, se prikažejo pod »Drugo«."
 title = "Kategorije stranske vrstice"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Dodaj v delovni prostor"
 addToWorkspaceCount = "Dodaj {{count}} v delovni prostor"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Nazaj v Moje datoteke"
 breadcrumbs = "Pot mape"
 cancel = "Prekliči"
 classification = "Klasifikacija"
-clearSearch = "Počisti iskanje"
 clearSelection = "Počisti izbiro"
 closeDetails = "Zapri podrobnosti"
 create = "Ustvari"
@@ -3950,6 +4002,7 @@ downloadAll = "Prenesi vse"
 downloadVersion = "Prenesi to različico"
 dropOverlay = "Spustite datoteke, da jih naložite"
 dropOverlaySub = "Datoteke se najprej shranijo v Lokalno. Uporabite 'Premakni v' ali 'Shrani v oblak' za organizacijo v mape."
+duplicate = "Duplicate"
 file = "Datoteka"
 fileInfo = "File info"
 fileMenu = "Dejanja z datoteko"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Spremeni velikost drevesa map (smernimi tipkami, Shift za ve
 save = "Shrani"
 saveToServer = "Shrani na strežnik"
 saveToServerDisabledHint = "Shranjevanje na strežnik ni omogočeno na tem strežniku. Prosite skrbnika, naj to omogoči."
-search = "Iskanje"
-searchPlaceholder = "Iščite po tej mapi in podmapah"
 selectAll = "Izberi vse"
 selectAllHint = "Kliknite za izbiro vseh. Namig: držite Ctrl (ali Cmd) za dodajanje datotek posamično, Shift za izbiro obsega."
 selectedCount = "Izbranih {{count}}"
@@ -4044,6 +4095,10 @@ title = "Še ni oblačnih datotek"
 hint = "Datoteke, shranjene brez nalaganja, ostanejo tukaj. Spustite datoteko za dodajanje."
 title = "Ni lokalnih datotek"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Datoteke, ki jih odprete ali uredite, se bodo pojavile tukaj."
 title = "Še nič ni spremenjeno"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Mape ni bilo mogoče izbrisati."
 deleteFolderFailedDetail = "Mape ni bilo mogoče izbrisati: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Ni bilo mogoče posodobiti videza mape."
 folderAppearanceFailedDetail = "Ni bilo mogoče posodobiti videza mape: {{message}}"
 moveFilesFailed = "Ni bilo mogoče premakniti datotek."
@@ -4113,6 +4170,11 @@ localHint = "Shranjeno samo v tem brskalniku"
 shared = "V skupni rabi"
 sharedHint = "V skupni rabi z vami prek povezave"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Najstarejše najprej"
 modifiedDesc = "Najnovejše najprej"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "V shrambi ni datotek. Najprej odprite nekaj datotek."
 open = "Odpri"
 openFile = "Odpri datoteko"
 openFiles = "Odpri datoteke"
+selectFile = "Select {{name}}"
 selectFromStorage = "Izberi iz shrambe"
 upload = "Naloži"
 uploadFile = "Naloži datoteko"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Vse shranjeno"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Izvlečenje CSV ni uspelo"
 extractXlsxError = "Izvlečenje XLSX ni uspelo"
+filled = "filled"
 flattenAfterFilling = "Splošči po izpolnjevanju"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obv."
 requiredFieldsError = "Izpolnite vsa obvezna polja"
 rescanFields = "Znova preglej polja"
@@ -4795,9 +4863,6 @@ title = "Slika v PDF"
 [imageToPdf]
 tags = "pretvorba,img,jpg,slika,fotografija"
 
-[infoBanner]
-dismiss = "Opusti"
-
 [invite]
 acceptError = "Računa ni bilo mogoče ustvariti"
 accountFor = "Ustvarjanje računa za"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Nalaganje uspešno!"
 uploadSuccessMessage = "Vaše slike so bile prenesene."
 validating = "Preverjanje seje..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Skenirajte za nalaganje fotografij. Slike se samodejno pretvorijo v PDF."
 descriptionNoConvert = "Skenirajte za nalaganje fotografij z vaše mobilne naprave."
@@ -4997,8 +5090,13 @@ title = "Naloži iz mobilne naprave"
 tags = "Več orodij, več operacij, uporabniški vmesnik, klik povleci, sprednji del, odjemalska stran, interaktivno, nepremagljivo, premakni, izbriši, preseli, razdeli"
 title = "PDF večnamensko orodje"
 
-[navbar]
-search = "Išči"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Overjanje ni bilo uspešno. Okno lahko zaprete in poskusite znova."
@@ -5127,6 +5225,7 @@ activeFiles = "Pogled <strong>Aktivne datoteke</strong> prikaže vse PDF-je, ki
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Zapri"
 cropSettings = "Zdaj ko smo izbrali datoteko, ki jo želimo obrezati, lahko nastavimo orodje Obreži in izberemo območje, na katerega želimo obrezati PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "S klikom na eno izmed datotek jo izberete za obdelavo. Izberete lahko več datotek za paketne operacije."
 fileReplacement = "Spremenjena datoteka bo samodejno zamenjala izvirno datoteko na Delovni mizi, kar omogoča, da jo zlahka poženete skozi dodatna orodja."
 filesButton = "Gumb <strong>Datoteke</strong> v vrstici hitrega dostopa omogoča nalaganje PDF-jev, na katerih želite uporabljati orodja."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF v PDF/A"
 tags = "arhiviranje,dolgoročno,standard,pretvorba,shranjevanje,hramba"
 title = "PDF v PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "tiskanje,standard,pretvorba,produkcija,predtisk,arhiv"
 title = "PDF v PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kreditov"
 xsmall = "100 kreditov"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Izberite paket, ki ustreza vašim potrebam"
 title = "Razpoložljivi paketi"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Mesečna omejitev porabe dosežena"
 title = "Portala Stripe ni bilo mogoče odpreti"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "od {{allowance}} brezplačnih PDF-jev porabljenih"
 capSuffix_other = "od {{allowance}} brezplačnih PDF-jev porabljenih"
 eyebrow = "Preizkus Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Pošljite dokument ali obvestilo po Email, ko se pravilo izvede."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Shranjujte obdelane dokumente v Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Uradni SDK-ji"
 beta = "Beta"
 deprecated = "Zastarelo"
 
-[portal.docs.search]
-empty = "Ni ujemajoče se dokumentacije"
-placeholder = "Išči dokumentacijo"
-results = "{{count}} rezultatov"
-
 [portal.docs.skills]
 eyebrow = "VEŠČINE"
 lead = "Vključene, poimenovane zmožnosti, ki jih vaš agent prikliče kot eno orodje. Vsaka veščina je deterministična veriga operacij s priloženimi evalvacijami."
@@ -7180,11 +7309,11 @@ editorAction = "Urejevalnik"
 empty = "Noben dokument se ne ujema s tem filtrom."
 rowActions = "Dejanja vrstice"
 sensitiveLabel = "Občutljivo"
-sensitiveTitle = "Občutljivo — potreben je dostop"
 
 [portal.documents.table.columns]
 action = "Pipeline / Dejanje"
 document = "Dokument"
+labels = "Labels"
 product = "Izdelek"
 status = "Stanje"
 time = "Čas"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Nazadnje videno"
 region = "Regija"
 status = "Stanje"
+target = "Target"
 version = "Različica"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "V tem pogledu je prišlo do nepričakovane napake. Poskusite znov
 retry = "Poskusite znova"
 title = "Na tej strani je šlo nekaj narobe"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Nazaj"
 body = "Prenesite namizno aplikacijo ali samogostujte strežnik."
@@ -7380,11 +7560,6 @@ cancel = "Prekliči"
 confirm = "Prekliči ključ"
 title = "Prekliči API ključ"
 
-[portal.infrastructure.attestationLabel]
-attested = "Potrjeno"
-inScope = "V obsegu"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtriraj revizijske dogodke po kategoriji"
 heading = "Revizijski dnevniki"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Uspeh"
 warning = "Opozorilo"
 
-[portal.infrastructure.certLabel]
-certified = "Certificirano"
-inProgress = "V teku"
-notStarted = "Ni začeto"
-
 [portal.infrastructure.createKey]
 cancel = "Prekliči"
 createKey = "Ustvari ključ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopirajte to skrivnost zdaj — ne bo več prikazana."
 title = "Ustvari API ključ"
 titleCreated = "Ključ ustvarjen"
 
-[portal.infrastructure.deployLabel]
-live = "V živo"
-queued = "V čakalni vrsti"
-rolledBack = "Povrnjeno"
-rolling = "Uvajanje"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Namestil"
-environment = "Okolje"
-product = "Izdelek"
-status = "Stanje"
-version = "Različica"
-when = "Kdaj"
-
-[portal.infrastructure.deployments.recent]
-heading = "Nedavne namestitve"
-subheading = "Najnovejše uvedbe po izdelkih in okoljih."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Primerki"
-latency = "Zakasnitev"
-load = "Obremenitev"
-p99 = "P99"
-region = "Regija"
-status = "Stanje"
-throughput = "Prepustnost"
-uptime = "Čas delovanja"
-version = "Različica"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regije"
-subheading = "Stanje v živo za vsako nameščeno regijo Stirling — zakasnitev, obremenitev in različica uvedbe."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Nameščene regije se prikažejo tukaj, ko je vaš delovni prostor pripravljen."
-title = "Ni nameščenih regij"
-
 [portal.infrastructure.keyLabel]
 active = "Aktivno"
 revoked = "Preklicano"
 
-[portal.infrastructure.modelLabel]
-active = "Aktivno"
-degraded = "Oslabljeno"
-disabled = "Onemogočeno"
-
-[portal.infrastructure.models]
-heading = "Modeli"
-msValue = "{{value}} ms"
-subheading = "Katalog modelov in usmerjanje, ki poganja obdelavo dokumentov v vašem delovnem prostoru."
-
-[portal.infrastructure.models.byom]
-description = "Registrirajte on-prem ali samogostovan model in ga pripnite na regijo za obdelavo, vezano na rezidentnost podatkov."
-title = "Prinesite svoj model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Upravljani modeli, ki so na voljo vašemu delovnemu prostoru, z zakasnitvijo in stroški v živo."
-subEnterprise = "Upravljani, lastni in on-prem modeli — z možnostjo pripenjanja po regijah."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modeli v katalogu vašega delovnega prostora se prikažejo tukaj."
-title = "Ni razpoložljivih modelov"
-
-[portal.infrastructure.models.columns]
-cost = "Strošek"
-latency = "Zakasnitev"
-load = "Obremenitev"
-model = "Model"
-status = "Stanje"
-type = "Vrsta"
-version = "Različica"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/klic"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktivni modeli"
-avgLatency = "Povp. zakasnitev"
-included = "Vključeno"
-monthlySpend = "Mesečna poraba za modele"
-
-[portal.infrastructure.models.routing]
-empty = "Ni konfiguriranih pravil usmerjanja."
-heading = "Pravila usmerjanja"
-sub = "Kateri model obravnava posamezno operacijo. Privzeto velja, kadar se ne ujema nobeno ožje pravilo."
-subLocked = "Usmerite operacije na določene modele — na voljo v plačljivih paketih."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Nadgradite na Pro, da nadzirate, kateri model obravnava posamezno operacijo in vrsto dokumenta."
-title = "Usmerjanje modelov je plačljiva funkcija"
-
-[portal.infrastructure.models.routingColumns]
-default = "Privzeto"
-docType = "Vrsta dokumenta"
-modelForAria = "Model za {{operation}}"
-operation = "Operacija"
-routedTo = "Usmerjeno na"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasifikacija"
-extraction = "Ekstrakcija"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Oslabljeno"
-down = "Nedelujoče"
-healthy = "Zdravo"
-
-[portal.infrastructure.security.access.byok]
-description = "Zagotovite ključ iz svojega KMS. Stirling z njim šifrira, vendar lahko še vedno bere."
-label = "Prinesite svoj ključ (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ključi nikoli ne zapustijo vašega KMS. Stirling hrani samo šifrirano besedilo."
-label = "Obdržite svoj ključ (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling upravlja šifrirne ključe. Najpreprosteje — brez operacij s ključi na vaši strani."
-label = "Ključi pri Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Pravilnik dostopa do dokumentov"
-subheading = "Nadzira, kdo lahko dešifrira obdelane dokumente v mirovanju."
-
-[portal.infrastructure.security.attestations]
-heading = "Potrdila o skladnosti"
-noReport = "Poročilo ni na voljo"
-subheading = "Revizijska drža po posameznih okvirjih, s poročili, ki so na voljo za potrjene kontrole."
-viewReport = "Ogled poročila →"
-
-[portal.infrastructure.security.compliance]
-heading = "Skladnost"
-subheading = "Potrdila in certifikati, ki pokrivajo platformo Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Varnostna konfiguracija vašega delovnega prostora se bo prikazala tukaj."
-title = "Varnostna drža ni na voljo"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Pri HYOK šifrirni ključi nikoli ne zapustijo vašega KMS. Stirling shranjuje in obdeluje samo šifrirano besedilo, ki ga lahko kadar koli prekličete."
-title = "Stirling ne more dešifrirati vaših dokumentov"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Ni konfiguriranih razponov IP — vsi IP-ji so dovoljeni."
-heading = "Seznam dovoljenih IP"
-sub = "API dostop je omejen na te razpone CIDR."
-subLocked = "Omejite API dostop na znane razpone IP — na voljo v plačljivih paketih."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Nadgradite na Pro, da omejite API dostop na določena omrežja."
-title = "Seznami dovoljenih IP so plačljiva funkcija"
-
-[portal.infrastructure.security.ipColumns]
-added = "Dodano"
-addedBy = "Dodal"
-cidr = "CIDR"
-label = "Oznaka"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritem"
-heading = "Upravljanje šifrirnih ključev"
-keyId = "Identifikator ključa"
-lastRotated = "Nazadnje zavrteno"
-rotateKey = "Zavrti ključ"
-rotationPolicy = "Pravilnik vrtenja"
-subheading = "Skrbništvo nad ključi, ki šifrirajo dokumente v mirovanju — kdo lahko dešifrira in kako se ključi vrtijo."
-
-[portal.infrastructure.security.managedBanner]
-description = "Skrbništvo bring-your-own-key (BYOK) in hold-your-own-key (HYOK) je na voljo v Enterprise. Nadgradite, da zagotovite ključe iz svojega KMS."
-title = "Ključe v vašem paketu upravlja Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Azija-Pacifik"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR meja podatkov"
-label = "Evropska unija"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Združene države"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Rezidentnost podatkov"
-subheading = "Kje so dokumenti shranjeni in obdelani."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} uporabljeno"
-
-[portal.infrastructure.storage.empty]
-description = "Povezana shramba in uporaba se prikažeta tukaj."
-title = "Shramba ni konfigurirana"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktivno"
-activeRange = "0–{{value}}d"
-archived = "Arhivirano"
-coldStorage = "hladna shramba"
-deleted = "Izbrisano"
-never = "nikoli"
-purged = "trajno izbrisano"
-
-[portal.infrastructure.storage.providers]
-connect = "Poveži"
-connected = "Povezano"
-heading = "Povezani ponudniki"
-subheading = "Kam se zapisujejo obdelani artefakti."
-
-[portal.infrastructure.storage.retention]
-heading = "Hramba"
-subheading = "Kako dolgo se artefakti hranijo pred brisanjem v življenjskem ciklu."
-windowLabel = "Privzeto obdobje hrambe"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dan"
-days_other = "{{count}} dni"
-never = "Nikoli ne izbriši"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Skupna uporaba"
-progressLabel = "Uporabljena shramba"
-subheading = "Shramba, porabljena pri vseh povezanih ponudnikih."
-
 [portal.infrastructure.tabs]
 apiKeys = "API ključi"
 audit = "Revizijski dnevniki"
@@ -7715,11 +7657,9 @@ security = "Varnost"
 storage = "Shramba"
 
 [portal.integrations]
-addAnother = "Dodaj še eno"
 availableHeading = "Na voljo"
 comingSoonHeading = "Kmalu na voljo"
 connect = "Poveži"
-connectedHeading = "Povezano"
 connectionCount_one = "{{count}} povezava"
 connectionCount_other = "{{count}} povezav"
 customApi = "API po meri"
@@ -7737,6 +7677,10 @@ security = "Varnost"
 signing = "Podpisovanje"
 storage = "Shramba"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Povezano"
 
@@ -7767,7 +7711,6 @@ integrations = "Integracije"
 pipelines = "Pipelines"
 policies = "Pravilniki"
 procurement = "Nabava"
-settings = "Nastavitve"
 sources = "Viri"
 usage = "Uporaba in obračunavanje"
 users = "Uporabniki"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Nov pipeline"
 
 [portal.pipelines.builder]
-addStep = "Dodaj orodje"
+activate = "Activate"
 back = "Nazaj na pipelines"
 cannotFollow = "Ne more sprejeti {{produced}}"
 chooseAccount = "Izberite račun"
@@ -7792,28 +7735,38 @@ chooseDestination = "Izberite cilj"
 chooseOperation = "Izberite, kaj naredi ta korak"
 chooseSource = "Izberite vir"
 discard = "Zavrzi spremembe"
-enabled = "Omogočeno"
 inputs = "Vhod"
 inputSource = "Vhodni vir"
 inputTrigger = "Sprožilec"
 keepEditing = "Nadaljuj urejanje"
+moreActions = "More actions"
 needsConfiguring = "Potrebna je nastavitev"
-needsUpload = "Potrebuje naloženo datoteko"
-noSources = "Viri še niso povezani. Ustvarite enega, da ga uporabite kot vhod."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nobeno orodje se ne ujema z vašim iskanjem."
-pipelineSettings = "Nastavitve pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Išči orodja"
-selectToolBody = "Dodajte orodje za gradnjo pipeline."
-selectToolTitle = "Orodij še ni"
 sendToSystem = "Pošlji v drug sistem"
 stepsIncompatible = "Ti koraki se ne morejo zagnati na tem, kar proizvede njihov prejšnji korak: {{tools}}."
 stepsNeedSetup = "Te korake je treba pred shranjevanjem še nastaviti: {{tools}}."
-toolSettings = "Nastavitve orodja"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Neprepoznana operacija, ohranjena takšna, kot je."
 unsavedBody = "Imate neshranjene spremembe. Jih želite shraniti pred odhodom ali jih zavreči?"
 unsavedTitle = "Neshranjene spremembe"
-uploadUnsupported = "Naložene datoteke v pipelines še niso podprte, zato teh korakov ni mogoče shraniti: {{tools}}."
 usesDefaults = "Zažene se s privzetimi nastavitvami"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Združi vsako datoteko iz prejšnjega koraka"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Ni mogoče preveriti, kaj ta korak sprejme"
 
 [portal.pipelines.composer]
 addTool = "Dodaj orodje"
-cancel = "Prekliči"
-chainEmpty = "Dodajte orodje, da začnete graditi svoj pipeline."
 create = "Ustvari pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Prikaz teh parametrov orodja za urejanje še ni podprt."
-moveDown = "Premakni dol"
-moveUp = "Premakni gor"
+editSource = "Edit source"
 name = "Ime"
 namePlaceholder = "npr. Pregled redakcij"
 noToolSettings = "To orodje nima nastavljivih možnosti."
-operations_one = "Operacija ({{count}})"
-operations_other = "Operacije ({{count}})"
 output = "Izhod"
-removeStep = "Odstrani operacijo"
 save = "Shrani spremembe"
 scheduleEvery = "Zaženi vsakih"
-sources = "Viri"
-sourcesLoading = "Nalaganje virov..."
 trigger = "Sprožilec"
 triggerManual = "Samo ročno"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dni"
 hours = "ur"
 minutes = "minut"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Izbrisati \"{{name}}\"? Tega ni mogoče razveljaviti."
 cancel = "Prekliči"
@@ -7867,6 +7825,37 @@ connectSource = "Poveži vir"
 description = "Ustvarite svoj prvi pipeline: izberite vire, na katerih se izvaja, povežite operacije in izberite, kam gre izhod."
 title = "Pipelines še ni"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktivni"
 paused = "Zaustavljeni"
@@ -7879,7 +7868,6 @@ completed_one = "Zagon končan."
 completed_other = "Vseh {{count}} zagonov je končanih."
 empty = "Ničesar ni za zagnati: viri niso imeli dokumentov za obdelavo."
 failed = "Zagon ni uspel: {{error}}"
-historyCleared = "Zgodovina počiščena. Naslednji zagon ponovno obdela vse, kar je trenutno v virih."
 inFlight = "Ni nič novega za zagon: dokumenti se še vedno obdelujejo iz prejšnjega zagona."
 parked_one = "Ni ničesar za zagon: {{count}} dokument je prej spodletel in je parkiran. Odpravite vzrok, nato počistite zgodovino, da poskusite znova."
 parked_other = "Ni ničesar za zagon: {{count}} dokumentov je prej spodletelo in so parkirani. Odpravite vzrok, nato počistite zgodovino, da poskusite znova."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Viri"
 status = "Stanje"
 steps = "Koraki"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Nadzor mape"
@@ -8209,6 +8198,24 @@ label = "Priloži zadevi Jira"
 description = "Pošlje obdelani dokument kot prilogo."
 label = "Pošlji dokument po e-pošti (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Zapiše obdelani dokument v mapo."
 label = "Naloži v Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Dosežena omejitev"
 subtitle = "Vaš brezplačni preizkus traja do {{date}}. Kartica ni potrebna."
 title = "Enterprise preizkus"
 
-[portal.search]
-ariaLabel = "Iskanje"
-placeholder = "Išči Stirling — endpointi, cevovodi, dokumenti…"
-
-[portal.search.empty]
-noActionsDescription = "Hitra dejanja se bodo prikazala tukaj, ko bodo na voljo."
-noActionsTitle = "Ni hitrih dejanj"
-noMatches = "Ni zadetkov za \"{{query}}\""
-noMatchesDescription = "Poskusite z drugo ključno besedo ali prebrskajte katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Prekliči"
 confirm = "Izbriši"
 title = "Izbriši vir?"
 
-[portal.sources.empty]
-description = "Povežite mapo (in kmalu shrambo v oblaku), da bodo vaši pravilniki imeli od kod pridobivati dokumente."
-title = "Ni še povezanih virov"
-
 [portal.sources.kpi]
 inUse = "V uporabi"
 total = "Povezave"
@@ -8785,6 +8778,7 @@ unused = "Neuporabljeno"
 documents = "Dokumenti"
 source = "Vir"
 status = "Stanje"
+type = "Type"
 usedBy = "Pravilniki"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politike in zasebnost"
 [settings.preferences]
 title = "Nastavitve"
 
-[settings.search]
-placeholder = "Išči po straneh nastavitev..."
-
 [settings.security]
 description = "Posodobite geslo, da ostane vaš račun varen."
 title = "Varnost"
@@ -10128,6 +10119,7 @@ last = "Zadnja stran"
 maintainRatio = "Preklopi ohranjanje razmerja stranic"
 next = "Naslednja stran"
 noSavedSigs = "Ni shranjenih podpisov"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Osebni podpisi"
 previous = "Prejšnja stran"
 redo = "Ponovi"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Odstranjevanje ozadja ni uspelo"
 hint = "Naložite sliko podpisa v PNG ali JPG"
 label = "Naložite sliko podpisa"
 placeholder = "Izberite slikovno datoteko"
+previewAlt = "Current image signature"
 processing = "Obdelava slike..."
 removeBackground = "Odstrani belo ozadje (naredi prozorno)"
 
@@ -10179,6 +10172,17 @@ saved = "Zgoraj izberite shranjen podpis, nato kliknite kjer koli na PDF-ju, da
 text = "Ko zgoraj vnesete svoje ime, kliknite kjerkoli v PDF, da postavite podpis."
 title = "Kako dodati podpis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Premakni podpis"
 pause = "Začasno ustavi postavljanje"
@@ -10625,6 +10629,23 @@ title = "Naloži na strežnik"
 updateButton = "Posodobi na strežniku"
 uploadButton = "Naloži na strežnik"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Pojdi nazaj"
 pdfTools = "Orodja PDF"
 placeholder = "Izberite orodje za začetek"
 premiumFeature = "Premium funkcija:"
-searchTools = "Iskanje orodij"
 toolsHeader = "Orodja"
 viewAllTools = "Prikaži vsa orodja"
 
@@ -10822,6 +10842,9 @@ removal = "Odstranjevanje"
 signing = "Podpisovanje"
 verification = "Preverjanje"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Ni najdenih orodij"
 noTools = "Ni razpoložljivih orodij"
@@ -10979,6 +11002,13 @@ approver = "Odobri pravilnik"
 editor = "Urejevalnik"
 processor = "Procesor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Prekličem povabilo za {{email}}? S trenutno povezavo se ne bodo mogli pridružiti."
 cancelInviteTitle = "Prekliči povabilo"
@@ -10998,10 +11028,8 @@ title = "Ni še članov"
 addToTeam = "Dodaj v ekipo"
 guestCount = "{{count}} gost"
 guests = "Gostje"
-guestsDesc = "Zunanji sodelavci, omejeni na to, kar ste delili. Samo urejevalnik."
 ledBy = "vodi {{owner}}"
 org = "Organizacija"
-orgDesc = "Lastniki z avtoriteto za celotno organizacijo in odobritvijo pravilnikov"
 owners = "{{count}} lastnik"
 team = "Ekipa {{name}}"
 teamMeta = "{{count}} oseb"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Povabil/-a {{who}}"
 cancel = "Prekliči"
-count = "{{count}} na čakanju"
-desc = "Povabljene osebe, ki se še niso pridružile. Zasedajo mesto, dokler ne sprejmejo povabila."
 expiresInDays_one = "Poteče čez {{count}} dan"
 expiresInDays_other = "Poteče čez {{count}} dni"
 expiresToday = "Poteče danes"
 title = "Povabila na čakanju"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Pri dostopu do zalednega sistema je prišlo do napake ali pa nimate dostopa. Poskusite znova."
 title = "Članov ni bilo mogoče naložiti"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Išči priloge"
 title = "Priloge"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Naslov zaznamka"
 bookmarkTitleRequired = "Naslov zaznamka je obvezen"
 closeSidebar = "Zapri stransko vrstico zaznamkov"
 collapseAll = "Strni vse zaznamke"
+empty = "No bookmarks in this document"
 expandAll = "Razširi vse zaznamke"
 searchPlaceholder = "Iskanje zaznamkov"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Dodaj komentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Najdi v dokumentu"
 moreActions = "Več dejanj"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Stran {{page}}"
 placingHint = "Kliknite stran za postavitev… (prekliči)"
 removeCommentOnly = "Odstrani samo komentar"
 saveReply = "Shrani odgovor"
+searchPlaceholder = "Search comments"
 title = "Komentarji"
 typeComment = "Komentar"
 typeInsertText = "Vstavi besedilo"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Imate neshranjene spremembe"
 closeSidebar = "Zapri stransko vrstico plasti"
 hideAll = "Skrij vse plasti"
 showAll = "Prikaži vse plasti"
+title = "Layers"
 
 [viewer.link]
 delete = "Izbriši povezavo"
@@ -11646,6 +11682,7 @@ exitRedaction = "Izhod iz načina redakcije"
 exportAll = "Izvozi PDF"
 exportSelected = "Izvozi izbrane strani"
 formFill = "Izpolni obrazec"
+hideToolbar = "Hide toolbar"
 multiTool = "Večnamensko orodje"
 panMode = "Način premikanja"
 print = "Natisni PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Izberi vse"
 selectByNumber = "Izberi po številkah strani"
 selectLanguage = "Izberi jezik"
 share = "Delite"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Preklopi vidnost anotacij"
 toggleAttachments = "Preklopi priloge"
 toggleBookmarks = "Preklopi zaznamke"
diff --git a/frontend/editor/public/locales/sr-LATN-RS/translation.toml b/frontend/editor/public/locales/sr-LATN-RS/translation.toml
index f33616fc44..fb1ec724ae 100644
--- a/frontend/editor/public/locales/sr-LATN-RS/translation.toml
+++ b/frontend/editor/public/locales/sr-LATN-RS/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Primeni"
 applyAndContinue = "Sačuvaj i napusti"
-areYouSure = "Da li ste sigurni da želite da napustite?"
 back = "Nazad"
 black = "Crno"
 blue = "Plavo"
@@ -106,6 +105,7 @@ undoSuccess = "Operacija uspešno poništena"
 unknown = "Nepoznato"
 unpin = "Otkači datoteku (zameni nakon pokretanja alata)"
 unsavedChanges = "Imate nesačuvane promene u svom PDF-u."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Nesačuvane promene"
 unsupported = "Nije podržano"
 username = "Korisničko ime"
@@ -1879,6 +1879,9 @@ width = "Širina"
 [app]
 description = "Besplatna alternativa Adobe Acrobat‑u (10M+ preuzimanja)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konvertuj u PDF/A-3b"
 convertToPdfA3bDescription = "Kreira arhivski PDF sa ugrađenim prilozima"
@@ -2933,12 +2936,16 @@ text = "Da biste ove dozvole učinili neizmenjivim, koristite alat Dodaj lozinku
 [chat.actions]
 copy = "Kopiraj poruku"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Opcije Stirling agenta"
+assistant = "AI Assistant"
 clearChat = "Obriši čet"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Ova operacija će potrošiti vaše cloud kredite"
 tooltip = "Izaberi boju sa ekrana"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Izaberite boju"
 
 [common]
+actions = "Actions"
 back = "Nazad"
 cancel = "Otkaži"
 close = "Zatvori"
+codeSample = "Code sample"
 collapse = "Skupi"
 confirm = "Potvrdi"
 continue = "Nastavi"
 copied = "Kopirano!"
 copy = "Kopiraj"
 done = "Gotovo"
+enterValue = "Enter value"
 error = "Greška"
 expand = "Proširi"
 loading = "Učitavanje..."
 next = "Sledeće"
+open = "Open"
 preview = "Pregled"
 previous = "Prethodno"
 refresh = "Osveži"
 remaining = "Preostalo"
 retry = "Pokušaj ponovo"
 save = "Sačuvaj"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Obriši izabrano"
@@ -3185,6 +3199,7 @@ title = "Metod kompresije"
 [compress.settings]
 desiredSize = "Željena veličina fajla"
 desiredSizePlaceholder = "Unesite veličinu"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Kompresija je lak način da smanjite veličinu fajla. Izaberite Veličina fajla da unesete ciljnu veličinu i da mi prilagodimo kvalitet za vas. Izaberite Kvalitet da ručno podesite jačinu kompresije."
@@ -3387,6 +3402,24 @@ pdfOptions = "Opcije za PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Prvo izaberite izvorni format"
 settings = "Podešavanja"
 single = "Jedan"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Pretraga..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Uredi"
@@ -3824,11 +3861,13 @@ shareSelected = "Podeli izabrano"
 sharing = "Deljenje"
 showAll = "Prikaži sve"
 showHistory = "Prikaži istoriju"
+sortBy = "Sort files"
 sortByDate = "Sortiraj po datumu"
 sortByName = "Sortiraj po nazivu"
 sortBySize = "Sortiraj po veličini"
 storage = "Skladište"
 storageState = "Skladište"
+storageUsed = "Storage used"
 synced = "Sinhronizovano"
 title = "Otpremi PDF datoteke"
 toolChain = "Primеnjeni alati"
@@ -3874,8 +3913,12 @@ addFiles = "Dodaj datoteke"
 addingFiles = "Dodavanje fajlova…"
 collapse = "Skupi bočnu traku"
 customizeGroups = "Prilagodi grupe"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Otvorite datoteke da biste započeli"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Proširi bočnu traku"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive nije konfigurisan"
@@ -3888,15 +3931,17 @@ openFromComputer = "Otvori sa računara"
 openSettings = "Otvori podešavanja"
 other = "Ostalo"
 recent = "Nedavno"
-search = "Pretraga"
-searchPlaceholder = "Pretraži datoteke..."
 viewAll = "Prikaži svih {{count}} fajlova"
 
 [fileSidebar.fileItem]
 closeViewer = "Zatvori pregledač"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Otvori u pregledaču"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Vrati na podrazumevano"
 subtitle = "Grupišite fajlove u nadređene kategorije. Dodajte postojeće ili nove oznake u kategoriju, preimenujte je ili kreirajte svoju. Fajlovi koji nisu ni u jednoj kategoriji prikazuju se pod „Ostalo”."
 title = "Kategorije bočne trake"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Dodaj u radni prostor"
 addToWorkspaceCount = "Dodaj {{count}} u radni prostor"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Nazad na Moje fajlove"
 breadcrumbs = "Putanja fascikle"
 cancel = "Otkaži"
 classification = "Klasifikacija"
-clearSearch = "Obriši pretragu"
 clearSelection = "Poništi izbor"
 closeDetails = "Zatvori detalje"
 create = "Kreiraj"
@@ -3950,6 +4002,7 @@ downloadAll = "Preuzmi sve"
 downloadVersion = "Preuzmi ovu verziju"
 dropOverlay = "Ispustite fajlove za otpremanje"
 dropOverlaySub = "Fajlovi počinju u Lokalno. Koristite 'Premesti u' ili 'Sačuvaj u oblaku' da ih organizujete u fasciklu."
+duplicate = "Duplicate"
 file = "Fajl"
 fileInfo = "File info"
 fileMenu = "Radnje nad fajlom"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Promeni veličinu stabla fascikli (tasteri sa strelicama, Sh
 save = "Sačuvaj"
 saveToServer = "Sačuvaj na server"
 saveToServerDisabledHint = "Čuvanje na serveru nije omogućeno na ovom serveru. Zamolite administratora da ga uključi."
-search = "Pretraga"
-searchPlaceholder = "Pretraži ovu fasciklu i potfascikle"
 selectAll = "Izaberi sve"
 selectAllHint = "Kliknite da izaberete sve. Savet: držite Ctrl (ili Cmd) da dodajete fajlove jedan po jedan, Shift za izbor opsega."
 selectedCount = "{{count}} izabrano"
@@ -4044,6 +4095,10 @@ title = "Još nema cloud fajlova"
 hint = "Fajlovi sačuvani bez otpremanja ostaju ovde. Ispustite fajl da dodate jedan."
 title = "Nema samo-lokalnih fajlova"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Fajlovi koje otvorite ili izmenite pojaviće se ovde."
 title = "Još ništa nije izmenjeno"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Nije moguće obrisati fasciklu."
 deleteFolderFailedDetail = "Nije moguće obrisati fasciklu: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Nije moguće ažurirati izgled fascikle."
 folderAppearanceFailedDetail = "Nije moguće ažurirati izgled fascikle: {{message}}"
 moveFilesFailed = "Nije moguće premestiti fajlove."
@@ -4113,6 +4170,11 @@ localHint = "Samo skladišteno u ovom pregledaču"
 shared = "Podeljeno"
 sharedHint = "Podeljeno sa vama putem linka"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Najstarije prvo"
 modifiedDesc = "Najnovije prvo"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Nema fajlova u skladištu. Prvo otvorite neke fajlove."
 open = "Otvori"
 openFile = "Otvori fajl"
 openFiles = "Otvori fajlove"
+selectFile = "Select {{name}}"
 selectFromStorage = "Izaberi iz skladišta"
 upload = "Otpremi"
 uploadFile = "Otpremi datoteku"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Sve je sačuvano"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Izdvajanje CSV-a nije uspelo"
 extractXlsxError = "Izdvajanje XLSX-a nije uspelo"
+filled = "filled"
 flattenAfterFilling = "Zapečati nakon popunjavanja"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obav"
 requiredFieldsError = "Popunite sva obavezna polja"
 rescanFields = "Ponovo skeniraj polja"
@@ -4795,9 +4863,6 @@ title = "Slika u PDF"
 [imageToPdf]
 tags = "konverzija,img,jpg,slika,foto"
 
-[infoBanner]
-dismiss = "Odbaci"
-
 [invite]
 acceptError = "Kreiranje naloga nije uspelo"
 accountFor = "Kreiranje naloga za"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Otpremanje uspešno!"
 uploadSuccessMessage = "Vaše slike su prenete."
 validating = "Provera sesije..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Skenirajte da otpremite fotografije. Slike se automatski konvertuju u PDF."
 descriptionNoConvert = "Skenirajte da otpremite fotografije sa mobilnog uređaja."
@@ -4997,8 +5090,13 @@ title = "Otpremi sa mobilnog"
 tags = "Multi Alat,Multi operacija,Korisnički interfejs,klik i povuci,front end,klijentska strana,interaktivno,pomera"
 title = "PDF Multi Alatka"
 
-[navbar]
-search = "Pretraga"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentikacija nije uspela. Možete zatvoriti ovaj prozor i pokušati ponovo."
@@ -5127,6 +5225,7 @@ activeFiles = "Prikaz <strong>Active Files</strong> pokazuje sve PDF-ove koje st
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Zatvori"
 cropSettings = "Sada kada smo izabrali fajl koji želimo da isečemo, možemo podesiti alat Crop da odaberemo oblast na koju želimo da isečemo PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Klikom na neki fajl birate ga za obradu. Možete izabrati više fajlova za grupne operacije."
 fileReplacement = "Izmenjeni fajl će automatski zameniti original u Workbench-u, što vam omogućava da ga lako obradite kroz dodatne alate."
 filesButton = "Dugme <strong>Files</strong> na traci brzog pristupa omogućava otpremanje PDF-ova na kojima ćete koristiti alate."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF u PDF/A"
 tags = "arhiva,dugoročno,standard,konverzija,čuvanje,čuvanje"
 title = "PDF u PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "štampa,standard,konverzija,produkcija,pretštampa,arhiva"
 title = "PDF u PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 kredita"
 xsmall = "100 kredita"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Izaberite paket koji odgovara vašim potrebama"
 title = "Dostupni paketi"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Dostignut je mesečni limit potrošnje"
 title = "Nije moguće otvoriti Stripe portal"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "od {{allowance}} besplatnih PDF dokumenata iskorišćeno"
 capSuffix_other = "od {{allowance}} besplatnih PDF dokumenata iskorišćeno"
 eyebrow = "Processor probni period"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Pošaljite dokument ili obaveštenje email-om kada se pravilo pokrene."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Sačuvajte obrađene dokumente u Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Zvanični SDK-ovi"
 beta = "Beta"
 deprecated = "Zastarelo"
 
-[portal.docs.search]
-empty = "Nema odgovarajuće dokumentacije"
-placeholder = "Pretraži dokumentaciju"
-results = "{{count}} rezultata"
-
 [portal.docs.skills]
 eyebrow = "VEŠTINE"
 lead = "Ugrađene, imenovane mogućnosti koje vaš agent poziva kao jedan alat. Svaka veština je deterministički lanac operacija sa priloženim evals."
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "Nijedan dokument ne odgovara ovom filteru."
 rowActions = "Radnje reda"
 sensitiveLabel = "Osetljivo"
-sensitiveTitle = "Osetljivo — potreban pristup"
 
 [portal.documents.table.columns]
 action = "Procesni tok / Radnja"
 document = "Dokument"
+labels = "Labels"
 product = "Proizvod"
 status = "Status"
 time = "Vreme"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Poslednji put viđeno"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Verzija"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Ovaj prikaz je naišao na neočekivanu grešku. Pokušajte ponovo
 retry = "Pokušajte ponovo"
 title = "Nešto je pošlo naopako na ovoj stranici"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Nazad"
 body = "Preuzmite desktop aplikaciju ili self-hostujte server."
@@ -7380,11 +7560,6 @@ cancel = "Otkaži"
 confirm = "Opozovi ključ"
 title = "Opozovi API ključ"
 
-[portal.infrastructure.attestationLabel]
-attested = "Atestirano"
-inScope = "U opsegu"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtriraj audit događaje po kategoriji"
 heading = "Audit zapisi"
@@ -7456,11 +7631,6 @@ info = "Informacija"
 success = "Uspeh"
 warning = "Upozorenje"
 
-[portal.infrastructure.certLabel]
-certified = "Sertifikovano"
-inProgress = "U toku"
-notStarted = "Nije započeto"
-
 [portal.infrastructure.createKey]
 cancel = "Otkaži"
 createKey = "Kreiraj ključ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopirajte ovu tajnu sada — neće biti ponovo prikazana."
 title = "Kreiraj API ključ"
 titleCreated = "Ključ je kreiran"
 
-[portal.infrastructure.deployLabel]
-live = "Uživo"
-queued = "U redu čekanja"
-rolledBack = "Vraćeno na prethodnu verziju"
-rolling = "Uvođenje u toku"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Postavio"
-environment = "Okruženje"
-product = "Proizvod"
-status = "Status"
-version = "Verzija"
-when = "Kada"
-
-[portal.infrastructure.deployments.recent]
-heading = "Nedavna postavljanja"
-subheading = "Najnovija uvođenja kroz proizvode i okruženja."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instance"
-latency = "Latencija"
-load = "Opterećenje"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Propusnost"
-uptime = "Vreme rada"
-version = "Verzija"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regioni"
-subheading = "Uživo stanje svakog postavljenog Stirling regiona — latencija, opterećenje i verzija uvođenja."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Postavljeni regioni će se ovde pojaviti kada vaš radni prostor bude obezbeđen."
-title = "Nema postavljenih regiona"
-
 [portal.infrastructure.keyLabel]
 active = "Aktivno"
 revoked = "Opozvano"
 
-[portal.infrastructure.modelLabel]
-active = "Aktivno"
-degraded = "Degradirano"
-disabled = "Onemogućeno"
-
-[portal.infrastructure.models]
-heading = "Modeli"
-msValue = "{{value}} ms"
-subheading = "Katalog modela i rutiranje koje pokreće obradu dokumenata u vašem radnom prostoru."
-
-[portal.infrastructure.models.byom]
-description = "Registrujte on-prem ili self-hosted model i vežite ga za region radi obrade u skladu sa rezidentnošću podataka."
-title = "Donesite sopstveni model"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Upravljani modeli dostupni vašem radnom prostoru, sa latencijom i cenom uživo."
-subEnterprise = "Upravljani, sopstveni i on-prem modeli — sa dostupnim vezivanjem po regionu."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modeli u katalogu vašeg radnog prostora pojavljuju se ovde."
-title = "Nema dostupnih modela"
-
-[portal.infrastructure.models.columns]
-cost = "Cena"
-latency = "Latencija"
-load = "Opterećenje"
-model = "Model"
-status = "Status"
-type = "Tip"
-version = "Verzija"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/poziv"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktivni modeli"
-avgLatency = "Prosečna latencija"
-included = "Uključeno"
-monthlySpend = "Mesečna potrošnja za modele"
-
-[portal.infrastructure.models.routing]
-empty = "Nema konfigurisanih pravila rutiranja."
-heading = "Pravila rutiranja"
-sub = "Koji model obrađuje svaku operaciju. Podrazumevano se primenjuje kada se ne poklopi uže pravilo."
-subLocked = "Rutirajte operacije ka određenim modelima — dostupno na plaćenim planovima."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Nadogradite na Pro da kontrolišete koji model obrađuje svaku operaciju i tip dokumenta."
-title = "Rutiranje modela je plaćena funkcija"
-
-[portal.infrastructure.models.routingColumns]
-default = "Podrazumevano"
-docType = "Tip dokumenta"
-modelForAria = "Model za {{operation}}"
-operation = "Operacija"
-routedTo = "Rutirano ka"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klasifikacija"
-extraction = "Ekstrakcija"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Degradirano"
-down = "Nedostupno"
-healthy = "Ispravno"
-
-[portal.infrastructure.security.access.byok]
-description = "Obezbedite ključ iz sopstvenog KMS. Stirling šifruje njime, ali i dalje može da čita."
-label = "Donesite sopstveni ključ (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ključevi nikada ne napuštaju vaš KMS. Stirling čuva samo šifrovani tekst."
-label = "Zadržite sopstveni ključ (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling upravlja ključevima za šifrovanje. Najjednostavnije — bez upravljanja ključevima sa vaše strane."
-label = "Ključevi koje drži Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Politika pristupa dokumentima"
-subheading = "Kontroliše ko može da dešifruje obrađene dokumente u mirovanju."
-
-[portal.infrastructure.security.attestations]
-heading = "Potvrde usklađenosti"
-noReport = "Nema dostupnog izveštaja"
-subheading = "Audit položaj po okvirima, sa izveštajima dostupnim za potvrđene kontrole."
-viewReport = "Prikaži izveštaj →"
-
-[portal.infrastructure.security.compliance]
-heading = "Usklađenost"
-subheading = "Potvrde i sertifikati koji pokrivaju Stirling platformu."
-
-[portal.infrastructure.security.empty]
-description = "Bezbednosna konfiguracija vašeg radnog prostora će se ovde pojaviti."
-title = "Bezbednosni položaj nije dostupan"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Uz HYOK, ključevi za šifrovanje nikada ne napuštaju vaš KMS. Stirling čuva i obrađuje samo šifrovani tekst koji možete opozvati u bilo kom trenutku."
-title = "Stirling ne može da dešifruje vaše dokumente"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Nema konfigurisanih IP opsega — sve IP adrese su dozvoljene."
-heading = "IP allowlist"
-sub = "API pristup je ograničen na ove CIDR opsege."
-subLocked = "Ograničite API pristup na poznate IP opsege — dostupno na plaćenim planovima."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Nadogradite na Pro da ograničite API pristup na određene mreže."
-title = "IP allowlisting je plaćena funkcija"
-
-[portal.infrastructure.security.ipColumns]
-added = "Dodato"
-addedBy = "Dodao"
-cidr = "CIDR"
-label = "Oznaka"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Upravljanje ključevima za šifrovanje"
-keyId = "Identifikator ključa"
-lastRotated = "Poslednja rotacija"
-rotateKey = "Rotiraj ključ"
-rotationPolicy = "Politika rotacije"
-subheading = "Starateljstvo nad ključevima koji šifruju dokumente u mirovanju — ko može da dešifruje i kako se ključevi rotiraju."
-
-[portal.infrastructure.security.managedBanner]
-description = "Starateljstvo po principu donesite sopstveni ključ (BYOK) i zadržite sopstveni ključ (HYOK) dostupno je na Enterprise planu. Nadogradite da obezbedite ključeve iz sopstvenog KMS."
-title = "Ključevima na vašem planu upravlja Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Azijsko-pacifički region"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR granica podataka"
-label = "Evropska unija"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Sjedinjene Države"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Rezidentnost podataka"
-subheading = "Gde se dokumenti čuvaju i obrađuju."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} iskorišćeno"
-
-[portal.infrastructure.storage.empty]
-description = "Povezano skladište i korišćenje će se ovde pojaviti."
-title = "Nema konfigurisanog skladišta"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktivno"
-activeRange = "0–{{value}}d"
-archived = "Arhivirano"
-coldStorage = "hladno skladište"
-deleted = "Obrisano"
-never = "nikada"
-purged = "trajno obrisano"
-
-[portal.infrastructure.storage.providers]
-connect = "Poveži"
-connected = "Povezano"
-heading = "Povezani pružaoci"
-subheading = "Gde se upisuju obrađeni artefakti."
-
-[portal.infrastructure.storage.retention]
-heading = "Zadržavanje"
-subheading = "Koliko dugo se artefakti čuvaju pre brisanja tokom životnog ciklusa."
-windowLabel = "Podrazumevani period zadržavanja"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dan"
-days_other = "{{count}} dana"
-never = "Nikada ne briši"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Ukupno korišćenje"
-progressLabel = "Iskorišćeno skladište"
-subheading = "Skladište potrošeno kroz sve povezane pružaoce."
-
 [portal.infrastructure.tabs]
 apiKeys = "API ključevi"
 audit = "Audit zapisi"
@@ -7715,11 +7657,9 @@ security = "Bezbednost"
 storage = "Skladište"
 
 [portal.integrations]
-addAnother = "Dodaj još jednu"
 availableHeading = "Dostupno"
 comingSoonHeading = "Uskoro"
 connect = "Poveži"
-connectedHeading = "Povezano"
 connectionCount_one = "{{count}} veza"
 connectionCount_other = "{{count}} veza"
 customApi = "Prilagođeni API"
@@ -7737,6 +7677,10 @@ security = "Bezbednost"
 signing = "Potpisivanje"
 storage = "Skladište"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Povezano"
 
@@ -7767,7 +7711,6 @@ integrations = "Integracije"
 pipelines = "Procesni tokovi"
 policies = "Politike"
 procurement = "Nabavka"
-settings = "Podešavanja"
 sources = "Izvori"
 usage = "Korišćenje i naplata"
 users = "Korisnici"
@@ -7784,7 +7727,7 @@ title = "Procesni tokovi"
 newPipeline = "Novi procesni tok"
 
 [portal.pipelines.builder]
-addStep = "Dodaj alat"
+activate = "Activate"
 back = "Nazad na procesne tokove"
 cannotFollow = "Ne može da prihvati {{produced}}"
 chooseAccount = "Izaberite nalog"
@@ -7792,28 +7735,38 @@ chooseDestination = "Izaberite odredište"
 chooseOperation = "Izaberite šta ovaj korak radi"
 chooseSource = "Izaberite izvor"
 discard = "Odbaci izmene"
-enabled = "Omogućeno"
 inputs = "Unos"
 inputSource = "Izvor unosa"
 inputTrigger = "Okidač"
 keepEditing = "Nastavi uređivanje"
+moreActions = "More actions"
 needsConfiguring = "Potrebno je podešavanje"
-needsUpload = "Potrebna je otpremljena datoteka"
-noSources = "Još nema povezanih izvora. Kreirajte jedan da biste ga koristili kao unos."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Nijedan alat ne odgovara vašoj pretrazi."
-pipelineSettings = "Podešavanja procesnog toka"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Pretraži alate"
-selectToolBody = "Dodajte alat da napravite procesni tok."
-selectToolTitle = "Još nema alata"
 sendToSystem = "Pošalji u drugi sistem"
 stepsIncompatible = "Ovi koraci ne mogu da se pokrenu na onome što njihov prethodni korak proizvodi: {{tools}}."
 stepsNeedSetup = "Ove korake i dalje treba podesiti pre čuvanja: {{tools}}."
-toolSettings = "Podešavanja alata"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Neprepoznata operacija, zadržana kakva jeste."
 unsavedBody = "Imate nesačuvane izmene. Sačuvajte ih pre napuštanja ili ih odbacite?"
 unsavedTitle = "Nesačuvane izmene"
-uploadUnsupported = "Otpremljene datoteke još nisu podržane u procesnim tokovima, pa ovi koraci ne mogu biti sačuvani: {{tools}}."
 usesDefaults = "Pokreće se sa podrazumevanim podešavanjima"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinuje svaku datoteku iz prethodnog koraka"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Nije moguće proveriti šta ovaj korak prihvata"
 
 [portal.pipelines.composer]
 addTool = "Dodaj alat"
-cancel = "Otkaži"
-chainEmpty = "Dodajte alat da počnete da pravite procesni tok."
 create = "Kreiraj procesni tok"
+createPaused = "Create paused"
 editingUnsupported = "Prikaz ovih parametara alata za uređivanje još nije podržan."
-moveDown = "Pomeri dole"
-moveUp = "Pomeri gore"
+editSource = "Edit source"
 name = "Naziv"
 namePlaceholder = "npr. Prolaz za redakciju"
 noToolSettings = "Ovaj alat nema podesiva podešavanja."
-operations_one = "Operacija ({{count}})"
-operations_other = "Operacije ({{count}})"
 output = "Izlaz"
-removeStep = "Ukloni operaciju"
 save = "Sačuvaj izmene"
 scheduleEvery = "Pokreni svakih"
-sources = "Izvori"
-sourcesLoading = "Učitavanje izvora..."
 trigger = "Okidač"
 triggerManual = "Samo ručno"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dana"
 hours = "sati"
 minutes = "minuta"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Obrisati \"{{name}}\"? Ovo se ne može opozvati."
 cancel = "Otkaži"
@@ -7867,6 +7825,37 @@ connectSource = "Poveži izvor"
 description = "Kreirajte svoj prvi procesni tok: izaberite izvore nad kojima se pokreće, povežite operacije u lanac i izaberite gde izlaz ide."
 title = "Još nema procesnih tokova"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktivni"
 paused = "Pauzirani"
@@ -7879,7 +7868,6 @@ completed_one = "Pokretanje je završeno."
 completed_other = "Svih {{count}} pokretanja je završeno."
 empty = "Nema ničega za pokretanje: izvori nisu imali dokumente za obradu."
 failed = "Pokretanje nije uspelo: {{error}}"
-historyCleared = "Istorija je obrisana. Sledeće pokretanje ponovo obrađuje sve što se trenutno nalazi u izvorima."
 inFlight = "Nema ničeg novog za pokretanje: dokumenti se još obrađuju iz ranijeg pokretanja."
 parked_one = "Nema šta da se pokrene: {{count}} dokument prethodno nije uspeo i parkiran je. Otklonite uzrok, zatim obrišite istoriju da biste pokušali ponovo."
 parked_other = "Nema šta da se pokrene: {{count}} dokumenata prethodno nije uspelo i parkirani su. Otklonite uzrok, zatim obrišite istoriju da biste pokušali ponovo."
@@ -7895,6 +7883,7 @@ name = "Procesni tok"
 sources = "Izvori"
 status = "Status"
 steps = "Koraci"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Nadzor foldera"
@@ -8209,6 +8198,24 @@ label = "Priloži uz Jira zadatak"
 description = "Šalje obrađeni dokument kao prilog."
 label = "Pošalji dokument email-om (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Upisuje obrađeni dokument u fasciklu."
 label = "Otpremi u Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maksimalno iskorišćeno"
 subtitle = "Vaš besplatni probni period traje do {{date}}. Kartica nije potrebna."
 title = "Enterprise probni period"
 
-[portal.search]
-ariaLabel = "Pretraga"
-placeholder = "Pretražite Stirling — endpoint-i, tokovi obrade, dokumenti…"
-
-[portal.search.empty]
-noActionsDescription = "Brze radnje će se pojaviti ovde kada budu dostupne."
-noActionsTitle = "Nema brzih radnji"
-noMatches = "Nema poklapanja za \"{{query}}\""
-noMatchesDescription = "Pokušajte sa drugom ključnom reči ili pregledajte katalog."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Otkaži"
 confirm = "Izbriši"
 title = "Izbrisati izvor?"
 
-[portal.sources.empty]
-description = "Povežite fasciklu (a uskoro i cloud skladište) kako bi vaše politike imale odakle da preuzimaju dokumente."
-title = "Još nema povezanih izvora"
-
 [portal.sources.kpi]
 inUse = "U upotrebi"
 total = "Veze"
@@ -8785,6 +8778,7 @@ unused = "Neiskorišćeno"
 documents = "Dokumenti"
 source = "Izvor"
 status = "Status"
+type = "Type"
 usedBy = "Politike"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politike i privatnost"
 [settings.preferences]
 title = "Preferencije"
 
-[settings.search]
-placeholder = "Pretražite stranice podešavanja..."
-
 [settings.security]
 description = "Ažurirajte lozinku da biste svoj nalog održali bezbednim."
 title = "Bezbednost"
@@ -10128,6 +10119,7 @@ last = "Poslednja strana"
 maintainRatio = "Uključi/isključi zadržavanje proporcija"
 next = "Sledeća strana"
 noSavedSigs = "Nema snimljenih potpisa"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Lični potpisi"
 previous = "Prethodna strana"
 redo = "Ponovi"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Uklanjanje pozadine nije uspelo"
 hint = "Otpremite PNG ili JPG sliku svog potpisa"
 label = "Otpremite sliku potpisa"
 placeholder = "Izaberite slikovnu datoteku"
+previewAlt = "Current image signature"
 processing = "Obrada slike..."
 removeBackground = "Ukloni belu pozadinu (učini providnom)"
 
@@ -10179,6 +10172,17 @@ saved = "Izaberite sačuvani potpis iznad, zatim kliknite bilo gde na PDF da ga
 text = "Nakon što unesete svoje ime iznad, kliknite bilo gde na PDF da postavite svoj potpis."
 title = "Kako dodati potpis"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Pomeraj potpis"
 pause = "Pauziraj postavljanje"
@@ -10625,6 +10629,23 @@ title = "Otpremi na server"
 updateButton = "Ažuriraj na serveru"
 uploadButton = "Otpremi na server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Idi nazad"
 pdfTools = "PDF alati"
 placeholder = "Izaberite alat da biste započeli"
 premiumFeature = "Premium funkcija:"
-searchTools = "Pretraži alate"
 toolsHeader = "Alati"
 viewAllTools = "Prikaži sve alate"
 
@@ -10822,6 +10842,9 @@ removal = "Uklanjanje"
 signing = "Potpisivanje"
 verification = "Verifikacija"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Nema pronađenih alata"
 noTools = "Nema dostupnih alata"
@@ -10979,6 +11002,13 @@ approver = "Odobrava politiku"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Otkažite poziv za {{email}}? Ova osoba neće moći da se pridruži pomoću trenutnog linka."
 cancelInviteTitle = "Otkaži poziv"
@@ -10998,10 +11028,8 @@ title = "Još nema članova"
 addToTeam = "Dodaj u tim"
 guestCount = "{{count}} gost"
 guests = "Gosti"
-guestsDesc = "Spoljni saradnici, ograničeni na ono što ste podelili. Samo Editor."
 ledBy = "vodi {{owner}}"
 org = "Organizacija"
-orgDesc = "Vlasnici sa ovlašćenjima na nivou organizacije i odobravanjem politika"
 owners = "{{count}} vlasnik"
 team = "{{name}} tim"
 teamMeta = "{{count}} osoba"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Pozvao/la {{who}}"
 cancel = "Otkaži"
-count = "{{count}} na čekanju"
-desc = "Pozvane osobe koje se još nisu pridružile. Zauzimaju mesto dok ne prihvate."
 expiresInDays_one = "Ističe za {{count}} dan"
 expiresInDays_other = "Ističe za {{count}} dana"
 expiresToday = "Ističe danas"
 title = "Pozivi na čekanju"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Nešto je pošlo naopako pri kontaktiranju backend-a ili nemate pristup. Pokušajte ponovo."
 title = "Nije moguće učitati članove"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Pretraži priloge"
 title = "Prilozi"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Naslov obeleživača"
 bookmarkTitleRequired = "Naslov obeleživača je obavezan"
 closeSidebar = "Zatvori bočnu traku obeleživača"
 collapseAll = "Skupi sve obeleživače"
+empty = "No bookmarks in this document"
 expandAll = "Proširi sve obeleživače"
 searchPlaceholder = "Pretraži obeleživače"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Dodaj komentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Pronađi u dokumentu"
 moreActions = "Više radnji"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Stranica {{page}}"
 placingHint = "Kliknite na stranicu da postavite… (otkaži)"
 removeCommentOnly = "Ukloni samo komentar"
 saveReply = "Sačuvaj odgovor"
+searchPlaceholder = "Search comments"
 title = "Komentari"
 typeComment = "Komentar"
 typeInsertText = "Umetni tekst"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Imate nesačuvane promene"
 closeSidebar = "Zatvori bočnu traku slojeva"
 hideAll = "Sakrij sve slojeve"
 showAll = "Prikaži sve slojeve"
+title = "Layers"
 
 [viewer.link]
 delete = "Obriši link"
@@ -11646,6 +11682,7 @@ exitRedaction = "Izađi iz režima zacrnjivanja"
 exportAll = "Izvezi PDF"
 exportSelected = "Izvezi izabrane stranice"
 formFill = "Popuni obrazac"
+hideToolbar = "Hide toolbar"
 multiTool = "Višenamenski alat"
 panMode = "Režim pomeranja"
 print = "Štampaj PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Izaberi sve"
 selectByNumber = "Izaberi po brojevima stranica"
 selectLanguage = "Izaberi jezik"
 share = "Podeli"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Uključi/isključi vidljivost anotacija"
 toggleAttachments = "Uključi/isključi priloge"
 toggleBookmarks = "Uključi/isključi obeleživače"
diff --git a/frontend/editor/public/locales/sv-SE/translation.toml b/frontend/editor/public/locales/sv-SE/translation.toml
index fd7cf0218b..2576b3bd96 100644
--- a/frontend/editor/public/locales/sv-SE/translation.toml
+++ b/frontend/editor/public/locales/sv-SE/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabet"
 apply = "Verkställ"
 applyAndContinue = "Spara och lämna"
-areYouSure = "Är du säker på att du vill lämna?"
 back = "Tillbaka"
 black = "Svart"
 blue = "Blå"
@@ -106,6 +105,7 @@ undoSuccess = "Åtgärden ångrades"
 unknown = "Okänt"
 unpin = "Lossa fil (ersätt efter verktygskörning)"
 unsavedChanges = "Du har osparade ändringar i din PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Osparade ändringar"
 unsupported = "Stöds inte"
 username = "Användarnamn"
@@ -1879,6 +1879,9 @@ width = "Bredd"
 [app]
 description = "Det kostnadsfria alternativet till Adobe Acrobat (10M+ nedladdningar)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Konvertera till PDF/A-3b"
 convertToPdfA3bDescription = "Skapar en arkiv-PDF med inbäddade bilagor"
@@ -2933,12 +2936,16 @@ text = "För att göra dessa behörigheter oföränderliga, använd verktyget L
 [chat.actions]
 copy = "Kopiera meddelande"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Alternativ för Stirling-agent"
+assistant = "AI Assistant"
 clearChat = "Rensa chatt"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Denna åtgärd kommer att använda dina molnkrediter"
 tooltip = "Välj färg från skärmen"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Välj färg"
 
 [common]
+actions = "Actions"
 back = "Tillbaka"
 cancel = "Avbryt"
 close = "Stäng"
+codeSample = "Code sample"
 collapse = "Fäll ihop"
 confirm = "Bekräfta"
 continue = "Fortsätt"
 copied = "Kopierat!"
 copy = "Kopiera"
 done = "Klar"
+enterValue = "Enter value"
 error = "Fel"
 expand = "Fäll ut"
 loading = "Läser in..."
 next = "Nästa"
+open = "Open"
 preview = "Förhandsgranska"
 previous = "Föregående"
 refresh = "Uppdatera"
 remaining = "Återstår"
 retry = "Försök igen"
 save = "Spara"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Rensa valda"
@@ -3185,6 +3199,7 @@ title = "Komprimeringsmetod"
 [compress.settings]
 desiredSize = "Önskad filstorlek"
 desiredSizePlaceholder = "Ange storlek"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Komprimering är ett enkelt sätt att minska filstorleken. Välj Filstorlek för att ange en målstorlek så justerar vi kvaliteten åt dig. Välj Kvalitet för att ställa in komprimeringsstyrkan manuellt."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF‑alternativ"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Välj först ett källformat"
 settings = "Inställningar"
 single = "En"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Sök..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Redigera"
@@ -3824,11 +3861,13 @@ shareSelected = "Dela valda"
 sharing = "Delning"
 showAll = "Visa alla"
 showHistory = "Visa historik"
+sortBy = "Sort files"
 sortByDate = "Sortera efter datum"
 sortByName = "Sortera efter namn"
 sortBySize = "Sortera efter storlek"
 storage = "Lagring"
 storageState = "Lagring"
+storageUsed = "Storage used"
 synced = "Synkroniserad"
 title = "Ladda upp PDF-filer"
 toolChain = "Tillämpade verktyg"
@@ -3874,8 +3913,12 @@ addFiles = "Lägg till filer"
 addingFiles = "Lägger till filer…"
 collapse = "Fäll ihop sidofält"
 customizeGroups = "Anpassa grupper"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Öppna filer för att komma igång"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Expandera sidofält"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive är inte konfigurerat"
@@ -3888,15 +3931,17 @@ openFromComputer = "Öppna från dator"
 openSettings = "Öppna inställningar"
 other = "Annat"
 recent = "Senaste"
-search = "Sök"
-searchPlaceholder = "Sök filer..."
 viewAll = "Visa alla {{count}} filer"
 
 [fileSidebar.fileItem]
 closeViewer = "Stäng visare"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Öppna i visare"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Återställ till standard"
 subtitle = "Gruppera dina filer i överordnade kategorier. Lägg till befintliga eller nya etiketter i en kategori, byt namn på den eller skapa en egen. Filer som inte finns i någon av dina kategorier visas under ”Annat”."
 title = "Sidofältskategorier"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Lägg till i arbetsyta"
 addToWorkspaceCount = "Lägg till {{count}} i arbetsyta"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Tillbaka till Mina filer"
 breadcrumbs = "Mappsökväg"
 cancel = "Avbryt"
 classification = "Klassificering"
-clearSearch = "Rensa sökning"
 clearSelection = "Rensa markering"
 closeDetails = "Stäng detaljer"
 create = "Skapa"
@@ -3950,6 +4002,7 @@ downloadAll = "Ladda ner alla"
 downloadVersion = "Ladda ner den här versionen"
 dropOverlay = "Släpp filer för att ladda upp"
 dropOverlaySub = "Filer börjar i Lokalt. Använd 'Flytta till' eller 'Spara till molnet' för att organisera dem i en mapp."
+duplicate = "Duplicate"
 file = "Fil"
 fileInfo = "File info"
 fileMenu = "Filåtgärder"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Ändra storlek på mappträdet (piltangenter, Skift för st
 save = "Spara"
 saveToServer = "Spara till servern"
 saveToServerDisabledHint = "Spara till servern är inte aktiverat på denna server. Be din administratör att aktivera det."
-search = "Sök"
-searchPlaceholder = "Sök i den här mappen och undermappar"
 selectAll = "Markera alla"
 selectAllHint = "Klicka för att markera alla. Tips: håll Ctrl (eller Cmd) för att lägga till filer en i taget, Skift för att markera ett intervall."
 selectedCount = "{{count}} markerade"
@@ -4044,6 +4095,10 @@ title = "Inga molnfiler ännu"
 hint = "Filer som sparas utan uppladdning stannar här. Släpp en fil för att lägga till en."
 title = "Inga lokala filer"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Filer du öppnar eller redigerar visas här."
 title = "Inget ändrat ännu"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Kunde inte ta bort mappen."
 deleteFolderFailedDetail = "Kunde inte ta bort mappen: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Kunde inte uppdatera mappens utseende."
 folderAppearanceFailedDetail = "Kunde inte uppdatera mappens utseende: {{message}}"
 moveFilesFailed = "Kunde inte flytta filer."
@@ -4113,6 +4170,11 @@ localHint = "Endast lagrad i denna webbläsare"
 shared = "Delad"
 sharedHint = "Delad med dig via länk"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Äldst först"
 modifiedDesc = "Senaste först"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Inga filer tillgängliga i lagringen. Öppna några file
 open = "Öppna"
 openFile = "Öppna fil"
 openFiles = "Öppna filer"
+selectFile = "Select {{name}}"
 selectFromStorage = "Välj från lagring"
 upload = "Ladda upp"
 uploadFile = "Ladda upp fil"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Allt sparat"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Kunde inte extrahera CSV"
 extractXlsxError = "Kunde inte extrahera XLSX"
+filled = "filled"
 flattenAfterFilling = "Platta ut efter ifyllning"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "obl"
 requiredFieldsError = "Fyll i alla obligatoriska fält"
 rescanFields = "Skanna fält igen"
@@ -4795,9 +4863,6 @@ title = "Bild till PDF"
 [imageToPdf]
 tags = "konvertering,img,jpg,bild,foto"
 
-[infoBanner]
-dismiss = "Avfärda"
-
 [invite]
 acceptError = "Misslyckades med att skapa konto"
 accountFor = "Skapar konto för"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Uppladdning lyckades!"
 uploadSuccessMessage = "Dina bilder har överförts."
 validating = "Validerar session..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Skanna för att ladda upp foton. Bilder konverteras automatiskt till PDF."
 descriptionNoConvert = "Skanna för att ladda upp foton från din mobila enhet."
@@ -4997,8 +5090,13 @@ title = "Ladda upp från mobil"
 tags = "Multiverktyg,Multioperation,UI,klicka dra,front end,klientsida"
 title = "PDF-multiverktyg"
 
-[navbar]
-search = "Sök"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Autentiseringen lyckades inte. Du kan stänga detta fönster och försöka igen."
@@ -5127,6 +5225,7 @@ activeFiles = "Vyn <strong>Aktiva filer</strong> visar alla PDF:er du har laddat
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Stäng"
 cropSettings = "Nu när vi har valt filen vi vill beskära kan vi konfigurera Beskär-verktyget för att välja området som vi vill beskära PDF-filen till."
+dialogLabel = "Onboarding"
 fileCheckbox = "Att klicka på en av filerna markerar den för bearbetning. Du kan välja flera filer för batchåtgärder."
 fileReplacement = "Den ändrade filen ersätter originalfilen i Arbetsbänken automatiskt, vilket gör det enkelt att köra den genom fler verktyg."
 filesButton = "Knappen <strong>Filer</strong> på snabbåtkomstfältet låter dig ladda upp PDF-filer att använda verktygen på."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF till PDF/A"
 tags = "arkiv,långtids,standard,konvertering,lagring,bevarande"
 title = "PDF till PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "tryck,standard,konvertering,produktion,prepress,arkiv"
 title = "PDF till PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 krediter"
 xsmall = "100 krediter"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Välj den plan som passar dina behov"
 title = "Tillgängliga planer"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Månatlig utgiftsgräns nådd"
 title = "Det gick inte att öppna Stripe-portalen"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "av {{allowance}} gratis PDF:er använda"
 capSuffix_other = "av {{allowance}} gratis PDF:er använda"
 eyebrow = "Processor-provperiod"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Skicka ett dokument eller en avisering via e-post när en policy körs."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Lagra bearbetade dokument i Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Officiella SDK:er"
 beta = "Beta"
 deprecated = "Föråldrad"
 
-[portal.docs.search]
-empty = "Inga matchande dokument"
-placeholder = "Sök i dokumentation"
-results = "{{count}} resultat"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Medföljande, namngivna förmågor som din agent anropar som ett enda verktyg. Varje skill är en deterministisk åtgärdskedja med kopplade evals."
@@ -7180,11 +7309,11 @@ editorAction = "Redigerare"
 empty = "Inga dokument matchar det här filtret."
 rowActions = "Radåtgärder"
 sensitiveLabel = "Känsligt"
-sensitiveTitle = "Känsligt — åtkomst krävs"
 
 [portal.documents.table.columns]
 action = "Pipeline / Åtgärd"
 document = "Dokument"
+labels = "Labels"
 product = "Produkt"
 status = "Status"
 time = "Tid"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Senast sedd"
 region = "Region"
 status = "Status"
+target = "Target"
 version = "Version"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Den här vyn stötte på ett oväntat fel. Försök igen eller v
 retry = "Försök igen"
 title = "Något gick fel på den här sidan"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Tillbaka"
 body = "Ladda ner desktop-appen eller självhosta servern."
@@ -7380,11 +7560,6 @@ cancel = "Avbryt"
 confirm = "Återkalla nyckel"
 title = "Återkalla API-nyckel"
 
-[portal.infrastructure.attestationLabel]
-attested = "Intygad"
-inScope = "Inom omfång"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Filtrera granskningshändelser efter kategori"
 heading = "Granskningsloggar"
@@ -7456,11 +7631,6 @@ info = "Info"
 success = "Klart"
 warning = "Varning"
 
-[portal.infrastructure.certLabel]
-certified = "Certifierad"
-inProgress = "Pågår"
-notStarted = "Inte startad"
-
 [portal.infrastructure.createKey]
 cancel = "Avbryt"
 createKey = "Skapa nyckel"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Kopiera den här hemligheten nu — den visas inte igen."
 title = "Skapa API-nyckel"
 titleCreated = "Nyckel skapad"
 
-[portal.infrastructure.deployLabel]
-live = "Live"
-queued = "Köad"
-rolledBack = "Återställd"
-rolling = "Rullas ut"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Distribuerad av"
-environment = "Miljö"
-product = "Produkt"
-status = "Status"
-version = "Version"
-when = "När"
-
-[portal.infrastructure.deployments.recent]
-heading = "Senaste distributioner"
-subheading = "De senaste utrullningarna över produkter och miljöer."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Instanser"
-latency = "Latens"
-load = "Belastning"
-p99 = "P99"
-region = "Region"
-status = "Status"
-throughput = "Genomströmning"
-uptime = "Drifttid"
-version = "Version"
-
-[portal.infrastructure.deployments.regions]
-heading = "Regioner"
-subheading = "Livehälsa för varje distribuerad Stirling-region — latens, belastning och utrullningsversion."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Distribuerade regioner visas här när din arbetsyta har provisionerats."
-title = "Inga regioner distribuerade"
-
 [portal.infrastructure.keyLabel]
 active = "Aktiv"
 revoked = "Återkallad"
 
-[portal.infrastructure.modelLabel]
-active = "Aktiv"
-degraded = "Försämrad"
-disabled = "Inaktiverad"
-
-[portal.infrastructure.models]
-heading = "Modeller"
-msValue = "{{value}} ms"
-subheading = "Modellkatalogen och routingen som driver dokumentbearbetning i din arbetsyta."
-
-[portal.infrastructure.models.byom]
-description = "Registrera en lokal eller självhostad modell och fäst den vid en region för behandling som är bunden till dataresidens."
-title = "Ta med din egen modell"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Hanterade modeller tillgängliga för din arbetsyta, med live-latens och kostnad."
-subEnterprise = "Hanterade, egna och lokala modeller — med fästning per region tillgänglig."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Modeller i din arbetsytas katalog visas här."
-title = "Inga modeller tillgängliga"
-
-[portal.infrastructure.models.columns]
-cost = "Kostnad"
-latency = "Latens"
-load = "Belastning"
-model = "Modell"
-status = "Status"
-type = "Typ"
-version = "Version"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/anrop"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktiva modeller"
-avgLatency = "Genomsnittlig latens"
-included = "Inkluderat"
-monthlySpend = "Månatlig modellkostnad"
-
-[portal.infrastructure.models.routing]
-empty = "Inga routingregler konfigurerade."
-heading = "Routingregler"
-sub = "Vilken modell som hanterar varje åtgärd. Standardvärdet används när ingen smalare regel matchar."
-subLocked = "Routa åtgärder till specifika modeller — tillgängligt med betalplaner."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Uppgradera till Pro för att styra vilken modell som hanterar varje åtgärd och dokumenttyp."
-title = "Modellrouting är en betalfunktion"
-
-[portal.infrastructure.models.routingColumns]
-default = "Standard"
-docType = "Dokumenttyp"
-modelForAria = "Modell för {{operation}}"
-operation = "Åtgärd"
-routedTo = "Routas till"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Klassificering"
-extraction = "Extrahering"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Försämrad"
-down = "Nere"
-healthy = "Felfri"
-
-[portal.infrastructure.security.access.byok]
-description = "Tillhandahåll en nyckel från din egen KMS. Stirling krypterar med den men kan fortfarande läsa."
-label = "Ta med din egen nyckel (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Nycklar lämnar aldrig din KMS. Stirling lagrar endast chiffertext."
-label = "Behåll din egen nyckel (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling hanterar krypteringsnycklar. Enklast — ingen nyckeldrift på din sida."
-label = "Nycklar som hålls av Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Policy för dokumentåtkomst"
-subheading = "Styr vem som kan dekryptera bearbetade dokument i vila."
-
-[portal.infrastructure.security.attestations]
-heading = "Efterlevnadsintyg"
-noReport = "Ingen rapport tillgänglig"
-subheading = "Granskningsläge per ramverk, med rapporter tillgängliga för intygade kontroller."
-viewReport = "Visa rapport →"
-
-[portal.infrastructure.security.compliance]
-heading = "Efterlevnad"
-subheading = "Intyg och certifieringar som täcker Stirling-plattformen."
-
-[portal.infrastructure.security.empty]
-description = "Din arbetsytas säkerhetskonfiguration visas här."
-title = "Säkerhetsläge inte tillgängligt"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Med HYOK lämnar krypteringsnycklar aldrig din KMS. Stirling lagrar och bearbetar endast chiffertext som du kan återkalla när som helst."
-title = "Stirling kan inte dekryptera dina dokument"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Inga IP-intervall konfigurerade — alla IP-adresser tillåtna."
-heading = "IP-tillåtelselista"
-sub = "API-åtkomst är begränsad till dessa CIDR-intervall."
-subLocked = "Begränsa API-åtkomst till kända IP-intervall — tillgängligt med betalplaner."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Uppgradera till Pro för att begränsa API-åtkomst till specifika nätverk."
-title = "IP-tillåtelselista är en betalfunktion"
-
-[portal.infrastructure.security.ipColumns]
-added = "Tillagd"
-addedBy = "Tillagd av"
-cidr = "CIDR"
-label = "Etikett"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritm"
-heading = "Hantering av krypteringsnycklar"
-keyId = "Nyckelidentifierare"
-lastRotated = "Senast roterad"
-rotateKey = "Rotera nyckel"
-rotationPolicy = "Rotationspolicy"
-subheading = "Förvaring av nycklarna som krypterar dokument i vila — vem som kan dekryptera och hur nycklar roteras."
-
-[portal.infrastructure.security.managedBanner]
-description = "Förvaring med bring-your-own-key (BYOK) och hold-your-own-key (HYOK) är tillgänglig i Enterprise. Uppgradera för att tillhandahålla nycklar från din egen KMS."
-title = "Nycklar hanteras av Stirling i din plan"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asien och Stillahavsområdet"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR-datagräns"
-label = "Europeiska unionen"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "USA"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Dataresidens"
-subheading = "Var dokument lagras och bearbetas."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} används"
-
-[portal.infrastructure.storage.empty]
-description = "Ansluten lagring och användning visas här."
-title = "Ingen lagring konfigurerad"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktiv"
-activeRange = "0–{{value}} d"
-archived = "Arkiverad"
-coldStorage = "kallagring"
-deleted = "Borttagen"
-never = "aldrig"
-purged = "rensad"
-
-[portal.infrastructure.storage.providers]
-connect = "Anslut"
-connected = "Ansluten"
-heading = "Anslutna leverantörer"
-subheading = "Där bearbetade artefakter skrivs."
-
-[portal.infrastructure.storage.retention]
-heading = "Lagringstid"
-subheading = "Hur länge artefakter behålls innan livscykelborttagning."
-windowLabel = "Standardfönster för lagringstid"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} dag"
-days_other = "{{count}} dagar"
-never = "Ta aldrig bort"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Total användning"
-progressLabel = "Lagring använd"
-subheading = "Lagring som förbrukats över alla anslutna leverantörer."
-
 [portal.infrastructure.tabs]
 apiKeys = "API-nycklar"
 audit = "Granskningsloggar"
@@ -7715,11 +7657,9 @@ security = "Säkerhet"
 storage = "Lagring"
 
 [portal.integrations]
-addAnother = "Lägg till en till"
 availableHeading = "Tillgängliga"
 comingSoonHeading = "Kommer snart"
 connect = "Anslut"
-connectedHeading = "Anslutna"
 connectionCount_one = "{{count}} anslutning"
 connectionCount_other = "{{count}} anslutningar"
 customApi = "Anpassat API"
@@ -7737,6 +7677,10 @@ security = "Säkerhet"
 signing = "Signering"
 storage = "Lagring"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Ansluten"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrationer"
 pipelines = "Pipelines"
 policies = "Policyer"
 procurement = "Inköp"
-settings = "Inställningar"
 sources = "Källor"
 usage = "Användning och fakturering"
 users = "Användare"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Ny pipeline"
 
 [portal.pipelines.builder]
-addStep = "Lägg till verktyg"
+activate = "Activate"
 back = "Tillbaka till pipelines"
 cannotFollow = "Kan inte ta emot {{produced}}"
 chooseAccount = "Välj ett konto"
@@ -7792,28 +7735,38 @@ chooseDestination = "Välj en destination"
 chooseOperation = "Välj vad det här steget gör"
 chooseSource = "Välj en källa"
 discard = "Kassera ändringar"
-enabled = "Aktiverad"
 inputs = "Indata"
 inputSource = "Indatakälla"
 inputTrigger = "Utlösare"
 keepEditing = "Fortsätt redigera"
+moreActions = "More actions"
 needsConfiguring = "Behöver konfigureras"
-needsUpload = "Behöver en uppladdad fil"
-noSources = "Inga källor är anslutna än. Skapa en för att använda den som indata."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Inga verktyg matchar din sökning."
-pipelineSettings = "Pipeline-inställningar"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Sök verktyg"
-selectToolBody = "Lägg till ett verktyg för att bygga din pipeline."
-selectToolTitle = "Inga verktyg ännu"
 sendToSystem = "Skicka till ett annat system"
 stepsIncompatible = "Dessa steg kan inte köras på det som deras föregående steg producerar: {{tools}}."
 stepsNeedSetup = "Dessa steg behöver fortfarande konfigureras innan du sparar: {{tools}}."
-toolSettings = "Verktygsinställningar"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Okänd åtgärd, behålls som den är."
 unsavedBody = "Du har osparade ändringar. Spara dem innan du lämnar, eller kassera dem?"
 unsavedTitle = "Osparade ändringar"
-uploadUnsupported = "Uppladdade filer stöds inte i pipelines ännu, så de här stegen kan inte sparas: {{tools}}."
 usesDefaults = "Körs med standardinställningar"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kombinerar varje fil från föregående steg"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Kan inte kontrollera vad det här steget accepterar"
 
 [portal.pipelines.composer]
 addTool = "Lägg till verktyg"
-cancel = "Avbryt"
-chainEmpty = "Lägg till ett verktyg för att börja bygga din pipeline."
 create = "Skapa pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Visning av dessa verktygsparametrar för redigering stöds inte ännu."
-moveDown = "Flytta ned"
-moveUp = "Flytta upp"
+editSource = "Edit source"
 name = "Namn"
 namePlaceholder = "t.ex. Maskeringsgenomgång"
 noToolSettings = "Det här verktyget har inga konfigurerbara inställningar."
-operations_one = "Åtgärd ({{count}})"
-operations_other = "Åtgärder ({{count}})"
 output = "Utdata"
-removeStep = "Ta bort åtgärd"
 save = "Spara ändringar"
 scheduleEvery = "Kör varje"
-sources = "Källor"
-sourcesLoading = "Läser in källor..."
 trigger = "Trigger"
 triggerManual = "Endast manuellt"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "dagar"
 hours = "timmar"
 minutes = "minuter"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Ta bort \"{{name}}\"? Detta kan inte ångras."
 cancel = "Avbryt"
@@ -7867,6 +7825,37 @@ connectSource = "Anslut en källa"
 description = "Skapa din första pipeline: välj källorna den körs över, kedja åtgärderna och välj vart utdata ska skickas."
 title = "Inga pipelines ännu"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktiva"
 paused = "Pausade"
@@ -7879,7 +7868,6 @@ completed_one = "Körning slutförd."
 completed_other = "Alla {{count}} körningar slutförda."
 empty = "Inget att köra: källorna hade inga dokument att bearbeta."
 failed = "Körning misslyckades: {{error}}"
-historyCleared = "Historiken har rensats. Nästa körning bearbetar om allt som för närvarande finns i källorna."
 inFlight = "Inget nytt att köra: dokument bearbetas fortfarande från en tidigare körning."
 parked_one = "Inget att köra: {{count}} dokument misslyckades tidigare och är parkerat. Åtgärda orsaken och rensa sedan historiken för att försöka igen."
 parked_other = "Inget att köra: {{count}} dokument misslyckades tidigare och är parkerade. Åtgärda orsaken och rensa sedan historiken för att försöka igen."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Källor"
 status = "Status"
 steps = "Steg"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Mappbevakning"
@@ -8209,6 +8198,24 @@ label = "Bifoga till ett Jira-ärende"
 description = "Skickar det bearbetade dokumentet som en bilaga."
 label = "Skicka dokumentet via e-post (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Skriver det bearbetade dokumentet till en mapp."
 label = "Ladda upp till Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Maximalt utnyttjad"
 subtitle = "Din kostnadsfria testperiod pågår till {{date}}. Inget kort krävs."
 title = "Enterprise-testperiod"
 
-[portal.search]
-ariaLabel = "Sök"
-placeholder = "Sök i Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Snabbåtgärder visas här när de är tillgängliga."
-noActionsTitle = "Inga snabbåtgärder"
-noMatches = "Inga träffar för \"{{query}}\""
-noMatchesDescription = "Prova ett annat sökord eller bläddra i katalogen."
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "Avbryt"
 confirm = "Ta bort"
 title = "Ta bort källa?"
 
-[portal.sources.empty]
-description = "Anslut en mapp (och snart molnlagring) så att dina policyer har någonstans att hämta dokument från."
-title = "Inga källor anslutna än"
-
 [portal.sources.kpi]
 inUse = "Används"
 total = "Anslutningar"
@@ -8785,6 +8778,7 @@ unused = "Oanvänd"
 documents = "Dokument"
 source = "Källa"
 status = "Status"
+type = "Type"
 usedBy = "Policyer"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Policyer och integritet"
 [settings.preferences]
 title = "Preferenser"
 
-[settings.search]
-placeholder = "Sök i inställningar..."
-
 [settings.security]
 description = "Uppdatera ditt lösenord för att hålla ditt konto säkert."
 title = "Säkerhet"
@@ -10128,6 +10119,7 @@ last = "Sista sidan"
 maintainRatio = "Växla bibehållet bildförhållande"
 next = "Nästa sida"
 noSavedSigs = "Inga sparade signaturer hittades"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Personliga signaturer"
 previous = "Föregående sida"
 redo = "Gör om"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Borttagning av bakgrund misslyckades"
 hint = "Ladda upp en PNG- eller JPG-bild av din signatur"
 label = "Ladda upp signaturbild"
 placeholder = "Välj bildfil"
+previewAlt = "Current image signature"
 processing = "Bearbetar bild..."
 removeBackground = "Ta bort vit bakgrund (gör transparent)"
 
@@ -10179,6 +10172,17 @@ saved = "Välj en sparad signatur ovan, klicka sedan var som helst i PDF:en för
 text = "När du har angett ditt namn ovan, klicka var som helst i PDF:en för att placera din signatur."
 title = "Så här lägger du till signatur"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Flytta signatur"
 pause = "Pausa placering"
@@ -10625,6 +10629,23 @@ title = "Ladda upp till server"
 updateButton = "Uppdatera på servern"
 uploadButton = "Ladda upp till server"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Gå tillbaka"
 pdfTools = "PDF-verktyg"
 placeholder = "Välj ett verktyg för att komma igång"
 premiumFeature = "Premiumfunktion:"
-searchTools = "Sök verktyg"
 toolsHeader = "Verktyg"
 viewAllTools = "Visa alla verktyg"
 
@@ -10822,6 +10842,9 @@ removal = "Borttagning"
 signing = "Signering"
 verification = "Verifiering"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Inga verktyg hittades"
 noTools = "Inga verktyg tillgängliga"
@@ -10979,6 +11002,13 @@ approver = "Godkänner policy"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Avbryt inbjudan till {{email}}? De kommer inte att kunna gå med via den aktuella länken."
 cancelInviteTitle = "Avbryt inbjudan"
@@ -10998,10 +11028,8 @@ title = "Inga medlemmar än"
 addToTeam = "Lägg till i team"
 guestCount = "{{count}} gäst"
 guests = "Gäster"
-guestsDesc = "Externa samarbetspartner, begränsade till det du har delat. Endast Editor."
 ledBy = "ledd av {{owner}}"
 org = "Organisation"
-orgDesc = "Ägare med organisationsövergripande behörighet och policygodkännande"
 owners = "{{count}} ägare"
 team = "{{name}}-team"
 teamMeta = "{{count}} personer"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Inbjuden av {{who}}"
 cancel = "Avbryt"
-count = "{{count}} väntande"
-desc = "Inbjudna personer som inte har gått med än. De upptar en plats tills de accepterar."
 expiresInDays_one = "Upphör om {{count}} dag"
 expiresInDays_other = "Upphör om {{count}} dagar"
 expiresToday = "Upphör idag"
 title = "Väntande inbjudningar"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Något gick fel vid kontakt med backend, eller så har du inte åtkomst. Försök igen."
 title = "Kunde inte läsa in medlemmar"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Sök bilagor"
 title = "Bilagor"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Bokmärkestitel"
 bookmarkTitleRequired = "Bokmärkestitel krävs"
 closeSidebar = "Stäng sidopanel för bokmärken"
 collapseAll = "Fäll ihop alla bokmärken"
+empty = "No bookmarks in this document"
 expandAll = "Expandera alla bokmärken"
 searchPlaceholder = "Sök bokmärken"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Lägg till kommentar"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Hitta i dokumentet"
 moreActions = "Fler åtgärder"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Sida {{page}}"
 placingHint = "Klicka på en sida för att placera… (avbryt)"
 removeCommentOnly = "Ta bort endast kommentaren"
 saveReply = "Spara svar"
+searchPlaceholder = "Search comments"
 title = "Kommentarer"
 typeComment = "Kommentar"
 typeInsertText = "Infoga text"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Du har osparade ändringar"
 closeSidebar = "Stäng sidopanel för lager"
 hideAll = "Dölj alla lager"
 showAll = "Visa alla lager"
+title = "Layers"
 
 [viewer.link]
 delete = "Ta bort länk"
@@ -11646,6 +11682,7 @@ exitRedaction = "Avsluta maskeringsläge"
 exportAll = "Exportera PDF"
 exportSelected = "Exportera valda sidor"
 formFill = "Fyll i formulär"
+hideToolbar = "Hide toolbar"
 multiTool = "Multiverktyg"
 panMode = "Panoreringsläge"
 print = "Skriv ut PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Markera alla"
 selectByNumber = "Markera efter sidnummer"
 selectLanguage = "Välj språk"
 share = "Dela"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Visa/dölj anteckningar"
 toggleAttachments = "Visa/dölj bilagor"
 toggleBookmarks = "Visa/dölj bokmärken"
diff --git a/frontend/editor/public/locales/th-TH/translation.toml b/frontend/editor/public/locales/th-TH/translation.toml
index f50f5f2fa9..4d194d6e06 100644
--- a/frontend/editor/public/locales/th-TH/translation.toml
+++ b/frontend/editor/public/locales/th-TH/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "ตัวอักษร"
 apply = "ใช้"
 applyAndContinue = "บันทึกและออก"
-areYouSure = "แน่ใจหรือไม่ว่าต้องการออก?"
 back = "ย้อนกลับ"
 black = "ดำ"
 blue = "น้ำเงิน"
@@ -106,6 +105,7 @@ undoSuccess = "ยกเลิกการดำเนินการเรี
 unknown = "ไม่ทราบ"
 unpin = "เอาปักหมุดไฟล์ออก (แทนที่หลังรันเครื่องมือ)"
 unsavedChanges = "คุณมีการเปลี่ยนแปลงที่ยังไม่ได้บันทึกใน PDF"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "การเปลี่ยนแปลงที่ยังไม่ได้บันทึก"
 unsupported = "ไม่รองรับ"
 username = "ชื่อผู้ใช้"
@@ -1879,6 +1879,9 @@ width = "ความกว้าง"
 [app]
 description = "ทางเลือกแทน Adobe Acrobat ฟรี (ดาวน์โหลด 10M+)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "แปลงเป็น PDF/A-3b"
 convertToPdfA3bDescription = "สร้าง PDF สำหรับเก็บถาวรพร้อมฝังไฟล์แนบ"
@@ -2933,12 +2936,16 @@ text = "เพื่อให้สิทธิ์เหล่านี้ไม
 [chat.actions]
 copy = "คัดลอกข้อความ"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "ตัวเลือกเอเจนต์ของ Stirling"
+assistant = "AI Assistant"
 clearChat = "ล้างแชต"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "การดำเนินการนี้จะใช้เคร
 tooltip = "เลือกสีจากหน้าจอ"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "เลือกสี"
 
 [common]
+actions = "Actions"
 back = "ย้อนกลับ"
 cancel = "ยกเลิก"
 close = "ปิด"
+codeSample = "Code sample"
 collapse = "ยุบ"
 confirm = "ยืนยัน"
 continue = "ดำเนินการต่อ"
 copied = "คัดลอกแล้ว!"
 copy = "คัดลอก"
 done = "เสร็จสิ้น"
+enterValue = "Enter value"
 error = "ข้อผิดพลาด"
 expand = "ขยาย"
 loading = "กำลังโหลด..."
 next = "ถัดไป"
+open = "Open"
 preview = "แสดงตัวอย่าง"
 previous = "ก่อนหน้า"
 refresh = "รีเฟรช"
 remaining = "คงเหลือ"
 retry = "ลองใหม่"
 save = "บันทึก"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "ล้างที่เลือก"
@@ -3185,6 +3199,7 @@ title = "วิธีการบีบอัด"
 [compress.settings]
 desiredSize = "ขนาดไฟล์ที่ต้องการ"
 desiredSizePlaceholder = "ป้อนขนาด"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "การบีบอัดเป็นวิธีง่าย ๆ ในการลดขนาดไฟล์ เลือก ขนาดไฟล์ เพื่อป้อนขนาดเป้าหมายและให้เราปรับคุณภาพให้คุณ เลือก คุณภาพ เพื่อกำหนดความแรงการบีบอัดด้วยตนเอง"
@@ -3387,6 +3402,24 @@ pdfOptions = "ตัวเลือก PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "เลือกประเภทต้นทางก่อน"
 settings = "การตั้งค่า"
 single = "เดี่ยว"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "ค้นหา..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "แก้ไข"
@@ -3824,11 +3861,13 @@ shareSelected = "แชร์ที่เลือก"
 sharing = "การแชร์"
 showAll = "แสดงทั้งหมด"
 showHistory = "แสดงประวัติ"
+sortBy = "Sort files"
 sortByDate = "เรียงตามวันที่"
 sortByName = "เรียงตามชื่อ"
 sortBySize = "เรียงตามขนาด"
 storage = "ที่เก็บ"
 storageState = "ที่เก็บข้อมูล"
+storageUsed = "Storage used"
 synced = "ซิงค์แล้ว"
 title = "อัปโหลดไฟล์ PDF"
 toolChain = "เครื่องมือที่ใช้"
@@ -3874,8 +3913,12 @@ addFiles = "เพิ่มไฟล์"
 addingFiles = "กำลังเพิ่มไฟล์…"
 collapse = "ยุบแถบข้าง"
 customizeGroups = "ปรับแต่งกลุ่ม"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "เปิดไฟล์เพื่อเริ่มต้น"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "ขยายแถบข้าง"
 googleDrive = "Google Drive"
 googleDriveDisabled = "ยังไม่ได้กำหนดค่า Google Drive"
@@ -3888,15 +3931,17 @@ openFromComputer = "เปิดจากคอมพิวเตอร์"
 openSettings = "เปิดการตั้งค่า"
 other = "อื่นๆ"
 recent = "ล่าสุด"
-search = "ค้นหา"
-searchPlaceholder = "ค้นหาไฟล์..."
 viewAll = "ดูไฟล์ทั้งหมด {{count}} ไฟล์"
 
 [fileSidebar.fileItem]
 closeViewer = "ปิดตัวแสดงผล"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "เปิดในตัวแสดงผล"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "รีเซ็ตเป็นค่าเริ่มต้น"
 subtitle = "จัดกลุ่มไฟล์ของคุณเป็นหมวดหมู่หลัก เพิ่มป้ายกำกับที่มีอยู่หรือป้ายกำกับใหม่ไปยังหมวดหมู่ เปลี่ยนชื่อ หรือสร้างของคุณเอง ไฟล์ที่ไม่อยู่ในหมวดหมู่ใดของคุณจะแสดงใต้ “อื่นๆ”"
 title = "หมวดหมู่แถบด้านข้าง"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "เพิ่มไปยังพื้นที่ทำงาน"
 addToWorkspaceCount = "เพิ่ม {{count}} ไปยังพื้นที่ทำงาน"
@@ -3918,7 +3971,6 @@ backToMyFiles = "ย้อนกลับไปยังไฟล์ของฉ
 breadcrumbs = "เส้นทางโฟลเดอร์"
 cancel = "ยกเลิก"
 classification = "การจัดประเภท"
-clearSearch = "ล้างการค้นหา"
 clearSelection = "ล้างการเลือก"
 closeDetails = "ปิดรายละเอียด"
 create = "สร้าง"
@@ -3950,6 +4002,7 @@ downloadAll = "ดาวน์โหลดทั้งหมด"
 downloadVersion = "ดาวน์โหลดเวอร์ชันนี้"
 dropOverlay = "ปล่อยไฟล์เพื่ออัปโหลด"
 dropOverlaySub = "ไฟล์จะเริ่มใน ในเครื่อง ใช้ 'ย้ายไปยัง' หรือ 'บันทึกไปยังคลาวด์' เพื่อจัดระเบียบลงในโฟลเดอร์."
+duplicate = "Duplicate"
 file = "ไฟล์"
 fileInfo = "File info"
 fileMenu = "การดำเนินการไฟล์"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "ปรับขนาดต้นไม้โฟลเดอ
 save = "บันทึก"
 saveToServer = "บันทึกไปยังเซิร์ฟเวอร์"
 saveToServerDisabledHint = "การบันทึกไปยังเซิร์ฟเวอร์ไม่ได้เปิดใช้งานบนเซิร์ฟเวอร์นี้ โปรดขอให้ผู้ดูแลระบบเปิดใช้งาน."
-search = "ค้นหา"
-searchPlaceholder = "ค้นหาโฟลเดอร์นี้และโฟลเดอร์ย่อย"
 selectAll = "เลือกทั้งหมด"
 selectAllHint = "คลิกเพื่อเลือกทั้งหมด เคล็ดลับ: กด Ctrl (หรือ Cmd) เพื่อเพิ่มทีละไฟล์ กด Shift เพื่อเลือกช่วง."
 selectedCount = "เลือกแล้ว {{count}}"
@@ -4044,6 +4095,10 @@ title = "ยังไม่มีไฟล์คลาวด์"
 hint = "ไฟล์ที่บันทึกโดยไม่อัปโหลดจะอยู่ที่นี่ ปล่อยไฟล์เพื่อเพิ่ม."
 title = "ไม่มีไฟล์เฉพาะในเครื่อง"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "ไฟล์ที่คุณเปิดหรือแก้ไขจะปรากฏที่นี่."
 title = "ยังไม่มีการแก้ไข"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "ไม่สามารถลบโฟลเดอร์ได้."
 deleteFolderFailedDetail = "ไม่สามารถลบโฟลเดอร์ได้: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "ไม่สามารถอัปเดตลักษณะที่ปรากฏของโฟลเดอร์ได้."
 folderAppearanceFailedDetail = "ไม่สามารถอัปเดตลักษณะที่ปรากฏของโฟลเดอร์ได้: {{message}}"
 moveFilesFailed = "ไม่สามารถย้ายไฟล์ได้."
@@ -4113,6 +4170,11 @@ localHint = "เก็บไว้เฉพาะในเบราว์เซ
 shared = "แชร์"
 sharedHint = "แชร์กับคุณผ่านลิงก์"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "เก่าสุดก่อน"
 modifiedDesc = "ล่าสุดก่อน"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "ไม่มีไฟล์ในที่เก็บ 
 open = "เปิด"
 openFile = "เปิดไฟล์"
 openFiles = "เปิดไฟล์หลายไฟล์"
+selectFile = "Select {{name}}"
 selectFromStorage = "เลือกจากที่เก็บ"
 upload = "อัปโหลด"
 uploadFile = "อัปโหลดไฟล์"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "บันทึกทั้งหมดแล้ว"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "ดึง CSV ไม่สำเร็จ"
 extractXlsxError = "ดึง XLSX ไม่สำเร็จ"
+filled = "filled"
 flattenAfterFilling = "ทำให้แบนหลังจากกรอก"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "จำเป็น"
 requiredFieldsError = "โปรดกรอกช่องที่จำเป็นทั้งหมด"
 rescanFields = "สแกนฟิลด์อีกครั้ง"
@@ -4795,9 +4863,6 @@ title = "รูปภาพเป็น PDF"
 [imageToPdf]
 tags = "การแปลง, รูปภาพ, JPG, ภาพ, รูปถ่าย"
 
-[infoBanner]
-dismiss = "ปิด"
-
 [invite]
 acceptError = "ไม่สามารถสร้างบัญชี"
 accountFor = "กำลังสร้างบัญชีสำหรับ"
@@ -4979,6 +5044,34 @@ uploadSuccess = "อัปโหลดสำเร็จ!"
 uploadSuccessMessage = "ถ่ายโอนรูปภาพของคุณเรียบร้อยแล้ว"
 validating = "กำลังตรวจสอบเซสชัน..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "สแกนเพื่ออัปโหลดรูปภาพ รูปภาพจะแปลงเป็น PDF อัตโนมัติ"
 descriptionNoConvert = "สแกนเพื่ออัปโหลดรูปภาพจากอุปกรณ์มือถือของคุณ"
@@ -4997,8 +5090,13 @@ title = "อัปโหลดจากมือถือ"
 tags = "เครื่องมือหลายตัว, หลายการดำเนินการ, UI, คลิกและลาก, ส่วนหน้า, ฝั่งไคลเอนต์, อินเตอร์แอคทีฟ, เคลื่อนย้าย"
 title = "เครื่องมือ PDF หลายตัว"
 
-[navbar]
-search = "ค้นหา"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "การยืนยันตัวตนไม่สำเร็จ คุณสามารถปิดหน้าต่างนี้และลองอีกครั้ง"
@@ -5127,6 +5225,7 @@ activeFiles = "มุมมอง <strong>ไฟล์ที่ใช้งา
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "ปิด"
 cropSettings = "เมื่อเราเลือกไฟล์ที่ต้องการครอบตัดแล้ว เราสามารถกำหนดค่าเครื่องมือครอบตัดเพื่อเลือกพื้นที่ที่ต้องการครอบตัด PDF"
+dialogLabel = "Onboarding"
 fileCheckbox = "การคลิกที่หนึ่งในไฟล์จะเลือกไฟล์นั้นเพื่อประมวลผล คุณสามารถเลือกหลายไฟล์เพื่อทำแบบชุดได้"
 fileReplacement = "ไฟล์ที่แก้ไขจะมาแทนที่ไฟล์เดิมใน Workbench โดยอัตโนมัติ ช่วยให้คุณรันเครื่องมืออื่นต่อได้ง่าย"
 filesButton = "ปุ่ม <strong>ไฟล์</strong> ในแถบเข้าถึงด่วนช่วยให้คุณอัปโหลด PDF เพื่อใช้เครื่องมือต่างๆ ได้"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF เป็น PDF/A"
 tags = "การจัดเก็บ, ระยะยาว, มาตรฐาน, การแปลง, การเก็บรักษา"
 title = "PDF เป็น PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "พิมพ์,มาตรฐาน,แปลง,การผลิต,ก่อนพิมพ์,เก็บถาวร"
 title = "แปลง PDF เป็น PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 เครดิต"
 xsmall = "100 เครดิต"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "เลือกแผนที่เหมาะกับความต้องการของคุณ"
 title = "แผนที่มีให้"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "ถึงขีดจำกัดค่าใช้จ่าย
 title = "ไม่สามารถเปิดพอร์ทัล Stripe ได้"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "จาก {{allowance}} PDFs ฟรีถูกใช้แล้ว"
 capSuffix_other = "จาก {{allowance}} PDFs ฟรีถูกใช้แล้ว"
 eyebrow = "ทดลองใช้ Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "ส่งอีเมลเอกสารหรือการแจ้งเตือนเมื่อ policy ทำงาน"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "จัดเก็บเอกสารที่ประมวลผลแล้วลงใน Nextcloud"
@@ -7077,11 +7211,6 @@ title = "SDKs อย่างเป็นทางการ"
 beta = "Beta"
 deprecated = "เลิกใช้แล้ว"
 
-[portal.docs.search]
-empty = "ไม่มีเอกสารที่ตรงกัน"
-placeholder = "ค้นหาเอกสาร"
-results = "{{count}} ผลลัพธ์"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "ความสามารถที่รวมมาและตั้งชื่อไว้ ซึ่งเอเจนต์ของคุณเรียกใช้เป็นเครื่องมือเดียว แต่ละ skill เป็นสายการดำเนินการแบบกำหนดแน่นอนพร้อมการประเมินแนบอยู่"
@@ -7180,11 +7309,11 @@ editorAction = "Editor"
 empty = "ไม่มีเอกสารที่ตรงกับตัวกรองนี้"
 rowActions = "การดำเนินการของแถว"
 sensitiveLabel = "ละเอียดอ่อน"
-sensitiveTitle = "ละเอียดอ่อน — ต้องมีสิทธิ์เข้าถึง"
 
 [portal.documents.table.columns]
 action = "Pipeline / การดำเนินการ"
 document = "เอกสาร"
+labels = "Labels"
 product = "ผลิตภัณฑ์"
 status = "สถานะ"
 time = "เวลา"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "เห็นล่าสุด"
 region = "ภูมิภาค"
 status = "สถานะ"
+target = "Target"
 version = "เวอร์ชัน"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "มุมมองนี้พบข้อผิดพลาด
 retry = "ลองอีกครั้ง"
 title = "มีบางอย่างผิดพลาดในหน้านี้"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "กลับ"
 body = "ดาวน์โหลดแอป desktop หรือ self-host server"
@@ -7380,11 +7560,6 @@ cancel = "ยกเลิก"
 confirm = "เพิกถอนคีย์"
 title = "เพิกถอน API key"
 
-[portal.infrastructure.attestationLabel]
-attested = "รับรองแล้ว"
-inScope = "อยู่ในขอบเขต"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "กรองเหตุการณ์ตรวจสอบตามหมวดหมู่"
 heading = "Audit logs"
@@ -7456,11 +7631,6 @@ info = "ข้อมูล"
 success = "สำเร็จ"
 warning = "คำเตือน"
 
-[portal.infrastructure.certLabel]
-certified = "ผ่านการรับรอง"
-inProgress = "กำลังดำเนินการ"
-notStarted = "ยังไม่เริ่ม"
-
 [portal.infrastructure.createKey]
 cancel = "ยกเลิก"
 createKey = "สร้างคีย์"
@@ -7474,238 +7644,10 @@ subtitleCreated = "คัดลอก secret นี้ตอนนี้ — จ
 title = "สร้าง API key"
 titleCreated = "สร้างคีย์แล้ว"
 
-[portal.infrastructure.deployLabel]
-live = "ใช้งานจริง"
-queued = "เข้าคิวแล้ว"
-rolledBack = "ย้อนกลับแล้ว"
-rolling = "กำลังเผยแพร่"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/นาที"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "ปรับใช้โดย"
-environment = "Environment"
-product = "ผลิตภัณฑ์"
-status = "สถานะ"
-version = "เวอร์ชัน"
-when = "เมื่อใด"
-
-[portal.infrastructure.deployments.recent]
-heading = "การปรับใช้ล่าสุด"
-subheading = "การ rollout ล่าสุดในผลิตภัณฑ์และ environments"
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "อินสแตนซ์"
-latency = "เวลาแฝง"
-load = "โหลด"
-p99 = "P99"
-region = "ภูมิภาค"
-status = "สถานะ"
-throughput = "Throughput"
-uptime = "Uptime"
-version = "เวอร์ชัน"
-
-[portal.infrastructure.deployments.regions]
-heading = "ภูมิภาค"
-subheading = "สุขภาพแบบสดสำหรับทุกภูมิภาค Stirling ที่ปรับใช้ — เวลาแฝง โหลด และเวอร์ชัน rollout"
-
-[portal.infrastructure.deployments.regions.empty]
-description = "ภูมิภาคที่ปรับใช้จะแสดงที่นี่เมื่อ workspace ของคุณได้รับการจัดสรรแล้ว"
-title = "ยังไม่มีภูมิภาคที่ปรับใช้"
-
 [portal.infrastructure.keyLabel]
 active = "ใช้งานอยู่"
 revoked = "ถูกเพิกถอน"
 
-[portal.infrastructure.modelLabel]
-active = "ใช้งานอยู่"
-degraded = "เสื่อมประสิทธิภาพ"
-disabled = "ปิดใช้งาน"
-
-[portal.infrastructure.models]
-heading = "Models"
-msValue = "{{value}} ms"
-subheading = "แค็ตตาล็อก model และ routing ที่ขับเคลื่อนการประมวลผลเอกสารทั่ว workspace ของคุณ"
-
-[portal.infrastructure.models.byom]
-description = "ลงทะเบียน model แบบ on-prem หรือโฮสต์เอง และปักหมุดกับภูมิภาคสำหรับการประมวลผลที่ผูกกับถิ่นที่อยู่ของข้อมูล"
-title = "นำ model ของคุณมาเอง"
-
-[portal.infrastructure.models.catalogue]
-heading = "แค็ตตาล็อก"
-sub = "Managed models ที่พร้อมใช้งานสำหรับ workspace ของคุณ พร้อมเวลาแฝงและค่าใช้จ่ายแบบสด"
-subEnterprise = "Managed, bring-your-own และ on-prem models — พร้อมการปักหมุดรายภูมิภาค"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Models ในแค็ตตาล็อกของ workspace ของคุณจะแสดงที่นี่"
-title = "ไม่มี models ที่พร้อมใช้งาน"
-
-[portal.infrastructure.models.columns]
-cost = "ค่าใช้จ่าย"
-latency = "เวลาแฝง"
-load = "โหลด"
-model = "Model"
-status = "สถานะ"
-type = "ประเภท"
-version = "เวอร์ชัน"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/ครั้ง"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Models ที่ใช้งานอยู่"
-avgLatency = "เวลาแฝงเฉลี่ย"
-included = "รวมแล้ว"
-monthlySpend = "ค่าใช้จ่าย model รายเดือน"
-
-[portal.infrastructure.models.routing]
-empty = "ยังไม่ได้กำหนดค่ากฎ routing"
-heading = "กฎ routing"
-sub = "Model ใดจัดการแต่ละการดำเนินการ ค่าเริ่มต้นจะใช้เมื่อไม่มีกฎที่แคบกว่าตรงกัน"
-subLocked = "Route การดำเนินการไปยัง models เฉพาะ — พร้อมใช้งานในแผนแบบชำระเงิน"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "อัปเกรดเป็น Pro เพื่อควบคุมว่า model ใดจัดการแต่ละการดำเนินการและประเภทเอกสาร"
-title = "Model routing เป็นฟีเจอร์แบบชำระเงิน"
-
-[portal.infrastructure.models.routingColumns]
-default = "ค่าเริ่มต้น"
-docType = "ประเภทเอกสาร"
-modelForAria = "Model สำหรับ {{operation}}"
-operation = "การดำเนินการ"
-routedTo = "Route ไปยัง"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "การจัดประเภท"
-extraction = "การดึงข้อมูล"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "เสื่อมประสิทธิภาพ"
-down = "ล่ม"
-healthy = "ปกติ"
-
-[portal.infrastructure.security.access.byok]
-description = "ระบุคีย์จาก KMS ของคุณเอง Stirling เข้ารหัสด้วยคีย์นั้นแต่ยังอ่านได้"
-label = "Bring your own key (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "คีย์ไม่ออกจาก KMS ของคุณ Stirling ถือเฉพาะ ciphertext"
-label = "Hold your own key (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling จัดการคีย์เข้ารหัส ง่ายที่สุด — ไม่ต้องทำ key ops ฝั่งคุณ"
-label = "คีย์ที่ Stirling ถือไว้"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "นโยบายการเข้าถึงเอกสาร"
-subheading = "ควบคุมว่าใครสามารถถอดรหัสเอกสารที่ประมวลผลแล้วเมื่อจัดเก็บอยู่ได้"
-
-[portal.infrastructure.security.attestations]
-heading = "การรับรองการปฏิบัติตามข้อกำหนด"
-noReport = "ไม่มีรายงาน"
-subheading = "สถานะการตรวจสอบตามแต่ละ framework พร้อมรายงานสำหรับ controls ที่ได้รับการรับรอง"
-viewReport = "ดูรายงาน →"
-
-[portal.infrastructure.security.compliance]
-heading = "การปฏิบัติตามข้อกำหนด"
-subheading = "การรับรองและใบรับรองที่ครอบคลุมแพลตฟอร์ม Stirling"
-
-[portal.infrastructure.security.empty]
-description = "การกำหนดค่าความปลอดภัยของ workspace ของคุณจะแสดงที่นี่"
-title = "ไม่พร้อมใช้งานสถานะความปลอดภัย"
-
-[portal.infrastructure.security.hyokBanner]
-description = "ด้วย HYOK คีย์เข้ารหัสจะไม่ออกจาก KMS ของคุณ Stirling จัดเก็บและประมวลผลเฉพาะ ciphertext ที่คุณสามารถเพิกถอนได้ทุกเมื่อ"
-title = "Stirling ไม่สามารถถอดรหัสเอกสารของคุณได้"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "ยังไม่ได้กำหนดค่าช่วง IP — อนุญาตทุก IP"
-heading = "IP allowlist"
-sub = "การเข้าถึง API ถูกจำกัดไว้ที่ช่วง CIDR เหล่านี้"
-subLocked = "จำกัดการเข้าถึง API ให้กับช่วง IP ที่รู้จัก — พร้อมใช้งานในแผนแบบชำระเงิน"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "อัปเกรดเป็น Pro เพื่อจำกัดการเข้าถึง API ให้กับเครือข่ายเฉพาะ"
-title = "IP allowlisting เป็นฟีเจอร์แบบชำระเงิน"
-
-[portal.infrastructure.security.ipColumns]
-added = "เพิ่มเมื่อ"
-addedBy = "เพิ่มโดย"
-cidr = "CIDR"
-label = "ป้ายกำกับ"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "การจัดการคีย์เข้ารหัส"
-keyId = "ตัวระบุคีย์"
-lastRotated = "หมุนเวียนล่าสุด"
-rotateKey = "หมุนเวียนคีย์"
-rotationPolicy = "นโยบายการหมุนเวียน"
-subheading = "การดูแลคีย์ที่เข้ารหัสเอกสารเมื่อจัดเก็บอยู่ — ใครสามารถถอดรหัสได้ และคีย์หมุนเวียนอย่างไร"
-
-[portal.infrastructure.security.managedBanner]
-description = "การดูแลคีย์แบบ bring-your-own-key (BYOK) และ hold-your-own-key (HYOK) พร้อมใช้งานใน Enterprise อัปเกรดเพื่อระบุคีย์จาก KMS ของคุณเอง"
-title = "คีย์ถูกจัดการโดย Stirling ในแผนของคุณ"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "เอเชียแปซิฟิก"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR data boundary"
-label = "สหภาพยุโรป"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "สหรัฐอเมริกา"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "ถิ่นที่อยู่ของข้อมูล"
-subheading = "ตำแหน่งที่เอกสารถูกจัดเก็บและประมวลผล"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "ใช้แล้ว {{value}}"
-
-[portal.infrastructure.storage.empty]
-description = "พื้นที่จัดเก็บที่เชื่อมต่อและการใช้งานจะแสดงที่นี่"
-title = "ยังไม่ได้กำหนดค่าพื้นที่จัดเก็บ"
-
-[portal.infrastructure.storage.lifecycle]
-active = "ใช้งานอยู่"
-activeRange = "0–{{value}}d"
-archived = "เก็บถาวรแล้ว"
-coldStorage = "cold storage"
-deleted = "ลบแล้ว"
-never = "ไม่เคย"
-purged = "ล้างแล้ว"
-
-[portal.infrastructure.storage.providers]
-connect = "เชื่อมต่อ"
-connected = "เชื่อมต่อแล้ว"
-heading = "ผู้ให้บริการที่เชื่อมต่อ"
-subheading = "ตำแหน่งที่เขียน artifacts ที่ประมวลผลแล้ว"
-
-[portal.infrastructure.storage.retention]
-heading = "การเก็บรักษา"
-subheading = "ระยะเวลาที่เก็บ artifacts ก่อนการลบตาม lifecycle"
-windowLabel = "หน้าต่างการเก็บรักษาเริ่มต้น"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} วัน"
-days_other = "{{count}} วัน"
-never = "ไม่ลบ"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "การใช้งานรวม"
-progressLabel = "พื้นที่จัดเก็บที่ใช้"
-subheading = "พื้นที่จัดเก็บที่ใช้รวมทุกผู้ให้บริการที่เชื่อมต่อ"
-
 [portal.infrastructure.tabs]
 apiKeys = "API Keys"
 audit = "Audit Logs"
@@ -7715,11 +7657,9 @@ security = "ความปลอดภัย"
 storage = "พื้นที่จัดเก็บ"
 
 [portal.integrations]
-addAnother = "เพิ่มอีกหนึ่ง"
 availableHeading = "พร้อมใช้งาน"
 comingSoonHeading = "เร็ว ๆ นี้"
 connect = "เชื่อมต่อ"
-connectedHeading = "เชื่อมต่อแล้ว"
 connectionCount_one = "การเชื่อมต่อ {{count}} รายการ"
 connectionCount_other = "การเชื่อมต่อ {{count}} รายการ"
 customApi = "API แบบกำหนดเอง"
@@ -7737,6 +7677,10 @@ security = "ความปลอดภัย"
 signing = "การลงนาม"
 storage = "พื้นที่จัดเก็บ"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "เชื่อมต่อแล้ว"
 
@@ -7767,7 +7711,6 @@ integrations = "Integrations"
 pipelines = "Pipelines"
 policies = "นโยบาย"
 procurement = "การจัดซื้อ"
-settings = "การตั้งค่า"
 sources = "แหล่งที่มา"
 usage = "การใช้งานและการเรียกเก็บเงิน"
 users = "ผู้ใช้"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Pipeline ใหม่"
 
 [portal.pipelines.builder]
-addStep = "เพิ่มเครื่องมือ"
+activate = "Activate"
 back = "กลับไปที่ pipelines"
 cannotFollow = "รับ {{produced}} ไม่ได้"
 chooseAccount = "เลือกบัญชี"
@@ -7792,28 +7735,38 @@ chooseDestination = "เลือกปลายทาง"
 chooseOperation = "เลือกสิ่งที่ขั้นตอนนี้ทำ"
 chooseSource = "เลือกแหล่งที่มา"
 discard = "ละทิ้งการเปลี่ยนแปลง"
-enabled = "เปิดใช้งาน"
 inputs = "อินพุต"
 inputSource = "แหล่งที่มาของอินพุต"
 inputTrigger = "Trigger"
 keepEditing = "แก้ไขต่อ"
+moreActions = "More actions"
 needsConfiguring = "ต้องตั้งค่า"
-needsUpload = "ต้องมีไฟล์ที่อัปโหลด"
-noSources = "ยังไม่มีแหล่งที่มาเชื่อมต่อ สร้างแหล่งที่มาเพื่อใช้เป็นอินพุต"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "ไม่มีเครื่องมือที่ตรงกับการค้นหาของคุณ"
-pipelineSettings = "การตั้งค่า pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "ค้นหาเครื่องมือ"
-selectToolBody = "เพิ่มเครื่องมือเพื่อสร้าง pipeline ของคุณ"
-selectToolTitle = "ยังไม่มีเครื่องมือ"
 sendToSystem = "ส่งไปยังระบบอื่น"
 stepsIncompatible = "ขั้นตอนเหล่านี้ไม่สามารถทำงานกับผลลัพธ์จากขั้นตอนก่อนหน้าได้: {{tools}}"
 stepsNeedSetup = "ขั้นตอนเหล่านี้ยังต้องตั้งค่าก่อนบันทึก: {{tools}}"
-toolSettings = "การตั้งค่าเครื่องมือ"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "การดำเนินการที่ไม่รู้จัก เก็บไว้ตามเดิม"
 unsavedBody = "คุณมีการเปลี่ยนแปลงที่ยังไม่ได้บันทึก บันทึกก่อนออก หรือจะละทิ้ง?"
 unsavedTitle = "การเปลี่ยนแปลงที่ยังไม่ได้บันทึก"
-uploadUnsupported = "ไฟล์ที่อัปโหลดยังไม่รองรับใน pipelines ดังนั้นขั้นตอนเหล่านี้จึงไม่สามารถบันทึกได้: {{tools}}"
 usesDefaults = "ทำงานด้วยการตั้งค่าเริ่มต้น"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "รวมทุกไฟล์จากขั้นตอนก่อนหน้า"
@@ -7825,31 +7778,36 @@ undeclared-operation = "ตรวจสอบไม่ได้ว่าขั
 
 [portal.pipelines.composer]
 addTool = "เพิ่มเครื่องมือ"
-cancel = "ยกเลิก"
-chainEmpty = "เพิ่มเครื่องมือเพื่อเริ่มสร้าง pipeline ของคุณ"
 create = "สร้าง pipeline"
+createPaused = "Create paused"
 editingUnsupported = "ยังไม่รองรับการแสดง params ของเครื่องมือเหล่านี้เพื่อแก้ไข"
-moveDown = "ย้ายลง"
-moveUp = "ย้ายขึ้น"
+editSource = "Edit source"
 name = "ชื่อ"
 namePlaceholder = "เช่น Redaction sweep"
 noToolSettings = "เครื่องมือนี้ไม่มีการตั้งค่าที่กำหนดค่าได้"
-operations_one = "การดำเนินการ ({{count}})"
-operations_other = "การดำเนินการ ({{count}})"
 output = "ผลลัพธ์"
-removeStep = "ลบการดำเนินการ"
 save = "บันทึกการเปลี่ยนแปลง"
 scheduleEvery = "รันทุก"
-sources = "แหล่งที่มา"
-sourcesLoading = "กำลังโหลดแหล่งที่มา..."
 trigger = "Trigger"
 triggerManual = "Manual เท่านั้น"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "วัน"
 hours = "ชั่วโมง"
 minutes = "นาที"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "ลบ \"{{name}}\" หรือไม่? การดำเนินการนี้ย้อนกลับไม่ได้"
 cancel = "ยกเลิก"
@@ -7867,6 +7825,37 @@ connectSource = "เชื่อมต่อแหล่งที่มา"
 description = "สร้าง pipeline แรกของคุณ: เลือกแหล่งที่มาที่จะรัน เชื่อมโยงการดำเนินการ และเลือกตำแหน่งผลลัพธ์"
 title = "ยังไม่มี pipelines"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "ใช้งานอยู่"
 paused = "หยุดชั่วคราว"
@@ -7879,7 +7868,6 @@ completed_one = "การรันเสร็จสมบูรณ์"
 completed_other = "การรันทั้งหมด {{count}} รายการเสร็จสมบูรณ์"
 empty = "ไม่มีอะไรให้รัน: แหล่งที่มาไม่มีเอกสารให้ประมวลผล"
 failed = "การรันล้มเหลว: {{error}}"
-historyCleared = "ล้างประวัติแล้ว การรันครั้งถัดไปจะประมวลผลทุกอย่างที่อยู่ในแหล่งที่มาอีกครั้ง"
 inFlight = "ไม่มีรายการใหม่ให้รัน: เอกสารยังคงกำลังถูกประมวลผลจากการรันก่อนหน้า"
 parked_one = "ไม่มีอะไรให้รัน: เอกสาร {{count}} รายการล้มเหลวก่อนหน้านี้และถูกพักไว้ แก้ไขสาเหตุ จากนั้นล้างประวัติเพื่อลองใหม่"
 parked_other = "ไม่มีอะไรให้รัน: เอกสาร {{count}} รายการล้มเหลวก่อนหน้านี้และถูกพักไว้ แก้ไขสาเหตุ จากนั้นล้างประวัติเพื่อลองใหม่"
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "แหล่งที่มา"
 status = "สถานะ"
 steps = "ขั้นตอน"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "เฝ้าดูโฟลเดอร์"
@@ -8209,6 +8198,24 @@ label = "แนบไปยัง Jira issue"
 description = "ส่งเอกสารที่ประมวลผลแล้วเป็นไฟล์แนบ"
 label = "ส่งเอกสารทางอีเมล (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "เขียนเอกสารที่ประมวลผลแล้วลงในโฟลเดอร์"
 label = "อัปโหลดไปยัง Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "ถึงขีดจำกัดแล้ว"
 subtitle = "trial ฟรีของคุณใช้งานได้ถึง {{date}} ไม่ต้องใช้บัตร"
 title = "Enterprise trial"
 
-[portal.search]
-ariaLabel = "ค้นหา"
-placeholder = "ค้นหา Stirling — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "การดำเนินการด่วนจะปรากฏที่นี่เมื่อพร้อมใช้งาน"
-noActionsTitle = "ไม่มีการดำเนินการด่วน"
-noMatches = "ไม่พบรายการที่ตรงกับ \"{{query}}\""
-noMatchesDescription = "ลองใช้คำค้นอื่นหรือเรียกดู catalogue"
-
 [portal.settings.groups]
 admin = "Admin"
 
@@ -8743,10 +8740,6 @@ cancel = "ยกเลิก"
 confirm = "ลบ"
 title = "ลบแหล่งที่มาหรือไม่?"
 
-[portal.sources.empty]
-description = "เชื่อมต่อโฟลเดอร์ (และเร็ว ๆ นี้ cloud storage) เพื่อให้นโยบายของคุณมีที่สำหรับดึงเอกสาร"
-title = "ยังไม่มีแหล่งที่มาที่เชื่อมต่อ"
-
 [portal.sources.kpi]
 inUse = "กำลังใช้งาน"
 total = "การเชื่อมต่อ"
@@ -8785,6 +8778,7 @@ unused = "ไม่ได้ใช้งาน"
 documents = "เอกสาร"
 source = "แหล่งที่มา"
 status = "สถานะ"
+type = "Type"
 usedBy = "นโยบาย"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "นโยบายและความเป็นส่วนตั
 [settings.preferences]
 title = "ค่ากำหนด"
 
-[settings.search]
-placeholder = "ค้นหาหน้าการตั้งค่า..."
-
 [settings.security]
 description = "อัปเดตรหัสผ่านของคุณเพื่อให้บัญชีปลอดภัย"
 title = "ความปลอดภัย"
@@ -10128,6 +10119,7 @@ last = "หน้าสุดท้าย"
 maintainRatio = "สลับคงอัตราส่วนภาพ"
 next = "หน้าถัดไป"
 noSavedSigs = "ไม่พบลายเซ็นที่บันทึกไว้"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "ลายเซ็นส่วนตัว"
 previous = "หน้าก่อนหน้า"
 redo = "ทำซ้ำ"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "ลบพื้นหลังไม่สำเ
 hint = "อัปโหลดภาพลายเซ็นเป็น PNG หรือ JPG"
 label = "อัปโหลดภาพลายเซ็น"
 placeholder = "เลือกไฟล์รูปภาพ"
+previewAlt = "Current image signature"
 processing = "กำลังประมวลผลภาพ..."
 removeBackground = "ลบพื้นหลังสีขาว (ทำให้โปร่งใส)"
 
@@ -10179,6 +10172,17 @@ saved = "เลือกหนึ่งลายเซ็นที่บัน
 text = "หลังจากป้อนชื่อของคุณด้านบนแล้ว ให้คลิกที่ใดก็ได้บน PDF เพื่อวางลายเซ็น"
 title = "วิธีเพิ่มลายเซ็น"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "ย้ายลายเซ็น"
 pause = "หยุดการวาง"
@@ -10625,6 +10629,23 @@ title = "อัปโหลดไปยังเซิร์ฟเวอร์"
 updateButton = "อัปเดตบนเซิร์ฟเวอร์"
 uploadButton = "อัปโหลดไปยังเซิร์ฟเวอร์"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "ย้อนกลับ"
 pdfTools = "เครื่องมือ PDF"
 placeholder = "เลือกเครื่องมือเพื่อเริ่มต้น"
 premiumFeature = "ฟีเจอร์พรีเมียม:"
-searchTools = "ค้นหาเครื่องมือ"
 toolsHeader = "เครื่องมือ"
 viewAllTools = "ดูเครื่องมือทั้งหมด"
 
@@ -10822,6 +10842,9 @@ removal = "การลบ"
 signing = "การลงนาม"
 verification = "การตรวจสอบ"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "ไม่พบเครื่องมือ"
 noTools = "ไม่มีเครื่องมือให้ใช้"
@@ -10979,6 +11002,13 @@ approver = "อนุมัตินโยบาย"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "ยกเลิกคำเชิญไปยัง {{email}}? พวกเขาจะไม่สามารถเข้าร่วมด้วยลิงก์ปัจจุบันได้"
 cancelInviteTitle = "ยกเลิกคำเชิญ"
@@ -10998,10 +11028,8 @@ title = "ยังไม่มีสมาชิก"
 addToTeam = "เพิ่มเข้าทีม"
 guestCount = "{{count}} guest"
 guests = "Guests"
-guestsDesc = "ผู้ร่วมงานภายนอก จำกัดตามสิ่งที่คุณแชร์ Editor เท่านั้น"
 ledBy = "นำโดย {{owner}}"
 org = "องค์กร"
-orgDesc = "เจ้าของที่มีอำนาจทั่วทั้งองค์กรและการอนุมัตินโยบาย"
 owners = "เจ้าของ {{count}} คน"
 team = "ทีม {{name}}"
 teamMeta = "{{count}} คน"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "เชิญโดย {{who}}"
 cancel = "ยกเลิก"
-count = "รอดำเนินการ {{count}} รายการ"
-desc = "ผู้ที่ได้รับเชิญแต่ยังไม่ได้เข้าร่วม พวกเขาจะถูกนับเป็นหนึ่งที่นั่งจนกว่าจะยอมรับ"
 expiresInDays_one = "หมดอายุใน {{count}} วัน"
 expiresInDays_other = "หมดอายุใน {{count}} วัน"
 expiresToday = "หมดอายุวันนี้"
 title = "คำเชิญที่รอดำเนินการ"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "เกิดข้อผิดพลาดในการติดต่อ backend หรือคุณไม่มีสิทธิ์เข้าถึง ลองอีกครั้ง"
 title = "ไม่สามารถโหลดสมาชิกได้"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "ค้นหาไฟล์แนบ"
 title = "ไฟล์แนบ"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "ชื่อบุ๊กมาร์ก"
 bookmarkTitleRequired = "จำเป็นต้องมีชื่อบุ๊กมาร์ก"
 closeSidebar = "ปิดแถบด้านข้างบุ๊กมาร์ก"
 collapseAll = "ยุบบุ๊กมาร์กทั้งหมด"
+empty = "No bookmarks in this document"
 expandAll = "ขยายบุ๊กมาร์กทั้งหมด"
 searchPlaceholder = "ค้นหาบุ๊กมาร์ก"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "เพิ่มความคิดเห็น"
@@ -11264,10 +11297,12 @@ locateAnnotation = "ค้นหาตำแหน่งในเอกสาร
 moreActions = "การดำเนินการเพิ่มเติม"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "หน้า {{page}}"
 placingHint = "คลิกที่หน้ากระดาษเพื่อวาง… (ยกเลิก)"
 removeCommentOnly = "ลบเฉพาะความคิดเห็น"
 saveReply = "บันทึกการตอบกลับ"
+searchPlaceholder = "Search comments"
 title = "ความคิดเห็น"
 typeComment = "ความคิดเห็น"
 typeInsertText = "แทรกข้อความ"
@@ -11290,6 +11325,7 @@ unsavedDesc = "คุณมีการเปลี่ยนแปลงที
 closeSidebar = "ปิดแถบด้านข้างเลเยอร์"
 hideAll = "ซ่อนเลเยอร์ทั้งหมด"
 showAll = "แสดงเลเยอร์ทั้งหมด"
+title = "Layers"
 
 [viewer.link]
 delete = "ลบลิงก์"
@@ -11646,6 +11682,7 @@ exitRedaction = "ออกจากโหมดปกปิดข้อมูล
 exportAll = "ส่งออก PDF"
 exportSelected = "ส่งออกหน้าที่เลือก"
 formFill = "กรอกแบบฟอร์ม"
+hideToolbar = "Hide toolbar"
 multiTool = "เครื่องมือหลายฟังก์ชัน"
 panMode = "โหมดเลื่อน"
 print = "พิมพ์ PDF"
@@ -11666,6 +11703,7 @@ selectAll = "เลือกทั้งหมด"
 selectByNumber = "เลือกตามหมายเลขหน้า"
 selectLanguage = "เลือกภาษา"
 share = "แชร์"
+showToolbar = "Show toolbar"
 toggleAnnotations = "สลับการแสดงคำอธิบายประกอบ"
 toggleAttachments = "สลับไฟล์แนบ"
 toggleBookmarks = "สลับที่คั่นหน้า"
diff --git a/frontend/editor/public/locales/tr-TR/translation.toml b/frontend/editor/public/locales/tr-TR/translation.toml
index f387e2d9b5..a1a1acd4f8 100644
--- a/frontend/editor/public/locales/tr-TR/translation.toml
+++ b/frontend/editor/public/locales/tr-TR/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Alfabe"
 apply = "Uygula"
 applyAndContinue = "Kaydet ve Çık"
-areYouSure = "Ayrılmak istediğinizden emin misiniz?"
 back = "Geri"
 black = "Siyah"
 blue = "Mavi"
@@ -106,6 +105,7 @@ undoSuccess = "İşlem başarıyla geri alındı"
 unknown = "Bilinmeyen"
 unpin = "Dosya Sabitlemesini Kaldır (araç çalıştıktan sonra değiştir)"
 unsavedChanges = "PDF'inizde kaydedilmemiş değişiklikler var."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Kaydedilmemiş Değişiklikler"
 unsupported = "Desteklenmiyor"
 username = "Kullanıcı Adı"
@@ -1879,6 +1879,9 @@ width = "Genişlik"
 [app]
 description = "Ücretsiz Adobe Acrobat alternatifi (10M+ indirme)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "PDF/A-3b'ye dönüştür"
 convertToPdfA3bDescription = "Gömülü eklerle arşivlik bir PDF oluşturur"
@@ -2933,12 +2936,16 @@ text = "Bu izinlerin değiştirilemez olmasını sağlamak için, sahip parolas
 [chat.actions]
 copy = "Mesajı kopyala"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling ajan seçenekleri"
+assistant = "AI Assistant"
 clearChat = "Sohbeti temizle"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Bu işlem bulut kredilerinizi kullanacak"
 tooltip = "Ekrandan renk seç"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Renk seçin"
 
 [common]
+actions = "Actions"
 back = "Geri"
 cancel = "İptal"
 close = "Kapat"
+codeSample = "Code sample"
 collapse = "Daralt"
 confirm = "Onayla"
 continue = "Devam et"
 copied = "Kopyalandı!"
 copy = "Kopyala"
 done = "Bitti"
+enterValue = "Enter value"
 error = "Hata"
 expand = "Genişlet"
 loading = "Yükleniyor..."
 next = "Sonraki"
+open = "Open"
 preview = "Önizleme"
 previous = "Önceki"
 refresh = "Yenile"
 remaining = "Kalan"
 retry = "Yeniden dene"
 save = "Kaydet"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Seçileni temizle"
@@ -3185,6 +3199,7 @@ title = "Sıkıştırma Yöntemi"
 [compress.settings]
 desiredSize = "İstenen Dosya Boyutu"
 desiredSizePlaceholder = "Boyutu girin"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Sıkıştırma, dosya boyutunu azaltmanın kolay bir yoludur. Hedef boyut girmek ve kaliteyi bizim ayarlamamız için Dosya Boyutu'nu seçin. Sıkıştırma gücünü elle ayarlamak için Kalite'yi seçin."
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF Seçenekleri"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Önce bir kaynak biçimi seçin"
 settings = "Ayarlar"
 single = "Tek"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Ara..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Düzenle"
@@ -3824,11 +3861,13 @@ shareSelected = "Seçileni Paylaş"
 sharing = "Paylaşım"
 showAll = "Tümünü Göster"
 showHistory = "Geçmişi Göster"
+sortBy = "Sort files"
 sortByDate = "Tarihe Göre Sırala"
 sortByName = "Ada Göre Sırala"
 sortBySize = "Boyuta Göre Sırala"
 storage = "Depolama"
 storageState = "Depolama"
+storageUsed = "Storage used"
 synced = "Eşitlendi"
 title = "PDF Dosyaları Yükle"
 toolChain = "Uygulanan Araçlar"
@@ -3874,8 +3913,12 @@ addFiles = "Dosya ekle"
 addingFiles = "Dosyalar ekleniyor…"
 collapse = "Kenar çubuğunu daralt"
 customizeGroups = "Grupları özelleştir"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Başlamak için dosya açın"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Kenar çubuğunu genişlet"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive yapılandırılmamış"
@@ -3888,15 +3931,17 @@ openFromComputer = "Bilgisayardan aç"
 openSettings = "Ayarları aç"
 other = "Diğer"
 recent = "Son"
-search = "Ara"
-searchPlaceholder = "Dosyalarda ara..."
 viewAll = "{{count}} dosyanın tümünü görüntüle"
 
 [fileSidebar.fileItem]
 closeViewer = "Görüntüleyiciyi kapat"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Görüntüleyicide aç"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Varsayılanlara sıfırla"
 subtitle = "Dosyalarınızı üst kategoriler halinde gruplandırın. Bir kategoriye mevcut veya yeni etiketler ekleyin, yeniden adlandırın ya da kendi kategorinizi oluşturun. Kategorilerinizin hiçbirinde olmayan dosyalar “Diğer” altında görünür."
 title = "Kenar çubuğu kategorileri"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Çalışma alanına ekle"
 addToWorkspaceCount = "{{count}} öğeyi çalışma alanına ekle"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Dosyalarıma geri dön"
 breadcrumbs = "Klasör yolu"
 cancel = "İptal"
 classification = "Sınıflandırma"
-clearSearch = "Aramayı temizle"
 clearSelection = "Seçimi temizle"
 closeDetails = "Ayrıntıları kapat"
 create = "Oluştur"
@@ -3950,6 +4002,7 @@ downloadAll = "Tümünü indir"
 downloadVersion = "Bu sürümü indir"
 dropOverlay = "Yüklemek için dosyaları bırakın"
 dropOverlaySub = "Dosyalar Yerel'de başlar. Onları bir klasöre düzenlemek için 'Taşı' veya 'Buluta kaydet'i kullanın."
+duplicate = "Duplicate"
 file = "Dosya"
 fileInfo = "File info"
 fileMenu = "Dosya eylemleri"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Klasör ağacını yeniden boyutlandır (yön tuşları, bü
 save = "Kaydet"
 saveToServer = "Sunucuya kaydet"
 saveToServerDisabledHint = "Bu sunucuda sunucuya kaydetme etkin değil. Yöneticinizden etkinleştirmesini isteyin."
-search = "Ara"
-searchPlaceholder = "Bu klasörde ve alt klasörlerde ara"
 selectAll = "Tümünü seç"
 selectAllHint = "Tümünü seçmek için tıklayın. İpucu: Tek tek dosya eklemek için Ctrl (veya Cmd) basılı tutun, aralık seçmek için Shift."
 selectedCount = "{{count}} seçildi"
@@ -4044,6 +4095,10 @@ title = "Henüz bulut dosyası yok"
 hint = "Yüklemeden kaydedilen dosyalar burada kalır. Eklemek için bir dosya bırakın."
 title = "Yalnızca yerel dosya yok"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Açtığınız veya düzenlediğiniz dosyalar burada görünecek."
 title = "Henüz değiştirilen yok"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Klasör silinemedi."
 deleteFolderFailedDetail = "Klasör silinemedi: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Klasör görünümü güncellenemedi."
 folderAppearanceFailedDetail = "Klasör görünümü güncellenemedi: {{message}}"
 moveFilesFailed = "Dosyalar taşınamadı."
@@ -4113,6 +4170,11 @@ localHint = "Sadece bu tarayıcıda depolanır"
 shared = "Paylaşılan"
 sharedHint = "Bağlantıyla sizinle paylaşılmış"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "En eskiden"
 modifiedDesc = "En yeniden"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Depolamada dosya yok. Önce bazı dosyaları açın."
 open = "Aç"
 openFile = "Dosya Aç"
 openFiles = "Dosyalar Aç"
+selectFile = "Select {{name}}"
 selectFromStorage = "Depolamadan Seç"
 upload = "Yükle"
 uploadFile = "Dosya Yükle"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Tümü kaydedildi"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "CSV çıkarılamadı"
 extractXlsxError = "XLSX çıkarılamadı"
+filled = "filled"
 flattenAfterFilling = "Doldurduktan sonra düzleştir"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "zor"
 requiredFieldsError = "Lütfen tüm zorunlu alanları doldurun"
 rescanFields = "Alanları yeniden tara"
@@ -4795,9 +4863,6 @@ title = "Resimden PDF'e"
 [imageToPdf]
 tags = "dönüşüm,img,jpg,fotoğraf,resim"
 
-[infoBanner]
-dismiss = "Kapat"
-
 [invite]
 acceptError = "Hesap oluşturulamadı"
 accountFor = "Şunun için hesap oluşturuluyor"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Yükleme Başarılı!"
 uploadSuccessMessage = "Görselleriniz aktarıldı."
 validating = "Oturum doğrulanıyor..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Fotoğrafları yüklemek için tarayın. Görseller otomatik olarak PDF'ye dönüştürülür."
 descriptionNoConvert = "Mobil cihazınızdan fotoğrafları yüklemek için tarayın."
@@ -4997,8 +5090,13 @@ title = "Mobil Cihazdan Yükle"
 tags = "Çoklu Araç,Çoklu işlem,Arayüz,tıklama sürükleme,ön uç,istemci tarafı,etkileşimli,taşınabilir,taşı"
 title = "PDF Çoklu Araç"
 
-[navbar]
-search = "Ara"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Kimlik doğrulama başarılı olmadı. Bu pencereyi kapatıp tekrar deneyebilirsiniz."
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>Aktif Dosyalar</strong> görünümü, araca yüklediğini
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Kapat"
 cropSettings = "Artık kırpmak istediğimiz dosyayı seçtiğimize göre, PDF'nin kırpılacağı alanı seçmek için Kırp aracını yapılandırabiliriz."
+dialogLabel = "Onboarding"
 fileCheckbox = "Dosyalardan birine tıklamak, onu işleme için seçer. Toplu işlemler için birden fazla dosya seçebilirsiniz."
 fileReplacement = "Değiştirilen dosya, Çalışma Alanı'nda orijinal dosyanın yerini otomatik olarak alır; böylece onu kolayca başka araçlardan da geçirebilirsiniz."
 filesButton = "Hızlı Erişim çubuğundaki <strong>Dosyalar</strong> düğmesi, araçları kullanmak üzere PDF yüklemenize olanak tanır."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF'den PDF/A'ya"
 tags = "arşiv,uzun vadeli,standart,dönüşüm,saklama,koruma"
 title = "PDF'den PDF/A'ya"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "yazdırma,standart,dönüştürme,üretim,baskı öncesi,arşiv"
 title = "PDF'den PDF/X'e"
@@ -6045,6 +6151,7 @@ small = "500 Kredi"
 xsmall = "100 Kredi"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "İhtiyaçlarınıza uygun planı seçin"
 title = "Mevcut Planlar"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Aylık harcama limitine ulaşıldı"
 title = "Stripe portalı açılamadı"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "{{allowance}} ücretsiz PDF hakkından kullanıldı"
 capSuffix_other = "{{allowance}} ücretsiz PDF hakkından kullanıldı"
 eyebrow = "Processor denemesi"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Bir ilke çalıştığında bir belgeyi veya bildirimi email ile gönderin."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "İşlenen belgeleri Nextcloud'a dosyalayın."
@@ -7077,11 +7211,6 @@ title = "Resmi SDK'lar"
 beta = "Beta"
 deprecated = "Kullanımdan kaldırıldı"
 
-[portal.docs.search]
-empty = "Eşleşen doküman yok"
-placeholder = "Dokümanlarda ara"
-results = "{{count}} sonuç"
-
 [portal.docs.skills]
 eyebrow = "BECERİLER"
 lead = "Ajanınızın tek bir araç olarak çağırdığı paketlenmiş, adlandırılmış yetenekler. Her beceri, eval'ları ekli deterministik bir op zinciridir."
@@ -7180,11 +7309,11 @@ editorAction = "Düzenleyici"
 empty = "Bu filtreyle eşleşen belge yok."
 rowActions = "Satır eylemleri"
 sensitiveLabel = "Hassas"
-sensitiveTitle = "Hassas — erişim gerekli"
 
 [portal.documents.table.columns]
 action = "Pipeline / Eylem"
 document = "Belge"
+labels = "Labels"
 product = "Ürün"
 status = "Durum"
 time = "Zaman"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Son görülme"
 region = "Bölge"
 status = "Durum"
+target = "Target"
 version = "Sürüm"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Bu görünüm beklenmeyen bir hatayla karşılaştı. Tekrar dene
 retry = "Tekrar dene"
 title = "Bu sayfada bir şeyler ters gitti"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Geri"
 body = "Masaüstü uygulamasını indirin veya sunucuyu kendi ortamınızda barındırın."
@@ -7380,11 +7560,6 @@ cancel = "İptal"
 confirm = "Anahtarı iptal et"
 title = "API anahtarını iptal et"
 
-[portal.infrastructure.attestationLabel]
-attested = "Doğrulanmış"
-inScope = "Kapsamda"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Denetim etkinliklerini kategoriye göre filtrele"
 heading = "Denetim günlükleri"
@@ -7456,11 +7631,6 @@ info = "Bilgi"
 success = "Başarılı"
 warning = "Uyarı"
 
-[portal.infrastructure.certLabel]
-certified = "Sertifikalı"
-inProgress = "Devam ediyor"
-notStarted = "Başlatılmadı"
-
 [portal.infrastructure.createKey]
 cancel = "İptal"
 createKey = "Anahtar oluştur"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Bu sırrı şimdi kopyalayın — tekrar gösterilmeyecek."
 title = "API anahtarı oluştur"
 titleCreated = "Anahtar oluşturuldu"
 
-[portal.infrastructure.deployLabel]
-live = "Canlı"
-queued = "Kuyrukta"
-rolledBack = "Geri alındı"
-rolling = "Yayınlanıyor"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/dk"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Dağıtan"
-environment = "Ortam"
-product = "Ürün"
-status = "Durum"
-version = "Sürüm"
-when = "Ne zaman"
-
-[portal.infrastructure.deployments.recent]
-heading = "Son dağıtımlar"
-subheading = "Ürünler ve ortamlar genelindeki en son kullanıma almalar."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Örnekler"
-latency = "Gecikme"
-load = "Yük"
-p99 = "P99"
-region = "Bölge"
-status = "Durum"
-throughput = "Aktarım hızı"
-uptime = "Çalışma süresi"
-version = "Sürüm"
-
-[portal.infrastructure.deployments.regions]
-heading = "Bölgeler"
-subheading = "Dağıtılmış her Stirling bölgesi için canlı sağlık — gecikme, yük ve rollout sürümü."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Çalışma alanınız hazırlandıktan sonra dağıtılmış bölgeler burada görünür."
-title = "Dağıtılmış bölge yok"
-
 [portal.infrastructure.keyLabel]
 active = "Aktif"
 revoked = "İptal edildi"
 
-[portal.infrastructure.modelLabel]
-active = "Aktif"
-degraded = "Bozulmuş"
-disabled = "Devre dışı"
-
-[portal.infrastructure.models]
-heading = "Modeller"
-msValue = "{{value}} ms"
-subheading = "Çalışma alanınız genelinde belge işlemeyi destekleyen model kataloğu ve yönlendirme."
-
-[portal.infrastructure.models.byom]
-description = "On-prem veya self-hosted bir modeli kaydedin ve veri yerleşimiyle sınırlı işleme için bir bölgeye sabitleyin."
-title = "Kendi modelinizi getirin"
-
-[portal.infrastructure.models.catalogue]
-heading = "Katalog"
-sub = "Çalışma alanınız için kullanılabilir yönetilen modeller, canlı gecikme ve maliyetle birlikte."
-subEnterprise = "Yönetilen, kendi getirdiğiniz ve on-prem modeller — bölge bazında sabitleme kullanılabilir."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Çalışma alanınızın kataloğundaki modeller burada görünür."
-title = "Kullanılabilir model yok"
-
-[portal.infrastructure.models.columns]
-cost = "Maliyet"
-latency = "Gecikme"
-load = "Yük"
-model = "Model"
-status = "Durum"
-type = "Tür"
-version = "Sürüm"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/çağrı"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Aktif modeller"
-avgLatency = "Ort. gecikme"
-included = "Dahil"
-monthlySpend = "Aylık model harcaması"
-
-[portal.infrastructure.models.routing]
-empty = "Yapılandırılmış yönlendirme kuralı yok."
-heading = "Yönlendirme kuralları"
-sub = "Her işlemi hangi modelin yönettiği. Daha dar bir kural eşleşmediğinde varsayılan uygulanır."
-subLocked = "İşlemleri belirli modellere yönlendirin — ücretli planlarda kullanılabilir."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Her işlemi ve belge türünü hangi modelin yöneteceğini kontrol etmek için Pro'ya yükseltin."
-title = "Model yönlendirme ücretli bir özelliktir"
-
-[portal.infrastructure.models.routingColumns]
-default = "Varsayılan"
-docType = "Belge türü"
-modelForAria = "{{operation}} için model"
-operation = "İşlem"
-routedTo = "Yönlendirildiği yer"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Sınıflandırma"
-extraction = "Çıkarma"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Bozulmuş"
-down = "Kapalı"
-healthy = "Sağlıklı"
-
-[portal.infrastructure.security.access.byok]
-description = "Kendi KMS'nizden bir anahtar sağlayın. Stirling bununla şifreler ancak yine de okuyabilir."
-label = "Kendi anahtarınızı getirin (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Anahtarlar KMS'nizden asla ayrılmaz. Stirling yalnızca şifreli metni tutar."
-label = "Kendi anahtarınızı tutun (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling şifreleme anahtarlarını yönetir. En basiti — sizin tarafınızda sıfır anahtar operasyonu."
-label = "Stirling tarafından tutulan anahtarlar"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Belge erişim ilkesi"
-subheading = "İşlenen belgelerin beklemedeyken şifresini kimlerin çözebileceğini kontrol eder."
-
-[portal.infrastructure.security.attestations]
-heading = "Uyumluluk beyanları"
-noReport = "Rapor mevcut değil"
-subheading = "Beyan edilmiş kontrollerde raporların bulunduğu, çerçeve bazında denetim duruşu."
-viewReport = "Raporu görüntüle →"
-
-[portal.infrastructure.security.compliance]
-heading = "Uyumluluk"
-subheading = "Stirling platformunu kapsayan beyanlar ve sertifikasyonlar."
-
-[portal.infrastructure.security.empty]
-description = "Çalışma alanınızın güvenlik yapılandırması burada görünür."
-title = "Güvenlik duruşu kullanılamıyor"
-
-[portal.infrastructure.security.hyokBanner]
-description = "HYOK ile şifreleme anahtarları KMS'nizden asla ayrılmaz. Stirling yalnızca istediğiniz zaman iptal edebileceğiniz şifreli metni saklar ve işler."
-title = "Stirling belgelerinizin şifresini çözemez"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Yapılandırılmış IP aralığı yok — tüm IP'lere izin verilir."
-heading = "IP izin listesi"
-sub = "API erişimi bu CIDR aralıklarıyla sınırlandırılmıştır."
-subLocked = "API erişimini bilinen IP aralıklarıyla sınırlandırın — ücretli planlarda kullanılabilir."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "API erişimini belirli ağlarla sınırlandırmak için Pro'ya yükseltin."
-title = "IP izin listeleme ücretli bir özelliktir"
-
-[portal.infrastructure.security.ipColumns]
-added = "Eklendi"
-addedBy = "Ekleyen"
-cidr = "CIDR"
-label = "Etiket"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algoritma"
-heading = "Şifreleme anahtarı yönetimi"
-keyId = "Anahtar tanımlayıcısı"
-lastRotated = "Son döndürme"
-rotateKey = "Anahtarı döndür"
-rotationPolicy = "Döndürme ilkesi"
-subheading = "Beklemedeki belgeleri şifreleyen anahtarların saklama sorumluluğu — kim şifre çözebilir ve anahtarlar nasıl döndürülür."
-
-[portal.infrastructure.security.managedBanner]
-description = "Kendi anahtarını getir (BYOK) ve kendi anahtarını tut (HYOK) saklama sorumluluğu Enterprise'da kullanılabilir. Kendi KMS'nizden anahtar sağlamak için yükseltin."
-title = "Planınızda anahtarlar Stirling tarafından yönetilir"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Asya Pasifik"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR veri sınırı"
-label = "Avrupa Birliği"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Amerika Birleşik Devletleri"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Veri yerleşimi"
-subheading = "Belgelerin depolandığı ve işlendiği yer."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} kullanıldı"
-
-[portal.infrastructure.storage.empty]
-description = "Bağlı depolama ve kullanım burada görünür."
-title = "Yapılandırılmış depolama yok"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Aktif"
-activeRange = "0–{{value}}g"
-archived = "Arşivlendi"
-coldStorage = "soğuk depolama"
-deleted = "Silindi"
-never = "asla"
-purged = "kalıcı olarak silindi"
-
-[portal.infrastructure.storage.providers]
-connect = "Bağlan"
-connected = "Bağlandı"
-heading = "Bağlı sağlayıcılar"
-subheading = "İşlenen çıktılarının yazıldığı yer."
-
-[portal.infrastructure.storage.retention]
-heading = "Saklama"
-subheading = "Yaşam döngüsü silinmesinden önce çıktıların ne kadar süre tutulacağı."
-windowLabel = "Varsayılan saklama penceresi"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} gün"
-days_other = "{{count}} gün"
-never = "Asla silme"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Toplam kullanım"
-progressLabel = "Kullanılan depolama"
-subheading = "Tüm bağlı sağlayıcılar genelinde tüketilen depolama."
-
 [portal.infrastructure.tabs]
 apiKeys = "API Anahtarları"
 audit = "Denetim Günlükleri"
@@ -7715,11 +7657,9 @@ security = "Güvenlik"
 storage = "Depolama"
 
 [portal.integrations]
-addAnother = "Başka ekle"
 availableHeading = "Kullanılabilir"
 comingSoonHeading = "Yakında"
 connect = "Bağlan"
-connectedHeading = "Bağlı"
 connectionCount_one = "{{count}} bağlantı"
 connectionCount_other = "{{count}} bağlantı"
 customApi = "Özel API"
@@ -7737,6 +7677,10 @@ security = "Güvenlik"
 signing = "İmzalama"
 storage = "Depolama"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Bağlı"
 
@@ -7767,7 +7711,6 @@ integrations = "Entegrasyonlar"
 pipelines = "Pipelines"
 policies = "İlkeler"
 procurement = "Tedarik"
-settings = "Ayarlar"
 sources = "Kaynaklar"
 usage = "Kullanım ve Faturalandırma"
 users = "Kullanıcılar"
@@ -7784,7 +7727,7 @@ title = "Pipelines"
 newPipeline = "Yeni pipeline"
 
 [portal.pipelines.builder]
-addStep = "Araç ekle"
+activate = "Activate"
 back = "Pipeline'lara dön"
 cannotFollow = "{{produced}} alınamaz"
 chooseAccount = "Bir hesap seçin"
@@ -7792,28 +7735,38 @@ chooseDestination = "Bir hedef seçin"
 chooseOperation = "Bu adımın ne yapacağını seçin"
 chooseSource = "Bir kaynak seçin"
 discard = "Değişiklikleri at"
-enabled = "Etkin"
 inputs = "Girdi"
 inputSource = "Girdi kaynağı"
 inputTrigger = "Tetikleyici"
 keepEditing = "Düzenlemeye devam et"
+moreActions = "More actions"
 needsConfiguring = "Kurulum gerekli"
-needsUpload = "Yüklenmiş bir dosya gerekiyor"
-noSources = "Henüz bağlı kaynak yok. Girdi olarak kullanmak için bir tane oluşturun."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Aramanızla eşleşen araç yok."
-pipelineSettings = "Pipeline ayarları"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Araç ara"
-selectToolBody = "Pipeline'ınızı oluşturmak için bir araç ekleyin."
-selectToolTitle = "Henüz araç yok"
 sendToSystem = "Başka bir sisteme gönder"
 stepsIncompatible = "Bu adımlar, önceki adımlarının ürettiği üzerinde çalışamaz: {{tools}}."
 stepsNeedSetup = "Kaydetmeden önce bu adımların hâlâ kurulması gerekiyor: {{tools}}."
-toolSettings = "Araç ayarları"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Tanınmayan işlem, olduğu gibi tutuldu."
 unsavedBody = "Kaydedilmemiş değişiklikleriniz var. Ayrılmadan önce kaydedin mi, yoksa atılsın mı?"
 unsavedTitle = "Kaydedilmemiş değişiklikler"
-uploadUnsupported = "Yüklenen dosyalar henüz pipeline'larda desteklenmiyor, bu nedenle şu adımlar kaydedilemez: {{tools}}."
 usesDefaults = "Varsayılan ayarlarla çalışır"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Önceki adımdaki her dosyayı birleştirir"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Bu adımın ne kabul ettiği denetlenemiyor"
 
 [portal.pipelines.composer]
 addTool = "Araç ekle"
-cancel = "İptal"
-chainEmpty = "Pipeline'ınızı oluşturmaya başlamak için bir araç ekleyin."
 create = "Pipeline oluştur"
+createPaused = "Create paused"
 editingUnsupported = "Bu araç parametrelerinin düzenleme için görüntülenmesi henüz desteklenmiyor."
-moveDown = "Aşağı taşı"
-moveUp = "Yukarı taşı"
+editSource = "Edit source"
 name = "Ad"
 namePlaceholder = "örn. Redaction taraması"
 noToolSettings = "Bu aracın yapılandırılabilir ayarı yok."
-operations_one = "İşlem ({{count}})"
-operations_other = "İşlemler ({{count}})"
 output = "Çıktı"
-removeStep = "İşlemi kaldır"
 save = "Değişiklikleri kaydet"
 scheduleEvery = "Şu aralıkla çalıştır"
-sources = "Kaynaklar"
-sourcesLoading = "Kaynaklar yükleniyor..."
 trigger = "Tetikleyici"
 triggerManual = "Yalnızca manuel"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "gün"
 hours = "saat"
 minutes = "dakika"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "\"{{name}}\" silinsin mi? Bu geri alınamaz."
 cancel = "İptal"
@@ -7867,6 +7825,37 @@ connectSource = "Bir kaynak bağla"
 description = "İlk pipeline'ınızı oluşturun: çalışacağı kaynakları seçin, işlemleri zincirleyin ve çıktının nereye gideceğini belirleyin."
 title = "Henüz pipeline yok"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Aktif"
 paused = "Duraklatıldı"
@@ -7879,7 +7868,6 @@ completed_one = "Çalıştırma tamamlandı."
 completed_other = "{{count}} çalıştırmanın tümü tamamlandı."
 empty = "Çalıştırılacak bir şey yok: kaynaklarda işlenecek belge yoktu."
 failed = "Çalıştırma başarısız: {{error}}"
-historyCleared = "Geçmiş temizlendi. Sonraki çalıştırma, şu anda kaynaklarda bulunan her şeyi yeniden işler."
 inFlight = "Çalıştırılacak yeni bir şey yok: belgeler önceki bir çalıştırmadan hâlâ işleniyor."
 parked_one = "Çalıştırılacak bir şey yok: {{count}} belge daha önce başarısız oldu ve park edildi. Nedeni düzeltin, ardından yeniden denemek için geçmişi temizleyin."
 parked_other = "Çalıştırılacak bir şey yok: {{count}} belge daha önce başarısız oldu ve park edildi. Nedeni düzeltin, ardından yeniden denemek için geçmişi temizleyin."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Kaynaklar"
 status = "Durum"
 steps = "Adımlar"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Klasör izleme"
@@ -8209,6 +8198,24 @@ label = "Bir Jira issue'suna ekle"
 description = "İşlenen belgeyi ek olarak gönderir."
 label = "Belgeyi e-posta ile gönder (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "İşlenen belgeyi bir klasöre yazar."
 label = "Nextcloud'a yükle"
@@ -8683,16 +8690,6 @@ maxed = "Sınıra ulaşıldı"
 subtitle = "Ücretsiz denemeniz {{date}} tarihine kadar sürer. Kart gerekmez."
 title = "Enterprise denemesi"
 
-[portal.search]
-ariaLabel = "Ara"
-placeholder = "Stirling'de ara — endpoints, pipelines, docs…"
-
-[portal.search.empty]
-noActionsDescription = "Hızlı eylemler kullanılabilir olduğunda burada görünecek."
-noActionsTitle = "Hızlı eylem yok"
-noMatches = "\"{{query}}\" için eşleşme yok"
-noMatchesDescription = "Farklı bir anahtar kelime deneyin veya kataloğa göz atın."
-
 [portal.settings.groups]
 admin = "Yönetici"
 
@@ -8743,10 +8740,6 @@ cancel = "İptal"
 confirm = "Sil"
 title = "Kaynak silinsin mi?"
 
-[portal.sources.empty]
-description = "İlkelerinizin belgeleri alabileceği bir yer olması için bir klasör (ve yakında bulut depolama) bağlayın."
-title = "Henüz bağlı kaynak yok"
-
 [portal.sources.kpi]
 inUse = "Kullanımda"
 total = "Bağlantılar"
@@ -8785,6 +8778,7 @@ unused = "Kullanılmıyor"
 documents = "Belgeler"
 source = "Kaynak"
 status = "Durum"
+type = "Type"
 usedBy = "İlkeler"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Politikalar ve Gizlilik"
 [settings.preferences]
 title = "Tercihler"
 
-[settings.search]
-placeholder = "Ayar sayfalarında ara..."
-
 [settings.security]
 description = "Hesabınızı güvende tutmak için şifrenizi güncelleyin."
 title = "Güvenlik"
@@ -10128,6 +10119,7 @@ last = "Son sayfa"
 maintainRatio = "Oranı korumayı değiştir"
 next = "Sonraki sayfa"
 noSavedSigs = "Kayıtlı imza bulunamadı"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Kişisel İmzalar"
 previous = "Önceki sayfa"
 redo = "Yinele"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Arka plan kaldırılamadı"
 hint = "İmzanızın PNG veya JPG görselini yükleyin"
 label = "İmza görseli yükle"
 placeholder = "Görsel dosyası seç"
+previewAlt = "Current image signature"
 processing = "Görsel işleniyor..."
 removeBackground = "Beyaz arka planı kaldır (şeffaf yap)"
 
@@ -10179,6 +10172,17 @@ saved = "Yukarıdan kaydedilmiş bir imza seçin, ardından PDF üzerinde herhan
 text = "Adınızı yukarıya girdikten sonra, imzanızı PDF üzerinde herhangi bir yere tıklayarak yerleştirin."
 title = "İmza nasıl eklenir"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "İmzayı Taşı"
 pause = "Yerleştirmeyi duraklat"
@@ -10625,6 +10629,23 @@ title = "Sunucuya Yükle"
 updateButton = "Sunucuda Güncelle"
 uploadButton = "Sunucuya Yükle"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Geri dön"
 pdfTools = "PDF Araçları"
 placeholder = "Başlamak için bir araç seçin"
 premiumFeature = "Premium özellik:"
-searchTools = "Araçları ara"
 toolsHeader = "Araçlar"
 viewAllTools = "Tüm araçları görüntüle"
 
@@ -10822,6 +10842,9 @@ removal = "Kaldırma"
 signing = "İmzalama"
 verification = "Doğrulama"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Araç bulunamadı"
 noTools = "Kullanılabilir araç yok"
@@ -10979,6 +11002,13 @@ approver = "İlkeyi onaylar"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "{{email}} adresine gönderilen davetiye iptal edilsin mi? Mevcut bağlantıyla katılamayacaklar."
 cancelInviteTitle = "Davetiyeyi iptal et"
@@ -10998,10 +11028,8 @@ title = "Henüz üye yok"
 addToTeam = "Takıma ekle"
 guestCount = "{{count}} misafir"
 guests = "Misafirler"
-guestsDesc = "Dış iş ortakları, paylaştıklarınızla sınırlıdır. Yalnızca Editor."
 ledBy = "{{owner}} tarafından yönetiliyor"
 org = "Kuruluş"
-orgDesc = "Kuruluş genelinde yetkiye ve ilke onayına sahip sahipler"
 owners = "{{count}} sahip"
 team = "{{name}} takımı"
 teamMeta = "{{count}} kişi"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Davet eden: {{who}}"
 cancel = "İptal"
-count = "{{count}} beklemede"
-desc = "Henüz katılmamış davet edilen kişiler. Kabul edene kadar bir koltuk tutarlar."
 expiresInDays_one = "{{count}} gün içinde sona erer"
 expiresInDays_other = "{{count}} gün içinde sona erer"
 expiresToday = "Bugün sona erer"
 title = "Bekleyen davetiyeler"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Arka uca ulaşılırken bir sorun oluştu veya erişiminiz yok. Tekrar deneyin."
 title = "Üyeler yüklenemedi"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Eklerde ara"
 title = "Ekler"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Yer imi başlığı"
 bookmarkTitleRequired = "Yer imi başlığı gereklidir"
 closeSidebar = "Yer imleri kenar çubuğunu kapat"
 collapseAll = "Tüm yer imlerini daralt"
+empty = "No bookmarks in this document"
 expandAll = "Tüm yer imlerini genişlet"
 searchPlaceholder = "Yer imlerini ara"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Yorum ekle"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Belgede konumlandır"
 moreActions = "Diğer işlemler"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Sayfa {{page}}"
 placingHint = "Yerleştirmek için bir sayfaya tıklayın… (iptal)"
 removeCommentOnly = "Yalnızca yorumu kaldır"
 saveReply = "Yanıtı kaydet"
+searchPlaceholder = "Search comments"
 title = "Yorumlar"
 typeComment = "Yorum"
 typeInsertText = "Metin Ekle"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Kaydedilmemiş değişiklikleriniz var"
 closeSidebar = "Katmanlar kenar çubuğunu kapat"
 hideAll = "Tüm katmanları gizle"
 showAll = "Tüm katmanları göster"
+title = "Layers"
 
 [viewer.link]
 delete = "Bağlantıyı sil"
@@ -11646,6 +11682,7 @@ exitRedaction = "Karartma modundan çık"
 exportAll = "PDF'yi dışa aktar"
 exportSelected = "Seçili sayfaları dışa aktar"
 formFill = "Form doldur"
+hideToolbar = "Hide toolbar"
 multiTool = "Çoklu araç"
 panMode = "Kaydırma modu"
 print = "PDF'yi yazdır"
@@ -11666,6 +11703,7 @@ selectAll = "Tümünü seç"
 selectByNumber = "Sayfa numaralarına göre seç"
 selectLanguage = "Dil seç"
 share = "Paylaş"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Ek açıklamaların görünürlüğünü değiştir"
 toggleAttachments = "Ekleri göster/gizle"
 toggleBookmarks = "Yer imlerini göster/gizle"
diff --git a/frontend/editor/public/locales/uk-UA/translation.toml b/frontend/editor/public/locales/uk-UA/translation.toml
index bb22c61fe6..aa777bf20a 100644
--- a/frontend/editor/public/locales/uk-UA/translation.toml
+++ b/frontend/editor/public/locales/uk-UA/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Алфавіт"
 apply = "Застосувати"
 applyAndContinue = "Зберегти й вийти"
-areYouSure = "Ви впевнені, що хочете вийти?"
 back = "Назад"
 black = "Чорний"
 blue = "Синій"
@@ -106,6 +105,7 @@ undoSuccess = "Операцію успішно скасовано"
 unknown = "Невідомо"
 unpin = "Відкріпити файл (замінити після виконання інструмента)"
 unsavedChanges = "У вас є незбережені зміни у вашому PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Незбережені зміни"
 unsupported = "Не підтримується"
 username = "Ім'я користувача"
@@ -1879,6 +1879,9 @@ width = "Ширина"
 [app]
 description = "Безкоштовна альтернатива Adobe Acrobat (10M+ завантажень)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Перетворити в PDF/A-3b"
 convertToPdfA3bDescription = "Створює архівний PDF із вбудованими вкладеннями"
@@ -2933,12 +2936,16 @@ text = "Щоб зробити ці дозволи незмінними, скор
 [chat.actions]
 copy = "Копіювати повідомлення"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Параметри агента Stirling"
+assistant = "AI Assistant"
 clearChat = "Очистити чат"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Ця операція використає ваші хмарні кр
 tooltip = "Вибрати колір з екрана"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Виберіть колір"
 
 [common]
+actions = "Actions"
 back = "Назад"
 cancel = "Скасувати"
 close = "Закрити"
+codeSample = "Code sample"
 collapse = "Згорнути"
 confirm = "Підтвердити"
 continue = "Продовжити"
 copied = "Скопійовано!"
 copy = "Копіювати"
 done = "Готово"
+enterValue = "Enter value"
 error = "Помилка"
 expand = "Розгорнути"
 loading = "Завантаження..."
 next = "Далі"
+open = "Open"
 preview = "Попередній перегляд"
 previous = "Назад"
 refresh = "Оновити"
 remaining = "Залишилося"
 retry = "Повторити"
 save = "Зберегти"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Очистити вибране"
@@ -3185,6 +3199,7 @@ title = "Метод стиснення"
 [compress.settings]
 desiredSize = "Бажаний розмір файлу"
 desiredSizePlaceholder = "Введіть розмір"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Стиснення — простий спосіб зменшити розмір файлу. Виберіть «Розмір файлу», щоб вказати цільовий розмір і ми підлаштуємо якість за вас. Або виберіть «Якість», щоб вручну задати силу стиснення."
@@ -3387,6 +3402,24 @@ pdfOptions = "Параметри PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Спочатку виберіть вихідний формат"
 settings = "Налаштування"
 single = "Один"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Пошук..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Редагувати"
@@ -3824,11 +3861,13 @@ shareSelected = "Поділитися вибраними"
 sharing = "Спільний доступ"
 showAll = "Показати все"
 showHistory = "Показати історію"
+sortBy = "Sort files"
 sortByDate = "Сортувати за датою"
 sortByName = "Сортувати за назвою"
 sortBySize = "Сортувати за розміром"
 storage = "Сховище"
 storageState = "Сховище"
+storageUsed = "Storage used"
 synced = "Синхронізовано"
 title = "Завантажити файли PDF"
 toolChain = "Застосовані інструменти"
@@ -3874,8 +3913,12 @@ addFiles = "Додати файли"
 addingFiles = "Додавання файлів…"
 collapse = "Згорнути бічну панель"
 customizeGroups = "Налаштувати групи"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Відкрийте файли, щоб почати"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Розгорнути бічну панель"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive не налаштовано"
@@ -3888,15 +3931,17 @@ openFromComputer = "Відкрити з комп’ютера"
 openSettings = "Відкрити налаштування"
 other = "Інше"
 recent = "Нещодавні"
-search = "Пошук"
-searchPlaceholder = "Пошук файлів..."
 viewAll = "Переглянути всі файли ({{count}})"
 
 [fileSidebar.fileItem]
 closeViewer = "Закрити переглядач"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Відкрити в переглядачі"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Скинути до стандартних налаштувань"
 subtitle = "Групуйте файли в батьківські категорії. Додавайте наявні або нові мітки до категорії, перейменовуйте її або створюйте власну. Файли, які не належать до жодної з ваших категорій, відображаються в розділі «Інше»."
 title = "Категорії бічної панелі"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Додати до робочої області"
 addToWorkspaceCount = "Додати {{count}} до робочої області"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Назад до «Мої файли»"
 breadcrumbs = "Шлях до папки"
 cancel = "Скасувати"
 classification = "Класифікація"
-clearSearch = "Очистити пошук"
 clearSelection = "Очистити вибір"
 closeDetails = "Закрити відомості"
 create = "Створити"
@@ -3950,6 +4002,7 @@ downloadAll = "Завантажити все"
 downloadVersion = "Завантажити цю версію"
 dropOverlay = "Перетягніть файли для завантаження"
 dropOverlaySub = "Файли спочатку потрапляють у Локальні. Використовуйте «Перемістити до» або «Зберегти в хмарі», щоб упорядкувати їх у папці."
+duplicate = "Duplicate"
 file = "Файл"
 fileInfo = "File info"
 fileMenu = "Дії з файлом"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Змінити розмір дерева папок (кла
 save = "Зберегти"
 saveToServer = "Зберегти на сервері"
 saveToServerDisabledHint = "На цьому сервері збереження не ввімкнено. Попросіть адміністратора увімкнути його."
-search = "Пошук"
-searchPlaceholder = "Шукати в цій папці та підпапках"
 selectAll = "Вибрати все"
 selectAllHint = "Натисніть, щоб вибрати все. Підказка: утримуйте Ctrl (або Cmd), щоб додавати файли по одному, Shift — щоб вибрати діапазон."
 selectedCount = "Вибрано: {{count}}"
@@ -4044,6 +4095,10 @@ title = "Ще немає хмарних файлів"
 hint = "Файли, збережені без завантаження, залишаються тут. Перетягніть файл, щоб додати його."
 title = "Немає локальних файлів"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Файли, які ви відкриєте або відредагуєте, з’являться тут."
 title = "Поки нічого не змінено"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Не вдалося видалити папку."
 deleteFolderFailedDetail = "Не вдалося видалити папку: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Не вдалося оновити вигляд папки."
 folderAppearanceFailedDetail = "Не вдалося оновити вигляд папки: {{message}}"
 moveFilesFailed = "Не вдалося перемістити файли."
@@ -4113,6 +4170,11 @@ localHint = "Зберігається лише в цьому браузері"
 shared = "Спільний доступ"
 sharedHint = "Надано вам за посиланням"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Спочатку найстаріші"
 modifiedDesc = "Спочатку останні"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "У сховищі немає файлів. Спершу
 open = "Відкрити"
 openFile = "Відкрити файл"
 openFiles = "Відкрити файли"
+selectFile = "Select {{name}}"
 selectFromStorage = "Вибрати зі сховища"
 upload = "Завантажити"
 uploadFile = "Завантажити файл"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Усе збережено"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Не вдалося витягти CSV"
 extractXlsxError = "Не вдалося витягти XLSX"
+filled = "filled"
 flattenAfterFilling = "Сплющити після заповнення"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "обов."
 requiredFieldsError = "Заповніть усі обов’язкові поля"
 rescanFields = "Повторно сканувати поля"
@@ -4795,9 +4863,6 @@ title = "Зображення в PDF"
 [imageToPdf]
 tags = "конвертація,зображення,jpg,картинка,фото"
 
-[infoBanner]
-dismiss = "Закрити"
-
 [invite]
 acceptError = "Не вдалося створити обліковий запис"
 accountFor = "Створення облікового запису для"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Завантаження успішне!"
 uploadSuccessMessage = "Ваші зображення передано."
 validating = "Перевірка сеансу..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Скануйте для завантаження фото. Зображення автоматично конвертуються в PDF."
 descriptionNoConvert = "Скануйте для завантаження фото зі свого мобільного пристрою."
@@ -4997,8 +5090,13 @@ title = "Завантажити з мобільного"
 tags = "мультиінструмент,багатоопераційний,інтерфейс,перетягування,клієнтська частина,інтерактивний"
 title = "Мультиінструмент PDF"
 
-[navbar]
-search = "Пошук"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Автентифікація не відбулася. Можете закрити це вікно та спробувати ще раз."
@@ -5127,6 +5225,7 @@ activeFiles = "Вигляд <strong>Активні файли</strong> пока
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Закрити"
 cropSettings = "Тепер, коли ми вибрали файл, який хочемо обрізати, можемо налаштувати інструмент Обрізка, щоб вибрати область, до якої слід обрізати PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Клацання по файлу позначає його для обробки. Можна вибрати кілька файлів для пакетних операцій."
 fileReplacement = "Змінений файл автоматично замінить оригінал у Робочій області, що дозволить легко пропустити його через інші інструменти."
 filesButton = "Кнопка <strong>Файли</strong> на панелі швидкого доступу дозволяє завантажувати PDF для роботи інструментів."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF в PDF/A"
 tags = "архів,довгостроковий,стандартний,конверсія,зберігання,консервація"
 title = "PDF в PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "друк,стандарт,конвертація,виробництво,додрукарська підготовка,архів"
 title = "PDF у PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 кредитів"
 xsmall = "100 кредитів"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Виберіть план, який відповідає вашим потребам"
 title = "Доступні плани"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Досягнуто місячного ліміту витрат"
 title = "Не вдалося відкрити портал Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "з {{allowance}} безкоштовних PDF використано"
 capSuffix_other = "з {{allowance}} безкоштовних PDF використано"
 eyebrow = "Пробний період Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Надсилайте документ або сповіщення Email, коли політика запускається."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Розміщуйте оброблені документи в Nextcloud."
@@ -7077,11 +7211,6 @@ title = "Офіційні SDK"
 beta = "Beta"
 deprecated = "Застаріло"
 
-[portal.docs.search]
-empty = "Немає відповідних docs"
-placeholder = "Пошук docs"
-results = "{{count}} результатів"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "Вбудовані іменовані можливості, які ваш агент викликає як один інструмент. Кожна навичка — це детермінований ланцюг операцій із прикріпленими оцінюваннями."
@@ -7180,11 +7309,11 @@ editorAction = "Редактор"
 empty = "Жоден документ не відповідає цьому фільтру."
 rowActions = "Дії рядка"
 sensitiveLabel = "Конфіденційно"
-sensitiveTitle = "Конфіденційно — потрібен доступ"
 
 [portal.documents.table.columns]
 action = "Конвеєр / Дія"
 document = "Документ"
+labels = "Labels"
 product = "Продукт"
 status = "Статус"
 time = "Час"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Остання активність"
 region = "Регіон"
 status = "Статус"
+target = "Target"
 version = "Версія"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "У цьому поданні сталася неочікуван
 retry = "Спробувати ще раз"
 title = "На цій сторінці щось пішло не так"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Назад"
 body = "Завантажте desktop app або self-host сервер."
@@ -7380,11 +7560,6 @@ cancel = "Скасувати"
 confirm = "Відкликати ключ"
 title = "Відкликати API ключ"
 
-[portal.infrastructure.attestationLabel]
-attested = "Підтверджено"
-inScope = "У межах обсягу"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Фільтрувати події аудиту за категорією"
 heading = "Журнали аудиту"
@@ -7456,11 +7631,6 @@ info = "Інформація"
 success = "Успіх"
 warning = "Попередження"
 
-[portal.infrastructure.certLabel]
-certified = "Сертифіковано"
-inProgress = "Виконується"
-notStarted = "Не розпочато"
-
 [portal.infrastructure.createKey]
 cancel = "Скасувати"
 createKey = "Створити ключ"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Скопіюйте цей секрет зараз — йог
 title = "Створити ключ API"
 titleCreated = "Ключ створено"
 
-[portal.infrastructure.deployLabel]
-live = "Працює"
-queued = "У черзі"
-rolledBack = "Відкочено"
-rolling = "Розгортається"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} мс"
-throughputValue = "{{value}}/хв"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Розгорнув"
-environment = "Середовище"
-product = "Продукт"
-status = "Статус"
-version = "Версія"
-when = "Коли"
-
-[portal.infrastructure.deployments.recent]
-heading = "Останні розгортання"
-subheading = "Останні випуски в продуктах і середовищах."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Екземпляри"
-latency = "Затримка"
-load = "Навантаження"
-p99 = "P99"
-region = "Регіон"
-status = "Статус"
-throughput = "Пропускна здатність"
-uptime = "Час безвідмовної роботи"
-version = "Версія"
-
-[portal.infrastructure.deployments.regions]
-heading = "Регіони"
-subheading = "Поточний стан кожного розгорнутого регіону Stirling — затримка, навантаження та версія випуску."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Розгорнуті регіони з’являться тут після підготовки вашого робочого простору."
-title = "Регіони не розгорнуто"
-
 [portal.infrastructure.keyLabel]
 active = "Активний"
 revoked = "Відкликаний"
 
-[portal.infrastructure.modelLabel]
-active = "Активна"
-degraded = "Погіршена"
-disabled = "Вимкнена"
-
-[portal.infrastructure.models]
-heading = "Моделі"
-msValue = "{{value}} мс"
-subheading = "Каталог моделей і маршрутизація, що забезпечують обробку документів у вашому робочому просторі."
-
-[portal.infrastructure.models.byom]
-description = "Зареєструйте локальну або самостійно розміщену модель і закріпіть її за регіоном для обробки з урахуванням резидентності даних."
-title = "Власна модель"
-
-[portal.infrastructure.models.catalogue]
-heading = "Каталог"
-sub = "Керовані моделі, доступні вашому робочому простору, з актуальною затримкою та вартістю."
-subEnterprise = "Керовані, власні та локальні моделі — з доступним закріпленням за регіонами."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Моделі в каталозі вашого робочого простору з’являться тут."
-title = "Немає доступних моделей"
-
-[portal.infrastructure.models.columns]
-cost = "Вартість"
-latency = "Затримка"
-load = "Навантаження"
-model = "Модель"
-status = "Статус"
-type = "Тип"
-version = "Версія"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/виклик"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Активні моделі"
-avgLatency = "Середня затримка"
-included = "Включено"
-monthlySpend = "Щомісячні витрати на моделі"
-
-[portal.infrastructure.models.routing]
-empty = "Правила маршрутизації не налаштовано."
-heading = "Правила маршрутизації"
-sub = "Яка модель обробляє кожну операцію. Типове правило застосовується, коли не збігається жодне вужче правило."
-subLocked = "Спрямовуйте операції до конкретних моделей — доступно на платних планах."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Оновіться до Pro, щоб керувати тим, яка модель обробляє кожну операцію та тип документа."
-title = "Маршрутизація моделей — платна функція"
-
-[portal.infrastructure.models.routingColumns]
-default = "Типово"
-docType = "Тип документа"
-modelForAria = "Модель для {{operation}}"
-operation = "Операція"
-routedTo = "Спрямовано до"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Класифікація"
-extraction = "Видобування"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Погіршено"
-down = "Недоступно"
-healthy = "Справно"
-
-[portal.infrastructure.security.access.byok]
-description = "Надайте ключ із власного KMS. Stirling шифрує ним, але все ще може читати."
-label = "Власний ключ (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Ключі ніколи не залишають ваш KMS. Stirling зберігає лише шифротекст."
-label = "Зберігайте власний ключ (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling керує ключами шифрування. Найпростіше — нуль операцій із ключами з вашого боку."
-label = "Ключі, що зберігаються Stirling"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Політика доступу до документів"
-subheading = "Керує тим, хто може розшифровувати оброблені документи в стані спокою."
-
-[portal.infrastructure.security.attestations]
-heading = "Підтвердження відповідності"
-noReport = "Звіт недоступний"
-subheading = "Стан аудиту за кожним фреймворком, зі звітами щодо підтверджених контролів."
-viewReport = "Переглянути звіт →"
-
-[portal.infrastructure.security.compliance]
-heading = "Відповідність вимогам"
-subheading = "Підтвердження та сертифікації, що охоплюють платформу Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Конфігурація безпеки вашого робочого простору з’явиться тут."
-title = "Стан безпеки недоступний"
-
-[portal.infrastructure.security.hyokBanner]
-description = "З HYOK ключі шифрування ніколи не залишають ваш KMS. Stirling зберігає й обробляє лише шифротекст, який ви можете відкликати будь-коли."
-title = "Stirling не може розшифрувати ваші документи"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Діапазони IP не налаштовано — дозволено всі IP."
-heading = "Список дозволених IP"
-sub = "Доступ до API обмежено цими діапазонами CIDR."
-subLocked = "Обмежте доступ до API відомими діапазонами IP — доступно на платних планах."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Оновіться до Pro, щоб обмежити доступ до API конкретними мережами."
-title = "Списки дозволених IP — платна функція"
-
-[portal.infrastructure.security.ipColumns]
-added = "Додано"
-addedBy = "Додав"
-cidr = "CIDR"
-label = "Мітка"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Керування ключами шифрування"
-keyId = "Ідентифікатор ключа"
-lastRotated = "Остання ротація"
-rotateKey = "Ротувати ключ"
-rotationPolicy = "Політика ротації"
-subheading = "Зберігання ключів, що шифрують документи в стані спокою — хто може розшифровувати та як ключі ротуються."
-
-[portal.infrastructure.security.managedBanner]
-description = "Зберігання власних ключів BYOK і HYOK доступне на Enterprise. Оновіться, щоб надавати ключі з власного KMS."
-title = "На вашому плані ключами керує Stirling"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Азійсько-Тихоокеанський регіон"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · межа даних GDPR"
-label = "Європейський Союз"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Сполучені Штати"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Резидентність даних"
-subheading = "Де документи зберігаються та обробляються."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "{{value}} використано"
-
-[portal.infrastructure.storage.empty]
-description = "Підключене сховище та використання з’являться тут."
-title = "Сховище не налаштовано"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Активно"
-activeRange = "0–{{value}} дн."
-archived = "Архівовано"
-coldStorage = "холодне сховище"
-deleted = "Видалено"
-never = "ніколи"
-purged = "очищено"
-
-[portal.infrastructure.storage.providers]
-connect = "Підключити"
-connected = "Підключено"
-heading = "Підключені провайдери"
-subheading = "Куди записуються оброблені артефакти."
-
-[portal.infrastructure.storage.retention]
-heading = "Зберігання"
-subheading = "Як довго артефакти зберігаються перед видаленням за життєвим циклом."
-windowLabel = "Типове вікно зберігання"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} день"
-days_other = "{{count}} днів"
-never = "Ніколи не видаляти"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Загальне використання"
-progressLabel = "Використано сховища"
-subheading = "Сховище, використане всіма підключеними провайдерами."
-
 [portal.infrastructure.tabs]
 apiKeys = "Ключі API"
 audit = "Журнали аудиту"
@@ -7715,11 +7657,9 @@ security = "Безпека"
 storage = "Сховище"
 
 [portal.integrations]
-addAnother = "Додати ще одну"
 availableHeading = "Доступні"
 comingSoonHeading = "Незабаром"
 connect = "Підключити"
-connectedHeading = "Підключено"
 connectionCount_one = "{{count}} підключення"
 connectionCount_other = "{{count}} підключень"
 customApi = "Власний API"
@@ -7737,6 +7677,10 @@ security = "Безпека"
 signing = "Підписування"
 storage = "Сховище"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Підключено"
 
@@ -7767,7 +7711,6 @@ integrations = "Інтеграції"
 pipelines = "Конвеєри"
 policies = "Політики"
 procurement = "Закупівлі"
-settings = "Налаштування"
 sources = "Джерела"
 usage = "Використання та оплата"
 users = "Користувачі"
@@ -7784,7 +7727,7 @@ title = "Конвеєри"
 newPipeline = "Новий конвеєр"
 
 [portal.pipelines.builder]
-addStep = "Додати інструмент"
+activate = "Activate"
 back = "Назад до конвеєрів"
 cannotFollow = "Не можна прийняти {{produced}}"
 chooseAccount = "Виберіть обліковий запис"
@@ -7792,28 +7735,38 @@ chooseDestination = "Виберіть призначення"
 chooseOperation = "Виберіть, що робить цей крок"
 chooseSource = "Виберіть джерело"
 discard = "Відхилити зміни"
-enabled = "Увімкнено"
 inputs = "Вхідні дані"
 inputSource = "Вхідне джерело"
 inputTrigger = "Тригер"
 keepEditing = "Продовжити редагування"
+moreActions = "More actions"
 needsConfiguring = "Потрібне налаштування"
-needsUpload = "Потрібен завантажений файл"
-noSources = "Поки що немає підключених джерел. Створіть одне, щоб використовувати його як вхід."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Жоден інструмент не відповідає вашому пошуку."
-pipelineSettings = "Налаштування конвеєра"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Пошук інструментів"
-selectToolBody = "Додайте інструмент, щоб створити конвеєр."
-selectToolTitle = "Інструментів ще немає"
 sendToSystem = "Надіслати до іншої системи"
 stepsIncompatible = "Ці кроки не можуть працювати з тим, що створює попередній крок: {{tools}}."
 stepsNeedSetup = "Ці кроки все ще потрібно налаштувати перед збереженням: {{tools}}."
-toolSettings = "Налаштування інструмента"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Нерозпізнана операція, залишено як є."
 unsavedBody = "У вас є незбережені зміни. Зберегти їх перед виходом чи відхилити?"
 unsavedTitle = "Незбережені зміни"
-uploadUnsupported = "Завантажені файли поки не підтримуються в конвеєрах, тому ці кроки не можна зберегти: {{tools}}."
 usesDefaults = "Запускається з типовими налаштуваннями"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Об'єднує кожен файл із попереднього кроку"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Не вдається перевірити, що при
 
 [portal.pipelines.composer]
 addTool = "Додати інструмент"
-cancel = "Скасувати"
-chainEmpty = "Додайте інструмент, щоб почати створювати конвеєр."
 create = "Створити конвеєр"
+createPaused = "Create paused"
 editingUnsupported = "Відображення цих параметрів інструмента для редагування поки не підтримується."
-moveDown = "Перемістити вниз"
-moveUp = "Перемістити вгору"
+editSource = "Edit source"
 name = "Назва"
 namePlaceholder = "напр. Redaction sweep"
 noToolSettings = "Цей інструмент не має налаштовуваних параметрів."
-operations_one = "Операція ({{count}})"
-operations_other = "Операції ({{count}})"
 output = "Вивід"
-removeStep = "Вилучити операцію"
 save = "Зберегти зміни"
 scheduleEvery = "Запускати кожні"
-sources = "Джерела"
-sourcesLoading = "Завантаження джерел..."
 trigger = "Тригер"
 triggerManual = "Лише вручну"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "днів"
 hours = "годин"
 minutes = "хвилин"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Видалити \"{{name}}\"? Цю дію не можна скасувати."
 cancel = "Скасувати"
@@ -7867,6 +7825,37 @@ connectSource = "Підключити джерело"
 description = "Створіть свій перший конвеєр: виберіть джерела, для яких він запускається, з’єднайте операції та виберіть, куди надходитиме вивід."
 title = "Конвеєрів ще немає"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Активні"
 paused = "Призупинені"
@@ -7879,7 +7868,6 @@ completed_one = "Запуск завершено."
 completed_other = "Усі {{count}} запусків завершено."
 empty = "Немає чого запускати: джерела не мали документів для обробки."
 failed = "Запуск не вдався: {{error}}"
-historyCleared = "Історію очищено. Наступний запуск повторно обробить усе, що зараз є в джерелах."
 inFlight = "Немає нічого нового для запуску: документи все ще обробляються з попереднього запуску."
 parked_one = "Нічого запускати: {{count}} документ раніше не вдалося обробити, і його відкладено. Усуньте причину, а потім очистьте історію, щоб повторити спробу."
 parked_other = "Нічого запускати: {{count}} документів раніше не вдалося обробити, і їх відкладено. Усуньте причину, а потім очистьте історію, щоб повторити спробу."
@@ -7895,6 +7883,7 @@ name = "Конвеєр"
 sources = "Джерела"
 status = "Статус"
 steps = "Кроки"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Відстеження папки"
@@ -8209,6 +8198,24 @@ label = "Прикріпити до задачі Jira"
 description = "Надсилає оброблений документ як вкладення."
 label = "Надіслати документ email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Записує оброблений документ у папку."
 label = "Завантажити в Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Ліміт вичерпано"
 subtitle = "Ваш безкоштовний trial триває до {{date}}. Картка не потрібна."
 title = "Enterprise trial"
 
-[portal.search]
-ariaLabel = "Пошук"
-placeholder = "Пошук у Stirling — endpoints, конвеєри, документи…"
-
-[portal.search.empty]
-noActionsDescription = "Швидкі дії з’являться тут, коли стануть доступними."
-noActionsTitle = "Немає швидких дій"
-noMatches = "Немає збігів для «{{query}}»"
-noMatchesDescription = "Спробуйте інше ключове слово або перегляньте каталог."
-
 [portal.settings.groups]
 admin = "Адміністратор"
 
@@ -8743,10 +8740,6 @@ cancel = "Скасувати"
 confirm = "Видалити"
 title = "Видалити джерело?"
 
-[portal.sources.empty]
-description = "Підключіть папку (а незабаром — і cloud storage), щоб ваші політики мали звідки отримувати документи."
-title = "Джерела ще не підключено"
-
 [portal.sources.kpi]
 inUse = "Використовується"
 total = "Підключення"
@@ -8785,6 +8778,7 @@ unused = "Не використовується"
 documents = "Документи"
 source = "Джерело"
 status = "Статус"
+type = "Type"
 usedBy = "Політики"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Політики та конфіденційність"
 [settings.preferences]
 title = "Параметри"
 
-[settings.search]
-placeholder = "Пошук сторінок налаштувань..."
-
 [settings.security]
 description = "Оновіть свій пароль, щоб убезпечити обліковий запис."
 title = "Безпека"
@@ -10128,6 +10119,7 @@ last = "Остання сторінка"
 maintainRatio = "Переключити збереження пропорцій"
 next = "Наступна сторінка"
 noSavedSigs = "Збережені підписи не знайдено"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Особисті підписи"
 previous = "Попередня сторінка"
 redo = "Повторити"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Не вдалося прибрати фон"
 hint = "Завантажте зображення підпису у форматі PNG або JPG"
 label = "Завантажити зображення підпису"
 placeholder = "Виберіть файл зображення"
+previewAlt = "Current image signature"
 processing = "Обробка зображення..."
 removeBackground = "Прибрати білий фон (зробити прозорим)"
 
@@ -10179,6 +10172,17 @@ saved = "Виберіть збережений підпис вище, потім
 text = "Після введення імені вище клацніть будь-де по PDF, щоб розмістити підпис."
 title = "Як додати підпис"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Перемістити підпис"
 pause = "Призупинити розміщення"
@@ -10625,6 +10629,23 @@ title = "Завантажити на сервер"
 updateButton = "Оновити на сервері"
 uploadButton = "Завантажити на сервер"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Повернутися"
 pdfTools = "Інструменти PDF"
 placeholder = "Виберіть інструмент, щоб почати"
 premiumFeature = "Преміум-функція:"
-searchTools = "Пошук інструментів"
 toolsHeader = "Інструменти"
 viewAllTools = "Переглянути всі інструменти"
 
@@ -10822,6 +10842,9 @@ removal = "Видалення"
 signing = "Підписання"
 verification = "Перевірка"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Інструментів не знайдено"
 noTools = "Немає доступних інструментів"
@@ -10979,6 +11002,13 @@ approver = "Схвалює політику"
 editor = "Редактор"
 processor = "Обробник"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Скасувати запрошення для {{email}}? Вони не зможуть приєднатися за поточним посиланням."
 cancelInviteTitle = "Скасувати запрошення"
@@ -10998,10 +11028,8 @@ title = "Учасників ще немає"
 addToTeam = "Додати до команди"
 guestCount = "{{count}} гість"
 guests = "Гості"
-guestsDesc = "Зовнішні співробітники, обмежені тим, чим ви поділилися. Лише Редактор."
 ledBy = "під керівництвом {{owner}}"
 org = "Організація"
-orgDesc = "Власники з повноваженнями на рівні всієї організації та схваленням політик"
 owners = "{{count}} власник"
 team = "Команда {{name}}"
 teamMeta = "{{count}} людей"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Запросив(ла) {{who}}"
 cancel = "Скасувати"
-count = "{{count}} очікують"
-desc = "Запрошені люди, які ще не приєдналися. Вони займають місце, доки не приймуть запрошення."
 expiresInDays_one = "Закінчується через {{count}} день"
 expiresInDays_other = "Закінчується через {{count}} днів"
 expiresToday = "Закінчується сьогодні"
 title = "Запрошення, що очікують"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Сталася помилка під час звернення до бекенду, або у вас немає доступу. Спробуйте ще раз."
 title = "Не вдалося завантажити учасників"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Пошук вкладень"
 title = "Вкладення"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Назва закладки"
 bookmarkTitleRequired = "Потрібно вказати назву закладки"
 closeSidebar = "Закрити бічну панель закладок"
 collapseAll = "Згорнути всі закладки"
+empty = "No bookmarks in this document"
 expandAll = "Розгорнути всі закладки"
 searchPlaceholder = "Пошук закладок"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Додати коментар"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Знайти в документі"
 moreActions = "Додаткові дії"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Сторінка {{page}}"
 placingHint = "Клацніть сторінку, щоб розмістити… (скасувати)"
 removeCommentOnly = "Прибрати лише коментар"
 saveReply = "Зберегти відповідь"
+searchPlaceholder = "Search comments"
 title = "Коментарі"
 typeComment = "Коментар"
 typeInsertText = "Вставити текст"
@@ -11290,6 +11325,7 @@ unsavedDesc = "У вас є незбережені зміни"
 closeSidebar = "Закрити бічну панель шарів"
 hideAll = "Приховати всі шари"
 showAll = "Показати всі шари"
+title = "Layers"
 
 [viewer.link]
 delete = "Видалити посилання"
@@ -11646,6 +11682,7 @@ exitRedaction = "Вийти з режиму затемнення"
 exportAll = "Експортувати PDF"
 exportSelected = "Експортувати вибрані сторінки"
 formFill = "Заповнити форму"
+hideToolbar = "Hide toolbar"
 multiTool = "Мультиінструмент"
 panMode = "Режим переміщення"
 print = "Надрукувати PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Вибрати все"
 selectByNumber = "Вибрати за номерами сторінок"
 selectLanguage = "Вибрати мову"
 share = "Надати спільний доступ"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Перемкнути видимість анотацій"
 toggleAttachments = "Перемкнути вкладення"
 toggleBookmarks = "Перемкнути закладки"
diff --git a/frontend/editor/public/locales/vi-VN/translation.toml b/frontend/editor/public/locales/vi-VN/translation.toml
index ebdc5b3615..4ff67c254b 100644
--- a/frontend/editor/public/locales/vi-VN/translation.toml
+++ b/frontend/editor/public/locales/vi-VN/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "Bảng chữ cái"
 apply = "Áp dụng"
 applyAndContinue = "Lưu và rời đi"
-areYouSure = "Bạn có chắc muốn rời đi không?"
 back = "Quay lại"
 black = "Đen"
 blue = "Xanh dương"
@@ -106,6 +105,7 @@ undoSuccess = "Hoàn tác thành công"
 unknown = "Không xác định"
 unpin = "Bỏ ghim tệp (thay thế sau khi chạy công cụ)"
 unsavedChanges = "Bạn có thay đổi chưa lưu đối với PDF."
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "Thay đổi chưa lưu"
 unsupported = "Không được hỗ trợ"
 username = "Tên người dùng"
@@ -1879,6 +1879,9 @@ width = "Độ rộng"
 [app]
 description = "Giải pháp thay thế Adobe Acrobat miễn phí (10M+ lượt tải xuống)"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "Chuyển sang PDF/A-3b"
 convertToPdfA3bDescription = "Tạo PDF lưu trữ với tệp đính kèm được nhúng"
@@ -2933,12 +2936,16 @@ text = "Để các quyền này không bị thay đổi, hãy dùng công cụ T
 [chat.actions]
 copy = "Sao chép tin nhắn"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Tùy chọn tác nhân Stirling"
+assistant = "AI Assistant"
 clearChat = "Xóa trò chuyện"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "Thao tác này sẽ sử dụng tín dụng đám mây của bạn"
 tooltip = "Lấy màu từ màn hình"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "Chọn màu"
 
 [common]
+actions = "Actions"
 back = "Quay lại"
 cancel = "Hủy"
 close = "Đóng"
+codeSample = "Code sample"
 collapse = "Thu gọn"
 confirm = "Xác nhận"
 continue = "Tiếp tục"
 copied = "Đã sao chép!"
 copy = "Sao chép"
 done = "Xong"
+enterValue = "Enter value"
 error = "Lỗi"
 expand = "Mở rộng"
 loading = "Đang tải..."
 next = "Tiếp"
+open = "Open"
 preview = "Xem trước"
 previous = "Trước"
 refresh = "Làm mới"
 remaining = "Còn lại"
 retry = "Thử lại"
 save = "Lưu"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "Xóa lựa chọn"
@@ -3185,6 +3199,7 @@ title = "Phương pháp nén"
 [compress.settings]
 desiredSize = "Kích thước tệp mong muốn"
 desiredSizePlaceholder = "Nhập kích thước"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "Nén là cách đơn giản để giảm kích thước tệp. Chọn Kích thước tệp để nhập kích thước mục tiêu và chúng tôi sẽ điều chỉnh chất lượng cho bạn. Chọn Chất lượng để tự đặt mức nén thủ công."
@@ -3387,6 +3402,24 @@ pdfOptions = "Tùy chọn PDF"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "Chọn định dạng nguồn trước"
 settings = "Cài đặt"
 single = "Một tệp"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "Tìm kiếm..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "Sửa"
@@ -3824,11 +3861,13 @@ shareSelected = "Chia sẻ mục đã chọn"
 sharing = "Chia sẻ"
 showAll = "Hiện tất cả"
 showHistory = "Hiện lịch sử"
+sortBy = "Sort files"
 sortByDate = "Sắp xếp theo ngày"
 sortByName = "Sắp xếp theo tên"
 sortBySize = "Sắp xếp theo kích thước"
 storage = "Lưu trữ"
 storageState = "Lưu trữ"
+storageUsed = "Storage used"
 synced = "Đã đồng bộ"
 title = "Tải tệp PDF lên"
 toolChain = "Công cụ đã áp dụng"
@@ -3874,8 +3913,12 @@ addFiles = "Thêm tệp"
 addingFiles = "Đang thêm tệp…"
 collapse = "Thu gọn thanh bên"
 customizeGroups = "Tùy chỉnh nhóm"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "Mở tệp để bắt đầu"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "Mở rộng thanh bên"
 googleDrive = "Google Drive"
 googleDriveDisabled = "Google Drive chưa được cấu hình"
@@ -3888,15 +3931,17 @@ openFromComputer = "Mở từ máy tính"
 openSettings = "Mở cài đặt"
 other = "Khác"
 recent = "Gần đây"
-search = "Tìm kiếm"
-searchPlaceholder = "Tìm kiếm tệp..."
 viewAll = "Xem tất cả {{count}} tệp"
 
 [fileSidebar.fileItem]
 closeViewer = "Đóng trình xem"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "Mở trong trình xem"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "Đặt lại về mặc định"
 subtitle = "Nhóm các tệp của bạn vào danh mục cha. Thêm nhãn hiện có hoặc nhãn mới vào danh mục, đổi tên danh mục hoặc tự tạo danh mục riêng. Các tệp không thuộc danh mục nào của bạn sẽ xuất hiện trong “Khác”."
 title = "Danh mục thanh bên"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "Thêm vào không gian làm việc"
 addToWorkspaceCount = "Thêm {{count}} vào không gian làm việc"
@@ -3918,7 +3971,6 @@ backToMyFiles = "Quay lại Tệp của tôi"
 breadcrumbs = "Đường dẫn thư mục"
 cancel = "Hủy"
 classification = "Phân loại"
-clearSearch = "Xóa tìm kiếm"
 clearSelection = "Bỏ chọn"
 closeDetails = "Đóng chi tiết"
 create = "Tạo"
@@ -3950,6 +4002,7 @@ downloadAll = "Tải xuống tất cả"
 downloadVersion = "Tải xuống phiên bản này"
 dropOverlay = "Thả tệp để tải lên"
 dropOverlaySub = "Các tệp bắt đầu ở Cục bộ. Dùng 'Di chuyển đến' hoặc 'Lưu lên đám mây' để sắp xếp vào thư mục."
+duplicate = "Duplicate"
 file = "Tệp"
 fileInfo = "File info"
 fileMenu = "Hành động tệp"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "Thay đổi kích thước cây thư mục (phím mũi tên,
 save = "Lưu"
 saveToServer = "Lưu lên máy chủ"
 saveToServerDisabledHint = "Lưu lên máy chủ chưa được bật trên máy chủ này. Hãy yêu cầu quản trị viên bật nó."
-search = "Tìm kiếm"
-searchPlaceholder = "Tìm trong thư mục này và các thư mục con"
 selectAll = "Chọn tất cả"
 selectAllHint = "Nhấn để chọn tất cả. Mẹo: giữ Ctrl (hoặc Cmd) để thêm từng tệp, Shift để chọn một dải."
 selectedCount = "Đã chọn {{count}}"
@@ -4044,6 +4095,10 @@ title = "Chưa có tệp đám mây"
 hint = "Các tệp lưu mà không tải lên sẽ ở đây. Thả một tệp để thêm."
 title = "Không có tệp chỉ cục bộ"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "Các tệp bạn mở hoặc chỉnh sửa sẽ xuất hiện ở đây."
 title = "Chưa có gì được sửa đổi"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "Không thể xóa thư mục."
 deleteFolderFailedDetail = "Không thể xóa thư mục: {{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "Không thể cập nhật giao diện thư mục."
 folderAppearanceFailedDetail = "Không thể cập nhật giao diện thư mục: {{message}}"
 moveFilesFailed = "Không thể di chuyển tệp."
@@ -4113,6 +4170,11 @@ localHint = "Chỉ lưu trong trình duyệt này"
 shared = "Được chia sẻ"
 sharedHint = "Được chia sẻ với bạn qua liên kết"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "Cũ nhất trước"
 modifiedDesc = "Gần đây trước"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "Không có tệp trong bộ nhớ. Hãy mở một số
 open = "Mở"
 openFile = "Mở tệp"
 openFiles = "Mở nhiều tệp"
+selectFile = "Select {{name}}"
 selectFromStorage = "Chọn từ Lưu trữ"
 upload = "Tải lên"
 uploadFile = "Tải tệp lên"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "Đã lưu tất cả"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "Không thể trích xuất CSV"
 extractXlsxError = "Không thể trích xuất XLSX"
+filled = "filled"
 flattenAfterFilling = "Làm phẳng sau khi điền"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "bắt buộc"
 requiredFieldsError = "Vui lòng điền tất cả các trường bắt buộc"
 rescanFields = "Quét lại trường"
@@ -4795,9 +4863,6 @@ title = "Hình ảnh sang PDF"
 [imageToPdf]
 tags = "chuyển đổi,img,jpg,hình ảnh,ảnh"
 
-[infoBanner]
-dismiss = "Bỏ qua"
-
 [invite]
 acceptError = "Không thể tạo tài khoản"
 accountFor = "Đang tạo tài khoản cho"
@@ -4979,6 +5044,34 @@ uploadSuccess = "Tải lên thành công!"
 uploadSuccessMessage = "Hình ảnh của bạn đã được chuyển."
 validating = "Đang xác thực phiên..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "Quét để tải ảnh. Hình ảnh tự động chuyển sang PDF."
 descriptionNoConvert = "Quét để tải ảnh từ thiết bị di động của bạn."
@@ -4997,8 +5090,13 @@ title = "Tải lên từ Di động"
 tags = "Đa công cụ,Đa thao tác,Giao diện người dùng,nhấp kéo,phía trước,phía máy khách,tương tác,có thể tương tác,di chuyển"
 title = "Công cụ đa năng PDF"
 
-[navbar]
-search = "Tìm kiếm"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "Xác thực không thành công. Bạn có thể đóng cửa sổ này và thử lại."
@@ -5127,6 +5225,7 @@ activeFiles = "Chế độ xem <strong>Tệp đang hoạt động</strong> hiể
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "Đóng"
 cropSettings = "Bây giờ chúng ta đã chọn tệp muốn cắt, có thể cấu hình công cụ Cắt xén để chọn vùng cần cắt PDF."
+dialogLabel = "Onboarding"
 fileCheckbox = "Nhấp vào một tệp sẽ chọn nó để xử lý. Bạn có thể chọn nhiều tệp cho các thao tác hàng loạt."
 fileReplacement = "Tệp đã chỉnh sửa sẽ tự động thay thế tệp gốc trong Bàn làm việc, giúp bạn dễ dàng chạy thêm các công cụ khác."
 filesButton = "Nút <strong>Tệp</strong> trên thanh Truy cập nhanh cho phép bạn tải PDF lên để dùng các công cụ."
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF sang PDF/A"
 tags = "lưu trữ,dài hạn,tiêu chuẩn,chuyển đổi,lưu trữ,bảo quản"
 title = "PDF sang PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "in ấn,tiêu chuẩn,chuyển đổi,sản xuất,tiền in,lưu trữ"
 title = "PDF sang PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 Tín dụng"
 xsmall = "100 Tín dụng"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "Chọn gói phù hợp với nhu cầu của bạn"
 title = "Các gói khả dụng"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "Đã đạt giới hạn chi tiêu hàng tháng"
 title = "Không thể mở portal Stripe"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "trong {{allowance}} PDF miễn phí đã dùng"
 capSuffix_other = "trong {{allowance}} PDF miễn phí đã dùng"
 eyebrow = "Dùng thử Processor"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "Gửi email tài liệu hoặc thông báo khi một chính sách chạy."
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "Lưu tài liệu đã xử lý vào Nextcloud."
@@ -7077,11 +7211,6 @@ title = "SDK chính thức"
 beta = "Beta"
 deprecated = "Không còn dùng"
 
-[portal.docs.search]
-empty = "Không có tài liệu phù hợp"
-placeholder = "Tìm kiếm tài liệu"
-results = "{{count}} kết quả"
-
 [portal.docs.skills]
 eyebrow = "KỸ NĂNG"
 lead = "Các năng lực đi kèm, có tên, mà agent của bạn gọi như một công cụ duy nhất. Mỗi kỹ năng là một chuỗi thao tác xác định với đánh giá đính kèm."
@@ -7180,11 +7309,11 @@ editorAction = "Trình chỉnh sửa"
 empty = "Không có tài liệu nào khớp với bộ lọc này."
 rowActions = "Hành động hàng"
 sensitiveLabel = "Nhạy cảm"
-sensitiveTitle = "Nhạy cảm — yêu cầu quyền truy cập"
 
 [portal.documents.table.columns]
 action = "Pipeline / Hành động"
 document = "Tài liệu"
+labels = "Labels"
 product = "Sản phẩm"
 status = "Trạng thái"
 time = "Thời gian"
@@ -7200,6 +7329,7 @@ host = "Host"
 lastSeen = "Lần thấy gần nhất"
 region = "Khu vực"
 status = "Trạng thái"
+target = "Target"
 version = "Phiên bản"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "Chế độ xem này gặp lỗi không mong muốn. Hãy thử l
 retry = "Thử lại"
 title = "Đã xảy ra lỗi trên trang này"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "Quay lại"
 body = "Tải xuống ứng dụng desktop hoặc tự lưu trữ máy chủ."
@@ -7380,11 +7560,6 @@ cancel = "Hủy"
 confirm = "Thu hồi khóa"
 title = "Thu hồi API key"
 
-[portal.infrastructure.attestationLabel]
-attested = "Đã chứng thực"
-inScope = "Trong phạm vi"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "Lọc sự kiện kiểm tra theo danh mục"
 heading = "Nhật ký kiểm tra"
@@ -7456,11 +7631,6 @@ info = "Thông tin"
 success = "Thành công"
 warning = "Cảnh báo"
 
-[portal.infrastructure.certLabel]
-certified = "Đã chứng nhận"
-inProgress = "Đang tiến hành"
-notStarted = "Chưa bắt đầu"
-
 [portal.infrastructure.createKey]
 cancel = "Hủy"
 createKey = "Tạo khóa"
@@ -7474,238 +7644,10 @@ subtitleCreated = "Sao chép bí mật này ngay — nó sẽ không được hi
 title = "Tạo khóa API"
 titleCreated = "Đã tạo khóa"
 
-[portal.infrastructure.deployLabel]
-live = "Đang chạy"
-queued = "Đang xếp hàng"
-rolledBack = "Đã rollback"
-rolling = "Đang triển khai"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/phút"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "Được triển khai bởi"
-environment = "Môi trường"
-product = "Sản phẩm"
-status = "Trạng thái"
-version = "Phiên bản"
-when = "Thời điểm"
-
-[portal.infrastructure.deployments.recent]
-heading = "Triển khai gần đây"
-subheading = "Các đợt phát hành mới nhất trên các sản phẩm và môi trường."
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "Phiên bản"
-latency = "Độ trễ"
-load = "Tải"
-p99 = "P99"
-region = "Khu vực"
-status = "Trạng thái"
-throughput = "Thông lượng"
-uptime = "Thời gian hoạt động"
-version = "Phiên bản"
-
-[portal.infrastructure.deployments.regions]
-heading = "Khu vực"
-subheading = "Tình trạng trực tiếp cho từng khu vực Stirling đã triển khai — độ trễ, tải và phiên bản phát hành."
-
-[portal.infrastructure.deployments.regions.empty]
-description = "Các khu vực đã triển khai sẽ xuất hiện tại đây sau khi workspace của bạn được cấp phát."
-title = "Chưa triển khai khu vực nào"
-
 [portal.infrastructure.keyLabel]
 active = "Đang hoạt động"
 revoked = "Đã thu hồi"
 
-[portal.infrastructure.modelLabel]
-active = "Đang hoạt động"
-degraded = "Suy giảm"
-disabled = "Đã tắt"
-
-[portal.infrastructure.models]
-heading = "Mô hình"
-msValue = "{{value}} ms"
-subheading = "Danh mục mô hình và định tuyến hỗ trợ xử lý tài liệu trên toàn workspace của bạn."
-
-[portal.infrastructure.models.byom]
-description = "Đăng ký một mô hình on-prem hoặc self-hosted và ghim nó vào một khu vực để xử lý theo ràng buộc lưu trú dữ liệu."
-title = "Mang mô hình của riêng bạn"
-
-[portal.infrastructure.models.catalogue]
-heading = "Danh mục"
-sub = "Các mô hình được quản lý khả dụng cho workspace của bạn, với độ trễ và chi phí trực tiếp."
-subEnterprise = "Các mô hình được quản lý, mang theo của riêng bạn và on-prem — có thể ghim theo từng khu vực."
-
-[portal.infrastructure.models.catalogue.empty]
-description = "Các mô hình trong danh mục của workspace sẽ xuất hiện tại đây."
-title = "Không có mô hình khả dụng"
-
-[portal.infrastructure.models.columns]
-cost = "Chi phí"
-latency = "Độ trễ"
-load = "Tải"
-model = "Mô hình"
-status = "Trạng thái"
-type = "Loại"
-version = "Phiên bản"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/lần gọi"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "Mô hình đang hoạt động"
-avgLatency = "Độ trễ trung bình"
-included = "Đã bao gồm"
-monthlySpend = "Chi tiêu mô hình hàng tháng"
-
-[portal.infrastructure.models.routing]
-empty = "Chưa cấu hình quy tắc định tuyến nào."
-heading = "Quy tắc định tuyến"
-sub = "Mô hình nào xử lý từng thao tác. Mặc định áp dụng khi không có quy tắc hẹp hơn khớp."
-subLocked = "Định tuyến thao tác đến các mô hình cụ thể — khả dụng trên gói trả phí."
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "Nâng cấp lên Pro để kiểm soát mô hình nào xử lý từng thao tác và loại tài liệu."
-title = "Định tuyến mô hình là tính năng trả phí"
-
-[portal.infrastructure.models.routingColumns]
-default = "Mặc định"
-docType = "Loại tài liệu"
-modelForAria = "Mô hình cho {{operation}}"
-operation = "Thao tác"
-routedTo = "Định tuyến đến"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "Phân loại"
-extraction = "Trích xuất"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "Suy giảm"
-down = "Ngừng hoạt động"
-healthy = "Khỏe mạnh"
-
-[portal.infrastructure.security.access.byok]
-description = "Cung cấp khóa từ KMS của riêng bạn. Stirling mã hóa bằng khóa đó nhưng vẫn có thể đọc."
-label = "Mang khóa của riêng bạn (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "Khóa không bao giờ rời khỏi KMS của bạn. Stirling chỉ giữ ciphertext."
-label = "Giữ khóa của riêng bạn (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling quản lý khóa mã hóa. Đơn giản nhất — phía bạn không cần vận hành khóa."
-label = "Khóa do Stirling giữ"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "Chính sách truy cập tài liệu"
-subheading = "Kiểm soát ai có thể giải mã tài liệu đã xử lý khi lưu trữ."
-
-[portal.infrastructure.security.attestations]
-heading = "Chứng nhận tuân thủ"
-noReport = "Không có báo cáo"
-subheading = "Tư thế kiểm tra theo từng framework, với báo cáo khả dụng cho các kiểm soát đã được chứng nhận."
-viewReport = "Xem báo cáo →"
-
-[portal.infrastructure.security.compliance]
-heading = "Tuân thủ"
-subheading = "Chứng nhận và chứng chỉ bao phủ nền tảng Stirling."
-
-[portal.infrastructure.security.empty]
-description = "Cấu hình bảo mật của workspace sẽ xuất hiện tại đây."
-title = "Không có tư thế bảo mật"
-
-[portal.infrastructure.security.hyokBanner]
-description = "Với HYOK, khóa mã hóa không bao giờ rời khỏi KMS của bạn. Stirling chỉ lưu trữ và xử lý ciphertext mà bạn có thể thu hồi bất cứ lúc nào."
-title = "Stirling không thể giải mã tài liệu của bạn"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "Chưa cấu hình dải IP nào — tất cả IP đều được phép."
-heading = "Danh sách cho phép IP"
-sub = "Quyền truy cập API bị giới hạn trong các dải CIDR này."
-subLocked = "Giới hạn quyền truy cập API vào các dải IP đã biết — khả dụng trên gói trả phí."
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "Nâng cấp lên Pro để giới hạn quyền truy cập API vào các mạng cụ thể."
-title = "Danh sách cho phép IP là tính năng trả phí"
-
-[portal.infrastructure.security.ipColumns]
-added = "Đã thêm"
-addedBy = "Được thêm bởi"
-cidr = "CIDR"
-label = "Nhãn"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "Quản lý khóa mã hóa"
-keyId = "Mã định danh khóa"
-lastRotated = "Lần xoay vòng gần nhất"
-rotateKey = "Xoay vòng khóa"
-rotationPolicy = "Chính sách xoay vòng"
-subheading = "Quyền lưu giữ các khóa mã hóa tài liệu khi lưu trữ — ai có thể giải mã và cách khóa được xoay vòng."
-
-[portal.infrastructure.security.managedBanner]
-description = "Quyền lưu giữ bring-your-own-key (BYOK) và hold-your-own-key (HYOK) khả dụng trên Enterprise. Nâng cấp để cung cấp khóa từ KMS của riêng bạn."
-title = "Khóa được Stirling quản lý trên gói của bạn"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "Châu Á - Thái Bình Dương"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · ranh giới dữ liệu GDPR"
-label = "Liên minh Châu Âu"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "Hoa Kỳ"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "Lưu trú dữ liệu"
-subheading = "Nơi tài liệu được lưu trữ và xử lý."
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "Đã dùng {{value}}"
-
-[portal.infrastructure.storage.empty]
-description = "Lưu trữ đã kết nối và mức sử dụng sẽ xuất hiện tại đây."
-title = "Chưa cấu hình lưu trữ"
-
-[portal.infrastructure.storage.lifecycle]
-active = "Đang hoạt động"
-activeRange = "0–{{value}} ngày"
-archived = "Đã lưu trữ"
-coldStorage = "lưu trữ lạnh"
-deleted = "Đã xóa"
-never = "không bao giờ"
-purged = "đã xóa vĩnh viễn"
-
-[portal.infrastructure.storage.providers]
-connect = "Kết nối"
-connected = "Đã kết nối"
-heading = "Nhà cung cấp đã kết nối"
-subheading = "Nơi các artifact đã xử lý được ghi."
-
-[portal.infrastructure.storage.retention]
-heading = "Lưu giữ"
-subheading = "Thời gian giữ artifact trước khi xóa theo vòng đời."
-windowLabel = "Khoảng thời gian lưu giữ mặc định"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} ngày"
-days_other = "{{count}} ngày"
-never = "Không bao giờ xóa"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "Tổng mức sử dụng"
-progressLabel = "Dung lượng đã dùng"
-subheading = "Dung lượng đã tiêu thụ trên tất cả nhà cung cấp đã kết nối."
-
 [portal.infrastructure.tabs]
 apiKeys = "Khóa API"
 audit = "Nhật ký kiểm tra"
@@ -7715,11 +7657,9 @@ security = "Bảo mật"
 storage = "Lưu trữ"
 
 [portal.integrations]
-addAnother = "Thêm mục khác"
 availableHeading = "Có sẵn"
 comingSoonHeading = "Sắp ra mắt"
 connect = "Kết nối"
-connectedHeading = "Đã kết nối"
 connectionCount_one = "{{count}} kết nối"
 connectionCount_other = "{{count}} kết nối"
 customApi = "API tùy chỉnh"
@@ -7737,6 +7677,10 @@ security = "Bảo mật"
 signing = "Ký"
 storage = "Lưu trữ"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "Đã kết nối"
 
@@ -7767,7 +7711,6 @@ integrations = "Tích hợp"
 pipelines = "Pipeline"
 policies = "Chính sách"
 procurement = "Mua sắm"
-settings = "Cài đặt"
 sources = "Nguồn"
 usage = "Sử dụng & Thanh toán"
 users = "Người dùng"
@@ -7784,7 +7727,7 @@ title = "Pipeline"
 newPipeline = "Pipeline mới"
 
 [portal.pipelines.builder]
-addStep = "Thêm công cụ"
+activate = "Activate"
 back = "Quay lại pipeline"
 cannotFollow = "Không thể nhận {{produced}}"
 chooseAccount = "Chọn tài khoản"
@@ -7792,28 +7735,38 @@ chooseDestination = "Chọn đích đến"
 chooseOperation = "Chọn việc bước này thực hiện"
 chooseSource = "Chọn nguồn"
 discard = "Hủy thay đổi"
-enabled = "Đã bật"
 inputs = "Đầu vào"
 inputSource = "Nguồn đầu vào"
 inputTrigger = "Kích hoạt"
 keepEditing = "Tiếp tục chỉnh sửa"
+moreActions = "More actions"
 needsConfiguring = "Cần thiết lập"
-needsUpload = "Cần một file đã upload"
-noSources = "Chưa có nguồn nào được kết nối. Tạo một nguồn để dùng làm đầu vào."
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "Không có công cụ nào khớp với tìm kiếm của bạn."
-pipelineSettings = "Cài đặt pipeline"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "Tìm kiếm công cụ"
-selectToolBody = "Thêm công cụ để xây dựng pipeline của bạn."
-selectToolTitle = "Chưa có công cụ"
 sendToSystem = "Gửi đến hệ thống khác"
 stepsIncompatible = "Các bước này không thể chạy trên kết quả mà bước trước tạo ra: {{tools}}."
 stepsNeedSetup = "Các bước này vẫn cần thiết lập trước khi lưu: {{tools}}."
-toolSettings = "Cài đặt công cụ"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "Thao tác không được nhận dạng, giữ nguyên."
 unsavedBody = "Bạn có thay đổi chưa lưu. Lưu trước khi rời đi hay hủy chúng?"
 unsavedTitle = "Thay đổi chưa lưu"
-uploadUnsupported = "File đã upload chưa được hỗ trợ trong pipeline, vì vậy không thể lưu các bước này: {{tools}}."
 usesDefaults = "Chạy với cài đặt mặc định"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "Kết hợp mọi file từ bước trước"
@@ -7825,31 +7778,36 @@ undeclared-operation = "Không thể kiểm tra bước này chấp nhận gì"
 
 [portal.pipelines.composer]
 addTool = "Thêm công cụ"
-cancel = "Hủy"
-chainEmpty = "Thêm công cụ để bắt đầu xây dựng pipeline của bạn."
 create = "Tạo pipeline"
+createPaused = "Create paused"
 editingUnsupported = "Chưa hỗ trợ hiển thị các tham số công cụ này để chỉnh sửa."
-moveDown = "Di chuyển xuống"
-moveUp = "Di chuyển lên"
+editSource = "Edit source"
 name = "Tên"
 namePlaceholder = "ví dụ: Quét che giấu"
 noToolSettings = "Công cụ này không có cài đặt có thể cấu hình."
-operations_one = "Thao tác ({{count}})"
-operations_other = "Thao tác ({{count}})"
 output = "Đầu ra"
-removeStep = "Xóa thao tác"
 save = "Lưu thay đổi"
 scheduleEvery = "Chạy mỗi"
-sources = "Nguồn"
-sourcesLoading = "Đang tải nguồn..."
 trigger = "Trigger"
 triggerManual = "Chỉ thủ công"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "ngày"
 hours = "giờ"
 minutes = "phút"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "Xóa \"{{name}}\"? Không thể hoàn tác thao tác này."
 cancel = "Hủy"
@@ -7867,6 +7825,37 @@ connectSource = "Kết nối một nguồn"
 description = "Tạo pipeline đầu tiên của bạn: chọn các nguồn mà nó chạy, nối chuỗi các thao tác và chọn nơi đầu ra sẽ đến."
 title = "Chưa có pipeline"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "Đang hoạt động"
 paused = "Đã tạm dừng"
@@ -7879,7 +7868,6 @@ completed_one = "Lượt chạy đã hoàn tất."
 completed_other = "Tất cả {{count}} lượt chạy đã hoàn tất."
 empty = "Không có gì để chạy: các nguồn không có tài liệu để xử lý."
 failed = "Lượt chạy thất bại: {{error}}"
-historyCleared = "Đã xóa lịch sử. Lần chạy tiếp theo sẽ xử lý lại mọi thứ hiện có trong các nguồn."
 inFlight = "Không có gì mới để chạy: tài liệu vẫn đang được xử lý từ một lần chạy trước đó."
 parked_one = "Không có gì để chạy: {{count}} tài liệu đã thất bại trước đó và đang được tạm dừng. Khắc phục nguyên nhân, rồi xóa lịch sử để thử lại."
 parked_other = "Không có gì để chạy: {{count}} tài liệu đã thất bại trước đó và đang được tạm dừng. Khắc phục nguyên nhân, rồi xóa lịch sử để thử lại."
@@ -7895,6 +7883,7 @@ name = "Pipeline"
 sources = "Nguồn"
 status = "Trạng thái"
 steps = "Bước"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "Theo dõi thư mục"
@@ -8209,6 +8198,24 @@ label = "Đính kèm vào Jira issue"
 description = "Gửi tài liệu đã xử lý dưới dạng tệp đính kèm."
 label = "Gửi tài liệu qua email (Mailgun)"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "Ghi tài liệu đã xử lý vào một thư mục."
 label = "Tải lên Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "Đã đạt giới hạn"
 subtitle = "Bản dùng thử miễn phí của bạn kéo dài đến {{date}}. Không cần thẻ."
 title = "Dùng thử Enterprise"
 
-[portal.search]
-ariaLabel = "Tìm kiếm"
-placeholder = "Tìm kiếm Stirling — endpoint, pipeline, tài liệu…"
-
-[portal.search.empty]
-noActionsDescription = "Hành động nhanh sẽ xuất hiện ở đây khi có sẵn."
-noActionsTitle = "Không có hành động nhanh"
-noMatches = "Không có kết quả cho \"{{query}}\""
-noMatchesDescription = "Thử từ khóa khác hoặc duyệt catalogue."
-
 [portal.settings.groups]
 admin = "Quản trị"
 
@@ -8743,10 +8740,6 @@ cancel = "Hủy"
 confirm = "Xóa"
 title = "Xóa nguồn?"
 
-[portal.sources.empty]
-description = "Kết nối một thư mục (và sắp tới là cloud storage) để chính sách của bạn có nơi lấy tài liệu."
-title = "Chưa kết nối nguồn nào"
-
 [portal.sources.kpi]
 inUse = "Đang sử dụng"
 total = "Kết nối"
@@ -8785,6 +8778,7 @@ unused = "Chưa dùng"
 documents = "Tài liệu"
 source = "Nguồn"
 status = "Trạng thái"
+type = "Type"
 usedBy = "Chính sách"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "Chính sách & Quyền riêng tư"
 [settings.preferences]
 title = "Tùy chọn"
 
-[settings.search]
-placeholder = "Tìm kiếm trang cài đặt..."
-
 [settings.security]
 description = "Cập nhật mật khẩu để giữ an toàn cho tài khoản của bạn."
 title = "Bảo mật"
@@ -10128,6 +10119,7 @@ last = "Trang cuối"
 maintainRatio = "Bật/tắt giữ tỉ lệ khung hình"
 next = "Trang tiếp"
 noSavedSigs = "Không tìm thấy chữ ký đã lưu"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "Chữ ký cá nhân"
 previous = "Trang trước"
 redo = "Làm lại"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "Xóa nền thất bại"
 hint = "Tải lên ảnh chữ ký định dạng PNG hoặc JPG"
 label = "Tải lên ảnh chữ ký"
 placeholder = "Chọn tệp hình ảnh"
+previewAlt = "Current image signature"
 processing = "Đang xử lý hình ảnh..."
 removeBackground = "Xóa nền trắng (tạo trong suốt)"
 
@@ -10179,6 +10172,17 @@ saved = "Chọn một chữ ký đã lưu ở trên, rồi nhấp vào bất k
 text = "Sau khi nhập tên ở trên, bấm vào bất kỳ đâu trên PDF để đặt chữ ký của bạn."
 title = "Cách thêm chữ ký"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "Di chuyển chữ ký"
 pause = "Tạm dừng đặt"
@@ -10625,6 +10629,23 @@ title = "Tải lên máy chủ"
 updateButton = "Cập nhật trên máy chủ"
 uploadButton = "Tải lên máy chủ"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "Quay lại"
 pdfTools = "Công cụ PDF"
 placeholder = "Chọn một công cụ để bắt đầu"
 premiumFeature = "Tính năng Premium:"
-searchTools = "Tìm kiếm công cụ"
 toolsHeader = "Công cụ"
 viewAllTools = "Xem tất cả công cụ"
 
@@ -10822,6 +10842,9 @@ removal = "Loại bỏ"
 signing = "Ký"
 verification = "Xác minh"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "Không tìm thấy công cụ nào"
 noTools = "Không có công cụ nào"
@@ -10979,6 +11002,13 @@ approver = "Phê duyệt chính sách"
 editor = "Editor"
 processor = "Processor"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "Hủy lời mời đến {{email}}? Họ sẽ không thể tham gia bằng liên kết hiện tại."
 cancelInviteTitle = "Hủy lời mời"
@@ -10998,10 +11028,8 @@ title = "Chưa có thành viên"
 addToTeam = "Thêm vào đội"
 guestCount = "{{count}} khách"
 guests = "Khách"
-guestsDesc = "Cộng tác viên bên ngoài, giới hạn trong những gì bạn chia sẻ. Chỉ Editor."
 ledBy = "do {{owner}} dẫn dắt"
 org = "Tổ chức"
-orgDesc = "Chủ sở hữu có quyền hạn toàn tổ chức và phê duyệt chính sách"
 owners = "{{count}} chủ sở hữu"
 team = "Đội {{name}}"
 teamMeta = "{{count}} người"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "Được mời bởi {{who}}"
 cancel = "Hủy"
-count = "{{count}} đang chờ"
-desc = "Những người đã được mời nhưng chưa tham gia. Họ giữ một chỗ cho đến khi chấp nhận."
 expiresInDays_one = "Hết hạn sau {{count}} ngày"
 expiresInDays_other = "Hết hạn sau {{count}} ngày"
 expiresToday = "Hết hạn hôm nay"
 title = "Lời mời đang chờ"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "Đã xảy ra lỗi khi kết nối tới backend, hoặc bạn không có quyền truy cập. Hãy thử lại."
 title = "Không thể tải thành viên"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "Tìm kiếm tệp đính kèm"
 title = "Tệp đính kèm"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "Tiêu đề dấu trang"
 bookmarkTitleRequired = "Bắt buộc nhập tiêu đề dấu trang"
 closeSidebar = "Đóng thanh bên dấu trang"
 collapseAll = "Thu gọn tất cả dấu trang"
+empty = "No bookmarks in this document"
 expandAll = "Mở rộng tất cả dấu trang"
 searchPlaceholder = "Tìm kiếm dấu trang"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "Thêm bình luận"
@@ -11264,10 +11297,12 @@ locateAnnotation = "Định vị trong tài liệu"
 moreActions = "Thao tác khác"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "Trang {{page}}"
 placingHint = "Nhấp vào một trang để đặt… (hủy)"
 removeCommentOnly = "Chỉ gỡ bình luận"
 saveReply = "Lưu trả lời"
+searchPlaceholder = "Search comments"
 title = "Bình luận"
 typeComment = "Bình luận"
 typeInsertText = "Chèn văn bản"
@@ -11290,6 +11325,7 @@ unsavedDesc = "Bạn có các thay đổi chưa được lưu"
 closeSidebar = "Đóng thanh bên lớp"
 hideAll = "Ẩn tất cả lớp"
 showAll = "Hiển thị tất cả lớp"
+title = "Layers"
 
 [viewer.link]
 delete = "Xóa liên kết"
@@ -11646,6 +11682,7 @@ exitRedaction = "Thoát chế độ bôi đen"
 exportAll = "Xuất PDF"
 exportSelected = "Xuất các trang đã chọn"
 formFill = "Điền biểu mẫu"
+hideToolbar = "Hide toolbar"
 multiTool = "Công cụ đa năng"
 panMode = "Chế độ di chuyển"
 print = "In PDF"
@@ -11666,6 +11703,7 @@ selectAll = "Chọn tất cả"
 selectByNumber = "Chọn theo số trang"
 selectLanguage = "Chọn ngôn ngữ"
 share = "Chia sẻ"
+showToolbar = "Show toolbar"
 toggleAnnotations = "Bật/Tắt hiển thị chú thích"
 toggleAttachments = "Bật/Tắt tệp đính kèm"
 toggleBookmarks = "Bật/Tắt dấu trang"
diff --git a/frontend/editor/public/locales/zh-BO/translation.toml b/frontend/editor/public/locales/zh-BO/translation.toml
index 97a01be70d..e16a524f88 100644
--- a/frontend/editor/public/locales/zh-BO/translation.toml
+++ b/frontend/editor/public/locales/zh-BO/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "གསལ་བྱེད།"
 apply = "ཉེར་སྤྱོད།"
 applyAndContinue = "保存并离开"
-areYouSure = "确定要离开吗？"
 back = "返回"
 black = "ནག་པོ"
 blue = "སྔོན་པོ"
@@ -106,6 +105,7 @@ undoSuccess = "已成功撤销操作"
 unknown = "མི་ཤེས་པ།"
 unpin = "取消固定文件（工具运行后替换）"
 unsavedChanges = "您的 PDF 有未保存的更改。"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "未保存的更改"
 unsupported = "不支持"
 username = "སྤྱོད་མཁན་མིང་།"
@@ -1879,6 +1879,9 @@ width = "宽度"
 [app]
 description = "免费的 Adobe Acrobat 替代方案（下载量 1000 万+）"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "转换为 PDF/A-3b"
 convertToPdfA3bDescription = "创建带嵌入附件的归档 PDF"
@@ -2933,12 +2936,16 @@ text = "要使这些权限不可更改，请使用添加密码工具设置所有
 [chat.actions]
 copy = "复制消息"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling 代理选项"
+assistant = "AI Assistant"
 clearChat = "清空聊天"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "此操作将使用您的云额度"
 tooltip = "从屏幕取色"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "选择颜色"
 
 [common]
+actions = "Actions"
 back = "返回"
 cancel = "取消"
 close = "关闭"
+codeSample = "Code sample"
 collapse = "折叠"
 confirm = "确认"
 continue = "继续"
 copied = "已复制！"
 copy = "复制"
 done = "完成"
+enterValue = "Enter value"
 error = "错误"
 expand = "展开"
 loading = "正在加载..."
 next = "下一步"
+open = "Open"
 preview = "预览"
 previous = "上一步"
 refresh = "刷新"
 remaining = "剩余"
 retry = "重试"
 save = "保存"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "清除所选"
@@ -3185,6 +3199,7 @@ title = "压缩方式"
 [compress.settings]
 desiredSize = "期望的文件大小"
 desiredSizePlaceholder = "输入大小"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "压缩是减少文件大小的简便方法。选择“文件大小”可输入目标大小，我们将为您调整质量；选择“质量”可手动设置压缩强度。"
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF 选项"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "请先选择源格式"
 settings = "设置"
 single = "单个"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "搜索..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "编辑"
@@ -3824,11 +3861,13 @@ shareSelected = "共享所选"
 sharing = "共享"
 showAll = "显示全部"
 showHistory = "显示历史"
+sortBy = "Sort files"
 sortByDate = "按日期排序"
 sortByName = "按名称排序"
 sortBySize = "按大小排序"
 storage = "存储"
 storageState = "存储"
+storageUsed = "Storage used"
 synced = "已同步"
 title = "上传 PDF 文件"
 toolChain = "已应用的工具"
@@ -3874,8 +3913,12 @@ addFiles = "添加文件"
 addingFiles = "正在添加文件…"
 collapse = "折叠侧边栏"
 customizeGroups = "自定义分组"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "打开文件以开始"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "展开侧边栏"
 googleDrive = "Google Drive"
 googleDriveDisabled = "未配置 Google Drive"
@@ -3888,15 +3931,17 @@ openFromComputer = "从电脑打开"
 openSettings = "打开设置"
 other = "其他"
 recent = "最近"
-search = "搜索"
-searchPlaceholder = "搜索文件..."
 viewAll = "查看全部 {{count}} 个文件"
 
 [fileSidebar.fileItem]
 closeViewer = "关闭查看器"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "在查看器中打开"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "重置为默认值"
 subtitle = "将文件归入父类别。向类别添加现有或新标签、重命名类别，或创建自己的类别。不属于任何类别的文件会显示在“其他”下。"
 title = "侧边栏类别"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "添加到工作区"
 addToWorkspaceCount = "添加 {{count}} 个到工作区"
@@ -3918,7 +3971,6 @@ backToMyFiles = "返回到我的文件"
 breadcrumbs = "文件夹路径"
 cancel = "取消"
 classification = "分类"
-clearSearch = "清除搜索"
 clearSelection = "清除选择"
 closeDetails = "关闭详情"
 create = "创建"
@@ -3950,6 +4002,7 @@ downloadAll = "全部下载"
 downloadVersion = "下载此版本"
 dropOverlay = "拖放文件以上传"
 dropOverlaySub = "文件会先位于“本地”。使用“移动到”或“保存到云端”将它们整理到文件夹中。"
+duplicate = "Duplicate"
 file = "文件"
 fileInfo = "File info"
 fileMenu = "文件操作"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "调整文件夹树大小（方向键，按住 Shift 为更
 save = "保存"
 saveToServer = "保存到服务器"
 saveToServerDisabledHint = "此服务器未启用保存到服务器。请联系管理员启用。"
-search = "搜索"
-searchPlaceholder = "搜索此文件夹及其子文件夹"
 selectAll = "全选"
 selectAllHint = "点击全选。提示：按住 Ctrl（或 Cmd）可逐个添加文件，按住 Shift 可选择一个范围。"
 selectedCount = "已选 {{count}} 个"
@@ -4044,6 +4095,10 @@ title = "还没有云端文件"
 hint = "未上传而保存的文件会留在这里。拖放文件以添加。"
 title = "没有仅本地文件"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "你打开或编辑过的文件会显示在这里。"
 title = "尚无修改"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "无法删除文件夹。"
 deleteFolderFailedDetail = "无法删除文件夹：{{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "无法更新文件夹外观。"
 folderAppearanceFailedDetail = "无法更新文件夹外观：{{message}}"
 moveFilesFailed = "无法移动文件。"
@@ -4113,6 +4170,11 @@ localHint = "仅存储在此浏览器中"
 shared = "已共享"
 sharedHint = "通过链接与你共享"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "最早在前"
 modifiedDesc = "最新在前"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "存储中暂无可用文件。请先打开一些文件
 open = "打开"
 openFile = "打开文件"
 openFiles = "打开多个文件"
+selectFile = "Select {{name}}"
 selectFromStorage = "从存储中选择"
 upload = "上传"
 uploadFile = "上传文件"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "全部已保存"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "提取 CSV 失败"
 extractXlsxError = "提取 XLSX 失败"
+filled = "filled"
 flattenAfterFilling = "填写后扁平化"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "必填"
 requiredFieldsError = "请填写所有必填字段"
 rescanFields = "重新扫描字段"
@@ -4795,9 +4863,6 @@ title = "པར་རིས་ནས་ PDF ལ།"
 [imageToPdf]
 tags = "བསྒྱུར་བ།,པར་རིས།,jpg,པར།,འདྲ་པར།"
 
-[infoBanner]
-dismiss = "关闭"
-
 [invite]
 acceptError = "创建账户失败"
 accountFor = "正在为其创建账户"
@@ -4979,6 +5044,34 @@ uploadSuccess = "上传成功！"
 uploadSuccessMessage = "您的图像已传输。"
 validating = "正在验证会话..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "扫码上传照片。图像将自动转换为 PDF。"
 descriptionNoConvert = "从移动设备扫码上传照片。"
@@ -4997,8 +5090,13 @@ title = "从手机上传"
 tags = "ལག་ཆ་མང་པོ།,བཀོལ་སྤྱོད་མང་པོ།,UI,མཐེབ་གནོན་འཐེན་པ།,མདུན་ངོས།,མཁོ་མཁན་ཕྱོགས།,སྤྱོད་སྒོ།,འགུལ་སྐྱོད།,སུབ་པ།,གནས་སྤོ།,བགོ་བ།"
 title = "PDF ལག་ཆ་མང་པོ།"
 
-[navbar]
-search = "འཚོལ་བཤེར།"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "认证未成功。您可以关闭此窗口并重试。"
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>活动文件</strong> 视图显示您加载到工具中
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "关闭"
 cropSettings = "现在我们已选择要裁剪的文件，可以配置裁剪工具以选择我们希望裁剪到的区域。"
+dialogLabel = "Onboarding"
 fileCheckbox = "点击其中一个文件即可将其选中进行处理。您可以选择多个文件执行批量操作。"
 fileReplacement = "修改后的文件会自动替换工作台中的原文件，方便您继续通过更多工具处理。"
 filesButton = "<strong>文件</strong> 按钮位于快速访问栏，可用于上传需要使用工具处理的 PDF。"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF ནས་ PDF/A ལ།"
 tags = "ཡིག་མཛོད།,དུས་ཡུན་རིང་པོ།,ཚད་ལྡན།,བསྒྱུར་བ།,ཉར་ཚགས།,སྲུང་སྐྱོབ།"
 title = "PDF ནས་ PDF/A ལ།"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "打印,标准,转换,生产,印前,归档"
 title = "PDF 转 PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 点"
 xsmall = "100 点"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "选择最符合您需求的套餐"
 title = "可用套餐"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "已达到月度支出限额"
 title = "无法打开 Stripe 门户"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "已使用 {{allowance}} 个免费 PDFs 中的额度"
 capSuffix_other = "已使用 {{allowance}} 个免费 PDFs 中的额度"
 eyebrow = "Processor 试用"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "当策略运行时发送文档或通知电子邮件。"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "将处理后的文档归档到 Nextcloud。"
@@ -7077,11 +7211,6 @@ title = "官方 SDKs"
 beta = "Beta"
 deprecated = "已弃用"
 
-[portal.docs.search]
-empty = "没有匹配的文档"
-placeholder = "搜索文档"
-results = "{{count}} 个结果"
-
 [portal.docs.skills]
 eyebrow = "技能"
 lead = "捆绑的命名能力，您的智能体可将其作为单个工具调用。每项技能都是附带评估的确定性操作链。"
@@ -7180,11 +7309,11 @@ editorAction = "编辑器"
 empty = "没有符合此筛选条件的文档。"
 rowActions = "行操作"
 sensitiveLabel = "敏感"
-sensitiveTitle = "敏感 — 需要访问权限"
 
 [portal.documents.table.columns]
 action = "管道 / 操作"
 document = "文档"
+labels = "Labels"
 product = "产品"
 status = "状态"
 time = "时间"
@@ -7200,6 +7329,7 @@ host = "主机"
 lastSeen = "上次在线"
 region = "区域"
 status = "状态"
+target = "Target"
 version = "版本"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "此视图遇到意外错误。请重试，或从侧边栏选择
 retry = "重试"
 title = "此页面出现问题"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "返回"
 body = "下载桌面应用或自托管服务器。"
@@ -7380,11 +7560,6 @@ cancel = "取消"
 confirm = "撤销密钥"
 title = "撤销 API 密钥"
 
-[portal.infrastructure.attestationLabel]
-attested = "已认证"
-inScope = "在范围内"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "按类别筛选审计事件"
 heading = "审计日志"
@@ -7456,11 +7631,6 @@ info = "信息"
 success = "成功"
 warning = "警告"
 
-[portal.infrastructure.certLabel]
-certified = "已认证"
-inProgress = "进行中"
-notStarted = "未开始"
-
 [portal.infrastructure.createKey]
 cancel = "取消"
 createKey = "创建密钥"
@@ -7474,238 +7644,10 @@ subtitleCreated = "立即复制此密钥 — 它不会再次显示。"
 title = "创建 API 密钥"
 titleCreated = "密钥已创建"
 
-[portal.infrastructure.deployLabel]
-live = "在线"
-queued = "已排队"
-rolledBack = "已回滚"
-rolling = "正在发布"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/分钟"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "部署者"
-environment = "环境"
-product = "产品"
-status = "状态"
-version = "版本"
-when = "时间"
-
-[portal.infrastructure.deployments.recent]
-heading = "最近部署"
-subheading = "跨产品和环境的最新发布。"
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "实例"
-latency = "延迟"
-load = "负载"
-p99 = "P99"
-region = "区域"
-status = "状态"
-throughput = "吞吐量"
-uptime = "正常运行时间"
-version = "版本"
-
-[portal.infrastructure.deployments.regions]
-heading = "区域"
-subheading = "每个已部署 Stirling 区域的实时健康状况 — 延迟、负载和发布版本。"
-
-[portal.infrastructure.deployments.regions.empty]
-description = "工作区完成配置后，已部署区域会显示在这里。"
-title = "没有已部署区域"
-
 [portal.infrastructure.keyLabel]
 active = "活跃"
 revoked = "已撤销"
 
-[portal.infrastructure.modelLabel]
-active = "活跃"
-degraded = "性能下降"
-disabled = "已禁用"
-
-[portal.infrastructure.models]
-heading = "模型"
-msValue = "{{value}} ms"
-subheading = "为您工作区中的文档处理提供支持的模型目录和路由。"
-
-[portal.infrastructure.models.byom]
-description = "注册本地或自托管模型，并将其固定到某个区域以进行受数据驻留约束的处理。"
-title = "自带模型"
-
-[portal.infrastructure.models.catalogue]
-heading = "目录"
-sub = "您的工作区可用的托管模型，包含实时延迟和成本。"
-subEnterprise = "托管、自带和本地模型 — 支持按区域固定。"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "您工作区目录中的模型会显示在这里。"
-title = "没有可用模型"
-
-[portal.infrastructure.models.columns]
-cost = "成本"
-latency = "延迟"
-load = "负载"
-model = "模型"
-status = "状态"
-type = "类型"
-version = "版本"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/次调用"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "活跃模型"
-avgLatency = "平均延迟"
-included = "已包含"
-monthlySpend = "每月模型支出"
-
-[portal.infrastructure.models.routing]
-empty = "未配置路由规则。"
-heading = "路由规则"
-sub = "由哪个模型处理每个操作。没有匹配到更具体规则时，将应用默认规则。"
-subLocked = "将操作路由到特定模型 — 付费计划可用。"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "升级到 Pro 以控制哪个模型处理每个操作和文档类型。"
-title = "模型路由是付费功能"
-
-[portal.infrastructure.models.routingColumns]
-default = "默认"
-docType = "文档类型"
-modelForAria = "{{operation}} 的模型"
-operation = "操作"
-routedTo = "路由至"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "分类"
-extraction = "提取"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "性能下降"
-down = "宕机"
-healthy = "健康"
-
-[portal.infrastructure.security.access.byok]
-description = "从您自己的 KMS 提供密钥。Stirling 使用它加密，但仍可读取。"
-label = "自带密钥 (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "密钥永不离开您的 KMS。Stirling 仅持有密文。"
-label = "自持密钥 (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling 管理加密密钥。最简单 — 您无需进行密钥运维。"
-label = "Stirling 持有的密钥"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "文档访问策略"
-subheading = "控制谁可以解密静态存储的已处理文档。"
-
-[portal.infrastructure.security.attestations]
-heading = "合规证明"
-noReport = "无可用报告"
-subheading = "按框架展示的审计态势，并可查看已证明控制项的报告。"
-viewReport = "查看报告 →"
-
-[portal.infrastructure.security.compliance]
-heading = "合规"
-subheading = "覆盖 Stirling 平台的证明和认证。"
-
-[portal.infrastructure.security.empty]
-description = "您工作区的安全配置会显示在这里。"
-title = "安全态势不可用"
-
-[portal.infrastructure.security.hyokBanner]
-description = "使用 HYOK 时，加密密钥永不离开您的 KMS。Stirling 仅存储和处理密文，您可随时吊销。"
-title = "Stirling 无法解密您的文档"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "未配置 IP 范围 — 允许所有 IP。"
-heading = "IP 允许列表"
-sub = "API 访问限制为这些 CIDR 范围。"
-subLocked = "将 API 访问限制为已知 IP 范围 — 付费计划可用。"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "升级到 Pro 以将 API 访问限制到特定网络。"
-title = "IP 允许列表是付费功能"
-
-[portal.infrastructure.security.ipColumns]
-added = "已添加"
-addedBy = "添加者"
-cidr = "CIDR"
-label = "标签"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "算法"
-heading = "加密密钥管理"
-keyId = "密钥标识符"
-lastRotated = "上次轮换"
-rotateKey = "轮换密钥"
-rotationPolicy = "轮换策略"
-subheading = "用于加密静态文档的密钥托管 — 谁可以解密，以及密钥如何轮换。"
-
-[portal.infrastructure.security.managedBanner]
-description = "自带密钥 (BYOK) 和自持密钥 (HYOK) 托管在企业版中可用。升级后可从您自己的 KMS 提供密钥。"
-title = "您当前计划中的密钥由 Stirling 管理"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "亚太地区"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR 数据边界"
-label = "欧盟"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "美国"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "数据驻留"
-subheading = "文档存储和处理的位置。"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "已使用 {{value}}"
-
-[portal.infrastructure.storage.empty]
-description = "已连接的存储和用量会显示在这里。"
-title = "未配置存储"
-
-[portal.infrastructure.storage.lifecycle]
-active = "活跃"
-activeRange = "0–{{value}}d"
-archived = "已归档"
-coldStorage = "冷存储"
-deleted = "已删除"
-never = "从不"
-purged = "已清除"
-
-[portal.infrastructure.storage.providers]
-connect = "连接"
-connected = "已连接"
-heading = "已连接的提供商"
-subheading = "已处理工件写入的位置。"
-
-[portal.infrastructure.storage.retention]
-heading = "保留"
-subheading = "工件在生命周期删除前保留多长时间。"
-windowLabel = "默认保留窗口"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} 天"
-days_other = "{{count}} 天"
-never = "永不删除"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "总用量"
-progressLabel = "已用存储"
-subheading = "所有已连接提供商消耗的存储。"
-
 [portal.infrastructure.tabs]
 apiKeys = "API 密钥"
 audit = "审计日志"
@@ -7715,11 +7657,9 @@ security = "安全"
 storage = "存储"
 
 [portal.integrations]
-addAnother = "再添加一个"
 availableHeading = "可用"
 comingSoonHeading = "即将推出"
 connect = "连接"
-connectedHeading = "已连接"
 connectionCount_one = "{{count}} 个连接"
 connectionCount_other = "{{count}} 个连接"
 customApi = "自定义 API"
@@ -7737,6 +7677,10 @@ security = "安全"
 signing = "签名"
 storage = "存储"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "已连接"
 
@@ -7767,7 +7711,6 @@ integrations = "集成"
 pipelines = "管道"
 policies = "策略"
 procurement = "采购"
-settings = "设置"
 sources = "来源"
 usage = "用量与账单"
 users = "用户"
@@ -7784,7 +7727,7 @@ title = "管道"
 newPipeline = "新建管道"
 
 [portal.pipelines.builder]
-addStep = "添加工具"
+activate = "Activate"
 back = "返回管道"
 cannotFollow = "无法接收 {{produced}}"
 chooseAccount = "选择一个账户"
@@ -7792,28 +7735,38 @@ chooseDestination = "选择一个目标"
 chooseOperation = "选择此步骤执行的操作"
 chooseSource = "选择一个来源"
 discard = "放弃更改"
-enabled = "已启用"
 inputs = "输入"
 inputSource = "输入来源"
 inputTrigger = "触发器"
 keepEditing = "继续编辑"
+moreActions = "More actions"
 needsConfiguring = "需要设置"
-needsUpload = "需要上传的文件"
-noSources = "尚未连接来源。创建一个以将其用作输入。"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "没有工具匹配您的搜索。"
-pipelineSettings = "管道设置"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "搜索工具"
-selectToolBody = "添加工具以构建您的管道。"
-selectToolTitle = "尚无工具"
 sendToSystem = "发送到另一个系统"
 stepsIncompatible = "这些步骤无法在其上一步生成的内容上运行：{{tools}}。"
 stepsNeedSetup = "保存前这些步骤仍需要设置：{{tools}}。"
-toolSettings = "工具设置"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "无法识别的操作，已按原样保留。"
 unsavedBody = "您有未保存的更改。离开前保存，还是放弃？"
 unsavedTitle = "未保存的更改"
-uploadUnsupported = "管道尚不支持上传的文件，因此这些步骤无法保存：{{tools}}。"
 usesDefaults = "使用默认设置运行"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "合并上一步中的每个文件"
@@ -7825,31 +7778,36 @@ undeclared-operation = "无法检查此步骤接受的内容"
 
 [portal.pipelines.composer]
 addTool = "添加工具"
-cancel = "取消"
-chainEmpty = "添加工具以开始构建您的管道。"
 create = "创建管道"
+createPaused = "Create paused"
 editingUnsupported = "尚不支持显示这些工具参数用于编辑。"
-moveDown = "下移"
-moveUp = "上移"
+editSource = "Edit source"
 name = "名称"
 namePlaceholder = "例如：修订扫描"
 noToolSettings = "此工具没有可配置的设置。"
-operations_one = "操作（{{count}}）"
-operations_other = "操作（{{count}}）"
 output = "输出"
-removeStep = "移除操作"
 save = "保存更改"
 scheduleEvery = "每隔"
-sources = "来源"
-sourcesLoading = "正在加载来源..."
 trigger = "触发器"
 triggerManual = "仅手动"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "天"
 hours = "小时"
 minutes = "分钟"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "删除 \"{{name}}\"？此操作无法撤销。"
 cancel = "取消"
@@ -7867,6 +7825,37 @@ connectSource = "连接来源"
 description = "创建您的第一个管道：选择运行的来源，串联操作，并选择输出位置。"
 title = "尚无管道"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "活跃"
 paused = "已暂停"
@@ -7879,7 +7868,6 @@ completed_one = "运行已完成。"
 completed_other = "全部 {{count}} 次运行已完成。"
 empty = "没有可运行内容：来源中没有要处理的文档。"
 failed = "运行失败：{{error}}"
-historyCleared = "历史记录已清除。下一次运行将重新处理当前来源中的所有内容。"
 inFlight = "没有新的可运行内容：文档仍在从早先的运行中处理中。"
 parked_one = "无需运行：{{count}} 个文档此前失败并已暂存。修复原因后，清除历史记录以重试。"
 parked_other = "无需运行：{{count}} 个文档此前失败并已暂存。修复原因后，清除历史记录以重试。"
@@ -7895,6 +7883,7 @@ name = "管道"
 sources = "来源"
 status = "状态"
 steps = "步骤"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "文件夹监视"
@@ -8209,6 +8198,24 @@ label = "附加到 Jira 问题"
 description = "将处理后的文档作为附件发送。"
 label = "通过电子邮件发送文档（Mailgun）"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "将处理后的文档写入文件夹。"
 label = "上传到 Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "已达上限"
 subtitle = "您的免费试用持续到 {{date}}。无需银行卡。"
 title = "企业试用"
 
-[portal.search]
-ariaLabel = "搜索"
-placeholder = "搜索 Stirling — 端点、管道、文档…"
-
-[portal.search.empty]
-noActionsDescription = "快速操作可用后将显示在这里。"
-noActionsTitle = "无快速操作"
-noMatches = "没有匹配 \"{{query}}\" 的结果"
-noMatchesDescription = "尝试其他关键词或浏览目录。"
-
 [portal.settings.groups]
 admin = "管理员"
 
@@ -8743,10 +8740,6 @@ cancel = "取消"
 confirm = "删除"
 title = "删除来源？"
 
-[portal.sources.empty]
-description = "连接一个文件夹（很快还可连接云存储），让您的政策有位置可拉取文档。"
-title = "尚未连接来源"
-
 [portal.sources.kpi]
 inUse = "使用中"
 total = "连接"
@@ -8785,6 +8778,7 @@ unused = "未使用"
 documents = "文档"
 source = "来源"
 status = "状态"
+type = "Type"
 usedBy = "政策"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "政策与隐私"
 [settings.preferences]
 title = "首选项"
 
-[settings.search]
-placeholder = "搜索设置页面..."
-
 [settings.security]
 description = "更新您的密码以确保账户安全。"
 title = "安全"
@@ -10128,6 +10119,7 @@ last = "ཤོག་ངོས་མཐའ་མ།"
 maintainRatio = "བསྡུར་ཚད་རྒྱུན་འཁྱོངས་སྒོ་རྒྱག་པ།"
 next = "ཤོག་ངོས་རྗེས་མ།"
 noSavedSigs = "ཉར་ཚགས་བྱས་པའི་མིང་རྟགས་མ་རྙེད།"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "སྒེར་གྱི་མིང་རྟགས།"
 previous = "ཤོག་ངོས་སྔོན་མ།"
 redo = "重做"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "背景移除失败"
 hint = "上传您的签名 PNG 或 JPG 图片"
 label = "上传签名图片"
 placeholder = "选择图像文件"
+previewAlt = "Current image signature"
 processing = "正在处理图像..."
 removeBackground = "移除白色背景（变为透明）"
 
@@ -10179,6 +10172,17 @@ saved = "在上方选择一个已保存签名，然后在 PDF 上任意点击进
 text = "在上方输入您的姓名后，在 PDF 任意位置点击以放置签名。"
 title = "如何添加签名"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "移动签名"
 pause = "暂停放置"
@@ -10625,6 +10629,23 @@ title = "上传到服务器"
 updateButton = "在服务器上更新"
 uploadButton = "上传到服务器"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "返回"
 pdfTools = "PDF 工具"
 placeholder = "选择一个工具以开始"
 premiumFeature = "高级功能："
-searchTools = "搜索工具"
 toolsHeader = "工具"
 viewAllTools = "查看所有工具"
 
@@ -10822,6 +10842,9 @@ removal = "移除"
 signing = "签名"
 verification = "验证"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "未找到工具"
 noTools = "没有可用的工具"
@@ -10979,6 +11002,13 @@ approver = "批准政策"
 editor = "编辑器"
 processor = "处理器"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "要取消对 {{email}} 的邀请吗？他们将无法使用当前链接加入。"
 cancelInviteTitle = "取消邀请"
@@ -10998,10 +11028,8 @@ title = "尚无成员"
 addToTeam = "添加到团队"
 guestCount = "{{count}} 位访客"
 guests = "访客"
-guestsDesc = "外部协作者，范围限于您共享的内容。仅编辑器。"
 ledBy = "由 {{owner}} 领导"
 org = "组织"
-orgDesc = "拥有组织范围权限和政策批准权的所有者"
 owners = "{{count}} 位所有者"
 team = "{{name}} 团队"
 teamMeta = "{{count}} 人"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "由 {{who}} 邀请"
 cancel = "取消"
-count = "{{count}} 个待处理"
-desc = "已邀请但尚未加入的人员。他们在接受前会占用一个席位。"
 expiresInDays_one = "{{count}} 天后过期"
 expiresInDays_other = "{{count}} 天后过期"
 expiresToday = "今天过期"
 title = "待处理邀请"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "连接后端时出错，或者你没有访问权限。请重试。"
 title = "无法加载成员"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "搜索附件"
 title = "附件"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "书签标题"
 bookmarkTitleRequired = "必须填写书签标题"
 closeSidebar = "关闭书签侧边栏"
 collapseAll = "折叠所有书签"
+empty = "No bookmarks in this document"
 expandAll = "展开所有书签"
 searchPlaceholder = "搜索书签"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "添加评论"
@@ -11264,10 +11297,12 @@ locateAnnotation = "在文档中定位"
 moreActions = "更多操作"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "第 {{page}} 页"
 placingHint = "单击页面进行放置…（取消）"
 removeCommentOnly = "仅移除评论"
 saveReply = "保存回复"
+searchPlaceholder = "Search comments"
 title = "评论"
 typeComment = "评论"
 typeInsertText = "插入文本"
@@ -11290,6 +11325,7 @@ unsavedDesc = "您有未保存的更改"
 closeSidebar = "关闭图层侧边栏"
 hideAll = "隐藏所有图层"
 showAll = "显示所有图层"
+title = "Layers"
 
 [viewer.link]
 delete = "删除链接"
@@ -11646,6 +11682,7 @@ exitRedaction = "退出涂黑模式"
 exportAll = "导出 PDF"
 exportSelected = "导出所选页面"
 formFill = "填写表单"
+hideToolbar = "Hide toolbar"
 multiTool = "多功能工具"
 panMode = "平移模式"
 print = "打印 PDF"
@@ -11666,6 +11703,7 @@ selectAll = "全选"
 selectByNumber = "按页码选择"
 selectLanguage = "选择语言"
 share = "共享"
+showToolbar = "Show toolbar"
 toggleAnnotations = "切换注释可见性"
 toggleAttachments = "切换附件"
 toggleBookmarks = "切换书签"
diff --git a/frontend/editor/public/locales/zh-CN/translation.toml b/frontend/editor/public/locales/zh-CN/translation.toml
index e45a5bfdc1..c63f0e2b79 100644
--- a/frontend/editor/public/locales/zh-CN/translation.toml
+++ b/frontend/editor/public/locales/zh-CN/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "字母表"
 apply = "应用"
 applyAndContinue = "应用并继续"
-areYouSure = "确定要离开吗？"
 back = "返回"
 black = "黑色"
 blue = "蓝色"
@@ -106,6 +105,7 @@ undoSuccess = "已成功撤销操作"
 unknown = "未知"
 unpin = "取消固定文件（在工具运行后替换）"
 unsavedChanges = "您的 PDF 有未保存的更改。您想做什么?"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "未保存的更改"
 unsupported = "不受支持"
 username = "用户名"
@@ -1879,6 +1879,9 @@ width = "宽度"
 [app]
 description = "免费的 Adobe Acrobat 替代品（下载量 1000 万+）"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "转换为 PDF/A-3b"
 convertToPdfA3bDescription = "创建带有嵌入附件的归档 PDF"
@@ -2933,12 +2936,16 @@ text = "要使这些权限不可更改，请使用“添加密码”工具设置
 [chat.actions]
 copy = "复制消息"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling 代理选项"
+assistant = "AI Assistant"
 clearChat = "清空聊天"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "此操作将使用您的云额度"
 tooltip = "从屏幕拾取颜色"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "选择颜色"
 
 [common]
+actions = "Actions"
 back = "返回"
 cancel = "取消"
 close = "关闭"
+codeSample = "Code sample"
 collapse = "折叠"
 confirm = "确认"
 continue = "继续"
 copied = "已复制！"
 copy = "复制"
 done = "完成"
+enterValue = "Enter value"
 error = "错误"
 expand = "展开"
 loading = "正在加载..."
 next = "下一页"
+open = "Open"
 preview = "预览"
 previous = "上一页"
 refresh = "刷新"
 remaining = "剩余"
 retry = "重试"
 save = "保存"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "清除已选择"
@@ -3185,6 +3199,7 @@ title = "压缩方式"
 [compress.settings]
 desiredSize = "期望的文件大小"
 desiredSizePlaceholder = "输入大小"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "压缩是减小文件大小的简便方法。选择“文件大小”可输入目标大小，我们将为您自动调整质量；选择“质量”可手动设置压缩强度。"
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF 选项"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "请先选择源格式"
 settings = "设置"
 single = "单个"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "搜索…"
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "编辑"
@@ -3824,11 +3861,13 @@ shareSelected = "共享所选"
 sharing = "共享"
 showAll = "显示全部"
 showHistory = "显示历史"
+sortBy = "Sort files"
 sortByDate = "按日期排序"
 sortByName = "按名称排序"
 sortBySize = "按大小排序"
 storage = "存储"
 storageState = "存储"
+storageUsed = "Storage used"
 synced = "已同步"
 title = "上传 PDF 文件"
 toolChain = "已应用工具"
@@ -3874,8 +3913,12 @@ addFiles = "添加文件"
 addingFiles = "正在添加文件…"
 collapse = "折叠侧边栏"
 customizeGroups = "自定义分组"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "打开文件以开始"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "展开侧边栏"
 googleDrive = "Google Drive"
 googleDriveDisabled = "未配置 Google Drive"
@@ -3888,15 +3931,17 @@ openFromComputer = "从电脑打开"
 openSettings = "打开设置"
 other = "其他"
 recent = "最近"
-search = "搜索"
-searchPlaceholder = "搜索文件..."
 viewAll = "查看全部 {{count}} 个文件"
 
 [fileSidebar.fileItem]
 closeViewer = "关闭查看器"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "在查看器中打开"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "重置为默认值"
 subtitle = "将文件分组到父类别中。向类别添加现有或新标签、重命名类别，或创建自己的类别。不属于任何类别的文件会显示在“其他”下。"
 title = "侧边栏类别"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "添加到工作区"
 addToWorkspaceCount = "将 {{count}} 个添加到工作区"
@@ -3918,7 +3971,6 @@ backToMyFiles = "返回“我的文件”"
 breadcrumbs = "文件夹路径"
 cancel = "取消"
 classification = "分类"
-clearSearch = "清除搜索"
 clearSelection = "清除选择"
 closeDetails = "关闭详情"
 create = "创建"
@@ -3950,6 +4002,7 @@ downloadAll = "全部下载"
 downloadVersion = "下载此版本"
 dropOverlay = "拖放文件以上传"
 dropOverlaySub = "文件起始于“本地”。使用 '移动到' 或 '保存到云端' 将其整理到文件夹中。"
+duplicate = "Duplicate"
 file = "文件"
 fileInfo = "File info"
 fileMenu = "文件操作"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "调整文件夹树大小（方向键，按住 Shift 步长
 save = "保存"
 saveToServer = "保存到服务器"
 saveToServerDisabledHint = "此服务器未启用保存到服务器功能。请联系您的管理员启用。"
-search = "搜索"
-searchPlaceholder = "搜索此文件夹及其子文件夹"
 selectAll = "全选"
 selectAllHint = "点击可全选。提示：按住 Ctrl（或 Cmd）可逐个添加文件，按住 Shift 可选择范围。"
 selectedCount = "已选择 {{count}} 个"
@@ -4044,6 +4095,10 @@ title = "尚无云端文件"
 hint = "未上传而保存的文件会保留在此处。拖放文件以添加。"
 title = "没有仅本地文件"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "您打开或编辑的文件会出现在这里。"
 title = "尚未有修改"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "无法删除文件夹。"
 deleteFolderFailedDetail = "无法删除文件夹：{{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "无法更新文件夹外观。"
 folderAppearanceFailedDetail = "无法更新文件夹外观：{{message}}"
 moveFilesFailed = "无法移动文件。"
@@ -4113,6 +4170,11 @@ localHint = "仅存储在此浏览器中"
 shared = "共享"
 sharedHint = "通过链接与您共享"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "最早优先"
 modifiedDesc = "最新优先"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "存储中无可用文件。请先打开一些文件。"
 open = "打开"
 openFile = "打开文件"
 openFiles = "打开文件"
+selectFile = "Select {{name}}"
 selectFromStorage = "从存储中选择"
 upload = "上传"
 uploadFile = "上传文件"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "全部已保存"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "提取 CSV 失败"
 extractXlsxError = "提取 XLSX 失败"
+filled = "filled"
 flattenAfterFilling = "填写后扁平化"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "必填"
 requiredFieldsError = "请填写所有必填字段"
 rescanFields = "重新扫描字段"
@@ -4795,9 +4863,6 @@ title = "图片转 PDF"
 [imageToPdf]
 tags = "转换、图像、JPG、图片、照片"
 
-[infoBanner]
-dismiss = "关闭"
-
 [invite]
 acceptError = "创建账户失败"
 accountFor = "正在为以下用户创建账户"
@@ -4979,6 +5044,34 @@ uploadSuccess = "上传成功！"
 uploadSuccessMessage = "您的图像已传输。"
 validating = "正在验证会话..."
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "扫码上传照片。图像会自动转换为 PDF。"
 descriptionNoConvert = "使用手机扫码上传照片。"
@@ -4997,8 +5090,13 @@ title = "从手机上传"
 tags = "多工具，多操作，用户界面，点击拖动，前端，客户端"
 title = "PDF 多功能工具"
 
-[navbar]
-search = "搜索"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "认证未成功。您可以关闭此窗口后重试。"
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>活动文件</strong> 视图显示您已加载到工具
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "关闭"
 cropSettings = "现在我们已选择要裁剪的文件，可以配置裁剪工具，选择要将 PDF 裁剪到的区域。"
+dialogLabel = "Onboarding"
 fileCheckbox = "单击某个文件即可选择其进行处理。您可以选择多个文件以进行批量操作。"
 fileReplacement = "修改后的文件会自动替换工作台中的原始文件，方便您继续使用更多工具处理。"
 filesButton = "快速访问栏上的 <strong>文件</strong> 按钮可用于上传 PDF，以便使用工具。"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "将 PDF 转换为 PDF/A"
 tags = "归档、长期、标准、转换、存储、保存"
 title = "PDF 转 PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "打印,标准,转换,生产,印前,归档"
 title = "PDF 转为 PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 积分"
 xsmall = "100 积分"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "选择符合您需求的套餐"
 title = "可用套餐"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "已达到每月支出限额"
 title = "无法打开 Stripe 门户"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "已使用 {{allowance}} 个免费 PDFs 中的额度"
 capSuffix_other = "已使用 {{allowance}} 个免费 PDFs 中的额度"
 eyebrow = "Processor 试用"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "当策略运行时发送文档或通知电子邮件。"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "将处理后的文档归档到 Nextcloud。"
@@ -7077,11 +7211,6 @@ title = "官方 SDKs"
 beta = "Beta"
 deprecated = "已弃用"
 
-[portal.docs.search]
-empty = "没有匹配的文档"
-placeholder = "搜索文档"
-results = "{{count}} 个结果"
-
 [portal.docs.skills]
 eyebrow = "技能"
 lead = "打包的命名能力，您的智能体可将其作为单个工具调用。每项技能都是附带评估的确定性操作链。"
@@ -7180,11 +7309,11 @@ editorAction = "编辑器"
 empty = "没有文档符合此筛选条件。"
 rowActions = "行操作"
 sensitiveLabel = "敏感"
-sensitiveTitle = "敏感 — 需要访问权限"
 
 [portal.documents.table.columns]
 action = "流水线 / 操作"
 document = "文档"
+labels = "Labels"
 product = "产品"
 status = "状态"
 time = "时间"
@@ -7200,6 +7329,7 @@ host = "主机"
 lastSeen = "最后在线"
 region = "区域"
 status = "状态"
+target = "Target"
 version = "版本"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "此视图遇到意外错误。请重试，或从侧边栏选择
 retry = "重试"
 title = "此页面出现问题"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "返回"
 body = "下载桌面应用或自托管服务器。"
@@ -7380,11 +7560,6 @@ cancel = "取消"
 confirm = "撤销密钥"
 title = "撤销 API 密钥"
 
-[portal.infrastructure.attestationLabel]
-attested = "已证明"
-inScope = "范围内"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "按类别筛选审计事件"
 heading = "审计日志"
@@ -7456,11 +7631,6 @@ info = "信息"
 success = "成功"
 warning = "警告"
 
-[portal.infrastructure.certLabel]
-certified = "已认证"
-inProgress = "进行中"
-notStarted = "未开始"
-
 [portal.infrastructure.createKey]
 cancel = "取消"
 createKey = "创建密钥"
@@ -7474,238 +7644,10 @@ subtitleCreated = "立即复制此密钥 — 它不会再次显示。"
 title = "创建 API 密钥"
 titleCreated = "密钥已创建"
 
-[portal.infrastructure.deployLabel]
-live = "上线"
-queued = "已排队"
-rolledBack = "已回滚"
-rolling = "正在发布"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/分钟"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "部署者"
-environment = "环境"
-product = "产品"
-status = "状态"
-version = "版本"
-when = "时间"
-
-[portal.infrastructure.deployments.recent]
-heading = "最近部署"
-subheading = "各产品和环境中的最新发布。"
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "实例"
-latency = "延迟"
-load = "负载"
-p99 = "P99"
-region = "区域"
-status = "状态"
-throughput = "吞吐量"
-uptime = "正常运行时间"
-version = "版本"
-
-[portal.infrastructure.deployments.regions]
-heading = "区域"
-subheading = "每个已部署 Stirling 区域的实时健康状况 — 延迟、负载和发布版本。"
-
-[portal.infrastructure.deployments.regions.empty]
-description = "工作区完成预配后，已部署区域会显示在此处。"
-title = "未部署区域"
-
 [portal.infrastructure.keyLabel]
 active = "活跃"
 revoked = "已撤销"
 
-[portal.infrastructure.modelLabel]
-active = "活跃"
-degraded = "已降级"
-disabled = "已禁用"
-
-[portal.infrastructure.models]
-heading = "模型"
-msValue = "{{value}} ms"
-subheading = "为工作区中的文档处理提供支持的模型目录和路由。"
-
-[portal.infrastructure.models.byom]
-description = "注册本地或自托管模型，并将其固定到某个区域，以进行受数据驻留约束的处理。"
-title = "自带模型"
-
-[portal.infrastructure.models.catalogue]
-heading = "目录"
-sub = "可供工作区使用的托管模型，包含实时延迟和成本。"
-subEnterprise = "托管、自带和本地模型 — 支持按区域固定。"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "工作区目录中的模型会显示在此处。"
-title = "没有可用模型"
-
-[portal.infrastructure.models.columns]
-cost = "成本"
-latency = "延迟"
-load = "负载"
-model = "模型"
-status = "状态"
-type = "类型"
-version = "版本"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/次调用"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "活跃模型"
-avgLatency = "平均延迟"
-included = "已包含"
-monthlySpend = "每月模型支出"
-
-[portal.infrastructure.models.routing]
-empty = "未配置路由规则。"
-heading = "路由规则"
-sub = "由哪个模型处理每个操作。当没有更精确的规则匹配时，将应用默认规则。"
-subLocked = "将操作路由到特定模型 — 付费套餐可用。"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "升级到 Pro，以控制哪个模型处理每种操作和文档类型。"
-title = "模型路由是付费功能"
-
-[portal.infrastructure.models.routingColumns]
-default = "默认"
-docType = "文档类型"
-modelForAria = "{{operation}} 的模型"
-operation = "操作"
-routedTo = "路由到"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "分类"
-extraction = "提取"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "已降级"
-down = "停机"
-healthy = "健康"
-
-[portal.infrastructure.security.access.byok]
-description = "从您自己的 KMS 提供密钥。Stirling 使用它进行加密，但仍可读取。"
-label = "自带密钥 (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "密钥永不离开您的 KMS。Stirling 只持有密文。"
-label = "自持密钥 (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling 管理加密密钥。最简单 — 您这边无需密钥运维。"
-label = "Stirling 持有的密钥"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "文档访问策略"
-subheading = "控制谁可以解密静态存储的已处理文档。"
-
-[portal.infrastructure.security.attestations]
-heading = "合规证明"
-noReport = "无可用报告"
-subheading = "按框架展示的审计态势，并可查看已证明控制项的报告。"
-viewReport = "查看报告 →"
-
-[portal.infrastructure.security.compliance]
-heading = "合规"
-subheading = "覆盖 Stirling 平台的证明和认证。"
-
-[portal.infrastructure.security.empty]
-description = "工作区的安全配置会显示在此处。"
-title = "安全态势不可用"
-
-[portal.infrastructure.security.hyokBanner]
-description = "使用 HYOK 时，加密密钥永不离开您的 KMS。Stirling 仅存储和处理密文，您可以随时撤销。"
-title = "Stirling 无法解密您的文档"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "未配置 IP 范围 — 允许所有 IP。"
-heading = "IP allowlist"
-sub = "API 访问仅限这些 CIDR 范围。"
-subLocked = "将 API 访问限制为已知 IP 范围 — 付费套餐可用。"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "升级到 Pro，以将 API 访问限制到特定网络。"
-title = "IP allowlist 是付费功能"
-
-[portal.infrastructure.security.ipColumns]
-added = "已添加"
-addedBy = "添加者"
-cidr = "CIDR"
-label = "标签"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "Algorithm"
-heading = "加密密钥管理"
-keyId = "密钥标识符"
-lastRotated = "最后轮换"
-rotateKey = "轮换密钥"
-rotationPolicy = "轮换策略"
-subheading = "用于加密静态文档的密钥托管 — 谁可以解密，以及密钥如何轮换。"
-
-[portal.infrastructure.security.managedBanner]
-description = "自带密钥 (BYOK) 和自持密钥 (HYOK) 托管在企业版中可用。升级后可从您自己的 KMS 提供密钥。"
-title = "在您的套餐中，密钥由 Stirling 管理"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "亚太地区"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR 数据边界"
-label = "欧盟"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "美国"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "数据驻留"
-subheading = "文档存储和处理的位置。"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "已使用 {{value}}"
-
-[portal.infrastructure.storage.empty]
-description = "已连接的存储和用量会显示在此处。"
-title = "未配置存储"
-
-[portal.infrastructure.storage.lifecycle]
-active = "活跃"
-activeRange = "0–{{value}}d"
-archived = "已归档"
-coldStorage = "冷存储"
-deleted = "已删除"
-never = "永不"
-purged = "已清除"
-
-[portal.infrastructure.storage.providers]
-connect = "连接"
-connected = "已连接"
-heading = "已连接的提供商"
-subheading = "已处理工件的写入位置。"
-
-[portal.infrastructure.storage.retention]
-heading = "保留"
-subheading = "工件在生命周期删除前保留的时长。"
-windowLabel = "默认保留窗口"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} 天"
-days_other = "{{count}} 天"
-never = "永不删除"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "总用量"
-progressLabel = "已使用存储"
-subheading = "所有已连接提供商消耗的存储。"
-
 [portal.infrastructure.tabs]
 apiKeys = "API 密钥"
 audit = "审计日志"
@@ -7715,11 +7657,9 @@ security = "安全"
 storage = "存储"
 
 [portal.integrations]
-addAnother = "再添加一个"
 availableHeading = "可用"
 comingSoonHeading = "即将推出"
 connect = "连接"
-connectedHeading = "已连接"
 connectionCount_one = "{{count}} 个连接"
 connectionCount_other = "{{count}} 个连接"
 customApi = "自定义 API"
@@ -7737,6 +7677,10 @@ security = "安全"
 signing = "签名"
 storage = "存储"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "已连接"
 
@@ -7767,7 +7711,6 @@ integrations = "集成"
 pipelines = "流水线"
 policies = "策略"
 procurement = "采购"
-settings = "设置"
 sources = "来源"
 usage = "用量与计费"
 users = "用户"
@@ -7784,7 +7727,7 @@ title = "流水线"
 newPipeline = "新建流水线"
 
 [portal.pipelines.builder]
-addStep = "添加工具"
+activate = "Activate"
 back = "返回流水线"
 cannotFollow = "无法接收 {{produced}}"
 chooseAccount = "选择账户"
@@ -7792,28 +7735,38 @@ chooseDestination = "选择目标位置"
 chooseOperation = "选择此步骤执行的操作"
 chooseSource = "选择源"
 discard = "放弃更改"
-enabled = "已启用"
 inputs = "输入"
 inputSource = "输入源"
 inputTrigger = "触发器"
 keepEditing = "继续编辑"
+moreActions = "More actions"
 needsConfiguring = "需要设置"
-needsUpload = "需要上传文件"
-noSources = "尚未连接源。创建一个源以将其用作输入。"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "没有工具符合您的搜索。"
-pipelineSettings = "流水线设置"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "搜索工具"
-selectToolBody = "添加工具以构建您的流水线。"
-selectToolTitle = "还没有工具"
 sendToSystem = "发送到另一个系统"
 stepsIncompatible = "这些步骤无法处理其上一步产生的内容：{{tools}}。"
 stepsNeedSetup = "保存前仍需设置这些步骤：{{tools}}。"
-toolSettings = "工具设置"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "无法识别的操作，已按原样保留。"
 unsavedBody = "您有未保存的更改。离开前保存，还是放弃更改？"
 unsavedTitle = "未保存的更改"
-uploadUnsupported = "流水线尚不支持上传的文件，因此这些步骤无法保存：{{tools}}。"
 usesDefaults = "使用默认设置运行"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "合并上一步中的每个文件"
@@ -7825,31 +7778,36 @@ undeclared-operation = "无法检查此步骤接受的内容"
 
 [portal.pipelines.composer]
 addTool = "添加工具"
-cancel = "取消"
-chainEmpty = "添加工具以开始构建您的流水线。"
 create = "创建流水线"
+createPaused = "Create paused"
 editingUnsupported = "尚不支持显示这些工具参数以进行编辑。"
-moveDown = "下移"
-moveUp = "上移"
+editSource = "Edit source"
 name = "名称"
 namePlaceholder = "例如：修订扫描"
 noToolSettings = "此工具没有可配置的设置。"
-operations_one = "操作 ({{count}})"
-operations_other = "操作 ({{count}})"
 output = "输出"
-removeStep = "移除操作"
 save = "保存更改"
 scheduleEvery = "运行间隔"
-sources = "来源"
-sourcesLoading = "正在加载来源..."
 trigger = "触发器"
 triggerManual = "仅手动"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "天"
 hours = "小时"
 minutes = "分钟"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "删除 \"{{name}}\"？此操作无法撤销。"
 cancel = "取消"
@@ -7867,6 +7825,37 @@ connectSource = "连接源"
 description = "创建您的第一个流水线：选择要运行的来源，串联操作，并选择输出位置。"
 title = "还没有流水线"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "活跃"
 paused = "已暂停"
@@ -7879,7 +7868,6 @@ completed_one = "运行已完成。"
 completed_other = "所有 {{count}} 次运行均已完成。"
 empty = "没有可运行内容：来源中没有要处理的文档。"
 failed = "运行失败：{{error}}"
-historyCleared = "历史记录已清除。下次运行将重新处理源中当前的所有内容。"
 inFlight = "没有新的内容可运行：文档仍在从先前的运行中处理。"
 parked_one = "无需运行：{{count}} 个文档之前处理失败并已搁置。修复原因后，清除历史记录以重试。"
 parked_other = "无需运行：{{count}} 个文档之前处理失败并已搁置。修复原因后，清除历史记录以重试。"
@@ -7895,6 +7883,7 @@ name = "流水线"
 sources = "来源"
 status = "状态"
 steps = "步骤"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "文件夹监视"
@@ -8209,6 +8198,24 @@ label = "附加到 Jira issue"
 description = "将处理后的文档作为附件发送。"
 label = "通过 Email 发送文档（Mailgun）"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "将处理后的文档写入文件夹。"
 label = "上传到 Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "已达上限"
 subtitle = "你的免费试用持续到 {{date}}。无需银行卡。"
 title = "Enterprise 试用"
 
-[portal.search]
-ariaLabel = "搜索"
-placeholder = "搜索 Stirling — 端点、流水线、文档…"
-
-[portal.search.empty]
-noActionsDescription = "可用后，快捷操作将显示在这里。"
-noActionsTitle = "无快捷操作"
-noMatches = "没有与“{{query}}”匹配的结果"
-noMatchesDescription = "尝试其他关键词或浏览目录。"
-
 [portal.settings.groups]
 admin = "管理员"
 
@@ -8743,10 +8740,6 @@ cancel = "取消"
 confirm = "删除"
 title = "删除源？"
 
-[portal.sources.empty]
-description = "连接一个文件夹（很快还会支持云存储），让你的策略有地方拉取文档。"
-title = "尚未连接源"
-
 [portal.sources.kpi]
 inUse = "使用中"
 total = "连接"
@@ -8785,6 +8778,7 @@ unused = "未使用"
 documents = "文档"
 source = "源"
 status = "状态"
+type = "Type"
 usedBy = "策略"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "策略与隐私"
 [settings.preferences]
 title = "首选项"
 
-[settings.search]
-placeholder = "搜索设置页面..."
-
 [settings.security]
 description = "更新密码以保障您的账户安全。"
 title = "安全"
@@ -10128,6 +10119,7 @@ last = "末页"
 maintainRatio = "切换保持长宽比"
 next = "下一页"
 noSavedSigs = "未找到已保存的签名"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "个人签名"
 previous = "上一页"
 redo = "重做"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "背景移除失败"
 hint = "上传 PNG 或 JPG 格式的签名图像"
 label = "上传签名图像"
 placeholder = "选择图像文件"
+previewAlt = "Current image signature"
 processing = "正在处理图像..."
 removeBackground = "移除白色背景（变为透明）"
 
@@ -10179,6 +10172,17 @@ saved = "在上方选择一个已保存的签名，然后在 PDF 任意位置点
 text = "在上方输入您的姓名后，在 PDF 上任意位置点击以放置签名。"
 title = "如何添加签名"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "移动签名"
 pause = "暂停放置"
@@ -10625,6 +10629,23 @@ title = "上传到服务器"
 updateButton = "在服务器上更新"
 uploadButton = "上传到服务器"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "返回"
 pdfTools = "PDF 工具"
 placeholder = "选择一个工具以开始"
 premiumFeature = "高级功能："
-searchTools = "搜索工具"
 toolsHeader = "工具"
 viewAllTools = "查看所有工具"
 
@@ -10822,6 +10842,9 @@ removal = "移除"
 signing = "签署"
 verification = "验证"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "未找到工具"
 noTools = "没有可用的工具"
@@ -10979,6 +11002,13 @@ approver = "批准策略"
 editor = "编辑器"
 processor = "处理器"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "取消对 {{email}} 的邀请？他们将无法使用当前链接加入。"
 cancelInviteTitle = "取消邀请"
@@ -10998,10 +11028,8 @@ title = "暂无成员"
 addToTeam = "添加到团队"
 guestCount = "{{count}} 位访客"
 guests = "访客"
-guestsDesc = "外部协作者，范围限于你共享的内容。仅编辑器。"
 ledBy = "由 {{owner}} 领导"
 org = "组织"
-orgDesc = "拥有组织范围权限和策略批准权限的所有者"
 owners = "{{count}} 位所有者"
 team = "{{name}} 团队"
 teamMeta = "{{count}} 人"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "由 {{who}} 邀请"
 cancel = "取消"
-count = "{{count}} 个待处理"
-desc = "已受邀但尚未加入的人员。在接受邀请之前，他们会占用一个席位。"
 expiresInDays_one = "{{count}} 天后过期"
 expiresInDays_other = "{{count}} 天后过期"
 expiresToday = "今天过期"
 title = "待处理邀请"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "连接后端时出现问题，或者你没有访问权限。请重试。"
 title = "无法加载成员"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "搜索附件"
 title = "附件"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "书签标题"
 bookmarkTitleRequired = "书签标题为必填项"
 closeSidebar = "关闭书签侧边栏"
 collapseAll = "折叠所有书签"
+empty = "No bookmarks in this document"
 expandAll = "展开所有书签"
 searchPlaceholder = "搜索书签"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "添加评论"
@@ -11264,10 +11297,12 @@ locateAnnotation = "在文档中定位"
 moreActions = "更多操作"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "第 {{page}} 页"
 placingHint = "单击页面以放置… (取消)"
 removeCommentOnly = "仅移除评论"
 saveReply = "保存回复"
+searchPlaceholder = "Search comments"
 title = "评论"
 typeComment = "评论"
 typeInsertText = "插入文本"
@@ -11290,6 +11325,7 @@ unsavedDesc = "您有未保存的更改"
 closeSidebar = "关闭图层侧边栏"
 hideAll = "隐藏所有图层"
 showAll = "显示所有图层"
+title = "Layers"
 
 [viewer.link]
 delete = "删除链接"
@@ -11646,6 +11682,7 @@ exitRedaction = "退出涂黑模式"
 exportAll = "导出 PDF"
 exportSelected = "导出所选页面"
 formFill = "填写表单"
+hideToolbar = "Hide toolbar"
 multiTool = "多功能工具"
 panMode = "平移模式"
 print = "打印 PDF"
@@ -11666,6 +11703,7 @@ selectAll = "全选"
 selectByNumber = "按页码选择"
 selectLanguage = "选择语言"
 share = "共享"
+showToolbar = "Show toolbar"
 toggleAnnotations = "切换注释显示"
 toggleAttachments = "切换附件"
 toggleBookmarks = "切换书签"
diff --git a/frontend/editor/public/locales/zh-TW/translation.toml b/frontend/editor/public/locales/zh-TW/translation.toml
index 99c96f0ea6..827d088e37 100644
--- a/frontend/editor/public/locales/zh-TW/translation.toml
+++ b/frontend/editor/public/locales/zh-TW/translation.toml
@@ -1,7 +1,6 @@
 alphabet = "字母表"
 apply = "套用"
 applyAndContinue = "儲存並離開"
-areYouSure = "確定要離開嗎？"
 back = "返回"
 black = "黑色"
 blue = "藍色"
@@ -106,6 +105,7 @@ undoSuccess = "已成功復原作業"
 unknown = "未知"
 unpin = "取消釘選檔案（工具執行後以新檔取代）"
 unsavedChanges = "您對 PDF 的變更尚未儲存。"
+unsavedChangesBody = "You have unsaved changes to your PDF. Are you sure you want to leave?"
 unsavedChangesTitle = "未儲存的變更"
 unsupported = "不支援"
 username = "使用者名稱"
@@ -1879,6 +1879,9 @@ width = "寬度"
 [app]
 description = "免費的 Adobe Acrobat 替代方案（下載量 10M+）"
 
+[appBanner]
+dismiss = "Dismiss"
+
 [attachments]
 convertToPdfA3b = "轉換為 PDF/A-3b"
 convertToPdfA3bDescription = "建立含內嵌附件的封存用 PDF"
@@ -2933,12 +2936,16 @@ text = "若要使這些權限無法被變更，請使用「新增密碼」工具
 [chat.actions]
 copy = "複製訊息"
 
+[chat.emptyState]
+text = "Ask a question about your documents or get help with PDF tools."
+
 [chat.fab]
 close = "Close chat"
 open = "Open Stirling AI assistant"
 
 [chat.header]
 agentMenu = "Stirling 代理選項"
+assistant = "AI Assistant"
 clearChat = "清除聊天"
 
 [chat.input]
@@ -3001,28 +3008,35 @@ tooltip = "此操作會使用您的雲端點數"
 tooltip = "從畫面取色"
 
 [colorPicker]
+hue = "Hue"
+saturation = "Saturation and brightness"
 title = "選擇顏色"
 
 [common]
+actions = "Actions"
 back = "返回"
 cancel = "取消"
 close = "關閉"
+codeSample = "Code sample"
 collapse = "收合"
 confirm = "確認"
 continue = "繼續"
 copied = "已複製！"
 copy = "複製"
 done = "完成"
+enterValue = "Enter value"
 error = "錯誤"
 expand = "展開"
 loading = "正在載入..."
 next = "下一步"
+open = "Open"
 preview = "預覽"
 previous = "上一步"
 refresh = "重新整理"
 remaining = "剩餘"
 retry = "重試"
 save = "儲存"
+stepOf = "Step {{current}} of {{total}}"
 
 [compare]
 clearSelected = "清除所選"
@@ -3185,6 +3199,7 @@ title = "壓縮方法"
 [compress.settings]
 desiredSize = "期望檔案大小"
 desiredSizePlaceholder = "輸入大小"
+desiredSizeUnit = "Size unit"
 
 [compress.tooltip.description]
 text = "壓縮是減少檔案大小的簡單方法。選擇『檔案大小』可輸入目標大小，系統會為您調整品質。選擇『品質』可手動設定壓縮強度。"
@@ -3387,6 +3402,24 @@ pdfOptions = "PDF 選項"
 pdfToCbr = "PDF → CBR"
 pdfToCbz = "PDF → CBZ"
 pdfToEpub = "PDF → EPUB"
+pdfUaAltTextNotice = "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified."
+pdfUaAltTextScanFailed = "The images could not be listed. Convert anyway and the response reports what is missing."
+pdfUaAltTextSingleFileOnly = "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images."
+pdfUaEmbedFonts = "Embed missing fonts"
+pdfUaEmbedFontsHelp = "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance."
+pdfUaFigureLabel = "Page {{page}} {{kind}}"
+pdfUaFigurePlaceholder = "What this image tells the reader"
+pdfUaFindImages = "Find images needing a description"
+pdfUaLanguage = "Document language"
+pdfUaLanguageHelp = "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language."
+pdfUaNoImagesNeedingText = "No image is missing a description."
+pdfUaOptions = "PDF/UA Options"
+pdfUaOverrideLanguage = "Replace the document's own language"
+pdfUaOverrideLanguageHelp = "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible."
+pdfUaProfile = "Conformance level"
+pdfUaSignatureWarning = "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign."
+pdfUaTitle = "Document title"
+pdfUaTitleHelp = "Shown by a reader instead of the filename. Left blank, the first heading is used."
 selectSourceFormatFirst = "請先選擇來源格式"
 settings = "設定"
 single = "單一"
@@ -3565,7 +3598,11 @@ tags = "automation,folder,scanning,watch folder,hot folder,automatic processing,
 tags = "SSO,single sign-on,authentication,SAML,OAuth,OIDC,login,enterprise,identity provider,IdP"
 
 [dropdownList]
+noItems = "No items available"
+noResults = "No results found"
 searchPlaceholder = "搜尋..."
+selectLanguages = "Select languages"
+selectOption = "Select an option"
 
 [editableSecretField]
 edit = "編輯"
@@ -3824,11 +3861,13 @@ shareSelected = "共用已選取項"
 sharing = "共用"
 showAll = "顯示全部"
 showHistory = "顯示歷史"
+sortBy = "Sort files"
 sortByDate = "依日期排序"
 sortByName = "依名稱排序"
 sortBySize = "依大小排序"
 storage = "儲存空間"
 storageState = "儲存狀態"
+storageUsed = "Storage used"
 synced = "已同步"
 title = "上傳 PDF 檔案"
 toolChain = "已套用的工具"
@@ -3874,8 +3913,12 @@ addFiles = "新增檔案"
 addingFiles = "正在新增檔案…"
 collapse = "收合側邊欄"
 customizeGroups = "自訂群組"
+dataLostBody = "This browser lost this file's contents. Upload it again to keep working with it."
+dataLostTitle = "File data is unavailable"
+downloadFailed = "Download failed"
 dropHint = "開啟檔案以開始使用"
 dropToAdd = "Drop files to add"
+duplicateFailed = "Could not duplicate file"
 expand = "展開側邊欄"
 googleDrive = "Google Drive"
 googleDriveDisabled = "尚未設定 Google Drive"
@@ -3888,15 +3931,17 @@ openFromComputer = "從電腦開啟"
 openSettings = "開啟設定"
 other = "其他"
 recent = "最近"
-search = "搜尋"
-searchPlaceholder = "搜尋檔案…"
 viewAll = "檢視全部 {{count}} 個檔案"
 
 [fileSidebar.fileItem]
 closeViewer = "關閉檢視器"
+dataLost = "Data lost"
+dataLostTooltip = "This browser lost this file's contents. Upload it again to keep working with it."
 delete = "Delete"
+duplicate = "Duplicate"
 moreActions = "More actions"
 openInViewer = "在檢視器中開啟"
+rename = "Rename"
 savedToServer = "Saved to server"
 updateOnServer = "Update on server"
 uploadToServer = "Upload to server"
@@ -3908,6 +3953,14 @@ reset = "重設為預設值"
 subtitle = "將您的檔案分組到父類別中。將現有或新的標籤新增至類別、重新命名，或建立您自己的類別。不屬於任何類別的檔案會顯示在「其他」下。"
 title = "側邊欄類別"
 
+[fileSidebar.rename]
+cancel = "Cancel"
+error = "Could not rename the file."
+illegalCharacters = "A file name can't contain \\ / : * ? \" < > |"
+label = "File name"
+save = "Rename"
+title = "Rename file"
+
 [filesPage]
 addToWorkspace = "加入至工作區"
 addToWorkspaceCount = "將 {{count}} 個加入工作區"
@@ -3918,7 +3971,6 @@ backToMyFiles = "返回我的檔案"
 breadcrumbs = "資料夾路徑"
 cancel = "取消"
 classification = "分類"
-clearSearch = "清除搜尋"
 clearSelection = "清除選取"
 closeDetails = "關閉詳細資料"
 create = "建立"
@@ -3950,6 +4002,7 @@ downloadAll = "全部下載"
 downloadVersion = "下載此版本"
 dropOverlay = "拖放檔案以上傳"
 dropOverlaySub = "檔案會先新增至本機。使用『移至』或『儲存到雲端』將它們整理到資料夾。"
+duplicate = "Duplicate"
 file = "檔案"
 fileInfo = "File info"
 fileMenu = "檔案動作"
@@ -3983,8 +4036,6 @@ resizeFolderTree = "調整資料夾樹狀結構大小（方向鍵，按住 Shift
 save = "儲存"
 saveToServer = "儲存到伺服器"
 saveToServerDisabledHint = "此伺服器未啟用儲存到伺服器。請聯絡管理員啟用。"
-search = "搜尋"
-searchPlaceholder = "搜尋此資料夾與子資料夾"
 selectAll = "全選"
 selectAllHint = "按一下以全選。提示：按住 Ctrl（或 Cmd）可逐一新增檔案，按住 Shift 可選取範圍。"
 selectedCount = "已選取 {{count}} 個"
@@ -4044,6 +4095,10 @@ title = "尚無雲端檔案"
 hint = "未上傳而儲存的檔案會留在此處。拖放檔案以新增。"
 title = "沒有僅存在本機的檔案"
 
+[filesPage.empty.noResults]
+hint = "No files in this folder match your filter. Try a different term or clear the filter."
+title = "No matching files"
+
 [filesPage.empty.recent]
 hint = "您開啟或編輯的檔案會出現在這裡。"
 title = "尚未有變更"
@@ -4063,6 +4118,8 @@ cloudDeleteFailed_one = "Couldn't delete 1 file from the cloud."
 cloudDeleteFailed_other = "Couldn't delete {{count}} files from the cloud."
 deleteFolderFailed = "無法刪除資料夾。"
 deleteFolderFailedDetail = "無法刪除資料夾：{{message}}"
+downloadFailed = "Could not download the file."
+duplicateFailed = "Could not duplicate the file."
 folderAppearanceFailed = "無法更新資料夾外觀。"
 folderAppearanceFailedDetail = "無法更新資料夾外觀：{{message}}"
 moveFilesFailed = "無法移動檔案。"
@@ -4113,6 +4170,11 @@ localHint = "僅儲存在此瀏覽器"
 shared = "已分享"
 sharedHint = "透過連結與您分享"
 
+[filesPage.search]
+clear = "Clear filter"
+label = "Filter files by name"
+placeholder = "Filter files…"
+
 [filesPage.sort]
 modifiedAsc = "由舊到新"
 modifiedDesc = "最近優先"
@@ -4168,6 +4230,7 @@ noFilesInStorageOpen = "儲存空間中沒有可用檔案。請先開啟一些
 open = "開啟"
 openFile = "開啟檔案"
 openFiles = "開啟多個檔案"
+selectFile = "Select {{name}}"
 selectFromStorage = "從儲存空間選取"
 upload = "上傳"
 uploadFile = "上傳檔案"
@@ -4241,9 +4304,14 @@ issues = "GitHub"
 
 [formFill]
 allSaved = "全部已儲存"
+analyzingFields = "Analysing form fields..."
 extractCsvError = "擷取 CSV 失敗"
 extractXlsxError = "擷取 XLSX 失敗"
+filled = "filled"
 flattenAfterFilling = "填寫後扁平化"
+noFields = "No fillable form fields found in this PDF."
+placeholderEnter = "Enter"
+placeholderSelect = "Select"
 requiredAbbreviation = "必填"
 requiredFieldsError = "請填寫所有必填欄位"
 rescanFields = "重新掃描欄位"
@@ -4795,9 +4863,6 @@ title = "圖片轉 PDF"
 [imageToPdf]
 tags = "轉換,img,jpg,圖片,照片"
 
-[infoBanner]
-dismiss = "關閉"
-
 [invite]
 acceptError = "建立帳號失敗"
 accountFor = "正在為以下對象建立帳號："
@@ -4979,6 +5044,34 @@ uploadSuccess = "上傳成功！"
 uploadSuccessMessage = "您的影像已傳送完成。"
 validating = "正在驗證工作階段…"
 
+[mobileSign]
+clear = "Clear"
+invalidSession = "Session expired"
+invalidSessionMessage = "This QR code is no longer valid. Open the Sign tool on your computer and scan the new code."
+penSizeLabel = "Pen size"
+send = "Send to computer"
+sendAnother = "Send another signature"
+sendError = "Could not send the signature. Check the connection and try again."
+sentMessage = "Signature sent to your computer. You can send another or close this page."
+tabsLabel = "Signature source"
+undo = "Undo"
+validating = "Checking session…"
+
+[mobileSign.photo]
+fromGallery = "From gallery"
+hint = "Photograph a signature on white paper, or choose an existing image."
+invalidType = "Please choose an image file."
+takePhoto = "Take a photo"
+
+[mobileSign.tab]
+draw = "Draw"
+photo = "Photo"
+type = "Type"
+
+[mobileSign.type]
+placeholder = "Your name"
+previewPlaceholder = "Signature preview"
+
 [mobileUpload]
 description = "掃描即可上傳相片。影像會自動轉換為 PDF。"
 descriptionNoConvert = "掃描即可從行動裝置上傳相片。"
@@ -4997,8 +5090,13 @@ title = "從行動裝置上傳"
 tags = "複合工具,多功能,UI,點選拖曳,前端,客戶端,互動,互動式,移動"
 title = "PDF 複合工具"
 
-[navbar]
-search = "搜尋"
+[navFooter]
+openEditor = "Open PDF Editor"
+openProcessor = "Open PDF Processor"
+
+[navFooter.credits]
+count = "{{remaining}} of {{total}}"
+label = "Free credits"
 
 [oauth.error]
 message = "驗證未成功。您可以關閉此視窗後再試一次。"
@@ -5127,6 +5225,7 @@ activeFiles = "<strong>使用中檔案</strong> 檢視會顯示您載入工具
 allTools = "This is the <strong>All Tools</strong> panel, where you can browse and select from all available PDF tools."
 close = "關閉"
 cropSettings = "選好要裁切的檔案後，我們可以設定裁切工具，選擇要裁切的區域。"
+dialogLabel = "Onboarding"
 fileCheckbox = "點選其中一個檔案即可將其選取以進行處理。您可以選取多個檔案以批次操作。"
 fileReplacement = "修改後的檔案會自動在工作區取代原檔，讓您能輕鬆再用其他工具處理。"
 filesButton = "快速存取列上的 <strong>檔案</strong> 按鈕可讓您上傳 PDF 以使用各種工具。"
@@ -5563,6 +5662,7 @@ freeBody = "View, edit, merge, split, sign, watermark, compress, convert and man
 freeTitle = "Unlimited PDF editing"
 
 [payg.free.hero]
+barAria = "Free PDFs remaining"
 capSuffix = "/ {{limit}} free PDFs"
 metaCategories = "Automation · AI · API requests"
 
@@ -5642,6 +5742,7 @@ automation = "automations"
 default = "this feature"
 
 [payg.spendCapMeter]
+barAria = "Spend against cap"
 capSuffix = "/ {{amount}} cap"
 metaCategories = "Automation · AI · API spend"
 resets = "Resets each billing period"
@@ -5970,6 +6071,11 @@ header = "PDF 轉 PDF/A"
 tags = "存檔,長期,標準,轉換,儲存,儲存"
 title = "PDF 轉 PDF/A"
 
+[pdfToPDFUA]
+header = "PDF To PDF/UA"
+tags = "accessibility,accessible,tagged,screen reader,wcag,eaa,section 508,conversion"
+title = "PDF To PDF/UA"
+
 [pdfToPDFX]
 tags = "列印,標準,轉換,製作,印前,封存"
 title = "PDF 轉為 PDF/X"
@@ -6045,6 +6151,7 @@ small = "500 點"
 xsmall = "100 點"
 
 [plan.availablePlans]
+currency = "Billing currency"
 subtitle = "選擇符合您需求的方案"
 title = "可用方案"
 
@@ -6624,6 +6731,7 @@ reachedTitle = "已達每月支出限制"
 title = "無法開啟 Stripe 入口網站"
 
 [portal.billing.walletMeter]
+barAria = "Free PDFs remaining"
 capSuffix_one = "已使用 {{allowance}} 個免費 PDFs"
 capSuffix_other = "已使用 {{allowance}} 個免費 PDFs"
 eyebrow = "Processor 試用"
@@ -6873,6 +6981,32 @@ label = "Jira"
 description = "當 policy 執行時，透過 Email 傳送文件或通知。"
 label = "Mailgun"
 
+[portal.connections.types.n8n]
+baseUrlPlaceholder = "https://your-n8n/webhook/9f2c-..."
+description = "Hand documents to an n8n workflow, and take back whatever it produces."
+label = "n8n"
+
+[portal.connections.types.n8n.fields.authType]
+helperText = "Match the Authentication set on the n8n Webhook node."
+label = "Webhook authentication"
+
+[portal.connections.types.n8n.fields.authType.options.basic]
+label = "Basic auth"
+
+[portal.connections.types.n8n.fields.authType.options.header]
+label = "Header auth"
+
+[portal.connections.types.n8n.fields.authType.options.none]
+label = "None"
+
+[portal.connections.types.n8n.fields.headerName]
+helperText = "The header name from the n8n credential, not its value."
+label = "Header name"
+placeholder = "X-N8N-Key"
+
+[portal.connections.types.n8n.fields.token]
+label = "Header value"
+
 [portal.connections.types.nextcloud]
 baseUrlPlaceholder = "https://your-server/remote.php/dav"
 description = "將處理後的文件存入 Nextcloud。"
@@ -7077,11 +7211,6 @@ title = "官方 SDKs"
 beta = "Beta"
 deprecated = "已淘汰"
 
-[portal.docs.search]
-empty = "沒有相符文件"
-placeholder = "搜尋文件"
-results = "{{count}} 個結果"
-
 [portal.docs.skills]
 eyebrow = "SKILLS"
 lead = "代理程式以單一工具呼叫的內建命名能力。每項 skill 都是附有 evals 的確定性操作鏈。"
@@ -7180,11 +7309,11 @@ editorAction = "編輯器"
 empty = "沒有符合此篩選條件的文件。"
 rowActions = "列動作"
 sensitiveLabel = "敏感"
-sensitiveTitle = "敏感 — 需要存取權"
 
 [portal.documents.table.columns]
 action = "管線 / 動作"
 document = "文件"
+labels = "Labels"
 product = "產品"
 status = "狀態"
 time = "時間"
@@ -7200,6 +7329,7 @@ host = "主機"
 lastSeen = "上次出現"
 region = "區域"
 status = "狀態"
+target = "Target"
 version = "版本"
 
 [portal.editorAdmin.health.empty]
@@ -7274,6 +7404,56 @@ description = "此檢視發生未預期的錯誤。請再試一次，或從側
 retry = "再試一次"
 title = "此頁面發生問題"
 
+[portal.failures]
+fromSource = "From source {{source}}"
+occurrences = "{{count}} occurrences"
+reportedBy = "Hit by {{actor}}"
+runReference = "Run {{runId}}"
+subtitle = "Failures recorded from your policy runs and your team's editors, with the actions you can take."
+title = "Failures"
+
+[portal.failures.action]
+acknowledge = "Acknowledge"
+confirm = "Are you sure?"
+dismiss = "Dismiss"
+dismissSkipFile = "Skip this file"
+
+[portal.failures.debug]
+copyJson = "Copy JSON"
+dismissAll = "Dismiss all ({{total}})"
+dismissing = "Dismissing..."
+hideJson = "Hide raw JSON ({{total}})"
+refresh = "Refresh failures"
+showJson = "Show raw JSON ({{total}})"
+
+[portal.failures.disabled]
+closed = "This failure is already closed."
+unavailable = "Not available for this failure."
+
+[portal.failures.empty]
+description = "Policy runs that fail will appear here with the actions you can take."
+title = "No failures recorded"
+
+[portal.failures.kind.inputPasswordProtected]
+description = "The pipeline could not open the document because it is password-protected. Unlock it and run it again, or skip this file."
+title = "Password-protected document"
+
+[portal.failures.kind.unknown]
+description = "This run failed for a reason Stirling does not yet recognise. The raw message is shown below."
+title = "Unrecognised failure"
+
+[portal.failures.origin]
+pipeline = "Pipeline"
+policy = "Policy"
+tool = "Tool run"
+
+[portal.failures.stage]
+blocked = "Blocked"
+input = "Input"
+internal = "Internal"
+never_ran = "Never ran"
+output = "Output"
+
 [portal.home.download]
 back = "返回"
 body = "下載桌面應用程式或自架伺服器。"
@@ -7380,11 +7560,6 @@ cancel = "取消"
 confirm = "撤銷金鑰"
 title = "撤銷 API 金鑰"
 
-[portal.infrastructure.attestationLabel]
-attested = "已證明"
-inScope = "範圍內"
-notApplicable = "N/A"
-
 [portal.infrastructure.audit]
 filterAriaLabel = "依類別篩選稽核事件"
 heading = "稽核記錄"
@@ -7456,11 +7631,6 @@ info = "資訊"
 success = "成功"
 warning = "警告"
 
-[portal.infrastructure.certLabel]
-certified = "已認證"
-inProgress = "進行中"
-notStarted = "尚未開始"
-
 [portal.infrastructure.createKey]
 cancel = "取消"
 createKey = "建立金鑰"
@@ -7474,238 +7644,10 @@ subtitleCreated = "立即複製此秘密 — 之後不會再顯示。"
 title = "建立 API 金鑰"
 titleCreated = "金鑰已建立"
 
-[portal.infrastructure.deployLabel]
-live = "上線"
-queued = "已排隊"
-rolledBack = "已復原"
-rolling = "推出中"
-
-[portal.infrastructure.deployments]
-msValue = "{{value}} ms"
-throughputValue = "{{value}}/min"
-
-[portal.infrastructure.deployments.deployColumns]
-deployedBy = "部署者"
-environment = "環境"
-product = "產品"
-status = "狀態"
-version = "版本"
-when = "時間"
-
-[portal.infrastructure.deployments.recent]
-heading = "最近部署"
-subheading = "各產品與環境的最新推出。"
-
-[portal.infrastructure.deployments.regionColumns]
-instances = "執行個體"
-latency = "延遲"
-load = "負載"
-p99 = "P99"
-region = "區域"
-status = "狀態"
-throughput = "輸送量"
-uptime = "正常運作時間"
-version = "版本"
-
-[portal.infrastructure.deployments.regions]
-heading = "區域"
-subheading = "每個已部署 Stirling 區域的即時健康狀態 — 延遲、負載與推出版本。"
-
-[portal.infrastructure.deployments.regions.empty]
-description = "工作區佈建後，已部署區域會顯示在這裡。"
-title = "尚未部署區域"
-
 [portal.infrastructure.keyLabel]
 active = "啟用"
 revoked = "已撤銷"
 
-[portal.infrastructure.modelLabel]
-active = "啟用"
-degraded = "效能降低"
-disabled = "已停用"
-
-[portal.infrastructure.models]
-heading = "模型"
-msValue = "{{value}} ms"
-subheading = "支援您工作區文件處理的模型目錄與路由。"
-
-[portal.infrastructure.models.byom]
-description = "註冊 on-prem 或自託管模型，並將其固定到某個區域，以進行受資料駐留限制的處理。"
-title = "帶入您自己的模型"
-
-[portal.infrastructure.models.catalogue]
-heading = "目錄"
-sub = "工作區可用的代管模型，包含即時延遲與成本。"
-subEnterprise = "代管、自備與 on-prem 模型 — 可使用按區域固定。"
-
-[portal.infrastructure.models.catalogue.empty]
-description = "工作區目錄中的模型會顯示在這裡。"
-title = "沒有可用模型"
-
-[portal.infrastructure.models.columns]
-cost = "成本"
-latency = "延遲"
-load = "負載"
-model = "模型"
-status = "狀態"
-type = "類型"
-version = "版本"
-
-[portal.infrastructure.models.cost]
-perCall = "{{price}}/次呼叫"
-perThousand = "{{price}}/1k"
-
-[portal.infrastructure.models.metrics]
-activeModels = "活躍模型"
-avgLatency = "平均延遲"
-included = "已包含"
-monthlySpend = "每月模型支出"
-
-[portal.infrastructure.models.routing]
-empty = "未設定路由規則。"
-heading = "路由規則"
-sub = "哪個模型處理每個操作。沒有符合更精確規則時會套用預設值。"
-subLocked = "將操作路由到特定模型 — 付費方案可用。"
-
-[portal.infrastructure.models.routing.lockedBanner]
-description = "升級到 Pro 以控制每個操作和文件類型由哪個模型處理。"
-title = "模型路由是付費功能"
-
-[portal.infrastructure.models.routingColumns]
-default = "預設"
-docType = "文件類型"
-modelForAria = "{{operation}} 的模型"
-operation = "操作"
-routedTo = "路由至"
-
-[portal.infrastructure.modelTypeLabel]
-classification = "分類"
-extraction = "擷取"
-llm = "LLM"
-ocr = "OCR"
-
-[portal.infrastructure.regionLabel]
-degraded = "效能降低"
-down = "停止運作"
-healthy = "健全"
-
-[portal.infrastructure.security.access.byok]
-description = "提供來自您自己 KMS 的金鑰。Stirling 會使用它加密，但仍可讀取。"
-label = "帶入您自己的金鑰 (BYOK)"
-
-[portal.infrastructure.security.access.hyok]
-description = "金鑰永不離開您的 KMS。Stirling 只持有密文。"
-label = "保留您自己的金鑰 (HYOK)"
-
-[portal.infrastructure.security.access.stirling]
-description = "Stirling 管理加密金鑰。最簡單 — 您這邊無需金鑰操作。"
-label = "Stirling 持有的金鑰"
-
-[portal.infrastructure.security.accessPolicy]
-heading = "文件存取政策"
-subheading = "控制誰可以解密靜態儲存的已處理文件。"
-
-[portal.infrastructure.security.attestations]
-heading = "合規性證明"
-noReport = "沒有可用報告"
-subheading = "逐框架的稽核狀態，並提供已證明控制項的報告。"
-viewReport = "檢視報告 →"
-
-[portal.infrastructure.security.compliance]
-heading = "合規性"
-subheading = "涵蓋 Stirling 平台的證明與認證。"
-
-[portal.infrastructure.security.empty]
-description = "工作區的安全性設定會顯示在這裡。"
-title = "安全狀態無法使用"
-
-[portal.infrastructure.security.hyokBanner]
-description = "使用 HYOK 時，加密金鑰永不離開您的 KMS。Stirling 只儲存和處理您可隨時撤銷的密文。"
-title = "Stirling 無法解密您的文件"
-
-[portal.infrastructure.security.ipAllowlist]
-empty = "未設定 IP 範圍 — 允許所有 IP。"
-heading = "IP 允許清單"
-sub = "API 存取僅限於這些 CIDR 範圍。"
-subLocked = "將 API 存取限制為已知 IP 範圍 — 付費方案可用。"
-
-[portal.infrastructure.security.ipAllowlist.lockedBanner]
-description = "升級到 Pro 以將 API 存取限制為特定網路。"
-title = "IP 允許清單是付費功能"
-
-[portal.infrastructure.security.ipColumns]
-added = "已新增"
-addedBy = "新增者"
-cidr = "CIDR"
-label = "標籤"
-
-[portal.infrastructure.security.keyManagement]
-algorithm = "演算法"
-heading = "加密金鑰管理"
-keyId = "金鑰識別碼"
-lastRotated = "上次輪換"
-rotateKey = "輪換金鑰"
-rotationPolicy = "輪換政策"
-subheading = "加密靜態儲存文件的金鑰保管 — 誰可以解密，以及金鑰如何輪換。"
-
-[portal.infrastructure.security.managedBanner]
-description = "帶入您自己的金鑰 (BYOK) 和保留您自己的金鑰 (HYOK) 保管可於 Enterprise 使用。升級以提供來自您自己 KMS 的金鑰。"
-title = "在您的方案中，金鑰由 Stirling 管理"
-
-[portal.infrastructure.security.residency.apac]
-description = "ap-southeast-1"
-label = "亞太地區"
-
-[portal.infrastructure.security.residency.eu]
-description = "eu-west-1 · GDPR 資料邊界"
-label = "歐盟"
-
-[portal.infrastructure.security.residency.us]
-description = "us-east-1 · us-west-2"
-label = "美國"
-
-[portal.infrastructure.security.residencyHeader]
-heading = "資料駐留"
-subheading = "文件儲存與處理的位置。"
-
-[portal.infrastructure.storage]
-gbValue = "{{value}} GB"
-percentUsed = "已使用 {{value}}"
-
-[portal.infrastructure.storage.empty]
-description = "已連接的儲存空間和用量會顯示在這裡。"
-title = "未設定儲存空間"
-
-[portal.infrastructure.storage.lifecycle]
-active = "啟用中"
-activeRange = "0–{{value}}d"
-archived = "已封存"
-coldStorage = "冷儲存"
-deleted = "已刪除"
-never = "永不"
-purged = "已清除"
-
-[portal.infrastructure.storage.providers]
-connect = "連接"
-connected = "已連接"
-heading = "已連接提供者"
-subheading = "已處理成品寫入的位置。"
-
-[portal.infrastructure.storage.retention]
-heading = "保留"
-subheading = "成品在生命週期刪除前保留的時間。"
-windowLabel = "預設保留期間"
-
-[portal.infrastructure.storage.retentionOption]
-days_one = "{{count}} 天"
-days_other = "{{count}} 天"
-never = "永不刪除"
-
-[portal.infrastructure.storage.totalUsage]
-heading = "總用量"
-progressLabel = "已使用儲存空間"
-subheading = "所有已連接提供者消耗的儲存空間。"
-
 [portal.infrastructure.tabs]
 apiKeys = "API 金鑰"
 audit = "稽核記錄"
@@ -7715,11 +7657,9 @@ security = "安全性"
 storage = "儲存空間"
 
 [portal.integrations]
-addAnother = "新增另一個"
 availableHeading = "可用"
 comingSoonHeading = "即將推出"
 connect = "連線"
-connectedHeading = "已連線"
 connectionCount_one = "{{count}} 個連線"
 connectionCount_other = "{{count}} 個連線"
 customApi = "自訂 API"
@@ -7737,6 +7677,10 @@ security = "安全性"
 signing = "簽署"
 storage = "儲存"
 
+[portal.integrations.noResults]
+description = "No integrations match your filters. Try a different category or search."
+title = "No matches"
+
 [portal.integrations.status]
 connected = "已連線"
 
@@ -7767,7 +7711,6 @@ integrations = "整合"
 pipelines = "管線"
 policies = "政策"
 procurement = "採購"
-settings = "設定"
 sources = "來源"
 usage = "用量與帳單"
 users = "使用者"
@@ -7784,7 +7727,7 @@ title = "管線"
 newPipeline = "新增管線"
 
 [portal.pipelines.builder]
-addStep = "新增工具"
+activate = "Activate"
 back = "返回管線"
 cannotFollow = "無法接收 {{produced}}"
 chooseAccount = "選擇帳戶"
@@ -7792,28 +7735,38 @@ chooseDestination = "選擇目的地"
 chooseOperation = "選擇此步驟的作用"
 chooseSource = "選擇來源"
 discard = "捨棄變更"
-enabled = "已啟用"
 inputs = "輸入"
 inputSource = "輸入來源"
 inputTrigger = "觸發器"
 keepEditing = "繼續編輯"
+moreActions = "More actions"
 needsConfiguring = "需要設定"
-needsUpload = "需要上傳的檔案"
-noSources = "尚未連線任何來源。建立一個來源以作為輸入。"
+needsDestination = "No destination chosen"
+needsSource = "No source chosen"
 noToolMatches = "沒有工具符合您的搜尋。"
-pipelineSettings = "管線設定"
+pause = "Pause"
+rename = "Rename pipeline"
 searchTools = "搜尋工具"
-selectToolBody = "新增工具以建立您的管線。"
-selectToolTitle = "尚無工具"
 sendToSystem = "傳送到另一個系統"
 stepsIncompatible = "這些步驟無法在其前一步產生的內容上執行：{{tools}}。"
 stepsNeedSetup = "儲存前仍需設定這些步驟：{{tools}}。"
-toolSettings = "工具設定"
+supportingFiles = "Supporting files"
+testRun = "Test with a file"
 unknownStep = "無法辨識的操作，已原樣保留。"
 unsavedBody = "您有未儲存的變更。離開前要儲存，還是捨棄？"
 unsavedTitle = "未儲存的變更"
-uploadUnsupported = "管線尚不支援上傳的檔案，因此無法儲存這些步驟：{{tools}}。"
 usesDefaults = "使用預設設定執行"
+viewDefinition = "View definition"
+
+[portal.pipelines.builder.blocker]
+destination = "Choose a destination"
+heading = "To create this pipeline:"
+incompatible = "Fix steps that can't run in order: {{tools}}"
+name = "Give the pipeline a name"
+saveHeading = "To save your changes:"
+schedule = "Set how often it runs"
+setup = "Finish setting up: {{tools}}"
+source = "Choose an input source"
 
 [portal.pipelines.builder.diagnostic]
 fan-in = "合併前一步的每個檔案"
@@ -7825,31 +7778,36 @@ undeclared-operation = "無法檢查此步驟接受的內容"
 
 [portal.pipelines.composer]
 addTool = "新增工具"
-cancel = "取消"
-chainEmpty = "新增工具以開始建立您的管線。"
 create = "建立管線"
+createPaused = "Create paused"
 editingUnsupported = "尚不支援顯示這些工具參數進行編輯。"
-moveDown = "下移"
-moveUp = "上移"
+editSource = "Edit source"
 name = "名稱"
 namePlaceholder = "例如：Redaction sweep"
 noToolSettings = "此工具沒有可設定的選項。"
-operations_one = "操作（{{count}}）"
-operations_other = "操作（{{count}}）"
 output = "輸出"
-removeStep = "移除操作"
 save = "儲存變更"
 scheduleEvery = "執行間隔"
-sources = "來源"
-sourcesLoading = "正在載入來源..."
 trigger = "觸發器"
 triggerManual = "僅手動"
 
+[portal.pipelines.composer.runsEvery]
+days_one = "Runs every day"
+days_other = "Runs every {{count}} days"
+hours_one = "Runs every hour"
+hours_other = "Runs every {{count}} hours"
+minutes_one = "Runs every minute"
+minutes_other = "Runs every {{count}} minutes"
+
 [portal.pipelines.composer.unit]
 days = "天"
 hours = "小時"
 minutes = "分鐘"
 
+[portal.pipelines.definition]
+subtitle = "The pipeline as it would be saved."
+title = "Definition"
+
 [portal.pipelines.delete]
 body = "要刪除 \"{{name}}\" 嗎？此操作無法復原。"
 cancel = "取消"
@@ -7867,6 +7825,37 @@ connectSource = "連線來源"
 description = "建立您的第一個管線：選擇執行來源、串接操作，並選擇輸出位置。"
 title = "尚無管線"
 
+[portal.pipelines.graph]
+addFirstTool = "Add a tool"
+dragHint = "Drop on a line to move it"
+insertHere = "Add a tool here"
+removeNode = "Remove {{name}}"
+showError = "Show why {{name}} failed"
+
+[portal.pipelines.graph.add]
+input = "Add a source"
+output = "Add a destination"
+
+[portal.pipelines.graph.run]
+done = "Done"
+failed = "Failed"
+running = "Running"
+
+[portal.pipelines.inspector]
+multipleBody = "Drag any of them onto a line to move them together, or press Delete to remove them."
+multipleSelected_one = "{{count}} step selected"
+multipleSelected_other = "{{count}} steps selected"
+noSelectionBody = "Pick a node in the graph to change what it does."
+noSelectionTitle = "Nothing selected"
+
+[portal.pipelines.inspector.status]
+completed_one = "Finished the only step"
+completed_other = "Finished all {{count}} steps"
+failed_one = "Failed on the only step"
+failed_other = "Failed after {{done}} of {{count}} steps"
+running_one = "Running the only step"
+running_other = "Running step {{done}} of {{count}}"
+
 [portal.pipelines.kpi]
 active = "啟用中"
 paused = "已暫停"
@@ -7879,7 +7868,6 @@ completed_one = "執行已完成。"
 completed_other = "全部 {{count}} 次執行已完成。"
 empty = "沒有可執行的內容：來源沒有要處理的文件。"
 failed = "執行失敗：{{error}}"
-historyCleared = "歷程記錄已清除。下次執行會重新處理目前來源中的所有項目。"
 inFlight = "沒有新項目可執行：文件仍在從先前的執行中處理。"
 parked_one = "沒有可執行項目：{{count}} 份文件先前失敗且已暫停。修正原因後，清除歷程記錄以重試。"
 parked_other = "沒有可執行項目：{{count}} 份文件先前失敗且已暫停。修正原因後，清除歷程記錄以重試。"
@@ -7895,6 +7883,7 @@ name = "管線"
 sources = "來源"
 status = "狀態"
 steps = "步驟"
+trigger = "Trigger"
 
 [portal.pipelines.trigger]
 folder-watch = "資料夾監看"
@@ -8209,6 +8198,24 @@ label = "附加到 Jira 議題"
 description = "將處理後的文件作為附件傳送。"
 label = "以電子郵件傳送文件（Mailgun）"
 
+[portal.policies.operations.n8nGate]
+description = "Your workflow decides whether the run carries on."
+label = "Ask an n8n workflow to approve"
+note = "The workflow must reply with {\"approved\": true}. Anything else — including a timeout — stops the run and parks the document."
+
+[portal.policies.operations.n8nNotify]
+description = "Sends the run's details, not the document."
+label = "Tell an n8n workflow"
+
+[portal.policies.operations.n8nSend]
+description = "Sends the document and the run's details to your workflow."
+label = "Send the document to n8n"
+
+[portal.policies.operations.n8nTransform]
+description = "Your workflow processes the document and the file it returns replaces it."
+label = "Process the document in n8n"
+note = "Set the Webhook node to respond \"Using Respond to Webhook Node\", and return a file. On the default \"Immediately\" setting n8n replies with an acknowledgement, and that would replace the document."
+
 [portal.policies.operations.nextcloudUpload]
 description = "將處理後的文件寫入資料夾。"
 label = "上傳到 Nextcloud"
@@ -8683,16 +8690,6 @@ maxed = "已達上限"
 subtitle = "您的免費試用持續到 {{date}}。不需要卡片。"
 title = "Enterprise 試用"
 
-[portal.search]
-ariaLabel = "搜尋"
-placeholder = "搜尋 Stirling — endpoints、pipelines、文件…"
-
-[portal.search.empty]
-noActionsDescription = "快速動作可用後會顯示在這裡。"
-noActionsTitle = "沒有快速動作"
-noMatches = "找不到「{{query}}」的相符項目"
-noMatchesDescription = "請嘗試不同關鍵字或瀏覽目錄。"
-
 [portal.settings.groups]
 admin = "管理員"
 
@@ -8743,10 +8740,6 @@ cancel = "取消"
 confirm = "刪除"
 title = "刪除來源？"
 
-[portal.sources.empty]
-description = "連接資料夾（雲端儲存即將推出），讓您的政策有地方擷取文件。"
-title = "尚未連接任何來源"
-
 [portal.sources.kpi]
 inUse = "使用中"
 total = "連線"
@@ -8785,6 +8778,7 @@ unused = "未使用"
 documents = "文件"
 source = "來源"
 status = "狀態"
+type = "Type"
 usedBy = "政策"
 
 [portal.sources.types.box]
@@ -9980,9 +9974,6 @@ title = "政策與隱私"
 [settings.preferences]
 title = "偏好設定"
 
-[settings.search]
-placeholder = "搜尋設定頁面..."
-
 [settings.security]
 description = "更新您的密碼以保護帳號安全。"
 title = "安全性"
@@ -10128,6 +10119,7 @@ last = "最後一頁"
 maintainRatio = "切換維持長寬比"
 next = "下一頁"
 noSavedSigs = "尚未儲存任何簽章"
+penSizePlaceholder = "Type or select pen size (1-200)"
 personalSigs = "個人簽章"
 previous = "上一頁"
 redo = "重做"
@@ -10166,6 +10158,7 @@ backgroundRemovalFailedTitle = "背景移除失敗"
 hint = "上傳您的簽名 PNG 或 JPG 影像"
 label = "上傳簽名影像"
 placeholder = "選擇影像檔"
+previewAlt = "Current image signature"
 processing = "正在處理影像…"
 removeBackground = "移除白色背景（設為透明）"
 
@@ -10179,6 +10172,17 @@ saved = "在上方選擇已儲存的簽名，然後在 PDF 任意位置點選以
 text = "在上方輸入您的姓名後，於 PDF 任意位置點選以放置簽名。"
 title = "如何加入簽名"
 
+[sign.mobile]
+createFromPhone = "Mobile upload"
+description = "Scan this QR code with your phone or tablet, draw your signature, and it will appear here automatically."
+error = "Connection Error"
+expiryWarning = "QR Code Expiring Soon"
+expiryWarningMessage = "This QR code will expire in {{seconds}} seconds. A new code will be generated automatically."
+instructions = "Open the camera app on your phone and scan this code. Keep this window open while you draw."
+pollingError = "Error checking for the signature"
+sessionCreateError = "Failed to create session"
+title = "Draw on your phone"
+
 [sign.mode]
 move = "移動簽名"
 pause = "暫停放置"
@@ -10625,6 +10629,23 @@ title = "上傳至伺服器"
 updateButton = "更新至伺服器"
 uploadButton = "上傳至伺服器"
 
+[superSearch]
+all = "All"
+ariaLabel = "Super search"
+filtersAriaLabel = "Search filters"
+hint = "Type to search"
+placeholder = "Search Stirling"
+showLess = "Show less"
+showMore = "Show {{count}} more"
+
+[superSearch.group]
+docs = "Docs"
+files = "Files"
+pages = "Pages"
+processor = "Processor"
+settings = "Settings"
+tools = "Tools"
+
 [survey]
 title = "Stirling-PDF Survey"
 
@@ -10774,7 +10795,6 @@ goBack = "返回"
 pdfTools = "PDF 工具"
 placeholder = "選擇一個工具以開始"
 premiumFeature = "進階功能："
-searchTools = "搜尋工具"
 toolsHeader = "工具"
 viewAllTools = "檢視所有工具"
 
@@ -10822,6 +10842,9 @@ removal = "移除"
 signing = "簽章"
 verification = "驗證"
 
+[toolRenderer]
+notFound = "Tool not found: {{tool}}"
+
 [tools]
 noSearchResults = "找不到工具"
 noTools = "沒有可用的工具"
@@ -10979,6 +11002,13 @@ approver = "核准政策"
 editor = "編輯器"
 processor = "處理器"
 
+[users.columns]
+capabilities = "Capabilities"
+email = "Email"
+person = "Person"
+role = "Role"
+status = "Status"
+
 [users.confirm]
 cancelInviteBody = "要取消對 {{email}} 的邀請嗎？他們將無法使用目前的連結加入。"
 cancelInviteTitle = "取消邀請"
@@ -10998,10 +11028,8 @@ title = "尚無成員"
 addToTeam = "新增至團隊"
 guestCount = "{{count}} 位訪客"
 guests = "訪客"
-guestsDesc = "外部協作者，範圍限於您分享的內容。僅限編輯器。"
 ledBy = "由 {{owner}} 領導"
 org = "組織"
-orgDesc = "擁有組織範圍權限與政策核准權的擁有者"
 owners = "{{count}} 位擁有者"
 team = "{{name}} 團隊"
 teamMeta = "{{count}} 人"
@@ -11041,13 +11069,15 @@ usernamePlaceholder = "jsmith"
 [users.invites]
 by = "由 {{who}} 邀請"
 cancel = "取消"
-count = "{{count}} 個待處理"
-desc = "已受邀但尚未加入的人員。在他們接受前會佔用一個席位。"
 expiresInDays_one = "{{count}} 天後到期"
 expiresInDays_other = "{{count}} 天後到期"
 expiresToday = "今天到期"
 title = "待處理邀請"
 
+[users.invites.columns]
+expires = "Expires"
+invitee = "Invitee"
+
 [users.loadError]
 description = "連線至後端時發生錯誤，或您沒有存取權限。請再試一次。"
 title = "無法載入成員"
@@ -11237,12 +11267,15 @@ searchPlaceholder = "搜尋附件"
 title = "附件"
 
 [viewer.bookmarks]
+addBookmark = "Add bookmark"
 bookmarkTitle = "書籤標題"
 bookmarkTitleRequired = "必須輸入書籤標題"
 closeSidebar = "關閉書籤側邊欄"
 collapseAll = "收合所有書籤"
+empty = "No bookmarks in this document"
 expandAll = "展開所有書籤"
 searchPlaceholder = "搜尋書籤"
+title = "Bookmarks"
 
 [viewer.comments]
 addComment = "新增評論"
@@ -11264,10 +11297,12 @@ locateAnnotation = "在文件中定位"
 moreActions = "更多動作"
 nComments_one = "{{count}} comment"
 nComments_other = "{{count}} comments"
+noMatch = "No comments match your search"
 pageLabel = "第 {{page}} 頁"
 placingHint = "按一下頁面以放置…（取消）"
 removeCommentOnly = "僅移除評論"
 saveReply = "儲存回覆"
+searchPlaceholder = "Search comments"
 title = "評論"
 typeComment = "評論"
 typeInsertText = "插入文字"
@@ -11290,6 +11325,7 @@ unsavedDesc = "您有未儲存的變更"
 closeSidebar = "關閉圖層側邊欄"
 hideAll = "隱藏所有圖層"
 showAll = "顯示所有圖層"
+title = "Layers"
 
 [viewer.link]
 delete = "刪除連結"
@@ -11646,6 +11682,7 @@ exitRedaction = "離開遮蔽模式"
 exportAll = "匯出 PDF"
 exportSelected = "匯出所選頁面"
 formFill = "填寫表單"
+hideToolbar = "Hide toolbar"
 multiTool = "多功能工具"
 panMode = "平移模式"
 print = "列印 PDF"
@@ -11666,6 +11703,7 @@ selectAll = "全選"
 selectByNumber = "依頁碼選取"
 selectLanguage = "選擇語言"
 share = "分享"
+showToolbar = "Show toolbar"
 toggleAnnotations = "切換註解顯示"
 toggleAttachments = "切換附件"
 toggleBookmarks = "切換書籤"
diff --git a/frontend/editor/public/og-metadata.json b/frontend/editor/public/og-metadata.json
index f9733bd83f..7608a1d315 100644
--- a/frontend/editor/public/og-metadata.json
+++ b/frontend/editor/public/og-metadata.json
@@ -195,6 +195,11 @@
       "title": "Compress - Stirling PDF",
       "description": "Compress PDFs to reduce their file size."
     },
+    "classify": {
+      "image": "/og_images/home.png",
+      "title": "Classify - Stirling PDF",
+      "description": "Identify what kind of document this is and tag it."
+    },
     "extractPages": {
       "image": "/og_images/extract-pages.png",
       "title": "Extract Pages - Stirling PDF",
@@ -267,8 +272,8 @@
     },
     "formFill": {
       "image": "/og_images/form-fill.png",
-      "title": "Fill Form - Stirling PDF",
-      "description": "Fill PDF form fields interactively with a visual editor"
+      "title": "Form Editor - Stirling PDF",
+      "description": "Fill, create, edit, and delete PDF form fields with a visual editor"
     },
     "multiTool": {
       "image": "/og_images/multi-tool.png",
@@ -575,6 +580,7 @@
     "/remove-cert-sign": "removeCertSign",
     "/unlock-p-d-f-forms": "unlockPDFForms",
     "/compress": "compress",
+    "/classify": "classify",
     "/extract-pages": "extractPages",
     "/reorganize-pages": "reorganizePages",
     "/extract-images": "extractImages",
diff --git a/frontend/editor/public/og-metadata.saas.json b/frontend/editor/public/og-metadata.saas.json
index be2e7a3e92..fff936752f 100644
--- a/frontend/editor/public/og-metadata.saas.json
+++ b/frontend/editor/public/og-metadata.saas.json
@@ -196,6 +196,11 @@
       "title": "Compress - Stirling PDF",
       "description": "Compress PDFs to reduce their file size."
     },
+    "classify": {
+      "image": "/og_images/home.png",
+      "title": "Classify - Stirling PDF",
+      "description": "Identify what kind of document this is and tag it."
+    },
     "extractPages": {
       "image": "/og_images/extract-pages.png",
       "title": "Extract Pages - Stirling PDF",
@@ -268,8 +273,8 @@
     },
     "formFill": {
       "image": "/og_images/form-fill.png",
-      "title": "Fill Form - Stirling PDF",
-      "description": "Fill PDF form fields interactively with a visual editor"
+      "title": "Form Editor - Stirling PDF",
+      "description": "Fill, create, edit, and delete PDF form fields with a visual editor"
     },
     "multiTool": {
       "image": "/og_images/multi-tool.png",
@@ -588,6 +593,7 @@
     "/remove-cert-sign": "removeCertSign",
     "/unlock-p-d-f-forms": "unlockPDFForms",
     "/compress": "compress",
+    "/classify": "classify",
     "/extract-pages": "extractPages",
     "/reorganize-pages": "reorganizePages",
     "/extract-images": "extractImages",
diff --git a/frontend/editor/scripts/generate-tool-api-types.mts b/frontend/editor/scripts/generate-tool-api-types.mts
index d5990096af..ec38dc37d7 100644
--- a/frontend/editor/scripts/generate-tool-api-types.mts
+++ b/frontend/editor/scripts/generate-tool-api-types.mts
@@ -10,15 +10,9 @@ import { readFileSync, writeFileSync, mkdirSync } from "node:fs";
 import { dirname, resolve } from "node:path";
 import { parseArgs } from "node:util";
 import { compile, type JSONSchema } from "json-schema-to-typescript";
-import * as prettier from "prettier";
 
-// The API namespaces whose endpoints a pipeline can reference. `/api/v1/ai/tools/`
-// is absent from the spec, so it cannot appear here. Extend this list when other
-// namespaces become tools.
-//
-// `/api/v1/filter/` and `/api/v1/integration/` are included even though neither is a
-// user-facing tool: a stored pipeline can contain one, and ToolEndpoint keys the I/O
-// table, so leaving them out would stop a chain being checked past such a step.
+// Endpoints a pipeline can reference. filter/integration are not user-facing tools but a stored
+// pipeline can contain one; the AI namespace is admitted one endpoint at a time, not wholesale.
 const ALLOWED_PATH_PREFIXES = [
   "/api/v1/general/",
   "/api/v1/misc/",
@@ -26,12 +20,14 @@ const ALLOWED_PATH_PREFIXES = [
   "/api/v1/convert/",
   "/api/v1/filter/",
   "/api/v1/integration/",
+  "/api/v1/ai/tools/classify-and-label",
 ];
 
-// File plumbing, not user parameters: `fileInput` is the uploaded document and
-// `fileId` a server-side handle. Stripped from every generated request model.
-// Named file fields (stampImage, attachments, ...) are real parameters and kept.
-const BASE_FILE_FIELDS = new Set(["fileInput", "fileId"]);
+// File plumbing, not user parameters: `fileInput` and `file` are the uploaded primary document
+// (endpoints use one name or the other - `file` is never a second, supporting upload) and `fileId`
+// a server-side handle. Stripped from every generated request model. Named supporting-file fields
+// (stampImage, attachments, ...) are real parameters and kept.
+const BASE_FILE_FIELDS = new Set(["fileInput", "file", "fileId"]);
 
 // The shared "upload a file or provide a file ID" wrapper schema and its two
 // branches. An endpoint whose body is exactly this has no parameters, so it must
@@ -73,6 +69,19 @@ function isObject(value: unknown): value is Json {
   return typeof value === "object" && value !== null && !Array.isArray(value);
 }
 
+/** A single file upload: `type: string, format: binary` (a Java MultipartFile param). */
+function isBinaryField(schema: unknown): schema is Json {
+  return (
+    isObject(schema) && schema.type === "string" && schema.format === "binary"
+  );
+}
+
+/** A multi file upload: an array of binary items (some specs also flag the array itself binary). */
+function isBinaryArrayField(schema: unknown): schema is Json {
+  if (!isObject(schema) || schema.type !== "array") return false;
+  return schema.format === "binary" || isBinaryField(schema.items);
+}
+
 /**
  * Recursively sort object keys so the output is byte-stable regardless of the
  * key ordering springdoc happens to emit.
@@ -213,11 +222,7 @@ function collectToolIO(
   return { table, dropped };
 }
 
-async function renderToolIO(
-  spec: Json,
-  table: Record<string, unknown>,
-  outputPath: string,
-): Promise<string> {
+function renderToolIO(spec: Json, table: Record<string, unknown>): string {
   if (Object.keys(table).length === 0) {
     throw new Error(
       `No ${IO_EXTENSION} declarations in the spec. The backend publishes these from @ToolIO; regenerate with 'task backend:swagger'.`,
@@ -298,33 +303,12 @@ export function toolIOFor(
 }
 `;
 
-  const prettierConfig = await prettier.resolveConfig(outputPath);
-  return prettier.format(body, { ...prettierConfig, parser: "typescript" });
+  return body;
 }
 
-/** In check mode, fail when the committed file is out of date. */
-function writeOrCheck(
-  outputPath: string,
-  formatted: string,
-  check: boolean,
-  task: string,
-): void {
-  if (check) {
-    let current = "";
-    try {
-      current = readFileSync(outputPath, "utf-8");
-    } catch {
-      // Missing file counts as out of date.
-    }
-    if (current !== formatted) {
-      throw new Error(
-        `${outputPath} is out of date. Run '${task}' and commit the result.`,
-      );
-    }
-    return;
-  }
+function writeOutput(outputPath: string, contents: string): void {
   mkdirSync(dirname(outputPath), { recursive: true });
-  writeFileSync(outputPath, formatted, "utf-8");
+  writeFileSync(outputPath, contents, "utf-8");
 }
 
 async function main(): Promise<void> {
@@ -333,12 +317,11 @@ async function main(): Promise<void> {
       spec: { type: "string" },
       output: { type: "string" },
       "io-output": { type: "string" },
-      check: { type: "boolean", default: false },
     },
   });
   if (!values.spec || !values.output || !values["io-output"]) {
     throw new Error(
-      "Usage: generate-tool-api-types.mts --spec <SwaggerDoc.json> --output <file.ts> --io-output <file.ts> [--check]",
+      "Usage: generate-tool-api-types.mts --spec <SwaggerDoc.json> --output <file.ts> --io-output <file.ts>",
     );
   }
   const specPath = resolve(values.spec);
@@ -358,6 +341,9 @@ async function main(): Promise<void> {
   const usedClassNames = new Set<string>();
   const pendingComponents = new Set<string>();
   const skipped: string[] = [];
+  // Named file fields (as File uploads) per model, so a caller can tell a file param from a scalar
+  // string param - which `format: binary` -> `string` would otherwise erase.
+  const fileFieldsByClass: Record<string, string[]> = {};
 
   for (const path of Object.keys(paths).sort()) {
     if (
@@ -408,7 +394,32 @@ async function main(): Promise<void> {
       const query = queryParameters(pathItem);
       // Body wins over query on a name collision.
       const properties: Json = { ...query.props, ...bodyProps };
+      // `file` is stripped as a primary-document alias (see BASE_FILE_FIELDS). That only holds while
+      // no endpoint uses `file` as a *supporting* upload beside a primary `fileInput`; if one ever
+      // does, blanket-stripping would silently drop it. Fail generation so the assumption is fixed
+      // here rather than shipping a lost file.
+      if ("file" in properties && "fileInput" in properties) {
+        throw new Error(
+          `${path} has both 'fileInput' and 'file' uploads. 'file' is stripped as a primary-document` +
+            " alias, which would drop it as a supporting file. Rename the supporting param or revise" +
+            " BASE_FILE_FIELDS handling in this generator.",
+        );
+      }
       for (const field of BASE_FILE_FIELDS) delete properties[field];
+      // Type each named file upload as File/File[] (not the `string` a binary format yields) via
+      // json-schema-to-typescript's `tsType` override, and record it. Base file fields are already
+      // stripped, so what remains is the real supporting-file params.
+      const fileFields: string[] = [];
+      for (const [name, prop] of Object.entries(properties)) {
+        if (isBinaryField(prop)) {
+          prop.tsType = "File";
+          fileFields.push(name);
+        } else if (isBinaryArrayField(prop)) {
+          prop.tsType = "File[]";
+          fileFields.push(name);
+        }
+      }
+      fileFieldsByClass[className] = fileFields;
       modelSchema.properties = properties;
       const required = new Set(computeRequired(modelSchema, properties));
       for (const name of query.required) {
@@ -436,14 +447,9 @@ async function main(): Promise<void> {
       `Dropped ${dropped.length} @ToolIO declaration(s) on paths that are not tool endpoints. Add the namespace to ALLOWED_PATH_PREFIXES if a pipeline can contain these steps:\n  ${dropped.join("\n  ")}`,
     );
   }
-  writeOrCheck(
-    ioOutputPath,
-    await renderToolIO(spec, ioDeclarations, ioOutputPath),
-    values.check ?? false,
-    "task frontend:tool-models",
-  );
+  writeOutput(ioOutputPath, renderToolIO(spec, ioDeclarations));
   console.log(
-    `${values.check ? "Up to date" : "Generated"}: ${Object.keys(ioDeclarations).length} tool I/O declarations.`,
+    `Generated ${Object.keys(ioDeclarations).length} tool I/O declarations.`,
   );
 
   // Transitively inline every referenced component into `definitions`, rewriting its refs too.
@@ -464,8 +470,8 @@ async function main(): Promise<void> {
   await compileAndWrite(
     tools,
     definitions,
+    fileFieldsByClass,
     outputPath,
-    values.check ?? false,
     skipped,
   );
 }
@@ -473,8 +479,8 @@ async function main(): Promise<void> {
 async function compileAndWrite(
   tools: DiscoveredTool[],
   definitions: Record<string, Json>,
+  fileFieldsByClass: Record<string, string[]>,
   outputPath: string,
-  check: boolean,
   skipped: string[],
 ): Promise<void> {
   // json-schema-to-typescript only emits a named, exported interface per schema
@@ -525,6 +531,15 @@ async function compileAndWrite(
   const endpointList = tools
     .map((t) => `  ${JSON.stringify(t.path)},`)
     .join("\n");
+  // Endpoints that take supporting files, mapped to those file params' names. Only endpoints with at
+  // least one are listed, so membership answers "does this tool take extra files".
+  const fileFieldEntries = tools
+    .filter((t) => (fileFieldsByClass[t.className] ?? []).length > 0)
+    .map(
+      (t) =>
+        `  ${JSON.stringify(t.path)}: ${JSON.stringify(fileFieldsByClass[t.className])},`,
+    )
+    .join("\n");
 
   const footer = [
     "/** Endpoint path for a generated tool operation (the operation identity across languages). */",
@@ -536,22 +551,17 @@ async function compileAndWrite(
     "/** Every generated tool endpoint, for iteration. */",
     `export const TOOL_ENDPOINTS = [\n${endpointList}\n] as const satisfies readonly ToolEndpoint[];`,
     "",
+    "/** The supporting-file parameters each endpoint accepts beyond its primary fileInput, by name. */",
+    `export const TOOL_FILE_FIELDS = {\n${fileFieldEntries}\n} as const satisfies Partial<\n  Record<ToolEndpoint, readonly string[]>\n>;`,
+    "",
     "/** Union of every generated tool request model. */",
     `export type ToolApiRequest = ToolApiParams[ToolEndpoint];`,
   ].join("\n");
 
   const body = `${FILE_HEADER}\n\n${models}\n\n${footer}\n`;
-  const prettierConfig = await prettier.resolveConfig(outputPath);
-  const formatted = await prettier.format(body, {
-    ...prettierConfig,
-    parser: "typescript",
-  });
-
-  writeOrCheck(outputPath, formatted, check, "task frontend:tool-models");
-  console.log(
-    `${check ? "Up to date" : "Generated"}: ${tools.length} tool endpoints.`,
-  );
-  if (!check && skipped.length > 0) {
+  writeOutput(outputPath, body);
+  console.log(`Generated ${tools.length} tool endpoints.`);
+  if (skipped.length > 0) {
     console.log(
       `Skipped ${skipped.length} POST endpoint(s) with no request body: ${skipped.join(", ")}`,
     );
diff --git a/frontend/editor/scripts/lint/theme-lint.mjs b/frontend/editor/scripts/lint/theme-lint.mjs
index 494fc03cca..52bd304a5a 100644
--- a/frontend/editor/scripts/lint/theme-lint.mjs
+++ b/frontend/editor/scripts/lint/theme-lint.mjs
@@ -634,7 +634,7 @@ const CODE_EXEMPT_PATH = [
   // PDF rendering/drawing surfaces that legitimately carry colour literals —
   // scoped to specific tool paths, not a blanket "pdf" substring (which used to
   // exempt most of the app in a PDF product).
-  /pdfTextEditor|pixelCompare|\/compare\.ts$|customPrimary|accentColors/,
+  /pdfTextEditor|pixelCompare|\/compare\.ts$|customPrimary|accentColors|formFieldColors/,
   /validateSignature\/outputtedPDFSections|CenteredMessageSection|StatusBadgeSection/,
   /\/viewer\/|Annotation|useViewerReadAloud|CommentsSidebar|\/constants\/search\.ts$|SignaturePreview/,
   /ColorPicker|ColorControl|WatchedFolderManagementModal|watchedFolderPresets|fileColors|unifiedBackground|folder\.ts$|policyFolders/,
@@ -642,7 +642,6 @@ const CODE_EXEMPT_PATH = [
   /mantineTheme|\/theme\.ts$|toolsTaxonomy|LayoutPreview|PageNumberPreview|CloudStorageIcons|BrandMarks/,
   /\/onboarding\//,
   /addStamp|addWatermark|\/tooltips\//,
-  /UpgradeBanner|AdminPlanSection/,
   // Stories are checked like app code; colour-as-data lines opt out with
   // `theme-allow-color`.
   /\.test\.[jt]sx?$|\/types\//,
diff --git a/frontend/editor/src-tauri/Cargo.lock b/frontend/editor/src-tauri/Cargo.lock
index c7d25757c9..fe8352f5a7 100644
--- a/frontend/editor/src-tauri/Cargo.lock
+++ b/frontend/editor/src-tauri/Cargo.lock
@@ -276,9 +276,9 @@ checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
 
 [[package]]
 name = "base64"
-version = "0.23.0"
+version = "0.23.1"
 source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b25655df2c3cdd83c5e5b293b88acd880332b2ddadd7c30ac43144fdc0033da9"
+checksum = "ac07cdecf99051d9a5238b80f35af32cdeba5b336e55d957b318b50137e18da5"
 
 [[package]]
 name = "bit-set"
@@ -4551,7 +4551,7 @@ checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
 name = "stirling-pdf"
 version = "0.1.0"
 dependencies = [
- "base64 0.23.0",
+ "base64 0.23.1",
  "core-foundation 0.10.1",
  "core-services",
  "keyring",
diff --git a/frontend/editor/src-tauri/icons/128x128.png b/frontend/editor/src-tauri/icons/128x128.png
deleted file mode 100644
index 9712693d06..0000000000
Binary files a/frontend/editor/src-tauri/icons/128x128.png and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/16x16.png b/frontend/editor/src-tauri/icons/16x16.png
deleted file mode 100644
index 6448ce5424..0000000000
Binary files a/frontend/editor/src-tauri/icons/16x16.png and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/192x192.png b/frontend/editor/src-tauri/icons/192x192.png
deleted file mode 100644
index 55c165df4b..0000000000
Binary files a/frontend/editor/src-tauri/icons/192x192.png and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/32x32.png b/frontend/editor/src-tauri/icons/32x32.png
deleted file mode 100644
index 1844dfceb2..0000000000
Binary files a/frontend/editor/src-tauri/icons/32x32.png and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/64x64.png b/frontend/editor/src-tauri/icons/64x64.png
deleted file mode 100644
index d758a26bf3..0000000000
Binary files a/frontend/editor/src-tauri/icons/64x64.png and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/icon.icns b/frontend/editor/src-tauri/icons/icon.icns
deleted file mode 100644
index 86bad6a2e1..0000000000
Binary files a/frontend/editor/src-tauri/icons/icon.icns and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/icon.png b/frontend/editor/src-tauri/icons/icon.png
deleted file mode 100644
index 8abdd8ca3a..0000000000
Binary files a/frontend/editor/src-tauri/icons/icon.png and /dev/null differ
diff --git a/frontend/editor/src-tauri/icons/linux/app-128.png b/frontend/editor/src-tauri/icons/linux/app-128.png
new file mode 100644
index 0000000000..9a87d8abb3
Binary files /dev/null and b/frontend/editor/src-tauri/icons/linux/app-128.png differ
diff --git a/frontend/editor/src-tauri/icons/linux/app-16.png b/frontend/editor/src-tauri/icons/linux/app-16.png
new file mode 100644
index 0000000000..35fc507cfc
Binary files /dev/null and b/frontend/editor/src-tauri/icons/linux/app-16.png differ
diff --git a/frontend/editor/src-tauri/icons/linux/app-192.png b/frontend/editor/src-tauri/icons/linux/app-192.png
new file mode 100644
index 0000000000..36fd70e987
Binary files /dev/null and b/frontend/editor/src-tauri/icons/linux/app-192.png differ
diff --git a/frontend/editor/src-tauri/icons/linux/app-32.png b/frontend/editor/src-tauri/icons/linux/app-32.png
new file mode 100644
index 0000000000..c975d69987
Binary files /dev/null and b/frontend/editor/src-tauri/icons/linux/app-32.png differ
diff --git a/frontend/editor/src-tauri/icons/linux/app-512.png b/frontend/editor/src-tauri/icons/linux/app-512.png
new file mode 100644
index 0000000000..b20a797a05
Binary files /dev/null and b/frontend/editor/src-tauri/icons/linux/app-512.png differ
diff --git a/frontend/editor/src-tauri/icons/linux/app-64.png b/frontend/editor/src-tauri/icons/linux/app-64.png
new file mode 100644
index 0000000000..e6138f71e3
Binary files /dev/null and b/frontend/editor/src-tauri/icons/linux/app-64.png differ
diff --git a/frontend/editor/src-tauri/icons/macos/app-512.png b/frontend/editor/src-tauri/icons/macos/app-512.png
new file mode 100644
index 0000000000..c5638a5270
Binary files /dev/null and b/frontend/editor/src-tauri/icons/macos/app-512.png differ
diff --git a/frontend/editor/src-tauri/icons/macos/app.icns b/frontend/editor/src-tauri/icons/macos/app.icns
new file mode 100644
index 0000000000..7f6dc2c6e8
Binary files /dev/null and b/frontend/editor/src-tauri/icons/macos/app.icns differ
diff --git a/frontend/editor/src-tauri/icons/icon.ico b/frontend/editor/src-tauri/icons/windows/app.ico
similarity index 100%
rename from frontend/editor/src-tauri/icons/icon.ico
rename to frontend/editor/src-tauri/icons/windows/app.ico
diff --git a/frontend/editor/src-tauri/tauri.conf.json b/frontend/editor/src-tauri/tauri.conf.json
index dee2cc7023..cdd29e708f 100644
--- a/frontend/editor/src-tauri/tauri.conf.json
+++ b/frontend/editor/src-tauri/tauri.conf.json
@@ -2,7 +2,7 @@
   "$schema": "../node_modules/@tauri-apps/cli/config.schema.json",
   "productName": "Stirling PDF",
   "mainBinaryName": "Stirling-PDF",
-  "version": "2.14.2",
+  "version": "2.14.3",
   "identifier": "stirling.pdf.dev",
   "build": {
     "frontendDist": "../dist",
@@ -29,14 +29,9 @@
     "publisher": "Stirling PDF Inc.",
     "targets": ["deb", "rpm", "appimage", "dmg", "app", "msi"],
     "icon": [
-      "icons/icon.png",
-      "icons/icon.icns",
-      "icons/icon.ico",
-      "icons/16x16.png",
-      "icons/32x32.png",
-      "icons/64x64.png",
-      "icons/128x128.png",
-      "icons/192x192.png"
+      "icons/windows/app.ico",
+      "icons/macos/app.icns",
+      "icons/macos/app-512.png"
     ],
     "resources": ["libs/*.jar", "runtime/jre/**/*"],
     "fileAssociations": [
diff --git a/frontend/editor/src-tauri/tauri.linux.conf.json b/frontend/editor/src-tauri/tauri.linux.conf.json
new file mode 100644
index 0000000000..54f87a037b
--- /dev/null
+++ b/frontend/editor/src-tauri/tauri.linux.conf.json
@@ -0,0 +1,12 @@
+{
+  "bundle": {
+    "icon": [
+      "icons/linux/app-512.png",
+      "icons/linux/app-192.png",
+      "icons/linux/app-128.png",
+      "icons/linux/app-64.png",
+      "icons/linux/app-32.png",
+      "icons/linux/app-16.png"
+    ]
+  }
+}
diff --git a/frontend/editor/src/assets/3rdPartyLicenses.json b/frontend/editor/src/assets/3rdPartyLicenses.json
index 110a6c88a5..1cd5f1f8bc 100644
--- a/frontend/editor/src/assets/3rdPartyLicenses.json
+++ b/frontend/editor/src/assets/3rdPartyLicenses.json
@@ -10,7 +10,7 @@
     {
       "moduleName": "@cantoo/pdf-lib",
       "moduleUrl": "https://github.com/cantoo-scribe/pdf-lib",
-      "moduleVersion": "2.6.5",
+      "moduleVersion": "2.8.2",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -24,161 +24,161 @@
     {
       "moduleName": "@embedpdf/core",
       "moduleUrl": "https://registry.npmjs.org/@embedpdf/core/-/core-2.15.0.tgz",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/engines",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/models",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-annotation",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-attachment",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-bookmark",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-document-manager",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-export",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-history",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-interaction-manager",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-pan",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-print",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-redaction",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-render",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-rotate",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-scroll",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-search",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-selection",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-spread",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-thumbnail",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-tiling",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-viewport",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@embedpdf/plugin-zoom",
       "moduleUrl": "https://github.com/embedpdf/embed-pdf-viewer",
-      "moduleVersion": "2.14.4",
+      "moduleVersion": "2.15.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -255,14 +255,14 @@
     {
       "moduleName": "@stripe/react-stripe-js",
       "moduleUrl": "https://github.com/stripe/react-stripe-js",
-      "moduleVersion": "4.0.2",
+      "moduleVersion": "6.8.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
     {
       "moduleName": "@stripe/stripe-js",
       "moduleUrl": "https://github.com/stripe/stripe-js",
-      "moduleVersion": "7.9.0",
+      "moduleVersion": "9.10.0",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -287,6 +287,13 @@
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
+    {
+      "moduleName": "@tanstack/react-table",
+      "moduleUrl": "https://github.com/TanStack/table",
+      "moduleVersion": "9.1.2",
+      "moduleLicense": "MIT",
+      "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
+    },
     {
       "moduleName": "@tanstack/react-virtual",
       "moduleUrl": "https://github.com/TanStack/virtual",
@@ -367,7 +374,7 @@
     {
       "moduleName": "i18next",
       "moduleUrl": "https://github.com/i18next/i18next",
-      "moduleVersion": "25.10.10",
+      "moduleVersion": "26.3.6",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -388,7 +395,7 @@
     {
       "moduleName": "license-report",
       "moduleUrl": "https://github.com/bepo65/license-report",
-      "moduleVersion": "6.8.2",
+      "moduleVersion": "6.8.5",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
@@ -451,7 +458,7 @@
     {
       "moduleName": "react-i18next",
       "moduleUrl": "https://github.com/i18next/react-i18next",
-      "moduleVersion": "16.6.6",
+      "moduleVersion": "17.0.11",
       "moduleLicense": "MIT",
       "moduleLicenseUrl": "https://opensource.org/licenses/MIT"
     },
diff --git a/frontend/editor/src/cloud/components/shared/TeamInvitationBanner.tsx b/frontend/editor/src/cloud/components/shared/TeamInvitationBanner.tsx
index 3b373e9c3b..638c752f9e 100644
--- a/frontend/editor/src/cloud/components/shared/TeamInvitationBanner.tsx
+++ b/frontend/editor/src/cloud/components/shared/TeamInvitationBanner.tsx
@@ -3,7 +3,7 @@ import { Group, Text } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { useTranslation } from "react-i18next";
 import LocalIcon from "@app/components/shared/LocalIcon";
-import { InfoBanner } from "@app/components/shared/InfoBanner";
+import { AppBanner } from "@app/components/shared/AppBanner";
 import { useSaaSTeam } from "@app/contexts/SaaSTeamContext";
 
 /**
@@ -105,7 +105,7 @@ export function TeamInvitationBanner() {
   );
 
   return (
-    <InfoBanner
+    <AppBanner
       icon="mail"
       message={
         <Group
@@ -120,10 +120,6 @@ export function TeamInvitationBanner() {
       }
       show={shouldShow}
       dismissible={false}
-      background="var(--mantine-color-dark-7)"
-      borderColor="var(--mantine-color-dark-5)"
-      textColor="rgba(255, 255, 255, 0.95)"
-      iconColor="rgba(255, 255, 255, 0.95)"
     />
   );
 }
diff --git a/frontend/editor/src/cloud/components/shared/config/configSections/usageMeters.tsx b/frontend/editor/src/cloud/components/shared/config/configSections/usageMeters.tsx
index 8811e537b2..c4407cae7f 100644
--- a/frontend/editor/src/cloud/components/shared/config/configSections/usageMeters.tsx
+++ b/frontend/editor/src/cloud/components/shared/config/configSections/usageMeters.tsx
@@ -12,6 +12,7 @@ import {
   formatPeriodDate,
   MeterBar,
   meterState,
+  remainingMeter,
 } from "@app/billing";
 import "@app/components/shared/config/configSections/Payg.css";
 import "@app/components/shared/config/configSections/PaygFree.css";
@@ -48,7 +49,8 @@ export function useFreeSnapshot(): FreeSnapshot {
 
 export function FreeMeterPanel({ snap }: { snap: FreeSnapshot }) {
   const { t } = useTranslation();
-  const { state, pct } = meterState(snap.billableUsed, snap.billableLimit);
+  const remaining = Math.max(0, snap.billableLimit - snap.billableUsed);
+  const { state, pct } = remainingMeter(remaining, snap.billableLimit);
   const stateLabel =
     state === "DEGRADED"
       ? t("payg.free.state.limitReached", "Limit reached")
@@ -60,9 +62,9 @@ export function FreeMeterPanel({ snap }: { snap: FreeSnapshot }) {
     <MeterBar
       state={state}
       pct={pct}
-      barLabel={t("payg.free.hero.barAria", "Free PDFs used")}
-      figure={snap.billableUsed.toLocaleString()}
-      capSuffix={t("payg.free.hero.capSuffix", "/ {{limit}} free PDFs", {
+      barLabel={t("payg.free.hero.barAria", "Free PDFs remaining")}
+      figure={remaining.toLocaleString()}
+      capSuffix={t("payg.free.hero.capSuffix", "of {{limit}} free PDFs left", {
         limit: snap.billableLimit.toLocaleString(),
       })}
       statusLabel={stateLabel}
@@ -175,15 +177,15 @@ export function prepaidSnapshotFromWallet(
 }
 
 /**
- * Prepaid capacity meter. The bar fills as the pool is drawn down ({@code used =
- * total − remaining}), so it WARNs when the pool is running low and DEGRADEs once
- * exhausted — same bands as the free/cap meters. Prepaid is consumed ahead of the
- * meter and outside the spend cap, so it reads as its own dimension.
+ * Prepaid capacity meter. The bar shows what is left and drains towards empty,
+ * while the bands still key on what is gone ({@code used = total − remaining}), so
+ * it WARNs when the pool is running low and DEGRADEs once exhausted — same bands
+ * as the free/cap meters. Prepaid is consumed ahead of the meter and outside the
+ * spend cap, so it reads as its own dimension.
  */
 export function PrepaidCapacityMeterPanel({ snap }: { snap: PrepaidSnapshot }) {
   const { t } = useTranslation();
-  const used = Math.max(0, snap.total - snap.remaining);
-  const { state, pct } = meterState(used, snap.total);
+  const { state, pct } = remainingMeter(snap.remaining, snap.total);
   const stateLabel =
     state === "DEGRADED"
       ? t("payg.prepaid.state.exhausted", "Used up")
diff --git a/frontend/editor/src/cloud/hooks/useFreeCreditsSummary.ts b/frontend/editor/src/cloud/hooks/useFreeCreditsSummary.ts
new file mode 100644
index 0000000000..05e9536267
--- /dev/null
+++ b/frontend/editor/src/cloud/hooks/useFreeCreditsSummary.ts
@@ -0,0 +1,50 @@
+import { useEffect, useState } from "react";
+import { useWallet } from "@app/hooks/useWallet";
+import {
+  readCachedCredits,
+  writeCachedCredits,
+  type CachedCredits,
+} from "@app/services/navFooterCache";
+import { type NavFooterCredits } from "@app/components/shared/navFooter/NavFooterCreditsRow";
+
+/** The wallet reduced to what the footer shows: figures, or null for a payer. */
+function toCredits(
+  status: string,
+  freeRemaining: number,
+  freeAllowance: number,
+): CachedCredits {
+  // Free teams only. The grant is a lifetime pool that survives subscribing, so
+  // a paying team would otherwise sit on a permanent "0 of 500" in red while
+  // nothing is wrong. Plan draws the same line — subscribed teams get the
+  // spend-vs-cap meter there, and admins get usage in the processor.
+  if (status === "subscribed") return null;
+  return { remaining: freeRemaining, total: freeAllowance };
+}
+
+/**
+ * Cloud builds read the free grant off the live wallet — the same snapshot the
+ * Plan page's free meter renders, so the sidebar and Plan can't disagree.
+ *
+ * Seeded from the last figures this browser saw, so the row is right at first
+ * paint and stays put while the wallet refetches underneath. Only a browser
+ * that has never loaded a wallet has nothing to show, and that one time the row
+ * animates in. The seed is read once, at first render: later reads would fight
+ * the live value, and the whole point is that the row stops moving.
+ */
+export function useFreeCreditsSummary(): NavFooterCredits | null {
+  const { wallet } = useWallet();
+  const [seed] = useState(readCachedCredits);
+
+  const live = wallet
+    ? toCredits(wallet.status, wallet.freeRemaining, wallet.freeAllowance)
+    : undefined;
+
+  // useWallet reuses the snapshot reference when nothing changed, so keying on
+  // it writes only on a real change, not on every render.
+  useEffect(() => {
+    if (live !== undefined) writeCachedCredits(live);
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [wallet]);
+
+  return (live !== undefined ? live : seed) ?? null;
+}
diff --git a/frontend/editor/src/cloud/hooks/useOpenPlan.ts b/frontend/editor/src/cloud/hooks/useOpenPlan.ts
new file mode 100644
index 0000000000..4d532319f6
--- /dev/null
+++ b/frontend/editor/src/cloud/hooks/useOpenPlan.ts
@@ -0,0 +1,13 @@
+import { useCallback } from "react";
+import { useNavigate } from "react-router-dom";
+
+/**
+ * Cloud editor builds open the settings modal on its Plan section, which is
+ * where the free grant is explained and the Processor plan is switched on.
+ * Routed rather than called directly because the modal is URL-driven here
+ * (`/settings/*`), the same path the admin tour uses to open it.
+ */
+export function useOpenPlan(): (() => void) | null {
+  const navigate = useNavigate();
+  return useCallback(() => navigate("/settings/plan"), [navigate]);
+}
diff --git a/frontend/editor/src/cloud/hooks/useWallet.ts b/frontend/editor/src/cloud/hooks/useWallet.ts
index 0a3f78b3ce..ed3cb2ce6b 100644
--- a/frontend/editor/src/cloud/hooks/useWallet.ts
+++ b/frontend/editor/src/cloud/hooks/useWallet.ts
@@ -32,6 +32,14 @@
  * promise see the UI flip exactly once the new state is visible — no
  * intermediate flash of the old value.
  *
+ * <h2>Freshness</h2>
+ *
+ * The figures drain as metered work runs, so a mounted consumer re-reads the
+ * wallet every {@link WALLET_POLL_MS} and again whenever the tab regains
+ * visibility. Those refreshes are silent — they leave {@code loading} and
+ * {@code error} alone and only commit fresher data — so consumers that gate on
+ * those flags don't flicker on a background tick.
+ *
  * <h2>Dev preview fallback</h2>
  *
  * When the hook is rendered outside the saas app (e.g. on {@code
@@ -178,6 +186,13 @@ function reuseIfEqual(prev: Wallet | null, next: Wallet): Wallet {
   return prev;
 }
 
+/**
+ * How often a mounted consumer re-reads the wallet. Matches the app query
+ * client's staleTime, so the sidebar meter and anything cached elsewhere age
+ * out on the same clock.
+ */
+const WALLET_POLL_MS = 30_000;
+
 export function useWallet(): UseWalletResult {
   // Resolved once: the dev-preview side-channel when rendered outside the real
   // app (saas /dev/payg-preview route), else null (every real build + desktop).
@@ -201,13 +216,29 @@ export function useWallet(): UseWalletResult {
   // "the request fired." Cleared when no load is pending.
   const inFlight = useRef<Promise<void> | null>(null);
 
+  // Set for refreshes the user didn't ask for (the poll below). Silence governs
+  // whether a load may RAISE `loading` / `error`, never whether it may clear
+  // them: consumers gate on both — the limit modals do
+  // `if (loading || !wallet) return null`, and Plan swaps in an error alert —
+  // so a background tick must not blink an open modal out or replace a working
+  // page over a transient failure. Clearing is always the latest request's job,
+  // silent or not; a silent load that skipped the clear would strand `loading`
+  // true after superseding a visible one, which suppresses those modals for the
+  // rest of the session.
+  const silentRefresh = useRef(false);
+
   useEffect(() => {
     const reqId = ++latestReqId.current;
     let cancelled = false;
 
+    const silent = silentRefresh.current;
+    silentRefresh.current = false;
+
     const promise = (async () => {
-      setLoading(true);
-      setError(null);
+      if (!silent) {
+        setLoading(true);
+        setError(null);
+      }
 
       if (devPreview) {
         const synth = devPreview.buildWallet(devPreview.role());
@@ -221,11 +252,22 @@ export function useWallet(): UseWalletResult {
         const res = await apiClient.get<Wallet>("/api/v1/payg/wallet");
         if (cancelled || reqId !== latestReqId.current) return;
         setWallet((prev) => reuseIfEqual(prev, res.data));
+        // Fresh data retires any earlier failure, including one a silent poll
+        // is recovering from — otherwise Plan keeps its alert over good data.
+        setError(null);
       } catch (e: unknown) {
         if (cancelled || reqId !== latestReqId.current) return;
-        console.warn("[useWallet] fetch failed", e);
-        setError(e instanceof Error ? e.message : "Failed to load wallet");
+        if (!silent) {
+          console.warn("[useWallet] fetch failed", e);
+          setError(e instanceof Error ? e.message : "Failed to load wallet");
+        }
+        // A failed background refresh is a non-event: the last good snapshot
+        // stands and the next tick self-heals, so it neither surfaces nor
+        // logs — otherwise an offline tab warns every WALLET_POLL_MS.
       } finally {
+        // Deliberately not gated on `silent`: whichever load is latest owns
+        // settling the flag, or a silent refresh that supersedes a visible one
+        // leaves it stuck true.
         if (!cancelled && reqId === latestReqId.current) {
           setLoading(false);
         }
@@ -242,6 +284,46 @@ export function useWallet(): UseWalletResult {
     };
   }, [devPreview, refetchTick]);
 
+  // The wallet drains as automation, AI and API work runs, so a figure fetched
+  // on mount goes stale while the user watches it. Refresh on a timer, and
+  // immediately on returning to the tab — coming back to a stale number is the
+  // case people actually notice. Hidden tabs don't poll, and the dev-preview
+  // wallet is synthesised locally so there is nothing to re-read.
+  useEffect(() => {
+    if (devPreview) return;
+
+    let timer: ReturnType<typeof setInterval> | undefined;
+    const refresh = () => {
+      silentRefresh.current = true;
+      setRefetchTick((t) => t + 1);
+    };
+    const stop = () => {
+      if (timer !== undefined) {
+        clearInterval(timer);
+        timer = undefined;
+      }
+    };
+    const start = () => {
+      stop();
+      timer = setInterval(refresh, WALLET_POLL_MS);
+    };
+    const onVisibilityChange = () => {
+      if (document.visibilityState === "visible") {
+        refresh();
+        start();
+      } else {
+        stop();
+      }
+    };
+
+    if (document.visibilityState === "visible") start();
+    document.addEventListener("visibilitychange", onVisibilityChange);
+    return () => {
+      stop();
+      document.removeEventListener("visibilitychange", onVisibilityChange);
+    };
+  }, [devPreview]);
+
   const refetch = useCallback(async () => {
     setRefetchTick((t) => t + 1);
     // Snapshot the next-tick promise so the caller awaits this refetch
diff --git a/frontend/editor/src/core/components/AppLayout.stories.tsx b/frontend/editor/src/core/components/AppLayout.stories.tsx
index 4d7e6780cf..69aceef9d7 100644
--- a/frontend/editor/src/core/components/AppLayout.stories.tsx
+++ b/frontend/editor/src/core/components/AppLayout.stories.tsx
@@ -4,7 +4,7 @@ import { AppLayout } from "@app/components/AppLayout";
 import { BannerProvider, useBanner } from "@app/contexts/BannerContext";
 import { NavigationProvider } from "@app/contexts/NavigationContext";
 import { ToolRegistryProvider } from "@app/contexts/ToolRegistryProvider";
-import { InfoBanner } from "@app/components/shared/InfoBanner";
+import { AppBanner } from "@app/components/shared/AppBanner";
 
 const meta = {
   title: "Components/AppLayout",
@@ -49,7 +49,7 @@ function BannerSetter() {
   const { setBanner } = useBanner();
   useEffect(() => {
     setBanner(
-      <InfoBanner
+      <AppBanner
         icon="info-rounded"
         title="Heads up"
         message="This workspace is running in offline mode."
diff --git a/frontend/editor/src/core/components/AppLayout.tsx b/frontend/editor/src/core/components/AppLayout.tsx
index 38ab1f1907..48c4cb9149 100644
--- a/frontend/editor/src/core/components/AppLayout.tsx
+++ b/frontend/editor/src/core/components/AppLayout.tsx
@@ -22,7 +22,7 @@ export function AppLayout({ children }: AppLayoutProps) {
         }
       `}</style>
       <div
-        style={{ height: "100vh", display: "flex", flexDirection: "column" }}
+        style={{ height: "100dvh", display: "flex", flexDirection: "column" }}
       >
         {banner}
         <div style={{ flex: 1, minHeight: 0, height: 0 }}>{children}</div>
diff --git a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
index 1a55c53a90..22c969e704 100644
--- a/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
+++ b/frontend/editor/src/core/components/fileEditor/FileEditorThumbnail.tsx
@@ -300,6 +300,10 @@ const FileEditorThumbnail = ({
   const [showVersionHistory, setShowVersionHistory] = useState(false);
 
   const policyEnforcing = policies.some((p) => p.enforcing);
+  // The overlay swallows clicks, so a run that never settles would leave the card
+  // unusable with no way out. Dismissible, like the viewer's; resets per run.
+  const [enforcingDismissed, setEnforcingDismissed] = useState(false);
+  if (!policyEnforcing && enforcingDismissed) setEnforcingDismissed(false);
   // The policy currently enforcing, so the overlay's icon/spinner match that
   // policy's badge instead of a fixed blue.
   const enforcingPolicy = policies.find((p) => p.enforcing);
@@ -548,8 +552,9 @@ const FileEditorThumbnail = ({
 
               {/* Policy enforcement overlay — shown while any policy is in-flight */}
               <PolicyEnforcingOverlay
-                enforcing={policyEnforcing}
+                enforcing={policyEnforcing && !enforcingDismissed}
                 zIndex={2}
+                onDismiss={() => setEnforcingDismissed(true)}
                 accentVar={enforcingPolicy?.accentColor}
                 categoryId={enforcingPolicy?.id}
               />
diff --git a/frontend/editor/src/core/components/filesPage/FileGrid.tsx b/frontend/editor/src/core/components/filesPage/FileGrid.tsx
index e54964c592..40e17dc502 100644
--- a/frontend/editor/src/core/components/filesPage/FileGrid.tsx
+++ b/frontend/editor/src/core/components/filesPage/FileGrid.tsx
@@ -13,6 +13,7 @@ import DeleteIcon from "@mui/icons-material/Delete";
 import HistoryIcon from "@mui/icons-material/History";
 import OpenInNewIcon from "@mui/icons-material/OpenInNew";
 import DriveFileRenameOutlineIcon from "@mui/icons-material/DriveFileRenameOutline";
+import ContentCopyOutlinedIcon from "@mui/icons-material/ContentCopyOutlined";
 import CloudUploadIcon from "@mui/icons-material/CloudUpload";
 import UploadFileIcon from "@mui/icons-material/UploadFile";
 import CreateNewFolderIcon from "@mui/icons-material/CreateNewFolder";
@@ -36,6 +37,8 @@ import { FolderThumbnail } from "@app/components/filesPage/FolderThumbnail";
 import { findFolderIcon } from "@app/components/filesPage/folderIcons";
 import { FolderAppearancePicker } from "@app/components/filesPage/FolderAppearancePicker";
 import { useLazyThumbnail } from "@app/hooks/useLazyThumbnail";
+import { useFileActionIcons } from "@app/hooks/useFileActionIcons";
+import { useFileActionTerminology } from "@app/hooks/useFileActionTerminology";
 import type { FilesPageSortMode } from "@app/contexts/FilesPageContext";
 import { OpenInNewWindowMenuItem } from "@app/components/filesPage/OpenInNewWindowMenuItem";
 
@@ -83,6 +86,12 @@ interface FileGridProps {
   onSaveToServer?: (file: StirlingFileStub) => void;
   /** Open the version-history modal for a file (only when it has >1 version). */
   onVersionHistory?: (file: StirlingFileStub) => void;
+  /** Download a copy (desktop: save a copy). */
+  onDownloadFile?: (file: StirlingFileStub) => void;
+  /** Open the rename dialog for a file. */
+  onRenameFile?: (file: StirlingFileStub) => void;
+  /** Save a second copy of the file into the library. */
+  onDuplicateFile?: (file: StirlingFileStub) => void;
   /** When set, the Save to server item renders disabled with this tooltip. */
   saveToServerDisabledReason?: string | null;
   /** When supplied the list-view column headers become sortable. */
@@ -366,24 +375,21 @@ function EmptyState({
   );
 }
 
-function GridView({
-  entries,
-  selectedFileIds,
-  activeWorkspaceFileIds,
-  onSelectFile,
-  onOpenFolder,
-  onOpenFile,
-  onMoveFiles,
-  onMoveFolder,
-  onRenameFolder,
-  onDeleteFolder,
-  onChangeFolderAppearance,
-  onRemoveFiles,
-  onPromptMoveFiles,
-  onSaveToServer,
-  onVersionHistory,
-  saveToServerDisabledReason,
-}: FileGridProps) {
+function GridView(props: FileGridProps) {
+  const {
+    entries,
+    selectedFileIds,
+    activeWorkspaceFileIds,
+    onSelectFile,
+    onOpenFolder,
+    onOpenFile,
+    onMoveFiles,
+    onMoveFolder,
+    onRenameFolder,
+    onDeleteFolder,
+    onChangeFolderAppearance,
+  } = props;
+  const menuHandlersFor = useFileMenuHandlers(props);
   return (
     <div className="files-page-grid" role="list">
       {entries.map((entry) => {
@@ -424,22 +430,7 @@ function GridView({
                 onSelectFile(entry.file!.id, e.shiftKey, e.metaKey || e.ctrlKey)
               }
               onDoubleClick={() => onOpenFile(entry.file!)}
-              onRemove={() => onRemoveFiles([entry.file!.id])}
-              onMove={() => {
-                const target = selectedFileIds.has(entry.file!.id)
-                  ? Array.from(selectedFileIds)
-                  : [entry.file!.id];
-                onPromptMoveFiles(target);
-              }}
-              onSaveToServer={
-                onSaveToServer ? () => onSaveToServer(entry.file!) : undefined
-              }
-              onVersionHistory={
-                onVersionHistory
-                  ? () => onVersionHistory(entry.file!)
-                  : undefined
-              }
-              saveToServerDisabledReason={saveToServerDisabledReason}
+              {...menuHandlersFor(entry.file)}
             />
           );
         }
@@ -626,7 +617,222 @@ function PolicyBadges({ fileId }: { fileId: string }) {
   return <PolicyBadgeRow policies={badges} />;
 }
 
-interface FileCardProps {
+/** Per-file actions. Shared verbatim by the grid card and the list row, and
+ *  kept in step with the file sidebar's kebab so both surfaces offer the same. */
+interface FileActionsMenuProps {
+  file: StirlingFileStub;
+  triggerRef: React.RefObject<HTMLButtonElement | null>;
+  onOpen: () => void;
+  onMove: () => void;
+  onRemove: () => void;
+  onDownload?: () => void;
+  onRename?: () => void;
+  onDuplicate?: () => void;
+  onSaveToServer?: () => void;
+  onVersionHistory?: () => void;
+  saveToServerDisabledReason?: string | null;
+}
+
+function FileActionsMenu({
+  file,
+  triggerRef,
+  onOpen,
+  onMove,
+  onRemove,
+  onDownload,
+  onRename,
+  onDuplicate,
+  onSaveToServer,
+  onVersionHistory,
+  saveToServerDisabledReason,
+}: FileActionsMenuProps) {
+  const { t } = useTranslation();
+  const terminology = useFileActionTerminology();
+  const DownloadIcon = useFileActionIcons().download;
+  const showSaveToServer =
+    Boolean(onSaveToServer) && file.remoteStorageId == null;
+  const showVersionHistory =
+    Boolean(onVersionHistory) && (file.versionNumber ?? 1) > 1;
+  return (
+    <Menu shadow="md" position="bottom-end" withinPortal width={220}>
+      <Menu.Target>
+        <ActionIcon
+          ref={triggerRef}
+          variant="tertiary"
+          size="sm"
+          onClick={(e) => e.stopPropagation()}
+          aria-label={t("filesPage.fileMenu", "File actions")}
+          data-testid="file-card-actions"
+        >
+          <MoreVertIcon fontSize="small" />
+        </ActionIcon>
+      </Menu.Target>
+      <Menu.Dropdown>
+        <Menu.Item
+          leftSection={<OpenInNewIcon fontSize="small" />}
+          onClick={(e) => {
+            e.stopPropagation();
+            onOpen();
+          }}
+        >
+          {t("filesPage.addToWorkspace", "Add to workspace")}
+        </Menu.Item>
+        <OpenInNewWindowMenuItem file={file} />
+        <Menu.Item
+          leftSection={<DriveFileMoveIcon fontSize="small" />}
+          onClick={(e) => {
+            e.stopPropagation();
+            onMove();
+          }}
+          data-testid="file-menu-move-to"
+        >
+          {t("filesPage.moveTo", "Move to…")}
+        </Menu.Item>
+
+        {(onDownload || onRename || onDuplicate) && <Menu.Divider />}
+        {onDownload && (
+          <Menu.Item
+            leftSection={<DownloadIcon fontSize="small" />}
+            onClick={(e) => {
+              e.stopPropagation();
+              onDownload();
+            }}
+            data-testid="file-menu-download"
+          >
+            {terminology.download}
+          </Menu.Item>
+        )}
+        {onRename && (
+          <Menu.Item
+            leftSection={<DriveFileRenameOutlineIcon fontSize="small" />}
+            onClick={(e) => {
+              e.stopPropagation();
+              onRename();
+            }}
+            data-testid="file-menu-rename"
+          >
+            {t("filesPage.rename", "Rename")}
+          </Menu.Item>
+        )}
+        {onDuplicate && (
+          <Menu.Item
+            leftSection={<ContentCopyOutlinedIcon fontSize="small" />}
+            onClick={(e) => {
+              e.stopPropagation();
+              onDuplicate();
+            }}
+            data-testid="file-menu-duplicate"
+          >
+            {t("filesPage.duplicate", "Duplicate")}
+          </Menu.Item>
+        )}
+
+        {(showSaveToServer || showVersionHistory) && <Menu.Divider />}
+        {/* Per-file Save to server; shown for local-only files. When
+            storage is off it stays visible but disabled with a tooltip. */}
+        {showSaveToServer && onSaveToServer && (
+          <Tooltip
+            label={saveToServerDisabledReason}
+            disabled={!saveToServerDisabledReason}
+            withinPortal
+            position="left"
+            multiline
+            w={240}
+          >
+            <Menu.Item
+              leftSection={<CloudUploadIcon fontSize="small" />}
+              disabled={Boolean(saveToServerDisabledReason)}
+              onClick={(e) => {
+                e.stopPropagation();
+                onSaveToServer();
+              }}
+              style={
+                saveToServerDisabledReason
+                  ? { pointerEvents: "auto" }
+                  : undefined
+              }
+            >
+              {t("filesPage.saveToServer", "Save to server")}
+            </Menu.Item>
+          </Tooltip>
+        )}
+        {showVersionHistory && onVersionHistory && (
+          <Menu.Item
+            leftSection={<HistoryIcon fontSize="small" />}
+            onClick={(e) => {
+              e.stopPropagation();
+              onVersionHistory();
+            }}
+          >
+            {t("filesPage.versionHistory", "Version history")}
+          </Menu.Item>
+        )}
+
+        <Menu.Divider />
+        <Menu.Item
+          color="red"
+          leftSection={<DeleteIcon fontSize="small" />}
+          onClick={(e) => {
+            e.stopPropagation();
+            onRemove();
+          }}
+        >
+          {t("filesPage.remove", "Delete")}
+        </Menu.Item>
+      </Menu.Dropdown>
+    </Menu>
+  );
+}
+
+/** Binds one file's kebab handlers, so grid and list wire them identically. */
+function useFileMenuHandlers(
+  props: FileGridProps,
+): (file: StirlingFileStub) => FileMenuHandlers {
+  const {
+    selectedFileIds,
+    onRemoveFiles,
+    onPromptMoveFiles,
+    onSaveToServer,
+    onVersionHistory,
+    onDownloadFile,
+    onRenameFile,
+    onDuplicateFile,
+    saveToServerDisabledReason,
+  } = props;
+  return (file: StirlingFileStub) => ({
+    onRemove: () => onRemoveFiles([file.id]),
+    // A move acts on the whole selection when this file is part of it.
+    onMove: () =>
+      onPromptMoveFiles(
+        selectedFileIds.has(file.id) ? Array.from(selectedFileIds) : [file.id],
+      ),
+    onDownload: onDownloadFile ? () => onDownloadFile(file) : undefined,
+    onRename: onRenameFile ? () => onRenameFile(file) : undefined,
+    onDuplicate: onDuplicateFile ? () => onDuplicateFile(file) : undefined,
+    onSaveToServer: onSaveToServer ? () => onSaveToServer(file) : undefined,
+    onVersionHistory: onVersionHistory
+      ? () => onVersionHistory(file)
+      : undefined,
+    saveToServerDisabledReason,
+  });
+}
+
+/** Per-file kebab handlers, shared by the card and row wrappers. */
+interface FileMenuHandlers {
+  onRemove: () => void;
+  onMove: () => void;
+  onDownload?: () => void;
+  onRename?: () => void;
+  onDuplicate?: () => void;
+  /** Kebab Save to server; only fires when file is local-only. */
+  onSaveToServer?: () => void;
+  /** Open the version-history modal; shown only when file has >1 version. */
+  onVersionHistory?: () => void;
+  /** When set, the kebab Save to server is disabled with this tooltip. */
+  saveToServerDisabledReason?: string | null;
+}
+
+interface FileCardProps extends FileMenuHandlers {
   file: StirlingFileStub;
   isSelected: boolean;
   isInWorkspace: boolean;
@@ -637,14 +843,6 @@ interface FileCardProps {
   multiSelectActive: boolean;
   onClick: (e: React.MouseEvent) => void;
   onDoubleClick: () => void;
-  onRemove: () => void;
-  onMove: () => void;
-  /** Kebab Save to server; only fires when file is local-only. */
-  onSaveToServer?: () => void;
-  /** Open the version-history modal; shown only when file has >1 version. */
-  onVersionHistory?: () => void;
-  /** When set, the kebab Save to server is disabled with this tooltip. */
-  saveToServerDisabledReason?: string | null;
 }
 
 function FileCard({
@@ -656,11 +854,7 @@ function FileCard({
   multiSelectActive,
   onClick,
   onDoubleClick,
-  onRemove,
-  onMove,
-  onSaveToServer,
-  onVersionHistory,
-  saveToServerDisabledReason,
+  ...menuHandlers
 }: FileCardProps) {
   const { t } = useTranslation();
   const cardRef = useRef<HTMLDivElement>(null);
@@ -784,126 +978,48 @@ function FileCard({
         )}
         <div className="files-page-card-meta">
           <span>{fileSize}</span>
-          <span>·</span>
+          <span className="files-page-card-meta-sep" aria-hidden="true">
+            ·
+          </span>
           <span>{fileDate}</span>
           <PolicyBadges fileId={file.id as string} />
         </div>
       </div>
       <div className="files-page-card-actions">
-        <Menu shadow="md" position="bottom-end" withinPortal>
-          <Menu.Target>
-            <ActionIcon
-              ref={kebabRef}
-              size="sm"
-              onClick={(e) => e.stopPropagation()}
-              aria-label={t("filesPage.fileMenu", "File actions")}
-              data-testid="file-card-actions"
-            >
-              <MoreVertIcon fontSize="small" />
-            </ActionIcon>
-          </Menu.Target>
-          <Menu.Dropdown>
-            <Menu.Item
-              leftSection={<OpenInNewIcon fontSize="small" />}
-              onClick={(e) => {
-                e.stopPropagation();
-                onDoubleClick();
-              }}
-            >
-              {t("filesPage.addToWorkspace", "Add to workspace")}
-            </Menu.Item>
-            <OpenInNewWindowMenuItem file={file} />
-            <Menu.Item
-              leftSection={<DriveFileMoveIcon fontSize="small" />}
-              onClick={(e) => {
-                e.stopPropagation();
-                onMove();
-              }}
-              data-testid="file-menu-move-to"
-            >
-              {t("filesPage.moveTo", "Move to…")}
-            </Menu.Item>
-            {/* Per-file Save to server; shown for local-only files. When
-                storage is off it stays visible but disabled with a tooltip. */}
-            {onSaveToServer && file.remoteStorageId == null && (
-              <Tooltip
-                label={saveToServerDisabledReason}
-                disabled={!saveToServerDisabledReason}
-                withinPortal
-                position="left"
-                multiline
-                w={240}
-              >
-                <Menu.Item
-                  leftSection={<CloudUploadIcon fontSize="small" />}
-                  disabled={Boolean(saveToServerDisabledReason)}
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    onSaveToServer();
-                  }}
-                  style={
-                    saveToServerDisabledReason
-                      ? { pointerEvents: "auto" }
-                      : undefined
-                  }
-                >
-                  {t("filesPage.saveToServer", "Save to server")}
-                </Menu.Item>
-              </Tooltip>
-            )}
-            {onVersionHistory && (file.versionNumber ?? 1) > 1 && (
-              <Menu.Item
-                leftSection={<HistoryIcon fontSize="small" />}
-                onClick={(e) => {
-                  e.stopPropagation();
-                  onVersionHistory();
-                }}
-              >
-                {t("filesPage.versionHistory", "Version history")}
-              </Menu.Item>
-            )}
-            <Menu.Divider />
-            <Menu.Item
-              color="red"
-              leftSection={<DeleteIcon fontSize="small" />}
-              onClick={(e) => {
-                e.stopPropagation();
-                onRemove();
-              }}
-            >
-              {t("filesPage.remove", "Delete")}
-            </Menu.Item>
-          </Menu.Dropdown>
-        </Menu>
+        <FileActionsMenu
+          file={file}
+          triggerRef={kebabRef}
+          onOpen={onDoubleClick}
+          {...menuHandlers}
+        />
       </div>
     </div>
   );
 }
 
-function ListView({
-  entries,
-  selectedFileIds,
-  activeWorkspaceFileIds,
-  onSelectFile,
-  onSetSelection,
-  onOpenFolder,
-  onOpenFile,
-  onMoveFiles,
-  onMoveFolder,
-  onRenameFolder,
-  onDeleteFolder,
-  onSaveToServer,
-  onVersionHistory,
-  saveToServerDisabledReason,
-  onChangeFolderAppearance,
-  onRemoveFiles,
-  onPromptMoveFiles,
-  sortMode,
-  onChangeSortMode,
-}: FileGridProps & {
-  sortMode?: FilesPageSortMode;
-  onChangeSortMode?: (next: FilesPageSortMode) => void;
-}) {
+function ListView(
+  props: FileGridProps & {
+    sortMode?: FilesPageSortMode;
+    onChangeSortMode?: (next: FilesPageSortMode) => void;
+  },
+) {
+  const {
+    entries,
+    selectedFileIds,
+    activeWorkspaceFileIds,
+    onSelectFile,
+    onSetSelection,
+    onOpenFolder,
+    onOpenFile,
+    onMoveFiles,
+    onMoveFolder,
+    onRenameFolder,
+    onDeleteFolder,
+    onChangeFolderAppearance,
+    sortMode,
+    onChangeSortMode,
+  } = props;
+  const menuHandlersFor = useFileMenuHandlers(props);
   const { t } = useTranslation();
 
   // Tri-state header checkbox state - computed from current entries.
@@ -1029,22 +1145,7 @@ function ListView({
                 onSelectFile(entry.file!.id, e.shiftKey, e.metaKey || e.ctrlKey)
               }
               onOpen={() => onOpenFile(entry.file!)}
-              onRemove={() => onRemoveFiles([entry.file!.id])}
-              onMove={() => {
-                const target = selectedFileIds.has(entry.file!.id)
-                  ? Array.from(selectedFileIds)
-                  : [entry.file!.id];
-                onPromptMoveFiles(target);
-              }}
-              onSaveToServer={
-                onSaveToServer ? () => onSaveToServer(entry.file!) : undefined
-              }
-              onVersionHistory={
-                onVersionHistory
-                  ? () => onVersionHistory(entry.file!)
-                  : undefined
-              }
-              saveToServerDisabledReason={saveToServerDisabledReason}
+              {...menuHandlersFor(entry.file)}
             />
           );
         }
@@ -1241,7 +1342,7 @@ function FolderRow({
   );
 }
 
-interface FileRowProps {
+interface FileRowProps extends FileMenuHandlers {
   file: StirlingFileStub;
   isSelected: boolean;
   isInWorkspace: boolean;
@@ -1251,14 +1352,6 @@ interface FileRowProps {
   multiSelectActive: boolean;
   onClick: (e: React.MouseEvent) => void;
   onOpen: () => void;
-  onRemove: () => void;
-  onMove: () => void;
-  /** Kebab Save to server; only fires when file is local-only. */
-  onSaveToServer?: () => void;
-  /** Open the version-history modal; shown only when file has >1 version. */
-  onVersionHistory?: () => void;
-  /** When set, the kebab Save to server is disabled with this tooltip. */
-  saveToServerDisabledReason?: string | null;
 }
 
 function FileRow({
@@ -1270,11 +1363,7 @@ function FileRow({
   multiSelectActive,
   onClick,
   onOpen,
-  onRemove,
-  onMove,
-  onSaveToServer,
-  onVersionHistory,
-  saveToServerDisabledReason,
+  ...menuHandlers
 }: FileRowProps) {
   const { t } = useTranslation();
   const kebabRef = useRef<HTMLButtonElement>(null);
@@ -1414,91 +1503,12 @@ function FileRow({
       <span role="gridcell">{fileSize}</span>
       <span role="gridcell">{fileDate}</span>
       <span role="gridcell">
-        <Menu shadow="md" position="bottom-end" withinPortal>
-          <Menu.Target>
-            <ActionIcon
-              ref={kebabRef}
-              variant="tertiary"
-              size="sm"
-              onClick={(e) => e.stopPropagation()}
-              aria-label={t("filesPage.fileMenu", "File actions")}
-              data-testid="file-card-actions"
-            >
-              <MoreVertIcon fontSize="small" />
-            </ActionIcon>
-          </Menu.Target>
-          <Menu.Dropdown>
-            <Menu.Item
-              leftSection={<OpenInNewIcon fontSize="small" />}
-              onClick={(e) => {
-                e.stopPropagation();
-                onOpen();
-              }}
-            >
-              {t("filesPage.addToWorkspace", "Add to workspace")}
-            </Menu.Item>
-            <OpenInNewWindowMenuItem file={file} />
-            <Menu.Item
-              leftSection={<DriveFileMoveIcon fontSize="small" />}
-              onClick={(e) => {
-                e.stopPropagation();
-                onMove();
-              }}
-            >
-              {t("filesPage.moveTo", "Move to…")}
-            </Menu.Item>
-            {/* Per-file Save to server; shown for local-only files. When
-              storage is off it stays visible but disabled with a tooltip. */}
-            {onSaveToServer && file.remoteStorageId == null && (
-              <Tooltip
-                label={saveToServerDisabledReason}
-                disabled={!saveToServerDisabledReason}
-                withinPortal
-                position="left"
-                multiline
-                w={240}
-              >
-                <Menu.Item
-                  leftSection={<CloudUploadIcon fontSize="small" />}
-                  disabled={Boolean(saveToServerDisabledReason)}
-                  onClick={(e) => {
-                    e.stopPropagation();
-                    onSaveToServer();
-                  }}
-                  style={
-                    saveToServerDisabledReason
-                      ? { pointerEvents: "auto" }
-                      : undefined
-                  }
-                >
-                  {t("filesPage.saveToServer", "Save to server")}
-                </Menu.Item>
-              </Tooltip>
-            )}
-            {onVersionHistory && (file.versionNumber ?? 1) > 1 && (
-              <Menu.Item
-                leftSection={<HistoryIcon fontSize="small" />}
-                onClick={(e) => {
-                  e.stopPropagation();
-                  onVersionHistory();
-                }}
-              >
-                {t("filesPage.versionHistory", "Version history")}
-              </Menu.Item>
-            )}
-            <Menu.Divider />
-            <Menu.Item
-              color="red"
-              leftSection={<DeleteIcon fontSize="small" />}
-              onClick={(e) => {
-                e.stopPropagation();
-                onRemove();
-              }}
-            >
-              {t("filesPage.remove", "Delete")}
-            </Menu.Item>
-          </Menu.Dropdown>
-        </Menu>
+        <FileActionsMenu
+          file={file}
+          triggerRef={kebabRef}
+          onOpen={onOpen}
+          {...menuHandlers}
+        />
       </span>
     </div>
   );
diff --git a/frontend/editor/src/core/components/filesPage/FileManagerView.tsx b/frontend/editor/src/core/components/filesPage/FileManagerView.tsx
index a0b0c6cfa1..36ffb9c4dc 100644
--- a/frontend/editor/src/core/components/filesPage/FileManagerView.tsx
+++ b/frontend/editor/src/core/components/filesPage/FileManagerView.tsx
@@ -33,6 +33,10 @@ import InfoOutlinedIcon from "@mui/icons-material/InfoOutlined";
 import CloudUploadIcon from "@mui/icons-material/CloudUpload";
 import KeyboardArrowRightIcon from "@mui/icons-material/KeyboardArrowRight";
 import RefreshIcon from "@mui/icons-material/Refresh";
+import { FilesToolbarBulkMenu } from "@app/components/filesPage/FilesToolbarBulkMenu";
+import { FilesToolbarCount } from "@app/components/filesPage/FilesToolbarCount";
+import { FilesToolbarFilterMenu } from "@app/components/filesPage/FilesToolbarFilterMenu";
+import { FilesToolbarSortMenu } from "@app/components/filesPage/FilesToolbarSortMenu";
 
 import { stripBasePath } from "@app/constants/app";
 import { useAuth } from "@app/auth/UseSession";
@@ -71,6 +75,10 @@ import { FolderNameDialog } from "@app/components/filesPage/FolderNameDialog";
 import { DeleteFolderDialog } from "@app/components/filesPage/DeleteFolderDialog";
 import { DeleteFilesDialog } from "@app/components/filesPage/DeleteFilesDialog";
 import { VersionHistoryModal } from "@app/components/filesPage/VersionHistoryModal";
+import { RenameFileDialog } from "@app/components/shared/RenameFileDialog";
+import { duplicateStoredFile } from "@app/utils/duplicateFile";
+import { downloadFileFromStorage } from "@app/utils/downloadUtils";
+import { fileStorage } from "@app/services/fileStorage";
 import { materializeServerStubs } from "@app/services/fileSyncService";
 import {
   FILES_PAGE_DRAG_TYPE,
@@ -794,6 +802,92 @@ export default function FileManagerView() {
     [removeFiles],
   );
 
+  // ─── per-file kebab: download / rename / duplicate ───────────────────────
+  // Same actions the file sidebar's kebab offers, so both surfaces match.
+
+  /** Cloud-only rows hold no bytes; pull them local before acting on them. */
+  const localCopyOf = useCallback(
+    async (file: StirlingFileStub): Promise<StirlingFileStub | null> => {
+      const [materialized] = await materializeServerStubs([file], {
+        addFiles: fileActions.addFilesWithOptions,
+        updateStub: fileActions.updateStirlingFileStub,
+      });
+      return materialized ?? null;
+    },
+    [fileActions],
+  );
+
+  const handleDownloadFile = useCallback(
+    async (file: StirlingFileStub) => {
+      try {
+        const local = await localCopyOf(file);
+        if (!local) return;
+        await downloadFileFromStorage(local);
+      } catch (err) {
+        console.error("[FilesPage] Download failed", err);
+        folders.setError(
+          t("filesPage.error.downloadFailed", "Could not download the file."),
+        );
+      }
+    },
+    [localCopyOf, folders, t],
+  );
+
+  const handleDuplicateFile = useCallback(
+    async (file: StirlingFileStub) => {
+      try {
+        const local = await localCopyOf(file);
+        if (!local) return;
+        const copyId = await duplicateStoredFile(
+          local,
+          allFiles.map((f) => f.name),
+          addFiles,
+        );
+        if (!copyId) {
+          throw new Error(`File "${local.name}" not found in storage`);
+        }
+        await refresh();
+      } catch (err) {
+        console.error("[FilesPage] Duplicate failed", err);
+        folders.setError(
+          t("filesPage.error.duplicateFailed", "Could not duplicate the file."),
+        );
+      }
+    },
+    [localCopyOf, allFiles, addFiles, refresh, folders, t],
+  );
+
+  const [renameTarget, setRenameTarget] = useState<StirlingFileStub | null>(
+    null,
+  );
+
+  // The stub name is what the UI and exports read, so a rename is a metadata
+  // write; the workbench copy (if any) is updated in the same breath.
+  const handleConfirmRename = useCallback(
+    async (name: string) => {
+      const file = renameTarget;
+      if (!file) return;
+      const local = await localCopyOf(file);
+      if (!local) return;
+      // quickKey is name|size|lastModified; a stale one would make a re-upload
+      // of the original look like a duplicate of the renamed file.
+      const quickKey = `${name}|${local.size}|${local.lastModified}`;
+      const saved = await fileStorage.updateFileMetadata(local.id, {
+        name,
+        quickKey,
+      });
+      if (!saved) {
+        throw new Error(
+          t("fileSidebar.rename.error", "Could not rename the file."),
+        );
+      }
+      fileActions.updateStirlingFileStub(local.id, { name, quickKey });
+      setRenameTarget(null);
+      await refresh();
+    },
+    [renameTarget, localCopyOf, fileActions, refresh, t],
+  );
+
   // ─── derived UI bits ────────────────────────────────────────────────────
   const currentFolderRecord = currentFolderId
     ? (foldersById.get(currentFolderId) ?? null)
@@ -803,6 +897,9 @@ export default function FileManagerView() {
     () => Array.from(selectedFileIds),
     [selectedFileIds],
   );
+  // A phone with files selected shows a contextual selection bar instead of the
+  // full toolbar - five bulk buttons plus filters cannot fit the width.
+  const mobileSelection = isMobile && selectedFiles.length > 0;
 
   // Local-only subset of selection; drives Save-to-server visibility.
   const localOnlySelectedStubs = useMemo(
@@ -1120,22 +1217,12 @@ export default function FileManagerView() {
           })()}
 
           <div className="files-page-toolbar">
-            <span className="files-page-toolbar-info">
-              {loading
-                ? t("filesPage.loading", "Loading…")
-                : t("filesPage.summary", "{{count}} items", {
-                    count: totalCount,
-                  })}
-              {selectedFiles.length > 0 && (
-                <span>
-                  {" "}
-                  ·{" "}
-                  {t("filesPage.selectedCount", "{{count}} selected", {
-                    count: selectedFiles.length,
-                  })}
-                </span>
-              )}
-            </span>
+            <FilesToolbarCount
+              loading={loading}
+              totalCount={totalCount}
+              selectedCount={selectedFiles.length}
+              selectionOnly={mobileSelection}
+            />
             {(() => {
               // Select all / Clear toggle over visible files.
               if (visibleFiles.length === 0) return null;
@@ -1175,289 +1262,382 @@ export default function FileManagerView() {
               );
             })()}
             <div className="files-page-toolbar-actions">
-              {selectedFiles.length > 0 &&
-                (() => {
-                  // Bulk-action labels; CSS collapses to icon-only below 900px.
-                  const addLabel =
+              {mobileSelection ? (
+                <FilesToolbarBulkMenu
+                  selectedCount={selectedFiles.length}
+                  onAddToWorkspace={() => handleAddToWorkspace(selectedFiles)}
+                  onSaveToServer={
+                    localOnlySelectedStubs.length > 0
+                      ? () => setSaveToServerTarget(localOnlySelectedStubs)
+                      : undefined
+                  }
+                  saveToServerDisabledReason={
+                    saveToServerDisabledReason ?? undefined
+                  }
+                  onShowDetails={
                     selectedFiles.length === 1
-                      ? t("filesPage.addToWorkspace", "Add to workspace")
-                      : t(
-                          "filesPage.addToWorkspaceCount",
-                          "Add {{count}} to workspace",
-                          { count: selectedFiles.length },
-                        );
-                  const moveLabel = t("filesPage.moveTo", "Move to…");
-                  const removeLabel = t("filesPage.remove", "Remove");
-                  return (
-                    // wrap="nowrap" keeps the row single-line.
-                    <Group gap="xs" wrap="nowrap">
-                      <Tooltip label={addLabel} withinPortal>
-                        <Button
-                          size="sm"
-                          leftSection={<OpenInNewIcon fontSize="small" />}
-                          onClick={() => handleAddToWorkspace(selectedFiles)}
-                          aria-label={addLabel}
-                          data-testid="add-to-workspace"
-                        >
-                          {addLabel}
-                        </Button>
-                      </Tooltip>
-                      {/* Save to server; shown whenever local-only files are
+                      ? () => setMobileDetailsOpen(true)
+                      : undefined
+                  }
+                  onMove={() => promptMoveFiles(selectedFiles)}
+                  onRemove={() => handleRemoveFiles(selectedFiles)}
+                />
+              ) : (
+                <>
+                  {selectedFiles.length > 0 &&
+                    (() => {
+                      // Bulk-action labels; CSS collapses to icon-only below 900px.
+                      const addLabel =
+                        selectedFiles.length === 1
+                          ? t("filesPage.addToWorkspace", "Add to workspace")
+                          : t(
+                              "filesPage.addToWorkspaceCount",
+                              "Add {{count}} to workspace",
+                              { count: selectedFiles.length },
+                            );
+                      const moveLabel = t("filesPage.moveTo", "Move to…");
+                      const removeLabel = t("filesPage.remove", "Remove");
+                      return (
+                        // wrap="nowrap" keeps the row single-line.
+                        <Group gap="xs" wrap="nowrap">
+                          <Tooltip label={addLabel} withinPortal>
+                            <Button
+                              size="sm"
+                              leftSection={<OpenInNewIcon fontSize="small" />}
+                              onClick={() =>
+                                handleAddToWorkspace(selectedFiles)
+                              }
+                              aria-label={addLabel}
+                              data-testid="add-to-workspace"
+                            >
+                              {addLabel}
+                            </Button>
+                          </Tooltip>
+                          {/* Save to server; shown whenever local-only files are
                           selected. When storage is off it stays visible but
                           disabled, tooltip pointing at the admin. */}
-                      {localOnlySelectedStubs.length > 0 && (
-                        <Tooltip
-                          label={
-                            saveToServerDisabledReason ??
-                            t("filesPage.saveToServer", "Save to server")
-                          }
-                          withinPortal
-                          multiline={Boolean(saveToServerDisabledReason)}
-                          w={saveToServerDisabledReason ? 240 : undefined}
-                        >
-                          <Button
-                            size="sm"
-                            variant="secondary"
-                            leftSection={<CloudUploadIcon fontSize="small" />}
-                            disabled={Boolean(saveToServerDisabledReason)}
-                            onClick={() =>
-                              setSaveToServerTarget(localOnlySelectedStubs)
-                            }
-                            style={{
-                              // Keep the tooltip hoverable while disabled.
-                              pointerEvents: saveToServerDisabledReason
-                                ? "auto"
-                                : undefined,
-                            }}
-                            aria-label={t(
-                              "filesPage.saveToServer",
-                              "Save to server",
+                          {localOnlySelectedStubs.length > 0 && (
+                            <Tooltip
+                              label={
+                                saveToServerDisabledReason ??
+                                t("filesPage.saveToServer", "Save to server")
+                              }
+                              withinPortal
+                              multiline={Boolean(saveToServerDisabledReason)}
+                              w={saveToServerDisabledReason ? 240 : undefined}
+                            >
+                              <Button
+                                size="sm"
+                                variant="secondary"
+                                leftSection={
+                                  <CloudUploadIcon fontSize="small" />
+                                }
+                                disabled={Boolean(saveToServerDisabledReason)}
+                                onClick={() =>
+                                  setSaveToServerTarget(localOnlySelectedStubs)
+                                }
+                                style={{
+                                  // Keep the tooltip hoverable while disabled.
+                                  pointerEvents: saveToServerDisabledReason
+                                    ? "auto"
+                                    : undefined,
+                                }}
+                                aria-label={t(
+                                  "filesPage.saveToServer",
+                                  "Save to server",
+                                )}
+                              >
+                                {t("filesPage.saveToServer", "Save to server")}
+                              </Button>
+                            </Tooltip>
+                          )}
+                          {/* Show details button on compact viewports. */}
+                          {selectedFiles.length === 1 &&
+                            isCompactDetailsViewport && (
+                              <Tooltip
+                                label={t(
+                                  "filesPage.showDetails",
+                                  "Show details",
+                                )}
+                                withinPortal
+                              >
+                                <Button
+                                  size="sm"
+                                  variant="secondary"
+                                  leftSection={
+                                    <InfoOutlinedIcon fontSize="small" />
+                                  }
+                                  onClick={() => setMobileDetailsOpen(true)}
+                                  aria-label={t(
+                                    "filesPage.showDetails",
+                                    "Show details",
+                                  )}
+                                >
+                                  {t("filesPage.showDetails", "Show details")}
+                                </Button>
+                              </Tooltip>
                             )}
-                          >
-                            {t("filesPage.saveToServer", "Save to server")}
-                          </Button>
-                        </Tooltip>
-                      )}
-                      {/* Show details button on compact viewports. */}
-                      {selectedFiles.length === 1 &&
-                        isCompactDetailsViewport && (
-                          <Tooltip
-                            label={t("filesPage.showDetails", "Show details")}
-                            withinPortal
-                          >
+                          <Tooltip label={moveLabel} withinPortal>
                             <Button
                               size="sm"
                               variant="secondary"
                               leftSection={
-                                <InfoOutlinedIcon fontSize="small" />
+                                <DriveFileMoveIcon fontSize="small" />
                               }
-                              onClick={() => setMobileDetailsOpen(true)}
-                              aria-label={t(
-                                "filesPage.showDetails",
-                                "Show details",
-                              )}
+                              onClick={() => promptMoveFiles(selectedFiles)}
+                              aria-label={moveLabel}
                             >
-                              {t("filesPage.showDetails", "Show details")}
+                              {moveLabel}
                             </Button>
                           </Tooltip>
+                          <Tooltip label={removeLabel} withinPortal>
+                            <Button
+                              size="sm"
+                              accent="danger"
+                              variant="secondary"
+                              leftSection={<DeleteIcon fontSize="small" />}
+                              onClick={() => handleRemoveFiles(selectedFiles)}
+                              aria-label={removeLabel}
+                            >
+                              {removeLabel}
+                            </Button>
+                          </Tooltip>
+                          <Tooltip
+                            label={t(
+                              "filesPage.clearSelection",
+                              "Clear selection",
+                            )}
+                            withinPortal
+                          >
+                            <ActionIcon
+                              variant="tertiary"
+                              size="md"
+                              onClick={() => clearSelection()}
+                              aria-label={t(
+                                "filesPage.clearSelection",
+                                "Clear selection",
+                              )}
+                            >
+                              &times;
+                            </ActionIcon>
+                          </Tooltip>
+                        </Group>
+                      );
+                    })()}
+                  {selectedFiles.length > 0 && (
+                    <span
+                      className="files-page-toolbar-divider"
+                      aria-hidden="true"
+                    />
+                  )}
+                  {isMobile ? (
+                    /* Side by side these need ~480px and were truncating to
+                   stubs like "All sour"; collapsed they read in full. */
+                    <>
+                      <FilesToolbarFilterMenu
+                        originFilter={originFilter}
+                        onOriginChange={setOriginFilter}
+                        availableTypes={availableTypes}
+                        typeFilter={typeFilter}
+                        onTypeChange={setTypeFilter}
+                        search={search}
+                        onSearchChange={setSearch}
+                      />
+                      <FilesToolbarSortMenu
+                        value={sortMode}
+                        onChange={setSortMode}
+                      />
+                    </>
+                  ) : (
+                    <>
+                      <Select
+                        size="xs"
+                        value={originFilter}
+                        onChange={(value) =>
+                          value &&
+                          setOriginFilter(value as FilesPageOriginFilter)
+                        }
+                        data={[
+                          {
+                            value: "all",
+                            label: t("filesPage.origin.all", "All sources"),
+                          },
+                          {
+                            value: "local",
+                            label: t("filesPage.origin.local", "Local"),
+                          },
+                          {
+                            value: "cloud",
+                            label: t("filesPage.origin.cloud", "Cloud"),
+                          },
+                          {
+                            value: "shared-with-me",
+                            label: t("filesPage.origin.shared", "Shared"),
+                          },
+                        ]}
+                        style={{ width: 140 }}
+                        aria-label={t(
+                          "filesPage.originFilter",
+                          "Filter by source",
                         )}
-                      <Tooltip label={moveLabel} withinPortal>
-                        <Button
-                          size="sm"
-                          variant="secondary"
-                          leftSection={<DriveFileMoveIcon fontSize="small" />}
-                          onClick={() => promptMoveFiles(selectedFiles)}
-                          aria-label={moveLabel}
-                        >
-                          {moveLabel}
-                        </Button>
-                      </Tooltip>
-                      <Tooltip label={removeLabel} withinPortal>
-                        <Button
-                          size="sm"
-                          accent="danger"
-                          variant="secondary"
-                          leftSection={<DeleteIcon fontSize="small" />}
-                          onClick={() => handleRemoveFiles(selectedFiles)}
-                          aria-label={removeLabel}
-                        >
-                          {removeLabel}
-                        </Button>
-                      </Tooltip>
-                      <Tooltip
-                        label={t("filesPage.clearSelection", "Clear selection")}
-                        withinPortal
-                      >
-                        <ActionIcon
-                          variant="tertiary"
-                          size="md"
-                          onClick={() => clearSelection()}
+                      />
+                      {availableTypes.length > 1 && (
+                        <MultiSelect
+                          size="xs"
+                          value={typeFilter}
+                          onChange={setTypeFilter}
+                          data={availableTypes.map((ext) => ({
+                            value: ext,
+                            label: ext,
+                          }))}
+                          placeholder={
+                            typeFilter.length === 0
+                              ? t("filesPage.typeFilter.allTypes", "All types")
+                              : undefined
+                          }
+                          clearable
+                          hidePickedOptions
+                          searchable={false}
+                          style={{ width: 160 }}
                           aria-label={t(
-                            "filesPage.clearSelection",
-                            "Clear selection",
+                            "filesPage.typeFilter.label",
+                            "Filter by type",
                           )}
-                        >
-                          &times;
-                        </ActionIcon>
-                      </Tooltip>
-                    </Group>
-                  );
-                })()}
-              {selectedFiles.length > 0 && (
-                <span
-                  className="files-page-toolbar-divider"
-                  aria-hidden="true"
-                />
+                        />
+                      )}
+                      <TextInput
+                        size="xs"
+                        value={search}
+                        onChange={(e) => setSearch(e.currentTarget.value)}
+                        placeholder={t(
+                          "filesPage.search.placeholder",
+                          "Filter files…",
+                        )}
+                        leftSection={<SearchIcon sx={{ fontSize: "1rem" }} />}
+                        rightSection={
+                          search ? (
+                            <ActionIcon
+                              variant="tertiary"
+                              size="sm"
+                              onClick={() => setSearch("")}
+                              aria-label={t(
+                                "filesPage.search.clear",
+                                "Clear filter",
+                              )}
+                            >
+                              <CloseIcon sx={{ fontSize: "0.9rem" }} />
+                            </ActionIcon>
+                          ) : null
+                        }
+                        aria-label={t(
+                          "filesPage.search.label",
+                          "Filter files by name",
+                        )}
+                        style={{ width: 180 }}
+                      />
+                      <Select
+                        size="xs"
+                        value={sortMode}
+                        onChange={(value) =>
+                          value && setSortMode(value as FilesPageSortMode)
+                        }
+                        data={[
+                          {
+                            value: "modified-desc",
+                            label: t(
+                              "filesPage.sort.modifiedDesc",
+                              "Recent first",
+                            ),
+                          },
+                          {
+                            value: "modified-asc",
+                            label: t(
+                              "filesPage.sort.modifiedAsc",
+                              "Oldest first",
+                            ),
+                          },
+                          {
+                            value: "name-asc",
+                            label: t("filesPage.sort.nameAsc", "Name A→Z"),
+                          },
+                          {
+                            value: "name-desc",
+                            label: t("filesPage.sort.nameDesc", "Name Z→A"),
+                          },
+                          {
+                            value: "size-desc",
+                            label: t(
+                              "filesPage.sort.sizeDesc",
+                              "Largest first",
+                            ),
+                          },
+                          {
+                            value: "size-asc",
+                            label: t(
+                              "filesPage.sort.sizeAsc",
+                              "Smallest first",
+                            ),
+                          },
+                        ]}
+                        style={{ width: 160 }}
+                      />
+                    </>
+                  )}
+                  <span
+                    className="files-page-toolbar-divider"
+                    aria-hidden="true"
+                  />
+                  <SegmentedControl
+                    size="sm"
+                    value={viewMode}
+                    onChange={(v) => {
+                      // Mantine only emits values declared in `data[].value`, but
+                      // narrow defensively so a future third option can't silently
+                      // bypass the FilesPageViewMode contract. Derived from the
+                      // `as const` tuple so adding a mode anywhere in the code
+                      // base automatically widens the guard here.
+                      if (
+                        !(FILES_PAGE_VIEW_MODES as readonly string[]).includes(
+                          v,
+                        )
+                      )
+                        return;
+                      setViewMode(v as (typeof FILES_PAGE_VIEW_MODES)[number]);
+                    }}
+                    aria-label={t("filesPage.viewMode.label", "View mode")}
+                    options={[
+                      {
+                        value: "grid",
+                        label: (
+                          <span
+                            className="files-page-view-toggle-icon"
+                            title={t("filesPage.viewMode.grid", "Grid view")}
+                          >
+                            <GridViewIcon fontSize="small" />
+                            <span className="files-page-sr-only">
+                              {t("filesPage.viewMode.grid", "Grid view")}
+                            </span>
+                          </span>
+                        ),
+                      },
+                      {
+                        value: "list",
+                        label: (
+                          <span
+                            className="files-page-view-toggle-icon"
+                            title={t("filesPage.viewMode.list", "List view")}
+                          >
+                            <ViewListIcon fontSize="small" />
+                            <span className="files-page-sr-only">
+                              {t("filesPage.viewMode.list", "List view")}
+                            </span>
+                          </span>
+                        ),
+                      },
+                    ]}
+                  />
+                </>
               )}
-              <Select
-                size="xs"
-                value={originFilter}
-                onChange={(value) =>
-                  value && setOriginFilter(value as FilesPageOriginFilter)
-                }
-                data={[
-                  {
-                    value: "all",
-                    label: t("filesPage.origin.all", "All sources"),
-                  },
-                  {
-                    value: "local",
-                    label: t("filesPage.origin.local", "Local"),
-                  },
-                  {
-                    value: "cloud",
-                    label: t("filesPage.origin.cloud", "Cloud"),
-                  },
-                  {
-                    value: "shared-with-me",
-                    label: t("filesPage.origin.shared", "Shared"),
-                  },
-                ]}
-                style={{ width: 140 }}
-                aria-label={t("filesPage.originFilter", "Filter by source")}
-              />
-              {availableTypes.length > 1 && (
-                <MultiSelect
-                  size="xs"
-                  value={typeFilter}
-                  onChange={setTypeFilter}
-                  data={availableTypes.map((ext) => ({
-                    value: ext,
-                    label: ext,
-                  }))}
-                  placeholder={
-                    typeFilter.length === 0
-                      ? t("filesPage.typeFilter.allTypes", "All types")
-                      : undefined
-                  }
-                  clearable
-                  hidePickedOptions
-                  searchable={false}
-                  style={{ width: 160 }}
-                  aria-label={t("filesPage.typeFilter.label", "Filter by type")}
-                />
-              )}
-              <TextInput
-                size="xs"
-                value={search}
-                onChange={(e) => setSearch(e.currentTarget.value)}
-                placeholder={t("filesPage.search.placeholder", "Filter files…")}
-                leftSection={<SearchIcon sx={{ fontSize: "1rem" }} />}
-                rightSection={
-                  search ? (
-                    <ActionIcon
-                      variant="tertiary"
-                      size="sm"
-                      onClick={() => setSearch("")}
-                      aria-label={t("filesPage.search.clear", "Clear filter")}
-                    >
-                      <CloseIcon sx={{ fontSize: "0.9rem" }} />
-                    </ActionIcon>
-                  ) : null
-                }
-                aria-label={t("filesPage.search.label", "Filter files by name")}
-                style={{ width: 180 }}
-              />
-              <Select
-                size="xs"
-                value={sortMode}
-                onChange={(value) =>
-                  value && setSortMode(value as FilesPageSortMode)
-                }
-                data={[
-                  {
-                    value: "modified-desc",
-                    label: t("filesPage.sort.modifiedDesc", "Recent first"),
-                  },
-                  {
-                    value: "modified-asc",
-                    label: t("filesPage.sort.modifiedAsc", "Oldest first"),
-                  },
-                  {
-                    value: "name-asc",
-                    label: t("filesPage.sort.nameAsc", "Name A→Z"),
-                  },
-                  {
-                    value: "name-desc",
-                    label: t("filesPage.sort.nameDesc", "Name Z→A"),
-                  },
-                  {
-                    value: "size-desc",
-                    label: t("filesPage.sort.sizeDesc", "Largest first"),
-                  },
-                  {
-                    value: "size-asc",
-                    label: t("filesPage.sort.sizeAsc", "Smallest first"),
-                  },
-                ]}
-                style={{ width: 160 }}
-              />
-              <span className="files-page-toolbar-divider" aria-hidden="true" />
-              <SegmentedControl
-                size="sm"
-                value={viewMode}
-                onChange={(v) => {
-                  // Mantine only emits values declared in `data[].value`, but
-                  // narrow defensively so a future third option can't silently
-                  // bypass the FilesPageViewMode contract. Derived from the
-                  // `as const` tuple so adding a mode anywhere in the code
-                  // base automatically widens the guard here.
-                  if (!(FILES_PAGE_VIEW_MODES as readonly string[]).includes(v))
-                    return;
-                  setViewMode(v as (typeof FILES_PAGE_VIEW_MODES)[number]);
-                }}
-                aria-label={t("filesPage.viewMode.label", "View mode")}
-                options={[
-                  {
-                    value: "grid",
-                    label: (
-                      <span
-                        className="files-page-view-toggle-icon"
-                        title={t("filesPage.viewMode.grid", "Grid view")}
-                      >
-                        <GridViewIcon fontSize="small" />
-                        <span className="files-page-sr-only">
-                          {t("filesPage.viewMode.grid", "Grid view")}
-                        </span>
-                      </span>
-                    ),
-                  },
-                  {
-                    value: "list",
-                    label: (
-                      <span
-                        className="files-page-view-toggle-icon"
-                        title={t("filesPage.viewMode.list", "List view")}
-                      >
-                        <ViewListIcon fontSize="small" />
-                        <span className="files-page-sr-only">
-                          {t("filesPage.viewMode.list", "List view")}
-                        </span>
-                      </span>
-                    ),
-                  },
-                ]}
-              />
             </div>
           </div>
 
@@ -1503,6 +1683,9 @@ export default function FileManagerView() {
               onPromptMoveFiles={promptMoveFiles}
               onSaveToServer={(file) => setSaveToServerTarget([file])}
               onVersionHistory={(file) => setVersionHistoryFile(file)}
+              onDownloadFile={handleDownloadFile}
+              onRenameFile={setRenameTarget}
+              onDuplicateFile={handleDuplicateFile}
               saveToServerDisabledReason={saveToServerDisabledReason}
               // Center-of-grid CTAs when the empty state shows - same
               // handlers the corner header buttons use so behaviour
@@ -1662,6 +1845,14 @@ export default function FileManagerView() {
         onConfirm={confirmRemoveFiles}
       />
 
+      {/* Rename (opened from the card kebab). */}
+      <RenameFileDialog
+        opened={Boolean(renameTarget)}
+        fileName={renameTarget?.name ?? ""}
+        onClose={() => setRenameTarget(null)}
+        onSubmit={handleConfirmRename}
+      />
+
       {/* Version journey in a modal (opened from the card kebab). */}
       <VersionHistoryModal
         opened={Boolean(versionHistoryFile)}
diff --git a/frontend/editor/src/core/components/filesPage/FilesPage.css b/frontend/editor/src/core/components/filesPage/FilesPage.css
index aa9d8248aa..6d4070edb6 100644
--- a/frontend/editor/src/core/components/filesPage/FilesPage.css
+++ b/frontend/editor/src/core/components/filesPage/FilesPage.css
@@ -215,6 +215,17 @@
 .files-page-toolbar-actions .mantine-Button-label {
   display: none;
 }
+/* Exception: the bulk-actions trigger IS its label. Collapsed to an icon it
+   would read as a bare chevron with nothing to say what it opens. */
+.files-page-toolbar-actions
+  .files-page-toolbar-bulk-trigger
+  .mantine-Button-label {
+  display: inline;
+}
+.files-page-toolbar-actions .files-page-toolbar-bulk-trigger {
+  padding-left: 0.75rem;
+  padding-right: 0.5rem;
+}
 /* Pin the view toggle: never let it clip off the right. flex-shrink:0
    keeps its width fixed; the rest of the row shrinks around it. */
 .files-page-toolbar-actions .mantine-SegmentedControl-root {
@@ -476,6 +487,23 @@
   gap: 0.4rem;
 }
 
+/* Narrow cards: let the values wrap as whole units onto their own lines rather
+   than breaking mid-value ("239.26 / KB") around a stranded separator. */
+@media (max-width: 64rem) {
+  .files-page-card-meta {
+    flex-wrap: wrap;
+    align-items: baseline;
+    column-gap: 0.4rem;
+    row-gap: 0.05rem;
+  }
+  .files-page-card-meta > span {
+    white-space: nowrap;
+  }
+  .files-page-card-meta-sep {
+    display: none;
+  }
+}
+
 /* Parent-folder breadcrumb shown on cards/rows during recursive search so
    the user can tell which folder each hit lives in without navigating. */
 .files-page-card-path {
@@ -1295,30 +1323,38 @@
      sits next to the Upload button without breaking the action row. */
   display: none;
 }
-@media (max-width: 900px) {
+@media (max-width: 1024px) {
   .files-page-toolbar {
     /* nowrap so "7 items" + "Select all" sit on the same row as the
        filter dropdowns and view-toggle instead of stacking on three
-       separate lines. Per-child min-width:0 lets them shrink as needed.
-       Used to only kick in at ≤640px which left a broken zone where
-       both side panels were hidden but the toolbar was still wrapping
-       to multiple rows. */
+       separate lines. Runs to the app's mobile breakpoint: capping it at
+       900px left 901-1024px wrapping to two rows, which is the band the
+       mobile layout actually renders in.
+
+       Scrolls rather than clips. With a selection active the bulk-action
+       strip cannot fit any phone width, and `overflow-x: hidden` put those
+       buttons permanently out of reach behind the edge. */
     flex-wrap: nowrap;
     gap: 0.35rem;
     padding: 0.35rem 0.5rem;
     min-height: auto;
-    overflow-x: hidden;
+    overflow-x: auto;
+    scrollbar-width: none;
+  }
+  .files-page-toolbar::-webkit-scrollbar {
+    display: none;
   }
   .files-page-toolbar-info {
-    /* Was `flex-basis: 100%` which forced a row break. Let it share
-       the row, shrink hard if needed, and ellipsize so the count line
-       collapses gracefully (was overlapping the bulk-action buttons
-       at ~400px because no truncation rule existed). */
-    flex: 0 1 auto;
+    /* The toolbar's only status text. Pinned, because against nowrap
+       siblings it lost every shrink round and rendered as "3 i". */
+    flex-shrink: 0;
     min-width: 0;
     white-space: nowrap;
-    overflow: hidden;
-    text-overflow: ellipsis;
+  }
+  /* Filter and sort collapse to icon triggers here (see FilesToolbar*Menu);
+     they are the whole control, so they never shrink. */
+  .files-page-toolbar-icon-btn {
+    flex-shrink: 0;
   }
   .files-page-toolbar-actions {
     flex-wrap: nowrap;
@@ -1350,41 +1386,48 @@
    navigation, so the in-header Home/Apps/Close trio is duplicated
    and the first to go. Same for "Upload" - the user can use the
    centre drop overlay. */
-@media (max-width: 640px) {
-  /* Drop the 3-column grid on phones; flex-wrap lets the search slip onto
-   * its own row when chrome is too cramped to share. */
+/* ── Mobile + tablet chrome (≤1024px = useIsMobile) ──────────────────
+   The desktop header is a 3-column grid whose middle track can grow to
+   40rem. Below ~1024px that track eats the row: the breadcrumb column
+   collapsed to ~36px (wrapping "All files" to two lines) and the action
+   column overflowed, pushing Upload off the right edge. One flex row
+   instead - breadcrumb and actions keep their intrinsic width and the
+   search takes whatever is left. Ends at the app's mobile breakpoint so
+   it matches the layout HomePage is already rendering. */
+@media (max-width: 1024px) {
   .files-page-header {
     display: flex;
-    flex-wrap: wrap;
+    flex-wrap: nowrap;
+    align-items: center;
     gap: 0.4rem;
-    padding: 0 0.4rem;
+    padding: 0.25rem 0.4rem;
     overflow-x: hidden;
   }
-  .files-page-header [data-mobile-hide="true"] {
-    display: none !important;
+  .files-page-header-search {
+    flex: 1 1 auto;
+    min-width: 0;
+    justify-content: flex-start;
   }
-  .files-page-header [data-desktop-hide="true"] {
-    display: inline-flex !important;
-  }
-  /* Mobile-hide for sub-toolbar create buttons. */
-  .files-page-toolbar [data-mobile-hide="true"] {
-    display: none !important;
+  /* Undo the fixed 24rem basis so the pill tracks the row's spare width. */
+  .files-page-header-search .super-search {
+    flex: 1 1 auto;
+    width: 100%;
+    max-width: none;
   }
   .files-page-header-actions {
+    flex: 0 0 auto;
     margin-left: auto;
-    gap: 0.3rem;
+    gap: 0.25rem;
     flex-wrap: nowrap;
   }
   .files-page-breadcrumbs {
+    flex: 0 1 auto;
     font-size: 0.85rem;
     flex-wrap: nowrap;
     overflow-x: auto;
     min-width: 0;
   }
-  /* Upload becomes an icon-only square button on mobile so the action
-     row stops getting clipped. Scoped to `.files-page-header-actions`
-     so the Back button at the header level keeps its visible "Back"
-     label (Back has no other on-screen indicator that it's about leaving). */
+  /* Icon-only actions: the labels are what pushed Upload past the edge. */
   .files-page-header-actions .mantine-Button-root {
     padding-left: 0.55rem;
     padding-right: 0.55rem;
@@ -1395,6 +1438,9 @@
   .files-page-header-actions .mantine-Button-label {
     display: none;
   }
+}
+
+@media (max-width: 640px) {
   /* Grid: single column on very narrow phones; two columns from ~440px */
   .files-page-grid {
     grid-template-columns: repeat(auto-fill, minmax(9rem, 1fr));
diff --git a/frontend/editor/src/core/components/filesPage/FilesToolbarBulkMenu.tsx b/frontend/editor/src/core/components/filesPage/FilesToolbarBulkMenu.tsx
new file mode 100644
index 0000000000..3e344ac7b0
--- /dev/null
+++ b/frontend/editor/src/core/components/filesPage/FilesToolbarBulkMenu.tsx
@@ -0,0 +1,104 @@
+import { Menu } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import CloudUploadIcon from "@mui/icons-material/CloudUpload";
+import DeleteIcon from "@mui/icons-material/Delete";
+import DriveFileMoveIcon from "@mui/icons-material/DriveFileMove";
+import ExpandMoreIcon from "@mui/icons-material/ExpandMore";
+import InfoOutlinedIcon from "@mui/icons-material/InfoOutlined";
+import OpenInNewIcon from "@mui/icons-material/OpenInNew";
+
+import { Button } from "@app/ui/Button";
+
+interface FilesToolbarBulkMenuProps {
+  selectedCount: number;
+  onAddToWorkspace: () => void;
+  /** Local-only files in the selection; omit when there are none to upload. */
+  onSaveToServer?: () => void;
+  /** Set when storage is off - the item stays listed but disabled. */
+  saveToServerDisabledReason?: string;
+  onShowDetails?: () => void;
+  onMove: () => void;
+  onRemove: () => void;
+}
+
+/**
+ * Bulk actions behind one trigger. The full strip is five buttons wide, which
+ * no phone can hold alongside the count and the clear control, so rather than
+ * letting the row scroll them off the edge they collapse into a menu where
+ * every action keeps its label.
+ */
+export function FilesToolbarBulkMenu({
+  selectedCount,
+  onAddToWorkspace,
+  onSaveToServer,
+  saveToServerDisabledReason,
+  onShowDetails,
+  onMove,
+  onRemove,
+}: FilesToolbarBulkMenuProps) {
+  const { t } = useTranslation();
+
+  const addLabel =
+    selectedCount === 1
+      ? t("filesPage.addToWorkspace", "Add to workspace")
+      : t("filesPage.addToWorkspaceCount", "Add {{count}} to workspace", {
+          count: selectedCount,
+        });
+
+  return (
+    <Menu shadow="md" width={230} position="bottom-end" withinPortal>
+      <Menu.Target>
+        <Button
+          size="sm"
+          variant="secondary"
+          className="files-page-toolbar-bulk-trigger"
+          rightSection={<ExpandMoreIcon sx={{ fontSize: "1.1rem" }} />}
+          aria-label={t("filesPage.bulkActions", "Actions")}
+        >
+          {t("filesPage.bulkActions", "Actions")}
+        </Button>
+      </Menu.Target>
+      <Menu.Dropdown>
+        <Menu.Item
+          leftSection={<OpenInNewIcon sx={{ fontSize: "1.1rem" }} />}
+          onClick={onAddToWorkspace}
+        >
+          {addLabel}
+        </Menu.Item>
+        {onSaveToServer && (
+          <Menu.Item
+            leftSection={<CloudUploadIcon sx={{ fontSize: "1.1rem" }} />}
+            disabled={Boolean(saveToServerDisabledReason)}
+            onClick={onSaveToServer}
+          >
+            {t("filesPage.saveToServer", "Save to server")}
+          </Menu.Item>
+        )}
+        {onShowDetails && (
+          <Menu.Item
+            leftSection={<InfoOutlinedIcon sx={{ fontSize: "1.1rem" }} />}
+            onClick={onShowDetails}
+          >
+            {t("filesPage.showDetails", "Show details")}
+          </Menu.Item>
+        )}
+        <Menu.Item
+          leftSection={<DriveFileMoveIcon sx={{ fontSize: "1.1rem" }} />}
+          onClick={onMove}
+        >
+          {t("filesPage.moveTo", "Move to…")}
+        </Menu.Item>
+        <Menu.Divider />
+        <Menu.Item
+          color="red"
+          leftSection={<DeleteIcon sx={{ fontSize: "1.1rem" }} />}
+          onClick={onRemove}
+        >
+          {t("filesPage.remove", "Remove")}
+        </Menu.Item>
+      </Menu.Dropdown>
+    </Menu>
+  );
+}
+
+export default FilesToolbarBulkMenu;
diff --git a/frontend/editor/src/core/components/filesPage/FilesToolbarCount.tsx b/frontend/editor/src/core/components/filesPage/FilesToolbarCount.tsx
new file mode 100644
index 0000000000..d808638d63
--- /dev/null
+++ b/frontend/editor/src/core/components/filesPage/FilesToolbarCount.tsx
@@ -0,0 +1,41 @@
+import { useTranslation } from "react-i18next";
+
+interface FilesToolbarCountProps {
+  loading: boolean;
+  totalCount: number;
+  selectedCount: number;
+  /**
+   * Selection-bar mode: report only the selection. A phone spends the room on
+   * the actions rather than on "3 items · 3 selected".
+   */
+  selectionOnly: boolean;
+}
+
+/** Status text at the head of the files toolbar. */
+export function FilesToolbarCount({
+  loading,
+  totalCount,
+  selectedCount,
+  selectionOnly,
+}: FilesToolbarCountProps) {
+  const { t } = useTranslation();
+
+  const selected = t("filesPage.selectedCount", "{{count}} selected", {
+    count: selectedCount,
+  });
+
+  if (selectionOnly) {
+    return <span className="files-page-toolbar-info">{selected}</span>;
+  }
+
+  return (
+    <span className="files-page-toolbar-info">
+      {loading
+        ? t("filesPage.loading", "Loading…")
+        : t("filesPage.summary", "{{count}} items", { count: totalCount })}
+      {selectedCount > 0 && <span> · {selected}</span>}
+    </span>
+  );
+}
+
+export default FilesToolbarCount;
diff --git a/frontend/editor/src/core/components/filesPage/FilesToolbarFilterMenu.tsx b/frontend/editor/src/core/components/filesPage/FilesToolbarFilterMenu.tsx
new file mode 100644
index 0000000000..81d84daf67
--- /dev/null
+++ b/frontend/editor/src/core/components/filesPage/FilesToolbarFilterMenu.tsx
@@ -0,0 +1,149 @@
+import { MultiSelect, Popover, Select, Stack, TextInput } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import CloseIcon from "@mui/icons-material/Close";
+import SearchIcon from "@mui/icons-material/Search";
+import TuneIcon from "@mui/icons-material/Tune";
+
+import { ActionIcon } from "@app/ui/ActionIcon";
+import { Button } from "@app/ui/Button";
+import { Tooltip } from "@app/components/shared/Tooltip";
+import type { FilesPageOriginFilter } from "@app/contexts/FilesPageContext";
+
+interface FilesToolbarFilterMenuProps {
+  originFilter: FilesPageOriginFilter;
+  onOriginChange: (value: FilesPageOriginFilter) => void;
+  availableTypes: string[];
+  typeFilter: string[];
+  onTypeChange: (value: string[]) => void;
+  search: string;
+  onSearchChange: (value: string) => void;
+}
+
+/**
+ * Source, type and name filters collapsed behind one icon. Side by side these
+ * three need ~480px, so on narrow viewports they were each truncated to
+ * unreadable stubs ("All sour"). In the popover they get their full width back,
+ * and a dot on the trigger keeps an active filter discoverable while hidden.
+ */
+export function FilesToolbarFilterMenu({
+  originFilter,
+  onOriginChange,
+  availableTypes,
+  typeFilter,
+  onTypeChange,
+  search,
+  onSearchChange,
+}: FilesToolbarFilterMenuProps) {
+  const { t } = useTranslation();
+
+  const activeCount =
+    (originFilter !== "all" ? 1 : 0) +
+    (typeFilter.length > 0 ? 1 : 0) +
+    (search.trim() !== "" ? 1 : 0);
+  const label = t("filesPage.filters.label", "Filters");
+
+  const clearAll = () => {
+    onOriginChange("all");
+    onTypeChange([]);
+    onSearchChange("");
+  };
+
+  return (
+    <Popover width={260} position="bottom-end" shadow="md" withinPortal>
+      <Popover.Target>
+        <div>
+          <Tooltip
+            content={
+              activeCount > 0
+                ? t(
+                    "filesPage.filters.activeCount",
+                    "{{count}} filters active",
+                    {
+                      count: activeCount,
+                    },
+                  )
+                : label
+            }
+            position="bottom"
+          >
+            <ActionIcon
+              variant={activeCount > 0 ? "primary" : "tertiary"}
+              size="sm"
+              aria-label={label}
+              className="files-page-toolbar-icon-btn"
+            >
+              <TuneIcon sx={{ fontSize: "1.1rem" }} />
+            </ActionIcon>
+          </Tooltip>
+        </div>
+      </Popover.Target>
+      <Popover.Dropdown>
+        <Stack gap="xs">
+          <TextInput
+            size="xs"
+            value={search}
+            onChange={(e) => onSearchChange(e.currentTarget.value)}
+            placeholder={t("filesPage.search.placeholder", "Filter files…")}
+            leftSection={<SearchIcon sx={{ fontSize: "1rem" }} />}
+            rightSection={
+              search ? (
+                <ActionIcon
+                  variant="tertiary"
+                  size="sm"
+                  onClick={() => onSearchChange("")}
+                  aria-label={t("filesPage.search.clear", "Clear filter")}
+                >
+                  <CloseIcon sx={{ fontSize: "0.9rem" }} />
+                </ActionIcon>
+              ) : null
+            }
+            aria-label={t("filesPage.search.label", "Filter files by name")}
+          />
+          <Select
+            size="xs"
+            value={originFilter}
+            onChange={(value) =>
+              value && onOriginChange(value as FilesPageOriginFilter)
+            }
+            data={[
+              { value: "all", label: t("filesPage.origin.all", "All sources") },
+              { value: "local", label: t("filesPage.origin.local", "Local") },
+              { value: "cloud", label: t("filesPage.origin.cloud", "Cloud") },
+              {
+                value: "shared-with-me",
+                label: t("filesPage.origin.shared", "Shared"),
+              },
+            ]}
+            label={t("filesPage.originFilter", "Filter by source")}
+            comboboxProps={{ withinPortal: false }}
+          />
+          {availableTypes.length > 1 && (
+            <MultiSelect
+              size="xs"
+              value={typeFilter}
+              onChange={onTypeChange}
+              data={availableTypes.map((ext) => ({ value: ext, label: ext }))}
+              placeholder={
+                typeFilter.length === 0
+                  ? t("filesPage.typeFilter.allTypes", "All types")
+                  : undefined
+              }
+              clearable
+              hidePickedOptions
+              searchable={false}
+              label={t("filesPage.typeFilter.label", "Filter by type")}
+              comboboxProps={{ withinPortal: false }}
+            />
+          )}
+          {activeCount > 0 && (
+            <Button variant="tertiary" size="sm" onClick={clearAll}>
+              {t("filesPage.filters.clearAll", "Clear filters")}
+            </Button>
+          )}
+        </Stack>
+      </Popover.Dropdown>
+    </Popover>
+  );
+}
+
+export default FilesToolbarFilterMenu;
diff --git a/frontend/editor/src/core/components/filesPage/FilesToolbarSortMenu.tsx b/frontend/editor/src/core/components/filesPage/FilesToolbarSortMenu.tsx
new file mode 100644
index 0000000000..d8a5ee1018
--- /dev/null
+++ b/frontend/editor/src/core/components/filesPage/FilesToolbarSortMenu.tsx
@@ -0,0 +1,86 @@
+import { Menu } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import CheckIcon from "@mui/icons-material/Check";
+import SwapVertIcon from "@mui/icons-material/SwapVert";
+
+import { ActionIcon } from "@app/ui/ActionIcon";
+import { Tooltip } from "@app/components/shared/Tooltip";
+import type { FilesPageSortMode } from "@app/contexts/FilesPageContext";
+
+interface FilesToolbarSortMenuProps {
+  value: FilesPageSortMode;
+  onChange: (mode: FilesPageSortMode) => void;
+}
+
+/**
+ * Sort control collapsed to a single icon. The desktop Select needs 160px and
+ * still truncated its longest label ("Recent first" → "Recent fi") once the
+ * toolbar got tight, so on narrow viewports the options move into a menu where
+ * they have room to read in full.
+ */
+export function FilesToolbarSortMenu({
+  value,
+  onChange,
+}: FilesToolbarSortMenuProps) {
+  const { t } = useTranslation();
+
+  const options: { value: FilesPageSortMode; label: string }[] = [
+    {
+      value: "modified-desc",
+      label: t("filesPage.sort.modifiedDesc", "Recent first"),
+    },
+    {
+      value: "modified-asc",
+      label: t("filesPage.sort.modifiedAsc", "Oldest first"),
+    },
+    { value: "name-asc", label: t("filesPage.sort.nameAsc", "Name A→Z") },
+    { value: "name-desc", label: t("filesPage.sort.nameDesc", "Name Z→A") },
+    {
+      value: "size-desc",
+      label: t("filesPage.sort.sizeDesc", "Largest first"),
+    },
+    { value: "size-asc", label: t("filesPage.sort.sizeAsc", "Smallest first") },
+  ];
+
+  const label = t("filesPage.sort.label", "Sort files");
+  const current = options.find((o) => o.value === value)?.label ?? "";
+
+  return (
+    <Menu shadow="md" width={200} position="bottom-end" withinPortal>
+      <Menu.Target>
+        <div>
+          <Tooltip content={`${label} · ${current}`} position="bottom">
+            <ActionIcon
+              variant="tertiary"
+              size="sm"
+              aria-label={`${label}: ${current}`}
+              className="files-page-toolbar-icon-btn"
+            >
+              <SwapVertIcon sx={{ fontSize: "1.1rem" }} />
+            </ActionIcon>
+          </Tooltip>
+        </div>
+      </Menu.Target>
+      <Menu.Dropdown>
+        <Menu.Label>{label}</Menu.Label>
+        {options.map((option) => (
+          <Menu.Item
+            key={option.value}
+            onClick={() => onChange(option.value)}
+            leftSection={
+              option.value === value ? (
+                <CheckIcon sx={{ fontSize: "1rem" }} />
+              ) : (
+                <span style={{ display: "inline-block", width: "1rem" }} />
+              )
+            }
+          >
+            {option.label}
+          </Menu.Item>
+        ))}
+      </Menu.Dropdown>
+    </Menu>
+  );
+}
+
+export default FilesToolbarSortMenu;
diff --git a/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx b/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx
index 049fc2365a..05c96685b2 100644
--- a/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx
+++ b/frontend/editor/src/core/components/filesPage/VersionTimeline.tsx
@@ -219,7 +219,20 @@ export function VersionTimeline({
                     align="center"
                     style={{ flex: 1, minWidth: 0, flexWrap: "nowrap" }}
                   >
-                    <Badge size="xs" variant={isActive ? "filled" : "light"}>
+                    <Badge
+                      size="xs"
+                      variant={isActive ? "filled" : "light"}
+                      styles={
+                        isActive
+                          ? {
+                              root: {
+                                backgroundColor: "var(--c-accent-solid)",
+                              },
+                              label: { color: "var(--c-text-on-primary)" },
+                            }
+                          : undefined
+                      }
+                    >
                       v{v.versionNumber ?? 1}
                     </Badge>
                     <Text
diff --git a/frontend/editor/src/core/components/layout/Workbench.module.css b/frontend/editor/src/core/components/layout/Workbench.module.css
index fb73be8655..dd2b4a12bd 100644
--- a/frontend/editor/src/core/components/layout/Workbench.module.css
+++ b/frontend/editor/src/core/components/layout/Workbench.module.css
@@ -38,6 +38,13 @@
   background: var(--c-hover);
 }
 
+@media (max-width: 64rem) {
+  .workbenchBarReopenTab {
+    width: 3rem;
+    height: 1.375rem;
+  }
+}
+
 .workbenchBarWrapper {
   display: grid;
   grid-template-rows: 1fr;
diff --git a/frontend/editor/src/core/components/layout/Workbench.tsx b/frontend/editor/src/core/components/layout/Workbench.tsx
index 9f54e224e8..903c552fd2 100644
--- a/frontend/editor/src/core/components/layout/Workbench.tsx
+++ b/frontend/editor/src/core/components/layout/Workbench.tsx
@@ -1,7 +1,7 @@
 import { useState, Suspense, lazy } from "react";
 import { useTranslation } from "react-i18next";
 import KeyboardArrowDownIcon from "@mui/icons-material/KeyboardArrowDown";
-import { Box, Loader, Center } from "@mantine/core";
+import { Box, Loader, Center, Stack, Text } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import { useFileHandler } from "@app/hooks/useFileHandler";
@@ -18,9 +18,11 @@ import { useCookieConsent } from "@app/hooks/useCookieConsent";
 import styles from "@app/components/layout/Workbench.module.css";
 
 import WorkbenchBar from "@app/components/shared/WorkbenchBar";
+import WorkbenchFloatingSearch from "@app/components/shared/WorkbenchFloatingSearch";
 import LandingPage from "@app/components/shared/LandingPage";
 import DismissAllErrorsButton from "@app/components/shared/DismissAllErrorsButton";
 import { ChatFAB } from "@app/components/chat/ChatFAB";
+import { NotificationBell } from "@app/components/notifications/NotificationBell";
 
 // Workbench panels are loaded on demand. Viewer pulls in pdfjs-dist and the
 // full @embedpdf plugin set; FileEditor/PageEditor are only needed once a file
@@ -44,7 +46,7 @@ export default function Workbench() {
   useCookieConsent({ analyticsEnabled: config?.enableAnalytics === true });
 
   // Use context-based hooks to eliminate all prop drilling
-  const { files: activeFiles } = useAllFiles();
+  const { files: activeFiles, fileIds } = useAllFiles();
   const { workbench: currentView } = useNavigationState();
   const { actions: navActions } = useNavigationActions();
   const setCurrentView = navActions.setWorkbench;
@@ -77,6 +79,22 @@ export default function Workbench() {
   const [viewerToolbarCollapsed, setViewerToolbarCollapsed] = useState(false);
   const showReopenTab = currentView === "viewer" && viewerToolbarCollapsed;
 
+  // The WorkbenchBar carries file-scoped actions, so it only shows once a file
+  // is open or a custom view supplies content; otherwise the search floats.
+  const activeCustomView = customWorkbenchViews.find(
+    (v) => v.workbenchId === currentView,
+  );
+  const topControlsAvailable =
+    currentView !== "myFiles" && !activeCustomView?.hideTopControls;
+  const hasWorkbenchContent =
+    hasFiles ||
+    fileIds.length > 0 ||
+    !isBaseWorkbench(currentView) ||
+    // Shared signing drives the viewer from the sidebar with no file in context.
+    (currentView === "viewer" && !!signingOverlay?.file);
+  const showWorkbenchBar = topControlsAvailable && hasWorkbenchContent;
+  const showFloatingSearch = topControlsAvailable && !hasWorkbenchContent;
+
   const handlePreviewClose = () => {
     setPreviewFile(null);
     const previousMode = sessionStorage.getItem("previousMode");
@@ -134,6 +152,20 @@ export default function Workbench() {
     }
 
     if (activeFiles.length === 0) {
+      // Files are open but their bytes are still loading (a cold PDF engine can
+      // take seconds). Showing the drop zone here reads as "the click did nothing".
+      if (fileIds.length > 0) {
+        return (
+          <Center h="100%" w="100%">
+            <Stack align="center" gap="md">
+              <Loader size="lg" />
+              <Text c="dimmed" size="sm">
+                {t("fileManager.loadingFiles", "Loading files...")}
+              </Text>
+            </Stack>
+          </Center>
+        );
+      }
       return <LandingPage />;
     }
 
@@ -217,41 +249,44 @@ export default function Workbench() {
       data-tour="workbench"
       style={{ backgroundColor: "var(--c-bg)", minWidth: 0 }}
     >
-      {/* Workbench Bar — always visible outside My Files (it hosts the
-          global search), even with no files loaded. */}
-      {currentView !== "myFiles" &&
-        !customWorkbenchViews.find((v) => v.workbenchId === currentView)
-          ?.hideTopControls && (
-          <div className={styles.workbenchBarShell}>
-            <div className={styles.workbenchBarWrapper}>
-              <div className={styles.workbenchBarInner}>
-                <WorkbenchBar
-                  currentView={currentView}
-                  setCurrentView={setCurrentView}
-                  hasFiles={hasFiles}
-                  viewerToolbarCollapsed={viewerToolbarCollapsed}
-                  onCollapseViewerToolbar={setViewerToolbarCollapsed}
-                />
-              </div>
-            </div>
-            {/* Reopen tab: a little handle hanging off the bar's bottom-right
-                while the viewer tool row is retracted. */}
-            {showReopenTab && (
-              <Button
-                type="button"
-                variant="quiet"
-                className={styles.workbenchBarReopenTab}
-                onClick={() => setViewerToolbarCollapsed(false)}
-                aria-expanded={false}
-                aria-label={t("workbenchBar.showToolbar", "Show toolbar")}
-                title={t("workbenchBar.showToolbar", "Show toolbar")}
-                leftSection={
-                  <KeyboardArrowDownIcon sx={{ fontSize: "1rem" }} />
-                }
+      {/* The bell normally rides in the workbench bar. Wherever that bar is not shown - My Files,
+          an empty workbench, a custom view without top controls - it gets its own corner, rather
+          than those being the places a user cannot see that something of theirs failed. */}
+      {!showWorkbenchBar && (
+        <div style={{ position: "absolute", top: 12, right: 12, zIndex: 20 }}>
+          <NotificationBell />
+        </div>
+      )}
+
+      {showWorkbenchBar && (
+        <div className={styles.workbenchBarShell}>
+          <div className={styles.workbenchBarWrapper}>
+            <div className={styles.workbenchBarInner}>
+              <WorkbenchBar
+                currentView={currentView}
+                setCurrentView={setCurrentView}
+                hasFiles={hasFiles}
+                viewerToolbarCollapsed={viewerToolbarCollapsed}
+                onCollapseViewerToolbar={setViewerToolbarCollapsed}
               />
-            )}
+            </div>
           </div>
-        )}
+          {/* Reopen tab for the retracted viewer tool row. */}
+          {showReopenTab && (
+            <Button
+              type="button"
+              variant="quiet"
+              className={styles.workbenchBarReopenTab}
+              onClick={() => setViewerToolbarCollapsed(false)}
+              aria-expanded={false}
+              aria-label={t("workbenchBar.showToolbar", "Show toolbar")}
+              title={t("workbenchBar.showToolbar", "Show toolbar")}
+              leftSection={<KeyboardArrowDownIcon sx={{ fontSize: "1rem" }} />}
+            />
+          )}
+        </div>
+      )}
+      {showFloatingSearch && <WorkbenchFloatingSearch />}
 
       {/* Dismiss All Errors Button */}
       <DismissAllErrorsButton />
diff --git a/frontend/editor/src/core/components/notifications/NotificationBell.css b/frontend/editor/src/core/components/notifications/NotificationBell.css
new file mode 100644
index 0000000000..9352f6bef8
--- /dev/null
+++ b/frontend/editor/src/core/components/notifications/NotificationBell.css
@@ -0,0 +1,170 @@
+.notification-bell {
+  position: relative;
+  display: inline-flex;
+}
+
+.notification-bell__trigger {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  position: relative;
+  padding: var(--sp-2, 0.5rem);
+  border: none;
+  border-radius: var(--radius-md, 0.375rem);
+  background: transparent;
+  color: var(--c-text-muted);
+  cursor: pointer;
+}
+
+.notification-bell__trigger:hover {
+  background: var(--c-hover);
+  color: var(--c-text);
+}
+
+.notification-bell__badge {
+  position: absolute;
+  top: 0.125rem;
+  right: 0.125rem;
+  min-width: 1rem;
+  padding: 0 0.25rem;
+  border-radius: 999px;
+  background: var(--c-danger);
+  color: var(--c-text-on-danger);
+  font-size: 0.625rem;
+  line-height: 1rem;
+  text-align: center;
+}
+
+.notification-bell__panel {
+  position: fixed;
+  z-index: var(--z-popover, 60);
+  width: min(22rem, calc(100vw - 2rem));
+  max-height: 24rem;
+  overflow-y: auto;
+  padding: var(--sp-3, 0.75rem);
+  border: 1px solid var(--c-border);
+  border-radius: var(--radius-lg, 0.5rem);
+  background: var(--c-surface);
+  box-shadow: 0 10px 30px rgb(0 0 0 / 25%);
+}
+
+.notification-bell__heading {
+  margin: 0 0 var(--sp-2, 0.5rem);
+  font-size: 0.875rem;
+  font-weight: 600;
+  color: var(--c-text);
+}
+
+.notification-bell__empty {
+  margin: 0;
+  font-size: 0.8125rem;
+  color: var(--c-text-muted);
+}
+
+.notification-bell__list {
+  margin: 0;
+  padding: 0;
+  list-style: none;
+  display: flex;
+  flex-direction: column;
+  gap: var(--sp-2, 0.5rem);
+}
+
+.notification-bell__item {
+  position: relative;
+  display: grid;
+  grid-template-columns: auto 1fr;
+  gap: 0 var(--sp-2, 0.5rem);
+  padding: var(--sp-2, 0.5rem);
+  border-radius: var(--radius-md, 0.375rem);
+  background: var(--c-surface-sunken);
+}
+
+/* Wraps rather than crowds: a row can carry three buttons, and the panel is narrow. */
+.notification-bell__actions {
+  grid-column: 2;
+  display: flex;
+  flex-wrap: wrap;
+  align-items: center;
+  justify-content: flex-end;
+  gap: var(--sp-1, 0.25rem);
+  margin-top: var(--sp-2, 0.5rem);
+}
+
+.notification-bell__dot {
+  grid-row: 1;
+  align-self: center;
+  width: 0.5rem;
+  height: 0.5rem;
+  border-radius: 999px;
+  background: var(--c-danger);
+}
+
+.notification-bell__item-title {
+  grid-column: 2;
+  font-size: 0.8125rem;
+  font-weight: 600;
+  color: var(--c-text);
+}
+
+.notification-bell__count,
+.notification-bell__detail {
+  grid-column: 2;
+  font-size: 0.75rem;
+  color: var(--c-text-muted);
+}
+
+.notification-bell__detail {
+  overflow: hidden;
+  display: -webkit-box;
+  -webkit-line-clamp: 2;
+  -webkit-box-orient: vertical;
+  overflow-wrap: anywhere;
+}
+
+/* Expanded, the message is the point of the row, so let it run and scroll rather than clamp. */
+.notification-bell__detail--full {
+  display: block;
+  max-height: 10rem;
+  overflow-y: auto;
+  -webkit-line-clamp: none;
+}
+
+.notification-bell__chrome {
+  grid-column: 2;
+  display: flex;
+  gap: var(--sp-1, 0.25rem);
+  margin-top: var(--sp-1, 0.25rem);
+}
+
+/* Reading aids for the message, tinted rather than filled: they sit next to the row's real actions
+   and must not read as one of them. */
+.notification-bell__chip {
+  padding: 0.0625rem 0.375rem;
+  border: none;
+  border-radius: var(--radius-sm, 0.25rem);
+  background: var(--c-primary-subtle);
+  color: var(--c-accent-fg, var(--c-primary));
+  font-size: 0.6875rem;
+  cursor: pointer;
+}
+
+.notification-bell__chip:hover,
+.notification-bell__chip:focus-visible {
+  background: var(--c-hover);
+}
+
+/* Why the actions this row could have had are absent. Muted: it explains, it does not warn. */
+.notification-bell__note {
+  grid-column: 2;
+  margin-top: var(--sp-1, 0.25rem);
+  font-size: 0.75rem;
+  color: var(--c-text-subtle);
+}
+
+.notification-bell__message {
+  grid-column: 2;
+  margin-top: var(--sp-1, 0.25rem);
+  font-size: 0.75rem;
+  color: var(--c-danger);
+}
diff --git a/frontend/editor/src/core/components/notifications/NotificationBell.test.tsx b/frontend/editor/src/core/components/notifications/NotificationBell.test.tsx
new file mode 100644
index 0000000000..8753a5880b
--- /dev/null
+++ b/frontend/editor/src/core/components/notifications/NotificationBell.test.tsx
@@ -0,0 +1,530 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import {
+  fireEvent,
+  render as baseRender,
+  screen,
+  waitFor,
+} from "@testing-library/react";
+import { MantineProvider } from "@mantine/core";
+import type {
+  AppNotification,
+  NotificationActionOffer,
+} from "@app/services/notifications";
+
+// @app/ui Button is a Mantine wrapper, so it needs the provider in the tree.
+const render = (ui: Parameters<typeof baseRender>[0]) =>
+  baseRender(ui, { wrapper: MantineProvider });
+
+/**
+ * Two things are the bell's own and worth pinning: which notifications the user has already looked
+ * at, and how a row behaves around an action.
+ */
+
+const fetchNotifications = vi.fn();
+
+vi.mock("@app/services/notifications", () => ({
+  fetchNotifications: (...args: unknown[]) => fetchNotifications(...args),
+}));
+
+// IndexedDB, which jsdom has none of. Answered here so availability is a fact of the test.
+const h = vi.hoisted(() => ({
+  hasLocalFile: true,
+  // This build has the notifications API, except in the one test about the build that does not.
+  notificationsAvailable: true,
+  specs: {} as Record<
+    string,
+    {
+      available: (context: unknown) => boolean;
+      run: (context: unknown, password?: string) => unknown;
+      closesPanel?: boolean;
+    }
+  >,
+}));
+
+vi.mock("@app/services/localFilePresence", () => ({
+  hasLocalFile: () => Promise.resolve(h.hasLocalFile),
+}));
+
+vi.mock("@app/components/notifications/useNotificationsAvailable", () => ({
+  useNotificationsAvailable: () => h.notificationsAvailable,
+}));
+
+// Core's own registry is empty, so without this there are no client actions to test.
+vi.mock("@app/components/notifications/notificationActions", () => ({
+  useNotificationActions: () => h.specs,
+}));
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    // A string fallback, or an options object with defaultValue plus what it interpolates.
+    t: (key: string, fallback?: unknown) => {
+      if (typeof fallback === "string") return fallback;
+      if (fallback && typeof fallback === "object") {
+        const options = fallback as Record<string, unknown>;
+        const template = options.defaultValue;
+        if (typeof template !== "string") return key;
+        return template.replace(/{{(\w+)}}/g, (_match, name: string) =>
+          String(options[name] ?? ""),
+        );
+      }
+      return key;
+    },
+  }),
+}));
+
+const { NotificationBell } =
+  await import("@app/components/notifications/NotificationBell");
+
+function offer(
+  id: string,
+  overrides: Partial<NotificationActionOffer> = {},
+): NotificationActionOffer {
+  return {
+    id,
+    labelKey: `portal.failures.action.${id.toLowerCase()}`,
+    defaultLabel: id,
+    enabled: true,
+    disabledReasonKey: null,
+    ...overrides,
+  };
+}
+
+function notification(
+  id: string,
+  title = "Unrecognised failure",
+  overrides: Partial<AppNotification> = {},
+): AppNotification {
+  return {
+    id,
+    source: "FAILURE",
+    kindId: "UNKNOWN",
+    origin: "TOOL",
+    ownership: "MINE",
+    severity: "ERROR",
+    status: "NEW",
+    titleKey: `portal.failures.kind.${id}.title`,
+    defaultTitle: title,
+    detail: "boom",
+    fileId: "f-1",
+    sourceId: null,
+    policyId: null,
+    occurrences: 1,
+    createdAt: "2026-08-05T00:00:00Z",
+    lastSeenAt: "2026-08-05T00:00:00Z",
+    actions: [],
+    ...overrides,
+  };
+}
+
+async function openPanel() {
+  fireEvent.click(await screen.findByRole("button"));
+}
+
+describe("NotificationBell", () => {
+  beforeEach(() => {
+    window.localStorage.clear();
+    fetchNotifications.mockReset().mockResolvedValue([]);
+    h.hasLocalFile = true;
+    h.notificationsAvailable = true;
+    h.specs = {};
+  });
+
+  it("mounts nothing at all in a build with no notifications API", async () => {
+    // No bell and, above all, no poll: an OSS build must not sit on a timer collecting 404s.
+    h.notificationsAvailable = false;
+
+    render(<NotificationBell />);
+
+    await Promise.resolve();
+    expect(screen.queryByRole("button")).toBeNull();
+    expect(fetchNotifications).not.toHaveBeenCalled();
+  });
+
+  it("shows no badge when there is nothing to report", async () => {
+    render(<NotificationBell />);
+
+    await waitFor(() => expect(fetchNotifications).toHaveBeenCalled());
+    expect(screen.queryByText("1")).toBeNull();
+  });
+
+  it("counts everything as unread the first time, since nothing has been seen", async () => {
+    fetchNotifications.mockResolvedValue([
+      notification("a"),
+      notification("b"),
+    ]);
+
+    render(<NotificationBell />);
+
+    expect(await screen.findByText("2")).toBeTruthy();
+  });
+
+  it("clears the badge once the user opens the panel", async () => {
+    fetchNotifications.mockResolvedValue([
+      notification("a"),
+      notification("b"),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    // Opening marks them read: waiting for the close would leave the badge lit.
+    await waitFor(() => expect(screen.queryByText("2")).toBeNull());
+  });
+
+  it("divides what is new from what the user has already seen", async () => {
+    // "b" was the newest last time, so "a" is the only new one.
+    window.localStorage.setItem("stirling.notifications.lastSeenId", "b");
+    fetchNotifications.mockResolvedValue([
+      notification("a"),
+      notification("b"),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(await screen.findByText("New")).toBeTruthy();
+    expect(screen.getByText("Earlier")).toBeTruthy();
+  });
+
+  it("keeps the division on screen after opening marks them read", async () => {
+    // Frozen on open: read live it would collapse the moment the badge cleared.
+    window.localStorage.setItem("stirling.notifications.lastSeenId", "b");
+    fetchNotifications.mockResolvedValue([
+      notification("a"),
+      notification("b"),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    await waitFor(() => expect(screen.queryByText("1")).toBeNull());
+    expect(screen.getByText("New")).toBeTruthy();
+    expect(screen.getByText("Earlier")).toBeTruthy();
+  });
+
+  it("does not divide a list with nothing new in it", async () => {
+    window.localStorage.setItem("stirling.notifications.lastSeenId", "a");
+    fetchNotifications.mockResolvedValue([notification("a")]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    // A lone "Earlier" heading over everything says nothing the empty badge has not.
+    expect(await screen.findByText("Unrecognised failure")).toBeTruthy();
+    expect(screen.queryByText("Earlier")).toBeNull();
+    expect(screen.queryByText("New")).toBeNull();
+  });
+
+  it("labels an all-new list without inventing an earlier section", async () => {
+    fetchNotifications.mockResolvedValue([
+      notification("a"),
+      notification("b"),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(await screen.findByText("New")).toBeTruthy();
+    expect(screen.queryByText("Earlier")).toBeNull();
+  });
+
+  it("marks only what arrived since the user last looked", async () => {
+    fetchNotifications.mockResolvedValue([notification("a")]);
+    const first = render(<NotificationBell />);
+    await openPanel();
+    await waitFor(() => expect(screen.queryByText("1")).toBeNull());
+    first.unmount();
+
+    // A newer one arrives above the one already seen.
+    fetchNotifications.mockResolvedValue([
+      notification("b"),
+      notification("a"),
+    ]);
+    render(<NotificationBell />);
+
+    expect(await screen.findByText("1")).toBeTruthy();
+  });
+
+  it("treats everything as unread when the last seen one is gone", async () => {
+    // We cannot tell how far the user got, so show them rather than marking the lot read.
+    window.localStorage.setItem(
+      "stirling.notifications.lastSeenId",
+      "vanished",
+    );
+    fetchNotifications.mockResolvedValue([
+      notification("a"),
+      notification("b"),
+    ]);
+
+    render(<NotificationBell />);
+
+    expect(await screen.findByText("2")).toBeTruthy();
+  });
+
+  it("renders the server's title and repeat count without knowing the source", async () => {
+    fetchNotifications.mockResolvedValue([
+      { ...notification("a", "Password-protected document"), occurrences: 3 },
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(screen.getByText("Password-protected document")).toBeTruthy();
+    expect(screen.getByText("3 times")).toBeTruthy();
+  });
+
+  it("puts every one of the row's actions on the row", async () => {
+    h.specs = {
+      VIEW_IN_PROCESSOR: {
+        available: () => true,
+        run: vi.fn(),
+        closesPanel: true,
+      },
+      VIEW_FILE: { available: () => true, run: vi.fn(), closesPanel: true },
+    };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        actions: [offer("VIEW_IN_PROCESSOR"), offer("VIEW_FILE")],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    // Named for their row: every button in the list says the same thing.
+    for (const id of ["VIEW_IN_PROCESSOR", "VIEW_FILE"])
+      expect(
+        screen.getByRole("button", { name: `${id}: Unrecognised failure` }),
+      ).toBeTruthy();
+  });
+
+  it("runs whichever of the row's actions is pressed", async () => {
+    const run = vi.fn();
+    h.specs = {
+      VIEW_IN_PROCESSOR: { available: () => true, run: vi.fn() },
+      VIEW_FILE: { available: () => true, run },
+    };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        actions: [offer("VIEW_IN_PROCESSOR"), offer("VIEW_FILE")],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    fireEvent.click(
+      screen.getByRole("button", { name: "VIEW_FILE: Unrecognised failure" }),
+    );
+
+    await waitFor(() => expect(run).toHaveBeenCalledTimes(1));
+    expect(screen.getByText("Unrecognised failure")).toBeTruthy();
+  });
+
+  it("closes the panel on its way to a destination behind it", async () => {
+    const run = vi.fn();
+    h.specs = { VIEW_FILE: { available: () => true, run, closesPanel: true } };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Password-protected document", {
+        actions: [offer("VIEW_FILE")],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    fireEvent.click(
+      screen.getByRole("button", {
+        name: "VIEW_FILE: Password-protected document",
+      }),
+    );
+
+    expect(run).toHaveBeenCalledTimes(1);
+    await waitFor(() =>
+      expect(screen.queryByText("Password-protected document")).toBeNull(),
+    );
+  });
+
+  it("skips an action id this build has never heard of", async () => {
+    // A new failure kind can ship with new actions; an unwired button would be worse than none.
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        actions: [offer("QUARANTINE")],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(screen.getByText("Unrecognised failure")).toBeTruthy();
+    expect(screen.queryByRole("button", { name: /QUARANTINE/ })).toBeNull();
+  });
+
+  it("drops an action the device cannot perform, and says why the row is thin", async () => {
+    h.hasLocalFile = false;
+    h.specs = {
+      VIEW_FILE: {
+        available: (context) =>
+          (context as { hasLocalFile: boolean }).hasLocalFile,
+        run: vi.fn(),
+      },
+    };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        actions: [offer("VIEW_FILE")],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    await waitFor(() =>
+      expect(
+        screen.getByText(
+          "This document is not on this device, so it cannot be opened here.",
+        ),
+      ).toBeTruthy(),
+    );
+    expect(screen.queryByRole("button", { name: /VIEW_FILE/ })).toBeNull();
+  });
+
+  it("says a row was never linked to a document, rather than that the document is missing", async () => {
+    h.hasLocalFile = false;
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", { fileId: null }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(
+      await screen.findByText(
+        "This failure is not linked to a specific document, so there is nothing to open here.",
+      ),
+    ).toBeTruthy();
+  });
+
+  it("claims nothing about a device for a row it never looks up", async () => {
+    // Never on any device, so never probed, and an absent lookup is not an absent document.
+    h.hasLocalFile = false;
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Password-protected document", {
+        origin: "POLICY",
+        sourceId: "src-s3-invoices",
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(await screen.findByText("Password-protected document")).toBeTruthy();
+    expect(
+      screen.queryByText(
+        /not on this device|not linked to a specific document/,
+      ),
+    ).toBeNull();
+  });
+
+  it("renders no button for an action the server would refuse, and says why in words", async () => {
+    // A greyed button that can never work is false hope, so the reason becomes the row's note.
+    h.specs = {
+      VIEW_FILE: { available: () => true, run: vi.fn() },
+      VIEW_IN_PROCESSOR: { available: () => true, run: vi.fn() },
+    };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        ownership: "UNOWNED",
+        actions: [
+          offer("VIEW_FILE", {
+            enabled: false,
+            disabledReasonKey: "portal.failures.disabled.unattended",
+          }),
+          offer("VIEW_IN_PROCESSOR"),
+        ],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    expect(screen.queryByRole("button", { name: /VIEW_FILE/ })).toBeNull();
+    expect(
+      screen.getByRole("button", {
+        name: "VIEW_IN_PROCESSOR: Unrecognised failure",
+      }),
+    ).toBeTruthy();
+    expect(
+      screen.getByText("Not available for this notification."),
+    ).toBeTruthy();
+  });
+
+  it("leaves a closed row with no buttons rather than a row of dead ones", async () => {
+    h.specs = {
+      VIEW_IN_PROCESSOR: { available: () => true, run: vi.fn() },
+      VIEW_FILE: { available: () => true, run: vi.fn() },
+    };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        actions: [
+          offer("VIEW_IN_PROCESSOR", {
+            enabled: false,
+            disabledReasonKey: "portal.failures.disabled.closed",
+          }),
+          offer("VIEW_FILE", {
+            enabled: false,
+            disabledReasonKey: "portal.failures.disabled.closed",
+          }),
+        ],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    // The message and its chips remain, so the row still reads as a row.
+    expect(screen.getByText("Unrecognised failure")).toBeTruthy();
+    expect(
+      screen.getByText("Not available for this notification."),
+    ).toBeTruthy();
+    expect(
+      screen.queryByRole("button", { name: /VIEW_IN_PROCESSOR|VIEW_FILE/ }),
+    ).toBeNull();
+    expect(document.querySelector(".notification-bell__actions")).toBeNull();
+  });
+
+  it("shows a failed action in the row instead of leaving the user guessing", async () => {
+    h.specs = {
+      VIEW_FILE: {
+        available: () => true,
+        run: () => Promise.resolve({ ok: false, message: "Could not open" }),
+      },
+    };
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Password-protected document", {
+        actions: [offer("VIEW_FILE")],
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    fireEvent.click(
+      screen.getByRole("button", {
+        name: "VIEW_FILE: Password-protected document",
+      }),
+    );
+
+    expect(await screen.findByRole("alert")).toHaveProperty(
+      "textContent",
+      "Could not open",
+    );
+    // Still on screen, so the row remains actionable.
+    expect(screen.getByText("Password-protected document")).toBeTruthy();
+  });
+
+  it("expands the message without touching the row's actions", async () => {
+    fetchNotifications.mockResolvedValue([
+      notification("a", "Unrecognised failure", {
+        detail: "org.apache.pdfbox.InvalidPasswordException",
+      }),
+    ]);
+    render(<NotificationBell />);
+    await openPanel();
+
+    const expand = screen.getByRole("button", {
+      name: "Show full message: Unrecognised failure",
+    });
+    fireEvent.click(expand);
+
+    expect(
+      screen.getByRole("button", { name: "Show less: Unrecognised failure" }),
+    ).toBeTruthy();
+    expect(
+      screen.getByRole("button", { name: "Copy error: Unrecognised failure" }),
+    ).toBeTruthy();
+  });
+});
diff --git a/frontend/editor/src/core/components/notifications/NotificationBell.tsx b/frontend/editor/src/core/components/notifications/NotificationBell.tsx
new file mode 100644
index 0000000000..f2ac1e0a3a
--- /dev/null
+++ b/frontend/editor/src/core/components/notifications/NotificationBell.tsx
@@ -0,0 +1,172 @@
+import {
+  Fragment,
+  useEffect,
+  useId,
+  useLayoutEffect,
+  useRef,
+  useState,
+} from "react";
+import { useTranslation } from "react-i18next";
+import { BellIcon, Button } from "@app/ui";
+import DividerWithText from "@app/components/shared/DividerWithText";
+import { useNotifications } from "@app/hooks/useNotifications";
+import { useNotificationActions } from "@app/components/notifications/notificationActions";
+import { NotificationItem } from "@app/components/notifications/NotificationItem";
+import { useNotificationsAvailable } from "@app/components/notifications/useNotificationsAvailable";
+import "@app/components/notifications/NotificationBell.css";
+
+/**
+ * Renders whatever the server sends without knowing which subsystem produced it or what its actions
+ * mean, so a new source or failure kind needs no change here. In core because both shells mount it.
+ */
+export function NotificationBell() {
+  // A build with no notifications API gets no bell at all, rather than one that polls a
+  // nonexistent endpoint forever to show nothing.
+  const available = useNotificationsAvailable();
+  if (!available) return null;
+  return <MountedNotificationBell />;
+}
+
+function MountedNotificationBell() {
+  const { t } = useTranslation();
+  const { notifications, unreadCount, documentStateFor, markAllSeen } =
+    useNotifications();
+  const registry = useNotificationActions();
+  const [open, setOpen] = useState(false);
+  const container = useRef<HTMLDivElement>(null);
+  const headingId = useId();
+  // Where the new ones stop, frozen when the panel opens (opening marks everything read).
+  const [firstSeenId, setFirstSeenId] = useState<string | null>(null);
+  // Viewport-fixed, because the workbench bar clips its own overflow.
+  const [anchor, setAnchor] = useState<{ top: number; right: number } | null>(
+    null,
+  );
+
+  useLayoutEffect(() => {
+    if (!open) return;
+    const measure = () => {
+      const rect = container.current?.getBoundingClientRect();
+      if (!rect) return;
+      setAnchor({
+        top: rect.bottom + 8,
+        right: Math.max(8, window.innerWidth - rect.right),
+      });
+    };
+    measure();
+    window.addEventListener("resize", measure);
+    window.addEventListener("scroll", measure, true);
+    return () => {
+      window.removeEventListener("resize", measure);
+      window.removeEventListener("scroll", measure, true);
+    };
+  }, [open]);
+
+  // Opening marks them read, not closing: waiting would leave the badge lit while they read.
+  const toggle = () => {
+    setOpen((wasOpen) => {
+      if (!wasOpen) {
+        // Before marking, or there is nothing left to read.
+        setFirstSeenId(notifications[unreadCount]?.id ?? null);
+        markAllSeen();
+      }
+      return !wasOpen;
+    });
+  };
+
+  /**
+   * How many count as new. No boundary id means all of them were; one that has since left the list
+   * leaves nothing to divide on, so it reads as none rather than guessing at a row.
+   */
+  const boundaryIndex = firstSeenId
+    ? notifications.findIndex((notification) => notification.id === firstSeenId)
+    : notifications.length;
+  const dividedAt = Math.max(0, boundaryIndex);
+
+  useEffect(() => {
+    if (!open) return;
+    const closeOnOutside = (event: MouseEvent) => {
+      const target = event.target as HTMLElement;
+      if (!container.current?.contains(target)) setOpen(false);
+    };
+    const closeOnEscape = (event: KeyboardEvent) => {
+      if (event.key === "Escape") setOpen(false);
+    };
+    document.addEventListener("mousedown", closeOnOutside);
+    document.addEventListener("keydown", closeOnEscape);
+    return () => {
+      document.removeEventListener("mousedown", closeOnOutside);
+      document.removeEventListener("keydown", closeOnEscape);
+    };
+  }, [open]);
+
+  return (
+    <div className="notification-bell" ref={container}>
+      <Button
+        variant="quiet"
+        size="md"
+        shape="circle"
+        className="notification-bell__trigger"
+        aria-label={t("notifications.open", "Notifications")}
+        aria-expanded={open}
+        onClick={toggle}
+      >
+        <BellIcon />
+        {unreadCount > 0 && (
+          <span className="notification-bell__badge" aria-hidden>
+            {unreadCount > 9 ? "9+" : unreadCount}
+          </span>
+        )}
+      </Button>
+
+      {open && (
+        <div
+          className="notification-bell__panel"
+          role="dialog"
+          // Named by its own heading: a dialog with no accessible name is announced as just "dialog".
+          aria-labelledby={headingId}
+          style={anchor ? { top: anchor.top, right: anchor.right } : undefined}
+        >
+          <h2 className="notification-bell__heading" id={headingId}>
+            {t("notifications.title", "Notifications")}
+          </h2>
+
+          {notifications.length === 0 ? (
+            <p className="notification-bell__empty">
+              {t("notifications.empty", "Nothing to report.")}
+            </p>
+          ) : (
+            <ul className="notification-bell__list">
+              {notifications.map((notification, index) => (
+                <Fragment key={notification.id}>
+                  {index === 0 && dividedAt > 0 && (
+                    <li aria-hidden>
+                      <DividerWithText
+                        text={t("notifications.section.new", "New")}
+                      />
+                    </li>
+                  )}
+                  {/* Only with something on both sides: a lone "Earlier" over everything says
+                      nothing the empty badge has not. */}
+                  {index === dividedAt && dividedAt > 0 && (
+                    <li aria-hidden>
+                      <DividerWithText
+                        text={t("notifications.section.earlier", "Earlier")}
+                      />
+                    </li>
+                  )}
+                  <NotificationItem
+                    notification={notification}
+                    unread={index < dividedAt}
+                    documentState={documentStateFor(notification)}
+                    registry={registry}
+                    onDismissPanel={() => setOpen(false)}
+                  />
+                </Fragment>
+              ))}
+            </ul>
+          )}
+        </div>
+      )}
+    </div>
+  );
+}
diff --git a/frontend/editor/src/core/components/notifications/NotificationItem.tsx b/frontend/editor/src/core/components/notifications/NotificationItem.tsx
new file mode 100644
index 0000000000..b53ca7894c
--- /dev/null
+++ b/frontend/editor/src/core/components/notifications/NotificationItem.tsx
@@ -0,0 +1,251 @@
+import { useState } from "react";
+import type { TFunction } from "i18next";
+import { useTranslation } from "react-i18next";
+import { Button } from "@app/ui";
+import { isResolvableHere } from "@app/hooks/useNotifications";
+import type { NotificationDocumentState } from "@app/hooks/useNotifications";
+import type {
+  ClientActionRegistry,
+  NotificationActionContext,
+} from "@app/components/notifications/notificationActions";
+import type {
+  AppNotification,
+  NotificationActionOffer,
+} from "@app/services/notifications";
+
+/**
+ * The server's reason wins, being about the failure rather than this browser. Otherwise only what we
+ * actually looked up, so a row we never probed is never called absent.
+ */
+function noteFor(
+  notification: AppNotification,
+  documentState: NotificationDocumentState,
+  withheldReasonKey: string | null,
+  t: TFunction,
+): string | null {
+  if (withheldReasonKey)
+    return t(withheldReasonKey, {
+      defaultValue: t(
+        "notifications.action.unavailable",
+        "Not available for this notification.",
+      ),
+    });
+  if (notification.ownership !== "MINE" || documentState.hasLocalFile)
+    return null;
+  if (!notification.fileId)
+    return t(
+      "notifications.noDocumentLinked",
+      "This failure is not linked to a specific document, so there is nothing to open here.",
+    );
+  return isResolvableHere(notification)
+    ? t(
+        "notifications.notOnThisDevice",
+        "This document is not on this device, so it cannot be opened here.",
+      )
+    : null;
+}
+
+interface NotificationItemProps {
+  notification: AppNotification;
+  unread: boolean;
+  documentState: NotificationDocumentState;
+  registry: ClientActionRegistry;
+  onDismissPanel: () => void;
+}
+
+/** Its own component because the last attempt's message and its expanded state are per-row. */
+export function NotificationItem({
+  notification,
+  unread,
+  documentState,
+  registry,
+  onDismissPanel,
+}: NotificationItemProps) {
+  const { t } = useTranslation();
+  const [message, setMessage] = useState<string | null>(null);
+  const [busy, setBusy] = useState<string | null>(null);
+  const [expanded, setExpanded] = useState(false);
+  const [copied, setCopied] = useState(false);
+
+  const title = t(notification.titleKey, notification.defaultTitle);
+  const context: NotificationActionContext = {
+    notification,
+    hasLocalFile: documentState.hasLocalFile,
+  };
+
+  // An id this build has never heard of is skipped rather than rendered unwired: the server ships
+  // new kinds, and new actions, ahead of the clients that understand them.
+  const usable = notification.actions.filter((offer) => {
+    if (!offer.enabled) return false;
+    const spec = registry[offer.id];
+    return spec ? spec.available(context) : false;
+  });
+
+  // Only from an action this build would otherwise have rendered: a reason about one it cannot
+  // perform anyway is not this row's explanation.
+  const withheldReasonKey =
+    notification.actions.find(
+      (offer) =>
+        !offer.enabled &&
+        offer.disabledReasonKey !== null &&
+        registry[offer.id] !== undefined,
+    )?.disabledReasonKey ?? null;
+
+  const labelOf = (offer: NotificationActionOffer) =>
+    t(offer.labelKey, offer.defaultLabel);
+
+  const run = async (offer: NotificationActionOffer) => {
+    if (busy) return;
+    setMessage(null);
+
+    const spec = registry[offer.id];
+    if (!spec) return;
+
+    setBusy(offer.id);
+    const outcome = await spec.run(context);
+    setBusy(null);
+    if (outcome && !outcome.ok) {
+      setMessage(
+        outcome.message ??
+          t(
+            "notifications.action.failed",
+            "That did not work. Try again in a moment.",
+          ),
+      );
+      return;
+    }
+
+    if (spec.closesPanel) onDismissPanel();
+  };
+
+  const copyDetail = async () => {
+    if (!notification.detail) return;
+    try {
+      await navigator.clipboard.writeText(notification.detail);
+      setCopied(true);
+    } catch {
+      // No clipboard permission, and the message is on screen and selectable anyway.
+    }
+  };
+
+  const note = noteFor(notification, documentState, withheldReasonKey, t);
+
+  return (
+    <li
+      className="notification-bell__item"
+      data-severity={notification.severity.toLowerCase()}
+    >
+      {unread && (
+        <span
+          className="notification-bell__dot"
+          aria-label={t("notifications.unread", "Unread")}
+        />
+      )}
+      <span className="notification-bell__item-title">{title}</span>
+      {notification.occurrences > 1 && (
+        <span className="notification-bell__count">
+          {t("notifications.occurrences", {
+            count: notification.occurrences,
+            defaultValue: "{{count}} times",
+          })}
+        </span>
+      )}
+
+      {notification.detail && (
+        <>
+          <span
+            className={
+              expanded
+                ? "notification-bell__detail notification-bell__detail--full"
+                : "notification-bell__detail"
+            }
+          >
+            {notification.detail}
+          </span>
+          <span className="notification-bell__chrome">
+            <button
+              type="button"
+              className="notification-bell__chip"
+              aria-label={`${t("notifications.detail.copy", "Copy error")}: ${title}`}
+              onClick={() => void copyDetail()}
+            >
+              {copied
+                ? t("notifications.detail.copied", "Copied")
+                : t("notifications.detail.copy", "Copy error")}
+            </button>
+            <button
+              type="button"
+              className="notification-bell__chip"
+              aria-expanded={expanded}
+              aria-label={`${
+                expanded
+                  ? t("notifications.detail.less", "Show less")
+                  : t("notifications.detail.more", "Show full message")
+              }: ${title}`}
+              onClick={() => setExpanded((wasExpanded) => !wasExpanded)}
+            >
+              {expanded
+                ? t("notifications.detail.less", "Show less")
+                : t("notifications.detail.more", "Show full message")}
+            </button>
+          </span>
+        </>
+      )}
+
+      {note && <span className="notification-bell__note">{note}</span>}
+
+      {/* In the kind's declared order, the first leading. */}
+      {usable.length > 0 && (
+        <span className="notification-bell__actions">
+          {usable.map((offer, index) => (
+            <ActionButton
+              key={offer.id}
+              variant={index === 0 ? "primary" : "secondary"}
+              rowTitle={title}
+              label={labelOf(offer)}
+              busy={busy === offer.id}
+              onRun={() => void run(offer)}
+            />
+          ))}
+        </span>
+      )}
+
+      {message && (
+        <span className="notification-bell__message" role="alert">
+          {message}
+        </span>
+      )}
+    </li>
+  );
+}
+
+interface ActionButtonProps {
+  variant: "primary" | "secondary";
+  rowTitle: string;
+  label: string;
+  busy: boolean;
+  onRun: () => void;
+}
+
+function ActionButton({
+  variant,
+  rowTitle,
+  label,
+  busy,
+  onRun,
+}: ActionButtonProps) {
+  return (
+    <Button
+      variant={variant}
+      size="sm"
+      fontSize="xs"
+      className="notification-bell__cta"
+      disabled={busy}
+      // Every row's buttons read alike, so the label alone would not say which failure this acts on.
+      aria-label={`${label}: ${rowTitle}`}
+      onClick={onRun}
+    >
+      {label}
+    </Button>
+  );
+}
diff --git a/frontend/editor/src/core/components/notifications/notificationActions.ts b/frontend/editor/src/core/components/notifications/notificationActions.ts
new file mode 100644
index 0000000000..874e6fb824
--- /dev/null
+++ b/frontend/editor/src/core/components/notifications/notificationActions.ts
@@ -0,0 +1,40 @@
+import type { AppNotification } from "@app/services/notifications";
+
+/**
+ * Keyed by action rather than by row, because the server decides what a kind offers: adding a kind is
+ * no frontend change, and adding a button is one entry here.
+ */
+
+export interface NotificationActionContext {
+  notification: AppNotification;
+  /** Whether the document is still in this browser, which is what most actions hinge on. */
+  hasLocalFile: boolean;
+}
+
+/** `void` means it did what it said; a failed outcome carries the message the row shows. */
+export interface ClientActionOutcome {
+  ok: boolean;
+  message?: string;
+}
+
+export interface ClientActionSpec {
+  /** Asked per row, never during a request. */
+  available(context: NotificationActionContext): boolean;
+  run(
+    context: NotificationActionContext,
+  ): ClientActionOutcome | void | Promise<ClientActionOutcome | void>;
+  /** Whether the panel should get out of the way, the destination being behind it. */
+  closesPanel?: boolean;
+}
+
+/** An id with no entry is skipped rather than rendered unwired. */
+export type ClientActionRegistry = Readonly<
+  Record<string, ClientActionSpec | undefined>
+>;
+
+const NONE: ClientActionRegistry = {};
+
+/** Every destination ships in a higher layer, so this build's rows carry no buttons. */
+export function useNotificationActions(): ClientActionRegistry {
+  return NONE;
+}
diff --git a/frontend/editor/src/core/components/notifications/useNotificationsAvailable.ts b/frontend/editor/src/core/components/notifications/useNotificationsAvailable.ts
new file mode 100644
index 0000000000..1835a0541f
--- /dev/null
+++ b/frontend/editor/src/core/components/notifications/useNotificationsAvailable.ts
@@ -0,0 +1,11 @@
+/**
+ * Whether this build has a notifications API to read. When it does not, the bell must not
+ * mount at all: an unconditional mount would poll an endpoint that does not exist, leaving a
+ * permanent timer and a 404 in the network log for nothing it could ever show.
+ *
+ * Core has no failure registry and no notification routes, so the answer here is no; a build
+ * that ships them overrides this to say so.
+ */
+export function useNotificationsAvailable(): boolean {
+  return false;
+}
diff --git a/frontend/editor/src/core/components/shared/AppBanner.css b/frontend/editor/src/core/components/shared/AppBanner.css
new file mode 100644
index 0000000000..b3f3f9343a
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/AppBanner.css
@@ -0,0 +1,115 @@
+/* App-wide top bar. One shape, four tones — callers pick a tone, never a colour.
+   Named `app-banner`, not `sui-banner`: that belongs to the SUI Banner primitive. */
+.app-banner {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  min-height: 3.5rem;
+  padding: 0.75rem 1rem;
+  /* Full-bleed across the top of the app: square corners, one rule underneath. */
+  border-bottom: 1px solid var(--app-banner-border);
+  background: var(--app-banner-bg);
+  color: var(--c-text);
+}
+
+.app-banner--compact {
+  min-height: 2.75rem;
+  padding: 0.5rem 1rem;
+  gap: 0.5rem;
+}
+
+.app-banner--info {
+  --app-banner-bg: var(--c-primary-subtle);
+  --app-banner-border: var(--c-primary-border);
+  --app-banner-icon: var(--c-accent-fg, var(--c-primary));
+}
+
+/* The one bar meant to pop, so it takes the feature gradient rather than a tint.
+   Fixed hues by design — it doesn't follow the chosen accent. */
+.app-banner--promo {
+  --app-banner-bg: linear-gradient(
+    135deg,
+    var(--c-hue-indigo) 0%,
+    var(--c-hue-purple) 100%
+  );
+  --app-banner-border: transparent;
+  --app-banner-icon: var(--color-text-on-accent);
+  color: var(--color-text-on-accent);
+}
+
+.app-banner--warning {
+  --app-banner-bg: var(--c-warning-subtle);
+  --app-banner-border: color-mix(in srgb, var(--c-warning) 32%, transparent);
+  --app-banner-icon: var(--c-warning);
+}
+
+.app-banner--danger {
+  --app-banner-bg: var(--c-danger-subtle);
+  --app-banner-border: color-mix(in srgb, var(--c-danger) 32%, transparent);
+  --app-banner-icon: var(--c-danger);
+}
+
+/* Only the icon carries the tone; text stays neutral in every tone. */
+.app-banner__icon {
+  display: flex;
+  flex-shrink: 0;
+  align-items: center;
+  color: var(--app-banner-icon);
+}
+
+.app-banner__body {
+  display: flex;
+  flex: 1;
+  min-width: 0;
+  flex-direction: column;
+  gap: 0.125rem;
+}
+
+.app-banner__title {
+  font-size: 0.875rem;
+  font-weight: 600;
+}
+
+.app-banner__message {
+  font-size: 0.8125rem;
+  line-height: 1.4;
+  color: var(--c-text-muted);
+}
+
+.app-banner__body:not(:has(.app-banner__title)) .app-banner__message {
+  color: inherit;
+  font-weight: 500;
+}
+
+.app-banner--compact .app-banner__title,
+.app-banner--compact .app-banner__message {
+  font-size: 0.75rem;
+}
+
+/* On the gradient everything is white; muted grey would disappear. */
+.app-banner--promo .app-banner__message,
+.app-banner--promo .app-banner__actions .sui-btn--tertiary,
+.app-banner--promo .app-banner__actions .sui-ai {
+  color: var(--color-text-on-accent);
+}
+
+/* Lifts the premium CTA off the gradient it sits on. */
+.app-banner--promo .app-banner__actions .sui-btn--primary {
+  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.25);
+}
+
+.app-banner__actions {
+  display: flex;
+  flex-shrink: 0;
+  align-items: center;
+  gap: 0.5rem;
+}
+
+/* Mantine trims the leading padding when a button has a left section, which reads
+   as off-centre next to the label. Even it back up. */
+.app-banner__actions .sui-btn .mantine-Button-inner {
+  padding-inline: 0;
+}
+.app-banner__actions .sui-btn {
+  padding-inline: 0.875rem;
+}
diff --git a/frontend/editor/src/core/components/shared/AppBanner.stories.tsx b/frontend/editor/src/core/components/shared/AppBanner.stories.tsx
new file mode 100644
index 0000000000..db741a4bf8
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/AppBanner.stories.tsx
@@ -0,0 +1,194 @@
+import type { ReactNode } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { AppBanner } from "@app/components/shared/AppBanner";
+
+const meta = {
+  title: "Shared/AppBanner",
+  component: AppBanner,
+  parameters: { layout: "fullscreen" },
+} satisfies Meta<typeof AppBanner>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+
+export const Info: Story = {
+  args: {
+    icon: "info-rounded",
+    title: "Heads up",
+    message: "This document contains form fields that will be flattened.",
+  },
+};
+
+export const Promo: Story = {
+  args: {
+    tone: "promo",
+    icon: "stars-rounded",
+    title: "Upgrade to Server Plan",
+    message:
+      "Get the most out of Stirling PDF with unlimited users and advanced features.",
+    buttonText: "Upgrade Now",
+    buttonIcon: "upgrade-rounded",
+    onButtonClick: () => {},
+    compact: true,
+  },
+};
+
+export const Warning: Story = {
+  args: {
+    tone: "warning",
+    icon: "warning-rounded",
+    title: "Action required",
+    message: "Some pages could not be processed and were skipped.",
+    buttonText: "Review",
+    onButtonClick: () => {},
+  },
+};
+
+export const Danger: Story = {
+  args: {
+    tone: "danger",
+    icon: "warning-rounded",
+    title: "This server needs admin attention",
+    message: "Review the license requirements to keep this server compliant.",
+    buttonText: "See info",
+    buttonIcon: "info-rounded",
+    onButtonClick: () => {},
+    dismissible: false,
+  },
+};
+
+export const Compact: Story = {
+  args: {
+    compact: true,
+    icon: "info-rounded",
+    message: "Autosave is enabled for this file.",
+    dismissible: false,
+  },
+};
+
+/** Message-only, no title: the message takes the title's weight so the bar still reads. */
+export const MessageOnly: Story = {
+  args: {
+    icon: "picture-as-pdf-rounded",
+    message:
+      "Make Stirling PDF your default application for opening PDF files.",
+    buttonText: "Set Default",
+    onButtonClick: () => {},
+    secondaryButtonText: "Don't remind me again",
+    onSecondaryButtonClick: () => {},
+  },
+};
+
+function Row({ caption, children }: { caption: string; children: ReactNode }) {
+  return (
+    <section
+      style={{ display: "flex", flexDirection: "column", gap: "0.375rem" }}
+    >
+      <span
+        style={{
+          fontSize: "0.6875rem",
+          fontWeight: 600,
+          letterSpacing: "0.04em",
+          textTransform: "uppercase",
+          color: "var(--c-text-subtle)",
+          padding: "0 1rem",
+        }}
+      >
+        {caption}
+      </span>
+      {children}
+    </section>
+  );
+}
+
+/**
+ * Every top bar the app can show, in one place: each entry mirrors a real caller,
+ * so a change to the component is visible against the whole set at once. Renders a
+ * composition rather than the component, so it takes no args of its own.
+ */
+export const AllTopBars: StoryObj = {
+  render: () => (
+    <div
+      style={{
+        display: "flex",
+        flexDirection: "column",
+        gap: "1.5rem",
+        padding: "1.5rem 0",
+        background: "var(--c-bg)",
+      }}
+    >
+      <Row caption="Upgrade prompt · UpgradeBanner (friendly)">
+        <AppBanner
+          tone="promo"
+          compact
+          icon="stars-rounded"
+          title="Upgrade to Server Plan"
+          message="Get the most out of Stirling PDF with unlimited users and advanced features."
+          buttonText="Upgrade Now"
+          buttonIcon="upgrade-rounded"
+          onButtonClick={() => {}}
+        />
+      </Row>
+
+      <Row caption="Server needs attention · UpgradeBanner (urgent)">
+        <AppBanner
+          tone="warning"
+          icon="warning-rounded"
+          title="This server needs admin attention"
+          message="Review the license requirements to keep this server compliant."
+          buttonText="See info"
+          buttonIcon="info-rounded"
+          onButtonClick={() => {}}
+          dismissible={false}
+        />
+      </Row>
+
+      <Row caption="Free tier limit reached · AdminPlanSection">
+        <AppBanner
+          tone="warning"
+          icon="warning-rounded"
+          title="Free self-hosted limit reached"
+          message="You have 12 users on a plan that covers 10."
+          buttonText="See plans"
+          buttonIcon="upgrade-rounded"
+          onButtonClick={() => {}}
+          dismissible={false}
+        />
+      </Row>
+
+      <Row caption="Team invitation · TeamInvitationBanner">
+        <AppBanner
+          icon="mail"
+          message="You have been invited to join the Acme Legal team."
+          buttonText="Accept"
+          onButtonClick={() => {}}
+          secondaryButtonText="Decline"
+          onSecondaryButtonClick={() => {}}
+          dismissible={false}
+        />
+      </Row>
+
+      <Row caption="Set as default app · DefaultAppBanner (desktop)">
+        <AppBanner
+          icon="picture-as-pdf-rounded"
+          message="Make Stirling PDF your default application for opening PDF files."
+          buttonText="Set Default"
+          onButtonClick={() => {}}
+          secondaryButtonText="Don't remind me again"
+          onSecondaryButtonClick={() => {}}
+        />
+      </Row>
+
+      <Row caption="Danger tone (available, no caller yet)">
+        <AppBanner
+          tone="danger"
+          icon="warning-rounded"
+          title="Storage is full"
+          message="New uploads will fail until space is freed."
+          buttonText="Manage storage"
+          onButtonClick={() => {}}
+          dismissible={false}
+        />
+      </Row>
+    </div>
+  ),
+};
diff --git a/frontend/editor/src/core/components/shared/AppBanner.tsx b/frontend/editor/src/core/components/shared/AppBanner.tsx
new file mode 100644
index 0000000000..ee0ba03741
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/AppBanner.tsx
@@ -0,0 +1,124 @@
+import React, { ReactNode } from "react";
+import { Button } from "@app/ui/Button";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import { useTranslation } from "react-i18next";
+import LocalIcon from "@app/components/shared/LocalIcon";
+import "@app/components/shared/AppBanner.css";
+
+/** Picks the whole look. Callers choose meaning, never colours. */
+export type AppBannerTone = "info" | "promo" | "warning" | "danger";
+
+/** Tone decides the button too, so the CTA can't drift from the bar it sits on. */
+const TONE_BUTTON = {
+  info: { variant: "secondary", accent: "default" },
+  promo: { variant: "primary", accent: "premium" },
+  warning: { variant: "primary", accent: "warning" },
+  danger: { variant: "primary", accent: "danger" },
+} as const;
+
+interface AppBannerProps {
+  /** A LocalIcon name, or a pre-rendered node (e.g. a logo) dropped in as-is. */
+  icon?: string | ReactNode;
+  title?: ReactNode;
+  message: ReactNode;
+  buttonText?: string;
+  buttonIcon?: string;
+  onButtonClick?: () => void;
+  /** Muted secondary action, e.g. "Don't remind me again". */
+  secondaryButtonText?: string;
+  onSecondaryButtonClick?: () => void;
+  onDismiss?: () => void;
+  dismissible?: boolean;
+  loading?: boolean;
+  show?: boolean;
+  tone?: AppBannerTone;
+  compact?: boolean;
+}
+
+/** The app's top bar: dismissible messaging above the workspace. */
+export const AppBanner: React.FC<AppBannerProps> = ({
+  icon,
+  title,
+  message,
+  buttonText,
+  buttonIcon = "check-circle-rounded",
+  onButtonClick,
+  secondaryButtonText,
+  onSecondaryButtonClick,
+  onDismiss,
+  dismissible = true,
+  loading = false,
+  show = true,
+  tone = "info",
+  compact = false,
+}) => {
+  const { t } = useTranslation();
+  if (!show) return null;
+
+  const iconSize = compact ? "1rem" : "1.25rem";
+
+  return (
+    <div
+      className={[
+        "app-banner",
+        `app-banner--${tone}`,
+        compact ? "app-banner--compact" : "",
+      ]
+        .filter(Boolean)
+        .join(" ")}
+    >
+      {icon != null && (
+        <span className="app-banner__icon" aria-hidden>
+          {typeof icon === "string" ? (
+            <LocalIcon icon={icon} width={iconSize} height={iconSize} />
+          ) : (
+            icon
+          )}
+        </span>
+      )}
+
+      <div className="app-banner__body">
+        {title && <span className="app-banner__title">{title}</span>}
+        <span className="app-banner__message">{message}</span>
+      </div>
+
+      <div className="app-banner__actions">
+        {buttonText && onButtonClick && (
+          <Button
+            variant={TONE_BUTTON[tone].variant}
+            accent={TONE_BUTTON[tone].accent}
+            size="sm"
+            loading={loading}
+            onClick={onButtonClick}
+            leftSection={
+              <LocalIcon icon={buttonIcon} width="0.9rem" height="0.9rem" />
+            }
+          >
+            {buttonText}
+          </Button>
+        )}
+        {secondaryButtonText && onSecondaryButtonClick && (
+          <Button
+            variant="tertiary"
+            accent="neutral"
+            size="sm"
+            onClick={onSecondaryButtonClick}
+          >
+            {secondaryButtonText}
+          </Button>
+        )}
+        {dismissible && (
+          <ActionIcon
+            variant="tertiary"
+            accent="neutral"
+            size="sm"
+            onClick={() => onDismiss?.()}
+            aria-label={t("appBanner.dismiss", "Dismiss")}
+          >
+            <LocalIcon icon="close-rounded" width="1rem" height="1rem" />
+          </ActionIcon>
+        )}
+      </div>
+    </div>
+  );
+};
diff --git a/frontend/editor/src/core/components/shared/AppConfigModal.css b/frontend/editor/src/core/components/shared/AppConfigModal.css
index 2953632d98..1f2246c8f5 100644
--- a/frontend/editor/src/core/components/shared/AppConfigModal.css
+++ b/frontend/editor/src/core/components/shared/AppConfigModal.css
@@ -39,41 +39,77 @@
   flex-direction: column;
 }
 
-/* Mobile: compact icon-only navigation */
+/* Mobile: two-level settings navigation */
 @media (max-width: 1024px) {
   .modal-container {
-    height: 100vh !important;
+    flex-direction: column;
+    height: 100dvh !important;
     max-height: none !important;
   }
 
   .modal-nav {
-    width: 5rem; /* 80px - wider for larger icons */
-    height: 100vh !important;
+    width: 100%;
+    flex: 1;
+    min-height: 0;
+    height: auto !important;
     max-height: none !important;
-    border-top-left-radius: 0;
-    border-bottom-left-radius: 0;
+    border-radius: 0;
   }
 
   .modal-nav-scroll {
-    padding: 1rem 0.5rem;
+    padding: 0.75rem 0.75rem 2rem;
   }
 
   .modal-nav-section {
-    margin-bottom: 1.5rem;
+    margin-bottom: 1.25rem;
+  }
+
+  .modal-nav-section > .mantine-Text-root {
+    padding: 0 0.5rem;
   }
 
   .modal-nav-item.mobile {
-    padding: 1rem;
-    justify-content: center;
-    border-radius: 0.75rem;
-    margin-bottom: 0.75rem;
+    padding: 0.75rem 0.625rem;
+    min-height: 3rem;
+    border-radius: 0.625rem;
+    margin-bottom: 0.125rem;
+    gap: 0.75rem;
+  }
+
+  .modal-nav-item .modal-nav-item-badge {
+    display: inline-flex;
+  }
+
+  .modal-nav-chevron {
+    flex-shrink: 0;
+    color: var(--c-text-subtle);
   }
 
   .modal-content {
-    height: 100vh !important;
+    height: auto !important;
+    flex: 1;
+    min-height: 0;
     max-height: none !important;
     border-radius: 0;
   }
+
+  .modal-body {
+    padding: 1rem;
+    padding-top: 0.75rem;
+  }
+}
+
+@media (max-width: 48rem) {
+  .modal-body [id^="setting-"] {
+    flex-direction: column;
+    align-items: flex-start !important;
+    gap: 0.625rem;
+  }
+
+  .modal-body [id^="setting-"]:has(.mantine-Switch-root) {
+    flex-direction: row;
+    align-items: center !important;
+  }
 }
 
 .modal-nav-scroll {
@@ -241,6 +277,7 @@
 @media (max-width: 1024px) {
   .settings-sticky-footer {
     padding: 0.75rem 1rem;
+    padding-bottom: calc(0.75rem + env(safe-area-inset-bottom, 0px));
     margin: 0 -1rem;
     margin-bottom: -1rem;
   }
diff --git a/frontend/editor/src/core/components/shared/AppConfigModal.tsx b/frontend/editor/src/core/components/shared/AppConfigModal.tsx
index 12faf6eea5..c5adef038d 100644
--- a/frontend/editor/src/core/components/shared/AppConfigModal.tsx
+++ b/frontend/editor/src/core/components/shared/AppConfigModal.tsx
@@ -7,6 +7,9 @@ import React, {
 } from "react";
 import { Badge, Modal, Text, Tooltip, Group } from "@mantine/core";
 import { ActionIcon } from "@app/ui/ActionIcon";
+import { SettingsMobileBackButton } from "@app/components/shared/config/SettingsMobileBackButton";
+import { SettingsMobileNavHeader } from "@app/components/shared/config/SettingsMobileNavHeader";
+import { SettingsNavChevron } from "@app/components/shared/config/SettingsNavChevron";
 import { useNavigate, useLocation } from "react-router-dom";
 import { useTranslation } from "react-i18next";
 import LocalIcon from "@app/components/shared/LocalIcon";
@@ -30,7 +33,6 @@ import {
   useUnsavedChanges,
 } from "@app/contexts/UnsavedChangesContext";
 import { stripBasePath, withBasePath } from "@app/constants/app";
-import { EDITOR_BASENAME } from "@app/routes/editorBasename";
 
 interface AppConfigModalProps {
   opened: boolean;
@@ -82,6 +84,7 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
       "general",
   );
   const isMobile = useIsMobile();
+  const [mobilePane, setMobilePane] = useState<"nav" | "content">("nav");
   const navigate = useNavigate();
   const location = useLocation();
   const { config } = useAppConfig();
@@ -122,6 +125,14 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
     }
   }, [opened]);
 
+  useEffect(() => {
+    if (!opened) return;
+    const target = urlSync
+      ? getSectionFromPath(window.location.pathname)
+      : initialSection;
+    setMobilePane(target ? "content" : "nav");
+  }, [opened, urlSync, initialSection]);
+
   // Switch tab without forcing every `useLocation()` subscriber (HomePage and
   // its FileSidebar/Workbench/RightSidebar/FileManager tree) to re-render.
   //
@@ -220,27 +231,9 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
   const handleClose = useCallback(async () => {
     const canProceed = await confirmIfDirty();
     if (!canProceed) return false;
-
-    // Only unwind history if settings was opened via the URL; opened via state
-    // there's no /settings entry to pop and navigate(-1) would jump to /files.
-    if (urlSync && location.pathname.startsWith("/settings")) {
-      // "default" key = first entry (deep link/refresh); nothing to pop to.
-      if (location.key === "default") {
-        navigate(EDITOR_BASENAME, { replace: true });
-      } else {
-        navigate(-1);
-      }
-    }
     onClose();
     return true;
-  }, [
-    confirmIfDirty,
-    location.key,
-    location.pathname,
-    navigate,
-    onClose,
-    urlSync,
-  ]);
+  }, [confirmIfDirty, onClose]);
 
   // Synchronous wrapper for contexts (e.g. tour buttons) that need () => void
   const handleCloseSync = useCallback(() => {
@@ -306,10 +299,17 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
       const canProceed = await confirmIfDirty();
       if (!canProceed) return;
       switchSection(key);
+      setMobilePane("content");
     },
     [confirmIfDirty, switchSection],
   );
 
+  const handleMobileBack = useCallback(async () => {
+    const canProceed = await confirmIfDirty();
+    if (!canProceed) return;
+    setMobilePane("nav");
+  }, [confirmIfDirty]);
+
   return (
     <Modal
       opened={opened}
@@ -332,22 +332,28 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
           className={`modal-nav ${isMobile ? "mobile" : ""}`}
           style={{
             background: colors.navBg,
-            borderRight: `1px solid ${colors.headerBorder}`,
+            ...(isMobile
+              ? { display: mobilePane === "nav" ? undefined : "none" }
+              : { borderRight: `1px solid ${colors.headerBorder}` }),
           }}
         >
+          <SettingsMobileNavHeader
+            show={isMobile}
+            onClose={handleClose}
+            background={colors.navBg}
+            borderColor={colors.headerBorder}
+          />
           <div className="modal-nav-scroll">
             {configNavSections.map((section) => (
               <div key={section.title} className="modal-nav-section">
-                {!isMobile && (
-                  <Text
-                    size="xs"
-                    fw={600}
-                    c={colors.sectionTitle}
-                    style={{ textTransform: "uppercase", letterSpacing: 0.4 }}
-                  >
-                    {section.title}
-                  </Text>
-                )}
+                <Text
+                  size="xs"
+                  fw={600}
+                  c={colors.sectionTitle}
+                  style={{ textTransform: "uppercase", letterSpacing: 0.4 }}
+                >
+                  {section.title}
+                </Text>
                 <div className="modal-nav-section-items">
                   {section.items.map((item) => {
                     const isActive = active === item.key;
@@ -355,7 +361,7 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
                     const color = isActive
                       ? colors.navItemActive
                       : colors.navItem;
-                    const iconSize = isMobile ? 28 : 18;
+                    const iconSize = 18;
                     const showPlanWarning =
                       item.key === "adminPlan" &&
                       licenseAlert.active &&
@@ -383,47 +389,46 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
                           icon={item.icon}
                           width={iconSize}
                           height={iconSize}
-                          style={{ color }}
+                          style={{ color, flexShrink: 0 }}
                         />
-                        {!isMobile && (
-                          <Group
-                            gap={4}
-                            align="center"
-                            wrap="nowrap"
-                            style={{ minWidth: 0, flex: 1 }}
+                        <Group
+                          gap={4}
+                          align="center"
+                          wrap="nowrap"
+                          style={{ minWidth: 0, flex: 1 }}
+                        >
+                          <Text
+                            size="sm"
+                            fw={500}
+                            truncate
+                            style={{ color, minWidth: 0, flex: 1 }}
+                            title={item.label}
                           >
-                            <Text
-                              size="sm"
-                              fw={500}
-                              truncate
-                              style={{ color, minWidth: 0, flex: 1 }}
-                              title={item.label}
+                            {item.label}
+                          </Text>
+                          {item.badge && (
+                            <Badge
+                              size="xs"
+                              variant="light"
+                              color={item.badgeColor ?? "orange"}
+                              className="modal-nav-item-badge"
+                              style={{ flexShrink: 0 }}
                             >
-                              {item.label}
-                            </Text>
-                            {item.badge && (
-                              <Badge
-                                size="xs"
-                                variant="light"
-                                color={item.badgeColor ?? "orange"}
-                                className="modal-nav-item-badge"
-                                style={{ flexShrink: 0 }}
-                              >
-                                {item.badge}
-                              </Badge>
-                            )}
-                            {showPlanWarning && (
-                              <LocalIcon
-                                icon="warning-rounded"
-                                width={14}
-                                height={14}
-                                style={{
-                                  color: "var(--mantine-color-orange-7)",
-                                }}
-                              />
-                            )}
-                          </Group>
-                        )}
+                              {item.badge}
+                            </Badge>
+                          )}
+                          {showPlanWarning && (
+                            <LocalIcon
+                              icon="warning-rounded"
+                              width={14}
+                              height={14}
+                              style={{
+                                color: "var(--mantine-color-orange-7)",
+                              }}
+                            />
+                          )}
+                        </Group>
+                        <SettingsNavChevron show={isMobile} />
                       </div>
                     );
 
@@ -450,7 +455,15 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
         </div>
 
         {/* Right content */}
-        <div className="modal-content" data-tour="settings-content-area">
+        <div
+          className="modal-content"
+          data-tour="settings-content-area"
+          style={
+            isMobile && mobilePane !== "content"
+              ? { display: "none" }
+              : undefined
+          }
+        >
           <div className="modal-content-scroll">
             {/* Sticky header with section title and small close button */}
             <div
@@ -460,9 +473,15 @@ const AppConfigModalInner: React.FC<AppConfigModalProps> = ({
                 borderBottom: `1px solid ${colors.headerBorder}`,
               }}
             >
-              <Text fw={700} size="lg">
-                {activeLabel}
-              </Text>
+              <Group gap="xs" wrap="nowrap" style={{ minWidth: 0 }}>
+                <SettingsMobileBackButton
+                  show={isMobile}
+                  onClick={() => void handleMobileBack()}
+                />
+                <Text fw={700} size="lg" truncate>
+                  {activeLabel}
+                </Text>
+              </Group>
               <Group gap="xs" wrap="nowrap">
                 <ActionIcon
                   ref={closeButtonRef}
diff --git a/frontend/editor/src/core/components/shared/BrandMark.css b/frontend/editor/src/core/components/shared/BrandMark.css
index 7ddff9b4c7..df05ff1307 100644
--- a/frontend/editor/src/core/components/shared/BrandMark.css
+++ b/frontend/editor/src/core/components/shared/BrandMark.css
@@ -48,9 +48,55 @@
   transform: matrix(0.483871, -0.017568, 0, 0.338028, 23.887097, 26.886428);
 }
 
+/* One-shot "thinking" drift — the two parallelograms swap past each other and
+   settle back. Same motion the chat FAB loops while the agent works, but this
+   pair starts and ends at rest (translate 0, full opacity) so a single
+   iteration can end without snapping. Callers apply it for one beat; see
+   NavFooter.css for the hover use. */
+@keyframes sui-brandmark-drift-a {
+  0%,
+  100% {
+    transform: translate(0, 0);
+    opacity: 1;
+  }
+  25% {
+    transform: translate(-1px, -5px);
+    opacity: 0.55;
+  }
+  50% {
+    transform: translate(-6px, 0);
+    opacity: 0.9;
+  }
+  75% {
+    transform: translate(-1px, 5px);
+    opacity: 0.6;
+  }
+}
+
+@keyframes sui-brandmark-drift-b {
+  0%,
+  100% {
+    transform: translate(0, 0);
+    opacity: 1;
+  }
+  25% {
+    transform: translate(1px, 5px);
+    opacity: 0.85;
+  }
+  50% {
+    transform: translate(6px, 0);
+    opacity: 0.5;
+  }
+  75% {
+    transform: translate(1px, -5px);
+    opacity: 0.85;
+  }
+}
+
 @media (prefers-reduced-motion: reduce) {
   .sui-brandmark__a,
   .sui-brandmark__b {
     transition: none;
+    animation: none;
   }
 }
diff --git a/frontend/editor/src/core/components/shared/BulkShareModal.tsx b/frontend/editor/src/core/components/shared/BulkShareModal.tsx
index e210d2f201..f68a154e89 100644
--- a/frontend/editor/src/core/components/shared/BulkShareModal.tsx
+++ b/frontend/editor/src/core/components/shared/BulkShareModal.tsx
@@ -153,7 +153,7 @@ const BulkShareModal: React.FC<BulkShareModalProps> = ({
       if (onShared) {
         await onShared();
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to generate share link:", error);
       setErrorMessage(
         t(
diff --git a/frontend/editor/src/core/components/shared/CardSelector.tsx b/frontend/editor/src/core/components/shared/CardSelector.tsx
index 75e9071d81..79a94e7b40 100644
--- a/frontend/editor/src/core/components/shared/CardSelector.tsx
+++ b/frontend/editor/src/core/components/shared/CardSelector.tsx
@@ -1,5 +1,6 @@
 import { Stack, Card, Text, Flex } from "@mantine/core";
 import { Tooltip } from "@app/components/shared/Tooltip";
+import { TooltipTip } from "@app/types/tips";
 import { useTranslation } from "react-i18next";
 
 export interface CardOption<T = string> {
@@ -7,14 +8,14 @@ export interface CardOption<T = string> {
   prefixKey: string;
   nameKey: string;
   tooltipKey?: string;
-  tooltipContent?: any[];
+  tooltipContent?: TooltipTip[];
 }
 
 export interface CardSelectorProps<T, K extends CardOption<T>> {
   options: K[];
   onSelect: (value: T) => void;
   disabled?: boolean;
-  getTooltipContent?: (option: K) => any[];
+  getTooltipContent?: (option: K) => TooltipTip[];
 }
 
 const CardSelector = <T, K extends CardOption<T>>({
diff --git a/frontend/editor/src/proprietary/components/shared/DividerWithText.stories.tsx b/frontend/editor/src/core/components/shared/DividerWithText.stories.tsx
similarity index 100%
rename from frontend/editor/src/proprietary/components/shared/DividerWithText.stories.tsx
rename to frontend/editor/src/core/components/shared/DividerWithText.stories.tsx
diff --git a/frontend/editor/src/proprietary/components/shared/DividerWithText.tsx b/frontend/editor/src/core/components/shared/DividerWithText.tsx
similarity index 100%
rename from frontend/editor/src/proprietary/components/shared/DividerWithText.tsx
rename to frontend/editor/src/core/components/shared/DividerWithText.tsx
diff --git a/frontend/editor/src/core/components/shared/FileSelectorPicker.tsx b/frontend/editor/src/core/components/shared/FileSelectorPicker.tsx
index 17502ee9b6..2b84105ba8 100644
--- a/frontend/editor/src/core/components/shared/FileSelectorPicker.tsx
+++ b/frontend/editor/src/core/components/shared/FileSelectorPicker.tsx
@@ -269,7 +269,7 @@ export function FileSelectorPicker({
               responseType: "blob",
               suppressErrorToast: true,
               skipAuthRedirect: true,
-            } as any,
+            },
           );
           const ct = readResponseHeader(res.headers, "content-type");
           const disp = readResponseHeader(res.headers, "content-disposition");
@@ -287,7 +287,7 @@ export function FileSelectorPicker({
               responseType: "blob",
               suppressErrorToast: true,
               skipAuthRedirect: true,
-            } as any,
+            },
           );
           const ct = readResponseHeader(res.headers, "content-type");
           const disp = readResponseHeader(res.headers, "content-disposition");
diff --git a/frontend/editor/src/core/components/shared/FileSidebar.css b/frontend/editor/src/core/components/shared/FileSidebar.css
index 590f59fa7d..2347d9a2b2 100644
--- a/frontend/editor/src/core/components/shared/FileSidebar.css
+++ b/frontend/editor/src/core/components/shared/FileSidebar.css
@@ -75,16 +75,13 @@
   padding: 0.25rem 0;
   overflow: hidden;
 }
-.file-sidebar-footer-box {
-  padding: 0.25rem 0;
-  flex-shrink: 0;
-}
+/* The footer is the shared <NavFooter>: it brings its own boxes and padding,
+   so this class only positions it in the column. */
 
 /* Collapsed rail: the file tree isn't rendered, so hide its (empty) box and
    let the boxes stack at the top — controls, then the settings footer right
    after — instead of the files box stretching to fill. */
-.file-sidebar[data-collapsed="true"] .file-sidebar-controls,
-.file-sidebar[data-collapsed="true"] .file-sidebar-footer-box {
+.file-sidebar[data-collapsed="true"] .file-sidebar-controls {
   padding: 0.25rem;
 }
 .file-sidebar[data-collapsed="true"] .file-sidebar-files-box {
@@ -538,86 +535,3 @@
   pointer-events: none;
   animation: none;
 }
-
-/* ---- Bottom bar (user + settings) ---- */
-.file-sidebar-bottom-bar {
-  display: flex;
-  align-items: center;
-  gap: 8px;
-  padding: 4px 6px;
-  flex-shrink: 0;
-  min-height: 40px;
-}
-
-/* Bottom bar settings icon tracks the right edge during collapse animation */
-
-.file-sidebar-bottom-avatar {
-  width: 28px;
-  height: 28px;
-  border-radius: 50%;
-  background-color: var(--c-accent-text);
-  color: var(--c-text-on-primary);
-  font-size: 12px;
-  font-weight: 600;
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  flex-shrink: 0;
-  user-select: none;
-  overflow: hidden;
-}
-
-/* No colored disc behind an actual photo; keep it for the initials fallback. */
-.file-sidebar-bottom-avatar--picture {
-  background-color: transparent;
-}
-
-.file-sidebar-bottom-avatar-img {
-  width: 100%;
-  height: 100%;
-  border-radius: 50%;
-  object-fit: cover;
-}
-
-.file-sidebar-bottom-name {
-  flex: 1;
-  font-size: 13px;
-  font-weight: 500;
-  color: var(--c-text);
-  white-space: nowrap;
-  overflow: hidden;
-  text-overflow: ellipsis;
-  min-width: 0;
-}
-
-.file-sidebar-bottom-bar[role="button"]:hover {
-  background-color: var(--c-hover);
-}
-
-.file-sidebar-bottom-bar[role="button"]:focus-visible {
-  outline: 2px solid var(--c-primary);
-  outline-offset: -2px;
-}
-
-.file-sidebar-bottom-settings {
-  display: flex;
-  align-items: center;
-  justify-content: center;
-  width: 28px;
-  height: 28px;
-  border-radius: 6px;
-  color: var(--c-text-subtle);
-  padding: 0;
-  flex-shrink: 0;
-  margin-left: auto;
-}
-
-.file-sidebar[data-collapsed="true"] .file-sidebar-bottom-settings {
-  width: 32px;
-  height: 32px;
-}
-
-.file-sidebar[data-collapsed="true"] .file-sidebar-bottom-bar {
-  justify-content: center;
-  padding: 8px 0;
-}
diff --git a/frontend/editor/src/core/components/shared/FileSidebar.tsx b/frontend/editor/src/core/components/shared/FileSidebar.tsx
index f74e96220f..f9337bd880 100644
--- a/frontend/editor/src/core/components/shared/FileSidebar.tsx
+++ b/frontend/editor/src/core/components/shared/FileSidebar.tsx
@@ -22,13 +22,15 @@ import {
 } from "@app/contexts/NavigationContext";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { useFileHandler } from "@app/hooks/useFileHandler";
-import { useAuth } from "@app/auth/UseSession";
-import { useProfilePictureUrl } from "@app/hooks/useProfilePictureUrl";
+import { useAccountIdentity } from "@app/hooks/useAccountIdentity";
+import { useFreeCreditsSummary } from "@app/hooks/useFreeCreditsSummary";
+import { useOtherAppSwitch } from "@app/hooks/useOtherAppSwitch";
+import { useOpenPlan } from "@app/hooks/useOpenPlan";
+import { NavFooter } from "@app/components/shared/navFooter/NavFooter";
 import {
   useIndexedDB,
   useIndexedDBRevision,
 } from "@app/contexts/IndexedDBContext";
-import { accountService } from "@app/services/accountService";
 import { GoogleDriveIcon } from "@app/components/shared/CloudStorageIcons";
 import { AppSwitcher } from "@app/components/shared/AppSwitcher";
 import { SidebarToggleIcon } from "@app/components/shared/SidebarToggleIcon";
@@ -37,8 +39,7 @@ import FolderOpenIcon from "@mui/icons-material/FolderOpen";
 import FolderSpecialIcon from "@mui/icons-material/FolderSpecial";
 import UploadFileIcon from "@mui/icons-material/UploadFile";
 import AddIcon from "@mui/icons-material/Add";
-import OpenInNewIcon from "@mui/icons-material/OpenInNew";
-import SettingsIcon from "@mui/icons-material/Settings";
+import OpenInFullIcon from "@mui/icons-material/OpenInFull";
 import type { FileId } from "@app/types/file";
 import { FileItem } from "@app/components/shared/FileSidebarFileItem";
 import { useLabelName } from "@app/data/labelDisplay";
@@ -54,12 +55,17 @@ import BulkUploadToServerModal from "@app/components/shared/BulkUploadToServerMo
 import { getFileOrigin } from "@app/components/filesPage/fileOrigin";
 import { VersionHistoryModal } from "@app/components/filesPage/VersionHistoryModal";
 import { DeleteFilesDialog } from "@app/components/filesPage/DeleteFilesDialog";
+import { RenameFileDialog } from "@app/components/shared/RenameFileDialog";
+import { duplicateStoredFile } from "@app/utils/duplicateFile";
 import { SidebarChecklistSlot } from "@app/components/shared/SidebarChecklistSlot";
 import {
   deleteServerFile,
   type DeleteScope,
 } from "@app/services/serverStorageDelete";
-import { fileStorage } from "@app/services/fileStorage";
+import { fileStorage, onRecordUnreadable } from "@app/services/fileStorage";
+import { downloadFileWithPolicy } from "@app/services/exportWithPolicy";
+import { useOpenInNewWindow } from "@app/extensions/openInNewWindow";
+import { alert } from "@app/components/toast";
 import { useBulkAddProgress } from "@app/services/bulkAddProgress";
 import { useFolderMembership } from "@app/hooks/useFolderMembership";
 import { useAllWatchedFolders } from "@app/hooks/useAllWatchedFolders";
@@ -202,7 +208,7 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
     const openWatchedFolders = useCallback(() => {
       if (collapsed && onToggleCollapse) onToggleCollapse();
       setCustomWorkbenchViewData(WATCHED_FOLDER_VIEW_ID, { folderId: null });
-      navActions.setWorkbench(WATCHED_FOLDER_WORKBENCH_ID as any);
+      navActions.setWorkbench(WATCHED_FOLDER_WORKBENCH_ID);
     }, [collapsed, onToggleCollapse, setCustomWorkbenchViewData, navActions]);
 
     // Clicking a file's membership dot jumps straight into that folder.
@@ -210,7 +216,7 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
       (folderId: string) => {
         if (collapsed && onToggleCollapse) onToggleCollapse();
         setCustomWorkbenchViewData(WATCHED_FOLDER_VIEW_ID, { folderId });
-        navActions.setWorkbench(WATCHED_FOLDER_WORKBENCH_ID as any);
+        navActions.setWorkbench(WATCHED_FOLDER_WORKBENCH_ID);
       },
       [collapsed, onToggleCollapse, setCustomWorkbenchViewData, navActions],
     );
@@ -240,46 +246,27 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
     const { addFiles } = useFileHandler();
     const indexedDB = useIndexedDB();
 
-    // Each auth layer derives its own displayName from its native user shape.
-    // Fall back to the proprietary REST endpoint only when the auth
-    // context yields nothing - then to "User" as a generic last resort.
-    const { displayName: authDisplayName, isAnonymous } = useAuth();
-    const [accountUsername, setAccountUsername] = useState<string | null>(null);
-    const displayName =
-      authDisplayName ?? accountUsername ?? t("auth.displayName.user", "User");
-
-    const profilePictureUrl = useProfilePictureUrl();
-    const [pictureFailed, setPictureFailed] = useState(false);
-    useEffect(() => setPictureFailed(false), [profilePictureUrl]);
-    const showProfilePicture = !!profilePictureUrl && !pictureFailed;
-
-    useEffect(() => {
-      if (!config?.enableLogin) {
-        setAccountUsername(null);
-        return;
-      }
-      if (authDisplayName) {
-        // The auth context has a name; don't bother hitting the REST
-        // endpoint, but clear any stale cached value from a prior call.
-        setAccountUsername(null);
-        return;
-      }
-      accountService
-        .getAccountData()
-        .then((data) => {
-          // Always reflect the latest result - including clearing it on
-          // sign-out, when the endpoint returns no username (or 401s into
-          // the catch branch below). Without this, signing out would leave
-          // the old username on screen.
-          setAccountUsername(data?.username ?? null);
-        })
-        .catch(() => {
-          setAccountUsername(null);
-        });
-    }, [config?.enableLogin, authDisplayName]);
+    const { displayName, profilePictureUrl, isAnonymous } =
+      useAccountIdentity();
+    const credits = useFreeCreditsSummary();
+    const otherApp = useOtherAppSwitch();
+    const openPlan = useOpenPlan();
 
     // Leaf files = user-visible files (excludes intermediate tool outputs)
     const [allFileStubs, setAllFileStubs] = useState<StirlingFileStub[]>([]);
+    // Files whose stored bytes this session PROVED unreadable. Rows render a
+    // "data lost" state instead of pretending the file can open; storage keeps
+    // the record so a reload re-tests it.
+    const [lostFileIds, setLostFileIds] = useState<ReadonlySet<string>>(
+      () => new Set(),
+    );
+    useEffect(
+      () =>
+        onRecordUnreadable((fileId) =>
+          setLostFileIds((prev) => new Set(prev).add(fileId as string)),
+        ),
+      [],
+    );
     const [stubsLoaded, setStubsLoaded] = useState(false);
     // Kebab "Save to cloud" target; drives BulkUploadToServerModal.
     const [saveToServerTarget, setSaveToServerTarget] = useState<
@@ -293,37 +280,54 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
     const [deleteTarget, setDeleteTarget] = useState<StirlingFileStub | null>(
       null,
     );
+    // Kebab "Rename" target; drives RenameFileDialog.
+    const [renameTarget, setRenameTarget] = useState<StirlingFileStub | null>(
+      null,
+    );
     // Storage gate: only offer Save-to-cloud when the server allows it and
     // the user is signed in (guests have no cloud library).
     const storageEnabled = config?.storageEnabled === true && !isAnonymous;
 
     const refreshStubs = useCallback(async () => {
-      // Leaf files from IDB - same source as the file selection modal.
-      const stubs = await indexedDB.loadLeafMetadata();
-      const idbIds = new Set(stubs.map((s) => s.id as string));
+      // `stubsLoaded` gates the spinner, so the `finally` below must set it on
+      // every path - callers never await this, so a rejection goes nowhere.
+      let stubs: StirlingFileStub[] = [];
+      try {
+        // Leaf files from IDB - same source as the file selection modal.
+        stubs = await indexedDB.loadLeafMetadata();
+      } catch (error) {
+        // Carry on with the in-memory workbench files: an unreadable library
+        // should cost the user their history, not the file they're working on.
+        console.error("Failed to read the file library from storage:", error);
+      }
 
-      // Also include workbench files not yet flushed to IDB.
-      const pendingStubs = state.files.ids
-        .map((id) => state.files.byId[id])
-        .filter(
-          (stub): stub is NonNullable<typeof stub> =>
-            !!stub && stub.isLeaf !== false && !idbIds.has(stub.id as string),
+      try {
+        const idbIds = new Set(stubs.map((s) => s.id as string));
+
+        // Also include workbench files not yet flushed to IDB.
+        const pendingStubs = state.files.ids
+          .map((id) => state.files.byId[id])
+          .filter(
+            (stub): stub is NonNullable<typeof stub> =>
+              !!stub && stub.isLeaf !== false && !idbIds.has(stub.id as string),
+          );
+
+        const allStubs = [...stubs, ...pendingStubs];
+        // A version swap briefly lists both the old leaf (IDB) and its replacement (workbench); two stubs for one lineage collide on the row key and corrupt React reconciliation, so drop any stub another names as its parent.
+        const superseded = new Set(
+          allStubs.map((s) => s.parentFileId as string | undefined),
         );
-
-      const allStubs = [...stubs, ...pendingStubs];
-      // A version swap briefly lists both the old leaf (IDB) and its replacement (workbench); two stubs for one lineage collide on the row key and corrupt React reconciliation, so drop any stub another names as its parent.
-      const superseded = new Set(
-        allStubs.map((s) => s.parentFileId as string | undefined),
-      );
-      const currentStubs = allStubs.filter(
-        (s) => !superseded.has(s.id as string),
-      );
-      setAllFileStubs(
-        currentStubs.sort(
-          (a, b) => (b.lastModified ?? 0) - (a.lastModified ?? 0),
-        ),
-      );
-      setStubsLoaded(true);
+        const currentStubs = allStubs.filter(
+          (s) => !superseded.has(s.id as string),
+        );
+        setAllFileStubs(
+          currentStubs.sort(
+            (a, b) => (b.lastModified ?? 0) - (a.lastModified ?? 0),
+          ),
+        );
+      } finally {
+        setStubsLoaded(true);
+      }
     }, [indexedDB, state.files.ids, state.files.byId]);
 
     // Refresh on mount, workbench changes, or external IndexedDB writes —
@@ -362,7 +366,9 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
           setDeleteTarget(stub);
           return;
         }
-        await fileActions.removeFiles([fileId], true);
+        // Its superseded versions go too - see orphanedAncestorIds.
+        const orphans = await fileStorage.orphanedAncestorIds([fileId]);
+        await fileActions.removeFiles([fileId, ...orphans], true);
         await refreshStubs();
       },
       [allFileStubs, fileActions, refreshStubs],
@@ -380,7 +386,8 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
           await deleteServerFile(stub.remoteStorageId);
         }
         if (scope === "device" || scope === "everywhere") {
-          await fileActions.removeFiles([stub.id], true);
+          const orphans = await fileStorage.orphanedAncestorIds([stub.id]);
+          await fileActions.removeFiles([stub.id, ...orphans], true);
         } else if (scope === "cloud") {
           // Local copy kept - drop the dead remote pointer so the cloud badge
           // clears (the sidebar doesn't reconcile with the server itself).
@@ -418,6 +425,121 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
       [allFileStubs],
     );
 
+    const warnDataUnavailable = useCallback(() => {
+      alert({
+        alertType: "warning",
+        title: t("fileSidebar.dataLostTitle", "File data is unavailable"),
+        body: t(
+          "fileSidebar.dataLostBody",
+          "This browser lost this file's contents. Upload it again to keep working with it.",
+        ),
+        expandable: false,
+        durationMs: 6000,
+      });
+    }, [t]);
+
+    // Kebab: download a copy (desktop saves via the native dialog). Routed
+    // through the policy wrapper so export policies enforce here too.
+    const handleDownload = useCallback(
+      async (fileId: FileId) => {
+        const stub = allFileStubs.find((s) => s.id === fileId);
+        const file = await fileStorage.getStirlingFile(fileId);
+        if (!file) {
+          warnDataUnavailable();
+          return;
+        }
+        try {
+          await downloadFileWithPolicy({
+            data: file,
+            filename: stub?.name ?? file.name,
+            fileId: fileId as string,
+          });
+        } catch (error) {
+          console.error("[FileSidebar] Download failed:", error);
+          alert({
+            alertType: "error",
+            title: t("fileSidebar.downloadFailed", "Download failed"),
+            body: error instanceof Error ? error.message : String(error),
+            expandable: false,
+          });
+        }
+      },
+      [allFileStubs, warnDataUnavailable, t],
+    );
+
+    // Kebab: copy the file into the library under a free "(copy)" name.
+    const handleDuplicate = useCallback(
+      async (fileId: FileId) => {
+        const stub = allFileStubs.find((s) => s.id === fileId);
+        if (!stub) return;
+        try {
+          const copyId = await duplicateStoredFile(
+            stub,
+            allFileStubs.map((s) => s.name),
+            addFiles,
+          );
+          if (!copyId) {
+            warnDataUnavailable();
+            return;
+          }
+          await refreshStubs();
+        } catch (error) {
+          console.error("[FileSidebar] Duplicate failed:", error);
+          alert({
+            alertType: "error",
+            title: t("fileSidebar.duplicateFailed", "Could not duplicate file"),
+            body: error instanceof Error ? error.message : String(error),
+            expandable: false,
+          });
+        }
+      },
+      [allFileStubs, addFiles, refreshStubs, warnDataUnavailable, t],
+    );
+
+    // Kebab: open the rename dialog for this one file.
+    const handleRename = useCallback(
+      (fileId: FileId) => {
+        const stub = allFileStubs.find((s) => s.id === fileId);
+        if (stub) setRenameTarget(stub);
+      },
+      [allFileStubs],
+    );
+
+    // The stub name is what the UI and exports read, so a rename is a metadata
+    // write - storage first, then the workbench copy if the file is open.
+    const handleConfirmRename = useCallback(
+      async (name: string) => {
+        const stub = renameTarget;
+        if (!stub) return;
+        // quickKey is name|size|lastModified; a stale one would make a re-upload
+        // of the original look like a duplicate of the renamed file.
+        const quickKey = `${name}|${stub.size}|${stub.lastModified}`;
+        const saved = await fileStorage.updateFileMetadata(stub.id, {
+          name,
+          quickKey,
+        });
+        if (!saved) {
+          throw new Error(
+            t("fileSidebar.rename.error", "Could not rename the file."),
+          );
+        }
+        fileActions.updateStirlingFileStub(stub.id, { name, quickKey });
+        setRenameTarget(null);
+        await refreshStubs();
+      },
+      [renameTarget, fileActions, refreshStubs, t],
+    );
+
+    // Desktop-only; a no-op stub on web, where this stays hidden.
+    const { canOpenInNewWindow, openInNewWindow } = useOpenInNewWindow();
+    const handleOpenInNewWindow = useCallback(
+      (fileId: FileId) => {
+        const stub = allFileStubs.find((s) => s.id === fileId);
+        if (stub) openInNewWindow(stub);
+      },
+      [allFileStubs, openInNewWindow],
+    );
+
     // Once a pending file lands in state, open it in the viewer.
     useEffect(() => {
       if (!pendingViewFileId) return;
@@ -484,6 +606,22 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
         const stub = allFileStubs.find((s) => s.id === fileId);
         if (!stub) return;
 
+        // Its bytes are gone; opening it can only fail. Say so instead of a
+        // click that goes nowhere.
+        if (stub.dataUnavailable || lostFileIds.has(fileId as string)) {
+          alert({
+            alertType: "warning",
+            title: t("fileSidebar.dataLostTitle", "File data is unavailable"),
+            body: t(
+              "fileSidebar.dataLostBody",
+              "This browser lost this file's contents. Upload it again to keep working with it.",
+            ),
+            expandable: false,
+            durationMs: 6000,
+          });
+          return;
+        }
+
         // In the Watched Folders view a click sends the file into the open folder
         // (mirrors how a click toggles a file into the active workbench elsewhere).
         // On the folder list (no folder open) it's a no-op so browsing isn't disrupted.
@@ -538,6 +676,8 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
       },
       [
         allFileStubs,
+        lostFileIds,
+        t,
         state.files.ids,
         state.ui.selectedFileIds,
         fileActions,
@@ -725,6 +865,8 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
             ? state.files.byId[workbenchFileId]?.thumbnailUrl
             : undefined) || stub.thumbnailUrl;
       const fileOrigin = getFileOrigin(stub);
+      const dataUnavailable =
+        stub.dataUnavailable === true || lostFileIds.has(stub.id as string);
       // Key by lineage (originalFileId) so a version swap updates the row in place instead of
       // remounting. But a 1-input→many-output op (split) yields sibling leaves that share one
       // originalFileId; those would collide on the key, so fall back to the unique leaf id when a
@@ -747,12 +889,19 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
           thumbnailUrl={thumbnailUrl}
           onClick={handleFileClick}
           onEyeClick={handleEyeClick}
+          dataUnavailable={dataUnavailable}
           draggable={isWatchedFoldersActive}
           onDragStart={handleWatchedFolderDragStart}
           folders={memberFolders}
           onFolderClick={openWatchedFolder}
           policies={policyFileBadges.get(stub.id as string) ?? NO_POLICIES}
           onDelete={isWatchedFoldersActive ? undefined : handleSidebarDelete}
+          onDownload={handleDownload}
+          onRename={isWatchedFoldersActive ? undefined : handleRename}
+          onDuplicate={isWatchedFoldersActive ? undefined : handleDuplicate}
+          onOpenInNewWindow={
+            canOpenInNewWindow(stub) ? handleOpenInNewWindow : undefined
+          }
           onSaveToCloud={isWatchedFoldersActive ? undefined : handleSaveToCloud}
           canSaveToCloud={storageEnabled && fileOrigin !== "shared-with-me"}
           isUploadedToCloud={fileOrigin === "cloud"}
@@ -1064,7 +1213,7 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
                       )}
                       data-testid="open-files-page"
                     >
-                      <OpenInNewIcon sx={{ fontSize: "1rem" }} />
+                      <OpenInFullIcon sx={{ fontSize: "1rem" }} />
                     </ActionIcon>
                     <ActionIcon
                       variant="quiet"
@@ -1202,6 +1351,14 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
           onChanged={refreshStubs}
         />
 
+        {/* Kebab "Rename" dialog. */}
+        <RenameFileDialog
+          opened={Boolean(renameTarget)}
+          fileName={renameTarget?.name ?? ""}
+          onClose={() => setRenameTarget(null)}
+          onSubmit={handleConfirmRename}
+        />
+
         {/* Cloud-aware delete choice (only opened for cloud-uploaded files). */}
         <DeleteFilesDialog
           opened={Boolean(deleteTarget)}
@@ -1213,70 +1370,17 @@ const FileSidebar = forwardRef<HTMLDivElement, FileSidebarProps>(
         {/* Getting-started checklist, floating above the footer (SaaS only). */}
         <SidebarChecklistSlot collapsed={collapsed} />
 
-        {/* Box 3 — account footer (avatar + name + settings). */}
-        <NavSurface className="file-sidebar-footer-box">
-          {/* Bottom bar: user name + settings */}
-          <Tooltip
-            label={
-              onOpenSettings
-                ? `${displayName} - ${t("fileSidebar.openSettings", "Open settings")}`
-                : displayName
-            }
-            position="right"
-            withinPortal
-            disabled={!collapsed}
-          >
-            <div
-              className="file-sidebar-bottom-bar"
-              onClick={onOpenSettings}
-              role={onOpenSettings ? "button" : undefined}
-              tabIndex={onOpenSettings ? 0 : undefined}
-              onKeyDown={
-                onOpenSettings
-                  ? (e) => e.key === "Enter" && onOpenSettings()
-                  : undefined
-              }
-              data-testid={onOpenSettings ? "config-button" : undefined}
-              data-tour={onOpenSettings ? "config-button" : undefined}
-              aria-label={
-                onOpenSettings
-                  ? t("fileSidebar.openSettings", "Open settings")
-                  : displayName
-              }
-              style={onOpenSettings ? { cursor: "pointer" } : undefined}
-            >
-              <div
-                className={`file-sidebar-bottom-avatar${
-                  showProfilePicture
-                    ? " file-sidebar-bottom-avatar--picture"
-                    : ""
-                }`}
-                aria-label={displayName}
-              >
-                {showProfilePicture ? (
-                  <img
-                    src={profilePictureUrl}
-                    alt=""
-                    className="file-sidebar-bottom-avatar-img"
-                    onError={() => setPictureFailed(true)}
-                  />
-                ) : (
-                  displayName.charAt(0).toUpperCase()
-                )}
-              </div>
-              {!collapsed && (
-                <span className="file-sidebar-bottom-name sidebar-content-fade">
-                  {displayName}
-                </span>
-              )}
-              {onOpenSettings && !collapsed && (
-                <div className="file-sidebar-bottom-settings">
-                  <SettingsIcon sx={{ fontSize: "1.1rem" }} />
-                </div>
-              )}
-            </div>
-          </Tooltip>
-        </NavSurface>
+        {/* Box 3 — the shared footer: credits, app switch, account row. */}
+        <NavFooter
+          className="file-sidebar-footer-box"
+          displayName={displayName}
+          profilePictureUrl={profilePictureUrl}
+          onOpenSettings={onOpenSettings}
+          credits={credits}
+          onOpenPlan={openPlan ?? undefined}
+          otherApp={otherApp}
+          collapsed={collapsed}
+        />
       </div>
     );
   },
diff --git a/frontend/editor/src/core/components/shared/FileSidebarFileItem.css b/frontend/editor/src/core/components/shared/FileSidebarFileItem.css
index 794ed4ca97..bfabe83544 100644
--- a/frontend/editor/src/core/components/shared/FileSidebarFileItem.css
+++ b/frontend/editor/src/core/components/shared/FileSidebarFileItem.css
@@ -373,6 +373,28 @@
   color: var(--c-text);
 }
 
+/* Menu header: the full file name the row had to truncate, plus its size. */
+.file-sidebar-kebab-header {
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+  padding-bottom: 6px;
+}
+
+.file-sidebar-kebab-header-name {
+  color: var(--c-text);
+  font-size: 12px;
+  font-weight: 600;
+  line-height: 1.3;
+  overflow-wrap: anywhere;
+}
+
+.file-sidebar-kebab-header-meta {
+  color: var(--c-text-subtle);
+  font-size: 11px;
+  text-transform: none;
+}
+
 /* ---- Date group headers ---- */
 .file-sidebar-date-group-header {
   font-size: 11px;
@@ -447,3 +469,13 @@
     transform: translateY(-50%) scale(1);
   }
 }
+
+/* The stored bytes are gone - the row says so instead of pretending to open. */
+.file-sidebar-datalost-badge {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.15rem;
+  color: var(--c-danger);
+  font-size: 0.7rem;
+  white-space: nowrap;
+}
diff --git a/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx b/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
index c1a93594c5..a6d0e19514 100644
--- a/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
+++ b/frontend/editor/src/core/components/shared/FileSidebarFileItem.tsx
@@ -9,8 +9,12 @@ import ShieldOutlinedIcon from "@mui/icons-material/ShieldOutlined";
 import MoreVertIcon from "@mui/icons-material/MoreVert";
 import CloudUploadOutlinedIcon from "@mui/icons-material/CloudUploadOutlined";
 import CloudDoneIcon from "@mui/icons-material/CloudDone";
+import ErrorOutlineIcon from "@mui/icons-material/ErrorOutlineOutlined";
 import DeleteOutlineIcon from "@mui/icons-material/DeleteOutlined";
 import HistoryIcon from "@mui/icons-material/History";
+import OpenInNewIcon from "@mui/icons-material/OpenInNew";
+import DriveFileRenameOutlineIcon from "@mui/icons-material/DriveFileRenameOutline";
+import ContentCopyOutlinedIcon from "@mui/icons-material/ContentCopyOutlined";
 import type { FileId } from "@app/types/file";
 import { FileDocIcon } from "@app/components/shared/FileDocIcon";
 import {
@@ -19,7 +23,9 @@ import {
 } from "@app/components/shared/PolicyBadges";
 import { getFileDocVariant } from "@app/components/shared/filePreview/getFileTypeIcon";
 import { useLazyThumbnail } from "@app/hooks/useLazyThumbnail";
-import { IMAGE_EXTENSIONS } from "@app/utils/fileUtils";
+import { useFileActionIcons } from "@app/hooks/useFileActionIcons";
+import { useFileActionTerminology } from "@app/hooks/useFileActionTerminology";
+import { formatFileSize, IMAGE_EXTENSIONS } from "@app/utils/fileUtils";
 import "@app/components/shared/FileSidebarFileItem.css";
 
 export function getFileExtension(name: string): string {
@@ -153,6 +159,14 @@ export interface FileItemProps {
   primaryLabel?: string;
   /** Delete (local only) from the kebab menu. Omit to hide the menu's delete. */
   onDelete?: (fileId: FileId) => void;
+  /** Download a copy (desktop: save a copy) from the kebab menu. */
+  onDownload?: (fileId: FileId) => void;
+  /** Rename the file from the kebab menu. */
+  onRename?: (fileId: FileId) => void;
+  /** Save a second copy of the file into the library. */
+  onDuplicate?: (fileId: FileId) => void;
+  /** Desktop only: open the file in its own window. Omit where unsupported. */
+  onOpenInNewWindow?: (fileId: FileId) => void;
   /** Save to cloud from the kebab menu. */
   onSaveToCloud?: (fileId: FileId) => void;
   /** Whether the upload-to-server menu item is offered (storage on, signed in). */
@@ -163,10 +177,53 @@ export interface FileItemProps {
   onVersionHistory?: (fileId: FileId) => void;
   /** Whether this file has more than one version (drives the menu item). */
   hasVersionHistory?: boolean;
+  /** The stored bytes are gone (WebKit lost the blob's backing store). The row
+   *  says so instead of pretending the file can open. */
+  dataUnavailable?: boolean;
 }
 
 const MAX_VISIBLE_FOLDER_TAGS = 2;
 
+/** One kebab row. `disabledReason`, when set, greys the row out and says why. */
+function FileMenuItem({
+  disabledReason,
+  icon,
+  color,
+  onClick,
+  children,
+}: {
+  disabledReason?: React.ReactNode;
+  icon: React.ReactNode;
+  color?: string;
+  onClick: (e: React.MouseEvent) => void;
+  children: React.ReactNode;
+}) {
+  return (
+    <Tooltip
+      label={disabledReason}
+      disabled={!disabledReason}
+      position="left"
+      offset={6}
+      withArrow
+    >
+      {/* Disabled items swallow pointer events, so the tooltip needs a live wrapper. */}
+      <div>
+        <Menu.Item
+          disabled={Boolean(disabledReason)}
+          color={color}
+          leftSection={icon}
+          onClick={(e) => {
+            e.stopPropagation();
+            onClick(e);
+          }}
+        >
+          {children}
+        </Menu.Item>
+      </div>
+    </Tooltip>
+  );
+}
+
 // Memoized: sidebar rows bail out unless THEIR props change, so one file's
 // update (e.g. a new version landing) re-renders one row, not the whole list.
 export const FileItem = React.memo(function FileItem({
@@ -177,6 +234,7 @@ export const FileItem = React.memo(function FileItem({
   isSelected,
   isActive,
   isViewedInViewer,
+  dataUnavailable,
   thumbnailUrl,
   onClick,
   onEyeClick,
@@ -187,6 +245,10 @@ export const FileItem = React.memo(function FileItem({
   policies = [],
   primaryLabel,
   onDelete,
+  onDownload,
+  onRename,
+  onDuplicate,
+  onOpenInNewWindow,
   onSaveToCloud,
   canSaveToCloud = false,
   isUploadedToCloud = false,
@@ -194,9 +256,14 @@ export const FileItem = React.memo(function FileItem({
   hasVersionHistory = false,
 }: FileItemProps) {
   const { t } = useTranslation();
+  const terminology = useFileActionTerminology();
+  const DownloadIcon = useFileActionIcons().download;
   const ext = getFileExtension(name);
   const dateLabel = lastModified ? formatFileDate(lastModified) : "";
   const typeLabel = ext ? ext.toUpperCase() : "File";
+  const metaLine = [typeLabel, size ? formatFileSize(size) : null, dateLabel]
+    .filter(Boolean)
+    .join(" · ");
 
   const policyEnforcing = policies.some((p) => p.enforcing);
   const enforcingTooltip = (action: string): React.ReactNode => (
@@ -215,6 +282,25 @@ export const FileItem = React.memo(function FileItem({
     </Stack>
   );
 
+  // Why an action can't run right now: a policy is rewriting the file, or its
+  // bytes are gone. `needsBytes` actions are the ones that read the file.
+  const blockedReason = (
+    action: string,
+    needsBytes = true,
+  ): React.ReactNode | null => {
+    if (policyEnforcing) return enforcingTooltip(action);
+    if (needsBytes && dataUnavailable)
+      return t(
+        "fileSidebar.fileItem.dataLostTooltip",
+        "This browser lost this file's contents. Upload it again to keep working with it.",
+      );
+    return null;
+  };
+
+  const viewerLabel = isViewedInViewer
+    ? t("fileSidebar.fileItem.closeViewer", "Close viewer")
+    : t("fileSidebar.fileItem.openInViewer", "Open in viewer");
+
   const visibleFolders = folders.slice(0, MAX_VISIBLE_FOLDER_TAGS);
   const overflowFolders = folders.slice(MAX_VISIBLE_FOLDER_TAGS);
 
@@ -228,6 +314,7 @@ export const FileItem = React.memo(function FileItem({
 
   const itemRef = useRef<HTMLDivElement>(null);
   const [hoverRect, setHoverRect] = useState<DOMRect | null>(null);
+  const [menuOpened, setMenuOpened] = useState(false);
 
   const handleMouseEnter = useCallback(() => {
     setHoverRect(itemRef.current?.getBoundingClientRect() ?? null);
@@ -235,9 +322,10 @@ export const FileItem = React.memo(function FileItem({
 
   const handleMouseLeave = useCallback(() => setHoverRect(null), []);
 
-  // Reactive: tooltip appears as soon as both hover rect and thumbnail are ready
+  // Reactive: tooltip appears as soon as both hover rect and thumbnail are ready.
+  // The kebab suppresses it - two cards floating off one row read as a glitch.
   const thumbPos =
-    hoverRect && resolvedThumbnail
+    hoverRect && resolvedThumbnail && !menuOpened
       ? {
           top: hoverRect.top + hoverRect.height / 2,
           left: hoverRect.right + 10,
@@ -294,6 +382,21 @@ export const FileItem = React.memo(function FileItem({
                 </>
               )}
             </span>
+            {dataUnavailable && (
+              <Tooltip
+                label={t(
+                  "fileSidebar.fileItem.dataLostTooltip",
+                  "This browser lost this file's contents. Upload it again to keep working with it.",
+                )}
+                withArrow
+                position="top"
+              >
+                <span className="file-sidebar-datalost-badge" data-no-select>
+                  <ErrorOutlineIcon sx={{ fontSize: "0.85rem" }} />
+                  {t("fileSidebar.fileItem.dataLost", "Data lost")}
+                </span>
+              </Tooltip>
+            )}
             {isUploadedToCloud && (
               <Tooltip
                 label={t(
@@ -369,11 +472,7 @@ export const FileItem = React.memo(function FileItem({
               onEyeClick(fileId, e);
             }}
             tabIndex={-1}
-            aria-label={
-              isViewedInViewer
-                ? t("fileSidebar.fileItem.closeViewer", "Close viewer")
-                : t("fileSidebar.fileItem.openInViewer", "Open in viewer")
-            }
+            aria-label={viewerLabel}
           >
             <VisibilityOutlinedIcon
               className="file-sidebar-eye-open"
@@ -384,112 +483,158 @@ export const FileItem = React.memo(function FileItem({
               sx={{ fontSize: "1.1rem" }}
             />
           </ActionIcon>
-          {(onDelete ||
-            (canSaveToCloud && onSaveToCloud) ||
-            (hasVersionHistory && onVersionHistory)) && (
-            <Menu position="bottom-end" withinPortal shadow="md" width={190}>
-              <Menu.Target>
-                <ActionIcon
-                  variant="tertiary"
-                  size="sm"
-                  className="file-sidebar-kebab-btn"
-                  onClick={(e) => e.stopPropagation()}
-                  tabIndex={-1}
-                  aria-label={t(
-                    "fileSidebar.fileItem.moreActions",
-                    "More actions",
-                  )}
-                >
-                  <MoreVertIcon sx={{ fontSize: "1.1rem" }} />
-                </ActionIcon>
-              </Menu.Target>
-              <Menu.Dropdown onClick={(e) => e.stopPropagation()}>
-                {hasVersionHistory && onVersionHistory && (
-                  <Menu.Item
-                    leftSection={<HistoryIcon sx={{ fontSize: 16 }} />}
-                    onClick={(e) => {
-                      e.stopPropagation();
-                      onVersionHistory(fileId);
-                    }}
-                  >
-                    {t(
-                      "fileSidebar.fileItem.versionHistory",
-                      "Version history",
-                    )}
-                  </Menu.Item>
+          <Menu
+            position="bottom-end"
+            withinPortal
+            shadow="md"
+            width={220}
+            onChange={setMenuOpened}
+          >
+            <Menu.Target>
+              <ActionIcon
+                variant="tertiary"
+                size="sm"
+                className="file-sidebar-kebab-btn"
+                onClick={(e) => e.stopPropagation()}
+                tabIndex={-1}
+                aria-label={t(
+                  "fileSidebar.fileItem.moreActions",
+                  "More actions",
                 )}
-                {canSaveToCloud &&
-                  onSaveToCloud &&
-                  (() => {
-                    const uploadLabel = isUploadedToCloud
-                      ? t(
-                          "fileSidebar.fileItem.updateOnServer",
-                          "Update on server",
-                        )
-                      : t(
-                          "fileSidebar.fileItem.uploadToServer",
-                          "Upload to server",
-                        );
-                    return (
-                      <Tooltip
-                        label={enforcingTooltip(uploadLabel)}
-                        disabled={!policyEnforcing}
-                        position="left"
-                        offset={6}
-                        withArrow
-                      >
-                        <div>
-                          <Menu.Item
-                            disabled={policyEnforcing}
-                            leftSection={
-                              <CloudUploadOutlinedIcon sx={{ fontSize: 16 }} />
-                            }
-                            onClick={(e) => {
-                              e.stopPropagation();
-                              onSaveToCloud(fileId);
-                            }}
-                          >
-                            {uploadLabel}
-                          </Menu.Item>
-                        </div>
-                      </Tooltip>
-                    );
-                  })()}
-                {onDelete &&
-                  (() => {
-                    const deleteLabel = t(
-                      "fileSidebar.fileItem.delete",
-                      "Delete",
-                    );
-                    return (
-                      <Tooltip
-                        label={enforcingTooltip(deleteLabel)}
-                        disabled={!policyEnforcing}
-                        position="left"
-                        offset={6}
-                        withArrow
-                      >
-                        <div>
-                          <Menu.Item
-                            disabled={policyEnforcing}
-                            color="red"
-                            leftSection={
-                              <DeleteOutlineIcon sx={{ fontSize: 16 }} />
-                            }
-                            onClick={(e) => {
-                              e.stopPropagation();
-                              onDelete(fileId);
-                            }}
-                          >
-                            {deleteLabel}
-                          </Menu.Item>
-                        </div>
-                      </Tooltip>
-                    );
-                  })()}
-              </Menu.Dropdown>
-            </Menu>
-          )}
+              >
+                <MoreVertIcon sx={{ fontSize: "1.1rem" }} />
+              </ActionIcon>
+            </Menu.Target>
+            <Menu.Dropdown onClick={(e) => e.stopPropagation()}>
+              {/* Rows truncate long names; the menu header is where the whole
+                  name (and the size the row has no space for) is readable. */}
+              <Menu.Label className="file-sidebar-kebab-header">
+                <span className="file-sidebar-kebab-header-name">{name}</span>
+                <span className="file-sidebar-kebab-header-meta">
+                  {metaLine}
+                </span>
+              </Menu.Label>
+
+              <FileMenuItem
+                disabledReason={blockedReason(viewerLabel)}
+                icon={
+                  isViewedInViewer ? (
+                    <VisibilityOffOutlinedIcon sx={{ fontSize: 16 }} />
+                  ) : (
+                    <VisibilityOutlinedIcon sx={{ fontSize: 16 }} />
+                  )
+                }
+                onClick={(e) => onEyeClick(fileId, e)}
+              >
+                {viewerLabel}
+              </FileMenuItem>
+
+              {onOpenInNewWindow && (
+                <FileMenuItem
+                  disabledReason={blockedReason(
+                    t("openInNewWindow", "Open in new window"),
+                  )}
+                  icon={<OpenInNewIcon sx={{ fontSize: 16 }} />}
+                  onClick={() => onOpenInNewWindow(fileId)}
+                >
+                  {t("openInNewWindow", "Open in new window")}
+                </FileMenuItem>
+              )}
+
+              {(onDownload || onRename || onDuplicate) && <Menu.Divider />}
+
+              {onDownload && (
+                <FileMenuItem
+                  disabledReason={blockedReason(terminology.download)}
+                  icon={<DownloadIcon sx={{ fontSize: 16 }} />}
+                  onClick={() => onDownload(fileId)}
+                >
+                  {terminology.download}
+                </FileMenuItem>
+              )}
+
+              {onRename && (
+                <FileMenuItem
+                  disabledReason={blockedReason(
+                    t("fileSidebar.fileItem.rename", "Rename"),
+                    false,
+                  )}
+                  icon={<DriveFileRenameOutlineIcon sx={{ fontSize: 16 }} />}
+                  onClick={() => onRename(fileId)}
+                >
+                  {t("fileSidebar.fileItem.rename", "Rename")}
+                </FileMenuItem>
+              )}
+
+              {onDuplicate && (
+                <FileMenuItem
+                  disabledReason={blockedReason(
+                    t("fileSidebar.fileItem.duplicate", "Duplicate"),
+                  )}
+                  icon={<ContentCopyOutlinedIcon sx={{ fontSize: 16 }} />}
+                  onClick={() => onDuplicate(fileId)}
+                >
+                  {t("fileSidebar.fileItem.duplicate", "Duplicate")}
+                </FileMenuItem>
+              )}
+
+              {((canSaveToCloud && onSaveToCloud) ||
+                (hasVersionHistory && onVersionHistory)) && <Menu.Divider />}
+
+              {canSaveToCloud &&
+                onSaveToCloud &&
+                (() => {
+                  const uploadLabel = isUploadedToCloud
+                    ? t(
+                        "fileSidebar.fileItem.updateOnServer",
+                        "Update on server",
+                      )
+                    : t(
+                        "fileSidebar.fileItem.uploadToServer",
+                        "Upload to server",
+                      );
+                  return (
+                    <FileMenuItem
+                      disabledReason={blockedReason(uploadLabel)}
+                      icon={<CloudUploadOutlinedIcon sx={{ fontSize: 16 }} />}
+                      onClick={() => onSaveToCloud(fileId)}
+                    >
+                      {uploadLabel}
+                    </FileMenuItem>
+                  );
+                })()}
+
+              {hasVersionHistory && onVersionHistory && (
+                <FileMenuItem
+                  disabledReason={blockedReason(
+                    t("fileSidebar.fileItem.versionHistory", "Version history"),
+                    false,
+                  )}
+                  icon={<HistoryIcon sx={{ fontSize: 16 }} />}
+                  onClick={() => onVersionHistory(fileId)}
+                >
+                  {t("fileSidebar.fileItem.versionHistory", "Version history")}
+                </FileMenuItem>
+              )}
+
+              {onDelete && (
+                <>
+                  <Menu.Divider />
+                  <FileMenuItem
+                    disabledReason={blockedReason(
+                      t("fileSidebar.fileItem.delete", "Delete"),
+                      false,
+                    )}
+                    color="red"
+                    icon={<DeleteOutlineIcon sx={{ fontSize: 16 }} />}
+                    onClick={() => onDelete(fileId)}
+                  >
+                    {t("fileSidebar.fileItem.delete", "Delete")}
+                  </FileMenuItem>
+                </>
+              )}
+            </Menu.Dropdown>
+          </Menu>
         </div>
       </div>
 
diff --git a/frontend/editor/src/core/components/shared/FirstLoginModal.tsx b/frontend/editor/src/core/components/shared/FirstLoginModal.tsx
index be91ccc03d..8d2e6a7c67 100644
--- a/frontend/editor/src/core/components/shared/FirstLoginModal.tsx
+++ b/frontend/editor/src/core/components/shared/FirstLoginModal.tsx
@@ -1,4 +1,5 @@
 import { useState } from "react";
+import axios from "axios";
 import { Modal, Stack, Text, PasswordInput, Alert } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { useTranslation } from "react-i18next";
@@ -95,10 +96,13 @@ export default function FirstLoginModal({
       setTimeout(() => {
         onPasswordChanged();
       }, 1500);
-    } catch (err: any) {
+    } catch (err: unknown) {
       console.error("Failed to change password:", err);
+      const message = axios.isAxiosError<{ message?: string }>(err)
+        ? err.response?.data?.message
+        : undefined;
       setError(
-        err.response?.data?.message ||
+        message ||
           t(
             "firstLogin.passwordChangeFailed",
             "Failed to change password. Please check your current password.",
diff --git a/frontend/editor/src/core/components/shared/FitText.tsx b/frontend/editor/src/core/components/shared/FitText.tsx
index c3a2ead2f2..97afc8fdb9 100644
--- a/frontend/editor/src/core/components/shared/FitText.tsx
+++ b/frontend/editor/src/core/components/shared/FitText.tsx
@@ -1,4 +1,4 @@
-import React, { CSSProperties, useMemo, useRef } from "react";
+import React, { CSSProperties, useCallback, useMemo, useRef } from "react";
 import { useAdjustFontSizeToFit } from "@app/components/shared/fitText/textFit";
 
 type FitTextProps = {
@@ -28,8 +28,14 @@ const FitText: React.FC<FitTextProps> = ({
 }) => {
   const ref = useRef<HTMLElement | null>(null);
 
+  // Callback ref: an HTMLElement handler satisfies span's/div's differing ref
+  // types (callback refs are contravariant), so the tag can stay polymorphic.
+  const setRef = useCallback((node: HTMLElement | null) => {
+    ref.current = node;
+  }, []);
+
   // Hook runs after mount and on size/text changes; uses observers internally
-  useAdjustFontSizeToFit(ref as any, {
+  useAdjustFontSizeToFit(ref, {
     maxFontSizePx: fontSize,
     minFontScale: minimumFontScale,
     maxLines: lines,
@@ -38,7 +44,7 @@ const FitText: React.FC<FitTextProps> = ({
 
   // Memoize the HTML tag to render (span/div) from the `as` prop so
   // React doesn't create a new component function on each render.
-  const ElementTag: any = useMemo(() => as, [as]);
+  const ElementTag: React.ElementType = useMemo(() => as, [as]);
 
   // For the / character, insert zero-width soft breaks to prefer wrapping at them
   const displayText = useMemo(() => {
@@ -70,7 +76,7 @@ const FitText: React.FC<FitTextProps> = ({
 
   return (
     <ElementTag
-      ref={ref}
+      ref={setRef}
       className={className}
       style={{ ...clampStyles, ...style }}
     >
diff --git a/frontend/editor/src/core/components/shared/InfoBanner.stories.tsx b/frontend/editor/src/core/components/shared/InfoBanner.stories.tsx
deleted file mode 100644
index 5fad071d05..0000000000
--- a/frontend/editor/src/core/components/shared/InfoBanner.stories.tsx
+++ /dev/null
@@ -1,38 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { InfoBanner } from "@app/components/shared/InfoBanner";
-
-const meta = {
-  title: "Shared/InfoBanner",
-  component: InfoBanner,
-  parameters: { layout: "padded" },
-} satisfies Meta<typeof InfoBanner>;
-export default meta;
-type Story = StoryObj<typeof meta>;
-
-export const Default: Story = {
-  args: {
-    icon: "info-rounded",
-    title: "Heads up",
-    message: "This document contains form fields that will be flattened.",
-  },
-};
-
-export const Warning: Story = {
-  args: {
-    tone: "warning",
-    icon: "warning-rounded",
-    title: "Action required",
-    message: "Some pages could not be processed and were skipped.",
-    buttonText: "Review",
-    onButtonClick: () => {},
-  },
-};
-
-export const Compact: Story = {
-  args: {
-    compact: true,
-    icon: "info-rounded",
-    message: "Autosave is enabled for this file.",
-    dismissible: false,
-  },
-};
diff --git a/frontend/editor/src/core/components/shared/InfoBanner.tsx b/frontend/editor/src/core/components/shared/InfoBanner.tsx
deleted file mode 100644
index 2056b6a92f..0000000000
--- a/frontend/editor/src/core/components/shared/InfoBanner.tsx
+++ /dev/null
@@ -1,263 +0,0 @@
-import React, { ReactNode } from "react";
-import { Paper, Group, Text, Stack } from "@mantine/core";
-import { Button, type ButtonVariant, type ButtonAccent } from "@app/ui/Button";
-import { ActionIcon } from "@app/ui/ActionIcon";
-import { useTranslation } from "react-i18next";
-import LocalIcon from "@app/components/shared/LocalIcon";
-
-type InfoBannerTone = "info" | "warning";
-
-const toneStyles: Record<
-  InfoBannerTone,
-  {
-    background: string;
-    border: string;
-    text: string;
-    icon: string;
-    buttonColor: string;
-  }
-> = {
-  info: {
-    background: "var(--mantine-color-blue-0)",
-    border: "var(--mantine-color-blue-2)",
-    text: "var(--mantine-color-blue-9)",
-    icon: "var(--mantine-color-blue-6)",
-    buttonColor: "blue",
-  },
-  warning: {
-    background: "var(--mantine-color-orange-0)",
-    border: "var(--mantine-color-orange-3)",
-    text: "var(--color-amber-dark)",
-    icon: "var(--mantine-color-orange-7)",
-    buttonColor: "orange",
-  },
-};
-
-function toSharedButtonVariant(
-  variant: "light" | "filled" | "white" | "outline" | "subtle",
-): ButtonVariant {
-  switch (variant) {
-    case "filled":
-      return "primary";
-    case "outline":
-      return "secondary";
-    case "subtle":
-      return "tertiary";
-    case "light":
-    case "white":
-    default:
-      return "secondary";
-  }
-}
-
-function toSharedButtonAccent(color: string | undefined): ButtonAccent {
-  // Mantine colours may carry a shade suffix (e.g. "orange.7"); use the hue.
-  const hue = (color ?? "").split(".")[0];
-  switch (hue) {
-    case "red":
-      return "danger";
-    case "green":
-      return "success";
-    case "yellow":
-    case "orange":
-      return "warning";
-    case "blue":
-    default:
-      return "default";
-  }
-}
-
-interface InfoBannerProps {
-  /**
-   * Either a LocalIcon name (string) for the standard sized icon slot, or a
-   * pre-rendered ReactNode (e.g. a logo image) which is dropped in as-is.
-   */
-  icon?: string | ReactNode;
-  title?: ReactNode;
-  message: ReactNode;
-  buttonText?: string;
-  buttonIcon?: string;
-  onButtonClick?: () => void;
-  /** Optional muted secondary action (e.g. "Don't remind me again"). */
-  secondaryButtonText?: string;
-  onSecondaryButtonClick?: () => void;
-  onDismiss?: () => void;
-  dismissible?: boolean;
-  loading?: boolean;
-  show?: boolean;
-  tone?: InfoBannerTone;
-  background?: string;
-  borderColor?: string;
-  textColor?: string;
-  iconColor?: string;
-  buttonColor?: string;
-  buttonVariant?: "light" | "filled" | "white" | "outline" | "subtle";
-  /** Override the button label colour (for dark/custom theme variants). */
-  buttonTextColor?: string;
-  minHeight?: number | string;
-  closeIconColor?: string;
-  compact?: boolean;
-}
-
-/**
- * Generic info banner component for displaying dismissible messages at the top of the app
- */
-export const InfoBanner: React.FC<InfoBannerProps> = ({
-  icon,
-  title,
-  message,
-  buttonText,
-  buttonIcon = "check-circle-rounded",
-  onButtonClick,
-  secondaryButtonText,
-  onSecondaryButtonClick,
-  onDismiss,
-  dismissible = true,
-  loading = false,
-  show = true,
-  tone = "info",
-  background,
-  borderColor,
-  textColor,
-  iconColor,
-  buttonColor,
-  buttonVariant = "light",
-  buttonTextColor,
-  minHeight = 56,
-  closeIconColor,
-  compact = false,
-}) => {
-  const { t } = useTranslation();
-  if (!show) {
-    return null;
-  }
-
-  const toneStyle = toneStyles[tone] ?? toneStyles.info;
-  const resolvedTextColor = textColor ?? toneStyle.text;
-  const handleDismiss = () => {
-    onDismiss?.();
-  };
-
-  const iconSize = compact ? "1rem" : "1.2rem";
-  const textSize = compact ? "xs" : "sm";
-
-  return (
-    <Paper
-      p={compact ? "xs" : "sm"}
-      radius={0}
-      style={{
-        background: background ?? toneStyle.background,
-        border: "none",
-        borderBottom:
-          borderColor === "transparent"
-            ? "none"
-            : `1px solid ${borderColor ?? toneStyle.border}`,
-        minHeight,
-        display: "flex",
-        alignItems: "center",
-      }}
-    >
-      <Group
-        gap="sm"
-        align="center"
-        wrap="nowrap"
-        justify="space-between"
-        style={{ width: "100%" }}
-      >
-        <Group
-          gap={compact ? "xs" : "sm"}
-          align="center"
-          wrap="nowrap"
-          style={{ flex: 1, minWidth: 0 }}
-        >
-          {icon != null &&
-            (typeof icon === "string" ? (
-              <LocalIcon
-                icon={icon}
-                width={iconSize}
-                height={iconSize}
-                style={{ color: iconColor ?? toneStyle.icon, flexShrink: 0 }}
-              />
-            ) : (
-              <div
-                style={{ flexShrink: 0, display: "flex", alignItems: "center" }}
-              >
-                {icon}
-              </div>
-            ))}
-          <Stack gap={compact ? 1 : 2} style={{ flex: 1, minWidth: 0 }}>
-            {title && (
-              <Text
-                fw={600}
-                size={textSize}
-                style={{ color: resolvedTextColor }}
-              >
-                {title}
-              </Text>
-            )}
-            <Text
-              fw={title ? 400 : 500}
-              size={textSize}
-              style={{ color: resolvedTextColor }}
-              lineClamp={compact ? 1 : 2}
-            >
-              {message}
-            </Text>
-          </Stack>
-        </Group>
-        <Group gap="xs" align="center" wrap="nowrap">
-          {buttonText && onButtonClick && (
-            <Button
-              variant={toSharedButtonVariant(buttonVariant)}
-              accent={toSharedButtonAccent(
-                buttonColor ?? toneStyle.buttonColor,
-              )}
-              size="sm"
-              loading={loading}
-              onClick={onButtonClick}
-              leftSection={
-                <LocalIcon
-                  icon={buttonIcon}
-                  width={compact ? "0.75rem" : "0.9rem"}
-                  height={compact ? "0.75rem" : "0.9rem"}
-                />
-              }
-              style={buttonTextColor ? { color: buttonTextColor } : undefined}
-            >
-              {buttonText}
-            </Button>
-          )}
-          {secondaryButtonText && onSecondaryButtonClick && (
-            <Button
-              variant="tertiary"
-              accent="neutral"
-              size="sm"
-              onClick={onSecondaryButtonClick}
-              style={{ color: "var(--c-text-muted)" }}
-            >
-              {secondaryButtonText}
-            </Button>
-          )}
-          {dismissible && (
-            <ActionIcon
-              variant="tertiary"
-              accent="neutral"
-              size="sm"
-              onClick={handleDismiss}
-              aria-label={t("infoBanner.dismiss", "Dismiss")}
-              style={{
-                color: closeIconColor ?? "var(--c-text-muted)",
-              }}
-            >
-              <LocalIcon
-                icon="close-rounded"
-                width={compact ? "0.85rem" : "1rem"}
-                height={compact ? "0.85rem" : "1rem"}
-              />
-            </ActionIcon>
-          )}
-        </Group>
-      </Group>
-    </Paper>
-  );
-};
diff --git a/frontend/editor/src/core/components/shared/LandingActions.tsx b/frontend/editor/src/core/components/shared/LandingActions.tsx
index d69f90a1ef..750848f3c7 100644
--- a/frontend/editor/src/core/components/shared/LandingActions.tsx
+++ b/frontend/editor/src/core/components/shared/LandingActions.tsx
@@ -32,8 +32,7 @@ export function LandingActions({
     <>
       <Group gap="sm" justify="center" wrap="wrap" mb="xs">
         <Button
-          className="landing-btn-primary"
-          px="xl"
+          fat
           leftSection={
             <LocalIcon icon={icons.uploadIconName} width="1rem" height="1rem" />
           }
@@ -47,8 +46,7 @@ export function LandingActions({
 
         <Button
           variant="secondary"
-          className="landing-btn-secondary"
-          px="xl"
+          fat
           leftSection={<LocalIcon icon="add" width="1rem" height="1rem" />}
           onClick={(e) => {
             e.stopPropagation();
@@ -64,7 +62,7 @@ export function LandingActions({
               size="lg"
               variant="secondary"
               aria-label={terminology.mobileUpload}
-              className="landing-btn-secondary landing-btn-icon"
+              className="landing-btn-icon"
               onClick={(e) => {
                 e.stopPropagation();
                 onMobileUploadClick();
diff --git a/frontend/editor/src/core/components/shared/LandingPage.css b/frontend/editor/src/core/components/shared/LandingPage.css
index b64a7d55f9..b7afc537f0 100644
--- a/frontend/editor/src/core/components/shared/LandingPage.css
+++ b/frontend/editor/src/core/components/shared/LandingPage.css
@@ -136,18 +136,8 @@
 }
 
 /* ── Action buttons ──────────────────────────────────────── */
-.landing-btn-primary,
-.landing-btn-secondary {
-  border-radius: 0.75rem !important;
-  font-weight: 600 !important;
-}
-
-.landing-btn-primary,
-.landing-btn-secondary,
 .landing-btn-icon {
   min-height: 3rem !important;
-}
-.landing-btn-icon {
   width: 3rem !important;
   min-width: 3rem !important;
   border-radius: 0.75rem !important;
diff --git a/frontend/editor/src/core/components/shared/NavigationWarningModal.tsx b/frontend/editor/src/core/components/shared/NavigationWarningModal.tsx
index 7e3c675f3b..e83c4344c4 100644
--- a/frontend/editor/src/core/components/shared/NavigationWarningModal.tsx
+++ b/frontend/editor/src/core/components/shared/NavigationWarningModal.tsx
@@ -1,15 +1,8 @@
 import { useRef, useEffect } from "react";
-import { Modal, Text, Group, Stack } from "@mantine/core";
-import { Button } from "@app/ui/Button";
 import { useNavigationGuard } from "@app/contexts/NavigationContext";
-import { useTranslation } from "react-i18next";
-import ArrowBackIcon from "@mui/icons-material/ArrowBack";
-import DeleteOutlineIcon from "@mui/icons-material/DeleteOutlined";
-import CheckCircleOutlineIcon from "@mui/icons-material/CheckCircleOutlined";
-import { Z_INDEX_TOAST } from "@app/styles/zIndex";
+import { UnsavedChangesDialog } from "@app/components/shared/UnsavedChangesDialog";
 
 const NavigationWarningModal = () => {
-  const { t } = useTranslation();
   const {
     showNavigationWarning,
     hasUnsavedChanges,
@@ -72,123 +65,19 @@ const NavigationWarningModal = () => {
   const hasApply = !!handlers?.onApplyAndContinue;
   const hasExport = !!handlers?.onExportAndContinue;
 
-  const BUTTON_WIDTH = "12rem";
-
   // Only show modal if there are unsaved changes AND there's an actual pending navigation
   if (!hasUnsavedChanges || !pendingNavigation) {
     return null;
   }
 
   return (
-    <Modal
+    <UnsavedChangesDialog
       opened={showNavigationWarning}
-      onClose={handleKeepWorking}
-      title={t("unsavedChangesTitle", "Unsaved Changes")}
-      centered
-      size="auto"
-      closeOnClickOutside={true}
-      closeOnEscape={true}
-      zIndex={Z_INDEX_TOAST}
-    >
-      <Stack>
-        <Stack ta="center" p="md">
-          <Text size="md" fw="300">
-            {t("unsavedChanges", "You have unsaved changes to your PDF.")}
-          </Text>
-          <Text size="lg" fw="500">
-            {t("areYouSure", "Are you sure you want to leave?")}
-          </Text>
-        </Stack>
-
-        {/* Desktop layout: 2 groups side by side */}
-        <Group justify="space-between" gap="xl" visibleFrom="md">
-          <Group gap="sm">
-            <Button
-              variant="secondary"
-              accent="neutral"
-              onClick={handleKeepWorking}
-              style={{
-                width: BUTTON_WIDTH,
-              }}
-              leftSection={<ArrowBackIcon fontSize="small" />}
-            >
-              {t("keepWorking", "Keep Working")}
-            </Button>
-          </Group>
-          <Group gap="sm">
-            <Button
-              accent="danger"
-              onClick={handleDiscardChanges}
-              style={{
-                width: BUTTON_WIDTH,
-              }}
-              leftSection={<DeleteOutlineIcon fontSize="small" />}
-            >
-              {t("discardChanges", "Discard Changes")}
-            </Button>
-            {hasApply && (
-              <Button
-                onClick={handleApplyAndContinue}
-                style={{ width: BUTTON_WIDTH }}
-                leftSection={<CheckCircleOutlineIcon fontSize="small" />}
-              >
-                {t("applyAndContinue", "Apply & Leave")}
-              </Button>
-            )}
-            {hasExport && (
-              <Button
-                onClick={handleExportAndContinue}
-                style={{ width: BUTTON_WIDTH }}
-                leftSection={<CheckCircleOutlineIcon fontSize="small" />}
-              >
-                {t("exportAndContinue", "Export & Leave")}
-              </Button>
-            )}
-          </Group>
-        </Group>
-
-        {/* Mobile layout: centered stack of 4 buttons */}
-        <Stack align="center" gap="sm" hiddenFrom="md">
-          <Button
-            variant="secondary"
-            accent="neutral"
-            onClick={handleKeepWorking}
-            style={{ width: BUTTON_WIDTH }}
-            leftSection={<ArrowBackIcon fontSize="small" />}
-          >
-            {t("keepWorking", "Keep Working")}
-          </Button>
-          <Button
-            accent="danger"
-            onClick={handleDiscardChanges}
-            style={{
-              width: BUTTON_WIDTH,
-            }}
-            leftSection={<DeleteOutlineIcon fontSize="small" />}
-          >
-            {t("discardChanges", "Discard Changes")}
-          </Button>
-          {hasApply && (
-            <Button
-              onClick={handleApplyAndContinue}
-              style={{ width: BUTTON_WIDTH }}
-              leftSection={<CheckCircleOutlineIcon fontSize="small" />}
-            >
-              {t("applyAndContinue", "Apply & Leave")}
-            </Button>
-          )}
-          {hasExport && (
-            <Button
-              onClick={handleExportAndContinue}
-              style={{ width: BUTTON_WIDTH }}
-              leftSection={<CheckCircleOutlineIcon fontSize="small" />}
-            >
-              {t("exportAndContinue", "Export & Leave")}
-            </Button>
-          )}
-        </Stack>
-      </Stack>
-    </Modal>
+      onKeepWorking={handleKeepWorking}
+      onDiscard={handleDiscardChanges}
+      onSave={hasApply ? handleApplyAndContinue : undefined}
+      onExport={hasExport ? handleExportAndContinue : undefined}
+    />
   );
 };
 
diff --git a/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx b/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx
index 9d5d2475b3..cdb51952f0 100644
--- a/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx
+++ b/frontend/editor/src/core/components/shared/PolicyEnforcingOverlay.tsx
@@ -6,6 +6,9 @@ export function PolicyEnforcingOverlay(_props: {
   accentVar?: string;
   /** Category of the enforcing policy — picks its icon in the real overlay. */
   categoryId?: string;
+  /** Shows a dismiss control in the real overlay, so a run that never settles
+   *  can't leave the surface underneath permanently unclickable. */
+  onDismiss?: () => void;
 }) {
   return null;
 }
diff --git a/frontend/editor/src/core/components/shared/RenameFileDialog.stories.tsx b/frontend/editor/src/core/components/shared/RenameFileDialog.stories.tsx
new file mode 100644
index 0000000000..9413db41b0
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/RenameFileDialog.stories.tsx
@@ -0,0 +1,39 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { RenameFileDialog } from "@app/components/shared/RenameFileDialog";
+
+const meta = {
+  title: "Shared/RenameFileDialog",
+  component: RenameFileDialog,
+} satisfies Meta<typeof RenameFileDialog>;
+export default meta;
+
+type Story = StoryObj<typeof meta>;
+
+export const Default: Story = {
+  args: {
+    opened: true,
+    fileName: "Q3 invoice bundle.pdf",
+    onClose: () => {},
+    onSubmit: () => {},
+  },
+};
+
+export const NoExtension: Story = {
+  args: {
+    opened: true,
+    fileName: "scanned-document",
+    onClose: () => {},
+    onSubmit: () => {},
+  },
+};
+
+export const SaveFails: Story = {
+  args: {
+    opened: true,
+    fileName: "contract.pdf",
+    onClose: () => {},
+    onSubmit: () => {
+      throw new Error("Could not rename the file.");
+    },
+  },
+};
diff --git a/frontend/editor/src/core/components/shared/RenameFileDialog.tsx b/frontend/editor/src/core/components/shared/RenameFileDialog.tsx
new file mode 100644
index 0000000000..83e00f6ba3
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/RenameFileDialog.tsx
@@ -0,0 +1,140 @@
+import { useEffect, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { Alert, Group, Modal, Stack, TextInput } from "@mantine/core";
+import ErrorOutlineIcon from "@mui/icons-material/ErrorOutlined";
+
+import { Button } from "@app/ui/Button";
+import { splitFileName } from "@app/utils/fileUtils";
+
+/** Characters Windows/macOS reject in a filename, which is also what a download saves as. */
+const ILLEGAL_NAME_CHARS = /[\\/:*?"<>|]/;
+
+interface RenameFileDialogProps {
+  opened: boolean;
+  /** Current name, including its extension. */
+  fileName: string;
+  onClose: () => void;
+  /** Gets the new full name. Throwing keeps the dialog open with the message. */
+  onSubmit: (name: string) => void | Promise<void>;
+}
+
+/**
+ * Renames one library file. Only the base name is editable - the extension is
+ * shown but fixed, so a rename can't leave the file claiming the wrong type.
+ */
+export function RenameFileDialog({
+  opened,
+  fileName,
+  onClose,
+  onSubmit,
+}: RenameFileDialogProps) {
+  const { t } = useTranslation();
+  const [base, extension] = splitFileName(fileName);
+  const [value, setValue] = useState(base);
+  const [submitting, setSubmitting] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  useEffect(() => {
+    if (opened) {
+      setValue(base);
+      setSubmitting(false);
+      setError(null);
+    }
+  }, [opened, base]);
+
+  const submit = async () => {
+    const nextBase = value.trim();
+    if (!nextBase) return;
+    if (ILLEGAL_NAME_CHARS.test(nextBase)) {
+      setError(
+        t(
+          "fileSidebar.rename.illegalCharacters",
+          "A file name can't contain \\ / : * ? \" < > |",
+        ),
+      );
+      return;
+    }
+    const nextName = `${nextBase}${extension}`;
+    if (nextName === fileName) {
+      onClose();
+      return;
+    }
+    setSubmitting(true);
+    setError(null);
+    try {
+      await onSubmit(nextName);
+      onClose();
+    } catch (err) {
+      // Stay open on failure: closing would look like the rename worked.
+      setError(
+        err instanceof Error
+          ? err.message
+          : t("fileSidebar.rename.error", "Could not rename the file."),
+      );
+    } finally {
+      setSubmitting(false);
+    }
+  };
+
+  return (
+    <Modal
+      opened={opened}
+      onClose={onClose}
+      title={t("fileSidebar.rename.title", "Rename file")}
+      centered
+      size="sm"
+      transitionProps={{ duration: 0 }}
+      // Mantine zeroes the body's top padding when a header is present, which
+      // would butt the input's border straight against the header rule.
+      styles={{ body: { paddingTop: "var(--mantine-spacing-md)" } }}
+    >
+      <Stack gap="sm">
+        <TextInput
+          autoFocus
+          value={value}
+          onChange={(e) => setValue(e.currentTarget.value)}
+          onFocus={(e) => e.currentTarget.select()}
+          onKeyDown={(e) => {
+            if (e.key === "Enter") {
+              e.preventDefault();
+              void submit();
+            }
+          }}
+          maxLength={200}
+          aria-label={t("fileSidebar.rename.label", "File name")}
+          rightSection={
+            extension ? (
+              <span style={{ color: "var(--c-text-subtle)", fontSize: 12 }}>
+                {extension}
+              </span>
+            ) : undefined
+          }
+          rightSectionWidth={extension ? extension.length * 8 + 12 : undefined}
+          rightSectionPointerEvents="none"
+        />
+        {error && (
+          <Alert
+            color="red"
+            icon={<ErrorOutlineIcon fontSize="small" />}
+            variant="light"
+            role="alert"
+          >
+            {error}
+          </Alert>
+        )}
+        <Group justify="flex-end">
+          <Button variant="secondary" onClick={onClose}>
+            {t("fileSidebar.rename.cancel", "Cancel")}
+          </Button>
+          <Button
+            onClick={submit}
+            loading={submitting}
+            disabled={!value.trim()}
+          >
+            {t("fileSidebar.rename.save", "Rename")}
+          </Button>
+        </Group>
+      </Stack>
+    </Modal>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/ShareFileModal.tsx b/frontend/editor/src/core/components/shared/ShareFileModal.tsx
index 1430f9df20..009345c274 100644
--- a/frontend/editor/src/core/components/shared/ShareFileModal.tsx
+++ b/frontend/editor/src/core/components/shared/ShareFileModal.tsx
@@ -165,7 +165,7 @@ const ShareFileModal: React.FC<ShareFileModalProps> = ({
       if (onUploaded) {
         await onUploaded();
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to generate share link:", error);
       setErrorMessage(
         t(
diff --git a/frontend/editor/src/core/components/shared/ShareManagementModal.tsx b/frontend/editor/src/core/components/shared/ShareManagementModal.tsx
index e0e5899f8d..64760da8d7 100644
--- a/frontend/editor/src/core/components/shared/ShareManagementModal.tsx
+++ b/frontend/editor/src/core/components/shared/ShareManagementModal.tsx
@@ -226,7 +226,7 @@ const ShareManagementModal: React.FC<ShareManagementModalProps> = ({
           durationMs: 2500,
         });
       }
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Failed to create share link:", error);
       setErrorMessage(
         t(
diff --git a/frontend/editor/src/core/components/shared/TextInput.test.tsx b/frontend/editor/src/core/components/shared/TextInput.test.tsx
new file mode 100644
index 0000000000..d0dd2c9564
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/TextInput.test.tsx
@@ -0,0 +1,79 @@
+import { render, screen, fireEvent } from "@testing-library/react";
+import { describe, it, expect, vi } from "vitest";
+import { TextInput } from "@app/components/shared/TextInput";
+import { MantineProvider } from "@mantine/core";
+
+function renderWithMantine(ui: React.ReactElement) {
+  return render(<MantineProvider>{ui}</MantineProvider>);
+}
+
+describe("TextInput", () => {
+  it("renders input with value and placeholder", () => {
+    renderWithMantine(
+      <TextInput
+        id="test-input"
+        name="test-input"
+        value="hello"
+        onChange={vi.fn()}
+        placeholder="Type here..."
+      />,
+    );
+
+    const input = screen.getByPlaceholderText("Type here...");
+    expect(input).toBeInTheDocument();
+    expect(input).toHaveValue("hello");
+  });
+
+  it("shows clear button when there is a value and triggers clear on click", () => {
+    const onChange = vi.fn();
+    renderWithMantine(
+      <TextInput
+        id="test-input"
+        name="test-input"
+        value="search text"
+        onChange={onChange}
+        showClearButton={true}
+      />,
+    );
+
+    const clearButton = screen.getByRole("button", {
+      name: /(?:clear|textInput\.clear)/i,
+    });
+    expect(clearButton).toBeInTheDocument();
+
+    fireEvent.click(clearButton);
+    expect(onChange).toHaveBeenCalledWith("");
+  });
+
+  it("does not show clear button when value is empty", () => {
+    renderWithMantine(
+      <TextInput
+        id="test-input"
+        name="test-input"
+        value=""
+        onChange={vi.fn()}
+        showClearButton={true}
+      />,
+    );
+
+    expect(
+      screen.queryByRole("button", { name: /clear input/i }),
+    ).not.toBeInTheDocument();
+  });
+
+  it("does not show clear button when showClearButton is false", () => {
+    renderWithMantine(
+      <TextInput
+        id="test-input"
+        name="test-input"
+        value="some text"
+        onChange={vi.fn()}
+        showClearButton={false}
+      />,
+    );
+
+    expect(
+      screen.queryByRole("button", { name: /clear input/i }),
+    ).not.toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/core/components/shared/TextInput.tsx b/frontend/editor/src/core/components/shared/TextInput.tsx
index 7d927bb011..41a4223a4c 100644
--- a/frontend/editor/src/core/components/shared/TextInput.tsx
+++ b/frontend/editor/src/core/components/shared/TextInput.tsx
@@ -119,12 +119,25 @@ export const TextInput = forwardRef<HTMLInputElement, TextInputProps>(
         />
         {shouldShowClearButton && (
           <ActionIcon
-            variant="tertiary"
+            variant="quiet"
+            accent="neutral"
+            shape="circle"
             className={styles.clearButton}
+            style={
+              {
+                "--ai-size": "1.25rem",
+                width: "1.25rem",
+                height: "1.25rem",
+              } as React.CSSProperties
+            }
             onClick={handleClear}
             aria-label={t("textInput.clear", "Clear input")}
           >
-            <LocalIcon icon="close-rounded" width="1.25rem" height="1.25rem" />
+            <LocalIcon
+              icon="close-rounded"
+              width="0.875rem"
+              height="0.875rem"
+            />
           </ActionIcon>
         )}
       </div>
diff --git a/frontend/editor/src/core/components/shared/Tooltip.tsx b/frontend/editor/src/core/components/shared/Tooltip.tsx
index 5403940751..55c06a1533 100644
--- a/frontend/editor/src/core/components/shared/Tooltip.tsx
+++ b/frontend/editor/src/core/components/shared/Tooltip.tsx
@@ -18,6 +18,18 @@ import { useLogoAssets } from "@app/hooks/useLogoAssets";
 import styles from "@app/components/shared/tooltip/Tooltip.module.css";
 import { Z_INDEX_OVER_FULLSCREEN_SURFACE } from "@app/styles/zIndex";
 
+// The wrapped child's own event handlers, which Tooltip forwards to after
+// running its own trigger logic. Kept partial since any given child may set none.
+interface ForwardedHandlers {
+  onPointerEnter?: React.PointerEventHandler;
+  onPointerLeave?: React.PointerEventHandler;
+  onMouseDown?: React.MouseEventHandler;
+  onMouseUp?: React.MouseEventHandler;
+  onClick?: React.MouseEventHandler;
+  onFocus?: React.FocusEventHandler;
+  onBlur?: React.FocusEventHandler;
+}
+
 export interface TooltipProps {
   sidebarTooltip?: boolean;
   position?: "right" | "left" | "top" | "bottom";
@@ -218,7 +230,7 @@ export const Tooltip: React.FC<TooltipProps> = ({
   const handlePointerEnter = useCallback(
     (e: React.PointerEvent) => {
       if (!isPinned && !disabled) openWithDelay();
-      (children.props as any)?.onPointerEnter?.(e);
+      (children.props as ForwardedHandlers).onPointerEnter?.(e);
     },
     [isPinned, openWithDelay, children.props, disabled],
   );
@@ -233,19 +245,19 @@ export const Tooltip: React.FC<TooltipProps> = ({
         tooltipRef.current &&
         tooltipRef.current.contains(related)
       ) {
-        (children.props as any)?.onPointerLeave?.(e);
+        (children.props as ForwardedHandlers).onPointerLeave?.(e);
         return;
       }
 
       // Ignore transient leave between mousedown and click
       if (clickPendingRef.current) {
-        (children.props as any)?.onPointerLeave?.(e);
+        (children.props as ForwardedHandlers).onPointerLeave?.(e);
         return;
       }
 
       clearTimers();
       if (allowAutoClose && !isPinned) setOpen(false);
-      (children.props as any)?.onPointerLeave?.(e);
+      (children.props as ForwardedHandlers).onPointerLeave?.(e);
     },
     [clearTimers, isPinned, setOpen, children.props, allowAutoClose],
   );
@@ -253,7 +265,7 @@ export const Tooltip: React.FC<TooltipProps> = ({
   const handleMouseDown = useCallback(
     (e: React.MouseEvent) => {
       clickPendingRef.current = true;
-      (children.props as any)?.onMouseDown?.(e);
+      (children.props as ForwardedHandlers).onMouseDown?.(e);
     },
     [children.props],
   );
@@ -262,7 +274,7 @@ export const Tooltip: React.FC<TooltipProps> = ({
     (e: React.MouseEvent) => {
       // allow microtask turn so click can see this false
       queueMicrotask(() => (clickPendingRef.current = false));
-      (children.props as any)?.onMouseUp?.(e);
+      (children.props as ForwardedHandlers).onMouseUp?.(e);
     },
     [children.props],
   );
@@ -279,7 +291,7 @@ export const Tooltip: React.FC<TooltipProps> = ({
         return;
       }
       clickPendingRef.current = false;
-      (children.props as any)?.onClick?.(e);
+      (children.props as ForwardedHandlers).onClick?.(e);
     },
     [clearTimers, pinOnClick, open, setOpen, children.props],
   );
@@ -288,7 +300,7 @@ export const Tooltip: React.FC<TooltipProps> = ({
   const handleFocus = useCallback(
     (e: React.FocusEvent) => {
       if (!isPinned && !disabled && openOnFocus) openWithDelay();
-      (children.props as any)?.onFocus?.(e);
+      (children.props as ForwardedHandlers).onFocus?.(e);
     },
     [isPinned, openWithDelay, children.props, disabled, openOnFocus],
   );
@@ -301,12 +313,12 @@ export const Tooltip: React.FC<TooltipProps> = ({
         tooltipRef.current &&
         tooltipRef.current.contains(related)
       ) {
-        (children.props as any)?.onBlur?.(e);
+        (children.props as ForwardedHandlers).onBlur?.(e);
         return;
       }
       clearTimers();
       if (allowAutoClose && !isPinned) setOpen(false);
-      (children.props as any)?.onBlur?.(e);
+      (children.props as ForwardedHandlers).onBlur?.(e);
     },
     [isPinned, setOpen, children.props, allowAutoClose, clearTimers],
   );
@@ -339,24 +351,30 @@ export const Tooltip: React.FC<TooltipProps> = ({
   );
 
   // Enhance child with handlers and ref
-  const childWithHandlers = React.cloneElement(children as any, {
-    ref: (node: HTMLElement | null) => {
-      triggerRef.current = node || null;
-      const originalRef = (children as any).ref;
-      if (typeof originalRef === "function") originalRef(node);
-      else if (originalRef && typeof originalRef === "object")
-        (originalRef as any).current = node;
+  const childWithHandlers = React.cloneElement(
+    children as React.ReactElement<Record<string, unknown>>,
+    {
+      ref: (node: HTMLElement | null) => {
+        triggerRef.current = node || null;
+        const originalRef = (
+          children as React.ReactElement & { ref?: React.Ref<HTMLElement> }
+        ).ref;
+        if (typeof originalRef === "function") originalRef(node);
+        else if (originalRef && typeof originalRef === "object")
+          (originalRef as React.MutableRefObject<HTMLElement | null>).current =
+            node;
+      },
+      "aria-describedby": open ? tooltipIdRef.current : undefined,
+      onPointerEnter: handlePointerEnter,
+      onPointerLeave: handlePointerLeave,
+      onMouseDown: handleMouseDown,
+      onMouseUp: handleMouseUp,
+      onClick: handleClick,
+      onFocus: handleFocus,
+      onBlur: handleBlur,
+      onKeyDown: handleKeyDown,
     },
-    "aria-describedby": open ? tooltipIdRef.current : undefined,
-    onPointerEnter: handlePointerEnter,
-    onPointerLeave: handlePointerLeave,
-    onMouseDown: handleMouseDown,
-    onMouseUp: handleMouseUp,
-    onClick: handleClick,
-    onFocus: handleFocus,
-    onBlur: handleBlur,
-    onKeyDown: handleKeyDown,
-  });
+  );
 
   const shouldShowTooltip = open;
   const shouldShowCloseButton = showCloseButton || isPinned;
diff --git a/frontend/editor/src/core/components/shared/UnsavedChangesDialog.tsx b/frontend/editor/src/core/components/shared/UnsavedChangesDialog.tsx
new file mode 100644
index 0000000000..9ed8c270dc
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/UnsavedChangesDialog.tsx
@@ -0,0 +1,108 @@
+/**
+ * The one "unsaved changes" dialog. Navigation and the form editor's tab switch both render it,
+ * so the choice looks identical wherever it interrupts you; only the actions behind it differ.
+ */
+import { Modal, Text, Group, Stack, rem } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import WarningAmberRoundedIcon from "@mui/icons-material/WarningAmberRounded";
+
+import { Button } from "@app/ui/Button";
+import { IconBadge } from "@app/ui/IconBadge";
+import { Z_INDEX_TOAST } from "@app/styles/zIndex";
+
+export interface UnsavedChangesDialogProps {
+  opened: boolean;
+  saving?: boolean;
+  onKeepWorking: () => void;
+  onDiscard: () => void;
+  /** Omit to hide the button, as when there is nothing this caller can save. */
+  onSave?: () => void;
+  onExport?: () => void;
+}
+
+export function UnsavedChangesDialog({
+  opened,
+  saving = false,
+  onKeepWorking,
+  onDiscard,
+  onSave,
+  onExport,
+}: UnsavedChangesDialogProps) {
+  const { t } = useTranslation();
+  const heading = t("unsavedChangesTitle", "Unsaved changes");
+
+  return (
+    <Modal
+      opened={opened}
+      onClose={onKeepWorking}
+      centered
+      size={rem(400)}
+      radius="lg"
+      padding="xl"
+      withCloseButton={false}
+      overlayProps={{ blur: 4, opacity: 0.4 }}
+      transitionProps={{ transition: "pop", duration: 140 }}
+      closeOnClickOutside={true}
+      closeOnEscape={true}
+      zIndex={Z_INDEX_TOAST}
+    >
+      <Modal.Title className="sr-only">{heading}</Modal.Title>
+      <Stack align="center" gap="md">
+        <IconBadge accent="amber" size="md">
+          <WarningAmberRoundedIcon style={{ fontSize: 22 }} />
+        </IconBadge>
+
+        <Stack gap={4} ta="center">
+          <Text fw={600} size="lg">
+            {heading}
+          </Text>
+          <Text size="sm" c="var(--c-text-muted)" lh={1.5}>
+            {t(
+              "unsavedChangesBody",
+              "You have unsaved changes to your PDF. Are you sure you want to leave?",
+            )}
+          </Text>
+        </Stack>
+
+        <Stack gap="sm" w="100%" mt="xs">
+          {onSave && (
+            <Button
+              fullWidth
+              variant="primary"
+              loading={saving}
+              data-testid="unsaved-save"
+              onClick={onSave}
+            >
+              {t("applyAndContinue", "Save & Leave")}
+            </Button>
+          )}
+          {onExport && (
+            <Button fullWidth variant="primary" onClick={onExport}>
+              {t("exportAndContinue", "Export & Leave")}
+            </Button>
+          )}
+          <Group grow gap="sm" wrap="nowrap">
+            <Button
+              variant="secondary"
+              accent="neutral"
+              data-autofocus
+              onClick={onKeepWorking}
+            >
+              {t("keepWorking", "Keep Working")}
+            </Button>
+            <Button
+              variant="secondary"
+              accent="danger"
+              data-testid="unsaved-discard"
+              onClick={onDiscard}
+            >
+              {t("discardChanges", "Discard & Leave")}
+            </Button>
+          </Group>
+        </Stack>
+      </Stack>
+    </Modal>
+  );
+}
+
+export default UnsavedChangesDialog;
diff --git a/frontend/editor/src/core/components/shared/WorkbenchBar.css b/frontend/editor/src/core/components/shared/WorkbenchBar.css
index f805f69721..9f8b4857de 100644
--- a/frontend/editor/src/core/components/shared/WorkbenchBar.css
+++ b/frontend/editor/src/core/components/shared/WorkbenchBar.css
@@ -136,15 +136,15 @@
 }
 
 /* Two-row: the tool row scrolls sideways instead of wrapping. */
-.workbench-bar[data-wrapped="true"] .workbench-bar-center {
-  border-top: 1px solid var(--c-border-subtle);
+.workbench-bar[data-wrapped="true"] .workbench-bar-center-scroll {
   justify-content: flex-start;
+  flex-wrap: nowrap;
   overflow-x: auto;
   overflow-y: hidden;
   scrollbar-width: thin;
   -webkit-overflow-scrolling: touch;
 }
-.workbench-bar[data-wrapped="true"] .workbench-bar-center > * {
+.workbench-bar[data-wrapped="true"] .workbench-bar-center-scroll > * {
   flex-shrink: 0;
 }
 
@@ -152,16 +152,25 @@
 .workbench-bar-center {
   order: 4;
   flex: 0 0 100%;
+  min-width: 0;
+  max-width: 100%;
   position: relative;
   display: flex;
   align-items: center;
+  /* Symmetric side padding leaves room for the retract handle pinned right
+     without knocking the centred tool icons off-centre. */
+  padding: 4px 36px;
+  border-top: 1px solid var(--c-border-subtle);
+}
+
+.workbench-bar-center-scroll {
+  flex: 1 1 auto;
+  min-width: 0;
+  display: flex;
+  align-items: center;
   justify-content: center;
   flex-wrap: wrap;
   gap: 2px;
-  /* Symmetric side padding leaves room for the retract handle pinned right
-     without knocking the centred tool icons off-centre. */
-  padding: 4px 36px;
-  border-top: 1px solid var(--c-border-subtle);
 }
 
 /* Retract / reopen handle for the viewer tool row. */
@@ -297,3 +306,79 @@
   text-align: right;
   white-space: nowrap;
 }
+
+/* ---- Mobile layout (matches useIsMobile's 1024px) ---- */
+@media (max-width: 64rem) {
+  .workbench-bar {
+    margin: var(--nav-gutter) var(--nav-gutter) 0;
+  }
+
+  .workbench-bar-action-icon {
+    width: 40px !important;
+    height: 40px !important;
+    min-width: 40px !important;
+    min-height: 40px !important;
+  }
+
+  .workbench-bar-views,
+  .workbench-bar-globals {
+    height: auto;
+    min-height: 44px;
+  }
+
+  .workbench-bar-center {
+    padding: 2px 4px 2px 8px;
+  }
+
+  .workbench-bar-center-scroll {
+    gap: 4px;
+  }
+
+  .workbench-bar[data-wrapped="true"] .workbench-bar-search {
+    order: 2;
+    flex: 1 1 0;
+    min-width: 0;
+    padding: 4px 0;
+  }
+
+  .workbench-bar[data-wrapped="true"] .workbench-bar-globals {
+    order: 3;
+  }
+
+  .workbench-bar[data-wrapped="true"] .workbench-bar-center-scroll {
+    scrollbar-width: none;
+    /* Wider than one 40px icon plus its gap: a 2rem fade always landed
+       mid-glyph, which read as a clipping bug rather than "scroll me". */
+    -webkit-mask-image: linear-gradient(
+      to right,
+      #000 calc(100% - 3.5rem),
+      transparent
+    );
+    mask-image: linear-gradient(
+      to right,
+      #000 calc(100% - 3.5rem),
+      transparent
+    );
+  }
+
+  .workbench-bar[data-wrapped="true"]
+    .workbench-bar-center--expanded
+    .workbench-bar-center-scroll {
+    flex-wrap: wrap;
+    justify-content: center;
+    overflow-x: visible;
+    -webkit-mask-image: none;
+    mask-image: none;
+  }
+
+  .workbench-bar[data-wrapped="true"]
+    .workbench-bar-center--expanded
+    .workbench-bar-divider {
+    display: none;
+  }
+
+  .workbench-bar-toolbar-handle-expand {
+    flex-shrink: 0;
+    align-self: flex-start;
+  }
+}
diff --git a/frontend/editor/src/core/components/shared/WorkbenchBar.tsx b/frontend/editor/src/core/components/shared/WorkbenchBar.tsx
index 241d658bad..a18b58661f 100644
--- a/frontend/editor/src/core/components/shared/WorkbenchBar.tsx
+++ b/frontend/editor/src/core/components/shared/WorkbenchBar.tsx
@@ -3,9 +3,9 @@ import React, {
   useLayoutEffect,
   useMemo,
   useRef,
+  useState,
   useSyncExternalStore,
 } from "react";
-import { Group, Loader, Progress, Stack, Text } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { ActionIcon } from "@app/ui/ActionIcon";
 import { SegmentedControl } from "@app/ui/SegmentedControl";
@@ -31,7 +31,6 @@ import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import { useNavigationState } from "@app/contexts/NavigationContext";
 import { ViewerContext, useViewer } from "@app/contexts/ViewerContext";
 import { WorkbenchType, isBaseWorkbench } from "@app/types/workbench";
-import { Tooltip } from "@app/components/shared/Tooltip";
 import LocalIcon from "@app/components/shared/LocalIcon";
 import SuperSearch from "@app/components/shared/superSearch/SuperSearch";
 import { useEditorSearchScopes } from "@app/hooks/useSuperSearch";
@@ -53,11 +52,14 @@ import {
 } from "@app/types/workbenchBar";
 import InsertDriveFileOutlinedIcon from "@mui/icons-material/InsertDriveFileOutlined";
 import FolderOutlinedIcon from "@mui/icons-material/FolderOutlined";
-import CloseIcon from "@mui/icons-material/Close";
-import PrintIcon from "@mui/icons-material/Print";
-import KeyboardArrowUpIcon from "@mui/icons-material/KeyboardArrowUp";
-import ShieldOutlinedIcon from "@mui/icons-material/ShieldOutlined";
+import WorkbenchBarDesktopActions from "@app/components/shared/workbenchBar/WorkbenchBarDesktopActions";
+import WorkbenchBarMobileActions from "@app/components/shared/workbenchBar/WorkbenchBarMobileActions";
+import WorkbenchBarToolbarHandle from "@app/components/shared/workbenchBar/WorkbenchBarToolbarHandle";
+import { renderWithTooltip } from "@app/components/shared/workbenchBar/workbenchBarTooltip";
+import { WorkbenchBarActionsProps } from "@app/components/shared/workbenchBar/types";
+import { useIsMobile } from "@app/hooks/useIsMobile";
 import "@app/components/shared/WorkbenchBar.css";
+import { NotificationBell } from "@app/components/notifications/NotificationBell";
 
 const SECTION_ORDER: WorkbenchBarSection[] = ["top", "middle", "bottom"];
 
@@ -77,24 +79,6 @@ interface WorkbenchBarProps {
   onCollapseViewerToolbar?: (collapsed: boolean) => void;
 }
 
-function renderWithTooltip(
-  node: React.ReactNode,
-  tooltip: React.ReactNode | undefined,
-) {
-  if (!tooltip) return node;
-  return (
-    <Tooltip
-      content={tooltip}
-      position="bottom"
-      offset={6}
-      arrow
-      portalTarget={typeof document !== "undefined" ? document.body : undefined}
-    >
-      <div className="workbench-bar-tooltip-wrapper">{node}</div>
-    </Tooltip>
-  );
-}
-
 export default function WorkbenchBar({
   currentView,
   setCurrentView,
@@ -132,6 +116,8 @@ export default function WorkbenchBar({
   const icons = useFileActionIcons();
   const { sharingEnabled } = useSharingEnabled();
   const viewerContext = React.useContext(ViewerContext);
+  const isMobile = useIsMobile();
+  const [mobileToolsExpanded, setMobileToolsExpanded] = useState(false);
 
   const selectors = useFileSelectors();
   const { selectedFiles, selectedFileIds } = useFileSelection();
@@ -166,32 +152,6 @@ export default function WorkbenchBar({
     enforcingRun?.currentStep != null && enforcingRun.stepCount
       ? Math.round((enforcingRun.currentStep / enforcingRun.stepCount) * 100)
       : undefined;
-  const makeEnforcingTooltip = (action: string): React.ReactNode => (
-    <Stack gap={6} py={2} w={200}>
-      <Group gap={6} wrap="nowrap">
-        <ShieldOutlinedIcon style={{ fontSize: 13 }} />
-        <Text size="xs" fw={600}>
-          {t(
-            "policy.blockingAction",
-            "{{action}} blocked while enforcing policy, please wait",
-            { action },
-          )}
-        </Text>
-      </Group>
-      {enforcingProgress != null ? (
-        <Progress
-          w="100%"
-          size="xs"
-          radius="xl"
-          value={enforcingProgress}
-          striped
-          animated
-        />
-      ) : (
-        <Loader size="xs" />
-      )}
-    </Stack>
-  );
   const pageEditorTotalPages = pageEditorFunctions?.totalPages ?? 0;
   const pageEditorSelectedCount =
     pageEditorFunctions?.selectedPageIds?.length ?? 0;
@@ -229,7 +189,8 @@ export default function WorkbenchBar({
         try {
           const result = await downloadFile({
             data: new Blob([buffer], { type: "application/pdf" }),
-            filename: fileToExport.name,
+            // Stub name, not File.name: a rename only writes the stub.
+            filename: stub?.name ?? fileToExport.name,
             localPath: forceNewFile ? undefined : stub?.localFilePath,
             fileId: stub?.id,
           });
@@ -281,7 +242,8 @@ export default function WorkbenchBar({
         try {
           const result = await downloadRaw({
             data: enforced[idx],
-            filename: file.name,
+            // Stub name, not File.name: a rename only writes the stub.
+            filename: stub?.name ?? file.name,
             localPath: forceNewFile ? undefined : stub?.localFilePath,
             fileId: stub?.id,
           });
@@ -363,6 +325,33 @@ export default function WorkbenchBar({
     return terminology.downloadAll;
   }, [currentView, selectedCount, t, terminology]);
 
+  const actionsDisabled =
+    totalItems === 0 || allButtonsDisabled || disableForFullscreen;
+
+  // Shared by the mobile overflow menu and the desktop icon cluster so the two
+  // stay in step; each renders the same actions in its own shape.
+  const globalActionProps: WorkbenchBarActionsProps = {
+    currentView,
+    isCustomView,
+    actionsDisabled,
+    policyEnforcing,
+    downloadLabel: downloadTooltip,
+    downloadIconName: icons.downloadIconName,
+    saveAsIconName: icons.saveAsIconName,
+    onPrint: handlePrint,
+    onExport: handleExportAll,
+    onClose: handleClose,
+  };
+
+  const toggleMobileTools = useCallback(
+    () => setMobileToolsExpanded((v) => !v),
+    [],
+  );
+  const handleRetractToolbar = useCallback(
+    () => onCollapseViewerToolbar?.(true),
+    [onCollapseViewerToolbar],
+  );
+
   const renderButton = useCallback(
     (btn: WorkbenchBarButtonConfig) => {
       const action = actions[btn.id];
@@ -558,38 +547,44 @@ export default function WorkbenchBar({
           whole row; Workbench then shows a tab below the bar to bring it back. */}
       {sectionsWithButtons.length > 0 &&
         !(isViewer && viewerToolbarCollapsed) && (
-          <div className="workbench-bar-center">
-            {sectionsWithButtons.map(
-              ({ section, buttons: sectionButtons }, idx) => (
-                <React.Fragment key={section}>
-                  {idx > 0 && <div className="workbench-bar-divider" />}
-                  {sectionButtons.map((btn) => {
-                    const content = renderButton(btn);
-                    if (!content) return null;
-                    return (
-                      <div
-                        key={btn.id}
-                        className="workbench-bar-action-wrapper"
-                      >
-                        {content}
-                      </div>
-                    );
-                  })}
-                </React.Fragment>
-              ),
-            )}
-            {isViewer && onCollapseViewerToolbar && (
-              <Button
-                type="button"
-                variant="quiet"
-                className="workbench-bar-toolbar-handle workbench-bar-toolbar-handle-retract"
-                onClick={() => onCollapseViewerToolbar(true)}
-                aria-expanded
-                aria-label={t("workbenchBar.hideToolbar", "Hide toolbar")}
-                title={t("workbenchBar.hideToolbar", "Hide toolbar")}
-                leftSection={<KeyboardArrowUpIcon sx={{ fontSize: "1rem" }} />}
-              />
-            )}
+          <div
+            className={`workbench-bar-center${
+              isMobile && mobileToolsExpanded
+                ? " workbench-bar-center--expanded"
+                : ""
+            }`}
+          >
+            <div className="workbench-bar-center-scroll">
+              {sectionsWithButtons.map(
+                ({ section, buttons: sectionButtons }, idx) => (
+                  <React.Fragment key={section}>
+                    {idx > 0 && <div className="workbench-bar-divider" />}
+                    {sectionButtons.map((btn) => {
+                      const content = renderButton(btn);
+                      if (!content) return null;
+                      return (
+                        <div
+                          key={btn.id}
+                          className="workbench-bar-action-wrapper"
+                        >
+                          {content}
+                        </div>
+                      );
+                    })}
+                  </React.Fragment>
+                ),
+              )}
+            </div>
+            <WorkbenchBarToolbarHandle
+              isMobile={isMobile}
+              expanded={mobileToolsExpanded}
+              onToggleExpanded={toggleMobileTools}
+              onRetract={
+                isViewer && onCollapseViewerToolbar
+                  ? handleRetractToolbar
+                  : undefined
+              }
+            />
           </div>
         )}
 
@@ -597,119 +592,20 @@ export default function WorkbenchBar({
       <div className="workbench-bar-globals">
         {/* Share (viewer only; opens the same modal as My Files "Manage sharing") */}
         {currentView === "viewer" && sharingEnabled && (
-          <ViewerShareButton
-            disabled={
-              totalItems === 0 || allButtonsDisabled || disableForFullscreen
-            }
+          <ViewerShareButton disabled={actionsDisabled} />
+        )}
+
+        {isMobile ? (
+          <WorkbenchBarMobileActions {...globalActionProps} />
+        ) : (
+          <WorkbenchBarDesktopActions
+            {...globalActionProps}
+            enforcingProgress={enforcingProgress}
           />
         )}
-
-        {/* Print */}
-        {currentView === "viewer" &&
-          renderWithTooltip(
-            <ActionIcon
-              variant="tertiary"
-              hover={false}
-              className="workbench-bar-action-icon"
-              onClick={handlePrint}
-              disabled={
-                totalItems === 0 ||
-                allButtonsDisabled ||
-                disableForFullscreen ||
-                policyEnforcing
-              }
-              aria-label={t("workbenchBar.print", "Print PDF")}
-            >
-              <PrintIcon sx={{ fontSize: "1rem" }} />
-            </ActionIcon>,
-            policyEnforcing
-              ? makeEnforcingTooltip(t("workbenchBar.print", "Print PDF"))
-              : t("workbenchBar.print", "Print PDF"),
-          )}
-
-        {/* Download (file-level action — not relevant in custom views) */}
-        {!isCustomView &&
-          renderWithTooltip(
-            <ActionIcon
-              variant="tertiary"
-              hover={false}
-              className="workbench-bar-action-icon"
-              onClick={() => handleExportAll()}
-              disabled={
-                disableForFullscreen ||
-                totalItems === 0 ||
-                allButtonsDisabled ||
-                policyEnforcing
-              }
-              aria-label={downloadTooltip}
-            >
-              <LocalIcon
-                icon={icons.downloadIconName}
-                width="1rem"
-                height="1rem"
-              />
-            </ActionIcon>,
-            policyEnforcing
-              ? makeEnforcingTooltip(downloadTooltip)
-              : downloadTooltip,
-          )}
-
-        {/* Save As */}
-        {!isCustomView &&
-          icons.saveAsIconName &&
-          renderWithTooltip(
-            <ActionIcon
-              variant="tertiary"
-              hover={false}
-              className="workbench-bar-action-icon"
-              onClick={() => handleExportAll(true)}
-              disabled={
-                disableForFullscreen ||
-                totalItems === 0 ||
-                allButtonsDisabled ||
-                policyEnforcing
-              }
-              aria-label={t("workbenchBar.saveAs", "Save As")}
-            >
-              <LocalIcon
-                icon={icons.saveAsIconName}
-                width="1rem"
-                height="1rem"
-              />
-            </ActionIcon>,
-            policyEnforcing
-              ? makeEnforcingTooltip(t("workbenchBar.saveAs", "Save As"))
-              : t("workbenchBar.saveAs", "Save As"),
-          )}
-
-        {/* Separator: export group | close */}
-        {!isCustomView && (
-          <div className="workbench-bar-divider workbench-bar-globals-sep" />
-        )}
-
-        {/* Close (context-aware: close all / close viewer file / close page editor) */}
-        {!isCustomView &&
-          renderWithTooltip(
-            <ActionIcon
-              variant="tertiary"
-              hover={false}
-              className="workbench-bar-action-icon"
-              onClick={handleClose}
-              disabled={
-                totalItems === 0 || allButtonsDisabled || disableForFullscreen
-              }
-              aria-label={
-                currentView === "fileEditor"
-                  ? t("workbenchBar.closeAll", "Close All")
-                  : t("workbenchBar.closePdf", "Close PDF")
-              }
-            >
-              <CloseIcon sx={{ fontSize: "1rem" }} />
-            </ActionIcon>,
-            currentView === "fileEditor"
-              ? t("workbenchBar.closeAll", "Close All")
-              : t("workbenchBar.closePdf", "Close PDF"),
-          )}
+        {/* Last in the globals, so it is the rightmost control. */}
+        <div className="workbench-bar-divider workbench-bar-globals-sep" />
+        <NotificationBell />
       </div>
     </div>
   );
diff --git a/frontend/editor/src/core/components/shared/WorkbenchFloatingSearch.css b/frontend/editor/src/core/components/shared/WorkbenchFloatingSearch.css
new file mode 100644
index 0000000000..47c7e9eed4
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/WorkbenchFloatingSearch.css
@@ -0,0 +1,31 @@
+/* Unpainted floating search for the empty workbench. Height + top margin match
+   the WorkbenchBar's band so opening a file swaps it in without a shift. */
+.workbench-floating-search {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  min-height: 38px;
+  margin-top: var(--nav-gutter);
+  padding: 0 1rem;
+  flex-shrink: 0;
+}
+
+.workbench-floating-search .super-search {
+  flex: 0 1 24rem;
+  width: min(100%, 24rem);
+  max-width: 24rem;
+}
+
+.workbench-floating-search .super-search input {
+  background-color: transparent;
+  padding-top: 4px;
+  padding-bottom: 4px;
+  font-size: 12.5px;
+}
+
+[data-mantine-color-scheme="dark"]
+  .workbench-floating-search
+  .super-search
+  input {
+  background-color: transparent;
+}
diff --git a/frontend/editor/src/core/components/shared/WorkbenchFloatingSearch.tsx b/frontend/editor/src/core/components/shared/WorkbenchFloatingSearch.tsx
new file mode 100644
index 0000000000..37e858adff
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/WorkbenchFloatingSearch.tsx
@@ -0,0 +1,15 @@
+import SuperSearch from "@app/components/shared/superSearch/SuperSearch";
+import { useEditorSearchScopes } from "@app/hooks/useSuperSearch";
+import "@app/components/shared/WorkbenchFloatingSearch.css";
+
+// The editor's global search, floated while no file is open (mirrors the
+// processor's PortalSearchBar). Renders only when the WorkbenchBar doesn't, so
+// reusing the default input id is safe.
+export default function WorkbenchFloatingSearch() {
+  const scopes = useEditorSearchScopes();
+  return (
+    <div className="workbench-floating-search">
+      <SuperSearch scopes={scopes} />
+    </div>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/config/SettingsMobileBackButton.stories.tsx b/frontend/editor/src/core/components/shared/config/SettingsMobileBackButton.stories.tsx
new file mode 100644
index 0000000000..4cde2b2b90
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/config/SettingsMobileBackButton.stories.tsx
@@ -0,0 +1,17 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { SettingsMobileBackButton } from "@app/components/shared/config/SettingsMobileBackButton";
+
+const meta = {
+  title: "Shared/Config/SettingsMobileBackButton",
+  component: SettingsMobileBackButton,
+  parameters: { layout: "padded" },
+  args: { show: true, onClick: () => {} },
+} satisfies Meta<typeof SettingsMobileBackButton>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+
+export const Default: Story = {};
+
+export const Hidden: Story = {
+  args: { show: false },
+};
diff --git a/frontend/editor/src/core/components/shared/config/SettingsMobileBackButton.tsx b/frontend/editor/src/core/components/shared/config/SettingsMobileBackButton.tsx
new file mode 100644
index 0000000000..db21592609
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/config/SettingsMobileBackButton.tsx
@@ -0,0 +1,31 @@
+import { useTranslation } from "react-i18next";
+import ArrowBackRoundedIcon from "@mui/icons-material/ArrowBackRounded";
+import { ActionIcon } from "@app/ui/ActionIcon";
+
+interface SettingsMobileBackButtonProps {
+  /** Only the mobile two-pane layout has a nav pane to go back to. */
+  show: boolean;
+  onClick: () => void;
+}
+
+/** Returns the settings modal from a section back to the section list. */
+export function SettingsMobileBackButton({
+  show,
+  onClick,
+}: SettingsMobileBackButtonProps) {
+  const { t } = useTranslation();
+
+  if (!show) return null;
+
+  return (
+    <ActionIcon
+      variant="tertiary"
+      onClick={onClick}
+      aria-label={t("settings.backToSections", "All settings")}
+    >
+      <ArrowBackRoundedIcon sx={{ fontSize: "1.25rem" }} />
+    </ActionIcon>
+  );
+}
+
+export default SettingsMobileBackButton;
diff --git a/frontend/editor/src/core/components/shared/config/SettingsMobileNavHeader.stories.tsx b/frontend/editor/src/core/components/shared/config/SettingsMobileNavHeader.stories.tsx
new file mode 100644
index 0000000000..a4ade4801b
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/config/SettingsMobileNavHeader.stories.tsx
@@ -0,0 +1,23 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { SettingsMobileNavHeader } from "@app/components/shared/config/SettingsMobileNavHeader";
+import "@app/components/shared/AppConfigModal.css";
+
+const meta = {
+  title: "Shared/Config/SettingsMobileNavHeader",
+  component: SettingsMobileNavHeader,
+  parameters: { layout: "padded" },
+  args: {
+    show: true,
+    onClose: () => {},
+    background: "var(--c-bg-raised)",
+    borderColor: "var(--c-border-subtle)",
+  },
+} satisfies Meta<typeof SettingsMobileNavHeader>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+
+export const Default: Story = {};
+
+export const Hidden: Story = {
+  args: { show: false },
+};
diff --git a/frontend/editor/src/core/components/shared/config/SettingsMobileNavHeader.tsx b/frontend/editor/src/core/components/shared/config/SettingsMobileNavHeader.tsx
new file mode 100644
index 0000000000..bfeea13861
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/config/SettingsMobileNavHeader.tsx
@@ -0,0 +1,44 @@
+import { Text } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import LocalIcon from "@app/components/shared/LocalIcon";
+
+interface SettingsMobileNavHeaderProps {
+  /** Mobile shows nav and content as separate panes, so the nav needs its own header. */
+  show: boolean;
+  onClose: () => void;
+  background: string;
+  borderColor: string;
+}
+
+/** Header for the settings nav pane: the modal title plus a close button. */
+export function SettingsMobileNavHeader({
+  show,
+  onClose,
+  background,
+  borderColor,
+}: SettingsMobileNavHeaderProps) {
+  const { t } = useTranslation();
+
+  if (!show) return null;
+
+  return (
+    <div
+      className="modal-header modal-nav-header"
+      style={{ background, borderBottom: `1px solid ${borderColor}` }}
+    >
+      <Text fw={700} size="lg">
+        {t("settings.title", "Settings")}
+      </Text>
+      <ActionIcon
+        variant="tertiary"
+        onClick={onClose}
+        aria-label={t("settings.close", "Close")}
+      >
+        <LocalIcon icon="close-rounded" width={18} height={18} />
+      </ActionIcon>
+    </div>
+  );
+}
+
+export default SettingsMobileNavHeader;
diff --git a/frontend/editor/src/core/components/shared/config/SettingsNavChevron.stories.tsx b/frontend/editor/src/core/components/shared/config/SettingsNavChevron.stories.tsx
new file mode 100644
index 0000000000..f9ede21f49
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/config/SettingsNavChevron.stories.tsx
@@ -0,0 +1,18 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { SettingsNavChevron } from "@app/components/shared/config/SettingsNavChevron";
+import "@app/components/shared/AppConfigModal.css";
+
+const meta = {
+  title: "Shared/Config/SettingsNavChevron",
+  component: SettingsNavChevron,
+  parameters: { layout: "padded" },
+  args: { show: true },
+} satisfies Meta<typeof SettingsNavChevron>;
+export default meta;
+type Story = StoryObj<typeof meta>;
+
+export const Default: Story = {};
+
+export const Hidden: Story = {
+  args: { show: false },
+};
diff --git a/frontend/editor/src/core/components/shared/config/SettingsNavChevron.tsx b/frontend/editor/src/core/components/shared/config/SettingsNavChevron.tsx
new file mode 100644
index 0000000000..c14e7933f5
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/config/SettingsNavChevron.tsx
@@ -0,0 +1,20 @@
+import ChevronRightRoundedIcon from "@mui/icons-material/ChevronRightRounded";
+
+interface SettingsNavChevronProps {
+  /** Mobile nav items drill into a second pane, so they get an affordance. */
+  show: boolean;
+}
+
+/** Drill-in affordance on a settings nav item. */
+export function SettingsNavChevron({ show }: SettingsNavChevronProps) {
+  if (!show) return null;
+
+  return (
+    <ChevronRightRoundedIcon
+      className="modal-nav-chevron"
+      sx={{ fontSize: "1.25rem" }}
+    />
+  );
+}
+
+export default SettingsNavChevron;
diff --git a/frontend/editor/src/core/components/shared/config/configNavSections.tsx b/frontend/editor/src/core/components/shared/config/configNavSections.tsx
index b4a8748434..1fd16de4d4 100644
--- a/frontend/editor/src/core/components/shared/config/configNavSections.tsx
+++ b/frontend/editor/src/core/components/shared/config/configNavSections.tsx
@@ -44,7 +44,7 @@ export const useConfigNavSections = (
           key: "general",
           label: t("settings.general.title", "General"),
           icon: "settings-rounded",
-          component: <GeneralSection />,
+          component: <GeneralSection hideTitle />,
         },
         {
           key: "hotkeys",
@@ -112,7 +112,7 @@ export const createConfigNavSections = (
           key: "general",
           label: "General",
           icon: "settings-rounded",
-          component: <GeneralSection />,
+          component: <GeneralSection hideTitle />,
         },
         {
           key: "hotkeys",
diff --git a/frontend/editor/src/proprietary/components/shared/dividerWithText/DividerWithText.css b/frontend/editor/src/core/components/shared/dividerWithText/DividerWithText.css
similarity index 100%
rename from frontend/editor/src/proprietary/components/shared/dividerWithText/DividerWithText.css
rename to frontend/editor/src/core/components/shared/dividerWithText/DividerWithText.css
diff --git a/frontend/editor/src/core/components/shared/navFooter/NavFooter.css b/frontend/editor/src/core/components/shared/navFooter/NavFooter.css
new file mode 100644
index 0000000000..aa2688cd35
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/navFooter/NavFooter.css
@@ -0,0 +1,156 @@
+/* Shared sidebar footer: one surface holding the link-account CTA, the credits
+   meter, the other-app switch and the account row, hairline-separated.
+   Structural only — every colour comes from a --c-* semantic token. */
+
+.nav-footer {
+  display: flex;
+  flex-direction: column;
+  flex-shrink: 0;
+  /* Vertical only: the slots carry the horizontal padding so their separator
+     runs the full width of the surface. */
+  padding: 0.25rem 0;
+  overflow: hidden;
+}
+
+.nav-footer__slot {
+  padding-inline: 0.375rem;
+}
+
+/* Separators are drawn by the slots themselves, never as their own elements.
+   A slot whose contents render nothing (the link-account CTA returns null once
+   the org is linked, and an element is truthy even when it renders null) is
+   :empty, so it is skipped by both rules below — it can't leave a line behind,
+   and it can't push one to the top or bottom of the surface. A rule that only
+   ever matches a slot PRECEDED by another visible slot cannot draw a leading
+   separator, whatever the caller passes in. */
+.nav-footer__slot:empty {
+  display: none;
+}
+
+.nav-footer__slot:not(:empty) ~ .nav-footer__slot:not(:empty) {
+  border-top: 1px solid var(--c-border-subtle);
+  margin-top: 0.25rem;
+  padding-top: 0.25rem;
+}
+
+/* Fades the rows up on the first footer mount of a page session only. They are
+   seeded from cache, so they're already present at first paint; replaying this
+   on every later mount (switching apps, remounting a view) would animate
+   content that never changed and read as a twitch. */
+@keyframes nav-footer-row-in {
+  from {
+    opacity: 0;
+    transform: translateY(0.25rem);
+  }
+  to {
+    opacity: 1;
+    transform: none;
+  }
+}
+
+.nav-footer[data-animate] .nav-footer__slot:not(:empty) {
+  animation: nav-footer-row-in var(--motion-enter) both;
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .nav-footer[data-animate] .nav-footer__slot:not(:empty) {
+    animation: none;
+  }
+}
+
+/* ---- Rows (link-account, credits, switch, account) ---- */
+
+.nav-footer__row {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  width: 100%;
+  min-height: 2.25rem;
+  padding: 0.25rem 0.375rem;
+  border: 0;
+  border-radius: 0.5rem;
+  background: none;
+  color: var(--c-text);
+  font: inherit;
+  text-align: left;
+  cursor: pointer;
+}
+
+.nav-footer__row:disabled {
+  cursor: default;
+}
+
+.nav-footer__row:not(:disabled):hover {
+  background-color: var(--c-hover);
+}
+
+.nav-footer__row:focus-visible {
+  outline: 2px solid var(--c-primary);
+  outline-offset: -2px;
+}
+
+.nav-footer__row-icon {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  width: 1.625rem;
+}
+
+/* Hovering the switch row plays the mark's "thinking" drift once — the same
+   motion the chat FAB loops, for a single beat, as a hint that the row hands
+   off to the other app. One iteration only: it starts and ends at rest, so
+   nothing snaps when it finishes, and re-entering the row replays it. */
+.nav-footer__row:hover .sui-brandmark__a {
+  animation: sui-brandmark-drift-a 1.1s ease-in-out 1;
+}
+.nav-footer__row:hover .sui-brandmark__b {
+  animation: sui-brandmark-drift-b 1.1s ease-in-out 1;
+}
+
+.nav-footer__row-label {
+  flex: 1;
+  min-width: 0;
+  font-size: 0.8125rem;
+  font-weight: 500;
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+/* Trailing affordance on a row: the account row's gear, the switch row's
+   leaving-this-app arrow. */
+.nav-footer__trailing {
+  display: flex;
+  align-items: center;
+  justify-content: center;
+  flex-shrink: 0;
+  margin-left: auto;
+  color: var(--c-text-subtle);
+}
+
+/* Rows contributed by a caller (the link-account NavItem) sit in the same
+   surface, so match this footer's row metrics rather than the nav rail's. */
+.nav-footer .sui-navitem {
+  min-height: 2.25rem;
+  padding: 0.25rem 0.375rem;
+  margin: 0;
+  border-radius: 0.5rem;
+  font-size: 0.8125rem;
+}
+
+/* ---- Collapsed icon rail ---- */
+
+.nav-footer[data-collapsed] .nav-footer__slot {
+  padding-inline: 0.25rem;
+}
+
+.nav-footer[data-collapsed] .nav-footer__row {
+  justify-content: center;
+  padding-inline: 0;
+}
+
+.nav-footer[data-collapsed] .sui-navitem {
+  justify-content: center;
+  padding-inline: 0;
+}
diff --git a/frontend/editor/src/core/components/shared/navFooter/NavFooter.stories.tsx b/frontend/editor/src/core/components/shared/navFooter/NavFooter.stories.tsx
new file mode 100644
index 0000000000..31a04be596
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/navFooter/NavFooter.stories.tsx
@@ -0,0 +1,119 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import LinkIcon from "@mui/icons-material/Link";
+import { NavItem } from "@app/ui/NavItem";
+import { NavFooter } from "@app/components/shared/navFooter/NavFooter";
+
+/** Stands in for a CTA that has decided it has nothing to show. */
+function RendersNothing() {
+  return null;
+}
+
+const meta: Meta<typeof NavFooter> = {
+  title: "Shared/NavFooter",
+  component: NavFooter,
+  parameters: { layout: "padded" },
+  args: {
+    displayName: "admin",
+    onOpenSettings: () => {},
+    credits: { remaining: 247, total: 500 },
+    onOpenPlan: () => {},
+    otherApp: { app: "processor", onOpen: () => {} },
+  },
+  decorators: [
+    (S) => (
+      <div
+        style={{
+          width: "16.25rem",
+          background: "var(--c-bg)",
+          padding: "0.5rem",
+        }}
+      >
+        <S />
+      </div>
+    ),
+  ],
+};
+export default meta;
+type Story = StoryObj<typeof NavFooter>;
+
+/** The editor's footer: credits, "Open PDF Processor", the account row. */
+export const InEditor: Story = {};
+
+/** The processor's footer. Same three boxes, opposite switch target. */
+export const InProcessor: Story = {
+  args: { otherApp: { app: "editor", onOpen: () => {} } },
+};
+
+/** Self-hosted processor: no wallet, so no meter, and the link-account CTA
+ *  rides along in the account box. */
+export const WithLinkAccountCta: Story = {
+  args: {
+    credits: null,
+    otherApp: { app: "editor", onOpen: () => {} },
+    accountExtras: (
+      <NavItem
+        id="account-link"
+        label="Link Stirling account"
+        icon={<LinkIcon sx={{ fontSize: "1.1rem" }} />}
+      />
+    ),
+  },
+};
+
+/** Regression guard: the processor always passes its link-account CTA, but that
+ *  component renders null once the org is linked. An element is truthy even
+ *  when it renders nothing, so this must not leave a separator above the first
+ *  visible row. */
+export const ExtrasThatRenderNothing: Story = {
+  args: { accountExtras: <RendersNothing /> },
+};
+
+/** A real profile picture replaces the initials disc. */
+export const WithProfilePicture: Story = {
+  args: {
+    displayName: "Ada Lovelace",
+    profilePictureUrl:
+      "data:image/svg+xml;utf8," +
+      encodeURIComponent(
+        '<svg xmlns="http://www.w3.org/2000/svg" width="64" height="64"><rect width="64" height="64" fill="black"/><circle cx="32" cy="24" r="12" fill="white"/><ellipse cx="32" cy="56" rx="20" ry="16" fill="white"/></svg>',
+      ),
+  },
+};
+
+/** Credits running low — the dot and bar shift to the warning tone at 20% left. */
+export const CreditsLow: Story = {
+  args: { credits: { remaining: 42, total: 500 } },
+};
+
+/** Allowance exhausted. */
+export const CreditsExhausted: Story = {
+  args: { credits: { remaining: 0, total: 500 } },
+};
+
+/** Core OSS: no wallet, no second app, settings only. */
+export const MinimalBuild: Story = {
+  args: { credits: null, otherApp: null },
+};
+
+/** No settings handler — the account row is inert identity, not a button. */
+export const NoSettings: Story = {
+  args: { onOpenSettings: undefined },
+};
+
+/** Collapsed icon rail: labels become tooltips. */
+export const Collapsed: Story = {
+  args: { collapsed: true },
+  decorators: [
+    (S) => (
+      <div
+        style={{
+          width: "3.5rem",
+          background: "var(--c-bg)",
+          padding: "0.5rem",
+        }}
+      >
+        <S />
+      </div>
+    ),
+  ],
+};
diff --git a/frontend/editor/src/core/components/shared/navFooter/NavFooter.test.tsx b/frontend/editor/src/core/components/shared/navFooter/NavFooter.test.tsx
new file mode 100644
index 0000000000..a32063e56f
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/navFooter/NavFooter.test.tsx
@@ -0,0 +1,58 @@
+import { describe, it, expect } from "vitest";
+import { cleanup, render } from "@testing-library/react";
+import { MantineProvider } from "@mantine/core";
+import { NavFooter } from "@app/components/shared/navFooter/NavFooter";
+
+/** The footer's tooltips need Mantine's theme context. */
+function withProviders(ui: React.ReactNode) {
+  return <MantineProvider>{ui}</MantineProvider>;
+}
+
+function renderFooter() {
+  const { container } = render(
+    withProviders(
+      <NavFooter
+        displayName="admin"
+        onOpenSettings={() => {}}
+        credits={{ remaining: 247, total: 500 }}
+        otherApp={{ app: "processor", onOpen: () => {} }}
+      />,
+    ),
+  );
+  return container.querySelector(".nav-footer") as HTMLElement;
+}
+
+describe("NavFooter — enter animation", () => {
+  it("plays once per page session, not on every remount", () => {
+    // The rows are seeded from cache, so they're present at first paint. Every
+    // later mount — switching apps, remounting a view — would otherwise replay
+    // the fade on content that never changed, which reads as a twitch.
+    expect(renderFooter().dataset.animate).toBe("true");
+    cleanup();
+    expect(renderFooter().dataset.animate).toBeUndefined();
+    cleanup();
+    expect(renderFooter().dataset.animate).toBeUndefined();
+  });
+});
+
+describe("NavFooter — separators", () => {
+  it("never renders a divider beside a row that renders nothing", () => {
+    // Dividers are CSS between adjacent non-empty slots, so an extras element
+    // that returns null (the linked org's link-account CTA) can't leave a line.
+    const { container } = render(
+      withProviders(
+        <NavFooter
+          displayName="admin"
+          onOpenSettings={() => {}}
+          credits={null}
+          otherApp={null}
+          accountExtras={<>{null}</>}
+        />,
+      ),
+    );
+    const slots = container.querySelectorAll(".nav-footer__slot");
+    const filled = [...slots].filter((s) => s.childElementCount > 0);
+    expect(filled).toHaveLength(1);
+    expect(container.querySelectorAll(".nav-footer__divider")).toHaveLength(0);
+  });
+});
diff --git a/frontend/editor/src/core/components/shared/navFooter/NavFooter.tsx b/frontend/editor/src/core/components/shared/navFooter/NavFooter.tsx
new file mode 100644
index 0000000000..373c91bccf
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/navFooter/NavFooter.tsx
@@ -0,0 +1,213 @@
+import { useState, type ReactNode } from "react";
+import { useTranslation } from "react-i18next";
+import { Tooltip } from "@mantine/core";
+import ArrowForwardIcon from "@mui/icons-material/ArrowForward";
+import SettingsIcon from "@mui/icons-material/Settings";
+import { Avatar, NavSurface } from "@app/ui";
+import { BrandMark } from "@app/components/shared/BrandMark";
+import { type AppSwitchTarget } from "@app/components/shared/AppSwitch";
+import {
+  NavFooterCreditsRow,
+  type NavFooterCredits,
+} from "@app/components/shared/navFooter/NavFooterCreditsRow";
+import "@app/components/shared/navFooter/NavFooter.css";
+
+export interface NavFooterAppLink {
+  /** The app this footer is NOT in — the one the row opens. */
+  app: AppSwitchTarget;
+  onOpen: () => void;
+}
+
+export interface NavFooterProps {
+  /** Name shown next to the avatar, and the source of its initials fallback. */
+  displayName: string;
+  /** Profile picture; initials are drawn when absent or the URL fails to load. */
+  profilePictureUrl?: string | null;
+  /** Omit to render the account row as static text (no settings affordance). */
+  onOpenSettings?: () => void;
+  /** Null/undefined hides the meter — builds with no wallet never show it. */
+  credits?: NavFooterCredits | null;
+  /** Opens the plan surface from the credits row; omit to leave it inert. */
+  onOpenPlan?: () => void;
+  /** Null/undefined hides the switch row — e.g. no access to the other app. */
+  otherApp?: NavFooterAppLink | null;
+  /** Extra rows above the account row (the self-hosted link-account CTA). */
+  accountExtras?: ReactNode;
+  /** Icon-rail state: labels collapse to tooltips. */
+  collapsed?: boolean;
+  className?: string;
+}
+
+/**
+ * Whether the enter animation has already played this page session. The rows
+ * are seeded from cache now, so they're present from first paint and every
+ * later mount — switching apps, remounting a view — would otherwise replay the
+ * animation on content that never changed, which reads as the UI twitching.
+ */
+let hasPlayedEnter = false;
+
+/**
+ * The bottom section every sidebar ends with, shared by the editor and the
+ * processor so both present the same rows. ONE surface, hairline-separated, in
+ * this order:
+ *
+ *   1. caller-contributed rows (the self-hosted link-account CTA)
+ *   2. free credits remaining
+ *   3. "Open <the other app>"
+ *   4. the account row — avatar, name, settings
+ *
+ * Purely presentational: each app resolves its own identity, wallet and
+ * app-switch access and passes them in, so this file carries no build-specific
+ * gating. A row whose data is absent is dropped, and so is the separator that
+ * would have sat beside it.
+ */
+export function NavFooter({
+  displayName,
+  profilePictureUrl,
+  onOpenSettings,
+  credits,
+  onOpenPlan,
+  otherApp,
+  accountExtras,
+  collapsed = false,
+  className,
+}: NavFooterProps) {
+  const { t } = useTranslation();
+  const [animate] = useState(() => {
+    if (hasPlayedEnter) return false;
+    hasPlayedEnter = true;
+    return true;
+  });
+
+  const settingsLabel = t("fileSidebar.openSettings", "Open settings");
+  const accountLabel = onOpenSettings
+    ? `${displayName} - ${settingsLabel}`
+    : displayName;
+
+  // One surface, hairline-separated rows. Each row gets a slot; the separators
+  // are drawn by CSS between adjacent NON-EMPTY slots (see NavFooter.css), so a
+  // row that renders nothing — the link-account CTA returns null once the org is
+  // linked, and an element is truthy even then — can't leave a line behind.
+  const rows: Array<{ key: string; node: ReactNode }> = [];
+
+  if (accountExtras) rows.push({ key: "extras", node: accountExtras });
+
+  if (credits) {
+    rows.push({
+      key: "credits",
+      node: (
+        <NavFooterCreditsRow
+          credits={credits}
+          collapsed={collapsed}
+          label={t("navFooter.credits.label", "Free credits")}
+          onOpen={onOpenPlan}
+        />
+      ),
+    });
+  }
+
+  if (otherApp) {
+    rows.push({
+      key: "switch",
+      node: (
+        <Tooltip
+          label={openAppLabel(otherApp.app, t)}
+          position="right"
+          withinPortal
+          disabled={!collapsed}
+        >
+          <button
+            type="button"
+            className="nav-footer__row"
+            onClick={() => otherApp.onOpen()}
+            // Collapsed drops the visible label, so name the button here too.
+            aria-label={openAppLabel(otherApp.app, t)}
+          >
+            <span className="nav-footer__row-icon" aria-hidden>
+              <BrandMark height="1.125rem" />
+            </span>
+            {!collapsed && (
+              <>
+                <span className="nav-footer__row-label">
+                  {openAppLabel(otherApp.app, t)}
+                </span>
+                {/* "Takes you there", not "opens a new tab" — both apps are
+                    one SPA, so this navigates in place. */}
+                <span className="nav-footer__trailing" aria-hidden>
+                  <ArrowForwardIcon sx={{ fontSize: "1rem" }} />
+                </span>
+              </>
+            )}
+          </button>
+        </Tooltip>
+      ),
+    });
+  }
+
+  rows.push({
+    key: "account",
+    node: (
+      <Tooltip
+        label={accountLabel}
+        position="right"
+        withinPortal
+        disabled={!collapsed}
+      >
+        <button
+          type="button"
+          className="nav-footer__row nav-footer__account"
+          // Called with no args: handlers that take optional params (the
+          // processor's openSettings(section?)) must not receive the event.
+          onClick={onOpenSettings ? () => onOpenSettings() : undefined}
+          disabled={!onOpenSettings}
+          data-testid={onOpenSettings ? "config-button" : undefined}
+          data-tour={onOpenSettings ? "config-button" : undefined}
+          aria-label={accountLabel}
+        >
+          {/* Decorative: the button's own label already names the account, so
+              an alt/label here would just repeat it to a screen reader. */}
+          <span aria-hidden>
+            <Avatar
+              size="sm"
+              name={displayName}
+              src={profilePictureUrl ?? undefined}
+            />
+          </span>
+          {!collapsed && (
+            <span className="nav-footer__row-label sidebar-content-fade">
+              {displayName}
+            </span>
+          )}
+          {onOpenSettings && !collapsed && (
+            <span className="nav-footer__trailing" aria-hidden>
+              <SettingsIcon sx={{ fontSize: "1.1rem" }} />
+            </span>
+          )}
+        </button>
+      </Tooltip>
+    ),
+  });
+
+  return (
+    <NavSurface
+      className={["nav-footer", className ?? ""].filter(Boolean).join(" ")}
+      data-collapsed={collapsed || undefined}
+      data-animate={animate || undefined}
+    >
+      {rows.map((row) => (
+        <div key={row.key} className="nav-footer__slot">
+          {row.node}
+        </div>
+      ))}
+    </NavSurface>
+  );
+}
+
+function openAppLabel(
+  app: AppSwitchTarget,
+  t: (key: string, fallback: string) => string,
+): string {
+  return app === "editor"
+    ? t("navFooter.openEditor", "Open PDF Editor")
+    : t("navFooter.openProcessor", "Open PDF Processor");
+}
diff --git a/frontend/editor/src/core/components/shared/navFooter/NavFooterCreditsRow.css b/frontend/editor/src/core/components/shared/navFooter/NavFooterCreditsRow.css
new file mode 100644
index 0000000000..b37def6b2d
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/navFooter/NavFooterCreditsRow.css
@@ -0,0 +1,83 @@
+/* Free-credits meter inside the sidebar footer. The row base (padding, hover,
+   focus) comes from NavFooter.css; these rules are the meter itself. */
+
+.nav-footer__credits {
+  flex-direction: column;
+  align-items: stretch;
+  gap: 0.375rem;
+  cursor: default;
+}
+
+/* Inert by default, so it must not read as hoverable; the actionable variant
+   opts back into the shared row hover. */
+.nav-footer__credits:hover {
+  background: none;
+}
+
+.nav-footer__credits--actionable {
+  cursor: pointer;
+}
+.nav-footer__credits--actionable:hover {
+  background-color: var(--c-hover);
+}
+
+.nav-footer__credits-head {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  font-size: 0.8125rem;
+}
+
+.nav-footer__dot {
+  width: 0.4375rem;
+  height: 0.4375rem;
+  border-radius: 50%;
+  flex-shrink: 0;
+  background-color: var(--c-success);
+}
+.nav-footer__dot[data-tone="warning"] {
+  background-color: var(--c-warning);
+}
+.nav-footer__dot[data-tone="danger"] {
+  background-color: var(--c-danger);
+}
+
+.nav-footer__credits-label {
+  flex: 1;
+  min-width: 0;
+  font-weight: 500;
+  color: var(--c-text);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+}
+
+.nav-footer__credits-count {
+  flex-shrink: 0;
+  color: var(--c-text-muted);
+  font-variant-numeric: tabular-nums;
+}
+
+/* ---- Collapsed rail ---- */
+
+/* Rotated so the fill starts at 12 o'clock and runs clockwise. */
+.nav-footer__credits-ring {
+  width: 1.25rem;
+  height: 1.25rem;
+  margin-inline: auto;
+  transform: rotate(-90deg);
+}
+
+.nav-footer__credits-ring-track,
+.nav-footer__credits-ring-fill {
+  fill: none;
+  stroke-width: 3;
+}
+
+.nav-footer__credits-ring-track {
+  stroke: var(--c-surface-sunken);
+}
+
+.nav-footer__credits-ring-fill {
+  stroke-linecap: round;
+}
diff --git a/frontend/editor/src/core/components/shared/navFooter/NavFooterCreditsRow.tsx b/frontend/editor/src/core/components/shared/navFooter/NavFooterCreditsRow.tsx
new file mode 100644
index 0000000000..94e941d71c
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/navFooter/NavFooterCreditsRow.tsx
@@ -0,0 +1,158 @@
+import type { ReactNode } from "react";
+import { useTranslation } from "react-i18next";
+import { Tooltip } from "@mantine/core";
+import { ProgressBar } from "@app/ui";
+import "@app/components/shared/navFooter/NavFooterCreditsRow.css";
+
+export interface NavFooterCredits {
+  /** Free credits still available to spend. */
+  remaining: number;
+  /** Size of the free allowance — the "of N" denominator. */
+  total: number;
+}
+
+/** Remaining-credit bands, mirroring the usage meters' 80% / 100% thresholds. */
+function creditsTone(remaining: number, total: number): string {
+  if (remaining <= 0) return "danger";
+  return total > 0 && remaining / total <= 0.2 ? "warning" : "success";
+}
+
+interface NavFooterCreditsRowProps {
+  credits: NavFooterCredits;
+  /** Icon rail: the figures drop and the bar alone carries the state. */
+  collapsed: boolean;
+  /** Row label, passed in so the meter owns no copy of its own. */
+  label: string;
+  /** Opens the plan surface. Omit to render the meter as inert text. */
+  onOpen?: () => void;
+}
+
+/**
+ * The free-credits meter as it appears in the sidebar footer: a state dot, the
+ * label, "X of Y" remaining, and a fill bar underneath. Figures are clamped
+ * here so a wallet that reports more remaining than the allowance (or negative)
+ * can't overflow the bar.
+ *
+ * Rendered as a {@code nav-footer__row}, so it inherits that row's metrics
+ * from NavFooter.css and only brings its own meter styling.
+ */
+export function NavFooterCreditsRow({
+  credits,
+  collapsed,
+  label,
+  onOpen,
+}: NavFooterCreditsRowProps) {
+  const { t } = useTranslation();
+
+  const total = Math.max(0, credits.total);
+  const remaining = Math.min(Math.max(0, credits.remaining), total);
+  const tone = creditsTone(remaining, total);
+  const count = t("navFooter.credits.count", "{{remaining}} of {{total}}", {
+    remaining: remaining.toLocaleString(),
+    total: total.toLocaleString(),
+  });
+
+  return (
+    <Tooltip
+      label={`${label}: ${count}`}
+      position="right"
+      withinPortal
+      disabled={!collapsed}
+    >
+      <Row onOpen={onOpen} label={`${label}: ${count}`}>
+        {collapsed ? (
+          // The rail is one icon wide, so a full-width bar would read as a
+          // stray line; a ring carries the same fraction at icon size.
+          <CreditsRing
+            fraction={total > 0 ? remaining / total : 0}
+            tone={tone}
+            label={`${label}: ${count}`}
+          />
+        ) : (
+          <>
+            <div className="nav-footer__credits-head">
+              <span className="nav-footer__dot" data-tone={tone} aria-hidden />
+              <span className="nav-footer__credits-label">{label}</span>
+              <span className="nav-footer__credits-count">{count}</span>
+            </div>
+            <ProgressBar
+              value={total > 0 ? remaining / total : 0}
+              height={6}
+              color={`var(--c-${tone})`}
+              label={`${label}: ${count}`}
+            />
+          </>
+        )}
+      </Row>
+    </Tooltip>
+  );
+}
+
+/** Icon-sized donut carrying the same remaining fraction as the expanded bar. */
+function CreditsRing({
+  fraction,
+  tone,
+  label,
+}: {
+  fraction: number;
+  tone: string;
+  label: string;
+}) {
+  const RADIUS = 8;
+  const circumference = 2 * Math.PI * RADIUS;
+  const filled = Math.min(1, Math.max(0, fraction)) * circumference;
+
+  return (
+    <svg
+      className="nav-footer__credits-ring"
+      viewBox="0 0 20 20"
+      role="img"
+      aria-label={label}
+    >
+      <circle
+        className="nav-footer__credits-ring-track"
+        cx="10"
+        cy="10"
+        r={RADIUS}
+      />
+      <circle
+        className="nav-footer__credits-ring-fill"
+        cx="10"
+        cy="10"
+        r={RADIUS}
+        stroke={`var(--c-${tone})`}
+        strokeDasharray={`${filled} ${circumference - filled}`}
+      />
+    </svg>
+  );
+}
+
+/**
+ * The meter is a button only where there is a plan surface to open — otherwise
+ * it stays a plain div, so a build with nowhere to go doesn't advertise a
+ * click that does nothing.
+ */
+function Row({
+  onOpen,
+  label,
+  children,
+}: {
+  onOpen?: () => void;
+  label: string;
+  children: ReactNode;
+}) {
+  const className = `nav-footer__row nav-footer__credits${
+    onOpen ? " nav-footer__credits--actionable" : ""
+  }`;
+  if (!onOpen) return <div className={className}>{children}</div>;
+  return (
+    <button
+      type="button"
+      className={className}
+      onClick={() => onOpen()}
+      aria-label={label}
+    >
+      {children}
+    </button>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/superSearch/SuperSearch.css b/frontend/editor/src/core/components/shared/superSearch/SuperSearch.css
index 6920c37be4..67d724eb7a 100644
--- a/frontend/editor/src/core/components/shared/superSearch/SuperSearch.css
+++ b/frontend/editor/src/core/components/shared/superSearch/SuperSearch.css
@@ -36,8 +36,11 @@
   border-color: var(--c-primary);
 }
 
-/* Keyboard-shortcut hint pinned to the right of the input. */
+/* Keyboard-shortcut hint pinned to the right of the input. Hidden by default
+   and opted back in below, so the two rules that must agree - showing the chip
+   and reserving room for it - are keyed on one condition and cannot drift. */
 .super-search-kbd {
+  display: none;
   position: absolute;
   right: 0.5rem;
   top: 50%;
@@ -54,6 +57,15 @@
   letter-spacing: 0.06em;
 }
 
+/* Only where the shortcut is pressable and the pill has room for it. Below the
+   mobile breakpoint the chip used to sit over the input - it has no padding of
+   its own - so the placeholder ran underneath it instead of ellipsising. */
+@media (min-width: 64.0625rem) and (not (pointer: coarse)) {
+  .super-search-kbd {
+    display: inline-block;
+  }
+}
+
 /* Portalled to <body>; coords are set inline from the input's viewport rect. */
 .super-search-dropdown {
   position: fixed;
@@ -209,9 +221,6 @@
 }
 
 .super-search-item {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
   width: 100%;
   padding: 0.45rem 0.5rem;
   border: none;
@@ -227,6 +236,18 @@
   background: var(--c-hover);
 }
 
+.super-search-item .mantine-Button-inner {
+  width: 100%;
+}
+
+.super-search-item .mantine-Button-label {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  width: 100%;
+  overflow: visible;
+}
+
 .super-search-item-icon {
   display: flex;
   align-items: center;
@@ -241,6 +262,7 @@
   display: flex;
   flex-direction: column;
   min-width: 0;
+  flex: 1 1 auto;
 }
 
 .super-search-item-title {
diff --git a/frontend/editor/src/core/components/shared/superSearch/SuperSearch.tsx b/frontend/editor/src/core/components/shared/superSearch/SuperSearch.tsx
index 6afcdfff82..054e99cfde 100644
--- a/frontend/editor/src/core/components/shared/superSearch/SuperSearch.tsx
+++ b/frontend/editor/src/core/components/shared/superSearch/SuperSearch.tsx
@@ -14,6 +14,7 @@ import { Chip } from "@app/ui/Chip";
 import { TextInput } from "@app/components/shared/TextInput";
 import LocalIcon from "@app/components/shared/LocalIcon";
 import { isMacLike } from "@app/utils/hotkeys";
+import { useIsMobile } from "@app/hooks/useIsMobile";
 import {
   useSuperSearch,
   SuperSearchResult,
@@ -288,16 +289,25 @@ export default function SuperSearch({
       inputRef.current?.select();
     };
     // Focus handover from a closing dialog. Only the on-screen instance
-    // responds (offsetParent is null while display:none / unmounted hosts),
-    // and focus waits two frames so the dialog's own return-focus runs first.
+    // responds (offsetParent is null while a host is display:none / unmounted).
     const onFocusRequest = () => {
       const input = inputRef.current;
       if (!input || input.offsetParent === null) return;
       setOpen(true);
+      const grab = () => {
+        input.focus();
+        input.select();
+      };
       requestAnimationFrame(() =>
         requestAnimationFrame(() => {
-          input.focus();
-          input.select();
+          grab();
+          // The dialog's return-focus fires shortly after it closes and steals
+          // focus back once; re-grab it if that happens.
+          input.addEventListener("focusout", grab, { once: true });
+          window.setTimeout(
+            () => input.removeEventListener("focusout", grab),
+            250,
+          );
         }),
       );
     };
@@ -373,6 +383,7 @@ export default function SuperSearch({
     }
   };
 
+  const isMobile = useIsMobile();
   const shortcutHint = useMemo(() => (isMacLike() ? "⌘K" : "Ctrl+K"), []);
 
   const toggleScope = useCallback(
@@ -627,7 +638,11 @@ export default function SuperSearch({
           ref={inputRef}
           value={query}
           onChange={setQuery}
-          placeholder={t("superSearch.placeholder", "Search Stirling")}
+          placeholder={
+            isMobile
+              ? t("superSearch.placeholderShort", "Search")
+              : t("superSearch.placeholder", "Search Stirling")
+          }
           icon={
             <LocalIcon icon="search-rounded" width="1.1rem" height="1.1rem" />
           }
diff --git a/frontend/editor/src/core/components/shared/textInput/TextInput.module.css b/frontend/editor/src/core/components/shared/textInput/TextInput.module.css
index b5131b014f..0b6a38c7af 100644
--- a/frontend/editor/src/core/components/shared/textInput/TextInput.module.css
+++ b/frontend/editor/src/core/components/shared/textInput/TextInput.module.css
@@ -52,22 +52,29 @@
 
 .clearButton {
   position: absolute;
-  right: 8px;
+  right: 6px;
   top: 50%;
   transform: translateY(-50%);
-  background: none;
-  border: none;
-  cursor: pointer;
-  padding: 4px;
-  border-radius: 4px;
-  display: flex;
+  --ai-size: 1.35rem !important;
+  width: 1.35rem !important;
+  height: 1.35rem !important;
+  min-width: 1.35rem !important;
+  min-height: 1.35rem !important;
+  padding: 0 !important;
+  display: inline-flex;
   align-items: center;
   justify-content: center;
-  font-size: 16px;
-  transition: background-color 0.2s ease;
+  border-radius: var(--radius-full, 9999px);
+  background: transparent;
+  border: none;
+  cursor: pointer;
   color: var(--c-text-subtle);
+  transition:
+    background-color 0.15s ease,
+    color 0.15s ease;
 }
 
 .clearButton:hover {
-  background-color: var(--c-hover);
+  color: var(--c-text);
+  background-color: var(--c-hover) !important;
 }
diff --git a/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarDesktopActions.tsx b/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarDesktopActions.tsx
new file mode 100644
index 0000000000..e2070d6711
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarDesktopActions.tsx
@@ -0,0 +1,121 @@
+import React from "react";
+import { useTranslation } from "react-i18next";
+import CloseIcon from "@mui/icons-material/Close";
+import PrintIcon from "@mui/icons-material/Print";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import LocalIcon from "@app/components/shared/LocalIcon";
+import {
+  PolicyEnforcingTooltip,
+  renderWithTooltip,
+} from "@app/components/shared/workbenchBar/workbenchBarTooltip";
+import { WorkbenchBarActionsProps } from "@app/components/shared/workbenchBar/types";
+
+interface WorkbenchBarDesktopActionsProps extends WorkbenchBarActionsProps {
+  /** Percentage through the enforcing policy run, when it reports steps. */
+  enforcingProgress?: number;
+}
+
+/**
+ * Desktop version of the workbench bar's global actions: print / export /
+ * save-as sit as icons, with close split off behind a separator.
+ */
+export default function WorkbenchBarDesktopActions({
+  currentView,
+  isCustomView,
+  actionsDisabled,
+  policyEnforcing,
+  downloadLabel,
+  downloadIconName,
+  saveAsIconName,
+  onPrint,
+  onExport,
+  onClose,
+  enforcingProgress,
+}: WorkbenchBarDesktopActionsProps) {
+  const { t } = useTranslation();
+  const exportDisabled = actionsDisabled || policyEnforcing;
+  const closeLabel =
+    currentView === "fileEditor"
+      ? t("workbenchBar.closeAll", "Close All")
+      : t("workbenchBar.closePdf", "Close PDF");
+
+  // Policy enforcement replaces the plain label with a "why is this blocked" card.
+  const tooltipFor = (label: string): React.ReactNode =>
+    policyEnforcing ? (
+      <PolicyEnforcingTooltip action={label} progress={enforcingProgress} />
+    ) : (
+      label
+    );
+
+  return (
+    <>
+      {currentView === "viewer" &&
+        renderWithTooltip(
+          <ActionIcon
+            variant="tertiary"
+            hover={false}
+            className="workbench-bar-action-icon"
+            onClick={onPrint}
+            disabled={exportDisabled}
+            aria-label={t("workbenchBar.print", "Print PDF")}
+          >
+            <PrintIcon sx={{ fontSize: "1rem" }} />
+          </ActionIcon>,
+          tooltipFor(t("workbenchBar.print", "Print PDF")),
+        )}
+
+      {/* Download (file-level action — not relevant in custom views) */}
+      {!isCustomView &&
+        renderWithTooltip(
+          <ActionIcon
+            variant="tertiary"
+            hover={false}
+            className="workbench-bar-action-icon"
+            onClick={() => onExport()}
+            disabled={exportDisabled}
+            aria-label={downloadLabel}
+          >
+            <LocalIcon icon={downloadIconName} width="1rem" height="1rem" />
+          </ActionIcon>,
+          tooltipFor(downloadLabel),
+        )}
+
+      {!isCustomView &&
+        saveAsIconName &&
+        renderWithTooltip(
+          <ActionIcon
+            variant="tertiary"
+            hover={false}
+            className="workbench-bar-action-icon"
+            onClick={() => onExport(true)}
+            disabled={exportDisabled}
+            aria-label={t("workbenchBar.saveAs", "Save As")}
+          >
+            <LocalIcon icon={saveAsIconName} width="1rem" height="1rem" />
+          </ActionIcon>,
+          tooltipFor(t("workbenchBar.saveAs", "Save As")),
+        )}
+
+      {/* Separator: export group | close */}
+      {!isCustomView && (
+        <div className="workbench-bar-divider workbench-bar-globals-sep" />
+      )}
+
+      {/* Close (context-aware: close all / close viewer file / close page editor) */}
+      {!isCustomView &&
+        renderWithTooltip(
+          <ActionIcon
+            variant="tertiary"
+            hover={false}
+            className="workbench-bar-action-icon"
+            onClick={onClose}
+            disabled={actionsDisabled}
+            aria-label={closeLabel}
+          >
+            <CloseIcon sx={{ fontSize: "1rem" }} />
+          </ActionIcon>,
+          closeLabel,
+        )}
+    </>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarMobileActions.tsx b/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarMobileActions.tsx
new file mode 100644
index 0000000000..7675c37e33
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarMobileActions.tsx
@@ -0,0 +1,101 @@
+import { Menu } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import CloseIcon from "@mui/icons-material/Close";
+import MoreVertIcon from "@mui/icons-material/MoreVert";
+import PrintIcon from "@mui/icons-material/Print";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import LocalIcon from "@app/components/shared/LocalIcon";
+import { WorkbenchBarActionsProps } from "@app/components/shared/workbenchBar/types";
+
+/**
+ * Mobile version of the workbench bar's global actions: the icon row won't fit
+ * on a phone, so print / export / save-as / close collapse into one overflow menu.
+ */
+export default function WorkbenchBarMobileActions({
+  currentView,
+  isCustomView,
+  actionsDisabled,
+  policyEnforcing,
+  downloadLabel,
+  downloadIconName,
+  saveAsIconName,
+  onPrint,
+  onExport,
+  onClose,
+}: WorkbenchBarActionsProps) {
+  const { t } = useTranslation();
+  const exportDisabled = actionsDisabled || policyEnforcing;
+  const showPrint = currentView === "viewer";
+  const showFileActions = !isCustomView;
+
+  // Custom workbench views own their content, so none of these apply. The
+  // desktop cluster renders nothing at all in that case; without this the
+  // trigger would still be there, opening an empty dropdown.
+  if (!showPrint && !showFileActions) return null;
+
+  return (
+    <Menu shadow="md" width={230} position="bottom-end">
+      <Menu.Target>
+        <ActionIcon
+          variant="tertiary"
+          hover={false}
+          className="workbench-bar-action-icon"
+          aria-label={t("workbenchBar.moreActions", "More actions")}
+        >
+          <MoreVertIcon sx={{ fontSize: "1.25rem" }} />
+        </ActionIcon>
+      </Menu.Target>
+      <Menu.Dropdown>
+        {showPrint && (
+          <Menu.Item
+            leftSection={<PrintIcon sx={{ fontSize: "1.1rem" }} />}
+            disabled={exportDisabled}
+            onClick={onPrint}
+          >
+            {t("workbenchBar.print", "Print PDF")}
+          </Menu.Item>
+        )}
+        {showFileActions && (
+          <Menu.Item
+            leftSection={
+              <LocalIcon
+                icon={downloadIconName}
+                width="1.1rem"
+                height="1.1rem"
+              />
+            }
+            disabled={exportDisabled}
+            onClick={() => void onExport()}
+          >
+            {downloadLabel}
+          </Menu.Item>
+        )}
+        {showFileActions && saveAsIconName && (
+          <Menu.Item
+            leftSection={
+              <LocalIcon icon={saveAsIconName} width="1.1rem" height="1.1rem" />
+            }
+            disabled={exportDisabled}
+            onClick={() => void onExport(true)}
+          >
+            {t("workbenchBar.saveAs", "Save As")}
+          </Menu.Item>
+        )}
+        {showFileActions && (
+          <>
+            <Menu.Divider />
+            <Menu.Item
+              leftSection={<CloseIcon sx={{ fontSize: "1.1rem" }} />}
+              disabled={actionsDisabled}
+              onClick={() => void onClose()}
+            >
+              {currentView === "fileEditor"
+                ? t("workbenchBar.closeAll", "Close All")
+                : t("workbenchBar.closePdf", "Close PDF")}
+            </Menu.Item>
+          </>
+        )}
+      </Menu.Dropdown>
+    </Menu>
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarToolbarHandle.tsx b/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarToolbarHandle.tsx
new file mode 100644
index 0000000000..0b971bc991
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/workbenchBar/WorkbenchBarToolbarHandle.tsx
@@ -0,0 +1,67 @@
+import { useTranslation } from "react-i18next";
+import KeyboardArrowDownIcon from "@mui/icons-material/KeyboardArrowDown";
+import KeyboardArrowUpIcon from "@mui/icons-material/KeyboardArrowUp";
+import { Button } from "@app/ui/Button";
+
+interface WorkbenchBarToolbarHandleProps {
+  isMobile: boolean;
+  /** Mobile only: whether the tool row is showing every tool rather than scrolling. */
+  expanded: boolean;
+  onToggleExpanded: () => void;
+  /** Desktop viewer only: retracts the whole tool row. Omit to render no handle. */
+  onRetract?: () => void;
+}
+
+/**
+ * Handle pinned to the right of the tool row. On mobile it expands the row from
+ * a single scrolling line to a wrapped grid; on the desktop viewer it retracts
+ * the row entirely.
+ */
+export default function WorkbenchBarToolbarHandle({
+  isMobile,
+  expanded,
+  onToggleExpanded,
+  onRetract,
+}: WorkbenchBarToolbarHandleProps) {
+  const { t } = useTranslation();
+
+  if (isMobile) {
+    return (
+      <Button
+        type="button"
+        variant="quiet"
+        size="lg"
+        className="workbench-bar-toolbar-handle workbench-bar-toolbar-handle-expand"
+        onClick={onToggleExpanded}
+        aria-expanded={expanded}
+        aria-label={
+          expanded
+            ? t("workbenchBar.showFewerTools", "Collapse toolbar")
+            : t("workbenchBar.showAllTools", "Show all tools")
+        }
+        leftSection={
+          expanded ? (
+            <KeyboardArrowUpIcon sx={{ fontSize: "1.25rem" }} />
+          ) : (
+            <KeyboardArrowDownIcon sx={{ fontSize: "1.25rem" }} />
+          )
+        }
+      />
+    );
+  }
+
+  if (!onRetract) return null;
+
+  return (
+    <Button
+      type="button"
+      variant="quiet"
+      className="workbench-bar-toolbar-handle workbench-bar-toolbar-handle-retract"
+      onClick={onRetract}
+      aria-expanded
+      aria-label={t("workbenchBar.hideToolbar", "Hide toolbar")}
+      title={t("workbenchBar.hideToolbar", "Hide toolbar")}
+      leftSection={<KeyboardArrowUpIcon sx={{ fontSize: "1rem" }} />}
+    />
+  );
+}
diff --git a/frontend/editor/src/core/components/shared/workbenchBar/types.ts b/frontend/editor/src/core/components/shared/workbenchBar/types.ts
new file mode 100644
index 0000000000..7ec30c5cec
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/workbenchBar/types.ts
@@ -0,0 +1,20 @@
+import { WorkbenchType } from "@app/types/workbench";
+
+/** Shared shape for the workbench bar's file-level global actions (print,
+ *  export, save-as, close) so the mobile and desktop clusters stay in step. */
+export interface WorkbenchBarActionsProps {
+  currentView: WorkbenchType;
+  /** Custom workbench views own their content, so file actions don't apply. */
+  isCustomView: boolean;
+  /** No files to act on, or the bar is globally locked out. */
+  actionsDisabled: boolean;
+  /** A policy run is enforcing on a file the export would touch. */
+  policyEnforcing: boolean;
+  /** Context-aware label for the download/export action. */
+  downloadLabel: string;
+  downloadIconName: string;
+  saveAsIconName?: string;
+  onPrint: () => void;
+  onExport: (forceNewFile?: boolean) => void;
+  onClose: () => void;
+}
diff --git a/frontend/editor/src/core/components/shared/workbenchBar/workbenchBarTooltip.tsx b/frontend/editor/src/core/components/shared/workbenchBar/workbenchBarTooltip.tsx
new file mode 100644
index 0000000000..e7a0b482ee
--- /dev/null
+++ b/frontend/editor/src/core/components/shared/workbenchBar/workbenchBarTooltip.tsx
@@ -0,0 +1,66 @@
+import React from "react";
+import { Group, Loader, Progress, Stack, Text } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import ShieldOutlinedIcon from "@mui/icons-material/ShieldOutlined";
+import { Tooltip } from "@app/components/shared/Tooltip";
+
+/** Wrap a bar control in the bar's standard tooltip, or pass it through when
+ *  the caller has no tooltip to show. */
+export function renderWithTooltip(
+  node: React.ReactNode,
+  tooltip: React.ReactNode | undefined,
+) {
+  if (!tooltip) return node;
+  return (
+    <Tooltip
+      content={tooltip}
+      position="bottom"
+      offset={6}
+      arrow
+      portalTarget={typeof document !== "undefined" ? document.body : undefined}
+    >
+      <div className="workbench-bar-tooltip-wrapper">{node}</div>
+    </Tooltip>
+  );
+}
+
+interface PolicyEnforcingTooltipProps {
+  /** The blocked action's label, e.g. "Print PDF". */
+  action: string;
+  /** Percentage through the enforcing run, when the run reports steps. */
+  progress?: number;
+}
+
+/** Tooltip body explaining that a file action is blocked by a policy run. */
+export function PolicyEnforcingTooltip({
+  action,
+  progress,
+}: PolicyEnforcingTooltipProps) {
+  const { t } = useTranslation();
+  return (
+    <Stack gap={6} py={2} w={200}>
+      <Group gap={6} wrap="nowrap">
+        <ShieldOutlinedIcon style={{ fontSize: 13 }} />
+        <Text size="xs" fw={600}>
+          {t(
+            "policy.blockingAction",
+            "{{action}} blocked while enforcing policy, please wait",
+            { action },
+          )}
+        </Text>
+      </Group>
+      {progress != null ? (
+        <Progress
+          w="100%"
+          size="xs"
+          radius="xl"
+          value={progress}
+          striped
+          animated
+        />
+      ) : (
+        <Loader size="xs" />
+      )}
+    </Stack>
+  );
+}
diff --git a/frontend/editor/src/core/components/tools/RightSidebar.tsx b/frontend/editor/src/core/components/tools/RightSidebar.tsx
index d6cd86868b..a4bdbced7e 100644
--- a/frontend/editor/src/core/components/tools/RightSidebar.tsx
+++ b/frontend/editor/src/core/components/tools/RightSidebar.tsx
@@ -237,7 +237,10 @@ export default function RightSidebar() {
                     : t("toolPanel.goBack", "Go back")
                 }
               />
-            ) : (
+            ) : showCloseButton || !isMobile ? (
+              /* Without a back button this header is just the collapse control,
+                 which has no meaning on mobile - the slider switches panes. Drop
+                 it there so the tool list starts under the tabs. */
               <div className="tool-panel__compact-header">
                 <span className="tool-panel__compact-title">
                   {t("toolPanel.pdfTools", "PDF Tools")}
@@ -272,13 +275,16 @@ export default function RightSidebar() {
                   )}
                 </div>
               </div>
-            )}
+            ) : null}
 
             <ToolPanel
               allToolsView={allToolsView}
               onShowAllTools={handleShowAllTools}
               onToolSelect={handleToolSelectWithTransition}
               compact={false}
+              /* Mobile keeps the workbench bar - and with it the super search -
+                 on the other slide, so the list needs its own filter. */
+              showSearch={isMobile}
             />
           </>
         </div>
diff --git a/frontend/editor/src/core/components/tools/ToolPanel.css b/frontend/editor/src/core/components/tools/ToolPanel.css
index 0e93c414d8..3e3985103f 100644
--- a/frontend/editor/src/core/components/tools/ToolPanel.css
+++ b/frontend/editor/src/core/components/tools/ToolPanel.css
@@ -169,6 +169,31 @@
   color: var(--c-text);
 }
 
+/* On mobile the "Tools" tab sits directly above this panel, so the heading
+   just repeats it. The header stays for its actions, but shrinks to fit them -
+   at the desktop 52px it would read as an empty band once the title is gone. */
+@media (max-width: 64rem) {
+  .tool-panel__compact-title {
+    display: none;
+  }
+  .tool-panel__compact-header {
+    min-height: 44px;
+    padding-top: 0.25rem;
+    padding-bottom: 0.25rem;
+  }
+}
+
+/* In-panel tool filter. Aligned with .tool-picker__compact's inline padding so
+   the field lines up with the tool rows underneath it. */
+.tool-panel__search {
+  flex-shrink: 0;
+  padding: 0.5rem var(--mantine-spacing-sm) 0;
+}
+
+.tool-panel__search .search-input-container {
+  margin: 0;
+}
+
 .tool-panel__compact-header-actions {
   display: flex;
   align-items: center;
diff --git a/frontend/editor/src/core/components/tools/ToolPanel.tsx b/frontend/editor/src/core/components/tools/ToolPanel.tsx
index 2d6006a8eb..d51ec9e0bf 100644
--- a/frontend/editor/src/core/components/tools/ToolPanel.tsx
+++ b/frontend/editor/src/core/components/tools/ToolPanel.tsx
@@ -4,6 +4,7 @@ import { useToolWorkflow } from "@app/contexts/ToolWorkflowContext";
 import ToolPicker from "@app/components/tools/ToolPicker";
 import SearchResults from "@app/components/tools/SearchResults";
 import ToolRenderer from "@app/components/tools/ToolRenderer";
+import ToolSearch from "@app/components/tools/toolPicker/ToolSearch";
 import { ToolPanelViewerBar } from "@app/components/tools/ToolPanelViewerBar";
 import { ToolId } from "@app/types/toolId";
 
@@ -20,6 +21,11 @@ interface ToolPanelProps {
   onToolSelect?: (id: ToolId) => void;
   /** Whether to render the compact (favourites + recommended only) view. */
   compact?: boolean;
+  /**
+   * Render a tool filter at the head of the panel. Set where the workbench
+   * bar's super search is out of reach, so the list stays searchable in place.
+   */
+  showSearch?: boolean;
 }
 
 /** Tool list and renderer for the right rail; rail chrome lives in RightSidebar. */
@@ -28,24 +34,44 @@ export default function ToolPanel({
   onShowAllTools,
   onToolSelect,
   compact: compactProp,
+  showSearch = false,
 }: ToolPanelProps) {
   const { t } = useTranslation();
   const {
     leftPanelView,
     searchQuery,
+    setSearchQuery,
     filteredTools,
+    toolRegistry,
     selectedToolKey,
     handleToolSelect,
     setPreviewFile,
   } = useToolWorkflow();
   const selectTool = onToolSelect ?? handleToolSelect;
 
+  // Only offer the filter over the list itself; once a tool is open the panel
+  // belongs to that tool. Deriving the results branch from the same flag keeps
+  // the input and what it filters from drifting apart.
+  const panelSearch = showSearch && leftPanelView === "toolPicker";
+  const searching = searchQuery.trim().length > 0;
+
   return (
     <>
       {/* Viewer mode tools — annotate, redact, form fill */}
       <ToolPanelViewerBar />
 
-      {allToolsView && searchQuery.trim().length > 0 ? (
+      {panelSearch && (
+        <div className="tool-panel__search">
+          <ToolSearch
+            value={searchQuery}
+            onChange={setSearchQuery}
+            toolRegistry={toolRegistry}
+            mode="filter"
+          />
+        </div>
+      )}
+
+      {searching && (allToolsView || panelSearch) ? (
         <div className="flex-1 flex flex-col overflow-y-auto">
           <SearchResults
             filteredTools={filteredTools}
@@ -59,7 +85,7 @@ export default function ToolPanel({
             selectedToolKey={selectedToolKey}
             onSelect={(id) => selectTool(id as ToolId)}
             filteredTools={filteredTools}
-            isSearching={Boolean(searchQuery && searchQuery.trim().length > 0)}
+            isSearching={searching}
             compact={compactProp ?? !allToolsView}
             onShowAllTools={onShowAllTools}
           />
diff --git a/frontend/editor/src/core/components/tools/automate/AutomationCreation.tsx b/frontend/editor/src/core/components/tools/automate/AutomationCreation.tsx
index 65c50a3481..0e4926adbe 100644
--- a/frontend/editor/src/core/components/tools/automate/AutomationCreation.tsx
+++ b/frontend/editor/src/core/components/tools/automate/AutomationCreation.tsx
@@ -82,7 +82,7 @@ export default function AutomationCreation({
     setConfigModalOpen(true);
   };
 
-  const handleToolConfigSave = (parameters: Record<string, any>) => {
+  const handleToolConfigSave = (parameters: Record<string, unknown>) => {
     if (configuraingToolIndex >= 0) {
       updateTool(configuraingToolIndex, {
         configured: true,
diff --git a/frontend/editor/src/core/components/tools/automate/AutomationEntry.tsx b/frontend/editor/src/core/components/tools/automate/AutomationEntry.tsx
index 8ffbfeda81..a4a7c1d2ca 100644
--- a/frontend/editor/src/core/components/tools/automate/AutomationEntry.tsx
+++ b/frontend/editor/src/core/components/tools/automate/AutomationEntry.tsx
@@ -19,7 +19,7 @@ interface AutomationEntryProps {
   /** Optional description for tooltip */
   description?: string;
   /** MUI Icon component for the badge */
-  badgeIcon?: React.ComponentType<any>;
+  badgeIcon?: React.ComponentType;
   /** Array of tool operation names in the workflow */
   operations: string[];
   /** Click handler */
diff --git a/frontend/editor/src/core/components/tools/automate/AutomationRun.tsx b/frontend/editor/src/core/components/tools/automate/AutomationRun.tsx
index 2e3e5f1539..675372c12b 100644
--- a/frontend/editor/src/core/components/tools/automate/AutomationRun.tsx
+++ b/frontend/editor/src/core/components/tools/automate/AutomationRun.tsx
@@ -9,11 +9,12 @@ import { useToolRegistry } from "@app/contexts/ToolRegistryContext";
 import { AutomationConfig, ExecutionStep } from "@app/types/automation";
 import { EXECUTION_STATUS } from "@app/constants/automation";
 import { useResourceCleanup } from "@app/utils/resourceManager";
+import type { useAutomateOperation } from "@app/hooks/tools/automate/useAutomateOperation";
 
 interface AutomationRunProps {
   automation: AutomationConfig;
   onComplete: () => void;
-  automateOperation?: any; // TODO: Type this properly when available
+  automateOperation?: ReturnType<typeof useAutomateOperation>;
 }
 
 export default function AutomationRun({
@@ -34,13 +35,13 @@ export default function AutomationRun({
   // Use the operation hook's loading state
   const isExecuting = automateOperation?.isLoading || false;
   const hasResults =
-    automateOperation?.files.length > 0 ||
+    (automateOperation?.files.length ?? 0) > 0 ||
     automateOperation?.downloadUrl !== null;
 
   // Initialize execution steps from automation
   useEffect(() => {
     if (automation?.operations) {
-      const steps = automation.operations.map((op: any, index: number) => {
+      const steps = automation.operations.map((op, index) => {
         const tool = toolRegistry[op.operation as keyof typeof toolRegistry];
         return {
           id: `${op.operation}-${index}`,
@@ -125,7 +126,7 @@ export default function AutomationRun({
       // Mark all as completed and reset current step
       setCurrentStepIndex(-1);
       console.log(`✅ Automation completed successfully`);
-    } catch (error: any) {
+    } catch (error: unknown) {
       console.error("Automation execution failed:", error);
       setCurrentStepIndex(-1);
     }
diff --git a/frontend/editor/src/core/components/tools/automate/ToolSelector.tsx b/frontend/editor/src/core/components/tools/automate/ToolSelector.tsx
index ad7bb33a6e..2dd482863d 100644
--- a/frontend/editor/src/core/components/tools/automate/ToolSelector.tsx
+++ b/frontend/editor/src/core/components/tools/automate/ToolSelector.tsx
@@ -4,6 +4,7 @@ import { Stack, Text, ScrollArea } from "@mantine/core";
 import {
   ToolRegistryEntry,
   ToolRegistry,
+  SubcategoryId,
   getToolSupportsAutomate,
 } from "@app/data/toolsTaxonomy";
 import { useToolSections } from "@app/hooks/useToolSections";
@@ -81,9 +82,7 @@ export default function ToolSelector({
   }, [filteredTools]);
 
   // Use the same tool sections logic as the main ToolPicker
-  const { sections, searchGroups } = useToolSections(
-    transformedFilteredTools as any /* FIX ME */,
-  );
+  const { sections, searchGroups } = useToolSections(transformedFilteredTools);
 
   // Determine what to display: search results or organized sections
   const isSearching = searchTerm.trim().length > 0;
@@ -98,7 +97,9 @@ export default function ToolSelector({
         return [
           {
             name: "Tools",
-            subcategoryId: "all" as any,
+            // Synthetic "all tools" group used only as a fallback when the
+            // taxonomy produces no sections; "all" is not a real SubcategoryId.
+            subcategoryId: "all" as unknown as SubcategoryId,
             tools: baseFilteredTools.map(([key, tool]) => ({ id: key, tool })),
           },
         ];
@@ -125,7 +126,7 @@ export default function ToolSelector({
       displayGroups.map((subcategory) =>
         renderToolButtons(
           t,
-          subcategory as any,
+          subcategory,
           null,
           handleToolSelect,
           !isSearching,
diff --git a/frontend/editor/src/core/components/tools/changeMetadata/ChangeMetadataSingleStep.tsx b/frontend/editor/src/core/components/tools/changeMetadata/ChangeMetadataSingleStep.tsx
index 2eff20b23b..07ba4e7e05 100644
--- a/frontend/editor/src/core/components/tools/changeMetadata/ChangeMetadataSingleStep.tsx
+++ b/frontend/editor/src/core/components/tools/changeMetadata/ChangeMetadataSingleStep.tsx
@@ -1,5 +1,7 @@
+import { useContext, useEffect, useState } from "react";
 import { Stack, Divider, Text } from "@mantine/core";
 import { useTranslation } from "react-i18next";
+import { ViewerContext } from "@app/contexts/ViewerContext";
 import {
   ChangeMetadataParameters,
   createCustomMetadataFunctions,
@@ -19,6 +21,31 @@ interface ChangeMetadataSingleStepProps {
   disabled?: boolean;
 }
 
+/**
+ * Pre-fills the form from the currently open document's existing metadata.
+ * Isolated in its own component so it only mounts where a ViewerProvider exists
+ * (the editor and the in-editor Automate modal). The pipeline builder has no
+ * viewer and no single "current document", so it is skipped there rather than
+ * crashing on useViewer.
+ */
+const MetadataPrefill = ({
+  onParameterChange,
+  onExtractingChange,
+}: {
+  onParameterChange: ChangeMetadataSingleStepProps["onParameterChange"];
+  onExtractingChange: (extracting: boolean) => void;
+}) => {
+  const { isExtractingMetadata } = useMetadataExtraction({
+    updateParameter: onParameterChange,
+  });
+
+  useEffect(() => {
+    onExtractingChange(isExtractingMetadata);
+  }, [isExtractingMetadata, onExtractingChange]);
+
+  return null;
+};
+
 const ChangeMetadataSingleStep = ({
   parameters,
   onParameterChange,
@@ -26,77 +53,85 @@ const ChangeMetadataSingleStep = ({
 }: ChangeMetadataSingleStepProps) => {
   const { t } = useTranslation();
 
+  // Auto-prefill reads the viewer/file contexts, which only exist in the editor.
+  // Gate on the viewer so the pipeline builder renders the fields without it.
+  const hasViewerContext = useContext(ViewerContext) !== null;
+  const [isExtractingMetadata, setIsExtractingMetadata] = useState(false);
+
   // Get custom metadata functions using the utility
   const { addCustomMetadata, removeCustomMetadata, updateCustomMetadata } =
     createCustomMetadataFunctions(parameters, onParameterChange);
 
-  // Extract metadata from uploaded files
-  const { isExtractingMetadata } = useMetadataExtraction({
-    updateParameter: onParameterChange,
-  });
-
   const isDeleteAllEnabled = parameters.deleteAll;
   const fieldsDisabled = disabled || isDeleteAllEnabled || isExtractingMetadata;
 
   return (
-    <Stack gap="md">
-      {/* Delete All */}
-      <Stack gap="md">
-        <Text size="sm" fw={500}>
-          {t("changeMetadata.deleteAll.label", "Delete All Metadata")}
-        </Text>
-        <DeleteAllStep
-          parameters={parameters}
+    <>
+      {hasViewerContext && (
+        <MetadataPrefill
           onParameterChange={onParameterChange}
-          disabled={disabled}
+          onExtractingChange={setIsExtractingMetadata}
         />
-      </Stack>
-
-      <Divider />
-
-      {/* Standard Metadata Fields */}
+      )}
       <Stack gap="md">
-        <Text size="sm" fw={500}>
-          {t("changeMetadata.standardFields.title", "Standard Metadata")}
-        </Text>
-        <StandardMetadataStep
-          parameters={parameters}
-          onParameterChange={onParameterChange}
-          disabled={fieldsDisabled}
-        />
+        {/* Delete All */}
+        <Stack gap="md">
+          <Text size="sm" fw={500}>
+            {t("changeMetadata.deleteAll.label", "Delete All Metadata")}
+          </Text>
+          <DeleteAllStep
+            parameters={parameters}
+            onParameterChange={onParameterChange}
+            disabled={disabled}
+          />
+        </Stack>
+
+        <Divider />
+
+        {/* Standard Metadata Fields */}
+        <Stack gap="md">
+          <Text size="sm" fw={500}>
+            {t("changeMetadata.standardFields.title", "Standard Metadata")}
+          </Text>
+          <StandardMetadataStep
+            parameters={parameters}
+            onParameterChange={onParameterChange}
+            disabled={fieldsDisabled}
+          />
+        </Stack>
+
+        <Divider />
+
+        {/* Document Dates */}
+        <Stack gap="md">
+          <Text size="sm" fw={500}>
+            {t("changeMetadata.dates.title", "Document Dates")}
+          </Text>
+          <DocumentDatesStep
+            parameters={parameters}
+            onParameterChange={onParameterChange}
+            disabled={fieldsDisabled}
+          />
+        </Stack>
+
+        <Divider />
+
+        {/* Advanced Options */}
+        <Stack gap="md">
+          <Text size="sm" fw={500}>
+            {t("changeMetadata.advanced.title", "Advanced Options")}
+          </Text>
+          <AdvancedOptionsStep
+            parameters={parameters}
+            onParameterChange={onParameterChange}
+            disabled={fieldsDisabled}
+            addCustomMetadata={addCustomMetadata}
+            removeCustomMetadata={removeCustomMetadata}
+            updateCustomMetadata={updateCustomMetadata}
+          />
+        </Stack>
       </Stack>
-
-      <Divider />
-
-      {/* Document Dates */}
-      <Stack gap="md">
-        <Text size="sm" fw={500}>
-          {t("changeMetadata.dates.title", "Document Dates")}
-        </Text>
-        <DocumentDatesStep
-          parameters={parameters}
-          onParameterChange={onParameterChange}
-          disabled={fieldsDisabled}
-        />
-      </Stack>
-
-      <Divider />
-
-      {/* Advanced Options */}
-      <Stack gap="md">
-        <Text size="sm" fw={500}>
-          {t("changeMetadata.advanced.title", "Advanced Options")}
-        </Text>
-        <AdvancedOptionsStep
-          parameters={parameters}
-          onParameterChange={onParameterChange}
-          disabled={fieldsDisabled}
-          addCustomMetadata={addCustomMetadata}
-          removeCustomMetadata={removeCustomMetadata}
-          updateCustomMetadata={updateCustomMetadata}
-        />
-      </Stack>
-    </Stack>
+    </>
   );
 };
 
diff --git a/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx b/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx
index c3ee0758f6..c550832c78 100644
--- a/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx
+++ b/frontend/editor/src/core/components/tools/convert/ConvertSettings.tsx
@@ -20,6 +20,7 @@ import ConvertFromEmailSettings from "@app/components/tools/convert/ConvertFromE
 import ConvertFromCbzSettings from "@app/components/tools/convert/ConvertFromCbzSettings";
 import ConvertToCbzSettings from "@app/components/tools/convert/ConvertToCbzSettings";
 import ConvertToPdfaSettings from "@app/components/tools/convert/ConvertToPdfaSettings";
+import ConvertToPdfUaSettings from "@app/components/tools/convert/ConvertToPdfUaSettings";
 import ConvertToPdfxSettings from "@app/components/tools/convert/ConvertToPdfxSettings";
 import ConvertFromCbrSettings from "@app/components/tools/convert/ConvertFromCbrSettings";
 import ConvertToCbrSettings from "@app/components/tools/convert/ConvertToCbrSettings";
@@ -456,6 +457,20 @@ const ConvertSettings = ({
           </>
         )}
 
+      {/* PDF to PDF/UA options */}
+      {parameters.fromExtension === "pdf" &&
+        parameters.toExtension === "pdfua" && (
+          <>
+            <Divider />
+            <ConvertToPdfUaSettings
+              parameters={parameters}
+              onParameterChange={onParameterChange}
+              selectedFiles={selectedFiles}
+              disabled={disabled}
+            />
+          </>
+        )}
+
       {/* PDF to PDF/X options */}
       {parameters.fromExtension === "pdf" &&
         parameters.toExtension === "pdfx" && (
diff --git a/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.selection.test.tsx b/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.selection.test.tsx
new file mode 100644
index 0000000000..5fbeace1b5
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.selection.test.tsx
@@ -0,0 +1,149 @@
+/**
+ * Which document the PDF/UA descriptions belong to.
+ *
+ * A description is keyed by an image's position inside one file, so it is only meaningful for the
+ * file it was written against. The panel therefore offers the description fields for a single
+ * selection only, and forgets what was typed as soon as the selection changes.
+ */
+
+import { beforeEach, describe, expect, test, vi } from "vitest";
+import { render, screen, waitFor } from "@testing-library/react";
+import userEvent from "@testing-library/user-event";
+import { MantineProvider } from "@mantine/core";
+import ConvertToPdfUaSettings from "@app/components/tools/convert/ConvertToPdfUaSettings";
+import { defaultParameters } from "@app/hooks/tools/convert/useConvertParameters";
+import type { ConvertParameters } from "@app/hooks/tools/convert/useConvertParameters";
+import type { StirlingFile } from "@app/types/fileContext";
+
+// Render the English fallbacks (the test i18n instance has no loaded locale).
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    t: (key: string, fallback?: unknown, options?: Record<string, unknown>) => {
+      const text = typeof fallback === "string" ? fallback : key;
+      return options
+        ? text.replace(/\{\{(\w+)\}\}/g, (_, name) => String(options[name]))
+        : text;
+    },
+  }),
+}));
+
+const api = vi.hoisted(() => ({ post: vi.fn() }));
+vi.mock("@app/services/apiClient", () => ({ default: { post: api.post } }));
+
+// The real hook parses the PDF in a worker, which is not what this file is about.
+vi.mock("@app/hooks/usePdfSignatureDetection", () => ({
+  usePdfSignatureDetection: () => ({
+    hasDigitalSignatures: false,
+    isChecking: false,
+  }),
+}));
+
+const file = (name: string, content = "%PDF-1.7") =>
+  new File([content], name, { type: "application/pdf" }) as StirlingFile;
+
+const parametersWith = (altText: string): ConvertParameters => ({
+  ...defaultParameters,
+  fromExtension: "pdf",
+  toExtension: "pdfua",
+  pdfUaOptions: { ...defaultParameters.pdfUaOptions, altText },
+});
+
+function renderPanel(selectedFiles: StirlingFile[], altText = "") {
+  const onParameterChange = vi.fn();
+  const view = render(
+    <MantineProvider>
+      <ConvertToPdfUaSettings
+        parameters={parametersWith(altText)}
+        onParameterChange={onParameterChange}
+        selectedFiles={selectedFiles}
+      />
+    </MantineProvider>,
+  );
+  const rerenderWith = (files: StirlingFile[], text = altText) =>
+    view.rerender(
+      <MantineProvider>
+        <ConvertToPdfUaSettings
+          parameters={parametersWith(text)}
+          onParameterChange={onParameterChange}
+          selectedFiles={files}
+        />
+      </MantineProvider>,
+    );
+  return { onParameterChange, rerenderWith };
+}
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  api.post.mockResolvedValue({
+    data: {
+      figuresNeedingDescription: [{ key: "0:1", page: 1, kind: "image" }],
+    },
+  });
+});
+
+describe("PDF/UA descriptions are scoped to one document", () => {
+  test("one file: the images can be listed and described", async () => {
+    const { onParameterChange } = renderPanel([file("report.pdf")]);
+
+    await userEvent.click(screen.getByTestId("pdfua-find-figures"));
+    const field = await screen.findByTestId("pdfua-alt-text-0:1");
+    await userEvent.type(field, "B");
+
+    expect(onParameterChange).toHaveBeenCalledWith(
+      "pdfUaOptions",
+      expect.objectContaining({ altText: "0:1=B" }),
+    );
+  });
+
+  test("several files: no description fields, and a reason why", () => {
+    renderPanel([file("report.pdf"), file("appendix.pdf")]);
+
+    expect(
+      screen.getByTestId("pdfua-alt-text-single-file-only"),
+    ).toHaveTextContent(
+      /Convert these 2 files to tag them, then convert one at a time/,
+    );
+    expect(screen.queryByTestId("pdfua-find-figures")).toBeNull();
+  });
+
+  test("several files: descriptions already typed are dropped, not carried over", async () => {
+    const { onParameterChange, rerenderWith } = renderPanel(
+      [file("report.pdf")],
+      "0:1=Bar chart of revenue",
+    );
+
+    rerenderWith([file("report.pdf"), file("appendix.pdf")]);
+
+    await waitFor(() =>
+      expect(onParameterChange).toHaveBeenCalledWith(
+        "pdfUaOptions",
+        expect.objectContaining({ altText: "" }),
+      ),
+    );
+  });
+
+  test("swapping the single file clears the descriptions written for the old one", async () => {
+    const { onParameterChange, rerenderWith } = renderPanel(
+      [file("report.pdf")],
+      "0:1=Bar chart of revenue",
+    );
+
+    rerenderWith([file("other.pdf")]);
+
+    await waitFor(() =>
+      expect(onParameterChange).toHaveBeenCalledWith(
+        "pdfUaOptions",
+        expect.objectContaining({ altText: "" }),
+      ),
+    );
+  });
+
+  test("mounting with stored descriptions keeps them, so an automation step survives editing", () => {
+    const { onParameterChange } = renderPanel(
+      [file("report.pdf")],
+      "0:1=Bar chart of revenue",
+    );
+
+    expect(onParameterChange).not.toHaveBeenCalled();
+  });
+});
diff --git a/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.test.ts b/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.test.ts
new file mode 100644
index 0000000000..ccef5b5142
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.test.ts
@@ -0,0 +1,34 @@
+import { describe, expect, test } from "vitest";
+import {
+  formatAltText,
+  parseAltText,
+} from "@app/components/tools/convert/ConvertToPdfUaSettings";
+
+describe("PDF/UA alt-text wire format", () => {
+  test("reads the key=description lines the report's keys produce", () => {
+    expect(parseAltText("0:12=Bar chart\n1:3=Company logo")).toEqual({
+      "0:12": "Bar chart",
+      "1:3": "Company logo",
+    });
+  });
+
+  test("keeps a description containing an equals sign whole", () => {
+    expect(parseAltText("2:7=Flow: approval = sign-off")).toEqual({
+      "2:7": "Flow: approval = sign-off",
+    });
+  });
+
+  test("skips blank and malformed lines rather than inventing keys", () => {
+    expect(parseAltText("\nnot-a-pair\n3:1=   \n")).toEqual({});
+  });
+
+  test("round-trips a half-typed description, spaces and all", () => {
+    // Trimming here would eat the space the moment it is typed, blocking the next word.
+    const typed = { "0:1": "Bar chart " };
+    expect(parseAltText(formatAltText(typed))).toEqual(typed);
+  });
+
+  test("drops a description the user cleared", () => {
+    expect(formatAltText({ "0:1": "Kept", "0:2": "  " })).toBe("0:1=Kept");
+  });
+});
diff --git a/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.tsx b/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.tsx
new file mode 100644
index 0000000000..b1e5e4e5fe
--- /dev/null
+++ b/frontend/editor/src/core/components/tools/convert/ConvertToPdfUaSettings.tsx
@@ -0,0 +1,280 @@
+import { useEffect, useRef, useState } from "react";
+import { Stack, Text, Select, Alert, Checkbox, TextInput } from "@mantine/core";
+import { useTranslation } from "react-i18next";
+import apiClient from "@app/services/apiClient";
+import { Button } from "@app/ui/Button";
+import { ConvertParameters } from "@app/hooks/tools/convert/useConvertParameters";
+import { usePdfSignatureDetection } from "@app/hooks/usePdfSignatureDetection";
+import { StirlingFile } from "@app/types/fileContext";
+import { Z_INDEX_AUTOMATE_DROPDOWN } from "@app/styles/zIndex";
+
+interface ConvertToPdfUaSettingsProps {
+  parameters: ConvertParameters;
+  onParameterChange: <K extends keyof ConvertParameters>(
+    key: K,
+    value: ConvertParameters[K],
+  ) => void;
+  selectedFiles: StirlingFile[];
+  disabled?: boolean;
+}
+
+/** One image the backend says has no description yet, keyed as the conversion expects it back. */
+interface FigureNeedingDescription {
+  key: string;
+  page: number;
+  kind: string;
+}
+
+/**
+ * The wire form the endpoint parses: one `pageIndex:ordinal=description` per line. Descriptions are
+ * kept verbatim so that typing a space does not fight the field; the backend trims them.
+ */
+export const parseAltText = (raw: string): Record<string, string> => {
+  const parsed: Record<string, string> = {};
+  raw.split(/\r?\n/).forEach((line) => {
+    const split = line.indexOf("=");
+    if (split <= 0) return;
+    const key = line.slice(0, split).trim();
+    const description = line.slice(split + 1);
+    if (key && description.trim()) parsed[key] = description;
+  });
+  return parsed;
+};
+
+export const formatAltText = (descriptions: Record<string, string>): string =>
+  Object.entries(descriptions)
+    .filter(([, description]) => description.trim())
+    .map(([key, description]) => `${key}=${description}`)
+    .join("\n");
+
+/** PDF/UA conversion options; copy is deliberate - conformance is not guaranteed by one click. */
+const ConvertToPdfUaSettings = ({
+  parameters,
+  onParameterChange,
+  selectedFiles,
+  disabled = false,
+}: ConvertToPdfUaSettingsProps) => {
+  const { t } = useTranslation();
+  const { hasDigitalSignatures } = usePdfSignatureDetection(selectedFiles);
+  const [figures, setFigures] = useState<FigureNeedingDescription[] | null>(
+    null,
+  );
+  const [isScanning, setIsScanning] = useState(false);
+  const [scanError, setScanError] = useState<string | null>(null);
+
+  const profileOptions = [
+    { value: "ua1", label: "PDF/UA-1" },
+    { value: "ua2", label: "PDF/UA-2 (PDF 2.0)" },
+  ];
+
+  const update = (patch: Partial<ConvertParameters["pdfUaOptions"]>) =>
+    onParameterChange("pdfUaOptions", { ...parameters.pdfUaOptions, ...patch });
+
+  const descriptions = parseAltText(parameters.pdfUaOptions.altText);
+  // A key is a position inside one document, so descriptions only mean anything for one file.
+  const scannableFile = selectedFiles.length === 1 ? selectedFiles[0] : null;
+  const tooManyFiles = selectedFiles.length > 1;
+  const fileKey = selectedFiles
+    .map((file) => `${file.name}:${file.size}`)
+    .join("|");
+  const describedFileKey = useRef(fileKey);
+
+  // The same key names a different image in the next document, so descriptions must not outlive the
+  // selection. Mount is skipped so a stored automation step keeps the text it was saved with.
+  useEffect(() => {
+    if (describedFileKey.current === fileKey) return;
+    describedFileKey.current = fileKey;
+    setFigures(null);
+    if (parameters.pdfUaOptions.altText) update({ altText: "" });
+  }, [fileKey]);
+
+  // The keys are opaque, so they have to come from the backend's own analysis of this file.
+  const findFigures = async () => {
+    const file = scannableFile;
+    if (!file) return;
+    setIsScanning(true);
+    setScanError(null);
+    try {
+      const formData = new FormData();
+      formData.append("fileInput", file);
+      formData.append("profile", parameters.pdfUaOptions.profile);
+      const { data } = await apiClient.post<{
+        figuresNeedingDescription?: FigureNeedingDescription[];
+      }>("/api/v1/security/accessibility-report", formData);
+      setFigures(data.figuresNeedingDescription ?? []);
+    } catch {
+      setScanError(
+        t(
+          "convert.pdfUaAltTextScanFailed",
+          "The images could not be listed. Convert anyway and the response reports what is missing.",
+        ),
+      );
+    } finally {
+      setIsScanning(false);
+    }
+  };
+
+  return (
+    <Stack gap="sm" data-testid="pdfua-settings">
+      <Text size="sm" fw={500}>
+        {t("convert.pdfUaOptions", "PDF/UA Options")}:
+      </Text>
+
+      {hasDigitalSignatures && (
+        <Alert color="yellow">
+          <Text size="sm">
+            {t(
+              "convert.pdfUaSignatureWarning",
+              "This PDF is digitally signed. Tagging rewrites the page content the signature covers, so the signature will stop verifying. Convert first, then re-sign.",
+            )}
+          </Text>
+        </Alert>
+      )}
+
+      <Stack gap="xs">
+        <Text size="xs" fw={500}>
+          {t("convert.pdfUaProfile", "Conformance level")}:
+        </Text>
+        <Select
+          value={parameters.pdfUaOptions.profile}
+          onChange={(value) => update({ profile: value || "ua1" })}
+          data={profileOptions}
+          disabled={disabled}
+          comboboxProps={{ zIndex: Z_INDEX_AUTOMATE_DROPDOWN }}
+          data-testid="pdfua-profile-select"
+        />
+      </Stack>
+
+      <TextInput
+        label={t("convert.pdfUaLanguage", "Document language")}
+        description={t(
+          "convert.pdfUaLanguageHelp",
+          "A BCP-47 tag such as en-GB. Used only when the document does not already declare its own language.",
+        )}
+        value={parameters.pdfUaOptions.language}
+        onChange={(event) => update({ language: event.currentTarget.value })}
+        disabled={disabled}
+        data-testid="pdfua-language-input"
+      />
+
+      <Checkbox
+        label={t(
+          "convert.pdfUaOverrideLanguage",
+          "Replace the document's own language",
+        )}
+        description={t(
+          "convert.pdfUaOverrideLanguageHelp",
+          "Only tick this if the language above is right and the document's own is wrong. Relabelling a document into a language it is not written in makes a screen reader unintelligible.",
+        )}
+        checked={parameters.pdfUaOptions.overrideLanguage}
+        onChange={(event) =>
+          update({ overrideLanguage: event.currentTarget.checked })
+        }
+        disabled={disabled}
+        data-testid="pdfua-override-language"
+      />
+
+      <TextInput
+        label={t("convert.pdfUaTitle", "Document title")}
+        description={t(
+          "convert.pdfUaTitleHelp",
+          "Shown by a reader instead of the filename. Left blank, the first heading is used.",
+        )}
+        value={parameters.pdfUaOptions.title}
+        onChange={(event) => update({ title: event.currentTarget.value })}
+        disabled={disabled}
+        data-testid="pdfua-title-input"
+      />
+
+      <Checkbox
+        label={t("convert.pdfUaEmbedFonts", "Embed missing fonts")}
+        description={t(
+          "convert.pdfUaEmbedFontsHelp",
+          "PDF/UA requires every font to be embedded. Turning this off is faster but usually prevents conformance.",
+        )}
+        checked={parameters.pdfUaOptions.embedFonts}
+        onChange={(event) =>
+          update({ embedFonts: event.currentTarget.checked })
+        }
+        disabled={disabled}
+        data-testid="pdfua-embed-fonts"
+      />
+
+      <Alert color="blue">
+        <Text size="sm">
+          {t(
+            "convert.pdfUaAltTextNotice",
+            "Images need a written description before a document can be certified. Descriptions are never generated automatically, because an invented one passes the checker while telling a screen-reader user nothing. Any image left without one is reported, and the file comes back tagged but not certified.",
+          )}
+        </Text>
+      </Alert>
+
+      {tooManyFiles && (
+        <Alert color="yellow" data-testid="pdfua-alt-text-single-file-only">
+          <Text size="sm">
+            {t(
+              "convert.pdfUaAltTextSingleFileOnly",
+              "Descriptions belong to one document: an image is identified by its position, which is a different image in every file. Convert these {{fileCount}} files to tag them, then convert one at a time to describe its images.",
+              { fileCount: selectedFiles.length },
+            )}
+          </Text>
+        </Alert>
+      )}
+
+      {!tooManyFiles && (
+        <Button
+          variant="secondary"
+          onClick={findFigures}
+          loading={isScanning}
+          disabled={disabled || !scannableFile}
+          data-testid="pdfua-find-figures"
+        >
+          {t("convert.pdfUaFindImages", "Find images needing a description")}
+        </Button>
+      )}
+
+      {scanError && (
+        <Alert color="yellow">
+          <Text size="sm">{scanError}</Text>
+        </Alert>
+      )}
+
+      {!tooManyFiles && figures?.length === 0 && (
+        <Text size="xs" c="dimmed" data-testid="pdfua-no-figures">
+          {t(
+            "convert.pdfUaNoImagesNeedingText",
+            "No image is missing a description.",
+          )}
+        </Text>
+      )}
+
+      {!tooManyFiles &&
+        figures?.map((figure) => (
+          <TextInput
+            key={figure.key}
+            label={t("convert.pdfUaFigureLabel", "Page {{page}} {{kind}}", {
+              page: figure.page,
+              kind: figure.kind,
+            })}
+            placeholder={t(
+              "convert.pdfUaFigurePlaceholder",
+              "What this image tells the reader",
+            )}
+            value={descriptions[figure.key] ?? ""}
+            onChange={(event) =>
+              update({
+                altText: formatAltText({
+                  ...descriptions,
+                  [figure.key]: event.currentTarget.value,
+                }),
+              })
+            }
+            disabled={disabled}
+            data-testid={`pdfua-alt-text-${figure.key}`}
+          />
+        ))}
+    </Stack>
+  );
+};
+
+export default ConvertToPdfUaSettings;
diff --git a/frontend/editor/src/core/components/tools/convert/ConvertToPdfaSettings.tsx b/frontend/editor/src/core/components/tools/convert/ConvertToPdfaSettings.tsx
index 298fcc847b..fa035eb067 100644
--- a/frontend/editor/src/core/components/tools/convert/ConvertToPdfaSettings.tsx
+++ b/frontend/editor/src/core/components/tools/convert/ConvertToPdfaSettings.tsx
@@ -3,6 +3,7 @@ import { Stack, Text, Select, Alert, Checkbox } from "@mantine/core";
 import { useTranslation } from "react-i18next";
 import { ConvertParameters } from "@app/hooks/tools/convert/useConvertParameters";
 import { usePdfSignatureDetection } from "@app/hooks/usePdfSignatureDetection";
+import { useEndpointEnabled } from "@app/hooks/useEndpointConfig";
 import { StirlingFile } from "@app/types/fileContext";
 import { Z_INDEX_AUTOMATE_DROPDOWN } from "@app/styles/zIndex";
 
@@ -26,11 +27,21 @@ const ConvertToPdfaSettings = ({
   const { hasDigitalSignatures, isChecking } =
     usePdfSignatureDetection(selectedFiles);
   const outputFormatLabelId = useId();
+  // Level A needs the same tagger as PDF/UA, so it stands or falls with that endpoint.
+  const { enabled: taggingAvailable } = useEndpointEnabled("pdf-to-ua");
 
   const pdfaFormatOptions = [
     { value: "pdfa-1", label: "PDF/A-1b" },
     { value: "pdfa-2b", label: "PDF/A-2b" },
     { value: "pdfa-3b", label: "PDF/A-3b" },
+    // Level A is level B plus accessibility: it additionally tags the document.
+    ...(taggingAvailable === false
+      ? []
+      : [
+          { value: "pdfa-1a", label: "PDF/A-1a (accessible)" },
+          { value: "pdfa-2a", label: "PDF/A-2a (accessible)" },
+          { value: "pdfa-3a", label: "PDF/A-3a (accessible)" },
+        ]),
   ];
 
   return (
diff --git a/frontend/editor/src/core/components/tools/overlayPdfs/OverlayPdfsSettings.tsx b/frontend/editor/src/core/components/tools/overlayPdfs/OverlayPdfsSettings.tsx
index 2648990248..e7246bb4e3 100644
--- a/frontend/editor/src/core/components/tools/overlayPdfs/OverlayPdfsSettings.tsx
+++ b/frontend/editor/src/core/components/tools/overlayPdfs/OverlayPdfsSettings.tsx
@@ -1,3 +1,4 @@
+import { useContext, useRef } from "react";
 import {
   Stack,
   Text,
@@ -7,6 +8,7 @@ import {
   Divider,
 } from "@mantine/core";
 import { Button } from "@app/ui/Button";
+import { FilePicker } from "@app/ui/FilePicker";
 import { ActionIcon } from "@app/ui/ActionIcon";
 import { SegmentedControl } from "@app/ui/SegmentedControl";
 import { useTranslation } from "react-i18next";
@@ -15,7 +17,7 @@ import {
   type OverlayMode,
 } from "@app/hooks/tools/overlayPdfs/useOverlayPdfsParameters";
 import LocalIcon from "@app/components/shared/LocalIcon";
-import { useFilesModalContext } from "@app/contexts/FilesModalContext";
+import { FilesModalContext } from "@app/contexts/FilesModalContext";
 import styles from "@app/components/tools/overlayPdfs/OverlayPdfsSettings.module.css";
 import { Z_INDEX_AUTOMATE_DROPDOWN } from "@app/styles/zIndex";
 
@@ -34,7 +36,12 @@ export default function OverlayPdfsSettings({
   disabled = false,
 }: OverlayPdfsSettingsProps) {
   const { t } = useTranslation();
-  const { openFilesModal } = useFilesModalContext();
+  // Read optionally: the portal pipeline builder mounts no FilesModalProvider.
+  // Present (editor tool + Automate modal) -> keep the workspace file picker;
+  // absent (portal) -> fall back to the plain file input below.
+  const filesModal = useContext(FilesModalContext);
+  // Clears the FilePicker so the same file can be re-selected (Mantine resetRef).
+  const resetOverlayPicker = useRef<() => void>(null);
 
   const handleOverlayFilesChange = (files: File[]) => {
     onParameterChange("overlayFiles", files);
@@ -66,8 +73,8 @@ export default function OverlayPdfsSettings({
   };
 
   const handleOpenOverlayFilesModal = () => {
-    if (disabled) return;
-    openFilesModal({
+    if (disabled || !filesModal) return;
+    filesModal.openFilesModal({
       customHandler: (files: File[]) => {
         handleOverlayFilesChange([
           ...(parameters.overlayFiles || []),
@@ -77,6 +84,17 @@ export default function OverlayPdfsSettings({
     });
   };
 
+  const appendOverlayFiles = (files: File[]) => {
+    if (files.length === 0) return;
+    handleOverlayFilesChange([...(parameters.overlayFiles || []), ...files]);
+    resetOverlayPicker.current?.();
+  };
+
+  const overlayFilesButtonLabel =
+    parameters.overlayFiles?.length > 0
+      ? t("overlay-pdfs.overlayFiles.addMore", "Add more PDFs...")
+      : t("overlay-pdfs.overlayFiles.placeholder", "Choose PDF(s)...");
+
   return (
     <Stack gap="md">
       <Stack gap="xs">
@@ -183,17 +201,30 @@ export default function OverlayPdfsSettings({
         <Text size="sm" fw={500}>
           {t("overlay-pdfs.overlayFiles.label", "Overlay Files")}
         </Text>
-        <Button
-          size="sm"
-          onClick={handleOpenOverlayFilesModal}
-          disabled={disabled}
-          leftSection={<LocalIcon icon="add" width="14" height="14" />}
-          fullWidth
-        >
-          {parameters.overlayFiles?.length > 0
-            ? t("overlay-pdfs.overlayFiles.addMore", "Add more PDFs...")
-            : t("overlay-pdfs.overlayFiles.placeholder", "Choose PDF(s)...")}
-        </Button>
+        {filesModal ? (
+          <Button
+            size="sm"
+            onClick={handleOpenOverlayFilesModal}
+            disabled={disabled}
+            leftSection={<LocalIcon icon="add" width="14" height="14" />}
+            fullWidth
+          >
+            {overlayFilesButtonLabel}
+          </Button>
+        ) : (
+          <FilePicker
+            multiple
+            accept="application/pdf"
+            onChange={appendOverlayFiles}
+            resetRef={resetOverlayPicker}
+            size="sm"
+            disabled={disabled}
+            leftSection={<LocalIcon icon="add" width="14" height="14" />}
+            fullWidth
+          >
+            {overlayFilesButtonLabel}
+          </FilePicker>
+        )}
 
         {parameters.overlayFiles?.length > 0 &&
           (() => {
diff --git a/frontend/editor/src/core/components/viewer/BookmarkSidebar.tsx b/frontend/editor/src/core/components/viewer/BookmarkSidebar.tsx
index 9a590587ee..9c92730077 100644
--- a/frontend/editor/src/core/components/viewer/BookmarkSidebar.tsx
+++ b/frontend/editor/src/core/components/viewer/BookmarkSidebar.tsx
@@ -17,6 +17,8 @@ import { useFileContext } from "@app/contexts/FileContext";
 import { isStirlingFile, type FileId } from "@app/types/fileContext";
 import { createStirlingFilesAndStubs } from "@app/services/fileStubHelpers";
 import apiClient from "@app/services/apiClient";
+import { openExternalTab } from "@app/platform/openExternalTab";
+import { getExternalHref } from "@app/utils/externalUrl";
 import { PdfBookmarkObject, PdfActionType } from "@embedpdf/models";
 import { useTranslation } from "react-i18next";
 import BookmarksIcon from "@mui/icons-material/BookmarksRounded";
@@ -74,6 +76,17 @@ const resolvePageNumber = (bookmark: PdfBookmarkObject): number | null => {
   return null;
 };
 
+// Bookmark targets are PDF-supplied, so sanitise before opening. Local paths
+// from LaunchAppOrOpenFile fail the allowlist - a browser blocks them anyway.
+const openBookmarkTarget = (rawUrl: string): void => {
+  const href = getExternalHref(rawUrl);
+  if (!href) {
+    console.warn("[BookmarkSidebar] Blocked unsafe URL:", rawUrl);
+    return;
+  }
+  void openExternalTab(href);
+};
+
 export const BookmarkSidebar = ({
   visible,
   thumbnailVisible,
@@ -515,12 +528,12 @@ export const BookmarkSidebar = ({
       const action = target.action;
       if (action.type === PdfActionType.URI && action.uri) {
         event.preventDefault();
-        window.open(action.uri, "_blank", "noopener");
+        openBookmarkTarget(action.uri);
         return;
       }
       if (action.type === PdfActionType.LaunchAppOrOpenFile && action.path) {
         event.preventDefault();
-        window.open(action.path, "_blank", "noopener");
+        openBookmarkTarget(action.path);
         return;
       }
     }
diff --git a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
index 187a48ad16..c0f9d4b4c4 100644
--- a/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/EmbedPdfViewer.tsx
@@ -13,6 +13,7 @@ import {
   useFileActions,
 } from "@app/contexts/FileContext";
 import { useFileWithUrl } from "@app/hooks/useFileWithUrl";
+import { ZoomMode } from "@embedpdf/plugin-zoom/react";
 import { useViewer } from "@app/contexts/ViewerContext";
 import { LocalEmbedPDF } from "@app/components/viewer/LocalEmbedPDF";
 import { PdfViewerToolbar } from "@app/components/viewer/PdfViewerToolbar";
@@ -42,6 +43,7 @@ import {
 import { useWheelZoom } from "@app/hooks/useWheelZoom";
 import { useFormFill } from "@app/tools/formFill/FormFillContext";
 import { FormSaveBar } from "@app/tools/formFill/FormSaveBar";
+import { FORM_APPLY_EVENT } from "@app/tools/formFill/formFillEvents";
 import { useViewerKeyCommand } from "@app/hooks/useViewerKeyCommand";
 import { useMeasurementManager } from "@app/hooks/useMeasurementManager";
 import { ScaleCalibrationDialog } from "@app/components/viewer/ScaleCalibrationDialog";
@@ -418,7 +420,7 @@ const EmbedPdfViewerContent = ({
                 return;
               case "0":
                 event.preventDefault();
-                zoomActions.requestZoom("fit-width");
+                zoomActions.requestZoom(ZoomMode.FitWidth);
                 return;
             }
           }
@@ -781,8 +783,8 @@ const EmbedPdfViewerContent = ({
         handleFormApply(blob);
       }
     };
-    window.addEventListener("formfill:apply", handler);
-    return () => window.removeEventListener("formfill:apply", handler);
+    window.addEventListener(FORM_APPLY_EVENT, handler);
+    return () => window.removeEventListener(FORM_APPLY_EVENT, handler);
   }, [handleFormApply]);
 
   // Apply layer visibility changes - reload the modified PDF into the viewer
@@ -1236,6 +1238,7 @@ const EmbedPdfViewerContent = ({
               showBakedAnnotations={isAnnotationsVisible}
               enableRedaction={shouldEnableRedaction}
               enableFormFill={shouldEnableFormFill}
+              formEditingActive={isFormFillToolActive}
               isManualRedactionMode={isManualRedactMode}
               signatureApiRef={signatureApiRef as React.RefObject<any>}
               annotationApiRef={annotationApiRef as React.RefObject<any>}
diff --git a/frontend/editor/src/core/components/viewer/LinkLayer.tsx b/frontend/editor/src/core/components/viewer/LinkLayer.tsx
index e1a2aeb8f0..e68c541fd8 100644
--- a/frontend/editor/src/core/components/viewer/LinkLayer.tsx
+++ b/frontend/editor/src/core/components/viewer/LinkLayer.tsx
@@ -19,6 +19,9 @@ import {
 import { Z_INDEX_VIEWER_FLOATING_MENU } from "@app/styles/zIndex";
 import { Button } from "@app/ui/Button";
 import { ActionIcon } from "@app/ui/ActionIcon";
+import { openExternalTab } from "@app/platform/openExternalTab";
+import { getExternalHref } from "@app/utils/externalUrl";
+
 // ---------------------------------------------------------------------------
 // Inline SVG icons (thin-stroke, modern)
 // ---------------------------------------------------------------------------
@@ -401,19 +404,11 @@ export const LinkLayer: React.FC<LinkLayerProps> = ({
             behavior: "smooth",
           });
         } else if (action.type === PdfActionType.URI) {
-          const uri = action.uri;
-          try {
-            const url = new URL(uri, window.location.href);
-            if (["http:", "https:", "mailto:"].includes(url.protocol)) {
-              window.open(uri, "_blank", "noopener,noreferrer");
-            } else {
-              console.warn(
-                "[LinkLayer] Blocked unsafe URL protocol:",
-                url.protocol,
-              );
-            }
-          } catch {
-            window.open(uri, "_blank", "noopener,noreferrer");
+          const href = getExternalHref(action.uri);
+          if (href) {
+            void openExternalTab(href);
+          } else {
+            console.warn("[LinkLayer] Blocked unsafe URL:", action.uri);
           }
         }
       }
@@ -513,6 +508,11 @@ export const LinkLayer: React.FC<LinkLayerProps> = ({
           const top = annotationLink.rect.origin.y * scale;
           const width = annotationLink.rect.size.width * scale;
           const height = annotationLink.rect.size.height * scale;
+          const externalHref =
+            annotationLink.target?.type === "action" &&
+            annotationLink.target.action.type === PdfActionType.URI
+              ? getExternalHref(annotationLink.target.action.uri)
+              : null;
 
           return (
             <a
@@ -524,7 +524,9 @@ export const LinkLayer: React.FC<LinkLayerProps> = ({
                   linkElementRefs.current.delete(annotationLink.id);
                 }
               }}
-              href="#"
+              href={externalHref ?? "#"}
+              target={externalHref ? "_blank" : undefined}
+              rel={externalHref ? "noopener noreferrer" : undefined}
               onClick={(e) => {
                 e.preventDefault();
                 e.stopPropagation();
diff --git a/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx b/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx
index e1084e2772..07fe867ed2 100644
--- a/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx
+++ b/frontend/editor/src/core/components/viewer/LocalEmbedPDF.tsx
@@ -101,6 +101,9 @@ import { DocumentReadyWrapper } from "@app/components/viewer/DocumentReadyWrappe
 import { ActiveDocumentProvider } from "@app/components/viewer/ActiveDocumentContext";
 import { pdfiumWasmUrl } from "@app/services/wasmPrecompiler";
 import { FormFieldOverlay } from "@app/tools/formFill/FormFieldOverlay";
+import { FormCreationInteractionLock } from "@app/tools/formFill/FormCreationInteractionLock";
+import { FormFieldCreationOverlay } from "@app/tools/formFill/FormFieldCreationOverlay";
+import { FormFieldEditOverlay } from "@app/tools/formFill/FormFieldEditOverlay";
 import { ButtonAppearanceOverlay } from "@app/tools/formFill/ButtonAppearanceOverlay";
 import SignatureFieldOverlay from "@app/components/viewer/SignatureFieldOverlay";
 import { CommentsSidebar } from "@app/components/viewer/CommentsSidebar";
@@ -114,6 +117,8 @@ interface LocalEmbedPDFProps {
   enableAnnotations?: boolean;
   enableRedaction?: boolean;
   enableFormFill?: boolean;
+  /** Structural create/modify overlays only mount while the Form tool owns the viewer. */
+  formEditingActive?: boolean;
   isManualRedactionMode?: boolean;
   showBakedAnnotations?: boolean;
   onSignatureAdded?: (annotation: PdfAnnotationObject) => void;
@@ -207,6 +212,7 @@ export function LocalEmbedPDF({
   enableAnnotations = false,
   enableRedaction = false,
   enableFormFill = false,
+  formEditingActive = false,
   isManualRedactionMode = false,
   showBakedAnnotations = true,
   onSignatureAdded,
@@ -1006,6 +1012,7 @@ export function LocalEmbedPDF({
             <ZoomAPIBridge />
             <ScrollAPIBridge />
             <SelectionAPIBridge />
+            <FormCreationInteractionLock />
             <PanAPIBridge />
             <SpreadAPIBridge />
             <SearchAPIBridge />
@@ -1153,6 +1160,28 @@ export function LocalEmbedPDF({
                                     />
                                   )}
 
+                                  {/* Create-mode: drag to place new fields */}
+                                  {enableFormFill && formEditingActive && (
+                                    <FormFieldCreationOverlay
+                                      documentId={documentId}
+                                      pageIndex={pageIndex}
+                                      pageWidth={width}
+                                      pageHeight={height}
+                                      fileId={fileId}
+                                    />
+                                  )}
+
+                                  {/* Modify-mode: select / move / resize existing fields */}
+                                  {enableFormFill && formEditingActive && (
+                                    <FormFieldEditOverlay
+                                      documentId={documentId}
+                                      pageIndex={pageIndex}
+                                      pageWidth={width}
+                                      pageHeight={height}
+                                      fileId={fileId}
+                                    />
+                                  )}
+
                                   {/* SignatureFieldOverlay — bitmaps of digital-signature appearances */}
                                   {file && (
                                     <SignatureFieldOverlay
diff --git a/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx b/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx
index bd2704963a..47d442ef3d 100644
--- a/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/NonPdfViewer.tsx
@@ -1,4 +1,4 @@
-import { useCallback, useMemo } from "react";
+import React, { useCallback, useMemo } from "react";
 import { Box, Center, Stack, Text } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import ArticleIcon from "@mui/icons-material/Article";
@@ -99,12 +99,17 @@ export function NonPdfViewer({ file }: NonPdfViewerProps) {
   return (
     <Stack
       gap={0}
-      style={{
-        height: "100%",
-        flex: 1,
-        overflow: "hidden",
-        position: "relative",
-      }}
+      style={
+        {
+          height: "100%",
+          flex: 1,
+          overflow: "hidden",
+          position: "relative",
+          // The Convert button floats over the content; viewers that draw their
+          // own top bar read this to keep their text clear of it.
+          "--nonpdf-action-inset": isConvertAvailable ? "11rem" : "0rem",
+        } as React.CSSProperties
+      }
     >
       <NonPdfBanner
         onConvertToPdf={isConvertAvailable ? handleConvertToPdf : undefined}
diff --git a/frontend/editor/src/core/components/viewer/SelectionAPIBridge.tsx b/frontend/editor/src/core/components/viewer/SelectionAPIBridge.tsx
index 36d0c59cf7..3efb250de1 100644
--- a/frontend/editor/src/core/components/viewer/SelectionAPIBridge.tsx
+++ b/frontend/editor/src/core/components/viewer/SelectionAPIBridge.tsx
@@ -118,7 +118,6 @@ export function SelectionAPIBridge() {
 
     const buildApi = () => ({
       copyToClipboard: () => selection.copyToClipboard(),
-      getSelectedText: () => selection.getSelectedText(),
       getFormattedSelection: () => selection.getFormattedSelection(),
       selectAll: async (totalPages: number) => {
         const docId = activeDocumentId;
diff --git a/frontend/editor/src/core/components/viewer/SignatureFieldOverlay.tsx b/frontend/editor/src/core/components/viewer/SignatureFieldOverlay.tsx
index afd04bf6b2..7f914741f3 100644
--- a/frontend/editor/src/core/components/viewer/SignatureFieldOverlay.tsx
+++ b/frontend/editor/src/core/components/viewer/SignatureFieldOverlay.tsx
@@ -11,6 +11,7 @@
  * For widgets without an appearance stream (unsigned fields, or fields whose
  * PDF writer didn't embed one), we fall back to a translucent badge overlay.
  */
+import { useStaleBakedFieldNames } from "@app/tools/formFill/FormFillContext";
 import React, { useEffect, useMemo, useRef, useState, memo } from "react";
 import {
   renderSignatureFieldAppearances,
@@ -114,6 +115,7 @@ function SignatureFieldOverlayInner({
   pageWidth,
   pageHeight,
 }: SignatureFieldOverlayProps) {
+  const staleNames = useStaleBakedFieldNames();
   const [fields, setFields] = useState<ResolvedSignatureField[]>([]);
 
   useEffect(() => {
@@ -135,8 +137,13 @@ function SignatureFieldOverlayInner({
   }, [pdfSource]);
 
   const pageFields = useMemo(
-    () => fields.filter((f) => f.pageIndex === pageIndex),
-    [fields, pageIndex],
+    // A staged move or delete leaves this bitmap stranded at the original rect, on top of the
+    // editor chrome, so it is dropped until the edit is applied and the appearance re-extracted.
+    () =>
+      fields.filter(
+        (f) => f.pageIndex === pageIndex && !staleNames.has(f.fieldName),
+      ),
+    [fields, pageIndex, staleNames],
   );
 
   if (pageFields.length === 0) return null;
diff --git a/frontend/editor/src/core/components/viewer/nonpdf/HtmlViewer.tsx b/frontend/editor/src/core/components/viewer/nonpdf/HtmlViewer.tsx
index ee9016b926..329e0cdfd8 100644
--- a/frontend/editor/src/core/components/viewer/nonpdf/HtmlViewer.tsx
+++ b/frontend/editor/src/core/components/viewer/nonpdf/HtmlViewer.tsx
@@ -1,7 +1,9 @@
 import { useEffect, useState } from "react";
-import { Box, Paper, Text } from "@mantine/core";
+import { Box, Center, Group, Paper, Stack, Text } from "@mantine/core";
 import { useTranslation } from "react-i18next";
 
+import { Button } from "@app/ui/Button";
+import { useIsMobile } from "@app/hooks/useIsMobile";
 import { formatFileSize } from "@app/utils/fileUtils";
 
 interface HtmlViewerProps {
@@ -10,37 +12,79 @@ interface HtmlViewerProps {
 
 export function HtmlViewer({ file }: HtmlViewerProps) {
   const { t } = useTranslation();
+  const isMobile = useIsMobile();
   const [objectUrl, setObjectUrl] = useState<string | null>(null);
+  // Phones render a desktop-width document into ~400px, which reads as a blank
+  // column, so the iframe is opt-in there. Derived rather than seeded into
+  // state because useIsMobile resolves after first paint.
+  const [optedIn, setOptedIn] = useState(false);
+  const showPreview = !isMobile || optedIn;
 
   useEffect(() => {
+    if (!showPreview) return;
     const url = URL.createObjectURL(file);
     setObjectUrl(url);
     return () => URL.revokeObjectURL(url);
-  }, [file]);
+  }, [file, showPreview]);
 
   return (
     <Box style={{ flex: 1, display: "flex", flexDirection: "column" }}>
       <Paper
         radius={0}
-        p="xs"
         style={{
           borderBottom: "1px solid var(--mantine-color-gray-2)",
           flexShrink: 0,
+          // Padding set here rather than via `p`, whose shorthand would reset
+          // the right inset below. NonPdfViewer floats its "Convert to PDF"
+          // button over this row, so keep the notice clear of it instead of
+          // running underneath.
+          padding: "0.5rem",
+          paddingRight: "max(0.5rem, var(--nonpdf-action-inset, 0rem))",
         }}
       >
-        <Text size="xs" c="dimmed">
-          {t("viewer.nonPdf.htmlPreviewWarning", {
-            size: formatFileSize(file.size),
-          })}
-        </Text>
+        <Group gap="xs" wrap="nowrap" align="center">
+          <Text size="xs" c="dimmed" style={{ minWidth: 0, flex: 1 }}>
+            {t("viewer.nonPdf.htmlPreviewWarning", {
+              size: formatFileSize(file.size),
+            })}
+          </Text>
+          {/* Opting in used to be one-way: the only way back was closing and
+              reopening the file. */}
+          {isMobile && optedIn && (
+            <Button
+              variant="tertiary"
+              size="sm"
+              onClick={() => setOptedIn(false)}
+              style={{ flexShrink: 0 }}
+            >
+              {t("viewer.nonPdf.htmlHidePreview", "Hide preview")}
+            </Button>
+          )}
+        </Group>
       </Paper>
-      {objectUrl && (
-        <iframe
-          src={objectUrl}
-          title={t("viewer.nonPdf.htmlPreview")}
-          sandbox="allow-scripts"
-          style={{ flex: 1, border: "none", background: "#fff" }}
-        />
+      {showPreview ? (
+        objectUrl && (
+          <iframe
+            src={objectUrl}
+            title={t("viewer.nonPdf.htmlPreview")}
+            sandbox="allow-scripts"
+            style={{ flex: 1, border: "none", background: "#fff" }}
+          />
+        )
+      ) : (
+        <Center style={{ flex: 1, padding: "1.5rem" }}>
+          <Stack align="center" gap="sm" style={{ maxWidth: "22rem" }}>
+            <Text size="sm" c="dimmed" ta="center">
+              {t(
+                "viewer.nonPdf.htmlPreviewMobileHidden",
+                "HTML pages are laid out for desktop widths, so the preview is off by default here.",
+              )}
+            </Text>
+            <Button variant="secondary" onClick={() => setOptedIn(true)}>
+              {t("viewer.nonPdf.htmlShowPreview", "Show preview anyway")}
+            </Button>
+          </Stack>
+        </Center>
       )}
     </Box>
   );
diff --git a/frontend/editor/src/core/components/viewer/useAnnotationMenuHandlers.ts b/frontend/editor/src/core/components/viewer/useAnnotationMenuHandlers.ts
index bf14b559f4..3e9e048aaf 100644
--- a/frontend/editor/src/core/components/viewer/useAnnotationMenuHandlers.ts
+++ b/frontend/editor/src/core/components/viewer/useAnnotationMenuHandlers.ts
@@ -14,6 +14,8 @@ import type {
   AnnotationPatch,
 } from "@app/components/viewer/viewerTypes";
 import type { ScrollActions } from "@app/contexts/viewer/viewerActions";
+import { openExternalTab } from "@app/platform/openExternalTab";
+import { getExternalHref } from "@app/utils/externalUrl";
 
 export type AnnotationType =
   | "textMarkup"
@@ -370,7 +372,15 @@ export function useAnnotationMenuHandlers({
   const onGoToLink = useCallback(() => {
     if (!firstLinkTarget) return;
     if (firstLinkTarget.type === "uri") {
-      window.open(firstLinkTarget.uri, "_blank", "noopener,noreferrer");
+      const href = getExternalHref(firstLinkTarget.uri);
+      if (href) {
+        void openExternalTab(href);
+      } else {
+        console.warn(
+          "[useAnnotationMenuHandlers] Blocked unsafe URL:",
+          firstLinkTarget.uri,
+        );
+      }
     } else {
       scrollActions.scrollToPage(firstLinkTarget.pageIndex + 1);
     }
diff --git a/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx b/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx
index 3aada126ea..86b0e7ff39 100644
--- a/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx
+++ b/frontend/editor/src/core/components/viewer/useViewerWorkbenchBarButtons.tsx
@@ -124,7 +124,7 @@ export function useViewerWorkbenchBarButtons(
   const layersLabel = t("workbenchBar.toggleLayers", "Toggle Layers");
   const commentsLabel = t("workbenchBar.toggleComments", "Comments");
   const annotationsLabel = t("workbenchBar.annotations", "Annotations");
-  const formFillLabel = t("workbenchBar.formFill", "Fill Form");
+  const formFillLabel = t("workbenchBar.formFill", "Form Editor");
   const rulerLabel = t("workbenchBar.ruler", "Ruler / Measure");
   const rulerSettingsLabel = t("workbenchBar.rulerSettings", "Scale Settings");
   const readAloudLabel = t("workbenchBar.readAloud", "Read Aloud");
diff --git a/frontend/editor/src/core/constants/convertConstants.ts b/frontend/editor/src/core/constants/convertConstants.ts
index a29d05ee5a..4f240d9fd0 100644
--- a/frontend/editor/src/core/constants/convertConstants.ts
+++ b/frontend/editor/src/core/constants/convertConstants.ts
@@ -31,6 +31,7 @@ export const CONVERSION_ENDPOINTS = {
   "pdf-html": "/api/v1/convert/pdf/html",
   "pdf-xml": "/api/v1/convert/pdf/xml",
   "pdf-pdfa": "/api/v1/convert/pdf/pdfa",
+  "pdf-pdfua": "/api/v1/convert/pdf/ua",
   "html-pdf": "/api/v1/convert/html/pdf",
   "markdown-pdf": "/api/v1/convert/markdown/pdf",
   "eml-pdf": "/api/v1/convert/eml/pdf",
@@ -58,6 +59,7 @@ export const ENDPOINT_NAMES = {
   "pdf-html": "pdf-to-html",
   "pdf-xml": "pdf-to-xml",
   "pdf-pdfa": "pdf-to-pdfa",
+  "pdf-pdfua": "pdf-to-ua",
   "html-pdf": "html-to-pdf",
   "markdown-pdf": "markdown-to-pdf",
   "eml-pdf": "eml-to-pdf",
@@ -84,6 +86,7 @@ export const ENDPOINT_I18N: Record<string, [string, string]> = {
   "pdf-to-html": ["PDFToHTML.header", "PDF → HTML"],
   "pdf-to-xml": ["PDFToXML.header", "PDF → XML"],
   "pdf-to-pdfa": ["pdfToPDFA.header", "PDF → PDF/A"],
+  "pdf-to-ua": ["pdfToPDFUA.header", "PDF → PDF/UA (accessible)"],
   "file-to-pdf": ["convert.fileToPdf", "Office/Document → PDF"],
   "cbr-to-pdf": ["convert.cbrToPdf", "CBR → PDF"],
   "cbz-to-pdf": ["convert.cbzToPdf", "CBZ → PDF"],
@@ -136,6 +139,7 @@ export const TO_FORMAT_OPTIONS = [
   { value: "pdf", label: "PDF", group: "Document" },
   { value: "pdfa", label: "PDF/A", group: "Document" },
   { value: "pdfx", label: "PDF/X", group: "Document" },
+  { value: "pdfua", label: "PDF/UA", group: "Document" },
   { value: "docx", label: "DOCX", group: "Document" },
   { value: "odt", label: "ODT", group: "Document" },
   { value: "cbz", label: "CBZ", group: "Archive" },
@@ -183,6 +187,7 @@ export const CONVERSION_MATRIX: Record<string, string[]> = {
     "xml",
     "pdfa",
     "pdfx",
+    "pdfua",
     "cbz",
     "cbr",
     "epub",
@@ -244,6 +249,7 @@ export const EXTENSION_TO_ENDPOINT: Record<string, Record<string, string>> = {
     xml: "pdf-to-xml",
     pdfa: "pdf-to-pdfa",
     pdfx: "pdf-to-pdfa", // PDF/X uses the same endpoint as PDF/A
+    pdfua: "pdf-to-ua",
     cbr: "pdf-to-cbr",
     cbz: "pdf-to-cbz",
     epub: "pdf-to-epub",
diff --git a/frontend/editor/src/core/contexts/FileContext.tsx b/frontend/editor/src/core/contexts/FileContext.tsx
index a982c347ca..d9bac4332c 100644
--- a/frontend/editor/src/core/contexts/FileContext.tsx
+++ b/frontend/editor/src/core/contexts/FileContext.tsx
@@ -58,6 +58,7 @@ import {
   IndexedDBProvider,
   useIndexedDB,
 } from "@app/contexts/IndexedDBContext";
+import { onRecordUnreadable } from "@app/services/fileStorage";
 import { useZipConfirmation } from "@app/hooks/useZipConfirmation";
 import ZipWarningModal from "@app/components/shared/ZipWarningModal";
 import EncryptedPdfUnlockModal from "@app/components/shared/EncryptedPdfUnlockModal";
@@ -66,6 +67,7 @@ import { alert } from "@app/components/toast";
 import { buildRemovePasswordFormData } from "@app/hooks/tools/removePassword/buildRemovePasswordFormData";
 import type { RemovePasswordParameters } from "@app/hooks/tools/removePassword/useRemovePasswordParameters";
 import apiClient from "@app/services/apiClient";
+import { reportFilesRemoved } from "@app/services/failureReporting";
 import { processResponse } from "@app/utils/toolResponseProcessor";
 import { ToolOperation } from "@app/types/file";
 import { handlePasswordError } from "@app/utils/toolErrorHandler";
@@ -186,6 +188,21 @@ function FileContextInner({
     setUnlockError(null);
   }, [activeEncryptedFileId]);
 
+  // Storage proved a file's bytes unreadable (WebKit losing a blob's backing
+  // store). Drop it: the viewer would otherwise spin on a document that can
+  // never load. The record stays, so a reload re-tests it.
+  useEffect(
+    () =>
+      onRecordUnreadable((fileId) => {
+        if (!stateRef.current.files.byId[fileId]) return;
+        console.error(
+          `[FileContext] dropping ${fileId} from the workbench: its stored bytes are unreadable`,
+        );
+        lifecycleManager.removeFiles([fileId], stateRef);
+      }),
+    [lifecycleManager],
+  );
+
   const handleUnlockSkip = useCallback(() => {
     if (activeEncryptedFileId) {
       dismissedEncryptedFilesRef.current.add(activeEncryptedFileId);
@@ -594,6 +611,12 @@ function FileContextInner({
         // Remove from memory and cleanup resources
         lifecycleManager.removeFiles(fileIds, stateRef);
 
+        // Only a real delete closes a failure: most callers pass false and mean "take it out of the
+        // workbench", leaving the document, and its failures, very much alive.
+        if (deleteFromStorage !== false) {
+          void reportFilesRemoved(fileIds);
+        }
+
         // Remove from IndexedDB if enabled
         if (indexedDB && enablePersistence && deleteFromStorage !== false) {
           try {
diff --git a/frontend/editor/src/core/contexts/FilesModalContext.tsx b/frontend/editor/src/core/contexts/FilesModalContext.tsx
index 73d1b0477f..17585ae7e8 100644
--- a/frontend/editor/src/core/contexts/FilesModalContext.tsx
+++ b/frontend/editor/src/core/contexts/FilesModalContext.tsx
@@ -41,7 +41,9 @@ interface FilesModalContextType {
   setOnModalClose: (callback: () => void) => void;
 }
 
-const FilesModalContext = createContext<FilesModalContextType | null>(null);
+export const FilesModalContext = createContext<FilesModalContextType | null>(
+  null,
+);
 
 export const FilesModalProvider: React.FC<{ children: React.ReactNode }> = ({
   children,
diff --git a/frontend/editor/src/core/contexts/FilesPageContext.tsx b/frontend/editor/src/core/contexts/FilesPageContext.tsx
index 6774798aae..b8cf4ccf29 100644
--- a/frontend/editor/src/core/contexts/FilesPageContext.tsx
+++ b/frontend/editor/src/core/contexts/FilesPageContext.tsx
@@ -455,7 +455,10 @@ export function FilesPageProvider({ children }: { children: React.ReactNode }) {
           })
           .map((s) => s.id);
         if (localIds.length > 0) {
-          await fileActions.removeFiles(localIds, true);
+          // Take the superseded versions with it, or their bytes sit in storage
+          // forever - invisible, because listings only show leaves.
+          const orphans = await fileStorage.orphanedAncestorIds(localIds);
+          await fileActions.removeFiles([...localIds, ...orphans], true);
         }
       }
 
diff --git a/frontend/editor/src/core/contexts/NavigationContext.tsx b/frontend/editor/src/core/contexts/NavigationContext.tsx
index ae1ee43e0d..a7cb95d349 100644
--- a/frontend/editor/src/core/contexts/NavigationContext.tsx
+++ b/frontend/editor/src/core/contexts/NavigationContext.tsx
@@ -132,7 +132,11 @@ export interface NavigationContextActionsValue {
 const NavigationStateContext = createContext<
   NavigationContextStateValue | undefined
 >(undefined);
-const NavigationActionsContext = createContext<
+/**
+ * Exported like {@link FileActionsContext}: a component mounting in both shells must ask whether
+ * these exist, and {@link useNavigationActions} throws when they do not.
+ */
+export const NavigationActionsContext = createContext<
   NavigationContextActionsValue | undefined
 >(undefined);
 
diff --git a/frontend/editor/src/core/contexts/file/FileReducer.test.ts b/frontend/editor/src/core/contexts/file/FileReducer.test.ts
index 523ef2e358..bde6a17a02 100644
--- a/frontend/editor/src/core/contexts/file/FileReducer.test.ts
+++ b/frontend/editor/src/core/contexts/file/FileReducer.test.ts
@@ -222,3 +222,40 @@ describe("fileContextReducer — silent CONSUME_FILES (background enforcement)",
     expect(next.ui.selectedFileIds).toEqual(["b2"]);
   });
 });
+
+describe("fileContextReducer — REMOVE_FILES", () => {
+  /** Deleting from the library dispatches this for files that were never in the
+   *  workbench; reallocating then re-renders every consumer for nothing. */
+  it("is a true no-op when none of the ids are in the workbench", () => {
+    const state = stateWith([stub("a")]);
+    const next = fileContextReducer(state, {
+      type: "REMOVE_FILES",
+      payload: { fileIds: ["gone" as FileId] },
+    });
+    expect(next).toBe(state);
+  });
+
+  it("still removes the ids it does hold", () => {
+    const state = stateWith([stub("a"), stub("b")]);
+    const next = fileContextReducer(state, {
+      type: "REMOVE_FILES",
+      payload: { fileIds: ["a" as FileId, "gone" as FileId] },
+    });
+    expect(next.files.ids).toEqual(["b"]);
+    expect(next.files.byId["a" as FileId]).toBeUndefined();
+  });
+
+  it("keeps the files slice when only a selection is cleared", () => {
+    const base = stateWith([stub("a")]);
+    const state: FileContextState = {
+      ...base,
+      ui: { ...base.ui, selectedFileIds: ["gone" as FileId] },
+    };
+    const next = fileContextReducer(state, {
+      type: "REMOVE_FILES",
+      payload: { fileIds: ["gone" as FileId] },
+    });
+    expect(next.files).toBe(state.files);
+    expect(next.ui.selectedFileIds).toEqual([]);
+  });
+});
diff --git a/frontend/editor/src/core/contexts/file/FileReducer.ts b/frontend/editor/src/core/contexts/file/FileReducer.ts
index 2697974823..a9dcae7b38 100644
--- a/frontend/editor/src/core/contexts/file/FileReducer.ts
+++ b/frontend/editor/src/core/contexts/file/FileReducer.ts
@@ -183,6 +183,20 @@ export function fileContextReducer(
       const remainingIds = state.files.ids.filter(
         (id) => !fileIds.includes(id),
       );
+      // Clear selections that reference removed files
+      const validSelectedFileIds = state.ui.selectedFileIds.filter(
+        (id) => !fileIds.includes(id),
+      );
+
+      // Deleting a library file that was never in the workbench removes nothing
+      // here, and must not re-render every file and UI consumer.
+      const removedFromWorkbench =
+        remainingIds.length !== state.files.ids.length ||
+        fileIds.some((id) => id in state.files.byId);
+      const deselected =
+        validSelectedFileIds.length !== state.ui.selectedFileIds.length;
+      if (!removedFromWorkbench && !deselected) return state;
+
       const newById = { ...state.files.byId };
 
       // Remove files from state (resource cleanup handled by lifecycle manager)
@@ -190,21 +204,14 @@ export function fileContextReducer(
         delete newById[id];
       });
 
-      // Clear selections that reference removed files
-      const validSelectedFileIds = state.ui.selectedFileIds.filter(
-        (id) => !fileIds.includes(id),
-      );
-
       return {
         ...state,
-        files: {
-          ids: remainingIds,
-          byId: newById,
-        },
-        ui: {
-          ...state.ui,
-          selectedFileIds: validSelectedFileIds,
-        },
+        files: removedFromWorkbench
+          ? { ids: remainingIds, byId: newById }
+          : state.files,
+        ui: deselected
+          ? { ...state.ui, selectedFileIds: validSelectedFileIds }
+          : state.ui,
       };
     }
 
diff --git a/frontend/editor/src/core/contexts/file/fileActions.ts b/frontend/editor/src/core/contexts/file/fileActions.ts
index a95f42939d..4067a99069 100644
--- a/frontend/editor/src/core/contexts/file/fileActions.ts
+++ b/frontend/editor/src/core/contexts/file/fileActions.ts
@@ -26,6 +26,9 @@ import {
   clearBulkAddProgress,
 } from "@app/services/bulkAddProgress";
 const DEBUG = process.env.NODE_ENV === "development";
+/** How long a file may sit unhydrated before the console says so. Reporting only:
+ *  the read is never abandoned, because large files legitimately take time. */
+const STALLED_LOAD_MS = 8000;
 const HYDRATION_CONCURRENCY = 2;
 let activeHydrations = 0;
 const hydrationQueue: Array<() => Promise<void>> = [];
@@ -854,61 +857,78 @@ export async function addStirlingFileStubs(
       // Load File object and hydrate metadata in background (non-blocking)
       const fileId = stub.id;
 
-      // Load File object from IndexedDB asynchronously
-      scheduleMetadataHydration(async () => {
-        const stirlingFile = await fileStorage.getStirlingFile(fileId);
+      // Regenerate page metadata + thumbnails. Queued, because parsing several
+      // PDFs at once is what the concurrency limit exists to bound.
+      const scheduleMetadataFor = (stirlingFile: StirlingFile): void => {
+        scheduleMetadataHydration(async () => {
+          const processedFileMetadata =
+            await generateProcessedFileMetadata(stirlingFile);
+          if (!processedFileMetadata) return;
+
+          const updates: Partial<StirlingFileStub> = {
+            processedFile: processedFileMetadata,
+          };
+
+          // Update thumbnail only if current stub doesn't have one
+          const currentStub = stateRef.current.files.byId[fileId];
+          if (
+            !currentStub?.thumbnailUrl &&
+            processedFileMetadata.thumbnailUrl
+          ) {
+            updates.thumbnailUrl = processedFileMetadata.thumbnailUrl;
+            if (processedFileMetadata.thumbnailUrl.startsWith("blob:")) {
+              lifecycleManager.trackBlobUrl(processedFileMetadata.thumbnailUrl);
+            }
+          }
+
+          lifecycleManager.updateStirlingFileStub(fileId, updates, stateRef);
+        });
+      };
+
+      // Load and publish the File, ahead of any parsing. NOT queued: whether a
+      // file opens at all must not wait on other files' parses.
+      void (async () => {
+        // A storage read that never settles renders as a file that silently won't
+        // open. Name it in the console rather than leaving the user guessing.
+        const stall = setTimeout(
+          () =>
+            console.error(
+              `[Hydration] ${stub.name} (${fileId}) has been loading for ${STALLED_LOAD_MS / 1000}s - the IndexedDB read has not settled`,
+            ),
+          STALLED_LOAD_MS,
+        );
+        const stirlingFile = await fileStorage
+          .getStirlingFile(fileId)
+          .finally(() => clearTimeout(stall));
         if (!stirlingFile) {
+          // A row with no bytes renders empty and its clicks look dead, so take it
+          // back out. Storage keeps the record; fileStorage has said why.
+          console.error(
+            `[Hydration] No readable data for ${stub.name} (${fileId}); removing it from the workbench`,
+          );
+          lifecycleManager.removeFiles([fileId], stateRef);
           return;
         }
 
-        // Store the loaded file in filesRef
         filesRef.current.set(fileId, stirlingFile);
-
-        // Check if processedFile data needs regeneration
-        if (stirlingFile.type.startsWith("application/pdf")) {
-          const needsProcessing =
-            !stub.processedFile ||
-            !stub.processedFile.pages ||
-            stub.processedFile.pages.length === 0 ||
-            stub.processedFile.totalPages !== stub.processedFile.pages.length;
-
-          if (needsProcessing) {
-            // Regenerate metadata
-            const processedFileMetadata =
-              await generateProcessedFileMetadata(stirlingFile);
-
-            if (processedFileMetadata) {
-              const updates: Partial<StirlingFileStub> = {
-                processedFile: processedFileMetadata,
-              };
-
-              // Update thumbnail only if current stub doesn't have one
-              const currentStub = stateRef.current.files.byId[fileId];
-              if (
-                !currentStub?.thumbnailUrl &&
-                processedFileMetadata.thumbnailUrl
-              ) {
-                updates.thumbnailUrl = processedFileMetadata.thumbnailUrl;
-                if (processedFileMetadata.thumbnailUrl.startsWith("blob:")) {
-                  lifecycleManager.trackBlobUrl(
-                    processedFileMetadata.thumbnailUrl,
-                  );
-                }
-              }
-
-              lifecycleManager.updateStirlingFileStub(
-                fileId,
-                updates,
-                stateRef,
-              );
-              return;
-            }
-          }
-        }
-
-        // Stub dispatch triggers re-render so the viewer appears (ADD_FILES alone doesn't update selectors).
+        // filesRef is a ref, so the selectors gating the workbench only see the
+        // file once something dispatches. Parsing it can't be a precondition.
         lifecycleManager.updateStirlingFileStub(fileId, {}, stateRef);
-      });
+
+        const needsProcessing =
+          !stub.processedFile ||
+          !stub.processedFile.pages ||
+          stub.processedFile.pages.length === 0 ||
+          stub.processedFile.totalPages !== stub.processedFile.pages.length;
+        if (
+          stirlingFile.type.startsWith("application/pdf") &&
+          needsProcessing
+        ) {
+          scheduleMetadataFor(stirlingFile);
+        }
+      })().catch((error) =>
+        console.error(`[Hydration] Failed to load ${fileId}:`, error),
+      );
     }
 
     return loadedFiles;
diff --git a/frontend/editor/src/core/contexts/file/hydrationPublish.test.ts b/frontend/editor/src/core/contexts/file/hydrationPublish.test.ts
new file mode 100644
index 0000000000..c4bdda01c1
--- /dev/null
+++ b/frontend/editor/src/core/contexts/file/hydrationPublish.test.ts
@@ -0,0 +1,77 @@
+import { describe, expect, test, vi } from "vitest";
+import type {
+  FileContextState,
+  StirlingFileStub,
+} from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+
+/**
+ * A clicked file is only visible once hydration DISPATCHES: the workbench reads
+ * files out of a ref, so `activeFiles` stays empty until then. Parsing must not
+ * gate that - a PDF engine that stalls used to leave the workbench on its empty
+ * state with the row showing as open, and clicks doing nothing.
+ */
+
+const getStirlingFile = vi.hoisted(() => vi.fn());
+vi.mock("@app/services/fileStorage", () => ({
+  fileStorage: { getStirlingFile },
+}));
+/** The stall under test: the page parse never settles. */
+vi.mock("@app/utils/thumbnailUtils", () => ({
+  generateThumbnailPairWithMetadata: () => new Promise(() => {}),
+}));
+
+const stub = (id: string): StirlingFileStub =>
+  ({
+    id: id as FileId,
+    name: `${id}.pdf`,
+    type: "application/pdf",
+    size: 10,
+    lastModified: 0,
+  }) as StirlingFileStub;
+
+async function harness(ids: string[]) {
+  vi.resetModules();
+  getStirlingFile.mockImplementation(
+    async (id: FileId) =>
+      new File(["%PDF-1.7"], `${id}.pdf`, { type: "application/pdf" }),
+  );
+  const { addStirlingFileStubs } =
+    await import("@app/contexts/file/fileActions");
+
+  const stubs = ids.map(stub);
+  const state = {
+    files: { ids: [], byId: {} },
+    pinnedFiles: new Set(),
+    ui: { selectedFileIds: [], selectedPageNumbers: [] },
+  } as unknown as FileContextState;
+  const stateRef = { current: state };
+  const filesRef = { current: new Map<FileId, File>() };
+  const published: FileId[] = [];
+  const lifecycleManager = {
+    updateStirlingFileStub: (fileId: FileId) => published.push(fileId),
+    removeFiles: () => {},
+    trackBlobUrl: () => {},
+  };
+
+  await addStirlingFileStubs(
+    stubs,
+    {},
+    stateRef,
+    filesRef,
+    () => {},
+    lifecycleManager as never,
+  );
+  return { filesRef, published };
+}
+
+describe("workbench hydration — a stalled parse can't hide the file", () => {
+  test("publishes every file's bytes while their parses hang", async () => {
+    // Three, because the parse queue only runs two at a time: the third proves
+    // loading isn't queued behind parses that never finish.
+    const { filesRef, published } = await harness(["a", "b", "c"]);
+
+    await vi.waitFor(() => expect(published).toHaveLength(3));
+    expect([...filesRef.current.keys()]).toEqual(["a", "b", "c"]);
+  });
+});
diff --git a/frontend/editor/src/core/contexts/file/removeFiles.reporting.test.tsx b/frontend/editor/src/core/contexts/file/removeFiles.reporting.test.tsx
new file mode 100644
index 0000000000..dec17e25c4
--- /dev/null
+++ b/frontend/editor/src/core/contexts/file/removeFiles.reporting.test.tsx
@@ -0,0 +1,87 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { render, act } from "@testing-library/react";
+import { MantineProvider } from "@mantine/core";
+import { FileContextProvider } from "@app/contexts/FileContext";
+import { useFileActions } from "@app/contexts/file/fileHooks";
+import type { FileContextActions } from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+
+/**
+ * `removeFiles` deletes a document or merely takes it out of the workbench, told apart only by
+ * `deleteFromStorage`. Reporting both closed the user's own notifications as they opened files.
+ */
+
+const reportFilesRemoved = vi.fn();
+vi.mock("@app/services/failureReporting", () => ({
+  reportFilesRemoved: (fileIds: string[]) => reportFilesRemoved(fileIds),
+  reportToolFailure: vi.fn(),
+}));
+
+// IndexedDB, which jsdom has none of. Stubbed so the delete branch can run to the end.
+vi.mock("@app/services/fileStorage", () => ({
+  // FileContext subscribes to this to drop files whose bytes are unreadable.
+  onRecordUnreadable: () => () => {},
+  fileStorage: {
+    init: vi.fn().mockResolvedValue(undefined),
+    deleteMultipleStirlingFiles: vi.fn().mockResolvedValue(undefined),
+    getAllStirlingFileStubs: vi.fn().mockResolvedValue([]),
+  },
+}));
+
+const FILE_ID = "f-1" as FileId;
+
+let actionsRef: FileContextActions | null = null;
+
+function Controller() {
+  actionsRef = useFileActions().actions;
+  return null;
+}
+
+function setup() {
+  render(
+    <MantineProvider>
+      <FileContextProvider>
+        <Controller />
+      </FileContextProvider>
+    </MantineProvider>,
+  );
+}
+
+beforeEach(() => {
+  reportFilesRemoved.mockReset();
+  actionsRef = null;
+});
+
+describe("removeFiles and the failure queue", () => {
+  it("tells the server when a document is actually deleted", async () => {
+    setup();
+
+    await act(async () => {
+      await actionsRef?.removeFiles([FILE_ID], true);
+    });
+
+    expect(reportFilesRemoved).toHaveBeenCalledWith([FILE_ID]);
+  });
+
+  it("says nothing when the file is only closed in the workbench", async () => {
+    // Closing a tab or unchecking it leaves the document on the device, failures and all.
+    setup();
+
+    await act(async () => {
+      await actionsRef?.removeFiles([FILE_ID], false);
+    });
+
+    expect(reportFilesRemoved).not.toHaveBeenCalled();
+  });
+
+  it("treats an unspecified removal as a delete, the way the storage path does", async () => {
+    // Same default as the IndexedDB branch: only an explicit false means keep.
+    setup();
+
+    await act(async () => {
+      await actionsRef?.removeFiles([FILE_ID]);
+    });
+
+    expect(reportFilesRemoved).toHaveBeenCalledWith([FILE_ID]);
+  });
+});
diff --git a/frontend/editor/src/core/contexts/viewer/viewerActions.ts b/frontend/editor/src/core/contexts/viewer/viewerActions.ts
index 2e0231d766..ae5679c9b6 100644
--- a/frontend/editor/src/core/contexts/viewer/viewerActions.ts
+++ b/frontend/editor/src/core/contexts/viewer/viewerActions.ts
@@ -6,6 +6,8 @@ import {
   ZoomState,
 } from "@app/contexts/viewer/viewerBridges";
 import { PdfBookmarkObject, PdfAttachmentObject } from "@embedpdf/models";
+import { ZoomLevel, Point } from "@embedpdf/plugin-zoom";
+import { FormattedSelection } from "@embedpdf/plugin-selection";
 
 export interface ScrollActions {
   scrollToPage: (page: number, behavior?: "smooth" | "instant") => void;
@@ -19,7 +21,7 @@ export interface ZoomActions {
   zoomIn: () => void;
   zoomOut: () => void;
   toggleMarqueeZoom: () => void;
-  requestZoom: (level: any, center?: any) => void;
+  requestZoom: (level: ZoomLevel, center?: Point) => void;
   setZoomLevel: (factor: number) => void;
 }
 
@@ -31,8 +33,7 @@ export interface PanActions {
 
 export interface SelectionActions {
   copyToClipboard: () => void;
-  getSelectedText: () => string;
-  getFormattedSelection: () => any;
+  getFormattedSelection: () => FormattedSelection[] | null;
   selectAll: (totalPages: number) => Promise<boolean>;
   selectWordAt: (pageIndex: number, x: number, y: number) => boolean;
 }
@@ -51,7 +52,7 @@ export interface RotationActions {
 }
 
 export interface SearchActions {
-  search: (query: string) => Promise<any> | undefined;
+  search: (query: string) => Promise<unknown> | undefined;
   next: () => void;
   previous: () => void;
   clear: () => void;
@@ -214,7 +215,7 @@ export function createViewerActions({
         api.toggleMarqueeZoom();
       }
     },
-    requestZoom: (level: any, center?: any) => {
+    requestZoom: (level: ZoomLevel, center?: Point) => {
       const api = registry.current.zoom?.api;
       if (api?.requestZoom) {
         api.requestZoom(level, center);
@@ -257,13 +258,6 @@ export function createViewerActions({
         api.copyToClipboard();
       }
     },
-    getSelectedText: () => {
-      const api = registry.current.selection?.api;
-      if (api?.getSelectedText) {
-        return api.getSelectedText() ?? "";
-      }
-      return "";
-    },
     getFormattedSelection: () => {
       const api = registry.current.selection?.api;
       if (api?.getFormattedSelection) {
diff --git a/frontend/editor/src/core/contexts/viewer/viewerBridges.ts b/frontend/editor/src/core/contexts/viewer/viewerBridges.ts
index c003013cb3..7a9f177e03 100644
--- a/frontend/editor/src/core/contexts/viewer/viewerBridges.ts
+++ b/frontend/editor/src/core/contexts/viewer/viewerBridges.ts
@@ -1,5 +1,7 @@
 import { SpreadMode } from "@embedpdf/plugin-spread/react";
 import { PdfBookmarkObject, PdfAttachmentObject } from "@embedpdf/models";
+import { ZoomLevel, Point } from "@embedpdf/plugin-zoom";
+import { FormattedSelection } from "@embedpdf/plugin-selection";
 
 export enum PdfPermissionFlag {
   Print = 0x0004,
@@ -46,7 +48,7 @@ export interface ZoomAPIWrapper {
   zoomIn: () => void;
   zoomOut: () => void;
   toggleMarqueeZoom: () => void;
-  requestZoom: (level: any, center?: any) => void;
+  requestZoom: (level: ZoomLevel, center?: Point) => void;
 }
 
 export interface PanAPIWrapper {
@@ -58,8 +60,7 @@ export interface PanAPIWrapper {
 
 export interface SelectionAPIWrapper {
   copyToClipboard: () => void;
-  getSelectedText: () => string | any;
-  getFormattedSelection: () => any;
+  getFormattedSelection: () => FormattedSelection[];
   selectAll: (totalPages: number) => Promise<boolean>;
   selectWordAt: (pageIndex: number, x: number, y: number) => boolean;
 }
@@ -79,7 +80,7 @@ export interface RotationAPIWrapper {
 }
 
 export interface SearchAPIWrapper {
-  search: (query: string) => Promise<any>;
+  search: (query: string) => Promise<unknown>;
   clear: () => void;
   next: () => void;
   previous: () => void;
diff --git a/frontend/editor/src/core/data/automatableToolsHaveOperationConfig.test.tsx b/frontend/editor/src/core/data/automatableToolsHaveOperationConfig.test.tsx
index 461c07ebdf..c8942942df 100644
--- a/frontend/editor/src/core/data/automatableToolsHaveOperationConfig.test.tsx
+++ b/frontend/editor/src/core/data/automatableToolsHaveOperationConfig.test.tsx
@@ -30,4 +30,15 @@ describe("automatable tools", () => {
 
     expect(offeredWithoutConfig).toEqual([]);
   });
+
+  // Reorganize Pages has an automatable form (organization mode + page-order string) and a
+  // context-free settings component, but its registry entry once left automationSettings null,
+  // so both Automate and the pipeline builder showed "no configurable settings". Guard the wiring.
+  test("Reorganize Pages exposes automation settings so it is configurable, not no-settings", () => {
+    const { result } = renderHook(() => useTranslatedToolCatalog());
+
+    expect(
+      result.current.regularTools.reorganizePages?.automationSettings,
+    ).toBeTruthy();
+  });
 });
diff --git a/frontend/editor/src/core/data/classifyIsAPipelineTask.test.tsx b/frontend/editor/src/core/data/classifyIsAPipelineTask.test.tsx
new file mode 100644
index 0000000000..f5281f80ae
--- /dev/null
+++ b/frontend/editor/src/core/data/classifyIsAPipelineTask.test.tsx
@@ -0,0 +1,76 @@
+/**
+ * Classification is a thing a pipeline can do, not a thing only the Classification policy may do.
+ *
+ * The chain that used to stop it: `getExecutableTools` drops any tool whose endpoint is not a
+ * member of the generated `ToolEndpoint` union; that union comes from the OpenAPI spec, gated by
+ * the generator's namespace allowlist; and the classify controller was `@Hidden`, so it never
+ * reached the spec at all. These tests pin each link, because any one of them silently removes the
+ * step from the builder's picker rather than failing loudly.
+ */
+import { describe, expect, test, vi } from "vitest";
+import { renderHook } from "@testing-library/react";
+import { useTranslatedToolCatalog } from "@app/data/useTranslatedToolRegistry";
+import { getExecutableTools } from "@app/hooks/tools/shared/toolAutomation";
+import { isToolEndpoint } from "@app/hooks/tools/shared/toolApiMapping";
+import { TOOL_IO } from "@app/types/toolIO";
+import { filterToolRegistryByQuery } from "@app/utils/toolSearch";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    t: (key: string, fallback?: string) => fallback ?? key,
+    i18n: { changeLanguage: vi.fn(), language: "en-US" },
+  }),
+  Trans: ({ children }: { children?: unknown }) => children,
+}));
+
+const CLASSIFY_ENDPOINT = "/api/v1/ai/tools/classify-and-label";
+
+describe("classify as a pipeline task", () => {
+  test("the classify endpoint is a generated ToolEndpoint", () => {
+    // Fails if the controller goes back to @Hidden, or the generator's allowlist drops the
+    // /api/v1/ai/tools/ namespace, or nobody regenerated after either.
+    expect(isToolEndpoint(CLASSIFY_ENDPOINT)).toBe(true);
+  });
+
+  test("the builder offers it as a step", () => {
+    const { result } = renderHook(() => useTranslatedToolCatalog());
+
+    const executable = getExecutableTools(result.current.regularTools);
+    const classify = executable.find((tool) => tool.toolId === "classify");
+
+    expect(classify).toBeDefined();
+    expect(classify?.endpoint).toBe(CLASSIFY_ENDPOINT);
+  });
+
+  test("it declares PDF in, PDF out, so a chain can be checked across it", () => {
+    // Without this the builder shows "Can't check what this step accepts" and validation stops
+    // dead at the step - the I/O table is keyed by endpoint and comes from @ToolIO in the spec.
+    expect(TOOL_IO[CLASSIFY_ENDPOINT]).toEqual({
+      accepts: ["PDF"],
+      produces: "PDF",
+      arity: "SISO",
+    });
+  });
+
+  test("it is offered to pipelines but kept out of the editor's tool list", () => {
+    const { result } = renderHook(() => useTranslatedToolCatalog());
+
+    // There is no interactive classify tool to open - it only means something inside a pipeline.
+    expect(result.current.regularTools.classify?.hiddenFromToolList).toBe(true);
+    expect(
+      filterToolRegistryByQuery(result.current.regularTools, "").some(
+        (ranked) => ranked.item[0] === "classify",
+      ),
+    ).toBe(false);
+  });
+
+  test("it does not re-classify by default", () => {
+    const { result } = renderHook(() => useTranslatedToolCatalog());
+
+    const config = result.current.regularTools.classify?.operationConfig;
+
+    // The step is idempotent unless asked otherwise: a second run on a classified document
+    // would be a second engine call, and a second charge, for the same answer.
+    expect(config?.defaultParameters).toEqual({ reclassify: false });
+  });
+});
diff --git a/frontend/editor/src/core/data/toolsTaxonomy.ts b/frontend/editor/src/core/data/toolsTaxonomy.ts
index f9c2dde02f..740b8a13ec 100644
--- a/frontend/editor/src/core/data/toolsTaxonomy.ts
+++ b/frontend/editor/src/core/data/toolsTaxonomy.ts
@@ -29,6 +29,7 @@ import { ProprietaryToolId } from "@app/types/proprietaryToolId";
 import { PrototypeToolId } from "@app/types/prototypeToolId";
 
 export enum SubcategoryId {
+  AI = "ai",
   SIGNING = "signing",
   DOCUMENT_SECURITY = "documentSecurity",
   VERIFICATION = "verification",
@@ -71,6 +72,8 @@ export type ToolRegistryEntry = {
   > | null;
   // Whether this tool supports automation (defaults to true)
   supportsAutomate?: boolean;
+  // Keep out of the editor's tool list: a step only a pipeline runs, with no UI to open.
+  hiddenFromToolList?: boolean;
   // Synonyms for search (optional)
   synonyms?: string[];
   // Version status indicator (e.g., "alpha", "beta")
@@ -90,6 +93,8 @@ export type ProprietaryToolRegistry = Record<
 export type PrototypeToolRegistry = Record<PrototypeToolId, ToolRegistryEntry>;
 
 export const SUBCATEGORY_ORDER: SubcategoryId[] = [
+  // First: AI steps are the ones a user is least likely to know exist.
+  SubcategoryId.AI,
   SubcategoryId.SIGNING,
   SubcategoryId.DOCUMENT_SECURITY,
   SubcategoryId.VERIFICATION,
@@ -104,6 +109,7 @@ export const SUBCATEGORY_ORDER: SubcategoryId[] = [
 ];
 
 export const SUBCATEGORY_COLOR_MAP: Record<SubcategoryId, string> = {
+  [SubcategoryId.AI]: "var(--category-color-automation)", // Pink
   [SubcategoryId.SIGNING]: "var(--category-color-signing)", // Green
   [SubcategoryId.DOCUMENT_SECURITY]: "var(--category-color-security)", // Orange
   [SubcategoryId.VERIFICATION]: "var(--category-color-verification)", // Orange
diff --git a/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx b/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx
index 0a39da2fb9..ab4406abfd 100644
--- a/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx
+++ b/frontend/editor/src/core/data/useTranslatedToolRegistry.tsx
@@ -20,6 +20,7 @@ import {
 import { adjustContrastOperationConfig } from "@app/hooks/tools/adjustContrast/useAdjustContrastOperation";
 import { getSynonyms } from "@app/utils/toolSynonyms";
 import { useProprietaryToolRegistry } from "@app/data/useProprietaryToolRegistry";
+import { classifyOperationConfig } from "@app/hooks/tools/classify/useClassifyOperation";
 import { compressOperationConfig } from "@app/hooks/tools/compress/useCompressOperation";
 import { splitOperationConfig } from "@app/hooks/tools/split/useSplitOperation";
 import { addPasswordOperationConfig } from "@app/hooks/tools/addPassword/useAddPasswordOperation";
@@ -454,11 +455,11 @@ export function useTranslatedToolCatalog(): TranslatedToolCatalog {
             height="1.5rem"
           />
         ),
-        name: t("home.formFill.title", "Fill Form"),
+        name: t("home.formFill.title", "Form Editor"),
         component: lazy(() => import("@app/tools/formFill/FormFill")),
         description: t(
           "home.formFill.desc",
-          "Fill PDF form fields interactively with a visual editor",
+          "Fill, create, edit, and delete PDF form fields with a visual editor",
         ),
         categoryId: ToolCategoryId.STANDARD_TOOLS,
         subcategoryId: SubcategoryId.GENERAL,
@@ -466,7 +467,19 @@ export function useTranslatedToolCatalog(): TranslatedToolCatalog {
         endpoints: ["form-fill"],
         automationSettings: null,
         supportsAutomate: false,
-        synonyms: ["form", "fill", "fillable", "input", "field", "acroform"],
+        synonyms: [
+          "form",
+          "fill",
+          "fillable",
+          "input",
+          "field",
+          "acroform",
+          "edit",
+          "create",
+          "editor",
+          "modify",
+          "builder",
+        ],
       },
       changePermissions: {
         icon: <LocalIcon icon="lock-outline" width="1.5rem" height="1.5rem" />,
@@ -700,7 +713,10 @@ export function useTranslatedToolCatalog(): TranslatedToolCatalog {
         endpoints: ["rearrange-pages"],
         operationConfig: asRegistryConfig(reorganizePagesOperationConfig),
         synonyms: getSynonyms(t, "reorganizePages"),
-        automationSettings: null,
+        automationSettings: lazySettings(
+          () =>
+            import("@app/components/tools/reorganizePages/ReorganizePagesSettings"),
+        ),
       },
       scalePages: {
         icon: (
@@ -1335,6 +1351,30 @@ export function useTranslatedToolCatalog(): TranslatedToolCatalog {
         synonyms: getSynonyms(t, "compare"),
         supportsAutomate: false,
       },
+      classify: {
+        icon: (
+          <LocalIcon
+            icon="label-outline-rounded"
+            width="1.5rem"
+            height="1.5rem"
+          />
+        ),
+        name: t("home.classify.title", "Classify"),
+        // No interactive UI: this is a pipeline step, registered so a pipeline can name it.
+        component: null,
+        description: t(
+          "home.classify.desc",
+          "Identify what kind of document this is and tag it.",
+        ),
+        categoryId: ToolCategoryId.ADVANCED_TOOLS,
+        subcategoryId: SubcategoryId.AI,
+        maxFiles: -1,
+        endpoints: ["classify-and-label"],
+        operationConfig: asRegistryConfig(classifyOperationConfig),
+        automationSettings: null,
+        // Pipeline-only: there is no interactive classify tool to open in the editor.
+        hiddenFromToolList: true,
+      },
       compress: {
         icon: (
           <LocalIcon
diff --git a/frontend/editor/src/core/hooks/tools/classify/useClassifyOperation.ts b/frontend/editor/src/core/hooks/tools/classify/useClassifyOperation.ts
new file mode 100644
index 0000000000..9515e837a4
--- /dev/null
+++ b/frontend/editor/src/core/hooks/tools/classify/useClassifyOperation.ts
@@ -0,0 +1,52 @@
+import { defineSingleFileTool } from "@app/hooks/tools/shared/useToolOperation";
+import {
+  objectToFormData,
+  type ToolApiParams,
+  type ToolEndpoint,
+} from "@app/hooks/tools/shared/toolApiMapping";
+
+/**
+ * Classification as an ordinary pipeline step.
+ *
+ * <p>The tool reads a window of the document, asks the AI engine what kind of document it is, and
+ * writes the verdict into the PDF's metadata. It has no interactive UI - there is nothing for a
+ * user to set beyond whether to redo work already done - so it exists in the registry purely so a
+ * pipeline can name it, the same way the Classification policy always could.
+ */
+const ENDPOINT = "/api/v1/ai/tools/classify-and-label" satisfies ToolEndpoint;
+type ClassifyApiParams = ToolApiParams[typeof ENDPOINT];
+
+export interface ClassifyParameters {
+  /**
+   * Classify again even when the document already carries a verdict. Off by default: re-running
+   * costs a second engine call, and a document that has been classified has nothing new to say.
+   */
+  reclassify: boolean;
+}
+
+export const defaultParameters: ClassifyParameters = { reclassify: false };
+
+export const classifyToApiParams = (
+  parameters: ClassifyParameters,
+): ClassifyApiParams => ({ reclassify: parameters.reclassify });
+
+export const classifyFromApiParams = (
+  apiParams: ClassifyApiParams,
+): Partial<ClassifyParameters> => ({
+  reclassify: apiParams.reclassify ?? defaultParameters.reclassify,
+});
+
+export const buildClassifyFormData = (
+  parameters: ClassifyParameters,
+  file: File,
+): FormData =>
+  objectToFormData(classifyToApiParams(parameters), { fileInput: file });
+
+export const classifyOperationConfig = defineSingleFileTool({
+  buildFormData: buildClassifyFormData,
+  toApiParams: classifyToApiParams,
+  fromApiParams: classifyFromApiParams,
+  operationType: "classify",
+  endpoint: ENDPOINT,
+  defaultParameters,
+});
diff --git a/frontend/editor/src/core/hooks/tools/convert/convertPdfUaAltText.test.ts b/frontend/editor/src/core/hooks/tools/convert/convertPdfUaAltText.test.ts
new file mode 100644
index 0000000000..dbeaabda0f
--- /dev/null
+++ b/frontend/editor/src/core/hooks/tools/convert/convertPdfUaAltText.test.ts
@@ -0,0 +1,92 @@
+/**
+ * PDF/UA alt text is keyed by an image's position within one document ("pageIndex:ordinal"), so the
+ * same key names a different image in the next file. A multi-file PDF/UA conversion posts one
+ * request per file, so an unscoped description would be attached to whatever image happens to sit
+ * in that position in every other document - a wrong description that still passes the checker.
+ */
+
+import { beforeEach, describe, expect, test, vi } from "vitest";
+import { convertProcessor } from "@app/hooks/tools/convert/useConvertOperation";
+import {
+  defaultParameters,
+  type ConvertParameters,
+} from "@app/hooks/tools/convert/useConvertParameters";
+
+const api = vi.hoisted(() => ({ post: vi.fn() }));
+vi.mock("@app/services/apiClient", () => ({
+  default: {
+    post: api.post,
+    get: vi.fn(),
+    put: vi.fn(),
+    delete: vi.fn(),
+    interceptors: { response: { use: vi.fn() } },
+  },
+}));
+
+const pdfUaParameters = (altText: string): ConvertParameters => ({
+  ...defaultParameters,
+  fromExtension: "pdf",
+  toExtension: "pdfua",
+  pdfUaOptions: { ...defaultParameters.pdfUaOptions, altText },
+});
+
+const pdf = (name: string) =>
+  new File(["%PDF-1.7"], name, { type: "application/pdf" });
+
+const bodyOf = (call: number): FormData =>
+  api.post.mock.calls[call][1] as FormData;
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  api.post.mockResolvedValue({
+    data: new Blob(["%PDF-1.7"], { type: "application/pdf" }),
+    headers: { "content-type": "application/pdf" },
+  });
+});
+
+describe("PDF/UA alt text never crosses documents", () => {
+  test("posts to the PDF/UA endpoint with the descriptions when one file is converted", async () => {
+    await convertProcessor(pdfUaParameters("0:1=Bar chart of revenue"), [
+      pdf("report.pdf"),
+    ]);
+
+    expect(api.post).toHaveBeenCalledTimes(1);
+    expect(api.post.mock.calls[0][0]).toBe("/api/v1/convert/pdf/ua");
+    expect(bodyOf(0).get("altText")).toBe("0:1=Bar chart of revenue");
+  });
+
+  test("drops the descriptions when several files are converted, rather than mislabelling", async () => {
+    await convertProcessor(pdfUaParameters("0:1=Bar chart of revenue"), [
+      pdf("report.pdf"),
+      pdf("appendix.pdf"),
+    ]);
+
+    // One request per file: without scoping, appendix.pdf's figure 0:1 would be called a bar chart.
+    expect(api.post).toHaveBeenCalledTimes(2);
+    expect(bodyOf(0).get("altText")).toBeNull();
+    expect(bodyOf(1).get("altText")).toBeNull();
+  });
+
+  test("keeps the options that really do apply to every file", async () => {
+    const parameters = pdfUaParameters("0:1=Bar chart of revenue");
+    parameters.pdfUaOptions.profile = "ua2";
+    parameters.pdfUaOptions.language = "fr-FR";
+    parameters.pdfUaOptions.overrideLanguage = true;
+
+    await convertProcessor(parameters, [pdf("a.pdf"), pdf("b.pdf")]);
+
+    for (const call of [0, 1]) {
+      expect(bodyOf(call).get("profile")).toBe("ua2");
+      expect(bodyOf(call).get("language")).toBe("fr-FR");
+      expect(bodyOf(call).get("overrideLanguage")).toBe("true");
+    }
+  });
+
+  test("leaves the caller's parameters untouched", async () => {
+    const parameters = pdfUaParameters("0:1=Bar chart of revenue");
+
+    await convertProcessor(parameters, [pdf("a.pdf"), pdf("b.pdf")]);
+
+    expect(parameters.pdfUaOptions.altText).toBe("0:1=Bar chart of revenue");
+  });
+});
diff --git a/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts b/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
index 19335373f1..554946cce7 100644
--- a/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/convert/useConvertOperation.ts
@@ -51,10 +51,9 @@ export const shouldProcessFilesSeparately = (
       // PDF to image conversions (each PDF should generate its own image file)
       (parameters.fromExtension === "pdf" &&
         isImageFormat(parameters.toExtension)) ||
-      // PDF to PDF/A and PDF/X conversions (each PDF should be processed separately)
+      // PDF to PDF/A, PDF/X and PDF/UA conversions (each PDF should be processed separately)
       (parameters.fromExtension === "pdf" &&
-        (parameters.toExtension === "pdfa" ||
-          parameters.toExtension === "pdfx")) ||
+        ["pdfa", "pdfx", "pdfua"].includes(parameters.toExtension)) ||
       // PDF to text-like/spreadsheet formats should be one output per input
       (parameters.fromExtension === "pdf" &&
         ["txt", "rtf", "csv", "xlsx"].includes(parameters.toExtension)) ||
@@ -99,6 +98,7 @@ export const buildConvertFormData = (
     htmlOptions,
     emailOptions,
     pdfaOptions,
+    pdfUaOptions,
     pdfxOptions,
     cbrOptions,
     pdfToCbrOptions,
@@ -160,6 +160,18 @@ export const buildConvertFormData = (
   } else if (fromExtension === "pdf" && toExtension === "pdfa") {
     formData.append("outputFormat", pdfaOptions.outputFormat);
     formData.append("strict", String(!!pdfaOptions.strict));
+  } else if (fromExtension === "pdf" && toExtension === "pdfua") {
+    formData.append("profile", pdfUaOptions.profile);
+    formData.append("language", pdfUaOptions.language);
+    formData.append("overrideLanguage", String(pdfUaOptions.overrideLanguage));
+    formData.append("embedFonts", String(pdfUaOptions.embedFonts));
+    // Sent only when set, so the backend can fall back to the first heading then the filename.
+    if (pdfUaOptions.title.trim()) {
+      formData.append("title", pdfUaOptions.title.trim());
+    }
+    if (pdfUaOptions.altText.trim()) {
+      formData.append("altText", pdfUaOptions.altText.trim());
+    }
   } else if (fromExtension === "pdf" && toExtension === "pdfx") {
     // Use PDF/A endpoint with PDF/X format parameter
     formData.append("outputFormat", pdfxOptions?.outputFormat || "pdfx");
@@ -228,8 +240,8 @@ export const createFileFromResponse = (
 ): File => {
   const originalName = originalFileName.split(".")[0];
 
-  // Map both pdfa and pdfx to pdf since they both result in PDF files
-  if (targetExtension == "pdfa" || targetExtension == "pdfx") {
+  // Map pdfa, pdfx and pdfua to pdf since they all result in PDF files
+  if (["pdfa", "pdfx", "pdfua"].includes(targetExtension)) {
     targetExtension = "pdf";
   }
 
@@ -238,11 +250,28 @@ export const createFileFromResponse = (
   return createFileFromApiResponse(responseData, headers, fallbackFilename);
 };
 
-// Static processor that can be used by both the hook and automation executor
-export const convertProcessor = async (
+/**
+ * PDF/UA alt text is keyed by an image's position in one document, so reusing it across files would
+ * describe the wrong image - worse than no description, since the checker still passes. Dropped
+ * rather than misapplied; the UI offers descriptions for a single file, this guards every caller.
+ */
+const withoutCrossFileAltText = (
   parameters: ConvertParameters,
   selectedFiles: File[],
+): ConvertParameters =>
+  selectedFiles.length > 1 && parameters.pdfUaOptions.altText
+    ? {
+        ...parameters,
+        pdfUaOptions: { ...parameters.pdfUaOptions, altText: "" },
+      }
+    : parameters;
+
+// Static processor that can be used by both the hook and automation executor
+export const convertProcessor = async (
+  rawParameters: ConvertParameters,
+  selectedFiles: File[],
 ): Promise<CustomProcessorResult> => {
+  const parameters = withoutCrossFileAltText(rawParameters, selectedFiles);
   const processedFiles: File[] = [];
 
   // Map PDF/X to use PDF/A endpoint
@@ -486,6 +515,18 @@ const CONVERT_OPTION_READERS: ConvertOptionReaders = {
             strict: asFlag(body.strict),
           },
         },
+  "/api/v1/convert/pdf/ua": (body) => ({
+    pdfUaOptions: {
+      profile: body.profile ?? defaultParameters.pdfUaOptions.profile,
+      language: body.language ?? defaultParameters.pdfUaOptions.language,
+      overrideLanguage: asFlag(body.overrideLanguage),
+      title: body.title ?? defaultParameters.pdfUaOptions.title,
+      // Absent means the step predates the field, and embedding is the conforming default.
+      embedFonts:
+        body.embedFonts !== undefined ? asFlag(body.embedFonts) : true,
+      altText: body.altText ?? defaultParameters.pdfUaOptions.altText,
+    },
+  }),
   "/api/v1/convert/cbr/pdf": (body) => ({
     cbrOptions: { optimizeForEbook: asFlag(body.optimizeForEbook) },
   }),
diff --git a/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts b/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts
index b1c0151cc8..6c4d1ffe9e 100644
--- a/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts
+++ b/frontend/editor/src/core/hooks/tools/convert/useConvertParameters.ts
@@ -46,6 +46,15 @@ export interface ConvertParameters extends BaseParameters {
     outputFormat: string;
     strict?: boolean;
   };
+  pdfUaOptions: {
+    profile: string;
+    language: string;
+    overrideLanguage: boolean;
+    title: string;
+    embedFonts: boolean;
+    /** Descriptions as `pageIndex:ordinal=text` lines, keyed as the backend hands them out. */
+    altText: string;
+  };
   pdfxOptions: {
     outputFormat: string;
   };
@@ -108,6 +117,14 @@ export const defaultParameters: ConvertParameters = {
     outputFormat: "pdfa-2b",
     strict: false,
   },
+  pdfUaOptions: {
+    profile: "ua1",
+    language: "en-GB",
+    overrideLanguage: false,
+    title: "",
+    embedFonts: true,
+    altText: "",
+  },
   pdfxOptions: {
     outputFormat: "pdfx",
   },
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.test.ts b/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.test.ts
index ba8c0bc2be..f3443dfb51 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.test.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.test.ts
@@ -41,12 +41,13 @@ describe("objectToFormData", () => {
   });
 
   test("expands arrays into repeated fields", () => {
-    const request: ToolApiParams["/api/v1/misc/add-attachments"] = {
-      attachments: ["a.png", "b.png", "c.png"],
+    const request: ToolApiParams["/api/v1/misc/ocr-pdf"] = {
+      ocrType: "Normal",
+      languages: ["eng", "fra", "deu"],
     };
     const formData = objectToFormData(request);
 
-    expect(formData.getAll("attachments")).toEqual(["a.png", "b.png", "c.png"]);
+    expect(formData.getAll("languages")).toEqual(["eng", "fra", "deu"]);
   });
 
   test("throws on a non-primitive field value rather than dropping it", () => {
@@ -70,6 +71,18 @@ describe("objectToFormData", () => {
     expect(formData.get("optimizeLevel")).toBe("5");
   });
 
+  test("sends a File-valued model field as a file part, not stringified", () => {
+    const stamp = new File(["s"], "stamp.png", { type: "image/png" });
+    const request: ToolApiParams["/api/v1/misc/add-stamp"] = {
+      stampType: "image",
+      stampImage: stamp,
+    };
+    const formData = objectToFormData(request);
+
+    expect(formData.get("stampImage")).toBe(stamp);
+    expect(formData.get("stampType")).toBe("image");
+  });
+
   test("appends multiple files under the same field name", () => {
     const files = [
       new File(["1"], "a.pdf", { type: "application/pdf" }),
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.ts b/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.ts
index 9c6f5d9e4b..81663fbf69 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolApiMapping.ts
@@ -47,26 +47,28 @@ function appendPrimitive(
     formData.append(key, value);
   } else if (typeof value === "number" || typeof value === "boolean") {
     formData.append(key, `${value}`);
+  } else if (typeof Blob !== "undefined" && value instanceof Blob) {
+    // A File upload (models type binary params as File): send it as the file part, not stringified.
+    formData.append(key, value);
   } else {
-    // A non-primitive here means a mapper produced a value the backend cannot
-    // receive as a form field. Fail loudly rather than silently drop it:
-    // structured fields must be JSON-encoded in the mapper, and Files passed via
-    // the `files` argument.
+    // Any other non-primitive means a mapper produced a value the backend cannot receive as a form
+    // field. Fail loudly rather than silently drop it: structured fields must be JSON-encoded first.
     throw new Error(
       `objectToFormData: field "${key}" has an unsupported value of type ` +
-        `"${typeof value}"; expected a string, number, or boolean.`,
+        `"${typeof value}"; expected a string, number, boolean, or File.`,
     );
   }
 }
 
 /**
  * Serialize a backend request model (the output of a `toApiParams` function)
- * into multipart FormData: primitives become string fields, arrays become
- * repeated fields, and `undefined`/`null` are omitted. Files are appended
- * separately via `files`, keeping file plumbing out of the parameter mapper.
+ * into multipart FormData: primitives become string fields, `File` values become
+ * file parts, arrays become repeated fields, and `undefined`/`null` are omitted.
+ * Extra files may still be passed via `files` (the primary `fileInput`, or a
+ * field the mapper doesn't carry).
  *
- * Throws if a field holds a non-primitive value, since that cannot be sent as a
- * form field: structured fields must be JSON-encoded by the mapper.
+ * Throws if a field holds any other non-primitive value, since that cannot be
+ * sent as a form field: structured fields must be JSON-encoded by the mapper.
  */
 export function objectToFormData(
   params: ToolApiRequest,
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts
index 5be4831907..87eea1931f 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.test.ts
@@ -10,11 +10,14 @@ import {
   asRegistryConfig,
   ToolType,
 } from "@app/hooks/tools/shared/toolOperationTypes";
+import { objectToFormData } from "@app/hooks/tools/shared/toolApiMapping";
 import {
+  activeFileFields,
   deserializeToolStep,
+  extractStepFiles,
   getExecutableTools,
   serializeToolStep,
-  stepRequiresUpload,
+  stepNeedsConfiguring,
   type WorkingToolStep,
 } from "@app/hooks/tools/shared/toolAutomation";
 import { compressOperationConfig } from "@app/hooks/tools/compress/useCompressOperation";
@@ -28,6 +31,10 @@ import { addPasswordOperationConfig } from "@app/hooks/tools/addPassword/useAddP
 import { changePermissionsOperationConfig } from "@app/hooks/tools/changePermissions/useChangePermissionsOperation";
 import { convertOperationConfig } from "@app/hooks/tools/convert/useConvertOperation";
 import { defaultParameters as convertDefaults } from "@app/hooks/tools/convert/useConvertParameters";
+import { overlayPdfsOperationConfig } from "@app/hooks/tools/overlayPdfs/useOverlayPdfsOperation";
+import { defaultParameters as overlayDefaults } from "@app/hooks/tools/overlayPdfs/useOverlayPdfsParameters";
+import { certSignOperationConfig } from "@app/hooks/tools/certSign/useCertSignOperation";
+import { defaultParameters as certSignDefaults } from "@app/hooks/tools/certSign/useCertSignParameters";
 
 function entry(over: Partial<ToolRegistryEntry>): ToolRegistryEntry {
   return {
@@ -397,6 +404,52 @@ describe("convert (format-routed custom tool)", () => {
     });
   });
 
+  test("round-trips a PDF -> PDF/UA step, restoring every accessibility option", () => {
+    const step: WorkingToolStep = {
+      toolId: "convert" as ToolId,
+      operation: "/api/v1/convert/file/pdf",
+      params: {
+        ...convertDefaults,
+        fromExtension: "pdf",
+        toExtension: "pdfua",
+        pdfUaOptions: {
+          profile: "ua2",
+          language: "fr-FR",
+          overrideLanguage: true,
+          title: "Rapport annuel",
+          embedFonts: false,
+          altText: "0:12=Graphique des revenus",
+        },
+      },
+      support: "editable",
+    };
+
+    const api = serializeToolStep(step, convertRegistry);
+    expect(api.operation).toBe("/api/v1/convert/pdf/ua");
+    expect(api.parameters).toMatchObject({
+      profile: "ua2",
+      language: "fr-FR",
+      overrideLanguage: "true",
+      title: "Rapport annuel",
+      embedFonts: "false",
+      altText: "0:12=Graphique des revenus",
+    });
+
+    const back = deserializeToolStep(api, convertRegistry);
+    expect(back.operation).toBe("/api/v1/convert/pdf/ua");
+    expect(back.params).toMatchObject({
+      toExtension: "pdfua",
+      pdfUaOptions: {
+        profile: "ua2",
+        language: "fr-FR",
+        overrideLanguage: true,
+        title: "Rapport annuel",
+        embedFonts: false,
+        altText: "0:12=Graphique des revenus",
+      },
+    });
+  });
+
   test("routes PDF/X through the shared PDF/A endpoint and recovers the PDF/X target", () => {
     const step: WorkingToolStep = {
       toolId: "convert" as ToolId,
@@ -419,18 +472,167 @@ describe("convert (format-routed custom tool)", () => {
   });
 });
 
-describe("stepRequiresUpload", () => {
-  const step = (params: Record<string, unknown>): WorkingToolStep => ({
-    toolId: "compress" as ToolId,
-    operation: "/api/v1/misc/compress-pdf",
-    params,
+describe("supporting files", () => {
+  const fileRegistry: Partial<ToolRegistry> = {
+    overlayPdfs: entry({
+      name: "Overlay",
+      automationSettings: NoopSettings,
+      operationConfig: asRegistryConfig(overlayPdfsOperationConfig),
+    }),
+    certSign: entry({
+      name: "Cert sign",
+      automationSettings: NoopSettings,
+      operationConfig: asRegistryConfig(certSignOperationConfig),
+    }),
+  };
+
+  const overlayStep = (
+    params: Record<string, unknown>,
+    fileParameters?: Record<string, string>,
+  ): WorkingToolStep => ({
+    toolId: "overlayPdfs" as ToolId,
+    operation: "/api/v1/general/overlay-pdfs",
+    params: { ...overlayDefaults, ...params },
     support: "editable",
+    fileParameters,
   });
 
-  test("detects a File (or list of Files) among the parameters", () => {
-    const image = new File(["x"], "logo.png", { type: "image/png" });
-    expect(stepRequiresUpload(step({ level: 5 }))).toBe(false);
-    expect(stepRequiresUpload(step({ watermarkImage: image }))).toBe(true);
-    expect(stepRequiresUpload(step({ attachments: [image] }))).toBe(true);
+  const certStep = (
+    params: Record<string, unknown>,
+    fileParameters?: Record<string, string>,
+  ): WorkingToolStep => ({
+    toolId: "certSign" as ToolId,
+    operation: "/api/v1/security/cert-sign",
+    params: { ...certSignDefaults, signMode: "MANUAL", ...params },
+    support: "editable",
+    fileParameters,
+  });
+
+  test("extractStepFiles groups fresh picks by their backend file field", () => {
+    const a = new File(["1"], "a.pdf", { type: "application/pdf" });
+    const b = new File(["2"], "b.pdf", { type: "application/pdf" });
+    expect(
+      extractStepFiles(overlayStep({ overlayFiles: [a, b] }), fileRegistry),
+    ).toEqual({ overlayFiles: [a, b] });
+  });
+
+  test("extractStepFiles respects a tool's file selection (certSign by certType)", () => {
+    const p12 = new File(["k"], "key.p12");
+    expect(
+      extractStepFiles(
+        certStep({ certType: "PKCS12", p12File: p12 }),
+        fileRegistry,
+      ),
+    ).toEqual({ p12File: [p12] });
+  });
+
+  test("serialize/deserialize round-trips fileParameters", () => {
+    const step = certStep({ certType: "PKCS12" }, { p12File: "asset:abc" });
+    const api = serializeToolStep(step, fileRegistry);
+    expect(api.fileParameters).toEqual({ p12File: "asset:abc" });
+    expect(deserializeToolStep(api, fileRegistry).fileParameters).toEqual({
+      p12File: "asset:abc",
+    });
+  });
+
+  test("stepNeedsConfiguring: a stored binding satisfies the file requirement", () => {
+    expect(
+      stepNeedsConfiguring(
+        certStep({ certType: "PKCS12" }, { p12File: "asset:abc" }),
+        fileRegistry,
+      ),
+    ).toBe(false);
+    // Without the binding the keystore is still owed.
+    expect(
+      stepNeedsConfiguring(certStep({ certType: "PKCS12" }), fileRegistry),
+    ).toBe(true);
+  });
+
+  test("activeFileFields drops a stored binding the tool no longer emits", () => {
+    // Still PKCS12: the p12File binding is what the tool sends.
+    expect(
+      activeFileFields(
+        certStep({ certType: "PKCS12" }, { p12File: "asset:abc" }),
+        fileRegistry,
+      ),
+    ).toEqual(["p12File"]);
+    // Switched to PEM: certSign wants privateKeyFile/certFile, so the p12File binding is stale.
+    expect(
+      activeFileFields(
+        certStep({ certType: "PEM" }, { p12File: "asset:abc" }),
+        fileRegistry,
+      ),
+    ).toEqual([]);
+  });
+
+  test("activeFileFields is null (not empty) when the tool can't be probed", () => {
+    // A buildFormData that throws can't be probed; returning null (vs []) tells callers to keep the
+    // step's stored bindings rather than drop them and let the server GC the assets.
+    const config = asRegistryConfig<{ signingCert?: File }>({
+      toolType: ToolType.singleFile,
+      operationType: "certSign",
+      endpoint: "/api/v1/security/cert-sign",
+      defaultParameters: {},
+      buildFormData: () => {
+        throw new Error("cannot build");
+      },
+    });
+    const registry: Partial<ToolRegistry> = {
+      certSign: entry({ name: "Boom", operationConfig: config }),
+    };
+    const step: WorkingToolStep = {
+      toolId: "certSign" as ToolId,
+      operation: "/api/v1/security/cert-sign",
+      params: {},
+      support: "editable",
+      fileParameters: { certFile: "asset:x" },
+    };
+    expect(activeFileFields(step, registry)).toBeNull();
+  });
+
+  test("the overlay sentinel is sized to the binding's asset count", () => {
+    // Two ids -> two files, matching two counts, so FixedRepeat validation passes.
+    const step = overlayStep(
+      { overlayMode: "FixedRepeatOverlay", counts: [1, 2] },
+      { overlayFiles: "asset:one,two" },
+    );
+    expect(activeFileFields(step, fileRegistry)).toEqual(["overlayFiles"]);
+    expect(stepNeedsConfiguring(step, fileRegistry)).toBe(false);
+  });
+
+  test("a rename override binds a backend field to a differently-named param", () => {
+    // The cert-sign endpoint's `certFile` is held by a frontend param named `signingCert`.
+    const config = asRegistryConfig<{ signingCert?: File }>({
+      toolType: ToolType.singleFile,
+      operationType: "certSign",
+      endpoint: "/api/v1/security/cert-sign",
+      defaultParameters: {},
+      validateParams: (p) => p.signingCert !== undefined,
+      // Sends the File under the backend field `certFile`, like real tools do via objectToFormData
+      // (which sends a param's File or File[] under a named field, iterating arrays).
+      buildFormData: (p, file) =>
+        objectToFormData({}, { fileInput: file, certFile: p.signingCert }),
+      fileParamOverrides: [{ field: "certFile", param: "signingCert" }],
+    });
+    const registry: Partial<ToolRegistry> = {
+      certSign: entry({ name: "Sign", operationConfig: config }),
+    };
+    const step = (
+      fileParameters?: Record<string, string>,
+    ): WorkingToolStep => ({
+      toolId: "certSign" as ToolId,
+      operation: "/api/v1/security/cert-sign",
+      params: {},
+      support: "editable",
+      fileParameters,
+    });
+    // The stored binding is keyed by the backend field, but satisfies the frontend param on reload.
+    expect(stepNeedsConfiguring(step({ certFile: "asset:x" }), registry)).toBe(
+      false,
+    );
+    expect(stepNeedsConfiguring(step(), registry)).toBe(true);
+    expect(activeFileFields(step({ certFile: "asset:x" }), registry)).toEqual([
+      "certFile",
+    ]);
   });
 });
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts
index 0485791f15..a9368ccdb7 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolAutomation.ts
@@ -18,11 +18,13 @@ import {
   type ToolRegistryEntry,
 } from "@app/data/toolsTaxonomy";
 import { type ToolId } from "@app/types/toolId";
+import { TOOL_FILE_FIELDS } from "@app/types/toolApiTypes";
 import {
   isToolEndpoint,
   type ToolEndpoint,
 } from "@app/hooks/tools/shared/toolApiMapping";
 import {
+  ToolType,
   type ErasedToolParams,
   type RegistryToolOperationConfig,
 } from "@app/hooks/tools/shared/toolOperationTypes";
@@ -62,6 +64,12 @@ export interface ExecutableTool {
 export interface ToolApiStep {
   operation: string;
   parameters: Record<string, unknown>;
+  /**
+   * Supporting-file bindings: a backend file field (e.g. `stampImage`, `overlayFiles`) mapped to
+   * `asset:<id>[,<id>]` (stored supporting files) or a run-supplied key. Absent when the step needs
+   * no supporting file. Mirrors the wire {@code PipelineStep.fileParameters}.
+   */
+  fileParameters?: SupportingFileBindings;
 }
 
 /** A step being edited in a UI that maps to a known tool: parameters are in the tool's frontend shape. */
@@ -70,6 +78,12 @@ export interface KnownToolStep {
   operation: ToolEndpoint;
   params: ErasedToolParams;
   support: ToolStepSupport;
+  /**
+   * Stored supporting-file bindings carried from a saved step (field -> `asset:<id>`), so an edit
+   * round-trips them without the user re-picking. A field the user re-picks lands in `params` as a
+   * File and takes precedence on save.
+   */
+  fileParameters?: SupportingFileBindings;
 }
 
 /** A stored step whose endpoint maps to no known tool: preserved verbatim, not editable. */
@@ -78,6 +92,8 @@ export interface UnknownToolStep {
   operation: string;
   params: ErasedToolParams;
   support: "unknown";
+  /** Supporting-file bindings preserved verbatim, so an unknown step's files round-trip untouched. */
+  fileParameters?: SupportingFileBindings;
 }
 
 /** A step being edited in a UI, discriminated by whether its endpoint maps to a known tool. */
@@ -135,12 +151,176 @@ function isFileValue(value: unknown): boolean {
 }
 
 /**
- * True if any of a step's parameters is an uploaded file (or list of files). Such a step cannot be
- * saved into a stored pipeline yet: the file bytes are not persisted with the policy, so a later
- * (e.g. scheduled) run would have nothing to send for that named file field.
+ * A stored supporting-file id, as returned by the asset store.
  */
-export function stepRequiresUpload(step: WorkingToolStep): boolean {
-  return Object.values(step.params).some(isFileValue);
+declare const ASSET_ID_BRAND: unique symbol;
+export type AssetId = string & { readonly [ASSET_ID_BRAND]: never };
+
+/**
+ * A step's supporting-file bindings: each backend file field (e.g. `stampImage`) mapped to its file.
+ * A value of `asset:<id>[,<id>]` names stored assets loaded at run time; any other value is a key for
+ * a file supplied with the run itself.
+ */
+export type SupportingFileBindings = Record<string, string>;
+
+/**
+ * The `fileParameters` binding format shared with the backend (see PolicyAssetRefs). This module owns
+ * the frontend side of the step contract, so the format lives here and the builder/settings reuse it.
+ */
+export const ASSET_REF_PREFIX = "asset:";
+
+/** A `fileParameters` value binding one tool file field to the given stored asset ids. */
+export function assetRef(ids: readonly AssetId[]): string {
+  return ASSET_REF_PREFIX + ids.join(",");
+}
+
+/** The stored asset ids inside a binding value, or none when it isn't an `asset:` ref. */
+export function assetRefIds(binding: string): AssetId[] {
+  if (!binding.startsWith(ASSET_REF_PREFIX)) return [];
+  return binding
+    .slice(ASSET_REF_PREFIX.length)
+    .split(",")
+    .map((id) => id.trim())
+    .filter(Boolean) as AssetId[];
+}
+
+/** A throwaway primary document for probing a tool's buildFormData; never sent anywhere. */
+function dummyPrimaryFile(): File {
+  return new File([], "input.pdf", { type: "application/pdf" });
+}
+
+/**
+ * Run a tool's buildFormData so we can read the request it would produce.
+ * Returns null when File is unavailable or buildFormData throws.
+ */
+function probeFormData(
+  config: RegistryToolOperationConfig,
+  params: ErasedToolParams,
+): FormData | null {
+  if (typeof File === "undefined") return null;
+  const dummy = dummyPrimaryFile();
+  try {
+    switch (config.toolType) {
+      case ToolType.singleFile:
+        return config.buildFormData(params, dummy);
+      case ToolType.multiFile:
+        return config.buildFormData(params, [dummy]);
+      default:
+        return null;
+    }
+  } catch {
+    return null;
+  }
+}
+
+/** Defaults merged under the step's params - the shape a tool's mappers and buildFormData expect. */
+function mergedStepParams(
+  step: WorkingToolStep,
+  config: RegistryToolOperationConfig,
+): ErasedToolParams {
+  return { ...(config.defaultParameters ?? {}), ...step.params };
+}
+
+/** The backend file fields an endpoint accepts, from the generated spec-sourced table. */
+function backendFileFields(operation: string): readonly string[] {
+  return (
+    (TOOL_FILE_FIELDS as Partial<Record<string, readonly string[]>>)[
+      operation
+    ] ?? []
+  );
+}
+
+/**
+ * Each backend file field the step's endpoint accepts (from {@link TOOL_FILE_FIELDS}), mapped to the
+ * tool param that holds it - the same name unless the tool declared a rename override.
+ */
+function fileFieldMappings(
+  operation: string,
+  config: RegistryToolOperationConfig,
+): { field: string; param: string }[] {
+  // The override's erased type collapses `param` to `never`; restore the real runtime shape.
+  const overrides = (config.fileParamOverrides ?? []) as readonly {
+    field: string;
+    param: string;
+  }[];
+  const paramByField = new Map(overrides.map((o) => [o.field, o.param]));
+  return backendFileFields(operation).map((field) => ({
+    field,
+    param: paramByField.get(field) ?? field,
+  }));
+}
+
+/**
+ * The step's params with a stand-in File array injected for each stored binding whose param has no
+ * fresh pick, so a tool's buildFormData/validateParams sees the supporting file as present. Stored
+ * bindings are keyed by the backend field (from {@link TOOL_FILE_FIELDS}), so each field finds its
+ * binding and the sentinel lands on its param - the two coincide unless the tool declared a rename
+ * override. The array is sized to the binding's asset count (overlay validates count == file count).
+ * Sentinels are empty and live only in this local object - never written back to step.params, so they
+ * can never be uploaded.
+ */
+function withStoredFileSentinels(
+  step: WorkingToolStep,
+  config: RegistryToolOperationConfig,
+): ErasedToolParams {
+  const merged = mergedStepParams(step, config);
+  const bindings = step.fileParameters;
+  if (!bindings || typeof File === "undefined") return merged;
+  for (const { param, field } of fileFieldMappings(step.operation, config)) {
+    const binding = bindings[field];
+    if (binding == null || isFileValue(merged[param])) continue; // unbound, or a fresh pick stands in
+    const count = Math.max(1, assetRefIds(binding).length);
+    merged[param] = Array.from({ length: count }, () => new File([], "stored"));
+  }
+  return merged;
+}
+
+/**
+ * The fresh File picks on a step, grouped by the backend file field its buildFormData sends them
+ * under (excluding the primary `fileInput`). buildFormData is the source of truth for the field name
+ * and for tool-specific selection (certSign picks files by certType), so probing it - rather than
+ * scanning params - keeps the field mapping correct. These are the files to upload on save.
+ */
+export function extractStepFiles(
+  step: WorkingToolStep,
+  registry: Partial<ToolRegistry>,
+): Record<string, File[]> {
+  if (step.toolId === null) return {};
+  const config = registry[step.toolId]?.operationConfig;
+  if (!config) return {};
+  const formData = probeFormData(config, mergedStepParams(step, config));
+  if (!formData) return {};
+  const files: Record<string, File[]> = {};
+  formData.forEach((value, key) => {
+    if (key !== "fileInput" && value instanceof File) {
+      (files[key] ??= []).push(value);
+    }
+  });
+  return files;
+}
+
+/**
+ * The backend file fields this step actually uses right now, per its own buildFormData: fresh picks
+ * plus any stored binding the tool still emits (a stale one - e.g. a PKCS12 keystore after switching
+ * to PEM - is dropped, because buildFormData no longer sends it). Drives the stored-file chips, the
+ * save-time binding set, and the test run.
+ */
+export function activeFileFields(
+  step: WorkingToolStep,
+  registry: Partial<ToolRegistry>,
+): string[] | null {
+  if (step.toolId === null) {
+    return step.fileParameters ? Object.keys(step.fileParameters) : [];
+  }
+  const config = registry[step.toolId]?.operationConfig;
+  if (!config) return null;
+  const formData = probeFormData(config, withStoredFileSentinels(step, config));
+  if (!formData) return null;
+  const fields = new Set<string>();
+  formData.forEach((value, key) => {
+    if (key !== "fileInput" && value instanceof File) fields.add(key);
+  });
+  return [...fields];
 }
 
 /**
@@ -158,9 +338,10 @@ export function stepNeedsConfiguring(
 ): boolean {
   if (step.toolId === null) return false;
   const config = registry[step.toolId]?.operationConfig;
-  if (!config?.validateParams) return false;
-  const merged = { ...(config.defaultParameters ?? {}), ...step.params };
-  return !config.validateParams(merged);
+  if (!config || !config.validateParams) return false;
+  // Stored supporting files satisfy their field just as a fresh pick would, so validate against the
+  // sentinel-injected params rather than the bare ones (which drop the file on reload).
+  return !config.validateParams(withStoredFileSentinels(step, config));
 }
 
 /**
@@ -240,14 +421,27 @@ export function serializeToolStep(
     step.toolId !== null ? registry[step.toolId]?.operationConfig : undefined;
   if (!config) {
     // Unmapped step (unknown endpoint on edit): round-trip it unchanged.
-    return { operation: step.operation, parameters: step.params };
+    return withFileParameters(
+      { operation: step.operation, parameters: step.params },
+      step,
+    );
   }
   const merged = { ...(config.defaultParameters ?? {}), ...step.params };
   const operation = resolveEndpoint(config, merged) ?? step.operation;
   const parameters = config.toApiParams
     ? (config.toApiParams(merged) as Record<string, unknown>)
     : {};
-  return { operation, parameters };
+  return withFileParameters({ operation, parameters }, step);
+}
+
+/** Attach the step's supporting-file bindings to a serialized step, omitting the field when empty. */
+function withFileParameters(
+  serialized: ToolApiStep,
+  step: WorkingToolStep,
+): ToolApiStep {
+  const bindings = step.fileParameters;
+  if (!bindings || Object.keys(bindings).length === 0) return serialized;
+  return { ...serialized, fileParameters: bindings };
 }
 
 /**
@@ -308,6 +502,7 @@ function unmappedStep(step: ToolApiStep): UnknownToolStep {
     operation: step.operation,
     params: { ...step.parameters },
     support: "unknown",
+    fileParameters: step.fileParameters,
   };
 }
 
@@ -345,5 +540,11 @@ export function deserializeToolStep(
     resolveEndpoint(config, params) ??
     (isToolEndpoint(step.operation) ? step.operation : undefined);
   if (operation === undefined) return unmappedStep(step);
-  return { toolId, operation, params, support: classifyToolStepSupport(entry) };
+  return {
+    toolId,
+    operation,
+    params,
+    support: classifyToolStepSupport(entry),
+    fileParameters: step.fileParameters,
+  };
 }
diff --git a/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts b/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts
index d6dbf3b355..d01d897002 100644
--- a/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/toolOperationTypes.ts
@@ -3,7 +3,11 @@ import { StirlingFile } from "@app/types/fileContext";
 import type { ResponseHandler } from "@app/utils/toolResponseProcessor";
 import { ToolId } from "@app/types/toolId";
 import type { ProcessingProgress } from "@app/hooks/tools/shared/useToolState";
-import type { ToolApiParams, ToolEndpoint } from "@app/types/toolApiTypes";
+import {
+  TOOL_FILE_FIELDS,
+  type ToolApiParams,
+  type ToolEndpoint,
+} from "@app/types/toolApiTypes";
 
 export type { ProcessingProgress, ResponseHandler };
 
@@ -45,6 +49,39 @@ export interface CustomProcessorResult {
   consumedAllInputs?: boolean;
 }
 
+/**
+ * The parameter keys that carry a supporting file - a `File` or `File[]` value the tool sends
+ * beyond its primary document. Derived from the tool's own parameter type, so a file field can only
+ * ever be declared against a param that genuinely holds a file.
+ */
+export type FileParamKey<TParams> = {
+  [K in keyof TParams]-?: NonNullable<TParams[K]> extends File | File[]
+    ? K
+    : never;
+}[keyof TParams] &
+  string;
+
+/**
+ * The backend multipart file fields an endpoint accepts, from the generated {@link TOOL_FILE_FIELDS}
+ * (which the spec derives from the Java MultipartFile params). `never` for an endpoint that takes no
+ * supporting files. This is what makes a rename override's `field` a checked name, not a free string.
+ */
+export type BackendFileField<TEndpoint> =
+  TEndpoint extends keyof typeof TOOL_FILE_FIELDS
+    ? (typeof TOOL_FILE_FIELDS)[TEndpoint][number]
+    : never;
+
+/**
+ * A remap for the rare case where a tool's frontend file param has a different name from the backend
+ * field it is sent under. Both sides are checked: `field` must be one of the endpoint's generated
+ * backend file fields, and `param` a real file param of the tool. Same-name fields need no entry -
+ * they are derived from {@link TOOL_FILE_FIELDS} directly.
+ */
+export interface FileParamOverride<TParams, TEndpoint> {
+  field: BackendFileField<TEndpoint>;
+  param: FileParamKey<TParams>;
+}
+
 /**
  * Configuration for tool operations defining processing behavior and API integration.
  *
@@ -79,6 +116,14 @@ interface BaseToolOperationConfig<TParams, TEndpoint extends ToolEndpoint> {
   /** Default parameter values for automation */
   defaultParameters?: TParams;
 
+  /**
+   * Rename overrides for supporting-file params. The set of a tool's file fields is derived from the
+   * generated {@link TOOL_FILE_FIELDS} (spec-sourced), keyed by the backend field name; declare an
+   * override only when a backend field maps to a differently-named frontend param, so a step composer
+   * can bind the stored file to the right param. Omitted by the common case where field == param.
+   */
+  fileParamOverrides?: readonly FileParamOverride<TParams, TEndpoint>[];
+
   /**
    * Whether these parameters are complete enough to run. The same predicate a tool gives
    * `useBaseParameters` as its `validateFn`, so the Run button in the editor and anything composing
diff --git a/frontend/editor/src/core/hooks/tools/shared/useToolOperation.ts b/frontend/editor/src/core/hooks/tools/shared/useToolOperation.ts
index f01c8770ab..822d281c57 100644
--- a/frontend/editor/src/core/hooks/tools/shared/useToolOperation.ts
+++ b/frontend/editor/src/core/hooks/tools/shared/useToolOperation.ts
@@ -21,6 +21,8 @@ import {
   StirlingFileStub,
 } from "@app/types/fileContext";
 import { FILE_EVENTS } from "@app/services/errorUtils";
+import { reportToolFailure } from "@app/services/failureReporting";
+import { refreshNotificationsNow } from "@app/hooks/useNotifications";
 import { zipFileService } from "@app/services/zipFileService";
 import { getFilenameWithoutExtension } from "@app/utils/fileUtils";
 import {
@@ -603,6 +605,15 @@ export const useToolOperation = <TParams>(
           void _e;
         }
 
+        // Report it so a leader sees the failure too, then carry on with the user's
+        // own error handling. Fire-and-forget: the reporter swallows its own errors.
+        // Chained, not fired alongside: the re-read must happen after the row exists.
+        void reportToolFailure({
+          operation: config.operationType,
+          error,
+          fileIds: validFiles.map((file) => file.fileId),
+        }).then(refreshNotificationsNow);
+
         const errorMessage =
           config.getErrorMessage?.(error) || extractErrorMessage(error);
         actions.setError(errorMessage);
diff --git a/frontend/editor/src/core/hooks/useAccountIdentity.ts b/frontend/editor/src/core/hooks/useAccountIdentity.ts
new file mode 100644
index 0000000000..026ac08dab
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useAccountIdentity.ts
@@ -0,0 +1,64 @@
+import { useEffect, useState } from "react";
+import { useTranslation } from "react-i18next";
+import { useAuth } from "@app/auth/UseSession";
+import { useProfilePictureUrl } from "@app/hooks/useProfilePictureUrl";
+import { useAppConfig } from "@app/contexts/AppConfigContext";
+import { accountService } from "@app/services/accountService";
+
+export interface AccountIdentity {
+  /** Never empty — falls back to a generic "User" so a row is never blank. */
+  displayName: string;
+  profilePictureUrl: string | null;
+  isAnonymous: boolean;
+}
+
+/**
+ * The signed-in identity as the UI should draw it: one name and one picture,
+ * resolved the same way everywhere. Every surface that shows "who am I" (the
+ * editor and processor sidebar footers, the account settings page) reads this,
+ * so a user can't see one initial in the sidebar and a different one in
+ * settings.
+ *
+ * Resolution order for the name: the auth layer's own displayName (each layer
+ * derives it from its native user shape), then the proprietary REST endpoint,
+ * then a generic last resort.
+ */
+export function useAccountIdentity(): AccountIdentity {
+  const { t } = useTranslation();
+  const { config } = useAppConfig();
+  const { displayName: authDisplayName, isAnonymous } = useAuth();
+  const profilePictureUrl = useProfilePictureUrl();
+  const [accountUsername, setAccountUsername] = useState<string | null>(null);
+
+  useEffect(() => {
+    if (!config?.enableLogin) {
+      setAccountUsername(null);
+      return;
+    }
+    if (authDisplayName) {
+      // The auth context has a name; don't bother hitting the REST
+      // endpoint, but clear any stale cached value from a prior call.
+      setAccountUsername(null);
+      return;
+    }
+    accountService
+      .getAccountData()
+      .then((data) => {
+        // Always reflect the latest result - including clearing it on
+        // sign-out, when the endpoint returns no username (or 401s into
+        // the catch branch below). Without this, signing out would leave
+        // the old username on screen.
+        setAccountUsername(data?.username ?? null);
+      })
+      .catch(() => {
+        setAccountUsername(null);
+      });
+  }, [config?.enableLogin, authDisplayName]);
+
+  return {
+    displayName:
+      authDisplayName ?? accountUsername ?? t("auth.displayName.user", "User"),
+    profilePictureUrl,
+    isAnonymous,
+  };
+}
diff --git a/frontend/editor/src/core/hooks/useFileHandler.ts b/frontend/editor/src/core/hooks/useFileHandler.ts
index 2f26648fd1..6fcbcb2350 100644
--- a/frontend/editor/src/core/hooks/useFileHandler.ts
+++ b/frontend/editor/src/core/hooks/useFileHandler.ts
@@ -13,6 +13,10 @@ export const useFileHandler = () => {
         selectFiles?: boolean;
         /** Persist to IDB without dispatching to workspace state. */
         skipWorkspaceDispatch?: boolean;
+        /** Defaults to true; false keeps an archive intact (e.g. duplicating one). */
+        autoUnzip?: boolean;
+        /** Skip the upload metric - the file isn't new to the system (e.g. a copy). */
+        skipUploadTracking?: boolean;
       } = {},
     ): Promise<StirlingFile[]> => {
       // Merge default options with passed options - passed options take precedence
diff --git a/frontend/editor/src/core/hooks/useFileManager.ts b/frontend/editor/src/core/hooks/useFileManager.ts
index 442027364e..4393a22d61 100644
--- a/frontend/editor/src/core/hooks/useFileManager.ts
+++ b/frontend/editor/src/core/hooks/useFileManager.ts
@@ -389,6 +389,18 @@ export const useFileManager = () => {
       // Optimistic update — remove from UI immediately, delete IDB in background
       setFiles(files.filter((_, i) => i !== index));
       onRemovedFromWorkbench?.(file.id);
+      // Superseded versions go with it (see orphanedAncestorIds); best-effort,
+      // because failing to tidy history must not fail the delete itself.
+      void fileStorage
+        .orphanedAncestorIds([file.id])
+        .then((orphans) =>
+          orphans.length > 0
+            ? fileStorage.deleteMultipleStirlingFiles(orphans)
+            : undefined,
+        )
+        .catch((error) =>
+          console.warn("Failed to remove superseded versions:", error),
+        );
       indexedDB.deleteFile(file.id).catch((error) => {
         console.error("Failed to remove file from IndexedDB:", error);
         // Restore consistency — file is still in IDB so refresh brings it back
diff --git a/frontend/editor/src/core/hooks/useFreeCreditsSummary.ts b/frontend/editor/src/core/hooks/useFreeCreditsSummary.ts
new file mode 100644
index 0000000000..52702a3f74
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useFreeCreditsSummary.ts
@@ -0,0 +1,12 @@
+import { type NavFooterCredits } from "@app/components/shared/navFooter/NavFooterCreditsRow";
+
+/**
+ * Free credits left on this team's allowance, for the sidebar footer meter.
+ * Null hides the meter entirely.
+ *
+ * Core has no wallet — self-hosted installs aren't metered — so there is
+ * nothing to show. Cloud builds override this with the live wallet figure.
+ */
+export function useFreeCreditsSummary(): NavFooterCredits | null {
+  return null;
+}
diff --git a/frontend/editor/src/core/hooks/useNotifications.test.ts b/frontend/editor/src/core/hooks/useNotifications.test.ts
new file mode 100644
index 0000000000..746db77390
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useNotifications.test.ts
@@ -0,0 +1,249 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { act, renderHook, waitFor } from "@testing-library/react";
+import type { AppNotification } from "@app/services/notifications";
+
+/**
+ * The bell is mounted several times over, so what is pinned here is that they share one read: one
+ * poll, one set of lookups, one marker, and no timer left running once the last has gone.
+ */
+
+const fetchNotifications = vi.fn();
+
+vi.mock("@app/services/notifications", () => ({
+  fetchNotifications: (...args: unknown[]) => fetchNotifications(...args),
+}));
+
+// Counted here so "resolved once per list, not once per row" is observable.
+const hasLocalFile = vi.fn((_fileId: string) => Promise.resolve(true));
+
+vi.mock("@app/services/localFilePresence", () => ({
+  hasLocalFile: (fileId: string) => hasLocalFile(fileId),
+}));
+
+const { useNotifications, refreshNotificationsNow } =
+  await import("@app/hooks/useNotifications");
+
+function notification(
+  id: string,
+  overrides: Partial<AppNotification> = {},
+): AppNotification {
+  return {
+    id,
+    source: "FAILURE",
+    kindId: "UNKNOWN",
+    origin: "TOOL",
+    ownership: "MINE",
+    severity: "ERROR",
+    status: "NEW",
+    titleKey: `portal.failures.kind.${id}.title`,
+    defaultTitle: id,
+    detail: "boom",
+    fileId: "f-1",
+    sourceId: null,
+    policyId: null,
+    occurrences: 1,
+    createdAt: "2026-08-05T00:00:00Z",
+    lastSeenAt: "2026-08-05T00:00:00Z",
+    actions: [],
+    ...overrides,
+  };
+}
+
+describe("useNotifications", () => {
+  beforeEach(() => {
+    window.localStorage.clear();
+    fetchNotifications.mockReset().mockResolvedValue([]);
+    hasLocalFile.mockClear();
+  });
+
+  it("reads the list once however many bells are mounted", async () => {
+    fetchNotifications.mockResolvedValue([notification("a")]);
+
+    const first = renderHook(() => useNotifications());
+    const second = renderHook(() => useNotifications());
+
+    await waitFor(() =>
+      expect(first.result.current.notifications).toHaveLength(1),
+    );
+    expect(second.result.current.notifications).toHaveLength(1);
+    expect(fetchNotifications).toHaveBeenCalledTimes(1);
+  });
+
+  it("looks a document up once for the list, not once per row", async () => {
+    fetchNotifications.mockResolvedValue([
+      notification("a", { fileId: "f-1" }),
+      notification("b", { fileId: "f-1" }),
+      notification("c", { fileId: "f-2" }),
+    ]);
+
+    const { result } = renderHook(() => useNotifications());
+
+    await waitFor(() => expect(result.current.notifications).toHaveLength(3));
+    expect(hasLocalFile).toHaveBeenCalledTimes(2);
+  });
+
+  it("looks up an attended run's document but never an unattended run's", async () => {
+    // Asking storage about a source's hash can only miss, and would then be shown as "not on this
+    // device" about a document that never was.
+    fetchNotifications.mockResolvedValue([
+      notification("attended", {
+        origin: "POLICY",
+        sourceId: null,
+        fileId: "editor-file-1",
+      }),
+      notification("unattended", {
+        origin: "POLICY",
+        sourceId: "src-s3-invoices",
+        fileId: "hashed-identity",
+      }),
+    ]);
+
+    const { result } = renderHook(() => useNotifications());
+
+    await waitFor(() => expect(result.current.notifications).toHaveLength(2));
+    expect(hasLocalFile).toHaveBeenCalledTimes(1);
+    expect(hasLocalFile).toHaveBeenCalledWith("editor-file-1");
+    expect(
+      result.current.documentStateFor(result.current.notifications[0])
+        .hasLocalFile,
+    ).toBe(true);
+    expect(
+      result.current.documentStateFor(result.current.notifications[1])
+        .hasLocalFile,
+    ).toBe(false);
+  });
+
+  it("polls on one timer and stops it when the last bell unmounts", async () => {
+    vi.useFakeTimers();
+    try {
+      const first = renderHook(() => useNotifications());
+      const second = renderHook(() => useNotifications());
+      await act(async () => {});
+      expect(fetchNotifications).toHaveBeenCalledTimes(1);
+
+      // Two bells, one tick: a timer per subscriber would read twice here.
+      await act(async () => {
+        vi.advanceTimersByTime(30_000);
+      });
+      expect(fetchNotifications).toHaveBeenCalledTimes(2);
+
+      first.unmount();
+      await act(async () => {
+        vi.advanceTimersByTime(30_000);
+      });
+      expect(fetchNotifications).toHaveBeenCalledTimes(3);
+
+      second.unmount();
+      await act(async () => {
+        vi.advanceTimersByTime(120_000);
+      });
+      expect(fetchNotifications).toHaveBeenCalledTimes(3);
+    } finally {
+      vi.useRealTimers();
+    }
+  });
+
+  it("marks every bell read, not just the one the user opened", async () => {
+    fetchNotifications.mockResolvedValue([
+      notification("b"),
+      notification("a"),
+    ]);
+    const first = renderHook(() => useNotifications());
+    const second = renderHook(() => useNotifications());
+    await waitFor(() => expect(first.result.current.unreadCount).toBe(2));
+    expect(second.result.current.unreadCount).toBe(2);
+
+    // Async because subscribers are told on a microtask: a bell marks the list read while rendering.
+    await act(async () => first.result.current.markAllSeen());
+
+    expect(first.result.current.unreadCount).toBe(0);
+    expect(second.result.current.unreadCount).toBe(0);
+    expect(
+      window.localStorage.getItem("stirling.notifications.lastSeenId"),
+    ).toBe("b");
+  });
+
+  it("chains one fresh read behind the read in flight rather than joining it", async () => {
+    // A refresh exists to observe a write the caller just made. The read in flight may have
+    // started before that write, so joining it would report the world without it - and the
+    // caller would wait a whole poll interval for news of their own action.
+    let release: (listed: AppNotification[]) => void = () => {};
+    fetchNotifications.mockImplementationOnce(
+      () =>
+        new Promise<AppNotification[]>((resolve) => {
+          release = resolve;
+        }),
+    );
+
+    const first = renderHook(() => useNotifications());
+    expect(fetchNotifications).toHaveBeenCalledTimes(1);
+
+    // A refresh from a row, twice over, and a second bell mounting - all mid-read. The
+    // refreshes share ONE chained read; the mount joins what is already there.
+    fetchNotifications.mockResolvedValue([notification("a")]);
+    act(() => {
+      first.result.current.refresh();
+      first.result.current.refresh();
+    });
+    const second = renderHook(() => useNotifications());
+    expect(fetchNotifications).toHaveBeenCalledTimes(1);
+
+    // The stale read lands empty; the chained fresh read is what delivers the row.
+    await act(async () => release([]));
+    await waitFor(() => expect(fetchNotifications).toHaveBeenCalledTimes(2));
+    await waitFor(() =>
+      expect(first.result.current.notifications).toHaveLength(1),
+    );
+    expect(second.result.current.notifications).toHaveLength(1);
+  });
+
+  it("shows a just-reported failure without waiting for the poll", async () => {
+    const hook = renderHook(() => useNotifications());
+    await waitFor(() => expect(fetchNotifications).toHaveBeenCalledTimes(1));
+    expect(hook.result.current.unreadCount).toBe(0);
+
+    // The failure report chain: row recorded server-side, then the re-read.
+    fetchNotifications.mockResolvedValue([notification("a")]);
+    act(() => refreshNotificationsNow());
+
+    await waitFor(() => expect(hook.result.current.unreadCount).toBe(1));
+  });
+
+  it("still lands the row when the refresh races a poll read already in flight", async () => {
+    let releaseStale: (listed: AppNotification[]) => void = () => {};
+    fetchNotifications.mockImplementationOnce(
+      () =>
+        new Promise<AppNotification[]>((resolve) => {
+          releaseStale = resolve;
+        }),
+    );
+
+    const hook = renderHook(() => useNotifications());
+    expect(fetchNotifications).toHaveBeenCalledTimes(1);
+
+    // The failure is recorded while a poll's read is still in flight, then its refresh fires.
+    // Joining that stale read would miss the row until the next poll interval.
+    fetchNotifications.mockResolvedValue([notification("a")]);
+    act(() => refreshNotificationsNow());
+    await act(async () => releaseStale([]));
+
+    await waitFor(() => expect(hook.result.current.unreadCount).toBe(1));
+  });
+
+  it("keeps its own list rather than one left by a bell that has gone", async () => {
+    fetchNotifications.mockResolvedValue([notification("a")]);
+    const first = renderHook(() => useNotifications());
+    await waitFor(() =>
+      expect(first.result.current.notifications).toHaveLength(1),
+    );
+    first.unmount();
+
+    // It must not show the old row while its own read is in flight.
+    fetchNotifications.mockResolvedValue([]);
+    const second = renderHook(() => useNotifications());
+
+    expect(second.result.current.notifications).toHaveLength(0);
+    await waitFor(() => expect(fetchNotifications).toHaveBeenCalledTimes(2));
+    expect(second.result.current.notifications).toHaveLength(0);
+  });
+});
diff --git a/frontend/editor/src/core/hooks/useNotifications.ts b/frontend/editor/src/core/hooks/useNotifications.ts
new file mode 100644
index 0000000000..9f307a9a42
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useNotifications.ts
@@ -0,0 +1,240 @@
+import { useSyncExternalStore } from "react";
+import {
+  fetchNotifications,
+  type AppNotification,
+} from "@app/services/notifications";
+import { hasLocalFile } from "@app/services/localFilePresence";
+
+/**
+ * One polled store for however many bells are mounted. A module store rather than a context because
+ * the portal mounts its bell as a sibling of AppProviders, so there is no single tree to provide in.
+ */
+
+// TODO: read state is per-browser. Move it server-side when notifications get their own table.
+const POLL_INTERVAL_MS = 30_000;
+const SEEN_STORAGE_KEY = "stirling.notifications.lastSeenId";
+
+function readLastSeenId(): string | null {
+  try {
+    return window.localStorage.getItem(SEEN_STORAGE_KEY);
+  } catch {
+    // Private mode: everything reads as unseen, which errs towards showing failures.
+    return null;
+  }
+}
+
+function writeLastSeenId(id: string): void {
+  try {
+    window.localStorage.setItem(SEEN_STORAGE_KEY, id);
+  } catch {
+    // The marker just will not survive a reload.
+  }
+}
+
+export interface NotificationDocumentState {
+  hasLocalFile: boolean;
+}
+
+const NO_DOCUMENT: NotificationDocumentState = {
+  hasLocalFile: false,
+};
+
+/**
+ * Whether this browser could resolve the document a row names. Two id spaces share `fileId`: an
+ * attended run reports the id its editor minted, a source-fed one a hash that was never on a device.
+ */
+export function isResolvableHere(notification: AppNotification): boolean {
+  return (notification.sourceId ?? null) === null;
+}
+
+interface NotificationsSnapshot {
+  notifications: AppNotification[];
+  /** Keyed by fileId, so several rows about one document cost one lookup. */
+  documents: Record<string, NotificationDocumentState>;
+  lastSeenId: string | null;
+}
+
+const NOTHING_LOADED: NotificationsSnapshot = {
+  notifications: [],
+  documents: {},
+  lastSeenId: null,
+};
+
+let snapshot: NotificationsSnapshot = NOTHING_LOADED;
+const subscribers = new Set<() => void>();
+let pollTimer: number | null = null;
+let inFlight: Promise<void> | null = null;
+/** Bumped when polling starts or stops, so a read from a finished cycle cannot write. */
+let cycle = 0;
+let notifyQueued = false;
+
+function getSnapshot(): NotificationsSnapshot {
+  return snapshot;
+}
+
+/**
+ * Subscribers told on a microtask: a bell marks the list read from inside its own state updater, and
+ * re-rendering the others from there is the render-phase update React refuses.
+ */
+function publish(next: NotificationsSnapshot): void {
+  snapshot = next;
+  if (notifyQueued) return;
+  notifyQueued = true;
+  queueMicrotask(() => {
+    notifyQueued = false;
+    subscribers.forEach((notify) => notify());
+  });
+}
+
+async function read(forCycle: number): Promise<void> {
+  const listed = await fetchNotifications();
+  if (forCycle !== cycle) return;
+
+  const fileIds = [
+    ...new Set(
+      listed
+        .filter(isResolvableHere)
+        .map((notification) => notification.fileId)
+        .filter((fileId): fileId is string => fileId !== null),
+    ),
+  ];
+  const resolved = await Promise.all(
+    fileIds.map(
+      async (fileId) =>
+        [
+          fileId,
+          {
+            hasLocalFile: await hasLocalFile(fileId),
+          },
+        ] as const,
+    ),
+  );
+  if (forCycle !== cycle) return;
+
+  publish({
+    ...snapshot,
+    notifications: listed,
+    documents: Object.fromEntries(resolved),
+  });
+}
+
+/** A caller arriving mid-read joins the one already running. */
+function load(): Promise<void> {
+  if (inFlight) return inFlight;
+  const pending = read(cycle).finally(() => {
+    if (inFlight === pending) inFlight = null;
+  });
+  inFlight = pending;
+  return pending;
+}
+
+/** Set while a fresh read is chained behind the one in flight, so callers share it. */
+let freshReadQueued = false;
+
+/**
+ * A read that must observe a write the caller just made. It never joins a read already in
+ * flight, because that read may have started before the write and would report the world
+ * without it; a fresh read is chained behind it instead. Callers arriving in the same
+ * window share the one chained read.
+ */
+function loadFresh(): void {
+  const inFlightRead = inFlight;
+  if (!inFlightRead) {
+    void load();
+    return;
+  }
+  if (freshReadQueued) return;
+  freshReadQueued = true;
+  void inFlightRead.finally(() => {
+    freshReadQueued = false;
+    // The last bell may have unmounted while the stale read was landing.
+    if (subscribers.size === 0) return;
+    void load();
+  });
+}
+
+function startPolling(): void {
+  cycle += 1;
+  // From disk, not memory: another tab may have moved the marker on.
+  snapshot = { ...NOTHING_LOADED, lastSeenId: readLastSeenId() };
+  pollTimer = window.setInterval(() => void load(), POLL_INTERVAL_MS);
+  void load();
+}
+
+function stopPolling(): void {
+  if (pollTimer !== null) {
+    window.clearInterval(pollTimer);
+    pollTimer = null;
+  }
+  // Drop anything in flight: its cycle has nobody watching it.
+  cycle += 1;
+  inFlight = null;
+  snapshot = NOTHING_LOADED;
+}
+
+/** Polling lives exactly as long as there is a bell to show it. */
+function subscribe(onStoreChange: () => void): () => void {
+  subscribers.add(onStoreChange);
+  if (subscribers.size === 1) startPolling();
+  return () => {
+    subscribers.delete(onStoreChange);
+    if (subscribers.size === 0) stopPolling();
+  };
+}
+
+function markAllSeen(): void {
+  const newest = snapshot.notifications[0];
+  if (!newest || snapshot.lastSeenId === newest.id) return;
+  writeLastSeenId(newest.id);
+  publish({ ...snapshot, lastSeenId: newest.id });
+}
+
+function refresh(): void {
+  // A row calls this after changing something server-side, so the read must be fresh.
+  loadFresh();
+}
+
+/**
+ * Re-read now, for a caller that just caused a notification: without it the person who triggered a
+ * failure waits a whole poll interval to hear about their own action. A no-op with no bell mounted.
+ */
+export function refreshNotificationsNow(): void {
+  if (subscribers.size === 0) return;
+  loadFresh();
+}
+
+export interface NotificationsState {
+  notifications: AppNotification[];
+  /** Read before {@link markAllSeen}, which zeroes it. */
+  unreadCount: number;
+  documentStateFor: (
+    notification: AppNotification,
+  ) => NotificationDocumentState;
+  markAllSeen: () => void;
+  refresh: () => void;
+}
+
+export function useNotifications(): NotificationsState {
+  const { notifications, documents, lastSeenId } = useSyncExternalStore(
+    subscribe,
+    getSnapshot,
+    getSnapshot,
+  );
+
+  // A marker no longer in the list means we cannot tell how far the user got, so everything reads
+  // as unread rather than being silently marked seen.
+  const seenIndex = lastSeenId
+    ? notifications.findIndex((n) => n.id === lastSeenId)
+    : -1;
+  const unreadCount = seenIndex === -1 ? notifications.length : seenIndex;
+
+  return {
+    notifications,
+    unreadCount,
+    documentStateFor: (notification) =>
+      (notification.fileId ? documents[notification.fileId] : null) ??
+      NO_DOCUMENT,
+    markAllSeen,
+    refresh,
+  };
+}
diff --git a/frontend/editor/src/core/hooks/useOpenPlan.ts b/frontend/editor/src/core/hooks/useOpenPlan.ts
new file mode 100644
index 0000000000..da6fe2207e
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useOpenPlan.ts
@@ -0,0 +1,10 @@
+/**
+ * Opens the plan surface behind the sidebar footer's free-credits row, or null
+ * when this build has none (the row is then inert text rather than a button).
+ *
+ * Core ships no wallet and no plan section, so there is nothing to open. Builds
+ * that meter usage override this with their own surface.
+ */
+export function useOpenPlan(): (() => void) | null {
+  return null;
+}
diff --git a/frontend/editor/src/core/hooks/useOtherAppSwitch.ts b/frontend/editor/src/core/hooks/useOtherAppSwitch.ts
new file mode 100644
index 0000000000..612589899b
--- /dev/null
+++ b/frontend/editor/src/core/hooks/useOtherAppSwitch.ts
@@ -0,0 +1,12 @@
+import { type NavFooterAppLink } from "@app/components/shared/navFooter/NavFooter";
+
+/**
+ * The sibling app this build can switch to (editor ⇄ processor), or null when
+ * there is none. The single gate behind both the brand switcher and the
+ * sidebar footer's "Open ..." row, so the two can never disagree about access.
+ *
+ * Core ships no processor, so there is nothing to switch to.
+ */
+export function useOtherAppSwitch(): NavFooterAppLink | null {
+  return null;
+}
diff --git a/frontend/editor/src/core/i18n.ts b/frontend/editor/src/core/i18n.ts
index 9663a1c2e2..839652658c 100644
--- a/frontend/editor/src/core/i18n.ts
+++ b/frontend/editor/src/core/i18n.ts
@@ -36,7 +36,7 @@ i18n
     debug: process.env.NODE_ENV === "development",
 
     // Ensure synchronous loading to prevent timing issues
-    initImmediate: false,
+    initAsync: false,
 
     interpolation: {
       escapeValue: false, // React already escapes values
diff --git a/frontend/editor/src/core/i18n/translationAudit.ts b/frontend/editor/src/core/i18n/translationAudit.ts
index 9dfbc5b21b..8545df99e0 100644
--- a/frontend/editor/src/core/i18n/translationAudit.ts
+++ b/frontend/editor/src/core/i18n/translationAudit.ts
@@ -115,6 +115,9 @@ export const I18N_PROJECTS: TranslationProject[] = [
       // invisible to the static scan. The raw catalogue value is the fallback.
       /^policies\.field\./,
       /^policyOption\./,
+      // A failure's disabled reason arrives from the server as a key and is rendered with
+      // t(thatKey), so nothing in source names it, but the copy still has to exist.
+      /^portal\.failures\.disabled\./,
     ],
     minUsedKeys: 100,
     minLocaleKeys: 100,
diff --git a/frontend/editor/src/core/pages/HomePage.css b/frontend/editor/src/core/pages/HomePage.css
index 7af1e89404..90ab9476bf 100644
--- a/frontend/editor/src/core/pages/HomePage.css
+++ b/frontend/editor/src/core/pages/HomePage.css
@@ -10,16 +10,9 @@
   padding: 0.5rem 0.75rem;
   border-bottom: 1px solid var(--c-border-subtle);
   background: var(--c-bg-raised);
-  display: flex;
-  flex-direction: column;
-  gap: 0.35rem;
-}
-
-.mobile-header {
   display: flex;
   align-items: center;
-  justify-content: space-between;
-  gap: 0.5rem;
+  gap: 0.75rem;
 }
 
 .mobile-brand {
@@ -27,6 +20,7 @@
   align-items: center;
   gap: 0.5rem;
   min-width: 0;
+  flex-shrink: 0;
 }
 
 .mobile-brand-icon {
@@ -49,6 +43,14 @@
   border-radius: 9999px;
   background: var(--c-bg);
   border: 1px solid var(--c-border-subtle);
+  flex: 1;
+  min-width: 0;
+}
+
+@media (max-width: 25rem) {
+  .mobile-brand-text {
+    display: none;
+  }
 }
 
 .mobile-toggle-button {
@@ -74,10 +76,46 @@
   color: var(--c-text);
 }
 
-.mobile-toggle-hint {
+.mobile-slider-wrap {
+  position: relative;
+  display: flex;
+  flex: 1 1 auto;
+  min-height: 0;
+  width: 100%;
+}
+
+.mobile-swipe-hint {
+  position: absolute;
+  top: 0.5rem;
+  left: 50%;
+  transform: translateX(-50%);
+  padding: 0.35rem 0.85rem;
+  border-radius: 9999px;
+  background: color-mix(in srgb, var(--c-bg-raised) 88%, transparent);
+  border: 1px solid var(--c-border-subtle);
   font-size: 0.7rem;
   color: var(--c-text-subtle);
-  text-align: center;
+  white-space: nowrap;
+  pointer-events: none;
+  z-index: 20;
+  animation: mobile-swipe-hint-in 0.4s ease 1s both;
+}
+
+@keyframes mobile-swipe-hint-in {
+  from {
+    opacity: 0;
+    transform: translateX(-50%) translateY(-0.25rem);
+  }
+  to {
+    opacity: 1;
+    transform: translateX(-50%) translateY(0);
+  }
+}
+
+@media (prefers-reduced-motion: reduce) {
+  .mobile-swipe-hint {
+    animation: none;
+  }
 }
 
 .mobile-slider {
@@ -134,6 +172,7 @@
   align-items: center;
   justify-content: space-around;
   padding: 0.5rem;
+  padding-bottom: calc(0.5rem + env(safe-area-inset-bottom, 0px));
   border-top: 1px solid var(--c-border-subtle);
   background: var(--c-bg-raised);
   gap: 0.5rem;
@@ -177,4 +216,5 @@
   font-size: 0.75rem;
   font-weight: 500;
   color: var(--c-text-subtle);
+  margin-inline-start: 0.25rem;
 }
diff --git a/frontend/editor/src/core/pages/HomePage.tsx b/frontend/editor/src/core/pages/HomePage.tsx
index b1d8708649..e0c5303447 100644
--- a/frontend/editor/src/core/pages/HomePage.tsx
+++ b/frontend/editor/src/core/pages/HomePage.tsx
@@ -29,6 +29,7 @@ import LocalIcon from "@app/components/shared/LocalIcon";
 import AppConfigModal from "@app/components/shared/AppConfigModalLazy";
 import { getStartupNavigationAction } from "@app/utils/homePageNavigation";
 import { EDITOR_BASENAME } from "@app/routes/editorBasename";
+import { stripBasePath } from "@app/constants/app";
 import { HomePageExtensions } from "@app/components/home/HomePageExtensions";
 import {
   FilesPageProvider,
@@ -43,6 +44,15 @@ import { Button } from "@app/ui/Button";
 import "@app/pages/HomePage.css";
 
 const SIDEBAR_COLLAPSED_STORAGE_KEY = "stirling.fileSidebarCollapsed";
+const SWIPE_HINT_SEEN_STORAGE_KEY = "stirling.mobileSwipeHintSeen";
+
+function readSwipeHintSeen(): boolean {
+  try {
+    return window.localStorage.getItem(SWIPE_HINT_SEEN_STORAGE_KEY) === "true";
+  } catch {
+    return true;
+  }
+}
 
 function readPersistedSidebarCollapsed(): boolean {
   try {
@@ -114,12 +124,30 @@ export default function HomePage() {
     return () => window.removeEventListener("appConfig:open", handler);
   }, []);
 
-  const handleCloseConfig = useCallback(() => {
-    setConfigModalOpen(false);
-    if (location.pathname.startsWith("/settings")) {
-      navigate(EDITOR_BASENAME, { replace: true });
+  // Where the user was before settings opened, so close can restore it. Null
+  // when opened directly on a /settings URL (deep link) - close falls back to
+  // the editor root.
+  const settingsOriginRef = useRef<string | null>(null);
+  const wasConfigOpenRef = useRef(false);
+  useEffect(() => {
+    if (configModalOpen && !wasConfigOpenRef.current) {
+      settingsOriginRef.current = location.pathname.startsWith("/settings")
+        ? null
+        : location.pathname;
     }
-  }, [location.pathname, navigate]);
+    wasConfigOpenRef.current = configModalOpen;
+  }, [configModalOpen, location.pathname]);
+
+  const handleCloseConfig = useCallback(() => {
+    // Restore the URL before clearing the flag, or a late /settings commit
+    // re-opens the modal. Read window.location, not useLocation: a tab switch
+    // updates the URL synchronously while the router's commit lags. Replace to
+    // the origin rather than navigate(-1), which webkit can drop.
+    if (stripBasePath(window.location.pathname).startsWith("/settings")) {
+      navigate(settingsOriginRef.current ?? EDITOR_BASENAME, { replace: true });
+    }
+    setConfigModalOpen(false);
+  }, [navigate]);
 
   const { activeFiles } = useFileContext();
   const navigationState = useNavigationState();
@@ -181,6 +209,9 @@ export default function HomePage() {
       if (typeof action.activeFileIndex === "number") {
         setActiveFileIndex(action.activeFileIndex);
       }
+      if (isMobile) {
+        setActiveMobileView("workbench");
+      }
     }
 
     prevFileCountRef.current = currentCount;
@@ -190,6 +221,7 @@ export default function HomePage() {
     setActiveFileIndex,
     selectedToolKey,
     navigationState.workbench,
+    isMobile,
   ]);
 
   const hideToolPanel =
@@ -201,10 +233,44 @@ export default function HomePage() {
 
   const brandAltText = t("home.mobile.brandAlt", "Stirling PDF logo");
 
-  const handleSelectMobileView = useCallback((view: MobileView) => {
-    setActiveMobileView(view);
+  const [showSwipeHint, setShowSwipeHint] = useState(
+    () => !readSwipeHintSeen(),
+  );
+  const dismissSwipeHint = useCallback(() => {
+    setShowSwipeHint((shown) => {
+      if (shown) {
+        try {
+          window.localStorage.setItem(SWIPE_HINT_SEEN_STORAGE_KEY, "true");
+        } catch {
+          // private mode / quota: silently no-op
+        }
+      }
+      return false;
+    });
   }, []);
 
+  useEffect(() => {
+    if (!isMobile || !isTouch || !showSwipeHint) return;
+    const timer = window.setTimeout(dismissSwipeHint, 8000);
+    return () => window.clearTimeout(timer);
+  }, [isMobile, isTouch, showSwipeHint, dismissSwipeHint]);
+
+  const handleSelectMobileView = useCallback(
+    (view: MobileView) => {
+      setActiveMobileView(view);
+      dismissSwipeHint();
+    },
+    [dismissSwipeHint],
+  );
+
+  // The /files URL pins the workbench to myFiles, so changing view while the
+  // file manager is open does nothing until we navigate off it. Desktop leaves
+  // via the sidebar's back arrow; mobile renders no sidebar, so without this the
+  // bottom bar could not get out of My Files at all.
+  const leaveMyFiles = useCallback(() => {
+    if (navigationState.workbench === "myFiles") navigate(EDITOR_BASENAME);
+  }, [navigationState.workbench, navigate]);
+
   useEffect(() => {
     if (isMobile) {
       const container = sliderRef.current;
@@ -250,9 +316,10 @@ export default function HomePage() {
         const threshold = offsetWidth / 2;
         const nextView: MobileView =
           scrollLeft >= threshold ? "workbench" : "tools";
-        setActiveMobileView((current) =>
-          current === nextView ? current : nextView,
-        );
+        setActiveMobileView((current) => {
+          if (current !== nextView) dismissSwipeHint();
+          return current === nextView ? current : nextView;
+        });
       });
     };
 
@@ -264,7 +331,7 @@ export default function HomePage() {
         cancelAnimationFrame(animationFrame);
       }
     };
-  }, [isMobile]);
+  }, [isMobile, dismissSwipeHint]);
 
   // Automatically switch to workbench when read mode or multiTool is activated in mobile
   useEffect(() => {
@@ -331,14 +398,9 @@ export default function HomePage() {
               other route. */}
             {navigationState.workbench !== "myFiles" && (
               <div className="mobile-toggle">
-                <div className="mobile-header">
-                  <div className="mobile-brand">
-                    <LogoIcon className="mobile-brand-icon" />
-                    <Wordmark
-                      alt={brandAltText}
-                      className="mobile-brand-text"
-                    />
-                  </div>
+                <div className="mobile-brand">
+                  <LogoIcon className="mobile-brand-icon" />
+                  <Wordmark alt={brandAltText} className="mobile-brand-text" />
                 </div>
                 <div
                   className="mobile-toggle-buttons"
@@ -367,14 +429,6 @@ export default function HomePage() {
                     {t("home.mobile.workspace", "Workspace")}
                   </button>
                 </div>
-                {isTouch && (
-                  <span className="mobile-toggle-hint">
-                    {t(
-                      "home.mobile.swipeHint",
-                      "Swipe left or right to switch views",
-                    )}
-                  </span>
-                )}
               </div>
             )}
             {navigationState.workbench === "myFiles" ? (
@@ -388,34 +442,44 @@ export default function HomePage() {
                 </div>
               </div>
             ) : (
-              <div ref={sliderRef} className="mobile-slider">
-                <div
-                  className="mobile-slide"
-                  aria-label={t(
-                    "home.mobile.toolsSlide",
-                    "Tool selection panel",
-                  )}
-                >
-                  <div className="mobile-slide-content">
-                    <RightSidebar />
+              <div className="mobile-slider-wrap">
+                <div ref={sliderRef} className="mobile-slider">
+                  <div
+                    className="mobile-slide"
+                    aria-label={t(
+                      "home.mobile.toolsSlide",
+                      "Tool selection panel",
+                    )}
+                  >
+                    <div className="mobile-slide-content">
+                      <RightSidebar />
+                    </div>
                   </div>
-                </div>
-                <div
-                  className="mobile-slide"
-                  aria-label={t(
-                    "home.mobile.workbenchSlide",
-                    "Workspace panel",
-                  )}
-                >
-                  <div className="mobile-slide-content">
-                    <div
-                      className="flex-1 min-h-0 flex"
-                      style={{ minWidth: 0 }}
-                    >
-                      <Workbench />
+                  <div
+                    className="mobile-slide"
+                    aria-label={t(
+                      "home.mobile.workbenchSlide",
+                      "Workspace panel",
+                    )}
+                  >
+                    <div className="mobile-slide-content">
+                      <div
+                        className="flex-1 min-h-0 flex"
+                        style={{ minWidth: 0 }}
+                      >
+                        <Workbench />
+                      </div>
                     </div>
                   </div>
                 </div>
+                {isTouch && showSwipeHint && (
+                  <span className="mobile-swipe-hint" aria-hidden="true">
+                    {t(
+                      "home.mobile.swipeHint",
+                      "Swipe left or right to switch views",
+                    )}
+                  </span>
+                )}
               </div>
             )}
             <div className="mobile-bottom-bar">
@@ -424,6 +488,7 @@ export default function HomePage() {
                 className="mobile-bottom-button"
                 aria-label={t("quickAccess.allTools", "Tools")}
                 onClick={() => {
+                  leaveMyFiles();
                   handleBackToTools();
                   if (isMobile) {
                     setActiveMobileView("tools");
@@ -441,6 +506,7 @@ export default function HomePage() {
                   className="mobile-bottom-button"
                   aria-label={t("quickAccess.automate", "Automate")}
                   onClick={() => {
+                    leaveMyFiles();
                     handleToolSelect("automate");
                     if (isMobile) {
                       setActiveMobileView("tools");
diff --git a/frontend/editor/src/core/platform/openExternalTab.test.ts b/frontend/editor/src/core/platform/openExternalTab.test.ts
new file mode 100644
index 0000000000..ccbbe4d818
--- /dev/null
+++ b/frontend/editor/src/core/platform/openExternalTab.test.ts
@@ -0,0 +1,45 @@
+import { afterEach, describe, expect, test, vi } from "vitest";
+import { openExternalTab } from "@app/platform/openExternalTab";
+import { expectConsole } from "@app/tests/failOnConsole";
+
+describe("openExternalTab (core/web)", () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+  });
+
+  // Opening in a new tab is the point of this seam: @app/platform/openExternal
+  // navigates the current tab on saas, which would tear the user out of the PDF.
+  test("opens alongside the app rather than navigating it away", async () => {
+    const openSpy = vi
+      .spyOn(window, "open")
+      .mockImplementation(() => null as Window | null);
+    const originalHref = window.location.href;
+
+    await openExternalTab("https://example.com/");
+
+    expect(openSpy).toHaveBeenCalledWith(
+      "https://example.com/",
+      "_blank",
+      "noopener,noreferrer",
+    );
+    expect(window.location.href).toBe(originalHref);
+  });
+
+  // The seam is the sink, so it must not depend on callers having sanitised:
+  // window.open on a javascript: URL would execute it in our own origin.
+  test.each([
+    "javascript:alert(1)",
+    "  javascript:alert(1)",
+    "data:text/html,<script>alert(1)</script>",
+    "file:///etc/passwd",
+  ])("refuses to open %s even if a caller skips sanitising", async (url) => {
+    const openSpy = vi
+      .spyOn(window, "open")
+      .mockImplementation(() => null as Window | null);
+    expectConsole.warn(/Refused to open unsafe URL/);
+
+    await openExternalTab(url);
+
+    expect(openSpy).not.toHaveBeenCalled();
+  });
+});
diff --git a/frontend/editor/src/core/platform/openExternalTab.ts b/frontend/editor/src/core/platform/openExternalTab.ts
new file mode 100644
index 0000000000..3a8d21d74a
--- /dev/null
+++ b/frontend/editor/src/core/platform/openExternalTab.ts
@@ -0,0 +1,27 @@
+/**
+ * core/web implementation of the @app/platform/openExternalTab seam.
+ *
+ * Distinct from @app/platform/openExternal: that seam is for "leave and return"
+ * redirects (Stripe checkout), so its saas impl navigates the CURRENT tab. A PDF
+ * link must never do that — it would tear the user out of their document — so
+ * this seam always opens alongside the app. Desktop shadows it to escape the
+ * Tauri webview; saas/proprietary fall through to this window.open.
+ *
+ * Callers are expected to sanitise, but this is the sink that actually hands the
+ * URL to the browser, so it re-checks rather than trusting them: window.open on
+ * a `javascript:` URL executes it in our own origin.
+ */
+import { getExternalHref } from "@app/utils/externalUrl";
+
+export type OpenExternalTab = (url: string) => Promise<void>;
+
+export const openExternalTab: OpenExternalTab = async (
+  url: string,
+): Promise<void> => {
+  const safeHref = getExternalHref(url);
+  if (!safeHref) {
+    console.warn("[openExternalTab] Refused to open unsafe URL:", url);
+    return;
+  }
+  window.open(safeHref, "_blank", "noopener,noreferrer");
+};
diff --git a/frontend/editor/src/core/query/keys.ts b/frontend/editor/src/core/query/keys.ts
index a7a68ea256..5354b56b63 100644
--- a/frontend/editor/src/core/query/keys.ts
+++ b/frontend/editor/src/core/query/keys.ts
@@ -6,5 +6,8 @@ export const qk = {
     ["editor", "endpointEnabled", endpoint] as const,
   footerInfo: () => ["editor", "footerInfo"] as const,
   groupEnabled: (group: string) => ["editor", "groupEnabled", group] as const,
+  /** Keyed on the asking identity: two users must never share one answer. */
+  portalAccess: (userId: string | null) =>
+    ["editor", "portalAccess", userId] as const,
   users: () => ["editor", "users"] as const,
 } as const;
diff --git a/frontend/editor/src/core/query/queryClient.ts b/frontend/editor/src/core/query/queryClient.ts
index 989ebff8c5..91b11f6e3d 100644
--- a/frontend/editor/src/core/query/queryClient.ts
+++ b/frontend/editor/src/core/query/queryClient.ts
@@ -5,7 +5,16 @@ import { QueryClient, type DefaultOptions } from "@tanstack/react-query";
 export const baseQueryOptions: DefaultOptions["queries"] = {
   staleTime: 30_000,
   gcTime: 5 * 60_000,
-  retry: 1,
+  // Retry once on transient failures, but never on a 4xx: an auth/forbidden/not-found
+  // response won't change on a second identical request, so retrying just doubles the
+  // wait (e.g. a 403 firing twice) before the UI settles.
+  retry: (failureCount, error) => {
+    const status = (error as { status?: number } | null)?.status;
+    if (typeof status === "number" && status >= 400 && status < 500) {
+      return false;
+    }
+    return failureCount < 1;
+  },
   networkMode: "always",
   refetchOnWindowFocus: false,
 };
diff --git a/frontend/editor/src/core/routes/portalBasename.ts b/frontend/editor/src/core/routes/portalBasename.ts
index c9ad3c44a7..a4fdb87a52 100644
--- a/frontend/editor/src/core/routes/portalBasename.ts
+++ b/frontend/editor/src/core/routes/portalBasename.ts
@@ -5,3 +5,9 @@
  * portal (core, desktop, prototypes) must never resolve @portal.
  */
 export const PORTAL_BASENAME = "/processor";
+
+/**
+ * The recorded-failures section of the portal's Documents view. Here because whoever links to it and
+ * whoever renders it are in different layers.
+ */
+export const PORTAL_FAILURES_ANCHOR = "failures";
diff --git a/frontend/editor/src/core/services/apiClientConfig.ts b/frontend/editor/src/core/services/apiClientConfig.ts
index b476d1348a..89fa465743 100644
--- a/frontend/editor/src/core/services/apiClientConfig.ts
+++ b/frontend/editor/src/core/services/apiClientConfig.ts
@@ -11,11 +11,11 @@
  */
 export function getApiBaseUrl(): string {
   // Runtime override to fix hardcoded localhost in builds
-  if (
-    typeof window !== "undefined" &&
-    (window as any).STIRLING_PDF_API_BASE_URL
-  ) {
-    return (window as any).STIRLING_PDF_API_BASE_URL;
+  if (typeof window !== "undefined") {
+    const override = window.STIRLING_PDF_API_BASE_URL;
+    if (override) {
+      return override;
+    }
   }
 
   return import.meta.env.VITE_API_BASE_URL;
diff --git a/frontend/editor/src/core/services/auditService.ts b/frontend/editor/src/core/services/auditService.ts
index c748504c54..acf43ab1d5 100644
--- a/frontend/editor/src/core/services/auditService.ts
+++ b/frontend/editor/src/core/services/auditService.ts
@@ -17,7 +17,7 @@ export interface AuditEvent {
   eventType: string;
   username: string;
   ipAddress: string;
-  details: Record<string, any>;
+  details: Record<string, unknown>;
 }
 
 export interface AuditEventsResponse {
diff --git a/frontend/editor/src/core/services/automationStorage.ts b/frontend/editor/src/core/services/automationStorage.ts
index 826bf3ce30..196596de18 100644
--- a/frontend/editor/src/core/services/automationStorage.ts
+++ b/frontend/editor/src/core/services/automationStorage.ts
@@ -8,7 +8,7 @@ export interface AutomationConfig {
   description?: string;
   operations: Array<{
     operation: string;
-    parameters: any;
+    parameters: Record<string, unknown>;
   }>;
   createdAt: string;
   updatedAt: string;
diff --git a/frontend/editor/src/core/services/enhancedPDFProcessingService.ts b/frontend/editor/src/core/services/enhancedPDFProcessingService.ts
index e91c34cde2..a63651e193 100644
--- a/frontend/editor/src/core/services/enhancedPDFProcessingService.ts
+++ b/frontend/editor/src/core/services/enhancedPDFProcessingService.ts
@@ -5,6 +5,7 @@ import {
   ProcessingConfig,
   ProcessingMetrics,
 } from "@app/types/processing";
+import type { PDFPageProxy } from "pdfjs-dist";
 import { ProcessingCache } from "@app/services/processingCache";
 import { FileHasher } from "@app/utils/fileHash";
 import { FileAnalyzer } from "@app/services/fileAnalyzer";
@@ -415,7 +416,7 @@ export class EnhancedPDFProcessingService {
    * Render a page thumbnail with specified quality
    */
   private async renderPageThumbnail(
-    page: any,
+    page: PDFPageProxy,
     quality: "low" | "medium" | "high",
   ): Promise<string> {
     const scales = { low: 0.2, medium: 0.5, high: 0.8 }; // Reduced low quality for page editor
@@ -431,7 +432,7 @@ export class EnhancedPDFProcessingService {
       throw new Error("Could not get canvas context");
     }
 
-    await page.render({ canvasContext: context, viewport }).promise;
+    await page.render({ canvasContext: context, viewport, canvas }).promise;
     return canvas.toDataURL("image/jpeg", 0.8); // Use JPEG for better compression
   }
 
diff --git a/frontend/editor/src/core/services/errorUtils.ts b/frontend/editor/src/core/services/errorUtils.ts
index cdfeb9f38f..747cd90b5a 100644
--- a/frontend/editor/src/core/services/errorUtils.ts
+++ b/frontend/editor/src/core/services/errorUtils.ts
@@ -5,7 +5,7 @@ export const FILE_EVENTS = {
 const UUID_REGEX =
   /[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/g;
 
-export function tryParseJson<T = any>(input: unknown): T | undefined {
+export function tryParseJson<T = unknown>(input: unknown): T | undefined {
   if (typeof input !== "string") return input as T | undefined;
   try {
     return JSON.parse(input) as T;
@@ -14,19 +14,20 @@ export function tryParseJson<T = any>(input: unknown): T | undefined {
   }
 }
 
-export async function normalizeAxiosErrorData(data: any): Promise<any> {
+export async function normalizeAxiosErrorData(data: unknown): Promise<unknown> {
   if (!data) return undefined;
-  if (typeof data?.text === "function") {
-    const text = await data.text();
+  const blobLike = data as { text?: () => Promise<string> };
+  if (typeof blobLike.text === "function") {
+    const text = await blobLike.text();
     return tryParseJson(text) ?? text;
   }
   return data;
 }
 
-export function extractErrorFileIds(payload: any): string[] | undefined {
+export function extractErrorFileIds(payload: unknown): string[] | undefined {
   if (!payload) return undefined;
-  if (Array.isArray(payload?.errorFileIds))
-    return payload.errorFileIds as string[];
+  const errorFileIds = (payload as { errorFileIds?: unknown }).errorFileIds;
+  if (Array.isArray(errorFileIds)) return errorFileIds as string[];
   if (typeof payload === "string") {
     const matches = payload.match(UUID_REGEX);
     if (matches && matches.length > 0) return Array.from(new Set(matches));
@@ -45,11 +46,11 @@ export function isZeroByte(
   file: File | { size?: number } | null | undefined,
 ): boolean {
   if (!file) return true;
-  const size = (file as any).size;
+  const size = file.size;
   return typeof size === "number" ? size <= 0 : true;
 }
 
 export function isEmptyOutput(files: File[] | null | undefined): boolean {
   if (!files || files.length === 0) return true;
-  return files.every((f) => (f as any)?.size === 0);
+  return files.every((f) => f?.size === 0);
 }
diff --git a/frontend/editor/src/core/services/failureReporting.test.ts b/frontend/editor/src/core/services/failureReporting.test.ts
new file mode 100644
index 0000000000..2eadc3ae65
--- /dev/null
+++ b/frontend/editor/src/core/services/failureReporting.test.ts
@@ -0,0 +1,315 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+/**
+ * Tests for the editor's failure reporter. Two properties matter: it never sends a
+ * document name, and it never lets its own failure reach the tool the user was
+ * running.
+ */
+
+const post = vi.fn();
+
+/**
+ * Indirection so one test can replace the transport with a plain throwing closure.
+ * A vi.fn that throws has its error re-reported by vitest even once the code under
+ * test has caught it, which would fail the very test asserting it was caught.
+ */
+let transport: (...args: unknown[]) => unknown = (...args) => post(...args);
+
+vi.mock("@app/services/apiClient", () => ({
+  default: { post: (...args: unknown[]) => transport(...args) },
+}));
+
+const { reportToolFailure, reportFilesRemoved, errorCodeOf } =
+  await import("@app/services/failureReporting");
+
+/** An axios-shaped rejection carrying a Problem Details body. */
+function problemDetail(errorCode: string, extra: Record<string, unknown> = {}) {
+  return {
+    response: {
+      status: 400,
+      data: { type: "/errors/pdf-password", errorCode, ...extra },
+    },
+    message: "Request failed with status code 400",
+  };
+}
+
+describe("errorCodeOf", () => {
+  it("reads the code out of a Problem Details body", async () => {
+    await expect(errorCodeOf(problemDetail("E004"))).resolves.toBe("E004");
+  });
+
+  it("reads the code out of a blob body, which is how a download-typed call fails", async () => {
+    const error = {
+      response: {
+        data: {
+          text: () => Promise.resolve(JSON.stringify({ errorCode: "E001" })),
+        },
+      },
+    };
+
+    await expect(errorCodeOf(error)).resolves.toBe("E001");
+  });
+
+  it("returns null when the body carries no code", async () => {
+    await expect(
+      errorCodeOf({ response: { data: { title: "nope" } } }),
+    ).resolves.toBeNull();
+    await expect(errorCodeOf({ message: "network error" })).resolves.toBeNull();
+    await expect(errorCodeOf(undefined)).resolves.toBeNull();
+  });
+
+  it("returns null rather than throwing on an unparseable blob", async () => {
+    const error = {
+      response: { data: { text: () => Promise.resolve("<html>502</html>") } },
+    };
+
+    await expect(errorCodeOf(error)).resolves.toBeNull();
+  });
+});
+
+describe("reportToolFailure", () => {
+  beforeEach(() => {
+    post.mockReset().mockResolvedValue({ status: 204 });
+    transport = (...args) => post(...args);
+  });
+
+  it("posts the operation, code and file ids", async () => {
+    await reportToolFailure({
+      operation: "remove-password",
+      error: problemDetail("E004"),
+      fileIds: ["f-1", "f-2"],
+    });
+
+    expect(post).toHaveBeenCalledTimes(1);
+    const [path, body] = post.mock.calls[0] as [
+      string,
+      Record<string, unknown>,
+    ];
+    expect(path).toBe("/api/v1/file-run-events/reports");
+    expect(body).toMatchObject({
+      operation: "remove-password",
+      errorCode: "E004",
+      fileIds: ["f-1", "f-2"],
+    });
+  });
+
+  it("ignores names a caller hands it, and identifies files by id", async () => {
+    // fileNames is accepted and dropped on purpose, so a call site holding names cannot pass
+    // them somewhere they would be stored as a document reference.
+    await reportToolFailure({
+      operation: "compress",
+      error: { response: { status: 500, data: {} }, message: "boom" },
+      fileIds: ["f-1"],
+      fileNames: ["Q4 report.pdf"],
+    });
+
+    const body = post.mock.calls[0]?.[1] as Record<string, unknown>;
+    expect(body.fileIds).toEqual(["f-1"]);
+    expect(JSON.stringify(body)).not.toContain("Q4 report.pdf");
+  });
+
+  it("sends the message the user saw, unaltered", async () => {
+    // Their own error about their own file: trimming it only makes the row harder to act on.
+    await reportToolFailure({
+      operation: "compress",
+      error: {
+        response: { status: 500, data: {} },
+        message: "Failed on Q4 report.pdf",
+      },
+      fileIds: ["f-1"],
+    });
+
+    const body = post.mock.calls[0]?.[1] as { detail: string };
+    expect(body.detail).toBe("Failed on Q4 report.pdf");
+  });
+
+  it("sends no team, because the server derives it", async () => {
+    await reportToolFailure({
+      operation: "compress",
+      error: problemDetail("E004"),
+      fileIds: ["f-1"],
+    });
+
+    expect(JSON.stringify(post.mock.calls[0]?.[1])).not.toMatch(/team/i);
+  });
+
+  it("swallows its own failure so the tool's own error handling is unaffected", async () => {
+    transport = () => {
+      throw new Error("404 - no such route on a core build");
+    };
+
+    let threw = false;
+    try {
+      await reportToolFailure({
+        operation: "compress",
+        error: problemDetail("E004"),
+        fileIds: ["f-1"],
+      });
+    } catch {
+      threw = true;
+    }
+
+    expect(threw).toBe(false);
+  });
+
+  it("asks for its own failure not to be shown, since the tool's error is already on screen", async () => {
+    await reportToolFailure({
+      operation: "compress",
+      error: problemDetail("E004"),
+      fileIds: ["f-1"],
+    });
+
+    expect(post.mock.calls[0]?.[2]).toMatchObject({ suppressErrorToast: true });
+  });
+
+  it("logs a rejected report instead of losing it, and still does not throw", async () => {
+    // A 400 means this client built a bad report, e.g. one naming more files than a report may
+    // carry. Nothing else would ever surface it: the call is fire-and-forget and its toast is
+    // suppressed, so the console line is the only sign a client author gets.
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    transport = () => {
+      throw Object.assign(new Error("Request failed with status code 400"), {
+        response: {
+          status: 400,
+          data: {
+            detail:
+              "a report may name at most 200 files, and this one named 5000",
+          },
+        },
+      });
+    };
+
+    let threw = false;
+    try {
+      await reportToolFailure({
+        operation: "compress",
+        error: problemDetail("E004"),
+        fileIds: ["f-1"],
+      });
+    } catch {
+      threw = true;
+    }
+
+    expect(threw).toBe(false);
+    expect(warn).toHaveBeenCalledTimes(1);
+    expect(String(warn.mock.calls[0]?.[0])).toContain("at most 200 files");
+    warn.mockRestore();
+  });
+
+  it("stays quiet when the route is simply absent, as on a build without failure tracking", async () => {
+    // Otherwise every tool failure on such a build would log, which is noise rather than a
+    // diagnostic.
+    const warn = vi.spyOn(console, "warn").mockImplementation(() => {});
+    transport = () => {
+      throw Object.assign(new Error("Request failed with status code 404"), {
+        response: { status: 404, data: {} },
+      });
+    };
+
+    await reportToolFailure({
+      operation: "compress",
+      error: problemDetail("E004"),
+      fileIds: ["f-1"],
+    });
+
+    expect(warn).not.toHaveBeenCalled();
+    warn.mockRestore();
+  });
+
+  it("reports a client-side refusal, which is a failure a leader can act on", async () => {
+    // The same class of problem as the processor rejecting a file type, which is
+    // already recorded. Unclassified, so the server files it as UNKNOWN.
+    await reportToolFailure({
+      operation: "convert",
+      error: new Error("Unsupported conversion format"),
+      fileIds: ["f-1"],
+    });
+
+    const body = post.mock.calls[0]?.[1] as Record<string, unknown>;
+    expect(body).toMatchObject({
+      operation: "convert",
+      errorCode: null,
+      detail: "Unsupported conversion format",
+    });
+  });
+
+  it("reports a network failure, which got no reply but did leave the browser", async () => {
+    await reportToolFailure({
+      operation: "compress",
+      error: { request: {}, message: "Network Error" },
+      fileIds: ["f-1"],
+    });
+
+    expect(post).toHaveBeenCalledTimes(1);
+  });
+
+  it.each([
+    ["an axios cancellation", { code: "ERR_CANCELED", message: "canceled" }],
+    [
+      "the rethrown wrapper useToolApiCalls builds",
+      new Error("Operation was cancelled", {
+        cause: { code: "ERR_CANCELED" },
+      }),
+    ],
+  ])("ignores %s, because the user chose to stop", async (_label, error) => {
+    await reportToolFailure({ operation: "compress", error, fileIds: ["f-1"] });
+
+    expect(post).not.toHaveBeenCalled();
+  });
+
+  it("tells the server when files are deleted, so their failures leave the queue", async () => {
+    await reportFilesRemoved(["f-1", "f-2"]);
+
+    const [path, body] = post.mock.calls[0] as [
+      string,
+      Record<string, unknown>,
+    ];
+    expect(path).toBe("/api/v1/file-run-events/removed-files");
+    expect(body).toEqual({ fileIds: ["f-1", "f-2"] });
+  });
+
+  it("says nothing when no real file ids were deleted", async () => {
+    await reportFilesRemoved([]);
+    await reportFilesRemoved(["", "   "]);
+
+    expect(post).not.toHaveBeenCalled();
+  });
+
+  it("swallows a failed deletion notice, since the file is gone locally either way", async () => {
+    transport = () => {
+      throw new Error("404 - no such route on a core build");
+    };
+
+    let threw = false;
+    try {
+      await reportFilesRemoved(["f-1"]);
+    } catch {
+      threw = true;
+    }
+
+    expect(threw).toBe(false);
+  });
+
+  it("does nothing without an operation to attribute the failure to", async () => {
+    await reportToolFailure({
+      operation: "",
+      error: { response: { status: 500 } },
+      fileIds: ["f-1"],
+    });
+
+    expect(post).not.toHaveBeenCalled();
+  });
+
+  it("sends every file id, since trimming would lose failures silently", async () => {
+    const many = Array.from({ length: 60 }, (_, i) => `f-${i}`);
+
+    await reportToolFailure({
+      operation: "compress",
+      error: problemDetail("E004"),
+      fileIds: many,
+    });
+
+    const body = post.mock.calls[0]?.[1] as { fileIds: string[] };
+    expect(body.fileIds).toEqual(many);
+  });
+});
diff --git a/frontend/editor/src/core/services/failureReporting.ts b/frontend/editor/src/core/services/failureReporting.ts
new file mode 100644
index 0000000000..af0765f8bd
--- /dev/null
+++ b/frontend/editor/src/core/services/failureReporting.ts
@@ -0,0 +1,183 @@
+import apiClient from "@app/services/apiClient";
+
+/**
+ * Reports a tool failure the user hit in the editor, so it lands in the same queue
+ * as one from a folder or bucket. The editor calls tools directly, so nothing
+ * server-side knows about these unless the client says so.
+ *
+ * Best-effort throughout: a build without the failure registry has no such route,
+ * and a report failing must never disturb the tool's own error handling.
+ */
+
+const REPORT_PATH = "/api/v1/file-run-events/reports";
+const REMOVED_FILES_PATH = "/api/v1/file-run-events/removed-files";
+
+interface ToolFailureReport {
+  /** The tool that failed, e.g. `remove-password`. */
+  operation: string;
+  /** Whatever the tool call rejected with. */
+  error: unknown;
+  /** Opaque file ids from FileContext. Names are deliberately not accepted. */
+  fileIds?: string[];
+  /**
+   * Accepted and ignored, so a call site that has names on hand cannot pass them
+   * somewhere they would be stored. Present to make that explicit rather than to
+   * be used.
+   */
+  fileNames?: string[];
+}
+
+/**
+ * The `errorCode` from a tool's Problem Details response, or null when there is
+ * none. A download-typed call fails with a Blob body, so that shape is parsed too.
+ */
+export async function errorCodeOf(error: unknown): Promise<string | null> {
+  const data = (error as { response?: { data?: unknown } })?.response?.data;
+  if (!data) return null;
+
+  const body = await asJson(data);
+  const code = (body as { errorCode?: unknown })?.errorCode;
+  return typeof code === "string" && code.trim() !== "" ? code : null;
+}
+
+async function asJson(data: unknown): Promise<unknown> {
+  if (typeof data === "object" && data !== null && !isBlobLike(data)) {
+    return data;
+  }
+  try {
+    const text = isBlobLike(data)
+      ? await data.text()
+      : typeof data === "string"
+        ? data
+        : "";
+    return text ? JSON.parse(text) : null;
+  } catch {
+    return null;
+  }
+}
+
+function isBlobLike(value: unknown): value is { text: () => Promise<string> } {
+  return (
+    typeof value === "object" &&
+    value !== null &&
+    typeof (value as { text?: unknown }).text === "function"
+  );
+}
+
+export async function reportToolFailure({
+  operation,
+  error,
+  fileIds = [],
+}: ToolFailureReport): Promise<void> {
+  if (!operation || operation.trim() === "") return;
+  if (wasCancelled(error)) return;
+
+  try {
+    await apiClient.post(
+      REPORT_PATH,
+      {
+        operation,
+        errorCode: await errorCodeOf(error),
+        fileIds,
+        detail: messageOf(error),
+      },
+      // The reporter's own failure must not reach the user: they already have the
+      // tool's error on screen, and a second toast about the report would be noise
+      // about something they never asked for.
+      { suppressErrorToast: true },
+    );
+  } catch (reportError) {
+    // Still never rethrown: a core build has no such route, and a member's report can
+    // also be refused. But a report the server rejected as invalid is logged rather
+    // than lost, because nothing else would ever surface it.
+    warnIfRejected(operation, reportError);
+  }
+}
+
+/**
+ * A report the server refused as malformed, which means this client built a bad one: worth a
+ * line in the console for whoever wrote it, since the call is fire-and-forget and its toast is
+ * suppressed. An absent route (404, a core build) or a session not allowed to report are
+ * expected, and stay quiet so an ordinary build does not log on every tool failure.
+ */
+function warnIfRejected(operation: string, error: unknown): void {
+  const response = (error as { response?: { status?: number; data?: unknown } })
+    ?.response;
+  if (response?.status !== 400) return;
+
+  console.warn(
+    `Failure report for "${operation}" was rejected by the server: ${reasonOf(response.data)}`,
+  );
+}
+
+/** Whatever the server said, out of a Problem Details body. */
+function reasonOf(data: unknown): string {
+  const body = data as { detail?: unknown; message?: unknown };
+  const stated =
+    typeof body?.detail === "string"
+      ? body.detail
+      : typeof body?.message === "string"
+        ? body.message
+        : "";
+  return stated.trim() === "" ? "no reason given" : stated;
+}
+
+/**
+ * Tell the server a user deleted these files, so any failure recorded against them stops asking
+ * for attention. The rows stay for audit; they just leave the queue.
+ *
+ * <p>Best-effort like the reporter: a build without the failure registry has no such route, and
+ * deleting a file must not fail because the server could not be told.
+ */
+export async function reportFilesRemoved(fileIds: string[]): Promise<void> {
+  const named = fileIds.filter(
+    (id) => typeof id === "string" && id.trim() !== "",
+  );
+  if (named.length === 0) return;
+
+  try {
+    // Toast suppressed for the same reason as a report: the user deleted a file and is not
+    // waiting to hear whether the server was told.
+    await apiClient.post(
+      REMOVED_FILES_PATH,
+      { fileIds: named },
+      { suppressErrorToast: true },
+    );
+  } catch {
+    // The file is gone locally either way. A row left open is retention's problem.
+  }
+}
+
+/**
+ * The message the user saw, sent as-is. It is their own error about their own file, so hiding
+ * parts of it would only make the row harder to act on.
+ */
+function messageOf(error: unknown): string {
+  const candidate = error as { message?: unknown };
+  return typeof candidate?.message === "string" ? candidate.message : "";
+}
+
+/**
+ * A user cancelling is the one failure worth dropping: nothing went wrong and there
+ * is nothing for a reviewer to do. `useToolApiCalls` rethrows an axios cancellation
+ * as a plain Error with the original as its cause, so both shapes are checked.
+ *
+ * <p>Everything else is reported, client-side refusals included: an unsupported input
+ * format is the same class of problem as the processor rejecting a file type, which
+ * is already recorded.
+ */
+function wasCancelled(error: unknown): boolean {
+  const candidate = error as {
+    code?: unknown;
+    name?: unknown;
+    message?: unknown;
+    cause?: { code?: unknown; name?: unknown };
+  };
+  return (
+    candidate?.code === "ERR_CANCELED" ||
+    candidate?.cause?.code === "ERR_CANCELED" ||
+    candidate?.name === "CanceledError" ||
+    candidate?.cause?.name === "CanceledError" ||
+    candidate?.message === "Operation was cancelled"
+  );
+}
diff --git a/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts b/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts
index d8530af026..d6f1c4b89d 100644
--- a/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts
+++ b/frontend/editor/src/core/services/fileStorage.blobFallback.test.ts
@@ -3,23 +3,26 @@ import "fake-indexeddb/auto";
 import { expectConsole } from "@app/tests/failOnConsole";
 
 /**
- * Regression test for the WebKit nightly breakage introduced with the
- * large-file OOM fix (#7175): `storeStirlingFile` began putting the `File`
- * itself into IndexedDB (persisted by reference, so multi-GB uploads never
- * materialize in JS memory). WebKit refuses blob values whenever it can't write
- * the blob's backing file and rejects the request with `UnknownError: Error
- * preparing Blob/File data to be stored in object store`, so on WebKit every
- * upload silently failed to persist: files vanished on navigation, Compare
- * slots never filled, and the classification backfill had no bytes to read.
+ * WebKit refuses blob values when it can't write the blob's backing file, so
+ * every upload silently failed to persist after #7175. Retried as a copy now.
  *
- * The service now retries such a rejection with an ArrayBuffer copy and stops
- * offering blobs for the rest of the session.
+ * It can also accept one and then lose the backing store. fake-indexeddb returns no
+ * Blob, so that loss is injected at the read; real round-trips: the e2e spec.
  */
 
-const nativeAdd = IDBObjectStore.prototype.add;
+const alertMock = vi.hoisted(() => vi.fn());
+vi.mock("@app/components/toast", () => ({
+  alert: (options: unknown) => alertMock(options),
+}));
 
-/** What each `add` attempt carried in `data` — the blob path or the copy path. */
+const nativeAdd = IDBObjectStore.prototype.add;
+const nativePut = IDBObjectStore.prototype.put;
+const nativeGet = IDBObjectStore.prototype.get;
+
+/** What each `add` attempt carried in `data`: blob path or copy path. */
 let attempts: Array<"blob" | "copy"> = [];
+/** The same, for `put` - the rewrite path a lost backing store recovers through. */
+let putAttempts: Array<"blob" | "copy"> = [];
 
 /** An IDBRequest that fails asynchronously, the way WebKit rejects blob puts. */
 class FailingRequest extends EventTarget {
@@ -32,10 +35,7 @@ class FailingRequest extends EventTarget {
   }
 }
 
-/**
- * Record every add attempt, optionally failing the blob-valued ones the way an
- * engine without blob storage does.
- */
+/** Record every add, optionally failing the blob-valued ones. */
 function instrumentAdd(options: { rejectBlobs: boolean }) {
   IDBObjectStore.prototype.add = function (
     this: IDBObjectStore,
@@ -58,11 +58,72 @@ function instrumentAdd(options: { rejectBlobs: boolean }) {
   } as typeof IDBObjectStore.prototype.add;
 }
 
-/**
- * A fresh service per test: whether the engine accepts blobs is remembered for
- * the process lifetime by design, so tests must not inherit that decision from
- * each other.
- */
+/** Record every put, so the copy-rewrite recovery can be observed. */
+function instrumentPut() {
+  IDBObjectStore.prototype.put = function (
+    this: IDBObjectStore,
+    value: unknown,
+    key?: IDBValidKey,
+  ) {
+    putAttempts.push(
+      (value as { data?: unknown } | null)?.data instanceof Blob
+        ? "blob"
+        : "copy",
+    );
+    return key === undefined
+      ? nativePut.call(this, value)
+      : nativePut.call(this, value, key);
+  } as typeof IDBObjectStore.prototype.put;
+}
+
+/** A stored blob whose backing store the engine has lost: it still reports a name,
+ *  type and size, and every read of its bytes fails the way WebKit's does. */
+function blobWithLostBackingStore(): Blob {
+  const lost = () => {
+    throw new DOMException(
+      "The object can not be found here.",
+      "NotFoundError",
+    );
+  };
+  return Object.assign(
+    new Blob(["%PDF-1.7 stirling"], { type: "application/pdf" }),
+    { slice: lost, arrayBuffer: lost, text: lost, stream: lost },
+  );
+}
+
+/** The next `deadReads` reads come back with a lost backing store, later ones
+ *  untouched - so a repaired record can still be read normally. */
+function loseBackingStoreOnRead(deadReads: number) {
+  let remaining = deadReads;
+  IDBObjectStore.prototype.get = function (
+    this: IDBObjectStore,
+    key: IDBValidKey | IDBKeyRange,
+  ) {
+    const request = nativeGet.call(this, key as IDBValidKey);
+    // One substitution per request, however often `result` is read.
+    let injected = false;
+    return new Proxy(request, {
+      get(target, prop) {
+        // Receiver must be the real request: IDBRequest's accessors are branded.
+        const value = Reflect.get(target, prop, target);
+        if (prop !== "result") {
+          return typeof value === "function" ? value.bind(target) : value;
+        }
+        if (!value || injected || remaining === 0) return value;
+        injected = true;
+        remaining--;
+        return { ...(value as object), data: blobWithLostBackingStore() };
+      },
+      set(target, prop, value) {
+        Reflect.set(target, prop, value, target);
+        return true;
+      },
+    });
+  } as typeof IDBObjectStore.prototype.get;
+}
+
+/** A fresh service per test: the blob decision is remembered by design, so
+ *  tests must not inherit it from each other. */
 async function freshFileStorage() {
   vi.resetModules();
   const [{ fileStorage }, { createStirlingFile, createNewStirlingFileStub }] =
@@ -86,10 +147,58 @@ async function freshFileStorage() {
 
 beforeEach(() => {
   attempts = [];
+  putAttempts = [];
+  alertMock.mockClear();
+  // The blob verdict is deliberately durable, so each test must start undecided.
+  localStorage.clear();
 });
 
 afterEach(() => {
   IDBObjectStore.prototype.add = nativeAdd;
+  IDBObjectStore.prototype.put = nativePut;
+  IDBObjectStore.prototype.get = nativeGet;
+});
+
+/** Abort the transaction the moment a write is issued over it. */
+function abortOnPut() {
+  IDBObjectStore.prototype.put = function (this: IDBObjectStore) {
+    const request = new FailingRequest(
+      new DOMException("transaction aborted", "AbortError"),
+    ) as unknown as IDBRequest<IDBValidKey>;
+    this.transaction.abort();
+    return request;
+  } as typeof IDBObjectStore.prototype.put;
+}
+
+describe("read-modify-write — a refused rewrite must not hang or vanish", () => {
+  /** The abort guard used to sit on the read promise, leaving the write with a
+   *  dead reject - and `.catch` can't rescue a promise that never settles. */
+  test("settles instead of hanging when the write transaction aborts", async () => {
+    expectConsole.error(/Failed to mark file as processed/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    const id = await store("aborts.pdf");
+
+    abortOnPut();
+
+    // Before the fix this never settled and the test timed out.
+    await expect(fileStorage.markFileAsProcessed(id)).resolves.toBe(false);
+  });
+
+  /** The copy-and-retry recovery can't be exercised here: it needs a record that
+   *  reads back as a Blob, which fake-indexeddb never returns. */
+  test("a metadata rewrite still commits, and reports commit not put", async () => {
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    const id = await store("rewrite.pdf");
+
+    await expect(fileStorage.markFileAsProcessed(id)).resolves.toBe(true);
+    // Missing record: `false`, not a throw and not a claim of success.
+    await expect(
+      fileStorage.markFileAsProcessed("nope" as never),
+    ).resolves.toBe(false);
+    expect((await fileStorage.getStirlingFile(id))?.name).toBe("rewrite.pdf");
+  });
 });
 
 describe("storeStirlingFile — blob-value fallback", () => {
@@ -113,8 +222,7 @@ describe("storeStirlingFile — blob-value fallback", () => {
     const id = await store("webkit.pdf");
 
     expect(attempts).toEqual(["blob", "copy"]);
-    // Readable back is what every downstream consumer depends on: rehydration
-    // after navigation, thumbnails, the classification backfill.
+    // Readable back is what rehydration, thumbnails and backfill depend on.
     expect((await fileStorage.getStirlingFile(id))?.name).toBe("webkit.pdf");
   });
 
@@ -127,12 +235,32 @@ describe("storeStirlingFile — blob-value fallback", () => {
     attempts = [];
     const id = await store("second.pdf");
 
-    // Straight to the copy path — no repeated blob probe, and only the single
-    // warning expected above.
+    // Straight to the copy path, and only the one warning expected above.
     expect(attempts).toEqual(["copy"]);
     expect((await fileStorage.getStirlingFile(id))?.name).toBe("second.pdf");
   });
 
+  /** Committing is not evidence the bytes survived, and by the next reload the
+   *  source File is gone: without this the upload looks fine and the file is dead. */
+  test("repairs a record whose stored blob loses its backing store", async () => {
+    expectConsole.warn(/could not read its bytes back/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    instrumentPut();
+    loseBackingStoreOnRead(1); // only the store's own read-back is dead
+
+    const id = await store("dead-on-arrival.pdf");
+
+    // Accepted as a blob, then rewritten from the file still in hand.
+    expect(attempts).toEqual(["blob"]);
+    expect(putAttempts).toEqual(["copy"]);
+    expect((await fileStorage.getStirlingFile(id))?.name).toBe(
+      "dead-on-arrival.pdf",
+    );
+    // Self-healed, so nothing to tell the user about.
+    expect(alertMock).not.toHaveBeenCalled();
+  });
+
   test("does not retry a failure a copy can't fix (quota)", async () => {
     const { store } = await freshFileStorage();
     IDBObjectStore.prototype.add = function (this: IDBObjectStore) {
@@ -144,3 +272,246 @@ describe("storeStirlingFile — blob-value fallback", () => {
     expect(attempts).toEqual(["blob"]);
   });
 });
+
+/** An earlier session's record can't be repaired, and the user has to be told - but
+ *  the telling must never gate the open. Awaiting the probe stalled every file in
+ *  Safari, where the probe read of a lost backing store never settles. */
+describe("reads — a stored blob whose bytes are gone", () => {
+  test("hands the file over and reports the loss out of band", async () => {
+    expectConsole.warn(/could not read its bytes back/);
+    expectConsole.error(/cannot be read/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    const id = await store("lost.pdf");
+
+    loseBackingStoreOnRead(5); // every read from here on
+
+    // Not null, and not awaited on the probe: the caller is never blocked.
+    expect((await fileStorage.getStirlingFile(id))?.name).toBe("lost.pdf");
+    await new Promise((resolve) => setTimeout(resolve));
+
+    // Told once, not once per reader: every consumer of the file hits this record.
+    expect(alertMock).toHaveBeenCalledTimes(1);
+    expect(alertMock.mock.calls[0][0]).toMatchObject({
+      alertType: "warning",
+      body: expect.stringContaining("lost.pdf"),
+    });
+  });
+
+  /** The loop this closes: a reload re-decides optimistically, writes blobs the
+   *  engine loses again, and the browser never settles on a shape that works. */
+  test("remembers across reloads that this browser loses blob values", async () => {
+    expectConsole.warn(/could not read its bytes back/);
+    expectConsole.error(/cannot be read/);
+    const first = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    const id = await first.store("lost.pdf");
+    loseBackingStoreOnRead(1);
+    expect(await first.fileStorage.getStirlingFile(id)).not.toBeNull();
+    await new Promise((resolve) => setTimeout(resolve));
+
+    // A new page load: a fresh service, same browser profile.
+    const next = await freshFileStorage();
+    attempts = [];
+    const later = await next.store("after-reload.pdf");
+
+    expect(attempts).toEqual(["copy"]);
+    expect((await next.fileStorage.getStirlingFile(later))?.name).toBe(
+      "after-reload.pdf",
+    );
+  });
+
+  test("stops offering blob values for the rest of the session", async () => {
+    expectConsole.warn(/could not read its bytes back/);
+    expectConsole.error(/cannot be read/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    const first = await store("lost.pdf");
+
+    loseBackingStoreOnRead(1);
+    expect(await fileStorage.getStirlingFile(first)).not.toBeNull();
+    await new Promise((resolve) => setTimeout(resolve));
+
+    // An engine that loses a blob it accepted can't be trusted with the next one,
+    // so the read failure degrades writes too.
+    attempts = [];
+    const second = await store("later.pdf");
+    expect(attempts).toEqual(["copy"]);
+    expect((await fileStorage.getStirlingFile(second))?.name).toBe("later.pdf");
+  });
+});
+
+/** Deleting a file used to leave its superseded versions in storage forever,
+ *  invisible (listings filter on isLeaf) and still holding their full bytes. */
+describe("orphanedAncestorIds", () => {
+  const store = async (
+    fileStorage: { storeStirlingFile: (f: never, s: never) => Promise<void> },
+    id: string,
+    parentFileId: string | undefined,
+    isLeaf: boolean,
+  ) => {
+    const { createStirlingFile, createNewStirlingFileStub } =
+      await import("@app/types/fileContext");
+    const file = new File(["%PDF-1.7"], `${id}.pdf`, {
+      type: "application/pdf",
+    });
+    const base = createNewStirlingFileStub(file);
+    await fileStorage.storeStirlingFile(
+      createStirlingFile(file, id as never) as never,
+      { ...base, id, isLeaf, parentFileId, originalFileId: "v1" } as never,
+    );
+  };
+
+  test("takes the superseded versions with the leaf", async () => {
+    const { fileStorage } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    await store(fileStorage as never, "v1", undefined, false);
+    await store(fileStorage as never, "v2", "v1", true);
+
+    expect(await fileStorage.orphanedAncestorIds(["v2" as never])).toEqual([
+      "v1",
+    ]);
+  });
+
+  test("leaves a split sibling's history alone", async () => {
+    const { fileStorage } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    // Distinct ids: the fake database outlives the module reset between tests.
+    await store(fileStorage as never, "split-root", undefined, false);
+    await store(fileStorage as never, "split-a", "split-root", true);
+    await store(fileStorage as never, "split-b", "split-root", true);
+
+    // `split-b` still descends from the root, so deleting `split-a` can't strip it.
+    expect(await fileStorage.orphanedAncestorIds(["split-a" as never])).toEqual(
+      [],
+    );
+    // Once both leaves go, the shared ancestor is genuinely unreachable.
+    expect(
+      await fileStorage.orphanedAncestorIds([
+        "split-a" as never,
+        "split-b" as never,
+      ]),
+    ).toEqual(["split-root"]);
+  });
+});
+
+/** Handing dead bytes over is only safe if whoever holds them is told to let go -
+ *  otherwise the viewer renders a document that never loads (an endless spinner). */
+describe("confirmed-unreadable records", () => {
+  test("notifies listeners and refuses to hand the same file out twice", async () => {
+    expectConsole.warn(/could not read its bytes back/);
+    expectConsole.error(/cannot be read/);
+    const { fileStorage, store } = await freshFileStorage();
+    const { onRecordUnreadable } = await import("@app/services/fileStorage");
+    instrumentAdd({ rejectBlobs: false });
+    const id = await store("doomed.pdf");
+
+    const dropped: string[] = [];
+    const unsubscribe = onRecordUnreadable((fileId) => dropped.push(fileId));
+
+    loseBackingStoreOnRead(5);
+    // First read still hands the file over: the probe is out of band.
+    expect(await fileStorage.getStirlingFile(id)).not.toBeNull();
+    await new Promise((resolve) => setTimeout(resolve));
+
+    // The holder is told, so the workbench can drop it instead of spinning.
+    expect(dropped).toEqual([id]);
+    // And a second consumer never gets the same dead bytes.
+    expect(await fileStorage.getStirlingFile(id)).toBeNull();
+
+    unsubscribe();
+  });
+});
+
+/** A readable-blob substitute, for the rescue path: fake-indexeddb never returns
+ *  Blob values, so a healthy legacy blob record is injected the same way a dead
+ *  one is. */
+function substituteHealthyBlobOnRead(reads: number) {
+  let remaining = reads;
+  IDBObjectStore.prototype.get = function (
+    this: IDBObjectStore,
+    key: IDBValidKey | IDBKeyRange,
+  ) {
+    const request = nativeGet.call(this, key as IDBValidKey);
+    let injected = false;
+    return new Proxy(request, {
+      get(target, prop) {
+        const value = Reflect.get(target, prop, target);
+        if (prop !== "result") {
+          return typeof value === "function" ? value.bind(target) : value;
+        }
+        if (!value || injected || remaining === 0) return value;
+        injected = true;
+        remaining--;
+        return {
+          ...(value as object),
+          data: new Blob(["%PDF-1.7 stirling"], { type: "application/pdf" }),
+        };
+      },
+      set(target, prop, value) {
+        Reflect.set(target, prop, value, target);
+        return true;
+      },
+    });
+  } as typeof IDBObjectStore.prototype.get;
+}
+
+/** The library must tell the truth per row: a record whose bytes are gone lists
+ *  as data-lost instead of a file that pretends to open. */
+describe("stub listings — data-lost auditing", () => {
+  test("flags a dead record on the stub once the audit lands", async () => {
+    expectConsole.warn(/could not read its bytes back/);
+    expectConsole.error(/cannot be read/);
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    const id = await store("husk.pdf");
+
+    loseBackingStoreOnRead(1);
+    // First read schedules the out-of-band audit; unknown is not yet flagged.
+    expect(
+      (await fileStorage.getStirlingFileStub(id))?.dataUnavailable,
+    ).toBeUndefined();
+    await new Promise((resolve) => setTimeout(resolve));
+
+    expect((await fileStorage.getStirlingFileStub(id))?.dataUnavailable).toBe(
+      true,
+    );
+  });
+
+  test("rescues a still-readable legacy blob to a copy on a no-blob browser", async () => {
+    // The durable verdict says this browser loses blob values...
+    localStorage.setItem("stirling.indexeddb.blobValuesUnsupported", "true");
+    const { fileStorage, store } = await freshFileStorage();
+    instrumentAdd({ rejectBlobs: false });
+    instrumentPut();
+    const id = await store("legacy.pdf");
+
+    // ...and a legacy record still holds a READABLE blob: save it while we can.
+    substituteHealthyBlobOnRead(5);
+    await fileStorage.getStirlingFileStub(id);
+    await vi.waitFor(() => expect(putAttempts).toContain("copy"));
+    // Rescued, not condemned: the stub stays openable.
+    expect(
+      (await fileStorage.getStirlingFileStub(id))?.dataUnavailable,
+    ).toBeUndefined();
+  });
+});
+
+/** One hung request inside the TTL bump's readwrite transaction wedged the whole
+ *  store: every later read and write queued behind it forever - the infinite
+ *  "Loading files..." after a Safari reload. Maintenance must not touch
+ *  blob-bodied records on a browser that can't rewrite them anyway. */
+describe("maintenanceMayRewrite", () => {
+  test("keeps maintenance away from blob records on a no-blob browser", async () => {
+    const { maintenanceMayRewrite } = await import("@app/services/fileStorage");
+    const blobRecord = { data: new Blob(["x"]) };
+    const copyRecord = { data: new ArrayBuffer(1) };
+
+    expect(maintenanceMayRewrite(blobRecord, false)).toBe(false);
+    // Copies never hang and their rewrite is accepted - always safe.
+    expect(maintenanceMayRewrite(copyRecord, false)).toBe(true);
+    // On engines that genuinely support blobs (Chrome), nothing changes.
+    expect(maintenanceMayRewrite(blobRecord, true)).toBe(true);
+    expect(maintenanceMayRewrite(copyRecord, true)).toBe(true);
+  });
+});
diff --git a/frontend/editor/src/core/services/fileStorage.migration.test.ts b/frontend/editor/src/core/services/fileStorage.migration.test.ts
index 472d83b49b..28ee69e8da 100644
--- a/frontend/editor/src/core/services/fileStorage.migration.test.ts
+++ b/frontend/editor/src/core/services/fileStorage.migration.test.ts
@@ -33,7 +33,7 @@ describe("legacyDerivedFromTool — IndexedDB backfill for pre-upgrade files", (
   it("flags a legacy versioned edit (has tool history)", () => {
     expect(
       legacyDerivedFromTool(
-        record({ toolHistory: [{ toolId: "compress" as any, timestamp: 0 }] }),
+        record({ toolHistory: [{ toolId: "compress", timestamp: 0 }] }),
       ),
     ).toBe(true);
   });
diff --git a/frontend/editor/src/core/services/fileStorage.ts b/frontend/editor/src/core/services/fileStorage.ts
index 40f62642f0..b0cede48cb 100644
--- a/frontend/editor/src/core/services/fileStorage.ts
+++ b/frontend/editor/src/core/services/fileStorage.ts
@@ -10,11 +10,13 @@ import {
   StirlingFile,
   StirlingFileStub,
   createStirlingFile,
+  type ClassificationConfidence,
 } from "@app/types/fileContext";
 import {
   indexedDBManager,
   DATABASE_CONFIGS,
 } from "@app/services/indexedDBManager";
+import { alert } from "@app/components/toast";
 
 /**
  * Storage record - single source of truth
@@ -35,6 +37,8 @@ export interface StoredStirlingFileRecord extends BaseFileMetadata {
   // group by label without re-reading PDF bytes, and it survives versioning.
   // See StirlingFileStub.classificationLabels.
   classificationLabels?: string[];
+  // See StirlingFileStub.classificationConfidence.
+  classificationConfidence?: ClassificationConfidence;
 }
 
 export interface StorageStats {
@@ -75,15 +79,135 @@ function isBlobValueRejection(error: unknown): boolean {
   return name === "UnknownError" || name === "DataCloneError";
 }
 
+/** This engine loses Blob values, remembered per browser: session-scoped, each
+ *  reload re-decides optimistically and writes more files it will lose. */
+const BLOB_VALUES_UNSUPPORTED_KEY = "stirling.indexeddb.blobValuesUnsupported";
+
+function readBlobValuesSupported(): boolean {
+  try {
+    return localStorage.getItem(BLOB_VALUES_UNSUPPORTED_KEY) !== "true";
+  } catch {
+    // Storage unavailable (private mode): decide fresh each session.
+    return true;
+  }
+}
+
+function persistBlobValuesUnsupported(): void {
+  try {
+    localStorage.setItem(BLOB_VALUES_UNSUPPORTED_KEY, "true");
+  } catch {
+    // Storage unavailable: the session-scoped flag still degrades this session.
+  }
+}
+
+/**
+ * Whether maintenance writes (the thumbnail TTL bump) may re-read/re-write this
+ * record. In WebKit, a `get` touching a blob-bodied record whose backing store is
+ * damaged can HANG rather than error - and one pending request wedges the whole
+ * object store: every later transaction, read or write, queues behind it forever.
+ * That was the infinite "Loading files..." after a reload: the TTL bump's
+ * transaction never completed, so nothing else on the store ever ran. On a
+ * browser whose verdict is "blobs unsupported" the rewrite would be refused
+ * anyway, so blob-bodied records are not worth the risk of touching at all.
+ */
+export function maintenanceMayRewrite(
+  record: { data: ArrayBuffer | Blob },
+  blobValuesSupported: boolean,
+): boolean {
+  return !(record.data instanceof Blob) || blobValuesSupported;
+}
+
+/** WebKit loses backing stores for blobs it accepted, and only a real read shows
+ *  it. One byte is enough: what fails is opening the store, not the length. */
+async function blobReadFailure(data: Blob): Promise<unknown> {
+  try {
+    await data.slice(0, 1).arrayBuffer();
+    return null;
+  } catch (error) {
+    return error ?? new Error("Reading a stored blob's bytes failed");
+  }
+}
+
+/** Notified when a record's bytes are proven unreadable, so whoever is holding the
+ *  file can drop it instead of rendering a document that never arrives. */
+const unreadableListeners = new Set<(fileId: FileId) => void>();
+
+export function onRecordUnreadable(
+  listener: (fileId: FileId) => void,
+): () => void {
+  unreadableListeners.add(listener);
+  return () => unreadableListeners.delete(listener);
+}
+
+/** The probe read itself can hang in WebKit, so anything that awaits it needs a
+ *  deadline. Distinct from a failure: nothing was proven either way. */
+const PROBE_UNANSWERED = { unanswered: true } as const;
+const PROBE_DEADLINE_MS = 3000;
+
+function withProbeDeadline(
+  probe: Promise<unknown>,
+): Promise<unknown | typeof PROBE_UNANSWERED> {
+  return Promise.race([
+    probe,
+    new Promise<typeof PROBE_UNANSWERED>((resolve) =>
+      setTimeout(() => resolve(PROBE_UNANSWERED), PROBE_DEADLINE_MS),
+    ),
+  ]);
+}
+
+/**
+ * The File for a stored record. Re-wrapping a stored blob can cost WebKit the
+ * backing handle, so hand it back untouched when its identity fields match.
+ */
+function fileFromRecord(record: StoredStirlingFileRecord): File {
+  const { data } = record;
+  if (
+    data instanceof File &&
+    data.name === record.name &&
+    data.type === record.type &&
+    data.lastModified === record.lastModified
+  ) {
+    return data;
+  }
+  return new File([data], record.name, {
+    type: record.type,
+    lastModified: record.lastModified,
+  });
+}
+
+/**
+ * Settle on abort, for promises whose settle paths (a cursor tick, a request not
+ * yet issued) never arrive. Call ONCE per transaction - there is one slot.
+ */
+function settleOnAbort(
+  transaction: IDBTransaction,
+  settle: (reason: Error) => void,
+): void {
+  transaction.onabort = () =>
+    settle(
+      transaction.error ??
+        new Error("IndexedDB transaction aborted before it completed"),
+    );
+}
+
 class FileStorageService {
   private readonly dbConfig = DATABASE_CONFIGS.FILES;
   private readonly storeName = "files";
-  /**
-   * Whether this engine accepts Blob/File values in IndexedDB. Optimistic: the
-   * blob path avoids copying multi-GB files into JS memory, so we try it and
-   * remember the answer, rather than pre-emptively degrading everywhere.
-   */
-  private blobValuesSupported = true;
+  /** Whether this engine takes Blob/File values, which avoid copying multi-GB
+   *  files into JS memory. Optimistic; a No outlives the session (see the key). */
+  private blobValuesSupported = readBlobValuesSupported();
+  /** Whether a stored blob's bytes have come back yet. Until they have, each
+   *  store proves it: accepting the write is no evidence the bytes survived. */
+  private blobReadbackVerified = false;
+  /** Ids whose TTL write failed. Without this the swallowed failure repeats a
+   *  whole-file rewrite on every listing. Session-scoped on purpose. */
+  private readonly unwritableRecords = new Set<FileId>();
+  /** Ids already reported as unreadable, so one dead record is surfaced once
+   *  rather than on every read of it. Session-scoped on purpose. */
+  private readonly unreadableRecords = new Set<FileId>();
+  /** Ids whose blob bytes this session has already audited (either way), so
+   *  listings don't re-probe every record on every refresh. */
+  private readonly auditedRecords = new Set<FileId>();
 
   /**
    * Get database connection using centralized manager
@@ -101,7 +225,8 @@ class FileStorageService {
 
   /** Fire-and-forget: bump thumbnailStoredAt (or clear expired thumbnail) for a set of ids. */
   private async bumpThumbnailTTL(ids: FileId[], clear = false): Promise<void> {
-    if (ids.length === 0) return;
+    const targets = ids.filter((id) => !this.unwritableRecords.has(id));
+    if (targets.length === 0) return;
     const db = await this.getDatabase();
     return new Promise((resolve, reject) => {
       const transaction = db.transaction([this.storeName], "readwrite");
@@ -112,7 +237,7 @@ class FileStorageService {
 
       // Issue all gets up front - each onsuccess creates a put before the
       // transaction can auto-commit, keeping it alive until all puts settle.
-      ids.forEach((id) => {
+      targets.forEach((id) => {
         const req = store.get(id);
         req.onsuccess = () => {
           const record = req.result as StoredStirlingFileRecord | undefined;
@@ -123,7 +248,30 @@ class FileStorageService {
           } else {
             record.thumbnailStoredAt = Date.now();
           }
-          store.put(record);
+          // One unwritable record must not take the batch with it: a rejected
+          // put aborts the transaction the other queued gets are still using.
+          try {
+            const put = store.put(record);
+            put.onerror = (event) => {
+              // The write we just swallowed is the one that would have taken
+              // this record out of the expiring set, so stop retrying it.
+              this.unwritableRecords.add(id);
+              this.noteBlobRefusal(put.error);
+              console.warn(
+                `[fileStorage] thumbnail TTL bump skipped for ${id}:`,
+                put.error,
+              );
+              // Swallow it here so the failure doesn't abort the transaction.
+              event.preventDefault();
+              event.stopPropagation();
+            };
+          } catch (error) {
+            this.unwritableRecords.add(id);
+            console.warn(
+              `[fileStorage] thumbnail TTL bump could not be issued for ${id}:`,
+              error,
+            );
+          }
         };
         req.onerror = () => reject(req.error);
       });
@@ -186,18 +334,255 @@ class FileStorageService {
     } catch (error) {
       // Recoverable: re-add as a copy, and stop offering blobs this session.
       // Anything else is the caller's to report.
-      if (!(record.data instanceof Blob) || !isBlobValueRejection(error)) {
+      if (!(record.data instanceof Blob) || !this.noteBlobRefusal(error)) {
         throw error;
       }
-      this.blobValuesSupported = false;
-      console.warn(
-        "IndexedDB rejected a Blob value; falling back to in-memory copies for this session. " +
-          "Very large files may now exhaust renderer memory.",
-        error,
-      );
       record.data = await record.data.arrayBuffer();
       await this.addFileRecord(db, record);
+      return;
     }
+
+    // Committed is not retrievable. Prove the round-trip while the source File is
+    // still in hand; after a reload there is nothing left to repair from.
+    if (record.data instanceof Blob && !this.blobReadbackVerified) {
+      await this.verifyStoredBlobReadable(db, record, stirlingFile);
+    }
+  }
+
+  /** Read one stored blob back, rewriting the record from {@code source} if its
+   *  bytes don't come with it. Runs until one round-trip succeeds. */
+  private async verifyStoredBlobReadable(
+    db: IDBDatabase,
+    record: StoredStirlingFileRecord,
+    source: File,
+  ): Promise<void> {
+    // A record we can't read back at all is the caller's problem, not the probe's.
+    const stored = await this.readRecord(db, record.id).catch(() => undefined);
+    if (!(stored?.data instanceof Blob)) return;
+
+    const failure = await withProbeDeadline(blobReadFailure(stored.data));
+    if (!failure) {
+      this.blobReadbackVerified = true;
+      return;
+    }
+    if (failure === PROBE_UNANSWERED) {
+      // Nothing proven, and an upload must never wait on a probe. Leave the record
+      // as written; the read path reports it if the bytes really are gone.
+      console.warn(
+        `[fileStorage] readability probe for ${record.id} did not answer in ${PROBE_DEADLINE_MS}ms`,
+      );
+      return;
+    }
+
+    this.noteBlobUnreadable(failure);
+    try {
+      record.data = await source.arrayBuffer();
+      await this.putRecord(db, record);
+    } catch (error) {
+      // The record is unusable either way, and the read path reports that to the
+      // user. Don't turn a write that already committed into a failure.
+      console.warn(
+        `[fileStorage] could not rewrite ${record.id} as an in-memory copy:`,
+        error,
+      );
+    }
+  }
+
+  /** Refused a Blob value? Stop offering blobs on this browser. Any write can flip
+   *  this: WebKit refuses per-operation, not per-engine. */
+  private noteBlobRefusal(error: unknown): boolean {
+    if (!isBlobValueRejection(error)) return false;
+    this.disableBlobValues(
+      "IndexedDB rejected a Blob value; falling back to in-memory copies on this browser. " +
+        "Very large files may now exhaust renderer memory.",
+      error,
+    );
+    return true;
+  }
+
+  /** A stored blob whose bytes won't read back means blob values can't be trusted
+   *  on this engine either, even though it accepted the write. */
+  private noteBlobUnreadable(error: unknown): void {
+    this.disableBlobValues(
+      "IndexedDB accepted a Blob value but could not read its bytes back; " +
+        "falling back to in-memory copies on this browser. " +
+        "Very large files may now exhaust renderer memory.",
+      error,
+    );
+  }
+
+  private disableBlobValues(message: string, error: unknown): void {
+    if (!this.blobValuesSupported) return;
+    this.blobValuesSupported = false;
+    persistBlobValuesUnsupported();
+    console.warn(message, error);
+  }
+
+  /**
+   * Audit a blob-backed record's bytes WITHOUT gating anything on the answer.
+   * Awaiting this was a mistake: in Safari the probe read of a lost backing store
+   * can stay pending forever, so it stalled every file open instead of the one
+   * consumer that would have failed anyway.
+   *
+   * Two outcomes, both out of band:
+   * - Bytes gone: mark + report, so the library shows "data lost" instead of a
+   *   file that pretends to open.
+   * - Bytes readable on a browser whose verdict is "blobs unsupported": RESCUE the
+   *   record to an ArrayBuffer copy now, while the bytes still exist. Legacy blob
+   *   records on WebKit are one engine hiccup away from being lost for good.
+   */
+  private reportIfUnreadable(record: StoredStirlingFileRecord): void {
+    if (!(record.data instanceof Blob)) return;
+    if (this.auditedRecords.has(record.id)) return;
+    this.auditedRecords.add(record.id);
+    void blobReadFailure(record.data).then((failure) => {
+      if (!failure) {
+        this.blobReadbackVerified = true;
+        if (!this.blobValuesSupported) void this.rescueBlobRecord(record.id);
+        return;
+      }
+      this.noteBlobUnreadable(failure);
+      this.reportUnreadableRecord(record, failure);
+    });
+  }
+
+  /**
+   * Rewrite one still-readable legacy blob record as an ArrayBuffer copy. Reads
+   * the FULL bytes (the audit only proved the first one) and goes through
+   * {@link updateRecord}'s read-modify-write so a concurrent metadata update
+   * isn't clobbered by a stale snapshot.
+   */
+  private async rescueBlobRecord(fileId: FileId): Promise<void> {
+    try {
+      const db = await this.getDatabase();
+      const record = await this.readRecord(db, fileId);
+      if (!(record?.data instanceof Blob)) return;
+      const bytes = await withProbeDeadline(record.data.arrayBuffer());
+      if (bytes === PROBE_UNANSWERED || !(bytes instanceof ArrayBuffer)) return;
+      record.data = bytes;
+      await this.putRecord(db, record);
+      console.info(
+        `[fileStorage] rescued "${record.name}" (${fileId}) to an in-memory copy before this browser could lose its blob`,
+      );
+    } catch (error) {
+      // Best-effort: a failed rescue leaves the record exactly as it was.
+      console.warn(`[fileStorage] could not rescue ${fileId}:`, error);
+    }
+  }
+
+  /** One console error and one toast per dead record: every consumer of the file
+   *  hits the same record, and the user needs the reason once, not per reader. */
+  private reportUnreadableRecord(
+    record: StoredStirlingFileRecord,
+    failure: unknown,
+  ): void {
+    if (this.unreadableRecords.has(record.id)) return;
+    this.unreadableRecords.add(record.id);
+    // Whoever is holding it needs to let go, or the viewer renders a document
+    // whose bytes never arrive - a spinner with no terminal state.
+    for (const listener of unreadableListeners) listener(record.id);
+    console.error(
+      `[fileStorage] stored data for "${record.name}" (${record.id}) cannot be read; ` +
+        "the browser no longer has the blob's backing store",
+      failure,
+    );
+    alert({
+      alertType: "warning",
+      title: "File data is unavailable",
+      body:
+        `"${record.name}" is saved in this browser but its contents can no longer be read. ` +
+        "Upload the file again to keep working on it.",
+      expandable: false,
+      durationMs: 8000,
+    });
+  }
+
+  /** Read-modify-write one record in one transaction, resolving on COMMIT. Split
+   *  across two promises, the abort guard covers one and the other hangs. */
+  private async updateRecord(
+    fileId: FileId,
+    mutate: (record: StoredStirlingFileRecord) => boolean | void,
+  ): Promise<boolean> {
+    const db = await this.getDatabase();
+    try {
+      return await this.readModifyWrite(db, fileId, mutate);
+    } catch (error) {
+      // The record we read back still carries its Blob body; retry as a copy.
+      if (!this.noteBlobRefusal(error)) throw error;
+      return await this.rewriteRecordAsCopy(db, fileId, mutate);
+    }
+  }
+
+  /** {@link updateRecord}'s happy path: one transaction, resolve on commit. */
+  private readModifyWrite(
+    db: IDBDatabase,
+    fileId: FileId,
+    mutate: (record: StoredStirlingFileRecord) => boolean | void,
+  ): Promise<boolean> {
+    return new Promise((resolve, reject) => {
+      const transaction = db.transaction([this.storeName], "readwrite");
+      let written = false;
+      settleOnAbort(transaction, reject);
+      transaction.onerror = () => reject(transaction.error);
+      transaction.oncomplete = () => resolve(written);
+
+      const store = transaction.objectStore(this.storeName);
+      const getRequest = store.get(fileId);
+      getRequest.onerror = () => reject(getRequest.error);
+      getRequest.onsuccess = () => {
+        const record = getRequest.result as
+          | StoredStirlingFileRecord
+          | undefined;
+        // Nothing to write: let the empty transaction commit and report false.
+        if (!record || mutate(record) === false) return;
+        written = true;
+        store.put(record);
+      };
+    });
+  }
+
+  /** Recovery path: two transactions, because materializing the copy is async
+   *  and a transaction cannot survive an await. Last-write-wins either way. */
+  private async rewriteRecordAsCopy(
+    db: IDBDatabase,
+    fileId: FileId,
+    mutate: (record: StoredStirlingFileRecord) => boolean | void,
+  ): Promise<boolean> {
+    const record = await this.readRecord(db, fileId);
+    if (!record || mutate(record) === false) return false;
+    if (record.data instanceof Blob) {
+      record.data = await record.data.arrayBuffer();
+    }
+    await this.putRecord(db, record);
+    return true;
+  }
+
+  /** One record by id, in its own transaction. */
+  private readRecord(
+    db: IDBDatabase,
+    fileId: FileId,
+  ): Promise<StoredStirlingFileRecord | undefined> {
+    return new Promise((resolve, reject) => {
+      const transaction = db.transaction([this.storeName], "readonly");
+      settleOnAbort(transaction, reject);
+      const request = transaction.objectStore(this.storeName).get(fileId);
+      request.onerror = () => reject(request.error);
+      request.onsuccess = () => resolve(request.result);
+    });
+  }
+
+  /** One `put`, resolving on commit. */
+  private putRecord(
+    db: IDBDatabase,
+    record: StoredStirlingFileRecord,
+  ): Promise<void> {
+    return new Promise((resolve, reject) => {
+      const transaction = db.transaction([this.storeName], "readwrite");
+      settleOnAbort(transaction, reject);
+      transaction.onerror = () => reject(transaction.error);
+      transaction.oncomplete = () => resolve();
+      transaction.objectStore(this.storeName).put(record);
+    });
   }
 
   /** Single `add` of a file record. Rejects with the underlying IDB error. */
@@ -215,6 +600,7 @@ class FileStorageService {
         }
 
         const transaction = db.transaction([this.storeName], "readwrite");
+        settleOnAbort(transaction, reject);
         const store = transaction.objectStore(this.storeName);
 
         const request = store.add(record);
@@ -227,37 +613,21 @@ class FileStorageService {
     });
   }
 
-  /**
-   * Get StirlingFile with full data - for loading into workbench
-   */
+  /** Get StirlingFile with full data - for loading into workbench. Null covers
+   *  both no such record and bytes gone; neither is a file callers can use. */
   async getStirlingFile(id: FileId): Promise<StirlingFile | null> {
+    // Already proven unreadable this session: don't hand the same dead bytes to
+    // another consumer that will spin on them. Session-scoped, so a reload retries.
+    if (this.unreadableRecords.has(id)) return null;
     const db = await this.getDatabase();
+    const record = await this.readRecord(db, id);
+    if (!record) return null;
+    // Reporting only, and NEVER awaited: WebKit can leave a read of a lost backing
+    // store pending forever, and this is the path every file open goes through.
+    this.reportIfUnreadable(record);
 
-    return new Promise((resolve, reject) => {
-      const transaction = db.transaction([this.storeName], "readonly");
-      const store = transaction.objectStore(this.storeName);
-      const request = store.get(id);
-
-      request.onerror = () => reject(request.error);
-      request.onsuccess = () => {
-        const record = request.result as StoredStirlingFileRecord | undefined;
-        if (!record) {
-          resolve(null);
-          return;
-        }
-
-        // Create File from stored data
-        const blob = new Blob([record.data], { type: record.type });
-        const file = new File([blob], record.name, {
-          type: record.type,
-          lastModified: record.lastModified,
-        });
-
-        // Convert to StirlingFile with preserved IDs
-        const stirlingFile = createStirlingFile(file, record.fileId);
-        resolve(stirlingFile);
-      };
-    });
+    // Convert to StirlingFile with preserved IDs
+    return createStirlingFile(fileFromRecord(record), record.fileId);
   }
 
   /**
@@ -278,6 +648,7 @@ class FileStorageService {
 
     return new Promise((resolve, reject) => {
       const transaction = db.transaction([this.storeName], "readonly");
+      settleOnAbort(transaction, reject);
       const store = transaction.objectStore(this.storeName);
       const request = store.get(id);
 
@@ -295,9 +666,13 @@ class FileStorageService {
         // We still gate thumbnailUrl on freshness so stale thumbnails
         // don't leak through this read path.
         const fresh = this.isThumbnailFresh(record);
+        // Out-of-band byte audit, so the library reflects lost data (and rescues
+        // still-readable legacy blobs) instead of listing files that can't open.
+        this.reportIfUnreadable(record);
 
         const stub: StirlingFileStub = {
           id: record.id,
+          dataUnavailable: this.unreadableRecords.has(record.id) || undefined,
           name: record.name,
           type: record.type,
           size: record.size,
@@ -323,6 +698,7 @@ class FileStorageService {
           folderId: record.folderId ?? null,
           createdAt: record.createdAt || Date.now(),
           classificationLabels: record.classificationLabels,
+          classificationConfidence: record.classificationConfidence,
         };
 
         resolve(stub);
@@ -338,6 +714,7 @@ class FileStorageService {
 
     return new Promise((resolve, reject) => {
       const transaction = db.transaction([this.storeName], "readonly");
+      settleOnAbort(transaction, reject);
       const store = transaction.objectStore(this.storeName);
       const request = store.openCursor();
       const stubs: StirlingFileStub[] = [];
@@ -352,12 +729,18 @@ class FileStorageService {
           const record = cursor.value as StoredStirlingFileRecord;
           if (record && record.name && typeof record.size === "number") {
             const fresh = this.isThumbnailFresh(record);
-            if (record.thumbnail) {
+            if (
+              record.thumbnail &&
+              maintenanceMayRewrite(record, this.blobValuesSupported)
+            ) {
               if (fresh) tobump.push(record.id);
               else toexpire.push(record.id);
             }
+            this.reportIfUnreadable(record);
             stubs.push({
               id: record.id,
+              dataUnavailable:
+                this.unreadableRecords.has(record.id) || undefined,
               name: record.name,
               type: record.type,
               size: record.size,
@@ -383,6 +766,7 @@ class FileStorageService {
               folderId: record.folderId ?? null,
               createdAt: record.createdAt || Date.now(),
               classificationLabels: record.classificationLabels,
+              classificationConfidence: record.classificationConfidence,
             });
           }
           cursor.continue();
@@ -425,6 +809,7 @@ class FileStorageService {
 
     return new Promise((resolve, reject) => {
       const transaction = db.transaction([this.storeName], "readonly");
+      settleOnAbort(transaction, reject);
       const store = transaction.objectStore(this.storeName);
       const request = store.openCursor();
       const leafStubs: StirlingFileStub[] = [];
@@ -444,12 +829,18 @@ class FileStorageService {
             record.isLeaf !== false
           ) {
             const fresh = this.isThumbnailFresh(record);
-            if (record.thumbnail) {
+            if (
+              record.thumbnail &&
+              maintenanceMayRewrite(record, this.blobValuesSupported)
+            ) {
               if (fresh) tobump.push(record.id);
               else toexpire.push(record.id);
             }
+            this.reportIfUnreadable(record);
             leafStubs.push({
               id: record.id,
+              dataUnavailable:
+                this.unreadableRecords.has(record.id) || undefined,
               name: record.name,
               type: record.type,
               size: record.size,
@@ -475,6 +866,7 @@ class FileStorageService {
               folderId: record.folderId ?? null,
               createdAt: record.createdAt || Date.now(),
               classificationLabels: record.classificationLabels,
+              classificationConfidence: record.classificationConfidence,
             });
           }
           cursor.continue();
@@ -579,6 +971,46 @@ class FileStorageService {
     return cleared;
   }
 
+  /**
+   * Superseded versions that nothing else needs once {@code deleting} goes.
+   *
+   * Deleting a file removes one record; its older versions keep their full bytes
+   * and are invisible (listings filter on isLeaf), so they accumulate forever.
+   * Only for user-facing "delete this file" - deleting ONE version from the
+   * history journey must leave the rest of the chain alone.
+   */
+  async orphanedAncestorIds(deleting: FileId[]): Promise<FileId[]> {
+    if (deleting.length === 0) return [];
+    const stubs = await this.getAllStirlingFileStubs();
+    const byId = new Map(stubs.map((s) => [s.id as string, s]));
+    const doomed = new Set(deleting.map(String));
+
+    // Anything a surviving record descends from has to stay: split siblings
+    // share a lineage, so one leaf's delete must not strip another's history.
+    const keep = new Set<string>();
+    for (const stub of stubs) {
+      if (doomed.has(stub.id as string)) continue;
+      let cursor = stub.parentFileId as string | undefined;
+      while (cursor && !keep.has(cursor)) {
+        keep.add(cursor);
+        cursor = byId.get(cursor)?.parentFileId as string | undefined;
+      }
+    }
+
+    const orphans: FileId[] = [];
+    for (const id of deleting) {
+      let cursor = byId.get(String(id))?.parentFileId as string | undefined;
+      while (cursor) {
+        if (!keep.has(cursor) && !doomed.has(cursor) && byId.has(cursor)) {
+          doomed.add(cursor);
+          orphans.push(cursor as FileId);
+        }
+        cursor = byId.get(cursor)?.parentFileId as string | undefined;
+      }
+    }
+    return orphans;
+  }
+
   /**
    * Delete StirlingFile - single operation, no sync issues
    */
@@ -587,11 +1019,12 @@ class FileStorageService {
 
     return new Promise((resolve, reject) => {
       const transaction = db.transaction([this.storeName], "readwrite");
-      const store = transaction.objectStore(this.storeName);
-      const request = store.delete(id);
-
-      request.onerror = () => reject(request.error);
-      request.onsuccess = () => resolve();
+      // On commit, not on the request: callers refresh their list from storage as
+      // soon as this resolves, and an aborted delete would put the row back.
+      settleOnAbort(transaction, reject);
+      transaction.onerror = () => reject(transaction.error);
+      transaction.oncomplete = () => resolve();
+      transaction.objectStore(this.storeName).delete(id);
     });
   }
 
@@ -617,45 +1050,16 @@ class FileStorageService {
    * Update thumbnail for existing file
    */
   async updateThumbnail(id: FileId, thumbnail: string): Promise<boolean> {
-    const db = await this.getDatabase();
-
-    return new Promise((resolve, _reject) => {
-      try {
-        const transaction = db.transaction([this.storeName], "readwrite");
-        const store = transaction.objectStore(this.storeName);
-        const getRequest = store.get(id);
-
-        getRequest.onsuccess = () => {
-          const record = getRequest.result as StoredStirlingFileRecord;
-          if (record) {
-            record.thumbnail = thumbnail;
-            record.thumbnailStoredAt = Date.now();
-            const updateRequest = store.put(record);
-
-            updateRequest.onsuccess = () => {
-              resolve(true);
-            };
-            updateRequest.onerror = () => {
-              console.error("Failed to update thumbnail:", updateRequest.error);
-              resolve(false);
-            };
-          } else {
-            resolve(false);
-          }
-        };
-
-        getRequest.onerror = () => {
-          console.error(
-            "Failed to get file for thumbnail update:",
-            getRequest.error,
-          );
-          resolve(false);
-        };
-      } catch (error) {
-        console.error("Transaction error during thumbnail update:", error);
-        resolve(false);
-      }
-    });
+    // Reports failure as `false` rather than rejecting; callers just need an answer.
+    try {
+      return await this.updateRecord(id, (record) => {
+        record.thumbnail = thumbnail;
+        record.thumbnailStoredAt = Date.now();
+      });
+    } catch (error) {
+      console.error("Failed to update thumbnail:", error);
+      return false;
+    }
   }
 
   /**
@@ -666,6 +1070,7 @@ class FileStorageService {
 
     return new Promise((resolve, reject) => {
       const transaction = db.transaction([this.storeName], "readwrite");
+      settleOnAbort(transaction, reject);
       const store = transaction.objectStore(this.storeName);
       const request = store.clear();
 
@@ -720,24 +1125,16 @@ class FileStorageService {
   async createBlobUrl(id: FileId): Promise<string | null> {
     try {
       const db = await this.getDatabase();
+      const record = await this.readRecord(db, id);
+      if (!record) return null;
 
-      return new Promise((resolve, reject) => {
-        const transaction = db.transaction([this.storeName], "readonly");
-        const store = transaction.objectStore(this.storeName);
-        const request = store.get(id);
-
-        request.onerror = () => reject(request.error);
-        request.onsuccess = () => {
-          const record = request.result as StoredStirlingFileRecord | undefined;
-          if (record) {
-            const blob = new Blob([record.data], { type: record.type });
-            const url = URL.createObjectURL(blob);
-            resolve(url);
-          } else {
-            resolve(null);
-          }
-        };
-      });
+      // Stored blobs are handed straight to createObjectURL — re-wrapping
+      // one can cost WebKit the backing handle. See fileFromRecord.
+      const blob =
+        record.data instanceof Blob
+          ? record.data
+          : new Blob([record.data], { type: record.type });
+      return URL.createObjectURL(blob);
     } catch (error) {
       console.warn(`Failed to create blob URL for ${id}:`, error);
       return null;
@@ -750,32 +1147,9 @@ class FileStorageService {
    */
   async markFileAsProcessed(fileId: FileId): Promise<boolean> {
     try {
-      const db = await this.getDatabase();
-      const transaction = db.transaction([this.storeName], "readwrite");
-      const store = transaction.objectStore(this.storeName);
-
-      const record = await new Promise<StoredStirlingFileRecord | undefined>(
-        (resolve, reject) => {
-          const request = store.get(fileId);
-          request.onsuccess = () => resolve(request.result);
-          request.onerror = () => reject(request.error);
-        },
-      );
-
-      if (!record) {
-        return false; // File not found
-      }
-
-      // Update the isLeaf flag to false
-      record.isLeaf = false;
-
-      await new Promise<void>((resolve, reject) => {
-        const request = store.put(record);
-        request.onsuccess = () => resolve();
-        request.onerror = () => reject(request.error);
+      return await this.updateRecord(fileId, (record) => {
+        record.isLeaf = false;
       });
-
-      return true;
     } catch (error) {
       console.error("Failed to mark file as processed:", error);
       return false;
@@ -835,32 +1209,9 @@ class FileStorageService {
    */
   async markFileAsLeaf(fileId: FileId): Promise<boolean> {
     try {
-      const db = await this.getDatabase();
-      const transaction = db.transaction([this.storeName], "readwrite");
-      const store = transaction.objectStore(this.storeName);
-
-      const record = await new Promise<StoredStirlingFileRecord | undefined>(
-        (resolve, reject) => {
-          const request = store.get(fileId);
-          request.onsuccess = () => resolve(request.result);
-          request.onerror = () => reject(request.error);
-        },
-      );
-
-      if (!record) {
-        return false; // File not found
-      }
-
-      // Update the isLeaf flag to true
-      record.isLeaf = true;
-
-      await new Promise<void>((resolve, reject) => {
-        const request = store.put(record);
-        request.onsuccess = () => resolve();
-        request.onerror = () => reject(request.error);
+      return await this.updateRecord(fileId, (record) => {
+        record.isLeaf = true;
       });
-
-      return true;
     } catch (error) {
       console.error("Failed to mark file as leaf:", error);
       return false;
@@ -870,41 +1221,16 @@ class FileStorageService {
   /**
    * Update metadata fields for a stored file record.
    *
-   * Resolves on transaction.oncomplete, NOT on the individual put's onsuccess,
-   * so callers only receive `true` once the write actually commits. If the
-   * transaction aborts after put() succeeded but before commit, we return false
-   * - the previous behavior incorrectly claimed success in that window.
+   * Returns `true` only once the write commits, never on the put's `onsuccess`.
+   * {@link updateRecord} owns that guarantee for every write in this class.
    */
   async updateFileMetadata(
     fileId: FileId,
     updates: Partial<StoredStirlingFileRecord>,
   ): Promise<boolean> {
     try {
-      const db = await this.getDatabase();
-      return await new Promise<boolean>((resolve, reject) => {
-        const transaction = db.transaction([this.storeName], "readwrite");
-        const store = transaction.objectStore(this.storeName);
-        let recordFound = false;
-
-        const getRequest = store.get(fileId);
-        getRequest.onsuccess = () => {
-          const record = getRequest.result as
-            | StoredStirlingFileRecord
-            | undefined;
-          if (!record) {
-            // Don't commit anything; caller wants false.
-            return;
-          }
-          recordFound = true;
-          const updatedRecord = { ...record, ...updates };
-          store.put(updatedRecord);
-        };
-        getRequest.onerror = () => reject(getRequest.error);
-
-        transaction.oncomplete = () => resolve(recordFound);
-        transaction.onerror = () => reject(transaction.error);
-        transaction.onabort = () =>
-          reject(transaction.error ?? new Error("updateFileMetadata aborted"));
+      return await this.updateRecord(fileId, (record) => {
+        Object.assign(record, updates);
       });
     } catch (error) {
       console.error("Failed to update file metadata:", error);
diff --git a/frontend/editor/src/core/services/fileSyncService.ts b/frontend/editor/src/core/services/fileSyncService.ts
index 5e948f8ba7..a218a43428 100644
--- a/frontend/editor/src/core/services/fileSyncService.ts
+++ b/frontend/editor/src/core/services/fileSyncService.ts
@@ -131,7 +131,7 @@ export async function reconcileServerFiles(
       {
         suppressErrorToast: true,
         skipAuthRedirect: true,
-      } as any,
+      },
     );
     const serverFiles = Array.isArray(response.data) ? response.data : [];
     const serverMap = new Map<number, StoredFileResponse>();
@@ -280,7 +280,7 @@ export async function reconcileServerFiles(
   try {
     const response = await apiClient.get<AccessedShareLinkResponse[]>(
       "/api/v1/storage/share-links/accessed",
-      { suppressErrorToast: true, skipAuthRedirect: true } as any,
+      { suppressErrorToast: true, skipAuthRedirect: true },
     );
     const sharedLinks = Array.isArray(response.data) ? response.data : [];
     const allowed = new Set(
@@ -426,7 +426,7 @@ export async function materializeServerStubs(
         responseType: "blob",
         suppressErrorToast: true,
         skipAuthRedirect: true,
-      } as any);
+      });
       const rawHeaders = (response.headers ?? {}) as Record<string, unknown> & {
         get?: (name: string) => string | null;
       };
diff --git a/frontend/editor/src/core/services/googleDrivePickerService.ts b/frontend/editor/src/core/services/googleDrivePickerService.ts
index 9d91ffdeac..f54e900b01 100644
--- a/frontend/editor/src/core/services/googleDrivePickerService.ts
+++ b/frontend/editor/src/core/services/googleDrivePickerService.ts
@@ -5,6 +5,13 @@
 
 import { loadScript } from "@app/utils/scriptLoader";
 import { Z_INDEX_OVER_FILE_MANAGER_MODAL } from "@app/styles/zIndex";
+import { AppConfig } from "@app/types/appConfig";
+
+// The GIS token client lets you reassign `callback` after init (to resolve the
+// per-request promise), but @types/google.accounts only models it on the config.
+type TokenClientWithCallback = google.accounts.oauth2.TokenClient & {
+  callback: (response: google.accounts.oauth2.TokenResponse) => void;
+};
 
 const SCOPES = "https://www.googleapis.com/auth/drive.readonly";
 const SESSION_STORAGE_ID = "googleDrivePickerAccessToken";
@@ -59,7 +66,7 @@ function fileInputToGooglePickerMimeTypes(accept?: string): string | null {
 
 class GoogleDrivePickerService {
   private config: GoogleDriveConfig | null = null;
-  private tokenClient: any = null;
+  private tokenClient: TokenClientWithCallback | null = null;
   private accessToken: string | null = null;
   private gapiLoaded = false;
   private gisLoaded = false;
@@ -119,7 +126,7 @@ class GoogleDrivePickerService {
       client_id: this.config.clientId,
       scope: SCOPES,
       callback: () => {}, // Will be overridden during picker creation
-    });
+    }) as TokenClientWithCallback;
 
     this.gisLoaded = true;
   }
@@ -149,7 +156,9 @@ class GoogleDrivePickerService {
         return;
       }
 
-      this.tokenClient.callback = (response: any) => {
+      this.tokenClient.callback = (
+        response: google.accounts.oauth2.TokenResponse,
+      ) => {
         if (response.error !== undefined) {
           reject(new Error(response.error));
           return;
@@ -201,7 +210,9 @@ class GoogleDrivePickerService {
         .setOAuthToken(this.accessToken)
         .addView(view1)
         .addView(view2)
-        .setCallback((data: any) => this.pickerCallback(data, resolve, reject));
+        .setCallback((data: google.picker.ResponseObject) =>
+          this.pickerCallback(data, resolve, reject),
+        );
 
       (builder as unknown as { setZIndex(z: number): void }).setZIndex(
         Z_INDEX_OVER_FILE_MANAGER_MODAL,
@@ -220,37 +231,39 @@ class GoogleDrivePickerService {
    * Handle picker selection callback
    */
   private async pickerCallback(
-    data: any,
+    data: google.picker.ResponseObject,
     resolve: (files: File[]) => void,
     reject: (error: Error) => void,
   ): Promise<void> {
-    if (data.action === window.google.picker.Action.PICKED) {
+    const action = data[window.google.picker.Response.ACTION];
+    if (action === window.google.picker.Action.PICKED) {
       try {
+        const documents = data[window.google.picker.Response.DOCUMENTS] ?? [];
         const files = await Promise.all(
-          data[window.google.picker.Response.DOCUMENTS].map(
-            async (pickedFile: any) => {
-              const fileId = pickedFile[window.google.picker.Document.ID];
-              const res = await window.gapi.client.drive.files.get({
-                fileId: fileId,
-                alt: "media",
-              });
+          documents.map(async (pickedFile) => {
+            const fileId = pickedFile[window.google.picker.Document.ID];
+            const res = await window.gapi.client.drive.files.get({
+              fileId: fileId,
+              alt: "media",
+            });
 
-              // Convert response body to File object
-              const file = new File(
-                [
-                  new Uint8Array(res.body.length).map((_: any, i: number) =>
-                    res.body.charCodeAt(i),
-                  ),
-                ],
-                pickedFile.name,
-                {
-                  type: pickedFile.mimeType,
-                  lastModified: pickedFile.lastModified,
-                },
-              );
-              return file;
-            },
-          ),
+            // Convert response body to File object
+            const file = new File(
+              [
+                new Uint8Array(res.body.length).map((_, i) =>
+                  res.body.charCodeAt(i),
+                ),
+              ],
+              pickedFile[window.google.picker.Document.NAME] ?? "",
+              {
+                type: pickedFile[window.google.picker.Document.MIME_TYPE],
+                lastModified:
+                  pickedFile[window.google.picker.Document.LAST_EDITED_UTC] ??
+                  Date.now(),
+              },
+            );
+            return file;
+          }),
         );
 
         resolve(files);
@@ -261,7 +274,7 @@ class GoogleDrivePickerService {
             : new Error("Failed to download files"),
         );
       }
-    } else if (data.action === window.google.picker.Action.CANCEL) {
+    } else if (action === window.google.picker.Action.CANCEL) {
       resolve([]); // User cancelled, return empty array
     }
   }
@@ -369,7 +382,7 @@ export function getGoogleDriveConfig(
  * Eliminates duplicated config construction pattern
  */
 export function extractGoogleDriveBackendConfig(
-  appConfig: any,
+  appConfig: AppConfig | null,
 ): BackendGoogleDriveConfig {
   return {
     enabled: appConfig?.googleDriveEnabled,
diff --git a/frontend/editor/src/core/services/httpErrorHandler.ts b/frontend/editor/src/core/services/httpErrorHandler.ts
index ed7108b6a6..dd0c692d97 100644
--- a/frontend/editor/src/core/services/httpErrorHandler.ts
+++ b/frontend/editor/src/core/services/httpErrorHandler.ts
@@ -1,4 +1,4 @@
-// frontend/src/services/httpErrorHandler.ts
+// frontend/editor/src/core/services/httpErrorHandler.ts
 import { alert } from "@app/components/toast";
 import {
   broadcastErroredFiles,
@@ -6,6 +6,7 @@ import {
   normalizeAxiosErrorData,
 } from "@app/services/errorUtils";
 import { showSpecialErrorToast } from "@app/services/specialErrorToasts";
+import axios from "axios";
 import { handleSaaSError } from "@app/services/saasErrorInterceptor";
 import {
   clampText,
@@ -95,15 +96,16 @@ if (typeof window !== "undefined") {
  * Handles HTTP errors with toast notifications and file error broadcasting
  * Returns true if the error should be suppressed (deduplicated), false otherwise
  */
-export async function handleHttpError(error: any): Promise<boolean> {
-  const skipAuthRedirect = error?.config?.skipAuthRedirect === true;
+export async function handleHttpError(error: unknown): Promise<boolean> {
+  const axiosError = axios.isAxiosError(error) ? error : undefined;
+  const skipAuthRedirect = axiosError?.config?.skipAuthRedirect === true;
   // Check if this error should skip the global toast (component will handle it)
-  if (error?.config?.suppressErrorToast === true) {
+  if (axiosError?.config?.suppressErrorToast === true) {
     return false; // Don't show global toast, but continue rejection
   }
 
   // Handle 401 authentication errors
-  const status: number | undefined = error?.response?.status;
+  const status: number | undefined = axiosError?.response?.status;
   if (status === 401) {
     const pathname = window.location.pathname;
 
@@ -119,7 +121,7 @@ export async function handleHttpError(error: any): Promise<boolean> {
       if (loginRedirectRecentlyFired()) {
         console.warn(
           "[httpErrorHandler] 401 redirect already fired moments ago — suppressing repeat to avoid a login loop:",
-          error?.config?.url,
+          axiosError?.config?.url,
         );
         return true;
       }
@@ -151,7 +153,7 @@ export async function handleHttpError(error: any): Promise<boolean> {
   const { title, body } = extractAxiosErrorMessage(error);
 
   // Normalize response data ONCE, reuse for both ID extraction and special-toast matching
-  const raw = error?.response?.data as any;
+  const raw = axiosError?.response?.data;
   let normalized: unknown = raw;
   try {
     normalized = await normalizeAxiosErrorData(raw);
@@ -170,7 +172,7 @@ export async function handleHttpError(error: any): Promise<boolean> {
   }
 
   // 2) Generic-vs-special dedupe by endpoint
-  const url: string | undefined = error?.config?.url;
+  const url: string | undefined = axiosError?.config?.url;
   const now = Date.now();
   const isSpecial =
     status === 422 ||
diff --git a/frontend/editor/src/core/services/httpErrorUtils.ts b/frontend/editor/src/core/services/httpErrorUtils.ts
index b3b54e2664..c4898266c3 100644
--- a/frontend/editor/src/core/services/httpErrorUtils.ts
+++ b/frontend/editor/src/core/services/httpErrorUtils.ts
@@ -25,14 +25,14 @@ function titleForStatus(status?: number): string {
   return "Request failed";
 }
 
-export function extractAxiosErrorMessage(error: any): {
+export function extractAxiosErrorMessage(error: unknown): {
   title: string;
   body: string;
 } {
   if (axios.isAxiosError(error)) {
     const status = error.response?.status;
     const _statusText = error.response?.statusText || "";
-    let parsed: any = undefined;
+    let parsed: unknown = undefined;
     const raw = error.response?.data;
     if (typeof raw === "string") {
       try {
@@ -44,8 +44,8 @@ export function extractAxiosErrorMessage(error: any): {
       parsed = raw;
     }
     const extractIds = (): string[] | undefined => {
-      if (Array.isArray(parsed?.errorFileIds))
-        return parsed.errorFileIds as string[];
+      const errorFileIds = (parsed as { errorFileIds?: unknown })?.errorFileIds;
+      if (Array.isArray(errorFileIds)) return errorFileIds as string[];
       const rawText = typeof raw === "string" ? raw : "";
       const uuidMatches = rawText.match(
         /[0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12}/g,
@@ -60,7 +60,8 @@ export function extractAxiosErrorMessage(error: any): {
       if (!data) return typeof raw === "string" ? raw : "";
       const ids = extractIds();
       if (ids && ids.length > 0) return `Failed files: ${ids.join(", ")}`;
-      if (data?.message) return data.message as string;
+      const message = (data as { message?: unknown })?.message;
+      if (message) return message as string;
       if (typeof raw === "string") return raw;
       try {
         return JSON.stringify(data);
@@ -82,7 +83,8 @@ export function extractAxiosErrorMessage(error: any): {
     return { title, body: bodyMsg };
   }
   try {
-    const msg = (error?.message || String(error)) as string;
+    const msg = ((error as { message?: unknown })?.message ||
+      String(error)) as string;
     return {
       title: "Network error",
       body: isUnhelpfulMessage(msg) ? FRIENDLY_FALLBACK : msg,
diff --git a/frontend/editor/src/core/services/indexedDBManager.blocked.test.ts b/frontend/editor/src/core/services/indexedDBManager.blocked.test.ts
new file mode 100644
index 0000000000..9031b079bb
--- /dev/null
+++ b/frontend/editor/src/core/services/indexedDBManager.blocked.test.ts
@@ -0,0 +1,79 @@
+import { afterEach, describe, expect, test, vi } from "vitest";
+import "fake-indexeddb/auto";
+import { expectConsole } from "@app/tests/failOnConsole";
+import type { DatabaseConfig } from "@app/services/indexedDBManager";
+
+/**
+ * A blocked open fires `blocked` and then nothing at all - no success, no error -
+ * until the other connection goes away. Unguarded, the open promise never settles
+ * and every caller hangs SILENTLY: the file library spun forever with an empty
+ * console, which is why this kept being reported as unreproducible.
+ */
+
+const config = (name: string, version: number): DatabaseConfig => ({
+  name,
+  version,
+  stores: [{ name: "things", keyPath: "id" }],
+});
+
+/** A raw connection on an older version that never yields, i.e. the other tab. */
+function holdOlderVersion(name: string): Promise<IDBDatabase> {
+  return new Promise((resolve, reject) => {
+    const request = indexedDB.open(name, 1);
+    request.onupgradeneeded = () => {
+      if (!request.result.objectStoreNames.contains("things")) {
+        request.result.createObjectStore("things", { keyPath: "id" });
+      }
+    };
+    request.onsuccess = () => resolve(request.result);
+    request.onerror = () => reject(request.error);
+  });
+}
+
+afterEach(() => {
+  vi.useRealTimers();
+  vi.resetModules();
+});
+
+describe("openDatabase — blocked by another connection", () => {
+  test("rejects with something actionable instead of hanging", async () => {
+    expectConsole.warn(/blocked by another connection/);
+    const { indexedDBManager } = await import("@app/services/indexedDBManager");
+    const held = await holdOlderVersion("blocked-db");
+
+    vi.useFakeTimers();
+    const open = indexedDBManager.openDatabase(config("blocked-db", 2));
+    const settled = vi.fn();
+    void open.then(settled, settled);
+
+    // Still pending before the grace period is up: a tab that yields quickly
+    // must not be failed prematurely.
+    await vi.advanceTimersByTimeAsync(4_000);
+    expect(settled).not.toHaveBeenCalled();
+
+    await vi.advanceTimersByTimeAsync(2_000);
+    await expect(open).rejects.toThrow(/blocked by another connection/);
+
+    held.close();
+  });
+
+  test("dedupes concurrent callers onto one connection", async () => {
+    const { indexedDBManager } = await import("@app/services/indexedDBManager");
+    const spy = vi.spyOn(indexedDB, "open");
+
+    // Racing in the same tick is the case registration-after-await could not
+    // dedupe, and only the first request would ever receive `blocked`.
+    const [a, b, c] = await Promise.all([
+      indexedDBManager.openDatabase(config("shared-db", 1)),
+      indexedDBManager.openDatabase(config("shared-db", 1)),
+      indexedDBManager.openDatabase(config("shared-db", 1)),
+    ]);
+
+    expect(a).toBe(b);
+    expect(b).toBe(c);
+    expect(
+      spy.mock.calls.filter(([name]) => name === "shared-db"),
+    ).toHaveLength(1);
+    spy.mockRestore();
+  });
+});
diff --git a/frontend/editor/src/core/services/indexedDBManager.ts b/frontend/editor/src/core/services/indexedDBManager.ts
index 043b2e4386..dd823a2bd9 100644
--- a/frontend/editor/src/core/services/indexedDBManager.ts
+++ b/frontend/editor/src/core/services/indexedDBManager.ts
@@ -19,6 +19,11 @@ export interface DatabaseConfig {
   }[];
 }
 
+/** How long to wait out another connection before failing an open with something
+ *  the user can act on. Rejecting does NOT cancel the request, so a connection
+ *  that arrives later is closed rather than held. */
+const BLOCKED_GRACE_MS = 5000;
+
 class IndexedDBManager {
   private static instance: IndexedDBManager;
   private databases = new Map<string, IDBDatabase>();
@@ -47,6 +52,26 @@ class IndexedDBManager {
       return existingPromise;
     }
 
+    // Registered BEFORE anything async. A map written after a yield point can't
+    // dedupe callers racing into it in the same tick, so every context that opened
+    // this database during boot got its own connection - and per spec only the
+    // FIRST request ever receives `blocked`, leaving the rest waiting on an event
+    // that never comes.
+    const initPromise = this.openWithRecovery(config);
+    this.initPromises.set(config.name, initPromise);
+
+    try {
+      const db = await initPromise;
+      this.databases.set(config.name, db);
+      return db;
+    } catch (error) {
+      this.initPromises.delete(config.name);
+      throw error;
+    }
+  }
+
+  /** The v6/v7 wipe, kept off {@link openDatabase}'s synchronous registration path. */
+  private async openWithRecovery(config: DatabaseConfig): Promise<IDBDatabase> {
     // SaaS lineage shipped a v6 and a v7 of stirling-pdf-files whose
     // upgrade paths corrupted records (separate cursor walks racing in
     // one versionchange transaction). The SaaS build wipes those
@@ -64,18 +89,7 @@ class IndexedDBManager {
         await this.deleteDatabase(config.name);
       }
     }
-
-    const initPromise = this.performDatabaseInit(config);
-    this.initPromises.set(config.name, initPromise);
-
-    try {
-      const db = await initPromise;
-      this.databases.set(config.name, db);
-      return db;
-    } catch (error) {
-      this.initPromises.delete(config.name);
-      throw error;
-    }
+    return this.performDatabaseInit(config);
   }
 
   private performDatabaseInit(config: DatabaseConfig): Promise<IDBDatabase> {
@@ -83,15 +97,60 @@ class IndexedDBManager {
       console.log(`Opening IndexedDB: ${config.name} v${config.version}`);
       const request = indexedDB.open(config.name, config.version);
 
+      // A blocked upgrade fires `blocked` and then NOTHING - no success, no error -
+      // until the other connection goes away. Unguarded, the promise never settles
+      // and every awaiting caller hangs with nothing in the console.
+      let settled = false;
+      let blockedTimer: ReturnType<typeof setTimeout> | undefined;
+
+      request.onblocked = () => {
+        console.warn(
+          `Opening ${config.name} is blocked by another connection (another tab on an older version?). ` +
+            `Giving up in ${BLOCKED_GRACE_MS}ms if it doesn't yield.`,
+        );
+        blockedTimer = setTimeout(() => {
+          if (settled) return;
+          settled = true;
+          reject(
+            new Error(
+              `Opening ${config.name} was blocked by another connection for ${BLOCKED_GRACE_MS}ms. ` +
+                "Close other tabs of this app and reload.",
+            ),
+          );
+        }, BLOCKED_GRACE_MS);
+      };
+
       request.onerror = () => {
+        clearTimeout(blockedTimer);
+        if (settled) return;
+        settled = true;
         console.error(`Failed to open ${config.name}:`, request.error);
         reject(request.error);
       };
 
       request.onsuccess = () => {
+        clearTimeout(blockedTimer);
         const db = request.result;
+        // We already gave up waiting: close it rather than hold a handle nobody
+        // awaits, or we become the next tab's blocker.
+        if (settled) {
+          db.close();
+          return;
+        }
+        settled = true;
         console.log(`Successfully opened ${config.name}`);
 
+        // Another tab wants a newer schema. Forget BEFORE closing: a cached but
+        // closed handle is worse than none, because every transaction on it throws.
+        db.onversionchange = () => {
+          console.warn(
+            `${config.name}: another tab requested a version change; closing this connection`,
+          );
+          this.databases.delete(config.name);
+          this.initPromises.delete(config.name);
+          db.close();
+        };
+
         // Set up close handler to clean up our references
         db.onclose = () => {
           console.log(`Database ${config.name} closed`);
@@ -329,9 +388,36 @@ class IndexedDBManager {
 
     return new Promise((resolve, reject) => {
       const deleteRequest = indexedDB.deleteDatabase(name);
+      // A delete blocks exactly like an upgrade, and this one is awaited on the
+      // files open path - so an unguarded block hangs the whole storage layer.
+      let settled = false;
+      let blockedTimer: ReturnType<typeof setTimeout> | undefined;
 
-      deleteRequest.onerror = () => reject(deleteRequest.error);
+      deleteRequest.onblocked = () => {
+        console.warn(
+          `Deleting ${name} is blocked by another connection; giving up in ${BLOCKED_GRACE_MS}ms.`,
+        );
+        blockedTimer = setTimeout(() => {
+          if (settled) return;
+          settled = true;
+          reject(
+            new Error(
+              `Deleting ${name} was blocked by another connection for ${BLOCKED_GRACE_MS}ms.`,
+            ),
+          );
+        }, BLOCKED_GRACE_MS);
+      };
+
+      deleteRequest.onerror = () => {
+        clearTimeout(blockedTimer);
+        if (settled) return;
+        settled = true;
+        reject(deleteRequest.error);
+      };
       deleteRequest.onsuccess = () => {
+        clearTimeout(blockedTimer);
+        if (settled) return;
+        settled = true;
         console.log(`Deleted database: ${name}`);
         resolve();
       };
@@ -343,17 +429,32 @@ class IndexedDBManager {
    */
   async getDatabaseVersion(name: string): Promise<number | null> {
     return new Promise((resolve) => {
+      // This probe runs BEFORE the guarded open, and a versionless open can be
+      // delayed indefinitely by another tab mid-versionchange. Unknown after the
+      // grace period beats hanging every storage consumer: the real open that
+      // follows has its own blocked guard and a message the user can act on.
+      const giveUp = setTimeout(() => {
+        console.warn(
+          `Version probe for ${name} did not answer in ${BLOCKED_GRACE_MS}ms; proceeding without it.`,
+        );
+        resolve(null);
+      }, BLOCKED_GRACE_MS);
       const request = indexedDB.open(name);
       request.onsuccess = () => {
+        clearTimeout(giveUp);
         const db = request.result;
         const version = db.version;
         db.close();
         resolve(version);
       };
-      request.onerror = () => resolve(null);
+      request.onerror = () => {
+        clearTimeout(giveUp);
+        resolve(null);
+      };
       request.onupgradeneeded = () => {
         // Cancel the upgrade
         request.transaction?.abort();
+        clearTimeout(giveUp);
         resolve(null);
       };
     });
diff --git a/frontend/editor/src/core/services/localFilePresence.test.ts b/frontend/editor/src/core/services/localFilePresence.test.ts
new file mode 100644
index 0000000000..1f00d03c0b
--- /dev/null
+++ b/frontend/editor/src/core/services/localFilePresence.test.ts
@@ -0,0 +1,36 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import "fake-indexeddb/auto";
+
+/**
+ * Tests for the one thing the bell asks about a failed document here: whether it is
+ * still in this browser, which is what decides if it can be opened.
+ */
+
+const getStirlingFileStub = vi.fn();
+
+vi.mock("@app/services/fileStorage", () => ({
+  fileStorage: {
+    getStirlingFileStub: (...args: unknown[]) => getStirlingFileStub(...args),
+  },
+}));
+
+const { hasLocalFile } = await import("@app/services/localFilePresence");
+
+beforeEach(() => {
+  getStirlingFileStub.mockReset().mockResolvedValue(null);
+});
+
+describe("hasLocalFile", () => {
+  it("is false once the document has left this browser", async () => {
+    getStirlingFileStub.mockResolvedValue(null);
+
+    await expect(hasLocalFile("f-1")).resolves.toBe(false);
+    await expect(hasLocalFile(null)).resolves.toBe(false);
+  });
+
+  it("is true while the document is still stored here", async () => {
+    getStirlingFileStub.mockResolvedValue({ id: "f-1", name: "doc.pdf" });
+
+    await expect(hasLocalFile("f-1")).resolves.toBe(true);
+  });
+});
diff --git a/frontend/editor/src/core/services/localFilePresence.ts b/frontend/editor/src/core/services/localFilePresence.ts
new file mode 100644
index 0000000000..9242c4ca59
--- /dev/null
+++ b/frontend/editor/src/core/services/localFilePresence.ts
@@ -0,0 +1,18 @@
+import { fileStorage } from "@app/services/fileStorage";
+import type { FileId } from "@app/types/file";
+
+/** Whether the document is still in this browser. The id is this workspace's own, so only it can say. */
+export async function hasLocalFile(fileId: string | null): Promise<boolean> {
+  if (!isUsableId(fileId)) return false;
+
+  try {
+    const stub = await fileStorage.getStirlingFileStub(fileId as FileId);
+    return stub !== null;
+  } catch {
+    return false;
+  }
+}
+
+function isUsableId(fileId: string | null | undefined): fileId is string {
+  return typeof fileId === "string" && fileId.trim() !== "";
+}
diff --git a/frontend/editor/src/core/services/navFooterCache.ts b/frontend/editor/src/core/services/navFooterCache.ts
new file mode 100644
index 0000000000..cbde941c81
--- /dev/null
+++ b/frontend/editor/src/core/services/navFooterCache.ts
@@ -0,0 +1,73 @@
+/**
+ * Last-known sidebar-footer state, so the rows are correct at first paint
+ * instead of arriving a request later.
+ *
+ * The footer is mounted by both apps, and the editor and processor are separate
+ * React trees with separate query caches — so without this, every navigation
+ * between them (and every remount inside them) re-ran the fetches and the rows
+ * visibly popped in and shoved each other around. Persisting to storage rather
+ * than to an in-memory cache is what makes it survive that boundary, and a
+ * reload.
+ *
+ * Deliberately stale-then-revalidate: what's stored is only ever what the
+ * backend last said, every reader refetches immediately and overwrites, and
+ * nothing is gated on it — the processor enforces its own access server-side,
+ * and a stale credit figure is replaced within a second of the wallet landing.
+ */
+const CREDITS_KEY = "stirling.navFooter.credits";
+const OTHER_APP_KEY = "stirling.navFooter.otherApp";
+
+/** Figures, or null for a team that sees no meter at all (a paying one). */
+export type CachedCredits = { remaining: number; total: number } | null;
+
+function read(key: string): string | null {
+  try {
+    return localStorage.getItem(key);
+  } catch {
+    // Private mode / storage disabled — behave as a first-ever load.
+    return null;
+  }
+}
+
+function write(key: string, value: string): void {
+  try {
+    localStorage.setItem(key, value);
+  } catch {
+    // Nothing to do: the cache is an optimisation, never a correctness input.
+  }
+}
+
+/** `undefined` when this browser has never seen an answer. */
+export function readCachedCredits(): CachedCredits | undefined {
+  const raw = read(CREDITS_KEY);
+  if (raw === null) return undefined;
+  if (raw === "none") return null;
+  try {
+    const parsed: unknown = JSON.parse(raw);
+    if (
+      typeof parsed === "object" &&
+      parsed !== null &&
+      typeof (parsed as CachedCredits & object).remaining === "number" &&
+      typeof (parsed as CachedCredits & object).total === "number"
+    ) {
+      return parsed as CachedCredits;
+    }
+  } catch {
+    // Corrupt entry — fall through and treat it as never-seen.
+  }
+  return undefined;
+}
+
+export function writeCachedCredits(credits: CachedCredits): void {
+  write(CREDITS_KEY, credits === null ? "none" : JSON.stringify(credits));
+}
+
+/** `undefined` when this browser has never seen an answer. */
+export function readCachedOtherApp(): boolean | undefined {
+  const raw = read(OTHER_APP_KEY);
+  return raw === null ? undefined : raw === "true";
+}
+
+export function writeCachedOtherApp(canOpen: boolean): void {
+  write(OTHER_APP_KEY, String(canOpen));
+}
diff --git a/frontend/editor/src/core/services/notifications.ts b/frontend/editor/src/core/services/notifications.ts
new file mode 100644
index 0000000000..3101c6056e
--- /dev/null
+++ b/frontend/editor/src/core/services/notifications.ts
@@ -0,0 +1,66 @@
+import apiClient from "@app/services/apiClient";
+
+// Derived server-side from whatever produces them, so this client knows nothing about failures.
+const NOTIFICATIONS_PATH = "/api/v1/notifications";
+
+export type NotificationSource = "FAILURE";
+
+export type NotificationSeverity = "ERROR" | "WARNING" | "INFO";
+
+export type NotificationOrigin = "TOOL" | "POLICY" | "PIPELINE";
+
+/** From this reader's point of view. `UNOWNED` is an unattended run: nobody holds the file. */
+export type NotificationOwnership = "MINE" | "THEIRS" | "UNOWNED";
+
+/** `id` is an open string, not a union: the server may know actions this build does not. */
+export interface NotificationActionOffer {
+  id: string;
+  labelKey: string;
+  /** English fallback, for a build with no copy for `labelKey`. */
+  defaultLabel: string;
+  /** False renders no button in the bell, and a disabled one in the portal's queue. */
+  enabled: boolean;
+  disabledReasonKey: string | null;
+}
+
+export interface AppNotification {
+  /** Prefixed with its source (`failure:<uuid>`), so it is never an id a per-source endpoint takes. */
+  id: string;
+  source: NotificationSource;
+  /** Open string, e.g. `INPUT_PASSWORD_PROTECTED`: the server adds kinds without a client change. */
+  kindId: string;
+  origin: NotificationOrigin;
+  ownership: NotificationOwnership;
+  severity: NotificationSeverity;
+  status: string;
+  titleKey: string;
+  defaultTitle: string;
+  detail: string | null;
+  /** Two id spaces share this field, and `sourceId` says which: see `isResolvableHere`. */
+  fileId: string | null;
+  /** Which folder, bucket or webhook fed the run, and null for an attended one. */
+  sourceId: string | null;
+  policyId: string | null;
+  occurrences: number;
+  createdAt: string;
+  lastSeenAt: string;
+  actions: NotificationActionOffer[];
+}
+
+interface NotificationsResponse {
+  notifications: AppNotification[];
+}
+
+/** Newest first. Empty rather than throwing: a bell that cannot load is an empty bell, not an error. */
+export async function fetchNotifications(
+  limit = 20,
+): Promise<AppNotification[]> {
+  try {
+    const response = await apiClient.get<NotificationsResponse>(
+      `${NOTIFICATIONS_PATH}?limit=${limit}`,
+    );
+    return response?.data?.notifications ?? [];
+  } catch {
+    return [];
+  }
+}
diff --git a/frontend/editor/src/core/services/pdfWorkerManager.ts b/frontend/editor/src/core/services/pdfWorkerManager.ts
index 534c6fc3f1..6da74e1dd1 100644
--- a/frontend/editor/src/core/services/pdfWorkerManager.ts
+++ b/frontend/editor/src/core/services/pdfWorkerManager.ts
@@ -38,7 +38,7 @@ class PDFWorkerManager {
         "pdfjs-dist/legacy/build/pdf.worker.min.mjs",
         import.meta.url,
       ).toString();
-      (GlobalWorkerOptions as any).docBaseUrl = undefined;
+      (GlobalWorkerOptions as { docBaseUrl?: string }).docBaseUrl = undefined;
       this.isInitialized = true;
     }
   }
@@ -62,7 +62,7 @@ class PDFWorkerManager {
     }
 
     // Normalize input data to PDF.js format
-    let pdfData: any;
+    let pdfData: string | { data: ArrayBuffer | Uint8Array };
     if (data instanceof ArrayBuffer || data instanceof Uint8Array) {
       pdfData = { data };
     } else if (typeof data === "string") {
diff --git a/frontend/editor/src/core/services/pdfiumInit.test.ts b/frontend/editor/src/core/services/pdfiumInit.test.ts
new file mode 100644
index 0000000000..315c39a662
--- /dev/null
+++ b/frontend/editor/src/core/services/pdfiumInit.test.ts
@@ -0,0 +1,75 @@
+import { describe, expect, test, vi } from "vitest";
+
+/**
+ * A WASM instantiate that fails must reject, not hang. `instantiateWasm` reports
+ * success by callback, so a swallowed rejection leaves `init()` pending and takes
+ * every thumbnail, page parse and form read with it - silently.
+ */
+
+const init = vi.hoisted(() => vi.fn());
+vi.mock("@embedpdf/pdfium", () => ({ init }));
+
+const wasmModule = vi.hoisted(() => ({}) as WebAssembly.Module);
+vi.mock("@app/services/wasmPrecompiler", () => ({
+  pdfiumWasmModulePromise: Promise.resolve(wasmModule),
+  startEagerWasmCompilation: () => {},
+  pdfiumWasmUrl: "http://localhost/pdfium.wasm",
+}));
+
+/** emscripten's contract: it calls instantiateWasm and waits to be called back. */
+function emscriptenInit(
+  instantiate: (imports: object, ok: () => void) => void,
+) {
+  return new Promise(() => {
+    instantiate({}, () => {});
+  });
+}
+
+async function loadService() {
+  vi.resetModules();
+  return await import("@app/services/pdfiumService");
+}
+
+describe("pdfium bootstrap", () => {
+  test("rejects when instantiating the pre-compiled module fails", async () => {
+    const failure = new Error("LinkError: import mismatch");
+    vi.spyOn(WebAssembly, "instantiate").mockRejectedValue(failure as never);
+    init.mockImplementation((overrides: Record<string, never>) =>
+      emscriptenInit(
+        overrides.instantiateWasm as unknown as (
+          imports: object,
+          ok: () => void,
+        ) => void,
+      ),
+    );
+
+    const { getPdfiumModule } = await loadService();
+
+    // Before the fix this never settled, so the test timed out.
+    await expect(getPdfiumModule()).rejects.toThrow(/LinkError/);
+  });
+
+  test("a failed load isn't cached, so the next call retries", async () => {
+    const instantiate = vi
+      .spyOn(WebAssembly, "instantiate")
+      .mockRejectedValueOnce(new Error("transient") as never)
+      .mockResolvedValue({} as never);
+    const ready = { PDFiumExt_Init: () => {} };
+    init.mockImplementation(
+      (overrides: Record<string, never>) =>
+        new Promise((resolve) => {
+          const instantiateWasm = overrides.instantiateWasm as unknown as (
+            imports: object,
+            ok: () => void,
+          ) => void;
+          instantiateWasm({}, () => resolve(ready));
+        }),
+    );
+
+    const { getPdfiumModule } = await loadService();
+
+    await expect(getPdfiumModule()).rejects.toThrow(/transient/);
+    await expect(getPdfiumModule()).resolves.toBe(ready);
+    expect(instantiate).toHaveBeenCalledTimes(2);
+  });
+});
diff --git a/frontend/editor/src/core/services/pdfiumService.ts b/frontend/editor/src/core/services/pdfiumService.ts
index a9a44c693b..d6cf12a311 100644
--- a/frontend/editor/src/core/services/pdfiumService.ts
+++ b/frontend/editor/src/core/services/pdfiumService.ts
@@ -80,17 +80,24 @@ function wasmUrl(): string {
  * This is the low-level PDFium WASM interface with all C functions wrapped.
  * Prefer `withDocument()` for document-scoped work.
  */
-export async function getPdfiumModule(): Promise<WrappedPdfiumModule> {
-  if (_module) return _module;
-  if (!_initPromise) {
-    // Ensure eager compilation has started if PDF service is requested before idle timeout
-    startEagerWasmCompilation();
+/** Reuses the WASM pre-compiled at boot. Every failure must reach this promise:
+ *  `instantiateWasm` reports success by callback, so a rejection inside it leaves
+ *  `init()` pending forever - and with it every thumbnail, parse and form read. */
+async function initPdfiumModule(): Promise<WrappedPdfiumModule> {
+  // Ensure eager compilation has started if PDF service is requested before idle timeout
+  startEagerWasmCompilation();
 
-    const overrides: PdfiumModuleOverrides = {
-      locateFile: () => wasmUrl(),
-    };
+  const overrides: PdfiumModuleOverrides = { locateFile: () => wasmUrl() };
+  const precompiled = await pdfiumWasmModulePromise;
 
-    // Eagerly reuse pre-compiled WASM module from app boot if available
+  let reportFailure: (error: unknown) => void = () => {};
+  const instantiateFailed = new Promise<never>((_, reject) => {
+    reportFailure = reject;
+  });
+
+  // No pre-compiled module: leave instantiateWasm alone so emscripten fetches the
+  // WASM itself and rejects init() on failure, instead of a fallback that can't.
+  if (precompiled) {
     overrides.instantiateWasm = (
       imports: WebAssembly.Imports,
       successCallback: (
@@ -98,40 +105,34 @@ export async function getPdfiumModule(): Promise<WrappedPdfiumModule> {
         module: WebAssembly.Module,
       ) => void,
     ) => {
-      pdfiumWasmModulePromise
-        .then((wasmModule) => {
-          if (wasmModule) {
-            return WebAssembly.instantiate(wasmModule, imports).then(
-              (instance) => {
-                successCallback(instance, wasmModule);
-              },
-            );
-          } else {
-            throw new Error("No pre-compiled WASM module found");
-          }
-        })
-        .catch((err: unknown) => {
-          console.warn(
-            "Eager WebAssembly instantiation failed, falling back to streaming compilation:",
-            err,
-          );
-          WebAssembly.instantiateStreaming(fetch(wasmUrl()), imports).then(
-            (result) => {
-              successCallback(result.instance, result.module);
-            },
-          );
-        });
+      WebAssembly.instantiate(precompiled, imports)
+        .then((instance) => successCallback(instance, precompiled))
+        .catch(reportFailure);
     };
+  }
 
-    _initPromise = init(overrides as Partial<PdfiumModule>).then((m) => {
-      // Call PDFiumExt_Init to ensure extensions (form fill etc.) are set up
-      try {
-        m.PDFiumExt_Init();
-      } catch {
-        /* already initialized */
-      }
-      _module = m;
-      return m;
+  const m = await Promise.race([
+    init(overrides as Partial<PdfiumModule>),
+    instantiateFailed,
+  ]);
+  // Call PDFiumExt_Init to ensure extensions (form fill etc.) are set up
+  try {
+    m.PDFiumExt_Init();
+  } catch {
+    /* already initialized */
+  }
+  _module = m;
+  return m;
+}
+
+export async function getPdfiumModule(): Promise<WrappedPdfiumModule> {
+  if (_module) return _module;
+  if (!_initPromise) {
+    _initPromise = initPdfiumModule().catch((error: unknown) => {
+      // Don't cache the failure: every PDF feature in the app goes through here,
+      // so a transient WASM fetch would take them all down for the session.
+      _initPromise = null;
+      throw error;
     });
   }
   return _initPromise;
diff --git a/frontend/editor/src/core/services/signatureDetectionService.ts b/frontend/editor/src/core/services/signatureDetectionService.ts
index 0062380a79..41bd9e267c 100644
--- a/frontend/editor/src/core/services/signatureDetectionService.ts
+++ b/frontend/editor/src/core/services/signatureDetectionService.ts
@@ -4,13 +4,6 @@
  * without needing to make API calls
  */
 
-// PDF.js types (simplified)
-declare global {
-  interface Window {
-    pdfjsLib?: any;
-  }
-}
-
 export interface SignatureDetectionResult {
   hasSignatures: boolean;
   signatureCount?: number;
@@ -53,7 +46,7 @@ const detectSignaturesInFile = async (
 
       // Count signature annotations (Type: /Sig)
       const signatureAnnotations = annotations.filter(
-        (annotation: any) =>
+        (annotation: { subtype?: string; fieldType?: string }) =>
           annotation.subtype === "Widget" && annotation.fieldType === "Sig",
       );
 
@@ -62,7 +55,11 @@ const detectSignaturesInFile = async (
 
     // Also check for document-level signatures in AcroForm
     const metadata = await pdf.getMetadata();
-    if (metadata?.info?.Signature || metadata?.metadata?.has("dc:signature")) {
+    const info = metadata?.info as { Signature?: unknown } | undefined;
+    const xmpMetadata = metadata?.metadata as
+      | { has?: (name: string) => boolean }
+      | undefined;
+    if (info?.Signature || xmpMetadata?.has?.("dc:signature")) {
       totalSignatures = Math.max(totalSignatures, 1);
     }
 
diff --git a/frontend/editor/src/core/services/signatureStorageService.ts b/frontend/editor/src/core/services/signatureStorageService.ts
index 1cc0ac9360..da9bb9332d 100644
--- a/frontend/editor/src/core/services/signatureStorageService.ts
+++ b/frontend/editor/src/core/services/signatureStorageService.ts
@@ -1,3 +1,4 @@
+import axios from "axios";
 import apiClient from "@app/services/apiClient";
 import type { SavedSignature } from "@app/types/signature";
 import { readResponseHeader } from "@app/services/shareBundleUtils";
@@ -54,14 +55,17 @@ class SignatureStorageService {
         supportsBackend: true,
         storageType: "backend",
       };
-    } catch (error: any) {
+    } catch (error: unknown) {
+      const status = axios.isAxiosError(error)
+        ? error.response?.status
+        : undefined;
       // Check if it's an HTTP error with status code
-      if (error?.response?.status === 401 || error?.response?.status === 403) {
+      if (status === 401 || status === 403) {
         // Backend exists but needs auth - gracefully fall back to localStorage
         console.log(
           "[SignatureStorage] Backend signature API requires authentication, using localStorage",
         );
-      } else if (error?.response?.status === 404) {
+      } else if (status === 404) {
         // Endpoint doesn't exist (not running proprietary mode)
         console.log(
           "[SignatureStorage] Backend signature API not available (not in proprietary mode), using localStorage",
diff --git a/frontend/editor/src/core/services/specialErrorToasts.ts b/frontend/editor/src/core/services/specialErrorToasts.ts
index 6a38a54f53..f2ee343803 100644
--- a/frontend/editor/src/core/services/specialErrorToasts.ts
+++ b/frontend/editor/src/core/services/specialErrorToasts.ts
@@ -1,3 +1,4 @@
+import i18n from "i18next";
 import { alert } from "@app/components/toast";
 
 interface ErrorToastMapping {
@@ -42,18 +43,13 @@ export function showSpecialErrorToast(
 
   for (const mapping of MAPPINGS) {
     if (mapping.regex.test(message)) {
-      // Best-effort translation without hard dependency on i18n config
       let body = mapping.defaultMessage;
-      try {
-        const anyGlobal: any = globalThis as any;
-        const i18next = anyGlobal?.i18next;
-        if (i18next && typeof i18next.t === "function") {
-          body = i18next.t(mapping.i18nKey, {
-            defaultValue: mapping.defaultMessage,
-          });
-        }
-      } catch {
-        /* ignore translation errors */
+      // The app bootstraps this shared i18next singleton at startup; guard in
+      // case a toast fires before that (e.g. tests) so we keep the default copy.
+      if (i18n.isInitialized) {
+        body = i18n.t(mapping.i18nKey, {
+          defaultValue: mapping.defaultMessage,
+        });
       }
       const title = titleForStatus(options?.status);
       alert({
diff --git a/frontend/editor/src/core/services/updateService.ts b/frontend/editor/src/core/services/updateService.ts
index 043c53bc36..8b23d26deb 100644
--- a/frontend/editor/src/core/services/updateService.ts
+++ b/frontend/editor/src/core/services/updateService.ts
@@ -185,7 +185,7 @@ export class UpdateService {
    */
   async getCurrentVersionFromGitHub(): Promise<string> {
     const url =
-      "https://raw.githubusercontent.com/Stirling-Tools/Stirling-PDF/V2-master/build.gradle";
+      "https://raw.githubusercontent.com/Stirling-Tools/Stirling-PDF/release/build.gradle";
 
     try {
       const response = await fetch(url);
diff --git a/frontend/editor/src/core/services/usageAnalyticsService.ts b/frontend/editor/src/core/services/usageAnalyticsService.ts
index 8f580c820b..f7ba3dd79e 100644
--- a/frontend/editor/src/core/services/usageAnalyticsService.ts
+++ b/frontend/editor/src/core/services/usageAnalyticsService.ts
@@ -25,7 +25,7 @@ const usageAnalyticsService = {
     limit?: number,
     dataType: "all" | "api" | "ui" = "all",
   ): Promise<EndpointStatisticsResponse> {
-    const params: Record<string, any> = {};
+    const params: Record<string, unknown> = {};
 
     if (limit !== undefined) {
       params.limit = limit;
diff --git a/frontend/editor/src/core/setupTests.ts b/frontend/editor/src/core/setupTests.ts
index 57bcaa76a5..d01c3cb589 100644
--- a/frontend/editor/src/core/setupTests.ts
+++ b/frontend/editor/src/core/setupTests.ts
@@ -2,6 +2,10 @@ import "@testing-library/jest-dom";
 import { vi } from "vitest";
 import { installFailOnConsole } from "@app/tests/failOnConsole";
 
+// jsdom is missing the same APIs WebKit is, so tests must agree with the
+// browser. Same module `src/index.tsx` installs.
+import "@app/utils/engineShims";
+
 installFailOnConsole();
 
 // Mock localStorage for tests
diff --git a/frontend/editor/src/core/testing/serverExperienceSimulations.ts b/frontend/editor/src/core/testing/serverExperienceSimulations.ts
index 97da95c730..55ab79c111 100644
--- a/frontend/editor/src/core/testing/serverExperienceSimulations.ts
+++ b/frontend/editor/src/core/testing/serverExperienceSimulations.ts
@@ -38,7 +38,7 @@ const FREE_LICENSE_INFO: LicenseInfo = {
 
 const BASE_NO_LOGIN_CONFIG: AppConfig = {
   enableAnalytics: true,
-  appVersion: "2.14.2",
+  appVersion: "2.14.3",
   serverCertificateEnabled: false,
   enableAlphaFunctionality: false,
   serverPort: 8080,
diff --git a/frontend/editor/src/core/tests/convert/ConvertIntegration.test.tsx b/frontend/editor/src/core/tests/convert/ConvertIntegration.test.tsx
index 06f9198f05..eeea60976a 100644
--- a/frontend/editor/src/core/tests/convert/ConvertIntegration.test.tsx
+++ b/frontend/editor/src/core/tests/convert/ConvertIntegration.test.tsx
@@ -68,6 +68,8 @@ const mockedApiClient = vi.mocked(apiClient);
 
 // Mock only essential services that are actually called by the tests
 vi.mock("../../services/fileStorage", () => ({
+  // FileContext subscribes to this to drop files whose bytes are unreadable.
+  onRecordUnreadable: () => () => {},
   fileStorage: {
     init: vi.fn().mockResolvedValue(undefined),
     storeFile: vi.fn().mockImplementation((file, thumbnail) => {
@@ -182,6 +184,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -276,6 +286,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -339,6 +357,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -408,6 +434,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -483,6 +517,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -558,6 +600,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -567,8 +617,14 @@ describe("Convert Tool Integration Tests", () => {
         await result.current.executeOperation(parameters, [testFile]);
       });
 
-      // Verify integration: utils validation prevents API call, hook shows error
-      expect(mockedApiClient.post).not.toHaveBeenCalled();
+      // Verify integration: utils validation prevents the conversion call, hook shows
+      // error. Failure reporting posts separately and is not a conversion request.
+      const conversionCalls = vi
+        .mocked(mockedApiClient.post)
+        .mock.calls.filter(
+          ([url]) => !String(url).includes("/file-run-events/"),
+        );
+      expect(conversionCalls).toHaveLength(0);
       expect(result.current.errorMessage).toContain(
         "Unsupported conversion format",
       );
@@ -630,6 +686,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -694,6 +758,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -764,6 +836,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -828,6 +908,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -897,6 +985,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
@@ -966,6 +1062,14 @@ describe("Convert Tool Integration Tests", () => {
         cbzOptions: {
           optimizeForEbook: false,
         },
+        pdfUaOptions: {
+          profile: "ua1",
+          language: "en-GB",
+          overrideLanguage: false,
+          title: "",
+          embedFonts: true,
+          altText: "",
+        },
         cbzOutputOptions: {
           dpi: 150,
         },
diff --git a/frontend/editor/src/core/tests/convert/ConvertSmartDetectionIntegration.test.tsx b/frontend/editor/src/core/tests/convert/ConvertSmartDetectionIntegration.test.tsx
index 1e1e273de4..aec52300ca 100644
--- a/frontend/editor/src/core/tests/convert/ConvertSmartDetectionIntegration.test.tsx
+++ b/frontend/editor/src/core/tests/convert/ConvertSmartDetectionIntegration.test.tsx
@@ -66,6 +66,8 @@ const mockedApiClient = vi.mocked(apiClient);
 
 // Mock only essential services that are actually called by the tests
 vi.mock("../../services/fileStorage", () => ({
+  // FileContext subscribes to this to drop files whose bytes are unreadable.
+  onRecordUnreadable: () => () => {},
   fileStorage: {
     init: vi.fn().mockResolvedValue(undefined),
     storeFile: vi.fn().mockImplementation((file, thumbnail) => {
diff --git a/frontend/editor/src/core/tests/helpers/api-stubs.ts b/frontend/editor/src/core/tests/helpers/api-stubs.ts
index d6ebfbe408..fc476af535 100644
--- a/frontend/editor/src/core/tests/helpers/api-stubs.ts
+++ b/frontend/editor/src/core/tests/helpers/api-stubs.ts
@@ -273,6 +273,12 @@ export async function mockAppApis(
   await page.route("**/api/v1/policies/runs", (route: Route) =>
     route.fulfill({ json: [] }),
   );
+
+  // The bell polls this on load. The hook swallows the failure, but the browser still logs the
+  // request, which the console-hygiene guard counts.
+  await page.route("**/api/v1/notifications*", (route: Route) =>
+    route.fulfill({ json: { notifications: [] } }),
+  );
 }
 
 /**
diff --git a/frontend/editor/src/core/tests/helpers/multipart-capture.ts b/frontend/editor/src/core/tests/helpers/multipart-capture.ts
new file mode 100644
index 0000000000..a397f7db21
--- /dev/null
+++ b/frontend/editor/src/core/tests/helpers/multipart-capture.ts
@@ -0,0 +1,94 @@
+import type { Page } from "@playwright/test";
+
+/**
+ * WebKit elides Blob-backed multipart part bodies from `route.request().postData()`, so read them
+ * at the XHR/fetch seam instead; part headers stay readable on every engine.
+ */
+
+const STORE_KEY = "__capturedMultipartParts";
+
+/**
+ * Start recording the text of the `partName` part of any `FormData` the page
+ * posts, keyed by the request's URL pathname. Must be called before navigation.
+ */
+export async function captureMultipartPart(
+  page: Page,
+  partName: string,
+): Promise<void> {
+  await page.addInitScript((name: string) => {
+    const store: Record<string, string> = {};
+    (window as unknown as Record<string, unknown>).__capturedMultipartParts =
+      store;
+
+    const record = (url: string, body: unknown): void => {
+      if (!(body instanceof FormData)) return;
+      const part = body.get(name);
+      if (!(part instanceof Blob)) return;
+      let pathname: string;
+      try {
+        pathname = new URL(url, window.location.href).pathname;
+      } catch {
+        return;
+      }
+      void part.text().then((text) => {
+        store[pathname] = text;
+      });
+    };
+
+    // axios posts through XHR; keep the URL from open() so the capture stays
+    // keyed by endpoint and a commit to the wrong URL still fails the spec.
+    const originalOpen = XMLHttpRequest.prototype.open;
+    XMLHttpRequest.prototype.open = function (
+      this: XMLHttpRequest,
+      ...args: unknown[]
+    ) {
+      (this as unknown as Record<string, unknown>).__capturedUrl = String(
+        args[1] ?? "",
+      );
+      return (originalOpen as (...a: unknown[]) => unknown).apply(this, args);
+    };
+
+    const originalSend = XMLHttpRequest.prototype.send;
+    XMLHttpRequest.prototype.send = function (
+      this: XMLHttpRequest,
+      ...args: unknown[]
+    ) {
+      const url = (this as unknown as Record<string, unknown>).__capturedUrl;
+      record(typeof url === "string" ? url : "", args[0]);
+      return (originalSend as (...a: unknown[]) => unknown).apply(this, args);
+    };
+
+    // Mirror it on fetch so the capture survives if the api client moves off XHR.
+    const originalFetch = window.fetch;
+    window.fetch = function (
+      this: typeof window,
+      input: RequestInfo | URL,
+      init?: RequestInit,
+    ) {
+      const url =
+        typeof input === "string"
+          ? input
+          : input instanceof URL
+            ? input.href
+            : input.url;
+      record(url, init?.body);
+      return originalFetch.call(this, input, init);
+    };
+  }, partName);
+}
+
+/** The captured part text for `pathname`, or undefined if nothing posted yet. */
+export function readCapturedPart(
+  page: Page,
+  pathname: string,
+): Promise<string | undefined> {
+  return page.evaluate(
+    ([key, path]) =>
+      (
+        (window as unknown as Record<string, unknown>)[key] as
+          | Record<string, string>
+          | undefined
+      )?.[path],
+    [STORE_KEY, pathname] as const,
+  );
+}
diff --git a/frontend/editor/src/core/tests/helpers/ui-helpers.ts b/frontend/editor/src/core/tests/helpers/ui-helpers.ts
index 353037c106..1ce62bd828 100644
--- a/frontend/editor/src/core/tests/helpers/ui-helpers.ts
+++ b/frontend/editor/src/core/tests/helpers/ui-helpers.ts
@@ -69,31 +69,73 @@ export async function waitForModalClose(
 
 /**
  * Upload one or more files through the FileSidebar's "Open from computer"
- * action. The button is always rendered (collapsed or expanded sidebar) and
- * fires the hidden `data-testid="file-input"`. Its native OS picker is mocked
- * globally by `suppressNativeFilePicker` (installed by the test fixtures), so
- * the click is safe on every browser; we then set the files directly on the
- * input via `setInputFiles`.
- *
- * `setInputFiles` doesn't await the input's async onChange (which writes to
- * IndexedDB via `addFiles`), so without a sync point a caller that follows
- * with `page.goto()` can race the IDB flush. Wait for the workbench to
- * pick up the upload (the FileSidebar renders the added file in its scroll
- * list once `addFiles` resolves and IDB has been written).
+ * action. The native picker is mocked globally by `suppressNativeFilePicker`,
+ * so the click is safe on every browser; files are set on the hidden input via
+ * `setInputFiles`. Returns only once the files are durably in IndexedDB, so
+ * callers may navigate or reload without racing the write.
  */
 export async function uploadFiles(
   page: Page,
   filePaths: string | string[],
 ): Promise<void> {
   const paths = Array.isArray(filePaths) ? filePaths : [filePaths];
+  const names = paths.map((p) => p.split(/[\\/]/).pop() ?? p);
   await page.getByTestId("files-button").click();
   await page.locator('[data-testid="file-input"]').setInputFiles(paths);
-  // Sync point: wait until at least one file lands in the sidebar's file
-  // list. The list only renders once `addFiles` has resolved (which awaits
-  // the IDB write). Use first() so multi-file uploads pass too.
+  // The sidebar renders from in-memory state, before the IDB write commits.
+  // first() so multi-file uploads pass too.
   await expect(page.locator(".file-sidebar-file-item").first()).toBeVisible({
     timeout: 10_000,
   });
+  // A navigation before the write commits aborts the transaction and drops the
+  // file, so wait for it to land rather than assume the sidebar means it did.
+  await waitForStoredFiles(page, names);
+}
+
+/**
+ * Resolve once every uploaded name is in the files store. Read-only: aborts
+ * rather than create or upgrade the DB, so it can't race the app's own
+ * versioned open and leave it without object stores. Reads only a DB the app
+ * already made; until then each poll returns false and retries.
+ */
+async function waitForStoredFiles(page: Page, names: string[]): Promise<void> {
+  await page.waitForFunction(
+    (expected) =>
+      new Promise<boolean>((resolve) => {
+        const open = indexedDB.open("stirling-pdf-files");
+        open.onupgradeneeded = () => {
+          open.transaction?.abort();
+          resolve(false);
+        };
+        open.onsuccess = () => {
+          const db = open.result;
+          if (!db.objectStoreNames.contains("files")) {
+            db.close();
+            resolve(false);
+            return;
+          }
+          const request = db
+            .transaction("files", "readonly")
+            .objectStore("files")
+            .getAll();
+          request.onsuccess = () => {
+            const stored = new Set(
+              (request.result as Array<{ name?: string }>).map((r) => r.name),
+            );
+            db.close();
+            resolve(expected.every((name) => stored.has(name)));
+          };
+          request.onerror = () => {
+            db.close();
+            resolve(false);
+          };
+        };
+        open.onerror = () => resolve(false);
+        open.onblocked = () => resolve(false);
+      }),
+    names,
+    { timeout: 10_000, polling: 100 },
+  );
 }
 
 /**
@@ -152,11 +194,20 @@ export async function openSettings(page: Page): Promise<Locator> {
  * dialog is fully dismissed before returning.
  */
 export async function closeSettings(page: Page): Promise<void> {
-  const closeBtn = page.locator('[aria-label="Close"]').first();
-  await closeBtn.click();
-  await expect(page.locator(".mantine-Modal-content").first()).not.toBeVisible({
-    timeout: 5_000,
-  });
+  const modal = page.locator(".mantine-Modal-content").first();
+  // A click on the X can be swallowed by a re-render, leaving the modal open;
+  // retry until it's gone. A genuinely broken close still fails - every retry
+  // misses and the modal stays past the cap.
+  await expect(async () => {
+    if (await modal.isVisible().catch(() => false)) {
+      await page
+        .locator('[aria-label="Close"]')
+        .first()
+        .click({ timeout: 2_000 })
+        .catch(() => {});
+    }
+    await expect(modal).not.toBeVisible({ timeout: 2_000 });
+  }).toPass({ timeout: 12_000 });
 }
 
 /**
diff --git a/frontend/editor/src/core/tests/stubbed/compare.spec.ts b/frontend/editor/src/core/tests/stubbed/compare.spec.ts
index 6893721465..c3c6a990a1 100644
--- a/frontend/editor/src/core/tests/stubbed/compare.spec.ts
+++ b/frontend/editor/src/core/tests/stubbed/compare.spec.ts
@@ -230,4 +230,7 @@ test.describe("Compare tool slot selection", () => {
       page.locator('[data-testid="compare-slot-comparison"]'),
     ).toHaveAttribute("data-slot-state", "empty");
   });
+
+  // These specs stop at slot state. Actually running a comparison lives in
+  // `engine-capabilities.spec.ts`, which is cross-browser in PR CI.
 });
diff --git a/frontend/editor/src/core/tests/stubbed/engine-capabilities.spec.ts b/frontend/editor/src/core/tests/stubbed/engine-capabilities.spec.ts
new file mode 100644
index 0000000000..6107fb5276
--- /dev/null
+++ b/frontend/editor/src/core/tests/stubbed/engine-capabilities.spec.ts
@@ -0,0 +1,138 @@
+/** Runs on all three engines in PR CI, asserting on evidence that can only exist
+ *  if the engine did the work. Keep small - it is paid for three times per PR. */
+
+import path from "path";
+import type { Page } from "@playwright/test";
+import { test, expect } from "@app/tests/helpers/stub-test-base";
+import { dismissTourTooltip, uploadFiles } from "@app/tests/helpers/ui-helpers";
+
+const FIXTURES_DIR = path.join(import.meta.dirname, "../test-fixtures");
+const SAMPLE_PDF = path.join(FIXTURES_DIR, "sample.pdf");
+const PDF_A = path.join(FIXTURES_DIR, "compare_sample_a.pdf");
+const PDF_B = path.join(FIXTURES_DIR, "compare_sample_b.pdf");
+
+/** A missing global or prototype method always surfaces as one of these.
+ *  Matching the shape keeps benign engine noise out (console-clean.spec.ts). */
+const MISSING_API_ERROR =
+  /is not a function|is not a constructor|undefined is not an object|has no method/i;
+
+/** Collect the "this engine lacks an API we used" errors seen on the page. */
+function recordMissingApiErrors(page: Page): string[] {
+  const errors: string[] = [];
+  page.on("pageerror", (error: Error) => {
+    const text = String(error);
+    if (MISSING_API_ERROR.test(text)) errors.push(text);
+  });
+  return errors;
+}
+
+async function fillCompareSlot(
+  page: Page,
+  role: "base" | "comparison",
+  filePath: string,
+) {
+  await page
+    .getByTestId(`compare-slot-${role}-add-input`)
+    .setInputFiles(filePath);
+  await expect(
+    page.locator(`[data-testid="compare-slot-${role}"]`),
+  ).toHaveAttribute("data-slot-state", "filled", { timeout: 20_000 });
+  // The upload modal's overlay outlives its close transition and eats clicks.
+  await page
+    .locator(".mantine-Modal-overlay")
+    .waitFor({ state: "detached", timeout: 5_000 })
+    .catch(() => {
+      /* already gone */
+    });
+}
+
+test.describe("engine capabilities", { tag: "@engine-capability" }, () => {
+  test("extracts PDF text and completes a comparison", async ({ page }) => {
+    test.setTimeout(120_000);
+    const missingApis = recordMissingApiErrors(page);
+
+    await page.locator('[data-tour="tool-button-compare"]').first().click();
+    await page.waitForSelector('[data-testid="compare-slot-base"]', {
+      timeout: 20_000,
+    });
+
+    await fillCompareSlot(page, "base", PDF_A);
+    await fillCompareSlot(page, "comparison", PDF_B);
+
+    // By test id: `name` matches as a substring, so "Compare" also hits the
+    // tool button that opened this panel.
+    await page.getByTestId("compare-execute").click();
+
+    // Counted results, not headings: an extraction returning nothing still
+    // renders empty panes, which is how the WebKit failure looked like success.
+    const deletions = page.getByText(/Deletions \((\d+)\)/);
+    const additions = page.getByText(/Additions \((\d+)\)/);
+    await expect(deletions).toBeVisible({ timeout: 60_000 });
+    await expect(additions).toBeVisible();
+    expect(await deletions.innerText()).not.toMatch(/\(0\)/);
+    expect(await additions.innerText()).not.toMatch(/\(0\)/);
+
+    expect(missingApis, "no missing-API errors during comparison").toEqual([]);
+  });
+
+  test("rasterises page thumbnails via the PDF engine", async ({ page }) => {
+    test.setTimeout(120_000);
+    const missingApis = recordMissingApiErrors(page);
+
+    await uploadFiles(page, SAMPLE_PDF);
+    await dismissTourTooltip(page);
+
+    // A page thumbnail only exists if the WASM engine loaded, rendered and
+    // encoded. When it fails the grid still renders, just with no <img>.
+    await page.getByText("PDF Multi Tool", { exact: true }).first().click();
+
+    const thumbnail = page
+      .locator("[data-page-id] img[data-original-rotation]")
+      .first();
+    await expect(thumbnail).toBeVisible({ timeout: 60_000 });
+
+    // An empty encode still yields a src; require enough payload to be real.
+    const src = await thumbnail.getAttribute("src");
+    expect(src ?? "").toMatch(/^data:image\//);
+    expect(src?.length ?? 0).toBeGreaterThan(1_000);
+
+    expect(missingApis, "no missing-API errors during thumbnailing").toEqual(
+      [],
+    );
+  });
+
+  test("reads a stored file's bytes back after a reload", async ({ page }) => {
+    test.setTimeout(120_000);
+    const missingApis = recordMissingApiErrors(page);
+
+    await uploadFiles(page, SAMPLE_PDF);
+
+    // Full reload: FileContext rehydrates from IndexedDB, not from memory.
+    await page.reload({ waitUntil: "domcontentloaded" });
+
+    const restored = page.locator(".file-sidebar-file-item").first();
+    await expect(restored).toBeVisible({ timeout: 30_000 });
+
+    // Rendering it is the assertion that matters: the metadata record survives
+    // even when the bytes were never stored, so a filename proves nothing.
+    await restored.hover();
+    await restored
+      .locator(".file-sidebar-eye-btn")
+      .click({ timeout: 15_000, force: true });
+
+    const firstPage = page.locator('[data-page-index="0"]').first();
+    await expect(firstPage).toBeVisible({ timeout: 60_000 });
+
+    // A tile that decoded has non-zero naturalWidth. A blob stored but not
+    // readable back resolves to nothing, and renders as an empty page.
+    const tile = firstPage.locator('img[src^="blob:"]').first();
+    await expect(tile).toBeAttached({ timeout: 30_000 });
+    await expect
+      .poll(() => tile.evaluate((img: HTMLImageElement) => img.naturalWidth), {
+        timeout: 30_000,
+      })
+      .toBeGreaterThan(0);
+
+    expect(missingApis, "no missing-API errors after rehydration").toEqual([]);
+  });
+});
diff --git a/frontend/editor/src/core/tests/stubbed/file-actions-menu.spec.ts b/frontend/editor/src/core/tests/stubbed/file-actions-menu.spec.ts
new file mode 100644
index 0000000000..cafc188462
--- /dev/null
+++ b/frontend/editor/src/core/tests/stubbed/file-actions-menu.spec.ts
@@ -0,0 +1,167 @@
+import path from "path";
+import type { Page } from "@playwright/test";
+import { test, expect } from "@app/tests/helpers/stub-test-base";
+import { uploadFiles } from "@app/tests/helpers/ui-helpers";
+
+// Per-file actions live behind a kebab on two surfaces - the file sidebar and
+// the My Files grid. They must offer the same file actions on both.
+
+const SAMPLE = path.join(import.meta.dirname, "../test-fixtures/sample.pdf");
+
+const rows = (page: Page) => page.locator(".file-sidebar-file-item");
+
+/** Hover the first sidebar row (the kebab only shows on hover) and open it. */
+async function openKebab(page: Page): Promise<void> {
+  const row = rows(page).first();
+  await row.hover();
+  await row.locator(".file-sidebar-kebab-btn").click();
+  await expect(page.getByRole("menu")).toBeVisible();
+}
+
+test("the kebab lists the file's actions under its full name", async ({
+  page,
+}) => {
+  await uploadFiles(page, SAMPLE);
+  await openKebab(page);
+
+  const menu = page.getByRole("menu");
+  await expect(menu.locator(".file-sidebar-kebab-header-name")).toHaveText(
+    "sample.pdf",
+  );
+  // Type · size · date - the row itself has no space for the size.
+  await expect(menu.locator(".file-sidebar-kebab-header-meta")).toContainText(
+    "PDF",
+  );
+  // A lone upload lands in the viewer, so the toggle offers the way out.
+  await expect(
+    menu.getByRole("menuitem", { name: "Close viewer" }),
+  ).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Download" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Rename" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Duplicate" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Delete" })).toBeVisible();
+});
+
+test("Download saves the file under its current name", async ({ page }) => {
+  await uploadFiles(page, SAMPLE);
+  await openKebab(page);
+
+  const download = page.waitForEvent("download");
+  await page.getByRole("menuitem", { name: "Download" }).click();
+  expect((await download).suggestedFilename()).toBe("sample.pdf");
+});
+
+test("Rename updates the row and survives a reload", async ({ page }) => {
+  await uploadFiles(page, SAMPLE);
+  await openKebab(page);
+  await page.getByRole("menuitem", { name: "Rename" }).click();
+
+  // Only the base name is editable; the extension is re-applied on submit.
+  const input = page.getByLabel("File name");
+  await expect(input).toHaveValue("sample");
+  await input.fill("quarterly report");
+  await page.getByRole("button", { name: "Rename" }).click();
+
+  await expect(rows(page).first()).toContainText("quarterly report.pdf");
+
+  // The name is metadata in IndexedDB, so it must outlive the page.
+  await page.reload();
+  await expect(rows(page).first()).toContainText("quarterly report.pdf");
+});
+
+test("Duplicate adds a copy to the library", async ({ page }) => {
+  await uploadFiles(page, SAMPLE);
+  await openKebab(page);
+  await page.getByRole("menuitem", { name: "Duplicate" }).click();
+
+  await expect(rows(page)).toHaveCount(2);
+  await expect(rows(page).filter({ hasText: "sample (copy).pdf" })).toHaveCount(
+    1,
+  );
+});
+
+test("a duplicate inherits the original's classification", async ({ page }) => {
+  // The copy is byte-identical, so it must land in the same category group -
+  // it inherits the label rather than waiting on the idle backfill to re-parse.
+  await uploadFiles(
+    page,
+    path.join(
+      import.meta.dirname,
+      "../test-fixtures/classification/classified_invoice.pdf",
+    ),
+  );
+  const financial = page
+    .locator(".file-sidebar-group")
+    .filter({ hasText: "Financial" });
+  await expect(financial).toBeVisible({ timeout: 15_000 });
+
+  await openKebab(page);
+  await page.getByRole("menuitem", { name: "Duplicate" }).click();
+
+  // The copy carries the label straight away - its row shows the label chip...
+  const copy = rows(page)
+    .filter({ hasText: "classified_invoice (copy).pdf" })
+    .first();
+  await expect(copy).toContainText("Invoice", { timeout: 5_000 });
+  // ...and it counts towards the same category group.
+  await expect(financial.locator(".file-sidebar-group-count")).toHaveText("2");
+});
+
+// ─── My Files grid: the same actions, same behaviour ────────────────────────
+
+const cards = (page: Page) => page.locator(".files-page-card:not(.is-folder)");
+
+/** Upload a file, cross to My Files, and open the card's kebab. */
+async function openCardKebab(page: Page): Promise<void> {
+  await uploadFiles(page, SAMPLE);
+  await page.getByTestId("my-files-button").click();
+  const card = cards(page).filter({ hasText: "sample.pdf" }).first();
+  await expect(card).toBeVisible();
+  await card.getByRole("button", { name: /File actions/i }).click();
+  await expect(page.getByRole("menu")).toBeVisible();
+}
+
+test("My Files offers the same file actions as the sidebar", async ({
+  page,
+}) => {
+  await openCardKebab(page);
+
+  const menu = page.getByRole("menu");
+  await expect(
+    menu.getByRole("menuitem", { name: "Add to workspace" }),
+  ).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Move to…" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Download" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Rename" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Duplicate" })).toBeVisible();
+  await expect(menu.getByRole("menuitem", { name: "Delete" })).toBeVisible();
+});
+
+test("My Files Download saves the file under its current name", async ({
+  page,
+}) => {
+  await openCardKebab(page);
+
+  const download = page.waitForEvent("download");
+  await page.getByRole("menuitem", { name: "Download" }).click();
+  expect((await download).suggestedFilename()).toBe("sample.pdf");
+});
+
+test("My Files Rename updates the card", async ({ page }) => {
+  await openCardKebab(page);
+  await page.getByRole("menuitem", { name: "Rename" }).click();
+
+  await page.getByLabel("File name").fill("statement");
+  await page.getByRole("button", { name: "Rename" }).click();
+
+  await expect(cards(page).filter({ hasText: "statement.pdf" })).toHaveCount(1);
+});
+
+test("My Files Duplicate adds a copy", async ({ page }) => {
+  await openCardKebab(page);
+  await page.getByRole("menuitem", { name: "Duplicate" }).click();
+
+  await expect(
+    cards(page).filter({ hasText: "sample (copy).pdf" }),
+  ).toHaveCount(1);
+});
diff --git a/frontend/editor/src/core/tests/stubbed/files-page.spec.ts b/frontend/editor/src/core/tests/stubbed/files-page.spec.ts
index 7c365eb1aa..619712f9b0 100644
--- a/frontend/editor/src/core/tests/stubbed/files-page.spec.ts
+++ b/frontend/editor/src/core/tests/stubbed/files-page.spec.ts
@@ -471,7 +471,10 @@ test.describe("Files page", () => {
         .locator(".files-page-card:not(.is-folder)")
         .filter({ hasText: "phone-a.pdf" })
         .click();
-      await page.getByRole("button", { name: /Show details/i }).click();
+      // On a phone a selection swaps the toolbar for a contextual bar, so the
+      // bulk actions - Show details among them - live behind one trigger.
+      await page.locator(".files-page-toolbar-bulk-trigger").click();
+      await page.getByRole("menuitem", { name: /Show details/i }).click();
       // Drawer opens, file name shown inside it.
       await expect(page.locator(".mantine-Drawer-content")).toBeVisible({
         timeout: 3_000,
diff --git a/frontend/editor/src/core/tests/stubbed/form-field-editing.spec.ts b/frontend/editor/src/core/tests/stubbed/form-field-editing.spec.ts
new file mode 100644
index 0000000000..6300b4aa30
--- /dev/null
+++ b/frontend/editor/src/core/tests/stubbed/form-field-editing.spec.ts
@@ -0,0 +1,474 @@
+import { test, expect } from "@app/tests/helpers/stub-test-base";
+import { uploadFiles } from "@app/tests/helpers/ui-helpers";
+import {
+  captureMultipartPart,
+  readCapturedPart,
+} from "@app/tests/helpers/multipart-capture";
+import { readFileSync } from "fs";
+import path from "path";
+import type { Page, Route } from "@playwright/test";
+import type { FieldEditBatch } from "@app/tools/formFill/types";
+
+/**
+ * Form field editor with `/api/v1/form/*` mocked: panel UI, staged-change bookkeeping and the
+ * committed `/edit-fields` payload. The PDFBox round-trip lives in the live spec and JUnit tests.
+ */
+
+const SAMPLE_PDF = path.join(
+  import.meta.dirname,
+  "../test-fixtures/sample.pdf",
+);
+const PDF_BYTES = readFileSync(SAMPLE_PDF);
+
+/** Two text fields on page 0, in the shape the backend emits. */
+const STUB_FIELDS = [
+  {
+    name: "firstName",
+    label: "First name",
+    type: "text",
+    value: "",
+    options: null,
+    displayOptions: null,
+    required: false,
+    readOnly: false,
+    multiSelect: false,
+    multiline: false,
+    tooltip: null,
+    widgets: [
+      {
+        pageIndex: 0,
+        x: 100,
+        y: 100,
+        width: 180,
+        height: 20,
+        fontSize: 12,
+        cropBoxHeight: 792,
+      },
+    ],
+  },
+  {
+    name: "lastName",
+    label: "Last name",
+    type: "text",
+    value: "",
+    options: null,
+    displayOptions: null,
+    required: false,
+    readOnly: false,
+    multiSelect: false,
+    multiline: false,
+    tooltip: null,
+    widgets: [
+      {
+        pageIndex: 0,
+        x: 100,
+        y: 140,
+        width: 180,
+        height: 20,
+        fontSize: 12,
+        cropBoxHeight: 792,
+      },
+    ],
+  },
+];
+
+const EDIT_FIELDS_PATH = "/api/v1/form/edit-fields";
+
+/**
+ * Stubs the form endpoints; `fields` is what extraction returns (default none, so create-mode
+ * drags land on an unobstructed overlay). Returns captured multipart envelopes (part headers only).
+ */
+async function stubFormEndpoints(page: Page, fields: unknown[] = []) {
+  const captured: Record<string, string> = {};
+
+  // The edits JSON is a Blob part, whose body Playwright cannot read back on
+  // WebKit; capture it in-page instead. Must be installed before navigation.
+  await captureMultipartPart(page, "edits");
+
+  await page.route("**/api/v1/form/fields-with-coordinates", (route: Route) =>
+    route.fulfill({ json: fields }),
+  );
+
+  // Trailing ** so the glob still matches once a query string is appended.
+  await page.route("**/api/v1/form/edit-fields**", (route: Route) => {
+    captured["edit-fields"] = route.request().postData() ?? "";
+    route.fulfill({
+      status: 200,
+      contentType: "application/pdf",
+      body: PDF_BYTES,
+    });
+  });
+
+  return captured;
+}
+
+/**
+ * Asserts the multipart envelope on the wire: part headers read on every engine (only Blob part
+ * bodies are elided on WebKit), and this is the shape the backend's `@RequestPart` binding needs.
+ */
+function expectEditFieldsEnvelope(envelope: string) {
+  expect(envelope).toContain('name="file"');
+  expect(envelope).toContain('filename="sample.pdf"');
+  expect(envelope).toContain('name="edits"');
+  expect(envelope).toMatch(/content-type:\s*application\/json/i);
+}
+
+/** The parsed `edits` JSON the app posted to /edit-fields. */
+async function readEditBatch(page: Page): Promise<FieldEditBatch> {
+  await expect
+    .poll(() => readCapturedPart(page, EDIT_FIELDS_PATH))
+    .toBeTruthy();
+  const json = await readCapturedPart(page, EDIT_FIELDS_PATH);
+  return JSON.parse(json as string) as FieldEditBatch;
+}
+
+async function openFormTool(page: Page) {
+  await page.goto("/form-fill");
+  await page.waitForLoadState("domcontentloaded");
+  await uploadFiles(page, SAMPLE_PDF);
+}
+
+/** The Mantine SegmentedControl hides the radio input; the label is the target. */
+function modeTab(page: Page, name: string) {
+  return page
+    .locator(".mantine-SegmentedControl-label")
+    .filter({ hasText: name });
+}
+
+async function selectMode(page: Page, name: string) {
+  await modeTab(page, name).click();
+}
+
+/**
+ * Draws on the create overlay, retrying until the commit button enables: pointer drags over the
+ * WASM-rendered page can drop under parallel load.
+ */
+async function drawField(page: Page) {
+  const overlay = page.getByTestId("form-create-overlay-0");
+  await expect(overlay).toBeVisible({ timeout: 30_000 });
+  const commit = page.getByTestId("form-create-commit");
+  for (let attempt = 0; attempt < 4; attempt++) {
+    const box = await overlay.boundingBox();
+    if (!box) continue;
+    const startX = box.x + box.width * 0.25;
+    const startY = box.y + box.height * 0.25;
+    await page.mouse.move(startX, startY);
+    await page.mouse.down();
+    await page.mouse.move(startX + 60, startY + 20, { steps: 4 });
+    await page.mouse.move(startX + 120, startY + 40, { steps: 4 });
+    await page.mouse.up();
+    try {
+      await expect(commit).toBeEnabled({ timeout: 2000 });
+      return;
+    } catch {
+      // drag dropped under load - try again
+    }
+  }
+}
+
+test.describe("Form field editor", () => {
+  test("exposes Fill / Create / Modify modes", async ({ page }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await expect(modeTab(page, "Fill")).toBeVisible();
+    await expect(modeTab(page, "Create")).toBeVisible();
+    await expect(modeTab(page, "Modify")).toBeVisible();
+  });
+
+  test("create mode: palette offers every creatable type", async ({ page }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+
+    for (const type of [
+      "text",
+      "checkbox",
+      "combobox",
+      "listbox",
+      "radio",
+      "button",
+      "signature",
+    ]) {
+      await expect(page.getByTestId(`form-create-type-${type}`)).toBeVisible();
+    }
+
+    // Commit disabled with nothing queued.
+    await expect(page.getByTestId("form-create-commit")).toBeDisabled();
+
+    // Arming a type reveals the "draw on the page" hint.
+    await page.getByTestId("form-create-type-text").click();
+    await expect(
+      page.getByText(/Draw a Text field on the page/i),
+    ).toBeVisible();
+  });
+
+  test("create mode: drawing a text field commits via /edit-fields", async ({
+    page,
+  }) => {
+    const captured = await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-text").click();
+    await drawField(page);
+
+    // A queued field appears with a commit affordance enabled.
+    await expect(page.getByTestId("form-create-commit")).toBeEnabled();
+
+    await page.getByTestId("form-create-commit").click();
+
+    const batch = await readEditBatch(page);
+    expect(batch.add).toHaveLength(1);
+    expect(batch.add?.[0]?.type).toBe("text");
+    // The drawn rectangle, not a degenerate one - guards the drag geometry.
+    expect(batch.add?.[0]?.pageIndex).toBe(0);
+    expect(batch.add?.[0]?.width).toBeGreaterThan(0);
+    expect(batch.add?.[0]?.height).toBeGreaterThan(0);
+
+    await expect.poll(() => captured["edit-fields"]).toBeTruthy();
+    expectEditFieldsEnvelope(captured["edit-fields"]);
+
+    // Committing clears the queue, so there is nothing left to add.
+    await expect(page.getByTestId("form-create-commit")).toBeDisabled();
+  });
+
+  test("create mode: a drawn field is selected and can be resized straight away", async ({
+    page,
+  }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-text").click();
+    await drawField(page);
+
+    // Selected on placement, so the resize handles are live without another click.
+    const box = page.locator('[data-testid^="form-edit-field-pending-"]');
+    await expect(box).toHaveCount(1);
+    // WebKit paints a beat after the element exists, so measure only once it is visible.
+    await expect(box).toBeVisible();
+    const before = await box.boundingBox();
+    expect(before).not.toBeNull();
+
+    const handle = page.getByTestId("form-edit-handle-se");
+    await expect(handle).toBeVisible();
+    // hover() waits for actionability and centres on the grip; a hand-computed point
+    // intermittently misses a 9px target once the layout shifts under it.
+    await handle.hover();
+    const grip = await handle.boundingBox();
+    expect(grip).not.toBeNull();
+    await page.mouse.down();
+    await page.mouse.move(grip!.x + 80, grip!.y + 50, { steps: 12 });
+    await page.mouse.up();
+
+    await expect
+      .poll(async () => (await box.boundingBox())?.width ?? 0)
+      .toBeGreaterThan(before!.width + 20);
+  });
+
+  test("create mode: drawing a field shows one box, and moving it leaves none behind", async ({
+    page,
+  }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-text").click();
+    await drawField(page);
+
+    // Measures geometry rather than hit-testing: the duplicate box was pointer-events:none,
+    // so elementsFromPoint skipped it and the bug sailed through. Counts every bordered box any
+    // overlay draws over the point.
+    const boxesAt = ([x, y]: [number, number]) =>
+      page.evaluate(
+        ([px, py]) =>
+          Array.from(
+            document.querySelectorAll(
+              '[data-testid^="form-create-overlay-"] div, [data-testid^="form-edit-overlay-"] div',
+            ),
+          ).filter((el) => {
+            const style = getComputedStyle(el);
+            // The field box is drawn with an outline, not a border, so that its border does not
+            // indent the content box and push the field preview inside it out of alignment.
+            const framed =
+              style.borderStyle !== "none" || style.outlineStyle !== "none";
+            if (!framed || style.display === "none") {
+              return false;
+            }
+            const r = el.getBoundingClientRect();
+            // Ignore the resize grips, which are far smaller than any field box.
+            if (r.width < 12 || r.height < 12) return false;
+            return (
+              px >= r.left && px <= r.right && py >= r.top && py <= r.bottom
+            );
+          }).length,
+        [x, y],
+      );
+
+    const box = page
+      .locator('[data-testid^="form-edit-field-pending-"]')
+      .first();
+    // WebKit paints a beat after the element exists, so measure only once it is visible.
+    await expect(box).toBeVisible();
+    const before = await box.boundingBox();
+    expect(before).not.toBeNull();
+    const origin: [number, number] = [
+      before!.x + before!.width / 2,
+      before!.y + before!.height / 2,
+    ];
+
+    await expect.poll(() => boxesAt(origin)).toBe(1);
+
+    await page.mouse.move(origin[0], origin[1]);
+    await page.mouse.down();
+    await page.mouse.move(origin[0] + 90, origin[1] + 60, { steps: 10 });
+    await page.mouse.up();
+
+    const after = await box.boundingBox();
+    expect(Math.abs(after!.x - before!.x)).toBeGreaterThan(20);
+    // Nothing left behind where it used to be.
+    expect(await boxesAt(origin)).toBe(0);
+  });
+
+  test("create mode: Delete removes the drawn field before it is applied", async ({
+    page,
+  }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-text").click();
+    await drawField(page);
+
+    await expect(
+      page.locator('[data-testid^="form-edit-field-pending-"]'),
+    ).toHaveCount(1);
+
+    await page.keyboard.press("Delete");
+
+    await expect(
+      page.locator('[data-testid^="form-edit-field-pending-"]'),
+    ).toHaveCount(0);
+    // Nothing queued means nothing to apply.
+    await expect(page.getByTestId("form-create-commit")).toBeDisabled();
+  });
+
+  test("create mode: drawing a radio field commits a radio definition", async ({
+    page,
+  }) => {
+    const captured = await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-radio").click();
+    await drawField(page);
+
+    await expect(page.getByTestId("form-create-commit")).toBeEnabled();
+    await page.getByTestId("form-create-commit").click();
+
+    const batch = await readEditBatch(page);
+    expect(batch.add).toHaveLength(1);
+    expect(batch.add?.[0]?.type).toBe("radio");
+    expect(batch.add?.[0]?.options).toEqual(["Option 1", "Option 2"]);
+
+    await expect.poll(() => captured["edit-fields"]).toBeTruthy();
+    expectEditFieldsEnvelope(captured["edit-fields"]);
+  });
+
+  test("create mode: a choice field auto-shows seeded options", async ({
+    page,
+  }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-listbox").click();
+    await drawField(page);
+
+    // The just-drawn field's property editor auto-expands with Options
+    // pre-seeded, so no manual expand is needed.
+    await expect(page.getByText("Options", { exact: true })).toBeVisible();
+    await expect(page.getByPlaceholder("Option 1")).toHaveValue("Option 1");
+    await expect(page.getByPlaceholder("Option 2")).toHaveValue("Option 2");
+  });
+
+  test("create mode: signature field explains it is a placeholder", async ({
+    page,
+  }) => {
+    await stubFormEndpoints(page);
+    await openFormTool(page);
+
+    await selectMode(page, "Create");
+    await page.getByTestId("form-create-type-signature").click();
+    await drawField(page);
+
+    // The editor makes clear you don't sign here - it's a placeholder a signer fills.
+    await expect(page.getByText(/Placeholder only/i)).toBeVisible();
+  });
+
+  test("modify mode: lists fields and deletes one via /edit-fields", async ({
+    page,
+  }) => {
+    const captured = await stubFormEndpoints(page, STUB_FIELDS);
+    await openFormTool(page);
+
+    await selectMode(page, "Modify");
+
+    // Both stubbed fields render as rows.
+    await expect(page.getByTestId("form-modify-row-firstName")).toBeVisible({
+      timeout: 30_000,
+    });
+    await expect(page.getByTestId("form-modify-row-lastName")).toBeVisible();
+
+    // Mark one for deletion → commit count reflects it and button enables.
+    await page.getByTestId("form-modify-delete-firstName").click();
+    const commit = page.getByTestId("form-modify-commit");
+    await expect(commit).toContainText("1");
+    await expect(commit).toBeEnabled();
+
+    await commit.click();
+
+    const batch = await readEditBatch(page);
+    expect(batch.delete).toEqual(["firstName"]);
+    // A field queued for deletion is not also sent as a modification.
+    expect(batch.modify ?? []).toHaveLength(0);
+
+    await expect.poll(() => captured["edit-fields"]).toBeTruthy();
+    expectEditFieldsEnvelope(captured["edit-fields"]);
+
+    // The staged deletion is cleared once it has been saved.
+    await expect(commit).toBeDisabled();
+  });
+
+  test("modify mode: editing a property commits via /edit-fields", async ({
+    page,
+  }) => {
+    const captured = await stubFormEndpoints(page, STUB_FIELDS);
+    await openFormTool(page);
+
+    await selectMode(page, "Modify");
+    await page.getByTestId("form-modify-row-firstName").click();
+
+    // The property editor reveals the label input; change it.
+    const labelInput = page.getByLabel("Label").first();
+    await expect(labelInput).toBeVisible();
+    await labelInput.fill("Given name");
+
+    const commit = page.getByTestId("form-modify-commit");
+    await expect(commit).toBeEnabled();
+    await commit.click();
+
+    const batch = await readEditBatch(page);
+    expect(batch.modify).toHaveLength(1);
+    expect(batch.modify?.[0]?.targetName).toBe("firstName");
+    expect(batch.modify?.[0]?.label).toBe("Given name");
+    expect(batch.delete ?? []).toHaveLength(0);
+
+    await expect.poll(() => captured["edit-fields"]).toBeTruthy();
+    expectEditFieldsEnvelope(captured["edit-fields"]);
+
+    await expect(commit).toBeDisabled();
+  });
+});
diff --git a/frontend/editor/src/core/theme/colors.css b/frontend/editor/src/core/theme/colors.css
index 3caf240da4..31f9666271 100644
--- a/frontend/editor/src/core/theme/colors.css
+++ b/frontend/editor/src/core/theme/colors.css
@@ -1,5 +1,5 @@
 /* COLORS — canonical semantic core (~21 --c-* tokens) mapped from primitives.css per theme; compat.css aliases legacy names onto these. Editor: always data-app-theme="custom" + data-mantine-color-scheme=light|dark. Portal/Storybook: data-theme=light|dark → LIGHT/MIDNIGHT. */
-/* Surface elevation: --c-bg (canvas) < --c-bg-raised (sidebars) < --c-surface (cards) < --c-surface-raised < --c-surface-sunken; plus --c-input-bg, --c-hover, --c-active, --c-overlay. */
+/* Surface elevation: --c-bg (canvas) < --c-bg-raised (sidebars) < --c-surface (cards) < --c-surface-raised < --c-surface-sunken; plus --c-modal-surface (modal panels), --c-input-bg, --c-hover, --c-active, --c-overlay. */
 
 /* ── LIGHT ───────────────────────────────────────────────────────────────── */
 :root,
@@ -11,6 +11,7 @@ html[data-app-theme="light"] {
   --c-surface-raised: var(--p-white);
   --c-surface-sunken: var(--p-gray-100);
   --c-input-bg: var(--p-white);
+  --c-modal-surface: var(--p-white);
   --c-hover: var(--p-gray-50);
   --c-active: var(--p-gray-100);
   --c-overlay: rgba(0, 0, 0, 0.5);
@@ -22,7 +23,7 @@ html[data-app-theme="light"] {
 
   --c-btn-solid: var(--c-text);
   --c-btn-inverse: var(--p-snow);
-  --c-btn-secondary: var(--c-btn-inverse);
+  --c-btn-secondary: var(--c-surface-raised);
   --c-btn-secondary-border: var(--c-border);
 
   --c-border: var(--p-c-f0f0f0);
@@ -32,9 +33,13 @@ html[data-app-theme="light"] {
   --c-primary: var(--p-blue-500);
   --c-primary-hover: var(--p-blue-600);
   --c-primary-subtle: color-mix(in srgb, var(--p-blue-500) 10%, transparent);
+  /* Accent used as TEXT (links, toggles): a deeper hue that clears 4.5:1 on
+     light surfaces, where --c-primary itself does not. */
+  --c-accent-text: var(--p-blue-700);
 
   --c-success: var(--p-green-600);
   --c-danger: var(--p-red-600);
+  --c-text-on-danger: var(--p-white);
   --c-warning: var(--p-amber-600);
   /* Solid fills that carry a white label. Deeper than the --c-<tone> values
      above, which are picked for surfaces, borders and icons where the 3:1
@@ -68,6 +73,11 @@ html[data-app-theme="light"] {
     var(--c-success) 10%,
     var(--c-surface)
   );
+  --c-warning-subtle: color-mix(
+    in srgb,
+    var(--c-warning) 10%,
+    var(--c-surface)
+  );
 
   /* ── Decorative / brand / categorical palette ──────────────────────────
      Fixed hues that intentionally do NOT follow the chosen accent: brand
@@ -135,7 +145,8 @@ html[data-app-theme="midnight"] {
   --c-surface: var(--p-c-1a1a1d);
   --c-surface-raised: var(--p-zinc-650);
   --c-surface-sunken: var(--p-zinc-850);
-  --c-input-bg: var(--p-zinc-650);
+  --c-input-bg: var(--c-surface);
+  --c-modal-surface: var(--c-surface);
   --c-hover: var(--p-gray-800);
   --c-active: var(--p-gray-800);
   --c-overlay: rgba(0, 0, 0, 0.6);
@@ -144,6 +155,8 @@ html[data-app-theme="midnight"] {
   --c-text-muted: var(--p-zinc-200);
   --c-text-subtle: var(--p-zinc-250);
   --c-text-on-primary: var(--p-white);
+  /* Accent used as TEXT on dark surfaces: a lighter step for 4.5:1. */
+  --c-accent-text: var(--p-blue-400);
   --c-btn-solid: var(--c-text);
   --c-btn-inverse: var(--p-ink);
   --c-btn-secondary: var(--p-c-1a1a1d);
@@ -159,6 +172,7 @@ html[data-app-theme="midnight"] {
 
   --c-success: var(--p-green-500);
   --c-danger: var(--p-red-500);
+  --c-text-on-danger: var(--p-white);
   --c-warning: var(--p-amber-500);
 
   /* Themed decorative dark overrides (see :root for light + rationale). */
@@ -348,7 +362,7 @@ html[data-app-theme="custom"][data-mantine-color-scheme="dark"] {
     var(--c-primary) 8%,
     var(--p-zinc-900)
   );
-  --c-input-bg: color-mix(in srgb, var(--c-primary) 7%, var(--p-zinc-900));
+  --c-input-bg: var(--c-surface);
   --c-hover: color-mix(in srgb, var(--c-primary) 12%, var(--p-zinc-750));
   --c-active: color-mix(in srgb, var(--c-primary) 15%, var(--p-zinc-700));
   --c-border: color-mix(in srgb, var(--c-primary) 14%, var(--p-c-28282d));
@@ -361,6 +375,7 @@ html[data-app-theme="custom"][data-mantine-color-scheme="dark"] {
   /* Dark-tuned status shades (lighter than the light-theme :root values). */
   --c-success: var(--p-green-500);
   --c-danger: var(--p-red-400);
+  --c-text-on-danger: var(--p-white);
   --c-warning: var(--p-amber-500);
 
   /* Themed decorative dark overrides (see :root for light + rationale). */
@@ -411,7 +426,7 @@ html[data-app-theme="custom"][data-accent="default"][data-mantine-color-scheme="
   --c-surface: var(--p-c-1a1a1d);
   --c-surface-raised: var(--p-zinc-775);
   --c-surface-sunken: var(--p-zinc-900);
-  --c-input-bg: var(--p-zinc-900);
+  --c-input-bg: var(--c-surface);
   --c-hover: var(--p-zinc-750);
   --c-active: var(--p-zinc-700);
   --c-border: var(--p-c-28282d);
diff --git a/frontend/editor/src/core/theme/dimensions.css b/frontend/editor/src/core/theme/dimensions.css
index aa0a1b38cc..554baddcca 100644
--- a/frontend/editor/src/core/theme/dimensions.css
+++ b/frontend/editor/src/core/theme/dimensions.css
@@ -62,6 +62,7 @@
   /* ── Z-index ladder ── */
   --z-dropdown: 25;
   --z-drawer: 50;
+  --z-popover: 150;
   --z-toast: 200;
   /* Fullscreen tool-picker surfaces (editor) */
   --z-fullscreen-icon-svg: 1;
diff --git a/frontend/editor/src/core/tools/formFill/ButtonAppearanceOverlay.tsx b/frontend/editor/src/core/tools/formFill/ButtonAppearanceOverlay.tsx
index 27e1b18d7c..525f714ddf 100644
--- a/frontend/editor/src/core/tools/formFill/ButtonAppearanceOverlay.tsx
+++ b/frontend/editor/src/core/tools/formFill/ButtonAppearanceOverlay.tsx
@@ -8,6 +8,7 @@
  * Uses the same EPDF_RenderAnnotBitmap / FPDF_FFLDraw pipeline as
  * SignatureFieldOverlay to produce the button's native PDF appearance.
  */
+import { useStaleBakedFieldNames } from "@app/tools/formFill/FormFillContext";
 import React, { useEffect, useMemo, useRef, useState, memo } from "react";
 import {
   renderButtonFieldAppearances,
@@ -66,6 +67,7 @@ function ButtonAppearanceOverlayInner({
   pageWidth,
   pageHeight,
 }: ButtonAppearanceOverlayProps) {
+  const staleNames = useStaleBakedFieldNames();
   const [appearances, setAppearances] = useState<SignatureFieldAppearance[]>(
     [],
   );
@@ -111,36 +113,38 @@ function ButtonAppearanceOverlayInner({
       }}
       data-button-appearance-page={pageIndex}
     >
-      {pageAppearances.map((btn, idx) => {
-        const sx =
-          btn.sourcePageWidth > 0 ? pageWidth / btn.sourcePageWidth : 1;
-        const sy =
-          btn.sourcePageHeight > 0 ? pageHeight / btn.sourcePageHeight : 1;
-        const left = btn.x * sx;
-        const top = btn.y * sy;
-        const width = btn.width * sx;
-        const height = btn.height * sy;
+      {pageAppearances
+        .filter((btn) => !staleNames.has(btn.fieldName))
+        .map((btn, idx) => {
+          const sx =
+            btn.sourcePageWidth > 0 ? pageWidth / btn.sourcePageWidth : 1;
+          const sy =
+            btn.sourcePageHeight > 0 ? pageHeight / btn.sourcePageHeight : 1;
+          const left = btn.x * sx;
+          const top = btn.y * sy;
+          const width = btn.width * sx;
+          const height = btn.height * sy;
 
-        return (
-          <div
-            key={`btn-appearance-${btn.fieldName}-${idx}`}
-            style={{
-              position: "absolute",
-              left,
-              top,
-              width,
-              height,
-              overflow: "hidden",
-            }}
-          >
-            <ButtonBitmapCanvas
-              imageData={btn.imageData!}
-              cssWidth={width}
-              cssHeight={height}
-            />
-          </div>
-        );
-      })}
+          return (
+            <div
+              key={`btn-appearance-${btn.fieldName}-${idx}`}
+              style={{
+                position: "absolute",
+                left,
+                top,
+                width,
+                height,
+                overflow: "hidden",
+              }}
+            >
+              <ButtonBitmapCanvas
+                imageData={btn.imageData!}
+                cssWidth={width}
+                cssHeight={height}
+              />
+            </div>
+          );
+        })}
     </div>
   );
 }
diff --git a/frontend/editor/src/core/tools/formFill/FormCreationInteractionLock.tsx b/frontend/editor/src/core/tools/formFill/FormCreationInteractionLock.tsx
new file mode 100644
index 0000000000..6fd66719da
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormCreationInteractionLock.tsx
@@ -0,0 +1,26 @@
+/**
+ * Holds the viewer's interactions paused for as long as the create tool is armed, so drawing a
+ * field never also selects the text underneath.
+ */
+import { useEffect } from "react";
+import { useInteractionManagerCapability } from "@embedpdf/plugin-interaction-manager/react";
+
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+
+export function FormCreationInteractionLock() {
+  const { mode, creationType } = useFormFill();
+  const { provides: interactionManager } = useInteractionManagerCapability();
+  const armed = mode === "create" && creationType != null;
+
+  // Mounted once per document, not per page: the page overlays live inside a virtualising
+  // Scroller, so one scrolling out of view would otherwise resume mid-session.
+  useEffect(() => {
+    if (!armed || !interactionManager) return undefined;
+    // Never paused mid-gesture: pausing between a pointerdown and its pointerup strands the
+    // selection, which then keeps extending on every move once resumed.
+    interactionManager.pause();
+    return () => interactionManager.resume();
+  }, [armed, interactionManager]);
+
+  return null;
+}
diff --git a/frontend/editor/src/core/tools/formFill/FormFieldCreatePanel.tsx b/frontend/editor/src/core/tools/formFill/FormFieldCreatePanel.tsx
new file mode 100644
index 0000000000..d64226af53
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormFieldCreatePanel.tsx
@@ -0,0 +1,326 @@
+/** Left panel for "create" mode; drawing happens in FormFieldCreationOverlay. */
+import React, { useCallback, useEffect, useRef, useState } from "react";
+import {
+  Stack,
+  Text,
+  Group,
+  Alert,
+  Collapse,
+  Paper,
+  Tooltip,
+} from "@mantine/core";
+import { Button } from "@app/ui/Button";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import { useTranslation } from "react-i18next";
+import VisibilityOutlinedIcon from "@mui/icons-material/VisibilityOutlined";
+import DeleteOutlineIcon from "@mui/icons-material/DeleteOutlineRounded";
+import MyLocationIcon from "@mui/icons-material/MyLocation";
+import { useViewer } from "@app/contexts/ViewerContext";
+import {
+  pendingSelectionName,
+  pendingIdFrom,
+} from "@app/tools/formFill/pendingSelection";
+import WarningAmberIcon from "@mui/icons-material/WarningAmber";
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+import {
+  CREATABLE_FIELD_TYPES,
+  type CreatableFieldType,
+  type NewFieldDefinition,
+} from "@app/tools/formFill/types";
+import {
+  FIELD_TYPE_ICON,
+  FIELD_TYPE_COLOR,
+} from "@app/tools/formFill/fieldMeta";
+import { FormFieldPropertyEditor } from "@app/tools/formFill/FormFieldPropertyEditor";
+import { SkippedEditsAlert } from "@app/tools/formFill/SkippedEditsAlert";
+import { useFormCommit } from "@app/tools/formFill/useFormCommit";
+import styles from "@app/tools/formFill/FormFill.module.css";
+
+interface FormFieldCreatePanelProps {
+  currentFile: File | Blob | null;
+  onApplied?: (blob: Blob) => void;
+}
+
+const TYPE_LABEL: Record<CreatableFieldType, string> = {
+  text: "Text",
+  checkbox: "Checkbox",
+  combobox: "Dropdown",
+  listbox: "List box",
+  radio: "Radio",
+  button: "Button",
+  signature: "Signature",
+};
+
+export function FormFieldCreatePanel({
+  currentFile,
+  onApplied,
+}: FormFieldCreatePanelProps) {
+  const { t } = useTranslation();
+  const {
+    creationType,
+    setCreationType,
+    pendingFields,
+    updatePendingField,
+    removePendingField,
+    commitNewFields,
+    setPreviewing,
+    selectedFieldName,
+    setSelectedField,
+  } = useFormFill();
+
+  const [expandedId, setExpandedId] = useState<string | null>(null);
+  const { scrollActions } = useViewer();
+  const goToPage = (pageIndex: number) =>
+    scrollActions.scrollToPage(pageIndex + 1);
+  const { committing, error, commit } = useFormCommit(onApplied);
+
+  // Auto-expand the property editor of a freshly-drawn field so its settings
+  // (especially options for choice/radio) are visible immediately.
+  const prevCountRef = useRef(0);
+  const expandedRowRef = useRef<HTMLDivElement>(null);
+
+  useEffect(() => {
+    if (pendingFields.length > prevCountRef.current) {
+      setExpandedId(pendingFields[pendingFields.length - 1].id);
+    }
+    prevCountRef.current = pendingFields.length;
+  }, [pendingFields]);
+
+  // Clicking a box on the page should land you on its settings, not leave you hunting the list.
+  useEffect(() => {
+    const id = selectedFieldName ? pendingIdFrom(selectedFieldName) : null;
+    if (id) setExpandedId(id);
+  }, [selectedFieldName]);
+
+  // Newly drawn fields land at the bottom while the panel stays at the top, so their settings
+  // open somewhere the user cannot see.
+  useEffect(() => {
+    if (!expandedId) return;
+    expandedRowRef.current?.scrollIntoView({ block: "nearest" });
+  }, [expandedId]);
+
+  const handleCommit = useCallback(() => {
+    if (!currentFile || pendingFields.length === 0) return;
+    commit(
+      () => commitNewFields(currentFile),
+      "formFill.create.failed",
+      "Failed to add fields",
+    );
+  }, [currentFile, pendingFields, commitNewFields, commit]);
+
+  return (
+    <div className={styles.root}>
+      <div className={styles.header}>
+        <Text size="xs" c="dimmed">
+          {t(
+            "formFill.create.hint",
+            "Pick a field type, then draw it on the page.",
+          )}
+        </Text>
+
+        {/* Type palette */}
+        <Group gap={6} wrap="wrap">
+          {CREATABLE_FIELD_TYPES.map((type) => {
+            const armed = creationType === type;
+            return (
+              <Button
+                key={type}
+                size="sm"
+                variant={armed ? "primary" : "secondary"}
+                leftSection={FIELD_TYPE_ICON[type]}
+                onClick={() => setCreationType(armed ? null : type)}
+                data-testid={`form-create-type-${type}`}
+              >
+                {TYPE_LABEL[type]}
+              </Button>
+            );
+          })}
+        </Group>
+
+        {creationType && (
+          <Alert color="blue" variant="light" p="xs" radius="sm">
+            <Text size="xs">
+              {t(
+                "formFill.create.placing",
+                "Draw a {{type}} field on the page. Press Esc to stop.",
+                { type: TYPE_LABEL[creationType] },
+              )}
+            </Text>
+          </Alert>
+        )}
+
+        {error && (
+          <Alert
+            icon={<WarningAmberIcon sx={{ fontSize: 16 }} />}
+            color="red"
+            variant="light"
+            p="xs"
+            radius="sm"
+          >
+            <Text size="xs">{error}</Text>
+          </Alert>
+        )}
+
+        <SkippedEditsAlert />
+      </div>
+
+      {/* Content stacks naturally; ToolPanel's own ScrollArea does the scrolling. */}
+      <div className={styles.fieldListInner}>
+        {pendingFields.length === 0 ? (
+          <Text size="xs" c="dimmed" ta="center" py="md">
+            {t("formFill.create.empty", "No fields drawn yet.")}
+          </Text>
+        ) : (
+          <Stack gap={6}>
+            {pendingFields.map((pf) => {
+              const expanded = expandedId === pf.id;
+              return (
+                <Paper
+                  key={pf.id}
+                  withBorder
+                  p={6}
+                  radius="sm"
+                  ref={expanded ? expandedRowRef : undefined}
+                  data-testid={`form-pending-row-${pf.id}`}
+                  // The whole row opens its settings: hunting for the small pencil is a
+                  // needless step when the row is the thing you just clicked.
+                  onClick={() => setExpandedId(expanded ? null : pf.id)}
+                  style={{ cursor: "pointer" }}
+                >
+                  <Group gap={6} wrap="nowrap" justify="space-between">
+                    <Group gap={6} wrap="nowrap" style={{ minWidth: 0 }}>
+                      <span
+                        style={{
+                          color: `var(--mantine-color-${FIELD_TYPE_COLOR[pf.type]}-6)`,
+                          display: "flex",
+                        }}
+                      >
+                        {FIELD_TYPE_ICON[pf.type]}
+                      </span>
+                      <Text size="xs" truncate>
+                        {pf.name}
+                      </Text>
+                      <Text size="xs" c="dimmed">
+                        p{pf.pageIndex + 1}
+                      </Text>
+                    </Group>
+                    <Group gap={2} wrap="nowrap">
+                      <Tooltip
+                        label={t(
+                          "formFill.create.goToField",
+                          "Go to this field",
+                        )}
+                        withArrow
+                      >
+                        <ActionIcon
+                          size="sm"
+                          variant="tertiary"
+                          aria-label={t(
+                            "formFill.create.goToField",
+                            "Go to this field",
+                          )}
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            setSelectedField(pendingSelectionName(pf.id));
+                            setExpandedId(pf.id);
+                            goToPage(pf.pageIndex);
+                          }}
+                          data-testid={`form-pending-goto-${pf.id}`}
+                        >
+                          <MyLocationIcon sx={{ fontSize: 16 }} />
+                        </ActionIcon>
+                      </Tooltip>
+                      <Tooltip
+                        label={t("formFill.create.removeField", "Remove field")}
+                        withArrow
+                      >
+                        <ActionIcon
+                          size="sm"
+                          variant="tertiary"
+                          accent="danger"
+                          aria-label={t(
+                            "formFill.create.removeField",
+                            "Remove field",
+                          )}
+                          onClick={(e) => {
+                            e.stopPropagation();
+                            removePendingField(pf.id);
+                          }}
+                          data-testid={`form-pending-remove-${pf.id}`}
+                        >
+                          <DeleteOutlineIcon sx={{ fontSize: 16 }} />
+                        </ActionIcon>
+                      </Tooltip>
+                    </Group>
+                  </Group>
+                  <Collapse in={expanded}>
+                    {/* The row toggles on click, so the settings must not bubble into it or
+                        every field you touch closes the panel you are typing in. */}
+                    <div
+                      style={{ marginTop: 8 }}
+                      onClick={(e) => e.stopPropagation()}
+                    >
+                      <FormFieldPropertyEditor
+                        value={pf}
+                        onChange={(patch) =>
+                          updatePendingField(
+                            pf.id,
+                            patch as Partial<NewFieldDefinition>,
+                          )
+                        }
+                        showName
+                      />
+                    </div>
+                  </Collapse>
+                </Paper>
+              );
+            })}
+          </Stack>
+        )}
+      </div>
+
+      <div className={styles.footer}>
+        <Tooltip
+          label={t(
+            "formFill.create.previewHelp",
+            "Hold to see the fields as they will look once added, without the editing outlines.",
+          )}
+          openDelay={250}
+          withArrow
+        >
+          <Button
+            size="sm"
+            variant="secondary"
+            accent="neutral"
+            fullWidth
+            disabled={pendingFields.length === 0}
+            data-testid="form-create-preview"
+            // Held, not toggled: releasing always restores the editing view, so preview
+            // cannot be left switched on by accident.
+            onPointerDown={() => setPreviewing(true)}
+            onPointerUp={() => setPreviewing(false)}
+            onPointerLeave={() => setPreviewing(false)}
+            onPointerCancel={() => setPreviewing(false)}
+            onBlur={() => setPreviewing(false)}
+            leftSection={<VisibilityOutlinedIcon fontSize="small" />}
+          >
+            {t("formFill.create.preview", "Hold to preview")}
+          </Button>
+        </Tooltip>
+        <Button
+          size="sm"
+          onClick={handleCommit}
+          loading={committing}
+          disabled={!currentFile || pendingFields.length === 0}
+          data-testid="form-create-commit"
+        >
+          {t("formFill.create.commit", "Add {{count}} field(s) to PDF", {
+            count: pendingFields.length,
+          })}
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+export default FormFieldCreatePanel;
diff --git a/frontend/editor/src/core/tools/formFill/FormFieldCreationOverlay.tsx b/frontend/editor/src/core/tools/formFill/FormFieldCreationOverlay.tsx
new file mode 100644
index 0000000000..beeb68928f
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormFieldCreationOverlay.tsx
@@ -0,0 +1,318 @@
+/**
+ * Per-page drag-to-place layer for "create" mode. Uses FormFieldOverlay's scale
+ * basis (pageWidthPx / pdfPage.size.width) so placements round-trip on reload.
+ */
+import React, {
+  useCallback,
+  useMemo,
+  useRef,
+  useState,
+  useEffect,
+} from "react";
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+import { pendingSelectionName } from "@app/tools/formFill/pendingSelection";
+import type { CreatableFieldType } from "@app/tools/formFill/types";
+import {
+  pixelsToBackendRect,
+  backendRectToPixels,
+  clampPixelRect,
+  roundPdfRect,
+  type PixelRect,
+} from "@app/tools/formFill/formCoordinateUtils";
+import {
+  collectSnapTargets,
+  snapMove,
+  type SnapGuide,
+} from "@app/tools/formFill/formSnapUtils";
+import {
+  usePageScale,
+  getLocalPoint,
+  isTextEntryTarget,
+} from "@app/tools/formFill/usePageScale";
+import { SnapGuides } from "@app/tools/formFill/SnapGuides";
+import { FORM_COLORS } from "@app/tools/formFill/formFieldColors";
+
+interface FormFieldCreationOverlayProps {
+  documentId: string;
+  pageIndex: number;
+  pageWidth: number;
+  pageHeight: number;
+  fileId?: string | null;
+}
+
+/** Minimum drawn size (pixels) below which we treat the gesture as a click. */
+const MIN_DRAG_PX = 5;
+
+/** Default field size in PDF points, used for click-to-place. */
+const DEFAULT_SIZE_PTS: Record<CreatableFieldType, { w: number; h: number }> = {
+  text: { w: 150, h: 24 },
+  checkbox: { w: 16, h: 16 },
+  combobox: { w: 150, h: 24 },
+  listbox: { w: 150, h: 64 },
+  radio: { w: 16, h: 16 },
+  button: { w: 120, h: 28 },
+  signature: { w: 200, h: 60 },
+};
+
+export function FormFieldCreationOverlay({
+  documentId,
+  pageIndex,
+  pageWidth,
+  pageHeight,
+  fileId,
+}: FormFieldCreationOverlayProps) {
+  const {
+    mode,
+    creationType,
+    setCreationType,
+    pendingFields,
+    addPendingField,
+    selectedFieldName,
+    setSelectedField,
+    previewing,
+    state,
+    forFileId,
+  } = useFormFill();
+
+  const rootRef = useRef<HTMLDivElement>(null);
+  const [dragRect, setDragRect] = useState<PixelRect | null>(null);
+  const [guides, setGuides] = useState<SnapGuide[]>([]);
+  const dragStartRef = useRef<{ x: number; y: number } | null>(null);
+
+  const { scaleX, scaleY, pageHeightPts, pageWidthPts, rotation } =
+    usePageScale(documentId, pageIndex, pageWidth, pageHeight);
+
+  // Pixel rects of the OTHER fields on this page, used as snap targets.
+  const snapRects = useMemo<PixelRect[]>(() => {
+    const rects: PixelRect[] = [];
+    for (const field of state.fields) {
+      for (const w of field.widgets ?? []) {
+        if (w.pageIndex !== pageIndex) continue;
+        rects.push({
+          left: w.x * scaleX,
+          top: w.y * scaleY,
+          width: w.width * scaleX,
+          height: w.height * scaleY,
+        });
+      }
+    }
+    for (const pf of pendingFields) {
+      if (pf.pageIndex !== pageIndex) continue;
+      rects.push(backendRectToPixels(pf, scaleX, scaleY, pageHeightPts));
+    }
+    return rects;
+  }, [state.fields, pendingFields, pageIndex, scaleX, scaleY, pageHeightPts]);
+
+  // Precompute snap edges once (not on every pointermove).
+  const snapTargets = useMemo(() => collectSnapTargets(snapRects), [snapRects]);
+
+  const active = mode === "create" && creationType != null && !previewing;
+
+  // Stale-file guard: don't draw on a page whose fields belong to another file.
+  const fileMismatch =
+    fileId != null && forFileId != null && fileId !== forFileId;
+
+  // Whether this gesture began with something selected; see handlePointerDown.
+  const startedSelectedRef = useRef(false);
+
+  const localPoint = useCallback(
+    (e: React.PointerEvent) => getLocalPoint(e, rootRef.current, rotation),
+    [rotation],
+  );
+
+  const handlePointerDown = useCallback(
+    (e: React.PointerEvent) => {
+      if (!active) return;
+      // Before the bare-overlay check: a press on a pending outline must not select text either.
+      e.preventDefault();
+      // Only start a drag on the bare overlay, never on a pending outline.
+      if (e.target !== rootRef.current) return;
+      // A click away from a selection means "deselect"; a drag always means "draw". Which one
+      // this is cannot be known until the pointer lifts, so start the drag either way.
+      startedSelectedRef.current = Boolean(selectedFieldName);
+      rootRef.current?.setPointerCapture(e.pointerId);
+      const p = localPoint(e);
+      dragStartRef.current = p;
+      setDragRect({ left: p.x, top: p.y, width: 0, height: 0 });
+    },
+    [active, localPoint, selectedFieldName, setSelectedField],
+  );
+
+  const handlePointerMove = useCallback(
+    (e: React.PointerEvent) => {
+      if (!active || !dragStartRef.current) return;
+      const p = localPoint(e);
+      const start = dragStartRef.current;
+      let rect: PixelRect = {
+        left: Math.min(start.x, p.x),
+        top: Math.min(start.y, p.y),
+        width: Math.abs(p.x - start.x),
+        height: Math.abs(p.y - start.y),
+      };
+      const snapped = snapMove(rect, snapTargets, 6);
+      rect = { ...rect, left: snapped.left, top: snapped.top };
+      setGuides(snapped.guides);
+      setDragRect(rect);
+    },
+    [active, localPoint, snapTargets],
+  );
+
+  // A cancelled gesture (system swipe, focus loss) must not leave a half-drawn rect behind.
+  const cancelDrag = useCallback((e: React.PointerEvent) => {
+    dragStartRef.current = null;
+    startedSelectedRef.current = false;
+    setDragRect(null);
+    setGuides([]);
+    try {
+      rootRef.current?.releasePointerCapture(e.pointerId);
+    } catch {
+      /* pointer capture may already be released */
+    }
+  }, []);
+
+  const finishDrag = useCallback(
+    (e: React.PointerEvent) => {
+      if (!active || !dragStartRef.current || !creationType) return;
+      const start = dragStartRef.current;
+      dragStartRef.current = null;
+      setGuides([]);
+      try {
+        rootRef.current?.releasePointerCapture(e.pointerId);
+      } catch {
+        /* pointer capture may already be released */
+      }
+
+      const current = dragRect;
+      setDragRect(null);
+      if (!current) return;
+
+      const dragged =
+        // Either axis is enough: requiring both threw away a deliberate thin drag, such as a
+        // signature line, and replaced it with a default box centred on the press point.
+        Math.max(current.width, current.height) >= MIN_DRAG_PX;
+
+      // A click that went nowhere only clears the selection it started with.
+      if (!dragged && startedSelectedRef.current) {
+        startedSelectedRef.current = false;
+        setSelectedField(null);
+        return;
+      }
+      startedSelectedRef.current = false;
+
+      let pixelRect: PixelRect;
+      if (dragged) {
+        pixelRect = current;
+      } else {
+        // Click-to-place: default size centred on the click point.
+        const def = DEFAULT_SIZE_PTS[creationType];
+        const wPx = def.w * scaleX;
+        const hPx = def.h * scaleY;
+        pixelRect = {
+          left: start.x - wPx / 2,
+          top: start.y - hPx / 2,
+          width: wPx,
+          height: hPx,
+        };
+      }
+
+      pixelRect = clampPixelRect(pixelRect, pageWidth, pageHeight);
+      const pdf = roundPdfRect(
+        pixelsToBackendRect(pixelRect, scaleX, scaleY, pageHeightPts),
+      );
+
+      const id = addPendingField({
+        type: creationType,
+        pageIndex,
+        x: pdf.x,
+        y: pdf.y,
+        width: pdf.width,
+        height: pdf.height,
+      });
+      // Selected the moment it lands, so it can be nudged or resized without another click.
+      setSelectedField(pendingSelectionName(id));
+    },
+    [
+      active,
+      creationType,
+      dragRect,
+      scaleX,
+      scaleY,
+      pageHeightPts,
+      pageWidth,
+      pageHeight,
+      pageIndex,
+      addPendingField,
+      setSelectedField,
+    ],
+  );
+
+  // Escape disarms placement / cancels the in-progress drag.
+  useEffect(() => {
+    if (!active) return;
+    const onKey = (e: KeyboardEvent) => {
+      // Never steal keys from a field the user is typing in.
+      if (isTextEntryTarget(e.target)) return;
+      if (e.key === "Escape") {
+        dragStartRef.current = null;
+        setDragRect(null);
+        setGuides([]);
+        setCreationType(null);
+      }
+    };
+    window.addEventListener("keydown", onKey);
+    return () => window.removeEventListener("keydown", onKey);
+  }, [active, setCreationType]);
+
+  if (mode !== "create" || fileMismatch || !pageWidthPts) return null;
+
+  return (
+    <div
+      ref={rootRef}
+      data-testid={`form-create-overlay-${pageIndex}`}
+      onPointerDown={handlePointerDown}
+      onPointerMove={handlePointerMove}
+      onPointerUp={finishDrag}
+      onPointerCancel={cancelDrag}
+      style={{
+        position: "absolute",
+        inset: 0,
+        pointerEvents: active ? "auto" : "none",
+        // Without this the browser claims the gesture as a pan and drags never start on touch.
+        touchAction: active ? "none" : "auto",
+        // Crosshair means the next click draws; the arrow means it clears the selection.
+        cursor: !active
+          ? "default"
+          : selectedFieldName
+            ? "default"
+            : "crosshair",
+        userSelect: "none",
+        WebkitUserSelect: "none",
+        zIndex: 5,
+      }}
+    >
+      {/* Queued fields are drawn by FormFieldEditOverlay, which also moves and resizes
+          them; drawing them here too would show two boxes and leave one behind on drag. */}
+      {/* Live drag preview */}
+      {dragRect && creationType && (
+        <div
+          style={{
+            position: "absolute",
+            left: dragRect.left,
+            top: dragRect.top,
+            width: dragRect.width,
+            height: dragRect.height,
+            border: `2px dashed ${FORM_COLORS.accent}`,
+            background: FORM_COLORS.accentFill,
+            pointerEvents: "none",
+            boxSizing: "border-box",
+          }}
+        />
+      )}
+
+      {/* Alignment guides */}
+      <SnapGuides guides={guides} />
+    </div>
+  );
+}
+
+export default FormFieldCreationOverlay;
diff --git a/frontend/editor/src/core/tools/formFill/FormFieldEditOverlay.tsx b/frontend/editor/src/core/tools/formFill/FormFieldEditOverlay.tsx
new file mode 100644
index 0000000000..687ace7798
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormFieldEditOverlay.tsx
@@ -0,0 +1,792 @@
+/**
+ * Per-page select/move/resize layer for "modify" mode. Geometry is staged in
+ * CropBox-relative, lower-left-origin points on FormFieldOverlay's scale basis.
+ */
+import React, {
+  useCallback,
+  useMemo,
+  useRef,
+  useState,
+  useEffect,
+} from "react";
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+import {
+  pendingIdFrom,
+  pendingSelectionName,
+} from "@app/tools/formFill/pendingSelection";
+import type { FormField } from "@app/tools/formFill/types";
+import {
+  pixelsToBackendRect,
+  radioOptionRects,
+  backendRectToPixels,
+  widgetRectToPixels,
+  clampPixelRect,
+  roundPdfRect,
+  type PixelRect,
+} from "@app/tools/formFill/formCoordinateUtils";
+import {
+  collectSnapTargets,
+  snapMove,
+  snapResize,
+  type SnapGuide,
+} from "@app/tools/formFill/formSnapUtils";
+import {
+  usePageScale,
+  getLocalPoint,
+  isTextEntryTarget,
+} from "@app/tools/formFill/usePageScale";
+import { SnapGuides } from "@app/tools/formFill/SnapGuides";
+import { FORM_COLORS } from "@app/tools/formFill/formFieldColors";
+
+interface FormFieldEditOverlayProps {
+  documentId: string;
+  pageIndex: number;
+  pageWidth: number;
+  pageHeight: number;
+  fileId?: string | null;
+}
+
+type HandleId = "nw" | "n" | "ne" | "e" | "se" | "s" | "sw" | "w";
+
+const HANDLES: { id: HandleId; cursor: string }[] = [
+  { id: "nw", cursor: "nwse-resize" },
+  { id: "n", cursor: "ns-resize" },
+  { id: "ne", cursor: "nesw-resize" },
+  { id: "e", cursor: "ew-resize" },
+  { id: "se", cursor: "nwse-resize" },
+  { id: "s", cursor: "ns-resize" },
+  { id: "sw", cursor: "nesw-resize" },
+  { id: "w", cursor: "ew-resize" },
+];
+
+const MIN_PX = 8;
+const HANDLE_SIZE = 9;
+
+interface Interaction {
+  kind: "move" | "resize";
+  handle?: HandleId;
+  fieldName: string;
+  startX: number;
+  startY: number;
+  startRect: PixelRect;
+}
+
+function handleEdges(h: HandleId) {
+  return {
+    left: h === "nw" || h === "w" || h === "sw",
+    right: h === "ne" || h === "e" || h === "se",
+    top: h === "nw" || h === "n" || h === "ne",
+    bottom: h === "sw" || h === "s" || h === "se",
+  };
+}
+
+function handlePosition(h: HandleId, rect: PixelRect) {
+  const cx = rect.left + rect.width / 2;
+  const cy = rect.top + rect.height / 2;
+  const map: Record<HandleId, { x: number; y: number }> = {
+    nw: { x: rect.left, y: rect.top },
+    n: { x: cx, y: rect.top },
+    ne: { x: rect.left + rect.width, y: rect.top },
+    e: { x: rect.left + rect.width, y: cy },
+    se: { x: rect.left + rect.width, y: rect.top + rect.height },
+    s: { x: cx, y: rect.top + rect.height },
+    sw: { x: rect.left, y: rect.top + rect.height },
+    w: { x: rect.left, y: cy },
+  };
+  return map[h];
+}
+
+/**
+ * What a queued field will look like once applied. Without this a drawn box is empty, so the
+ * default text and a radio group's options are invisible until after saving.
+ */
+function PendingPreview({
+  field,
+  rect,
+}: {
+  field: FormField;
+  rect: PixelRect;
+}) {
+  // Blank entries are dropped server-side (sanitizeOptions), so counting them here would
+  // preview one more button than actually gets written.
+  const options = (field.options ?? [])
+    .map((o) => o?.trim() ?? "")
+    .filter((o) => o.length > 0);
+  if (field.type === "radio" && options.length > 0) {
+    // The drawn box is the whole group; radioOptionRects splits it exactly as the backend does.
+    const rows = radioOptionRects(
+      rect,
+      options.length,
+      field.optionGap,
+      field.optionSize,
+    );
+    return (
+      <>
+        {rows.map((row, i) => (
+          <div
+            key={`${options[i]}-${i}`}
+            style={{
+              position: "absolute",
+              left: 0,
+              top: row.top,
+              width: rect.width,
+              height: row.size,
+              display: "flex",
+              alignItems: "center",
+              gap: 6,
+              pointerEvents: "none",
+            }}
+          >
+            <span
+              style={{
+                width: row.size,
+                height: row.size,
+                borderRadius: "50%",
+                border: `1.5px solid ${FORM_COLORS.neutralBorder}`,
+                // Without this the border sits outside the width and each button renders 3px
+                // taller than its slot, so the stack overflows the box it was laid out in.
+                boxSizing: "border-box",
+                flex: "0 0 auto",
+              }}
+            />
+            <span
+              style={{
+                fontSize: Math.max(8, Math.min(12, row.size * 0.9)),
+                color: FORM_COLORS.neutralChip,
+                whiteSpace: "nowrap",
+                overflow: "hidden",
+              }}
+            >
+              {options[i]}
+            </span>
+          </div>
+        ))}
+      </>
+    );
+  }
+
+  const sample =
+    field.value ||
+    (field.type === "combobox" || field.type === "listbox"
+      ? (options[0] ?? "")
+      : "");
+  if (!sample) return null;
+  return (
+    <span
+      style={{
+        position: "absolute",
+        inset: 0,
+        display: "flex",
+        alignItems: "center",
+        padding: "0 4px",
+        fontSize: Math.min(12, Math.max(9, rect.height - 8)),
+        color: FORM_COLORS.neutralChip,
+        whiteSpace: "nowrap",
+        overflow: "hidden",
+        pointerEvents: "none",
+      }}
+    >
+      {sample}
+    </span>
+  );
+}
+
+export function FormFieldEditOverlay({
+  documentId,
+  pageIndex,
+  pageWidth,
+  pageHeight,
+  fileId,
+}: FormFieldEditOverlayProps) {
+  const {
+    mode,
+    state,
+    selectedFieldName,
+    setSelectedField,
+    modifiedFields,
+    stageModification,
+    deletedFieldNames,
+    forFileId,
+    dragActiveRef,
+    pendingFields,
+    updatePendingField,
+    previewing,
+  } = useFormFill();
+
+  const rootRef = useRef<HTMLDivElement>(null);
+  const interactionRef = useRef<Interaction | null>(null);
+  const [liveRect, setLiveRect] = useState<PixelRect | null>(null);
+  const [guides, setGuides] = useState<SnapGuide[]>([]);
+
+  const { scaleX, scaleY, pageHeightPts, pageWidthPts, rotation } =
+    usePageScale(documentId, pageIndex, pageWidth, pageHeight);
+
+  /** First-widget pixel rect for a field on this page, honouring staged geometry. */
+  const fieldRect = useCallback(
+    (field: FormField): PixelRect | null => {
+      const widget = field.widgets?.find((w) => w.pageIndex === pageIndex);
+      if (!widget) return null;
+      // A queued field stores PDF coordinates, not the top-left widget ones the extractor
+      // produces, so it needs the other transform or it renders far from where it was drawn.
+      if (pendingIdFrom(field.name)) {
+        return backendRectToPixels(
+          {
+            x: widget.x,
+            y: widget.y,
+            width: widget.width,
+            height: widget.height,
+          },
+          scaleX,
+          scaleY,
+          pageHeightPts,
+        );
+      }
+      const staged = modifiedFields[field.name];
+      if (
+        staged &&
+        staged.x != null &&
+        staged.y != null &&
+        staged.width != null &&
+        staged.height != null
+      ) {
+        return backendRectToPixels(
+          {
+            x: staged.x,
+            y: staged.y,
+            width: staged.width,
+            height: staged.height,
+          },
+          scaleX,
+          scaleY,
+          pageHeightPts,
+        );
+      }
+      return widgetRectToPixels(widget, scaleX, scaleY);
+    },
+    [modifiedFields, pageIndex, scaleX, scaleY, pageHeightPts],
+  );
+
+  // A drawn-but-unapplied field is shown as a one-widget field so selection, dragging and the
+  // resize handles all work on it before it has a PDF name.
+  const pendingOnPage = useMemo(
+    () =>
+      pendingFields
+        .filter((f) => f.pageIndex === pageIndex)
+        .map((f): FormField => ({
+          name: pendingSelectionName(f.id),
+          label: f.label || f.name,
+          type: f.type,
+          value: f.defaultValue ?? "",
+          options: f.options ?? null,
+          displayOptions: null,
+          required: f.required ?? false,
+          readOnly: f.readOnly ?? false,
+          multiSelect: f.multiSelect ?? false,
+          multiline: f.multiline ?? false,
+          tooltip: f.tooltip ?? null,
+          widgets: [
+            {
+              pageIndex: f.pageIndex,
+              x: f.x,
+              y: f.y,
+              width: f.width,
+              height: f.height,
+            },
+          ],
+        })),
+    [pendingFields, pageIndex],
+  );
+
+  const fieldsOnPage = useMemo(
+    () => [
+      ...state.fields.filter((f) =>
+        f.widgets?.some((w) => w.pageIndex === pageIndex),
+      ),
+      ...pendingOnPage,
+    ],
+    [state.fields, pageIndex, pendingOnPage],
+  );
+
+  /** Pending geometry lives in the queue; committed geometry is staged as a modification. */
+  const commitGeometry = useCallback(
+    (
+      fieldName: string,
+      pdf: { x: number; y: number; width: number; height: number },
+    ) => {
+      const pendingId = pendingIdFrom(fieldName);
+      if (pendingId) {
+        updatePendingField(pendingId, { pageIndex, ...pdf });
+        return;
+      }
+      stageModification(fieldName, { pageIndex, ...pdf });
+    },
+    [pageIndex, stageModification, updatePendingField],
+  );
+
+  const selectedField = useMemo(
+    () => fieldsOnPage.find((f) => f.name === selectedFieldName) ?? null,
+    [fieldsOnPage, selectedFieldName],
+  );
+
+  const selectedSingleWidget =
+    !!selectedField && (selectedField.widgets?.length ?? 0) === 1;
+
+  const snapRects = useMemo<PixelRect[]>(() => {
+    const rects: PixelRect[] = [];
+    for (const f of fieldsOnPage) {
+      if (f.name === selectedFieldName) continue;
+      const r = fieldRect(f);
+      if (r) rects.push(r);
+    }
+    return rects;
+  }, [fieldsOnPage, selectedFieldName, fieldRect]);
+
+  // Precompute snap edges once (not on every pointermove).
+  const snapTargets = useMemo(() => collectSnapTargets(snapRects), [snapRects]);
+
+  const localPoint = useCallback(
+    (e: React.PointerEvent) => getLocalPoint(e, rootRef.current, rotation),
+    [rotation],
+  );
+
+  const beginInteraction = useCallback(
+    (
+      e: React.PointerEvent,
+      field: FormField,
+      kind: "move" | "resize",
+      handle?: HandleId,
+    ) => {
+      const rect = fieldRect(field);
+      if (!rect) return;
+      e.stopPropagation();
+      e.preventDefault();
+      rootRef.current?.setPointerCapture(e.pointerId);
+      dragActiveRef.current = true;
+      const p = localPoint(e);
+      interactionRef.current = {
+        kind,
+        handle,
+        fieldName: field.name,
+        startX: p.x,
+        startY: p.y,
+        startRect: rect,
+      };
+      setLiveRect(rect);
+    },
+    [fieldRect, localPoint],
+  );
+
+  const handlePointerMove = useCallback(
+    (e: React.PointerEvent) => {
+      const it = interactionRef.current;
+      if (!it) return;
+      const p = localPoint(e);
+      const dx = p.x - it.startX;
+      const dy = p.y - it.startY;
+      const targets = snapTargets;
+
+      if (it.kind === "move") {
+        let rect: PixelRect = {
+          ...it.startRect,
+          left: it.startRect.left + dx,
+          top: it.startRect.top + dy,
+        };
+        const snapped = snapMove(rect, targets, 6);
+        rect = { ...rect, left: snapped.left, top: snapped.top };
+        rect = clampPixelRect(rect, pageWidth, pageHeight);
+        setGuides(snapped.guides);
+        setLiveRect(rect);
+      } else if (it.kind === "resize" && it.handle) {
+        const edges = handleEdges(it.handle);
+        let { left, top, width, height } = it.startRect;
+        if (edges.left) {
+          left = it.startRect.left + dx;
+          width = it.startRect.width - dx;
+        }
+        if (edges.right) {
+          width = it.startRect.width + dx;
+        }
+        if (edges.top) {
+          top = it.startRect.top + dy;
+          height = it.startRect.height - dy;
+        }
+        if (edges.bottom) {
+          height = it.startRect.height + dy;
+        }
+        // Keep a positive minimum, anchoring the opposite edge.
+        if (width < MIN_PX) {
+          if (edges.left)
+            left = it.startRect.left + it.startRect.width - MIN_PX;
+          width = MIN_PX;
+        }
+        if (height < MIN_PX) {
+          if (edges.top) top = it.startRect.top + it.startRect.height - MIN_PX;
+          height = MIN_PX;
+        }
+        let rect: PixelRect = { left, top, width, height };
+        const snapped = snapResize(rect, edges, targets, 6);
+        rect = snapped.rect;
+        setGuides(snapped.guides);
+        setLiveRect(rect);
+      }
+    },
+    [localPoint, snapTargets, pageWidth, pageHeight],
+  );
+
+  // Scrolling this page out of view mid-gesture would otherwise strand the shared flag
+  // at true. Only the overlay that owns the drag may clear it, or an unrelated page
+  // scrolling away would release a live one.
+  useEffect(
+    () => () => {
+      if (interactionRef.current) dragActiveRef.current = false;
+    },
+    [dragActiveRef],
+  );
+
+  // A cancelled gesture (system swipe, focus loss) must not leave a half-applied drag behind.
+  const cancelInteraction = useCallback(
+    (e: React.PointerEvent) => {
+      interactionRef.current = null;
+      dragActiveRef.current = false;
+      setGuides([]);
+      setLiveRect(null);
+      try {
+        rootRef.current?.releasePointerCapture(e.pointerId);
+      } catch {
+        /* already released */
+      }
+    },
+    [setGuides, setLiveRect],
+  );
+
+  const endInteraction = useCallback(
+    (e: React.PointerEvent) => {
+      const it = interactionRef.current;
+      interactionRef.current = null;
+      dragActiveRef.current = false;
+      setGuides([]);
+      try {
+        rootRef.current?.releasePointerCapture(e.pointerId);
+      } catch {
+        /* already released */
+      }
+      const rect = liveRect;
+      setLiveRect(null);
+      if (!it || !rect) return;
+      // A plain click produces no movement; staging it would mark the field dirty.
+      const moved =
+        Math.abs(rect.left - it.startRect.left) > 0.5 ||
+        Math.abs(rect.top - it.startRect.top) > 0.5 ||
+        Math.abs(rect.width - it.startRect.width) > 0.5 ||
+        Math.abs(rect.height - it.startRect.height) > 0.5;
+      if (!moved) return;
+      const clamped = clampPixelRect(rect, pageWidth, pageHeight);
+      const pdf = roundPdfRect(
+        pixelsToBackendRect(clamped, scaleX, scaleY, pageHeightPts),
+      );
+      commitGeometry(it.fieldName, {
+        x: pdf.x,
+        y: pdf.y,
+        width: pdf.width,
+        height: pdf.height,
+      });
+    },
+    [
+      liveRect,
+      pageWidth,
+      pageHeight,
+      scaleX,
+      scaleY,
+      pageHeightPts,
+      pageIndex,
+      stageModification,
+    ],
+  );
+
+  // Arrow keys nudge the selected field; Escape cancels an in-progress drag.
+  // Every mounted overlay listens, but only the selection's page acts (fieldRect is null elsewhere).
+  useEffect(() => {
+    if (mode !== "modify" || !selectedField) return;
+    const onKey = (e: KeyboardEvent) => {
+      // Read only: every page's overlay runs this, so writing the shared flag here
+      // would let an idle page clear the flag of the page actually being dragged.
+      const dragging = interactionRef.current != null;
+      if (!dragging && isTextEntryTarget(e.target)) return;
+      if (e.key === "Escape") {
+        // Only release the shared flag if THIS overlay was the one dragging.
+        if (dragging) dragActiveRef.current = false;
+        interactionRef.current = null;
+        setLiveRect(null);
+        setGuides([]);
+        if (!dragging) setSelectedField(null);
+        return;
+      }
+      if (dragging) return;
+
+      if (
+        !selectedField ||
+        !selectedSingleWidget ||
+        deletedFieldNames.includes(selectedField.name)
+      ) {
+        return;
+      }
+      const step = e.shiftKey ? 10 : 1;
+      let dx = 0;
+      let dy = 0;
+      switch (e.key) {
+        case "ArrowLeft":
+          dx = -step;
+          break;
+        case "ArrowRight":
+          dx = step;
+          break;
+        case "ArrowUp":
+          dy = -step;
+          break;
+        case "ArrowDown":
+          dy = step;
+          break;
+        default:
+          return;
+      }
+      const base = fieldRect(selectedField);
+      if (!base) return; // selected field's widget isn't on this page
+      e.preventDefault();
+      const moved = clampPixelRect(
+        { ...base, left: base.left + dx, top: base.top + dy },
+        pageWidth,
+        pageHeight,
+      );
+      const pdf = roundPdfRect(
+        pixelsToBackendRect(moved, scaleX, scaleY, pageHeightPts),
+      );
+      commitGeometry(selectedField.name, {
+        x: pdf.x,
+        y: pdf.y,
+        width: pdf.width,
+        height: pdf.height,
+      });
+    };
+    window.addEventListener("keydown", onKey);
+    return () => window.removeEventListener("keydown", onKey);
+  }, [
+    mode,
+    setSelectedField,
+    selectedField,
+    selectedSingleWidget,
+    deletedFieldNames,
+    fieldRect,
+    pageWidth,
+    pageHeight,
+    scaleX,
+    scaleY,
+    pageHeightPts,
+    pageIndex,
+    stageModification,
+  ]);
+
+  const fileMismatch =
+    fileId != null && forFileId != null && fileId !== forFileId;
+  const creating = mode === "create";
+  if ((mode !== "modify" && !creating) || fileMismatch || !pageWidthPts) {
+    return null;
+  }
+
+  // Preview drops the chrome but still draws queued fields, plainly: they have no widget in the
+  // document yet, so hiding them outright would show everything except what is being added.
+  if (previewing) {
+    return (
+      <div
+        data-testid={`form-preview-overlay-${pageIndex}`}
+        style={{
+          position: "absolute",
+          inset: 0,
+          pointerEvents: "none",
+          zIndex: 5,
+        }}
+      >
+        {pendingOnPage.map((field) => {
+          const rect = fieldRect(field);
+          if (!rect) return null;
+          return (
+            <div
+              key={field.name}
+              data-testid={`form-preview-field-${pendingIdFrom(field.name)}`}
+              style={{
+                position: "absolute",
+                left: rect.left,
+                top: rect.top,
+                width: rect.width,
+                height: rect.height,
+                // A radio group has no box of its own; its buttons are the whole visual, so a
+                // frame around them is chrome the finished PDF will not have.
+                border:
+                  field.type === "radio"
+                    ? undefined
+                    : `1px solid ${FORM_COLORS.neutralBorder}`,
+                borderRadius: 2,
+                boxSizing: "border-box",
+              }}
+            >
+              {/* A preview of an empty rectangle is not a preview; draw what the field holds. */}
+              <PendingPreview field={field} rect={rect} />
+            </div>
+          );
+        })}
+      </div>
+    );
+  }
+
+  const selectedRect = selectedField
+    ? (liveRect ?? fieldRect(selectedField))
+    : null;
+
+  return (
+    <div
+      ref={rootRef}
+      data-testid={`form-edit-overlay-${pageIndex}`}
+      onPointerDown={(e) => {
+        // Clicking empty space deselects. preventDefault stops the underlying
+        // PDF text layer from starting a text selection.
+        e.preventDefault();
+        setSelectedField(null);
+      }}
+      onPointerMove={handlePointerMove}
+      onPointerUp={endInteraction}
+      onPointerCancel={cancelInteraction}
+      style={{
+        position: "absolute",
+        inset: 0,
+        // In create mode the bare page belongs to the drawing layer underneath, so only the
+        // boxes below take pointer events; the root would otherwise swallow every new drag.
+        pointerEvents: creating ? "none" : "auto",
+        // touch-action stays on the draggable boxes below, not here: claiming every
+        // gesture over the page would stop touch users panning the document at all.
+        userSelect: "none",
+        WebkitUserSelect: "none",
+        zIndex: creating ? 6 : 5,
+      }}
+    >
+      {fieldsOnPage.map((field) => {
+        const rect =
+          field.name === selectedFieldName && selectedRect
+            ? selectedRect
+            : fieldRect(field);
+        if (!rect) return null;
+        const isSelected = field.name === selectedFieldName;
+        const isDeleted = deletedFieldNames.includes(field.name);
+        return (
+          <div
+            key={field.name}
+            data-testid={`form-edit-field-${pendingIdFrom(field.name) ?? field.name}`}
+            onPointerDown={(e) => {
+              if (isDeleted) return;
+              e.stopPropagation();
+              // Select and start moving in one gesture; a click without movement
+              // just selects, since endInteraction ignores a zero delta.
+              if (field.name !== selectedFieldName)
+                setSelectedField(field.name);
+              // Moving is safe for a group too: the backend applies the delta to every widget
+              // on the anchor page. Only resizing is still single-widget, so the handles stay off.
+              beginInteraction(e, field, "move");
+            }}
+            style={{
+              position: "absolute",
+              left: rect.left,
+              top: rect.top,
+              width: rect.width,
+              height: rect.height,
+              // Outline, not border: a border indents the content box, which pushed the field
+              // preview inside it off by the border width and made the buttons overhang.
+              outline: isDeleted
+                ? `1.5px dashed ${FORM_COLORS.danger}`
+                : isSelected
+                  ? `2px solid ${FORM_COLORS.accent}`
+                  : `1.5px solid ${FORM_COLORS.neutralBorder}`,
+              outlineOffset: 0,
+              background: isDeleted
+                ? FORM_COLORS.dangerFill
+                : isSelected
+                  ? FORM_COLORS.accentFill
+                  : FORM_COLORS.neutralFill,
+              borderRadius: 2,
+              boxSizing: "border-box",
+              // Claim the gesture only where a drag can actually start, so touch users can
+              // still pan the page over boxes that are not draggable.
+              pointerEvents: "auto",
+              touchAction: isDeleted ? "auto" : "none",
+              cursor: isDeleted ? "not-allowed" : "move",
+              textDecoration: isDeleted ? "line-through" : undefined,
+            }}
+          >
+            {pendingIdFrom(field.name) && (
+              <PendingPreview field={field} rect={rect} />
+            )}
+            <span
+              style={{
+                position: "absolute",
+                top: -16,
+                left: 0,
+                fontSize: 10,
+                lineHeight: "14px",
+                padding: "0 4px",
+                background: isDeleted
+                  ? FORM_COLORS.danger
+                  : isSelected
+                    ? FORM_COLORS.accent
+                    : FORM_COLORS.neutralChip,
+                color: "#fff",
+                borderRadius: 2,
+                whiteSpace: "nowrap",
+                opacity: isSelected || isDeleted ? 1 : 0.75,
+                // The chip floats above its field, over blank page; it must never eat a
+                // press meant for the drawing surface underneath.
+                pointerEvents: "none",
+              }}
+            >
+              {field.label || field.name}
+            </span>
+          </div>
+        );
+      })}
+
+      {/* Resize handles for the selected single-widget field */}
+      {selectedRect &&
+        selectedSingleWidget &&
+        !deletedFieldNames.includes(selectedFieldName ?? "") &&
+        HANDLES.map((h) => {
+          const pos = handlePosition(h.id, selectedRect);
+          return (
+            <div
+              key={h.id}
+              data-testid={`form-edit-handle-${h.id}`}
+              onPointerDown={(e) =>
+                selectedField &&
+                beginInteraction(e, selectedField, "resize", h.id)
+              }
+              style={{
+                position: "absolute",
+                left: pos.x - HANDLE_SIZE / 2,
+                top: pos.y - HANDLE_SIZE / 2,
+                width: HANDLE_SIZE,
+                height: HANDLE_SIZE,
+                background: "#fff",
+                border: `1.5px solid ${FORM_COLORS.accent}`,
+                borderRadius: 2,
+                touchAction: "none",
+                cursor: h.cursor,
+                boxSizing: "border-box",
+                // The root is transparent while creating, so handles claim events themselves.
+                pointerEvents: "auto",
+              }}
+            />
+          );
+        })}
+
+      {/* Alignment guides */}
+      <SnapGuides guides={guides} />
+    </div>
+  );
+}
+
+export default FormFieldEditOverlay;
diff --git a/frontend/editor/src/core/tools/formFill/FormFieldModifyPanel.tsx b/frontend/editor/src/core/tools/formFill/FormFieldModifyPanel.tsx
new file mode 100644
index 0000000000..c35f24d7a7
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormFieldModifyPanel.tsx
@@ -0,0 +1,473 @@
+/** Left panel for "modify" mode; page highlighting lives in FormFieldEditOverlay. */
+import React, {
+  useCallback,
+  useEffect,
+  useMemo,
+  useRef,
+  useState,
+} from "react";
+import {
+  Text,
+  Group,
+  Alert,
+  Collapse,
+  Paper,
+  NumberInput,
+  ScrollArea,
+  Tooltip,
+} from "@mantine/core";
+import { Button } from "@app/ui/Button";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import { useTranslation } from "react-i18next";
+import DeleteOutlineIcon from "@mui/icons-material/DeleteOutlineRounded";
+import RestoreIcon from "@mui/icons-material/Restore";
+import MyLocationIcon from "@mui/icons-material/MyLocation";
+import ExpandMoreIcon from "@mui/icons-material/ExpandMore";
+import WarningAmberIcon from "@mui/icons-material/WarningAmber";
+import { useViewer } from "@app/contexts/ViewerContext";
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+import type {
+  FormField,
+  ModifyFieldDefinition,
+} from "@app/tools/formFill/types";
+import {
+  FIELD_TYPE_ICON,
+  FIELD_TYPE_COLOR,
+} from "@app/tools/formFill/fieldMeta";
+import {
+  FormFieldPropertyEditor,
+  type EditableFieldProps,
+} from "@app/tools/formFill/FormFieldPropertyEditor";
+import { isTextEntryTarget } from "@app/tools/formFill/usePageScale";
+import { SkippedEditsAlert } from "@app/tools/formFill/SkippedEditsAlert";
+import { useFormCommit } from "@app/tools/formFill/useFormCommit";
+import styles from "@app/tools/formFill/FormFill.module.css";
+
+interface FormFieldModifyPanelProps {
+  currentFile: File | Blob | null;
+  onApplied?: (blob: Blob) => void;
+}
+
+/** Current backend (lower-left origin) coords for a field's first widget. */
+function currentCoords(field: FormField, staged?: ModifyFieldDefinition) {
+  const w = field.widgets?.[0];
+  if (!w) return null;
+  if (
+    staged &&
+    staged.x != null &&
+    staged.y != null &&
+    staged.width != null &&
+    staged.height != null
+  ) {
+    return {
+      x: staged.x,
+      y: staged.y,
+      width: staged.width,
+      height: staged.height,
+    };
+  }
+  const cropH = w.cropBoxHeight ?? 0;
+  return {
+    x: w.x,
+    y: cropH ? cropH - w.y - w.height : w.y,
+    width: w.width,
+    height: w.height,
+  };
+}
+
+export function FormFieldModifyPanel({
+  currentFile,
+  onApplied,
+}: FormFieldModifyPanelProps) {
+  const { t } = useTranslation();
+  const {
+    state,
+    selectedFieldName,
+    setSelectedField,
+    modifiedFields,
+    stageModification,
+    deletedFieldNames,
+    toggleFieldDeleted,
+    commitModifications,
+    hasUncommittedChanges,
+    dragActiveRef,
+  } = useFormFill();
+
+  const { committing, error, commit } = useFormCommit(onApplied);
+  const selectedRowRef = useRef<HTMLDivElement>(null);
+
+  // A long form is easier to scan a page at a time; pages start open so nothing hides itself.
+  const [collapsedPages, setCollapsedPages] = useState<Set<number>>(new Set());
+  const togglePage = (pageIdx: number) =>
+    setCollapsedPages((prev) => {
+      const next = new Set(prev);
+      if (next.has(pageIdx)) next.delete(pageIdx);
+      else next.add(pageIdx);
+      return next;
+    });
+  const { scrollActions } = useViewer();
+
+  const { sortedPages, fieldsByPage } = useMemo(() => {
+    const byPage = new Map<number, FormField[]>();
+    for (const field of state.fields) {
+      const pageIndex = field.widgets?.[0]?.pageIndex ?? 0;
+      if (!byPage.has(pageIndex)) byPage.set(pageIndex, []);
+      byPage.get(pageIndex)!.push(field);
+    }
+    return {
+      sortedPages: Array.from(byPage.keys()).sort((a, b) => a - b),
+      fieldsByPage: byPage,
+    };
+  }, [state.fields]);
+
+  // Auto-scroll the list to the selected field (e.g. selected via the overlay).
+  useEffect(() => {
+    if (selectedFieldName && selectedRowRef.current) {
+      selectedRowRef.current.scrollIntoView({
+        behavior: "smooth",
+        block: "nearest",
+      });
+    }
+  }, [selectedFieldName]);
+
+  // Escape clears the selection. Lives here (single instance) so it still works
+  // when the selected field's page has scrolled out of view and unmounted.
+  useEffect(() => {
+    if (!selectedFieldName) return;
+    const onKey = (e: KeyboardEvent) => {
+      // A drag owns Escape (the overlay cancels it), and an input owns its own.
+      if (dragActiveRef.current || isTextEntryTarget(e.target)) return;
+      if (e.key === "Escape") setSelectedField(null);
+    };
+    window.addEventListener("keydown", onKey);
+    return () => window.removeEventListener("keydown", onKey);
+  }, [selectedFieldName, setSelectedField, dragActiveRef]);
+
+  const changeCount =
+    Object.keys(modifiedFields).length + deletedFieldNames.length;
+
+  const handleCommit = useCallback(() => {
+    if (!currentFile || !hasUncommittedChanges) return;
+    commit(
+      () => commitModifications(currentFile),
+      "formFill.modify.failed",
+      "Failed to save changes",
+    );
+  }, [currentFile, hasUncommittedChanges, commitModifications, commit]);
+
+  const editorValue = useCallback(
+    (field: FormField): EditableFieldProps => {
+      const staged = modifiedFields[field.name];
+      return {
+        name: staged?.name ?? field.name,
+        label: staged?.label ?? field.label,
+        type: staged?.type ?? field.type,
+        defaultValue: staged?.defaultValue ?? field.value,
+        tooltip: staged?.tooltip ?? field.tooltip ?? "",
+        fontSize: staged?.fontSize ?? field.widgets?.[0]?.fontSize,
+        required: staged?.required ?? field.required,
+        readOnly: staged?.readOnly ?? field.readOnly,
+        multiline: staged?.multiline ?? field.multiline,
+        multiSelect: staged?.multiSelect ?? field.multiSelect,
+        options: staged?.options ?? field.options ?? [],
+        // Test for the staged KEY, not its value, or an explicit clear reads as
+        // "unchanged" and the input snaps back.
+        maxLength:
+          staged && "maxLength" in staged
+            ? staged.maxLength
+            : (field.maxLength ?? undefined),
+        buttonAction:
+          staged && "buttonAction" in staged
+            ? staged.buttonAction
+            : (field.buttonActionSpec ?? undefined),
+      };
+    },
+    [modifiedFields],
+  );
+
+  return (
+    <div className={styles.root}>
+      <div className={styles.header}>
+        <Text size="xs" c="dimmed">
+          {t(
+            "formFill.modify.hint",
+            "Select a field to edit its properties, drag it on the page, or delete it.",
+          )}
+        </Text>
+
+        {error && (
+          <Alert
+            icon={<WarningAmberIcon sx={{ fontSize: 16 }} />}
+            color="red"
+            variant="light"
+            p="xs"
+            radius="sm"
+          >
+            <Text size="xs">{error}</Text>
+          </Alert>
+        )}
+
+        <SkippedEditsAlert />
+
+        {state.fields.length === 0 && !state.loading && (
+          <Text size="xs" c="dimmed" ta="center" py="md">
+            {t("formFill.modify.empty", "This PDF has no form fields yet.")}
+          </Text>
+        )}
+      </div>
+
+      <ScrollArea className={styles.fieldList}>
+        <div className={styles.fieldListInner}>
+          {sortedPages.map((pageIdx, i) => (
+            <React.Fragment key={pageIdx}>
+              <div
+                className={styles.pageDivider}
+                style={{
+                  ...(i === 0 ? { marginTop: 0 } : {}),
+                  cursor: "pointer",
+                  display: "flex",
+                  alignItems: "center",
+                  gap: 4,
+                }}
+                onClick={() => togglePage(pageIdx)}
+                data-testid={`form-page-header-${pageIdx}`}
+              >
+                <ExpandMoreIcon
+                  sx={{
+                    fontSize: 16,
+                    transform: collapsedPages.has(pageIdx)
+                      ? "rotate(-90deg)"
+                      : undefined,
+                    transition: "transform 120ms",
+                  }}
+                />
+                <Text className={styles.pageDividerLabel}>
+                  {t("formFill.page", "Page")} {pageIdx + 1}
+                </Text>
+                <Text size="xs" c="dimmed">
+                  {fieldsByPage.get(pageIdx)!.length}
+                </Text>
+                <Tooltip
+                  label={t("formFill.goToPage", "Go to this page")}
+                  withArrow
+                >
+                  <ActionIcon
+                    size="sm"
+                    variant="tertiary"
+                    aria-label={t("formFill.goToPage", "Go to this page")}
+                    data-testid={`form-page-goto-${pageIdx}`}
+                    onClick={(e) => {
+                      e.stopPropagation();
+                      scrollActions.scrollToPage(pageIdx + 1);
+                    }}
+                  >
+                    <MyLocationIcon sx={{ fontSize: 15 }} />
+                  </ActionIcon>
+                </Tooltip>
+              </div>
+
+              <Collapse in={!collapsedPages.has(pageIdx)}>
+                {fieldsByPage.get(pageIdx)!.map((field) => {
+                  const selected = selectedFieldName === field.name;
+                  const deleted = deletedFieldNames.includes(field.name);
+                  const coords = currentCoords(
+                    field,
+                    modifiedFields[field.name],
+                  );
+                  // Resizing a group here would only resize its first widget.
+                  const multiWidget = (field.widgets?.length ?? 0) > 1;
+                  return (
+                    <Paper
+                      key={field.name}
+                      ref={selected ? selectedRowRef : undefined}
+                      withBorder
+                      p={6}
+                      radius="sm"
+                      style={{
+                        cursor: "pointer",
+                        borderColor: selected
+                          ? "var(--mantine-color-blue-5)"
+                          : undefined,
+                        opacity: deleted ? 0.55 : 1,
+                      }}
+                      onClick={() =>
+                        setSelectedField(selected ? null : field.name)
+                      }
+                      data-testid={`form-modify-row-${field.name}`}
+                    >
+                      <Group gap={6} wrap="nowrap" justify="space-between">
+                        <Group gap={6} wrap="nowrap" style={{ minWidth: 0 }}>
+                          <span
+                            style={{
+                              color: `var(--mantine-color-${FIELD_TYPE_COLOR[field.type]}-6)`,
+                              display: "flex",
+                            }}
+                          >
+                            {FIELD_TYPE_ICON[field.type]}
+                          </span>
+                          <Text
+                            size="xs"
+                            truncate
+                            td={deleted ? "line-through" : undefined}
+                          >
+                            {field.label || field.name}
+                          </Text>
+                        </Group>
+                        <Tooltip
+                          label={
+                            deleted
+                              ? t("formFill.modify.restore", "Restore")
+                              : t("formFill.modify.delete", "Delete")
+                          }
+                          withArrow
+                        >
+                          <ActionIcon
+                            size="sm"
+                            variant="tertiary"
+                            accent={deleted ? "default" : "danger"}
+                            aria-label={
+                              deleted
+                                ? t("formFill.modify.restore", "Restore")
+                                : t("formFill.modify.delete", "Delete")
+                            }
+                            onClick={(e) => {
+                              e.stopPropagation();
+                              toggleFieldDeleted(field.name);
+                            }}
+                            data-testid={`form-modify-delete-${field.name}`}
+                          >
+                            {deleted ? (
+                              <RestoreIcon sx={{ fontSize: 16 }} />
+                            ) : (
+                              <DeleteOutlineIcon sx={{ fontSize: 16 }} />
+                            )}
+                          </ActionIcon>
+                        </Tooltip>
+                      </Group>
+
+                      {/* Children are built only while open: Collapse keeps them mounted, so
+                        every unopened row would otherwise carry a full property editor. */}
+                      <Collapse in={selected && !deleted}>
+                        {selected && !deleted && (
+                          <div
+                            style={{ marginTop: 8 }}
+                            onClick={(e) => e.stopPropagation()}
+                          >
+                            <FormFieldPropertyEditor
+                              value={editorValue(field)}
+                              onChange={(patch) =>
+                                stageModification(
+                                  field.name,
+                                  patch as Partial<ModifyFieldDefinition>,
+                                )
+                              }
+                              showName
+                              allowTypeChange
+                            />
+
+                            {coords && (
+                              <Group gap={6} mt="xs" grow>
+                                <NumberInput
+                                  size="xs"
+                                  label="X"
+                                  value={Math.round(coords.x)}
+                                  onChange={(v) =>
+                                    typeof v === "number" &&
+                                    stageModification(field.name, {
+                                      pageIndex: pageIdx,
+                                      x: v,
+                                      y: coords.y,
+                                      width: coords.width,
+                                      height: coords.height,
+                                    })
+                                  }
+                                />
+                                <NumberInput
+                                  size="xs"
+                                  label="Y"
+                                  value={Math.round(coords.y)}
+                                  onChange={(v) =>
+                                    typeof v === "number" &&
+                                    stageModification(field.name, {
+                                      pageIndex: pageIdx,
+                                      x: coords.x,
+                                      y: v,
+                                      width: coords.width,
+                                      height: coords.height,
+                                    })
+                                  }
+                                />
+                                <NumberInput
+                                  size="xs"
+                                  label="W"
+                                  value={Math.round(coords.width)}
+                                  min={1}
+                                  disabled={multiWidget}
+                                  description={
+                                    multiWidget
+                                      ? t(
+                                          "formFill.modify.groupSizeHint",
+                                          "Use Option size",
+                                        )
+                                      : undefined
+                                  }
+                                  onChange={(v) =>
+                                    typeof v === "number" &&
+                                    stageModification(field.name, {
+                                      pageIndex: pageIdx,
+                                      x: coords.x,
+                                      y: coords.y,
+                                      width: v,
+                                      height: coords.height,
+                                    })
+                                  }
+                                />
+                                <NumberInput
+                                  size="xs"
+                                  label="H"
+                                  value={Math.round(coords.height)}
+                                  min={1}
+                                  disabled={multiWidget}
+                                  onChange={(v) =>
+                                    typeof v === "number" &&
+                                    stageModification(field.name, {
+                                      pageIndex: pageIdx,
+                                      x: coords.x,
+                                      y: coords.y,
+                                      width: coords.width,
+                                      height: v,
+                                    })
+                                  }
+                                />
+                              </Group>
+                            )}
+                          </div>
+                        )}
+                      </Collapse>
+                    </Paper>
+                  );
+                })}
+              </Collapse>
+            </React.Fragment>
+          ))}
+        </div>
+      </ScrollArea>
+
+      <div className={styles.footer}>
+        <Button
+          size="sm"
+          onClick={handleCommit}
+          loading={committing}
+          disabled={!currentFile || !hasUncommittedChanges}
+          data-testid="form-modify-commit"
+        >
+          {t("formFill.modify.commit", "Save {{count}} change(s)", {
+            count: changeCount,
+          })}
+        </Button>
+      </div>
+    </div>
+  );
+}
+
+export default FormFieldModifyPanel;
diff --git a/frontend/editor/src/core/tools/formFill/FormFieldOverlay.tsx b/frontend/editor/src/core/tools/formFill/FormFieldOverlay.tsx
index db53794216..331180ad6f 100644
--- a/frontend/editor/src/core/tools/formFill/FormFieldOverlay.tsx
+++ b/frontend/editor/src/core/tools/formFill/FormFieldOverlay.tsx
@@ -175,6 +175,8 @@ interface WidgetInputProps {
   onFocus: (fieldName: string) => void;
   onChange: (fieldName: string, value: string) => void;
   onButtonClick: (field: FormField, action?: ButtonAction | null) => void;
+  /** True while the structural editor owns the page, so widgets show but do not respond. */
+  editing: boolean;
 }
 
 /**
@@ -192,6 +194,7 @@ function WidgetInputInner({
   onFocus,
   onChange,
   onButtonClick,
+  editing,
 }: WidgetInputProps) {
   // Per-field value subscription — only this widget re-renders when its value changes
   const value = useFieldValue(field.name);
@@ -231,7 +234,7 @@ function WidgetInputInner({
         ? `0 0 0 2px ${error ? "rgba(244, 67, 54, 0.25)" : "rgba(33, 150, 243, 0.25)"}`
         : "none",
     cursor: field.readOnly ? "default" : "text",
-    pointerEvents: "auto",
+    pointerEvents: editing ? "none" : "auto",
     display: "flex",
     alignItems: field.multiline ? "stretch" : "center",
   };
@@ -365,8 +368,10 @@ function WidgetInputInner({
             style={{
               width: "85%",
               height: "85%",
-              maxWidth: height * 0.9, // Prevent it from getting too wide in rectangular boxes
-              maxHeight: width * 0.9,
+              // Keep the tick square in a rectangular box; these were transposed, so a wide
+              // short box clamped the wrong axis and let the mark spill out.
+              maxWidth: width * 0.9,
+              maxHeight: height * 0.9,
               fontSize: `${Math.max(10, height * 0.75)}px`,
               lineHeight: 1,
               color: isChecked ? "#2196F3" : "transparent",
@@ -457,6 +462,8 @@ function WidgetInputInner({
       if (widgetIndex < 0) return null;
       const widgetIndexStr = String(widgetIndex);
       const isSelected = value === widgetIndexStr;
+      const optionLabel =
+        field.options?.[widgetIndex] ?? widget.exportValue ?? "";
       return (
         <div
           {...commonProps}
@@ -491,14 +498,35 @@ function WidgetInputInner({
               height: Math.min(width, height) * 0.8,
               borderRadius: "50%",
               border: `1.5px solid ${isSelected ? "#2196F3" : isActive ? "#2196F3" : "#999"}`,
+              // The border must sit inside the width, or the dot outgrows its widget.
+              boxSizing: "border-box",
               background: isSelected ? "#2196F3" : "transparent",
               display: "flex",
               alignItems: "center",
               justifyContent: "center",
               boxShadow: isSelected ? "inset 0 0 0 2px white" : "none",
               transition: "background 0.15s, border-color 0.15s",
+              flex: "0 0 auto",
             }}
           />
+          {optionLabel && (
+            // A PDF radio widget carries no caption of its own, so without this the options are
+            // indistinguishable circles. Drawn outside the rect so the hit area stays the widget.
+            <span
+              style={{
+                position: "absolute",
+                left: "100%",
+                marginLeft: 4,
+                whiteSpace: "nowrap",
+                fontSize: Math.max(9, Math.min(12, height * 0.9)),
+                lineHeight: `${height}px`,
+                color: "#333",
+                pointerEvents: "none",
+              }}
+            >
+              {optionLabel}
+            </span>
+          )}
         </div>
       );
     }
@@ -605,8 +633,17 @@ export function FormFieldOverlay({
   pageHeight,
   fileId,
 }: FormFieldOverlayProps) {
-  const { setValue, setActiveField, fieldsByPage, state, forFileId } =
-    useFormFill();
+  const {
+    setValue,
+    setActiveField,
+    effectiveFieldsByPage,
+    state,
+    forFileId,
+    mode,
+  } = useFormFill();
+  // While the editor owns the page the outlines and handles do the interacting; these widgets
+  // are here to show what the field looks like, not to be typed into.
+  const editing = mode !== "fill";
   const { activeFieldName, validationErrors } = state;
   const { printActions, scrollActions, exportActions } = useViewer();
 
@@ -647,8 +684,8 @@ export function FormFieldOverlay({
   }, [documentState, pageIndex, pageWidth, pageHeight]);
 
   const pageFields = useMemo(
-    () => fieldsByPage.get(pageIndex) || [],
-    [fieldsByPage, pageIndex],
+    () => effectiveFieldsByPage.get(pageIndex) || [],
+    [effectiveFieldsByPage, pageIndex],
   );
 
   const handleFocus = useCallback(
@@ -779,6 +816,7 @@ export function FormFieldOverlay({
                 onFocus={handleFocus}
                 onChange={handleChange}
                 onButtonClick={handleButtonClick}
+                editing={editing}
               />
             );
           }),
diff --git a/frontend/editor/src/core/tools/formFill/FormFieldPropertyEditor.tsx b/frontend/editor/src/core/tools/formFill/FormFieldPropertyEditor.tsx
new file mode 100644
index 0000000000..d6df2d4b43
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormFieldPropertyEditor.tsx
@@ -0,0 +1,556 @@
+/**
+ * Property form shared by the create and modify panels; reports edits as partial patches.
+ */
+import React from "react";
+import {
+  Stack,
+  TextInput,
+  NumberInput,
+  Select,
+  Switch,
+  Group,
+  Text,
+  Alert,
+  Tooltip,
+} from "@mantine/core";
+import { Button } from "@app/ui/Button";
+import { ActionIcon } from "@app/ui/ActionIcon";
+import { useTranslation } from "react-i18next";
+import AddIcon from "@mui/icons-material/Add";
+import DeleteOutlineIcon from "@mui/icons-material/DeleteOutlineRounded";
+import InfoOutlinedIcon from "@mui/icons-material/InfoOutlined";
+
+/** A switch's help has to wrap the control: Mantine does not surface a tooltip from its label. */
+function SwitchWithHelp({
+  help,
+  children,
+}: {
+  help: string;
+  children: React.ReactElement;
+}) {
+  return (
+    <Tooltip
+      label={help}
+      multiline
+      w={250}
+      withArrow
+      openDelay={250}
+      position="top-start"
+    >
+      {children}
+    </Tooltip>
+  );
+}
+
+/** Labels carry their own explanation on hover, so the panel stays uncluttered. */
+function LabelWithHelp({ text, help }: { text: string; help: string }) {
+  return (
+    <Tooltip
+      label={help}
+      multiline
+      w={250}
+      withArrow
+      openDelay={250}
+      position="top-start"
+    >
+      <span style={{ cursor: "help" }}>{text}</span>
+    </Tooltip>
+  );
+}
+
+export interface EditableFieldProps {
+  name?: string;
+  label?: string;
+  type: string;
+  defaultValue?: string;
+  tooltip?: string;
+  fontSize?: number;
+  optionGap?: number;
+  optionSize?: number;
+  required?: boolean;
+  readOnly?: boolean;
+  multiline?: boolean;
+  multiSelect?: boolean;
+  options?: string[];
+  maxLength?: number;
+  buttonAction?: string;
+}
+
+interface FormFieldPropertyEditorProps {
+  value: EditableFieldProps;
+  onChange: (patch: Partial<EditableFieldProps>) => void;
+  /** Show the field-name input (create mode). */
+  showName?: boolean;
+  /** Allow changing the field type (modify mode). */
+  allowTypeChange?: boolean;
+}
+
+const TYPE_LABEL: Record<string, string> = {
+  text: "Text",
+  checkbox: "Checkbox",
+  combobox: "Dropdown",
+  listbox: "List box",
+  radio: "Radio group",
+  button: "Button",
+  signature: "Signature",
+};
+
+// Type-change is only safe between the "simple" single-widget types; retyping
+// into radio/button/signature needs dedicated creation, so it's create-only.
+const TYPE_CHANGE_OPTIONS = ["text", "checkbox", "combobox", "listbox"];
+
+/** Split a stored buttonAction string into a kind + optional url. */
+function parseButtonAction(action: string | undefined): {
+  kind: string;
+  url: string;
+} {
+  if (!action) return { kind: "none", url: "" };
+  if (action === "reset") return { kind: "reset", url: "" };
+  if (action === "print") return { kind: "print", url: "" };
+  if (action.startsWith("uri:")) return { kind: "uri", url: action.slice(4) };
+  if (action.startsWith("submit:"))
+    return { kind: "submit", url: action.slice(7) };
+  return { kind: "none", url: "" };
+}
+
+function buildButtonAction(kind: string, url: string): string {
+  switch (kind) {
+    case "reset":
+      return "reset";
+    case "print":
+      return "print";
+    case "uri":
+      return `uri:${url}`;
+    case "submit":
+      return `submit:${url}`;
+    default:
+      return "";
+  }
+}
+
+export function FormFieldPropertyEditor({
+  value,
+  onChange,
+  showName = true,
+  allowTypeChange = false,
+}: FormFieldPropertyEditorProps) {
+  const { t } = useTranslation();
+  const hasOptions =
+    value.type === "combobox" ||
+    value.type === "listbox" ||
+    value.type === "radio";
+  const isVariableText =
+    value.type === "text" ||
+    value.type === "combobox" ||
+    value.type === "listbox";
+  const isText = value.type === "text";
+  const isButton = value.type === "button";
+  const isSignature = value.type === "signature";
+  const isFillable = !isButton && !isSignature;
+  const canRetype = TYPE_CHANGE_OPTIONS.includes(value.type);
+
+  const updateOption = (index: number, next: string) => {
+    const options = [...(value.options ?? [])];
+    options[index] = next;
+    onChange({ options });
+  };
+  const addOption = () => onChange({ options: [...(value.options ?? []), ""] });
+  const removeOption = (index: number) =>
+    onChange({ options: (value.options ?? []).filter((_, i) => i !== index) });
+
+  const action = parseButtonAction(value.buttonAction);
+
+  return (
+    <Stack gap="xs">
+      {isSignature && (
+        <Alert
+          color="blue"
+          variant="light"
+          p="xs"
+          radius="sm"
+          icon={<InfoOutlinedIcon sx={{ fontSize: 16 }} />}
+        >
+          <Text size="xs">
+            {t(
+              "formFill.editor.signatureNote",
+              "Placeholder only - you don't sign here. It marks where a signature belongs so a PDF signer (Adobe Acrobat, a signing service, etc.) places the signature in this spot when the document is signed.",
+            )}
+          </Text>
+        </Alert>
+      )}
+
+      {showName && (
+        <TextInput
+          size="xs"
+          label={
+            <LabelWithHelp
+              text={t("formFill.editor.name", "Field name")}
+              help={t(
+                "formFill.editor.nameHelp",
+                "The field's internal name. Used when exporting data or filling the form from another system, so keep it unique and free of spaces.",
+              )}
+            />
+          }
+          value={value.name ?? ""}
+          onChange={(e) => onChange({ name: e.currentTarget.value })}
+        />
+      )}
+
+      <TextInput
+        size="xs"
+        label={
+          <LabelWithHelp
+            text={
+              isButton
+                ? t("formFill.editor.caption", "Button caption")
+                : t("formFill.editor.label", "Label")
+            }
+            help={
+              isButton
+                ? t(
+                    "formFill.editor.captionHelp",
+                    "The text printed on the button face.",
+                  )
+                : t(
+                    "formFill.editor.labelHelp",
+                    "The wording shown to whoever fills the form. Leave it blank to fall back to the field name.",
+                  )
+            }
+          />
+        }
+        value={value.label ?? ""}
+        onChange={(e) => onChange({ label: e.currentTarget.value })}
+      />
+
+      {allowTypeChange && (
+        <Select
+          size="xs"
+          label={
+            <LabelWithHelp
+              text={t("formFill.editor.type", "Type")}
+              help={t(
+                "formFill.editor.typeHelp",
+                "What kind of field this is. Changing it rebuilds the field, so its current value is not carried over.",
+              )}
+            />
+          }
+          value={canRetype ? value.type : null}
+          data={TYPE_CHANGE_OPTIONS.map((tp) => ({
+            value: tp,
+            label: TYPE_LABEL[tp],
+          }))}
+          disabled={!canRetype}
+          placeholder={canRetype ? undefined : TYPE_LABEL[value.type]}
+          onChange={(v) => v && onChange({ type: v })}
+          comboboxProps={{ withinPortal: true }}
+        />
+      )}
+
+      {hasOptions && (
+        <Stack gap={4}>
+          <Text size="xs" fw={600}>
+            <LabelWithHelp
+              text={t("formFill.editor.options", "Options")}
+              help={t(
+                "formFill.editor.optionsHelp",
+                "The choices offered in the list. Each one is stored as typed, so keep them short and distinct.",
+              )}
+            />
+          </Text>
+          {(value.options ?? []).length === 0 && (
+            <Text size="xs" c="dimmed">
+              {t("formFill.editor.optionsEmpty", "Add at least one option.")}
+            </Text>
+          )}
+          {(value.options ?? []).map((opt, i) => (
+            <Group key={i} gap={4} wrap="nowrap">
+              <TextInput
+                size="xs"
+                style={{ flex: 1 }}
+                value={opt}
+                placeholder={t(
+                  "formFill.editor.optionPlaceholder",
+                  "Option {{n}}",
+                  {
+                    n: i + 1,
+                  },
+                )}
+                onChange={(e) => updateOption(i, e.currentTarget.value)}
+              />
+              <ActionIcon
+                size="sm"
+                variant="tertiary"
+                accent="danger"
+                aria-label={t("formFill.editor.removeOption", "Remove option")}
+                onClick={() => removeOption(i)}
+              >
+                <DeleteOutlineIcon sx={{ fontSize: 16 }} />
+              </ActionIcon>
+            </Group>
+          ))}
+          <Button
+            size="sm"
+            variant="tertiary"
+            leftSection={<AddIcon sx={{ fontSize: 14 }} />}
+            onClick={addOption}
+          >
+            {t("formFill.editor.addOption", "Add option")}
+          </Button>
+
+          {value.type === "radio" && (
+            // The group fits the drawn box by default; these are for tightening it by hand.
+            <Group grow gap={6} align="flex-start">
+              <NumberInput
+                size="xs"
+                label={
+                  <LabelWithHelp
+                    text={t("formFill.editor.optionSize", "Option size")}
+                    help={t(
+                      "formFill.editor.optionSizeHelp",
+                      "Width and height of each button, in points. Leave blank to fit them to the box you drew.",
+                    )}
+                  />
+                }
+                value={value.optionSize ?? ""}
+                min={1}
+                max={144}
+                data-testid="form-option-size"
+                onChange={(v) =>
+                  onChange({
+                    optionSize: typeof v === "number" ? v : undefined,
+                  })
+                }
+              />
+              <NumberInput
+                size="xs"
+                label={
+                  <LabelWithHelp
+                    text={t("formFill.editor.optionGap", "Option spacing")}
+                    help={t(
+                      "formFill.editor.optionGapHelp",
+                      "Gap between buttons, in points. Leave blank to spread them evenly down the box.",
+                    )}
+                  />
+                }
+                value={value.optionGap ?? ""}
+                min={0}
+                max={144}
+                data-testid="form-option-gap"
+                onChange={(v) =>
+                  onChange({ optionGap: typeof v === "number" ? v : undefined })
+                }
+              />
+            </Group>
+          )}
+        </Stack>
+      )}
+
+      {isFillable && (
+        <TextInput
+          size="xs"
+          label={
+            <LabelWithHelp
+              text={t("formFill.editor.defaultValue", "Default value")}
+              help={t(
+                "formFill.editor.defaultValueHelp",
+                "What the field contains before anyone fills it in. Leave blank for an empty field.",
+              )}
+            />
+          }
+          value={value.defaultValue ?? ""}
+          onChange={(e) => onChange({ defaultValue: e.currentTarget.value })}
+        />
+      )}
+
+      <TextInput
+        size="xs"
+        label={
+          <LabelWithHelp
+            text={t("formFill.editor.tooltip", "Tooltip")}
+            help={t(
+              "formFill.editor.tooltipHelp",
+              "The hint shown when someone hovers the field in a PDF reader.",
+            )}
+          />
+        }
+        value={value.tooltip ?? ""}
+        onChange={(e) => onChange({ tooltip: e.currentTarget.value })}
+      />
+
+      {isButton && (
+        <>
+          <Select
+            size="xs"
+            label={
+              <LabelWithHelp
+                text={t("formFill.editor.action", "Button action")}
+                help={t(
+                  "formFill.editor.actionHelp",
+                  "What the button does when clicked.",
+                )}
+              />
+            }
+            value={action.kind}
+            data={[
+              { value: "none", label: t("formFill.editor.actionNone", "None") },
+              {
+                value: "reset",
+                label: t("formFill.editor.actionReset", "Reset form"),
+              },
+              {
+                value: "print",
+                label: t("formFill.editor.actionPrint", "Print"),
+              },
+              {
+                value: "uri",
+                label: t("formFill.editor.actionUri", "Open URL"),
+              },
+              {
+                value: "submit",
+                label: t("formFill.editor.actionSubmit", "Submit to URL"),
+              },
+            ]}
+            onChange={(v) =>
+              onChange({
+                buttonAction: buildButtonAction(v ?? "none", action.url),
+              })
+            }
+            comboboxProps={{ withinPortal: true }}
+          />
+          {(action.kind === "uri" || action.kind === "submit") && (
+            <TextInput
+              size="xs"
+              label={
+                <LabelWithHelp
+                  text={t("formFill.editor.actionUrl", "URL")}
+                  help={t(
+                    "formFill.editor.actionUrlHelp",
+                    "The address the button opens or submits to.",
+                  )}
+                />
+              }
+              value={action.url}
+              onChange={(e) =>
+                onChange({
+                  buttonAction: buildButtonAction(
+                    action.kind,
+                    e.currentTarget.value,
+                  ),
+                })
+              }
+            />
+          )}
+        </>
+      )}
+
+      {isVariableText && (
+        <NumberInput
+          size="xs"
+          label={
+            <LabelWithHelp
+              text={t("formFill.editor.fontSize", "Font size")}
+              help={t(
+                "formFill.editor.fontSizeHelp",
+                "Text size inside the field. Leave blank to let the reader size it to fit.",
+              )}
+            />
+          }
+          value={value.fontSize ?? ""}
+          min={1}
+          max={144}
+          onChange={(v) =>
+            onChange({ fontSize: typeof v === "number" ? v : undefined })
+          }
+        />
+      )}
+
+      {isText && (
+        <>
+          <SwitchWithHelp
+            help={t(
+              "formFill.editor.multilineHelp",
+              "Allows more than one line of text and wraps at the field's edge.",
+            )}
+          >
+            <Switch
+              size="xs"
+              label={t("formFill.editor.multiline", "Multi-line")}
+              checked={!!value.multiline}
+              onChange={(e) => onChange({ multiline: e.currentTarget.checked })}
+            />
+          </SwitchWithHelp>
+          <NumberInput
+            size="xs"
+            label={
+              <LabelWithHelp
+                text={t("formFill.editor.maxLength", "Max length (comb)")}
+                help={t(
+                  "formFill.editor.maxLengthHelp",
+                  "Caps how many characters fit, drawn as evenly spaced boxes.",
+                )}
+              />
+            }
+            value={value.maxLength ? value.maxLength : ""}
+            min={0}
+            max={500}
+            onChange={(v) =>
+              // 0 is the clear signal; undefined would read as "unchanged" server-side.
+              onChange({ maxLength: typeof v === "number" ? v : 0 })
+            }
+          />
+        </>
+      )}
+
+      {value.type === "listbox" && (
+        <SwitchWithHelp
+          help={t(
+            "formFill.editor.multiSelectHelp",
+            "Lets more than one option be chosen at once.",
+          )}
+        >
+          <Switch
+            size="xs"
+            label={t("formFill.editor.multiSelect", "Allow multiple selection")}
+            checked={!!value.multiSelect}
+            onChange={(e) => onChange({ multiSelect: e.currentTarget.checked })}
+          />
+        </SwitchWithHelp>
+      )}
+
+      {isFillable && (
+        <SwitchWithHelp
+          help={t(
+            "formFill.editor.requiredHelp",
+            "The form cannot be submitted until this field is filled in.",
+          )}
+        >
+          <Switch
+            size="xs"
+            label={t("formFill.editor.required", "Required")}
+            checked={!!value.required}
+            onChange={(e) => onChange({ required: e.currentTarget.checked })}
+          />
+        </SwitchWithHelp>
+      )}
+
+      {/* Read-only belongs to an existing field; one being drawn has nothing to protect yet. */}
+      {isFillable && allowTypeChange && (
+        <SwitchWithHelp
+          help={t(
+            "formFill.editor.readOnlyHelp",
+            "Shows a value but stops anyone editing it.",
+          )}
+        >
+          <Switch
+            size="xs"
+            label={t("formFill.editor.readOnly", "Read-only")}
+            checked={!!value.readOnly}
+            onChange={(e) => onChange({ readOnly: e.currentTarget.checked })}
+          />
+        </SwitchWithHelp>
+      )}
+    </Stack>
+  );
+}
+
+export default FormFieldPropertyEditor;
diff --git a/frontend/editor/src/core/tools/formFill/FormFill.module.css b/frontend/editor/src/core/tools/formFill/FormFill.module.css
index edd19d0814..d13ea4b27c 100644
--- a/frontend/editor/src/core/tools/formFill/FormFill.module.css
+++ b/frontend/editor/src/core/tools/formFill/FormFill.module.css
@@ -1,57 +1,77 @@
+/* No height:100% / overflow here: the tool lives inside ToolPanel's ScrollArea, and
+   either one would make the sticky chrome below pin to a box that never scrolls. */
 .root {
-  height: 100%;
   display: flex;
   flex-direction: column;
-  overflow: hidden;
   background: transparent;
 }
 
+/* Sticky, not flex-pinned: the tool renders inside ToolPanel's ScrollArea, whose
+   display:table viewport makes height:100% resolve to content height. */
 .modeTabs {
-  flex-shrink: 0;
+  position: sticky;
+  top: 0;
+  z-index: 2;
   border-bottom: 1px solid var(--c-border, var(--mantine-color-default-border));
-  background: transparent;
+  background: var(--c-bg-raised, var(--mantine-color-body));
   padding: 0.25rem;
 }
 
-.segmentedRoot {
-  background: rgba(0, 0, 0, 0.05) !important;
-  border-radius: var(--radius-sm) !important;
-}
-
-:global([data-mantine-color-scheme="dark"]) .segmentedRoot {
-  background: rgba(255, 255, 255, 0.05) !important;
-}
-
-.segmentedIndicator {
-  background-color: var(--mantine-color-blue-filled) !important;
-  box-shadow: var(--shadow-sm) !important;
-  border-radius: var(--radius-sm) !important;
-}
-
+/* The shared SegmentedControl sizes its label box for one line and hides the overflow,
+   so the stacked icon-over-text tabs need that box opened up (see .modeTabs overrides). */
 .segmentedLabel {
   display: flex;
   flex-direction: column;
   align-items: center;
   justify-content: center;
-  gap: 0;
+  gap: 0.125rem;
   padding: 0.125rem 0;
-  min-height: 2.25rem;
+  min-width: 0;
+  width: 100%;
 }
 
+/* Equal-width segments that can shrink, so a long translation truncates inside its
+   own tab instead of pushing the others off the edge. */
+/* Mantine's size="xs" writes height:26px as an INLINE style, which would clip the
+   taller stacked tabs; only !important can outrank it. */
+.modeTabs :global(.sui-seg.mantine-SegmentedControl-root) {
+  height: auto !important;
+}
+
+.modeTabs :global(.mantine-SegmentedControl-control) {
+  flex: 1 1 0;
+  min-width: 0;
+  min-height: 2.75rem;
+}
+
+.modeTabs :global(.mantine-SegmentedControl-label) {
+  min-width: 0;
+  padding-left: 0.25rem;
+  padding-right: 0.25rem;
+}
+
+/* Colour inherited: the shared SegmentedControl flips the active segment's text,
+   so setting it here would leave the label unreadable on the accent fill. */
 .segmentedInnerLabel {
   font-size: 0.625rem;
   font-weight: 700;
   text-transform: uppercase;
   letter-spacing: 0.02em;
-  color: var(--c-text-subtle);
-  transition: color 0.15s ease;
+  color: inherit;
   line-height: 1;
+  /* Longer translations must ellipsise inside their segment; the control clips at
+     18px so they cannot wrap, and unconstrained they push the other tabs off. */
+  min-width: 0;
+  align-self: stretch;
+  text-align: center;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  white-space: nowrap;
 }
 
 .modeTabIcon {
   font-size: 1rem !important;
-  margin-bottom: 0.125rem;
-  opacity: 0.8;
+  flex-shrink: 0;
 }
 
 .header {
@@ -84,6 +104,20 @@
   gap: 0.5rem;
 }
 
+/* Pinned footer. Sticky for the same reason as .modeTabs, and opaque so the list
+   scrolls underneath it rather than showing through. */
+.footer {
+  position: sticky;
+  bottom: 0;
+  z-index: 2;
+  padding: 0.75rem 1rem;
+  background: var(--c-bg-raised, var(--mantine-color-body));
+  border-top: 1px solid var(--c-border, var(--mantine-color-default-border));
+  display: flex;
+  flex-direction: column;
+  gap: 0.625rem;
+}
+
 .primaryActions {
   display: flex;
   gap: 0.5rem;
@@ -108,7 +142,6 @@
 
 .fieldList {
   flex: 1;
-  overflow: hidden;
   background: transparent;
 }
 
diff --git a/frontend/editor/src/core/tools/formFill/FormFill.tsx b/frontend/editor/src/core/tools/formFill/FormFill.tsx
index 599d586319..8cd560b247 100644
--- a/frontend/editor/src/core/tools/formFill/FormFill.tsx
+++ b/frontend/editor/src/core/tools/formFill/FormFill.tsx
@@ -1,13 +1,5 @@
 /**
- * FormFill: The tool component that renders in the left ToolPanel
- * when the "Fill Form" tool is selected.
- *
- * Redesigned with:
- * - Mode tabs for future extensibility (Fill / Make / Batch / Modify)
- * - Clean visual hierarchy with proper spacing
- * - Shared FieldInput component (eliminates duplication)
- * - CSS module for theme-consistent styling
- * - Status bar at bottom for contextual info
+ * Form Editor tool panel: fill values, create new fields, or modify existing ones.
  */
 import React, {
   useEffect,
@@ -25,6 +17,8 @@ import {
   Progress,
   Tooltip,
 } from "@mantine/core";
+import { UnsavedChangesDialog } from "@app/components/shared/UnsavedChangesDialog";
+import { SegmentedControl } from "@app/ui/SegmentedControl";
 import { Button } from "@app/ui/Button";
 import { ActionIcon } from "@app/ui/ActionIcon";
 import { useTranslation } from "react-i18next";
@@ -34,8 +28,10 @@ import {
   useAllFormValues,
 } from "@app/tools/formFill/FormFillContext";
 import { useNavigation } from "@app/contexts/NavigationContext";
+import { useFieldShortcuts } from "@app/tools/formFill/useFieldShortcuts";
+import { serverMessage } from "@app/tools/formFill/useFormCommit";
 import { useViewer } from "@app/contexts/ViewerContext";
-import { useFileState } from "@app/contexts/FileContext";
+import { useAllFiles, useFileState } from "@app/contexts/FileContext";
 import { Skeleton } from "@mantine/core";
 import { isStirlingFile, getFormFillFileId } from "@app/types/fileContext";
 import type { BaseToolProps } from "@app/types/tool";
@@ -50,7 +46,6 @@ import RefreshIcon from "@mui/icons-material/Refresh";
 import WarningAmberIcon from "@mui/icons-material/WarningAmber";
 import EditNoteIcon from "@mui/icons-material/EditNote";
 import PostAddIcon from "@mui/icons-material/PostAdd";
-import FileCopyIcon from "@mui/icons-material/FileCopy";
 import BuildCircleIcon from "@mui/icons-material/BuildCircle";
 import DescriptionIcon from "@mui/icons-material/Description";
 import FileDownloadIcon from "@mui/icons-material/FileDownload";
@@ -58,73 +53,35 @@ import {
   extractFormFieldsCsv,
   extractFormFieldsXlsx,
 } from "@app/tools/formFill/formApi";
+import type { FormMode } from "@app/tools/formFill/types";
+import { FormFieldCreatePanel } from "@app/tools/formFill/FormFieldCreatePanel";
+import { FormFieldModifyPanel } from "@app/tools/formFill/FormFieldModifyPanel";
+import { dispatchFormApply } from "@app/tools/formFill/formFillEvents";
 import styles from "@app/tools/formFill/FormFill.module.css";
 
 // ---------------------------------------------------------------------------
 // Mode tabs — extensible for future form tools
 // ---------------------------------------------------------------------------
 
-type FormMode = "fill" | "make" | "batch" | "modify";
-
 interface ModeTabDef {
   id: FormMode;
   label: string;
   icon: React.ReactNode;
-  ready: boolean;
 }
 
-const _MODE_TABS: ModeTabDef[] = [
-  {
-    id: "fill",
-    label: "Fill",
-    icon: <EditNoteIcon className={styles.modeTabIcon} />,
-    ready: true,
-  },
-  {
-    id: "make",
-    label: "Create",
-    icon: <PostAddIcon className={styles.modeTabIcon} />,
-    ready: false,
-  },
-  {
-    id: "batch",
-    label: "Batch",
-    icon: <FileCopyIcon className={styles.modeTabIcon} />,
-    ready: false,
-  },
-  {
-    id: "modify",
-    label: "Modify",
-    icon: <BuildCircleIcon className={styles.modeTabIcon} />,
-    ready: false,
-  },
-];
-
-// ---------------------------------------------------------------------------
-// Coming-soon placeholder for unimplemented tabs
-// ---------------------------------------------------------------------------
-
-// ComingSoonPlaceholder — re-enable when mode tabs are exposed
-// function ComingSoonPlaceholder({ mode }: { mode: ModeTabDef }) {
-//   return (
-//     <div className={styles.comingSoon}>
-//       <DescriptionIcon className={styles.comingSoonIcon} />
-//       <div className={styles.comingSoonTitle}>{mode.label} Forms</div>
-//       <div className={styles.comingSoonDesc}>
-//         This feature is coming soon. Stay tuned!
-//       </div>
-//     </div>
-//   );
-// }
-
 // ---------------------------------------------------------------------------
 // Main FormFill component
 // ---------------------------------------------------------------------------
 
 const FormFill = (_props: BaseToolProps) => {
   const { t } = useTranslation();
-  const { selectedTool } = useNavigation();
-  const { selectors, state: fileState } = useFileState();
+  const {
+    selectedTool,
+    registerUnsavedChangesChecker,
+    unregisterUnsavedChangesChecker,
+    setHasUnsavedChanges,
+  } = useNavigation();
+  const { state: fileState } = useFileState();
 
   const {
     state: formState,
@@ -133,18 +90,43 @@ const FormFill = (_props: BaseToolProps) => {
     setValue,
     setActiveField,
     validateForm,
+    mode,
+    setMode,
+    hasUncommittedChanges,
+    forFileId,
+    commitNewFields,
+    commitModifications,
+    setCreationType,
+    setSelectedField,
+    setPreviewing,
   } = useFormFill();
 
+  const MODE_TABS: ModeTabDef[] = useMemo(
+    () => [
+      {
+        id: "fill",
+        label: t("formFill.mode.fill", "Fill"),
+        icon: <EditNoteIcon className={styles.modeTabIcon} />,
+      },
+      {
+        id: "create",
+        label: t("formFill.mode.create", "Create"),
+        icon: <PostAddIcon className={styles.modeTabIcon} />,
+      },
+      {
+        id: "modify",
+        label: t("formFill.mode.modify", "Modify"),
+        icon: <BuildCircleIcon className={styles.modeTabIcon} />,
+      },
+    ],
+    [t],
+  );
+
   const allValues = useAllFormValues();
   const { validationErrors } = formState;
 
   const { scrollActions } = useViewer();
 
-  // Mode system is temporarily restricted to 'fill' only.
-  // Other modes (make, batch, modify) are defined above but not yet exposed in the UI.
-  // When ready, uncomment the SegmentedControl and mode state below.
-  // const [mode, setMode] = useState<FormMode>('fill');
-  const mode: FormMode = "fill";
   const [flatten, setFlatten] = useState(false);
   const [saving, setSaving] = useState(false);
   const [extracting, setExtracting] = useState(false);
@@ -175,10 +157,51 @@ const FormFill = (_props: BaseToolProps) => {
     }
   }, [allValues]);
   const activeFieldRef = useRef<HTMLDivElement>(null);
+  useFieldShortcuts();
+
+  // A document with nothing to fill lands on Create: Fill would show an empty panel and leave
+  // the user hunting for the tab that does what they came for. Decided once per document, and
+  // only after the field list has settled - fields arrive a beat after the fetch reports done,
+  // so deciding immediately sends a form that does have fields to the wrong tab.
+  const autoModeFileRef = useRef<string | null>(null);
+  const fieldCountRef = useRef(0);
+  fieldCountRef.current = formState.fields.length;
+  const modeRef = useRef(mode);
+  modeRef.current = mode;
+  useEffect(() => {
+    if (formState.loading || !forFileId) return undefined;
+    if (autoModeFileRef.current === forFileId) return undefined;
+    const settle = window.setTimeout(() => {
+      autoModeFileRef.current = forFileId;
+      if (fieldCountRef.current === 0 && modeRef.current === "fill") {
+        setMode("create");
+      }
+    }, 300);
+    return () => window.clearTimeout(settle);
+  }, [formState.loading, formState.fields.length, forFileId, setMode]);
+
   const isDirtyRef = useRef(formState.isDirty);
   isDirtyRef.current = formState.isDirty;
 
-  const activeFiles = selectors.getFiles();
+  // Fields drawn or edited but never applied are lost on navigation, so the app's existing
+  // leave-warning needs to hear about them the way other tools report theirs.
+  const hasUncommittedRef = useRef(false);
+  hasUncommittedRef.current = hasUncommittedChanges;
+  useEffect(() => {
+    registerUnsavedChangesChecker(
+      () => hasUncommittedRef.current || isDirtyRef.current,
+    );
+    return () => unregisterUnsavedChangesChecker();
+  }, [registerUnsavedChangesChecker, unregisterUnsavedChangesChecker]);
+
+  // requestNavigation gates on this flag rather than on the checker above.
+  useEffect(() => {
+    setHasUnsavedChanges(hasUncommittedChanges || formState.isDirty);
+  }, [hasUncommittedChanges, formState.isDirty, setHasUnsavedChanges]);
+
+  // Subscribing read: getFiles() during render doesn't re-run when the workbench
+  // changes, so the panel kept showing the pre-hydration (or pre-version) file.
+  const { files: activeFiles } = useAllFiles();
   const selectedFileIds = fileState.ui.selectedFileIds;
   const currentFile = useMemo(() => {
     if (activeFiles.length === 0) return null;
@@ -231,6 +254,15 @@ const FormFill = (_props: BaseToolProps) => {
 
   const isActive = selectedTool === "formFill";
 
+  // Arming lives in an app-level provider, so leaving the tool would otherwise keep the page
+  // in crosshair mode and stage fields for whatever the user opened next.
+  useEffect(() => {
+    if (isActive) return;
+    setCreationType(null);
+    setSelectedField(null);
+    setPreviewing(false);
+  }, [isActive, setCreationType, setSelectedField, setPreviewing]);
+
   useEffect(() => {
     if (formState.activeFieldName && activeFieldRef.current) {
       activeFieldRef.current.scrollIntoView({
@@ -262,23 +294,20 @@ const FormFill = (_props: BaseToolProps) => {
       // Track the flatten value at save so toggling it later re-enables Save
       setLastSavedFlatten(flatten);
 
-      // Dispatch to the viewer's handleFormApply via custom event.
-      // This ensures the viewer tracks the new file ID, preserves
-      // scroll position and rotation — instead of our own consumeFiles
-      // call which would lose the viewer's file tracking context.
-      const event = new CustomEvent("formfill:apply", {
-        detail: { blob: filledBlob },
-      });
-      window.dispatchEvent(event);
+      // Route through the viewer's handleFormApply: a direct consumeFiles call
+      // loses the viewer's file tracking, and with it scroll position and rotation.
+      dispatchFormApply(filledBlob);
     } catch (err) {
       const status = isAxiosError(err) ? err.response?.status : undefined;
       const message =
         status === 413
           ? "File too large. Try reducing the PDF size first."
-          : status === 400
-            ? "Invalid form data. Please check all fields."
-            : (err instanceof Error ? err.message : undefined) ||
-              "Failed to save filled form";
+          : (await serverMessage(err)) ||
+            (status === 400
+              ? "Invalid form data. Please check all fields."
+              : undefined) ||
+            (err instanceof Error ? err.message : undefined) ||
+            "Failed to save filled form";
       setSaveError(message);
       console.error("[FormFill] Save failed:", err);
     } finally {
@@ -287,6 +316,64 @@ const FormFill = (_props: BaseToolProps) => {
     }
   }, [currentFile, submitForm, flatten, validateForm]);
 
+  const applyCurrentMode = useCallback(async () => {
+    if (!currentFile) return;
+    if (mode === "create") {
+      dispatchFormApply(await commitNewFields(currentFile));
+      return;
+    }
+    if (mode === "modify") {
+      dispatchFormApply(await commitModifications(currentFile));
+      return;
+    }
+    await handleSave();
+  }, [mode, currentFile, commitNewFields, commitModifications, handleSave]);
+
+  // Switching tabs throws away that tab's working state, so it asks first. Owned here rather
+  // than through the app-wide warning handlers, which hold a single registration app-wide.
+  const [pendingMode, setPendingMode] = useState<FormMode | null>(null);
+  const [switching, setSwitching] = useState(false);
+
+  const requestMode = useCallback(
+    (next: FormMode) => {
+      if (next === mode) return;
+      if (hasUncommittedChanges) {
+        setPendingMode(next);
+        return;
+      }
+      setMode(next);
+    },
+    [mode, hasUncommittedChanges, setMode],
+  );
+
+  const discardAndSwitch = useCallback(() => {
+    const next = pendingMode;
+    setPendingMode(null);
+    if (next) setMode(next);
+  }, [pendingMode, setMode]);
+
+  const applyAndSwitch = useCallback(async () => {
+    const next = pendingMode;
+    setSwitching(true);
+    try {
+      await applyCurrentMode();
+      setPendingMode(null);
+      if (next) setMode(next);
+    } catch (err) {
+      // Swallowing this left the dialog open with no explanation when the backend refused a
+      // name, so the reason it gives has to reach the user.
+      setSaveError(
+        (await serverMessage(err)) ||
+          (err instanceof Error ? err.message : null) ||
+          t("formFill.applyFailed", "Could not apply the changes"),
+      );
+      setPendingMode(null);
+      console.error("[FormFill] Could not apply before switching tabs:", err);
+    } finally {
+      setSwitching(false);
+    }
+  }, [pendingMode, applyCurrentMode, setMode, t]);
+
   // Keyboard shortcut: Ctrl+S to save
   const flattenChangedRef = useRef(flattenChanged);
   flattenChangedRef.current = flattenChanged;
@@ -389,35 +476,44 @@ const FormFill = (_props: BaseToolProps) => {
 
   return (
     <div className={styles.root}>
-      {/* ---- Mode selection (commented out until additional modes are implemented) ----
+      <UnsavedChangesDialog
+        opened={pendingMode !== null}
+        saving={switching}
+        onKeepWorking={() => setPendingMode(null)}
+        onDiscard={discardAndSwitch}
+        onSave={applyAndSwitch}
+      />
+
+      {/* ---- Mode selection ---- */}
       <div className={styles.modeTabs}>
         <SegmentedControl
           value={mode}
-          onChange={(val) => setMode(val as FormMode)}
-          data={MODE_TABS.map((tab) => ({
+          onChange={(val) => requestMode(val as FormMode)}
+          options={MODE_TABS.map((tab) => ({
             value: tab.id,
             label: (
-              <div className={styles.segmentedLabel}>
+              // title carries the full label for locales where it has to ellipsise.
+              <div className={styles.segmentedLabel} title={tab.label}>
                 {tab.icon}
-                <span>{tab.label}</span>
+                <span className={styles.segmentedInnerLabel}>{tab.label}</span>
               </div>
             ),
           }))}
           fullWidth
-          radius="xs"
           size="xs"
-          classNames={{
-            root: styles.segmentedRoot,
-            indicator: styles.segmentedIndicator,
-            control: styles.segmentedControl,
-            label: styles.segmentedInnerLabel,
-          }}
+          ariaLabel={t("formFill.mode.label", "Form editor mode")}
         />
       </div>
-      ---- */}
 
-      {/* ---- Coming-soon for non-ready tabs (hidden while mode tabs are disabled) ---- */}
-      {/* !currentModeDef.ready && <ComingSoonPlaceholder mode={currentModeDef} /> */}
+      {/* ---- Create mode ---- */}
+      {mode === "create" && (
+        <FormFieldCreatePanel currentFile={currentFile as File | Blob | null} />
+      )}
+
+      {/* ---- Modify mode ---- */}
+      {mode === "modify" && (
+        <FormFieldModifyPanel currentFile={currentFile as File | Blob | null} />
+      )}
 
       {/* ---- Fill Form content ---- */}
       {mode === "fill" && (
diff --git a/frontend/editor/src/core/tools/formFill/FormFillContext.test.tsx b/frontend/editor/src/core/tools/formFill/FormFillContext.test.tsx
new file mode 100644
index 0000000000..8e523a939e
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/FormFillContext.test.tsx
@@ -0,0 +1,340 @@
+/**
+ * Staged edits are keyed to the file they were made against, and a commit's skip
+ * report must survive the re-fetch that the commit itself triggers.
+ */
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import { renderHook, act, waitFor } from "@testing-library/react";
+import React from "react";
+import {
+  FormFillProvider,
+  useFormFill,
+} from "@app/tools/formFill/FormFillContext";
+import type { FieldEditResult } from "@app/tools/formFill/types";
+
+const applyFieldEdits = vi.fn();
+const fetchFields = vi.fn();
+
+vi.mock("@app/tools/formFill/formApi", () => ({
+  applyFieldEdits: (...args: unknown[]) => applyFieldEdits(...args),
+}));
+// Defined inside each factory: vi.mock is hoisted above any module-level binding.
+vi.mock("@app/tools/formFill/providers/PdfBoxFormProvider", () => ({
+  PdfBoxFormProvider: class {
+    fetchFields(...args: unknown[]) {
+      return fetchFields(...args);
+    }
+    fillForm() {
+      return Promise.resolve(new Blob());
+    }
+  },
+}));
+vi.mock("@app/tools/formFill/providers/PdfiumFormProvider", () => ({
+  PdfiumFormProvider: class {
+    fetchFields(...args: unknown[]) {
+      return fetchFields(...args);
+    }
+    fillForm() {
+      return Promise.resolve(new Blob());
+    }
+  },
+}));
+vi.mock("@app/services/pdfiumService", () => ({
+  fetchSignatureFieldsWithAppearances: vi.fn().mockResolvedValue([]),
+}));
+
+const wrapper = ({ children }: { children: React.ReactNode }) => (
+  <FormFillProvider>{children}</FormFillProvider>
+);
+
+const blob = () => new Blob(["%PDF-1.4"], { type: "application/pdf" });
+
+function result(skipped: FieldEditResult["skipped"]): FieldEditResult {
+  return { blob: blob(), skipped, skippedTotal: skipped.length };
+}
+
+describe("FormFillContext staged-edit ownership", () => {
+  beforeEach(() => {
+    applyFieldEdits.mockReset();
+    fetchFields.mockReset();
+    fetchFields.mockResolvedValue([]);
+  });
+
+  it("keeps the skip report across the re-fetch a commit triggers", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.stageModification("f", { x: 1 }));
+
+    applyFieldEdits.mockResolvedValue(
+      result([
+        {
+          operation: "delete",
+          target: "ghost",
+          reason: "no field with that name exists",
+        },
+      ]),
+    );
+    await act(async () => {
+      await hook.current.commitModifications(blob());
+    });
+    expect(hook.current.skippedEdits).toHaveLength(1);
+
+    // Committing produces a NEW workbench file, so the viewer re-fetches under a new id.
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A-edited");
+    });
+
+    await waitFor(() => expect(hook.current.skippedEdits).toHaveLength(1));
+  });
+
+  it("drops edits staged against a different file", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.stageModification("f", { x: 1 }));
+    expect(hook.current.hasUncommittedChanges).toBe(true);
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-B");
+    });
+
+    await waitFor(() => expect(hook.current.hasUncommittedChanges).toBe(false));
+  });
+
+  it("drops them even when the new file's fetch fails", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.stageModification("f", { x: 1 }));
+
+    fetchFields.mockRejectedValueOnce(new Error("corrupt PDF"));
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-B");
+    });
+
+    await waitFor(() => expect(hook.current.hasUncommittedChanges).toBe(false));
+  });
+
+  it("keeps edits across a re-fetch of the same file", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.stageModification("f", { x: 1 }));
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+
+    expect(hook.current.hasUncommittedChanges).toBe(true);
+  });
+
+  it("drops the skip report once an unrelated document is opened", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.stageModification("f", { x: 1 }));
+
+    applyFieldEdits.mockResolvedValue(
+      result([
+        {
+          operation: "delete",
+          target: "ghost",
+          reason: "no field with that name exists",
+        },
+      ]),
+    );
+    await act(async () => {
+      await hook.current.commitModifications(blob());
+    });
+
+    // The commit's own re-fetch keeps the report...
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A-edited");
+    });
+    expect(hook.current.skippedEdits).toHaveLength(1);
+
+    // ...but opening a different document must not carry it over.
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-B-unrelated");
+    });
+    await waitFor(() => expect(hook.current.skippedEdits).toHaveLength(0));
+    expect(hook.current.skippedTotal).toBe(0);
+  });
+});
+
+describe("FormFillContext bundled field list", () => {
+  beforeEach(() => {
+    applyFieldEdits.mockReset();
+    fetchFields.mockReset();
+    fetchFields.mockResolvedValue([]);
+  });
+
+  const bundled = [
+    { name: "bundled", type: "text", widgets: [{ pageIndex: 0, x: 1, y: 2 }] },
+  ] as unknown as FieldEditResult["fields"];
+
+  async function commitWith(
+    hook: { current: ReturnType<typeof useFormFill> },
+    edited: Blob,
+    fields: FieldEditResult["fields"],
+  ) {
+    // The viewer switches to pdfbox whenever the form tool is open, which is when commits happen.
+    act(() => hook.current.setProviderMode("pdfbox"));
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.stageModification("f", { x: 1 }));
+    applyFieldEdits.mockResolvedValue({
+      blob: edited,
+      skipped: [],
+      skippedTotal: 0,
+      fields,
+    });
+    await act(async () => {
+      await hook.current.commitModifications(blob());
+    });
+  }
+
+  it("skips the follow-up request when the commit already returned the fields", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    const edited = blob();
+    await commitWith(hook, edited, bundled);
+    const callsBefore = fetchFields.mock.calls.length;
+
+    await act(async () => {
+      await hook.current.fetchFields(edited, "file-A-edited");
+    });
+
+    // The whole point: no second upload for the post-commit fetch.
+    expect(fetchFields.mock.calls).toHaveLength(callsBefore);
+    await waitFor(() =>
+      expect(hook.current.state.fields.map((f) => f.name)).toEqual(["bundled"]),
+    );
+  });
+
+  it("still asks the backend when the commit returned no fields", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    const edited = blob();
+    await commitWith(hook, edited, undefined);
+    const callsBefore = fetchFields.mock.calls.length;
+
+    await act(async () => {
+      await hook.current.fetchFields(edited, "file-A-edited");
+    });
+
+    expect(fetchFields.mock.calls.length).toBe(callsBefore + 1);
+  });
+
+  it("ignores a bundle whose size does not match the file being fetched", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    await commitWith(hook, blob(), bundled);
+    const callsBefore = fetchFields.mock.calls.length;
+
+    // A different document must never adopt the previous commit's field list.
+    await act(async () => {
+      await hook.current.fetchFields(
+        new Blob(["%PDF-1.4 a longer unrelated document"]),
+        "file-B",
+      );
+    });
+
+    expect(fetchFields.mock.calls.length).toBe(callsBefore + 1);
+  });
+
+  it("does not reuse the bundle for a second fetch", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    const edited = blob();
+    await commitWith(hook, edited, bundled);
+
+    await act(async () => {
+      await hook.current.fetchFields(edited, "file-A-edited");
+    });
+    const afterFirst = fetchFields.mock.calls.length;
+    await act(async () => {
+      await hook.current.fetchFields(edited, "file-A-edited");
+    });
+
+    expect(fetchFields.mock.calls.length).toBe(afterFirst + 1);
+  });
+});
+
+describe("FormFillContext value retention", () => {
+  beforeEach(() => {
+    applyFieldEdits.mockReset();
+    fetchFields.mockReset();
+    fetchFields.mockResolvedValue([
+      { name: "who", type: "text", value: "", widgets: [{ pageIndex: 0 }] },
+    ]);
+  });
+
+  it("keeps what the user typed when the same file is re-fetched", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.setValue("who", "Ada"));
+    expect(hook.current.getValue("who")).toBe("Ada");
+
+    // Opening the form tool switches provider, which re-fetches the very same document.
+    act(() => hook.current.setProviderMode("pdfbox"));
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+
+    expect(hook.current.getValue("who")).toBe("Ada");
+  });
+
+  it("drops retained values when a different document is opened", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.setValue("who", "Ada"));
+
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-B");
+    });
+
+    expect(hook.current.getValue("who")).toBe("");
+  });
+
+  it("does not report unsaved changes when nothing was typed", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+
+    act(() => hook.current.setProviderMode("pdfbox"));
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+
+    // A sticky dirty flag makes the leave-page warning fire on every navigation.
+    expect(hook.current.state.isDirty).toBe(false);
+  });
+
+  it("still reports unsaved changes when something was typed", async () => {
+    const { result: hook } = renderHook(() => useFormFill(), { wrapper });
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+    act(() => hook.current.setValue("who", "Ada"));
+
+    act(() => hook.current.setProviderMode("pdfbox"));
+    await act(async () => {
+      await hook.current.fetchFields(blob(), "file-A");
+    });
+
+    expect(hook.current.state.isDirty).toBe(true);
+  });
+});
diff --git a/frontend/editor/src/core/tools/formFill/FormFillContext.tsx b/frontend/editor/src/core/tools/formFill/FormFillContext.tsx
index 4377984111..97fde82901 100644
--- a/frontend/editor/src/core/tools/formFill/FormFillContext.tsx
+++ b/frontend/editor/src/core/tools/formFill/FormFillContext.tsx
@@ -31,15 +31,32 @@ import React, {
 } from "react";
 import { useDebouncedCallback } from "@mantine/hooks";
 import { isAxiosError } from "axios";
+import { applyStagedGeometry } from "@app/tools/formFill/formCoordinateUtils";
 import type {
   FormField,
   FormFillState,
   WidgetCoordinates,
+  FormMode,
+  CreatableFieldType,
+  NewFieldDefinition,
+  ModifyFieldDefinition,
+  SkippedFieldEdit,
 } from "@app/tools/formFill/types";
+import { pendingIdFrom } from "@app/tools/formFill/pendingSelection";
 import type { IFormDataProvider } from "@app/tools/formFill/providers/types";
 import { PdfBoxFormProvider } from "@app/tools/formFill/providers/PdfBoxFormProvider";
 import { PdfiumFormProvider } from "@app/tools/formFill/providers/PdfiumFormProvider";
 import { fetchSignatureFieldsWithAppearances } from "@app/services/pdfiumService";
+import { applyFieldEdits } from "@app/tools/formFill/formApi";
+import { mergeSignatureAppearances } from "@app/tools/formFill/formFieldMerge";
+
+/** Marks a skip report as belonging to whichever document the commit just produced. */
+const PENDING_SKIP_REPORT = "__pending__";
+
+/** A field queued for creation, with a client-side id for list keys. */
+export interface PendingField extends NewFieldDefinition {
+  id: string;
+}
 
 // ---------------------------------------------------------------------------
 // FormValuesStore — external store for field values (outside React state)
@@ -158,8 +175,20 @@ function reducer(state: FormFillState, action: Action): FormFillState {
       return { ...state, isDirty: true };
     case "SET_ACTIVE_FIELD":
       return { ...state, activeFieldName: action.fieldName };
-    case "SET_VALIDATION_ERRORS":
-      return { ...state, validationErrors: action.errors };
+    case "SET_VALIDATION_ERRORS": {
+      // The debounce mints a fresh identical map ~3x/s while typing; without this every
+      // keystroke re-renders every consumer and every mounted page overlay.
+      const prev = state.validationErrors;
+      const next = action.errors;
+      const keys = Object.keys(next);
+      if (
+        keys.length === Object.keys(prev).length &&
+        keys.every((k) => prev[k] === next[k])
+      ) {
+        return state;
+      }
+      return { ...state, validationErrors: next };
+    }
     case "CLEAR_VALIDATION_ERROR": {
       if (!state.validationErrors[action.fieldName]) return state;
       const { [action.fieldName]: _, ...rest } = state.validationErrors;
@@ -196,6 +225,8 @@ export interface FormFillContextValue {
   reset: () => void;
   /** Pre-computed map of page index to fields for performance */
   fieldsByPage: Map<number, FormField[]>;
+  /** fieldsByPage with staged moves, resizes, retypes and deletions already applied. */
+  effectiveFieldsByPage: Map<number, FormField[]>;
   /** Name of the currently active provider ('pdf-lib' | 'pdfbox') */
   activeProviderName: string;
   /**
@@ -206,6 +237,69 @@ export interface FormFillContextValue {
   setProviderMode: (mode: "pdflib" | "pdfbox") => void;
   /** The file ID that the current form fields belong to (null if no fields loaded) */
   forFileId: string | null;
+
+  // --- Structural editing (create / modify modes) ---
+
+  /** Current tool mode. */
+  mode: FormMode;
+  /** Switch mode. Switching clears the other mode's uncommitted working state. */
+  setMode: (mode: FormMode) => void;
+
+  // --- Create mode ---
+  /** Field type currently armed for placement (null = not placing). */
+  creationType: CreatableFieldType | null;
+  /** Steps back one staged edit; false when there was nothing left to undo. */
+  undo: () => boolean;
+  canUndo: boolean;
+  /** True while the user holds Preview, which hides the editing chrome. */
+  previewing: boolean;
+  setPreviewing: (previewing: boolean) => void;
+  setCreationType: (type: CreatableFieldType | null) => void;
+  /** Fields drawn but not yet committed to the PDF. */
+  pendingFields: PendingField[];
+  /** Queue a new field (id + default name auto-assigned). Returns the new id. */
+  addPendingField: (
+    field: Omit<NewFieldDefinition, "name"> & { name?: string },
+  ) => string;
+  updatePendingField: (id: string, patch: Partial<NewFieldDefinition>) => void;
+  removePendingField: (id: string) => void;
+  clearPendingFields: () => void;
+  /** POST queued fields to the backend; resolves to the updated PDF blob. */
+  commitNewFields: (file: File | Blob) => Promise<Blob>;
+
+  // --- Modify mode ---
+  /** Field currently selected for editing in modify mode. */
+  selectedFieldName: string | null;
+  setSelectedField: (name: string | null) => void;
+  /** Staged (uncommitted) property/geometry changes, keyed by original field name. */
+  modifiedFields: Record<string, ModifyFieldDefinition>;
+  /** Merge a partial change for a field into the staged set. */
+  stageModification: (
+    targetName: string,
+    patch: Partial<ModifyFieldDefinition>,
+  ) => void;
+  /** Discard staged changes for a single field. */
+  clearModification: (targetName: string) => void;
+  /** Field names marked for deletion. */
+  deletedFieldNames: string[];
+  /** Toggle a field's deletion mark. */
+  toggleFieldDeleted: (name: string) => void;
+  /** Discard all staged modifications and deletions. */
+  clearModifications: () => void;
+  /** POST staged modifications + deletions; resolves to the updated PDF blob. */
+  commitModifications: (file: File | Blob) => Promise<Blob>;
+
+  /** True when create or modify mode has uncommitted work. */
+  hasUncommittedChanges: boolean;
+
+  /** Edits the last commit asked for but the document could not take. */
+  skippedEdits: SkippedFieldEdit[];
+  /** May exceed skippedEdits.length when the report was truncated. */
+  skippedTotal: number;
+  clearSkippedEdits: () => void;
+
+  /** True while a field is being dragged, so Escape handlers elsewhere stand down. */
+  dragActiveRef: React.MutableRefObject<boolean>;
 }
 
 const FormFillContext = createContext<FormFillContextValue | null>(null);
@@ -307,6 +401,112 @@ export function FormFillProvider({
   // This prevents full context re-renders on every keystroke.
   const [valuesStore] = useState(() => new FormValuesStore());
 
+  // --- Structural editing state (create / modify modes) ---
+  const [mode, setModeState] = useState<FormMode>("fill");
+  const [creationType, setCreationType] = useState<CreatableFieldType | null>(
+    null,
+  );
+  const [pendingFields, setPendingFields] = useState<PendingField[]>([]);
+  const [previewing, setPreviewing] = useState(false);
+
+  // Undo covers the staged edits, which is what the user has been doing here; the applied
+  // document keeps its own version history elsewhere.
+  const undoStackRef = useRef<
+    {
+      pending: PendingField[];
+      modified: Record<string, ModifyFieldDefinition>;
+      deleted: string[];
+    }[]
+  >([]);
+  const [canUndo, setCanUndo] = useState(false);
+  const liveEditsRef = useRef({
+    pending: [] as PendingField[],
+    modified: {} as Record<string, ModifyFieldDefinition>,
+    deleted: [] as string[],
+  });
+
+  const rememberForUndo = useCallback(() => {
+    const live = liveEditsRef.current;
+    undoStackRef.current.push({
+      pending: [...live.pending],
+      modified: { ...live.modified },
+      deleted: [...live.deleted],
+    });
+    // A long session should not grow without bound.
+    if (undoStackRef.current.length > 50) undoStackRef.current.shift();
+    setCanUndo(true);
+  }, []);
+
+  const undo = useCallback(() => {
+    const previous = undoStackRef.current.pop();
+    setCanUndo(undoStackRef.current.length > 0);
+    if (!previous) return false;
+    setPendingFields(previous.pending);
+    setModifiedFields(previous.modified);
+    setDeletedFieldNames(previous.deleted);
+    // A selection pointing at a field the undo removed would swallow the next click.
+    setSelectedField((current) => {
+      const id = pendingIdFrom(current);
+      if (!id) return current;
+      return previous.pending.some((f) => f.id === id) ? current : null;
+    });
+    return true;
+  }, []);
+  const [selectedFieldName, setSelectedField] = useState<string | null>(null);
+  const [modifiedFields, setModifiedFields] = useState<
+    Record<string, ModifyFieldDefinition>
+  >({});
+  const [deletedFieldNames, setDeletedFieldNames] = useState<string[]>([]);
+
+  liveEditsRef.current = {
+    pending: pendingFields,
+    modified: modifiedFields,
+    deleted: deletedFieldNames,
+  };
+
+  const [skippedEdits, setSkippedEdits] = useState<SkippedFieldEdit[]>([]);
+  const [skippedTotal, setSkippedTotal] = useState(0);
+  const clearSkippedEdits = useCallback(() => {
+    setSkippedEdits([]);
+    setSkippedTotal(0);
+    skipReportFileIdRef.current = null;
+  }, []);
+  /** Which file the staged edits belong to, so they cannot be committed onto another. */
+  const editedFileIdRef = useRef<string | null>(null);
+  /** Survives an in-flight fetch, unlike forFileIdRef, so staged edits can be stamped. */
+  const lastKnownFileIdRef = useRef<string | null>(null);
+  /** The file the current skip report describes, so it cannot outlive that document. */
+  const skipReportFileIdRef = useRef<string | null>(null);
+  /** Set by the edit overlay so other Escape handlers do not steal a drag's cancel. */
+  const dragActiveRef = useRef(false);
+  // Monotonic counter for client-side pending-field ids and default names.
+  const pendingCounterRef = useRef(0);
+
+  // Fields the last commit's response carried, adopted by the next fetch instead of uploading
+  // the document again to ask. Size-checked so a different document cannot pick them up.
+  const bundledFieldsRef = useRef<{ fields: FormField[]; size: number } | null>(
+    null,
+  );
+
+  // What the user typed, carried across the re-fetch that opening the form tool triggers.
+  const retainedValuesRef = useRef<{
+    fileId: string | null;
+    values: Record<string, string>;
+  } | null>(null);
+
+  const clearEditingState = useCallback(() => {
+    setCreationType(null);
+    setPendingFields([]);
+    setSelectedField(null);
+    setModifiedFields({});
+    setDeletedFieldNames([]);
+    editedFileIdRef.current = null;
+    // Report and field list both describe the batch just discarded, so neither outlives it.
+    bundledFieldsRef.current = null;
+    setSkippedEdits([]);
+    setSkippedTotal(0);
+  }, []);
+
   const fetchFields = useCallback(
     async (file: File | Blob, fileId?: string) => {
       // Increment version so any in-flight fetch for a previous file is discarded.
@@ -316,15 +516,60 @@ export function FormFillProvider({
       // correctly discarded.
       const version = ++fetchVersionRef.current;
 
+      // Staged edits reference the previous document's fields; committing them against a
+      // different file would edit the wrong PDF. Checked here, before any await, because
+      // forFileIdRef is null for the whole fetch and the success path may never run.
+      if (
+        editedFileIdRef.current != null &&
+        (fileId ?? null) !== editedFileIdRef.current
+      ) {
+        clearEditingState();
+      }
+      // A commit produces a new file id, so the first fetch after one adopts the report;
+      // any later switch to a different document clears it.
+      if (skipReportFileIdRef.current === PENDING_SKIP_REPORT) {
+        skipReportFileIdRef.current = fileId ?? null;
+      } else if (
+        skipReportFileIdRef.current != null &&
+        (fileId ?? null) !== skipReportFileIdRef.current
+      ) {
+        skipReportFileIdRef.current = null;
+        setSkippedEdits([]);
+        setSkippedTotal(0);
+      }
+
+      // Same document reloading means the typed values are still the user's; a different one
+      // means they belong to a document that is no longer open.
+      const sameDocument = (fileId ?? null) === lastKnownFileIdRef.current;
+      const carried =
+        retainedValuesRef.current?.fileId === (fileId ?? null)
+          ? retainedValuesRef.current.values
+          : sameDocument
+            ? { ...valuesStore.values }
+            : {};
+      retainedValuesRef.current = null;
+
+      lastKnownFileIdRef.current = fileId ?? null;
       // Immediately clear previous state so FormFieldOverlay's stale-file guards
       // prevent rendering fields from a previous document during the fetch.
       forFileIdRef.current = null;
       setForFileId(null);
       valuesStore.reset({});
       dispatch({ type: "RESET" });
+      // Deliberately keeps create/modify state: the viewer re-fetches on provider
+      // switch and file load, which must not wipe in-progress edits.
       dispatch({ type: "FETCH_START" });
       try {
-        let fields = await providerRef.current.fetchFields(file);
+        // Only pdfbox mode can use them: the bundle is PDFBox's own view of the document.
+        const bundled = bundledFieldsRef.current;
+        bundledFieldsRef.current = null;
+        const usable =
+          bundled &&
+          bundled.size === file.size &&
+          providerModeRef.current === "pdfbox";
+        let fields = usable
+          ? bundled.fields
+          : await providerRef.current.fetchFields(file);
         // If another fetch or reset happened while we were waiting, discard this result
         if (fetchVersionRef.current !== version) {
           console.debug(
@@ -333,8 +578,8 @@ export function FormFillProvider({
           return;
         }
 
-        // When the pdfbox provider is active the backend doesn't return signature fields
-        // (they're not fillable). Fetch them via pdflib so their appearances still render.
+        // pdfbox returns signature fields without a rendered appearance; merge the
+        // pdfium ones by name, since appending would list a signature twice.
         if (providerModeRef.current === "pdfbox") {
           try {
             // Convert File/Blob to ArrayBuffer for pdfiumService
@@ -342,9 +587,7 @@ export function FormFillProvider({
             const sigFields =
               await fetchSignatureFieldsWithAppearances(arrayBuffer);
             if (fetchVersionRef.current !== version) return; // stale check after async
-            if (sigFields.length > 0) {
-              fields = [...fields, ...sigFields];
-            }
+            fields = mergeSignatureAppearances(fields, sigFields);
           } catch (e) {
             console.warn(
               "[FormFill] Failed to extract signature appearances for pdfbox mode:",
@@ -355,13 +598,21 @@ export function FormFillProvider({
 
         // Initialise values in the external store
         const values: Record<string, string> = {};
+        let edited = false;
         for (const field of fields) {
-          values[field.name] = field.value ?? "";
+          const stored = field.value ?? "";
+          values[field.name] = carried[field.name] ?? stored;
+          edited = edited || values[field.name] !== stored;
         }
         valuesStore.reset(values);
         forFileIdRef.current = fileId ?? null;
         setForFileId(fileId ?? null);
         dispatch({ type: "FETCH_SUCCESS", fields });
+        // After FETCH_SUCCESS, which clears the flag; and only when a value genuinely differs,
+        // or the unsaved-changes prompt cries wolf on every navigation.
+        if (edited) {
+          dispatch({ type: "MARK_DIRTY" });
+        }
       } catch (err) {
         if (fetchVersionRef.current !== version) return; // stale
         const msg =
@@ -373,7 +624,7 @@ export function FormFillProvider({
         dispatch({ type: "FETCH_ERROR", error: msg });
       }
     },
-    [valuesStore],
+    [valuesStore, clearEditingState],
   );
 
   const validateFieldDebounced = useDebouncedCallback((fieldName: string) => {
@@ -448,6 +699,11 @@ export function FormFillProvider({
       fetchVersionRef.current++;
       forFileIdRef.current = null;
       setForFileId(null);
+      // The viewer re-fetches straight after this, and that fetch is where they are restored.
+      retainedValuesRef.current = {
+        fileId: lastKnownFileIdRef.current,
+        values: { ...valuesStore.values },
+      };
       valuesStore.reset({});
       dispatch({ type: "RESET" });
 
@@ -481,7 +737,171 @@ export function FormFillProvider({
     setForFileId(null);
     valuesStore.reset({});
     dispatch({ type: "RESET" });
-  }, [valuesStore]);
+    clearEditingState();
+  }, [valuesStore, clearEditingState]);
+
+  // --- Mode switching ---
+  const setMode = useCallback(
+    (next: FormMode) => {
+      setModeState((prev) => {
+        if (prev === next) return prev;
+        // Leaving a mode discards its uncommitted working state so the user
+        // doesn't carry half-drawn fields or staged edits between modes.
+        clearEditingState();
+        return next;
+      });
+    },
+    [clearEditingState],
+  );
+
+  // --- Create mode ---
+  const addPendingField = useCallback(
+    (field: Omit<NewFieldDefinition, "name"> & { name?: string }): string => {
+      rememberForUndo();
+      editedFileIdRef.current = lastKnownFileIdRef.current;
+      const seq = ++pendingCounterRef.current;
+      const id = `pending-${seq}`;
+      // Friendly, readable default names that match how the viewer labels
+      // fields, instead of cryptic "Field_5".
+      const TYPE_DEFAULT_NAME: Record<string, string> = {
+        text: "Text field",
+        checkbox: "Checkbox",
+        combobox: "Dropdown",
+        listbox: "List",
+        radio: "Radio group",
+        button: "Button",
+        signature: "Signature",
+      };
+      const defaultName =
+        field.name?.trim() ||
+        `${TYPE_DEFAULT_NAME[field.type] ?? "Field"} ${seq}`;
+      // Choice/radio fields are useless without options, so seed defaults.
+      const needsOptions =
+        field.type === "combobox" ||
+        field.type === "listbox" ||
+        field.type === "radio";
+      const options =
+        field.options ?? (needsOptions ? ["Option 1", "Option 2"] : undefined);
+      setPendingFields((prev) => [
+        ...prev,
+        { ...field, name: defaultName, options, id } as PendingField,
+      ]);
+      return id;
+    },
+    [],
+  );
+
+  const updatePendingField = useCallback(
+    (id: string, patch: Partial<NewFieldDefinition>) => {
+      rememberForUndo();
+      setPendingFields((prev) =>
+        prev.map((f) => (f.id === id ? { ...f, ...patch } : f)),
+      );
+    },
+    [],
+  );
+
+  const removePendingField = useCallback(
+    (id: string) => {
+      rememberForUndo();
+      setPendingFields((prev) => prev.filter((f) => f.id !== id));
+    },
+    [rememberForUndo],
+  );
+
+  const clearPendingFields = useCallback(() => {
+    setPendingFields([]);
+    setCreationType(null);
+  }, []);
+
+  const commitNewFields = useCallback(
+    async (file: File | Blob): Promise<Blob> => {
+      // Strip the client-side id before sending to the backend.
+      const definitions: NewFieldDefinition[] = pendingFields.map(
+        ({ id: _id, ...rest }) => rest,
+      );
+      const result = await applyFieldEdits(file, { add: definitions });
+      bundledFieldsRef.current = result.fields
+        ? { fields: result.fields, size: result.blob.size }
+        : null;
+      setSkippedEdits(result.skipped);
+      setSkippedTotal(result.skippedTotal);
+      skipReportFileIdRef.current = PENDING_SKIP_REPORT;
+      setPendingFields([]);
+      setCreationType(null);
+      // The batch is gone, so the stamp must not survive to trigger a clear on the
+      // post-commit re-fetch; that would wipe the skip report we just set.
+      editedFileIdRef.current = null;
+      return result.blob;
+    },
+    [pendingFields],
+  );
+
+  // --- Modify mode ---
+  const stageModification = useCallback(
+    (targetName: string, patch: Partial<ModifyFieldDefinition>) => {
+      rememberForUndo();
+      editedFileIdRef.current = lastKnownFileIdRef.current;
+      setModifiedFields((prev) => ({
+        ...prev,
+        [targetName]: { ...prev[targetName], targetName, ...patch },
+      }));
+    },
+    [],
+  );
+
+  const clearModification = useCallback((targetName: string) => {
+    setModifiedFields((prev) => {
+      if (!(targetName in prev)) return prev;
+      const { [targetName]: _removed, ...rest } = prev;
+      return rest;
+    });
+  }, []);
+
+  const toggleFieldDeleted = useCallback((name: string) => {
+    rememberForUndo();
+    editedFileIdRef.current = lastKnownFileIdRef.current;
+    setDeletedFieldNames((prev) =>
+      prev.includes(name) ? prev.filter((n) => n !== name) : [...prev, name],
+    );
+  }, []);
+
+  const clearModifications = useCallback(() => {
+    setModifiedFields({});
+    setDeletedFieldNames([]);
+    setSelectedField(null);
+  }, []);
+
+  const commitModifications = useCallback(
+    async (file: File | Blob): Promise<Blob> => {
+      // Apply property/geometry changes (for fields not being deleted) and the
+      // deletions in a single backend round-trip.
+      const updates = Object.values(modifiedFields).filter(
+        (m) => !deletedFieldNames.includes(m.targetName),
+      );
+      const result = await applyFieldEdits(file, {
+        modify: updates,
+        delete: deletedFieldNames,
+      });
+      bundledFieldsRef.current = result.fields
+        ? { fields: result.fields, size: result.blob.size }
+        : null;
+      setSkippedEdits(result.skipped);
+      setSkippedTotal(result.skippedTotal);
+      skipReportFileIdRef.current = PENDING_SKIP_REPORT;
+      setModifiedFields({});
+      setDeletedFieldNames([]);
+      setSelectedField(null);
+      editedFileIdRef.current = null;
+      return result.blob;
+    },
+    [modifiedFields, deletedFieldNames],
+  );
+
+  const hasUncommittedChanges =
+    pendingFields.length > 0 ||
+    Object.keys(modifiedFields).length > 0 ||
+    deletedFieldNames.length > 0;
 
   const fieldsByPage = useMemo(() => {
     const map = new Map<number, FormField[]>();
@@ -493,6 +913,24 @@ export function FormFillProvider({
     return map;
   }, [state.fields]);
 
+  /**
+   * The fields as they would look once the staged edits are applied. Drawing from this keeps one
+   * visual per field that follows a drag, instead of a stale copy left at the old coordinates.
+   */
+  const effectiveFieldsByPage = useMemo(() => {
+    const map = new Map<number, FormField[]>();
+    const deleted = new Set(deletedFieldNames);
+    for (const field of state.fields) {
+      if (deleted.has(field.name)) continue;
+      const staged = modifiedFields[field.name];
+      const effective = staged ? applyStagedGeometry(field, staged) : field;
+      const pageIdx = effective.widgets?.[0]?.pageIndex ?? 0;
+      if (!map.has(pageIdx)) map.set(pageIdx, []);
+      map.get(pageIdx)!.push(effective);
+    }
+    return map;
+  }, [state.fields, modifiedFields, deletedFieldNames]);
+
   // Context value — does NOT depend on values, so keystrokes don't
   // trigger re-renders of all context consumers.
   const value = useMemo<FormFillContextValue>(
@@ -508,9 +946,39 @@ export function FormFillProvider({
       validateForm,
       reset,
       fieldsByPage,
+      effectiveFieldsByPage,
       activeProviderName: providerRef.current.name,
       setProviderMode,
       forFileId,
+      // editing
+      mode,
+      setMode,
+      creationType,
+      previewing,
+      setPreviewing,
+      undo,
+      canUndo,
+      setCreationType,
+      pendingFields,
+      addPendingField,
+      updatePendingField,
+      removePendingField,
+      clearPendingFields,
+      commitNewFields,
+      selectedFieldName,
+      setSelectedField,
+      modifiedFields,
+      stageModification,
+      clearModification,
+      deletedFieldNames,
+      toggleFieldDeleted,
+      clearModifications,
+      commitModifications,
+      hasUncommittedChanges,
+      skippedEdits,
+      skippedTotal,
+      clearSkippedEdits,
+      dragActiveRef,
     }),
     [
       state,
@@ -524,9 +992,36 @@ export function FormFillProvider({
       validateForm,
       reset,
       fieldsByPage,
+      effectiveFieldsByPage,
       providerMode,
       setProviderMode,
       forFileId,
+      mode,
+      setMode,
+      creationType,
+      previewing,
+      setPreviewing,
+      undo,
+      canUndo,
+      pendingFields,
+      addPendingField,
+      updatePendingField,
+      removePendingField,
+      clearPendingFields,
+      commitNewFields,
+      selectedFieldName,
+      modifiedFields,
+      stageModification,
+      clearModification,
+      deletedFieldNames,
+      toggleFieldDeleted,
+      clearModifications,
+      commitModifications,
+      hasUncommittedChanges,
+      skippedEdits,
+      skippedTotal,
+      clearSkippedEdits,
+      dragActiveRef,
     ],
   );
 
@@ -540,3 +1035,26 @@ export function FormFillProvider({
 }
 
 export default FormFillContext;
+
+/**
+ * Fields whose PDF-baked visuals (button and signature appearance bitmaps) no longer match the
+ * staged state. Those layers render from the un-edited file, so they must be hidden while editing
+ * or they leave a ghost at the original rect.
+ */
+export function useStaleBakedFieldNames(): Set<string> {
+  // Read the context directly: the viewer's appearance overlays render outside the form tool
+  // (and in isolation in Storybook), where there is no provider and nothing is staged.
+  const ctx = useContext(FormFillContext);
+  const mode = ctx?.mode ?? "fill";
+  const modifiedFields = ctx?.modifiedFields;
+  const deletedFieldNames = ctx?.deletedFieldNames;
+  return useMemo(() => {
+    if (mode === "fill" || !modifiedFields || !deletedFieldNames) {
+      return new Set<string>();
+    }
+    return new Set<string>([
+      ...Object.keys(modifiedFields),
+      ...deletedFieldNames,
+    ]);
+  }, [mode, modifiedFields, deletedFieldNames]);
+}
diff --git a/frontend/editor/src/core/tools/formFill/SkippedEditsAlert.tsx b/frontend/editor/src/core/tools/formFill/SkippedEditsAlert.tsx
new file mode 100644
index 0000000000..ae7ac1fca2
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/SkippedEditsAlert.tsx
@@ -0,0 +1,54 @@
+/**
+ * Reports edits the backend could not apply. The mutating endpoints return the
+ * PDF itself, so partial failures arrive in a response header, not the body.
+ */
+import { Alert, List, Text } from "@mantine/core";
+import WarningAmberIcon from "@mui/icons-material/WarningAmber";
+import { useTranslation } from "react-i18next";
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+
+export function SkippedEditsAlert() {
+  const { t } = useTranslation();
+  const { skippedEdits, skippedTotal, clearSkippedEdits } = useFormFill();
+
+  if (skippedEdits.length === 0) return null;
+
+  return (
+    <Alert
+      icon={<WarningAmberIcon sx={{ fontSize: 16 }} />}
+      color="yellow"
+      variant="light"
+      p="xs"
+      radius="sm"
+      withCloseButton
+      onClose={clearSkippedEdits}
+      data-testid="form-skipped-edits"
+    >
+      <Text size="xs" fw={600}>
+        {t("formFill.skippedEdits", {
+          count: Math.max(skippedTotal, skippedEdits.length),
+          defaultValue: "{{count}} changes could not be applied:",
+        })}
+      </Text>
+      <List size="xs" spacing={2} mt={4}>
+        {skippedEdits.map((skip, index) => (
+          <List.Item key={`${skip.operation}-${skip.target ?? index}`}>
+            <Text size="xs">
+              {skip.target ? `${skip.target}: ` : ""}
+              {skip.reason}
+            </Text>
+          </List.Item>
+        ))}
+      </List>
+      {skippedTotal > skippedEdits.length && (
+        <Text size="xs" c="dimmed" mt={4}>
+          {t("formFill.skippedEditsTruncated", "{{count}} more not listed.", {
+            count: skippedTotal - skippedEdits.length,
+          })}
+        </Text>
+      )}
+    </Alert>
+  );
+}
+
+export default SkippedEditsAlert;
diff --git a/frontend/editor/src/core/tools/formFill/SnapGuides.tsx b/frontend/editor/src/core/tools/formFill/SnapGuides.tsx
new file mode 100644
index 0000000000..b130f78580
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/SnapGuides.tsx
@@ -0,0 +1,41 @@
+/** Alignment guide lines shared by the create and edit overlays; positioned within the page overlay. */
+import React from "react";
+import type { SnapGuide } from "@app/tools/formFill/formSnapUtils";
+import { FORM_COLORS } from "@app/tools/formFill/formFieldColors";
+
+const GUIDE_COLOR = FORM_COLORS.guide;
+
+export function SnapGuides({ guides }: { guides: SnapGuide[] }) {
+  return (
+    <>
+      {guides.map((g, i) => (
+        <div
+          key={i}
+          style={
+            g.orientation === "v"
+              ? {
+                  position: "absolute",
+                  left: g.position,
+                  top: 0,
+                  width: 1,
+                  height: "100%",
+                  background: GUIDE_COLOR,
+                  pointerEvents: "none",
+                }
+              : {
+                  position: "absolute",
+                  top: g.position,
+                  left: 0,
+                  height: 1,
+                  width: "100%",
+                  background: GUIDE_COLOR,
+                  pointerEvents: "none",
+                }
+          }
+        />
+      ))}
+    </>
+  );
+}
+
+export default SnapGuides;
diff --git a/frontend/editor/src/core/tools/formFill/__fixtures__/checkbox-and-radio.zip b/frontend/editor/src/core/tools/formFill/__fixtures__/checkbox-and-radio.zip
new file mode 100644
index 0000000000..0742ee3b9b
Binary files /dev/null and b/frontend/editor/src/core/tools/formFill/__fixtures__/checkbox-and-radio.zip differ
diff --git a/frontend/editor/src/core/tools/formFill/__fixtures__/many-fields.zip b/frontend/editor/src/core/tools/formFill/__fixtures__/many-fields.zip
new file mode 100644
index 0000000000..8fac72f54e
Binary files /dev/null and b/frontend/editor/src/core/tools/formFill/__fixtures__/many-fields.zip differ
diff --git a/frontend/editor/src/core/tools/formFill/fieldBundle.fixtures.test.ts b/frontend/editor/src/core/tools/formFill/fieldBundle.fixtures.test.ts
new file mode 100644
index 0000000000..988bb5a7a0
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/fieldBundle.fixtures.test.ts
@@ -0,0 +1,56 @@
+import { describe, expect, it } from "vitest";
+import { Blob as NodeBlob } from "node:buffer";
+import { readFileSync } from "node:fs";
+import { join } from "node:path";
+
+import { readFieldBundle } from "@app/tools/formFill/fieldBundle";
+
+/**
+ * Reads archives produced by the real backend (see FormFieldBundleTest), not by a JS lookalike.
+ * Java defers the deflated entry's sizes to a data descriptor, so the local header reports zero.
+ */
+
+/** node:buffer's Blob satisfies the reader at runtime; TypeScript treats it as a separate type. */
+function fixture(name: string): Blob {
+  const blob = new NodeBlob([
+    readFileSync(join(import.meta.dirname, "__fixtures__", name)),
+  ]);
+  return blob as unknown as Blob;
+}
+
+describe("readFieldBundle against real backend output", () => {
+  it("reads a mixed checkbox and radio form", async () => {
+    const result = await readFieldBundle(fixture("checkbox-and-radio.zip"));
+
+    expect(result).not.toBeNull();
+    expect(result!.fields.map((field) => field.name).sort()).toEqual([
+      "agree",
+      "plan",
+    ]);
+    const pdf = new Uint8Array(await result!.pdf.arrayBuffer());
+    expect(new TextDecoder().decode(pdf.subarray(0, 5))).toBe("%PDF-");
+  });
+
+  it("reads a 120-field document without truncating the pdf", async () => {
+    const blob = fixture("many-fields.zip");
+
+    const result = await readFieldBundle(blob);
+
+    expect(result!.fields).toHaveLength(120);
+    const pdf = new Uint8Array(await result!.pdf.arrayBuffer());
+    expect(new TextDecoder().decode(pdf.subarray(0, 5))).toBe("%PDF-");
+    // The tail proves the stored slice ran to the entry's real end, not to the archive's.
+    expect(new TextDecoder().decode(pdf.subarray(-6))).toContain("%%EOF");
+    expect(pdf.length).toBeLessThan(blob.size);
+  });
+
+  it("carries widget coordinates through, which is why the second request can go", async () => {
+    const result = await readFieldBundle(fixture("many-fields.zip"));
+
+    const widget = result!.fields[0]?.widgets?.[0];
+    expect(widget).toBeDefined();
+    expect(typeof widget!.pageIndex).toBe("number");
+    expect(typeof widget!.x).toBe("number");
+    expect(typeof widget!.y).toBe("number");
+  });
+});
diff --git a/frontend/editor/src/core/tools/formFill/fieldBundle.test.ts b/frontend/editor/src/core/tools/formFill/fieldBundle.test.ts
new file mode 100644
index 0000000000..2297b5682a
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/fieldBundle.test.ts
@@ -0,0 +1,241 @@
+import { describe, expect, it } from "vitest";
+import { Blob as NodeBlob } from "node:buffer";
+import { deflateRawSync } from "node:zlib";
+
+import {
+  readFieldBundle,
+  supportsFieldBundle,
+} from "@app/tools/formFill/fieldBundle";
+
+/**
+ * Builds ZIPs the way the backend does, using node:buffer's Blob: jsdom's ignores slice() ranges
+ * and has no stream(), so it silently cannot exercise an archive reader at all.
+ */
+
+/** node:buffer's Blob satisfies the reader at runtime; TypeScript treats it as a separate type. */
+function asBlob(blob: NodeBlob): Blob {
+  return blob as unknown as Blob;
+}
+
+const CRC_TABLE = (() => {
+  const table = new Uint32Array(256);
+  for (let i = 0; i < 256; i++) {
+    let c = i;
+    for (let k = 0; k < 8; k++) c = c & 1 ? 0xedb88320 ^ (c >>> 1) : c >>> 1;
+    table[i] = c >>> 0;
+  }
+  return table;
+})();
+
+function crc32(bytes: Uint8Array): number {
+  let c = 0xffffffff;
+  for (const byte of bytes) c = CRC_TABLE[(c ^ byte) & 0xff] ^ (c >>> 8);
+  return (c ^ 0xffffffff) >>> 0;
+}
+
+interface BuildEntry {
+  name: string;
+  data: Uint8Array;
+  deflate: boolean;
+  /** Mimics a writer that defers sizes to a trailing data descriptor. */
+  dataDescriptor?: boolean;
+  extra?: number;
+}
+
+function buildZip(entries: BuildEntry[]): Blob {
+  const chunks: Uint8Array[] = [];
+  const central: Uint8Array[] = [];
+  let offset = 0;
+
+  for (const entry of entries) {
+    const name = new TextEncoder().encode(entry.name);
+    const payload = entry.deflate
+      ? new Uint8Array(deflateRawSync(Buffer.from(entry.data)))
+      : entry.data;
+    const crc = crc32(entry.data);
+    const extraLength = entry.extra ?? 0;
+
+    const local = new DataView(new ArrayBuffer(30));
+    local.setUint32(0, 0x04034b50, true);
+    local.setUint16(4, 20, true);
+    local.setUint16(6, entry.dataDescriptor ? 0x08 : 0, true);
+    local.setUint16(8, entry.deflate ? 8 : 0, true);
+    // A data-descriptor writer zeroes these in the local header; only the central copy is right.
+    local.setUint32(14, entry.dataDescriptor ? 0 : crc, true);
+    local.setUint32(18, entry.dataDescriptor ? 0 : payload.length, true);
+    local.setUint32(22, entry.dataDescriptor ? 0 : entry.data.length, true);
+    local.setUint16(26, name.length, true);
+    local.setUint16(28, extraLength, true);
+
+    const localHeaderOffset = offset;
+    const parts = [
+      new Uint8Array(local.buffer),
+      name,
+      new Uint8Array(extraLength),
+      payload,
+    ];
+    for (const part of parts) {
+      chunks.push(part);
+      offset += part.length;
+    }
+
+    const cd = new DataView(new ArrayBuffer(46));
+    cd.setUint32(0, 0x02014b50, true);
+    cd.setUint16(10, entry.deflate ? 8 : 0, true);
+    cd.setUint32(16, crc, true);
+    cd.setUint32(20, payload.length, true);
+    cd.setUint32(24, entry.data.length, true);
+    cd.setUint16(28, name.length, true);
+    cd.setUint32(42, localHeaderOffset, true);
+    central.push(new Uint8Array(cd.buffer), name);
+  }
+
+  const centralStart = offset;
+  const centralSize = central.reduce((sum, part) => sum + part.length, 0);
+  const eocd = new DataView(new ArrayBuffer(22));
+  eocd.setUint32(0, 0x06054b50, true);
+  eocd.setUint16(8, entries.length, true);
+  eocd.setUint16(10, entries.length, true);
+  eocd.setUint32(12, centralSize, true);
+  eocd.setUint32(16, centralStart, true);
+
+  return asBlob(
+    new NodeBlob([...chunks, ...central, new Uint8Array(eocd.buffer)]),
+  );
+}
+
+const FIELDS = [
+  { name: "signature", type: "text", widgets: [{ pageIndex: 0 }] },
+];
+
+async function bytesOf(blob: Blob): Promise<Uint8Array> {
+  return new Uint8Array(await blob.arrayBuffer());
+}
+
+const PDF_BYTES = new Uint8Array([
+  0x25, 0x50, 0x44, 0x46, 0x2d, 0x31, 0x2e, 0x37, 0x0a, 0x00, 0xff, 0xfe, 0x80,
+  0x7f,
+]);
+
+function bundle(overrides: Partial<BuildEntry>[] = []): Blob {
+  const pdf = PDF_BYTES;
+  return buildZip([
+    {
+      name: "fields.json",
+      data: new TextEncoder().encode(JSON.stringify(FIELDS)),
+      deflate: true,
+      ...overrides[0],
+    },
+    { name: "document.pdf", data: pdf, deflate: false, ...overrides[1] },
+  ]);
+}
+
+describe("readFieldBundle", () => {
+  it("reports support when DecompressionStream exists", () => {
+    expect(supportsFieldBundle()).toBe(
+      typeof DecompressionStream === "function",
+    );
+  });
+
+  it("returns both the pdf and the deflated field list", async () => {
+    const result = await readFieldBundle(bundle());
+
+    expect(result).not.toBeNull();
+    expect(result!.fields).toEqual(FIELDS);
+    expect(await bytesOf(result!.pdf)).toEqual(PDF_BYTES);
+    expect(result!.pdf.type).toBe("application/pdf");
+  });
+
+  it("survives an extra field in the local header", async () => {
+    // Some writers put an extra field in the local header only, so the payload offset
+    // has to be read from there rather than from the central directory.
+    const result = await readFieldBundle(bundle([{}, { extra: 9 }]));
+
+    // Byte-exact on purpose: a slice starting early still contains the header, so
+    // containment cannot detect a misread offset.
+    expect(await bytesOf(result!.pdf)).toEqual(PDF_BYTES);
+  });
+
+  it("reads sizes from the central directory when the local header defers them", async () => {
+    const result = await readFieldBundle(
+      bundle([{ dataDescriptor: true }, {}]),
+    );
+
+    expect(result!.fields).toEqual(FIELDS);
+  });
+
+  it("returns null for a bare pdf so the caller can fall back", async () => {
+    expect(
+      await readFieldBundle(
+        asBlob(new NodeBlob(["%PDF-1.7 not a zip at all"])),
+      ),
+    ).toBeNull();
+  });
+
+  it("throws when the expected entries are absent", async () => {
+    const wrong = buildZip([
+      {
+        name: "other.txt",
+        data: new TextEncoder().encode("nope"),
+        deflate: false,
+      },
+    ]);
+
+    await expect(readFieldBundle(wrong)).rejects.toThrow(/missing/i);
+  });
+
+  it("throws when the field list is not an array", async () => {
+    const notArray = buildZip([
+      {
+        name: "fields.json",
+        data: new TextEncoder().encode('{"a":1}'),
+        deflate: true,
+      },
+      {
+        name: "document.pdf",
+        data: new TextEncoder().encode("%PDF-1.7"),
+        deflate: false,
+      },
+    ]);
+
+    await expect(readFieldBundle(notArray)).rejects.toThrow(/not a list/i);
+  });
+
+  it("keeps the pdf byte-exact through the slice", async () => {
+    const bytes = new Uint8Array(4096);
+    for (let i = 0; i < bytes.length; i++) bytes[i] = (i * 31) % 256;
+    const zip = buildZip([
+      {
+        name: "fields.json",
+        data: new TextEncoder().encode("[]"),
+        deflate: true,
+      },
+      { name: "document.pdf", data: bytes, deflate: false },
+    ]);
+
+    const result = await readFieldBundle(zip);
+
+    expect(new Uint8Array(await result!.pdf.arrayBuffer())).toEqual(bytes);
+  });
+
+  it("throws rather than handing back a truncated archive as the document", async () => {
+    const whole = bundle();
+    // Losing the tail loses the central directory, which is how a cut-off download arrives.
+    const truncated = whole.slice(0, whole.size - 40);
+
+    // Returning this blob would let the caller save a ZIP over the user's PDF.
+    await expect(readFieldBundle(truncated)).rejects.toThrow(
+      /corrupt|truncated/i,
+    );
+  });
+
+  it("never resolves to a blob that is still the archive", async () => {
+    const whole = bundle();
+
+    const result = await readFieldBundle(whole);
+
+    expect(result!.pdf.size).toBeLessThan(whole.size);
+    const head = new Uint8Array(await result!.pdf.slice(0, 2).arrayBuffer());
+    expect(String.fromCharCode(...head)).not.toBe("PK");
+  });
+});
diff --git a/frontend/editor/src/core/tools/formFill/fieldBundle.ts b/frontend/editor/src/core/tools/formFill/fieldBundle.ts
new file mode 100644
index 0000000000..12b8cdd7c9
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/fieldBundle.ts
@@ -0,0 +1,177 @@
+import type { FormField } from "@app/tools/formFill/types";
+
+/**
+ * Reads the ZIP that /edit-fields?includeFields=true returns: the edited PDF stored, the field
+ * list deflated. Slicing the stored entry hands back a Blob view, so the PDF is never copied.
+ */
+
+const EOCD_SIGNATURE = 0x06054b50;
+const CENTRAL_HEADER_SIGNATURE = 0x02014b50;
+const EOCD_MIN_SIZE = 22;
+const CENTRAL_HEADER_SIZE = 46;
+const LOCAL_HEADER_SIZE = 30;
+const METHOD_STORED = 0;
+const METHOD_DEFLATED = 8;
+
+/** ZIP comments are 64KB at most, so the record cannot start further back than this. */
+const EOCD_SEARCH_LIMIT = EOCD_MIN_SIZE + 0xffff;
+
+export const FIELDS_ENTRY = "fields.json";
+export const DOCUMENT_ENTRY = "document.pdf";
+
+export interface FieldBundle {
+  pdf: Blob;
+  fields: FormField[];
+}
+
+interface CentralEntry {
+  name: string;
+  method: number;
+  compressedSize: number;
+  localHeaderOffset: number;
+}
+
+/**
+ * Without it the deflated entry cannot be read, so callers must fall back to a second request.
+ */
+export function supportsFieldBundle(): boolean {
+  return typeof DecompressionStream === "function";
+}
+
+/** ZIP local file headers start with "PK\x03\x04". */
+async function looksZipped(blob: Blob): Promise<boolean> {
+  if (blob.size < EOCD_MIN_SIZE) return false;
+  const head = new Uint8Array(await blob.slice(0, 4).arrayBuffer());
+  return (
+    head[0] === 0x50 && head[1] === 0x4b && head[2] === 0x03 && head[3] === 0x04
+  );
+}
+
+/** Scans back from the end for the end-of-central-directory record. */
+async function readEocd(
+  blob: Blob,
+): Promise<{ offset: number; size: number } | null> {
+  const tailSize = Math.min(blob.size, EOCD_SEARCH_LIMIT);
+  const tail = new DataView(
+    await blob.slice(blob.size - tailSize).arrayBuffer(),
+  );
+  for (let i = tailSize - EOCD_MIN_SIZE; i >= 0; i--) {
+    if (tail.getUint32(i, true) !== EOCD_SIGNATURE) continue;
+    return {
+      size: tail.getUint32(i + 12, true),
+      offset: tail.getUint32(i + 16, true),
+    };
+  }
+  return null;
+}
+
+function parseCentralDirectory(bytes: ArrayBuffer): CentralEntry[] {
+  const view = new DataView(bytes);
+  const decoder = new TextDecoder();
+  const entries: CentralEntry[] = [];
+  let cursor = 0;
+  while (cursor + CENTRAL_HEADER_SIZE <= view.byteLength) {
+    if (view.getUint32(cursor, true) !== CENTRAL_HEADER_SIGNATURE) break;
+    const nameLength = view.getUint16(cursor + 28, true);
+    const extraLength = view.getUint16(cursor + 30, true);
+    const commentLength = view.getUint16(cursor + 32, true);
+    entries.push({
+      name: decoder.decode(
+        new Uint8Array(bytes, cursor + CENTRAL_HEADER_SIZE, nameLength),
+      ),
+      method: view.getUint16(cursor + 10, true),
+      compressedSize: view.getUint32(cursor + 20, true),
+      localHeaderOffset: view.getUint32(cursor + 42, true),
+    });
+    cursor += CENTRAL_HEADER_SIZE + nameLength + extraLength + commentLength;
+  }
+  return entries;
+}
+
+/**
+ * The local header carries its own extra field, whose length can differ from the central copy, so
+ * the payload offset has to be read from the local header rather than assumed.
+ */
+async function dataOffset(blob: Blob, entry: CentralEntry): Promise<number> {
+  const header = new DataView(
+    await blob
+      .slice(
+        entry.localHeaderOffset,
+        entry.localHeaderOffset + LOCAL_HEADER_SIZE,
+      )
+      .arrayBuffer(),
+  );
+  return (
+    entry.localHeaderOffset +
+    LOCAL_HEADER_SIZE +
+    header.getUint16(26, true) +
+    header.getUint16(28, true)
+  );
+}
+
+async function inflateRaw(part: Blob): Promise<ArrayBuffer> {
+  const stream = part
+    .stream()
+    .pipeThrough(new DecompressionStream("deflate-raw"));
+  return new Response(stream).arrayBuffer();
+}
+
+/** A stored entry is returned as a view, so the PDF is never copied. */
+async function readEntry(
+  blob: Blob,
+  entry: CentralEntry,
+  type: string,
+): Promise<Blob> {
+  const start = await dataOffset(blob, entry);
+  const part = blob.slice(start, start + entry.compressedSize, type);
+  if (entry.method === METHOD_STORED) return part;
+  return new Blob([await readEntryBytes(blob, entry)], { type });
+}
+
+async function readEntryBytes(
+  blob: Blob,
+  entry: CentralEntry,
+): Promise<ArrayBuffer> {
+  const start = await dataOffset(blob, entry);
+  const part = blob.slice(start, start + entry.compressedSize);
+  if (entry.method === METHOD_STORED) return part.arrayBuffer();
+  if (entry.method !== METHOD_DEFLATED) {
+    throw new Error(`Unsupported ZIP compression method ${entry.method}`);
+  }
+  return inflateRaw(part);
+}
+
+/**
+ * Null means the body is a plain PDF, so the caller keeps it and fetches fields separately. A body
+ * that is an archive but unreadable throws: it is not the document, and saving it would destroy one.
+ */
+export async function readFieldBundle(blob: Blob): Promise<FieldBundle | null> {
+  if (!(await looksZipped(blob))) return null;
+
+  const eocd = await readEocd(blob);
+  if (!eocd) {
+    throw new Error("Edited PDF bundle is a truncated or corrupt archive");
+  }
+  const directory = parseCentralDirectory(
+    await blob.slice(eocd.offset, eocd.offset + eocd.size).arrayBuffer(),
+  );
+  const documentEntry = directory.find(
+    (entry) => entry.name === DOCUMENT_ENTRY,
+  );
+  const fieldsEntry = directory.find((entry) => entry.name === FIELDS_ENTRY);
+  if (!documentEntry || !fieldsEntry) {
+    throw new Error(
+      `Edited PDF bundle is missing ${DOCUMENT_ENTRY} or ${FIELDS_ENTRY}`,
+    );
+  }
+
+  const [pdf, fields] = await Promise.all([
+    readEntry(blob, documentEntry, "application/pdf"),
+    readEntryBytes(blob, fieldsEntry),
+  ]);
+  const parsed: unknown = JSON.parse(new TextDecoder().decode(fields));
+  if (!Array.isArray(parsed)) {
+    throw new Error(`Edited PDF bundle's ${FIELDS_ENTRY} is not a list`);
+  }
+  return { pdf, fields: parsed as FormField[] };
+}
diff --git a/frontend/editor/src/core/tools/formFill/formApi.ts b/frontend/editor/src/core/tools/formFill/formApi.ts
index c678435035..c0094d81f6 100644
--- a/frontend/editor/src/core/tools/formFill/formApi.ts
+++ b/frontend/editor/src/core/tools/formFill/formApi.ts
@@ -2,7 +2,18 @@
  * API service for form-related backend calls.
  */
 import apiClient from "@app/services/apiClient";
-import type { FormField } from "@app/tools/formFill/types";
+import {
+  readFieldBundle,
+  supportsFieldBundle,
+} from "@app/tools/formFill/fieldBundle";
+import type {
+  FormField,
+  NewFieldDefinition,
+  ModifyFieldDefinition,
+  FieldEditBatch,
+  FieldEditResult,
+  SkippedFieldEdit,
+} from "@app/tools/formFill/types";
 
 /**
  * Fetch form fields with coordinates from the backend.
@@ -89,3 +100,116 @@ export async function extractFormFieldsXlsx(
   });
   return response.data;
 }
+
+/** POST /api/v1/form/add-fields: create fields, returns the updated PDF blob. */
+export async function addFormFields(
+  file: File | Blob,
+  fields: NewFieldDefinition[],
+): Promise<Blob> {
+  const formData = new FormData();
+  formData.append("file", file);
+  formData.append(
+    "fields",
+    new Blob([JSON.stringify(fields)], { type: "application/json" }),
+  );
+
+  const response = await apiClient.post("/api/v1/form/add-fields", formData, {
+    responseType: "blob",
+  });
+  return response.data;
+}
+
+/** POST /api/v1/form/modify-fields: rename/retype/move/resize, returns the updated PDF blob. */
+export async function modifyFormFields(
+  file: File | Blob,
+  updates: ModifyFieldDefinition[],
+): Promise<Blob> {
+  const formData = new FormData();
+  formData.append("file", file);
+  formData.append(
+    "updates",
+    new Blob([JSON.stringify(updates)], { type: "application/json" }),
+  );
+
+  const response = await apiClient.post(
+    "/api/v1/form/modify-fields",
+    formData,
+    { responseType: "blob" },
+  );
+  return response.data;
+}
+
+/**
+ * POST /api/v1/form/edit-fields: add + modify + delete in one request. Asks for the field list in
+ * the same response where the browser can unpack it, which saves uploading the result back again.
+ */
+export async function applyFieldEdits(
+  file: File | Blob,
+  batch: FieldEditBatch,
+): Promise<FieldEditResult> {
+  const formData = new FormData();
+  formData.append("file", file);
+  formData.append(
+    "edits",
+    new Blob([JSON.stringify(batch)], { type: "application/json" }),
+  );
+
+  // Off for now. Skipping the follow-up fetch changes when the viewer settles its page scale:
+  // the page renders at ~1.5x and then stops responding to zoom. The reader and the endpoint are
+  // both tested and ready; this flips back on once that interaction is understood.
+  const BUNDLE_ENABLED = false;
+  const includeFields = BUNDLE_ENABLED && supportsFieldBundle();
+  const response = await apiClient.post("/api/v1/form/edit-fields", formData, {
+    responseType: "blob",
+    params: includeFields ? { includeFields: true } : undefined,
+  });
+  const result: FieldEditResult = {
+    blob: response.data,
+    skipped: parseSkippedEdits(response.headers?.[SKIPPED_EDITS_HEADER]),
+    skippedTotal: Number(response.headers?.[SKIPPED_EDITS_TOTAL_HEADER]) || 0,
+  };
+  if (!includeFields) return result;
+
+  // Null only when the backend ignored the flag and sent a bare PDF; an unreadable archive throws
+  // rather than letting the caller save the archive over the user's document.
+  const bundle = await readFieldBundle(response.data);
+  return bundle
+    ? { ...result, blob: bundle.pdf, fields: bundle.fields }
+    : result;
+}
+
+/** Set by the backend when it could not apply every requested edit. */
+const SKIPPED_EDITS_HEADER = "x-stirling-skipped-field-edits";
+const SKIPPED_EDITS_TOTAL_HEADER = "x-stirling-skipped-field-edits-total";
+
+/** Base64 JSON, so a reason containing spaces or non-ASCII survives the header intact. */
+function parseSkippedEdits(raw: unknown): SkippedFieldEdit[] {
+  if (typeof raw !== "string" || !raw) return [];
+  try {
+    const bytes = Uint8Array.from(atob(raw), (c) => c.charCodeAt(0));
+    const parsed: unknown = JSON.parse(new TextDecoder().decode(bytes));
+    return Array.isArray(parsed) ? (parsed as SkippedFieldEdit[]) : [];
+  } catch {
+    return [];
+  }
+}
+
+/** POST /api/v1/form/delete-fields: delete by name, returns the updated PDF blob. */
+export async function deleteFormFields(
+  file: File | Blob,
+  names: string[],
+): Promise<Blob> {
+  const formData = new FormData();
+  formData.append("file", file);
+  formData.append(
+    "names",
+    new Blob([JSON.stringify(names)], { type: "application/json" }),
+  );
+
+  const response = await apiClient.post(
+    "/api/v1/form/delete-fields",
+    formData,
+    { responseType: "blob" },
+  );
+  return response.data;
+}
diff --git a/frontend/editor/src/core/tools/formFill/formCoordinateUtils.ts b/frontend/editor/src/core/tools/formFill/formCoordinateUtils.ts
new file mode 100644
index 0000000000..7ddf8ac20f
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/formCoordinateUtils.ts
@@ -0,0 +1,187 @@
+/**
+ * Three spaces: page pixels (top-left), WidgetCoordinates points (top-left, CropBox-relative),
+ * and add/modify-fields points (lower-left, CropBox-relative). pageHeightPts is CropBox height.
+ */
+
+import type {
+  FormField,
+  ModifyFieldDefinition,
+} from "@app/tools/formFill/types";
+
+export interface PixelRect {
+  left: number;
+  top: number;
+  width: number;
+  height: number;
+}
+
+/** CropBox-relative, lower-left-origin PDF points (backend create/modify space). */
+export interface PdfRect {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+/** Top-left-origin PDF points, as stored on a WidgetCoordinates. */
+export interface WidgetRect {
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+}
+
+/** Convert a widget's top-left-origin point rect to pixel space for rendering. */
+export function widgetRectToPixels(
+  widget: WidgetRect,
+  scaleX: number,
+  scaleY: number,
+): PixelRect {
+  return {
+    left: widget.x * scaleX,
+    top: widget.y * scaleY,
+    width: widget.width * scaleX,
+    height: widget.height * scaleY,
+  };
+}
+
+/** Pixel rect (top-left) to backend PDF points (lower-left, CropBox-relative). */
+export function pixelsToBackendRect(
+  rect: PixelRect,
+  scaleX: number,
+  scaleY: number,
+  pageHeightPts: number,
+): PdfRect {
+  const xPts = rect.left / scaleX;
+  const widthPts = rect.width / scaleX;
+  const heightPts = rect.height / scaleY;
+  const topPts = rect.top / scaleY; // distance from page top, in points
+  // Flip to lower-left origin: y measures page bottom to the field's bottom edge.
+  const yPts = pageHeightPts - topPts - heightPts;
+  return { x: xPts, y: yPts, width: widthPts, height: heightPts };
+}
+
+/** Backend PDF points (lower-left, CropBox-relative) to a pixel rect (top-left). */
+export function backendRectToPixels(
+  rect: PdfRect,
+  scaleX: number,
+  scaleY: number,
+  pageHeightPts: number,
+): PixelRect {
+  const topPts = pageHeightPts - rect.y - rect.height;
+  return {
+    left: rect.x * scaleX,
+    top: topPts * scaleY,
+    width: rect.width * scaleX,
+    height: rect.height * scaleY,
+  };
+}
+
+/** Clamp a pixel rect so it stays within the page bounds. */
+export function clampPixelRect(
+  rect: PixelRect,
+  pageWidthPx: number,
+  pageHeightPx: number,
+): PixelRect {
+  const width = Math.min(rect.width, pageWidthPx);
+  const height = Math.min(rect.height, pageHeightPx);
+  const left = Math.max(0, Math.min(rect.left, pageWidthPx - width));
+  const top = Math.max(0, Math.min(rect.top, pageHeightPx - height));
+  return { left, top, width, height };
+}
+
+/** Round a PdfRect's components to a sane precision before sending to the API. */
+export function roundPdfRect(rect: PdfRect): PdfRect {
+  const r = (n: number) => Math.round(n * 100) / 100;
+  return {
+    x: r(rect.x),
+    y: r(rect.y),
+    width: r(rect.width),
+    height: r(rect.height),
+  };
+}
+
+/**
+ * A field with its staged edit applied, back in the top-left widget space the extractor produces.
+ * Mirrors updateWidgetGeometry: the delta moves every widget on the anchor page, but only the
+ * first widget takes the new size.
+ */
+export function applyStagedGeometry(
+  field: FormField,
+  staged: ModifyFieldDefinition,
+): FormField {
+  const next: FormField = {
+    ...field,
+    type: staged.type ?? field.type,
+    options: staged.options ?? field.options,
+    readOnly: staged.readOnly ?? field.readOnly,
+    multiline: staged.multiline ?? field.multiline,
+  };
+
+  const widgets = field.widgets;
+  const anchor = widgets?.[0];
+  if (
+    !widgets ||
+    !anchor ||
+    staged.x == null ||
+    staged.y == null ||
+    staged.width == null ||
+    staged.height == null ||
+    anchor.cropBoxHeight == null
+  ) {
+    return next;
+  }
+
+  const top = anchor.cropBoxHeight - staged.y - staged.height;
+  const dx = staged.x - anchor.x;
+  const dy = top - anchor.y;
+  next.widgets = widgets.map((w, i) =>
+    w.pageIndex === anchor.pageIndex
+      ? {
+          ...w,
+          x: w.x + dx,
+          y: w.y + dy,
+          width: i === 0 ? staged.width! : w.width,
+          height: i === 0 ? staged.height! : w.height,
+        }
+      : w,
+  );
+  return next;
+}
+
+/**
+ * Per-option rects inside the group box, in the box's own units. Mirrors FormUtils.
+ * radioOptionRects exactly - if these two drift, the preview stops matching the applied PDF.
+ */
+export function radioOptionRects(
+  box: { width: number; height: number },
+  count: number,
+  gapOverride?: number | null,
+  sizeOverride?: number | null,
+): { top: number; size: number }[] {
+  const n = Math.max(1, count);
+  const h = box.height;
+  const slot = h / n;
+
+  let size: number;
+  if (sizeOverride != null && sizeOverride > 0) {
+    size = sizeOverride;
+  } else if (gapOverride != null && gapOverride >= 0) {
+    size = (h - (n - 1) * gapOverride) / n;
+  } else {
+    size = slot * 0.75;
+  }
+  size = Math.max(1, Math.min(size, box.width));
+
+  const gap =
+    gapOverride != null && gapOverride >= 0
+      ? gapOverride
+      : n > 1
+        ? Math.max(0, (h - n * size) / (n - 1))
+        : 0;
+
+  return Array.from({ length: n }, (_, i) => ({
+    top: i * (size + gap),
+    size,
+  }));
+}
diff --git a/frontend/editor/src/core/tools/formFill/formFieldColors.ts b/frontend/editor/src/core/tools/formFill/formFieldColors.ts
new file mode 100644
index 0000000000..b33fbd4457
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/formFieldColors.ts
@@ -0,0 +1,22 @@
+/**
+ * Form overlay palette, deliberately not per-type: slate = existing, blue = selected/new, red =
+ * delete. Field type is conveyed by the side-panel icon, not by a fill colour on the page.
+ */
+export const FORM_COLORS = {
+  /** Selected / active / newly-drawn fields. */
+  accent: "#2563eb",
+  accentFillSoft: "rgba(37, 99, 235, 0.06)",
+  accentFill: "rgba(37, 99, 235, 0.10)",
+
+  /** Existing (unselected) fields - quiet slate so the page stays readable. */
+  neutralBorder: "rgba(71, 85, 105, 0.55)",
+  neutralFill: "rgba(71, 85, 105, 0.05)",
+  neutralChip: "#475569",
+
+  /** Fields marked for deletion. */
+  danger: "#dc2626",
+  dangerFill: "rgba(220, 38, 38, 0.08)",
+
+  /** Alignment guides (thin lines, shown only while dragging). */
+  guide: "#2563eb",
+} as const;
diff --git a/frontend/editor/src/core/tools/formFill/formFieldMerge.test.ts b/frontend/editor/src/core/tools/formFill/formFieldMerge.test.ts
new file mode 100644
index 0000000000..7390952eb6
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/formFieldMerge.test.ts
@@ -0,0 +1,67 @@
+import { describe, it, expect } from "vitest";
+import { mergeSignatureAppearances } from "@app/tools/formFill/formFieldMerge";
+import type { FormField } from "@app/tools/formFill/types";
+
+function field(name: string, type: FormField["type"]): FormField {
+  return {
+    name,
+    label: name,
+    type,
+    value: "",
+    options: null,
+    displayOptions: null,
+    required: false,
+    readOnly: false,
+    multiSelect: false,
+    multiline: false,
+    tooltip: null,
+    widgets: [{ pageIndex: 0, x: 0, y: 0, width: 10, height: 10 }],
+  };
+}
+
+describe("mergeSignatureAppearances", () => {
+  it("does not duplicate a signature the backend already returned", () => {
+    // The backend now returns signature fields; the pdfium pass returns the
+    // same field with a rendered appearance. They must merge to ONE entry.
+    const backend = [field("FullName", "text"), field("Sign", "signature")];
+    const sig = {
+      ...field("Sign", "signature"),
+      appearanceDataUrl: "data:img",
+    };
+
+    const merged = mergeSignatureAppearances(backend, [sig]);
+
+    expect(merged).toHaveLength(2);
+    expect(merged.filter((f) => f.name === "Sign")).toHaveLength(1);
+    // …and the surviving entry is enriched with the rendered appearance.
+    expect(merged.find((f) => f.name === "Sign")?.appearanceDataUrl).toBe(
+      "data:img",
+    );
+  });
+
+  it("appends a signature the backend did not return", () => {
+    const backend = [field("FullName", "text")];
+    const sig = { ...field("Ghost", "signature"), appearanceDataUrl: "data:x" };
+
+    const merged = mergeSignatureAppearances(backend, [sig]);
+
+    expect(merged).toHaveLength(2);
+    expect(merged.map((f) => f.name)).toEqual(["FullName", "Ghost"]);
+  });
+
+  it("returns the backend list unchanged when there are no signatures", () => {
+    const backend = [field("A", "text"), field("B", "checkbox")];
+    expect(mergeSignatureAppearances(backend, [])).toBe(backend);
+  });
+
+  it("does not overwrite an existing appearance", () => {
+    const backend = [
+      { ...field("Sign", "signature"), appearanceDataUrl: "keep" },
+    ];
+    const sig = { ...field("Sign", "signature"), appearanceDataUrl: "new" };
+    const merged = mergeSignatureAppearances(backend, [sig]);
+    expect(merged.find((f) => f.name === "Sign")?.appearanceDataUrl).toBe(
+      "keep",
+    );
+  });
+});
diff --git a/frontend/editor/src/core/tools/formFill/formFieldMerge.ts b/frontend/editor/src/core/tools/formFill/formFieldMerge.ts
new file mode 100644
index 0000000000..455c2d6609
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/formFieldMerge.ts
@@ -0,0 +1,30 @@
+/**
+ * The backend returns signature fields but cannot render their appearance; PDFium rasterises it
+ * separately. Merge the two BY NAME, never concatenate, or the signature is listed twice.
+ */
+import type { FormField } from "@app/tools/formFill/types";
+
+/** Copies each pdfium `appearanceDataUrl` onto the same-named backend field, appending unmatched ones. */
+export function mergeSignatureAppearances(
+  backendFields: FormField[],
+  signatureFields: FormField[],
+): FormField[] {
+  if (signatureFields.length === 0) return backendFields;
+
+  const merged = backendFields.map((f) => ({ ...f }));
+  const byName = new Map(merged.map((f) => [f.name, f]));
+
+  for (const sig of signatureFields) {
+    const existing = byName.get(sig.name);
+    if (existing) {
+      if (sig.appearanceDataUrl && !existing.appearanceDataUrl) {
+        existing.appearanceDataUrl = sig.appearanceDataUrl;
+      }
+    } else {
+      merged.push({ ...sig });
+      byName.set(sig.name, merged[merged.length - 1]);
+    }
+  }
+
+  return merged;
+}
diff --git a/frontend/editor/src/core/tools/formFill/formFillEvents.ts b/frontend/editor/src/core/tools/formFill/formFillEvents.ts
new file mode 100644
index 0000000000..b1decb9b61
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/formFillEvents.ts
@@ -0,0 +1,13 @@
+/** Hands a produced PDF blob to EmbedPdfViewer, which reloads the file preserving scroll/rotation. */
+export const FORM_APPLY_EVENT = "formfill:apply";
+
+export interface FormApplyDetail {
+  blob: Blob;
+}
+
+/** Dispatch a produced PDF blob to the viewer for reload + refresh. */
+export function dispatchFormApply(blob: Blob): void {
+  window.dispatchEvent(
+    new CustomEvent<FormApplyDetail>(FORM_APPLY_EVENT, { detail: { blob } }),
+  );
+}
diff --git a/frontend/editor/src/core/tools/formFill/formSnapUtils.ts b/frontend/editor/src/core/tools/formFill/formSnapUtils.ts
new file mode 100644
index 0000000000..0ebfeeca38
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/formSnapUtils.ts
@@ -0,0 +1,130 @@
+/** Alignment snapping in page pixel space (top-left origin); matched lines come back as guides. */
+import type { PixelRect } from "@app/tools/formFill/formCoordinateUtils";
+
+export const DEFAULT_SNAP_THRESHOLD = 6;
+
+export interface SnapGuide {
+  /** "v" = vertical line at x; "h" = horizontal line at y. */
+  orientation: "v" | "h";
+  /** Pixel offset of the line within the page. */
+  position: number;
+}
+
+export interface SnapTargets {
+  /** Candidate vertical lines (left/right/centre of other fields). */
+  xs: number[];
+  /** Candidate horizontal lines (top/bottom/middle of other fields). */
+  ys: number[];
+}
+
+/** Build snap targets from the pixel rects of the other fields on a page. */
+export function collectSnapTargets(rects: PixelRect[]): SnapTargets {
+  const xs: number[] = [];
+  const ys: number[] = [];
+  for (const r of rects) {
+    xs.push(r.left, r.left + r.width, r.left + r.width / 2);
+    ys.push(r.top, r.top + r.height, r.top + r.height / 2);
+  }
+  return { xs, ys };
+}
+
+function nearest(
+  value: number,
+  targets: number[],
+  threshold: number,
+): { snapped: number; delta: number } | null {
+  let best: { snapped: number; delta: number } | null = null;
+  for (const t of targets) {
+    const delta = t - value;
+    if (
+      Math.abs(delta) <= threshold &&
+      (!best || Math.abs(delta) < Math.abs(best.delta))
+    ) {
+      best = { snapped: t, delta };
+    }
+  }
+  return best;
+}
+
+/** Snap a moving rectangle (size fixed) and report the matched guides. */
+export function snapMove(
+  rect: PixelRect,
+  targets: SnapTargets,
+  threshold = DEFAULT_SNAP_THRESHOLD,
+): { left: number; top: number; guides: SnapGuide[] } {
+  const guides: SnapGuide[] = [];
+  let { left, top } = rect;
+
+  // X axis: try left edge, right edge, then centre.
+  const xCandidates = [left, left + rect.width, left + rect.width / 2];
+  let xSnap: { snapped: number; delta: number } | null = null;
+  for (const c of xCandidates) {
+    const hit = nearest(c, targets.xs, threshold);
+    if (hit && (!xSnap || Math.abs(hit.delta) < Math.abs(xSnap.delta)))
+      xSnap = hit;
+  }
+  if (xSnap) {
+    left += xSnap.delta;
+    guides.push({ orientation: "v", position: xSnap.snapped });
+  }
+
+  const yCandidates = [top, top + rect.height, top + rect.height / 2];
+  let ySnap: { snapped: number; delta: number } | null = null;
+  for (const c of yCandidates) {
+    const hit = nearest(c, targets.ys, threshold);
+    if (hit && (!ySnap || Math.abs(hit.delta) < Math.abs(ySnap.delta)))
+      ySnap = hit;
+  }
+  if (ySnap) {
+    top += ySnap.delta;
+    guides.push({ orientation: "h", position: ySnap.snapped });
+  }
+
+  return { left, top, guides };
+}
+
+/** Snap a resizing rectangle: only the sides flagged in `edges` move, opposites stay put. */
+export function snapResize(
+  rect: PixelRect,
+  edges: { left?: boolean; right?: boolean; top?: boolean; bottom?: boolean },
+  targets: SnapTargets,
+  threshold = DEFAULT_SNAP_THRESHOLD,
+): { rect: PixelRect; guides: SnapGuide[] } {
+  const guides: SnapGuide[] = [];
+  let { left, top, width, height } = rect;
+  const right = left + width;
+  const bottom = top + height;
+
+  if (edges.left) {
+    const hit = nearest(left, targets.xs, threshold);
+    if (hit) {
+      left = hit.snapped;
+      width = right - left;
+      guides.push({ orientation: "v", position: hit.snapped });
+    }
+  }
+  if (edges.right) {
+    const hit = nearest(right, targets.xs, threshold);
+    if (hit) {
+      width = hit.snapped - left;
+      guides.push({ orientation: "v", position: hit.snapped });
+    }
+  }
+  if (edges.top) {
+    const hit = nearest(top, targets.ys, threshold);
+    if (hit) {
+      top = hit.snapped;
+      height = bottom - top;
+      guides.push({ orientation: "h", position: hit.snapped });
+    }
+  }
+  if (edges.bottom) {
+    const hit = nearest(bottom, targets.ys, threshold);
+    if (hit) {
+      height = hit.snapped - top;
+      guides.push({ orientation: "h", position: hit.snapped });
+    }
+  }
+
+  return { rect: { left, top, width, height }, guides };
+}
diff --git a/frontend/editor/src/core/tools/formFill/pendingSelection.ts b/frontend/editor/src/core/tools/formFill/pendingSelection.ts
new file mode 100644
index 0000000000..20257e9f6a
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/pendingSelection.ts
@@ -0,0 +1,20 @@
+/**
+ * A field the user has drawn but not yet applied has no PDF name, so it borrows the selection
+ * channel committed fields use. The prefix is readable on purpose - it reaches test ids and logs -
+ * and a real field would have to be named this exactly to collide.
+ */
+const PENDING_PREFIX = "__pending__:";
+
+export function pendingSelectionName(id: string): string {
+  return PENDING_PREFIX + id;
+}
+
+export function pendingIdFrom(name: string | null | undefined): string | null {
+  if (!name || !name.startsWith(PENDING_PREFIX)) return null;
+  return name.slice(PENDING_PREFIX.length);
+}
+
+/** True for a selection that has no PDF field behind it yet. */
+export function isPendingSelection(name: string | null | undefined): boolean {
+  return pendingIdFrom(name) != null;
+}
diff --git a/frontend/editor/src/core/tools/formFill/radioLayout.test.ts b/frontend/editor/src/core/tools/formFill/radioLayout.test.ts
new file mode 100644
index 0000000000..4a1cd9fb06
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/radioLayout.test.ts
@@ -0,0 +1,40 @@
+import { describe, expect, it } from "vitest";
+import { radioOptionRects } from "@app/tools/formFill/formCoordinateUtils";
+
+/**
+ * These mirror FormUtilsRadioCaptionTest on the Java side. If the two layouts drift, the create
+ * preview stops matching the PDF that gets written, which is the bug this rule was added to fix.
+ */
+describe("radioOptionRects", () => {
+  it("fills exactly the drawn height", () => {
+    const rows = radioOptionRects({ width: 100, height: 90 }, 3);
+    expect(rows).toHaveLength(3);
+    const extent = rows[2].top + rows[2].size - rows[0].top;
+    expect(extent).toBeCloseTo(90, 5);
+    expect(rows[0].top).toBe(0);
+  });
+
+  it("agrees with the backend for the default 3-option case", () => {
+    // Java: size 22.5, gap 11.25 for a 100x90 box.
+    const rows = radioOptionRects({ width: 100, height: 90 }, 3);
+    expect(rows[0].size).toBeCloseTo(22.5, 5);
+    expect(rows[1].top - (rows[0].top + rows[0].size)).toBeCloseTo(11.25, 5);
+  });
+
+  it("uses an explicit size and gap verbatim", () => {
+    const rows = radioOptionRects({ width: 100, height: 90 }, 3, 20, 14);
+    expect(rows.every((r) => r.size === 14)).toBe(true);
+    expect(rows[1].top - (rows[0].top + rows[0].size)).toBeCloseTo(20, 5);
+  });
+
+  it("never lets an option exceed the box width", () => {
+    const rows = radioOptionRects({ width: 8, height: 90 }, 3);
+    expect(rows.every((r) => r.size <= 8)).toBe(true);
+  });
+
+  it("handles a single option", () => {
+    const rows = radioOptionRects({ width: 40, height: 40 }, 1);
+    expect(rows).toHaveLength(1);
+    expect(rows[0].size).toBeLessThanOrEqual(40);
+  });
+});
diff --git a/frontend/editor/src/core/tools/formFill/types.ts b/frontend/editor/src/core/tools/formFill/types.ts
index 3f263ff817..364e32d1db 100644
--- a/frontend/editor/src/core/tools/formFill/types.ts
+++ b/frontend/editor/src/core/tools/formFill/types.ts
@@ -13,6 +13,8 @@ export interface WidgetCoordinates {
   exportValue?: string;
   /** Font size in PDF points */
   fontSize?: number;
+  /** CropBox height in PDF points; lets the editor reverse the backend's Y-flip when sending coordinates back. */
+  cropBoxHeight?: number;
 }
 
 export interface FormField {
@@ -34,8 +36,16 @@ export interface FormField {
   buttonLabel?: string | null;
   /** Action descriptor for push buttons */
   buttonAction?: ButtonAction | null;
+  /** Same action as the editable spec string the backend round-trips ("reset", "uri:<url>", ...) */
+  buttonActionSpec?: string | null;
+  /** Text field /MaxLen; >0 also makes it a comb field */
+  maxLength?: number | null;
   /** Pre-rendered appearance image for signed signature fields (data URL). */
   appearanceDataUrl?: string;
+  /** Gap between radio options in points; derived from the drawn box when unset. */
+  optionGap?: number;
+  /** Radio option size in points; derived from the drawn box when unset. */
+  optionSize?: number;
 }
 
 export type FormFieldType =
@@ -67,6 +77,115 @@ export interface ButtonAction {
   submitFlags?: number;
 }
 
+/** Field types that can be created/edited structurally through the editor. */
+export type CreatableFieldType =
+  | "text"
+  | "checkbox"
+  | "combobox"
+  | "listbox"
+  | "radio"
+  | "button"
+  | "signature";
+
+export const CREATABLE_FIELD_TYPES: CreatableFieldType[] = [
+  "text",
+  "checkbox",
+  "combobox",
+  "listbox",
+  "radio",
+  "button",
+  "signature",
+];
+
+/**
+ * A new field queued for creation. Coordinates are CropBox-relative,
+ * lower-left-origin PDF points - the reverse of what WidgetCoordinates carries.
+ */
+export interface NewFieldDefinition {
+  name: string;
+  label?: string;
+  type: CreatableFieldType;
+  pageIndex: number;
+  x: number;
+  y: number;
+  width: number;
+  height: number;
+  required?: boolean;
+  multiSelect?: boolean;
+  options?: string[];
+  defaultValue?: string;
+  tooltip?: string;
+  fontSize?: number;
+  readOnly?: boolean;
+  multiline?: boolean;
+  maxLength?: number; // text only; >0 also makes it a comb field
+  /** Push-button activation action: "reset" | "print" | "uri:<url>" | "submit:<url>" */
+  buttonAction?: string;
+  /** Gap between radio options in points; derived from the drawn box when unset. */
+  optionGap?: number;
+  /** Radio option size in points; derived from the drawn box when unset. */
+  optionSize?: number;
+}
+
+/**
+ * A change to an existing field. Only non-undefined properties are applied.
+ * Coordinates (when present) are CropBox-relative, lower-left-origin PDF points.
+ */
+export interface ModifyFieldDefinition {
+  targetName: string;
+  name?: string;
+  label?: string;
+  type?: FormFieldType;
+  pageIndex?: number;
+  x?: number;
+  y?: number;
+  width?: number;
+  height?: number;
+  required?: boolean;
+  multiSelect?: boolean;
+  options?: string[];
+  defaultValue?: string;
+  tooltip?: string;
+  fontSize?: number;
+  readOnly?: boolean;
+  multiline?: boolean;
+  maxLength?: number; // text only; >0 also makes it a comb field
+  /** Push-button activation action: "reset" | "print" | "uri:<url>" | "submit:<url>" */
+  buttonAction?: string;
+  /** Gap between radio options in points; derived from the drawn box when unset. */
+  optionGap?: number;
+  /** Radio option size in points; derived from the drawn box when unset. */
+  optionSize?: number;
+}
+
+/** A batch of field edits committed in one request via /api/v1/form/edit-fields. */
+export interface FieldEditBatch {
+  add?: NewFieldDefinition[];
+  modify?: ModifyFieldDefinition[];
+  delete?: string[];
+}
+
+/** One requested edit the document could not take. The rest of the batch still applied. */
+export interface SkippedFieldEdit {
+  operation: "add" | "modify" | "delete";
+  target?: string | null;
+  reason?: string | null;
+}
+
+/** The updated PDF plus whatever the backend had to drop. */
+export interface FieldEditResult {
+  blob: Blob;
+  /** Capped at 20 entries so the response header stays inside Jetty's budget. */
+  skipped: SkippedFieldEdit[];
+  /** How many were skipped in total, which may exceed skipped.length. */
+  skippedTotal: number;
+  /** Present when the backend bundled the field list in, saving a second upload. */
+  fields?: FormField[];
+}
+
+/** The form tool's working mode. */
+export type FormMode = "fill" | "create" | "modify";
+
 export interface FormFillState {
   /** Fields fetched from backend with coordinates */
   fields: FormField[];
diff --git a/frontend/editor/src/core/tools/formFill/useFieldShortcuts.ts b/frontend/editor/src/core/tools/formFill/useFieldShortcuts.ts
new file mode 100644
index 0000000000..2e5dd8420d
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/useFieldShortcuts.ts
@@ -0,0 +1,138 @@
+/**
+ * Delete, copy and paste for the selected form field, in both create and modify mode.
+ */
+import { useEffect, useRef } from "react";
+
+import { useFormFill } from "@app/tools/formFill/FormFillContext";
+import { isTextEntryTarget } from "@app/tools/formFill/usePageScale";
+import {
+  pendingIdFrom,
+  pendingSelectionName,
+} from "@app/tools/formFill/pendingSelection";
+import type {
+  CreatableFieldType,
+  NewFieldDefinition,
+} from "@app/tools/formFill/types";
+
+/** Enough offset that the copy is visibly its own field rather than hiding the original. */
+const PASTE_OFFSET_PT = 12;
+
+type Copied = Omit<NewFieldDefinition, "name"> & { name?: string };
+
+export function useFieldShortcuts() {
+  const {
+    mode,
+    state,
+    selectedFieldName,
+    setSelectedField,
+    pendingFields,
+    addPendingField,
+    removePendingField,
+    toggleFieldDeleted,
+    undo,
+  } = useFormFill();
+
+  const clipboardRef = useRef<Copied | null>(null);
+
+  // Refs, so the listener is installed once instead of on every selection change.
+  const latest = useRef({
+    mode,
+    state,
+    selectedFieldName,
+    setSelectedField,
+    pendingFields,
+    addPendingField,
+    removePendingField,
+    toggleFieldDeleted,
+    undo,
+  });
+  latest.current = {
+    mode,
+    state,
+    selectedFieldName,
+    setSelectedField,
+    pendingFields,
+    addPendingField,
+    removePendingField,
+    toggleFieldDeleted,
+    undo,
+  };
+
+  useEffect(() => {
+    const onKeyDown = (event: KeyboardEvent) => {
+      const ctx = latest.current;
+      if (ctx.mode === "fill") return;
+      // Never steal a shortcut from a field the user is typing in.
+      if (isTextEntryTarget(event.target)) return;
+
+      const selected = ctx.selectedFieldName;
+      const pendingId = pendingIdFrom(selected);
+      const copyOrPaste = event.ctrlKey || event.metaKey;
+
+      // Undo steps back through the staged edits, newest first.
+      if (copyOrPaste && event.key.toLowerCase() === "z" && !event.shiftKey) {
+        if (ctx.undo()) event.preventDefault();
+        return;
+      }
+
+      if (copyOrPaste && event.key.toLowerCase() === "c") {
+        if (!selected) return;
+        const pending = pendingId
+          ? ctx.pendingFields.find((f) => f.id === pendingId)
+          : null;
+        if (pending) {
+          const { id: _id, ...rest } = pending;
+          clipboardRef.current = rest;
+          event.preventDefault();
+          return;
+        }
+        const field = ctx.state.fields.find((f) => f.name === selected);
+        const widget = field?.widgets?.[0];
+        if (!field || !widget) return;
+        clipboardRef.current = {
+          name: field.name,
+          type: field.type as CreatableFieldType,
+          pageIndex: widget.pageIndex,
+          x: widget.x,
+          y: widget.y,
+          width: widget.width,
+          height: widget.height,
+          options: field.options ?? undefined,
+          required: field.required,
+          multiline: field.multiline,
+        };
+        event.preventDefault();
+        return;
+      }
+
+      if (copyOrPaste && event.key.toLowerCase() === "v") {
+        const copied = clipboardRef.current;
+        if (!copied) return;
+        // The name is dropped: two fields cannot share one, and the queue names it.
+        const { name: _name, ...geometry } = copied;
+        const id = ctx.addPendingField({
+          ...geometry,
+          x: geometry.x + PASTE_OFFSET_PT,
+          y: geometry.y - PASTE_OFFSET_PT,
+        });
+        ctx.setSelectedField(pendingSelectionName(id));
+        event.preventDefault();
+        return;
+      }
+
+      if (event.key === "Delete" || event.key === "Backspace") {
+        if (!selected) return;
+        if (pendingId) {
+          ctx.removePendingField(pendingId);
+        } else {
+          ctx.toggleFieldDeleted(selected);
+        }
+        ctx.setSelectedField(null);
+        event.preventDefault();
+      }
+    };
+
+    window.addEventListener("keydown", onKeyDown);
+    return () => window.removeEventListener("keydown", onKeyDown);
+  }, []);
+}
diff --git a/frontend/editor/src/core/tools/formFill/useFormCommit.ts b/frontend/editor/src/core/tools/formFill/useFormCommit.ts
new file mode 100644
index 0000000000..6616d727d0
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/useFormCommit.ts
@@ -0,0 +1,64 @@
+/**
+ * Shared commit flow for the create and modify panels: run an action producing
+ * the edited PDF blob, hand it to the viewer, track committing/error state.
+ */
+import { useState, useCallback } from "react";
+import { useTranslation } from "react-i18next";
+import { isAxiosError } from "axios";
+import { dispatchFormApply } from "@app/tools/formFill/formFillEvents";
+
+/**
+ * responseType "blob" means an error's ProblemDetail arrives as a Blob, so read
+ * the body to surface which field the backend refused.
+ */
+export async function serverMessage(err: unknown): Promise<string | null> {
+  if (!isAxiosError(err)) return null;
+  const data: unknown = err.response?.data;
+  try {
+    const text = data instanceof Blob ? await data.text() : null;
+    const parsed: unknown = text ? JSON.parse(text) : data;
+    if (parsed && typeof parsed === "object") {
+      const body = parsed as Record<string, unknown>;
+      for (const key of ["detail", "message", "error", "title"]) {
+        if (typeof body[key] === "string" && body[key]) return body[key];
+      }
+    }
+    return typeof text === "string" && text.trim() ? text.trim() : null;
+  } catch {
+    return null;
+  }
+}
+
+export function useFormCommit(onApplied?: (blob: Blob) => void) {
+  const { t } = useTranslation();
+  const [committing, setCommitting] = useState(false);
+  const [error, setError] = useState<string | null>(null);
+
+  const commit = useCallback(
+    async (
+      run: () => Promise<Blob>,
+      errorKey: string,
+      errorFallback: string,
+    ) => {
+      setCommitting(true);
+      setError(null);
+      try {
+        const blob = await run();
+        dispatchFormApply(blob);
+        onApplied?.(blob);
+      } catch (err) {
+        setError(
+          (await serverMessage(err)) ||
+            (err instanceof Error ? err.message : undefined) ||
+            t(errorKey, errorFallback),
+        );
+        console.error("[FormFill] commit failed:", err);
+      } finally {
+        setCommitting(false);
+      }
+    },
+    [onApplied, t],
+  );
+
+  return { committing, error, setError, commit };
+}
diff --git a/frontend/editor/src/core/tools/formFill/usePageScale.test.ts b/frontend/editor/src/core/tools/formFill/usePageScale.test.ts
new file mode 100644
index 0000000000..d49abf7baf
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/usePageScale.test.ts
@@ -0,0 +1,103 @@
+/**
+ * Overlays sit inside EmbedPDF's <Rotate>, but getBoundingClientRect reports the
+ * axis-aligned screen box; these cases invert plugin-rotate's getRotationMatrix.
+ */
+import { describe, it, expect } from "vitest";
+import {
+  getLocalPoint,
+  isTextEntryTarget,
+} from "@app/tools/formFill/usePageScale";
+
+/** An element whose un-rotated box is w x h, as it appears on screen after `turns`. */
+function rotatedElement(w: number, h: number, turns: number): HTMLElement {
+  const swapped = turns === 1 || turns === 3;
+  const rect = {
+    left: 0,
+    top: 0,
+    width: swapped ? h : w,
+    height: swapped ? w : h,
+  };
+  return {
+    getBoundingClientRect: () => rect as DOMRect,
+  } as unknown as HTMLElement;
+}
+
+/** Forward transform: local -> screen, straight from EmbedPDF's matrix. */
+function toScreen(x: number, y: number, w: number, h: number, turns: number) {
+  switch (turns) {
+    case 1:
+      return { clientX: h - y, clientY: x };
+    case 2:
+      return { clientX: w - x, clientY: h - y };
+    case 3:
+      return { clientX: y, clientY: w - x };
+    default:
+      return { clientX: x, clientY: y };
+  }
+}
+
+describe("getLocalPoint", () => {
+  const W = 400;
+  const H = 600;
+  const points = [
+    [0, 0],
+    [W, 0],
+    [0, H],
+    [W, H],
+    [123, 456],
+  ];
+
+  for (const turns of [0, 1, 2, 3]) {
+    it(`inverts EmbedPDF's transform at ${turns} quarter turn(s)`, () => {
+      const el = rotatedElement(W, H, turns);
+      for (const [x, y] of points) {
+        const local = getLocalPoint(toScreen(x, y, W, H, turns), el, turns);
+        expect(local.x).toBeCloseTo(x, 5);
+        expect(local.y).toBeCloseTo(y, 5);
+      }
+    });
+  }
+
+  it("treats rotation as quarter turns, not degrees", () => {
+    // EmbedPDF's Rotation enum is Degree90 = 1; 90 would normalise to 2 and flip
+    // the page the wrong way, so 90 and 1 must NOT agree.
+    const el = rotatedElement(W, H, 1);
+    const screen = toScreen(10, 20, W, H, 1);
+    expect(getLocalPoint(screen, el, 1)).not.toEqual(
+      getLocalPoint(screen, el, 90),
+    );
+  });
+
+  it("normalises out-of-range and negative rotations", () => {
+    const el = rotatedElement(W, H, 1);
+    const screen = toScreen(10, 20, W, H, 1);
+    expect(getLocalPoint(screen, el, 5)).toEqual(getLocalPoint(screen, el, 1));
+    expect(getLocalPoint(screen, el, -3)).toEqual(getLocalPoint(screen, el, 1));
+  });
+
+  it("returns the origin when the element is gone", () => {
+    expect(getLocalPoint({ clientX: 5, clientY: 5 }, null)).toEqual({
+      x: 0,
+      y: 0,
+    });
+  });
+});
+
+describe("isTextEntryTarget", () => {
+  it("claims inputs, textareas, selects and contenteditable", () => {
+    for (const tag of ["input", "textarea", "select"]) {
+      expect(isTextEntryTarget(document.createElement(tag))).toBe(true);
+    }
+    const editable = document.createElement("div");
+    editable.contentEditable = "true";
+    // jsdom does not implement isContentEditable, so assert on the real getter.
+    Object.defineProperty(editable, "isContentEditable", { value: true });
+    expect(isTextEntryTarget(editable)).toBe(true);
+  });
+
+  it("leaves ordinary elements and non-elements alone", () => {
+    expect(isTextEntryTarget(document.createElement("div"))).toBe(false);
+    expect(isTextEntryTarget(null)).toBe(false);
+    expect(isTextEntryTarget(new EventTarget())).toBe(false);
+  });
+});
diff --git a/frontend/editor/src/core/tools/formFill/usePageScale.ts b/frontend/editor/src/core/tools/formFill/usePageScale.ts
new file mode 100644
index 0000000000..de5523cdf4
--- /dev/null
+++ b/frontend/editor/src/core/tools/formFill/usePageScale.ts
@@ -0,0 +1,92 @@
+/** Shared pixel<->PDF-point helpers, on the same basis as FormFieldOverlay so the overlays agree. */
+import { useMemo } from "react";
+import { useDocumentState } from "@embedpdf/core/react";
+
+export interface PageScale {
+  scaleX: number;
+  scaleY: number;
+  /** CropBox height in PDF points; 0 until the page has rendered. */
+  pageHeightPts: number;
+  /** CropBox width in PDF points; 0 until the page has rendered. */
+  pageWidthPts: number;
+  /** Page rotation in clockwise quarter turns (0-3), as EmbedPDF's <Rotate> applies it. */
+  rotation: number;
+}
+
+/** Rotation as clockwise quarter turns, matching LocalEmbedPDF's normalizePageRotation. */
+function normalizeRotation(rotation: number | null | undefined): number {
+  const value =
+    typeof rotation === "number" && Number.isFinite(rotation) ? rotation : 0;
+  return ((Math.round(value) % 4) + 4) % 4;
+}
+
+/**
+ * `scaleX = pageWidthPx / pageWidthPts`, from EmbedPDF's document state.
+ * pageWidthPts is 0 until the page has rendered, so guard on it before drawing.
+ */
+export function usePageScale(
+  documentId: string,
+  pageIndex: number,
+  pageWidth: number,
+  pageHeight: number,
+): PageScale {
+  const documentState = useDocumentState(documentId);
+  return useMemo(() => {
+    const pdfPage = documentState?.document?.pages?.[pageIndex];
+    // Must match EmbedPDF's <Rotate>, which composes the page's own rotation
+    // with the viewer-level one; using only the page's is wrong once rotated.
+    const rotation = normalizeRotation(
+      (pdfPage?.rotation ?? 0) + (documentState?.rotation ?? 0),
+    );
+    if (!pdfPage?.size || !pageWidth || !pageHeight) {
+      const s = documentState?.scale ?? 1;
+      return {
+        scaleX: s,
+        scaleY: s,
+        pageHeightPts: 0,
+        pageWidthPts: 0,
+        rotation,
+      };
+    }
+    return {
+      scaleX: pageWidth / pdfPage.size.width,
+      scaleY: pageHeight / pdfPage.size.height,
+      pageHeightPts: pdfPage.size.height,
+      pageWidthPts: pdfPage.size.width,
+      rotation,
+    };
+  }, [documentState, pageIndex, pageWidth, pageHeight]);
+}
+
+/**
+ * Pointer position in the element's own un-rotated pixel space. getBoundingClientRect
+ * returns the axis-aligned screen box, so under <Rotate> it must be mapped back.
+ */
+export function getLocalPoint(
+  e: { clientX: number; clientY: number },
+  el: HTMLElement | null,
+  rotation: number = 0,
+): { x: number; y: number } {
+  const rect = el?.getBoundingClientRect();
+  if (!rect) return { x: 0, y: 0 };
+  const sx = e.clientX - rect.left;
+  const sy = e.clientY - rect.top;
+  switch (normalizeRotation(rotation)) {
+    case 1:
+      return { x: sy, y: rect.width - sx };
+    case 2:
+      return { x: rect.width - sx, y: rect.height - sy };
+    case 3:
+      return { x: rect.height - sy, y: sx };
+    default:
+      return { x: sx, y: sy };
+  }
+}
+
+/** True when a key event targets somewhere the user is typing, so shortcuts must stand down. */
+export function isTextEntryTarget(target: EventTarget | null): boolean {
+  if (!(target instanceof HTMLElement)) return false;
+  if (target.isContentEditable) return true;
+  const tag = target.tagName;
+  return tag === "INPUT" || tag === "TEXTAREA" || tag === "SELECT";
+}
diff --git a/frontend/editor/src/core/types/fileContext.ts b/frontend/editor/src/core/types/fileContext.ts
index 0d99b3589d..b4a48e3d00 100644
--- a/frontend/editor/src/core/types/fileContext.ts
+++ b/frontend/editor/src/core/types/fileContext.ts
@@ -9,6 +9,9 @@ import { generateId } from "@app/utils/generateId";
 // Re-export FileId for convenience
 export type { FileId };
 
+/** How sure a classifier was about the labels it produced. */
+export type ClassificationConfidence = "none" | "low" | "medium" | "high";
+
 // Normalized state types
 export interface ProcessedFilePage {
   thumbnail?: string;
@@ -61,6 +64,17 @@ export interface StirlingFileStub extends BaseFileMetadata {
    * unclassified files / non-SaaS builds.
    */
   classificationLabels?: string[];
+  /**
+   * How sure the local heuristic was about {@link classificationLabels}: a confident verdict
+   * stands, an unsure one escalates to the AI. Undefined when the labels came from the AI.
+   */
+  classificationConfidence?: ClassificationConfidence;
+  /**
+   * This session proved the stored bytes unreadable (WebKit losing a blob's
+   * backing store). The row renders as "data lost" instead of pretending the
+   * file can open; re-uploading is the only recovery.
+   */
+  dataUnavailable?: boolean;
   // Note: File object stored in provider ref, not in state
 }
 
@@ -323,6 +337,11 @@ export interface FileContextActions {
       insertAfterPageId?: string;
       selectFiles?: boolean;
       skipUploadTracking?: boolean;
+      /**
+       * Produced in-app rather than uploaded, which stops the policy auto-run enforcing an upload
+       * policy on it. Set by anything adding a file already through a policy or a tool.
+       */
+      derivedFromTool?: boolean;
     },
   ) => Promise<StirlingFile[]>;
   addFilesWithOptions: (
diff --git a/frontend/editor/src/core/types/toolApiTypes.ts b/frontend/editor/src/core/types/toolApiTypes.ts
index bf498eb450..55938d231e 100644
--- a/frontend/editor/src/core/types/toolApiTypes.ts
+++ b/frontend/editor/src/core/types/toolApiTypes.ts
@@ -3,11 +3,17 @@
 // (SwaggerDoc.json). Regenerate with: task frontend:tool-models
 // Tools that take only a file input have no parameters; their model is Record<string, never>.
 
+export interface AccessibilityReportRequest {
+  /**
+   * Profile to check against
+   */
+  profile?: "ua1" | "ua2";
+}
 export interface AddAttachmentRequest {
   /**
    * The image file to be overlaid onto the PDF.
    */
-  attachments: string[];
+  attachments: File[];
   /**
    * Convert the resulting PDF to PDF/A-3b format after adding attachments
    */
@@ -148,7 +154,7 @@ export interface AddStampRequest {
    * The rotation of the stamp in degrees
    */
   rotation?: number;
-  stampImage?: string;
+  stampImage?: File;
   /**
    * The stamp text
    */
@@ -187,7 +193,7 @@ export interface AddWatermarkRequest {
    * The rotation of the watermark in degrees
    */
   rotation?: number;
-  watermarkImage?: string;
+  watermarkImage?: File;
   /**
    * The watermark text
    */
@@ -201,6 +207,9 @@ export interface AddWatermarkRequest {
    */
   widthSpacer?: number;
 }
+export interface AiToolsClassifyAndLabelRequest {
+  reclassify?: boolean;
+}
 export interface AutoRotatePdfRequest {
   /**
    * Minimum Tesseract OSD orientation confidence required before a correction is applied. Matches OCRmyPDF's --rotate-pages-threshold scale
@@ -525,9 +534,7 @@ export interface FlattenRequest {
    */
   renderDpi?: number;
 }
-export interface GeneralExtractBookmarksRequest {
-  file: string;
-}
+export type GeneralExtractBookmarksRequest = Record<string, never>;
 export type GeneralFile = Record<string, never>;
 export type GeneralPdfToSinglePageRequest = Record<string, never>;
 export type GeneralRemoveImagePdfRequest = Record<string, never>;
@@ -788,7 +795,7 @@ export interface OverlayImageRequest {
    * Whether to overlay the image onto every page of the PDF.
    */
   everyPage?: boolean;
-  imageFile: string;
+  imageFile: File;
   /**
    * The x-coordinate at which to place the top-left corner of the image.
    */
@@ -806,7 +813,7 @@ export interface OverlayPdfsRequest {
   /**
    * An array of PDF files to be used as overlays on the base PDF. The order in these files is applied based on the selected mode.
    */
-  overlayFiles: string[];
+  overlayFiles: File[];
   /**
    * The mode of overlaying: 'SequentialOverlay' for sequential application, 'InterleavedOverlay' for round-robin application, 'FixedRepeatOverlay' for fixed repetition based on provided counts
    */
@@ -888,12 +895,53 @@ export interface PdfToPdfARequest {
     | "pdfa-2b"
     | "pdfa-3"
     | "pdfa-3b"
+    | "pdfa-1a"
+    | "pdfa-2a"
+    | "pdfa-3a"
     | "pdfx";
+  /**
+   * Also declare PDF/UA accessibility alongside PDF/A. Only applies to the level A formats, and the claim is written only if it validates.
+   */
+  pdfUa?: boolean;
   /**
    * If true, the conversion will fail if the output is not perfectly compliant
    */
   strict?: boolean;
 }
+export interface PdfToPdfUaRequest {
+  /**
+   * Alternative descriptions for figures, as key=text pairs separated by newlines. Keys come from the accessibility-report endpoint's figuresNeedingDescription list, for example "0:12=Bar chart of quarterly revenue". Descriptions are never invented, so without these an illustrated document cannot claim conformance.
+   */
+  altText?: string;
+  /**
+   * Embed fonts the document references but does not carry. Required for conformance and needs Ghostscript.
+   */
+  embedFonts?: boolean;
+  /**
+   * What to do with an existing structure tree: keep it, rebuild it, or decide automatically
+   */
+  existingTags?: "auto" | "keep" | "rebuild";
+  /**
+   * How to treat images with no description. require-alt leaves them undescribed so the report asks for input; mark-decorative treats every image as decoration.
+   */
+  figurePolicy?: "require-alt" | "mark-decorative";
+  /**
+   * Document language as a BCP-47 tag, for example en-GB. Applied only when the document does not already declare one, unless overrideLanguage is set.
+   */
+  language?: string;
+  /**
+   * Replace the language the document already declares. Off by default, so a document is never relabelled into a language it is not written in.
+   */
+  overrideLanguage?: boolean;
+  /**
+   * PDF/UA conformance level to target
+   */
+  profile?: "ua1" | "ua2";
+  /**
+   * Document title, required by PDF/UA. Falls back to the first heading, then the filename.
+   */
+  title?: string;
+}
 export interface PdfToPresentationRequest {
   /**
    * The output Presentation format
@@ -1276,7 +1324,6 @@ export interface ScannerEffectRequest {
   yellowish?: boolean;
 }
 export interface SecurityCertSignSessionsRequest {
-  file: string;
   request?: WorkflowCreationRequest;
 }
 export interface WorkflowCreationRequest {
@@ -1291,8 +1338,8 @@ export interface WorkflowCreationRequest {
 }
 export interface SecurityCertSignValidateCertificateRequest {
   certType: string;
-  jksFile?: string;
-  p12File?: string;
+  jksFile?: File;
+  p12File?: File;
   password?: string;
 }
 export type SecurityGetInfoOnPdfRequest = Record<string, never>;
@@ -1302,7 +1349,7 @@ export interface SignPDFWithCertRequest {
    * The alias of the certificate to sign with. Required for WINDOWS_STORE and recommended for PKCS11 tokens holding multiple certificates.
    */
   alias?: string;
-  certFile?: string;
+  certFile?: File;
   /**
    * The type of the digital certificate. WINDOWS_STORE and PKCS11 are hardware-backed and only available in the desktop app.
    */
@@ -1314,7 +1361,7 @@ export interface SignPDFWithCertRequest {
     | "SERVER"
     | "WINDOWS_STORE"
     | "PKCS11";
-  jksFile?: string;
+  jksFile?: File;
   /**
    * The location where the PDF is signed
    */
@@ -1323,7 +1370,7 @@ export interface SignPDFWithCertRequest {
    * The name of the signer
    */
   name?: string;
-  p12File?: string;
+  p12File?: File;
   /**
    * The page number where the signature should be visible. This is required if showSignature is set to true
    */
@@ -1340,7 +1387,7 @@ export interface SignPDFWithCertRequest {
    * Optional PKCS#11 slot index. When omitted the first slot with a token is used.
    */
   pkcs11Slot?: number;
-  privateKeyFile?: string;
+  privateKeyFile?: File;
   /**
    * The reason for signing the PDF
    */
@@ -1355,7 +1402,7 @@ export interface SignPDFWithCertRequest {
   showSignature?: boolean;
 }
 export interface SignatureValidationRequest {
-  certFile?: string;
+  certFile?: File;
 }
 export interface SplitPagesRequest {
   /**
@@ -1441,6 +1488,7 @@ export interface UrlToPdfRequest {
 
 /** Endpoint path for a generated tool operation (the operation identity across languages). */
 export type ToolEndpoint =
+  | "/api/v1/ai/tools/classify-and-label"
   | "/api/v1/convert/cbr/pdf"
   | "/api/v1/convert/cbz/pdf"
   | "/api/v1/convert/ebook/pdf"
@@ -1461,6 +1509,7 @@ export type ToolEndpoint =
   | "/api/v1/convert/pdf/text"
   | "/api/v1/convert/pdf/text-editor"
   | "/api/v1/convert/pdf/text-editor/metadata"
+  | "/api/v1/convert/pdf/ua"
   | "/api/v1/convert/pdf/vector"
   | "/api/v1/convert/pdf/word"
   | "/api/v1/convert/pdf/xlsx"
@@ -1522,6 +1571,7 @@ export type ToolEndpoint =
   | "/api/v1/misc/show-javascript"
   | "/api/v1/misc/unlock-pdf-forms"
   | "/api/v1/misc/update-metadata"
+  | "/api/v1/security/accessibility-report"
   | "/api/v1/security/add-password"
   | "/api/v1/security/add-watermark"
   | "/api/v1/security/auto-redact"
@@ -1541,6 +1591,7 @@ export type ToolEndpoint =
 
 /** Backend request-parameter model for each tool endpoint. */
 export interface ToolApiParams {
+  "/api/v1/ai/tools/classify-and-label": AiToolsClassifyAndLabelRequest;
   "/api/v1/convert/cbr/pdf": ConvertCbrToPdfRequest;
   "/api/v1/convert/cbz/pdf": ConvertCbzToPdfRequest;
   "/api/v1/convert/ebook/pdf": ConvertEbookToPdfRequest;
@@ -1561,6 +1612,7 @@ export interface ToolApiParams {
   "/api/v1/convert/pdf/text": PdfToTextOrRTFRequest;
   "/api/v1/convert/pdf/text-editor": ConvertPdfTextEditorRequest;
   "/api/v1/convert/pdf/text-editor/metadata": ConvertPdfTextEditorMetadataRequest;
+  "/api/v1/convert/pdf/ua": PdfToPdfUaRequest;
   "/api/v1/convert/pdf/vector": PdfVectorExportRequest;
   "/api/v1/convert/pdf/word": PdfToWordRequest;
   "/api/v1/convert/pdf/xlsx": PDFWithPageNums;
@@ -1622,6 +1674,7 @@ export interface ToolApiParams {
   "/api/v1/misc/show-javascript": MiscShowJavascriptRequest;
   "/api/v1/misc/unlock-pdf-forms": MiscUnlockPdfFormsRequest;
   "/api/v1/misc/update-metadata": MetadataRequest;
+  "/api/v1/security/accessibility-report": AccessibilityReportRequest;
   "/api/v1/security/add-password": AddPasswordRequest;
   "/api/v1/security/add-watermark": AddWatermarkRequest;
   "/api/v1/security/auto-redact": RedactPdfRequest;
@@ -1642,6 +1695,7 @@ export interface ToolApiParams {
 
 /** Every generated tool endpoint, for iteration. */
 export const TOOL_ENDPOINTS = [
+  "/api/v1/ai/tools/classify-and-label",
   "/api/v1/convert/cbr/pdf",
   "/api/v1/convert/cbz/pdf",
   "/api/v1/convert/ebook/pdf",
@@ -1662,6 +1716,7 @@ export const TOOL_ENDPOINTS = [
   "/api/v1/convert/pdf/text",
   "/api/v1/convert/pdf/text-editor",
   "/api/v1/convert/pdf/text-editor/metadata",
+  "/api/v1/convert/pdf/ua",
   "/api/v1/convert/pdf/vector",
   "/api/v1/convert/pdf/word",
   "/api/v1/convert/pdf/xlsx",
@@ -1723,6 +1778,7 @@ export const TOOL_ENDPOINTS = [
   "/api/v1/misc/show-javascript",
   "/api/v1/misc/unlock-pdf-forms",
   "/api/v1/misc/update-metadata",
+  "/api/v1/security/accessibility-report",
   "/api/v1/security/add-password",
   "/api/v1/security/add-watermark",
   "/api/v1/security/auto-redact",
@@ -1741,5 +1797,22 @@ export const TOOL_ENDPOINTS = [
   "/api/v1/security/verify-pdf",
 ] as const satisfies readonly ToolEndpoint[];
 
+/** The supporting-file parameters each endpoint accepts beyond its primary fileInput, by name. */
+export const TOOL_FILE_FIELDS = {
+  "/api/v1/general/overlay-pdfs": ["overlayFiles"],
+  "/api/v1/misc/add-attachments": ["attachments"],
+  "/api/v1/misc/add-image": ["imageFile"],
+  "/api/v1/misc/add-stamp": ["stampImage"],
+  "/api/v1/security/add-watermark": ["watermarkImage"],
+  "/api/v1/security/cert-sign": [
+    "privateKeyFile",
+    "certFile",
+    "p12File",
+    "jksFile",
+  ],
+  "/api/v1/security/cert-sign/validate-certificate": ["p12File", "jksFile"],
+  "/api/v1/security/validate-signature": ["certFile"],
+} as const satisfies Partial<Record<ToolEndpoint, readonly string[]>>;
+
 /** Union of every generated tool request model. */
 export type ToolApiRequest = ToolApiParams[ToolEndpoint];
diff --git a/frontend/editor/src/core/types/toolIO.ts b/frontend/editor/src/core/types/toolIO.ts
index 96572c65f4..9d672b2d6d 100644
--- a/frontend/editor/src/core/types/toolIO.ts
+++ b/frontend/editor/src/core/types/toolIO.ts
@@ -99,6 +99,11 @@ export interface ToolIOSpec {
 export type ToolIOTable = Partial<Record<ToolEndpoint, ToolIOSpec>>;
 
 export const TOOL_IO: ToolIOTable = {
+  "/api/v1/ai/tools/classify-and-label": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
   "/api/v1/convert/cbr/pdf": {
     accepts: ["CBR"],
     produces: "PDF",
@@ -209,6 +214,11 @@ export const TOOL_IO: ToolIOTable = {
       },
     ],
   },
+  "/api/v1/convert/pdf/ua": {
+    accepts: ["PDF"],
+    produces: "PDF",
+    arity: "SISO",
+  },
   "/api/v1/convert/pdf/vector": {
     accepts: ["PDF"],
     produces: "IMAGE",
@@ -541,6 +551,11 @@ export const TOOL_IO: ToolIOTable = {
     produces: "PDF",
     arity: "SISO",
   },
+  "/api/v1/security/accessibility-report": {
+    accepts: ["PDF"],
+    produces: "JSON",
+    arity: "SISO",
+  },
   "/api/v1/security/add-password": {
     accepts: ["PDF"],
     produces: "PDF_ENCRYPTED",
diff --git a/frontend/editor/src/core/types/toolId.ts b/frontend/editor/src/core/types/toolId.ts
index 13799ad869..0762c2e81d 100644
--- a/frontend/editor/src/core/types/toolId.ts
+++ b/frontend/editor/src/core/types/toolId.ts
@@ -50,6 +50,7 @@ export const CORE_REGULAR_TOOL_IDS = [
   "removeCertSign",
   "unlockPDFForms",
   "compress",
+  "classify",
   "extractPages",
   "reorganizePages",
   "extractImages",
diff --git a/frontend/editor/src/core/ui/Avatar.css b/frontend/editor/src/core/ui/Avatar.css
index e2e8dc63bd..360c15c566 100644
--- a/frontend/editor/src/core/ui/Avatar.css
+++ b/frontend/editor/src/core/ui/Avatar.css
@@ -46,6 +46,12 @@
   height: 2.5rem;
   font-size: 1rem;
 }
+/* Account-settings hero disc. */
+.sui-avatar--xl {
+  width: 4.5rem;
+  height: 4.5rem;
+  font-size: 1.75rem;
+}
 
 .sui-avatar__img {
   width: 100%;
diff --git a/frontend/editor/src/core/ui/Avatar.tsx b/frontend/editor/src/core/ui/Avatar.tsx
index c7cfac501b..42e7aca11f 100644
--- a/frontend/editor/src/core/ui/Avatar.tsx
+++ b/frontend/editor/src/core/ui/Avatar.tsx
@@ -1,6 +1,7 @@
+import { useEffect, useState } from "react";
 import "@app/ui/Avatar.css";
 
-export type AvatarSize = "xs" | "sm" | "md" | "lg";
+export type AvatarSize = "xs" | "sm" | "md" | "lg" | "xl";
 export type AvatarTone =
   | "blue"
   | "purple"
@@ -23,10 +24,12 @@ export interface AvatarProps {
   className?: string;
 }
 
-function initialsOf(name: string): string {
+function avatarInitials(name: string): string {
   const parts = name.trim().split(/\s+/).filter(Boolean);
   if (parts.length === 0) return "?";
-  if (parts.length === 1) return parts[0].slice(0, 2).toUpperCase();
+  // Single word (a username or an email) reads as one letter — two letters of
+  // "admin" ("AD") looks like a different person's initials, not a truncation.
+  if (parts.length === 1) return parts[0].slice(0, 1).toUpperCase();
   return (parts[0][0] + parts[parts.length - 1][0]).toUpperCase();
 }
 
@@ -43,6 +46,13 @@ export function Avatar({
   ariaLabel,
   className,
 }: AvatarProps) {
+  // A picture URL that 404s (expired signed URL, deleted upload) must not leave
+  // an empty disc — fall back to the same initials the no-picture case shows, so
+  // every surface rendering this identity agrees on what it draws.
+  const [srcFailed, setSrcFailed] = useState(false);
+  useEffect(() => setSrcFailed(false), [src]);
+  const showImage = Boolean(src) && !srcFailed;
+
   const classes = [
     "sui-avatar",
     `sui-avatar--${size}`,
@@ -53,11 +63,16 @@ export function Avatar({
     .filter(Boolean)
     .join(" ");
 
-  const content = src ? (
-    <img src={src} alt={ariaLabel ?? name} className="sui-avatar__img" />
+  const content = showImage ? (
+    <img
+      src={src}
+      alt={ariaLabel ?? name}
+      className="sui-avatar__img"
+      onError={() => setSrcFailed(true)}
+    />
   ) : (
     <span className="sui-avatar__initials" aria-hidden>
-      {initialsOf(name)}
+      {avatarInitials(name)}
     </span>
   );
 
diff --git a/frontend/editor/src/core/ui/BellIcon.tsx b/frontend/editor/src/core/ui/BellIcon.tsx
new file mode 100644
index 0000000000..87908c4af6
--- /dev/null
+++ b/frontend/editor/src/core/ui/BellIcon.tsx
@@ -0,0 +1,22 @@
+/**
+ * An outline bell. The bundled Material Symbols set only carries the filled variant,
+ * which reads as permanently ringing.
+ */
+export function BellIcon({ size = 18 }: { size?: number }) {
+  return (
+    <svg
+      width={size}
+      height={size}
+      viewBox="0 0 24 24"
+      fill="none"
+      stroke="currentColor"
+      strokeWidth="1.75"
+      strokeLinecap="round"
+      strokeLinejoin="round"
+      aria-hidden
+    >
+      <path d="M6 8a6 6 0 0 1 12 0c0 7 3 9 3 9H3s3-2 3-9" />
+      <path d="M13.73 21a2 2 0 0 1-3.46 0" />
+    </svg>
+  );
+}
diff --git a/frontend/editor/src/core/ui/Button.css b/frontend/editor/src/core/ui/Button.css
index 529d97fe16..37d052a96e 100644
--- a/frontend/editor/src/core/ui/Button.css
+++ b/frontend/editor/src/core/ui/Button.css
@@ -15,6 +15,11 @@
   display: none;
 }
 
+/* ---- fat ---- */
+.sui-btn--fat.mantine-Button-root {
+  --button-radius: 0.75rem;
+}
+
 /* ---- shape ---- */
 .sui-btn--circle.mantine-Button-root {
   --button-radius: 50%;
diff --git a/frontend/editor/src/core/ui/Button.stories.tsx b/frontend/editor/src/core/ui/Button.stories.tsx
index 630d14010c..22e6c9464e 100644
--- a/frontend/editor/src/core/ui/Button.stories.tsx
+++ b/frontend/editor/src/core/ui/Button.stories.tsx
@@ -89,6 +89,7 @@ const meta: Meta<typeof Button> = {
       options: ["center", "start", "end", "between"],
     },
     shape: { control: "inline-radio", options: ["default", "circle", "pill"] },
+    fat: { control: "boolean" },
     text: { control: "text" },
   },
 };
@@ -203,6 +204,35 @@ export const Padding: Story = {
   ),
 };
 
+/** `fat` is the chunky CTA treatment: 2.75rem tall, 1.25rem side padding, 0.75rem corners. */
+export const Fat: Story = {
+  render: () => (
+    <div
+      style={{ display: "flex", flexDirection: "column", gap: 16, width: 460 }}
+    >
+      <Wrap>
+        <Button fat leftSection={<Plus />} text="Connect source" />
+        <Button fat variant="secondary" text="Export CSV" />
+      </Wrap>
+      <Wrap>
+        <Button fat variant="tertiary" text="Tertiary" />
+        <Button fat variant="quiet" text="Quiet" />
+        <Button fat accent="premium" leftSection={<Sparkle />} text="Upgrade" />
+        <Button fat accent="danger" text="Delete" />
+      </Wrap>
+      <Wrap>
+        <Button fat loading text="Saving" />
+        <Button fat disabled text="Disabled" />
+        <Button fat leftSection={<Plus />} aria-label="Add" />
+      </Wrap>
+      <Wrap>
+        <Button text="Default" />
+        <Button fat text="Fat" />
+      </Wrap>
+    </div>
+  ),
+};
+
 /** Icons are optional and positional: `leftSection`, `rightSection`, or both. */
 export const WithIcons: Story = {
   render: (args) => (
diff --git a/frontend/editor/src/core/ui/Button.tsx b/frontend/editor/src/core/ui/Button.tsx
index 2f46d5ab75..4b6bf2db85 100644
--- a/frontend/editor/src/core/ui/Button.tsx
+++ b/frontend/editor/src/core/ui/Button.tsx
@@ -42,6 +42,7 @@ type ButtonOwnProps = {
   variant?: ButtonVariant;
   accent?: ButtonAccent;
   size?: ButtonSize;
+  fat?: boolean;
   /** Label size relative to `size`. Defaults to the `size`-derived value. */
   fontSize?: ButtonFontSize;
   /** Padding override for both axes */
@@ -103,6 +104,9 @@ function ButtonGroup({
   );
 }
 
+const FAT_HEIGHT = "2.75rem";
+const FAT_PADDING_X = "lg" satisfies ControlPadding;
+
 const MANTINE_VARIANT: Record<ButtonVariant, string> = {
   primary: "filled",
   secondary: "outline",
@@ -123,6 +127,7 @@ const ButtonRoot = forwardRef<HTMLButtonElement, ButtonProps>(
       variant = "primary",
       accent = "default",
       size = "sm",
+      fat = false,
       fontSize,
       p,
       px,
@@ -161,7 +166,7 @@ const ButtonRoot = forwardRef<HTMLButtonElement, ButtonProps>(
         : undefined;
 
     // px/py override p for their axis; each stays undefined (= size default) if unset.
-    const padX = px ?? p;
+    const padX = px ?? p ?? (fat ? FAT_PADDING_X : undefined);
     const padY = py ?? p;
 
     // Sections flank a label → spread them without requiring justify="between".
@@ -175,6 +180,7 @@ const ButtonRoot = forwardRef<HTMLButtonElement, ButtonProps>(
       `sui-acc-${accent}`,
       `sui-btn--${variant}`,
       iconOnly ? "sui-btn--icon" : "",
+      fat ? "sui-btn--fat" : "",
       shape !== "default" ? `sui-btn--${shape}` : "",
       overflow === "wrap" ? "sui-btn--wrap" : "",
       !hover ? "sui-btn--no-hover" : "",
@@ -238,7 +244,9 @@ const ButtonRoot = forwardRef<HTMLButtonElement, ButtonProps>(
         className={classes}
         style={{
           ...(accentVars as CSSProperties),
-          ...({ "--button-height": CONTROL_HEIGHT[size] } as CSSProperties),
+          ...({
+            "--button-height": fat ? FAT_HEIGHT : CONTROL_HEIGHT[size],
+          } as CSSProperties),
           // Relative label size, scaled off the `size` base (unset → Mantine default).
           ...(fontSize
             ? ({
@@ -253,6 +261,10 @@ const ButtonRoot = forwardRef<HTMLButtonElement, ButtonProps>(
           ...(padY
             ? ({ "--sui-btn-py": CONTROL_PADDING[padY] } as CSSProperties)
             : {}),
+          // mantineTheme writes font-weight inline on every button root, so this must be inline too.
+          ...(fat
+            ? ({ fontWeight: "var(--font-weight-semibold)" } as CSSProperties)
+            : {}),
           // Icon-only: zero the size padding inline so the lone icon centres.
           ...(iconOnly ? ({ "--button-padding-x": "0" } as CSSProperties) : {}),
           ...style,
diff --git a/frontend/editor/src/core/ui/Card.css b/frontend/editor/src/core/ui/Card.css
index fcbefdab5b..62deaa0cf0 100644
--- a/frontend/editor/src/core/ui/Card.css
+++ b/frontend/editor/src/core/ui/Card.css
@@ -1,11 +1,6 @@
 .sui-card {
   position: relative;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-lg);
-  box-shadow: var(--shadow-md);
   transition:
-    box-shadow var(--motion-fast),
     border-color var(--motion-fast),
     transform var(--motion-fast);
 }
@@ -28,7 +23,6 @@
 }
 .sui-card--interactive:hover {
   border-color: var(--c-border-strong);
-  box-shadow: var(--shadow-lg);
   transform: translateY(-0.0625rem);
 }
 
@@ -43,7 +37,7 @@
   left: 0;
   bottom: 0;
   width: 0.25rem;
-  border-radius: var(--radius-lg) 0 0 var(--radius-lg);
+  border-radius: var(--radius-nav) 0 0 var(--radius-nav);
 }
 .sui-card--accent-default::before {
   background: var(--c-primary);
diff --git a/frontend/editor/src/core/ui/Card.tsx b/frontend/editor/src/core/ui/Card.tsx
index dbdb1a393a..42d4c2d93a 100644
--- a/frontend/editor/src/core/ui/Card.tsx
+++ b/frontend/editor/src/core/ui/Card.tsx
@@ -1,4 +1,5 @@
 import type { HTMLAttributes, ReactNode } from "react";
+import "@app/ui/Surface.css";
 import "@app/ui/Card.css";
 
 /** Subset of the shared accent dial that has a styled strip (see Card.css). */
@@ -18,7 +19,7 @@ export interface CardProps extends HTMLAttributes<HTMLDivElement> {
    * (e.g. a list with row dividers).
    */
   padding?: "none" | "tight" | "default" | "loose";
-  /** Use the lifted surface treatment (taller shadow, hover affordance). */
+  /** Adds the clickable affordance (pointer cursor, hover lift). */
   interactive?: boolean;
   children?: ReactNode;
 }
@@ -40,6 +41,7 @@ export function Card({
     <div
       {...rest}
       className={[
+        "sui-surface",
         "sui-card",
         `sui-card--pad-${padding}`,
         accent ? `sui-card--accent-${accent}` : "",
diff --git a/frontend/editor/src/core/ui/CodeBlock.css b/frontend/editor/src/core/ui/CodeBlock.css
index 76ebea940c..3929c58c66 100644
--- a/frontend/editor/src/core/ui/CodeBlock.css
+++ b/frontend/editor/src/core/ui/CodeBlock.css
@@ -1,10 +1,9 @@
 .sui-code {
   background: var(--code-bg);
   color: var(--code-text);
-  border-radius: var(--radius-lg);
+  border-radius: var(--radius-nav);
   overflow: hidden;
   border: 1px solid var(--code-border);
-  box-shadow: 0 1px 2px rgba(0, 0, 0, 0.15);
 }
 .sui-code__chrome {
   display: flex;
diff --git a/frontend/editor/src/core/ui/Collapsible.css b/frontend/editor/src/core/ui/Collapsible.css
index d0c1308f3b..1565464810 100644
--- a/frontend/editor/src/core/ui/Collapsible.css
+++ b/frontend/editor/src/core/ui/Collapsible.css
@@ -1,53 +1,41 @@
 .sui-collapsible {
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 0.5625rem;
+  display: flex;
+  flex-direction: column;
   overflow: hidden;
 }
 
+/* A bare chevron-led toggle: no box, sized to its label, left-aligned. */
 .sui-collapsible__head {
-  display: flex;
+  align-self: flex-start;
+  display: inline-flex;
   align-items: center;
-  gap: 0.5rem;
-  width: 100%;
-  padding: 0.75rem 0.875rem;
-  background: var(--c-surface);
+  gap: 0.375rem;
+  padding: 0;
   border: none;
+  background: none;
   cursor: pointer;
-  text-align: left;
-  transition: background-color 0.15s ease;
+  font: inherit;
+  font-size: 0.8125rem;
+  font-weight: 600;
+  color: var(--c-text-muted);
 }
 
 .sui-collapsible__head:hover {
-  background: var(--c-hover);
-}
-
-.sui-collapsible__head-main {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  flex: 1;
-  min-width: 0;
-  flex-wrap: wrap;
-}
-
-.sui-collapsible__head-end {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.625rem;
-  margin-left: auto;
-  flex-shrink: 0;
+  color: var(--c-text);
 }
 
+/* Points right when closed, rotates down when open. */
 .sui-collapsible__chevron {
   color: var(--c-text-subtle);
+  transform: rotate(-90deg);
   transition: transform 0.2s ease;
 }
 
 .sui-collapsible__chevron[data-open="true"] {
-  transform: rotate(180deg);
+  transform: rotate(0deg);
 }
 
-/* Grid-rows disclosure: 0fr → 1fr, no magic max-height */
+/* Grid-rows disclosure: 0fr → 1fr, no magic max-height. */
 .sui-collapsible__body {
   display: grid;
   grid-template-rows: 0fr;
@@ -58,6 +46,8 @@
   grid-template-rows: 1fr;
 }
 
+/* Gap between the toggle and the revealed content, no side indent. */
 .sui-collapsible__body-inner {
   overflow: hidden;
+  padding-top: 0.875rem;
 }
diff --git a/frontend/editor/src/core/ui/Collapsible.stories.tsx b/frontend/editor/src/core/ui/Collapsible.stories.tsx
index 36dffb527b..b2c1c6c5a4 100644
--- a/frontend/editor/src/core/ui/Collapsible.stories.tsx
+++ b/frontend/editor/src/core/ui/Collapsible.stories.tsx
@@ -19,25 +19,17 @@ export const Default: Story = {
         <Collapsible
           open={open}
           onToggle={() => setOpen((o) => !o)}
-          header={<strong>Section title</strong>}
-          aside={<span style={{ fontSize: "0.75rem" }}>3 items</span>}
+          header="Advanced"
         >
-          <div
-            style={{
-              padding: "0.875rem",
-              borderTop: "1px solid var(--c-border)",
-            }}
-          >
-            Body content revealed when the section is open.
-          </div>
+          Body content revealed when the section is open.
         </Collapsible>
       </div>
     );
   },
 };
 
-// Stacked instances form an accordion; each section toggles independently.
-export const Accordion: Story = {
+// Several independent disclosures stacked in a form-like column.
+export const Stacked: Story = {
   render: () => {
     const [open, setOpen] = useState<number | null>(0);
     const sections = ["Trial", "Quote", "Agreement"];
@@ -47,7 +39,7 @@ export const Accordion: Story = {
           maxWidth: "40rem",
           display: "flex",
           flexDirection: "column",
-          gap: "0.75rem",
+          gap: "0.875rem",
         }}
       >
         {sections.map((label, i) => (
@@ -55,16 +47,9 @@ export const Accordion: Story = {
             key={label}
             open={open === i}
             onToggle={() => setOpen(open === i ? null : i)}
-            header={<strong>{label}</strong>}
+            header={label}
           >
-            <div
-              style={{
-                padding: "0.875rem",
-                borderTop: "1px solid var(--c-border)",
-              }}
-            >
-              {label} details.
-            </div>
+            {label} details.
           </Collapsible>
         ))}
       </div>
diff --git a/frontend/editor/src/core/ui/Collapsible.tsx b/frontend/editor/src/core/ui/Collapsible.tsx
index 94f1052056..12992c2668 100644
--- a/frontend/editor/src/core/ui/Collapsible.tsx
+++ b/frontend/editor/src/core/ui/Collapsible.tsx
@@ -5,25 +5,21 @@ export interface CollapsibleProps {
   /** Whether the section is expanded. Controlled — pair with `onToggle`. */
   open: boolean;
   onToggle: () => void;
-  /** Header content (left/main side); the chevron is appended automatically. */
+  /** The toggle's label, shown after the chevron. */
   header: ReactNode;
-  /** Right-aligned header content shown before the chevron (a count, a label). */
-  aside?: ReactNode;
   children: ReactNode;
   className?: string;
 }
 
 /**
- * A single bordered disclosure section: an always-visible header that toggles,
- * and a body that animates open/closed via a grid-rows transition (no magic
- * max-height). Stack several to build an accordion. Header content is fully
- * caller-supplied, so it suits both terse and rich (icon + chips + count) rows.
+ * A lightweight inline disclosure: a chevron-led label that toggles, and a body
+ * that animates open/closed via a grid-rows transition (no magic max-height).
+ * No surface or box - it sits inline within a form or panel.
  */
 export function Collapsible({
   open,
   onToggle,
   header,
-  aside,
   children,
   className,
 }: CollapsibleProps) {
@@ -37,25 +33,22 @@ export function Collapsible({
         onClick={onToggle}
         aria-expanded={open}
       >
-        <span className="sui-collapsible__head-main">{header}</span>
-        <span className="sui-collapsible__head-end">
-          {aside}
-          <svg
-            className="sui-collapsible__chevron"
-            data-open={open}
-            viewBox="0 0 24 24"
-            width={16}
-            height={16}
-            fill="none"
-            stroke="currentColor"
-            strokeWidth={2}
-            strokeLinecap="round"
-            strokeLinejoin="round"
-            aria-hidden
-          >
-            <polyline points="6 9 12 15 18 9" />
-          </svg>
-        </span>
+        <svg
+          className="sui-collapsible__chevron"
+          data-open={open}
+          viewBox="0 0 24 24"
+          width={16}
+          height={16}
+          fill="none"
+          stroke="currentColor"
+          strokeWidth={2}
+          strokeLinecap="round"
+          strokeLinejoin="round"
+          aria-hidden
+        >
+          <polyline points="6 9 12 15 18 9" />
+        </svg>
+        {header}
       </button>
       <div className="sui-collapsible__body" data-open={open}>
         <div className="sui-collapsible__body-inner">{children}</div>
diff --git a/frontend/editor/src/core/ui/ColorInput.tsx b/frontend/editor/src/core/ui/ColorInput.tsx
index cf33331d7d..40e61470fa 100644
--- a/frontend/editor/src/core/ui/ColorInput.tsx
+++ b/frontend/editor/src/core/ui/ColorInput.tsx
@@ -12,7 +12,7 @@ import { useInputAria } from "@app/ui/ariaForwarding";
 import "@app/ui/MantineForms.css";
 
 const SUI_INPUT_VARS = {
-  "--input-bg": "var(--c-surface)",
+  "--input-bg": "var(--c-input-bg)",
   "--input-bd": "var(--c-border)",
   "--input-bd-focus": "var(--c-primary)",
   "--input-radius": "var(--radius-md)",
diff --git a/frontend/editor/src/core/ui/DataTable.css b/frontend/editor/src/core/ui/DataTable.css
new file mode 100644
index 0000000000..c7572efa90
--- /dev/null
+++ b/frontend/editor/src/core/ui/DataTable.css
@@ -0,0 +1,376 @@
+/*
+ * DataTable: the one Stirling table. Appearance is owned entirely here: the
+ * canonical surface, the header/row grammar, the standardized loading / empty /
+ * error states, and every cell KIND (`sui-dtc__*`). Call-sites choose a kind and
+ * supply data; they never style a cell. This is what lets every table look and
+ * behave the same.
+ */
+
+.sui-datatable {
+  width: 100%;
+}
+
+/* The one canonical surface: every table wears it; call-sites don't wrap it. */
+.sui-datatable__frame {
+  border: 1px solid var(--c-border);
+  border-radius: var(--radius-md);
+  background: var(--c-surface);
+  overflow: hidden;
+}
+
+.sui-datatable__toolbar {
+  display: flex;
+  align-items: center;
+  gap: 0.75rem;
+  flex-wrap: wrap;
+  padding: 0.75rem 0.875rem;
+  border-bottom: 1px solid var(--c-border);
+}
+
+.sui-datatable__scroll {
+  width: 100%;
+  overflow-x: auto;
+}
+
+.sui-datatable__table {
+  width: 100%;
+  border-collapse: collapse;
+  font-size: 0.8125rem;
+}
+
+.sui-datatable__caption {
+  caption-side: top;
+  text-align: left;
+  padding: 0.625rem 0.875rem;
+  color: var(--c-text-subtle);
+  font-size: 0.75rem;
+}
+
+/* Header */
+.sui-datatable__th {
+  text-align: left;
+  font-weight: 600;
+  color: var(--c-text-subtle);
+  font-size: 0.6875rem;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  padding: 0.625rem 0.875rem;
+  border-bottom: 1px solid var(--c-border);
+  white-space: nowrap;
+}
+.sui-datatable__th--right {
+  text-align: right;
+}
+.sui-datatable__th--fit {
+  width: 1%;
+}
+/* Accessible-only header text for blank affordance/action columns. */
+.sui-datatable__th-sr {
+  position: absolute;
+  width: 1px;
+  height: 1px;
+  padding: 0;
+  margin: -1px;
+  overflow: hidden;
+  clip: rect(0, 0, 0, 0);
+  white-space: nowrap;
+  border: 0;
+}
+
+.sui-datatable__sort {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.25rem;
+  background: none;
+  border: none;
+  padding: 0;
+  margin: 0;
+  cursor: pointer;
+  font: inherit;
+  letter-spacing: inherit;
+  text-transform: inherit;
+  color: inherit;
+}
+.sui-datatable__th--right .sui-datatable__sort {
+  flex-direction: row-reverse;
+}
+.sui-datatable__sort:hover {
+  color: var(--c-text);
+}
+.sui-datatable__sort:focus-visible {
+  outline: 0.125rem solid var(--c-primary);
+  outline-offset: 0.125rem;
+  border-radius: var(--radius-sm);
+}
+.sui-datatable__sort-icon {
+  display: inline-flex;
+  color: var(--c-text-subtle);
+  opacity: 0;
+  transition: opacity var(--motion-fast);
+}
+.sui-datatable__sort:hover .sui-datatable__sort-icon {
+  opacity: 0.5;
+}
+.sui-datatable__sort-icon--asc,
+.sui-datatable__sort-icon--desc {
+  opacity: 1;
+  color: var(--c-primary);
+}
+.sui-datatable__sort-icon--desc svg {
+  transform: rotate(180deg);
+}
+
+/* Body */
+.sui-datatable__td {
+  padding: 0.625rem 0.875rem;
+  color: var(--c-text-muted);
+  border-bottom: 1px solid var(--c-border-subtle);
+  vertical-align: middle;
+}
+.sui-datatable__table tbody tr:last-child .sui-datatable__td {
+  border-bottom: none;
+}
+.sui-datatable__td--right {
+  text-align: right;
+}
+.sui-datatable__td--nowrap {
+  white-space: nowrap;
+}
+.sui-datatable__td--fit {
+  width: 1%;
+  white-space: nowrap;
+}
+
+/* Density (the compact variant) */
+.sui-datatable--compact .sui-datatable__th,
+.sui-datatable--compact .sui-datatable__td {
+  padding: 0.375rem 0.625rem;
+}
+
+/* Interactive rows */
+.sui-datatable__row--interactive {
+  cursor: pointer;
+  transition: background var(--motion-fast);
+}
+.sui-datatable__row--interactive:hover {
+  background: var(--c-hover);
+}
+.sui-datatable__row--interactive:focus-visible {
+  outline: 0.125rem solid var(--c-primary);
+  outline-offset: -0.125rem;
+}
+
+/* Non-actionable rows (e.g. coming-soon): de-emphasized to read as disabled.
+   Muting is done with accessible colours + a faded (non-text) icon rather than
+   row opacity, which would blend text under the WCAG contrast floor. */
+.sui-datatable__row--muted .sui-dtc__entity-name {
+  color: var(--c-text-muted);
+  font-weight: 500;
+}
+.sui-datatable__row--muted .sui-dtc__entity-icon {
+  opacity: 0.4;
+}
+
+.sui-datatable__chevron {
+  display: inline-flex;
+  color: var(--c-text-subtle);
+}
+
+/* Full-width state cell (empty / error) */
+.sui-datatable__state {
+  padding: 2rem;
+  text-align: center;
+  color: var(--c-text-subtle);
+}
+.sui-datatable__state--error {
+  color: var(--c-danger);
+}
+.sui-datatable__state--node {
+  padding: 0;
+}
+
+/*
+ * Cell kinds (sui-dtc__*): the locked cell vocabulary. These absorb the
+ * per-namespace portal-*__ cell styles (mono / muted / cell-stack / name-cell /
+ * caret …) that every table used to re-implement.
+ */
+.sui-dtc__text {
+  color: var(--c-text-muted);
+}
+/* Labeled value ("Category: action"): full-strength text, bold label. */
+.sui-dtc__text--labeled {
+  color: var(--c-text);
+}
+.sui-dtc__text-label {
+  font-weight: 600;
+}
+.sui-dtc__mono {
+  font-family: var(--font-mono);
+  font-size: 0.75rem;
+  color: var(--c-text-muted);
+}
+.sui-dtc__muted {
+  color: var(--c-text-subtle);
+}
+.sui-dtc__num {
+  font-variant-numeric: tabular-nums;
+}
+.sui-dtc__labels {
+  display: flex;
+  align-items: center;
+  flex-wrap: wrap;
+  gap: 0.375rem;
+}
+
+/* entity: leading icon + bold name + optional muted note */
+.sui-dtc__entity {
+  display: flex;
+  align-items: center;
+  gap: 0.625rem;
+  min-width: 0;
+}
+.sui-dtc__entity-icon {
+  display: inline-flex;
+  align-items: center;
+  flex: none;
+  color: var(--c-text-muted);
+}
+/* The component sizes bare icons; self-styled marks (Avatar) render as-is. */
+.sui-dtc__entity-icon svg {
+  width: 1.2rem;
+  height: 1.2rem;
+}
+.sui-dtc__entity-body {
+  display: flex;
+  flex-direction: column;
+  gap: 0.1875rem;
+  min-width: 0;
+}
+.sui-dtc__entity-head {
+  display: flex;
+  align-items: baseline;
+  flex-wrap: wrap;
+  gap: 0.25rem;
+}
+.sui-dtc__entity-name {
+  font-weight: 600;
+  color: var(--c-text);
+}
+.sui-dtc__entity-suffix {
+  font-size: 0.75rem;
+  font-weight: 400;
+  color: var(--c-text-subtle);
+}
+.sui-dtc__note {
+  font-size: 0.75rem;
+  color: var(--c-text-subtle);
+}
+
+.sui-dtc__actions {
+  display: flex;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 0.25rem;
+}
+.sui-dtc__menu-item--danger {
+  color: var(--c-danger);
+}
+
+/* Grouped tables: section header row + per-group "show all" toggle. */
+.sui-datatable__group-cell {
+  padding: 0.5rem 0.875rem;
+  background: var(--c-surface-sunken, var(--c-hover));
+  border-bottom: 1px solid var(--c-border);
+}
+.sui-datatable__table
+  tbody
+  tr.sui-datatable__group:not(:first-child)
+  .sui-datatable__group-cell {
+  border-top: 1px solid var(--c-border);
+}
+.sui-datatable__group-head {
+  display: flex;
+  align-items: center;
+  justify-content: space-between;
+  gap: 0.75rem;
+}
+.sui-datatable__group-title {
+  display: flex;
+  align-items: baseline;
+  flex-wrap: wrap;
+  gap: 0.5rem;
+}
+.sui-datatable__group-title strong {
+  font-size: 0.8125rem;
+  color: var(--c-text);
+}
+.sui-datatable__group-meta {
+  font-size: 0.75rem;
+  color: var(--c-text-subtle);
+}
+.sui-datatable__group-more {
+  padding: 0.5rem 0.875rem;
+}
+.sui-datatable__show-all {
+  background: none;
+  border: none;
+  padding: 0;
+  cursor: pointer;
+  font: inherit;
+  font-size: 0.75rem;
+  color: var(--c-accent-text);
+}
+.sui-datatable__show-all:hover {
+  text-decoration: underline;
+}
+
+.sui-dtc__progress {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+}
+.sui-dtc__progress-bar {
+  display: block;
+  width: 5rem;
+}
+.sui-dtc__progress-pct {
+  font-variant-numeric: tabular-nums;
+  color: var(--c-text-muted);
+  min-width: 2.5rem;
+}
+
+.sui-dtc__links {
+  display: flex;
+  align-items: center;
+  justify-content: flex-end;
+  gap: 0.75rem;
+}
+/* Neutral chip-style link (matches the invoice-link look): the colour is not an
+ * accent - the trailing glyph + hover fill carry the affordance. */
+.sui-dtc__link {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.25rem;
+  padding: 0.25rem 0.5rem;
+  border-radius: var(--radius-sm);
+  color: var(--c-text);
+  text-decoration: none;
+  font-weight: 500;
+  border: 1px solid transparent;
+  transition:
+    background var(--motion-fast),
+    border-color var(--motion-fast);
+}
+.sui-dtc__link:hover {
+  background: var(--c-surface-sunken);
+  border-color: var(--c-border);
+}
+.sui-dtc__link:focus-visible {
+  outline: none;
+  border-color: var(--c-primary);
+  background: var(--c-surface-sunken);
+}
+
+.sui-dtc__select {
+  min-width: 13rem;
+}
diff --git a/frontend/editor/src/core/ui/DataTable.stories.tsx b/frontend/editor/src/core/ui/DataTable.stories.tsx
new file mode 100644
index 0000000000..630537ace9
--- /dev/null
+++ b/frontend/editor/src/core/ui/DataTable.stories.tsx
@@ -0,0 +1,262 @@
+import { useState } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { Button } from "@app/ui/Button";
+import { column, DataTable, type DataTableColumn } from "@app/ui/DataTable";
+
+interface Region {
+  id: string;
+  name: string;
+  code: string;
+  status: "healthy" | "degraded";
+  docs: number;
+  latency: number;
+  auto: boolean;
+}
+
+const REGIONS: Region[] = [
+  {
+    id: "1",
+    name: "US East",
+    code: "us-east-1",
+    status: "healthy",
+    docs: 12481,
+    latency: 41,
+    auto: true,
+  },
+  {
+    id: "2",
+    name: "US West",
+    code: "us-west-2",
+    status: "healthy",
+    docs: 8210,
+    latency: 63,
+    auto: false,
+  },
+  {
+    id: "3",
+    name: "EU West",
+    code: "eu-west-1",
+    status: "degraded",
+    docs: 3044,
+    latency: 190,
+    auto: true,
+  },
+  {
+    id: "4",
+    name: "AP South",
+    code: "ap-south-1",
+    status: "healthy",
+    docs: 5622,
+    latency: 88,
+    auto: false,
+  },
+];
+
+const tone = (r: Region) => ({
+  tone: r.status === "healthy" ? ("success" as const) : ("warning" as const),
+  label: r.status,
+});
+
+const COLUMNS: DataTableColumn<Region>[] = [
+  column.entity({
+    key: "name",
+    header: "Region",
+    primary: (r) => r.name,
+  }),
+  column.mono({ key: "code", header: "Code", get: (r) => r.code }),
+  column.badge({ key: "status", header: "Status", get: tone }),
+  column.number({
+    key: "docs",
+    header: "Docs 24h",
+    get: (r) => r.docs,
+    format: (n) => n.toLocaleString(),
+  }),
+  column.number({
+    key: "latency",
+    header: "P95",
+    get: (r) => r.latency,
+    format: (n) => `${n} ms`,
+  }),
+];
+
+const SORTABLE_COLUMNS: DataTableColumn<Region>[] = [
+  column.entity({
+    key: "name",
+    header: "Region",
+    primary: (r) => r.name,
+    sortable: true,
+  }),
+  column.mono({
+    key: "code",
+    header: "Code",
+    get: (r) => r.code,
+    sortable: true,
+  }),
+  column.badge({ key: "status", header: "Status", get: tone, sortable: true }),
+  column.number({
+    key: "docs",
+    header: "Docs 24h",
+    get: (r) => r.docs,
+    format: (n) => n.toLocaleString(),
+    sortable: true,
+  }),
+  column.number({
+    key: "latency",
+    header: "P95",
+    get: (r) => r.latency,
+    format: (n) => `${n} ms`,
+    sortable: true,
+  }),
+];
+
+const meta: Meta<typeof DataTable> = {
+  title: "Compound/DataTable",
+  component: DataTable,
+  tags: ["autodocs"],
+  parameters: { layout: "padded" },
+};
+export default meta;
+type Story = StoryObj<typeof DataTable>;
+
+/** Columns come from the `column` vocabulary; call-sites never style a cell. */
+export const Basic: Story = {
+  render: () => (
+    <DataTable<Region> columns={COLUMNS} rows={REGIONS} rowKey={(r) => r.id} />
+  ),
+};
+
+/** Sorting is opt-in per column (`sortable: true`); click a header. */
+export const Sortable: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={SORTABLE_COLUMNS}
+      rows={REGIONS}
+      rowKey={(r) => r.id}
+      defaultSort={{ key: "docs", direction: "desc" }}
+    />
+  ),
+};
+
+/** `onRowClick` + a chevron affordance. The line above shows the click land. */
+export const Interactive: Story = {
+  render: () => {
+    function Bound() {
+      const [clicked, setClicked] = useState<Region | null>(null);
+      return (
+        <>
+          <p
+            style={{
+              marginBottom: "0.75rem",
+              fontSize: "0.8125rem",
+              color: "var(--c-text-muted)",
+            }}
+          >
+            {clicked
+              ? `Clicked: ${clicked.name} (${clicked.code})`
+              : "Click a row to fire onRowClick."}
+          </p>
+          <DataTable<Region>
+            columns={COLUMNS}
+            rows={REGIONS}
+            rowKey={(r) => r.id}
+            onRowClick={setClicked}
+            rowAffordance="chevron"
+          />
+        </>
+      );
+    }
+    return <Bound />;
+  },
+};
+
+/** A trailing action column (icon-only kebab), locked to the design system. */
+export const WithActions: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={[
+        ...COLUMNS,
+        column.actions({
+          key: "actions",
+          get: () => [
+            {
+              label: "Row actions",
+              glyph: "kebab",
+              iconOnly: true,
+              onClick: () => {},
+            },
+          ],
+        }),
+      ]}
+      rows={REGIONS}
+      rowKey={(r) => r.id}
+    />
+  ),
+};
+
+/** First-load skeleton mirrors the real column layout. */
+export const Loading: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={COLUMNS}
+      rows={[]}
+      rowKey={(r) => r.id}
+      loading
+    />
+  ),
+};
+
+/** Standardized empty slot. */
+export const Empty: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={COLUMNS}
+      rows={[]}
+      rowKey={(r) => r.id}
+      empty="No regions deployed yet."
+    />
+  ),
+};
+
+/** Standardized error slot (announced as an alert). */
+export const ErrorState: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={COLUMNS}
+      rows={[]}
+      rowKey={(r) => r.id}
+      error="Couldn't load regions. Try again."
+    />
+  ),
+};
+
+/** Optional toolbar slot above the table, inside the surface. */
+export const WithToolbar: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={COLUMNS}
+      rows={REGIONS}
+      rowKey={(r) => r.id}
+      toolbar={
+        <>
+          <strong style={{ fontSize: "0.8125rem" }}>Regions</strong>
+          <span style={{ flex: 1 }} />
+          <Button variant="secondary" size="sm">
+            Export
+          </Button>
+        </>
+      }
+    />
+  ),
+};
+
+/** The one look choice: the `compact` variant. */
+export const Compact: Story = {
+  render: () => (
+    <DataTable<Region>
+      columns={COLUMNS}
+      rows={REGIONS}
+      rowKey={(r) => r.id}
+      variant="compact"
+    />
+  ),
+};
diff --git a/frontend/editor/src/core/ui/DataTable.tsx b/frontend/editor/src/core/ui/DataTable.tsx
new file mode 100644
index 0000000000..ccb5578016
--- /dev/null
+++ b/frontend/editor/src/core/ui/DataTable.tsx
@@ -0,0 +1,516 @@
+import { type KeyboardEvent, type ReactNode, useMemo, useState } from "react";
+import {
+  type ColumnDef,
+  createColumnHelper,
+  createSortedRowModel,
+  flexRender,
+  type RowData,
+  rowSortingFeature,
+  sortFn_alphanumeric,
+  sortFn_basic,
+  type SortingState,
+  tableFeatures,
+  useTable,
+} from "@tanstack/react-table";
+import { useTranslation } from "react-i18next";
+import { Skeleton } from "@app/ui/Skeleton";
+import {
+  type CellAction,
+  type DataTableColumn,
+  renderCellActions,
+} from "@app/ui/dataTableColumns";
+import "@app/ui/DataTable.css";
+
+export * from "@app/ui/dataTableColumns";
+
+/** Per-column presentation carried through TanStack's typed `meta` slot. */
+interface ColumnMeta {
+  align: "left" | "right";
+  nowrap: boolean;
+  fit: boolean;
+  /** Visually-hidden header text for blank affordance/action columns, so the
+   *  column still has an accessible name (avoids axe `empty-table-header`). */
+  srHeader?: string;
+}
+
+/**
+ * Feature registry for every DataTable, built once. Sorting is always
+ * registered so any column can opt in; the core row model defaults in.
+ */
+const DATA_TABLE_FEATURES = tableFeatures({
+  rowSortingFeature,
+  sortedRowModel: createSortedRowModel(),
+  columnMeta: {} as ColumnMeta,
+  // Register the comparators the column vocabulary uses. Without this v9 falls
+  // back to a case-sensitive `basic` sort and warns per column.
+  sortFns: { alphanumeric: sortFn_alphanumeric, basic: sortFn_basic },
+});
+type DataTableFeatures = typeof DATA_TABLE_FEATURES;
+
+/** Closed appearance dial — the only look choice a call-site may make. */
+export type DataTableVariant = "default" | "compact";
+
+/**
+ * A collapsible section of rows under a locked header. Group headers are
+ * structured (title + muted meta + optional right-aligned actions), never raw
+ * markup, so grouped tables stay as opinionated as flat ones. Provide `groups`
+ * instead of `rows`.
+ */
+export interface DataTableGroup<T> {
+  key: string;
+  title: string;
+  /** Muted sub-text on the header (e.g. "5 people · led by Dana"). */
+  meta?: string;
+  /** Right-aligned header actions (e.g. "Add to team", a kebab menu). */
+  actions?: CellAction[];
+  rows: T[];
+  /** Collapse rows past this count behind a "Show all N" toggle. */
+  collapseAfter?: number;
+  /** Render the group's rows greyed/disabled (non-actionable, e.g. coming-soon). */
+  muted?: boolean;
+}
+
+export interface DataTableProps<T> {
+  /** Columns built with the `column` vocabulary — never raw JSX. */
+  columns: DataTableColumn<T>[];
+  /** Flat rows. Provide this OR `groups`, not both. */
+  rows?: T[];
+  /** Grouped rows with section headers. Takes precedence over `rows`. */
+  groups?: DataTableGroup<T>[];
+  rowKey: (row: T) => string;
+
+  /** Makes rows interactive (hover + click + keyboard). */
+  onRowClick?: (row: T) => void;
+  /** Per-row interactivity gate, checked only when `onRowClick` is set. */
+  isRowInteractive?: (row: T) => boolean;
+  /** Trailing affordance drawn on interactive rows. */
+  rowAffordance?: "none" | "chevron";
+
+  /** Initial sort, applied to the matching sortable column. */
+  defaultSort?: { key: string; direction?: "asc" | "desc" };
+
+  /** First-load state: renders column-shaped skeleton rows under the header. */
+  loading?: boolean;
+  /** Skeleton row count while loading. Defaults to 6. */
+  skeletonRows?: number;
+  /** Error slot — replaces the rows with an alert message row. */
+  error?: ReactNode;
+  /** Shown when there are no rows (and not loading / no error). Text or a node. */
+  empty?: ReactNode;
+
+  /** Content above the table (filters, search, actions), inside the surface. */
+  toolbar?: ReactNode;
+  /** The only appearance choice. */
+  variant?: DataTableVariant;
+  /** Accessible caption for the table. */
+  caption?: string;
+  /** Labels for a group's "show all / show less" toggle (pass translated).
+   *  `showAll` receives the group's total row count. */
+  collapseLabels?: { showAll: (total: number) => string; showLess: string };
+}
+
+function ChevronGlyph() {
+  return (
+    <svg width="16" height="16" viewBox="0 0 24 24" fill="none" aria-hidden>
+      <path
+        d="m9 6 6 6-6 6"
+        stroke="currentColor"
+        strokeWidth="2"
+        strokeLinecap="round"
+        strokeLinejoin="round"
+      />
+    </svg>
+  );
+}
+
+function SortGlyph() {
+  return (
+    <svg
+      width="10"
+      height="10"
+      viewBox="0 0 24 24"
+      fill="currentColor"
+      aria-hidden
+    >
+      <path d="M12 8 6 15h12z" />
+    </svg>
+  );
+}
+
+const CHEVRON_COLUMN_KEY = "__affordance";
+
+/**
+ * The shared Stirling table. Call-sites supply data + behaviour; the component
+ * owns 100% of the appearance. Columns come from the `column` vocabulary (typed
+ * cell kinds, no raw markup), the surface / density / states are standardized
+ * here, and the only look choice exposed is the closed `variant`. Behaviour -
+ * sorting today, more later - is opt-in per column or via props.
+ */
+export function DataTable<T extends RowData>({
+  columns,
+  rows = [],
+  groups,
+  rowKey,
+  onRowClick,
+  isRowInteractive,
+  rowAffordance = "none",
+  defaultSort,
+  loading = false,
+  skeletonRows = 6,
+  error,
+  empty,
+  toolbar,
+  variant = "default",
+  caption,
+  collapseLabels = {
+    showAll: (n) => `Show all ${n}`,
+    showLess: "Show less",
+  },
+}: DataTableProps<T>) {
+  const { t } = useTranslation();
+  const [sorting, setSorting] = useState<SortingState>(
+    defaultSort
+      ? [{ id: defaultSort.key, desc: defaultSort.direction === "desc" }]
+      : [],
+  );
+  const [openGroups, setOpenGroups] = useState<Set<string>>(new Set());
+  const toggleGroup = (key: string) =>
+    setOpenGroups((prev) => {
+      const next = new Set(prev);
+      if (next.has(key)) next.delete(key);
+      else next.add(key);
+      return next;
+    });
+
+  // The data source is either grouped or flat; TanStack (headers, sorting for
+  // the flat path) is fed the flattened rows.
+  const flatRows = useMemo(
+    () => (groups ? groups.flatMap((g) => g.rows) : rows),
+    [groups, rows],
+  );
+
+  const interactive = Boolean(onRowClick);
+  const showChevron = interactive && rowAffordance === "chevron";
+  // A row that holds its own controls (actions/links/select/caps) can't also be
+  // a `role="button"` (a button may not contain interactive descendants); it
+  // keeps the click as a mouse shortcut, and the inner control is the keyboard path.
+  const rowsContainControls = columns.some((c) => c.interactive);
+
+  const effectiveColumns = useMemo<DataTableColumn<T>[]>(() => {
+    if (!showChevron) return columns;
+    return [
+      ...columns,
+      {
+        key: CHEVRON_COLUMN_KEY,
+        header: "",
+        align: "right",
+        nowrap: true,
+        fit: true,
+        sortable: false,
+        renderCell: (row) =>
+          (isRowInteractive?.(row) ?? true) ? (
+            <span className="sui-datatable__chevron" aria-hidden>
+              <ChevronGlyph />
+            </span>
+          ) : null,
+      },
+    ];
+  }, [columns, showChevron, isRowInteractive]);
+
+  const tanstackColumns = useMemo<ColumnDef<DataTableFeatures, T>[]>(() => {
+    const helper = createColumnHelper<DataTableFeatures, T>();
+    return effectiveColumns.map((c) => {
+      // A blank header (trailing affordance/action columns) still needs an
+      // accessible name for assistive tech.
+      const srHeader = c.header
+        ? undefined
+        : c.key === CHEVRON_COLUMN_KEY
+          ? t("common.open", "Open")
+          : t("common.actions", "Actions");
+      const meta: ColumnMeta = {
+        align: c.align,
+        nowrap: c.nowrap,
+        fit: c.fit,
+        srHeader,
+      };
+      if (c.sortable && c.sortValue) {
+        const sortValue = c.sortValue;
+        return helper.accessor((row: T): unknown => sortValue(row), {
+          id: c.key,
+          header: () => c.header,
+          cell: (ctx) => c.renderCell(ctx.row.original),
+          enableSorting: true,
+          sortUndefined: "last",
+          sortFn: c.sortFn ?? "basic",
+          meta,
+        });
+      }
+      return helper.display({
+        id: c.key,
+        header: () => c.header,
+        cell: (ctx) => c.renderCell(ctx.row.original),
+        meta,
+      });
+    });
+  }, [effectiveColumns, t]);
+
+  const table = useTable({
+    features: DATA_TABLE_FEATURES,
+    data: flatRows,
+    columns: tanstackColumns,
+    state: { sorting },
+    onSortingChange: setSorting,
+    getRowId: (row) => rowKey(row),
+  });
+
+  const colCount = effectiveColumns.length;
+
+  // Shared row wiring so grouped rows behave like flat ones (interactivity +
+  // the affordance column) instead of being a second-class path.
+  const rowProps = (original: T, muted?: boolean) => {
+    const rowInteractive =
+      interactive && (isRowInteractive?.(original) ?? true);
+    // A row that owns the whole interaction takes the button role + keyboard
+    // handling; a row with its own controls keeps just the mouse click.
+    const asButton = rowInteractive && !rowsContainControls;
+    return {
+      className: [
+        "sui-datatable__row",
+        rowInteractive ? "sui-datatable__row--interactive" : "",
+        muted ? "sui-datatable__row--muted" : "",
+      ]
+        .filter(Boolean)
+        .join(" "),
+      onClick: rowInteractive ? () => onRowClick?.(original) : undefined,
+      tabIndex: asButton ? 0 : undefined,
+      role: asButton ? ("button" as const) : undefined,
+      onKeyDown: asButton
+        ? (e: KeyboardEvent<HTMLTableRowElement>) => {
+            if (e.key === "Enter" || e.key === " ") {
+              e.preventDefault();
+              onRowClick?.(original);
+            }
+          }
+        : undefined,
+    };
+  };
+
+  // No rows at all - covers a grouped table whose groups are all empty (or an
+  // empty groups list), which would otherwise render a header-only table.
+  const noRows = groups
+    ? groups.every((g) => g.rows.length === 0)
+    : rows.length === 0;
+
+  let body: ReactNode;
+  if (loading) {
+    body = Array.from({ length: skeletonRows }).map((_, r) => (
+      <tr key={`skeleton-${r}`} className="sui-datatable__row">
+        {effectiveColumns.map((c) => (
+          <td key={c.key} className={cellClass(c.align, c.nowrap, c.fit)}>
+            <Skeleton
+              height="0.75rem"
+              width={c.align === "right" || c.fit ? "40%" : "70%"}
+            />
+          </td>
+        ))}
+      </tr>
+    ));
+  } else if (error != null) {
+    body = (
+      <tr>
+        <td
+          className="sui-datatable__state sui-datatable__state--error"
+          colSpan={colCount}
+          role="alert"
+        >
+          {error}
+        </td>
+      </tr>
+    );
+  } else if (noRows) {
+    const isNode = typeof empty === "object" && empty !== null;
+    body = (
+      <tr>
+        <td
+          className={
+            isNode
+              ? "sui-datatable__state sui-datatable__state--node"
+              : "sui-datatable__state"
+          }
+          colSpan={colCount}
+        >
+          {empty ?? "No data"}
+        </td>
+      </tr>
+    );
+  } else if (groups) {
+    body = groups.flatMap((g) => {
+      const limit = g.collapseAfter ?? Infinity;
+      const open = openGroups.has(g.key);
+      const overflow = g.rows.length > limit;
+      const shown = overflow && !open ? g.rows.slice(0, limit) : g.rows;
+      const header = (
+        <tr key={`group-${g.key}`} className="sui-datatable__group">
+          <td colSpan={colCount} className="sui-datatable__group-cell">
+            <div className="sui-datatable__group-head">
+              <div className="sui-datatable__group-title">
+                <strong>{g.title}</strong>
+                {g.meta && (
+                  <span className="sui-datatable__group-meta">{g.meta}</span>
+                )}
+              </div>
+              {g.actions &&
+                g.actions.length > 0 &&
+                renderCellActions(g.actions)}
+            </div>
+          </td>
+        </tr>
+      );
+      const rowEls = shown.map((row) => (
+        <tr
+          key={rowKey(row)}
+          data-row-key={rowKey(row)}
+          {...rowProps(row, g.muted)}
+        >
+          {effectiveColumns.map((c) => (
+            <td key={c.key} className={cellClass(c.align, c.nowrap, c.fit)}>
+              {c.renderCell(row)}
+            </td>
+          ))}
+        </tr>
+      ));
+      const moreEl = overflow ? (
+        <tr key={`more-${g.key}`}>
+          <td colSpan={colCount} className="sui-datatable__group-more">
+            <button
+              type="button"
+              className="sui-datatable__show-all"
+              onClick={() => toggleGroup(g.key)}
+            >
+              {open
+                ? collapseLabels.showLess
+                : collapseLabels.showAll(g.rows.length)}
+            </button>
+          </td>
+        </tr>
+      ) : null;
+      return moreEl ? [header, ...rowEls, moreEl] : [header, ...rowEls];
+    });
+  } else {
+    body = table.getRowModel().rows.map((row) => (
+      <tr key={row.id} data-row-key={row.id} {...rowProps(row.original)}>
+        {row.getAllCells().map((cell) => {
+          const meta = cell.column.columnDef.meta;
+          return (
+            <td
+              key={cell.id}
+              className={cellClass(
+                meta?.align ?? "left",
+                meta?.nowrap ?? false,
+                meta?.fit ?? false,
+              )}
+            >
+              {flexRender(cell.column.columnDef.cell, cell.getContext())}
+            </td>
+          );
+        })}
+      </tr>
+    ));
+  }
+
+  return (
+    <div className={`sui-datatable sui-datatable--${variant}`}>
+      <div className="sui-datatable__frame">
+        {toolbar && <div className="sui-datatable__toolbar">{toolbar}</div>}
+        <div className="sui-datatable__scroll">
+          <table className="sui-datatable__table">
+            {caption && (
+              <caption className="sui-datatable__caption">{caption}</caption>
+            )}
+            <thead>
+              {table.getHeaderGroups().map((headerGroup) => (
+                <tr key={headerGroup.id}>
+                  {headerGroup.headers.map((header) => {
+                    const meta = header.column.columnDef.meta;
+                    const align = meta?.align ?? "left";
+                    const canSort = header.column.getCanSort();
+                    const sorted = header.column.getIsSorted();
+                    const label = header.isPlaceholder
+                      ? null
+                      : flexRender(
+                          header.column.columnDef.header,
+                          header.getContext(),
+                        );
+                    return (
+                      <th
+                        key={header.id}
+                        scope="col"
+                        className={headerClass(align, meta?.fit ?? false)}
+                        aria-sort={
+                          canSort
+                            ? sorted === "asc"
+                              ? "ascending"
+                              : sorted === "desc"
+                                ? "descending"
+                                : "none"
+                            : undefined
+                        }
+                      >
+                        {canSort ? (
+                          <button
+                            type="button"
+                            className="sui-datatable__sort"
+                            onClick={header.column.getToggleSortingHandler()}
+                          >
+                            {label}
+                            <span
+                              className={`sui-datatable__sort-icon sui-datatable__sort-icon--${sorted || "none"}`}
+                            >
+                              <SortGlyph />
+                            </span>
+                          </button>
+                        ) : meta?.srHeader ? (
+                          <span className="sui-datatable__th-sr">
+                            {meta.srHeader}
+                          </span>
+                        ) : (
+                          label
+                        )}
+                      </th>
+                    );
+                  })}
+                </tr>
+              ))}
+            </thead>
+            <tbody>{body}</tbody>
+          </table>
+        </div>
+      </div>
+    </div>
+  );
+}
+
+function cellClass(
+  align: "left" | "right",
+  nowrap: boolean,
+  fit: boolean,
+): string {
+  return [
+    "sui-datatable__td",
+    `sui-datatable__td--${align}`,
+    nowrap ? "sui-datatable__td--nowrap" : "",
+    fit ? "sui-datatable__td--fit" : "",
+  ]
+    .filter(Boolean)
+    .join(" ");
+}
+
+function headerClass(align: "left" | "right", fit: boolean): string {
+  return [
+    "sui-datatable__th",
+    `sui-datatable__th--${align}`,
+    fit ? "sui-datatable__th--fit" : "",
+  ]
+    .filter(Boolean)
+    .join(" ");
+}
diff --git a/frontend/editor/src/core/ui/Dropdown.css b/frontend/editor/src/core/ui/Dropdown.css
index 8b84af29f1..d71026d881 100644
--- a/frontend/editor/src/core/ui/Dropdown.css
+++ b/frontend/editor/src/core/ui/Dropdown.css
@@ -4,28 +4,20 @@
 }
 
 .sui-dd__menu {
-  position: absolute;
-  top: calc(100% + var(--space-1));
+  /* Positioned (fixed, portaled to <body>) entirely by the Menu component. */
   min-width: 12rem;
   padding: var(--space-1);
   background: var(--c-surface);
   border: 1px solid var(--c-border);
   border-radius: var(--radius-md);
   box-shadow: var(--shadow-lg);
-  z-index: var(--z-dropdown);
+  z-index: var(--z-popover);
   animation: fadeInUp var(--motion-enter) both;
   display: flex;
   flex-direction: column;
   gap: 0.0625rem;
 }
 
-.sui-dd__menu--start {
-  left: 0;
-}
-.sui-dd__menu--end {
-  right: 0;
-}
-
 .sui-dd__item {
   display: flex;
   align-items: center;
diff --git a/frontend/editor/src/core/ui/Dropdown.tsx b/frontend/editor/src/core/ui/Dropdown.tsx
index bf481c9ea5..25019d7c3c 100644
--- a/frontend/editor/src/core/ui/Dropdown.tsx
+++ b/frontend/editor/src/core/ui/Dropdown.tsx
@@ -6,12 +6,14 @@ import {
   useContext,
   useEffect,
   useId,
+  useLayoutEffect,
   useMemo,
   useRef,
   useState,
   type ReactElement,
   type ReactNode,
 } from "react";
+import { createPortal } from "react-dom";
 import "@app/ui/Dropdown.css";
 
 type Alignment = "start" | "end";
@@ -20,6 +22,8 @@ interface DropdownContextValue {
   open: boolean;
   setOpen: (open: boolean) => void;
   triggerRef: React.RefObject<HTMLElement | null>;
+  /** The portaled menu element, so click-outside can exclude it. */
+  menuRef: React.RefObject<HTMLDivElement | null>;
   menuId: string;
   align: Alignment;
 }
@@ -68,15 +72,20 @@ function Root({
 
   const triggerRef = useRef<HTMLElement | null>(null);
   const containerRef = useRef<HTMLDivElement | null>(null);
+  const menuRef = useRef<HTMLDivElement | null>(null);
   const menuId = useId();
 
-  // Click-outside + Escape close.
+  // Click-outside + Escape close. The menu is portaled to <body>, so it is not
+  // inside containerRef - check it separately or a click on it would close the
+  // menu before the item's handler runs.
   useEffect(() => {
     if (!open) return;
     function onDocClick(e: MouseEvent) {
+      const target = e.target as Node;
       if (
         containerRef.current &&
-        !containerRef.current.contains(e.target as Node)
+        !containerRef.current.contains(target) &&
+        !(menuRef.current && menuRef.current.contains(target))
       ) {
         setOpen(false);
       }
@@ -96,7 +105,7 @@ function Root({
   }, [open, setOpen]);
 
   const value = useMemo<DropdownContextValue>(
-    () => ({ open, setOpen, triggerRef, menuId, align }),
+    () => ({ open, setOpen, triggerRef, menuRef, menuId, align }),
     [open, setOpen, menuId, align],
   );
 
@@ -150,23 +159,79 @@ export interface DropdownMenuProps {
 }
 
 function Menu({ children, className, width }: DropdownMenuProps) {
-  const { open, menuId, align } = useDropdownCtx();
-  if (!open) return null;
-  const style =
-    width !== undefined
+  const { open, menuId, align, triggerRef, menuRef } = useDropdownCtx();
+  // Fixed position tracked to the trigger. Portaling to <body> keeps the menu
+  // out of any `overflow` ancestor (e.g. a table's horizontal scroll area),
+  // which would otherwise clip it and add a scrollbar.
+  const [pos, setPos] = useState<{
+    top?: number;
+    bottom?: number;
+    left?: number;
+    right?: number;
+    maxHeight: number;
+  } | null>(null);
+
+  useLayoutEffect(() => {
+    if (!open) return;
+    const place = () => {
+      const el = triggerRef.current;
+      if (!el) return;
+      const r = el.getBoundingClientRect();
+      const gap = 4;
+      const margin = 8;
+      const spaceBelow = window.innerHeight - r.bottom - margin;
+      const spaceAbove = r.top - margin;
+      // Flip above when there's more room there, so a trigger near the viewport
+      // bottom doesn't open a fixed menu that runs off-screen and can't scroll.
+      const below = spaceBelow >= spaceAbove;
+      const horizontal =
+        align === "end"
+          ? { right: window.innerWidth - r.right }
+          : { left: r.left };
+      setPos({
+        ...horizontal,
+        ...(below
+          ? { top: r.bottom + gap }
+          : { bottom: window.innerHeight - r.top + gap }),
+        maxHeight: Math.max(0, (below ? spaceBelow : spaceAbove) - gap),
+      });
+    };
+    place();
+    // Track the trigger while scrolling/resizing (capture catches inner scrollers).
+    window.addEventListener("scroll", place, true);
+    window.addEventListener("resize", place);
+    return () => {
+      window.removeEventListener("scroll", place, true);
+      window.removeEventListener("resize", place);
+    };
+  }, [open, align, triggerRef]);
+
+  if (!open || !pos) return null;
+  const style: React.CSSProperties = {
+    position: "fixed",
+    // Explicit auto (not undefined) so the CSS fallback `top`/`left` can't leak
+    // in on the axis this placement isn't pinning.
+    top: pos.top ?? "auto",
+    bottom: pos.bottom ?? "auto",
+    left: pos.left ?? "auto",
+    right: pos.right ?? "auto",
+    maxHeight: pos.maxHeight,
+    overflowY: "auto",
+    ...(width !== undefined
       ? { minWidth: typeof width === "number" ? `${width}px` : width }
-      : undefined;
-  return (
+      : {}),
+  };
+  return createPortal(
     <div
       id={menuId}
       role="menu"
-      className={["sui-dd__menu", `sui-dd__menu--${align}`, className ?? ""]
-        .filter(Boolean)
-        .join(" ")}
+      ref={menuRef}
+      className={["sui-dd__menu", className ?? ""].filter(Boolean).join(" ")}
       style={style}
     >
       {children}
-    </div>
+    </div>,
+    document.body,
   );
 }
 
diff --git a/frontend/editor/src/core/ui/FormField.css b/frontend/editor/src/core/ui/FormField.css
index 792845c255..f7aaf61131 100644
--- a/frontend/editor/src/core/ui/FormField.css
+++ b/frontend/editor/src/core/ui/FormField.css
@@ -5,6 +5,12 @@
   min-width: 0;
 }
 
+.sui-field__label-row {
+  display: flex;
+  align-items: center;
+  gap: 0.25rem;
+}
+
 .sui-field__label {
   font-size: 0.75rem;
   font-weight: 600;
@@ -13,6 +19,30 @@
   color: var(--color-section-label);
 }
 
+/* An (i) affordance beside the label: the explanation lives in its tooltip
+   rather than as permanent subtext under the control. */
+.sui-field__info {
+  display: inline-flex;
+  align-items: center;
+  justify-content: center;
+  padding: 0;
+  border: none;
+  background: none;
+  color: var(--c-text-subtle);
+  cursor: pointer;
+  line-height: 0;
+}
+
+.sui-field__info:hover {
+  color: var(--c-text);
+}
+
+.sui-field__info:focus-visible {
+  outline: 2px solid var(--c-primary);
+  outline-offset: 2px;
+  border-radius: 999px;
+}
+
 .sui-field__required {
   /* The base red is a fill colour; as text on the form background it only
      reaches 3.4:1. */
diff --git a/frontend/editor/src/core/ui/FormField.tsx b/frontend/editor/src/core/ui/FormField.tsx
index 65eec64eb8..473ca82472 100644
--- a/frontend/editor/src/core/ui/FormField.tsx
+++ b/frontend/editor/src/core/ui/FormField.tsx
@@ -5,12 +5,18 @@ import {
   type ReactElement,
   type ReactNode,
 } from "react";
+import { Tooltip } from "@mantine/core";
 import "@app/ui/FormField.css";
 
 export interface FormFieldProps {
   label?: ReactNode;
   /** Helper text shown under the control. Replaced by `error` when present. */
   helperText?: ReactNode;
+  /**
+   * Supplementary explanation shown behind an (i) affordance on the label,
+   * instead of taking up permanent space under the control like `helperText`.
+   */
+  info?: ReactNode;
   /** Error string. Causes the control + helper region to swap to the error tone. */
   error?: ReactNode;
   required?: boolean;
@@ -32,6 +38,7 @@ export interface FormFieldProps {
 export function FormField({
   label,
   helperText,
+  info,
   error,
   required,
   children,
@@ -57,16 +64,54 @@ export function FormField({
         .filter(Boolean)
         .join(" ")}
     >
-      {label && (
-        <label htmlFor={controlId} className="sui-field__label">
-          {label}
-          {required && (
-            <span className="sui-field__required" aria-hidden>
-              {" "}
-              *
-            </span>
+      {(label || info) && (
+        <div className="sui-field__label-row">
+          {label && (
+            <label htmlFor={controlId} className="sui-field__label">
+              {label}
+              {required && (
+                <span className="sui-field__required" aria-hidden>
+                  {" "}
+                  *
+                </span>
+              )}
+            </label>
           )}
-        </label>
+          {info && (
+            <Tooltip
+              label={info}
+              multiline
+              w={260}
+              withArrow
+              position="top"
+              events={{ hover: true, focus: true, touch: true }}
+            >
+              <button
+                type="button"
+                className="sui-field__info"
+                aria-label={
+                  typeof info === "string" ? info : "More information"
+                }
+              >
+                <svg
+                  viewBox="0 0 24 24"
+                  width="14"
+                  height="14"
+                  fill="none"
+                  stroke="currentColor"
+                  strokeWidth={2}
+                  strokeLinecap="round"
+                  strokeLinejoin="round"
+                  aria-hidden
+                >
+                  <circle cx="12" cy="12" r="10" />
+                  <line x1="12" y1="16" x2="12" y2="12" />
+                  <line x1="12" y1="8" x2="12.01" y2="8" />
+                </svg>
+              </button>
+            </Tooltip>
+          )}
+        </div>
       )}
       <div className="sui-field__control">{child}</div>
       {(error || helperText) && (
diff --git a/frontend/editor/src/core/ui/Input.css b/frontend/editor/src/core/ui/Input.css
index 3c68bdd8c5..3f5475004c 100644
--- a/frontend/editor/src/core/ui/Input.css
+++ b/frontend/editor/src/core/ui/Input.css
@@ -3,7 +3,7 @@
   align-items: center;
   gap: var(--space-2);
   padding: 0 var(--space-2);
-  background: var(--c-surface);
+  background: var(--c-input-bg);
   border: 1px solid var(--c-border);
   border-radius: var(--radius-md);
   color: var(--c-text);
diff --git a/frontend/editor/src/core/ui/MantineForms.css b/frontend/editor/src/core/ui/MantineForms.css
index 29cd64413d..2bc0d02d09 100644
--- a/frontend/editor/src/core/ui/MantineForms.css
+++ b/frontend/editor/src/core/ui/MantineForms.css
@@ -13,7 +13,7 @@
  * here act as a typed reference and as a fallback for any slot Mantine reads
  * before the inline vars are applied. */
 .sui-mantine-wrapper {
-  --input-bg: var(--c-surface);
+  --input-bg: var(--c-input-bg);
   --input-bd: var(--c-border);
   --input-bd-focus: var(--c-primary);
   --input-radius: var(--radius-md);
@@ -28,6 +28,10 @@
   font-size: 0.875rem;
 }
 
+.sui-mantine-dropdown [role="option"] {
+  font-size: 0.875rem;
+}
+
 /* SUI focus ring — matches .sui-input:focus-within */
 .sui-mantine-wrapper[data-focused],
 .sui-mantine-wrapper:focus-within {
@@ -112,7 +116,7 @@
  * SuiProvider syncs forceColorScheme to SUI theme, so
  * [data-mantine-color-scheme="dark"] === [data-theme="dark"] in practice. ---- */
 [data-mantine-color-scheme="dark"] .sui-mantine-wrapper {
-  --input-bg: var(--c-surface);
+  --input-bg: var(--c-input-bg);
   --input-bd: var(--c-border);
   --input-color: var(--c-text);
 }
diff --git a/frontend/editor/src/core/ui/MetricCard.css b/frontend/editor/src/core/ui/MetricCard.css
index 520342c65a..ae61a7abd1 100644
--- a/frontend/editor/src/core/ui/MetricCard.css
+++ b/frontend/editor/src/core/ui/MetricCard.css
@@ -3,12 +3,7 @@
   flex-direction: column;
   gap: 0.5rem;
   padding: 1.125rem 1.25rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-lg);
-  box-shadow: var(--shadow-md);
   transition:
-    box-shadow var(--motion-fast),
     transform var(--motion-fast),
     border-color var(--motion-fast);
   min-width: 10rem;
@@ -37,7 +32,6 @@
 }
 .sui-metric--interactive:hover {
   border-color: var(--c-border-strong);
-  box-shadow: var(--shadow-lg);
   transform: translateY(-0.0625rem);
 }
 .sui-metric--interactive:focus-visible {
diff --git a/frontend/editor/src/core/ui/MetricCard.tsx b/frontend/editor/src/core/ui/MetricCard.tsx
index cd61580095..651a7d4065 100644
--- a/frontend/editor/src/core/ui/MetricCard.tsx
+++ b/frontend/editor/src/core/ui/MetricCard.tsx
@@ -1,4 +1,5 @@
 import type { ReactNode } from "react";
+import "@app/ui/Surface.css";
 import "@app/ui/MetricCard.css";
 
 export type DeltaDirection = "up" | "down" | "flat";
@@ -52,6 +53,7 @@ export function MetricCard({
   const interactive = !!onClick;
 
   const classes = [
+    "sui-surface",
     "sui-metric",
     `sui-metric--${size}`,
     emphasis === "primary" ? "sui-metric--primary" : "",
diff --git a/frontend/editor/src/core/ui/MetricStrip.css b/frontend/editor/src/core/ui/MetricStrip.css
index 8344fe1393..6497d26684 100644
--- a/frontend/editor/src/core/ui/MetricStrip.css
+++ b/frontend/editor/src/core/ui/MetricStrip.css
@@ -21,10 +21,6 @@
   align-items: center;
   gap: 1.75rem;
   padding: 0.625rem 1.25rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-lg);
-  box-shadow: var(--shadow-sm);
 }
 
 .sui-metric-strip__leading {
diff --git a/frontend/editor/src/core/ui/MetricStrip.tsx b/frontend/editor/src/core/ui/MetricStrip.tsx
index b9e2a03bb3..ded2db624a 100644
--- a/frontend/editor/src/core/ui/MetricStrip.tsx
+++ b/frontend/editor/src/core/ui/MetricStrip.tsx
@@ -1,4 +1,5 @@
 import type { ReactNode } from "react";
+import "@app/ui/Surface.css";
 import "@app/ui/MetricStrip.css";
 
 export interface MetricStripProps {
@@ -21,6 +22,7 @@ export function MetricStrip({
   className,
 }: MetricStripProps) {
   const classes = [
+    layout === "row" ? "sui-surface" : "",
     "sui-metric-strip",
     `sui-metric-strip--${layout}`,
     className ?? "",
diff --git a/frontend/editor/src/core/ui/Modal.css b/frontend/editor/src/core/ui/Modal.css
index 2773585415..2988ec920e 100644
--- a/frontend/editor/src/core/ui/Modal.css
+++ b/frontend/editor/src/core/ui/Modal.css
@@ -15,7 +15,7 @@
   /* Set our own font: the modal portals to <body>, so it can't inherit the
      app's font through the DOM (the portal's .portal-scope isn't an ancestor). */
   font-family: var(--font-sans);
-  background: var(--c-surface);
+  background: var(--c-modal-surface);
   border: 1px solid var(--c-border);
   border-radius: var(--radius-xl);
   box-shadow:
@@ -56,12 +56,19 @@
 
 .sui-modal__header {
   display: flex;
-  align-items: flex-start;
+  align-items: center;
   gap: 0.75rem;
   padding: 1rem 1.125rem 0.75rem;
   border-bottom: 1px solid var(--c-border-subtle);
 }
 
+/* A lone title centres against the back/close controls. With a subtitle the
+   header text is two lines, so top-align it and let the controls sit on the
+   title line rather than the middle of the taller block. */
+.sui-modal__header:has(.sui-modal__sub) {
+  align-items: flex-start;
+}
+
 .sui-modal__header-text {
   flex: 1 1 auto;
   min-width: 0;
@@ -79,9 +86,10 @@
   color: var(--c-text-subtle);
 }
 
-/* Sizing/background/hover are owned by the Button; this just keeps it from
- * stretching. */
-.sui-modal__close {
+/* Sizing/background/hover are owned by the Button; this just keeps them from
+ * stretching. The back arrow leads the header; the close button trails it. */
+.sui-modal__close,
+.sui-modal__back {
   flex: 0 0 auto;
 }
 
diff --git a/frontend/editor/src/core/ui/Modal.tsx b/frontend/editor/src/core/ui/Modal.tsx
index 09b019e0ef..f782fe55ff 100644
--- a/frontend/editor/src/core/ui/Modal.tsx
+++ b/frontend/editor/src/core/ui/Modal.tsx
@@ -12,6 +12,10 @@ export interface ModalProps {
   title?: ReactNode;
   subtitle?: ReactNode;
   footer?: ReactNode;
+  /** When set, a back arrow renders at the start of the header (e.g. to step back in a staged modal). */
+  onBack?: () => void;
+  /** Accessible label for the back arrow. */
+  backLabel?: string;
   /** sm=24rem, md=32rem, lg=48rem, xl=64rem. */
   width?: ModalWidth;
   disableBackdropClose?: boolean;
@@ -29,6 +33,8 @@ export function Modal({
   title,
   subtitle,
   footer,
+  onBack,
+  backLabel,
   width = "md",
   disableBackdropClose = false,
   disableEscapeClose = false,
@@ -82,8 +88,35 @@ export function Modal({
           aria-label={!hasTitle ? ariaLabel : undefined}
           tabIndex={-1}
         >
-          {(title || subtitle) && (
+          {(title || subtitle || onBack) && (
             <header className="sui-modal__header">
+              {onBack && (
+                <Button
+                  variant="tertiary"
+                  accent="neutral"
+                  size="sm"
+                  shape="circle"
+                  className="sui-modal__back"
+                  onClick={onBack}
+                  aria-label={backLabel ?? "Back"}
+                  leftSection={
+                    <svg
+                      viewBox="0 0 24 24"
+                      width="16"
+                      height="16"
+                      fill="none"
+                      stroke="currentColor"
+                      strokeWidth={1.75}
+                      strokeLinecap="round"
+                      strokeLinejoin="round"
+                      aria-hidden
+                    >
+                      <line x1="19" y1="12" x2="5" y2="12" />
+                      <polyline points="12 19 5 12 12 5" />
+                    </svg>
+                  }
+                />
+              )}
               <div className="sui-modal__header-text">
                 {title && (
                   <div id={titleId} className="sui-modal__title">
diff --git a/frontend/editor/src/core/ui/MultiSelect.tsx b/frontend/editor/src/core/ui/MultiSelect.tsx
index 0d2ab92ad8..93e873980f 100644
--- a/frontend/editor/src/core/ui/MultiSelect.tsx
+++ b/frontend/editor/src/core/ui/MultiSelect.tsx
@@ -8,7 +8,7 @@ import { useInputAria } from "@app/ui/ariaForwarding";
 import "@app/ui/MantineForms.css";
 
 const SUI_INPUT_VARS = {
-  "--input-bg": "var(--c-surface)",
+  "--input-bg": "var(--c-input-bg)",
   "--input-bd": "var(--c-border)",
   "--input-bd-focus": "var(--c-primary)",
   "--input-radius": "var(--radius-md)",
@@ -174,6 +174,7 @@ export function MultiSelect({
       ref={inputRef}
       classNames={{
         wrapper: "sui-mantine-wrapper",
+        dropdown: "sui-mantine-dropdown",
         pill: "sui-mantine-pill",
         pillsList: "sui-mantine-pills-list",
       }}
diff --git a/frontend/editor/src/core/ui/NodeCard.css b/frontend/editor/src/core/ui/NodeCard.css
index 7982e2581a..a7a6d8e781 100644
--- a/frontend/editor/src/core/ui/NodeCard.css
+++ b/frontend/editor/src/core/ui/NodeCard.css
@@ -8,10 +8,6 @@
   display: flex;
   align-items: stretch;
   box-sizing: border-box;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-lg);
-  box-shadow: var(--shadow-sm);
   transition:
     border-color var(--motion-fast),
     box-shadow var(--motion-fast),
diff --git a/frontend/editor/src/core/ui/NodeCard.tsx b/frontend/editor/src/core/ui/NodeCard.tsx
index 451cc8823b..dd8471fae1 100644
--- a/frontend/editor/src/core/ui/NodeCard.tsx
+++ b/frontend/editor/src/core/ui/NodeCard.tsx
@@ -1,6 +1,7 @@
 import type { HTMLAttributes, MouseEvent, ReactNode, Ref } from "react";
 import { Button } from "@app/ui/Button";
 import { IconBadge, type IconBadgeAccent } from "@app/ui/IconBadge";
+import "@app/ui/Surface.css";
 import "@app/ui/NodeCard.css";
 
 /** Border tone. `selected` (a separate prop) overrides this with the primary ring. */
@@ -53,6 +54,7 @@ export function NodeCard({
       {...rest}
       ref={ref}
       className={[
+        "sui-surface",
         "sui-node-card",
         tone === "warning" ? "sui-node-card--warning" : "",
         selected ? "is-selected" : "",
diff --git a/frontend/editor/src/core/ui/NumberInput.tsx b/frontend/editor/src/core/ui/NumberInput.tsx
index a685279663..d0f1eaeb7c 100644
--- a/frontend/editor/src/core/ui/NumberInput.tsx
+++ b/frontend/editor/src/core/ui/NumberInput.tsx
@@ -7,7 +7,7 @@ import { useInputAria } from "@app/ui/ariaForwarding";
 import "@app/ui/MantineForms.css";
 
 const SUI_INPUT_VARS = {
-  "--input-bg": "var(--c-surface)",
+  "--input-bg": "var(--c-input-bg)",
   "--input-bd": "var(--c-border)",
   "--input-bd-focus": "var(--c-primary)",
   "--input-radius": "var(--radius-md)",
diff --git a/frontend/editor/src/core/ui/Select.css b/frontend/editor/src/core/ui/Select.css
index 7ced297651..11aa380443 100644
--- a/frontend/editor/src/core/ui/Select.css
+++ b/frontend/editor/src/core/ui/Select.css
@@ -2,7 +2,7 @@
   position: relative;
   display: inline-flex;
   align-items: center;
-  background: var(--c-surface);
+  background: var(--c-input-bg);
   border: 1px solid var(--c-border);
   border-radius: var(--radius-md);
   color: var(--c-text);
diff --git a/frontend/editor/src/core/ui/Select.tsx b/frontend/editor/src/core/ui/Select.tsx
index c4861a7752..9646c7851b 100644
--- a/frontend/editor/src/core/ui/Select.tsx
+++ b/frontend/editor/src/core/ui/Select.tsx
@@ -7,7 +7,7 @@ import { useInputAria } from "@app/ui/ariaForwarding";
 import "@app/ui/MantineForms.css";
 
 const SUI_INPUT_VARS = {
-  "--input-bg": "var(--c-surface)",
+  "--input-bg": "var(--c-input-bg)",
   "--input-bd": "var(--c-border)",
   "--input-bd-focus": "var(--c-primary)",
   "--input-radius": "var(--radius-md)",
@@ -150,7 +150,10 @@ export function Select({
       // required sets the input attribute only; FormField renders the asterisk.
       withAsterisk={false}
       ref={inputRef}
-      classNames={{ wrapper: "sui-mantine-wrapper" }}
+      classNames={{
+        wrapper: "sui-mantine-wrapper",
+        dropdown: "sui-mantine-dropdown",
+      }}
       styles={{ wrapper: SUI_INPUT_VARS }}
       {...passthroughProps}
     />
diff --git a/frontend/editor/src/core/ui/Surface.css b/frontend/editor/src/core/ui/Surface.css
new file mode 100644
index 0000000000..93b7c104c1
--- /dev/null
+++ b/frontend/editor/src/core/ui/Surface.css
@@ -0,0 +1,20 @@
+/* Duplicates `.sui-nav-surface` on purpose: nav chrome may diverge from in-page surfaces. */
+.sui-surface {
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-nav);
+}
+
+:root {
+  --sui-elevation-raised:
+    0 1px 2px rgba(0, 0, 0, 0.04), 0 2px 6px rgba(0, 0, 0, 0.06);
+}
+
+[data-theme="dark"] {
+  --sui-elevation-raised:
+    0 1px 2px rgba(0, 0, 0, 0.45), 0 2px 8px rgba(0, 0, 0, 0.35);
+}
+
+.sui-surface--raised {
+  box-shadow: var(--sui-elevation-raised);
+}
diff --git a/frontend/editor/src/core/ui/Surface.stories.tsx b/frontend/editor/src/core/ui/Surface.stories.tsx
new file mode 100644
index 0000000000..5f9afb09e9
--- /dev/null
+++ b/frontend/editor/src/core/ui/Surface.stories.tsx
@@ -0,0 +1,46 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { Surface } from "@app/ui/Surface";
+
+const meta: Meta<typeof Surface> = {
+  title: "Primitives/Surface",
+  component: Surface,
+  parameters: { layout: "padded" },
+  decorators: [
+    (S) => (
+      <div style={{ width: "22rem", background: "var(--c-bg)", padding: 12 }}>
+        <S />
+      </div>
+    ),
+  ],
+};
+export default meta;
+type Story = StoryObj<typeof Surface>;
+
+/** The box any in-page panel, tile or table container sits in. */
+export const Default: Story = {
+  args: {
+    children: (
+      <div style={{ padding: "1rem" }}>
+        <div style={{ fontSize: 14, fontWeight: 600 }}>Panel title</div>
+        <div style={{ fontSize: 13, color: "var(--c-text-muted)" }}>
+          Same fill, border and radius on every surface.
+        </div>
+      </div>
+    ),
+  },
+};
+
+/** `as` renders a landmark element instead of a div. */
+export const AsSection: Story = {
+  args: {
+    as: "section",
+    "aria-label": "Usage",
+    children: (
+      <div style={{ padding: "0.75rem" }}>
+        <span style={{ fontSize: 13, color: "var(--c-text-muted)" }}>
+          Any content, not just cards.
+        </span>
+      </div>
+    ),
+  },
+};
diff --git a/frontend/editor/src/core/ui/Surface.tsx b/frontend/editor/src/core/ui/Surface.tsx
new file mode 100644
index 0000000000..bbb3be1d7a
--- /dev/null
+++ b/frontend/editor/src/core/ui/Surface.tsx
@@ -0,0 +1,33 @@
+import { forwardRef, type HTMLAttributes } from "react";
+import "@app/ui/Surface.css";
+
+export interface SurfaceProps extends HTMLAttributes<HTMLDivElement> {
+  /** Element to render; `section`/`article`/`aside` when the box is a landmark. */
+  as?: "div" | "section" | "article" | "aside";
+  /** For a surface in front of another surface: same fill, one step of elevation. */
+  raised?: boolean;
+}
+
+/** The standard in-page surface: fill, hairline border, shared radius, no shadow. */
+export const Surface = forwardRef<HTMLDivElement, SurfaceProps>(
+  function Surface(
+    { as: Component = "div", raised = false, className, children, ...rest },
+    ref,
+  ) {
+    return (
+      <Component
+        ref={ref}
+        className={[
+          "sui-surface",
+          raised ? "sui-surface--raised" : "",
+          className ?? "",
+        ]
+          .filter(Boolean)
+          .join(" ")}
+        {...rest}
+      >
+        {children}
+      </Component>
+    );
+  },
+);
diff --git a/frontend/editor/src/core/ui/Table.css b/frontend/editor/src/core/ui/Table.css
deleted file mode 100644
index 3d759c1fcd..0000000000
--- a/frontend/editor/src/core/ui/Table.css
+++ /dev/null
@@ -1,76 +0,0 @@
-.sui-table-wrap {
-  width: 100%;
-  overflow-x: auto;
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-md);
-  background: var(--c-surface);
-}
-
-.sui-table {
-  width: 100%;
-  border-collapse: collapse;
-  font-size: 0.8125rem;
-}
-
-/* Header text kept for assistive tech only, so a column of controls can be named
-   without putting a heading above it. Defined here rather than borrowing a global
-   utility, since the portal loads its own stylesheet. */
-.sui-table__th-sr {
-  position: absolute;
-  width: 1px;
-  height: 1px;
-  padding: 0;
-  margin: -1px;
-  overflow: hidden;
-  clip-path: inset(50%);
-  white-space: nowrap;
-  border: 0;
-}
-
-.sui-table__th {
-  text-align: left;
-  font-weight: 600;
-  color: var(--c-text-subtle);
-  font-size: 0.6875rem;
-  text-transform: uppercase;
-  letter-spacing: 0.04em;
-  padding: 0.625rem 0.875rem;
-  border-bottom: 1px solid var(--c-border);
-  white-space: nowrap;
-}
-.sui-table__th--right,
-.sui-table__td--right {
-  text-align: right;
-}
-.sui-table__th--center,
-.sui-table__td--center {
-  text-align: center;
-}
-
-.sui-table__td {
-  padding: 0.625rem 0.875rem;
-  color: var(--c-text-muted);
-  border-bottom: 1px solid var(--c-border-subtle);
-  vertical-align: middle;
-}
-.sui-table tbody tr:last-child .sui-table__td {
-  border-bottom: none;
-}
-
-.sui-table__row--interactive {
-  cursor: pointer;
-  transition: background var(--motion-fast);
-}
-.sui-table__row--interactive:hover {
-  background: var(--c-hover);
-}
-.sui-table__row--interactive:focus-visible {
-  outline: 0.125rem solid var(--c-primary);
-  outline-offset: -0.125rem;
-}
-
-.sui-table__empty {
-  padding: 2rem;
-  text-align: center;
-  color: var(--c-text-subtle);
-}
diff --git a/frontend/editor/src/core/ui/Table.stories.tsx b/frontend/editor/src/core/ui/Table.stories.tsx
deleted file mode 100644
index 2e7e0f64f1..0000000000
--- a/frontend/editor/src/core/ui/Table.stories.tsx
+++ /dev/null
@@ -1,109 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { Table, type TableColumn } from "@app/ui/Table";
-import { StatusBadge } from "@app/ui/StatusBadge";
-
-interface Region {
-  id: string;
-  name: string;
-  code: string;
-  status: "healthy" | "degraded";
-  docs: number;
-  latency: string;
-}
-
-const REGIONS: Region[] = [
-  {
-    id: "1",
-    name: "US East",
-    code: "us-east-1",
-    status: "healthy",
-    docs: 12481,
-    latency: "41 ms",
-  },
-  {
-    id: "2",
-    name: "US West",
-    code: "us-west-2",
-    status: "healthy",
-    docs: 8210,
-    latency: "63 ms",
-  },
-  {
-    id: "3",
-    name: "EU West",
-    code: "eu-west-1",
-    status: "degraded",
-    docs: 3044,
-    latency: "190 ms",
-  },
-];
-
-const COLUMNS: TableColumn<Region>[] = [
-  { key: "name", header: "Region", render: (r) => r.name },
-  {
-    key: "code",
-    header: "Code",
-    render: (r) => (
-      <code style={{ fontFamily: "var(--font-mono)" }}>{r.code}</code>
-    ),
-  },
-  {
-    key: "status",
-    header: "Status",
-    render: (r) => (
-      <StatusBadge
-        tone={r.status === "healthy" ? "success" : "warning"}
-        size="sm"
-      >
-        {r.status}
-      </StatusBadge>
-    ),
-  },
-  {
-    key: "docs",
-    header: "Docs 24h",
-    align: "right",
-    render: (r) => r.docs.toLocaleString(),
-  },
-  { key: "latency", header: "P95", align: "right", render: (r) => r.latency },
-];
-
-const meta: Meta<typeof Table> = {
-  title: "Compound/Table",
-  component: Table,
-  tags: ["autodocs"],
-  parameters: { layout: "padded" },
-};
-export default meta;
-type Story = StoryObj<typeof Table>;
-
-/** Presentational table — columns own their cell renderers; pass pre-sorted rows. */
-export const Basic: Story = {
-  render: () => (
-    <Table<Region> columns={COLUMNS} rows={REGIONS} rowKey={(r) => r.id} />
-  ),
-};
-
-/** With `onRowClick`, rows become focusable + hoverable (keyboard: Enter/Space). */
-export const Interactive: Story = {
-  render: () => (
-    <Table<Region>
-      columns={COLUMNS}
-      rows={REGIONS}
-      rowKey={(r) => r.id}
-      onRowClick={() => {}}
-    />
-  ),
-};
-
-/** Empty body slot. */
-export const Empty: Story = {
-  render: () => (
-    <Table<Region>
-      columns={COLUMNS}
-      rows={[]}
-      rowKey={(r) => r.id}
-      empty="No regions deployed yet."
-    />
-  ),
-};
diff --git a/frontend/editor/src/core/ui/Table.tsx b/frontend/editor/src/core/ui/Table.tsx
deleted file mode 100644
index 277362eab8..0000000000
--- a/frontend/editor/src/core/ui/Table.tsx
+++ /dev/null
@@ -1,138 +0,0 @@
-import type { ReactNode } from "react";
-import "@app/ui/Table.css";
-
-export interface TableColumn<T> {
-  /** Stable column id. */
-  key: string;
-  header: ReactNode;
-  /**
-   * Hides the header visually but keeps it for assistive tech. For a trailing column of controls
-   * or chevrons, where a visible heading would be noise but a blank one leaves the cells below it
-   * unlabelled.
-   */
-  headerHidden?: boolean;
-  /** Cell renderer for a row. */
-  render: (row: T) => ReactNode;
-  align?: "left" | "right" | "center";
-  /** Optional fixed/min width (any CSS length). */
-  width?: string;
-}
-
-export interface TableProps<T> {
-  columns: TableColumn<T>[];
-  rows: T[];
-  /** Stable key per row. */
-  rowKey: (row: T) => string;
-  /** Makes rows interactive (hover + click + keyboard). */
-  onRowClick?: (row: T) => void;
-  /**
-   * Per-row gate for interactivity, checked only when {@link onRowClick} is set. A row for which
-   * this returns false is inert: no click/keyboard, and not announced as a button. Defaults to
-   * all rows interactive.
-   */
-  isRowInteractive?: (row: T) => boolean;
-  /**
-   * Set when rows render controls of their own. The row keeps its click as a mouse shortcut but
-   * stops announcing itself as a button, because a button may not contain other controls and a
-   * {@code <tr role="button">} is no longer a row to a screen reader. That row control is then the
-   * keyboard path to the same action, so nothing is lost by leaving the row itself inert.
-   */
-  rowsContainControls?: boolean;
-  /** Rendered in place of the body when there are no rows. */
-  empty?: ReactNode;
-  className?: string;
-}
-
-/**
- * Minimal data table primitive. Columns own their own cell renderers, so the
- * table stays presentational — callers pre-sort/filter and pass the rows they
- * want shown. Rows become focusable buttons-in-disguise when `onRowClick` is
- * set.
- */
-export function Table<T>({
-  columns,
-  rows,
-  rowKey,
-  onRowClick,
-  isRowInteractive,
-  rowsContainControls = false,
-  empty,
-  className,
-}: TableProps<T>) {
-  const interactive = Boolean(onRowClick);
-  return (
-    <div
-      className={["sui-table-wrap", className ?? ""].filter(Boolean).join(" ")}
-    >
-      <table className="sui-table">
-        <thead>
-          <tr>
-            {columns.map((c) => (
-              <th
-                key={c.key}
-                scope="col"
-                className={`sui-table__th sui-table__th--${c.align ?? "left"}`}
-                style={c.width ? { width: c.width } : undefined}
-              >
-                {c.headerHidden ? (
-                  <span className="sui-table__th-sr">{c.header}</span>
-                ) : (
-                  c.header
-                )}
-              </th>
-            ))}
-          </tr>
-        </thead>
-        <tbody>
-          {rows.length === 0 ? (
-            <tr>
-              <td className="sui-table__empty" colSpan={columns.length}>
-                {empty ?? "No data"}
-              </td>
-            </tr>
-          ) : (
-            rows.map((row) => {
-              const rowInteractive =
-                interactive && (isRowInteractive?.(row) ?? true);
-              // Only a row that owns the whole interaction takes the button role and the keyboard
-              // handling that goes with it; see rowsContainControls.
-              const rowIsControl = rowInteractive && !rowsContainControls;
-              return (
-                <tr
-                  key={rowKey(row)}
-                  className={
-                    rowInteractive
-                      ? "sui-table__row sui-table__row--interactive"
-                      : "sui-table__row"
-                  }
-                  onClick={rowInteractive ? () => onRowClick?.(row) : undefined}
-                  tabIndex={rowIsControl ? 0 : undefined}
-                  role={rowIsControl ? "button" : undefined}
-                  onKeyDown={
-                    rowIsControl
-                      ? (e) => {
-                          if (e.key === "Enter" || e.key === " ") {
-                            e.preventDefault();
-                            onRowClick?.(row);
-                          }
-                        }
-                      : undefined
-                  }
-                >
-                  {columns.map((c) => (
-                    <td
-                      key={c.key}
-                      className={`sui-table__td sui-table__td--${c.align ?? "left"}`}
-                    >
-                      {c.render(row)}
-                    </td>
-                  ))}
-                </tr>
-              );
-            })
-          )}
-        </tbody>
-      </table>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/core/ui/Tabs.tsx b/frontend/editor/src/core/ui/Tabs.tsx
index 5c91934c77..2cd3b8193a 100644
--- a/frontend/editor/src/core/ui/Tabs.tsx
+++ b/frontend/editor/src/core/ui/Tabs.tsx
@@ -50,7 +50,7 @@ export function Tabs<K extends string = string>({
       aria-label={ariaLabel}
     >
       {items.map((item) => {
-        const isActive = item.key === activeKey;
+        const isActive = item.key === activeKey && !item.disabled;
         const styleVars =
           isActive && item.accentColor
             ? ({ "--sui-tab-accent": item.accentColor } as React.CSSProperties)
@@ -61,13 +61,17 @@ export function Tabs<K extends string = string>({
             type="button"
             aria-pressed={isActive}
             disabled={item.disabled}
+            aria-disabled={item.disabled || undefined}
             className={
               "sui-tabs__tab" +
               (isActive ? " is-active" : "") +
               (item.disabled ? " is-disabled" : "")
             }
             style={styleVars}
-            onClick={() => onChange(item.key)}
+            onClick={() => {
+              if (item.disabled) return;
+              onChange(item.key);
+            }}
           >
             {item.dotColor && (
               <span
diff --git a/frontend/editor/src/core/ui/dataTableColumns.tsx b/frontend/editor/src/core/ui/dataTableColumns.tsx
new file mode 100644
index 0000000000..df31dc384a
--- /dev/null
+++ b/frontend/editor/src/core/ui/dataTableColumns.tsx
@@ -0,0 +1,569 @@
+import { Fragment, type ReactNode } from "react";
+import { StatusBadge, type StatusTone } from "@app/ui/StatusBadge";
+import { Chip, type ChipAccent } from "@app/ui/Chip";
+import { Button } from "@app/ui/Button";
+import { Dropdown } from "@app/ui/Dropdown";
+import { ProgressBar } from "@app/ui/ProgressBar";
+import { Select, type SelectOption } from "@app/ui/Select";
+
+/**
+ * The column vocabulary for {@link DataTable}. Call-sites pick a cell KIND and
+ * supply the data + semantics; the component owns 100% of the appearance. There
+ * is no raw-JSX / className escape hatch by design; a cell can only look the way
+ * the design system draws its kind, so every table looks and behaves the same.
+ */
+
+type Align = "left" | "right";
+type SortValue = string | number | boolean | null | undefined;
+
+/**
+ * Which built-in comparator sorts a column. Set by the builder from the cell's
+ * data type - `alphanumeric` (case-insensitive, natural: `v2` before `v10`) for
+ * text, `basic` (raw numeric) for numbers. Call-sites never choose this.
+ */
+export type DataTableSortFn = "alphanumeric" | "basic";
+
+/** Opaque, fully-resolved column. Produced only by the {@link column} builders. */
+export interface DataTableColumn<T> {
+  key: string;
+  header: ReactNode;
+  align: Align;
+  /** Prevent wrapping (mono/number values). */
+  nowrap: boolean;
+  /** Shrink the column to its content (actions / affordances). */
+  fit: boolean;
+  sortable: boolean;
+  sortValue?: (row: T) => SortValue;
+  /** Comparator kind, derived from the cell type. Only set when sortable. */
+  sortFn?: DataTableSortFn;
+  /** Cell renders its own interactive control (button/link/select/chip). Rows
+   *  containing one drop their `role="button"` so a button never nests inside a
+   *  button - the control is the keyboard path instead. */
+  interactive?: boolean;
+  /** Internal, design-system-owned renderer. Call-sites never supply this. */
+  renderCell: (row: T) => ReactNode;
+}
+
+/** The only design-system glyph a cell may use (icon-only actions). */
+export type CellGlyph = "kebab";
+
+function KebabGlyph() {
+  return (
+    <svg
+      width="16"
+      height="16"
+      viewBox="0 0 24 24"
+      fill="currentColor"
+      aria-hidden
+    >
+      <circle cx="12" cy="5" r="1.6" />
+      <circle cx="12" cy="12" r="1.6" />
+      <circle cx="12" cy="19" r="1.6" />
+    </svg>
+  );
+}
+
+/** An item in a kebab action menu. */
+export interface CellMenuItem {
+  label: string;
+  tone?: "default" | "danger";
+  disabled?: boolean;
+  onClick: () => void;
+  /** Draw a divider above this item. */
+  dividerBefore?: boolean;
+}
+
+/** A row/group action. A locked button, or a kebab menu when `menu` is set. */
+export interface CellAction {
+  label: string;
+  glyph?: CellGlyph;
+  /** Icon-only (uses `label` as the accessible name). */
+  iconOnly?: boolean;
+  tone?: "default" | "danger";
+  onClick?: () => void;
+  loading?: boolean;
+  disabled?: boolean;
+  /** When set, the button opens this menu instead of firing `onClick`. */
+  menu?: CellMenuItem[];
+}
+
+/** Renders a row of locked action buttons / kebab menus. Shared by the
+ *  `actions` cell kind and grouped-table headers. */
+export function renderCellActions(actions: CellAction[]): ReactNode {
+  return (
+    <div className="sui-dtc__actions" onClick={(e) => e.stopPropagation()}>
+      {actions.map((a) =>
+        a.menu ? (
+          <Dropdown.Root key={a.label}>
+            <Dropdown.Trigger>
+              <Button
+                variant={a.iconOnly ? "tertiary" : "secondary"}
+                size="sm"
+                shape={a.iconOnly ? "circle" : undefined}
+                leftSection={a.glyph ? <KebabGlyph /> : undefined}
+                loading={a.loading}
+                disabled={a.disabled}
+                aria-label={a.iconOnly ? a.label : undefined}
+              >
+                {a.iconOnly ? undefined : a.label}
+              </Button>
+            </Dropdown.Trigger>
+            <Dropdown.Menu width={210}>
+              {a.menu.map((m) => (
+                <Fragment key={m.label}>
+                  {m.dividerBefore && <Dropdown.Divider />}
+                  <Dropdown.Item
+                    onSelect={m.onClick}
+                    disabled={m.disabled}
+                    className={
+                      m.tone === "danger"
+                        ? "sui-dtc__menu-item--danger"
+                        : undefined
+                    }
+                  >
+                    {m.label}
+                  </Dropdown.Item>
+                </Fragment>
+              ))}
+            </Dropdown.Menu>
+          </Dropdown.Root>
+        ) : (
+          <Button
+            key={a.label}
+            variant={a.iconOnly ? "tertiary" : "secondary"}
+            accent={a.tone === "danger" ? "danger" : undefined}
+            size="sm"
+            shape={a.iconOnly ? "circle" : undefined}
+            leftSection={a.glyph ? <KebabGlyph /> : undefined}
+            loading={a.loading}
+            disabled={a.disabled}
+            aria-label={a.iconOnly ? a.label : undefined}
+            onClick={(e) => {
+              e.stopPropagation();
+              a.onClick?.();
+            }}
+          >
+            {a.iconOnly ? undefined : a.label}
+          </Button>
+        ),
+      )}
+    </div>
+  );
+}
+
+/** An external link inside a cell. */
+export interface CellLink {
+  label: string;
+  href: string;
+  ariaLabel?: string;
+}
+
+interface Common {
+  key: string;
+  header: ReactNode;
+  sortable?: boolean;
+}
+
+function base<T>(
+  o: Common,
+  extra: Pick<DataTableColumn<T>, "align" | "nowrap" | "fit" | "renderCell"> & {
+    sortValue?: (row: T) => SortValue;
+    sortFn?: DataTableSortFn;
+    interactive?: boolean;
+  },
+): DataTableColumn<T> {
+  return {
+    key: o.key,
+    header: o.header,
+    align: extra.align,
+    nowrap: extra.nowrap,
+    fit: extra.fit,
+    sortable: !!o.sortable,
+    sortValue: o.sortable ? extra.sortValue : undefined,
+    sortFn: o.sortable ? extra.sortFn : undefined,
+    interactive: extra.interactive,
+    renderCell: extra.renderCell,
+  };
+}
+
+function text<T>(
+  o: Common & {
+    get: (row: T) => string;
+    /** Optional bold label rendered before the value as "Label: value". */
+    label?: (row: T) => string | null | undefined;
+    sortBy?: (row: T) => SortValue;
+  },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: false,
+    fit: false,
+    sortValue: o.sortBy ?? ((r) => o.get(r)),
+    sortFn: "alphanumeric",
+    renderCell: (r) => {
+      const label = o.label?.(r);
+      return label ? (
+        <span className="sui-dtc__text sui-dtc__text--labeled">
+          <strong className="sui-dtc__text-label">{label}:</strong> {o.get(r)}
+        </span>
+      ) : (
+        <span className="sui-dtc__text">{o.get(r)}</span>
+      );
+    },
+  });
+}
+
+function mono<T>(
+  o: Common & { get: (row: T) => string; sortBy?: (row: T) => SortValue },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: true,
+    fit: false,
+    sortValue: o.sortBy ?? ((r) => o.get(r)),
+    sortFn: "alphanumeric",
+    renderCell: (r) => <code className="sui-dtc__mono">{o.get(r)}</code>,
+  });
+}
+
+function muted<T>(
+  o: Common & {
+    get: (row: T) => string | null | undefined;
+    placeholder?: string;
+    /** Override the sort key (e.g. an ISO date behind a "3 days ago" label). */
+    sortBy?: (row: T) => SortValue;
+  },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: false,
+    fit: false,
+    sortValue: o.sortBy ?? ((r) => o.get(r) ?? undefined),
+    sortFn: "alphanumeric",
+    renderCell: (r) => (
+      <span className="sui-dtc__muted">
+        {o.get(r) || (o.placeholder ?? "-")}
+      </span>
+    ),
+  });
+}
+
+function number<T>(
+  o: Common & {
+    get: (row: T) => number | null | undefined;
+    format?: (n: number, row: T) => string;
+    placeholder?: string;
+    /** Override the sort key (e.g. a raw count behind a formatted label). */
+    sortBy?: (row: T) => SortValue;
+  },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "right",
+    nowrap: true,
+    fit: false,
+    sortValue: o.sortBy ?? ((r) => o.get(r) ?? undefined),
+    sortFn: "basic",
+    renderCell: (r) => {
+      const n = o.get(r);
+      if (n == null) {
+        return (
+          <span className="sui-dtc__num sui-dtc__muted">
+            {o.placeholder ?? "-"}
+          </span>
+        );
+      }
+      return (
+        <span className="sui-dtc__num">
+          {o.format ? o.format(n, r) : String(n)}
+        </span>
+      );
+    },
+  });
+}
+
+function badge<T>(
+  o: Common & {
+    get: (row: T) => { tone: StatusTone; label: string };
+    sortBy?: (row: T) => SortValue;
+  },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: true,
+    fit: false,
+    sortValue: o.sortBy ?? ((r) => o.get(r).label),
+    sortFn: "alphanumeric",
+    renderCell: (r) => {
+      const b = o.get(r);
+      return (
+        <StatusBadge tone={b.tone} size="sm">
+          {b.label}
+        </StatusBadge>
+      );
+    },
+  });
+}
+
+/**
+ * A user-defined label, rendered as a dot-less pill. Use this ONLY for labels
+ * that come from data / the user (e.g. a document's classification). Values from
+ * a fixed set we define (types, environments, providers) are `text`, not pills.
+ */
+export interface CellLabel {
+  label: string;
+  accent?: ChipAccent;
+}
+
+function labels<T>(
+  o: Common & { get: (row: T) => CellLabel[] },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: false,
+    fit: false,
+    sortValue: (r) => o.get(r)[0]?.label ?? undefined,
+    sortFn: "alphanumeric",
+    renderCell: (r) => (
+      <div className="sui-dtc__labels">
+        {o.get(r).map((l) => (
+          <Chip
+            key={l.label}
+            accent={l.accent ?? "neutral"}
+            size="sm"
+            showDot={false}
+          >
+            {l.label}
+          </Chip>
+        ))}
+      </div>
+    ),
+  });
+}
+
+/**
+ * An interactive capability chip: click to grant, remove to revoke, dashed to
+ * offer adding. A functional cell (it toggles state), distinct from static
+ * `labels`.
+ */
+export interface CellCap {
+  label: string;
+  accent?: ChipAccent;
+  onClick?: () => void;
+  onRemove?: () => void;
+  dashed?: boolean;
+}
+
+function caps<T>(
+  o: Common & { get: (row: T) => CellCap[] },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: false,
+    fit: false,
+    interactive: true,
+    renderCell: (r) => (
+      <div className="sui-dtc__labels">
+        {o.get(r).map((c) => (
+          <Chip
+            key={c.label}
+            accent={c.accent ?? "neutral"}
+            size="sm"
+            showDot={false}
+            dashed={c.dashed}
+            onClick={c.onClick}
+            onRemove={c.onRemove}
+          >
+            {c.label}
+          </Chip>
+        ))}
+      </div>
+    ),
+  });
+}
+
+function entity<T>(
+  o: Common & {
+    /** Semantic leading icon (component owns its size + colour container). */
+    icon?: (row: T) => ReactNode;
+    primary: (row: T) => string;
+    /** Muted inline suffix after the name, its own node (e.g. "(you)"). */
+    suffix?: (row: T) => string | null | undefined;
+    /** Secondary muted line under the name. */
+    note?: (row: T) => string | null | undefined;
+    sortBy?: (row: T) => SortValue;
+  },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: false,
+    fit: false,
+    sortValue: o.sortBy ?? ((r) => o.primary(r)),
+    sortFn: "alphanumeric",
+    renderCell: (r) => {
+      const icon = o.icon?.(r);
+      const suffix = o.suffix?.(r);
+      const note = o.note?.(r);
+      return (
+        <div className="sui-dtc__entity">
+          {icon != null && (
+            <span className="sui-dtc__entity-icon" aria-hidden>
+              {icon}
+            </span>
+          )}
+          <div className="sui-dtc__entity-body">
+            <span className="sui-dtc__entity-head">
+              <span className="sui-dtc__entity-name">{o.primary(r)}</span>
+              {suffix && (
+                <span className="sui-dtc__entity-suffix">{suffix}</span>
+              )}
+            </span>
+            {note && <span className="sui-dtc__note">{note}</span>}
+          </div>
+        </div>
+      );
+    },
+  });
+}
+
+function actions<T>(o: {
+  key: string;
+  header?: ReactNode;
+  get: (row: T) => CellAction[];
+}): DataTableColumn<T> {
+  return {
+    key: o.key,
+    header: o.header ?? "",
+    align: "right",
+    nowrap: true,
+    fit: true,
+    sortable: false,
+    interactive: true,
+    renderCell: (r) => renderCellActions(o.get(r)),
+  };
+}
+
+function progress<T>(
+  o: Common & {
+    get: (row: T) => { value: number; label?: string };
+    /** Accessible name for the bar (it has no visible text). Defaults to the
+     *  shown percent; pass a description like "Load for us-east-1" when useful. */
+    ariaLabel?: (row: T) => string;
+  },
+): DataTableColumn<T> {
+  return base<T>(o, {
+    align: "left",
+    nowrap: true,
+    fit: false,
+    sortValue: (r) => o.get(r).value,
+    sortFn: "basic",
+    renderCell: (r) => {
+      const p = o.get(r);
+      const shown = p.label ?? `${Math.round(p.value * 100)}%`;
+      return (
+        <div className="sui-dtc__progress">
+          <span className="sui-dtc__progress-bar">
+            <ProgressBar
+              value={p.value}
+              thresholded
+              height={6}
+              label={o.ariaLabel?.(r) ?? shown}
+            />
+          </span>
+          <span className="sui-dtc__progress-pct">{shown}</span>
+        </div>
+      );
+    },
+  });
+}
+
+function links<T>(o: {
+  key: string;
+  header?: ReactNode;
+  get: (row: T) => CellLink[];
+}): DataTableColumn<T> {
+  return {
+    key: o.key,
+    header: o.header ?? "",
+    align: "right",
+    nowrap: true,
+    fit: true,
+    sortable: false,
+    interactive: true,
+    renderCell: (r) => (
+      <div className="sui-dtc__links">
+        {o.get(r).map((l) => (
+          <a
+            key={l.label}
+            className="sui-dtc__link"
+            href={l.href}
+            target="_blank"
+            rel="noopener noreferrer"
+            aria-label={l.ariaLabel}
+          >
+            {l.label}
+          </a>
+        ))}
+      </div>
+    ),
+  };
+}
+
+function select<T>(o: {
+  key: string;
+  header: ReactNode;
+  get: (row: T) => {
+    value?: string | null;
+    defaultValue?: string;
+    options: SelectOption[];
+    ariaLabel?: string;
+    disabled?: boolean;
+  };
+  /** Omit for an uncontrolled select (local UI state only). */
+  onChange?: (row: T, value: string | null) => void;
+}): DataTableColumn<T> {
+  return {
+    key: o.key,
+    header: o.header,
+    align: "left",
+    nowrap: true,
+    fit: false,
+    sortable: false,
+    interactive: true,
+    renderCell: (r) => {
+      const s = o.get(r);
+      const change = o.onChange;
+      return (
+        <div className="sui-dtc__select">
+          <Select
+            options={s.options}
+            value={s.value}
+            defaultValue={s.defaultValue}
+            onChange={change ? (v) => change(r, v) : undefined}
+            aria-label={s.ariaLabel}
+            disabled={s.disabled}
+            inputSize="sm"
+          />
+        </div>
+      );
+    },
+  };
+}
+
+/**
+ * The DataTable column vocabulary. Each builder produces a locked-appearance
+ * column; call-sites choose the kind + supply data, never styling.
+ */
+export const column = {
+  text,
+  mono,
+  muted,
+  number,
+  badge,
+  labels,
+  caps,
+  entity,
+  actions,
+  progress,
+  links,
+  select,
+};
diff --git a/frontend/editor/src/core/ui/index.ts b/frontend/editor/src/core/ui/index.ts
index b3e2ca6ac0..c621319f0e 100644
--- a/frontend/editor/src/core/ui/index.ts
+++ b/frontend/editor/src/core/ui/index.ts
@@ -1,5 +1,6 @@
 export * from "@app/ui/Button";
 export * from "@app/ui/ActionIcon";
+export * from "@app/ui/BellIcon";
 export * from "@app/ui/Logo";
 export * from "@app/ui/FilePicker";
 export * from "@app/ui/SegmentedControl";
@@ -11,6 +12,7 @@ export * from "@app/ui/MetricCard";
 export * from "@app/ui/NodeCard";
 export * from "@app/ui/NavItem";
 export * from "@app/ui/NavSurface";
+export * from "@app/ui/Surface";
 export * from "@app/ui/PanelHeader";
 export * from "@app/ui/CodeBlock";
 export * from "@app/ui/SectionDivider";
@@ -39,7 +41,7 @@ export * from "@app/ui/Collapsible";
 export * from "@app/ui/Tabs";
 export * from "@app/ui/Dropdown";
 export * from "@app/ui/Drawer";
-export * from "@app/ui/Table";
+export * from "@app/ui/DataTable";
 
 // Forms
 export * from "@app/ui/FormField";
diff --git a/frontend/editor/src/core/utils/canvasImageEncoding.test.ts b/frontend/editor/src/core/utils/canvasImageEncoding.test.ts
new file mode 100644
index 0000000000..4e94909d53
--- /dev/null
+++ b/frontend/editor/src/core/utils/canvasImageEncoding.test.ts
@@ -0,0 +1,91 @@
+import { afterEach, describe, expect, it, vi } from "vitest";
+
+import {
+  lossyEncodeOptions,
+  resetCanvasEncodingProbe,
+} from "@app/utils/canvasImageEncoding";
+
+/** An engine that can't encode a format returns PNG instead of throwing, so
+ *  only the returned Blob's `type` reveals what happened. */
+
+/** Stand in for OffscreenCanvas, honouring only the given MIME types. */
+function stubOffscreenCanvas(honoured: string[]): void {
+  class FakeOffscreenCanvas {
+    constructor(
+      public width: number,
+      public height: number,
+    ) {}
+
+    getContext() {
+      return { fillStyle: "", fillRect: () => {} };
+    }
+
+    convertToBlob({ type }: { type: string }) {
+      // Per spec: an unsupported type silently serialises as PNG.
+      const actual = honoured.includes(type) ? type : "image/png";
+      return Promise.resolve(new Blob([new Uint8Array([0])], { type: actual }));
+    }
+  }
+  vi.stubGlobal("OffscreenCanvas", FakeOffscreenCanvas);
+}
+
+afterEach(() => {
+  vi.unstubAllGlobals();
+  resetCanvasEncodingProbe();
+});
+
+describe("lossyEncodeOptions", () => {
+  it("uses WebP when the engine really encodes it", async () => {
+    stubOffscreenCanvas(["image/webp", "image/jpeg", "image/png"]);
+    await expect(lossyEncodeOptions()).resolves.toEqual({
+      type: "image/webp",
+      quality: 0.85,
+    });
+  });
+
+  it("falls back to JPEG when a WebP request silently yields PNG", async () => {
+    // WebKit's actual behaviour: no WebP encoder, no error either.
+    stubOffscreenCanvas(["image/jpeg", "image/png"]);
+    await expect(lossyEncodeOptions()).resolves.toEqual({
+      type: "image/jpeg",
+      quality: 0.85,
+    });
+  });
+
+  it("falls back to PNG when no lossy format is honoured", async () => {
+    stubOffscreenCanvas(["image/png"]);
+    await expect(lossyEncodeOptions()).resolves.toEqual({
+      type: "image/png",
+      quality: 0.85,
+    });
+  });
+
+  it("passes the caller's quality through", async () => {
+    stubOffscreenCanvas(["image/webp", "image/png"]);
+    await expect(lossyEncodeOptions(0.5)).resolves.toEqual({
+      type: "image/webp",
+      quality: 0.5,
+    });
+  });
+
+  it("probes once and reuses the answer", async () => {
+    stubOffscreenCanvas(["image/webp", "image/png"]);
+    const spy = vi.spyOn(
+      (globalThis as unknown as { OffscreenCanvas: { prototype: object } })
+        .OffscreenCanvas.prototype as { convertToBlob: () => unknown },
+      "convertToBlob",
+    );
+    await lossyEncodeOptions();
+    const afterFirst = spy.mock.calls.length;
+    await lossyEncodeOptions();
+    expect(spy.mock.calls.length).toBe(afterFirst);
+  });
+
+  it("returns PNG where there is no OffscreenCanvas at all", async () => {
+    vi.stubGlobal("OffscreenCanvas", undefined);
+    await expect(lossyEncodeOptions()).resolves.toEqual({
+      type: "image/png",
+      quality: 0.85,
+    });
+  });
+});
diff --git a/frontend/editor/src/core/utils/canvasImageEncoding.ts b/frontend/editor/src/core/utils/canvasImageEncoding.ts
new file mode 100644
index 0000000000..45de65bebf
--- /dev/null
+++ b/frontend/editor/src/core/utils/canvasImageEncoding.ts
@@ -0,0 +1,45 @@
+/** `convertToBlob` silently serialises to PNG for a format it can't encode
+ *  (WebKit, WebP), so only the returned `type` reveals it. Probe once per realm. */
+
+/** Candidates in preference order, best compression first. PNG always works. */
+const LOSSY_CANDIDATES = ["image/webp", "image/jpeg"] as const;
+const PNG_TYPE = "image/png";
+
+let probe: Promise<string> | null = null;
+
+async function honoursType(type: string, quality: number): Promise<boolean> {
+  try {
+    const canvas = new OffscreenCanvas(2, 2);
+    const ctx = canvas.getContext("2d");
+    if (!ctx) return false;
+    // JPEG has no alpha, and the pixels are thrown away either way.
+    ctx.fillStyle = "#000000";
+    ctx.fillRect(0, 0, 2, 2);
+    const blob = await canvas.convertToBlob({ type, quality });
+    return blob.type === type;
+  } catch {
+    return false;
+  }
+}
+
+async function detectLossyType(quality: number): Promise<string> {
+  if (typeof OffscreenCanvas === "undefined") return PNG_TYPE;
+  for (const candidate of LOSSY_CANDIDATES) {
+    if (await honoursType(candidate, quality)) return candidate;
+  }
+  return PNG_TYPE;
+}
+
+/** Encode options for a page raster: the best lossy format this engine really
+ *  supports, PNG only if it supports none. `quality` is ignored by PNG. */
+export function lossyEncodeOptions(
+  quality = 0.85,
+): Promise<ImageEncodeOptions> {
+  probe ??= detectLossyType(quality);
+  return probe.then((type) => ({ type, quality }));
+}
+
+/** Reset the cached probe. Tests only. */
+export function resetCanvasEncodingProbe(): void {
+  probe = null;
+}
diff --git a/frontend/editor/src/core/utils/duplicateFile.test.ts b/frontend/editor/src/core/utils/duplicateFile.test.ts
new file mode 100644
index 0000000000..88c7cce686
--- /dev/null
+++ b/frontend/editor/src/core/utils/duplicateFile.test.ts
@@ -0,0 +1,130 @@
+import { describe, it, expect, vi, beforeEach } from "vitest";
+import type { StirlingFile, StirlingFileStub } from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+import type { FolderId } from "@app/types/folder";
+
+const getStirlingFile = vi.fn();
+const updateFileMetadata = vi.fn();
+
+vi.mock("@app/services/fileStorage", () => ({
+  fileStorage: {
+    getStirlingFile: (...args: unknown[]) => getStirlingFile(...args),
+    updateFileMetadata: (...args: unknown[]) => updateFileMetadata(...args),
+  },
+}));
+
+const { copyNameFor, duplicateStoredFile } =
+  await import("@app/utils/duplicateFile");
+
+/**
+ * A duplicate is byte-identical to its source, so everything derived from those
+ * bytes (classification labels, thumbnail) and its place in the library (folder)
+ * is inherited rather than re-derived. These lock that contract.
+ */
+
+const stub = (extra: Partial<StirlingFileStub> = {}): StirlingFileStub =>
+  ({
+    id: "src-id" as FileId,
+    name: "report.pdf",
+    size: 10,
+    type: "application/pdf",
+    lastModified: 1,
+    ...extra,
+  }) as StirlingFileStub;
+
+const asStirlingFile = (name: string): StirlingFile =>
+  Object.assign(new File(["%PDF-1.7"], name, { type: "application/pdf" }), {
+    fileId: "new-id" as FileId,
+    quickKey: "k",
+  }) as StirlingFile;
+
+type AddFilesOptions = {
+  selectFiles?: boolean;
+  skipWorkspaceDispatch?: boolean;
+  autoUnzip?: boolean;
+  skipUploadTracking?: boolean;
+};
+const addFiles = vi.fn<
+  (files: File[], options: AddFilesOptions) => Promise<StirlingFile[]>
+>(async () => [asStirlingFile("report (copy).pdf")]);
+
+beforeEach(() => {
+  vi.clearAllMocks();
+  getStirlingFile.mockResolvedValue(asStirlingFile("report.pdf"));
+  updateFileMetadata.mockResolvedValue(true);
+  addFiles.mockResolvedValue([asStirlingFile("report (copy).pdf")]);
+});
+
+describe("copyNameFor", () => {
+  it("keeps the extension and counts up until the name is free", () => {
+    expect(copyNameFor("report.pdf", [])).toBe("report (copy).pdf");
+    expect(copyNameFor("report.pdf", ["report (copy).pdf"])).toBe(
+      "report (copy 2).pdf",
+    );
+    expect(
+      copyNameFor("report.pdf", ["report (copy).pdf", "report (copy 2).pdf"]),
+    ).toBe("report (copy 3).pdf");
+  });
+
+  it("handles a name with no extension", () => {
+    expect(copyNameFor("scan", [])).toBe("scan (copy)");
+  });
+});
+
+describe("duplicateStoredFile", () => {
+  it("inherits labels, folder and a persisted thumbnail", async () => {
+    const id = await duplicateStoredFile(
+      stub({
+        classificationLabels: ["invoice"],
+        folderId: "folder-1" as FolderId,
+        thumbnailUrl: "data:image/png;base64,AAA",
+      }),
+      [],
+      addFiles,
+    );
+
+    expect(id).toBe("new-id");
+    const [, updates] = updateFileMetadata.mock.calls[0];
+    expect(updates.classificationLabels).toEqual(["invoice"]);
+    expect(updates.folderId).toBe("folder-1");
+    expect(updates.thumbnail).toBe("data:image/png;base64,AAA");
+    expect(updates.thumbnailStoredAt).toEqual(expect.any(Number));
+  });
+
+  it("drops a blob: thumbnail - it would be dead on the next load", async () => {
+    await duplicateStoredFile(
+      stub({ classificationLabels: ["invoice"], thumbnailUrl: "blob:abc" }),
+      [],
+      addFiles,
+    );
+
+    const [, updates] = updateFileMetadata.mock.calls[0];
+    expect(updates).not.toHaveProperty("thumbnail");
+  });
+
+  it("writes nothing when the source has no derived metadata", async () => {
+    await duplicateStoredFile(stub(), [], addFiles);
+
+    expect(updateFileMetadata).not.toHaveBeenCalled();
+  });
+
+  it("copies the library entry without touching the workbench or metrics", async () => {
+    await duplicateStoredFile(stub(), ["report (copy).pdf"], addFiles);
+
+    const [files, options] = addFiles.mock.calls[0];
+    expect(files[0].name).toBe("report (copy 2).pdf");
+    expect(options).toMatchObject({
+      selectFiles: false,
+      skipWorkspaceDispatch: true,
+      autoUnzip: false,
+      skipUploadTracking: true,
+    });
+  });
+
+  it("returns null when the source bytes are gone", async () => {
+    getStirlingFile.mockResolvedValue(null);
+
+    expect(await duplicateStoredFile(stub(), [], addFiles)).toBeNull();
+    expect(addFiles).not.toHaveBeenCalled();
+  });
+});
diff --git a/frontend/editor/src/core/utils/duplicateFile.ts b/frontend/editor/src/core/utils/duplicateFile.ts
new file mode 100644
index 0000000000..5bad75b513
--- /dev/null
+++ b/frontend/editor/src/core/utils/duplicateFile.ts
@@ -0,0 +1,85 @@
+import type { StirlingFile, StirlingFileStub } from "@app/types/fileContext";
+import type { FileId } from "@app/types/file";
+import { fileStorage } from "@app/services/fileStorage";
+import { splitFileName } from "@app/utils/fileUtils";
+
+/** The subset of `useFileHandler().addFiles` a duplicate needs. */
+type AddFilesFn = (
+  files: File[],
+  options: {
+    selectFiles?: boolean;
+    skipWorkspaceDispatch?: boolean;
+    autoUnzip?: boolean;
+    skipUploadTracking?: boolean;
+  },
+) => Promise<StirlingFile[]>;
+
+/** "report.pdf" → "report (copy).pdf", counting up until the name is free. */
+export function copyNameFor(name: string, taken: Iterable<string>): string {
+  const [base, extension] = splitFileName(name);
+  const used = new Set(taken);
+  let candidate = `${base} (copy)${extension}`;
+  for (let n = 2; used.has(candidate); n++) {
+    candidate = `${base} (copy ${n})${extension}`;
+  }
+  return candidate;
+}
+
+/**
+ * Copies a stored file into the library under a free "(copy)" name.
+ *
+ * The copy stays out of the workbench - it's an archive of the current bytes,
+ * not a file the user asked to work on. That skips the ingest side-effects that
+ * hang off the workspace dispatch, so the derived metadata is inherited from
+ * the source instead: the bytes are identical, so its classification labels and
+ * thumbnail are too, and re-deriving them would only re-parse the same PDF. The
+ * copy also lands in the source's folder rather than back at the root.
+ *
+ * @returns the new file's id, or null if the source has no readable bytes.
+ */
+export async function duplicateStoredFile(
+  stub: StirlingFileStub,
+  existingNames: Iterable<string>,
+  addFiles: AddFilesFn,
+): Promise<FileId | null> {
+  const source = await fileStorage.getStirlingFile(stub.id);
+  if (!source) return null;
+
+  const [copy] = await addFiles(
+    [
+      new File([source], copyNameFor(stub.name, existingNames), {
+        type: source.type,
+      }),
+    ],
+    {
+      selectFiles: false,
+      skipWorkspaceDispatch: true,
+      // Duplicating an archive must yield one copy, not its contents scattered
+      // across the library.
+      autoUnzip: false,
+      // A local copy is not a new document entering the system.
+      skipUploadTracking: true,
+    },
+  );
+  if (!copy) return null;
+
+  const inherited: Parameters<typeof fileStorage.updateFileMetadata>[1] = {};
+  if (stub.classificationLabels) {
+    inherited.classificationLabels = stub.classificationLabels;
+  }
+  // A copy belongs beside its original. Safe to set on a local-only file: the
+  // server is authoritative for folderId only on files it actually holds.
+  if (stub.folderId) {
+    inherited.folderId = stub.folderId;
+  }
+  // Blob URLs die with the session, so only a persisted thumbnail is worth
+  // carrying over; without one the row falls back to lazy regeneration.
+  if (stub.thumbnailUrl && !stub.thumbnailUrl.startsWith("blob:")) {
+    inherited.thumbnail = stub.thumbnailUrl;
+    inherited.thumbnailStoredAt = Date.now();
+  }
+  if (Object.keys(inherited).length > 0) {
+    await fileStorage.updateFileMetadata(copy.fileId, inherited);
+  }
+  return copy.fileId;
+}
diff --git a/frontend/editor/src/core/utils/engineShims.ts b/frontend/editor/src/core/utils/engineShims.ts
new file mode 100644
index 0000000000..603c88f969
--- /dev/null
+++ b/frontend/editor/src/core/utils/engineShims.ts
@@ -0,0 +1,4 @@
+// Browser APIs the app is entitled to assume exist, stood in where an engine
+// omits them. Import once, first, before anything that might use them.
+import "@app/utils/patchReadableStreamAsyncIterator";
+import "@app/utils/patchRequestIdleCallback";
diff --git a/frontend/editor/src/core/utils/externalUrl.test.ts b/frontend/editor/src/core/utils/externalUrl.test.ts
new file mode 100644
index 0000000000..c59a1c5926
--- /dev/null
+++ b/frontend/editor/src/core/utils/externalUrl.test.ts
@@ -0,0 +1,45 @@
+import { describe, expect, test } from "vitest";
+import { getExternalHref, toSafeExternalUrl } from "@app/utils/externalUrl";
+
+describe("externalUrl", () => {
+  test("accepts http/https/mailto URLs", () => {
+    expect(toSafeExternalUrl("https://example.com/test")?.href).toBe(
+      "https://example.com/test",
+    );
+    expect(toSafeExternalUrl("http://example.com/test")?.href).toBe(
+      "http://example.com/test",
+    );
+    expect(toSafeExternalUrl("mailto:test@example.com")?.href).toBe(
+      "mailto:test@example.com",
+    );
+  });
+
+  test("rejects unsafe protocols", () => {
+    expect(toSafeExternalUrl("javascript:alert(1)")).toBeNull();
+    expect(toSafeExternalUrl("file:///etc/passwd")).toBeNull();
+    expect(toSafeExternalUrl("ftp://example.com")).toBeNull();
+    expect(
+      toSafeExternalUrl("data:text/html,<script>alert(1)</script>"),
+    ).toBeNull();
+    expect(toSafeExternalUrl("vbscript:msgbox(1)")).toBeNull();
+  });
+
+  test("rejects unparseable input instead of opening it blind", () => {
+    expect(toSafeExternalUrl("")).toBeNull();
+    expect(toSafeExternalUrl("http://[")).toBeNull();
+  });
+
+  test("is not fooled by casing or leading whitespace", () => {
+    expect(toSafeExternalUrl("JavaScript:alert(1)")).toBeNull();
+    expect(toSafeExternalUrl("  javascript:alert(1)")).toBeNull();
+    expect(toSafeExternalUrl("HTTPS://example.com")?.protocol).toBe("https:");
+  });
+
+  test("normalizes relative URLs against current origin", () => {
+    expect(getExternalHref("/docs/help")?.endsWith("/docs/help")).toBe(true);
+  });
+
+  test("getExternalHref returns null for blocked URLs", () => {
+    expect(getExternalHref("javascript:alert(1)")).toBeNull();
+  });
+});
diff --git a/frontend/editor/src/core/utils/externalUrl.ts b/frontend/editor/src/core/utils/externalUrl.ts
new file mode 100644
index 0000000000..cf8638b5a1
--- /dev/null
+++ b/frontend/editor/src/core/utils/externalUrl.ts
@@ -0,0 +1,32 @@
+/**
+ * Sanitisation for URLs that come out of a PDF (link annotations, bookmark
+ * actions). PDF-supplied URIs are untrusted input, so everything that opens one
+ * funnels through here first and drops anything outside the allowlist.
+ *
+ * Pure helpers only — opening the URL is a platform concern and lives behind
+ * the @app/platform/openExternalTab seam.
+ */
+const ALLOWED_EXTERNAL_PROTOCOLS = new Set(["http:", "https:", "mailto:"]);
+
+function getExternalUrlBase(): string | undefined {
+  // Relative URIs resolve against the app's own location, matching how the
+  // viewer has always treated them. No DOM => absolute URLs only.
+  return typeof window !== "undefined" ? window.location?.href : undefined;
+}
+
+/** Parses `rawUrl` and returns it only if its protocol is on the allowlist. */
+export function toSafeExternalUrl(rawUrl: string): URL | null {
+  // An empty URI would otherwise resolve to the app's own page via the base.
+  if (!rawUrl?.trim()) return null;
+  try {
+    const parsed = new URL(rawUrl, getExternalUrlBase());
+    return ALLOWED_EXTERNAL_PROTOCOLS.has(parsed.protocol) ? parsed : null;
+  } catch {
+    return null;
+  }
+}
+
+/** Normalised href for a safe external URL, or null if it is not safe to open. */
+export function getExternalHref(rawUrl: string): string | null {
+  return toSafeExternalUrl(rawUrl)?.href ?? null;
+}
diff --git a/frontend/editor/src/core/utils/fileUtils.ts b/frontend/editor/src/core/utils/fileUtils.ts
index 6a256a9073..13002db52e 100644
--- a/frontend/editor/src/core/utils/fileUtils.ts
+++ b/frontend/editor/src/core/utils/fileUtils.ts
@@ -73,6 +73,17 @@ export function getFilenameWithoutExtension(
   return preserveCase ? withoutExtension : withoutExtension.toLowerCase();
 }
 
+/**
+ * Splits a filename into its base and extension, keeping the dot on the
+ * extension so `base + extension` round-trips. A name with no extension (or a
+ * leading-dot name like ".env") gets an empty extension.
+ * @example splitFileName('report.pdf') // ['report', '.pdf']
+ */
+export function splitFileName(name: string): [string, string] {
+  const dot = name.lastIndexOf(".");
+  return dot > 0 ? [name.slice(0, dot), name.slice(dot)] : [name, ""];
+}
+
 /**
  * Checks if a file is a PDF based on extension and MIME type
  * @param file - File or file-like object with name and type properties
diff --git a/frontend/editor/src/core/utils/patchReadableStreamAsyncIterator.test.ts b/frontend/editor/src/core/utils/patchReadableStreamAsyncIterator.test.ts
new file mode 100644
index 0000000000..d9db1fe62d
--- /dev/null
+++ b/frontend/editor/src/core/utils/patchReadableStreamAsyncIterator.test.ts
@@ -0,0 +1,93 @@
+import { afterEach, beforeEach, describe, expect, it } from "vitest";
+
+import { patchReadableStreamAsyncIterator } from "@app/utils/patchReadableStreamAsyncIterator";
+
+/** Node implements the API, so remove it to exercise the shim, then restore. */
+const KEY: PropertyKey = Symbol.asyncIterator;
+const proto: object = ReadableStream.prototype;
+let native: PropertyDescriptor | undefined;
+
+beforeEach(() => {
+  native = Object.getOwnPropertyDescriptor(proto, KEY);
+  Reflect.deleteProperty(proto, KEY);
+  patchReadableStreamAsyncIterator();
+});
+
+afterEach(() => {
+  if (native) Object.defineProperty(proto, KEY, native);
+});
+
+function streamOf(...chunks: number[]): ReadableStream<number> {
+  return new ReadableStream<number>({
+    start(controller) {
+      chunks.forEach((c) => controller.enqueue(c));
+      controller.close();
+    },
+  });
+}
+
+function failingStream(error: Error): ReadableStream<number> {
+  return new ReadableStream<number>({
+    start(controller) {
+      controller.enqueue(1);
+      controller.error(error);
+    },
+  });
+}
+
+describe("patchReadableStreamAsyncIterator", () => {
+  it("drains a stream with for await, then unlocks it", async () => {
+    const stream = streamOf(1, 2, 3);
+    const seen: number[] = [];
+    for await (const chunk of stream) seen.push(chunk);
+
+    expect(seen).toEqual([1, 2, 3]);
+    expect(stream.locked).toBe(false);
+  });
+
+  // The reader must be released in the read's error steps. `for await` does not
+  // call `return()` when `next()` rejects, so nothing else would ever unlock it.
+  it("releases the lock when the stream errors mid-read", async () => {
+    const boom = new Error("boom");
+    const stream = failingStream(boom);
+
+    await expect(
+      (async () => {
+        for await (const _ of stream) {
+          /* drain until it throws */
+        }
+      })(),
+    ).rejects.toThrow("boom");
+
+    expect(stream.locked).toBe(false);
+  });
+
+  it("cancels and unlocks when the consumer breaks early", async () => {
+    const stream = streamOf(1, 2, 3);
+    for await (const chunk of stream) {
+      expect(chunk).toBe(1);
+      break;
+    }
+    expect(stream.locked).toBe(false);
+  });
+
+  // Native short-circuits once finished; throwing "reader owned by no readable
+  // stream" would break Array.fromAsync and defensive `return()` in a finally.
+  it("keeps reporting done after the stream is drained", async () => {
+    const iterator = streamOf(1)[Symbol.asyncIterator]();
+    await iterator.next();
+
+    await expect(iterator.next()).resolves.toEqual({
+      done: true,
+      value: undefined,
+    });
+    await expect(iterator.return?.()).resolves.toMatchObject({ done: true });
+  });
+
+  it("leaves a real implementation alone", () => {
+    if (native) Object.defineProperty(proto, KEY, native);
+    const before = Object.getOwnPropertyDescriptor(proto, KEY);
+    patchReadableStreamAsyncIterator();
+    expect(Object.getOwnPropertyDescriptor(proto, KEY)).toEqual(before);
+  });
+});
diff --git a/frontend/editor/src/core/utils/patchReadableStreamAsyncIterator.ts b/frontend/editor/src/core/utils/patchReadableStreamAsyncIterator.ts
new file mode 100644
index 0000000000..2aef7c6ce7
--- /dev/null
+++ b/frontend/editor/src/core/utils/patchReadableStreamAsyncIterator.ts
@@ -0,0 +1,58 @@
+// WebKit ships no `ReadableStream[Symbol.asyncIterator]`, and pdf.js reads its
+// text stream with `for await`, so all text extraction threw on Safari.
+
+export function patchReadableStreamAsyncIterator(): void {
+  if (typeof ReadableStream === "undefined") return;
+  if (Symbol.asyncIterator in ReadableStream.prototype) return;
+
+  Object.defineProperty(ReadableStream.prototype, Symbol.asyncIterator, {
+    writable: true,
+    configurable: true,
+    value: function <T>(this: ReadableStream<T>): AsyncIterableIterator<T> {
+      const reader = this.getReader();
+      // Releasing must be idempotent and must NOT happen after a successful
+      // read - the next `read()` on a released reader throws.
+      let finished = false;
+      const release = () => {
+        if (finished) return;
+        finished = true;
+        reader.releaseLock();
+      };
+      return {
+        async next(): Promise<IteratorResult<T>> {
+          // Spec short-circuits once finished; throwing here would break any
+          // consumer that calls `next()` or `return()` defensively.
+          if (finished) return { done: true, value: undefined };
+          try {
+            const { done, value } = await reader.read();
+            if (done) {
+              release();
+              return { done: true, value: undefined };
+            }
+            return { done: false, value };
+          } catch (error) {
+            // The spec releases the reader in the read request's error steps.
+            // Without this an errored stream stays locked for good: `for await`
+            // does not call `return()` when `next()` rejects.
+            release();
+            throw error;
+          }
+        },
+        async return(value?: unknown): Promise<IteratorResult<T>> {
+          if (finished) return { done: true, value: value as T };
+          try {
+            await reader.cancel();
+          } finally {
+            release();
+          }
+          return { done: true, value: value as T };
+        },
+        [Symbol.asyncIterator]() {
+          return this;
+        },
+      };
+    },
+  });
+}
+
+patchReadableStreamAsyncIterator();
diff --git a/frontend/editor/src/core/utils/patchRequestIdleCallback.test.ts b/frontend/editor/src/core/utils/patchRequestIdleCallback.test.ts
new file mode 100644
index 0000000000..dcd0dc722e
--- /dev/null
+++ b/frontend/editor/src/core/utils/patchRequestIdleCallback.test.ts
@@ -0,0 +1,92 @@
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+
+import { patchRequestIdleCallback } from "@app/utils/patchRequestIdleCallback";
+
+/** Two things must hold: it stands in where the API is absent, and it never
+ *  displaces a real implementation. */
+
+type IdleGlobals = {
+  requestIdleCallback?: unknown;
+  cancelIdleCallback?: unknown;
+};
+
+const globals = globalThis as IdleGlobals;
+
+let saved: IdleGlobals;
+
+beforeEach(() => {
+  vi.useFakeTimers();
+  saved = {
+    requestIdleCallback: globals.requestIdleCallback,
+    cancelIdleCallback: globals.cancelIdleCallback,
+  };
+});
+
+afterEach(() => {
+  vi.useRealTimers();
+  globals.requestIdleCallback = saved.requestIdleCallback;
+  globals.cancelIdleCallback = saved.cancelIdleCallback;
+});
+
+describe("patchRequestIdleCallback", () => {
+  it("stands in where the engine has no requestIdleCallback", () => {
+    delete globals.requestIdleCallback;
+    delete globals.cancelIdleCallback;
+    patchRequestIdleCallback();
+
+    const task = vi.fn();
+    requestIdleCallback(task);
+
+    // Asynchronous: never runs on the caller's own turn.
+    expect(task).not.toHaveBeenCalled();
+    // With no deadline given, it yields briefly and then runs.
+    vi.advanceTimersByTime(200);
+    expect(task).toHaveBeenCalledTimes(1);
+
+    const deadline = task.mock.calls[0][0] as IdleDeadline;
+    expect(deadline.didTimeout).toBe(false);
+    expect(deadline.timeRemaining()).toBeGreaterThan(0);
+  });
+
+  it("never runs later than the deadline the caller asked for", () => {
+    delete globals.requestIdleCallback;
+    patchRequestIdleCallback();
+
+    const task = vi.fn();
+    requestIdleCallback(task, { timeout: 50 });
+    vi.advanceTimersByTime(50);
+    expect(task).toHaveBeenCalledTimes(1);
+  });
+
+  // `src/index.tsx` asks for 2000ms so the pdfium WASM compile doesn't land on
+  // top of the app's first renders.
+  it("does not run background work earlier than the caller allowed for", () => {
+    delete globals.requestIdleCallback;
+    patchRequestIdleCallback();
+
+    const task = vi.fn();
+    requestIdleCallback(task, { timeout: 2000 });
+    vi.advanceTimersByTime(1999);
+    expect(task).not.toHaveBeenCalled();
+    vi.advanceTimersByTime(1);
+    expect(task).toHaveBeenCalledTimes(1);
+  });
+
+  it("cancels a scheduled task by handle", () => {
+    delete globals.requestIdleCallback;
+    delete globals.cancelIdleCallback;
+    patchRequestIdleCallback();
+
+    const task = vi.fn();
+    cancelIdleCallback(requestIdleCallback(task));
+    vi.advanceTimersByTime(1000);
+    expect(task).not.toHaveBeenCalled();
+  });
+
+  it("leaves a real implementation alone", () => {
+    const native = vi.fn();
+    globals.requestIdleCallback = native;
+    patchRequestIdleCallback();
+    expect(globals.requestIdleCallback).toBe(native);
+  });
+});
diff --git a/frontend/editor/src/core/utils/patchRequestIdleCallback.ts b/frontend/editor/src/core/utils/patchRequestIdleCallback.ts
new file mode 100644
index 0000000000..899af7c14c
--- /dev/null
+++ b/frontend/editor/src/core/utils/patchRequestIdleCallback.ts
@@ -0,0 +1,37 @@
+// WebKit ships no `requestIdleCallback`. The shim honours the async/deadline/
+// cancel contract, not the *idle* part, and is window-only like the real API.
+
+/** Short delay before running, so the current turn's work drains first. */
+const YIELD_MS = 200;
+
+/** Idle-deadline shape for the timer stand-in. A small positive budget keeps a
+ *  `while (timeRemaining() > 0)` loop doing one chunk rather than spinning. */
+function makeDeadline(): IdleDeadline {
+  return { didTimeout: false, timeRemaining: () => 1 };
+}
+
+export function patchRequestIdleCallback(): void {
+  if (typeof globalThis === "undefined") return;
+  const target = globalThis as typeof globalThis & {
+    requestIdleCallback?: typeof requestIdleCallback;
+    cancelIdleCallback?: typeof cancelIdleCallback;
+  };
+  if (typeof target.requestIdleCallback === "function") return;
+
+  target.requestIdleCallback = (
+    callback: IdleRequestCallback,
+    options?: IdleRequestOptions,
+  ): number =>
+    setTimeout(
+      () => callback(makeDeadline()),
+      // Honour the caller's deadline: `timeout` is them saying how long this may
+      // wait, so firing earlier lands background work on top of startup.
+      options?.timeout ?? YIELD_MS,
+    ) as unknown as number;
+
+  target.cancelIdleCallback = (handle: number): void => {
+    clearTimeout(handle);
+  };
+}
+
+patchRequestIdleCallback();
diff --git a/frontend/editor/src/core/utils/thumbnailUtils.ts b/frontend/editor/src/core/utils/thumbnailUtils.ts
index b356b26db9..00f047bd6d 100644
--- a/frontend/editor/src/core/utils/thumbnailUtils.ts
+++ b/frontend/editor/src/core/utils/thumbnailUtils.ts
@@ -31,6 +31,12 @@ export function calculateScaleFromFileSize(fileSize: number): number {
 /** PDFium error code 4 = password required (encrypted PDF). */
 const PDFIUM_ERR_PASSWORD = 4;
 
+/** Callers still get a placeholder, but log the cause: an empty thumbnail is
+ *  indistinguishable from "no raster preview", so an outage hides as a nicety. */
+function reportThumbnailFailure(file: File, error: unknown): void {
+  console.warn(`Thumbnail generation failed for ${file.name}:`, error);
+}
+
 /** PDFs at or above this size never get a full-buffer client-side parse
  * (renderer OOM) - only the linearized-prefix attempt below. */
 export const LARGE_PDF_PARSE_LIMIT = 100 * 1024 * 1024;
@@ -262,7 +268,7 @@ export async function generateThumbnailForFile(file: File): Promise<string> {
         const fullArrayBuffer = await file.arrayBuffer();
         return await generatePDFThumbnail(fullArrayBuffer, scale);
       } catch (error) {
-        console.warn(`PDF processing failed for ${file.name}:`, error);
+        reportThumbnailFailure(file, error);
         return "";
       }
     }
@@ -314,7 +320,8 @@ export async function generateThumbnailWithMetadata(
         pageRotations: result.pageRotations,
         pageDimensions: result.pageDimensions,
       };
-    } catch {
+    } catch (error) {
+      reportThumbnailFailure(file, error);
       return { thumbnail: "", pageCount: 0 };
     }
   }
@@ -344,7 +351,8 @@ export async function generateThumbnailWithMetadata(
       pageRotations: result.pageRotations,
       pageDimensions: result.pageDimensions,
     };
-  } catch {
+  } catch (error) {
+    reportThumbnailFailure(file, error);
     return { thumbnail: "", pageCount: 1 };
   }
 }
@@ -389,7 +397,8 @@ export async function generateThumbnailPairWithMetadata(file: File): Promise<{
       unrotated: toPublic(pair.unrotated),
       rotated: toPublic(pair.rotated),
     };
-  } catch {
+  } catch (error) {
+    reportThumbnailFailure(file, error);
     return {
       unrotated: { thumbnail: "", pageCount: 0 },
       rotated: { thumbnail: "", pageCount: 0 },
diff --git a/frontend/editor/src/core/utils/toolSearch.ts b/frontend/editor/src/core/utils/toolSearch.ts
index 41b40135a5..1a543974a3 100644
--- a/frontend/editor/src/core/utils/toolSearch.ts
+++ b/frontend/editor/src/core/utils/toolSearch.ts
@@ -15,7 +15,11 @@ export function filterToolRegistryByQuery(
   toolRegistry: Partial<ToolRegistry>,
   query: string,
 ): RankedToolItem[] {
-  const entries = Object.entries(toolRegistry) as [ToolId, ToolRegistryEntry][];
+  // The single funnel into the editor's tool list, so hiding here hides it everywhere the user
+  // browses - while getExecutableTools still offers it to a pipeline.
+  const entries = (
+    Object.entries(toolRegistry) as [ToolId, ToolRegistryEntry][]
+  ).filter(([, tool]) => !tool?.hiddenFromToolList);
   if (!query.trim()) {
     return entries.map(([id, tool]) => ({
       item: [id, tool] as [ToolId, ToolRegistryEntry],
diff --git a/frontend/editor/src/core/workers/pixelCompareWorker.ts b/frontend/editor/src/core/workers/pixelCompareWorker.ts
index c1390391ba..cc0e85a164 100644
--- a/frontend/editor/src/core/workers/pixelCompareWorker.ts
+++ b/frontend/editor/src/core/workers/pixelCompareWorker.ts
@@ -14,6 +14,7 @@ import type {
   PixelCompareWorkerResponse,
   PixelCompareWorkerWarnings,
 } from "@app/types/compare";
+import { lossyEncodeOptions } from "@app/utils/canvasImageEncoding";
 
 declare const self: DedicatedWorkerGlobalScope;
 
@@ -155,7 +156,7 @@ const renderPageToBitmap = async (
   return { imageData, bitmap };
 };
 
-const ENCODE_OPTS: ImageEncodeOptions = { type: "image/webp", quality: 0.85 };
+const ENCODE_QUALITY = 0.85;
 
 const bitmapToBlob = async (
   bitmap: ImageBitmap,
@@ -168,7 +169,7 @@ const bitmapToBlob = async (
   if (!ctx) throw new Error(errorStrings.canvasContextUnavailable);
   ctx.drawImage(bitmap, 0, 0);
   bitmap.close();
-  return await canvas.convertToBlob(ENCODE_OPTS);
+  return await canvas.convertToBlob(await lossyEncodeOptions(ENCODE_QUALITY));
 };
 
 const diffDataToBlob = async (
@@ -183,7 +184,7 @@ const diffDataToBlob = async (
   ctx.fillStyle = "#ffffff";
   ctx.fillRect(0, 0, width, height);
   ctx.putImageData(diff, 0, 0);
-  return await canvas.convertToBlob(ENCODE_OPTS);
+  return await canvas.convertToBlob(await lossyEncodeOptions(ENCODE_QUALITY));
 };
 
 interface PageTotals {
diff --git a/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx b/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx
index 1b24cd4675..5ba92c2782 100644
--- a/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx
+++ b/frontend/editor/src/desktop/components/shared/DefaultAppBanner.tsx
@@ -1,6 +1,6 @@
 import React, { useState } from "react";
 import { useTranslation } from "react-i18next";
-import { InfoBanner } from "@app/components/shared/InfoBanner";
+import { AppBanner } from "@app/components/shared/AppBanner";
 import { useDefaultApp } from "@app/hooks/useDefaultApp";
 
 export const DefaultAppBanner: React.FC = () => {
@@ -15,7 +15,7 @@ export const DefaultAppBanner: React.FC = () => {
   const [sessionDismissed, setSessionDismissed] = useState(false);
 
   return (
-    <InfoBanner
+    <AppBanner
       icon="picture-as-pdf-rounded"
       message={t(
         "defaultApp.prompt.message",
diff --git a/frontend/editor/src/desktop/components/shared/config/configSections/GeneralSection.tsx b/frontend/editor/src/desktop/components/shared/config/configSections/GeneralSection.tsx
index 98c4455ce0..d29f211509 100644
--- a/frontend/editor/src/desktop/components/shared/config/configSections/GeneralSection.tsx
+++ b/frontend/editor/src/desktop/components/shared/config/configSections/GeneralSection.tsx
@@ -11,6 +11,11 @@ import {
   type UpdateModeInfo,
 } from "@app/services/desktopUpdateService";
 
+interface GeneralSectionProps {
+  /** Forwarded to the core section; the settings modal header already names it. */
+  hideTitle?: boolean;
+}
+
 /**
  * Desktop extension of GeneralSection.
  *
@@ -20,7 +25,9 @@ import {
  * still rendered but disabled, with a "Managed by administrator" hint, so
  * managed-deployment users can see what policy is in effect.
  */
-const GeneralSection: React.FC = () => {
+const GeneralSection: React.FC<GeneralSectionProps> = ({
+  hideTitle = false,
+}) => {
   const { t } = useTranslation();
   const install = useDesktopInstall();
   // In SaaS connection mode the cloud owns app versioning — hide the update
@@ -96,6 +103,7 @@ const GeneralSection: React.FC = () => {
         </Alert>
       )}
       <CoreGeneralSection
+        hideTitle={hideTitle}
         hideUpdateSection={
           isSaaSMode ||
           (updateModeInfo.mode === "disabled" && updateModeInfo.locked)
diff --git a/frontend/editor/src/desktop/platform/openExternalTab.test.ts b/frontend/editor/src/desktop/platform/openExternalTab.test.ts
new file mode 100644
index 0000000000..e45ee1bf47
--- /dev/null
+++ b/frontend/editor/src/desktop/platform/openExternalTab.test.ts
@@ -0,0 +1,43 @@
+import { afterEach, describe, expect, test, vi } from "vitest";
+
+const shellOpenMock = vi.fn();
+
+vi.mock("@tauri-apps/plugin-shell", () => ({
+  open: (url: string) => shellOpenMock(url),
+}));
+
+import { openExternalTab } from "@app/platform/openExternalTab";
+import { expectConsole } from "@app/tests/failOnConsole";
+
+describe("openExternalTab (desktop/Tauri)", () => {
+  afterEach(() => {
+    vi.restoreAllMocks();
+    shellOpenMock.mockReset();
+  });
+
+  // Regression for #6272: window.open traps the link inside the Tauri webview,
+  // so a PDF link opened a blank in-app window instead of the user's browser.
+  test("hands the URL to the OS instead of the webview", async () => {
+    const openSpy = vi
+      .spyOn(window, "open")
+      .mockImplementation(() => null as Window | null);
+
+    await openExternalTab("https://example.com/");
+
+    expect(shellOpenMock).toHaveBeenCalledWith("https://example.com/");
+    expect(openSpy).not.toHaveBeenCalled();
+  });
+
+  // Worse than the web case: an unvalidated scheme here reaches an OS handler
+  // rather than staying inside a browser.
+  test.each(["javascript:alert(1)", "file:///etc/passwd", "ftp://example.com"])(
+    "refuses to hand %s to the OS",
+    async (url) => {
+      expectConsole.warn(/Refused to open unsafe URL/);
+
+      await openExternalTab(url);
+
+      expect(shellOpenMock).not.toHaveBeenCalled();
+    },
+  );
+});
diff --git a/frontend/editor/src/desktop/platform/openExternalTab.ts b/frontend/editor/src/desktop/platform/openExternalTab.ts
new file mode 100644
index 0000000000..e7a4b5865b
--- /dev/null
+++ b/frontend/editor/src/desktop/platform/openExternalTab.ts
@@ -0,0 +1,24 @@
+/**
+ * desktop (Tauri) implementation of the @app/platform/openExternalTab seam.
+ *
+ * window.open would trap the URL inside our own webview, so hand it to the OS.
+ * Delegates to the openExternal seam rather than calling the Tauri shell plugin
+ * again — on desktop "new tab" and "system browser" are the same action.
+ *
+ * Re-checks the URL for the same reason the core impl does, and more so: here it
+ * reaches an OS handler, so an unvalidated scheme is not confined to a browser.
+ */
+import { openExternal } from "@app/platform/openExternal";
+import type { OpenExternalTab } from "@core/platform/openExternalTab";
+import { getExternalHref } from "@core/utils/externalUrl";
+
+export const openExternalTab: OpenExternalTab = async (
+  url: string,
+): Promise<void> => {
+  const safeHref = getExternalHref(url);
+  if (!safeHref) {
+    console.warn("[openExternalTab] Refused to open unsafe URL:", url);
+    return;
+  }
+  await openExternal(safeHref);
+};
diff --git a/frontend/editor/src/global.d.ts b/frontend/editor/src/global.d.ts
index cb6275c471..6b38e511b4 100644
--- a/frontend/editor/src/global.d.ts
+++ b/frontend/editor/src/global.d.ts
@@ -22,6 +22,7 @@ declare global {
     __STIRLING_PDF_BASE_URL__?: string;
     STIRLING_PDF_API_BASE_URL?: string;
     endpointAvailabilityService?: unknown;
+    pdfjsLib?: typeof import("pdfjs-dist");
   }
 }
 
diff --git a/frontend/editor/src/index.tsx b/frontend/editor/src/index.tsx
index d66f092bab..1d05928f60 100644
--- a/frontend/editor/src/index.tsx
+++ b/frontend/editor/src/index.tsx
@@ -3,6 +3,9 @@
 // (Edge / Google Translate / extensions) from crashing the app via
 // parent-mismatch DOMExceptions. See the module for details.
 import "@app/utils/patchDomForTranslators";
+// WebKit is missing several APIs the app assumes (ReadableStream async
+// iteration, which pdf.js needs for all text extraction; requestIdleCallback).
+import "@app/utils/engineShims";
 import "@mantine/core/styles.css";
 import "@mantine/dates/styles.css";
 import "../vite-env.d.ts"; // oxlint-disable-line no-restricted-imports -- Outside app paths
@@ -21,13 +24,8 @@ import { startEagerWasmCompilation } from "@app/services/wasmPrecompiler";
 applyDevWorktreeLabel();
 
 if (typeof window !== "undefined") {
-  const scheduleCompilation = () => {
-    if (typeof requestIdleCallback === "function") {
-      requestIdleCallback(() => startEagerWasmCompilation(), { timeout: 2000 });
-    } else {
-      setTimeout(startEagerWasmCompilation, 1000);
-    }
-  };
+  const scheduleCompilation = () =>
+    requestIdleCallback(() => startEagerWasmCompilation(), { timeout: 2000 });
 
   if (document.readyState === "complete") {
     scheduleCompilation();
diff --git a/frontend/editor/src/portal-saas/hooks/useEnterpriseEnabled.ts b/frontend/editor/src/portal-saas/hooks/useEnterpriseEnabled.ts
new file mode 100644
index 0000000000..79127f669e
--- /dev/null
+++ b/frontend/editor/src/portal-saas/hooks/useEnterpriseEnabled.ts
@@ -0,0 +1,13 @@
+// SaaS enterprise flag: derived from the plan tier (wallet-backed), not a local
+// license bean. Shadows the self-hosted app-config version so Enterprise-only
+// surfaces (e.g. Infrastructure > Audit) unlock for enterprise-plan tenants.
+
+import { useTier } from "@portal/contexts/TierContext";
+import type { EnterpriseState } from "@portal-proprietary/hooks/useEnterpriseEnabled";
+
+export type { EnterpriseState };
+
+export function useEnterpriseEnabled(): EnterpriseState {
+  const { tier } = useTier();
+  return { enabled: tier === "enterprise", loading: false };
+}
diff --git a/frontend/editor/src/portal-saas/hooks/useFreeCreditsSummary.ts b/frontend/editor/src/portal-saas/hooks/useFreeCreditsSummary.ts
new file mode 100644
index 0000000000..8f7a16ca90
--- /dev/null
+++ b/frontend/editor/src/portal-saas/hooks/useFreeCreditsSummary.ts
@@ -0,0 +1,7 @@
+/**
+ * SaaS has no link concept — the signed-in account IS the SaaS account, and the
+ * editor's cloud wallet hook is already in this build's {@code @app/*} cascade.
+ * Delegating to it means the processor footer and the editor footer share one
+ * wallet fetch and can't disagree, so there is nothing portal-specific to do.
+ */
+export { useFreeCreditsSummary } from "@app/hooks/useFreeCreditsSummary";
diff --git a/frontend/editor/src/portal-saas/hooks/useOpenPlan.ts b/frontend/editor/src/portal-saas/hooks/useOpenPlan.ts
new file mode 100644
index 0000000000..ce12e843b3
--- /dev/null
+++ b/frontend/editor/src/portal-saas/hooks/useOpenPlan.ts
@@ -0,0 +1,11 @@
+import { useCallback } from "react";
+import { useUI } from "@portal/contexts/UIContext";
+
+/**
+ * SaaS processor: the settings modal it hosts carries the same Plan section the
+ * editor opens, so the footer's credits row lands both apps in one place.
+ */
+export function useOpenPlan(): (() => void) | null {
+  const { openSettings } = useUI();
+  return useCallback(() => openSettings("plan"), [openSettings]);
+}
diff --git a/frontend/editor/src/portal-saas/views/Infrastructure.test.tsx b/frontend/editor/src/portal-saas/views/Infrastructure.test.tsx
index f884d7e6f4..205c9b170c 100644
--- a/frontend/editor/src/portal-saas/views/Infrastructure.test.tsx
+++ b/frontend/editor/src/portal-saas/views/Infrastructure.test.tsx
@@ -1,4 +1,4 @@
-import { describe, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 import { render, screen } from "@testing-library/react";
 
 vi.mock("react-i18next", () => ({
@@ -7,6 +7,12 @@ vi.mock("react-i18next", () => ({
     i18n: { changeLanguage: vi.fn() },
   }),
 }));
+
+const enterprise = { enabled: true, loading: false };
+vi.mock("@portal/hooks/useEnterpriseEnabled", () => ({
+  useEnterpriseEnabled: () => enterprise,
+}));
+
 // Stub the live tab panels so the test doesn't pull their data dependencies.
 vi.mock("@portal/components/infrastructure/ApiKeysTab", () => ({
   ApiKeysTab: () => <div data-testid="api-keys-tab" />,
@@ -18,6 +24,11 @@ vi.mock("@portal/components/infrastructure/AuditTab", () => ({
 import { Infrastructure } from "@portal/views/Infrastructure";
 
 describe("Infrastructure (SaaS)", () => {
+  beforeEach(() => {
+    enterprise.enabled = true;
+    enterprise.loading = false;
+  });
+
   it("defaults to the live API keys tab and drops the manage-editor button", () => {
     render(<Infrastructure />);
     expect(screen.getByTestId("api-keys-tab")).toBeInTheDocument();
@@ -41,4 +52,14 @@ describe("Infrastructure (SaaS)", () => {
       }),
     ).toBeEnabled();
   });
+
+  it("disables the audit tab for non-enterprise tenants", () => {
+    enterprise.enabled = false;
+    render(<Infrastructure />);
+    expect(
+      screen.getByRole("button", {
+        name: /portal.infrastructure.tabs.audit/,
+      }),
+    ).toBeDisabled();
+  });
 });
diff --git a/frontend/editor/src/portal-saas/views/Infrastructure.tsx b/frontend/editor/src/portal-saas/views/Infrastructure.tsx
index f52453e716..66204db202 100644
--- a/frontend/editor/src/portal-saas/views/Infrastructure.tsx
+++ b/frontend/editor/src/portal-saas/views/Infrastructure.tsx
@@ -1,6 +1,7 @@
 import { useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Tabs, type TabItem } from "@app/ui";
+import { useEnterpriseEnabled } from "@portal/hooks/useEnterpriseEnabled";
 import { ApiKeysTab } from "@portal/components/infrastructure/ApiKeysTab";
 import { AuditTab } from "@portal/components/infrastructure/AuditTab";
 import "@portal/views/Infrastructure.css";
@@ -21,6 +22,8 @@ type InfraTab =
 export function Infrastructure() {
   const { t } = useTranslation();
   const [tab, setTab] = useState<InfraTab>("api-keys");
+  // Audit is Enterprise-only; disabled (greyed, inert) for non-enterprise tenants.
+  const auditEnabled = useEnterpriseEnabled().enabled;
 
   const comingSoon = (labelKey: string) => (
     <>
@@ -33,7 +36,11 @@ export function Infrastructure() {
 
   const tabs: TabItem<InfraTab>[] = [
     { key: "api-keys", label: t("portal.infrastructure.tabs.apiKeys") },
-    { key: "audit", label: t("portal.infrastructure.tabs.audit") },
+    {
+      key: "audit",
+      label: t("portal.infrastructure.tabs.audit"),
+      disabled: !auditEnabled,
+    },
     {
       key: "deployments",
       label: comingSoon("portal.infrastructure.tabs.deployments"),
diff --git a/frontend/editor/src/portal/MOCKS.md b/frontend/editor/src/portal/MOCKS.md
index 6d66b969ee..3e8f225ae9 100644
--- a/frontend/editor/src/portal/MOCKS.md
+++ b/frontend/editor/src/portal/MOCKS.md
@@ -64,12 +64,9 @@ non-2xx). Views consume via `useAsync()` + `useSectionFlags()` (`hooks/useAsync.
 | Policies | `GET/POST /api/v1/policies` · `GET/DELETE /api/v1/policies/{id}` · `POST /api/v1/policies/{id}/run` | — | `fetchPolicies` · `savePolicy` · `deletePolicy` · `runPolicy` | `PoliciesResponse` · `Policy` |
 | Sources | `GET /v1/sources` | `tier` | `fetchSources` | `SourcesResponse` |
 | Components | `GET /v1/components` | `tier` | `fetchComponents` | `ComponentsResponse` |
-| Infrastructure | `GET /v1/infrastructure/deployments` | `tier` | `fetchDeployments` | `DeploymentsResponse` |
-| Infrastructure | `GET /v1/infrastructure/api-keys` | `tier` | `fetchApiKeys` | `ApiKey[]` |
-| Infrastructure | `GET /v1/infrastructure/security` | `tier` | `fetchSecurity` | `SecurityConfig` |
-| Infrastructure | `GET /v1/infrastructure/models` | `tier` | `fetchModels` | `ModelsResponse` |
-| Infrastructure | `GET /v1/infrastructure/storage` | `tier` | `fetchStorage` | `StorageConfig` |
-| Infrastructure | `GET /v1/infrastructure/audit-log` | `tier` | `fetchAuditLog` | `AuditLogResponse` |
+| Infrastructure | `GET/POST /api/v1/proprietary/ui-data/infrastructure/api-keys` · `DELETE …/api-keys/{id}` | — | `fetchApiKeys` · `createApiKey` · `revokeApiKey` | `ApiKeysResponse` · `CreatedApiKey` |
+| Infrastructure | `GET /api/v1/proprietary/ui-data/infrastructure/audit-log` | `tier` | `fetchAuditLog` | `AuditLogResponse` |
+| Infrastructure | `GET /api/v1/proprietary/ui-data/audit-export` | `format`, `fields` | `exportAuditLog` | CSV/JSON blob |
 | Usage & Billing | `GET /v1/billing/usage` | — | `fetchBillingUsage` | `UsageSeriesResponse` |
 | Usage & Billing | `GET /v1/billing/summary` | `tier` | `fetchBillingSummary` | `BillingSummary` |
 | Usage & Billing | `GET /v1/billing/plans` | — | `fetchPlanOptions` | `PlanOption[]` |
diff --git a/frontend/editor/src/portal/api/documents.ts b/frontend/editor/src/portal/api/documents.ts
index 9e75f40ec7..6339f25222 100644
--- a/frontend/editor/src/portal/api/documents.ts
+++ b/frontend/editor/src/portal/api/documents.ts
@@ -95,12 +95,6 @@ export const DOCUMENT_STATUS_TONE: Record<DocumentStatus, StatusTone> = {
   error: "danger",
 };
 
-export const PRODUCT_CHIP_TONE: Record<ProductType, ChipAccent> = {
-  API: "brand",
-  Editor: "success",
-  Automation: "warning",
-};
-
 /** Classification chip accent: danger when unclassified, warning when it needs a look. */
 export function classificationTone(doc: ReviewDocument): ChipAccent {
   if (doc.classification === "Unclassified") return "danger";
diff --git a/frontend/editor/src/portal/api/fileRunEvents.ts b/frontend/editor/src/portal/api/fileRunEvents.ts
index 8b52c7d3fc..768618132e 100644
--- a/frontend/editor/src/portal/api/fileRunEvents.ts
+++ b/frontend/editor/src/portal/api/fileRunEvents.ts
@@ -35,7 +35,9 @@ export type FileRunEventStatus =
   | "NEW"
   | "ACKNOWLEDGED"
   | "DISMISSED"
-  | "RESOLVED";
+  | "RESOLVED"
+  /** Its document was deleted from the owner's editor, so there is nothing left to act on. */
+  | "FILE_REMOVED";
 
 /**
  * One button as offered for one row. `id` is a plain string rather than a union
@@ -64,6 +66,8 @@ export interface FileRunEvent {
   detail: string | null;
   policyId: string | null;
   runId: string | null;
+  /** Which folder, bucket or webhook fed the run. Null when a user supplied the file. */
+  sourceId: string | null;
   /**
    * Opaque reference, never a name. Only the owner's own client can resolve it to
    * something readable, from its local file store.
diff --git a/frontend/editor/src/portal/api/infrastructure.ts b/frontend/editor/src/portal/api/infrastructure.ts
index 52a54179a5..afd059a1ef 100644
--- a/frontend/editor/src/portal/api/infrastructure.ts
+++ b/frontend/editor/src/portal/api/infrastructure.ts
@@ -1,44 +1,6 @@
 import { apiClient } from "@portal/api/http";
 import type { Tier } from "@portal/contexts/TierContext";
 
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Deployments                                                              */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-export type RegionStatus = "healthy" | "degraded" | "down";
-
-export interface DeploymentRegion {
-  name: string;
-  code: string;
-  /** Median request latency, ms. */
-  latencyMs: number;
-  /** Current load as a fraction of provisioned capacity (0–1). */
-  load: number;
-  status: RegionStatus;
-  /** Deployed Stirling engine version. */
-  version: string;
-  /** 30-day uptime as a fraction (0–1). */
-  uptime: number;
-  /** Running instance count. */
-  instances: number;
-  /** Sustained throughput, docs/min. */
-  throughput: number;
-  /** P99 latency, ms. */
-  p99Ms: number;
-}
-
-export type DeploymentStatus = "live" | "rolling" | "rolled-back" | "queued";
-
-export interface RecentDeployment {
-  id: string;
-  version: string;
-  environment: "production" | "staging" | "canary";
-  product: string;
-  status: DeploymentStatus;
-  deployedBy: string;
-  timestamp: string;
-}
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  API Keys                                                                 */
 /* ──────────────────────────────────────────────────────────────────────── */
@@ -72,105 +34,6 @@ export interface CreatedApiKey {
   secret: string;
 }
 
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Security                                                                 */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-export type AccessPolicy = "stirling" | "byok" | "hyok";
-export type DataResidency = "us" | "eu" | "apac";
-export type CertStatus = "certified" | "in-progress" | "not-started";
-
-export interface ComplianceCert {
-  id: string;
-  name: string;
-  status: CertStatus;
-  detail: string;
-}
-
-export interface IpAllowEntry {
-  id: string;
-  label: string;
-  cidr: string;
-  addedBy: string;
-  added: string;
-}
-
-/**
- * Where encryption keys live. Mirrors the {@link AccessPolicy} posture but is
- * surfaced separately because the key *custody model* (who can decrypt) is the
- * detail security teams scrutinise:
- *   - `managed` — Stirling-owned KMS keys; zero key ops on the customer side.
- *   - `byok` — customer key, but Stirling can use it to decrypt while processing.
- *   - `hyok` — key never leaves the customer KMS; Stirling holds only ciphertext.
- */
-export type KeyMode = "managed" | "byok" | "hyok";
-
-export interface KeyManagement {
-  mode: KeyMode;
-  /** Human-readable provider, e.g. "Stirling KMS" or "AWS KMS (customer)". */
-  provider: string;
-  /** ARN-style identifier for the active key. */
-  keyId: string;
-  /** Encryption algorithm in force. */
-  algorithm: string;
-  /** Relative last-rotation time, e.g. "32 days ago". */
-  lastRotated: string;
-  /** Rotation cadence summary, e.g. "Automatic · every 90 days". */
-  rotationPolicy: string;
-  /**
-   * Whether the customer may switch key custody (BYOK/HYOK). Stirling-managed
-   * tiers see the posture but cannot change provider — only enterprise can.
-   */
-  customerManaged: boolean;
-}
-
-export type AttestationStatus = "attested" | "in-scope" | "not-applicable";
-
-export interface ComplianceAttestation {
-  id: string;
-  name: string;
-  /** Framework family / short descriptor shown under the name. */
-  framework: string;
-  status: AttestationStatus;
-  /** Coverage or audit detail, e.g. "Type II · audited Apr 2026". */
-  detail: string;
-  /** Stub link to the downloadable report; null when none is available. */
-  reportUrl: string | null;
-}
-
-export interface SecurityConfig {
-  accessPolicy: AccessPolicy;
-  dataResidency: DataResidency;
-  certs: ComplianceCert[];
-  ipAllowlist: IpAllowEntry[];
-  keyManagement: KeyManagement;
-  attestations: ComplianceAttestation[];
-}
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Storage                                                                  */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-export type RetentionWindow = "30" | "60" | "90" | "180" | "never";
-
-export interface StorageProvider {
-  id: string;
-  name: string;
-  kind: "stirling" | "s3" | "azure";
-  connected: boolean;
-  detail: string;
-  usedGb: number;
-}
-
-export interface StorageConfig {
-  /** Total used storage, GB. */
-  usedGb: number;
-  /** Quota ceiling, GB. */
-  quotaGb: number;
-  retention: RetentionWindow;
-  providers: StorageProvider[];
-}
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  Audit Logs                                                               */
 /* ──────────────────────────────────────────────────────────────────────── */
@@ -211,83 +74,12 @@ export interface AuditLogResponse {
   fullServer: boolean;
 }
 
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Models                                                                   */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-export type ModelProvider = "stirling" | "openai" | "anthropic" | "on-prem";
-export type ModelType = "extraction" | "classification" | "ocr" | "llm";
-export type ModelStatus = "active" | "degraded" | "disabled";
-
-/** Whether a model's cost is billed per 1k documents or per individual call. */
-export type ModelCostUnit = "per-1k-docs" | "per-call";
-
-export interface ModelEntry {
-  id: string;
-  name: string;
-  provider: ModelProvider;
-  type: ModelType;
-  status: ModelStatus;
-  /** Median inference latency, ms. */
-  latencyMs: number;
-  /** Cost in USD for the model's billing unit (see {@link costUnit}). */
-  cost: number;
-  costUnit: ModelCostUnit;
-  version: string;
-  /** Share of capacity this model is currently absorbing (0–1). */
-  load: number;
-  /** True for customer-registered bring-your-own / on-prem models. */
-  managed: boolean;
-}
-
-/** A binding from a processing operation (optionally a doc-type) to a model. */
-export interface RoutingRule {
-  id: string;
-  /** The operation or pipeline stage this rule governs. */
-  operation: string;
-  /** Doc-type scope, or "All document types" for a catch-all. */
-  docType: string;
-  /** id of the {@link ModelEntry} this operation routes to. */
-  modelId: string;
-  modelName: string;
-  /** Marks the fallback rule applied when no narrower rule matches. */
-  isDefault: boolean;
-}
-
-export interface ModelsSummary {
-  activeModels: number;
-  /** Capacity-weighted average latency across active models, ms. */
-  avgLatencyMs: number;
-  /** Projected monthly model spend, USD. */
-  monthlySpend: number;
-}
-
-export interface ModelsResponse {
-  summary: ModelsSummary;
-  models: ModelEntry[];
-  routing: RoutingRule[];
-}
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  Endpoints                                                                */
 /* ──────────────────────────────────────────────────────────────────────── */
 
-export interface DeploymentsResponse {
-  regions: DeploymentRegion[];
-  recent: RecentDeployment[];
-}
-
 const q = (tier: Tier) => `?tier=${encodeURIComponent(tier)}`;
 
-/** GET /v1/infrastructure/deployments?tier=… */
-export async function fetchDeployments(
-  tier: Tier,
-): Promise<DeploymentsResponse> {
-  return apiClient.local.json<DeploymentsResponse>(
-    `/v1/infrastructure/deployments${q(tier)}`,
-  );
-}
-
 const API_KEYS_PATH = "/api/v1/proprietary/ui-data/infrastructure/api-keys";
 
 // Always this instance's own backend: a key authenticates the instance that issued it, so a
@@ -314,27 +106,6 @@ export async function revokeApiKey(id: string): Promise<void> {
   await apiClient.local.json<void>(path, { method: "DELETE" });
 }
 
-/** GET /v1/infrastructure/security?tier=… */
-export async function fetchSecurity(tier: Tier): Promise<SecurityConfig> {
-  return apiClient.local.json<SecurityConfig>(
-    `/v1/infrastructure/security${q(tier)}`,
-  );
-}
-
-/** GET /v1/infrastructure/models?tier=… */
-export async function fetchModels(tier: Tier): Promise<ModelsResponse> {
-  return apiClient.local.json<ModelsResponse>(
-    `/v1/infrastructure/models${q(tier)}`,
-  );
-}
-
-/** GET /v1/infrastructure/storage?tier=… */
-export async function fetchStorage(tier: Tier): Promise<StorageConfig> {
-  return apiClient.local.json<StorageConfig>(
-    `/v1/infrastructure/storage${q(tier)}`,
-  );
-}
-
 /** GET the audit log; SaaS or local, backend-scoped (admin → server, SaaS lead → team). */
 export async function fetchAuditLog(tier: Tier): Promise<AuditLogResponse> {
   const path = `/api/v1/proprietary/ui-data/infrastructure/audit-log${q(tier)}`;
diff --git a/frontend/editor/src/portal/api/pipelineAssets.ts b/frontend/editor/src/portal/api/pipelineAssets.ts
new file mode 100644
index 0000000000..b68c95fda5
--- /dev/null
+++ b/frontend/editor/src/portal/api/pipelineAssets.ts
@@ -0,0 +1,41 @@
+import { apiClient } from "@portal/api/http";
+import { type AssetId } from "@app/hooks/tools/shared/toolAutomation";
+
+export { type AssetId };
+
+/**
+ * Stored supporting files for pipeline steps (backend PolicyAssetController).
+ *
+ * A pipeline step that needs more than the document stream - a signing
+ * certificate, a watermark/stamp image, overlay PDFs, attachments - references
+ * its file by id from the step's `fileParameters` as `asset:<id>`. The bytes are
+ * uploaded here first (the save-time validator rejects a policy that binds an
+ * asset id that doesn't yet exist), then a triggered or scheduled run loads the
+ * file server-side without anyone re-supplying it. Assets are team-scoped exactly
+ * like the policies that reference them, and unreferenced uploads are cleaned up
+ * server-side, so the builder never has to delete what a cancelled edit left.
+ */
+
+/** Metadata for one stored supporting file. Mirrors the Java `PolicyAsset` record. */
+export interface PolicyAsset {
+  id: AssetId;
+  fileName: string;
+  contentType: string | null;
+  size: number;
+  createdAt: number;
+}
+
+/** POST /api/v1/policies/assets: store a supporting file, returning its metadata (with the id). */
+export async function uploadPipelineAsset(file: File): Promise<PolicyAsset> {
+  const form = new FormData();
+  form.append("file", file);
+  return apiClient.local.multipart<PolicyAsset>(
+    "/api/v1/policies/assets",
+    form,
+  );
+}
+
+/** GET /api/v1/policies/assets: the team's stored supporting files (metadata only). */
+export async function listPipelineAssets(): Promise<PolicyAsset[]> {
+  return apiClient.local.json<PolicyAsset[]>("/api/v1/policies/assets");
+}
diff --git a/frontend/editor/src/portal/api/pipelines.ts b/frontend/editor/src/portal/api/pipelines.ts
index 50bdc173c4..e441fcdac8 100644
--- a/frontend/editor/src/portal/api/pipelines.ts
+++ b/frontend/editor/src/portal/api/pipelines.ts
@@ -1,5 +1,8 @@
 import { apiClient } from "@portal/api/http";
-import { type ToolApiStep } from "@app/hooks/tools/shared/toolAutomation";
+import {
+  type SupportingFileBindings,
+  type ToolApiStep,
+} from "@app/hooks/tools/shared/toolAutomation";
 
 /**
  * Pipelines service layer: the backend contract.
@@ -15,7 +18,7 @@ import { type ToolApiStep } from "@app/hooks/tools/shared/toolAutomation";
 export interface PipelineStep {
   operation: string;
   parameters: Record<string, unknown>;
-  fileParameters?: Record<string, string>;
+  fileParameters?: SupportingFileBindings;
 }
 
 /** When a policy input fires automatically. `type` keys a trigger bean (e.g. "schedule"). */
@@ -217,14 +220,28 @@ export interface TestRunDefinition {
   output: OutputSpec;
 }
 
+/**
+ * A fresh, in-memory supporting file sent inline with a test run, bound to the run key a test step's
+ * `fileParameters` references. Only unsaved picks ride along here; a stored file keeps its
+ * `asset:<id>` binding, which the backend resolves from the saved policy (see `runPipelineTest`).
+ */
+export interface TestRunAsset {
+  key: string;
+  file: File;
+}
+
 /**
  * POST /api/v1/policies/run: run a definition against one uploaded file now. The builder's test
  * path - callers force an inline output so nothing reaches the pipeline's real destination, and
- * the pipeline need not be saved first.
+ * the pipeline need not be saved first. Fresh supporting files travel as keyed `assets[i]` parts;
+ * a stored file keeps its `asset:<id>` binding, and `policyId` lets the backend resolve it from that
+ * saved policy (so its bytes need not be re-sent).
  */
 export async function runPipelineTest(
   definition: TestRunDefinition,
   file: File,
+  assets: TestRunAsset[] = [],
+  policyId?: string,
 ): Promise<{ runId: string }> {
   const form = new FormData();
   form.append(
@@ -232,6 +249,11 @@ export async function runPipelineTest(
     new Blob([JSON.stringify(definition)], { type: "application/json" }),
   );
   form.append("fileInput", file);
+  if (policyId) form.append("policyId", policyId);
+  assets.forEach((asset, i) => {
+    form.append(`assets[${i}].key`, asset.key);
+    form.append(`assets[${i}].file`, asset.file);
+  });
   // The POST returns the identifier as `jobId`, but it is the same run id every other endpoint
   // (fetchRun, fetchRunOutput) calls `runId`; normalise to that here so callers see one name.
   const res = await apiClient.local.multipart<{ jobId: string }>(
diff --git a/frontend/editor/src/portal/billing/sharedBillingFormat.test.ts b/frontend/editor/src/portal/billing/sharedBillingFormat.test.ts
index d7ccd22df7..03c0998e34 100644
--- a/frontend/editor/src/portal/billing/sharedBillingFormat.test.ts
+++ b/frontend/editor/src/portal/billing/sharedBillingFormat.test.ts
@@ -3,6 +3,7 @@ import {
   currencySymbol,
   docCapForMoney,
   formatMinor,
+  formatMoneyMajor,
   formatPeriodDate,
   meterState,
 } from "@app/billing";
@@ -86,6 +87,13 @@ describe("formatMinor", () => {
   });
 });
 
+describe("formatMoneyMajor", () => {
+  it("formats major units with standard thousand separators and symbol", () => {
+    expect(formatMoneyMajor(1000, "usd")).toBe("$1,000");
+    expect(formatMoneyMajor(500, "eur")).toBe("€500");
+  });
+});
+
 describe("formatPeriodDate", () => {
   it("returns an empty string for null", () => {
     expect(formatPeriodDate(null)).toBe("");
diff --git a/frontend/editor/src/portal/components/AppShell.css b/frontend/editor/src/portal/components/AppShell.css
index d3f1332969..ffbfc2fb21 100644
--- a/frontend/editor/src/portal/components/AppShell.css
+++ b/frontend/editor/src/portal/components/AppShell.css
@@ -14,7 +14,9 @@
   color: var(--c-text-muted);
 }
 
+/* Anchors .portal-shell__notifications without disturbing the column's flow. */
 .portal-shell__main {
+  position: relative;
   flex: 1 1 auto;
   display: flex;
   flex-direction: column;
@@ -69,3 +71,12 @@
     animation: fadeIn var(--motion-fast) both;
   }
 }
+
+/* Sits over the main area's top-right corner. Outside .portal-shell__view so it stays put while
+   the view scrolls, and inside .portal-shell__main so it never overlaps the sidebar. */
+.portal-shell__notifications {
+  position: absolute;
+  top: var(--sp-3, 0.75rem);
+  right: var(--sp-4, 1rem);
+  z-index: var(--z-sticky, 30);
+}
diff --git a/frontend/editor/src/portal/components/AppShell.tsx b/frontend/editor/src/portal/components/AppShell.tsx
index 1811fa02c4..fe8f775fd0 100644
--- a/frontend/editor/src/portal/components/AppShell.tsx
+++ b/frontend/editor/src/portal/components/AppShell.tsx
@@ -8,6 +8,7 @@ import { useUI } from "@portal/contexts/UIContext";
 import { MenuIcon, SearchIcon } from "@portal/components/icons";
 import { Logo } from "@app/ui/Logo";
 import "@portal/components/AppShell.css";
+import { NotificationBell } from "@app/components/notifications/NotificationBell";
 
 /**
  * Compact header shown only under the mobile breakpoint (CSS-hidden on
@@ -89,6 +90,9 @@ export function AppShell({ children }: { children: ReactNode }) {
       <div className="portal-shell__main">
         <MobileTopbar />
         <PortalSearchBar />
+        <div className="portal-shell__notifications">
+          <NotificationBell />
+        </div>
         <main className="portal-shell__view">{children}</main>
       </div>
     </div>
diff --git a/frontend/editor/src/portal/components/BrandMarks.tsx b/frontend/editor/src/portal/components/BrandMarks.tsx
index 7c381650d3..afa6de8d65 100644
--- a/frontend/editor/src/portal/components/BrandMarks.tsx
+++ b/frontend/editor/src/portal/components/BrandMarks.tsx
@@ -188,6 +188,21 @@ const BRAND: Record<string, (p: MarkProps) => ReactNode> = {
       <circle cx="12" cy="12" r="2.6" fill="#FF4F00" />
     </Fill>
   ),
+  n8n: (p) => (
+    <Fill {...p}>
+      <g stroke="#EA4B71" strokeWidth="1.6" fill="none" strokeLinecap="round">
+        <path d="M3.6 12h5.2" />
+        <path d="M13.2 12h1.2c1.1 0 1.5-.8 2-1.7s.9-1.7 2-1.7h1" />
+        <path d="M13.2 12h1.2c1.1 0 1.5.8 2 1.7s.9 1.7 2 1.7h1" />
+      </g>
+      <g fill="#EA4B71">
+        <circle cx="2.6" cy="12" r="1.7" />
+        <circle cx="11" cy="12" r="2.4" />
+        <circle cx="20.6" cy="8.6" r="1.7" />
+        <circle cx="20.6" cy="15.4" r="1.7" />
+      </g>
+    </Fill>
+  ),
   jira: (p) => (
     <Fill {...p}>
       <path
diff --git a/frontend/editor/src/portal/components/EditorStatusCard.css b/frontend/editor/src/portal/components/EditorStatusCard.css
index 692d08adc3..53581828e7 100644
--- a/frontend/editor/src/portal/components/EditorStatusCard.css
+++ b/frontend/editor/src/portal/components/EditorStatusCard.css
@@ -3,10 +3,6 @@
 /* ──────────────────────────────────────────────────────────────────────── */
 
 .portal-editor-hero {
-  border-radius: var(--radius-xl);
-  border: 1px solid var(--c-border);
-  background: var(--c-surface);
-  box-shadow: var(--shadow-sm);
   overflow: hidden;
 }
 
diff --git a/frontend/editor/src/portal/components/EditorStatusCard.tsx b/frontend/editor/src/portal/components/EditorStatusCard.tsx
index b506a0a366..e4918ed859 100644
--- a/frontend/editor/src/portal/components/EditorStatusCard.tsx
+++ b/frontend/editor/src/portal/components/EditorStatusCard.tsx
@@ -10,6 +10,7 @@ import {
 } from "@portal/queries/infrastructure";
 import { type EditorInstance } from "@portal/api/editorDeploy";
 import { DownloadEditorModal } from "@portal/components/DownloadEditorModal";
+import "@portal/theme/surface.css";
 import "@portal/components/EditorStatusCard.css";
 
 /** The Stirling brand mark, drawn at the hero size. Decorative. */
@@ -120,7 +121,7 @@ export function EditorStatusCard({ footer }: EditorStatusCardProps) {
 
   return (
     <section
-      className="portal-editor-hero"
+      className="portal-surface portal-editor-hero"
       aria-label={t("portal.home.editor.name")}
     >
       <div className="portal-editor-hero__row">
diff --git a/frontend/editor/src/portal/components/HomeHero.tsx b/frontend/editor/src/portal/components/HomeHero.tsx
index e81d42dfef..954eac9908 100644
--- a/frontend/editor/src/portal/components/HomeHero.tsx
+++ b/frontend/editor/src/portal/components/HomeHero.tsx
@@ -31,7 +31,7 @@ export function HomeHero() {
       {procurement.loading ? (
         // Hold the rail's shape rather than committing to a footer: branching before the snapshot
         // lands paints the no-deal rail first, flashing on every refresh of an active deal.
-        <section className="portal-editor-hero" aria-busy>
+        <section className="portal-surface portal-editor-hero" aria-busy>
           <div className="portal-editor-hero__row">
             <Skeleton width="2rem" height="2rem" />
             <Skeleton width="12rem" height="1rem" />
diff --git a/frontend/editor/src/portal/components/PortalSearchBar.css b/frontend/editor/src/portal/components/PortalSearchBar.css
index cf1d9971c7..8e253b6136 100644
--- a/frontend/editor/src/portal/components/PortalSearchBar.css
+++ b/frontend/editor/src/portal/components/PortalSearchBar.css
@@ -1,10 +1,11 @@
-/* Slim strip at the top of the main column hosting the shared search bar.
-   Deliberately unpainted: only the input itself shows, on the page ground. */
+/* Unpainted strip at the top of the main column. Height matches the sidebar's
+   logo row (.portal-sidebar__logo, 51px) so the search lines up with the brand. */
 .portal-searchbar {
   display: flex;
   align-items: center;
   justify-content: center;
-  padding: 0.22rem 1rem;
+  min-height: 3.1875rem;
+  padding: 0 1rem;
   flex-shrink: 0;
 }
 
diff --git a/frontend/editor/src/portal/components/ProcessorFlow.css b/frontend/editor/src/portal/components/ProcessorFlow.css
index e24b4d7f3c..e1e61d819e 100644
--- a/frontend/editor/src/portal/components/ProcessorFlow.css
+++ b/frontend/editor/src/portal/components/ProcessorFlow.css
@@ -121,9 +121,10 @@
   height: auto;
   width: 100%;
   text-align: left;
-  background: var(--c-bg);
+  background: var(--c-surface);
   border: 1px solid var(--c-border-subtle);
   border-radius: var(--radius-md);
+  box-shadow: var(--sui-elevation-raised);
   transition:
     background var(--motion-fast),
     border-color var(--motion-fast);
@@ -148,6 +149,7 @@
 .portal-pf__node--soon {
   background: transparent;
   border-style: dashed;
+  box-shadow: none;
   /* The dashed border and muted ink mark this as not-yet-available; fading the
      whole node with opacity would drop its label below the contrast floor. */
   color: var(--c-text-muted);
@@ -202,15 +204,16 @@
 }
 
 /* ── Policies card (core) ───────────────────────────────────────────────────── */
+/* Same secondary-surface treatment as the nodes it sits between. */
 .portal-pf__policies {
   align-self: center;
   flex: none;
   width: 18rem;
   padding: 0.75rem;
-  background: var(--c-bg);
+  background: var(--c-surface);
   border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-lg);
-  box-shadow: var(--shadow-sm);
+  border-radius: var(--radius-md);
+  box-shadow: var(--sui-elevation-raised);
 }
 
 .portal-pf__policies-head {
diff --git a/frontend/editor/src/portal/components/ProcessorFlow.tsx b/frontend/editor/src/portal/components/ProcessorFlow.tsx
index ad1f604a6a..b4aa34a8f2 100644
--- a/frontend/editor/src/portal/components/ProcessorFlow.tsx
+++ b/frontend/editor/src/portal/components/ProcessorFlow.tsx
@@ -2,6 +2,7 @@ import { useState } from "react";
 import { useNavigate } from "react-router-dom";
 import { useTranslation } from "react-i18next";
 import { Card, SegmentedControl, Skeleton, StatusBadge } from "@app/ui";
+import "@app/ui/Surface.css";
 import {
   useView,
   VIEW_PATHS,
diff --git a/frontend/editor/src/portal/components/Sidebar.css b/frontend/editor/src/portal/components/Sidebar.css
index dfb533f8ab..48b54b177d 100644
--- a/frontend/editor/src/portal/components/Sidebar.css
+++ b/frontend/editor/src/portal/components/Sidebar.css
@@ -123,8 +123,6 @@
 }
 .portal-sidebar[data-collapsed] .portal-sidebar__footer {
   margin-inline: 0.375rem;
-  padding-inline: 0;
-  align-items: center;
 }
 
 .portal-sidebar__logo {
@@ -179,10 +177,8 @@
   gap: 0.125rem;
 }
 
+/* The shared <NavFooter> brings its own boxes, padding and gap; the sidebar
+   only positions it. */
 .portal-sidebar__footer {
   margin: 0 0.625rem 0.75rem;
-  padding: 0.5rem 0.375rem;
-  display: flex;
-  flex-direction: column;
-  gap: 0.5rem;
 }
diff --git a/frontend/editor/src/portal/components/Sidebar.tsx b/frontend/editor/src/portal/components/Sidebar.tsx
index ebf91c636e..8ce7008d67 100644
--- a/frontend/editor/src/portal/components/Sidebar.tsx
+++ b/frontend/editor/src/portal/components/Sidebar.tsx
@@ -2,6 +2,10 @@ import { useMediaQuery } from "@mantine/hooks";
 import { Tooltip } from "@mantine/core";
 import { ActionIcon, NavItem, NavSurface } from "@app/ui";
 import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
+import { NavFooter } from "@app/components/shared/navFooter/NavFooter";
+import { useAccountIdentity } from "@app/hooks/useAccountIdentity";
+import { useFreeCreditsSummary } from "@portal/hooks/useFreeCreditsSummary";
+import { useOpenPlan } from "@portal/hooks/useOpenPlan";
 import { SidebarToggleIcon } from "@app/components/shared/SidebarToggleIcon";
 import { useTranslation } from "react-i18next";
 import { useNavigate } from "react-router-dom";
@@ -10,7 +14,7 @@ import { useUI } from "@portal/contexts/UIContext";
 import { LinkAccountFooterItem } from "@portal/components/LinkAccountFooterItem";
 import { EDITOR_URL, EDITOR_IS_SAME_APP } from "@portal/auth/editorUrl";
 import { EDITOR_BASENAME } from "@app/routes/editorBasename";
-import { CloseIcon, SettingsIcon } from "@portal/components/icons";
+import { CloseIcon } from "@portal/components/icons";
 import {
   GROUP_PROCESSOR,
   GROUP_PLATFORM,
@@ -41,6 +45,9 @@ export function Sidebar() {
   const isMobile = useMediaQuery(MOBILE_QUERY, false, {
     getInitialValueInEffect: false,
   });
+  const { displayName, profilePictureUrl } = useAccountIdentity();
+  const credits = useFreeCreditsSummary();
+  const openPlan = useOpenPlan();
 
   // Collapse is a desktop-only affordance: on mobile the sidebar is an
   // off-canvas drawer, so the icon-rail state never applies there.
@@ -146,15 +153,17 @@ export function Sidebar() {
         ))}
       </nav>
 
-      <NavSurface className="portal-sidebar__footer">
-        <LinkAccountFooterItem />
-        <NavItem
-          id="settings"
-          label={t("portal.nav.settings")}
-          icon={<SettingsIcon />}
-          onClick={() => openSettings()}
-        />
-      </NavSurface>
+      <NavFooter
+        className="portal-sidebar__footer"
+        displayName={displayName}
+        profilePictureUrl={profilePictureUrl}
+        onOpenSettings={openSettings}
+        credits={credits}
+        onOpenPlan={openPlan ?? undefined}
+        otherApp={{ app: "editor", onOpen: goToEditor }}
+        accountExtras={<LinkAccountFooterItem />}
+        collapsed={collapsed}
+      />
     </aside>
   );
 }
diff --git a/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx b/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx
index 921de50853..910ce957dd 100644
--- a/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx
+++ b/frontend/editor/src/portal/components/account-link/LinkedInstancesTable.tsx
@@ -1,13 +1,6 @@
 import { useTranslation } from "react-i18next";
 import type { TFunction } from "i18next";
-import {
-  Button,
-  Card,
-  EmptyState,
-  StatusBadge,
-  Table,
-  type TableColumn,
-} from "@app/ui";
+import { column, DataTable, type DataTableColumn, EmptyState } from "@app/ui";
 import type { LinkedInstanceRow } from "@portal/api/link";
 
 interface Props {
@@ -45,78 +38,67 @@ export function LinkedInstancesTable({
   revokingId,
 }: Props) {
   const { t } = useTranslation();
-  const cols: TableColumn<LinkedInstanceRow>[] = [
-    {
+  const cols: DataTableColumn<LinkedInstanceRow>[] = [
+    column.entity({
       key: "name",
       header: t("portal.accountLink.instances.columns.instance", "Instance"),
-      render: (i) => (
-        <div className="portal-link__cell-stack">
-          <span className="portal-link__cell-strong">
-            {i.name ??
-              t("portal.accountLink.instances.unnamed", "Unnamed instance")}
-          </span>
-          <code className="portal-link__device-id">{i.deviceId}</code>
-        </div>
-      ),
-    },
-    {
+      sortable: true,
+      primary: (i) =>
+        i.name ?? t("portal.accountLink.instances.unnamed", "Unnamed instance"),
+      note: (i) => i.deviceId,
+    }),
+    column.badge({
       key: "status",
       header: t("portal.accountLink.instances.columns.status", "Status"),
-      render: (i) =>
-        i.revoked ? (
-          <StatusBadge tone="danger" size="sm">
-            {t("portal.accountLink.instances.revoked", "Revoked")}
-          </StatusBadge>
-        ) : (
-          <StatusBadge tone="success" size="sm">
-            {t("portal.accountLink.instances.active", "Active")}
-          </StatusBadge>
-        ),
-    },
-    {
+      sortable: true,
+      get: (i) =>
+        i.revoked
+          ? {
+              tone: "danger",
+              label: t("portal.accountLink.instances.revoked", "Revoked"),
+            }
+          : {
+              tone: "success",
+              label: t("portal.accountLink.instances.active", "Active"),
+            },
+    }),
+    column.muted({
       key: "lastSeen",
       header: t("portal.accountLink.instances.columns.lastSeen", "Last seen"),
-      render: (i) => (
-        <span className="portal-link__muted">
-          {relativeTime(i.lastSeenAt, t)}
-        </span>
-      ),
-    },
-    {
+      sortable: true,
+      // Sort on the real ISO timestamp, not the "3d ago" label.
+      sortBy: (i) => i.lastSeenAt ?? undefined,
+      get: (i) => relativeTime(i.lastSeenAt, t),
+    }),
+    column.muted({
       key: "created",
       header: t("portal.accountLink.instances.columns.linked", "Linked"),
-      render: (i) => (
-        <span className="portal-link__muted">
-          {relativeTime(i.createdAt, t)}
-        </span>
-      ),
-    },
-    {
+      sortable: true,
+      sortBy: (i) => i.createdAt ?? undefined,
+      get: (i) => relativeTime(i.createdAt, t),
+    }),
+    column.actions({
       key: "actions",
-      header: (
-        <span className="sr-only">
-          {t("portal.accountLink.instances.columns.actions", "Actions")}
-        </span>
-      ),
-      align: "right",
-      render: (i) =>
-        i.revoked ? null : (
-          <Button
-            variant="secondary"
-            accent="danger"
-            size="sm"
-            loading={revokingId === i.instanceId}
-            onClick={() => onRevoke(i)}
-          >
-            {t("portal.accountLink.instances.revoke", "Revoke")}
-          </Button>
-        ),
-    },
+      get: (i) =>
+        i.revoked
+          ? []
+          : [
+              {
+                label: t("portal.accountLink.instances.revoke", "Revoke"),
+                tone: "danger",
+                loading: revokingId === i.instanceId,
+                onClick: () => onRevoke(i),
+              },
+            ],
+    }),
   ];
 
   return (
-    <Card padding="none">
-      {instances.length === 0 ? (
+    <DataTable<LinkedInstanceRow>
+      columns={cols}
+      rows={instances}
+      rowKey={(i) => String(i.instanceId)}
+      empty={
         <EmptyState
           size="compact"
           title={t(
@@ -128,13 +110,7 @@ export function LinkedInstancesTable({
             "Link this org's account, then register your self-hosted instances to see them here.",
           )}
         />
-      ) : (
-        <Table
-          columns={cols}
-          rows={instances}
-          rowKey={(i) => String(i.instanceId)}
-        />
-      )}
-    </Card>
+      }
+    />
   );
 }
diff --git a/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx b/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx
index 7d322a7be6..3ed7706e80 100644
--- a/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx
+++ b/frontend/editor/src/portal/components/billing/BundleCheckoutModal.tsx
@@ -34,6 +34,7 @@ import {
   type LatestBundleQuote,
 } from "@portal/billing/stripe";
 import { PrepayModalHeader } from "@portal/components/billing/PrepayModalHeader";
+import "@portal/theme/surface.css";
 
 /**
  * Prepaid-bundle purchase modal for the Processor billing page — "12 months for
@@ -1166,7 +1167,7 @@ function CalculatorStep({
       </div>
 
       {/* Finer settings as progressive-disclosure rows — a "Change" blooms the card picker. */}
-      <div className="portal-billing__bundle-rows">
+      <div className="portal-surface portal-billing__bundle-rows">
         {rows.map((row) => {
           const open = expanded === row.id;
           return (
diff --git a/frontend/editor/src/portal/components/billing/CardPlaceholder.tsx b/frontend/editor/src/portal/components/billing/CardPlaceholder.tsx
index af1cd78b1b..6678b20bd1 100644
--- a/frontend/editor/src/portal/components/billing/CardPlaceholder.tsx
+++ b/frontend/editor/src/portal/components/billing/CardPlaceholder.tsx
@@ -1,5 +1,6 @@
 import { useTranslation } from "react-i18next";
 import { LockIcon } from "@portal/components/icons";
+import "@portal/theme/surface.css";
 
 /**
  * Card-form stand-in shown on the checkout payment step when no Stripe publishable key is configured
@@ -9,7 +10,7 @@ import { LockIcon } from "@portal/components/icons";
 export function CardPlaceholder() {
   const { t } = useTranslation();
   return (
-    <div className="portal-billing__card-placeholder">
+    <div className="portal-surface portal-billing__card-placeholder">
       <div className="portal-billing__card-placeholder-head">
         <span>{t("portal.billing.checkout.card.label", "Card details")}</span>
         <span className="portal-billing__card-placeholder-badge">Stripe</span>
diff --git a/frontend/editor/src/portal/components/billing/InvoicesList.tsx b/frontend/editor/src/portal/components/billing/InvoicesList.tsx
index 8e4c8a8540..3ad8da9c2c 100644
--- a/frontend/editor/src/portal/components/billing/InvoicesList.tsx
+++ b/frontend/editor/src/portal/components/billing/InvoicesList.tsx
@@ -3,11 +3,12 @@ import { useTranslation } from "react-i18next";
 import {
   Button,
   Card,
+  type CellLink,
+  column,
+  DataTable,
+  type DataTableColumn,
   EmptyState,
   Skeleton,
-  StatusBadge,
-  Table,
-  type TableColumn,
 } from "@app/ui";
 import { formatMinor, formatPeriodDate } from "@app/billing";
 import { fetchInvoices, type Invoice } from "@portal/api/billing";
@@ -80,96 +81,78 @@ export function InvoicesList() {
   //   Date · Amount · Status · Description (product name) · Actions
   // The monospace invoice id is dropped — users care about "what was it for",
   // not the internal id.
-  const columns: TableColumn<Invoice>[] = [
-    {
+  const columns: DataTableColumn<Invoice>[] = [
+    column.text({
       key: "date",
       header: t("portal.billing.invoices.columnDate", "Date"),
-      render: (inv) =>
-        inv.createdAt ? formatPeriodDate(inv.createdAt, { year: true }) : "—",
-    },
-    {
+      sortable: true,
+      // Sort chronologically on the raw ISO timestamp, not the formatted label.
+      sortBy: (inv) => inv.createdAt ?? undefined,
+      get: (inv) =>
+        inv.createdAt ? formatPeriodDate(inv.createdAt, { year: true }) : "-",
+    }),
+    column.number({
       key: "pdfs",
       header: t(
         "portal.billing.invoices.columnPdfsProcessed",
         "PDFs processed",
       ),
-      align: "right",
-      // Billed units on the invoice's metered line item; "—" when the
+      sortable: true,
+      // Billed units on the invoice's metered line item; blank when the
       // line-item table isn't synced into the Stripe mirror.
-      render: (inv) =>
-        inv.pdfsProcessed == null ? "—" : inv.pdfsProcessed.toLocaleString(),
-    },
-    {
+      get: (inv) => inv.pdfsProcessed,
+      format: (n) => n.toLocaleString(),
+    }),
+    column.number({
       key: "amount",
       header: t("portal.billing.invoices.columnAmount", "Amount"),
-      align: "right",
-      render: (inv) =>
-        inv.totalMinor == null
-          ? "—"
-          : formatMinor(inv.totalMinor, inv.currency),
-    },
-    {
+      sortable: true,
+      get: (inv) => inv.totalMinor,
+      format: (n, inv) => formatMinor(n, inv.currency),
+    }),
+    column.badge({
       key: "status",
       header: t("portal.billing.invoices.columnStatus", "Status"),
-      render: (inv) => (
-        <StatusBadge tone={statusTone(inv.status)} size="sm">
-          {inv.status}
-        </StatusBadge>
-      ),
-    },
-    {
+      sortable: true,
+      get: (inv) => ({ tone: statusTone(inv.status), label: inv.status }),
+    }),
+    column.text({
       key: "description",
       header: t("portal.billing.invoices.columnDescription", "Description"),
-      render: (inv) => (
-        <span className="portal-billing__invoice-desc">
-          {inv.description ??
-            t("portal.billing.invoices.descriptionFallback", "Invoice")}
-        </span>
-      ),
-    },
-    {
+      sortable: true,
+      get: (inv) =>
+        inv.description ??
+        t("portal.billing.invoices.descriptionFallback", "Invoice"),
+    }),
+    column.links({
       key: "actions",
-      header: "",
-      align: "right",
-      render: (inv) => (
-        <div className="portal-billing__invoice-actions">
-          {inv.hostedInvoiceUrl && (
-            <a
-              className="portal-billing__invoice-link"
-              href={inv.hostedInvoiceUrl}
-              target="_blank"
-              rel="noopener noreferrer"
-              aria-label={t(
-                "portal.billing.invoices.viewAriaLabel",
-                "View invoice {{number}} in Stripe",
-                {
-                  number: inv.number ?? inv.id,
-                },
-              )}
-            >
-              {t("portal.billing.invoices.viewLink", "View ↗")}
-            </a>
-          )}
-          {inv.invoicePdf && (
-            <a
-              className="portal-billing__invoice-link"
-              href={inv.invoicePdf}
-              target="_blank"
-              rel="noopener noreferrer"
-              aria-label={t(
-                "portal.billing.invoices.downloadAriaLabel",
-                "Download invoice {{number}} as PDF",
-                {
-                  number: inv.number ?? inv.id,
-                },
-              )}
-            >
-              {t("portal.billing.invoices.pdfLink", "PDF ↓")}
-            </a>
-          )}
-        </div>
-      ),
-    },
+      get: (inv) => {
+        const out: CellLink[] = [];
+        if (inv.hostedInvoiceUrl) {
+          out.push({
+            label: t("portal.billing.invoices.viewLink", "View ↗"),
+            href: inv.hostedInvoiceUrl,
+            ariaLabel: t(
+              "portal.billing.invoices.viewAriaLabel",
+              "View invoice {{number}} in Stripe",
+              { number: inv.number ?? inv.id },
+            ),
+          });
+        }
+        if (inv.invoicePdf) {
+          out.push({
+            label: t("portal.billing.invoices.pdfLink", "PDF ↓"),
+            href: inv.invoicePdf,
+            ariaLabel: t(
+              "portal.billing.invoices.downloadAriaLabel",
+              "Download invoice {{number}} as PDF",
+              { number: inv.number ?? inv.id },
+            ),
+          });
+        }
+        return out;
+      },
+    }),
   ];
 
   return (
@@ -209,11 +192,11 @@ export function InvoicesList() {
 
       {invoices !== null && invoices.length > 0 && (
         <>
-          <Table
-            className="portal-billing__flush-table"
+          <DataTable
             columns={columns}
             rows={visibleRows}
             rowKey={(inv) => inv.id}
+            defaultSort={{ key: "date", direction: "desc" }}
           />
           {hasMore && (
             <div className="portal-billing__invoice-footer">
diff --git a/frontend/editor/src/portal/components/billing/PrepaidCapacityCard.tsx b/frontend/editor/src/portal/components/billing/PrepaidCapacityCard.tsx
index c7ab0e8704..6ea4d8d336 100644
--- a/frontend/editor/src/portal/components/billing/PrepaidCapacityCard.tsx
+++ b/frontend/editor/src/portal/components/billing/PrepaidCapacityCard.tsx
@@ -1,6 +1,6 @@
 import { useTranslation } from "react-i18next";
 import { Button, Card } from "@app/ui";
-import { formatPeriodDate, MeterBar, meterState } from "@app/billing";
+import { formatPeriodDate, MeterBar, remainingMeter } from "@app/billing";
 import type { Wallet } from "@portal/api/billing";
 
 /**
@@ -10,8 +10,8 @@ import type { Wallet } from "@portal/api/billing";
  *   - No bundle → a slim "Get 12 months for the price of 10" offer nudge with a
  *     "Review offer" CTA (the demo's commit-nudge card), shown only when a buyer
  *     ({@code onBuy}, leader) is present.
- *   - Bundle held → the capacity meter (fills as the pool is drawn down, so it
- *     warns as capacity runs low) plus a "Top up" action for the leader.
+ *   - Bundle held → the capacity meter (drains towards empty as the pool is drawn
+ *     down, so it warns as capacity runs low) plus a "Top up" action for the leader.
  *
  * Prepaid is consumed before metered billing and sits outside the spend limit, so
  * it reads as its own dimension. Buying/topping up opens {@code BundleCheckoutModal}
@@ -55,8 +55,7 @@ export function PrepaidCapacityCard({
 
   const remaining = wallet.prepaidUnitsRemaining;
   const total = wallet.prepaidUnitsTotal;
-  const used = Math.max(0, total - remaining);
-  const { state, pct } = meterState(used, total);
+  const { state, pct } = remainingMeter(remaining, total);
   const stateLabel =
     state === "DEGRADED"
       ? t("portal.billing.prepaid.state.exhausted", "Used up")
diff --git a/frontend/editor/src/portal/components/billing/WalletMeter.tsx b/frontend/editor/src/portal/components/billing/WalletMeter.tsx
index c8be188390..9558960e89 100644
--- a/frontend/editor/src/portal/components/billing/WalletMeter.tsx
+++ b/frontend/editor/src/portal/components/billing/WalletMeter.tsx
@@ -1,7 +1,7 @@
 import type { ReactNode } from "react";
 import { useTranslation } from "react-i18next";
 import { Card } from "@app/ui";
-import { formatMinor, MeterBar, meterState } from "@app/billing";
+import { formatMinor, MeterBar, remainingMeter } from "@app/billing";
 import type { Wallet } from "@portal/api/billing";
 import type { LocalUsage } from "@portal/api/link";
 
@@ -15,8 +15,10 @@ interface Props {
 }
 
 /**
- * The free Processor-trial meter — "X / N free PDFs used" against the one-time
- * grant. Uses the shared {@link MeterBar} (same `paygf-meter` structure as the
+ * The free Processor-trial meter — "X of N free PDFs left" against the one-time
+ * grant, with what has been used alongside as the status badge. The bar shows what
+ * is left, so it drains towards empty as the grant is spent.
+ * Uses the shared {@link MeterBar} (same `paygf-meter` structure as the
  * cloud plan page). The subscribed spend-vs-cap meter is a separate surface
  * ({@code SpendLimitCard}); this card is only the free face.
  *
@@ -30,7 +32,7 @@ export function WalletMeter({ wallet, unsynced, action }: Props) {
   const pending = unsynced?.totalUnsyncedUnits ?? 0;
   const used = wallet.billableUsed + pending;
   const remaining = Math.max(0, wallet.freeRemaining - pending);
-  const { state, pct } = meterState(used, wallet.freeAllowance);
+  const { state, pct } = remainingMeter(remaining, wallet.freeAllowance);
   const rate =
     wallet.pricePerDocMinor != null && wallet.pricePerDocMinor > 0
       ? wallet.pricePerDocMinor
@@ -76,11 +78,14 @@ export function WalletMeter({ wallet, unsynced, action }: Props) {
         <MeterBar
           state={state}
           pct={pct}
-          barLabel={t("portal.billing.walletMeter.barAria", "Free PDFs used")}
-          figure={used.toLocaleString()}
+          barLabel={t(
+            "portal.billing.walletMeter.barAria",
+            "Free PDFs remaining",
+          )}
+          figure={remaining.toLocaleString()}
           capSuffix={t(
             "portal.billing.walletMeter.capSuffix",
-            "of {{allowance}} free PDFs used",
+            "of {{allowance}} free PDFs left",
             {
               count: wallet.freeAllowance,
               allowance: wallet.freeAllowance.toLocaleString(),
@@ -88,11 +93,8 @@ export function WalletMeter({ wallet, unsynced, action }: Props) {
           )}
           statusLabel={t(
             "portal.billing.walletMeter.statusLabel",
-            "{{remaining}} left",
-            {
-              count: remaining,
-              remaining: remaining.toLocaleString(),
-            },
+            "{{used}} used",
+            { count: used, used: used.toLocaleString() },
           )}
         />
       </div>
diff --git a/frontend/editor/src/portal/components/billing/billing.css b/frontend/editor/src/portal/components/billing/billing.css
index 113b660a7c..c1b27720df 100644
--- a/frontend/editor/src/portal/components/billing/billing.css
+++ b/frontend/editor/src/portal/components/billing/billing.css
@@ -1198,9 +1198,6 @@
   flex-direction: column;
   gap: 0.5rem;
   padding: 1rem;
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-md);
-  background: var(--c-surface);
 }
 .portal-billing__card-placeholder-head {
   display: flex;
@@ -1333,8 +1330,6 @@
 
 /* Progressive-disclosure finer settings: summary rows that bloom a card picker. */
 .portal-billing__bundle-rows {
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-md);
   overflow: hidden;
 }
 .portal-billing__bundle-row + .portal-billing__bundle-row {
diff --git a/frontend/editor/src/portal/components/docs/EndpointReferenceSection.tsx b/frontend/editor/src/portal/components/docs/EndpointReferenceSection.tsx
index 930e523886..55b1c47f51 100644
--- a/frontend/editor/src/portal/components/docs/EndpointReferenceSection.tsx
+++ b/frontend/editor/src/portal/components/docs/EndpointReferenceSection.tsx
@@ -3,6 +3,7 @@ import { useTranslation } from "react-i18next";
 import { MethodBadge, Tabs, type HttpMethod, type TabItem } from "@app/ui";
 import { VERTICALS, ALL_ENDPOINTS } from "@portal/data/endpoints";
 import { DocsSection } from "@portal/components/docs/DocsSection";
+import "@portal/theme/surface.css";
 
 type VerticalFilter = "all" | (typeof VERTICALS)[number]["key"];
 
@@ -46,7 +47,10 @@ export function EndpointReferenceSection() {
       />
       <div className="portal-docs__endpoints">
         {shown.map((v) => (
-          <div key={v.key} className="portal-docs__endpoint-group">
+          <div
+            key={v.key}
+            className="portal-surface portal-docs__endpoint-group"
+          >
             <div className="portal-docs__endpoint-grouphead">
               <span
                 className="portal-docs__endpoint-dot"
diff --git a/frontend/editor/src/portal/components/documents/DocumentExtractions.stories.tsx b/frontend/editor/src/portal/components/documents/DocumentExtractions.stories.tsx
index d96ef55a1f..1f8f6691dd 100644
--- a/frontend/editor/src/portal/components/documents/DocumentExtractions.stories.tsx
+++ b/frontend/editor/src/portal/components/documents/DocumentExtractions.stories.tsx
@@ -1,11 +1,32 @@
 import type { Meta, StoryObj } from "@storybook/react-vite";
+import type { Extraction } from "@portal/api/documents";
 import { documentsFor } from "@portal/mocks/documents";
 import { DocumentExtractions } from "@portal/components/documents/DocumentExtractions";
 import "@portal/views/Documents.css";
 
 const ALL = documentsFor("enterprise");
-const NON_SENSITIVE = ALL.find((d) => !d.sensitive)!;
-const SENSITIVE = ALL.find((d) => d.sensitive)!;
+
+// The mock documents ship without extractions, so seed a realistic set here -
+// a spread of confidence levels so the table (and its confidence sort) is
+// actually reviewable.
+const EXTRACTIONS: Extraction[] = [
+  { field: "Counterparty", value: "Acme Services LLC", confidence: 0.98 },
+  { field: "Effective date", value: "2026-01-14", confidence: 0.94 },
+  { field: "Contract value", value: "$248,000.00", confidence: 0.87 },
+  { field: "Governing law", value: "Delaware", confidence: 0.72 },
+  { field: "Auto-renewal", value: "Yes (12 months)", confidence: 0.55 },
+];
+
+const NON_SENSITIVE = {
+  ...ALL.find((d) => !d.sensitive)!,
+  extractions: EXTRACTIONS,
+  fieldsExtracted: EXTRACTIONS.length,
+};
+const SENSITIVE = {
+  ...ALL.find((d) => d.sensitive)!,
+  extractions: EXTRACTIONS,
+  fieldsExtracted: EXTRACTIONS.length,
+};
 
 const meta: Meta<typeof DocumentExtractions> = {
   title: "Portal/Documents/DocumentExtractions",
@@ -23,7 +44,7 @@ const meta: Meta<typeof DocumentExtractions> = {
 export default meta;
 type Story = StoryObj<typeof DocumentExtractions>;
 
-/** No extraction data exists yet - the table shows its empty state. */
+/** Extracted fields with a mix of confidence levels; click a header to sort. */
 export const Default: Story = {};
 
 /** Sensitive doc with no active grant — content stays masked. */
@@ -35,3 +56,10 @@ export const Masked: Story = {
 export const Unlocked: Story = {
   args: { doc: SENSITIVE, unlocked: true },
 };
+
+/** No extraction data yet — the empty state. */
+export const Empty: Story = {
+  args: {
+    doc: { ...NON_SENSITIVE, extractions: [], fieldsExtracted: 0 },
+  },
+};
diff --git a/frontend/editor/src/portal/components/documents/DocumentExtractions.tsx b/frontend/editor/src/portal/components/documents/DocumentExtractions.tsx
index 3c6de80c93..646498156d 100644
--- a/frontend/editor/src/portal/components/documents/DocumentExtractions.tsx
+++ b/frontend/editor/src/portal/components/documents/DocumentExtractions.tsx
@@ -1,6 +1,6 @@
 import { useTranslation } from "react-i18next";
 import LockRounded from "@mui/icons-material/LockRounded";
-import { StatusBadge, Table, type TableColumn } from "@app/ui";
+import { column, DataTable, type DataTableColumn } from "@app/ui";
 import { type Extraction, type ReviewDocument } from "@portal/api/documents";
 import {
   confidencePct,
@@ -24,32 +24,30 @@ export function DocumentExtractions({
 }: DocumentExtractionsProps) {
   const { t } = useTranslation();
 
-  const cols: TableColumn<Extraction>[] = [
-    {
+  const cols: DataTableColumn<Extraction>[] = [
+    column.text({
       key: "field",
       header: t("portal.documents.extractions.columns.field"),
-      render: (e) => <span className="portal-documents__field">{e.field}</span>,
-    },
-    {
+      sortable: true,
+      get: (e) => e.field,
+    }),
+    column.mono({
       key: "value",
       header: t("portal.documents.extractions.columns.value"),
-      render: (e) => <span className="portal-documents__mono">{e.value}</span>,
-    },
-    {
+      get: (e) => e.value,
+    }),
+    column.badge({
       key: "confidence",
       header: t("portal.documents.extractions.columns.confidence"),
-      align: "right",
-      width: "7rem",
-      render: (e) => (
-        <StatusBadge
-          tone={confidenceTone(e.confidence)}
-          size="sm"
-          showDot={false}
-        >
-          {confidencePct(e.confidence)}
-        </StatusBadge>
-      ),
-    },
+      sortable: true,
+      // Sort on the whole-percent integer, not the "92%" label (keeps decimals
+      // out of the natural-sort comparator).
+      sortBy: (e) => Math.round(e.confidence * 100),
+      get: (e) => ({
+        tone: confidenceTone(e.confidence),
+        label: confidencePct(e.confidence),
+      }),
+    }),
   ];
 
   if (doc.sensitive && !unlocked) {
@@ -66,7 +64,7 @@ export function DocumentExtractions({
   }
 
   return (
-    <Table<Extraction>
+    <DataTable<Extraction>
       columns={cols}
       rows={doc.extractions}
       rowKey={(e) => e.field}
diff --git a/frontend/editor/src/portal/components/documents/ReviewQueue.test.tsx b/frontend/editor/src/portal/components/documents/ReviewQueue.test.tsx
index ee8b0e8073..f01c6f482d 100644
--- a/frontend/editor/src/portal/components/documents/ReviewQueue.test.tsx
+++ b/frontend/editor/src/portal/components/documents/ReviewQueue.test.tsx
@@ -1,13 +1,16 @@
-import { describe, expect, it, vi } from "vitest";
+import { beforeEach, describe, expect, it, vi } from "vitest";
 import {
+  fireEvent,
   render as baseRender,
   screen,
   type RenderResult,
 } from "@testing-library/react";
-import { MantineProvider } from "@mantine/core";
 import { MemoryRouter } from "react-router-dom";
 import type { ReactElement } from "react";
 import type { ReviewDocument } from "@portal/api/documents";
+import { PortalTestProviders } from "@portal/test/TestQueryProvider";
+import { VIEW_PATHS, toPortalPath } from "@portal/contexts/ViewContext";
+import { UIProvider } from "@portal/contexts/UIContext";
 import { ReviewQueue } from "@portal/components/documents/ReviewQueue";
 
 // Deterministic i18n: keys returned verbatim.
@@ -18,6 +21,12 @@ vi.mock("react-i18next", () => ({
   }),
 }));
 
+const navigate = vi.fn();
+vi.mock("react-router-dom", async (importOriginal) => {
+  const actual = await importOriginal<typeof import("react-router-dom")>();
+  return { ...actual, useNavigate: () => navigate };
+});
+
 // Isolate ReviewQueue's own branching: stub the heavy children so the test
 // doesn't need TierProvider (DocumentDrawer → useTier) or the real table body.
 vi.mock("@portal/components/documents/DocumentDrawer", () => ({
@@ -30,7 +39,9 @@ vi.mock("@portal/components/documents/ReviewQueueTable", () => ({
 const render = (ui: ReactElement): RenderResult =>
   baseRender(
     <MemoryRouter>
-      <MantineProvider>{ui}</MantineProvider>
+      <PortalTestProviders>
+        <UIProvider>{ui}</UIProvider>
+      </PortalTestProviders>
     </MemoryRouter>,
   );
 
@@ -56,6 +67,10 @@ const DOC: ReviewDocument = {
 };
 
 describe("ReviewQueue", () => {
+  beforeEach(() => {
+    navigate.mockReset();
+  });
+
   it("hides the filter toolbar and shows CTAs when there are no documents", () => {
     render(<ReviewQueue documents={[]} loading={false} />);
 
@@ -76,6 +91,31 @@ describe("ReviewQueue", () => {
     ).not.toBeInTheDocument();
   });
 
+  it("opens the connect-a-source modal in place instead of navigating", async () => {
+    render(<ReviewQueue documents={[]} loading={false} />);
+
+    fireEvent.click(
+      screen.getByText("portal.documents.queue.empty.connectSource"),
+    );
+
+    expect(
+      await screen.findByText("portal.sources.types.folder.label"),
+    ).toBeInTheDocument();
+    expect(navigate).not.toHaveBeenCalled();
+  });
+
+  it("still navigates to the pipeline builder from the other empty-state CTA", () => {
+    render(<ReviewQueue documents={[]} loading={false} />);
+
+    fireEvent.click(
+      screen.getByText("portal.documents.queue.empty.createPipeline"),
+    );
+
+    expect(navigate).toHaveBeenCalledWith(
+      `${toPortalPath(VIEW_PATHS.pipelines)}/new`,
+    );
+  });
+
   it("shows the filter toolbar when documents exist", () => {
     render(<ReviewQueue documents={[DOC]} loading={false} />);
 
diff --git a/frontend/editor/src/portal/components/documents/ReviewQueue.tsx b/frontend/editor/src/portal/components/documents/ReviewQueue.tsx
index 2200237cf6..486e770364 100644
--- a/frontend/editor/src/portal/components/documents/ReviewQueue.tsx
+++ b/frontend/editor/src/portal/components/documents/ReviewQueue.tsx
@@ -15,6 +15,7 @@ import { VIEW_PATHS, toPortalPath } from "@portal/contexts/ViewContext";
 import { DocumentsIcon } from "@portal/components/icons";
 import { ReviewQueueTable } from "@portal/components/documents/ReviewQueueTable";
 import { DocumentDrawer } from "@portal/components/documents/DocumentDrawer";
+import { SourceModal } from "@portal/components/sources/SourceModal";
 
 type QueueFilter = "all" | "flagged" | "processed" | "in-review";
 
@@ -55,6 +56,7 @@ export function ReviewQueue({ documents, loading }: ReviewQueueProps) {
   const [filter, setFilter] = useState<QueueFilter>("all");
   const [query, setQuery] = useState("");
   const [selectedId, setSelectedId] = useState<string | null>(null);
+  const [connectSourceOpen, setConnectSourceOpen] = useState(false);
 
   const searched = useMemo(() => {
     const q = query.trim().toLowerCase();
@@ -156,9 +158,7 @@ export function ReviewQueue({ documents, loading }: ReviewQueueProps) {
               </Button>
               <Button
                 variant="secondary"
-                onClick={() =>
-                  navigate(`${toPortalPath(VIEW_PATHS.sources)}/new`)
-                }
+                onClick={() => setConnectSourceOpen(true)}
               >
                 {t("portal.documents.queue.empty.connectSource")}
               </Button>
@@ -175,6 +175,12 @@ export function ReviewQueue({ documents, loading }: ReviewQueueProps) {
       )}
 
       <DocumentDrawer doc={selected} onClose={() => setSelectedId(null)} />
+
+      <SourceModal
+        open={connectSourceOpen}
+        sourceId={null}
+        onClose={() => setConnectSourceOpen(false)}
+      />
     </div>
   );
 }
diff --git a/frontend/editor/src/portal/components/documents/ReviewQueueTable.tsx b/frontend/editor/src/portal/components/documents/ReviewQueueTable.tsx
index e63ea925c4..26befa90b9 100644
--- a/frontend/editor/src/portal/components/documents/ReviewQueueTable.tsx
+++ b/frontend/editor/src/portal/components/documents/ReviewQueueTable.tsx
@@ -1,12 +1,15 @@
 import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
-import LockRounded from "@mui/icons-material/LockRounded";
-import { Button, Chip, StatusBadge, Table, type TableColumn } from "@app/ui";
+import {
+  type CellLabel,
+  column,
+  DataTable,
+  type DataTableColumn,
+} from "@app/ui";
 import {
   classificationTone,
   DOCUMENT_STATUS_LABEL,
   DOCUMENT_STATUS_TONE,
-  PRODUCT_CHIP_TONE,
   type ReviewDocument,
 } from "@portal/api/documents";
 
@@ -15,160 +18,105 @@ interface ReviewQueueTableProps {
   onRowClick: (doc: ReviewDocument) => void;
 }
 
-function BoltIcon() {
-  return (
-    <svg
-      width="10"
-      height="10"
-      viewBox="0 0 24 24"
-      fill="currentColor"
-      aria-hidden
-    >
-      <path d="M13 2 4 14h6l-1 8 9-12h-6l1-8z" />
-    </svg>
-  );
-}
-
-function KebabIcon() {
-  return (
-    <svg
-      width="16"
-      height="16"
-      viewBox="0 0 24 24"
-      fill="currentColor"
-      aria-hidden
-    >
-      <circle cx="12" cy="5" r="1.6" />
-      <circle cx="12" cy="12" r="1.6" />
-      <circle cx="12" cy="19" r="1.6" />
-    </svg>
-  );
-}
-
 /** The document stream - one row per document your org has processed. */
 export function ReviewQueueTable({
   documents,
   onRowClick,
 }: ReviewQueueTableProps) {
   const { t } = useTranslation();
-  const columns = useMemo<TableColumn<ReviewDocument>[]>(
+  const columns = useMemo<DataTableColumn<ReviewDocument>[]>(
     () => [
-      {
+      column.entity({
         key: "document",
         header: t("portal.documents.table.columns.document"),
-        render: (d) => (
-          <div className="portal-documents__doc-cell">
-            <div className="portal-documents__doc-head">
-              <span className="portal-documents__name">{d.name}</span>
-              {d.classification && (
-                <Chip accent={classificationTone(d)} size="sm">
-                  {d.classification}
-                </Chip>
-              )}
-              {d.auto && (
-                <Chip accent="success" size="sm" leadingIcon={<BoltIcon />}>
-                  {t("portal.documents.table.auto")}
-                </Chip>
-              )}
-              {d.sensitive && (
-                // role="img" so the label is allowed and the icon reads as one thing: aria-label
-                // is ignored on a bare span, leaving the padlock silent.
-                <span
-                  className="portal-documents__lock"
-                  role="img"
-                  title={t("portal.documents.table.sensitiveTitle")}
-                  aria-label={t("portal.documents.table.sensitiveLabel")}
-                >
-                  <LockRounded style={{ fontSize: "0.95rem" }} />
-                </span>
-              )}
-            </div>
-            {d.note && <span className="portal-documents__note">{d.note}</span>}
-          </div>
-        ),
-      },
-      {
+        sortable: true,
+        primary: (d) => d.name,
+        note: (d) => d.note,
+      }),
+      column.labels({
+        key: "labels",
+        header: t("portal.documents.table.columns.labels", "Labels"),
+        get: (d) => {
+          const out: CellLabel[] = [];
+          if (d.classification) {
+            out.push({
+              label: d.classification,
+              accent: classificationTone(d),
+            });
+          }
+          if (d.auto) {
+            out.push({
+              label: t("portal.documents.table.auto"),
+              accent: "success",
+            });
+          }
+          if (d.sensitive) {
+            out.push({
+              label: t("portal.documents.table.sensitiveLabel"),
+              accent: "warning",
+            });
+          }
+          return out;
+        },
+      }),
+      column.text({
         key: "product",
         header: t("portal.documents.table.columns.product"),
-        width: "7rem",
-        render: (d) => (
-          <Chip accent={PRODUCT_CHIP_TONE[d.product]} size="sm" showDot={false}>
-            {d.product}
-          </Chip>
-        ),
-      },
-      {
+        sortable: true,
+        get: (d) => d.product,
+      }),
+      column.text({
         key: "action",
         header: t("portal.documents.table.columns.action"),
-        width: "12rem",
-        render: (d) =>
-          d.product === "Editor" || !d.action ? (
-            <span className="portal-documents__editor-action">
-              {t("portal.documents.table.editorAction")}
-            </span>
-          ) : (
-            <span className="portal-documents__action">{d.action}</span>
-          ),
-      },
-      {
+        sortable: true,
+        get: (d) =>
+          d.product === "Editor" || !d.action
+            ? t("portal.documents.table.editorAction")
+            : d.action,
+      }),
+      column.muted({
         key: "user",
         header: t("portal.documents.table.columns.user"),
-        width: "8rem",
-        render: (d) => (
-          <span className="portal-documents__muted">{d.user || "-"}</span>
-        ),
-      },
-      {
+        sortable: true,
+        get: (d) => d.user,
+      }),
+      column.badge({
         key: "status",
         header: t("portal.documents.table.columns.status"),
-        width: "10rem",
-        render: (d) => (
-          <StatusBadge tone={DOCUMENT_STATUS_TONE[d.status]} size="sm">
-            {t(DOCUMENT_STATUS_LABEL[d.status])}
-            {d.status === "in-review" && d.reviewer ? ` · ${d.reviewer}` : ""}
-          </StatusBadge>
-        ),
-      },
-      {
+        sortable: true,
+        get: (d) => ({
+          tone: DOCUMENT_STATUS_TONE[d.status],
+          label:
+            t(DOCUMENT_STATUS_LABEL[d.status]) +
+            (d.status === "in-review" && d.reviewer ? ` · ${d.reviewer}` : ""),
+        }),
+      }),
+      column.muted({
         key: "time",
         header: t("portal.documents.table.columns.time"),
-        width: "7rem",
-        render: (d) => (
-          <span className="portal-documents__muted">{d.time}</span>
-        ),
-      },
-      {
+        get: (d) => d.time,
+      }),
+      column.actions({
         key: "actions",
-        header: t("portal.documents.table.columns.actions"),
-        headerHidden: true,
-        width: "3rem",
-        render: (d) => (
-          <Button
-            variant="quiet"
-            size="sm"
-            shape="circle"
-            leftSection={<KebabIcon />}
-            aria-label={t("portal.documents.table.rowActions")}
-            onClick={(e) => {
-              e.stopPropagation();
-              onRowClick(d);
-            }}
-          />
-        ),
-      },
+        get: (d) => [
+          {
+            label: t("portal.documents.table.rowActions"),
+            glyph: "kebab",
+            iconOnly: true,
+            onClick: () => onRowClick(d),
+          },
+        ],
+      }),
     ],
     [t, onRowClick],
   );
 
   return (
-    <Table<ReviewDocument>
-      className="portal-documents__table"
+    <DataTable<ReviewDocument>
       columns={columns}
       rows={documents}
       rowKey={(d) => d.id}
       onRowClick={onRowClick}
-      // Every row carries its own actions button, which opens the same document.
-      rowsContainControls
       empty={t("portal.documents.table.empty")}
     />
   );
diff --git a/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx b/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx
index a61193f17a..28a220eb81 100644
--- a/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx
+++ b/frontend/editor/src/portal/components/editor-admin/InstanceHealthTable.tsx
@@ -1,17 +1,8 @@
 import { useTranslation } from "react-i18next";
-import {
-  Card,
-  Chip,
-  type ChipAccent,
-  EmptyState,
-  StatusBadge,
-  Table,
-  type TableColumn,
-} from "@app/ui";
+import { column, DataTable, type DataTableColumn, EmptyState } from "@app/ui";
 import {
   INSTANCE_STATUS_LABEL,
   INSTANCE_STATUS_TONE,
-  TARGET_META,
   type EditorInstance,
 } from "@portal/api/editorDeploy";
 
@@ -22,13 +13,6 @@ const TARGET_LABEL: Record<EditorInstance["target"], string> = {
   kubernetes: "K8s",
 };
 
-/** Map the target palette tone onto the shared Chip accent set. */
-const TARGET_CHIP_ACCENT: Record<"neutral" | "blue" | "purple", ChipAccent> = {
-  neutral: "neutral",
-  blue: "default",
-  purple: "premium",
-};
-
 interface Props {
   instances: EditorInstance[];
 }
@@ -37,69 +21,65 @@ interface Props {
 export function InstanceHealthTable({ instances }: Props) {
   const { t } = useTranslation();
 
-  const cols: TableColumn<EditorInstance>[] = [
-    {
+  const cols: DataTableColumn<EditorInstance>[] = [
+    column.entity({
       key: "host",
       header: t("portal.editorAdmin.health.columns.host"),
-      render: (i) => (
-        <div className="portal-editor__cell-stack">
-          <span className="portal-editor__cell-strong">{i.host}</span>
-          <span className="portal-editor__cell-muted">
-            <Chip
-              size="sm"
-              accent={TARGET_CHIP_ACCENT[TARGET_META[i.target].tone]}
-            >
-              {TARGET_LABEL[i.target]}
-            </Chip>
-          </span>
-        </div>
-      ),
-    },
-    {
+      sortable: true,
+      primary: (i) => i.host,
+    }),
+    column.text({
+      key: "target",
+      header: t("portal.editorAdmin.health.columns.target", "Target"),
+      sortable: true,
+      get: (i) => TARGET_LABEL[i.target],
+    }),
+    column.mono({
       key: "version",
       header: t("portal.editorAdmin.health.columns.version"),
-      render: (i) => <code className="portal-editor__mono">{i.version}</code>,
-    },
-    {
+      sortable: true,
+      get: (i) => i.version,
+    }),
+    column.mono({
       key: "region",
       header: t("portal.editorAdmin.health.columns.region"),
-      render: (i) => <span className="portal-editor__mono">{i.region}</span>,
-    },
-    {
+      sortable: true,
+      get: (i) => i.region,
+    }),
+    column.badge({
       key: "status",
       header: t("portal.editorAdmin.health.columns.status"),
-      render: (i) => (
-        <StatusBadge tone={INSTANCE_STATUS_TONE[i.status]} size="sm">
-          {t(INSTANCE_STATUS_LABEL[i.status])}
-        </StatusBadge>
-      ),
-    },
-    {
+      sortable: true,
+      get: (i) => ({
+        tone: INSTANCE_STATUS_TONE[i.status],
+        label: t(INSTANCE_STATUS_LABEL[i.status]),
+      }),
+    }),
+    column.muted({
       key: "lastSeen",
       header: t("portal.editorAdmin.health.columns.lastSeen"),
-      render: (i) => <span className="portal-editor__muted">{i.lastSeen}</span>,
-    },
-    {
+      get: (i) => i.lastSeen,
+    }),
+    column.number({
       key: "activeUsers",
       header: t("portal.editorAdmin.health.columns.activeUsers"),
-      align: "right",
-      render: (i) => (
-        <span className="portal-editor__mono">{i.activeUsers}</span>
-      ),
-    },
+      sortable: true,
+      get: (i) => i.activeUsers,
+    }),
   ];
 
   return (
-    <Card padding="none">
-      {instances.length === 0 ? (
+    <DataTable<EditorInstance>
+      columns={cols}
+      rows={instances}
+      rowKey={(i) => i.id}
+      empty={
         <EmptyState
           size="compact"
           title={t("portal.editorAdmin.health.empty.title")}
           description={t("portal.editorAdmin.health.empty.description")}
         />
-      ) : (
-        <Table columns={cols} rows={instances} rowKey={(i) => i.id} />
-      )}
-    </Card>
+      }
+    />
   );
 }
diff --git a/frontend/editor/src/portal/components/failures/FailureActionButtons.test.tsx b/frontend/editor/src/portal/components/failures/FailureActionButtons.test.tsx
index 7982eb15ce..2409a03ec9 100644
--- a/frontend/editor/src/portal/components/failures/FailureActionButtons.test.tsx
+++ b/frontend/editor/src/portal/components/failures/FailureActionButtons.test.tsx
@@ -70,6 +70,7 @@ function event(actions: FailureActionOffer[]): FileRunEvent {
     detail: "boom",
     policyId: "p1",
     runId: "r1",
+    sourceId: null,
     fileId: "f-1",
     actor: "someone@example.com",
     occurrences: 1,
diff --git a/frontend/editor/src/portal/components/failures/FileRunEventList.test.tsx b/frontend/editor/src/portal/components/failures/FileRunEventList.test.tsx
index 1458a1d64d..d60f855566 100644
--- a/frontend/editor/src/portal/components/failures/FileRunEventList.test.tsx
+++ b/frontend/editor/src/portal/components/failures/FileRunEventList.test.tsx
@@ -1,13 +1,19 @@
 import { beforeEach, describe, expect, it, vi } from "vitest";
 import { render as baseRender, screen, waitFor } from "@testing-library/react";
+import { MemoryRouter } from "react-router-dom";
 import { PortalTestProviders } from "@portal/test/TestQueryProvider";
 import type { FileRunEvent } from "@portal/api/fileRunEvents";
 
 /**
  * Tests for the list: the states it survives (loading, empty, no registry, refused),
- * plus replacing a row in place after acting and re-reading when the server refuses.
+ * plus replacing a row in place after acting, re-reading when the server refuses, and
+ * bringing itself into view when a notification links to it.
  */
 
+// jsdom does no layout and so implements no scrollIntoView.
+const scrollIntoView = vi.fn();
+Element.prototype.scrollIntoView = scrollIntoView;
+
 const fetchFileRunEvents = vi.fn();
 const applyFileRunEventAction = vi.fn();
 
@@ -21,7 +27,14 @@ vi.mock("react-i18next", () => ({
   useTranslation: () => ({
     // Faithful to i18next: a known key resolves, an unknown key falls back to
     // defaultValue. That is what exercises the server-key-then-generic chain.
-    t: (key: string, options?: { defaultValue?: string } | string) => {
+    // i18next's real signature: t(key, options) or t(key, defaultValue, options).
+    t: (
+      key: string,
+      second?: { defaultValue?: string } | string,
+      third?: Record<string, unknown>,
+    ) => {
+      const options = typeof second === "string" ? third : second;
+      const fallback = typeof second === "string" ? second : undefined;
       const known: Record<string, string> = {
         "portal.failures.kind.inputPasswordProtected.title":
           "Password-protected document",
@@ -30,18 +43,37 @@ vi.mock("react-i18next", () => ({
         "portal.failures.occurrences": "occurrences",
         "portal.failures.runReference": "Run r1",
         "portal.failures.stage.input": "Input",
+        "portal.failures.origin.tool": "Tool run",
+        "portal.failures.origin.policy": "Policy",
       };
+      if (key === "portal.failures.fromSource") {
+        return `From source ${(options as { source?: string })?.source ?? ""}`;
+      }
+      if (key === "portal.failures.reportedBy") {
+        return `Hit by ${(options as { actor?: string })?.actor ?? ""}`;
+      }
       if (known[key]) return known[key];
-      if (typeof options === "string") return options;
-      if (options?.defaultValue) return options.defaultValue;
-      return key;
+      if ((options as { defaultValue?: string })?.defaultValue) {
+        return (options as { defaultValue: string }).defaultValue;
+      }
+      return fallback ?? key;
     },
   }),
 }));
 
-// The list reads through the shared query hooks, and @app/ui needs Mantine.
-const render = (ui: Parameters<typeof baseRender>[0]) =>
-  baseRender(ui, { wrapper: PortalTestProviders });
+// The list reads through the shared query hooks, @app/ui needs Mantine, and the section reads
+// the location to know whether it was linked to.
+const render = (
+  ui: Parameters<typeof baseRender>[0],
+  at = "/processor/documents",
+) =>
+  baseRender(ui, {
+    wrapper: ({ children }) => (
+      <PortalTestProviders>
+        <MemoryRouter initialEntries={[at]}>{children}</MemoryRouter>
+      </PortalTestProviders>
+    ),
+  });
 
 const { FileRunEventList } =
   await import("@portal/components/failures/FileRunEventList");
@@ -61,6 +93,7 @@ function event(overrides: Partial<FileRunEvent> = {}): FileRunEvent {
     detail: "The PDF Document is passworded",
     policyId: "p1",
     runId: "r1",
+    sourceId: null,
     fileId: "f-1",
     actor: "dana@example.com",
     occurrences: 1,
@@ -84,6 +117,7 @@ describe("FileRunEventList", () => {
   beforeEach(() => {
     fetchFileRunEvents.mockReset();
     applyFileRunEventAction.mockReset();
+    scrollIntoView.mockReset();
     // The dev-panel test stubs import.meta.env.DEV, which would otherwise persist
     // into every test after it.
     vi.unstubAllEnvs();
@@ -102,6 +136,29 @@ describe("FileRunEventList", () => {
     expect(screen.getByText("The PDF Document is passworded")).toBeTruthy();
   });
 
+  it("names the person whose editor hit it, and marks it a tool run", async () => {
+    // The point of reporting editor failures: a reviewer needs the person, since a
+    // run reference means nothing for a failure that never had a run.
+    fetchFileRunEvents.mockResolvedValue([
+      event({ origin: "TOOL", actor: "dana@example.com", runId: null }),
+    ]);
+
+    render(<FileRunEventList />);
+
+    expect(await screen.findByText("Tool run")).toBeTruthy();
+    expect(screen.getByText("Hit by dana@example.com")).toBeTruthy();
+  });
+
+  it("names the source when no user was involved, since that is the only attribution", async () => {
+    fetchFileRunEvents.mockResolvedValue([
+      event({ origin: "POLICY", actor: null, sourceId: "src-s3-invoices" }),
+    ]);
+
+    render(<FileRunEventList />);
+
+    expect(await screen.findByText("From source src-s3-invoices")).toBeTruthy();
+  });
+
   it("shows the occurrence count only once a failure has repeated", async () => {
     fetchFileRunEvents.mockResolvedValue([event({ occurrences: 1 })]);
     const { unmount } = render(<FileRunEventList />);
@@ -175,6 +232,24 @@ describe("FileRunEventList", () => {
     expect(fetchFileRunEvents).toHaveBeenCalledTimes(1);
   });
 
+  it("brings itself into view when a notification links to it", async () => {
+    // It sits below the review queue, so landing on the page is not the same as seeing it.
+    fetchFileRunEvents.mockResolvedValue([event()]);
+
+    render(<FileRunEventList />, "/processor/documents#failures");
+
+    await waitFor(() => expect(scrollIntoView).toHaveBeenCalled());
+  });
+
+  it("stays where it is on an ordinary visit to the page", async () => {
+    fetchFileRunEvents.mockResolvedValue([event()]);
+
+    render(<FileRunEventList />);
+
+    await screen.findByText("Password-protected document");
+    expect(scrollIntoView).not.toHaveBeenCalled();
+  });
+
   it("re-reads from the server when an action is refused", async () => {
     // A 409 means someone else closed it first; the server's view wins.
     fetchFileRunEvents.mockResolvedValue([event()]);
diff --git a/frontend/editor/src/portal/components/failures/FileRunEventList.tsx b/frontend/editor/src/portal/components/failures/FileRunEventList.tsx
index 9b68c53b4c..31c0671f0b 100644
--- a/frontend/editor/src/portal/components/failures/FileRunEventList.tsx
+++ b/frontend/editor/src/portal/components/failures/FileRunEventList.tsx
@@ -1,12 +1,15 @@
-import { useState } from "react";
+import { useEffect, useRef, useState } from "react";
+import { useLocation } from "react-router-dom";
 import { useTranslation } from "react-i18next";
 import { Button, EmptyState, Skeleton, StatusBadge } from "@app/ui";
+import { PORTAL_FAILURES_ANCHOR } from "@app/routes/portalBasename";
 import type { FileRunEvent, FailureSeverity } from "@portal/api/fileRunEvents";
 import {
   useFileRunEvents,
   useFileRunEventActions,
 } from "@portal/queries/fileRunEvents";
 import { FailureActionButtons } from "@portal/components/failures/FailureActionButtons";
+import "@portal/theme/surface.css";
 
 /**
  * Recorded policy and pipeline failures, with the triage actions the server offered
@@ -28,6 +31,16 @@ export function FileRunEventList() {
   const { apply, refresh } = useFileRunEventActions();
   const [busy, setBusy] = useState<{ id: string; action: string } | null>(null);
   const [showJson, setShowJson] = useState(false);
+  const [clearing, setClearing] = useState(false);
+  const section = useRef<HTMLElement>(null);
+  const { hash, key } = useLocation();
+
+  // A fragment is only honoured on a real page load, not a client-side route change. Keyed on the
+  // navigation too: a second notification changes neither the path nor the hash.
+  useEffect(() => {
+    if (hash !== `#${PORTAL_FAILURES_ANCHOR}`) return;
+    section.current?.scrollIntoView({ behavior: "smooth", block: "start" });
+  }, [hash, key]);
 
   // A build without the proprietary module has no such route, and a caller who is
   // not a team leader gets a 403. Both mean there is nothing to show.
@@ -42,19 +55,57 @@ export function FileRunEventList() {
     }
   };
 
+  // Empties the queue so a test run starts from nothing. Sequential rather than
+  // concurrent: dismissing is cheap, and one request at a time keeps the failure
+  // obvious if the endpoint refuses one of them.
+  const dismissAll = async () => {
+    setClearing(true);
+    try {
+      for (const event of events ?? []) {
+        const dismiss = event.actions.find(
+          (action) => action.id === "DISMISS" && action.enabled,
+        );
+        if (dismiss) {
+          await apply(event.id, "DISMISS");
+        }
+      }
+    } finally {
+      setClearing(false);
+      await refresh();
+    }
+  };
+
   // Dev-only inspector for hand-checking classification against real uploads.
   // Vite folds `import.meta.env.DEV` to false, so builds drop this entirely.
   const debugPanel = !import.meta.env.DEV ? null : (
     <div className="portal-failures__debug">
       <Button variant="secondary" size="sm" onClick={() => void refresh()}>
-        Refresh failures
+        {t("portal.failures.debug.refresh", "Refresh failures")}
+      </Button>
+      <Button
+        variant="secondary"
+        size="sm"
+        disabled={clearing || (events?.length ?? 0) === 0}
+        onClick={() => void dismissAll()}
+      >
+        {clearing
+          ? t("portal.failures.debug.dismissing", "Dismissing...")
+          : t("portal.failures.debug.dismissAll", "Dismiss all ({{total}})", {
+              total: events?.length ?? 0,
+            })}
       </Button>
       <Button
         variant="secondary"
         size="sm"
         onClick={() => setShowJson((shown) => !shown)}
       >
-        {showJson ? "Hide" : "Show"} raw JSON ({events?.length ?? 0})
+        {showJson
+          ? t("portal.failures.debug.hideJson", "Hide raw JSON ({{total}})", {
+              total: events?.length ?? 0,
+            })
+          : t("portal.failures.debug.showJson", "Show raw JSON ({{total}})", {
+              total: events?.length ?? 0,
+            })}
       </Button>
       <Button
         variant="secondary"
@@ -65,7 +116,7 @@ export function FileRunEventList() {
           )
         }
       >
-        Copy JSON
+        {t("portal.failures.debug.copyJson", "Copy JSON")}
       </Button>
       {showJson && (
         <pre className="portal-failures__debug-json">
@@ -82,7 +133,11 @@ export function FileRunEventList() {
   }
 
   return (
-    <section className="portal-failures">
+    <section
+      className="portal-failures"
+      id={PORTAL_FAILURES_ANCHOR}
+      ref={section}
+    >
       <h2 className="portal-failures__heading">
         {t("portal.failures.title", "Failures")}
       </h2>
@@ -137,7 +192,7 @@ function FailureBody({
   return (
     <ul className="portal-failures__list">
       {events.map((event) => (
-        <li key={event.id} className="portal-failures__row">
+        <li key={event.id} className="portal-surface portal-failures__row">
           <div className="portal-failures__meta">
             <StatusBadge tone={SEVERITY_TONE[event.severity]}>
               {t(
@@ -157,8 +212,32 @@ function FailureBody({
                 })}
               </span>
             )}
+            <span className="portal-failures__origin">
+              {t(
+                `portal.failures.origin.${event.origin.toLowerCase()}`,
+                event.origin,
+              )}
+            </span>
           </div>
 
+          {/* Who or what it came from. An unattended file has no user, so the source
+            is the only attribution there is. */}
+          {event.actor ? (
+            <div className="portal-failures__actor">
+              {t("portal.failures.reportedBy", "Hit by {{actor}}", {
+                actor: event.actor,
+              })}
+            </div>
+          ) : (
+            event.sourceId && (
+              <div className="portal-failures__actor">
+                {t("portal.failures.fromSource", "From source {{source}}", {
+                  source: event.sourceId,
+                })}
+              </div>
+            )
+          )}
+
           {/* A reference, not a name. The record deliberately holds no document
             identity, so a reviewer sees which run failed, never which file. */}
           {event.runId && (
diff --git a/frontend/editor/src/portal/components/failures/failures.css b/frontend/editor/src/portal/components/failures/failures.css
index 0ac874dabc..9e43361e43 100644
--- a/frontend/editor/src/portal/components/failures/failures.css
+++ b/frontend/editor/src/portal/components/failures/failures.css
@@ -36,9 +36,6 @@
 }
 
 .portal-failures__row {
-  border: 1px solid var(--c-border);
-  border-radius: 8px;
-  background: var(--c-surface);
   padding: 0.8rem 0.95rem;
 }
 
@@ -68,6 +65,19 @@
 
 /* The raw failure message. Monospace because for an unclassified failure this is
    a stack-trace-ish diagnostic, not prose. */
+.portal-failures__origin {
+  font-size: 0.75rem;
+  color: var(--c-text-subtle);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-sm, 0.25rem);
+  padding: 0 0.35rem;
+}
+
+.portal-failures__actor {
+  font-size: 0.8125rem;
+  color: var(--c-text-muted);
+}
+
 .portal-failures__detail {
   font-family: var(--font-mono, ui-monospace, monospace);
   font-size: 0.76rem;
diff --git a/frontend/editor/src/portal/components/infrastructure/ApiKeysTab.tsx b/frontend/editor/src/portal/components/infrastructure/ApiKeysTab.tsx
index 6a2817d12d..a826e18caa 100644
--- a/frontend/editor/src/portal/components/infrastructure/ApiKeysTab.tsx
+++ b/frontend/editor/src/portal/components/infrastructure/ApiKeysTab.tsx
@@ -52,6 +52,7 @@ export function ApiKeysTab() {
           sub={t("portal.infrastructure.apiKeys.subheading")}
         />
         <Button
+          variant="secondary"
           size="sm"
           onClick={() => setModalOpen(true)}
           leftSection={<span aria-hidden>+</span>}
diff --git a/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx b/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx
index da9831ec4c..548934d58a 100644
--- a/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx
+++ b/frontend/editor/src/portal/components/infrastructure/AuditTab.tsx
@@ -2,15 +2,14 @@ import { useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
 import {
   Button,
-  Card,
+  column,
+  DataTable,
+  type DataTableColumn,
   EmptyState,
   MetricCard,
   MetricStrip,
-  StatusBadge,
-  Table,
   Tabs,
   type TabItem,
-  type TableColumn,
 } from "@app/ui";
 import { useTier } from "@portal/contexts/TierContext";
 import { useSectionFlags } from "@portal/hooks/useAsync";
@@ -22,16 +21,17 @@ import {
 } from "@portal/api/infrastructure";
 import { AuditExportModal } from "@portal/components/infrastructure/AuditExportModal";
 import { SectionHeader } from "@portal/components/infrastructure/SectionHeader";
-import { TableSkeleton } from "@portal/components/infrastructure/TableSkeleton";
 import {
   AUDIT_CAT_LABEL,
-  AUDIT_CAT_TONE,
   AUDIT_STATUS_LABEL,
   AUDIT_TONE,
 } from "@portal/components/infrastructure/infraFormat";
 
 type AuditFilter = "all" | AuditCategory;
 
+// Enterprise-only: the Infrastructure view disables this tab for non-enterprise
+// instances, so this component only ever renders when entitled. The backend still
+// scopes the log to admins / team leads (403 -> forbidden state below).
 export function AuditTab() {
   const { t } = useTranslation();
   const { tier } = useTier();
@@ -57,55 +57,52 @@ export function AuditTab() {
     },
   ];
 
-  const cols: TableColumn<AuditEvent>[] = [
-    {
+  const cols: DataTableColumn<AuditEvent>[] = [
+    column.mono({
       key: "timestamp",
       header: t("portal.infrastructure.audit.columns.timestamp"),
-      render: (e) => <span className="portal-infra__mono">{e.timestamp}</span>,
-    },
-    {
+      sortable: true,
+      get: (e) => e.timestamp,
+    }),
+    column.text({
       key: "event",
       header: t("portal.infrastructure.audit.columns.event"),
-      render: (e) => (
-        <div className="portal-infra__event">
-          <StatusBadge tone={AUDIT_CAT_TONE[e.category]} size="sm">
-            {t(AUDIT_CAT_LABEL[e.category])}
-          </StatusBadge>
-          <span>{e.action}</span>
-        </div>
-      ),
-    },
-    {
+      sortable: true,
+      // "Category: action" on one line - the category as a bold label, no
+      // status-coloured dot. Colour is reserved for the Status column, where it
+      // actually signals an outcome.
+      label: (e) => t(AUDIT_CAT_LABEL[e.category]),
+      get: (e) => e.action,
+    }),
+    column.mono({
       key: "actor",
       header: t("portal.infrastructure.audit.columns.actor"),
-      render: (e) => <span className="portal-infra__mono">{e.actor}</span>,
-    },
-    {
+      sortable: true,
+      get: (e) => e.actor,
+    }),
+    column.text({
       key: "target",
       header: t("portal.infrastructure.audit.columns.target"),
-      render: (e) => e.target,
-    },
-    {
+      sortable: true,
+      get: (e) => e.target,
+    }),
+    column.badge({
       key: "status",
       header: t("portal.infrastructure.audit.columns.status"),
-      render: (e) => (
-        <StatusBadge tone={AUDIT_TONE[e.status]} size="sm">
-          {t(AUDIT_STATUS_LABEL[e.status])}
-        </StatusBadge>
-      ),
-    },
-    {
+      sortable: true,
+      get: (e) => ({
+        tone: AUDIT_TONE[e.status],
+        label: t(AUDIT_STATUS_LABEL[e.status]),
+      }),
+    }),
+    column.number({
       key: "latency",
       header: t("portal.infrastructure.audit.columns.latency"),
-      align: "right",
-      render: (e) => (
-        <span className="portal-infra__mono">
-          {t("portal.infrastructure.audit.latencyValue", {
-            value: e.latencyMs,
-          })}
-        </span>
-      ),
-    },
+      sortable: true,
+      get: (e) => e.latencyMs,
+      format: (n) =>
+        t("portal.infrastructure.audit.latencyValue", { value: n }),
+    }),
   ];
 
   const state = useAuditLog(tier);
@@ -171,31 +168,31 @@ export function AuditTab() {
         />
       )}
 
-      <Card padding="none">
-        {isLoading && <TableSkeleton rows={6} cols={6} />}
-        {!isLoading && forbidden && (
-          <EmptyState
-            size="compact"
-            title={t("portal.infrastructure.audit.forbidden.title")}
-            description={t("portal.infrastructure.audit.forbidden.description")}
-          />
-        )}
-        {!isLoading && !forbidden && isEmpty && (
-          <EmptyState
-            size="compact"
-            title={t("portal.infrastructure.audit.empty.title")}
-            description={t("portal.infrastructure.audit.empty.description")}
-          />
-        )}
-        {!isEmpty && data && (
-          <Table
-            columns={cols}
-            rows={rows}
-            rowKey={(e) => e.id}
-            empty={t("portal.infrastructure.audit.noEventsInCategory")}
-          />
-        )}
-      </Card>
+      <DataTable
+        columns={cols}
+        rows={rows}
+        rowKey={(e) => e.id}
+        loading={isLoading}
+        empty={
+          forbidden ? (
+            <EmptyState
+              size="compact"
+              title={t("portal.infrastructure.audit.forbidden.title")}
+              description={t(
+                "portal.infrastructure.audit.forbidden.description",
+              )}
+            />
+          ) : isEmpty ? (
+            <EmptyState
+              size="compact"
+              title={t("portal.infrastructure.audit.empty.title")}
+              description={t("portal.infrastructure.audit.empty.description")}
+            />
+          ) : (
+            t("portal.infrastructure.audit.noEventsInCategory")
+          )
+        }
+      />
     </div>
   );
 }
diff --git a/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.stories.tsx b/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.stories.tsx
deleted file mode 100644
index de559bd344..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.stories.tsx
+++ /dev/null
@@ -1,46 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { http, HttpResponse, delay } from "msw";
-import { DeploymentsTab } from "@portal/components/infrastructure/DeploymentsTab";
-import "@portal/views/Infrastructure.css";
-
-const meta: Meta<typeof DeploymentsTab> = {
-  title: "Portal/Infrastructure/DeploymentsTab",
-  component: DeploymentsTab,
-  parameters: { layout: "padded" },
-  decorators: [
-    (S) => (
-      <div style={{ maxWidth: "72rem" }}>
-        <S />
-      </div>
-    ),
-  ],
-};
-export default meta;
-type Story = StoryObj<typeof DeploymentsTab>;
-
-export const Default: Story = {};
-
-export const Loading: Story = {
-  parameters: {
-    msw: {
-      handlers: [
-        http.get("/v1/infrastructure/deployments", async () => {
-          await delay("infinite");
-          return HttpResponse.json({ regions: [], recent: [] });
-        }),
-      ],
-    },
-  },
-};
-
-export const Empty: Story = {
-  parameters: {
-    msw: {
-      handlers: [
-        http.get("/v1/infrastructure/deployments", () =>
-          HttpResponse.json({ regions: [], recent: [] }),
-        ),
-      ],
-    },
-  },
-};
diff --git a/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx b/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx
deleted file mode 100644
index 41a9b5c561..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/DeploymentsTab.tsx
+++ /dev/null
@@ -1,233 +0,0 @@
-import { useTranslation } from "react-i18next";
-import {
-  Card,
-  Chip,
-  EmptyState,
-  ProgressBar,
-  StatusBadge,
-  Table,
-  type TableColumn,
-} from "@app/ui";
-import { useTier } from "@portal/contexts/TierContext";
-import { useAsync, useSectionFlags } from "@portal/hooks/useAsync";
-import {
-  fetchDeployments,
-  type DeploymentsResponse,
-  type DeploymentRegion,
-  type RecentDeployment,
-} from "@portal/api/infrastructure";
-import { SectionHeader } from "@portal/components/infrastructure/SectionHeader";
-import { TableSkeleton } from "@portal/components/infrastructure/TableSkeleton";
-import {
-  DEPLOY_LABEL,
-  DEPLOY_TONE,
-  pct,
-  REGION_LABEL,
-  REGION_TONE,
-} from "@portal/components/infrastructure/infraFormat";
-
-export function DeploymentsTab() {
-  const { t } = useTranslation();
-  const { tier } = useTier();
-  const state = useAsync<DeploymentsResponse>(
-    () => fetchDeployments(tier),
-    [tier],
-  );
-  const { data } = state;
-  const { isLoading, isEmpty } = useSectionFlags(state);
-
-  const regionCols: TableColumn<DeploymentRegion>[] = [
-    {
-      key: "name",
-      header: t("portal.infrastructure.deployments.regionColumns.region"),
-      render: (r) => (
-        <div className="portal-infra__cell-stack">
-          <span className="portal-infra__cell-strong">{r.name}</span>
-          <code className="portal-infra__cell-code">{r.code}</code>
-        </div>
-      ),
-    },
-    {
-      key: "latency",
-      header: t("portal.infrastructure.deployments.regionColumns.latency"),
-      align: "right",
-      render: (r) => (
-        <span className="portal-infra__mono">
-          {t("portal.infrastructure.deployments.msValue", {
-            value: r.latencyMs,
-          })}
-        </span>
-      ),
-    },
-    {
-      key: "load",
-      header: t("portal.infrastructure.deployments.regionColumns.load"),
-      width: "9rem",
-      render: (r) => (
-        <div className="portal-infra__load">
-          <ProgressBar
-            value={r.load}
-            thresholded
-            height={6}
-            label={t("portal.infrastructure.deployments.loadAria", {
-              name: r.name,
-            })}
-          />
-          <span className="portal-infra__load-pct">{pct(r.load)}</span>
-        </div>
-      ),
-    },
-    {
-      key: "status",
-      header: t("portal.infrastructure.deployments.regionColumns.status"),
-      render: (r) => (
-        <StatusBadge tone={REGION_TONE[r.status]} size="sm">
-          {t(REGION_LABEL[r.status])}
-        </StatusBadge>
-      ),
-    },
-    {
-      key: "version",
-      header: t("portal.infrastructure.deployments.regionColumns.version"),
-      render: (r) => (
-        <code className="portal-infra__cell-code">{r.version}</code>
-      ),
-    },
-    {
-      key: "uptime",
-      header: t("portal.infrastructure.deployments.regionColumns.uptime"),
-      align: "right",
-      render: (r) => (
-        <span className="portal-infra__mono">{pct(r.uptime, 3)}</span>
-      ),
-    },
-    {
-      key: "instances",
-      header: t("portal.infrastructure.deployments.regionColumns.instances"),
-      align: "right",
-      render: (r) => <span className="portal-infra__mono">{r.instances}</span>,
-    },
-    {
-      key: "throughput",
-      header: t("portal.infrastructure.deployments.regionColumns.throughput"),
-      align: "right",
-      render: (r) => (
-        <span className="portal-infra__mono">
-          {t("portal.infrastructure.deployments.throughputValue", {
-            value: r.throughput.toLocaleString(),
-          })}
-        </span>
-      ),
-    },
-    {
-      key: "p99",
-      header: t("portal.infrastructure.deployments.regionColumns.p99"),
-      align: "right",
-      render: (r) => (
-        <span className="portal-infra__mono">
-          {t("portal.infrastructure.deployments.msValue", { value: r.p99Ms })}
-        </span>
-      ),
-    },
-  ];
-
-  const deployCols: TableColumn<RecentDeployment>[] = [
-    {
-      key: "version",
-      header: t("portal.infrastructure.deployments.deployColumns.version"),
-      render: (d) => (
-        <code className="portal-infra__cell-code">{d.version}</code>
-      ),
-    },
-    {
-      key: "environment",
-      header: t("portal.infrastructure.deployments.deployColumns.environment"),
-      render: (d) => (
-        <Chip
-          accent={
-            d.environment === "production"
-              ? "default"
-              : d.environment === "canary"
-                ? "premium"
-                : "neutral"
-          }
-          size="sm"
-        >
-          {d.environment}
-        </Chip>
-      ),
-    },
-    {
-      key: "product",
-      header: t("portal.infrastructure.deployments.deployColumns.product"),
-      render: (d) => d.product,
-    },
-    {
-      key: "status",
-      header: t("portal.infrastructure.deployments.deployColumns.status"),
-      render: (d) => (
-        <StatusBadge tone={DEPLOY_TONE[d.status]} size="sm">
-          {t(DEPLOY_LABEL[d.status])}
-        </StatusBadge>
-      ),
-    },
-    {
-      key: "deployedBy",
-      header: t("portal.infrastructure.deployments.deployColumns.deployedBy"),
-      render: (d) => <span className="portal-infra__mono">{d.deployedBy}</span>,
-    },
-    {
-      key: "timestamp",
-      header: t("portal.infrastructure.deployments.deployColumns.when"),
-      align: "right",
-      render: (d) => <span className="portal-infra__muted">{d.timestamp}</span>,
-    },
-  ];
-
-  return (
-    <div className="portal-infra__stack">
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.deployments.regions.heading")}
-          sub={t("portal.infrastructure.deployments.regions.subheading")}
-        />
-        <Card padding="none">
-          {isLoading && <TableSkeleton rows={3} cols={9} />}
-          {isEmpty && (
-            <EmptyState
-              size="compact"
-              title={t("portal.infrastructure.deployments.regions.empty.title")}
-              description={t(
-                "portal.infrastructure.deployments.regions.empty.description",
-              )}
-            />
-          )}
-          {!isEmpty && data && data.regions.length > 0 && (
-            <Table
-              columns={regionCols}
-              rows={data.regions}
-              rowKey={(r) => r.code}
-            />
-          )}
-        </Card>
-      </section>
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.deployments.recent.heading")}
-          sub={t("portal.infrastructure.deployments.recent.subheading")}
-        />
-        <Card padding="none">
-          {isLoading && <TableSkeleton rows={4} cols={6} />}
-          {data && data.recent.length > 0 && (
-            <Table
-              columns={deployCols}
-              rows={data.recent}
-              rowKey={(d) => d.id}
-            />
-          )}
-        </Card>
-      </section>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/infrastructure/ModelsTab.stories.tsx b/frontend/editor/src/portal/components/infrastructure/ModelsTab.stories.tsx
deleted file mode 100644
index c69fd63988..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/ModelsTab.stories.tsx
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { ModelsTab } from "@portal/components/infrastructure/ModelsTab";
-import "@portal/views/Infrastructure.css";
-
-// Data is served by the registered MSW infrastructure handler; the tier global
-// (toolbar) drives which catalogue + routing slice each story renders.
-const meta = {
-  title: "Infrastructure/ModelsTab",
-  component: ModelsTab,
-  parameters: { layout: "padded" },
-} satisfies Meta<typeof ModelsTab>;
-
-export default meta;
-
-type Story = StoryObj<typeof meta>;
-
-/** Pro: full managed catalogue plus routing control. */
-export const Pro: Story = {
-  globals: { tier: "pro" },
-};
-
-/** Free: two managed models, no routing (upgrade nudge). */
-export const Free: Story = {
-  globals: { tier: "free" },
-};
-
-/** Enterprise: adds bring-your-own / on-prem models and per-region pinning. */
-export const Enterprise: Story = {
-  globals: { tier: "enterprise" },
-};
diff --git a/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx b/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx
deleted file mode 100644
index 505f41ac24..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/ModelsTab.tsx
+++ /dev/null
@@ -1,272 +0,0 @@
-import { useTranslation } from "react-i18next";
-import {
-  Banner,
-  Card,
-  Chip,
-  EmptyState,
-  MetricCard,
-  MetricStrip,
-  ProgressBar,
-  Select,
-  StatusBadge,
-  Table,
-  type SelectOption,
-  type TableColumn,
-} from "@app/ui";
-import { useTier } from "@portal/contexts/TierContext";
-import { useAsync, useSectionFlags } from "@portal/hooks/useAsync";
-import {
-  fetchModels,
-  type ModelEntry,
-  type ModelsResponse,
-  type RoutingRule,
-} from "@portal/api/infrastructure";
-import { SectionHeader } from "@portal/components/infrastructure/SectionHeader";
-import { TableSkeleton } from "@portal/components/infrastructure/TableSkeleton";
-import {
-  MODEL_LABEL,
-  MODEL_PROVIDER_LABEL,
-  MODEL_TONE,
-  MODEL_TYPE_LABEL,
-  MODEL_TYPE_TONE,
-  modelCost,
-  pct,
-} from "@portal/components/infrastructure/infraFormat";
-
-export function ModelsTab() {
-  const { t } = useTranslation();
-  const { tier } = useTier();
-  const state = useAsync<ModelsResponse>(() => fetchModels(tier), [tier]);
-  const { data } = state;
-  const { isLoading, isEmpty } = useSectionFlags(state);
-
-  const modelCols: TableColumn<ModelEntry>[] = [
-    {
-      key: "name",
-      header: t("portal.infrastructure.models.columns.model"),
-      render: (m) => (
-        <div className="portal-infra__cell-stack">
-          <span className="portal-infra__cell-strong">{m.name}</span>
-          <Chip accent="neutral" size="sm">
-            {MODEL_PROVIDER_LABEL[m.provider]}
-          </Chip>
-        </div>
-      ),
-    },
-    {
-      key: "type",
-      header: t("portal.infrastructure.models.columns.type"),
-      render: (m) => (
-        <Chip accent={MODEL_TYPE_TONE[m.type]} size="sm">
-          {t(MODEL_TYPE_LABEL[m.type])}
-        </Chip>
-      ),
-    },
-    {
-      key: "status",
-      header: t("portal.infrastructure.models.columns.status"),
-      render: (m) => (
-        <StatusBadge tone={MODEL_TONE[m.status]} size="sm">
-          {t(MODEL_LABEL[m.status])}
-        </StatusBadge>
-      ),
-    },
-    {
-      key: "load",
-      header: t("portal.infrastructure.models.columns.load"),
-      width: "9rem",
-      render: (m) => (
-        <div className="portal-infra__load">
-          <ProgressBar
-            value={m.load}
-            thresholded
-            height={6}
-            label={t("portal.infrastructure.models.loadAria", { name: m.name })}
-          />
-          <span className="portal-infra__load-pct">{pct(m.load)}</span>
-        </div>
-      ),
-    },
-    {
-      key: "latency",
-      header: t("portal.infrastructure.models.columns.latency"),
-      align: "right",
-      render: (m) => (
-        <span className="portal-infra__mono">
-          {t("portal.infrastructure.models.msValue", { value: m.latencyMs })}
-        </span>
-      ),
-    },
-    {
-      key: "cost",
-      header: t("portal.infrastructure.models.columns.cost"),
-      align: "right",
-      render: (m) => (
-        <span className="portal-infra__mono">
-          {modelCost(t, m.cost, m.costUnit)}
-        </span>
-      ),
-    },
-    {
-      key: "version",
-      header: t("portal.infrastructure.models.columns.version"),
-      render: (m) => (
-        <code className="portal-infra__cell-code">{m.version}</code>
-      ),
-    },
-  ];
-
-  // Free has no routing control: the catalogue is read-only and the routing
-  // table is replaced by an upgrade nudge.
-  const canRoute = tier !== "free";
-
-  // Routing overrides are interactive but unbacked — assigning a model just
-  // moves local UI state until the routing endpoint exists.
-  // TODO(backend): PUT /v1/infrastructure/models/routing { rules }
-  const modelOptions: SelectOption[] =
-    data?.models
-      .filter((m) => m.status !== "disabled")
-      .map((m) => ({ value: m.id, label: m.name })) ?? [];
-
-  const routingCols: TableColumn<RoutingRule>[] = [
-    {
-      key: "operation",
-      header: t("portal.infrastructure.models.routingColumns.operation"),
-      render: (r) => (
-        <div className="portal-infra__cell-stack">
-          <span className="portal-infra__cell-strong">{r.operation}</span>
-          {r.isDefault && (
-            <Chip accent="default" size="sm">
-              {t("portal.infrastructure.models.routingColumns.default")}
-            </Chip>
-          )}
-        </div>
-      ),
-    },
-    {
-      key: "docType",
-      header: t("portal.infrastructure.models.routingColumns.docType"),
-      render: (r) => r.docType,
-    },
-    {
-      key: "modelId",
-      header: t("portal.infrastructure.models.routingColumns.routedTo"),
-      width: "16rem",
-      render: (r) => (
-        <Select
-          inputSize="sm"
-          options={modelOptions}
-          defaultValue={r.modelId}
-          aria-label={t(
-            "portal.infrastructure.models.routingColumns.modelForAria",
-            {
-              operation: r.operation,
-            },
-          )}
-        />
-      ),
-    },
-  ];
-
-  return (
-    <div className="portal-infra__stack">
-      <SectionHeader
-        title={t("portal.infrastructure.models.heading")}
-        sub={t("portal.infrastructure.models.subheading")}
-      />
-
-      {data && (
-        <MetricStrip layout="row">
-          <MetricCard
-            label={t("portal.infrastructure.models.metrics.activeModels")}
-            value={data.summary.activeModels}
-          />
-          <MetricCard
-            label={t("portal.infrastructure.models.metrics.avgLatency")}
-            value={t("portal.infrastructure.models.msValue", {
-              value: data.summary.avgLatencyMs,
-            })}
-          />
-          <MetricCard
-            label={t("portal.infrastructure.models.metrics.monthlySpend")}
-            value={
-              data.summary.monthlySpend > 0
-                ? `$${data.summary.monthlySpend.toLocaleString()}`
-                : t("portal.infrastructure.models.metrics.included")
-            }
-          />
-        </MetricStrip>
-      )}
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.models.catalogue.heading")}
-          sub={
-            tier === "enterprise"
-              ? t("portal.infrastructure.models.catalogue.subEnterprise")
-              : t("portal.infrastructure.models.catalogue.sub")
-          }
-        />
-        <Card padding="none">
-          {isLoading && <TableSkeleton rows={4} cols={7} />}
-          {isEmpty && (
-            <EmptyState
-              size="compact"
-              title={t("portal.infrastructure.models.catalogue.empty.title")}
-              description={t(
-                "portal.infrastructure.models.catalogue.empty.description",
-              )}
-            />
-          )}
-          {!isEmpty && data && data.models.length > 0 && (
-            <Table
-              columns={modelCols}
-              rows={data.models}
-              rowKey={(m) => m.id}
-            />
-          )}
-        </Card>
-      </section>
-
-      {tier === "enterprise" && (
-        <Banner
-          tone="info"
-          title={t("portal.infrastructure.models.byom.title")}
-          description={t("portal.infrastructure.models.byom.description")}
-        />
-      )}
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.models.routing.heading")}
-          sub={
-            canRoute
-              ? t("portal.infrastructure.models.routing.sub")
-              : t("portal.infrastructure.models.routing.subLocked")
-          }
-        />
-        {canRoute ? (
-          <Card padding="none">
-            {isLoading && <TableSkeleton rows={4} cols={3} />}
-            {!isEmpty && data && (
-              <Table
-                columns={routingCols}
-                rows={data.routing}
-                rowKey={(r) => r.id}
-                empty={t("portal.infrastructure.models.routing.empty")}
-              />
-            )}
-          </Card>
-        ) : (
-          <Banner
-            tone="info"
-            title={t("portal.infrastructure.models.routing.lockedBanner.title")}
-            description={t(
-              "portal.infrastructure.models.routing.lockedBanner.description",
-            )}
-          />
-        )}
-      </section>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/infrastructure/SecurityTab.stories.tsx b/frontend/editor/src/portal/components/infrastructure/SecurityTab.stories.tsx
deleted file mode 100644
index 324c841043..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/SecurityTab.stories.tsx
+++ /dev/null
@@ -1,58 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { http, HttpResponse, delay } from "msw";
-import { SecurityTab } from "@portal/components/infrastructure/SecurityTab";
-import "@portal/views/Infrastructure.css";
-
-const meta: Meta<typeof SecurityTab> = {
-  title: "Portal/Infrastructure/SecurityTab",
-  component: SecurityTab,
-  parameters: { layout: "padded" },
-  decorators: [
-    (S) => (
-      <div style={{ maxWidth: "72rem" }}>
-        <S />
-      </div>
-    ),
-  ],
-};
-export default meta;
-type Story = StoryObj<typeof SecurityTab>;
-
-export const Default: Story = {};
-
-// Enterprise unlocks HYOK key custody (with a live rotate affordance) and the
-// full attested compliance set, including PCI in-scope.
-export const Enterprise: Story = {
-  globals: { tier: "enterprise" },
-};
-
-// Free runs on Stirling-managed keys (rotate disabled, upgrade nudge) and a
-// trimmed attestation set with HIPAA/PCI not-applicable.
-export const Free: Story = {
-  globals: { tier: "free" },
-};
-
-export const Loading: Story = {
-  parameters: {
-    msw: {
-      handlers: [
-        http.get("/v1/infrastructure/security", async () => {
-          await delay("infinite");
-          return HttpResponse.json(null);
-        }),
-      ],
-    },
-  },
-};
-
-export const Unavailable: Story = {
-  parameters: {
-    msw: {
-      handlers: [
-        http.get("/v1/infrastructure/security", () =>
-          HttpResponse.json(null, { status: 503 }),
-        ),
-      ],
-    },
-  },
-};
diff --git a/frontend/editor/src/portal/components/infrastructure/SecurityTab.tsx b/frontend/editor/src/portal/components/infrastructure/SecurityTab.tsx
deleted file mode 100644
index ccc1b1d3c5..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/SecurityTab.tsx
+++ /dev/null
@@ -1,342 +0,0 @@
-import { useState } from "react";
-import { useTranslation } from "react-i18next";
-import {
-  Banner,
-  Button,
-  Card,
-  Chip,
-  EmptyState,
-  RadioGroup,
-  Skeleton,
-  StatusBadge,
-  Table,
-  type RadioOption,
-  type TableColumn,
-} from "@app/ui";
-import { useTier } from "@portal/contexts/TierContext";
-import { useAsync, useSectionFlags } from "@portal/hooks/useAsync";
-import {
-  fetchSecurity,
-  type AccessPolicy,
-  type DataResidency,
-  type SecurityConfig,
-} from "@portal/api/infrastructure";
-import { SectionHeader } from "@portal/components/infrastructure/SectionHeader";
-import {
-  ATTESTATION_LABEL,
-  ATTESTATION_TONE,
-  CERT_LABEL,
-  CERT_TONE,
-  KEY_MODE_LABEL,
-  KEY_MODE_TONE,
-} from "@portal/components/infrastructure/infraFormat";
-
-export function SecurityTab() {
-  const { t } = useTranslation();
-  const { tier } = useTier();
-  const state = useAsync<SecurityConfig>(() => fetchSecurity(tier), [tier]);
-  const { data } = state;
-  const { isLoading, isEmpty } = useSectionFlags(state);
-
-  const ACCESS_OPTS: RadioOption<AccessPolicy>[] = [
-    {
-      value: "stirling",
-      label: t("portal.infrastructure.security.access.stirling.label"),
-      description: t(
-        "portal.infrastructure.security.access.stirling.description",
-      ),
-    },
-    {
-      value: "byok",
-      label: t("portal.infrastructure.security.access.byok.label"),
-      description: t("portal.infrastructure.security.access.byok.description"),
-    },
-    {
-      value: "hyok",
-      label: t("portal.infrastructure.security.access.hyok.label"),
-      description: t("portal.infrastructure.security.access.hyok.description"),
-    },
-  ];
-
-  const RESIDENCY_OPTS: RadioOption<DataResidency>[] = [
-    {
-      value: "us",
-      label: t("portal.infrastructure.security.residency.us.label"),
-      description: t("portal.infrastructure.security.residency.us.description"),
-    },
-    {
-      value: "eu",
-      label: t("portal.infrastructure.security.residency.eu.label"),
-      description: t("portal.infrastructure.security.residency.eu.description"),
-    },
-    {
-      value: "apac",
-      label: t("portal.infrastructure.security.residency.apac.label"),
-      description: t(
-        "portal.infrastructure.security.residency.apac.description",
-      ),
-    },
-  ];
-
-  const ipCols: TableColumn<SecurityConfig["ipAllowlist"][number]>[] = [
-    {
-      key: "label",
-      header: t("portal.infrastructure.security.ipColumns.label"),
-      render: (e) => e.label,
-    },
-    {
-      key: "cidr",
-      header: t("portal.infrastructure.security.ipColumns.cidr"),
-      render: (e) => <code className="portal-infra__cell-code">{e.cidr}</code>,
-    },
-    {
-      key: "addedBy",
-      header: t("portal.infrastructure.security.ipColumns.addedBy"),
-      render: (e) => <span className="portal-infra__mono">{e.addedBy}</span>,
-    },
-    {
-      key: "added",
-      header: t("portal.infrastructure.security.ipColumns.added"),
-      align: "right",
-      render: (e) => <span className="portal-infra__muted">{e.added}</span>,
-    },
-  ];
-
-  // Local mirrors so the radios are interactive without a backend round-trip,
-  // seeded from the fetched config once it lands.
-  // TODO(backend): PATCH /v1/infrastructure/security { accessPolicy, dataResidency }
-  const [access, setAccess] = useState<AccessPolicy | null>(null);
-  const [residency, setResidency] = useState<DataResidency | null>(null);
-
-  const accessValue = access ?? data?.accessPolicy ?? "stirling";
-  const residencyValue = residency ?? data?.dataResidency ?? "us";
-
-  if (isLoading) {
-    return (
-      <div className="portal-infra__stack" aria-hidden>
-        <Skeleton height="11rem" />
-        <Skeleton height="7rem" />
-      </div>
-    );
-  }
-
-  if (isEmpty || !data) {
-    return (
-      <EmptyState
-        size="compact"
-        title={t("portal.infrastructure.security.empty.title")}
-        description={t("portal.infrastructure.security.empty.description")}
-      />
-    );
-  }
-
-  return (
-    <div className="portal-infra__stack">
-      <section className="portal-infra__split">
-        <Card padding="loose">
-          <SectionHeader
-            title={t("portal.infrastructure.security.accessPolicy.heading")}
-            sub={t("portal.infrastructure.security.accessPolicy.subheading")}
-          />
-          <RadioGroup
-            name="access-policy"
-            value={accessValue}
-            onChange={setAccess}
-            options={ACCESS_OPTS}
-          />
-          {accessValue === "hyok" && (
-            <Banner
-              tone="success"
-              className="portal-infra__banner"
-              title={t("portal.infrastructure.security.hyokBanner.title")}
-              description={t(
-                "portal.infrastructure.security.hyokBanner.description",
-              )}
-            />
-          )}
-        </Card>
-
-        <Card padding="loose">
-          <SectionHeader
-            title={t("portal.infrastructure.security.residencyHeader.heading")}
-            sub={t("portal.infrastructure.security.residencyHeader.subheading")}
-          />
-          <RadioGroup
-            name="data-residency"
-            value={residencyValue}
-            onChange={setResidency}
-            options={RESIDENCY_OPTS}
-          />
-        </Card>
-      </section>
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.security.keyManagement.heading")}
-          sub={t("portal.infrastructure.security.keyManagement.subheading")}
-        />
-        <Card padding="loose" className="portal-infra__keymgmt">
-          <div className="portal-infra__keymgmt-head">
-            <div className="portal-infra__keymgmt-title">
-              <span className="portal-infra__cell-strong">
-                {data.keyManagement.provider}
-              </span>
-              <StatusBadge
-                tone={KEY_MODE_TONE[data.keyManagement.mode]}
-                size="sm"
-              >
-                {KEY_MODE_LABEL[data.keyManagement.mode]}
-              </StatusBadge>
-            </div>
-            {/* Rotation is a privileged backend action; disabled where Stirling
-                holds the keys (managed tiers can't rotate customer keys). */}
-            <Button
-              variant="secondary"
-              size="sm"
-              disabled={!data.keyManagement.customerManaged}
-              onClick={() => {
-                // TODO(backend): POST /v1/infrastructure/security/keys/rotate
-              }}
-            >
-              {t("portal.infrastructure.security.keyManagement.rotateKey")}
-            </Button>
-          </div>
-
-          <dl className="portal-infra__kv">
-            <div className="portal-infra__kv-wide">
-              <dt>{t("portal.infrastructure.security.keyManagement.keyId")}</dt>
-              <dd>
-                <code className="portal-infra__cell-code">
-                  {data.keyManagement.keyId}
-                </code>
-              </dd>
-            </div>
-            <div>
-              <dt>
-                {t("portal.infrastructure.security.keyManagement.algorithm")}
-              </dt>
-              <dd className="portal-infra__mono">
-                {data.keyManagement.algorithm}
-              </dd>
-            </div>
-            <div>
-              <dt>
-                {t("portal.infrastructure.security.keyManagement.lastRotated")}
-              </dt>
-              <dd>{data.keyManagement.lastRotated}</dd>
-            </div>
-            <div>
-              <dt>
-                {t(
-                  "portal.infrastructure.security.keyManagement.rotationPolicy",
-                )}
-              </dt>
-              <dd>{data.keyManagement.rotationPolicy}</dd>
-            </div>
-          </dl>
-
-          {!data.keyManagement.customerManaged && (
-            <Banner
-              tone="info"
-              className="portal-infra__banner"
-              title={t("portal.infrastructure.security.managedBanner.title")}
-              description={t(
-                "portal.infrastructure.security.managedBanner.description",
-              )}
-            />
-          )}
-        </Card>
-      </section>
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.security.compliance.heading")}
-          sub={t("portal.infrastructure.security.compliance.subheading")}
-        />
-        <div className="portal-infra__certs">
-          {data.certs.map((c) => (
-            <Card key={c.id} padding="default" className="portal-infra__cert">
-              <div className="portal-infra__cert-head">
-                <span className="portal-infra__cell-strong">{c.name}</span>
-                <StatusBadge tone={CERT_TONE[c.status]} size="sm">
-                  {t(CERT_LABEL[c.status])}
-                </StatusBadge>
-              </div>
-              <p className="portal-infra__cert-detail">{c.detail}</p>
-            </Card>
-          ))}
-        </div>
-      </section>
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.security.attestations.heading")}
-          sub={t("portal.infrastructure.security.attestations.subheading")}
-        />
-        <div className="portal-infra__attestations">
-          {data.attestations.map((a) => (
-            <Card
-              key={a.id}
-              padding="default"
-              className="portal-infra__attestation"
-            >
-              <div className="portal-infra__cert-head">
-                <span className="portal-infra__cell-strong">{a.name}</span>
-                <StatusBadge tone={ATTESTATION_TONE[a.status]} size="sm">
-                  {t(ATTESTATION_LABEL[a.status])}
-                </StatusBadge>
-              </div>
-              <Chip size="sm">{a.framework}</Chip>
-              <p className="portal-infra__cert-detail">{a.detail}</p>
-              {a.reportUrl ? (
-                <a
-                  className="portal-infra__attestation-link"
-                  href={a.reportUrl}
-                  // TODO(backend): GET /v1/infrastructure/security/reports/:id
-                  onClick={(e) => e.preventDefault()}
-                >
-                  {t("portal.infrastructure.security.attestations.viewReport")}
-                </a>
-              ) : (
-                <span className="portal-infra__muted">
-                  {t("portal.infrastructure.security.attestations.noReport")}
-                </span>
-              )}
-            </Card>
-          ))}
-        </div>
-      </section>
-
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.security.ipAllowlist.heading")}
-          sub={
-            tier === "free"
-              ? t("portal.infrastructure.security.ipAllowlist.subLocked")
-              : t("portal.infrastructure.security.ipAllowlist.sub")
-          }
-        />
-        {tier === "free" ? (
-          <Banner
-            tone="info"
-            title={t(
-              "portal.infrastructure.security.ipAllowlist.lockedBanner.title",
-            )}
-            description={t(
-              "portal.infrastructure.security.ipAllowlist.lockedBanner.description",
-            )}
-          />
-        ) : (
-          <Card padding="none">
-            <Table
-              columns={ipCols}
-              rows={data.ipAllowlist}
-              rowKey={(e) => e.id}
-              empty={t("portal.infrastructure.security.ipAllowlist.empty")}
-            />
-          </Card>
-        )}
-      </section>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/infrastructure/StorageTab.stories.tsx b/frontend/editor/src/portal/components/infrastructure/StorageTab.stories.tsx
deleted file mode 100644
index 57bcdbff79..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/StorageTab.stories.tsx
+++ /dev/null
@@ -1,80 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { http, HttpResponse, delay } from "msw";
-import { StorageTab } from "@portal/components/infrastructure/StorageTab";
-import type { StorageConfig } from "@portal/api/infrastructure";
-import "@portal/views/Infrastructure.css";
-
-const meta: Meta<typeof StorageTab> = {
-  title: "Portal/Infrastructure/StorageTab",
-  component: StorageTab,
-  parameters: { layout: "padded" },
-  decorators: [
-    (S) => (
-      <div style={{ maxWidth: "72rem" }}>
-        <S />
-      </div>
-    ),
-  ],
-};
-export default meta;
-type Story = StoryObj<typeof StorageTab>;
-
-export const Default: Story = {};
-
-const OVER_CAP: StorageConfig = {
-  usedGb: 1920,
-  quotaGb: 2000,
-  retention: "180",
-  providers: [
-    {
-      id: "stirling",
-      name: "Stirling Cloud",
-      kind: "stirling",
-      connected: true,
-      detail: "Primary vault · us-east-1",
-      usedGb: 1532,
-    },
-    {
-      id: "s3",
-      name: "Amazon S3",
-      kind: "s3",
-      connected: true,
-      detail: "s3://acme-prod-archive · WORM",
-      usedGb: 388,
-    },
-    {
-      id: "azure",
-      name: "Azure Blob",
-      kind: "azure",
-      connected: false,
-      detail: "Not connected",
-      usedGb: 0,
-    },
-  ],
-};
-
-// Quota nearly exhausted — exercises the danger threshold on the usage bar.
-export const OverThreshold: Story = {
-  parameters: {
-    msw: {
-      handlers: [
-        http.get("/v1/infrastructure/storage", () =>
-          HttpResponse.json(OVER_CAP),
-        ),
-      ],
-    },
-  },
-};
-
-export const Loading: Story = {
-  parameters: {
-    msw: {
-      handlers: [
-        http.get("/v1/infrastructure/storage", async () => {
-          await delay("infinite");
-          return HttpResponse.json(null);
-        }),
-      ],
-    },
-  },
-};
diff --git a/frontend/editor/src/portal/components/infrastructure/StorageTab.tsx b/frontend/editor/src/portal/components/infrastructure/StorageTab.tsx
deleted file mode 100644
index 49033345e1..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/StorageTab.tsx
+++ /dev/null
@@ -1,244 +0,0 @@
-import { useState, type ComponentType, type CSSProperties } from "react";
-import { useTranslation } from "react-i18next";
-import ArrowForwardRounded from "@mui/icons-material/ArrowForwardRounded";
-import CloudRounded from "@mui/icons-material/CloudRounded";
-import StorageRounded from "@mui/icons-material/StorageRounded";
-import {
-  Button,
-  Card,
-  EmptyState,
-  FormField,
-  ProgressBar,
-  Select,
-  Skeleton,
-  StatusBadge,
-} from "@app/ui";
-import { useTier } from "@portal/contexts/TierContext";
-import { useAsync, useSectionFlags } from "@portal/hooks/useAsync";
-import {
-  fetchStorage,
-  type RetentionWindow,
-  type StorageConfig,
-} from "@portal/api/infrastructure";
-import { SectionHeader } from "@portal/components/infrastructure/SectionHeader";
-import { pct } from "@portal/components/infrastructure/infraFormat";
-
-const PROVIDER_ICON: Record<
-  StorageConfig["providers"][number]["kind"],
-  ComponentType<{ style?: CSSProperties }>
-> = {
-  stirling: StorageRounded,
-  s3: CloudRounded,
-  azure: CloudRounded,
-};
-
-/** Storage fills past this fraction of quota are surfaced in red. */
-const USAGE_DANGER_FRAC = 0.8;
-
-export function StorageTab() {
-  const { t } = useTranslation();
-  const { tier } = useTier();
-  const state = useAsync<StorageConfig>(() => fetchStorage(tier), [tier]);
-  const { data } = state;
-  const { isLoading, isEmpty } = useSectionFlags(state);
-
-  const RETENTION_OPTS = [
-    {
-      value: "30",
-      label: t("portal.infrastructure.storage.retentionOption.days", {
-        count: 30,
-      }),
-    },
-    {
-      value: "60",
-      label: t("portal.infrastructure.storage.retentionOption.days", {
-        count: 60,
-      }),
-    },
-    {
-      value: "90",
-      label: t("portal.infrastructure.storage.retentionOption.days", {
-        count: 90,
-      }),
-    },
-    {
-      value: "180",
-      label: t("portal.infrastructure.storage.retentionOption.days", {
-        count: 180,
-      }),
-    },
-    {
-      value: "never",
-      label: t("portal.infrastructure.storage.retentionOption.never"),
-    },
-  ];
-
-  // TODO(backend): PATCH /v1/infrastructure/storage { retention }
-  const [retention, setRetention] = useState<RetentionWindow | null>(null);
-  const retentionValue = retention ?? data?.retention ?? "90";
-
-  if (isLoading) {
-    return (
-      <div className="portal-infra__stack" aria-hidden>
-        <Skeleton height="6rem" />
-        <Skeleton height="9rem" />
-      </div>
-    );
-  }
-
-  if (isEmpty || !data) {
-    return (
-      <EmptyState
-        size="compact"
-        title={t("portal.infrastructure.storage.empty.title")}
-        description={t("portal.infrastructure.storage.empty.description")}
-      />
-    );
-  }
-
-  const usedFrac = data.quotaGb > 0 ? data.usedGb / data.quotaGb : 0;
-  const overThreshold = usedFrac > USAGE_DANGER_FRAC;
-
-  return (
-    <div className="portal-infra__stack">
-      <section>
-        <SectionHeader
-          title={t("portal.infrastructure.storage.totalUsage.heading")}
-          sub={t("portal.infrastructure.storage.totalUsage.subheading")}
-        />
-        <Card padding="loose">
-          <div className="portal-infra__usage-head">
-            <span className="portal-infra__usage-value">
-              {t("portal.infrastructure.storage.gbValue", {
-                value: data.usedGb.toLocaleString(),
-              })}
-              <span className="portal-infra__muted">
-                {" "}
-                /{" "}
-                {t("portal.infrastructure.storage.gbValue", {
-                  value: data.quotaGb.toLocaleString(),
-                })}
-              </span>
-            </span>
-            <StatusBadge tone={overThreshold ? "danger" : "success"} size="sm">
-              {t("portal.infrastructure.storage.percentUsed", {
-                value: pct(usedFrac),
-              })}
-            </StatusBadge>
-          </div>
-          <ProgressBar
-            value={usedFrac}
-            height={10}
-            color={
-              overThreshold
-                ? "linear-gradient(90deg, var(--color-red), color-mix(in srgb, var(--color-red) 70%, white))"
-                : "linear-gradient(90deg, var(--color-green), color-mix(in srgb, var(--color-green) 70%, white))"
-            }
-            label={t("portal.infrastructure.storage.totalUsage.progressLabel")}
-          />
-        </Card>
-      </section>
-
-      <section className="portal-infra__split">
-        <Card padding="loose">
-          <SectionHeader
-            title={t("portal.infrastructure.storage.providers.heading")}
-            sub={t("portal.infrastructure.storage.providers.subheading")}
-          />
-          <ul className="portal-infra__providers">
-            {data.providers.map((p) => {
-              const ProviderIcon = PROVIDER_ICON[p.kind];
-              return (
-                <li key={p.id} className="portal-infra__provider">
-                  <span className="portal-infra__provider-glyph" aria-hidden>
-                    <ProviderIcon style={{ fontSize: "1.2rem" }} />
-                  </span>
-                  <span className="portal-infra__provider-text">
-                    <span className="portal-infra__cell-strong">{p.name}</span>
-                    <span className="portal-infra__muted">{p.detail}</span>
-                  </span>
-                  {p.connected ? (
-                    <span className="portal-infra__provider-meta">
-                      <span className="portal-infra__mono">
-                        {t("portal.infrastructure.storage.gbValue", {
-                          value: p.usedGb,
-                        })}
-                      </span>
-                      <StatusBadge tone="success" size="sm">
-                        {t("portal.infrastructure.storage.providers.connected")}
-                      </StatusBadge>
-                    </span>
-                  ) : (
-                    // TODO(backend): launch the provider OAuth/credential flow,
-                    // then POST /v1/infrastructure/storage/providers/{id}/connect
-                    <Button variant="secondary" size="sm">
-                      {t("portal.infrastructure.storage.providers.connect")}
-                    </Button>
-                  )}
-                </li>
-              );
-            })}
-          </ul>
-        </Card>
-
-        <Card padding="loose">
-          <SectionHeader
-            title={t("portal.infrastructure.storage.retention.heading")}
-            sub={t("portal.infrastructure.storage.retention.subheading")}
-          />
-          <FormField
-            label={t("portal.infrastructure.storage.retention.windowLabel")}
-          >
-            <Select
-              options={RETENTION_OPTS}
-              value={retentionValue}
-              onChange={(value) =>
-                setRetention((value ?? "") as RetentionWindow)
-              }
-            />
-          </FormField>
-
-          <div className="portal-infra__lifecycle">
-            <div className="portal-infra__lifecycle-stage is-active">
-              <span className="portal-infra__lifecycle-dot" />
-              <span className="portal-infra__lifecycle-label">
-                {t("portal.infrastructure.storage.lifecycle.active")}
-              </span>
-              <span className="portal-infra__muted">
-                {t("portal.infrastructure.storage.lifecycle.activeRange", {
-                  value: retentionValue === "never" ? "∞" : retentionValue,
-                })}
-              </span>
-            </div>
-            <span className="portal-infra__lifecycle-arrow" aria-hidden>
-              <ArrowForwardRounded style={{ fontSize: "1.2rem" }} />
-            </span>
-            <div className="portal-infra__lifecycle-stage">
-              <span className="portal-infra__lifecycle-dot" />
-              <span className="portal-infra__lifecycle-label">
-                {t("portal.infrastructure.storage.lifecycle.archived")}
-              </span>
-              <span className="portal-infra__muted">
-                {t("portal.infrastructure.storage.lifecycle.coldStorage")}
-              </span>
-            </div>
-            <span className="portal-infra__lifecycle-arrow" aria-hidden>
-              <ArrowForwardRounded style={{ fontSize: "1.2rem" }} />
-            </span>
-            <div className="portal-infra__lifecycle-stage">
-              <span className="portal-infra__lifecycle-dot" />
-              <span className="portal-infra__lifecycle-label">
-                {t("portal.infrastructure.storage.lifecycle.deleted")}
-              </span>
-              <span className="portal-infra__muted">
-                {retentionValue === "never"
-                  ? t("portal.infrastructure.storage.lifecycle.never")
-                  : t("portal.infrastructure.storage.lifecycle.purged")}
-              </span>
-            </div>
-          </div>
-        </Card>
-      </section>
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/infrastructure/TableSkeleton.stories.tsx b/frontend/editor/src/portal/components/infrastructure/TableSkeleton.stories.tsx
deleted file mode 100644
index 6fb71e69d6..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/TableSkeleton.stories.tsx
+++ /dev/null
@@ -1,23 +0,0 @@
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import { Card } from "@app/ui";
-import { TableSkeleton } from "@portal/components/infrastructure/TableSkeleton";
-import "@portal/views/Infrastructure.css";
-
-const meta: Meta<typeof TableSkeleton> = {
-  title: "Portal/Infrastructure/TableSkeleton",
-  component: TableSkeleton,
-  parameters: { layout: "padded" },
-  decorators: [
-    (S) => (
-      <Card padding="none" style={{ maxWidth: "60rem" }}>
-        <S />
-      </Card>
-    ),
-  ],
-};
-export default meta;
-type Story = StoryObj<typeof TableSkeleton>;
-
-export const Regions: Story = { args: { rows: 3, cols: 9 } };
-
-export const AuditLog: Story = { args: { rows: 6, cols: 6 } };
diff --git a/frontend/editor/src/portal/components/infrastructure/TableSkeleton.tsx b/frontend/editor/src/portal/components/infrastructure/TableSkeleton.tsx
deleted file mode 100644
index 6673733adc..0000000000
--- a/frontend/editor/src/portal/components/infrastructure/TableSkeleton.tsx
+++ /dev/null
@@ -1,16 +0,0 @@
-import { Skeleton } from "@app/ui";
-
-/** Placeholder grid shown inside a table card while rows are loading. */
-export function TableSkeleton({ rows, cols }: { rows: number; cols: number }) {
-  return (
-    <div className="portal-infra__table-skel" aria-hidden>
-      {Array.from({ length: rows }).map((_, r) => (
-        <div key={r} className="portal-infra__table-skel-row">
-          {Array.from({ length: cols }).map((_, c) => (
-            <Skeleton key={c} height="0.75rem" />
-          ))}
-        </div>
-      ))}
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/infrastructure/infraFormat.ts b/frontend/editor/src/portal/components/infrastructure/infraFormat.ts
index 6e4cf31a77..ba92032fea 100644
--- a/frontend/editor/src/portal/components/infrastructure/infraFormat.ts
+++ b/frontend/editor/src/portal/components/infrastructure/infraFormat.ts
@@ -1,105 +1,21 @@
-import type { TFunction } from "i18next";
-import type { ChipAccent, StatusTone } from "@app/ui";
+import type { StatusTone } from "@app/ui";
 import type {
   ApiKeyStatus,
-  AttestationStatus,
   AuditCategory,
   AuditStatus,
-  CertStatus,
-  DeploymentStatus,
-  KeyMode,
-  ModelCostUnit,
-  ModelProvider,
-  ModelStatus,
-  ModelType,
-  RegionStatus,
 } from "@portal/api/infrastructure";
 
-/** Format a 0–1 fraction as a percentage string. */
-export function pct(n: number, digits = 0): string {
-  return `${(n * 100).toFixed(digits)}%`;
-}
-
-/** Capitalise the first letter of a lower-case status word. */
-export function titleCase(word: string): string {
-  return word[0].toUpperCase() + word.slice(1);
-}
-
-export const REGION_TONE: Record<RegionStatus, StatusTone> = {
-  healthy: "success",
-  degraded: "warning",
-  down: "danger",
-};
-
-// Label maps hold i18n keys, resolved via t(MAP[value]) at the render sites.
-export const REGION_LABEL: Record<RegionStatus, string> = {
-  healthy: "portal.infrastructure.regionLabel.healthy",
-  degraded: "portal.infrastructure.regionLabel.degraded",
-  down: "portal.infrastructure.regionLabel.down",
-};
-
-export const DEPLOY_TONE: Record<DeploymentStatus, StatusTone> = {
-  live: "success",
-  rolling: "info",
-  "rolled-back": "warning",
-  queued: "neutral",
-};
-
-export const DEPLOY_LABEL: Record<DeploymentStatus, string> = {
-  live: "portal.infrastructure.deployLabel.live",
-  rolling: "portal.infrastructure.deployLabel.rolling",
-  "rolled-back": "portal.infrastructure.deployLabel.rolledBack",
-  queued: "portal.infrastructure.deployLabel.queued",
-};
-
 export const KEY_TONE: Record<ApiKeyStatus, StatusTone> = {
   active: "success",
   revoked: "danger",
 };
 
+// Label maps hold i18n keys, resolved via t(MAP[value]) at the render sites.
 export const KEY_LABEL: Record<ApiKeyStatus, string> = {
   active: "portal.infrastructure.keyLabel.active",
   revoked: "portal.infrastructure.keyLabel.revoked",
 };
 
-export const CERT_TONE: Record<CertStatus, StatusTone> = {
-  certified: "success",
-  "in-progress": "warning",
-  "not-started": "neutral",
-};
-
-export const CERT_LABEL: Record<CertStatus, string> = {
-  certified: "portal.infrastructure.certLabel.certified",
-  "in-progress": "portal.infrastructure.certLabel.inProgress",
-  "not-started": "portal.infrastructure.certLabel.notStarted",
-};
-
-// Brand/acronym key-management modes are not localised.
-export const KEY_MODE_LABEL: Record<KeyMode, string> = {
-  managed: "Stirling-managed",
-  byok: "BYOK",
-  hyok: "HYOK",
-};
-
-export const KEY_MODE_TONE: Record<KeyMode, StatusTone> = {
-  managed: "info",
-  byok: "purple",
-  // HYOK is the strongest posture (Stirling never sees plaintext) → success.
-  hyok: "success",
-};
-
-export const ATTESTATION_LABEL: Record<AttestationStatus, string> = {
-  attested: "portal.infrastructure.attestationLabel.attested",
-  "in-scope": "portal.infrastructure.attestationLabel.inScope",
-  "not-applicable": "portal.infrastructure.attestationLabel.notApplicable",
-};
-
-export const ATTESTATION_TONE: Record<AttestationStatus, StatusTone> = {
-  attested: "success",
-  "in-scope": "warning",
-  "not-applicable": "neutral",
-};
-
 export const AUDIT_TONE: Record<AuditStatus, StatusTone> = {
   success: "success",
   warning: "warning",
@@ -123,59 +39,3 @@ export const AUDIT_CAT_LABEL: Record<AuditCategory, string> = {
   processing: "portal.infrastructure.auditCatLabel.processing",
   security: "portal.infrastructure.auditCatLabel.security",
 };
-
-export const AUDIT_CAT_TONE: Record<AuditCategory, StatusTone> = {
-  auth: "info",
-  config: "neutral",
-  elevation: "purple",
-  policy: "purple",
-  processing: "success",
-  security: "warning",
-};
-
-export const MODEL_TONE: Record<ModelStatus, StatusTone> = {
-  active: "success",
-  degraded: "warning",
-  disabled: "neutral",
-};
-
-export const MODEL_LABEL: Record<ModelStatus, string> = {
-  active: "portal.infrastructure.modelLabel.active",
-  degraded: "portal.infrastructure.modelLabel.degraded",
-  disabled: "portal.infrastructure.modelLabel.disabled",
-};
-
-export const MODEL_TYPE_LABEL: Record<ModelType, string> = {
-  extraction: "portal.infrastructure.modelTypeLabel.extraction",
-  classification: "portal.infrastructure.modelTypeLabel.classification",
-  ocr: "portal.infrastructure.modelTypeLabel.ocr",
-  llm: "portal.infrastructure.modelTypeLabel.llm",
-};
-
-export const MODEL_TYPE_TONE: Record<ModelType, ChipAccent> = {
-  extraction: "default",
-  classification: "premium",
-  ocr: "success",
-  llm: "warning",
-};
-
-// Provider names are proper nouns, not localised.
-export const MODEL_PROVIDER_LABEL: Record<ModelProvider, string> = {
-  stirling: "Stirling",
-  openai: "OpenAI",
-  anthropic: "Anthropic",
-  "on-prem": "On-prem",
-};
-
-/** Render a model's cost with the unit it's billed against. */
-export function modelCost(
-  t: TFunction,
-  cost: number,
-  unit: ModelCostUnit,
-): string {
-  if (cost === 0) return t("portal.infrastructure.models.metrics.included");
-  const price = `$${cost.toFixed(unit === "per-call" ? 3 : 2)}`;
-  return unit === "per-call"
-    ? t("portal.infrastructure.models.cost.perCall", { price })
-    : t("portal.infrastructure.models.cost.perThousand", { price });
-}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineBlockerTooltip.css b/frontend/editor/src/portal/components/pipelines/PipelineBlockerTooltip.css
new file mode 100644
index 0000000000..c0779b9aeb
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineBlockerTooltip.css
@@ -0,0 +1,22 @@
+/**
+ * The "why is this disabled" list, inside a save/create button's tooltip. Left-aligned (a bulleted
+ * list reads oddly centred) and inheriting the tooltip's own colours.
+ */
+
+.portal-pipeline-blockers {
+  text-align: left;
+}
+
+.portal-pipeline-blockers__heading {
+  margin: 0 0 0.25rem;
+  font-weight: 600;
+}
+
+.portal-pipeline-blockers ul {
+  margin: 0;
+  padding-left: 1.1rem;
+}
+
+.portal-pipeline-blockers li {
+  margin: 0.125rem 0;
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineBlockerTooltip.tsx b/frontend/editor/src/portal/components/pipelines/PipelineBlockerTooltip.tsx
new file mode 100644
index 0000000000..adba6ecd26
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineBlockerTooltip.tsx
@@ -0,0 +1,48 @@
+import type { ReactElement } from "react";
+import { Tooltip } from "@mantine/core";
+import "@portal/components/pipelines/PipelineBlockerTooltip.css";
+
+export interface PipelineBlockerTooltipProps {
+  /** Short line above the list, e.g. "To create this pipeline:" / "To save your changes:". */
+  heading: string;
+  /** Everything still owed before the action is possible; empty means the action is allowed. */
+  blockers: string[];
+  /** The disabled control (wrapped so its hover still reaches the tooltip - see below). */
+  children: ReactElement;
+}
+
+/**
+ * Explains why a disabled save/create control can't be used yet, by listing what is still owed.
+ *
+ * A disabled button swallows its own pointer events, so the caller must pass a NON-disabled wrapper
+ * (a span/div around the button) as the child - that wrapper is what the pointer lands on. The
+ * tooltip hides itself when there is nothing to list (the action is allowed, or it is only
+ * mid-save), so callers can wire it unconditionally.
+ */
+export function PipelineBlockerTooltip({
+  heading,
+  blockers,
+  children,
+}: PipelineBlockerTooltipProps) {
+  return (
+    <Tooltip
+      label={
+        <div className="portal-pipeline-blockers">
+          <p className="portal-pipeline-blockers__heading">{heading}</p>
+          <ul>
+            {blockers.map((blocker) => (
+              <li key={blocker}>{blocker}</li>
+            ))}
+          </ul>
+        </div>
+      }
+      disabled={blockers.length === 0}
+      position="bottom-end"
+      withinPortal
+      multiline
+      w={280}
+    >
+      {children}
+    </Tooltip>
+  );
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.css b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.css
new file mode 100644
index 0000000000..d3e5e4827c
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.css
@@ -0,0 +1,47 @@
+/**
+ * Create mode's toolbar: name on the left, commit actions on the right - the same shape as the edit
+ * header, so the two modes feel like one page.
+ */
+
+.portal-pipeline-create-header {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  flex-wrap: wrap;
+}
+
+/* Sized to a name, not the width of the page: a title-length field reads as a title, where the old
+   full-bleed input read as a search bar. It gives a little on narrow viewports but never grows to
+   fill the row - the actions on the right anchor the far end instead. */
+.portal-pipeline-create-header__name {
+  flex: 0 1 22rem;
+  min-width: 12rem;
+}
+
+.portal-pipeline-create-header__name input {
+  font-size: 1rem;
+  font-weight: 500;
+}
+
+/* Pinned to the right, mirroring the edit header. Buttons hold their width and the row wraps rather
+   than clipping. */
+.portal-pipeline-create-header__actions {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  margin-left: auto;
+  flex: none;
+}
+
+/* The create buttons hold their width, so their labels never squash. */
+.portal-pipeline-create-header .sui-btn {
+  flex: none;
+  white-space: nowrap;
+}
+
+/* The two create buttons share one tooltip target, so they sit in their own inline group. */
+.portal-pipeline-create-header__create {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.5rem;
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.stories.tsx b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.stories.tsx
new file mode 100644
index 0000000000..b9717c0848
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.stories.tsx
@@ -0,0 +1,52 @@
+import { useState } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { PipelineCreateHeader } from "@portal/components/pipelines/PipelineCreateHeader";
+
+const meta: Meta<typeof PipelineCreateHeader> = {
+  title: "Portal/Pipelines/PipelineCreateHeader",
+  component: PipelineCreateHeader,
+  parameters: { layout: "padded" },
+};
+export default meta;
+type Story = StoryObj<typeof PipelineCreateHeader>;
+
+const noop = () => {};
+
+/**
+ * The name is live, so the toolbar can be seen as it is filled in. Until it is named (a stand-in for
+ * the app's full validity check) the create buttons are disabled and carry a tooltip of what's owed.
+ */
+function Playground({ initialName }: { initialName: string }) {
+  const [name, setName] = useState(initialName);
+  const blockers =
+    name.trim() === ""
+      ? [
+          "Give the pipeline a name",
+          "Choose an input source",
+          "Choose a destination",
+        ]
+      : [];
+  return (
+    <PipelineCreateHeader
+      name={name}
+      onNameChange={setName}
+      canSave={blockers.length === 0}
+      blockers={blockers}
+      saving={false}
+      pendingCreateEnabled={null}
+      onCreate={noop}
+      onCreatePaused={noop}
+      onBack={noop}
+    />
+  );
+}
+
+/** A new pipeline: create is disabled, and hovering it lists what's still needed. */
+export const New: Story = {
+  render: () => <Playground initialName="" />,
+};
+
+/** Named: the create actions become available. */
+export const Named: Story = {
+  render: () => <Playground initialName="Claims redaction" />,
+};
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.test.tsx b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.test.tsx
new file mode 100644
index 0000000000..c2f1826136
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.test.tsx
@@ -0,0 +1,86 @@
+import { describe, expect, it, vi } from "vitest";
+import {
+  fireEvent,
+  render as baseRender,
+  screen,
+} from "@testing-library/react";
+import { PortalTestProviders } from "@portal/test/TestQueryProvider";
+import {
+  PipelineCreateHeader,
+  type PipelineCreateHeaderProps,
+} from "@portal/components/pipelines/PipelineCreateHeader";
+
+const render = (ui: Parameters<typeof baseRender>[0]) =>
+  baseRender(ui, { wrapper: PortalTestProviders });
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+function renderHeader(overrides: Partial<PipelineCreateHeaderProps> = {}) {
+  const handlers = {
+    onNameChange: vi.fn(),
+    onCreate: vi.fn(),
+    onCreatePaused: vi.fn(),
+    onBack: vi.fn(),
+  };
+  render(
+    <PipelineCreateHeader
+      name="Claims redaction"
+      canSave
+      blockers={[]}
+      saving={false}
+      pendingCreateEnabled={null}
+      {...handlers}
+      {...overrides}
+    />,
+  );
+  return handlers;
+}
+
+describe("PipelineCreateHeader", () => {
+  it("edits the pipeline's name", () => {
+    const handlers = renderHeader();
+    fireEvent.change(
+      screen.getByRole("textbox", { name: "portal.pipelines.composer.name" }),
+      { target: { value: "Renamed" } },
+    );
+    expect(handlers.onNameChange).toHaveBeenCalledWith("Renamed");
+  });
+
+  it("creates the pipeline, live or paused, and backs out", () => {
+    const handlers = renderHeader();
+    fireEvent.click(screen.getByText("portal.pipelines.composer.create"));
+    expect(handlers.onCreate).toHaveBeenCalled();
+    fireEvent.click(screen.getByText("portal.pipelines.composer.createPaused"));
+    expect(handlers.onCreatePaused).toHaveBeenCalled();
+    fireEvent.click(screen.getByLabelText("portal.pipelines.builder.back"));
+    expect(handlers.onBack).toHaveBeenCalled();
+  });
+
+  it("blocks both create actions until the pipeline is valid", () => {
+    renderHeader({ canSave: false, blockers: ["Choose a destination"] });
+    expect(
+      screen.getByText("portal.pipelines.composer.create").closest("button"),
+    ).toBeDisabled();
+    expect(
+      screen
+        .getByText("portal.pipelines.composer.createPaused")
+        .closest("button"),
+    ).toBeDisabled();
+  });
+
+  it("explains, on hover, why the create buttons are disabled", async () => {
+    renderHeader({
+      canSave: false,
+      blockers: ["Give the pipeline a name", "Choose a destination"],
+    });
+    const group = document.querySelector(
+      ".portal-pipeline-create-header__create",
+    ) as HTMLElement;
+    fireEvent.pointerEnter(group);
+    fireEvent.mouseEnter(group);
+    expect(await screen.findByText("Choose a destination")).toBeInTheDocument();
+    expect(screen.getByText("Give the pipeline a name")).toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.tsx b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.tsx
new file mode 100644
index 0000000000..b4e3fa7951
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineCreateHeader.tsx
@@ -0,0 +1,90 @@
+import { useTranslation } from "react-i18next";
+import ArrowBackRoundedIcon from "@mui/icons-material/ArrowBackRounded";
+import { ActionIcon, Button, Input } from "@app/ui";
+import { PipelineBlockerTooltip } from "@portal/components/pipelines/PipelineBlockerTooltip";
+import "@portal/components/pipelines/PipelineCreateHeader.css";
+
+export interface PipelineCreateHeaderProps {
+  name: string;
+  onNameChange: (name: string) => void;
+
+  canSave: boolean;
+  /** Everything still owed before the pipeline can be created, shown on the disabled create button. */
+  blockers: string[];
+  saving: boolean;
+  /** Which create action is mid-save, so only the button that was clicked shows its spinner. */
+  pendingCreateEnabled: boolean | null;
+  onCreate: () => void;
+  onCreatePaused: () => void;
+  onBack: () => void;
+}
+
+/**
+ * The create-mode toolbar. Mirrors the edit header's shape - a back arrow and the name on the left,
+ * actions on the right - so the two modes read as the same page in two states rather than two
+ * different screens. The right commits the pipeline live or paused; while it can't yet, the disabled
+ * create buttons carry a tooltip listing exactly what is still owed, so "disabled" is never a dead end.
+ */
+export function PipelineCreateHeader({
+  name,
+  onNameChange,
+  canSave,
+  blockers,
+  saving,
+  pendingCreateEnabled,
+  onCreate,
+  onCreatePaused,
+  onBack,
+}: PipelineCreateHeaderProps) {
+  const { t } = useTranslation();
+
+  return (
+    <section className="portal-pipeline-create-header">
+      <ActionIcon
+        variant="quiet"
+        size="sm"
+        onClick={onBack}
+        aria-label={t("portal.pipelines.builder.back")}
+      >
+        <ArrowBackRoundedIcon style={{ fontSize: "1.25rem" }} />
+      </ActionIcon>
+
+      <Input
+        className="portal-pipeline-create-header__name"
+        value={name}
+        placeholder={t("portal.pipelines.composer.namePlaceholder")}
+        aria-label={t("portal.pipelines.composer.name")}
+        onChange={(e) => onNameChange(e.target.value)}
+      />
+
+      <div className="portal-pipeline-create-header__actions">
+        {/* The pair share one tooltip target because a disabled button swallows its own hover - the
+            wrapper is what the pointer lands on. */}
+        <PipelineBlockerTooltip
+          heading={t("portal.pipelines.builder.blocker.heading")}
+          blockers={blockers}
+        >
+          <div className="portal-pipeline-create-header__create">
+            <Button
+              variant="secondary"
+              size="sm"
+              loading={saving && pendingCreateEnabled === false}
+              disabled={!canSave}
+              onClick={onCreatePaused}
+            >
+              {t("portal.pipelines.composer.createPaused")}
+            </Button>
+            <Button
+              size="sm"
+              loading={saving && pendingCreateEnabled === true}
+              disabled={!canSave}
+              onClick={onCreate}
+            >
+              {t("portal.pipelines.composer.create")}
+            </Button>
+          </div>
+        </PipelineBlockerTooltip>
+      </div>
+    </section>
+  );
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.css b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.css
new file mode 100644
index 0000000000..a83d3ff6ae
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.css
@@ -0,0 +1,67 @@
+/**
+ * Edit mode's toolbar: identity on the left, operational actions on the right.
+ */
+
+.portal-pipeline-edit-header {
+  display: flex;
+  align-items: center;
+  gap: 1rem;
+  flex-wrap: wrap;
+}
+
+.portal-pipeline-edit-header__identity {
+  display: flex;
+  align-items: center;
+  gap: 0.375rem;
+  min-width: 0;
+  flex: 1 1 16rem;
+}
+
+/* The name is the page's title. It takes the room the identity row leaves and truncates rather than
+   wrapping, so a long name never pushes the pencil out of reach. */
+.portal-pipeline-edit-header__title {
+  margin: 0;
+  font-size: 1.125rem;
+  font-weight: 600;
+  color: var(--c-text);
+  white-space: nowrap;
+  overflow: hidden;
+  text-overflow: ellipsis;
+  min-width: 0;
+}
+
+.portal-pipeline-edit-header__name-input {
+  flex: 1 1 16rem;
+  min-width: 12rem;
+}
+
+.portal-pipeline-edit-header__name-input input {
+  font-size: 1.125rem;
+  font-weight: 600;
+}
+
+/* Never let the labels squash: buttons hold their width and the row wraps instead of clipping. */
+.portal-pipeline-edit-header__actions {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex: none;
+}
+
+.portal-pipeline-edit-header__actions .sui-btn {
+  flex: none;
+  white-space: nowrap;
+}
+
+/* Save is wrapped so its disabled hover reaches the blocker tooltip; the wrapper must not shrink. */
+.portal-pipeline-edit-header__save {
+  display: inline-flex;
+  flex: none;
+}
+
+/* Destructive item in the overflow tray: red label and icon, so it reads as the exception among
+   the neutral entries above it. */
+.portal-pipeline-edit-header__delete-item .sui-dd__item-label,
+.portal-pipeline-edit-header__delete-item .sui-dd__item-leading {
+  color: var(--c-danger);
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.stories.tsx b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.stories.tsx
new file mode 100644
index 0000000000..538024e933
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.stories.tsx
@@ -0,0 +1,71 @@
+import { useState } from "react";
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { PipelineEditHeader } from "@portal/components/pipelines/PipelineEditHeader";
+
+const meta: Meta<typeof PipelineEditHeader> = {
+  title: "Portal/Pipelines/PipelineEditHeader",
+  component: PipelineEditHeader,
+  parameters: { layout: "padded" },
+};
+export default meta;
+type Story = StoryObj<typeof PipelineEditHeader>;
+
+const noop = () => {};
+
+/** The name and the pause/activate state are live, so both can be exercised. */
+function Playground({
+  initialName,
+  initialEnabled = true,
+  canSave = true,
+  blockers = [],
+}: {
+  initialName: string;
+  initialEnabled?: boolean;
+  canSave?: boolean;
+  blockers?: string[];
+}) {
+  const [name, setName] = useState(initialName);
+  const [enabled, setEnabled] = useState(initialEnabled);
+  return (
+    <PipelineEditHeader
+      name={name}
+      onNameChange={setName}
+      enabled={enabled}
+      onTogglePause={() => setEnabled((e) => !e)}
+      togglingEnabled={false}
+      onBack={noop}
+      canSave={canSave}
+      blockers={blockers}
+      saving={false}
+      onSave={noop}
+      onRun={noop}
+      running={false}
+      onReprocess={noop}
+      reprocessing={false}
+      onDelete={noop}
+    />
+  );
+}
+
+/** A live pipeline: the toggle offers to pause it. */
+export const Active: Story = {
+  render: () => <Playground initialName="Claims redaction" />,
+};
+
+/** A paused pipeline: the toggle offers to activate it. */
+export const Paused: Story = {
+  render: () => (
+    <Playground initialName="Claims redaction" initialEnabled={false} />
+  ),
+};
+
+/** Edits that cannot yet be saved: Save is disabled and hovering it lists what's still needed. */
+export const CannotSave: Story = {
+  render: () => (
+    <Playground
+      initialName="Claims redaction"
+      canSave={false}
+      blockers={["Choose a destination", "Finish setting up: Redact"]}
+    />
+  ),
+};
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.test.tsx b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.test.tsx
new file mode 100644
index 0000000000..e216dbb292
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.test.tsx
@@ -0,0 +1,156 @@
+import { describe, expect, it, vi } from "vitest";
+import {
+  fireEvent,
+  render as baseRender,
+  screen,
+} from "@testing-library/react";
+import { PortalTestProviders } from "@portal/test/TestQueryProvider";
+import {
+  PipelineEditHeader,
+  type PipelineEditHeaderProps,
+} from "@portal/components/pipelines/PipelineEditHeader";
+
+const render = (ui: Parameters<typeof baseRender>[0]) =>
+  baseRender(ui, { wrapper: PortalTestProviders });
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+function renderHeader(overrides: Partial<PipelineEditHeaderProps> = {}) {
+  const handlers = {
+    onNameChange: vi.fn(),
+    onTogglePause: vi.fn(),
+    onBack: vi.fn(),
+    onSave: vi.fn(),
+    onRun: vi.fn(),
+    onReprocess: vi.fn(),
+    onDelete: vi.fn(),
+  };
+  render(
+    <PipelineEditHeader
+      name="Claims redaction"
+      enabled
+      togglingEnabled={false}
+      canSave
+      blockers={[]}
+      saving={false}
+      running={false}
+      reprocessing={false}
+      {...handlers}
+      {...overrides}
+    />,
+  );
+  return handlers;
+}
+
+describe("PipelineEditHeader", () => {
+  it("shows the name as the title and renames it in place", () => {
+    const handlers = renderHeader();
+    expect(screen.getByText("Claims redaction")).toBeInTheDocument();
+
+    fireEvent.click(screen.getByLabelText("portal.pipelines.builder.rename"));
+    const input = screen.getByRole("textbox", {
+      name: "portal.pipelines.composer.name",
+    });
+    fireEvent.change(input, { target: { value: "Renamed" } });
+    fireEvent.keyDown(input, { key: "Enter" });
+    expect(handlers.onNameChange).toHaveBeenCalledWith("Renamed");
+  });
+
+  it("abandons a rename on Escape, keeping the old name", () => {
+    const handlers = renderHeader();
+    fireEvent.click(screen.getByLabelText("portal.pipelines.builder.rename"));
+    const input = screen.getByRole("textbox", {
+      name: "portal.pipelines.composer.name",
+    });
+    fireEvent.change(input, { target: { value: "Discarded" } });
+    fireEvent.keyDown(input, { key: "Escape" });
+    // Escape must not commit, even via the blur that unmounting the field fires in a real browser.
+    fireEvent.blur(input);
+    expect(handlers.onNameChange).not.toHaveBeenCalled();
+    expect(screen.getByText("Claims redaction")).toBeInTheDocument();
+  });
+
+  it("commits a rename when focus leaves the field", () => {
+    const handlers = renderHeader();
+    fireEvent.click(screen.getByLabelText("portal.pipelines.builder.rename"));
+    const input = screen.getByRole("textbox", {
+      name: "portal.pipelines.composer.name",
+    });
+    fireEvent.change(input, { target: { value: "Renamed" } });
+    fireEvent.blur(input);
+    expect(handlers.onNameChange).toHaveBeenCalledWith("Renamed");
+  });
+
+  it("offers to pause a live pipeline and to activate a paused one", () => {
+    const handlers = renderHeader();
+    fireEvent.click(screen.getByText("portal.pipelines.builder.pause"));
+    expect(handlers.onTogglePause).toHaveBeenCalled();
+
+    renderHeader({ enabled: false });
+    expect(
+      screen.getByText("portal.pipelines.builder.activate"),
+    ).toBeInTheDocument();
+  });
+
+  it("runs the saved pipeline from the row", () => {
+    const handlers = renderHeader();
+    fireEvent.click(screen.getByText("portal.pipelines.detail.run"));
+    expect(handlers.onRun).toHaveBeenCalled();
+  });
+
+  it("keeps clear-history and delete behind the overflow tray", () => {
+    const handlers = renderHeader();
+    // Not in the row itself...
+    expect(
+      screen.queryByText("portal.pipelines.detail.clearHistory"),
+    ).not.toBeInTheDocument();
+    expect(
+      screen.queryByText("portal.pipelines.detail.delete"),
+    ).not.toBeInTheDocument();
+
+    fireEvent.click(
+      screen.getByLabelText("portal.pipelines.builder.moreActions"),
+    );
+    fireEvent.click(screen.getByText("portal.pipelines.detail.clearHistory"));
+    expect(handlers.onReprocess).toHaveBeenCalled();
+
+    fireEvent.click(
+      screen.getByLabelText("portal.pipelines.builder.moreActions"),
+    );
+    fireEvent.click(screen.getByText("portal.pipelines.detail.delete"));
+    expect(handlers.onDelete).toHaveBeenCalled();
+  });
+
+  it("blocks saving until the edits are valid", () => {
+    renderHeader({ canSave: false });
+    expect(
+      screen.getByText("portal.pipelines.composer.save").closest("button"),
+    ).toBeDisabled();
+  });
+
+  it("cannot pause while a save is committing", () => {
+    renderHeader({ saving: true });
+    expect(
+      screen.getByText("portal.pipelines.builder.pause").closest("button"),
+    ).toBeDisabled();
+  });
+
+  it("cannot save while a pause is committing", () => {
+    renderHeader({ togglingEnabled: true });
+    expect(
+      screen.getByText("portal.pipelines.composer.save").closest("button"),
+    ).toBeDisabled();
+  });
+
+  it("explains, on hover, why Save is disabled", async () => {
+    renderHeader({ canSave: false, blockers: ["Choose a destination"] });
+    const save = document.querySelector(
+      ".portal-pipeline-edit-header__save",
+    ) as HTMLElement;
+    fireEvent.pointerEnter(save);
+    fireEvent.mouseEnter(save);
+    expect(await screen.findByText("Choose a destination")).toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.tsx b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.tsx
new file mode 100644
index 0000000000..7ee2fbd173
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineEditHeader.tsx
@@ -0,0 +1,235 @@
+import { useEffect, useRef, useState } from "react";
+import { useTranslation } from "react-i18next";
+import ArrowBackRoundedIcon from "@mui/icons-material/ArrowBackRounded";
+import EditOutlinedIcon from "@mui/icons-material/EditOutlined";
+import PlayArrowRoundedIcon from "@mui/icons-material/PlayArrowRounded";
+import PauseRoundedIcon from "@mui/icons-material/PauseRounded";
+import PowerSettingsNewRoundedIcon from "@mui/icons-material/PowerSettingsNewRounded";
+import ReplayRoundedIcon from "@mui/icons-material/ReplayRounded";
+import DeleteOutlineRoundedIcon from "@mui/icons-material/DeleteOutlineRounded";
+import MoreHorizRoundedIcon from "@mui/icons-material/MoreHorizRounded";
+import { ActionIcon, Button, Dropdown, Input } from "@app/ui";
+import { PipelineBlockerTooltip } from "@portal/components/pipelines/PipelineBlockerTooltip";
+import "@portal/components/pipelines/PipelineEditHeader.css";
+
+export interface PipelineEditHeaderProps {
+  name: string;
+  onNameChange: (name: string) => void;
+
+  /** The pipeline's live state. Toggling it takes effect immediately, not on save. */
+  enabled: boolean;
+  onTogglePause: () => void;
+  togglingEnabled: boolean;
+
+  onBack: () => void;
+
+  canSave: boolean;
+  /** Everything still owed before the edits can be saved, shown on the disabled Save button. */
+  blockers: string[];
+  saving: boolean;
+  onSave: () => void;
+
+  /** Run the saved pipeline against its real input, delivering to its real destination. */
+  onRun: () => void;
+  running: boolean;
+  /** Reprocess everything in the sources: clears the processed record, then runs at once. */
+  onReprocess: () => void;
+  reprocessing: boolean;
+  onDelete: () => void;
+}
+
+/**
+ * Edit mode's toolbar over an existing, live pipeline. The left is what it *is* - a back arrow, its
+ * name as the page title, a pencil to rename in place. The right is what you can *do to it*: pause
+ * or activate it (an operational toggle that acts at once, matching the Policies vocabulary), run it
+ * now, and - behind an overflow, since they are rare or destructive - reprocess its sources or delete
+ * it. Saving the chain edits is the primary action, on the far right. (Reading the definition is an
+ * inspect action, so it lives in the graph toolbar beside Test, not here.)
+ */
+export function PipelineEditHeader({
+  name,
+  onNameChange,
+  enabled,
+  onTogglePause,
+  togglingEnabled,
+  onBack,
+  canSave,
+  blockers,
+  saving,
+  onSave,
+  onRun,
+  running,
+  onReprocess,
+  reprocessing,
+  onDelete,
+}: PipelineEditHeaderProps) {
+  const { t } = useTranslation();
+  const [renaming, setRenaming] = useState(false);
+  const [draft, setDraft] = useState(name);
+  const inputRef = useRef<HTMLInputElement>(null);
+  // Enter and Escape both end the rename, which unmounts the input - and unmounting a focused input
+  // fires blur in a real browser (jsdom does not). Without this guard that blur would re-run the
+  // commit, so Escape would save the very draft it was meant to discard. The key handler sets this so
+  // the trailing blur is ignored; a plain click-away leaves it false and blur commits as normal.
+  const keyHandledRef = useRef(false);
+
+  useEffect(() => {
+    if (renaming) inputRef.current?.select();
+  }, [renaming]);
+
+  function startRename() {
+    keyHandledRef.current = false;
+    setDraft(name);
+    setRenaming(true);
+  }
+
+  // End the rename, committing the draft only when asked and only if non-empty (an all-whitespace
+  // rename would leave the pipeline titleless).
+  function finishRename(commit: boolean) {
+    keyHandledRef.current = true;
+    if (commit) {
+      const next = draft.trim();
+      if (next) onNameChange(next);
+    }
+    setRenaming(false);
+  }
+
+  // Clicking away commits; the unmount-triggered blur that follows a key press does not (the key
+  // already decided the outcome).
+  function handleBlur() {
+    if (keyHandledRef.current) {
+      keyHandledRef.current = false;
+      return;
+    }
+    finishRename(true);
+  }
+
+  return (
+    <section className="portal-pipeline-edit-header">
+      <div className="portal-pipeline-edit-header__identity">
+        <ActionIcon
+          variant="quiet"
+          size="sm"
+          onClick={onBack}
+          aria-label={t("portal.pipelines.builder.back")}
+        >
+          <ArrowBackRoundedIcon style={{ fontSize: "1.25rem" }} />
+        </ActionIcon>
+
+        {renaming ? (
+          <Input
+            ref={inputRef}
+            className="portal-pipeline-edit-header__name-input"
+            value={draft}
+            aria-label={t("portal.pipelines.composer.name")}
+            onChange={(e) => setDraft(e.target.value)}
+            onBlur={handleBlur}
+            onKeyDown={(e) => {
+              if (e.key === "Enter") finishRename(true);
+              if (e.key === "Escape") finishRename(false);
+            }}
+          />
+        ) : (
+          <>
+            <h1 className="portal-pipeline-edit-header__title">{name}</h1>
+            <ActionIcon
+              variant="quiet"
+              size="sm"
+              onClick={startRename}
+              aria-label={t("portal.pipelines.builder.rename")}
+            >
+              <EditOutlinedIcon style={{ fontSize: "1rem" }} />
+            </ActionIcon>
+          </>
+        )}
+      </div>
+
+      <div className="portal-pipeline-edit-header__actions">
+        {/* Pause and Save both write the whole policy, so they are mutually exclusive: neither can
+            start while the other is committing, or the two writes race and the loser's version wins. */}
+        <Button
+          variant="secondary"
+          size="sm"
+          loading={togglingEnabled}
+          disabled={saving}
+          onClick={onTogglePause}
+          leftSection={
+            enabled ? (
+              <PauseRoundedIcon style={{ fontSize: "1.125rem" }} />
+            ) : (
+              <PowerSettingsNewRoundedIcon style={{ fontSize: "1.125rem" }} />
+            )
+          }
+        >
+          {enabled
+            ? t("portal.pipelines.builder.pause")
+            : t("portal.pipelines.builder.activate")}
+        </Button>
+
+        {/* Run and Reprocess both start a run, so only one at a time: each is disabled while the
+            other is in flight, matching the handler guards (a click otherwise silently no-ops). */}
+        <Button
+          variant="secondary"
+          size="sm"
+          loading={running}
+          disabled={reprocessing}
+          onClick={onRun}
+          leftSection={
+            <PlayArrowRoundedIcon style={{ fontSize: "1.125rem" }} />
+          }
+        >
+          {t("portal.pipelines.detail.run")}
+        </Button>
+
+        {/* Rare and destructive actions kept off the row so they do not compete with running. */}
+        <Dropdown.Root align="end">
+          <Dropdown.Trigger>
+            <ActionIcon
+              variant="tertiary"
+              size="sm"
+              aria-label={t("portal.pipelines.builder.moreActions")}
+            >
+              <MoreHorizRoundedIcon style={{ fontSize: "1.125rem" }} />
+            </ActionIcon>
+          </Dropdown.Trigger>
+          <Dropdown.Menu>
+            <Dropdown.Item
+              onSelect={onReprocess}
+              disabled={reprocessing || running}
+              leading={<ReplayRoundedIcon style={{ fontSize: "1.125rem" }} />}
+            >
+              {t("portal.pipelines.detail.clearHistory")}
+            </Dropdown.Item>
+            <Dropdown.Divider />
+            <Dropdown.Item
+              onSelect={onDelete}
+              className="portal-pipeline-edit-header__delete-item"
+              leading={
+                <DeleteOutlineRoundedIcon style={{ fontSize: "1.125rem" }} />
+              }
+            >
+              {t("portal.pipelines.detail.delete")}
+            </Dropdown.Item>
+          </Dropdown.Menu>
+        </Dropdown.Root>
+
+        {/* Wrapped in a span so the disabled button's hover still reaches the tooltip. */}
+        <PipelineBlockerTooltip
+          heading={t("portal.pipelines.builder.blocker.saveHeading")}
+          blockers={blockers}
+        >
+          <span className="portal-pipeline-edit-header__save">
+            <Button
+              size="sm"
+              onClick={onSave}
+              loading={saving}
+              disabled={!canSave || togglingEnabled}
+            >
+              {t("portal.pipelines.composer.save")}
+            </Button>
+          </span>
+        </PipelineBlockerTooltip>
+      </div>
+    </section>
+  );
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.css b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.css
new file mode 100644
index 0000000000..9dc2d53bec
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.css
@@ -0,0 +1,48 @@
+/**
+ * The test control and the last run's outcome, directly above the graph.
+ */
+
+.portal-pipeline-toolbar {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex-wrap: wrap;
+}
+
+/* Reading the definition sits at the far end of the bar, opposite Test. */
+.portal-pipeline-toolbar__definition {
+  margin-left: auto;
+}
+
+/* The last test run's outcome, beside the button that started it. Whole-pipeline, because the
+   backend reports one flat file list plus the step it stopped at - nothing per node to attach. */
+.portal-pipeline-toolbar__result {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  flex-wrap: wrap;
+}
+
+.portal-pipeline-toolbar__result-status {
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  font-size: 0.8125rem;
+  color: var(--c-text);
+}
+
+.portal-pipeline-toolbar__result-icon.is-ok {
+  color: var(--c-success);
+}
+
+.portal-pipeline-toolbar__result-icon.is-bad {
+  color: var(--c-danger);
+}
+
+/* Why the run failed, shown inline in the strip. Neutral text (the icon already carries the tone);
+   it may wrap to keep a long backend message readable rather than clipping it. */
+.portal-pipeline-toolbar__result-error {
+  font-size: 0.8125rem;
+  color: var(--c-text-muted);
+  min-width: 0;
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.stories.tsx b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.stories.tsx
new file mode 100644
index 0000000000..359aa9bfa1
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.stories.tsx
@@ -0,0 +1,54 @@
+import type { Meta, StoryObj } from "@storybook/react-vite";
+import { PipelineGraphToolbar } from "@portal/components/pipelines/PipelineGraphToolbar";
+
+const meta: Meta<typeof PipelineGraphToolbar> = {
+  title: "Portal/Pipelines/PipelineGraphToolbar",
+  component: PipelineGraphToolbar,
+  parameters: { layout: "padded" },
+  args: {
+    stepCount: 2,
+    testing: false,
+    runResult: null,
+    onTest: () => {},
+    onDownloadOutput: () => {},
+    onViewDefinition: () => {},
+  },
+};
+export default meta;
+type Story = StoryObj<typeof PipelineGraphToolbar>;
+
+/** Idle: just the test control. */
+export const Idle: Story = {};
+
+/** A chain with no steps cannot be tested. */
+export const NoSteps: Story = { args: { stepCount: 0 } };
+
+/** Mid test-run. */
+export const Testing: Story = { args: { testing: true } };
+
+/** After a completed run: the outcome and its files sit beside the button. */
+export const Completed: Story = {
+  args: {
+    runResult: {
+      status: "completed",
+      completedSteps: 3,
+      stepCount: 3,
+      outputs: [
+        { fileId: "f1", fileName: "claim-redacted.pdf" },
+        { fileId: "f2", fileName: null },
+      ],
+    },
+  },
+};
+
+/** A failed run: the summary and the failure reason. */
+export const Failed: Story = {
+  args: {
+    runResult: {
+      status: "failed",
+      completedSteps: 1,
+      stepCount: 3,
+      error: "OCR failed: unreadable page",
+    },
+  },
+};
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.test.tsx b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.test.tsx
new file mode 100644
index 0000000000..4aafb27766
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.test.tsx
@@ -0,0 +1,103 @@
+import { describe, expect, it, vi } from "vitest";
+import {
+  fireEvent,
+  render as baseRender,
+  screen,
+} from "@testing-library/react";
+import { PortalTestProviders } from "@portal/test/TestQueryProvider";
+import {
+  PipelineGraphToolbar,
+  type PipelineGraphToolbarProps,
+} from "@portal/components/pipelines/PipelineGraphToolbar";
+
+const render = (ui: Parameters<typeof baseRender>[0]) =>
+  baseRender(ui, { wrapper: PortalTestProviders });
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({ t: (key: string) => key }),
+}));
+
+function renderToolbar(overrides: Partial<PipelineGraphToolbarProps> = {}) {
+  const handlers = {
+    onTest: vi.fn(),
+    onDownloadOutput: vi.fn(),
+    onViewDefinition: vi.fn(),
+  };
+  render(
+    <PipelineGraphToolbar
+      stepCount={2}
+      testing={false}
+      runResult={null}
+      {...handlers}
+      {...overrides}
+    />,
+  );
+  return handlers;
+}
+
+describe("PipelineGraphToolbar", () => {
+  it("hands the chosen file to the test run", () => {
+    const handlers = renderToolbar();
+    const file = new File(["x"], "claim.pdf", { type: "application/pdf" });
+    const input =
+      document.querySelector<HTMLInputElement>('input[type="file"]');
+    expect(input).not.toBeNull();
+    fireEvent.change(input as HTMLInputElement, { target: { files: [file] } });
+    expect(handlers.onTest).toHaveBeenCalledWith(file);
+  });
+
+  it("will not offer a test run on a chain with no steps", () => {
+    renderToolbar({ stepCount: 0 });
+    expect(
+      screen.getByText("portal.pipelines.builder.testRun").closest("button"),
+    ).toBeDisabled();
+  });
+
+  it("opens the definition from its icon", () => {
+    const handlers = renderToolbar();
+    fireEvent.click(
+      screen.getByLabelText("portal.pipelines.builder.viewDefinition"),
+    );
+    expect(handlers.onViewDefinition).toHaveBeenCalled();
+  });
+
+  it("shows no result strip until a test has been run", () => {
+    renderToolbar();
+    expect(
+      screen.queryByText(/portal.pipelines.inspector.status/),
+    ).not.toBeInTheDocument();
+  });
+
+  it("shows why a test run failed, not only that it did", () => {
+    renderToolbar({
+      runResult: {
+        status: "failed",
+        completedSteps: 1,
+        stepCount: 3,
+        error: "OCR failed: unreadable page",
+      },
+    });
+    expect(screen.getByText("OCR failed: unreadable page")).toBeInTheDocument();
+  });
+
+  it("reports a finished run and downloads the file clicked", () => {
+    const handlers = renderToolbar({
+      runResult: {
+        status: "completed",
+        completedSteps: 2,
+        stepCount: 2,
+        outputs: [
+          { fileId: "f1", fileName: "claim.pdf" },
+          { fileId: "f2", fileName: null },
+        ],
+      },
+    });
+    fireEvent.click(screen.getByText("claim.pdf"));
+    expect(handlers.onDownloadOutput).toHaveBeenCalledWith({
+      fileId: "f1",
+      fileName: "claim.pdf",
+    });
+    // A file the backend did not name still has to be reachable.
+    expect(screen.getByText("f2")).toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.tsx b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.tsx
new file mode 100644
index 0000000000..30513f6a83
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineGraphToolbar.tsx
@@ -0,0 +1,147 @@
+import { useTranslation } from "react-i18next";
+import { Tooltip } from "@mantine/core";
+import ScienceOutlinedIcon from "@mui/icons-material/ScienceOutlined";
+import CheckCircleOutlineRoundedIcon from "@mui/icons-material/CheckCircleOutlineRounded";
+import DownloadRoundedIcon from "@mui/icons-material/DownloadRounded";
+import ErrorOutlineRoundedIcon from "@mui/icons-material/ErrorOutlineRounded";
+import CodeRoundedIcon from "@mui/icons-material/CodeRounded";
+import { ActionIcon, Button, FilePicker, Spinner } from "@app/ui";
+import { type RunOutputFile } from "@portal/api/pipelines";
+import "@portal/components/pipelines/PipelineGraphToolbar.css";
+
+/**
+ * A test run's outcome. Whole-pipeline, not per-node: the backend reports one flat list of files
+ * plus the step it stopped at, so there is no per-node output to attach to a node.
+ */
+export interface RunResultSummary {
+  status: "running" | "completed" | "failed";
+  completedSteps: number;
+  stepCount: number;
+  error?: string | null;
+  outputs?: RunOutputFile[];
+}
+
+export interface PipelineGraphToolbarProps {
+  /** How many steps the chain has, so an empty pipeline cannot offer a test that does nothing. */
+  stepCount: number;
+  /** Run the steps as they stand against one uploaded file, without saving or delivering. */
+  onTest: (file: File) => void;
+  testing: boolean;
+  /** The last test run in this session, or null if there has not been one. */
+  runResult: RunResultSummary | null;
+  onDownloadOutput: (output: RunOutputFile) => void;
+  /** Opens the definition (JSON + cURL) - an inspect action, sibling to Test, hence its home here. */
+  onViewDefinition: () => void;
+}
+
+/**
+ * The graph's own toolbar, above the canvas in both create and edit. It gathers the two ways to
+ * *inspect* what you are building - testing the chain against one file, and reading its definition -
+ * as opposed to committing (Save/Create) or operating on the live pipeline (Run now). A test run's
+ * progress shows on the graph's nodes, so the strip that summarises it belongs next to the graph too.
+ */
+export function PipelineGraphToolbar({
+  stepCount,
+  onTest,
+  testing,
+  runResult,
+  onDownloadOutput,
+  onViewDefinition,
+}: PipelineGraphToolbarProps) {
+  const { t } = useTranslation();
+
+  return (
+    <div className="portal-pipeline-toolbar">
+      <FilePicker
+        variant="secondary"
+        size="sm"
+        accept="application/pdf"
+        loading={testing}
+        // A chain with no steps would hand the file straight back, reading as a silent no-op.
+        disabled={stepCount === 0}
+        onChange={(file) => file && onTest(file)}
+        leftSection={<ScienceOutlinedIcon style={{ fontSize: "1.125rem" }} />}
+      >
+        {t("portal.pipelines.builder.testRun")}
+      </FilePicker>
+
+      {runResult && (
+        <RunResultStrip result={runResult} onDownload={onDownloadOutput} />
+      )}
+
+      {/* The graph is the visual definition; reading it as JSON/cURL sits at the far end of its bar. */}
+      <Tooltip
+        label={t("portal.pipelines.builder.viewDefinition")}
+        position="bottom"
+        withinPortal
+      >
+        <ActionIcon
+          variant="tertiary"
+          size="sm"
+          className="portal-pipeline-toolbar__definition"
+          onClick={onViewDefinition}
+          aria-label={t("portal.pipelines.builder.viewDefinition")}
+        >
+          <CodeRoundedIcon style={{ fontSize: "1.125rem" }} />
+        </ActionIcon>
+      </Tooltip>
+    </div>
+  );
+}
+
+interface RunResultStripProps {
+  result: RunResultSummary;
+  onDownload: (output: RunOutputFile) => void;
+}
+
+/** What the last test run did, beside the button that started it. */
+function RunResultStrip({ result, onDownload }: RunResultStripProps) {
+  const { t } = useTranslation();
+  const outputs = result.outputs ?? [];
+
+  return (
+    <div className="portal-pipeline-toolbar__result">
+      <div className="portal-pipeline-toolbar__result-status">
+        {result.status === "running" && <Spinner size="sm" />}
+        {result.status === "completed" && (
+          <CheckCircleOutlineRoundedIcon
+            className="portal-pipeline-toolbar__result-icon is-ok"
+            style={{ fontSize: "1.25rem" }}
+          />
+        )}
+        {result.status === "failed" && (
+          <ErrorOutlineRoundedIcon
+            className="portal-pipeline-toolbar__result-icon is-bad"
+            style={{ fontSize: "1.25rem" }}
+          />
+        )}
+        <span>
+          {t(`portal.pipelines.inspector.status.${result.status}`, {
+            done: result.completedSteps,
+            count: result.stepCount,
+          })}
+        </span>
+      </div>
+
+      {/* The reason it failed, where the failure is announced - not only on the node, which the user
+          has to know to click. */}
+      {result.status === "failed" && result.error && (
+        <span className="portal-pipeline-toolbar__result-error">
+          {result.error}
+        </span>
+      )}
+
+      {outputs.map((output) => (
+        <Button
+          key={output.fileId}
+          variant="tertiary"
+          size="sm"
+          onClick={() => onDownload(output)}
+          leftSection={<DownloadRoundedIcon style={{ fontSize: "1.125rem" }} />}
+        >
+          {output.fileName ?? output.fileId}
+        </Button>
+      ))}
+    </div>
+  );
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineHeader.css b/frontend/editor/src/portal/components/pipelines/PipelineHeader.css
deleted file mode 100644
index f559e42795..0000000000
--- a/frontend/editor/src/portal/components/pipelines/PipelineHeader.css
+++ /dev/null
@@ -1,133 +0,0 @@
-/**
- * The builder's opening section: identity above the rule, actions below it.
- */
-
-.portal-pipeline-header {
-  display: flex;
-  flex-direction: column;
-  gap: 0.875rem;
-  padding: 1.125rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-lg);
-}
-
-/* Leaving the page and saving it are the same kind of decision, so they share a row - and the back
-   link is short, so the save pair always has room beside it. */
-.portal-pipeline-header__top {
-  display: flex;
-  align-items: center;
-  gap: 1rem;
-  flex-wrap: wrap;
-}
-
-/* The back link is the shared Button restyled to a plain link, so re-assert that over the
-   design-system base (which imposes a fixed height, its own padding and an accent colour). */
-.portal-pipeline-header__back.sui-btn {
-  height: auto;
-  min-height: 0;
-  padding: 0;
-  font-size: 0.8125rem;
-  font-weight: 400;
-  color: var(--c-text-muted);
-}
-
-.portal-pipeline-header__back.sui-btn:hover {
-  background: none;
-  color: var(--c-text);
-}
-
-.portal-pipeline-header__identity {
-  display: flex;
-  align-items: center;
-  gap: 1.25rem;
-  flex-wrap: wrap;
-}
-
-/* The shared Checkbox aligns its box to the top of the first text line, with a nudge tuned for its
-   own font size - that is for the label-plus-description case. This one is a single line, so centre
-   the box on it and leave the component's sizing alone (overriding the font size shifts the line
-   box and leaves the tick floating high). */
-.portal-pipeline-header__enabled.sui-check {
-  flex: none;
-  align-items: center;
-}
-
-.portal-pipeline-header__enabled.sui-check .sui-check__box {
-  margin-top: 0;
-}
-
-/* The name is the page's title, so it takes the room and reads at title size. */
-.portal-pipeline-header__name {
-  flex: 1 1 16rem;
-  min-width: 12rem;
-}
-
-.portal-pipeline-header__name input {
-  font-size: 1rem;
-  font-weight: 500;
-}
-
-/* Never let the labels squash: buttons hold their width and the row wraps instead of clipping. */
-.portal-pipeline-header__save {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  margin-left: auto;
-  flex: none;
-}
-
-.portal-pipeline-header__save .sui-btn {
-  flex: none;
-  white-space: nowrap;
-}
-
-/* Operational actions: what you can do to this pipeline, kept off the identity row. */
-.portal-pipeline-header__actions {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  flex-wrap: wrap;
-  padding-top: 0.875rem;
-  border-top: 1px solid var(--c-border-subtle);
-}
-
-/* Destructive, so it sits away from the rest rather than next in line. */
-.portal-pipeline-header__delete.sui-btn {
-  margin-left: auto;
-}
-
-/* The last test run's outcome, beside the button that started it. Whole-pipeline, because the
-   backend reports one flat file list plus the step it stopped at - nothing per node to attach. */
-.portal-pipeline-header__result {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  flex-wrap: wrap;
-  padding-top: 0.875rem;
-  border-top: 1px solid var(--c-border-subtle);
-}
-
-.portal-pipeline-header__result-status {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  font-size: 0.8125rem;
-  color: var(--c-text);
-}
-
-.portal-pipeline-header__result-icon.is-ok {
-  color: var(--c-success);
-}
-
-.portal-pipeline-header__result-icon.is-bad {
-  color: var(--c-danger);
-}
-
-/* Why the run failed, shown inline in the strip. Neutral text (the icon already carries the tone);
-   it may wrap to keep a long backend message readable rather than clipping it. */
-.portal-pipeline-header__result-error {
-  font-size: 0.8125rem;
-  color: var(--c-text-muted);
-  min-width: 0;
-}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineHeader.stories.tsx b/frontend/editor/src/portal/components/pipelines/PipelineHeader.stories.tsx
deleted file mode 100644
index 41c73a5ade..0000000000
--- a/frontend/editor/src/portal/components/pipelines/PipelineHeader.stories.tsx
+++ /dev/null
@@ -1,118 +0,0 @@
-import { useState } from "react";
-import type { Meta, StoryObj } from "@storybook/react-vite";
-import {
-  PipelineHeader,
-  type RunResultSummary,
-} from "@portal/components/pipelines/PipelineHeader";
-
-const meta: Meta<typeof PipelineHeader> = {
-  title: "Portal/Pipelines/PipelineHeader",
-  component: PipelineHeader,
-  parameters: { layout: "padded" },
-};
-export default meta;
-type Story = StoryObj<typeof PipelineHeader>;
-
-const noop = () => {};
-
-/** The name and the enabled switch are live, so the section can be seen in both states. */
-function Playground({
-  initialName,
-  isEdit,
-  initialEnabled = true,
-  runResult = null,
-  ...rest
-}: {
-  initialName: string;
-  isEdit: boolean;
-  initialEnabled?: boolean;
-  runResult?: RunResultSummary | null;
-  saving?: boolean;
-  testing?: boolean;
-  running?: boolean;
-  canSave?: boolean;
-  stepCount?: number;
-}) {
-  const [name, setName] = useState(initialName);
-  const [enabled, setEnabled] = useState(initialEnabled);
-  return (
-    <PipelineHeader
-      name={name}
-      onNameChange={setName}
-      enabled={enabled}
-      onEnabledChange={setEnabled}
-      isEdit={isEdit}
-      stepCount={rest.stepCount ?? 2}
-      canSave={rest.canSave ?? true}
-      saving={rest.saving ?? false}
-      onSave={noop}
-      onCancel={noop}
-      onBack={noop}
-      onTest={noop}
-      testing={rest.testing ?? false}
-      onRun={noop}
-      running={rest.running ?? false}
-      onClearHistory={noop}
-      clearingHistory={false}
-      onDelete={noop}
-      onViewDefinition={noop}
-      runResult={runResult}
-      onDownloadOutput={noop}
-    />
-  );
-}
-
-/** An existing pipeline: everything is available. */
-export const Editing: Story = {
-  render: () => <Playground initialName="Claims redaction" isEdit />,
-};
-
-/**
- * A pipeline that has never been saved. It can still be tested against a file, but there is
- * nothing yet to run on a schedule, clear history for, or delete.
- */
-export const New: Story = {
-  render: () => <Playground initialName="" isEdit={false} canSave={false} />,
-};
-
-/** Paused: the pipeline exists but its trigger will not fire. */
-export const Paused: Story = {
-  render: () => (
-    <Playground initialName="Claims redaction" isEdit initialEnabled={false} />
-  ),
-};
-
-/** Mid test-run: the picker shows its own progress while the graph shows the steps. */
-export const Testing: Story = {
-  render: () => <Playground initialName="Claims redaction" isEdit testing />,
-};
-
-/** After a test run: the outcome and its files sit beside the button that started them. */
-export const WithRunResult: Story = {
-  render: () => (
-    <Playground
-      initialName="Claims redaction"
-      isEdit
-      runResult={{
-        status: "completed",
-        completedSteps: 3,
-        stepCount: 3,
-        outputs: [
-          { fileId: "f1", fileName: "claim-redacted.pdf" },
-          { fileId: "f2", fileName: null },
-        ],
-      }}
-    />
-  ),
-};
-
-/** A failed run: the summary is here, the failing step's own message is on its node. */
-export const WithFailedRun: Story = {
-  render: () => (
-    <Playground
-      initialName="Claims redaction"
-      isEdit
-      runResult={{ status: "failed", completedSteps: 1, stepCount: 3 }}
-    />
-  ),
-};
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineHeader.test.tsx b/frontend/editor/src/portal/components/pipelines/PipelineHeader.test.tsx
deleted file mode 100644
index 2c5552be07..0000000000
--- a/frontend/editor/src/portal/components/pipelines/PipelineHeader.test.tsx
+++ /dev/null
@@ -1,200 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import {
-  fireEvent,
-  render as baseRender,
-  screen,
-} from "@testing-library/react";
-import { PortalTestProviders } from "@portal/test/TestQueryProvider";
-import {
-  PipelineHeader,
-  type PipelineHeaderProps,
-} from "@portal/components/pipelines/PipelineHeader";
-
-const render = (ui: Parameters<typeof baseRender>[0]) =>
-  baseRender(ui, { wrapper: PortalTestProviders });
-
-vi.mock("react-i18next", () => ({
-  useTranslation: () => ({ t: (key: string) => key }),
-}));
-
-function renderHeader(overrides: Partial<PipelineHeaderProps> = {}) {
-  const handlers = {
-    onNameChange: vi.fn(),
-    onEnabledChange: vi.fn(),
-    onSave: vi.fn(),
-    onCancel: vi.fn(),
-    onBack: vi.fn(),
-    onTest: vi.fn(),
-    onRun: vi.fn(),
-    onClearHistory: vi.fn(),
-    onDelete: vi.fn(),
-    onViewDefinition: vi.fn(),
-    onDownloadOutput: vi.fn(),
-  };
-  render(
-    <PipelineHeader
-      name="Claims redaction"
-      enabled
-      isEdit
-      stepCount={2}
-      canSave
-      saving={false}
-      testing={false}
-      running={false}
-      clearingHistory={false}
-      runResult={null}
-      {...handlers}
-      {...overrides}
-    />,
-  );
-  return handlers;
-}
-
-describe("PipelineHeader", () => {
-  it("edits the pipeline's name and enabled state", () => {
-    const handlers = renderHeader();
-    fireEvent.change(
-      screen.getByRole("textbox", { name: "portal.pipelines.composer.name" }),
-      { target: { value: "Renamed" } },
-    );
-    expect(handlers.onNameChange).toHaveBeenCalledWith("Renamed");
-
-    fireEvent.click(screen.getByRole("checkbox"));
-    expect(handlers.onEnabledChange).toHaveBeenCalledWith(false);
-  });
-
-  it("offers run, clear history and delete only once the pipeline exists", () => {
-    renderHeader({ isEdit: false });
-    expect(
-      screen.queryByText("portal.pipelines.detail.run"),
-    ).not.toBeInTheDocument();
-    expect(
-      screen.queryByText("portal.pipelines.detail.delete"),
-    ).not.toBeInTheDocument();
-    // A test run needs no saved record, so it stays: it is how you check the steps as you build.
-    expect(
-      screen.getByText("portal.pipelines.builder.testRun"),
-    ).toBeInTheDocument();
-  });
-
-  it("labels the save action for what it will do", () => {
-    renderHeader({ isEdit: false });
-    expect(
-      screen.getByText("portal.pipelines.composer.create"),
-    ).toBeInTheDocument();
-    expect(
-      screen.queryByText("portal.pipelines.composer.save"),
-    ).not.toBeInTheDocument();
-  });
-
-  it("blocks saving until the pipeline is valid", () => {
-    renderHeader({ canSave: false });
-    expect(
-      screen.getByText("portal.pipelines.composer.save").closest("button"),
-    ).toBeDisabled();
-  });
-
-  it("hands the chosen file to the test run", () => {
-    const handlers = renderHeader();
-    const file = new File(["x"], "claim.pdf", { type: "application/pdf" });
-    const input =
-      document.querySelector<HTMLInputElement>('input[type="file"]');
-    expect(input).not.toBeNull();
-    fireEvent.change(input as HTMLInputElement, { target: { files: [file] } });
-    expect(handlers.onTest).toHaveBeenCalledWith(file);
-  });
-
-  it("will not offer a test run on a chain with no steps", () => {
-    renderHeader({ stepCount: 0 });
-    expect(
-      screen.getByText("portal.pipelines.builder.testRun").closest("button"),
-    ).toBeDisabled();
-  });
-
-  it("shows why a test run failed, not only that it did", () => {
-    renderHeader({
-      runResult: {
-        status: "failed",
-        completedSteps: 1,
-        stepCount: 3,
-        error: "OCR failed: unreadable page",
-      },
-    });
-    expect(screen.getByText("OCR failed: unreadable page")).toBeInTheDocument();
-  });
-
-  it("runs and deletes from the row, clears history from the tray", () => {
-    const handlers = renderHeader();
-    fireEvent.click(screen.getByText("portal.pipelines.detail.run"));
-    expect(handlers.onRun).toHaveBeenCalled();
-    fireEvent.click(screen.getByText("portal.pipelines.detail.delete"));
-    expect(handlers.onDelete).toHaveBeenCalled();
-
-    fireEvent.click(
-      screen.getByLabelText("portal.pipelines.builder.moreActions"),
-    );
-    fireEvent.click(screen.getByText("portal.pipelines.detail.clearHistory"));
-    expect(handlers.onClearHistory).toHaveBeenCalled();
-  });
-
-  it("leaves the page through cancel and back", () => {
-    const handlers = renderHeader();
-    fireEvent.click(screen.getByText("portal.pipelines.composer.cancel"));
-    expect(handlers.onCancel).toHaveBeenCalled();
-    fireEvent.click(screen.getByText("portal.pipelines.builder.back"));
-    expect(handlers.onBack).toHaveBeenCalled();
-  });
-
-  it("keeps the occasional actions out of the row, behind a tray", () => {
-    renderHeader();
-    // Running and testing earn a button each; reading the definition and wiping history do not.
-    expect(
-      screen.queryByText("portal.pipelines.builder.viewDefinition"),
-    ).not.toBeInTheDocument();
-    expect(
-      screen.queryByText("portal.pipelines.detail.clearHistory"),
-    ).not.toBeInTheDocument();
-    expect(
-      screen.getByLabelText("portal.pipelines.builder.moreActions"),
-    ).toBeInTheDocument();
-  });
-
-  it("opens the definition from the tray", () => {
-    const handlers = renderHeader();
-    fireEvent.click(
-      screen.getByLabelText("portal.pipelines.builder.moreActions"),
-    );
-    fireEvent.click(
-      screen.getByText("portal.pipelines.builder.viewDefinition"),
-    );
-    expect(handlers.onViewDefinition).toHaveBeenCalled();
-  });
-
-  it("shows no run strip until a test has been run", () => {
-    renderHeader();
-    expect(
-      screen.queryByText(/portal.pipelines.inspector.status/),
-    ).not.toBeInTheDocument();
-  });
-
-  it("reports a finished run and downloads the file clicked", () => {
-    const handlers = renderHeader({
-      runResult: {
-        status: "completed",
-        completedSteps: 2,
-        stepCount: 2,
-        outputs: [
-          { fileId: "f1", fileName: "claim.pdf" },
-          { fileId: "f2", fileName: null },
-        ],
-      },
-    });
-    fireEvent.click(screen.getByText("claim.pdf"));
-    expect(handlers.onDownloadOutput).toHaveBeenCalledWith({
-      fileId: "f1",
-      fileName: "claim.pdf",
-    });
-    // A file the backend did not name still has to be reachable.
-    expect(screen.getByText("f2")).toBeInTheDocument();
-  });
-});
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineHeader.tsx b/frontend/editor/src/portal/components/pipelines/PipelineHeader.tsx
deleted file mode 100644
index 25bfbd044f..0000000000
--- a/frontend/editor/src/portal/components/pipelines/PipelineHeader.tsx
+++ /dev/null
@@ -1,301 +0,0 @@
-import { useTranslation } from "react-i18next";
-import ArrowBackRoundedIcon from "@mui/icons-material/ArrowBackRounded";
-import DeleteOutlineRoundedIcon from "@mui/icons-material/DeleteOutlineRounded";
-import HistoryRoundedIcon from "@mui/icons-material/HistoryRounded";
-import PlayArrowRoundedIcon from "@mui/icons-material/PlayArrowRounded";
-import ScienceOutlinedIcon from "@mui/icons-material/ScienceOutlined";
-import CodeRoundedIcon from "@mui/icons-material/CodeRounded";
-import MoreHorizRoundedIcon from "@mui/icons-material/MoreHorizRounded";
-import CheckCircleOutlineRoundedIcon from "@mui/icons-material/CheckCircleOutlineRounded";
-import DownloadRoundedIcon from "@mui/icons-material/DownloadRounded";
-import ErrorOutlineRoundedIcon from "@mui/icons-material/ErrorOutlineRounded";
-import {
-  ActionIcon,
-  Button,
-  Checkbox,
-  Dropdown,
-  FilePicker,
-  Input,
-  Spinner,
-} from "@app/ui";
-import "@portal/components/pipelines/PipelineHeader.css";
-
-/** One file a test run produced, downloadable from the result strip. */
-export interface RunOutputFile {
-  fileId: string;
-  fileName: string | null;
-}
-
-/**
- * A test run's outcome. Whole-pipeline, not per-node: the backend reports one flat list of files
- * plus the step it stopped at, so there is no per-node output to attach to a node.
- */
-export interface RunResultSummary {
-  status: "running" | "completed" | "failed";
-  completedSteps: number;
-  stepCount: number;
-  error?: string | null;
-  outputs?: RunOutputFile[];
-}
-
-export interface PipelineHeaderProps {
-  name: string;
-  onNameChange: (name: string) => void;
-  enabled: boolean;
-  onEnabledChange: (enabled: boolean) => void;
-  /** False for a pipeline that has never been saved: it cannot yet be run, cleared or deleted. */
-  isEdit: boolean;
-  /** How many steps the chain has, so an empty pipeline cannot offer a test that does nothing. */
-  stepCount: number;
-
-  canSave: boolean;
-  saving: boolean;
-  onSave: () => void;
-  onCancel: () => void;
-  onBack: () => void;
-
-  /** Run the steps as they stand against one uploaded file, without saving or delivering. */
-  onTest: (file: File) => void;
-  testing: boolean;
-  /** Run the saved pipeline against its real input, delivering to its real destination. */
-  onRun: () => void;
-  running: boolean;
-  onClearHistory: () => void;
-  clearingHistory: boolean;
-  onDelete: () => void;
-
-  /** Opens the definition (JSON + cURL), which is pipeline-scoped like the rest of this row. */
-  onViewDefinition: () => void;
-  /** The last test run in this session, or null if there has not been one. */
-  runResult: RunResultSummary | null;
-  onDownloadOutput: (output: RunOutputFile) => void;
-}
-
-/**
- * The pipeline's identity and its whole-pipeline actions, at the top of the builder.
- *
- * Split in two so neither half gets lost in a single crowded row: what the pipeline *is* (name,
- * whether it is live) sits with the actions that leave the page, and what you can *do to it* sits
- * below the rule. A test run is part of building, so it lives here rather than off in a corner -
- * its progress shows on the graph's nodes and its results in the inspector.
- */
-export function PipelineHeader({
-  name,
-  onNameChange,
-  enabled,
-  onEnabledChange,
-  isEdit,
-  stepCount,
-  canSave,
-  saving,
-  onSave,
-  onCancel,
-  onBack,
-  onTest,
-  testing,
-  onRun,
-  running,
-  onClearHistory,
-  clearingHistory,
-  onDelete,
-  onViewDefinition,
-  runResult,
-  onDownloadOutput,
-}: PipelineHeaderProps) {
-  const { t } = useTranslation();
-
-  return (
-    <section className="portal-pipeline-header">
-      <div className="portal-pipeline-header__top">
-        <Button
-          variant="quiet"
-          size="sm"
-          className="portal-pipeline-header__back"
-          onClick={onBack}
-          leftSection={
-            <ArrowBackRoundedIcon style={{ fontSize: "1.125rem" }} />
-          }
-        >
-          {t("portal.pipelines.builder.back")}
-        </Button>
-        <div className="portal-pipeline-header__save">
-          <Button
-            variant="tertiary"
-            size="sm"
-            onClick={onCancel}
-            disabled={saving}
-          >
-            {t("portal.pipelines.composer.cancel")}
-          </Button>
-          <Button
-            size="sm"
-            onClick={onSave}
-            loading={saving}
-            disabled={!canSave}
-          >
-            {isEdit
-              ? t("portal.pipelines.composer.save")
-              : t("portal.pipelines.composer.create")}
-          </Button>
-        </div>
-      </div>
-
-      <div className="portal-pipeline-header__identity">
-        <Input
-          className="portal-pipeline-header__name"
-          value={name}
-          placeholder={t("portal.pipelines.composer.namePlaceholder")}
-          aria-label={t("portal.pipelines.composer.name")}
-          onChange={(e) => onNameChange(e.target.value)}
-        />
-        {/* A checkbox, not a switch: this is a form value that takes effect on save, and a switch
-            would imply it applies the moment it is flipped. No description - a second line beside
-            the single-line name field leaves the row ragged. */}
-        <Checkbox
-          className="portal-pipeline-header__enabled"
-          checked={enabled}
-          onChange={(e) => onEnabledChange(e.target.checked)}
-          label={t("portal.pipelines.builder.enabled")}
-        />
-      </div>
-
-      <div className="portal-pipeline-header__actions">
-        <FilePicker
-          variant="secondary"
-          size="sm"
-          accept="application/pdf"
-          loading={testing}
-          // A chain with no steps would hand the file straight back, reading as a silent no-op.
-          disabled={stepCount === 0}
-          onChange={(file) => file && onTest(file)}
-          leftSection={<ScienceOutlinedIcon style={{ fontSize: "1.125rem" }} />}
-        >
-          {t("portal.pipelines.builder.testRun")}
-        </FilePicker>
-
-        {isEdit && (
-          <Button
-            variant="secondary"
-            size="sm"
-            loading={running}
-            onClick={onRun}
-            leftSection={
-              <PlayArrowRoundedIcon style={{ fontSize: "1.125rem" }} />
-            }
-          >
-            {t("portal.pipelines.detail.run")}
-          </Button>
-        )}
-
-        {/* Occasional things - reading the definition, wiping the processed history - kept behind a
-            tray so they do not compete with running and testing, which is what this row is for. */}
-        <Dropdown.Root align="start">
-          <Dropdown.Trigger>
-            <ActionIcon
-              variant="secondary"
-              size="sm"
-              aria-label={t("portal.pipelines.builder.moreActions")}
-            >
-              <MoreHorizRoundedIcon style={{ fontSize: "1.125rem" }} />
-            </ActionIcon>
-          </Dropdown.Trigger>
-          <Dropdown.Menu>
-            <Dropdown.Item
-              onSelect={onViewDefinition}
-              leading={<CodeRoundedIcon style={{ fontSize: "1.125rem" }} />}
-            >
-              {t("portal.pipelines.builder.viewDefinition")}
-            </Dropdown.Item>
-            {isEdit && (
-              <Dropdown.Item
-                onSelect={onClearHistory}
-                disabled={clearingHistory}
-                leading={
-                  <HistoryRoundedIcon style={{ fontSize: "1.125rem" }} />
-                }
-              >
-                {t("portal.pipelines.detail.clearHistory")}
-              </Dropdown.Item>
-            )}
-          </Dropdown.Menu>
-        </Dropdown.Root>
-
-        {isEdit && (
-          <Button
-            variant="tertiary"
-            size="sm"
-            accent="danger"
-            className="portal-pipeline-header__delete"
-            onClick={onDelete}
-            leftSection={
-              <DeleteOutlineRoundedIcon style={{ fontSize: "1.125rem" }} />
-            }
-          >
-            {t("portal.pipelines.detail.delete")}
-          </Button>
-        )}
-      </div>
-
-      {runResult && (
-        <RunResultStrip result={runResult} onDownload={onDownloadOutput} />
-      )}
-    </section>
-  );
-}
-
-interface RunResultStripProps {
-  result: RunResultSummary;
-  onDownload: (output: RunOutputFile) => void;
-}
-
-/** What the last test run did, beside the button that started it. */
-function RunResultStrip({ result, onDownload }: RunResultStripProps) {
-  const { t } = useTranslation();
-  const outputs = result.outputs ?? [];
-
-  return (
-    <div className="portal-pipeline-header__result">
-      <div className="portal-pipeline-header__result-status">
-        {result.status === "running" && <Spinner size="sm" />}
-        {result.status === "completed" && (
-          <CheckCircleOutlineRoundedIcon
-            className="portal-pipeline-header__result-icon is-ok"
-            style={{ fontSize: "1.25rem" }}
-          />
-        )}
-        {result.status === "failed" && (
-          <ErrorOutlineRoundedIcon
-            className="portal-pipeline-header__result-icon is-bad"
-            style={{ fontSize: "1.25rem" }}
-          />
-        )}
-        <span>
-          {t(`portal.pipelines.inspector.status.${result.status}`, {
-            done: result.completedSteps,
-            count: result.stepCount,
-          })}
-        </span>
-      </div>
-
-      {/* The reason it failed, where the failure is announced - not only on the node, which the user
-          has to know to click. */}
-      {result.status === "failed" && result.error && (
-        <span className="portal-pipeline-header__result-error">
-          {result.error}
-        </span>
-      )}
-
-      {outputs.map((output) => (
-        <Button
-          key={output.fileId}
-          variant="tertiary"
-          size="sm"
-          onClick={() => onDownload(output)}
-          leftSection={<DownloadRoundedIcon style={{ fontSize: "1.125rem" }} />}
-        >
-          {output.fileName ?? output.fileId}
-        </Button>
-      ))}
-    </div>
-  );
-}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineInspector.css b/frontend/editor/src/portal/components/pipelines/PipelineInspector.css
index 0fc50597e8..b5aeaff6fc 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelineInspector.css
+++ b/frontend/editor/src/portal/components/pipelines/PipelineInspector.css
@@ -7,9 +7,6 @@
   flex-direction: column;
   gap: 0.875rem;
   padding: 1.125rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-lg);
   /* The builder caps its columns so the page itself does not scroll, which means a settings form
      taller than the viewport has to scroll in here - otherwise its lower half is unreachable. */
   max-height: 100%;
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineInspector.tsx b/frontend/editor/src/portal/components/pipelines/PipelineInspector.tsx
index 49fccf7e9b..cac71b5790 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelineInspector.tsx
+++ b/frontend/editor/src/portal/components/pipelines/PipelineInspector.tsx
@@ -2,6 +2,7 @@ import type { ReactNode } from "react";
 import { useTranslation } from "react-i18next";
 import TuneRoundedIcon from "@mui/icons-material/TuneRounded";
 import { Banner, EmptyState } from "@app/ui";
+import "@portal/theme/surface.css";
 import "@portal/components/pipelines/PipelineInspector.css";
 
 export interface PipelineInspectorProps {
@@ -40,7 +41,7 @@ export function PipelineInspector({
 
   if (message) {
     return (
-      <aside className="portal-inspector">
+      <aside className="portal-surface portal-inspector">
         <EmptyState
           size="compact"
           title={message}
@@ -52,7 +53,7 @@ export function PipelineInspector({
 
   if (!children) {
     return (
-      <aside className="portal-inspector">
+      <aside className="portal-surface portal-inspector">
         <EmptyState
           size="compact"
           title={t("portal.pipelines.inspector.noSelectionTitle")}
@@ -63,7 +64,7 @@ export function PipelineInspector({
   }
 
   return (
-    <aside className="portal-inspector">
+    <aside className="portal-surface portal-inspector">
       {/* The title stays put while the settings scroll: it names the node being edited, which is
           what makes a long form legible. */}
       <div className="portal-inspector__title">
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.css b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.css
new file mode 100644
index 0000000000..46bb72a736
--- /dev/null
+++ b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.css
@@ -0,0 +1,17 @@
+.portal-step-settings__files {
+  display: flex;
+  flex-direction: column;
+  gap: 0.375rem;
+  margin-bottom: 0.75rem;
+}
+
+.portal-step-settings__files-label {
+  font-size: 0.75rem;
+  color: var(--c-text-muted);
+}
+
+.portal-step-settings__files-chips {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 0.375rem;
+}
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.stories.tsx b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.stories.tsx
index d2bd6bc6f2..823d0ae4fe 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.stories.tsx
+++ b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.stories.tsx
@@ -52,6 +52,8 @@ const meta = {
     step: editableStep,
     registry,
     onChange: () => {},
+    assetNames: {},
+    onClearBinding: () => {},
   },
 } satisfies Meta<typeof PipelineStepSettings>;
 export default meta;
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.test.tsx b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.test.tsx
index 946e24b810..0b15b7233a 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.test.tsx
+++ b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.test.tsx
@@ -1,10 +1,23 @@
 import { describe, expect, it, vi } from "vitest";
-import { useEffect, useState } from "react";
-import { render, screen } from "@testing-library/react";
+import {
+  Component,
+  Suspense,
+  useEffect,
+  useState,
+  type ComponentType,
+  type ReactNode,
+} from "react";
+import { render, renderHook, screen, waitFor } from "@testing-library/react";
 import { PortalTestProviders } from "@portal/test/TestQueryProvider";
+import { useTranslatedToolCatalog } from "@app/data/useTranslatedToolRegistry";
+import { PreferencesProvider } from "@app/contexts/PreferencesContext";
+import { SidebarProvider } from "@app/contexts/SidebarContext";
 import { Tooltip } from "@app/components/shared/Tooltip";
 import type { ToolRegistry } from "@app/data/toolsTaxonomy";
-import type { WorkingToolStep } from "@app/hooks/tools/shared/toolAutomation";
+import {
+  getExecutableTools,
+  type WorkingToolStep,
+} from "@app/hooks/tools/shared/toolAutomation";
 import {
   asRegistryConfig,
   type ErasedToolParams,
@@ -13,6 +26,10 @@ import {
 import ConvertSettings from "@app/components/tools/convert/ConvertSettings";
 import { convertOperationConfig } from "@app/hooks/tools/convert/useConvertOperation";
 import { defaultParameters as convertDefaults } from "@app/hooks/tools/convert/useConvertParameters";
+import ChangeMetadataSingleStep from "@app/components/tools/changeMetadata/ChangeMetadataSingleStep";
+import { defaultParameters as changeMetadataDefaults } from "@app/hooks/tools/changeMetadata/useChangeMetadataParameters";
+import OverlayPdfsSettings from "@app/components/tools/overlayPdfs/OverlayPdfsSettings";
+import { defaultParameters as overlayDefaults } from "@app/hooks/tools/overlayPdfs/useOverlayPdfsParameters";
 import { PipelineStepSettings } from "@portal/components/pipelines/PipelineStepSettings";
 
 // Override only useTranslation; keep the rest of react-i18next (initReactI18next et al.) real, so
@@ -21,6 +38,7 @@ vi.mock("react-i18next", async (importOriginal) => ({
   ...(await importOriginal<typeof import("react-i18next")>()),
   useTranslation: () => ({
     t: (key: string, fallback?: string) => fallback ?? key,
+    i18n: { language: "en-US", changeLanguage: vi.fn() },
   }),
 }));
 
@@ -63,6 +81,32 @@ const convertRegistry = {
   },
 } as unknown as Partial<ToolRegistry>;
 
+// The real Change Metadata automation settings. Its editor variant auto-prefills the
+// form from the open document via useViewer; that path is now gated on a ViewerProvider
+// so it renders here (the portal mounts none) instead of crashing on useViewer.
+const changeMetadataStep = {
+  support: "editable",
+  toolId: "changeMetadata",
+  params: changeMetadataDefaults,
+} as unknown as WorkingToolStep;
+
+const changeMetadataRegistry = {
+  changeMetadata: { automationSettings: ChangeMetadataSingleStep },
+} as unknown as Partial<ToolRegistry>;
+
+// The real Overlay PDFs automation settings. Its overlay-file picker uses the
+// editor FilesModal when present; that read is now optional so the portal (which
+// mounts no FilesModalProvider) renders a plain file input instead of crashing.
+const overlayStep = {
+  support: "editable",
+  toolId: "overlayPdfs",
+  params: overlayDefaults,
+} as unknown as WorkingToolStep;
+
+const overlayRegistry = {
+  overlayPdfs: { automationSettings: OverlayPdfsSettings },
+} as unknown as Partial<ToolRegistry>;
+
 describe("PipelineStepSettings", () => {
   it("renders reused editor tool settings (which use the shared Tooltip) without app-wide Preferences/Sidebar providers", () => {
     expect(() =>
@@ -72,6 +116,8 @@ describe("PipelineStepSettings", () => {
             step={step}
             registry={registry}
             onChange={() => {}}
+            assetNames={{}}
+            onClearBinding={() => {}}
           />
         </PortalTestProviders>,
       ),
@@ -87,6 +133,8 @@ describe("PipelineStepSettings", () => {
             step={convertStep}
             registry={convertRegistry}
             onChange={() => {}}
+            assetNames={{}}
+            onClearBinding={() => {}}
           />
         </PortalTestProviders>,
       ),
@@ -94,6 +142,40 @@ describe("PipelineStepSettings", () => {
     expect(screen.getByText(/Convert from/)).toBeInTheDocument();
   });
 
+  it("renders the Change Metadata tool's fields in the portal, with no ViewerProvider mounted", () => {
+    expect(() =>
+      render(
+        <PortalTestProviders>
+          <PipelineStepSettings
+            step={changeMetadataStep}
+            registry={changeMetadataRegistry}
+            onChange={() => {}}
+            assetNames={{}}
+            onClearBinding={() => {}}
+          />
+        </PortalTestProviders>,
+      ),
+    ).not.toThrow();
+    expect(screen.getByText("Standard Metadata")).toBeInTheDocument();
+  });
+
+  it("renders the Overlay PDFs tool's fields in the portal, with no FilesModalProvider mounted", () => {
+    expect(() =>
+      render(
+        <PortalTestProviders>
+          <PipelineStepSettings
+            step={overlayStep}
+            registry={overlayRegistry}
+            onChange={() => {}}
+            assetNames={{}}
+            onClearBinding={() => {}}
+          />
+        </PortalTestProviders>,
+      ),
+    ).not.toThrow();
+    expect(screen.getByText("Overlay Mode")).toBeInTheDocument();
+  });
+
   // Reproduces the convert-in-pipeline bug: picking a source format fires several onParameterChange
   // calls in one tick (set fromExtension, auto-target, reset options). If each rebuilt from the
   // step snapshot captured at render they'd clobber each other and the earlier field would be lost.
@@ -131,6 +213,8 @@ describe("PipelineStepSettings", () => {
                 typeof update === "function" ? update(prev) : update,
               )
             }
+            assetNames={{}}
+            onClearBinding={() => {}}
           />
           <span data-testid="out">{JSON.stringify(params)}</span>
         </>
@@ -148,3 +232,91 @@ describe("PipelineStepSettings", () => {
     });
   });
 });
+
+// Records a render crash and swallows it (renders nothing), so one broken tool is attributed by id
+// instead of aborting the whole sweep - mirroring the portal's own ErrorBoundary around the builder.
+class CaptureBoundary extends Component<
+  { onError: (error: Error) => void; children: ReactNode },
+  { failed: boolean }
+> {
+  state = { failed: false };
+  static getDerivedStateFromError() {
+    return { failed: true };
+  }
+  componentDidCatch(error: Error) {
+    this.props.onError(error);
+  }
+  render() {
+    return this.state.failed ? null : this.props.children;
+  }
+}
+
+// Automated version of the manual "add every tool" sweep: render each tool's real automation
+// settings in a portal-only context (the same Preferences + Sidebar + Suspense wrappers
+// PipelineStepSettings uses, and NO editor providers) and fail listing any that throw. This is the
+// guard that would have caught Change Metadata (useViewer) and Overlay PDFs (useFilesModalContext).
+describe("PipelineStepSettings: every tool's settings render in the portal", () => {
+  it("renders each tool's automation settings without throwing", async () => {
+    const { result } = renderHook(() => useTranslatedToolCatalog());
+    const catalog = result.current.allTools;
+    // getExecutableTools is exactly what PipelineBuilder feeds its "Add a tool" picker, so this
+    // sweeps precisely the tools a user can add. Narrow to "editable" (renders a settings
+    // component); "noSettings"/"unsupported" steps show a Banner instead and can't crash.
+    const editableTools = getExecutableTools(catalog)
+      .filter((tool) => tool.support === "editable")
+      .map((tool) => [tool.toolId, catalog[tool.toolId]] as const)
+      .filter(([, entry]) => Boolean(entry?.automationSettings));
+    // Guard against the filter silently matching nothing (e.g. a registry-shape change).
+    expect(editableTools.length).toBeGreaterThan(10);
+
+    const failures: { toolId: string; message: string }[] = [];
+
+    for (const [toolId, entry] of editableTools) {
+      const Settings = entry.automationSettings as ComponentType<
+        ToolAutomationSettingsProps<ErasedToolParams>
+      >;
+      const params = (entry.operationConfig?.defaultParameters ??
+        {}) as ErasedToolParams;
+
+      const caught: { error: Error | null } = { error: null };
+      // The sentinel sibling commits only once the lazy Settings actually renders, so we wait for a
+      // real render (or a caught throw) - not just the providers' wrapper DOM.
+      const { unmount } = render(
+        <PortalTestProviders>
+          <PreferencesProvider>
+            <SidebarProvider>
+              <CaptureBoundary
+                onError={(error) => {
+                  caught.error = error;
+                }}
+              >
+                <Suspense fallback={null}>
+                  <Settings
+                    parameters={params}
+                    onParameterChange={() => {}}
+                    disabled={false}
+                  />
+                  <span data-testid={`rendered-${toolId}`} />
+                </Suspense>
+              </CaptureBoundary>
+            </SidebarProvider>
+          </PreferencesProvider>
+        </PortalTestProviders>,
+      );
+
+      await waitFor(() =>
+        expect(
+          caught.error !== null ||
+            screen.queryByTestId(`rendered-${toolId}`) !== null,
+        ).toBe(true),
+      );
+
+      if (caught.error) {
+        failures.push({ toolId, message: caught.error.message });
+      }
+      unmount();
+    }
+
+    expect(failures).toEqual([]);
+  }, 30000);
+});
diff --git a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.tsx b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.tsx
index 58fb2a96fa..3d17dbf652 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.tsx
+++ b/frontend/editor/src/portal/components/pipelines/PipelineStepSettings.tsx
@@ -1,15 +1,22 @@
 import { Suspense } from "react";
 import { useTranslation } from "react-i18next";
-import { Banner } from "@app/ui";
+import InsertDriveFileOutlinedIcon from "@mui/icons-material/InsertDriveFileOutlined";
+import { Banner, Chip } from "@app/ui";
 import { PreferencesProvider } from "@app/contexts/PreferencesContext";
 import { SidebarProvider } from "@app/contexts/SidebarContext";
 import { type ToolRegistry } from "@app/data/toolsTaxonomy";
 import { type ErasedToolParams } from "@app/hooks/tools/shared/toolOperationTypes";
-import { type WorkingToolStep } from "@app/hooks/tools/shared/toolAutomation";
+import {
+  activeFileFields,
+  assetRefIds,
+  extractStepFiles,
+  type WorkingToolStep,
+} from "@app/hooks/tools/shared/toolAutomation";
 
 import { PolicyExternalApiConfig } from "@portal/components/policies/PolicyExternalApiConfig";
 import { isIntegrationStep } from "@portal/components/pipelines/integrationStep";
 import type { ExternalApiStepParams } from "@portal/components/policies/stepOperations";
+import "@portal/components/pipelines/PipelineStepSettings.css";
 
 /**
  * A params update: the next params outright, or a merge from the latest params. Settings UIs fire
@@ -25,17 +32,61 @@ interface PipelineStepSettingsProps {
   step: WorkingToolStep;
   registry: Partial<ToolRegistry>;
   onChange: (update: ParamsUpdate) => void;
+  /** Stored asset id -> file name, for labelling the supporting-file chips on a reopened pipeline. */
+  assetNames: Record<string, string>;
+  /** Drop a field's stored supporting-file binding (the user re-picks a file if the step still needs one). */
+  onClearBinding: (field: string) => void;
+}
+
+/** One reopened supporting file shown as a chip: the field it binds and the stored file name(s). */
+interface StoredFileChip {
+  field: string;
+  label: string;
+}
+
+/**
+ * The supporting files this step is reusing from a previous save: an active binding whose field has
+ * no fresh pick (a fresh pick shows in the tool's own file picker instead). Labelled by the resolved
+ * asset name so the user sees "using cert.pfx" rather than an empty picker.
+ */
+function storedFileChips(
+  step: WorkingToolStep,
+  registry: Partial<ToolRegistry>,
+  assetNames: Record<string, string>,
+): StoredFileChip[] {
+  const bindings = step.fileParameters;
+  if (!bindings) return [];
+  // A null active set means the tool couldn't be probed; show every stored binding rather than hide
+  // the user's files (mirrors the save path, which keeps them too).
+  const active = activeFileFields(step, registry);
+  const activeSet = active === null ? null : new Set(active);
+  const fresh = extractStepFiles(step, registry);
+  return Object.entries(bindings)
+    .filter(
+      ([field]) =>
+        (activeSet === null || activeSet.has(field)) && !fresh[field],
+    )
+    .map(([field, binding]) => ({
+      field,
+      label:
+        assetRefIds(binding)
+          .map((id) => assetNames[id] ?? id)
+          .join(", ") || binding,
+    }));
 }
 
 /**
  * Renders the parameter editor for one pipeline step, chosen by the tool's capability:
  * the tool's own settings UI when editable, an explanatory note when it has no parameters,
- * or a "not supported yet" fallback for tools not yet migrated to the mapper seam.
+ * or a "not supported yet" fallback for tools not yet migrated to the mapper seam. Reopened
+ * supporting files appear as removable chips above the tool's own settings.
  */
 export function PipelineStepSettings({
   step,
   registry,
   onChange,
+  assetNames,
+  onClearBinding,
 }: PipelineStepSettingsProps) {
   // Hooks first: selecting a different step re-renders this same instance, so an early return
   // above useTranslation would change the hook count between renders and crash.
@@ -52,41 +103,70 @@ export function PipelineStepSettings({
     );
   }
 
-  if (step.support === "noSettings") {
-    return (
-      <Banner
-        tone="info"
-        description={t("portal.pipelines.composer.noToolSettings")}
-      />
-    );
-  }
+  const chips = storedFileChips(step, registry, assetNames);
 
-  const entry = step.toolId ? registry[step.toolId] : undefined;
-  const Settings =
-    step.support === "editable" ? entry?.automationSettings : null;
-
-  if (!Settings) {
+  function toolBody() {
+    if (step.support === "noSettings") {
+      return (
+        <Banner
+          tone="info"
+          description={t("portal.pipelines.composer.noToolSettings")}
+        />
+      );
+    }
+    const entry = step.toolId ? registry[step.toolId] : undefined;
+    const Settings =
+      step.support === "editable" ? entry?.automationSettings : null;
+    if (!Settings) {
+      return (
+        <Banner
+          tone="warning"
+          description={t("portal.pipelines.composer.editingUnsupported")}
+        />
+      );
+    }
     return (
-      <Banner
-        tone="warning"
-        description={t("portal.pipelines.composer.editingUnsupported")}
-      />
+      <PreferencesProvider>
+        <SidebarProvider>
+          <Suspense fallback={null}>
+            <Settings
+              parameters={step.params}
+              onParameterChange={(key, value) =>
+                onChange((prev) => ({ ...prev, [key]: value }))
+              }
+              disabled={false}
+            />
+          </Suspense>
+        </SidebarProvider>
+      </PreferencesProvider>
     );
   }
 
   return (
-    <PreferencesProvider>
-      <SidebarProvider>
-        <Suspense fallback={null}>
-          <Settings
-            parameters={step.params}
-            onParameterChange={(key, value) =>
-              onChange((prev) => ({ ...prev, [key]: value }))
-            }
-            disabled={false}
-          />
-        </Suspense>
-      </SidebarProvider>
-    </PreferencesProvider>
+    <>
+      {chips.length > 0 && (
+        <div className="portal-step-settings__files">
+          <span className="portal-step-settings__files-label">
+            {t("portal.pipelines.builder.supportingFiles")}
+          </span>
+          <div className="portal-step-settings__files-chips">
+            {chips.map((chip) => (
+              <Chip
+                key={chip.field}
+                leadingIcon={
+                  <InsertDriveFileOutlinedIcon
+                    style={{ fontSize: "0.875rem" }}
+                  />
+                }
+                onRemove={() => onClearBinding(chip.field)}
+              >
+                {chip.label}
+              </Chip>
+            ))}
+          </div>
+        </div>
+      )}
+      {toolBody()}
+    </>
   );
 }
diff --git a/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx b/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx
index ec68e061e7..3e52e6ca0d 100644
--- a/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx
+++ b/frontend/editor/src/portal/components/pipelines/PipelinesTable.tsx
@@ -1,13 +1,11 @@
 import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
 import AccountTreeRounded from "@mui/icons-material/AccountTreeRounded";
-import ChevronRightRoundedIcon from "@mui/icons-material/ChevronRightRounded";
 import {
-  Chip,
-  StatusBadge,
+  column,
+  DataTable,
+  type DataTableColumn,
   type StatusTone,
-  Table,
-  type TableColumn,
 } from "@app/ui";
 import type { PipelineStatus, PipelineView } from "@portal/api/pipelines";
 
@@ -24,87 +22,56 @@ interface PipelinesTableProps {
 
 export function PipelinesTable({ pipelines, onRowClick }: PipelinesTableProps) {
   const { t } = useTranslation();
-  const columns = useMemo<TableColumn<PipelineView>[]>(
+  const columns = useMemo<DataTableColumn<PipelineView>[]>(
     () => [
-      {
+      column.entity({
         key: "name",
         header: t("portal.pipelines.table.name"),
-        render: (p) => (
-          <div className="portal-pipelines__name-cell">
-            <span className="portal-pipelines__pipe-dot" aria-hidden>
-              <AccountTreeRounded style={{ fontSize: "1.2rem" }} />
-            </span>
-            <div className="portal-pipelines__name-text">
-              <strong>{p.name}</strong>
-              <Chip accent="neutral" size="sm">
-                {t(`portal.pipelines.trigger.${p.trigger}`, {
-                  defaultValue: p.trigger,
-                })}
-              </Chip>
-            </div>
-          </div>
-        ),
-      },
-      {
+        sortable: true,
+        icon: () => <AccountTreeRounded />,
+        primary: (p) => p.name,
+      }),
+      column.text({
+        key: "trigger",
+        header: t("portal.pipelines.table.trigger", "Trigger"),
+        sortable: true,
+        get: (p) =>
+          t(`portal.pipelines.trigger.${p.trigger}`, {
+            defaultValue: p.trigger,
+          }),
+      }),
+      column.badge({
         key: "status",
         header: t("portal.pipelines.table.status"),
-        render: (p) => (
-          <StatusBadge tone={STATUS_TONE[p.status]} size="sm">
-            {t(`portal.pipelines.status.${p.status}`)}
-          </StatusBadge>
-        ),
-      },
-      {
+        sortable: true,
+        get: (p) => ({
+          tone: STATUS_TONE[p.status],
+          label: t(`portal.pipelines.status.${p.status}`),
+        }),
+      }),
+      column.number({
         key: "steps",
         header: t("portal.pipelines.table.steps"),
-        align: "right",
-        render: (p) => (
-          <span
-            className={
-              p.steps.length === 0 ? "portal-pipelines__muted" : undefined
-            }
-          >
-            {p.steps.length}
-          </span>
-        ),
-      },
-      {
+        sortable: true,
+        get: (p) => p.steps.length,
+      }),
+      column.number({
         key: "sources",
         header: t("portal.pipelines.table.sources"),
-        align: "right",
-        render: (p) => (
-          <span
-            className={
-              p.sources.length === 0 ? "portal-pipelines__muted" : undefined
-            }
-          >
-            {p.sources.length}
-          </span>
-        ),
-      },
-      {
-        key: "open",
-        header: t("portal.pipelines.table.open"),
-        headerHidden: true,
-        align: "right",
-        width: "2.5rem",
-        render: () => (
-          <span className="portal-pipelines__caret" aria-hidden>
-            <ChevronRightRoundedIcon style={{ fontSize: "1.25rem" }} />
-          </span>
-        ),
-      },
+        sortable: true,
+        get: (p) => p.sources.length,
+      }),
     ],
     [t],
   );
 
   return (
-    <Table<PipelineView>
-      className="portal-pipelines__table"
+    <DataTable<PipelineView>
       columns={columns}
       rows={pipelines}
       rowKey={(p) => p.id}
       onRowClick={onRowClick}
+      rowAffordance="chevron"
     />
   );
 }
diff --git a/frontend/editor/src/portal/components/pipelines/graph/PipelineGraph.css b/frontend/editor/src/portal/components/pipelines/graph/PipelineGraph.css
index c9aff67012..19fac1d0b1 100644
--- a/frontend/editor/src/portal/components/pipelines/graph/PipelineGraph.css
+++ b/frontend/editor/src/portal/components/pipelines/graph/PipelineGraph.css
@@ -19,7 +19,7 @@
      the cards in light. */
   background: var(--c-surface-sunken);
   border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-lg);
+  border-radius: var(--radius-nav);
 }
 
 /* Sits beside the wire it is describing. Absolute, so appearing mid-drag moves nothing. */
diff --git a/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx b/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx
index e2c8dc6b85..ae564ab1eb 100644
--- a/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx
+++ b/frontend/editor/src/portal/components/policies/PolicyCatalogueTable.tsx
@@ -1,9 +1,8 @@
 import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
-import { Button, Chip, StatusBadge, Table, type TableColumn } from "@app/ui";
+import { column, DataTable, type DataTableColumn } from "@app/ui";
 import type { CatalogueEntry } from "@portal/api/policies";
-import { PolicyCategoryBadge } from "@portal/components/policies/PolicyCategoryIcon";
-import "@portal/views/Policies.css";
+import { policyCategoryIcon } from "@app/components/policies/policyCategoryIcon";
 
 interface PolicyCatalogueTableProps {
   entries: CatalogueEntry[];
@@ -15,10 +14,9 @@ interface PolicyCatalogueTableProps {
 }
 
 /**
- * The policy catalogue as a proper data table (Policy / Enforces / Applies to /
- * Docs / Status), replacing the stacked full-width cards that read as "blocky".
- * Same shared Table + StatusBadge + Chip primitives the Sources, Documents and
- * Home policy tables use, so every list page in the portal now reads alike.
+ * The policy catalogue as a data table (Policy / Enforces / Applies to / Docs /
+ * Status). The status column resolves per row to a state badge, an info chip
+ * (coming soon / requires AI), or a "Set up" call to action.
  */
 export function PolicyCatalogueTable({
   entries,
@@ -28,109 +26,81 @@ export function PolicyCatalogueTable({
 }: PolicyCatalogueTableProps) {
   const { t } = useTranslation();
 
-  const columns = useMemo<TableColumn<CatalogueEntry>[]>(
+  const columns = useMemo<DataTableColumn<CatalogueEntry>[]>(
     () => [
-      {
+      column.entity({
         key: "policy",
         header: t("portal.policies.table.policy", "Policy"),
-        render: (entry) => (
-          <div className="portal-policies__cell">
-            <PolicyCategoryBadge category={entry.category} />
-            <strong className="portal-policies__cell-name">
-              {t(entry.category.label)}
-            </strong>
-          </div>
-        ),
-      },
-      {
+        sortable: true,
+        icon: (entry) => policyCategoryIcon(entry.category.id),
+        primary: (entry) => t(entry.category.label),
+      }),
+      column.text({
         key: "enforces",
         header: t("portal.policies.table.enforces", "Enforces"),
-        render: (entry) => (
-          <div className="portal-policies__rulechips">
-            {entry.config.rules.map((r) => (
-              <Chip key={r} accent="neutral" size="sm">
-                {t(r)}
-              </Chip>
-            ))}
-          </div>
-        ),
-      },
-      {
+        get: (entry) => entry.config.rules.map((r) => t(r)).join(", "),
+      }),
+      column.muted({
         key: "scope",
         header: t("portal.policies.table.appliesTo", "Applies to"),
-        render: (entry) => (
-          <span className="portal-policies__muted">
-            {t(entry.config.scopeLabel)}
-          </span>
-        ),
-      },
-      {
+        sortable: true,
+        get: (entry) => t(entry.config.scopeLabel),
+      }),
+      column.number({
         key: "docs",
         header: t("portal.policies.table.docs", "Docs enforced"),
-        align: "right",
-        width: "8rem",
-        render: (entry) => (
-          <span className="portal-policies__docs">
-            {entry.policy ? entry.policy.stats.enforced.toLocaleString() : "—"}
-          </span>
-        ),
-      },
-      {
+        sortable: true,
+        get: (entry) => (entry.policy ? entry.policy.stats.enforced : null),
+        format: (n) => n.toLocaleString(),
+      }),
+      column.badge({
         key: "status",
         header: t("portal.policies.table.status", "Status"),
-        align: "right",
-        width: "8.5rem",
-        render: (entry) => {
+        sortable: true,
+        // Every state reads as one badge; the "set up" affordance is the row
+        // itself (click + chevron), so there's no bespoke button in the cell.
+        get: (entry) => {
           if (entry.category.comingSoon) {
-            // One consistent neutral chip for every "Upgrade to Enterprise" —
-            // the same action should read the same on every row.
-            return (
-              <Chip accent="neutral" size="sm">
-                {t("portal.policies.card.comingSoon")}
-              </Chip>
-            );
+            return {
+              tone: "neutral",
+              label: t("portal.policies.card.comingSoon"),
+            };
           }
           if (isLocked?.(entry)) {
-            return (
-              <Chip accent="neutral" size="sm">
-                {lockedLabel ?? t("portal.policies.card.requiresAiEngine")}
-              </Chip>
-            );
+            return {
+              tone: "neutral",
+              label: lockedLabel ?? t("portal.policies.card.requiresAiEngine"),
+            };
           }
           if (entry.policy) {
             const paused = entry.policy.state.status === "paused";
-            return (
-              <StatusBadge tone={paused ? "warning" : "success"} size="sm">
-                {paused
-                  ? t("portal.policies.status.paused")
-                  : t("portal.policies.status.active")}
-              </StatusBadge>
-            );
+            return {
+              tone: paused ? "warning" : "success",
+              label: paused
+                ? t("portal.policies.status.paused")
+                : t("portal.policies.status.active"),
+            };
           }
-          return (
-            <Button size="sm" variant="secondary" onClick={() => onOpen(entry)}>
-              {t("portal.policySummary.action.setUp")}
-            </Button>
-          );
+          return {
+            tone: "neutral",
+            label: t("portal.policySummary.action.setUp"),
+          };
         },
-      },
+      }),
     ],
     [t, onOpen, isLocked, lockedLabel],
   );
 
   return (
-    <Table<CatalogueEntry>
-      className="portal-policies__table"
+    <DataTable<CatalogueEntry>
       columns={columns}
       rows={entries}
       rowKey={(e) => e.category.id}
-      onRowClick={(entry) =>
-        entry.category.comingSoon || isLocked?.(entry)
-          ? undefined
-          : onOpen(entry)
+      onRowClick={onOpen}
+      isRowInteractive={(e) =>
+        !(e.category.comingSoon || (isLocked?.(e) ?? false))
       }
-      // A category with no policy yet renders a "set up" button, which opens the same thing.
-      rowsContainControls
+      rowAffordance="chevron"
     />
   );
 }
diff --git a/frontend/editor/src/portal/components/policies/PolicyExternalApiConfig.tsx b/frontend/editor/src/portal/components/policies/PolicyExternalApiConfig.tsx
index 76869bb77a..8be82aaaeb 100644
--- a/frontend/editor/src/portal/components/policies/PolicyExternalApiConfig.tsx
+++ b/frontend/editor/src/portal/components/policies/PolicyExternalApiConfig.tsx
@@ -10,6 +10,8 @@ import {
   type ConnectionCategory,
 } from "@portal/components/sources/connectionTypes";
 import { BrandMark } from "@portal/components/BrandMarks";
+import "@portal/theme/surface.css";
+import "@portal/components/sources/connections.css";
 import {
   STEP_OPERATIONS,
   buildStepParameters,
@@ -258,7 +260,7 @@ function OperationGrid({
             key={op.id}
             type="button"
             className={
-              "portal-conn-picker__card" +
+              "portal-surface portal-conn-picker__card" +
               (op.custom ? " portal-conn-picker__card--advanced" : "")
             }
             onClick={() => onPick(op)}
diff --git a/frontend/editor/src/portal/components/policies/stepOperations.test.ts b/frontend/editor/src/portal/components/policies/stepOperations.test.ts
index 3c2dd1c29c..beedf4b1bb 100644
--- a/frontend/editor/src/portal/components/policies/stepOperations.test.ts
+++ b/frontend/editor/src/portal/components/policies/stepOperations.test.ts
@@ -229,6 +229,90 @@ describe("the Cloudmersive scan gate", () => {
   });
 });
 
+describe("the n8n operations", () => {
+  it("covers each of the engine's response behaviours exactly once", () => {
+    // A Webhook node can reply, so n8n reaches replace and requireTrue as well as report;
+    // collapsed onto notify() the extra three would silently become fire-and-forget.
+    const shape = (id: string) => {
+      const params = buildStepParameters(operationById(id)!, "1", {
+        message: "x",
+      });
+      return {
+        includeFile: params.includeFile,
+        responseMode: params.responseMode,
+        requireTrue: params.requireTrue,
+      };
+    };
+
+    expect(shape("n8nNotify")).toEqual({
+      includeFile: "false",
+      responseMode: "report",
+      requireTrue: "",
+    });
+    expect(shape("n8nSend")).toEqual({
+      includeFile: "true",
+      responseMode: "report",
+      requireTrue: "",
+    });
+    expect(shape("n8nTransform")).toEqual({
+      includeFile: "true",
+      responseMode: "replace",
+      requireTrue: "",
+    });
+    expect(shape("n8nGate")).toEqual({
+      includeFile: "true",
+      responseMode: "report",
+      requireTrue: "approved",
+    });
+  });
+
+  it("sends the facts as fields rather than one sentence to parse", () => {
+    const params = buildStepParameters(operationById("n8nNotify")!, "1", {
+      message: "done",
+    });
+    const body = JSON.parse(params.bodyTemplate) as Record<string, unknown>;
+
+    expect(body.message).toBe("done");
+    expect(body.document).toEqual({
+      filename: "{{document.filename}}",
+      extension: "{{document.extension}}",
+      contentType: "{{document.contentType}}",
+      sizeBytes: "{{document.sizeBytes}}",
+      sha256: "{{document.sha256}}",
+    });
+    expect(body.run).toMatchObject({ policy: "{{run.policyName}}" });
+  });
+
+  it("uses no PDF-only placeholder in a fixed body", () => {
+    // document.pageCount is added only for PDFs, and the backend throws on a placeholder it cannot
+    // resolve - baking it in would fail the step on the first non-PDF that reached it.
+    for (const id of ["n8nNotify", "n8nSend", "n8nTransform", "n8nGate"]) {
+      const params = buildStepParameters(operationById(id)!, "1", {
+        message: "x",
+      });
+      expect(params.bodyTemplate, id).not.toContain("pageCount");
+    }
+  });
+
+  it("gives the workflow the run's context beside the file", () => {
+    for (const id of ["n8nSend", "n8nTransform", "n8nGate"]) {
+      const params = buildStepParameters(operationById(id)!, "1", {});
+      expect(params.includeContext, id).toBe("true");
+      expect(params.bodyMode, id).toBe("multipart");
+    }
+  });
+
+  it("leaves every other vendor's context off", () => {
+    // includeContext used to be hardcoded false; now that it is per-operation, a vendor with a
+    // fixed API would reject the extra part.
+    const optedIn = STEP_OPERATIONS.filter(
+      (op) => buildStepParameters(op, "1", {}).includeContext === "true",
+    ).map((op) => op.id);
+
+    expect(optedIn.sort()).toEqual(["n8nGate", "n8nSend", "n8nTransform"]);
+  });
+});
+
 describe("substituting an answer into the URL path", () => {
   it("percent-encodes the answer so a slash stays a value, not a new segment", () => {
     // A Jira key like "OPS/1" (or a space) must not add a path segment or reach another endpoint.
diff --git a/frontend/editor/src/portal/components/policies/stepOperations.ts b/frontend/editor/src/portal/components/policies/stepOperations.ts
index 5c6e0958d9..c1b7beb8c8 100644
--- a/frontend/editor/src/portal/components/policies/stepOperations.ts
+++ b/frontend/editor/src/portal/components/policies/stepOperations.ts
@@ -83,6 +83,9 @@ export interface OperationCall {
   bodyTemplate?: string;
   /** False for notify-style calls that send facts rather than the document. */
   includeFile?: boolean;
+  /** Send the fact context beside the document so the receiver can branch on the run.
+   * Off by default: a vendor with a fixed API has no field for it. */
+  includeContext?: boolean;
 }
 
 export interface StepOperation {
@@ -153,6 +156,138 @@ function notify(
   };
 }
 
+/** Facts every document has, whatever its type — `document.pageCount` is PDF-only and would
+ * fail the step on anything else, so it is offered in the editable message rather than baked in. */
+const N8N_FACTS = {
+  event: "policy.document.processed",
+  run: {
+    policy: "{{run.policyName}}",
+    id: "{{run.runId}}",
+    at: "{{run.timestamp}}",
+  },
+  document: {
+    filename: "{{document.filename}}",
+    extension: "{{document.extension}}",
+    contentType: "{{document.contentType}}",
+    sizeBytes: "{{document.sizeBytes}}",
+    sha256: "{{document.sha256}}",
+  },
+};
+
+/** The four shapes an n8n workflow can take part in; see the catalogue entry for why n8n gets more
+ * than one. All four post to the Webhook node's URL, which is the whole endpoint. */
+function n8nOperations(): StepOperation[] {
+  const base = {
+    connectionTypeId: "n8n",
+    integrationType: "API" as const,
+    category: "notify" as const,
+  };
+  const entry = (
+    id: string,
+    call: OperationCall,
+    extra: Partial<StepOperation> = {},
+  ) => ({
+    ...base,
+    id,
+    labelKey: `${PREFIX}.${id}.label`,
+    descriptionKey: `${PREFIX}.${id}.description`,
+    call,
+    ...extra,
+  });
+
+  return [
+    // Facts only, structured rather than one text blob: a workflow branches on
+    // fields instead of parsing a sentence back apart.
+    entry(
+      "n8nNotify",
+      {
+        path: "",
+        bodyMode: "json",
+        includeFile: false,
+        bodyTemplate: JSON.stringify({ ...N8N_FACTS, message: "{{message}}" }),
+      },
+      {
+        searchTerms: ["n8n", "notify", "trigger", "workflow", "automation"],
+        fields: [
+          {
+            key: "message",
+            labelKey: `${PREFIX}.fields.message.label`,
+            control: "textarea",
+            required: true,
+            helperTextKey: `${PREFIX}.fields.message.helperText`,
+            defaultValue: "{{run.policyName}} processed {{document.filename}}",
+          },
+        ],
+      },
+    ),
+
+    // The document itself, plus the facts as a `stirlingContext` part so the workflow knows which
+    // policy sent it. Fire-and-forget: whatever n8n replies is recorded, the document is unchanged.
+    entry(
+      "n8nSend",
+      {
+        path: "",
+        bodyMode: "multipart",
+        fileFieldName: "file",
+        includeContext: true,
+        responseMode: "report",
+      },
+      {
+        searchTerms: ["n8n", "send", "file", "upload", "workflow", "binary"],
+      },
+    ),
+
+    // The round trip: the returned file replaces the one in the pipeline. Needs the Webhook node
+    // set to "Respond to Webhook" - on "Immediately" its acknowledgement would replace the document.
+    entry(
+      "n8nTransform",
+      {
+        path: "",
+        bodyMode: "multipart",
+        fileFieldName: "file",
+        includeContext: true,
+        responseMode: "replace",
+      },
+      {
+        searchTerms: [
+          "n8n",
+          "transform",
+          "process",
+          "convert",
+          "workflow",
+          "replace",
+        ],
+        noteKey: `${PREFIX}.n8nTransform.note`,
+      },
+    ),
+
+    // The workflow decides whether the run continues. `requireTrue` is fail-closed, so an n8n
+    // outage or a malformed reply parks the document rather than waving it through.
+    entry(
+      "n8nGate",
+      {
+        path: "",
+        bodyMode: "multipart",
+        fileFieldName: "file",
+        includeContext: true,
+        responseMode: "report",
+        requireTrue: "approved",
+      },
+      {
+        searchTerms: [
+          "n8n",
+          "approve",
+          "gate",
+          "review",
+          "decision",
+          "workflow",
+        ],
+        noteKey: `${PREFIX}.n8nGate.note`,
+      },
+    ),
+  ];
+}
+
 export const STEP_OPERATIONS: StepOperation[] = [
   // ---- scan & classify: the verdict gates the run ------------------------------------------
   {
@@ -501,6 +636,11 @@ export const STEP_OPERATIONS: StepOperation[] = [
     "trigger",
   ]),
 
+  // ---- n8n: the one vendor here that can answer back ---------------------------------------------
+  // A Webhook node takes binary and can return what the workflow produces, so n8n reaches all three
+  // engine modes - report, replace and a `requireTrue` verdict - and gets an operation for each.
+  ...n8nOperations(),
+
   {
     id: "webhookPost",
     connectionTypeId: "webhook",
@@ -660,7 +800,7 @@ export function buildStepParameters(
     headers: call.headers ? substituteJson(JSON.stringify(call.headers)) : "",
     fields: call.fields ? substituteJson(JSON.stringify(call.fields)) : "",
     bodyTemplate: call.bodyTemplate ? substituteJson(call.bodyTemplate) : "",
-    includeContext: "false",
+    includeContext: String(call.includeContext ?? false),
     includeFile: String(call.includeFile ?? true),
     operationId: op.id,
     operationValues: JSON.stringify(values),
diff --git a/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx b/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx
index ef2172bb27..643d6dd56b 100644
--- a/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx
+++ b/frontend/editor/src/portal/components/procurement/DealStatusHero.tsx
@@ -15,6 +15,7 @@ import {
 } from "@portal/components/icons";
 import { warmCalendly } from "@portal/components/procurement/CalendlyInline";
 import { openApiUrl } from "@portal/api/externalUrl";
+import "@portal/theme/surface.css";
 import "@portal/views/Procurement.css";
 
 /** What each stage asks of the buyer, read out in the stage sentence. */
@@ -114,7 +115,7 @@ export function DealStatusHero({
   const nextStage = FLOW_JOURNEY[currentIdx + 1];
 
   return (
-    <div className="portal-hero">
+    <div className="portal-surface portal-hero">
       <div className="portal-hero__top">
         <div className="portal-hero__ident">
           <span className="portal-hero__eyebrow">
diff --git a/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx b/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx
index 7aee96c822..52c3fc10fb 100644
--- a/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx
+++ b/frontend/editor/src/portal/components/procurement/ProcurementAgreement.tsx
@@ -12,6 +12,7 @@ import {
 import { DownloadIcon } from "@portal/components/icons";
 import { StepModalHeader } from "@portal/components/shared/StepModalHeader";
 import { useAsync } from "@portal/hooks/useAsync";
+import "@portal/theme/surface.css";
 import "@portal/views/Procurement.css";
 
 /**
@@ -154,7 +155,7 @@ export function ProcurementAgreement({
         role="group"
         aria-label={t("portal.procurement.agreement.docName")}
       >
-        <div className="portal-agreement__doc">
+        <div className="portal-surface portal-agreement__doc">
           {loading && <p>{t("portal.procurement.agreement.loading")}</p>}
           {!loading && !doc && (
             <p>{t("portal.procurement.agreement.loadError")}</p>
diff --git a/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx b/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx
index 98fcbd4f04..409f470685 100644
--- a/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx
+++ b/frontend/editor/src/portal/components/procurement/QuoteBuilder.tsx
@@ -16,6 +16,7 @@ import {
 } from "@portal/api/procurement";
 import { LegalDocumentModal } from "@portal/components/procurement/ProcurementExtras";
 import { StepModalHeader } from "@portal/components/shared/StepModalHeader";
+import "@portal/theme/surface.css";
 import "@portal/views/Procurement.css";
 
 const STEPS = ["volume", "plan", "details", "review"] as const;
@@ -526,7 +527,7 @@ export function QuoteBuilder({
             PDF and the Stripe quote exactly. */}
         {step === REVIEW_STEP && issued && (
           <div className="portal-qb__papertray">
-            <div className="portal-qb__paper">
+            <div className="portal-surface portal-qb__paper">
               <div className="portal-qb__paper-head">
                 <div>
                   <div className="portal-qb__paper-brand">Stirling PDF</div>
diff --git a/frontend/editor/src/portal/components/sources/ConnectionForm.tsx b/frontend/editor/src/portal/components/sources/ConnectionForm.tsx
index f975e5cc9d..6bcb1cc8b5 100644
--- a/frontend/editor/src/portal/components/sources/ConnectionForm.tsx
+++ b/frontend/editor/src/portal/components/sources/ConnectionForm.tsx
@@ -5,6 +5,7 @@ import {
   type ConnectionFieldDef,
   type CreatableConnectionType,
 } from "@portal/components/sources/connectionTypes";
+import "@portal/components/sources/connections.css";
 
 /**
  * Renders whatever fields a connection type declares, rather than knowing any vendor's shape.
diff --git a/frontend/editor/src/portal/components/sources/ConnectionModal.test.tsx b/frontend/editor/src/portal/components/sources/ConnectionModal.test.tsx
index 4938b05b39..6f7b67961c 100644
--- a/frontend/editor/src/portal/components/sources/ConnectionModal.test.tsx
+++ b/frontend/editor/src/portal/components/sources/ConnectionModal.test.tsx
@@ -262,7 +262,7 @@ describe("ConnectionModal", () => {
     expect(screen.queryByText("portal.connections.types.s3.label")).toBeNull();
   });
 
-  it("picking a vendor opens its form, and the back link returns to the grid", async () => {
+  it("picking a vendor opens its form, and the header back arrow returns to the grid", async () => {
     render(wrap(<ConnectionModal open onClose={vi.fn()} onSaved={vi.fn()} />));
 
     await userEvent.click(
@@ -280,7 +280,9 @@ describe("ConnectionModal", () => {
       ).toBeInTheDocument(),
     );
 
-    await userEvent.click(screen.getByText("portal.connections.picker2.back"));
+    await userEvent.click(
+      screen.getByRole("button", { name: "portal.connections.picker2.back" }),
+    );
     await waitFor(() =>
       expect(
         screen.getByText("portal.connections.types.s3.label"),
diff --git a/frontend/editor/src/portal/components/sources/ConnectionModal.tsx b/frontend/editor/src/portal/components/sources/ConnectionModal.tsx
index b2845da0ba..298ea274bf 100644
--- a/frontend/editor/src/portal/components/sources/ConnectionModal.tsx
+++ b/frontend/editor/src/portal/components/sources/ConnectionModal.tsx
@@ -1,4 +1,3 @@
-import ArrowBackRoundedIcon from "@mui/icons-material/ArrowBackRounded";
 import { useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Banner, Button, Modal } from "@app/ui";
@@ -11,6 +10,7 @@ import {
 } from "@portal/api/integrations";
 import { ConnectionTypePicker } from "@portal/components/sources/ConnectionTypePicker";
 import { ConnectionForm } from "@portal/components/sources/ConnectionForm";
+import "@portal/components/sources/connections.css";
 import {
   CREATABLE_CONNECTION_TYPES,
   buildConnectionConfig,
@@ -151,6 +151,11 @@ export function ConnectionModal({
       onClose={onClose}
       // The grid wants room to breathe; a form is easier to read narrow.
       width={mode === "pick" ? "lg" : "md"}
+      // Once a type is chosen the header owns the step-back to the picker; the form
+      // body is just the fields. Only when a choice was actually offered (not a
+      // pinned slot or an edit, where the type is fixed).
+      onBack={mode === "form" && canPick ? () => setMode("pick") : undefined}
+      backLabel={t("portal.connections.picker2.back")}
       title={
         isEdit
           ? t("portal.connections.editTitle")
@@ -189,20 +194,6 @@ export function ConnectionModal({
         <ConnectionTypePicker types={available} onPick={pickType} />
       ) : (
         <>
-          {canPick && (
-            // The choice is made in the picker now; this just gets them back to it, so the
-            // selection stays visible without a dropdown that duplicates the grid.
-            <Button
-              variant="quiet"
-              size="sm"
-              className="portal-sources__connection-back"
-              leftSection={<ArrowBackRoundedIcon fontSize="inherit" />}
-              onClick={() => setMode("pick")}
-            >
-              {t("portal.connections.picker2.back")}
-            </Button>
-          )}
-
           {type ? (
             <ConnectionForm type={type} values={values} onChange={setValues} />
           ) : (
diff --git a/frontend/editor/src/portal/components/sources/ConnectionPicker.tsx b/frontend/editor/src/portal/components/sources/ConnectionPicker.tsx
index 9e7f4dc143..9d8deded4b 100644
--- a/frontend/editor/src/portal/components/sources/ConnectionPicker.tsx
+++ b/frontend/editor/src/portal/components/sources/ConnectionPicker.tsx
@@ -1,3 +1,4 @@
+import AddRoundedIcon from "@mui/icons-material/AddRounded";
 import { useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Banner, Button, Select } from "@app/ui";
@@ -9,6 +10,7 @@ import {
 } from "@portal/api/integrations";
 import { ConnectionModal } from "@portal/components/sources/ConnectionModal";
 import { connectionTypeOf } from "@portal/components/sources/connectionTypes";
+import "@portal/components/sources/connections.css";
 
 /**
  * Selects a stored connection of one type by id — an S3 bucket for a source, a Purview tenant for a
@@ -82,21 +84,26 @@ export function ConnectionPicker({
     };
   }, [integrationType, presetId]);
 
+  const openCreate = () => (onCreateNew ? onCreateNew() : setModalOpen(true));
+  const showSelect = (connections?.length ?? 0) > 0 || Boolean(value);
+
   return (
     <div className="portal-sources__connection-picker">
-      <Select
-        value={value || null}
-        placeholder={t("portal.connections.picker.placeholder")}
-        options={(connections ?? []).map((connection) => ({
-          value: String(connection.id),
-          label: connection.name,
-        }))}
-        onChange={(selected) => onChange(selected ?? "")}
-      />
+      {showSelect && (
+        <Select
+          value={value || null}
+          placeholder={t("portal.connections.picker.placeholder")}
+          options={(connections ?? []).map((connection) => ({
+            value: String(connection.id),
+            label: connection.name,
+          }))}
+          onChange={(selected) => onChange(selected ?? "")}
+        />
+      )}
       <Button
-        variant="tertiary"
-        size="sm"
-        onClick={() => (onCreateNew ? onCreateNew() : setModalOpen(true))}
+        variant="secondary"
+        leftSection={<AddRoundedIcon fontSize="inherit" />}
+        onClick={openCreate}
       >
         {t("portal.connections.picker.createNew")}
       </Button>
diff --git a/frontend/editor/src/portal/components/sources/ConnectionTypePicker.tsx b/frontend/editor/src/portal/components/sources/ConnectionTypePicker.tsx
index b652626d96..9540006ee3 100644
--- a/frontend/editor/src/portal/components/sources/ConnectionTypePicker.tsx
+++ b/frontend/editor/src/portal/components/sources/ConnectionTypePicker.tsx
@@ -8,6 +8,8 @@ import {
   type CreatableConnectionType,
 } from "@portal/components/sources/connectionTypes";
 import { BrandMark } from "@portal/components/BrandMarks";
+import "@portal/theme/surface.css";
+import "@portal/components/sources/connections.css";
 
 /**
  * Choose what to connect to.
@@ -112,7 +114,7 @@ function Grid({
             key={type.id}
             type="button"
             className={
-              "portal-conn-picker__card" +
+              "portal-surface portal-conn-picker__card" +
               (type.kind === "custom"
                 ? " portal-conn-picker__card--advanced"
                 : "")
diff --git a/frontend/editor/src/portal/components/sources/SourceModal.css b/frontend/editor/src/portal/components/sources/SourceModal.css
index 94ff215754..c514ea5f1b 100644
--- a/frontend/editor/src/portal/components/sources/SourceModal.css
+++ b/frontend/editor/src/portal/components/sources/SourceModal.css
@@ -35,7 +35,7 @@
   cursor: pointer;
   border: 1px solid var(--c-border);
   border-radius: var(--radius-md);
-  background: var(--c-surface);
+  background: var(--c-surface-raised);
   font: inherit;
   color: inherit;
   transition:
@@ -107,24 +107,24 @@ button.portal-source-modal__card:focus-visible {
   gap: 0.875rem;
 }
 
+/* The Advanced disclosure's revealed fields stack like the rest of the form. */
+.portal-source-modal__advanced-fields {
+  display: flex;
+  flex-direction: column;
+  gap: 0.875rem;
+}
+
 .portal-source-modal__loading {
   display: flex;
   justify-content: center;
   padding: 2rem 0;
 }
 
-.portal-source-modal__back {
-  align-self: flex-start;
-}
-
-.portal-source-modal__type-summary {
-  display: flex;
+/* Type identity in the modal header: brand icon beside the connector name. */
+.portal-source-modal__title {
+  display: inline-flex;
   align-items: center;
-  gap: 0.625rem;
-  padding: 0.625rem 0.75rem;
-  background: var(--c-surface-sunken);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-md);
+  gap: 0.5rem;
 }
 
 .portal-source-modal__muted {
@@ -144,14 +144,6 @@ button.portal-source-modal__card:focus-visible {
   min-width: 0;
 }
 
-.portal-source-modal__footer {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 0.75rem;
-  width: 100%;
-}
-
 .portal-source-modal__footer-actions {
   display: flex;
   align-items: center;
diff --git a/frontend/editor/src/portal/components/sources/SourceModal.test.tsx b/frontend/editor/src/portal/components/sources/SourceModal.test.tsx
index ca037fde3d..cac2b50942 100644
--- a/frontend/editor/src/portal/components/sources/SourceModal.test.tsx
+++ b/frontend/editor/src/portal/components/sources/SourceModal.test.tsx
@@ -82,7 +82,7 @@ describe("SourceModal", () => {
 
     // Stage 1: pick the folder connector, then fill name + directory.
     fireEvent.click(screen.getByText("portal.sources.types.folder.label"));
-    fireEvent.change(screen.getByLabelText(/portal\.integrations\.typedName/), {
+    fireEvent.change(screen.getByLabelText(/portal\.sources\.wizard\.name/), {
       target: { value: "Claims intake" },
     });
     fireEvent.change(
@@ -114,7 +114,7 @@ describe("SourceModal", () => {
     renderModal();
 
     fireEvent.click(screen.getByText("portal.sources.types.folder.label"));
-    fireEvent.change(screen.getByLabelText(/portal\.integrations\.typedName/), {
+    fireEvent.change(screen.getByLabelText(/portal\.sources\.wizard\.name/), {
       target: { value: "Claims intake" },
     });
     fireEvent.change(
@@ -139,7 +139,7 @@ describe("SourceModal", () => {
     renderModal();
 
     fireEvent.click(screen.getByText("portal.sources.types.folder.label"));
-    fireEvent.change(screen.getByLabelText(/portal\.integrations\.typedName/), {
+    fireEvent.change(screen.getByLabelText(/portal\.sources\.wizard\.name/), {
       target: { value: "Claims intake" },
     });
     fireEvent.change(
@@ -159,7 +159,7 @@ describe("SourceModal", () => {
   it("gates the s3 type on a chosen connection", async () => {
     renderModal();
     fireEvent.click(screen.getByText("portal.sources.types.s3.label"));
-    fireEvent.change(screen.getByLabelText(/portal\.integrations\.typedName/), {
+    fireEvent.change(screen.getByLabelText(/portal\.sources\.wizard\.name/), {
       target: { value: "Bucket source" },
     });
     expect(
@@ -180,7 +180,7 @@ describe("SourceModal", () => {
     const { onClose } = renderModal();
 
     fireEvent.click(screen.getByText("portal.sources.types.webhook.label"));
-    fireEvent.change(screen.getByLabelText(/portal\.integrations\.typedName/), {
+    fireEvent.change(screen.getByLabelText(/portal\.sources\.wizard\.name/), {
       target: { value: "Partner uploads" },
     });
     fireEvent.click(screen.getByText("portal.sources.builder.create"));
@@ -253,7 +253,7 @@ describe("SourceModal", () => {
     fireEvent.click(screen.getByText("portal.sources.types.sharepoint.label"));
     // Still on the type stage: no configure form appeared.
     expect(
-      screen.queryByLabelText(/portal\.integrations\.typedName/),
+      screen.queryByLabelText(/portal\.sources\.wizard\.name/),
     ).not.toBeInTheDocument();
     expect(
       screen.getAllByText("portal.sources.builder.comingSoon").length,
diff --git a/frontend/editor/src/portal/components/sources/SourceModal.tsx b/frontend/editor/src/portal/components/sources/SourceModal.tsx
index 0235b22a32..b79c908afc 100644
--- a/frontend/editor/src/portal/components/sources/SourceModal.tsx
+++ b/frontend/editor/src/portal/components/sources/SourceModal.tsx
@@ -1,13 +1,13 @@
-import { useEffect, useState } from "react";
+import { useEffect, useState, type ReactNode } from "react";
 import { useTranslation } from "react-i18next";
-import ArrowBackRoundedIcon from "@mui/icons-material/ArrowBackRounded";
 import {
   Banner,
   Button,
-  Checkbox,
+  Collapsible,
   FormField,
   Input,
   Modal,
+  type ModalWidth,
   Select,
   Spinner,
 } from "@app/ui";
@@ -29,6 +29,7 @@ import {
   defaultOptions,
   WEBHOOK_SOURCE_TYPE,
   type CreatableSourceType,
+  type SourceFieldDef,
 } from "@portal/components/sources/sourceTypes";
 import { BrandMark } from "@portal/components/BrandMarks";
 import { S3ConnectionPicker } from "@portal/components/sources/S3ConnectionPicker";
@@ -73,6 +74,13 @@ function optionsFor(
 
 type Stage = "type" | "configure" | "reveal" | "delete" | "connection";
 
+/** The picker grid wants room; a delete confirm wants little; forms sit between. */
+function stageWidth(stage: Stage): ModalWidth {
+  if (stage === "type") return "lg";
+  if (stage === "delete") return "sm";
+  return "md";
+}
+
 /** The S3 catalogue entry, for creating a connection in-place (no stacked modal). */
 const S3_CONNECTION_TYPE = CREATABLE_CONNECTION_TYPES.find(
   (entry) => entry.id === "s3",
@@ -148,6 +156,9 @@ export function SourceModal({
   );
   const [connField, setConnField] = useState("");
   const [connSaving, setConnSaving] = useState(false);
+  // The "Advanced" disclosure starts closed; on edit it opens if a stored value
+  // there differs from its default, so nothing non-standard hides behind it.
+  const [showAdvanced, setShowAdvanced] = useState(false);
 
   // Seed on every open: fresh catalogue for create, fetched record for edit.
   useEffect(() => {
@@ -163,6 +174,7 @@ export function SourceModal({
       setOptions(defaultOptions(OFFERED_TYPES[0]));
       setEnabled(true);
       setLoaded(null);
+      setShowAdvanced(false);
       return;
     }
     setStage("configure");
@@ -170,11 +182,17 @@ export function SourceModal({
     fetchSource(sourceId)
       .then((source) => {
         const resolved = typeFor(source.type);
+        const opts = optionsFor(resolved, source.options);
         setLoaded(source);
         setType(resolved);
         setName(source.name ?? "");
-        setOptions(optionsFor(resolved, source.options));
+        setOptions(opts);
         setEnabled(source.enabled ?? true);
+        setShowAdvanced(
+          resolved.fields.some(
+            (f) => f.advanced && (opts[f.key] ?? "") !== (f.defaultValue ?? ""),
+          ),
+        );
       })
       .catch((e) => setError(errorMessage(e)))
       .finally(() => setLoading(false));
@@ -183,6 +201,7 @@ export function SourceModal({
   function chooseType(next: CreatableSourceType) {
     setType(next);
     setOptions(defaultOptions(next));
+    setShowAdvanced(false);
     setStage("configure");
   }
 
@@ -288,77 +307,96 @@ export function SourceModal({
     void navigator.clipboard?.writeText(text);
   }
 
-  const title =
-    stage === "type"
-      ? t("portal.sources.builder.createTitle")
-      : stage === "connection"
-        ? t("portal.connections.createTitleFor", {
-            name: t(connType.labelKey),
-          })
-        : stage === "reveal"
-          ? t("portal.sources.types.webhook.reveal.title")
-          : stage === "delete"
-            ? t("portal.sources.delete.title")
-            : isEdit
-              ? name || t("portal.sources.builder.editTitle")
-              : t("portal.sources.builder.createTitle");
+  // Once a type is chosen the header carries its identity (icon + name), so the
+  // configure body is just the form - no title/summary block in it.
+  const showTypeHeader = stage === "configure" && !loading;
 
-  return (
-    <Modal
-      open={open}
-      onClose={stage === "reveal" ? finish : onClose}
-      width={stage === "type" ? "lg" : stage === "delete" ? "sm" : "md"}
-      title={title}
-      footer={
-        stage === "configure" ? (
-          <div className="portal-source-modal__footer">
-            <Checkbox
-              checked={enabled}
-              onChange={(e) => setEnabled(e.target.checked)}
-              label={t("portal.sources.builder.enabled")}
-            />
-            <span className="portal-source-modal__footer-actions">
-              {isEdit && (
-                <Button
-                  variant="tertiary"
-                  size="sm"
-                  accent="danger"
-                  disabled={submitting}
-                  onClick={() => setStage("delete")}
-                >
-                  {t("portal.sources.builder.delete")}
-                </Button>
-              )}
+  function renderTitle(): ReactNode {
+    if (showTypeHeader) {
+      return (
+        <span className="portal-source-modal__title">
+          <BrandMark id={type.type} size={18} />
+          {t(type.labelKey)}
+        </span>
+      );
+    }
+    switch (stage) {
+      case "connection":
+        return t("portal.connections.createTitleFor", {
+          name: t(connType.labelKey),
+        });
+      case "reveal":
+        return t("portal.sources.types.webhook.reveal.title");
+      case "delete":
+        return t("portal.sources.delete.title");
+      default:
+        // The picker, or an edit whose record is still loading.
+        return t(
+          isEdit
+            ? "portal.sources.builder.editTitle"
+            : "portal.sources.builder.createTitle",
+        );
+    }
+  }
+
+  // The header back arrow only has somewhere to step to from the two staged
+  // steps: the connection sub-form returns to the source form, and a fresh
+  // source's form returns to the type picker.
+  function stageBack(): { onBack?: () => void; backLabel: string } {
+    if (stage === "connection") {
+      return {
+        onBack: () => setStage("configure"),
+        backLabel: t("portal.sources.builder.backToSource"),
+      };
+    }
+    if (stage === "configure" && !isEdit) {
+      return {
+        onBack: () => setStage("type"),
+        backLabel: t("portal.sources.builder.backToTypes"),
+      };
+    }
+    return { backLabel: t("portal.sources.builder.backToTypes") };
+  }
+
+  function renderFooter(): ReactNode {
+    switch (stage) {
+      case "configure":
+        return (
+          <div className="portal-source-modal__footer-actions">
+            {isEdit && (
               <Button
                 variant="tertiary"
                 size="sm"
+                accent="danger"
                 disabled={submitting}
-                onClick={onClose}
+                onClick={() => setStage("delete")}
               >
-                {t("portal.sources.builder.cancel")}
+                {t("portal.sources.builder.delete")}
               </Button>
-              <Button
-                size="sm"
-                loading={submitting}
-                disabled={!canSave}
-                onClick={() => void save()}
-              >
-                {isEdit
-                  ? t("portal.sources.builder.save")
-                  : t("portal.sources.builder.create")}
-              </Button>
-            </span>
-          </div>
-        ) : stage === "connection" ? (
-          <div className="portal-source-modal__footer-actions">
+            )}
             <Button
               variant="tertiary"
               size="sm"
-              disabled={connSaving}
-              onClick={() => setStage("configure")}
+              disabled={submitting}
+              onClick={onClose}
             >
-              {t("portal.connections.picker.cancel")}
+              {t("portal.sources.builder.cancel")}
             </Button>
+            <Button
+              size="sm"
+              loading={submitting}
+              disabled={!canSave}
+              onClick={() => void save()}
+            >
+              {isEdit
+                ? t("portal.sources.builder.save")
+                : t("portal.sources.builder.create")}
+            </Button>
+          </div>
+        );
+      case "connection":
+        return (
+          <div className="portal-source-modal__footer-actions">
             <Button
               size="sm"
               loading={connSaving}
@@ -368,13 +406,17 @@ export function SourceModal({
               {t("portal.connections.picker.save")}
             </Button>
           </div>
-        ) : stage === "reveal" ? (
+        );
+      case "reveal":
+        return (
           <div className="portal-source-modal__footer-actions">
             <Button size="sm" onClick={finish}>
               {t("portal.sources.types.webhook.reveal.done")}
             </Button>
           </div>
-        ) : stage === "delete" ? (
+        );
+      case "delete":
+        return (
           <div className="portal-source-modal__footer-actions">
             <Button
               variant="tertiary"
@@ -393,8 +435,107 @@ export function SourceModal({
               {t("portal.sources.delete.confirm")}
             </Button>
           </div>
-        ) : undefined
-      }
+        );
+      default:
+        return undefined; // "type" - the picker commits on click, so no footer.
+    }
+  }
+
+  function renderS3ConnectionControl(field: SourceFieldDef) {
+    return (
+      <S3ConnectionPicker
+        value={options[field.key] ?? ""}
+        onChange={(id) => setOption(field.key, id)}
+        onCreateNew={() => openConnectionStage(field.key, S3_CONNECTION_TYPE)}
+      />
+    );
+  }
+
+  function renderConnectionControl(field: SourceFieldDef) {
+    const connectionType = connectionTypeById(field.connectionTypeId ?? "");
+    return (
+      <ConnectionPicker
+        value={options[field.key] ?? ""}
+        onChange={(id) => setOption(field.key, id)}
+        integrationType={connectionType.integrationType}
+        createTypeId={field.connectionTypeId ?? ""}
+        presetId={field.connectionTypeId}
+        onCreateNew={() => openConnectionStage(field.key, connectionType)}
+      />
+    );
+  }
+
+  function renderSelectControl(field: SourceFieldDef) {
+    return (
+      <Select
+        value={options[field.key] ?? ""}
+        options={(field.options ?? []).map((o) => ({
+          value: o.value,
+          label: t(o.labelKey),
+        }))}
+        onChange={(value) => setOption(field.key, value ?? "")}
+      />
+    );
+  }
+
+  function renderInputControl(field: SourceFieldDef) {
+    return (
+      <Input
+        type={field.control === "password" ? "password" : undefined}
+        value={options[field.key] ?? ""}
+        placeholder={field.placeholderKey ? t(field.placeholderKey) : undefined}
+        onChange={(e) => setOption(field.key, e.target.value)}
+      />
+    );
+  }
+
+  function renderControl(field: SourceFieldDef) {
+    switch (field.control) {
+      case "s3Connection":
+        return renderS3ConnectionControl(field);
+      case "connection":
+        return renderConnectionControl(field);
+      case "select":
+        return renderSelectControl(field);
+      default:
+        return renderInputControl(field);
+    }
+  }
+
+  function renderField(field: SourceFieldDef) {
+    return (
+      <FormField
+        key={field.key}
+        label={t(field.labelKey)}
+        info={field.helperTextKey ? t(field.helperTextKey) : undefined}
+        required={field.required}
+      >
+        {renderControl(field)}
+      </FormField>
+    );
+  }
+
+  // A field can gate itself on another's current value (e.g. change detection
+  // only applies in consume mode), so a knob that does nothing never shows.
+  function fieldVisible(field: SourceFieldDef): boolean {
+    const cond = field.visibleWhen;
+    return !cond || (options[cond.key] ?? "") === cond.equals;
+  }
+
+  const visibleFields = type.fields.filter(fieldVisible);
+  const primaryFields = visibleFields.filter((field) => !field.advanced);
+  const advancedFields = visibleFields.filter((field) => field.advanced);
+  const back = stageBack();
+
+  return (
+    <Modal
+      open={open}
+      onClose={stage === "reveal" ? finish : onClose}
+      width={stageWidth(stage)}
+      title={renderTitle()}
+      onBack={back.onBack}
+      backLabel={back.backLabel}
+      footer={renderFooter()}
     >
       {stage === "type" && (
         <div className="portal-source-modal__catalog">
@@ -470,36 +611,7 @@ export function SourceModal({
 
           {!loading && (
             <>
-              {!isEdit && (
-                <Button
-                  variant="quiet"
-                  size="sm"
-                  className="portal-source-modal__back"
-                  leftSection={<ArrowBackRoundedIcon fontSize="inherit" />}
-                  onClick={() => setStage("type")}
-                >
-                  {t("portal.sources.builder.backToTypes")}
-                </Button>
-              )}
-
-              <div className="portal-source-modal__type-summary">
-                <BrandMark id={type.type} size={22} />
-                <span className="portal-source-modal__card-text">
-                  <span className="portal-source-modal__card-name">
-                    {t(type.labelKey)}
-                  </span>
-                  <span className="portal-source-modal__card-desc">
-                    {t(type.descriptionKey)}
-                  </span>
-                </span>
-              </div>
-
-              <FormField
-                label={t("portal.integrations.typedName", {
-                  tool: t(type.labelKey),
-                })}
-                required
-              >
+              <FormField label={t("portal.sources.wizard.name")} required>
                 <Input
                   value={name}
                   placeholder={t("portal.sources.wizard.namePlaceholder")}
@@ -513,69 +625,19 @@ export function SourceModal({
                 </p>
               )}
 
-              {type.fields.map((field) => (
-                <FormField
-                  key={field.key}
-                  label={t(field.labelKey)}
-                  helperText={
-                    field.helperTextKey ? t(field.helperTextKey) : undefined
-                  }
-                  required={field.required}
+              {primaryFields.map((field) => renderField(field))}
+
+              {advancedFields.length > 0 && (
+                <Collapsible
+                  open={showAdvanced}
+                  onToggle={() => setShowAdvanced((v) => !v)}
+                  header={t("portal.sources.builder.advanced")}
                 >
-                  {field.control === "s3Connection" ? (
-                    <S3ConnectionPicker
-                      value={options[field.key] ?? ""}
-                      onChange={(connectionId) =>
-                        setOption(field.key, connectionId)
-                      }
-                      onCreateNew={() =>
-                        openConnectionStage(field.key, S3_CONNECTION_TYPE)
-                      }
-                    />
-                  ) : field.control === "connection" ? (
-                    <ConnectionPicker
-                      value={options[field.key] ?? ""}
-                      onChange={(connectionId) =>
-                        setOption(field.key, connectionId)
-                      }
-                      integrationType={
-                        connectionTypeById(field.connectionTypeId ?? "")
-                          .integrationType
-                      }
-                      createTypeId={field.connectionTypeId ?? ""}
-                      presetId={field.connectionTypeId}
-                      onCreateNew={() =>
-                        openConnectionStage(
-                          field.key,
-                          connectionTypeById(field.connectionTypeId ?? ""),
-                        )
-                      }
-                    />
-                  ) : field.control === "select" ? (
-                    <Select
-                      value={options[field.key] ?? ""}
-                      options={(field.options ?? []).map((o) => ({
-                        value: o.value,
-                        label: t(o.labelKey),
-                      }))}
-                      onChange={(value) => setOption(field.key, value ?? "")}
-                    />
-                  ) : (
-                    <Input
-                      type={
-                        field.control === "password" ? "password" : undefined
-                      }
-                      value={options[field.key] ?? ""}
-                      placeholder={
-                        field.placeholderKey
-                          ? t(field.placeholderKey)
-                          : undefined
-                      }
-                      onChange={(e) => setOption(field.key, e.target.value)}
-                    />
-                  )}
-                </FormField>
-              ))}
+                  <div className="portal-source-modal__advanced-fields">
+                    {advancedFields.map((field) => renderField(field))}
+                  </div>
+                </Collapsible>
+              )}
 
               {editingWebhookId && (
                 <FormField
diff --git a/frontend/editor/src/portal/components/sources/SourcesTable.stories.tsx b/frontend/editor/src/portal/components/sources/SourcesTable.stories.tsx
index 9fb025c7e1..32ff2a24be 100644
--- a/frontend/editor/src/portal/components/sources/SourcesTable.stories.tsx
+++ b/frontend/editor/src/portal/components/sources/SourcesTable.stories.tsx
@@ -57,3 +57,22 @@ export default meta;
 type Story = StoryObj<typeof SourcesTable>;
 
 export const Default: Story = {};
+
+export const OnlyEditorSource: Story = {
+  args: {
+    sources: [
+      {
+        id: "src-editor",
+        name: "Editor",
+        type: "editor",
+        status: "active",
+        referenceCount: 1,
+        referencingPolicies: [],
+        config: [],
+        docsTotal: 0,
+        docs24h: 0,
+        docs30d: 0,
+      },
+    ],
+  },
+};
diff --git a/frontend/editor/src/portal/components/sources/SourcesTable.tsx b/frontend/editor/src/portal/components/sources/SourcesTable.tsx
index ad99eeb942..b5007ec5c1 100644
--- a/frontend/editor/src/portal/components/sources/SourcesTable.tsx
+++ b/frontend/editor/src/portal/components/sources/SourcesTable.tsx
@@ -1,12 +1,10 @@
 import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
-import ChevronRightRoundedIcon from "@mui/icons-material/ChevronRightRounded";
 import {
-  Chip,
-  StatusBadge,
+  column,
+  DataTable,
+  type DataTableColumn,
   type StatusTone,
-  Table,
-  type TableColumn,
 } from "@app/ui";
 import type { SourceStatus, SourceView } from "@portal/api/sources";
 import {
@@ -14,7 +12,6 @@ import {
   sourceTypeMeta,
 } from "@portal/components/sources/sourceTypes";
 import { SourceTypeIcon } from "@portal/components/sources/SourceTypeIcon";
-import "@portal/views/Sources.css";
 
 const STATUS_TONE: Record<SourceStatus, StatusTone> = {
   active: "success",
@@ -30,95 +27,65 @@ interface SourcesTableProps {
 
 export function SourcesTable({ sources, onRowClick }: SourcesTableProps) {
   const { t } = useTranslation();
-  const columns = useMemo<TableColumn<SourceView>[]>(
+  const columns = useMemo<DataTableColumn<SourceView>[]>(
     () => [
-      {
+      column.entity({
         key: "name",
         header: t("portal.sources.table.source"),
-        render: (s) => {
-          const meta = sourceTypeMeta(s.type);
-          // The editor is a system source with no instance name: label it from its type and drop
-          // the chip, which would just repeat the name.
-          const isEditor = s.type === EDITOR_SOURCE_TYPE;
-          return (
-            <div className="portal-sources__name-cell">
-              <span className="portal-sources__type-dot" aria-hidden>
-                <SourceTypeIcon type={s.type} />
-              </span>
-              <div className="portal-sources__name-text">
-                <strong>{isEditor ? t(meta.labelKey) : s.name}</strong>
-                {!isEditor && (
-                  <Chip accent={meta.accent} size="sm">
-                    {t(meta.labelKey)}
-                  </Chip>
-                )}
-              </div>
-            </div>
-          );
-        },
-      },
-      {
+        sortable: true,
+        icon: (s) => <SourceTypeIcon type={s.type} />,
+        // The editor is a system source with no instance name: label it from its
+        // type (and leave its Type cell blank, so it isn't repeated).
+        primary: (s) =>
+          s.type === EDITOR_SOURCE_TYPE
+            ? t(sourceTypeMeta(s.type).labelKey)
+            : s.name,
+      }),
+      column.text({
+        key: "type",
+        header: t("portal.sources.table.type", "Type"),
+        sortable: true,
+        get: (s) =>
+          s.type === EDITOR_SOURCE_TYPE
+            ? ""
+            : t(sourceTypeMeta(s.type).labelKey),
+      }),
+      column.badge({
         key: "status",
         header: t("portal.sources.table.status"),
-        render: (s) => (
-          <StatusBadge tone={STATUS_TONE[s.status]} size="sm">
-            {t(`portal.sources.status.${s.status}`)}
-          </StatusBadge>
-        ),
-      },
-      {
+        sortable: true,
+        get: (s) => ({
+          tone: STATUS_TONE[s.status],
+          label: t(`portal.sources.status.${s.status}`),
+        }),
+      }),
+      column.number({
         key: "docs",
         header: t("portal.sources.table.documents"),
-        align: "right",
-        render: (s) => (
-          <span
-            className={s.docsTotal === 0 ? "portal-sources__muted" : undefined}
-          >
-            {s.docsTotal.toLocaleString()}
-          </span>
-        ),
-      },
-      {
+        sortable: true,
+        get: (s) => s.docsTotal,
+        format: (n) => n.toLocaleString(),
+      }),
+      column.number({
         key: "referenceCount",
         header: t("portal.sources.table.usedBy"),
-        align: "right",
-        render: (s) => (
-          <span
-            className={
-              s.referenceCount === 0 ? "portal-sources__muted" : undefined
-            }
-          >
-            {s.referenceCount}
-          </span>
-        ),
-      },
-      {
-        key: "open",
-        header: t("portal.sources.table.open"),
-        headerHidden: true,
-        align: "right",
-        width: "2.5rem",
-        // The editor source has no page to open, so it shows no chevron.
-        render: (s) =>
-          s.type === EDITOR_SOURCE_TYPE ? null : (
-            <span className="portal-sources__caret" aria-hidden>
-              <ChevronRightRoundedIcon style={{ fontSize: "1.25rem" }} />
-            </span>
-          ),
-      },
+        sortable: true,
+        get: (s) => s.referenceCount,
+      }),
     ],
     [t],
   );
 
   return (
-    <Table<SourceView>
-      className="portal-sources__table"
+    <DataTable<SourceView>
       columns={columns}
       rows={sources}
       rowKey={(s) => s.id}
       onRowClick={onRowClick}
-      // The virtual editor row has no page to open, so it's inert - not a fake button.
+      // The virtual editor row has no page to open, so it's inert (and gets no
+      // chevron) - not a fake button.
       isRowInteractive={(s) => s.type !== EDITOR_SOURCE_TYPE}
+      rowAffordance="chevron"
     />
   );
 }
diff --git a/frontend/editor/src/portal/components/sources/connectionTypes.test.ts b/frontend/editor/src/portal/components/sources/connectionTypes.test.ts
index 8de257e88b..bf59c201bf 100644
--- a/frontend/editor/src/portal/components/sources/connectionTypes.test.ts
+++ b/frontend/editor/src/portal/components/sources/connectionTypes.test.ts
@@ -136,6 +136,74 @@ describe("isFieldVisible", () => {
   });
 });
 
+describe("the n8n preset", () => {
+  const n8n = byId("n8n");
+  const field = (key: string) => {
+    const found = n8n.fields.find((f) => f.key === key);
+    if (!found) throw new Error(`no field ${key}`);
+    return found;
+  };
+
+  it("offers only the authentication an n8n Webhook node can be set to", () => {
+    // The node does None, Basic and Header. Offering bearer or the token-login dance would be
+    // auth the operator cannot configure on the other end.
+    expect(field("authType").options?.map((o) => o.value)).toEqual([
+      "NONE",
+      "HEADER",
+      "BASIC",
+    ]);
+  });
+
+  it("shows each credential only for the auth it belongs to", () => {
+    expect(isFieldVisible(field("headerName"), { authType: "HEADER" })).toBe(
+      true,
+    );
+    expect(isFieldVisible(field("headerName"), { authType: "NONE" })).toBe(
+      false,
+    );
+    expect(isFieldVisible(field("username"), { authType: "BASIC" })).toBe(true);
+    expect(isFieldVisible(field("username"), { authType: "HEADER" })).toBe(
+      false,
+    );
+  });
+
+  it("lets the operator's answer override the preset's default of no auth", () => {
+    // buildConnectionConfig spreads presetConfig first, so an unanswered form still yields NONE
+    // but a chosen HEADER must win - otherwise the credential is stored and never sent.
+    const open = buildConnectionConfig(n8n, {
+      baseUrl: "https://n8n.acme.test/webhook/abc",
+    });
+    expect(open.authType).toBe("NONE");
+
+    const secured = buildConnectionConfig(n8n, {
+      baseUrl: "https://n8n.acme.test/webhook/abc",
+      authType: "HEADER",
+      headerName: "X-N8N-Key",
+      token: "s3cr3t",
+    });
+    expect(secured).toMatchObject({
+      authType: "HEADER",
+      headerName: "X-N8N-Key",
+      token: "s3cr3t",
+    });
+  });
+
+  it("recovers an n8n Cloud connection from its host", () => {
+    expect(
+      connectionTypeOf("API", {
+        baseUrl: "https://acme.app.n8n.cloud/webhook/abc",
+      })?.id,
+    ).toBe("n8n");
+  });
+
+  it("recovers a self-hosted n8n from its marker, since the host names nothing", () => {
+    const config = buildConnectionConfig(n8n, {
+      baseUrl: "https://automation.acme.internal/webhook/abc",
+    });
+    expect(connectionTypeOf("API", config)?.id).toBe("n8n");
+  });
+});
+
 describe("resolving a stored connection back to its preset", () => {
   it("keeps a Discord connection as Discord, not the first API preset", () => {
     // Seventeen presets share integrationType "API". Matching on that alone returned whichever
diff --git a/frontend/editor/src/portal/components/sources/connectionTypes.ts b/frontend/editor/src/portal/components/sources/connectionTypes.ts
index d71d0ce2dc..3591814b4f 100644
--- a/frontend/editor/src/portal/components/sources/connectionTypes.ts
+++ b/frontend/editor/src/portal/components/sources/connectionTypes.ts
@@ -496,6 +496,57 @@ const field = {
   }),
 };
 
+/** The three modes an n8n Webhook node can be set to, asked for rather than baked into the preset
+ * because it is the operator's choice; field values apply over `presetConfig`, so the answer wins. */
+const N8N_AUTH_FIELDS: ConnectionFieldDef[] = [
+  {
+    key: "authType",
+    labelKey: `${PREFIX}.n8n.fields.authType.label`,
+    control: "select",
+    required: true,
+    defaultValue: "NONE",
+    helperTextKey: `${PREFIX}.n8n.fields.authType.helperText`,
+    options: [
+      {
+        value: "NONE",
+        labelKey: `${PREFIX}.n8n.fields.authType.options.none.label`,
+      },
+      {
+        value: "HEADER",
+        labelKey: `${PREFIX}.n8n.fields.authType.options.header.label`,
+      },
+      {
+        value: "BASIC",
+        labelKey: `${PREFIX}.n8n.fields.authType.options.basic.label`,
+      },
+    ],
+  },
+  {
+    key: "headerName",
+    labelKey: `${PREFIX}.n8n.fields.headerName.label`,
+    control: "text",
+    required: true,
+    placeholderKey: `${PREFIX}.n8n.fields.headerName.placeholder`,
+    helperTextKey: `${PREFIX}.n8n.fields.headerName.helperText`,
+    visibleWhen: { key: "authType", oneOf: ["HEADER"] },
+  },
+  {
+    key: "token",
+    labelKey: `${PREFIX}.n8n.fields.token.label`,
+    control: "password",
+    required: true,
+    visibleWhen: { key: "authType", oneOf: ["HEADER"] },
+  },
+  {
+    ...field.username(),
+    visibleWhen: { key: "authType", oneOf: ["BASIC"] },
+  },
+  {
+    ...field.password(),
+    visibleWhen: { key: "authType", oneOf: ["BASIC"] },
+  },
+];
+
 /**
  * A vendor whose integration is "an HTTP API with known mechanics". The auth shape, and the base
  * URL when the vendor has a single global one, are baked into `preset`; the operator supplies only
@@ -692,6 +743,26 @@ const API_PRESETS: CreatableConnectionType[] = [
     searchTerms: ["make", "automation", "workflow", "trigger", "no-code"],
     identifyHosts: ["zapier.com"],
   }),
+  // Usually self-hosted, so there is no global host to bake in. The node's three auth options are
+  // mirrored exactly; BEARER or TOKEN_LOGIN would be auth it cannot be configured for.
+  apiPreset({
+    id: "n8n",
+    category: "notify",
+    preset: { authType: "NONE" },
+    fields: [field.webhookUrl("n8n"), ...N8N_AUTH_FIELDS],
+    searchTerms: [
+      "n8n",
+      "automation",
+      "workflow",
+      "trigger",
+      "self-hosted",
+      "no-code",
+      "low-code",
+    ],
+    // n8n Cloud instances live at <tenant>.app.n8n.cloud; a self-hosted one is recovered from
+    // its presetId marker instead, since its host is whatever the operator chose.
+    identifyHosts: ["n8n.cloud"],
+  }),
   apiPreset({
     id: "webhook",
     category: "notify",
diff --git a/frontend/editor/src/portal/components/sources/connections.css b/frontend/editor/src/portal/components/sources/connections.css
new file mode 100644
index 0000000000..0c54a0a946
--- /dev/null
+++ b/frontend/editor/src/portal/components/sources/connections.css
@@ -0,0 +1,236 @@
+/* Connect flow, shared by the Sources view, the Integrations view and the policy external-API step. */
+
+.portal-sources__connection-picker {
+  display: flex;
+  flex-direction: column;
+  gap: 0.5rem;
+}
+
+.portal-sources__connection-create-actions {
+  display: flex;
+  justify-content: flex-end;
+  gap: 0.5rem;
+}
+
+.portal-sources__connection-form {
+  display: flex;
+  flex-direction: column;
+  gap: 0.75rem;
+}
+
+/* Back to the grid from the form. Sits above the fields, where the type dropdown used to be. */
+.portal-sources__connection-back {
+  display: inline-flex;
+  align-items: center;
+  gap: 0.35rem;
+  margin-bottom: 1rem;
+  padding: 0;
+  background: none;
+  border: none;
+  cursor: pointer;
+  font: inherit;
+  font-size: 0.8125rem;
+  color: var(--c-text-muted);
+}
+
+.portal-sources__connection-back:hover {
+  color: var(--c-text);
+}
+
+/* The "request an integration" / "advanced" affordances, set below the form so presets read as
+   the primary path and these as the way out of it. */
+.portal-sources__connection-secondary {
+  display: flex;
+  flex-wrap: wrap;
+  gap: 1rem;
+  margin-top: 1rem;
+  padding-top: 0.75rem;
+  border-top: 1px solid var(--c-border-subtle);
+}
+
+.portal-sources__connection-link {
+  background: none;
+  border: none;
+  padding: 0;
+  cursor: pointer;
+  font: inherit;
+  font-size: 0.8125rem;
+  color: var(--c-conn-accent);
+  text-decoration: underline;
+  text-underline-offset: 2px;
+}
+
+.portal-sources__connection-link:hover {
+  opacity: 0.8;
+}
+
+/* Free-text fields (result-host list, body template) that outgrow a single-line input. */
+.portal-sources__connection-textarea {
+  width: 100%;
+  padding: 0.5rem 0.75rem;
+  border: 1px solid var(--c-border);
+  border-radius: var(--radius-sm, 0.375rem);
+  background: var(--c-input-bg);
+  color: inherit;
+  font-family: var(--font-mono, ui-monospace, monospace);
+  font-size: 0.8125rem;
+  line-height: 1.5;
+  resize: vertical;
+}
+
+.portal-sources__connection-textarea:focus-visible {
+  outline: 2px solid var(--c-conn-accent);
+  outline-offset: -1px;
+}
+
+/* ---- Integration picker ---------------------------------------------------------------------
+   A searchable grid of what we can connect to. Sized so a full category is visible without
+   scrolling on a laptop, and so the search box is the first thing focus lands on. */
+.portal-conn-picker {
+  display: flex;
+  flex-direction: column;
+  gap: 1.25rem;
+  /* Bounded rather than free-growing: the modal should not become the page. */
+  max-height: min(60vh, 32rem);
+  overflow-y: auto;
+}
+
+.portal-conn-picker__search {
+  position: sticky;
+  top: 0;
+  z-index: 1;
+  display: flex;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 0.5rem 0.75rem;
+  border: 1px solid var(--c-border);
+  border-radius: var(--radius-sm, 0.375rem);
+  /* Real theme token with a transparent fallback so it never falls back to opaque white in dark;
+     the border alone is enough to read as an input. */
+  background: var(--color-bg-subtle, transparent);
+}
+
+.portal-conn-picker__search-icon {
+  flex: none;
+  font-size: 1.125rem;
+  color: var(--c-text-muted);
+}
+
+.portal-conn-picker__search input {
+  flex: 1;
+  min-width: 0;
+  border: none;
+  background: none;
+  outline: none;
+  font: inherit;
+  color: inherit;
+}
+
+.portal-conn-picker__section {
+  display: flex;
+  flex-direction: column;
+  gap: 0.25rem;
+}
+
+.portal-conn-picker__section-title {
+  margin: 0;
+  font-size: 0.8125rem;
+  font-weight: 600;
+  text-transform: uppercase;
+  letter-spacing: 0.04em;
+  color: var(--c-text-muted);
+}
+
+.portal-conn-picker__section-desc {
+  margin: 0 0 0.5rem;
+  font-size: 0.8125rem;
+  color: var(--c-text-muted);
+}
+
+.portal-conn-picker__grid {
+  display: grid;
+  /* auto-fill so the grid reflows to the modal rather than to a fixed column count. */
+  grid-template-columns: repeat(auto-fill, minmax(13.5rem, 1fr));
+  gap: 0.5rem;
+}
+
+.portal-conn-picker__card {
+  display: flex;
+  align-items: flex-start;
+  gap: 0.625rem;
+  padding: 0.625rem 0.75rem;
+  text-align: left;
+  cursor: pointer;
+  font: inherit;
+  color: inherit;
+  background: var(--c-surface-raised);
+}
+
+.portal-conn-picker__card:hover {
+  border-color: var(--c-conn-accent);
+  background: color-mix(in srgb, var(--c-conn-neutral) 6%, transparent);
+}
+
+/* The custom-API card is an escape hatch, not a vendor: dashed, so it reads as "something else". */
+.portal-conn-picker__card--advanced {
+  border-style: dashed;
+}
+
+/* The vendor's real mark: full colour, no tinted plate behind it. Neutral
+   (currentColor) marks pick up the muted text tone instead. */
+.portal-conn-picker__mark {
+  flex: none;
+  display: grid;
+  place-items: center;
+  width: 1.5rem;
+  height: 1.5rem;
+  color: var(--c-text-subtle);
+}
+
+.portal-conn-picker__mark svg {
+  display: block;
+}
+
+.portal-conn-picker__card-text {
+  display: flex;
+  flex-direction: column;
+  gap: 0.125rem;
+  min-width: 0;
+}
+
+.portal-conn-picker__card-name {
+  font-size: 0.875rem;
+  font-weight: 500;
+}
+
+.portal-conn-picker__card-desc {
+  font-size: 0.75rem;
+  line-height: 1.35;
+  color: var(--c-text-muted);
+  /* Two lines keeps every card the same height without truncating most descriptions. */
+  display: -webkit-box;
+  -webkit-line-clamp: 2;
+  -webkit-box-orient: vertical;
+  overflow: hidden;
+}
+
+.portal-conn-picker__empty {
+  display: flex;
+  flex-direction: column;
+  align-items: center;
+  gap: 0.5rem;
+  padding: 2rem 1rem;
+  text-align: center;
+}
+
+.portal-conn-picker__empty-title {
+  margin: 0;
+  font-size: 0.9375rem;
+  font-weight: 600;
+}
+
+.portal-conn-picker__empty-body {
+  margin: 0 0 0.5rem;
+  font-size: 0.8125rem;
+  color: var(--c-text-muted);
+}
diff --git a/frontend/editor/src/portal/components/sources/sourceTypes.ts b/frontend/editor/src/portal/components/sources/sourceTypes.ts
index ee51ba21f3..c6196a4aab 100644
--- a/frontend/editor/src/portal/components/sources/sourceTypes.ts
+++ b/frontend/editor/src/portal/components/sources/sourceTypes.ts
@@ -74,6 +74,10 @@ export interface SourceFieldDef {
   helperTextKey?: string;
   options?: { value: string; labelKey: string }[];
   defaultValue?: string;
+  /** Tucked behind the "Advanced" disclosure: power settings whose default suits almost everyone. */
+  advanced?: boolean;
+  /** Only rendered while another field currently equals this value (e.g. a knob that only applies in one mode). */
+  visibleWhen?: { key: string; equals: string };
   /**
    * For `control: "connection"` - the connection-catalogue entry id this slot accepts (e.g.
    * "sftp"). Filters the picker to matching connections and pins the inline "new connection" form.
@@ -117,6 +121,7 @@ function networkSourceFields(connectionTypeId: string): SourceFieldDef[] {
       control: "select",
       defaultValue: "consume",
       helperTextKey: "portal.sources.networkFields.mode.helperText",
+      advanced: true,
       options: [
         {
           value: "consume",
@@ -133,6 +138,7 @@ function networkSourceFields(connectionTypeId: string): SourceFieldDef[] {
       labelKey: "portal.sources.networkFields.recursive.label",
       control: "select",
       defaultValue: "false",
+      helperTextKey: "portal.sources.networkFields.recursive.helperText",
       options: [
         {
           value: "false",
@@ -168,6 +174,8 @@ export const CREATABLE_SOURCE_TYPES: CreatableSourceType[] = [
         labelKey: "portal.sources.types.folder.fields.mode.label",
         control: "select",
         defaultValue: "consume",
+        helperTextKey: "portal.sources.types.folder.fields.mode.helperText",
+        advanced: true,
         options: [
           {
             value: "consume",
@@ -185,6 +193,8 @@ export const CREATABLE_SOURCE_TYPES: CreatableSourceType[] = [
         labelKey: "portal.sources.types.folder.fields.recursive.label",
         control: "select",
         defaultValue: "false",
+        helperTextKey:
+          "portal.sources.types.folder.fields.recursive.helperText",
         options: [
           {
             value: "false",
@@ -204,6 +214,9 @@ export const CREATABLE_SOURCE_TYPES: CreatableSourceType[] = [
         control: "select",
         defaultValue: "stat",
         helperTextKey: "portal.sources.types.folder.fields.identity.helperText",
+        advanced: true,
+        // Change detection only governs the consume ledger; snapshot re-reads everything regardless.
+        visibleWhen: { key: "mode", equals: "consume" },
         options: [
           {
             value: "stat",
@@ -244,6 +257,7 @@ export const CREATABLE_SOURCE_TYPES: CreatableSourceType[] = [
         control: "select",
         defaultValue: "consume",
         helperTextKey: "portal.sources.types.s3.fields.mode.helperText",
+        advanced: true,
         options: [
           {
             value: "consume",
diff --git a/frontend/editor/src/portal/components/users/PendingInvitations.test.tsx b/frontend/editor/src/portal/components/users/PendingInvitations.test.tsx
index ffecdc3f83..18535a7ca2 100644
--- a/frontend/editor/src/portal/components/users/PendingInvitations.test.tsx
+++ b/frontend/editor/src/portal/components/users/PendingInvitations.test.tsx
@@ -37,7 +37,7 @@ describe("PendingInvitations", () => {
     expect(screen.getByText("sam@acme.com")).toBeInTheDocument();
     expect(screen.getByText("dana@acme.com")).toBeInTheDocument();
     expect(screen.getByText("Invited by leader@acme.com")).toBeInTheDocument();
-    expect(screen.getByText("2 pending")).toBeInTheDocument();
+    expect(screen.getByText("Pending invitations")).toBeInTheDocument();
   });
 
   it("cancelling an invite calls back with that invitation", () => {
diff --git a/frontend/editor/src/portal/components/users/PendingInvitations.tsx b/frontend/editor/src/portal/components/users/PendingInvitations.tsx
index 5c6fd65b5a..9def224314 100644
--- a/frontend/editor/src/portal/components/users/PendingInvitations.tsx
+++ b/frontend/editor/src/portal/components/users/PendingInvitations.tsx
@@ -1,8 +1,8 @@
+import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
 import type { TFunction } from "i18next";
-import { Avatar, Button } from "@app/ui";
+import { Avatar, column, DataTable, type DataTableColumn } from "@app/ui";
 import type { PendingInvitation } from "@portal/api/users";
-import "@portal/views/Users.css";
 
 interface PendingInvitationsProps {
   invitations: PendingInvitation[];
@@ -24,60 +24,54 @@ function expiryLabel(iso: string | undefined, t: TFunction): string {
 }
 
 /**
- * Pending team invitations (SaaS): the parity gap vs the editor. Each row shows
- * the invitee and lets a team leader cancel the invite. Rendered only when the
- * flavor supports it (manageInvitations) and there are pending invites.
+ * Pending team invitations (SaaS): the parity gap vs the editor. A single flat
+ * list (not a section - there's only ever one) captioned with its title; each
+ * row shows the invitee and lets a team leader cancel the invite.
  */
 export function PendingInvitations({
   invitations,
   onCancel,
 }: PendingInvitationsProps) {
   const { t } = useTranslation();
+
+  const columns = useMemo<DataTableColumn<PendingInvitation>[]>(
+    () => [
+      column.entity({
+        key: "invitee",
+        header: t("users.invites.columns.invitee", "Invitee"),
+        icon: (inv) => <Avatar name={inv.email} size="sm" tone="neutral" />,
+        primary: (inv) => inv.email,
+        note: (inv) =>
+          inv.invitedBy
+            ? t("users.invites.by", "Invited by {{who}}", {
+                who: inv.invitedBy,
+              })
+            : undefined,
+      }),
+      column.muted({
+        key: "expires",
+        header: t("users.invites.columns.expires", "Expires"),
+        get: (inv) => expiryLabel(inv.expiresAt, t),
+      }),
+      column.actions({
+        key: "actions",
+        get: (inv) => [
+          {
+            label: t("users.invites.cancel", "Cancel"),
+            onClick: () => onCancel(inv),
+          },
+        ],
+      }),
+    ],
+    [t, onCancel],
+  );
+
   return (
-    <section className="portal-users__group">
-      <header className="portal-users__group-head">
-        <div className="portal-users__group-title">
-          <strong>{t("users.invites.title", "Pending invitations")}</strong>
-          <span className="portal-users__group-desc">
-            {t(
-              "users.invites.desc",
-              "Invited people who haven't joined yet. They hold a seat until they accept.",
-            )}
-          </span>
-        </div>
-        <span className="portal-users__group-count">
-          {t("users.invites.count", "{{count}} pending", {
-            count: invitations.length,
-          })}
-        </span>
-      </header>
-      {invitations.map((inv) => {
-        const expires = expiryLabel(inv.expiresAt, t);
-        return (
-          <div className="portal-users__row" key={inv.id}>
-            <div className="portal-users__row-main">
-              <Avatar name={inv.email} size="sm" tone="neutral" />
-              <div className="portal-users__row-id">
-                <span className="portal-users__row-name">{inv.email}</span>
-                {inv.invitedBy && (
-                  <span className="portal-users__row-email">
-                    {t("users.invites.by", "Invited by {{who}}", {
-                      who: inv.invitedBy,
-                    })}
-                  </span>
-                )}
-              </div>
-            </div>
-            <span className="portal-users__inv-spacer" />
-            {expires && (
-              <span className="portal-users__row-active">{expires}</span>
-            )}
-            <Button variant="secondary" size="sm" onClick={() => onCancel(inv)}>
-              {t("users.invites.cancel", "Cancel")}
-            </Button>
-          </div>
-        );
-      })}
-    </section>
+    <DataTable<PendingInvitation>
+      columns={columns}
+      rows={invitations}
+      rowKey={(inv) => String(inv.id)}
+      caption={t("users.invites.title", "Pending invitations")}
+    />
   );
 }
diff --git a/frontend/editor/src/portal/components/users/UsersDirectory.stories.tsx b/frontend/editor/src/portal/components/users/UsersDirectory.stories.tsx
index 28e84691fb..75da086806 100644
--- a/frontend/editor/src/portal/components/users/UsersDirectory.stories.tsx
+++ b/frontend/editor/src/portal/components/users/UsersDirectory.stories.tsx
@@ -94,7 +94,7 @@ const MEMBERS: Member[] = [
     name: "Priya Patel",
     email: "priya@stirlingpdf.com",
     role: "member",
-    status: "active",
+    status: "suspended",
     lastActive: "Never",
     username: "priya",
     teamId: 2,
@@ -126,6 +126,7 @@ const MEMBERS: Member[] = [
     teamName: "Compliance",
     portalAccess: "granted",
     portalGrantId: 11,
+    locked: true,
   },
 ];
 
@@ -214,22 +215,19 @@ const BIG_MEMBERS: Member[] = [
     isSelf: true,
     portalAccess: "admin",
   },
-  ...Array.from(
-    { length: 11 },
-    (_, i): Member => ({
-      id: `big-${i}`,
-      name: `Teammate ${i + 1}`,
-      email: `teammate${i + 1}@acme.com`,
-      role: i === 0 ? "team_owner" : "member",
-      status: "active",
-      lastActive: `${i + 1}h ago`,
-      username: `tm${i + 1}`,
-      teamId: 9,
-      teamName: "Platform",
-      teamLead: i === 0,
-      portalAccess: i === 0 ? "role" : "none",
-    }),
-  ),
+  ...Array.from({ length: 11 }, (_, i): Member => ({
+    id: `big-${i}`,
+    name: `Teammate ${i + 1}`,
+    email: `teammate${i + 1}@acme.com`,
+    role: i === 0 ? "team_owner" : "member",
+    status: "active",
+    lastActive: `${i + 1}h ago`,
+    username: `tm${i + 1}`,
+    teamId: 9,
+    teamName: "Platform",
+    teamLead: i === 0,
+    portalAccess: i === 0 ? "role" : "none",
+  })),
 ];
 
 const TEAMS: Team[] = [
diff --git a/frontend/editor/src/portal/components/users/UsersDirectory.tsx b/frontend/editor/src/portal/components/users/UsersDirectory.tsx
index 4367656d0b..7f979fbf56 100644
--- a/frontend/editor/src/portal/components/users/UsersDirectory.tsx
+++ b/frontend/editor/src/portal/components/users/UsersDirectory.tsx
@@ -1,8 +1,16 @@
-import { useMemo, useState } from "react";
+import { useMemo } from "react";
 import { useTranslation } from "react-i18next";
-import { Menu } from "@mantine/core";
-import PersonAddAltRounded from "@mui/icons-material/PersonAddAltRounded";
-import { Avatar, Chip, Select } from "@app/ui";
+import {
+  Avatar,
+  type CellAction,
+  type CellCap,
+  type CellLabel,
+  type CellMenuItem,
+  column,
+  DataTable,
+  type DataTableColumn,
+  type DataTableGroup,
+} from "@app/ui";
 import { type Member, type RoleId } from "@portal/api/users";
 import type { Team } from "@portal/api/teams";
 import type { UsersCapabilities } from "@portal/api/usersCapabilities";
@@ -11,7 +19,6 @@ import {
   buildDirectory,
   type TeamGroup,
 } from "@portal/components/users/directory";
-import "@portal/views/Users.css";
 
 /** Collapse a group's rows past this many, behind a "Show all" expander. */
 const COLLAPSED_LIMIT = 8;
@@ -42,23 +49,17 @@ interface UsersDirectoryProps {
   // Team actions (the team-header kebab).
   onRenameTeam: (team: TeamGroup) => void;
   onDeleteTeam: (team: TeamGroup) => void;
-  /**
-   * Show the "Approves policy" capability chip on org owners. Off in the live
-   * app (no backend for it yet); on in Storybook to document the intended design.
-   */
+  /** Show the "Approves policy" capability on org owners (Storybook design doc). */
   showApprover?: boolean;
-  /**
-   * Show the Guests group + the "Guest" role option. Off in the live app (the
-   * Guest concept is parked); on in Storybook to document the intended design.
-   */
+  /** Show the Guests group + the "Guest" role option (Storybook design doc). */
   showGuests?: boolean;
 }
 
 /**
- * The people roster, grouped like the org chart: Organization owners, then each
- * team (with its leader), each row carrying capability chips, a role selector,
- * and a kebab of admin actions. Long groups collapse behind a "Show all" so big
- * orgs stay scannable.
+ * The people roster on the shared DataTable: grouped like the org chart
+ * (Organization owners, then each team, then guests), each row carrying its
+ * capability chips, a role selector, and a kebab of admin actions. Long groups
+ * collapse behind a "Show all".
  */
 export function UsersDirectory({
   members,
@@ -84,7 +85,6 @@ export function UsersDirectory({
 }: UsersDirectoryProps) {
   const { t } = useTranslation();
   const dir = useMemo(() => buildDirectory(members, teams), [members, teams]);
-  const [expanded, setExpanded] = useState<Set<string>>(new Set());
 
   const nameByUsername = useMemo(() => {
     const m = new Map<string, string>();
@@ -94,393 +94,338 @@ export function UsersDirectory({
     return m;
   }, [members]);
 
-  const roleOptions: { value: RoleId; label: string }[] = [
-    // No SaaS user is ever ROLE_ADMIN, so the Org Owner option is dropped there.
-    ...(capabilities.adminRole
-      ? [
-          {
-            value: "admin" as RoleId,
-            label: t("users.role.orgOwner", "Org Owner"),
-          },
-        ]
-      : []),
-    { value: "team_owner", label: t("users.role.teamOwner", "Team Owner") },
-    { value: "member", label: t("users.role.member", "Member") },
-    ...(showGuests
-      ? [{ value: "guest" as RoleId, label: t("users.role.guest", "Guest") }]
-      : []),
-  ];
+  const roleOptions = useMemo(
+    () => [
+      // No SaaS user is ever ROLE_ADMIN, so the Org Owner option is dropped there.
+      ...(capabilities.adminRole
+        ? [
+            {
+              value: "admin" as RoleId,
+              label: t("users.role.orgOwner", "Org Owner"),
+            },
+          ]
+        : []),
+      {
+        value: "team_owner" as RoleId,
+        label: t("users.role.teamOwner", "Team Owner"),
+      },
+      { value: "member" as RoleId, label: t("users.role.member", "Member") },
+      ...(showGuests
+        ? [{ value: "guest" as RoleId, label: t("users.role.guest", "Guest") }]
+        : []),
+    ],
+    [capabilities.adminRole, showGuests, t],
+  );
 
-  function toggleExpand(key: string) {
-    setExpanded((prev) => {
-      const next = new Set(prev);
-      if (next.has(key)) next.delete(key);
-      else next.add(key);
-      return next;
-    });
-  }
+  const columns = useMemo<DataTableColumn<Member>[]>(() => {
+    function rowKebab(m: Member): CellAction {
+      const removeLabel =
+        capabilities.removeScope === "team"
+          ? t("users.action.removeTeam", "Remove from team")
+          : t("users.action.remove", "Remove from org");
+      const items: CellMenuItem[] = [];
+      if (capabilities.resetPassword) {
+        items.push({
+          label: t("users.action.resetPw", "Reset password"),
+          disabled: m.isSelf,
+          onClick: () => onResetPassword(m),
+        });
+      }
+      if (capabilities.moveTeam) {
+        items.push({
+          label: t("users.action.move", "Move to team"),
+          onClick: () => onMoveToTeam(m),
+        });
+      }
+      if (capabilities.suspend) {
+        items.push({
+          label:
+            m.status === "suspended"
+              ? t("users.action.reinstate", "Reinstate")
+              : t("users.action.suspend", "Suspend"),
+          disabled: m.isSelf,
+          onClick: () => onToggleEnabled(m),
+        });
+      }
+      if (capabilities.unlock && m.locked) {
+        items.push({
+          label: t("users.action.unlock", "Unlock account"),
+          onClick: () => onUnlock(m),
+        });
+      }
+      if (capabilities.resetMfa && m.mfaEnabled) {
+        items.push({
+          label: t("users.action.disableMfa", "Reset MFA"),
+          disabled: m.isSelf,
+          onClick: () => onDisableMfa(m),
+        });
+      }
+      items.push({
+        label: removeLabel,
+        tone: "danger",
+        disabled: m.isSelf,
+        onClick: () => onRemove(m),
+        dividerBefore: items.length > 0,
+      });
+      return {
+        label: t("users.rowActions", "Actions for {{name}}", { name: m.name }),
+        glyph: "kebab",
+        iconOnly: true,
+        menu: items,
+      };
+    }
 
-  function ownerNames(owners: string[]): string {
-    return owners.map((u) => nameByUsername.get(u) ?? u).join(", ");
-  }
-
-  // A team whose name/membership is managed by the system - no rename/delete.
-  // SaaS personal teams (isPersonal) reject rename/delete at the backend too.
-  function isManagedTeam(team: TeamGroup): boolean {
-    return SYSTEM_TEAMS.has(team.name) || team.isPersonal === true;
-  }
-
-  // Whether the team-header kebab has any actions (else it isn't rendered).
-  function teamKebabHasItems(team: TeamGroup): boolean {
-    return (
-      capabilities.manageGrants ||
-      (!isManagedTeam(team) &&
-        (capabilities.renameTeam || capabilities.deleteTeam))
-    );
-  }
-
-  // Whether any action sits above the "Remove" item (so we render a divider).
-  function rowKebabHasUpperActions(m: Member): boolean {
-    return (
-      capabilities.resetPassword ||
-      capabilities.moveTeam ||
-      capabilities.suspend ||
-      (capabilities.unlock && !!m.locked) ||
-      (capabilities.resetMfa && !!m.mfaEnabled)
-    );
-  }
-
-  function rowKebab(m: Member) {
-    // Both flavors have a backed remove now: org-delete (self-hosted) or
-    // team-remove (SaaS, via SaasTeamController's remove-member endpoint), so the
-    // kebab always carries at least the remove action.
-    const removeLabel =
-      capabilities.removeScope === "team"
-        ? t("users.action.removeTeam", "Remove from team")
-        : t("users.action.remove", "Remove from org");
-    return (
-      <Menu position="bottom-end" withinPortal shadow="md" width={210}>
-        <Menu.Target>
-          <button
-            type="button"
-            className="portal-users__row-kebab"
-            aria-label={t("users.rowActions", "Actions for {{name}}", {
-              name: m.name,
-            })}
-          >
-            ⋯
-          </button>
-        </Menu.Target>
-        <Menu.Dropdown>
-          {capabilities.resetPassword && (
-            <Menu.Item disabled={m.isSelf} onClick={() => onResetPassword(m)}>
-              {t("users.action.resetPw", "Reset password")}
-            </Menu.Item>
-          )}
-          {capabilities.moveTeam && (
-            <Menu.Item onClick={() => onMoveToTeam(m)}>
-              {t("users.action.move", "Move to team")}
-            </Menu.Item>
-          )}
-          {capabilities.suspend && (
-            <Menu.Item disabled={m.isSelf} onClick={() => onToggleEnabled(m)}>
-              {m.status === "suspended"
-                ? t("users.action.reinstate", "Reinstate")
-                : t("users.action.suspend", "Suspend")}
-            </Menu.Item>
-          )}
-          {capabilities.unlock && m.locked && (
-            <Menu.Item onClick={() => onUnlock(m)}>
-              {t("users.action.unlock", "Unlock account")}
-            </Menu.Item>
-          )}
-          {capabilities.resetMfa && m.mfaEnabled && (
-            <Menu.Item disabled={m.isSelf} onClick={() => onDisableMfa(m)}>
-              {t("users.action.disableMfa", "Reset MFA")}
-            </Menu.Item>
-          )}
-          {rowKebabHasUpperActions(m) && <Menu.Divider />}
-          <Menu.Item
-            color="red"
-            disabled={m.isSelf}
-            onClick={() => onRemove(m)}
-          >
-            {removeLabel}
-          </Menu.Item>
-        </Menu.Dropdown>
-      </Menu>
-    );
-  }
-
-  function renderRow(m: Member) {
-    const access = m.portalAccess ?? "none";
-    return (
-      // data-member-id lets deep links (?member=<id>) scroll to and flash a row.
-      <div className="portal-users__row" key={m.id} data-member-id={m.id}>
-        <div className="portal-users__row-main">
+    const cols: DataTableColumn<Member>[] = [
+      column.entity({
+        key: "person",
+        header: t("users.columns.person", "Person"),
+        icon: (m) => (
           <Avatar name={m.name} size="sm" tone={avatarToneForMember(m)} />
-          <div className="portal-users__row-id">
-            <span className="portal-users__row-name">
-              {m.name}
-              {m.isSelf && (
-                <span className="portal-users__row-you">
-                  {" "}
-                  {t("users.you", "(you)")}
-                </span>
-              )}
-              {m.status === "suspended" && (
-                <Chip
-                  accent="danger"
-                  size="sm"
-                  className="portal-users__row-tag"
-                >
-                  {t("users.suspended", "Suspended")}
-                </Chip>
-              )}
-              {m.locked && (
-                <Chip
-                  accent="warning"
-                  size="sm"
-                  className="portal-users__row-tag"
-                >
-                  {t("users.locked", "Locked")}
-                </Chip>
-              )}
-            </span>
-            {m.email !== m.name && (
-              <span className="portal-users__row-email">{m.email}</span>
-            )}
-          </div>
-        </div>
+        ),
+        primary: (m) => m.name,
+        suffix: (m) => (m.isSelf ? t("users.you", "(you)") : undefined),
+      }),
+      column.muted({
+        key: "email",
+        header: t("users.columns.email", "Email"),
+        // Blank when the name already is the email (no separate display name).
+        get: (m) => (m.email !== m.name ? m.email : undefined),
+      }),
+      column.labels({
+        key: "status",
+        header: t("users.columns.status", "Status"),
+        get: (m) => {
+          const out: CellLabel[] = [];
+          if (m.status === "suspended") {
+            out.push({
+              label: t("users.suspended", "Suspended"),
+              accent: "danger",
+            });
+          }
+          if (m.locked) {
+            out.push({ label: t("users.locked", "Locked"), accent: "warning" });
+          }
+          return out;
+        },
+      }),
+      column.caps({
+        key: "capabilities",
+        header: t("users.columns.capabilities", "Capabilities"),
+        get: (m) => {
+          const access = m.portalAccess ?? "none";
+          const out: CellCap[] = [
+            { label: t("users.cap.editor", "Editor"), accent: "neutral" },
+          ];
+          if (access === "granted") {
+            out.push({
+              label: t("users.cap.processor", "Processor"),
+              accent: "default",
+              onRemove: capabilities.manageGrants
+                ? () => onRevokeProcessor(m)
+                : undefined,
+            });
+          } else if (access !== "none") {
+            out.push({
+              label: t("users.cap.processor", "Processor"),
+              accent: "default",
+            });
+          } else if (capabilities.manageGrants) {
+            out.push({
+              label: t("users.cap.addProcessor", "+ Processor"),
+              accent: "neutral",
+              dashed: true,
+              onClick: () => onGrantProcessor(m),
+            });
+          }
+          if (showApprover && m.role === "admin") {
+            out.push({
+              label: t("users.cap.approver", "Approves policy"),
+              accent: "success",
+            });
+          }
+          return out;
+        },
+      }),
+      column.muted({
+        key: "lastActive",
+        header: t("users.lastActive", "Last active"),
+        get: (m) => m.lastActive,
+      }),
+    ];
 
-        <div className="portal-users__caps">
-          <Chip accent="neutral" size="sm">
-            {t("users.cap.editor", "Editor")}
-          </Chip>
-          {access === "granted" ? (
-            <Chip
-              accent="default"
-              size="sm"
-              onRemove={
-                capabilities.manageGrants
-                  ? () => onRevokeProcessor(m)
-                  : undefined
-              }
-            >
-              {t("users.cap.processor", "Processor")}
-            </Chip>
-          ) : access !== "none" ? (
-            // admin / team-owner role / inherited from a team-wide grant
-            <Chip accent="default" size="sm">
-              {t("users.cap.processor", "Processor")}
-            </Chip>
-          ) : capabilities.manageGrants ? (
-            <Chip
-              accent="neutral"
-              size="sm"
-              dashed
-              onClick={() => onGrantProcessor(m)}
-            >
-              {t("users.cap.addProcessor", "+ Processor")}
-            </Chip>
-          ) : null}
-          {showApprover && m.role === "admin" && (
-            <Chip
-              accent="success"
-              size="sm"
-              leadingIcon={<span aria-hidden>✓</span>}
-            >
-              {t("users.cap.approver", "Approves policy")}
-            </Chip>
-          )}
-        </div>
+    if (capabilities.changeRole) {
+      cols.push(
+        column.select({
+          key: "role",
+          header: t("users.columns.role", "Role"),
+          get: (m) => ({
+            value: m.role,
+            options: roleOptions,
+            ariaLabel: t("users.roleFor", "Role for {{name}}", {
+              name: m.name,
+            }),
+            disabled: m.isSelf,
+          }),
+          onChange: (m, value) => onChangeRole(m, (value ?? m.role) as RoleId),
+        }),
+      );
+    }
 
-        <span
-          className="portal-users__row-active"
-          title={t("users.lastActive", "Last active")}
-        >
-          {m.lastActive}
-        </span>
+    cols.push(column.actions({ key: "actions", get: (m) => [rowKebab(m)] }));
+    return cols;
+  }, [
+    t,
+    capabilities,
+    roleOptions,
+    showApprover,
+    onChangeRole,
+    onGrantProcessor,
+    onRevokeProcessor,
+    onResetPassword,
+    onMoveToTeam,
+    onToggleEnabled,
+    onUnlock,
+    onDisableMfa,
+    onRemove,
+  ]);
 
-        {capabilities.changeRole && (
-          <div className="portal-users__row-role">
-            <Select
-              aria-label={t("users.roleFor", "Role for {{name}}", {
-                name: m.name,
-              })}
-              options={roleOptions}
-              value={m.role}
-              disabled={m.isSelf}
-              onChange={(value) => onChangeRole(m, (value ?? m.role) as RoleId)}
-            />
-          </div>
-        )}
+  const groups = useMemo<DataTableGroup<Member>[]>(() => {
+    function ownerNames(owners: string[]): string {
+      return owners.map((u) => nameByUsername.get(u) ?? u).join(", ");
+    }
+    // A team whose name/membership is system-managed - no rename/delete.
+    function isManagedTeam(team: TeamGroup): boolean {
+      return SYSTEM_TEAMS.has(team.name) || team.isPersonal === true;
+    }
+    function teamKebabHasItems(team: TeamGroup): boolean {
+      return (
+        capabilities.manageGrants ||
+        (!isManagedTeam(team) &&
+          (capabilities.renameTeam || capabilities.deleteTeam))
+      );
+    }
+    function teamActions(team: TeamGroup): CellAction[] {
+      const acts: CellAction[] = [
+        {
+          label: t("users.group.addToTeam", "Add to team"),
+          onClick: () => onAddToTeam(team),
+        },
+      ];
+      if (teamKebabHasItems(team)) {
+        const items: CellMenuItem[] = [];
+        if (capabilities.manageGrants) {
+          items.push(
+            processorTeamIds.has(team.id)
+              ? {
+                  label: t(
+                    "users.team.revokeProcessor",
+                    "Revoke Processor from team",
+                  ),
+                  onClick: () => onRevokeTeamProcessor(team),
+                }
+              : {
+                  label: t(
+                    "users.team.grantProcessor",
+                    "Grant Processor to team",
+                  ),
+                  onClick: () => onGrantTeamProcessor(team),
+                },
+          );
+        }
+        if (!isManagedTeam(team)) {
+          const divider = capabilities.manageGrants;
+          if (capabilities.renameTeam) {
+            items.push({
+              label: t("users.action.rename", "Rename team"),
+              onClick: () => onRenameTeam(team),
+              dividerBefore: divider,
+            });
+          }
+          if (capabilities.deleteTeam) {
+            items.push({
+              label: t("users.action.deleteTeam", "Delete team"),
+              tone: "danger",
+              onClick: () => onDeleteTeam(team),
+              dividerBefore: divider && !capabilities.renameTeam,
+            });
+          }
+        }
+        acts.push({
+          label: t("users.teamActions", "Team actions"),
+          glyph: "kebab",
+          iconOnly: true,
+          menu: items,
+        });
+      }
+      return acts;
+    }
 
-        {rowKebab(m)}
-      </div>
-    );
-  }
-
-  /** Rows for a group, collapsing past COLLAPSED_LIMIT behind a toggle. */
-  function renderMembers(list: Member[], key: string) {
-    const isOpen = expanded.has(key);
-    const overflow = list.length > COLLAPSED_LIMIT;
-    const shown = overflow && !isOpen ? list.slice(0, COLLAPSED_LIMIT) : list;
-    return (
-      <>
-        {shown.map(renderRow)}
-        {overflow && (
-          <button
-            type="button"
-            className="portal-users__show-more"
-            onClick={() => toggleExpand(key)}
-          >
-            {isOpen
-              ? t("users.showLess", "Show less")
-              : t("users.showAll", "Show all {{count}}", {
-                  count: list.length,
-                })}
-          </button>
-        )}
-      </>
-    );
-  }
+    const gs: DataTableGroup<Member>[] = [];
+    if (capabilities.orgGroup && dir.organization.length > 0) {
+      gs.push({
+        key: "org",
+        title: t("users.group.org", "Organization"),
+        meta: t("users.group.owners", "{{count}} owner", {
+          count: dir.organization.length,
+        }),
+        rows: dir.organization,
+        collapseAfter: COLLAPSED_LIMIT,
+      });
+    }
+    for (const team of dir.teams) {
+      const led =
+        team.owners.length > 0
+          ? ` · ${t("users.group.ledBy", "led by {{owner}}", {
+              owner: ownerNames(team.owners),
+            })}`
+          : "";
+      gs.push({
+        key: `team-${team.id}`,
+        title: t("users.group.team", "{{name}} team", { name: team.name }),
+        meta:
+          t("users.group.teamMeta", "{{count}} people", {
+            count: team.members.length,
+          }) + led,
+        actions: teamActions(team),
+        rows: team.members,
+        collapseAfter: COLLAPSED_LIMIT,
+      });
+    }
+    if (showGuests && dir.guests.length > 0) {
+      gs.push({
+        key: "guests",
+        title: t("users.group.guests", "Guests"),
+        meta: t("users.group.guestCount", "{{count}} guest", {
+          count: dir.guests.length,
+        }),
+        rows: dir.guests,
+        collapseAfter: COLLAPSED_LIMIT,
+      });
+    }
+    return gs;
+  }, [
+    t,
+    dir,
+    nameByUsername,
+    capabilities,
+    showGuests,
+    processorTeamIds,
+    onAddToTeam,
+    onGrantTeamProcessor,
+    onRevokeTeamProcessor,
+    onRenameTeam,
+    onDeleteTeam,
+  ]);
 
   return (
-    <div className="portal-users__directory">
-      {/* Organization (a single-org deployment only; SaaS has no org). */}
-      {capabilities.orgGroup && dir.organization.length > 0 && (
-        <section className="portal-users__group">
-          <header className="portal-users__group-head">
-            <div className="portal-users__group-title">
-              <strong>{t("users.group.org", "Organization")}</strong>
-              <span className="portal-users__group-desc">
-                {t(
-                  "users.group.orgDesc",
-                  "Owners with org-wide authority and policy approval",
-                )}
-              </span>
-            </div>
-            <span className="portal-users__group-count">
-              {t("users.group.owners", "{{count}} owner", {
-                count: dir.organization.length,
-              })}
-            </span>
-          </header>
-          {renderMembers(dir.organization, "org")}
-        </section>
-      )}
-
-      {/* Teams */}
-      {dir.teams.map((team) => (
-        <section className="portal-users__group" key={team.id}>
-          <header className="portal-users__group-head">
-            <div className="portal-users__group-title">
-              <strong>
-                {t("users.group.team", "{{name}} team", { name: team.name })}
-              </strong>
-              <span className="portal-users__group-desc">
-                {t("users.group.teamMeta", "{{count}} people", {
-                  count: team.members.length,
-                })}
-                {team.owners.length > 0 &&
-                  ` · ${t("users.group.ledBy", "led by {{owner}}", {
-                    owner: ownerNames(team.owners),
-                  })}`}
-              </span>
-            </div>
-            <div className="portal-users__group-actions">
-              <button
-                type="button"
-                className="portal-users__group-action"
-                onClick={() => onAddToTeam(team)}
-              >
-                <PersonAddAltRounded sx={{ fontSize: 15 }} />
-                {t("users.group.addToTeam", "Add to team")}
-              </button>
-              {teamKebabHasItems(team) && (
-                <Menu
-                  position="bottom-end"
-                  withinPortal
-                  shadow="md"
-                  width={210}
-                >
-                  <Menu.Target>
-                    <button
-                      type="button"
-                      className="portal-users__row-kebab"
-                      aria-label={t("users.teamActions", "Team actions")}
-                    >
-                      ⋯
-                    </button>
-                  </Menu.Target>
-                  <Menu.Dropdown>
-                    {capabilities.manageGrants &&
-                      (processorTeamIds.has(team.id) ? (
-                        <Menu.Item onClick={() => onRevokeTeamProcessor(team)}>
-                          {t(
-                            "users.team.revokeProcessor",
-                            "Revoke Processor from team",
-                          )}
-                        </Menu.Item>
-                      ) : (
-                        <Menu.Item onClick={() => onGrantTeamProcessor(team)}>
-                          {t(
-                            "users.team.grantProcessor",
-                            "Grant Processor to team",
-                          )}
-                        </Menu.Item>
-                      ))}
-                    {!isManagedTeam(team) &&
-                      (capabilities.renameTeam || capabilities.deleteTeam) && (
-                        <>
-                          {capabilities.manageGrants && <Menu.Divider />}
-                          {capabilities.renameTeam && (
-                            <Menu.Item onClick={() => onRenameTeam(team)}>
-                              {t("users.action.rename", "Rename team")}
-                            </Menu.Item>
-                          )}
-                          {capabilities.deleteTeam && (
-                            <Menu.Item
-                              color="red"
-                              onClick={() => onDeleteTeam(team)}
-                            >
-                              {t("users.action.deleteTeam", "Delete team")}
-                            </Menu.Item>
-                          )}
-                        </>
-                      )}
-                  </Menu.Dropdown>
-                </Menu>
-              )}
-            </div>
-          </header>
-          {renderMembers(team.members, `team-${team.id}`)}
-        </section>
-      ))}
-
-      {/* Guests (parked in the live app; shown when showGuests is set). */}
-      {showGuests && dir.guests.length > 0 && (
-        <section className="portal-users__group">
-          <header className="portal-users__group-head">
-            <div className="portal-users__group-title">
-              <strong>{t("users.group.guests", "Guests")}</strong>
-              <span className="portal-users__group-desc">
-                {t(
-                  "users.group.guestsDesc",
-                  "External collaborators, scoped to what you shared. Editor only.",
-                )}
-              </span>
-            </div>
-            <span className="portal-users__group-count">
-              {t("users.group.guestCount", "{{count}} guest", {
-                count: dir.guests.length,
-              })}
-            </span>
-          </header>
-          {renderMembers(dir.guests, "guests")}
-        </section>
-      )}
-    </div>
+    <DataTable<Member>
+      columns={columns}
+      groups={groups}
+      rowKey={(m) => String(m.id)}
+      collapseLabels={{
+        showAll: (count) => t("users.showAll", "Show all {{count}}", { count }),
+        showLess: t("users.showLess", "Show less"),
+      }}
+    />
   );
 }
diff --git a/frontend/editor/src/portal/hooks/useEnterpriseEnabled.ts b/frontend/editor/src/portal/hooks/useEnterpriseEnabled.ts
new file mode 100644
index 0000000000..7b471447fb
--- /dev/null
+++ b/frontend/editor/src/portal/hooks/useEnterpriseEnabled.ts
@@ -0,0 +1,17 @@
+// Enterprise-license flag for the portal, from the backend app-config (`runningEE`).
+// Gates Enterprise-only surfaces (e.g. Infrastructure > Audit) so they show a locked
+// upsell instead of firing a doomed 403 request. The SaaS build shadows this file to
+// derive enterprise from the plan tier (wallet-backed) - see portal-saas.
+
+import { useAppConfig } from "@app/contexts/AppConfigContext";
+
+export interface EnterpriseState {
+  enabled: boolean;
+  // True while the flag is still resolving, so callers can hold rather than flash a lock.
+  loading: boolean;
+}
+
+export function useEnterpriseEnabled(): EnterpriseState {
+  const { config, loading } = useAppConfig();
+  return { enabled: Boolean(config?.runningEE), loading };
+}
diff --git a/frontend/editor/src/portal/hooks/useFreeCreditsSummary.test.tsx b/frontend/editor/src/portal/hooks/useFreeCreditsSummary.test.tsx
new file mode 100644
index 0000000000..fb48250fed
--- /dev/null
+++ b/frontend/editor/src/portal/hooks/useFreeCreditsSummary.test.tsx
@@ -0,0 +1,110 @@
+import { describe, expect, it, vi, beforeEach } from "vitest";
+import { cleanup, render, waitFor } from "@testing-library/react";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import { LinkProvider, type LinkState } from "@portal/contexts/LinkContext";
+import { useFreeCreditsSummary } from "@portal/hooks/useFreeCreditsSummary";
+
+const fetchWallet = vi.fn();
+vi.mock("@portal/api/billing", () => ({
+  fetchWallet: () => fetchWallet(),
+}));
+
+function Probe() {
+  const credits = useFreeCreditsSummary();
+  return (
+    <span data-testid="credits">
+      {credits ? `${credits.remaining}/${credits.total}` : "none"}
+    </span>
+  );
+}
+
+function renderFor(initialState: LinkState) {
+  const client = new QueryClient({
+    defaultOptions: { queries: { retry: false } },
+  });
+  return render(
+    <QueryClientProvider client={client}>
+      <LinkProvider initialState={initialState}>
+        <Probe />
+      </LinkProvider>
+    </QueryClientProvider>,
+  ).getByTestId("credits");
+}
+
+describe("useFreeCreditsSummary (self-hosted) — wallet behind the link gate", () => {
+  beforeEach(() => {
+    // The figures persist across mounts now, so isolate the suite from itself.
+    localStorage.clear();
+    fetchWallet.mockReset();
+    fetchWallet.mockResolvedValue({
+      status: "free",
+      freeRemaining: 247,
+      freeAllowance: 500,
+    });
+  });
+
+  it("unlinked reads no wallet at all", async () => {
+    const el = renderFor("unlinked");
+    await waitFor(() => expect(el.textContent).toBe("none"));
+    expect(fetchWallet).not.toHaveBeenCalled();
+  });
+
+  it("linked surfaces the free grant", async () => {
+    const el = renderFor("linked-free");
+    await waitFor(() => expect(el.textContent).toBe("247/500"));
+  });
+
+  it("hides the meter once the team subscribes", async () => {
+    // The grant is a lifetime pool that survives subscribing, so a paying team
+    // would otherwise sit on a spent meter forever.
+    fetchWallet.mockResolvedValue({
+      status: "subscribed",
+      freeRemaining: 0,
+      freeAllowance: 500,
+    });
+    const el = renderFor("linked-subscribed");
+    // The row holds its space while the wallet loads, then drops once the
+    // answer says this team is paying.
+    await waitFor(() => expect(el.textContent).toBe("none"));
+  });
+
+  it("hides the meter when the wallet read fails", async () => {
+    fetchWallet.mockRejectedValue(new Error("saas unreachable"));
+    const el = renderFor("linked-subscribed");
+    await waitFor(() => expect(el.textContent).toBe("none"));
+  });
+
+  it("ignores cached figures once the instance is unlinked", async () => {
+    // The cache survives an unlink and nothing rewrites it afterwards, so the
+    // linkage gate has to cover the seed too, not just the fetch.
+    const linked = renderFor("linked-free");
+    await waitFor(() => expect(linked.textContent).toBe("247/500"));
+    cleanup();
+
+    fetchWallet.mockClear();
+    const unlinked = renderFor("unlinked");
+    expect(unlinked.textContent).toBe("none");
+    expect(fetchWallet).not.toHaveBeenCalled();
+  });
+
+  it("shows the last known figures while the wallet reloads", async () => {
+    // What stops the row popping in — and resizing the footer — every time the
+    // processor mounts.
+    const el = renderFor("linked-free");
+    await waitFor(() => expect(el.textContent).toBe("247/500"));
+    cleanup();
+
+    let release: (v: unknown) => void = () => {};
+    fetchWallet.mockReturnValue(
+      new Promise((resolve) => {
+        release = resolve;
+      }),
+    );
+    const second = renderFor("linked-free");
+    // Seeded before the refetch lands...
+    expect(second.textContent).toBe("247/500");
+    release({ status: "free", freeRemaining: 12, freeAllowance: 500 });
+    // ...then updated in place, without the row ever being absent.
+    await waitFor(() => expect(second.textContent).toBe("12/500"));
+  });
+});
diff --git a/frontend/editor/src/portal/hooks/useFreeCreditsSummary.ts b/frontend/editor/src/portal/hooks/useFreeCreditsSummary.ts
new file mode 100644
index 0000000000..3fd814ebb1
--- /dev/null
+++ b/frontend/editor/src/portal/hooks/useFreeCreditsSummary.ts
@@ -0,0 +1,65 @@
+import { useEffect, useState } from "react";
+import { useQuery } from "@tanstack/react-query";
+import { useLink } from "@portal/contexts/LinkContext";
+import { fetchWallet } from "@portal/api/billing";
+import { qk } from "@portal/queries/keys";
+import {
+  readCachedCredits,
+  writeCachedCredits,
+  type CachedCredits,
+} from "@app/services/navFooterCache";
+import { type NavFooterCredits } from "@app/components/shared/navFooter/NavFooterCreditsRow";
+
+/**
+ * Free credits left on this team's allowance, for the processor's sidebar
+ * footer meter. Null hides the meter.
+ *
+ * This is the portal's own seam rather than the editor's {@code
+ * @app/hooks/useFreeCreditsSummary}, because self-hosted resolves {@code @app/*}
+ * as proprietary → core: the cloud wallet hook isn't in that cascade, and the
+ * implementation can't move down into proprietary either, since core/desktop
+ * builds ship no portal and must never resolve {@code @portal}. Keeping it here
+ * means only builds that actually have a processor pull in the wallet read.
+ *
+ * Self-hosted reads the same {@code GET /api/v1/payg/wallet} the Usage page's
+ * trial meter renders — {@code apiClient.saas} with the admin's Supabase JWT,
+ * since the wallet lives in the cloud even when the instance doesn't. Gated on
+ * linkage: an unlinked instance has no wallet to read.
+ *
+ * Free teams only, matching the editor and the Plan page. The grant is a
+ * lifetime pool that survives subscribing, so a paying team would otherwise sit
+ * on a permanent "0 of 500" in red; their usage lives on Usage & Billing.
+ */
+export function useFreeCreditsSummary(): NavFooterCredits | null {
+  const { isLinked } = useLink();
+  // Shared query key, so the footer rides the same cached snapshot as any other
+  // wallet reader rather than adding a fetch per mount.
+  const { data: wallet } = useQuery({
+    queryKey: qk.wallet(isLinked),
+    queryFn: fetchWallet,
+    enabled: isLinked,
+  });
+  // Shared with the editor's seam, so crossing between the two apps shows the
+  // figures the other one last saw rather than re-fetching into an empty row.
+  const [seed] = useState(readCachedCredits);
+
+  const live: CachedCredits | undefined = !wallet
+    ? undefined
+    : wallet.status === "subscribed"
+      ? null
+      : { remaining: wallet.freeRemaining, total: wallet.freeAllowance };
+
+  useEffect(() => {
+    // Only once linked: an unlinked instance never asks, so it has no answer of
+    // its own and must not overwrite what the editor recorded.
+    if (isLinked && live !== undefined) writeCachedCredits(live);
+    // eslint-disable-next-line react-hooks/exhaustive-deps
+  }, [wallet, isLinked]);
+
+  // Linkage gates the seed as well as the fetch. The cache outlives an unlink
+  // — nothing refetches or rewrites it once the instance stops asking — so
+  // without this an unlinked instance would keep showing the figures from when
+  // it was linked, indefinitely.
+  if (!isLinked) return null;
+  return (live !== undefined ? live : seed) ?? null;
+}
diff --git a/frontend/editor/src/portal/hooks/useOpenPlan.ts b/frontend/editor/src/portal/hooks/useOpenPlan.ts
new file mode 100644
index 0000000000..57b30c91d0
--- /dev/null
+++ b/frontend/editor/src/portal/hooks/useOpenPlan.ts
@@ -0,0 +1,13 @@
+import { useCallback } from "react";
+import { useView } from "@portal/contexts/ViewContext";
+
+/**
+ * Self-hosted processor: settings carries no Plan section (it is a cloud
+ * surface, and this build's registry has none), so the footer's credits row
+ * opens the portal's own Usage & Billing view instead — the same figures, on
+ * the surface this flavor actually owns.
+ */
+export function useOpenPlan(): (() => void) | null {
+  const { setActiveView } = useView();
+  return useCallback(() => setActiveView("usage"), [setActiveView]);
+}
diff --git a/frontend/editor/src/portal/mocks/fileRunEvents.ts b/frontend/editor/src/portal/mocks/fileRunEvents.ts
index 31c97e1088..0e0fd25679 100644
--- a/frontend/editor/src/portal/mocks/fileRunEvents.ts
+++ b/frontend/editor/src/portal/mocks/fileRunEvents.ts
@@ -46,6 +46,7 @@ export const FILE_RUN_EVENTS: FileRunEvent[] = [
     detail: "The PDF Document is passworded and the password was not provided",
     policyId: "policy-contract-redaction",
     runId: "run-8841",
+    sourceId: null,
     fileId: "f-8841a",
     actor: "dana@example.com",
     occurrences: 1,
@@ -74,15 +75,70 @@ export const FILE_RUN_EVENTS: FileRunEvent[] = [
       "Policy run failed: Tool returned HTTP 500 INTERNAL_SERVER_ERROR for /api/v1/misc/ocr-pdf",
     policyId: "policy-invoice-ocr",
     runId: "run-8839",
+    sourceId: "src-s3-invoices",
     fileId: "f-8839b",
-    actor: "sam@example.com",
+    // Unattended: arrived from a bucket, so there is no user to name.
+    actor: null,
     occurrences: 12,
-    status: "ACKNOWLEDGED",
-    statusActor: "ops@example.com",
-    actions: [acknowledgeOffer(), dismissOffer()],
+    status: "NEW",
+    statusActor: null,
+    // Nothing to fix, so the only decision is whether to clear it.
+    actions: [dismissOffer()],
     createdAt: NOW - 6 * HOUR,
     lastSeenAt: NOW - 2 * HOUR,
   },
+  {
+    id: "fre-editor-1",
+    kindId: "UNKNOWN",
+    stage: "INTERNAL",
+    severity: "ERROR",
+    scope: "FILE",
+    origin: "TOOL",
+    remedy: "PERMANENT",
+    titleKey: "portal.failures.kind.unknown.title",
+    descriptionKey: "portal.failures.kind.unknown.description",
+    defaultTitle: "Unrecognised failure",
+    // Reported by the user's own client, so there is no run to reference.
+    detail: "compress: Request failed with status code 500",
+    policyId: null,
+    runId: null,
+    sourceId: null,
+    fileId: "f-editor-77",
+    actor: "priya@example.com",
+    occurrences: 1,
+    status: "NEW",
+    statusActor: null,
+    actions: [dismissOffer()],
+    createdAt: NOW - 3 * HOUR,
+    lastSeenAt: NOW - 3 * HOUR,
+  },
+  {
+    id: "fre-editor-2",
+    kindId: "INPUT_PASSWORD_PROTECTED",
+    stage: "INPUT",
+    severity: "ERROR",
+    scope: "FILE",
+    origin: "TOOL",
+    remedy: "NEEDS_USER_INPUT",
+    titleKey: "portal.failures.kind.inputPasswordProtected.title",
+    descriptionKey: "portal.failures.kind.inputPasswordProtected.description",
+    defaultTitle: "Password-protected document",
+    detail: "remove-password: The PDF Document is passworded",
+    policyId: null,
+    runId: null,
+    sourceId: null,
+    fileId: "f-editor-91",
+    // A colleague's own upload: the reviewer sees it, but unlocking is not theirs to do.
+    actor: "sam@example.com",
+    occurrences: 1,
+    status: "NEW",
+    statusActor: null,
+    // A colleague's own upload. Nothing here acts on the document, so triage is just
+    // acknowledging or clearing the row.
+    actions: [dismissOffer(true, "portal.failures.action.dismissSkipFile")],
+    createdAt: NOW - 4 * HOUR,
+    lastSeenAt: NOW - 4 * HOUR,
+  },
   {
     id: "fre-3",
     kindId: "INPUT_PASSWORD_PROTECTED",
@@ -97,6 +153,7 @@ export const FILE_RUN_EVENTS: FileRunEvent[] = [
     detail: "The PDF Document is passworded and the password was not provided",
     policyId: "policy-contract-redaction",
     runId: "run-8790",
+    sourceId: null,
     fileId: "f-8790c",
     actor: "dana@example.com",
     // Closed rows keep their actions, disabled with a reason, so the reviewer
diff --git a/frontend/editor/src/portal/mocks/handlers/fileRunEvents.ts b/frontend/editor/src/portal/mocks/handlers/fileRunEvents.ts
index 297298134e..c6440fb13b 100644
--- a/frontend/editor/src/portal/mocks/handlers/fileRunEvents.ts
+++ b/frontend/editor/src/portal/mocks/handlers/fileRunEvents.ts
@@ -26,9 +26,13 @@ export const fileRunEventsHandlers = [
     const status = url.searchParams.get("status");
     const kindId = url.searchParams.get("kindId");
 
+    // Mirrors the server: no status asked for means the open queue, so a dismissed
+    // row leaves the list instead of sitting there with its buttons greyed out.
     const filtered = events.filter(
       (event) =>
-        (!status || event.status === status) &&
+        (status
+          ? event.status === status
+          : event.status !== "DISMISSED" && event.status !== "RESOLVED") &&
         (!kindId || event.kindId === kindId),
     );
     return HttpResponse.json({
diff --git a/frontend/editor/src/portal/mocks/handlers/infrastructure.ts b/frontend/editor/src/portal/mocks/handlers/infrastructure.ts
index 715175978a..58c41a7f3b 100644
--- a/frontend/editor/src/portal/mocks/handlers/infrastructure.ts
+++ b/frontend/editor/src/portal/mocks/handlers/infrastructure.ts
@@ -1,14 +1,6 @@
 import { http, HttpResponse, delay } from "msw";
 import type { Tier } from "@portal/contexts/TierContext";
-import {
-  apiKeysFor,
-  auditLogFor,
-  modelsResponseFor,
-  recentDeploymentsFor,
-  regionsFor,
-  securityFor,
-  storageFor,
-} from "@portal/mocks/infrastructure";
+import { apiKeysFor, auditLogFor } from "@portal/mocks/infrastructure";
 
 function tierFrom(request: Request): Tier {
   const url = new URL(request.url);
@@ -16,15 +8,6 @@ function tierFrom(request: Request): Tier {
 }
 
 export const infrastructureHandlers = [
-  http.get("/v1/infrastructure/deployments", async ({ request }) => {
-    await delay(120);
-    const tier = tierFrom(request);
-    return HttpResponse.json({
-      regions: regionsFor(tier),
-      recent: recentDeploymentsFor(tier),
-    });
-  }),
-
   // Real backend route; wildcard prefix intercepts both local (same-origin) and
   // SaaS (absolute) callers.
   http.get(
@@ -68,21 +51,6 @@ export const infrastructureHandlers = [
     },
   ),
 
-  http.get("/v1/infrastructure/security", async ({ request }) => {
-    await delay(120);
-    return HttpResponse.json(securityFor(tierFrom(request)));
-  }),
-
-  http.get("/v1/infrastructure/models", async ({ request }) => {
-    await delay(120);
-    return HttpResponse.json(modelsResponseFor(tierFrom(request)));
-  }),
-
-  http.get("/v1/infrastructure/storage", async ({ request }) => {
-    await delay(120);
-    return HttpResponse.json(storageFor(tierFrom(request)));
-  }),
-
   // Mirrors the real backend route. Wildcard prefix so it intercepts both the
   // self-hosted apiClient.local call (same-origin) and the SaaS apiClient.saas
   // call (absolute VITE_SAAS_API_URL).
diff --git a/frontend/editor/src/portal/mocks/handlers/pipelines.ts b/frontend/editor/src/portal/mocks/handlers/pipelines.ts
index 0158d1e168..c5505f38ff 100644
--- a/frontend/editor/src/portal/mocks/handlers/pipelines.ts
+++ b/frontend/editor/src/portal/mocks/handlers/pipelines.ts
@@ -116,6 +116,21 @@ function nextId(): string {
   return `plc_${Date.now().toString(36)}_${idCounter}`;
 }
 
+/** Stored supporting files a step binds as `asset:<id>` (PolicyAssetController), for mock mode. */
+interface StoredAsset {
+  id: string;
+  fileName: string;
+  contentType: string | null;
+  size: number;
+  createdAt: number;
+}
+let assetStore: StoredAsset[] = [];
+let assetCounter = 0;
+function nextAssetId(): string {
+  assetCounter += 1;
+  return `ast_${Date.now().toString(36)}_${assetCounter}`;
+}
+
 function deriveStatus(policy: StoredPolicy): PipelineStatus {
   return policy.enabled ? "active" : "paused";
 }
@@ -152,9 +167,16 @@ function toView(policy: StoredPolicy): PipelineView {
   };
 }
 
-function buildKpis(): PipelineKpi[] {
-  const total = store.length;
-  const active = store.filter((p) => p.enabled).length;
+// Mirrors the backend PolicyOverviewService: hide frontend/catalogue policies (a categoryId in
+// output options). A folder-watch trigger is still a normal pipeline and stays.
+function isPipeline(policy: StoredPolicy): boolean {
+  const categoryId = policy.output?.options?.categoryId;
+  return !(typeof categoryId === "string" && categoryId.length > 0);
+}
+
+function buildKpis(policies: StoredPolicy[]): PipelineKpi[] {
+  const total = policies.length;
+  const active = policies.filter((p) => p.enabled).length;
   return [
     { value: total, description: "pipelines" },
     { value: active, description: "running automatically" },
@@ -163,10 +185,11 @@ function buildKpis(): PipelineKpi[] {
 }
 
 function buildOverview(): PipelinesOverviewResponse {
-  const pipelines = store
+  const visible = store.filter(isPipeline);
+  const pipelines = visible
     .map(toView)
     .sort((a, b) => a.name.localeCompare(b.name));
-  return { kpis: buildKpis(), pipelines };
+  return { kpis: buildKpis(visible), pipelines };
 }
 
 export const pipelinesHandlers = [
@@ -189,6 +212,33 @@ export const pipelinesHandlers = [
     ]);
   }),
 
+  // Supporting files. Registered before the `/policies/:id` matcher so "assets" isn't read as an id.
+  http.get("/api/v1/policies/assets", async () => {
+    await delay(80);
+    return HttpResponse.json(assetStore);
+  }),
+
+  http.post("/api/v1/policies/assets", async ({ request }) => {
+    const form = await request.formData();
+    const file = form.get("file");
+    if (!(file instanceof File)) {
+      return HttpResponse.json(
+        { detail: "Uploaded file is empty" },
+        { status: 400 },
+      );
+    }
+    await delay(120);
+    const asset: StoredAsset = {
+      id: nextAssetId(),
+      fileName: file.name || "asset",
+      contentType: file.type || null,
+      size: file.size,
+      createdAt: Date.now(),
+    };
+    assetStore = [...assetStore, asset];
+    return HttpResponse.json(asset);
+  }),
+
   // Run status: the mock completes runs immediately, so polling resolves at once.
   http.get("/api/v1/policies/run/:runId", async ({ params }) => {
     await delay(120);
diff --git a/frontend/editor/src/portal/mocks/infrastructure.ts b/frontend/editor/src/portal/mocks/infrastructure.ts
index 560a3e2c31..bb6b88f4f8 100644
--- a/frontend/editor/src/portal/mocks/infrastructure.ts
+++ b/frontend/editor/src/portal/mocks/infrastructure.ts
@@ -4,9 +4,7 @@
  * mocks/handlers/ serve the fixture data over the intercepted apiClient.local.json() calls.
  * Components never reach into this module directly.
  *
- * Everything here is tier-scaled deterministically: free sees a single region
- * and a trimmed slice of every list, pro adds a second region and the IP
- * allowlist, enterprise unlocks the full topology + compliance posture.
+ * Everything here is tier-scaled deterministically: free sees the least of every list, enterprise the lot.
  *
  * Once a real backend exists the MSW handlers stop being registered and these
  * fixtures can be deleted (or kept as test seeds).
@@ -19,146 +17,8 @@ import type {
   AuditEvent,
   AuditLogResponse,
   AuditSummary,
-  ComplianceAttestation,
-  ComplianceCert,
-  DeploymentRegion,
-  IpAllowEntry,
-  KeyManagement,
-  ModelEntry,
-  ModelsResponse,
-  RecentDeployment,
-  RoutingRule,
-  SecurityConfig,
-  StorageConfig,
-  StorageProvider,
 } from "@portal/api/infrastructure";
 
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Deployments                                                              */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-const REGION_US_EAST: DeploymentRegion = {
-  name: "US East (N. Virginia)",
-  code: "us-east-1",
-  latencyMs: 41,
-  load: 0.62,
-  status: "healthy",
-  version: "v3.4.2",
-  uptime: 0.99987,
-  instances: 18,
-  throughput: 2140,
-  p99Ms: 287,
-};
-
-const REGION_US_WEST: DeploymentRegion = {
-  name: "US West (Oregon)",
-  code: "us-west-2",
-  latencyMs: 53,
-  load: 0.74,
-  status: "healthy",
-  version: "v3.4.2",
-  uptime: 0.99971,
-  instances: 12,
-  throughput: 1480,
-  p99Ms: 331,
-};
-
-const REGION_EU_WEST: DeploymentRegion = {
-  name: "EU West (Ireland)",
-  code: "eu-west-1",
-  latencyMs: 68,
-  load: 0.83,
-  status: "degraded",
-  version: "v3.4.1",
-  uptime: 0.99924,
-  instances: 9,
-  throughput: 1120,
-  p99Ms: 521,
-};
-
-// A region mid-incident: zero healthy instances, traffic drained away.
-const REGION_AP_SOUTHEAST: DeploymentRegion = {
-  name: "Asia Pacific (Singapore)",
-  code: "ap-southeast-1",
-  latencyMs: 0,
-  load: 0,
-  status: "down",
-  version: "v3.4.1",
-  uptime: 0.98612,
-  instances: 0,
-  throughput: 0,
-  p99Ms: 0,
-};
-
-export function regionsFor(tier: Tier): DeploymentRegion[] {
-  if (tier === "free") return [REGION_US_EAST];
-  if (tier === "pro") return [REGION_US_EAST, REGION_US_WEST];
-  return [REGION_US_EAST, REGION_US_WEST, REGION_EU_WEST, REGION_AP_SOUTHEAST];
-}
-
-const RECENT_DEPLOYMENTS_ALL: RecentDeployment[] = [
-  {
-    id: "dep-1",
-    version: "v3.4.2",
-    environment: "production",
-    product: "Extraction engine",
-    status: "live",
-    deployedBy: "ci-bot",
-    timestamp: "8m ago",
-  },
-  {
-    id: "dep-2",
-    version: "v3.4.2-rc4",
-    environment: "canary",
-    product: "Redaction service",
-    status: "rolling",
-    deployedBy: "maria.chen",
-    timestamp: "34m ago",
-  },
-  {
-    id: "dep-3",
-    version: "v2.9.0",
-    environment: "production",
-    product: "API gateway",
-    status: "live",
-    deployedBy: "ci-bot",
-    timestamp: "2h ago",
-  },
-  {
-    id: "dep-4",
-    version: "v3.4.1",
-    environment: "staging",
-    product: "OCR worker pool",
-    status: "queued",
-    deployedBy: "devon.park",
-    timestamp: "3h ago",
-  },
-  {
-    id: "dep-5",
-    version: "v3.3.9",
-    environment: "production",
-    product: "Extraction engine",
-    status: "rolled-back",
-    deployedBy: "maria.chen",
-    timestamp: "yesterday",
-  },
-  {
-    id: "dep-6",
-    version: "v3.3.8",
-    environment: "production",
-    product: "Webhook dispatcher",
-    status: "live",
-    deployedBy: "ci-bot",
-    timestamp: "2d ago",
-  },
-];
-
-export function recentDeploymentsFor(tier: Tier): RecentDeployment[] {
-  if (tier === "free") return RECENT_DEPLOYMENTS_ALL.slice(0, 2);
-  if (tier === "pro") return RECENT_DEPLOYMENTS_ALL.slice(0, 4);
-  return RECENT_DEPLOYMENTS_ALL;
-}
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  API Keys                                                                 */
 /* ──────────────────────────────────────────────────────────────────────── */
@@ -220,288 +80,6 @@ export function apiKeysFor(tier: Tier): ApiKeysResponse {
   return { keys };
 }
 
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Security                                                                 */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-const CERTS_FULL: ComplianceCert[] = [
-  {
-    id: "soc2",
-    name: "SOC 2 Type II",
-    status: "certified",
-    detail: "Audited Apr 2026 · Coalfire",
-  },
-  {
-    id: "iso",
-    name: "ISO 27001",
-    status: "certified",
-    detail: "Cert #IS-774201 · valid to 2027",
-  },
-  {
-    id: "hipaa",
-    name: "HIPAA",
-    status: "certified",
-    detail: "BAA available · PHI-eligible",
-  },
-  {
-    id: "gdpr",
-    name: "GDPR",
-    status: "certified",
-    detail: "EU SCCs · DPA on file",
-  },
-];
-
-const CERTS_FREE: ComplianceCert[] = [
-  {
-    id: "soc2",
-    name: "SOC 2 Type II",
-    status: "certified",
-    detail: "Inherited — Stirling platform",
-  },
-  {
-    id: "iso",
-    name: "ISO 27001",
-    status: "certified",
-    detail: "Inherited — Stirling platform",
-  },
-  {
-    id: "hipaa",
-    name: "HIPAA",
-    status: "not-started",
-    detail: "Requires a paid plan + BAA",
-  },
-  {
-    id: "gdpr",
-    name: "GDPR",
-    status: "in-progress",
-    detail: "Standard EU processing terms",
-  },
-];
-
-const IP_ALLOWLIST: IpAllowEntry[] = [
-  {
-    id: "ip-1",
-    label: "Corp VPN egress",
-    cidr: "52.14.0.0/16",
-    addedBy: "maria.chen",
-    added: "Feb 11, 2026",
-  },
-  {
-    id: "ip-2",
-    label: "Data centre — IAD",
-    cidr: "18.221.0.0/16",
-    addedBy: "devon.park",
-    added: "Jan 4, 2026",
-  },
-  {
-    id: "ip-3",
-    label: "On-call jump host",
-    cidr: "203.0.113.7/32",
-    addedBy: "maria.chen",
-    added: "Dec 19, 2025",
-  },
-];
-
-// Stirling-managed key custody — what free/pro tiers run on. No key ops on the
-// customer side, so the provider/key fields describe Stirling's own KMS.
-const KEY_MANAGED: KeyManagement = {
-  mode: "managed",
-  provider: "Stirling KMS",
-  keyId: "arn:stirling:kms:us-east-1:platform/cmk-default",
-  algorithm: "AES-256-GCM",
-  lastRotated: "32 days ago",
-  rotationPolicy: "Automatic · every 90 days",
-  customerManaged: false,
-};
-
-const KEY_HYOK: KeyManagement = {
-  mode: "hyok",
-  provider: "AWS CloudHSM (customer)",
-  keyId: "arn:aws:kms:eu-west-1:418xxxx:key/2a7e-hyok",
-  algorithm: "AES-256-GCM · external key store",
-  lastRotated: "5 days ago",
-  rotationPolicy: "Customer-controlled · keys never leave your HSM",
-  customerManaged: true,
-};
-
-// Full attestation set an enterprise contract is covered by.
-const ATTESTATIONS_FULL: ComplianceAttestation[] = [
-  {
-    id: "soc2",
-    name: "SOC 2 Type II",
-    framework: "AICPA Trust Services",
-    status: "attested",
-    detail: "Type II · audited Apr 2026 · Coalfire",
-    reportUrl: "/v1/infrastructure/security/reports/soc2",
-  },
-  {
-    id: "iso27001",
-    name: "ISO 27001",
-    framework: "ISO/IEC 27001:2022",
-    status: "attested",
-    detail: "Cert #IS-774201 · valid to 2027",
-    reportUrl: "/v1/infrastructure/security/reports/iso27001",
-  },
-  {
-    id: "hipaa",
-    name: "HIPAA",
-    framework: "US healthcare · PHI",
-    status: "attested",
-    detail: "BAA signed · PHI-eligible workloads",
-    reportUrl: "/v1/infrastructure/security/reports/hipaa",
-  },
-  {
-    id: "gdpr",
-    name: "GDPR",
-    framework: "EU data protection",
-    status: "attested",
-    detail: "EU SCCs · DPA on file · EU residency",
-    reportUrl: "/v1/infrastructure/security/reports/gdpr",
-  },
-  {
-    id: "pci",
-    name: "PCI DSS",
-    framework: "Payment card data",
-    status: "in-scope",
-    detail: "SAQ-D in progress · QSA assessment Q3",
-    reportUrl: null,
-  },
-];
-
-// What lower tiers can claim: the platform-inherited attestations only. HIPAA
-// and PCI require a paid contract + signed paperwork, so they read as
-// not-applicable until the customer upgrades.
-const ATTESTATIONS_FREE: ComplianceAttestation[] = [
-  {
-    id: "soc2",
-    name: "SOC 2 Type II",
-    framework: "AICPA Trust Services",
-    status: "attested",
-    detail: "Inherited — Stirling platform",
-    reportUrl: "/v1/infrastructure/security/reports/soc2",
-  },
-  {
-    id: "iso27001",
-    name: "ISO 27001",
-    framework: "ISO/IEC 27001:2022",
-    status: "attested",
-    detail: "Inherited — Stirling platform",
-    reportUrl: "/v1/infrastructure/security/reports/iso27001",
-  },
-  {
-    id: "gdpr",
-    name: "GDPR",
-    framework: "EU data protection",
-    status: "in-scope",
-    detail: "Standard EU processing terms",
-    reportUrl: null,
-  },
-  {
-    id: "hipaa",
-    name: "HIPAA",
-    framework: "US healthcare · PHI",
-    status: "not-applicable",
-    detail: "Requires a paid plan + signed BAA",
-    reportUrl: null,
-  },
-  {
-    id: "pci",
-    name: "PCI DSS",
-    framework: "Payment card data",
-    status: "not-applicable",
-    detail: "Requires an enterprise contract",
-    reportUrl: null,
-  },
-];
-
-export function securityFor(tier: Tier): SecurityConfig {
-  if (tier === "free") {
-    return {
-      accessPolicy: "stirling",
-      dataResidency: "us",
-      certs: CERTS_FREE,
-      ipAllowlist: [],
-      keyManagement: KEY_MANAGED,
-      attestations: ATTESTATIONS_FREE,
-    };
-  }
-  if (tier === "pro") {
-    return {
-      accessPolicy: "byok",
-      dataResidency: "us",
-      certs: CERTS_FULL,
-      ipAllowlist: IP_ALLOWLIST.slice(0, 2),
-      // Pro stays on Stirling-managed keys; BYOK/HYOK is an enterprise lever.
-      keyManagement: KEY_MANAGED,
-      attestations: ATTESTATIONS_FREE,
-    };
-  }
-  return {
-    accessPolicy: "hyok",
-    dataResidency: "eu",
-    certs: CERTS_FULL,
-    ipAllowlist: IP_ALLOWLIST,
-    keyManagement: KEY_HYOK,
-    attestations: ATTESTATIONS_FULL,
-  };
-}
-
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Storage                                                                  */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-const PROVIDERS_FULL: StorageProvider[] = [
-  {
-    id: "stirling",
-    name: "Stirling Cloud",
-    kind: "stirling",
-    connected: true,
-    detail: "Primary vault · us-east-1",
-    usedGb: 612,
-  },
-  {
-    id: "s3",
-    name: "Amazon S3",
-    kind: "s3",
-    connected: true,
-    detail: "s3://acme-prod-archive · WORM",
-    usedGb: 388,
-  },
-  {
-    id: "azure",
-    name: "Azure Blob",
-    kind: "azure",
-    connected: false,
-    detail: "Not connected",
-    usedGb: 0,
-  },
-];
-
-export function storageFor(tier: Tier): StorageConfig {
-  if (tier === "free") {
-    return {
-      usedGb: 4.2,
-      quotaGb: 5,
-      retention: "30",
-      providers: [PROVIDERS_FULL[0]],
-    };
-  }
-  if (tier === "pro") {
-    return {
-      usedGb: 318,
-      quotaGb: 500,
-      retention: "90",
-      providers: [PROVIDERS_FULL[0], PROVIDERS_FULL[1]],
-    };
-  }
-  return {
-    usedGb: 1000,
-    quotaGb: 2000,
-    retention: "180",
-    providers: PROVIDERS_FULL,
-  };
-}
-
 /* ──────────────────────────────────────────────────────────────────────── */
 /*  Audit Logs                                                               */
 /* ──────────────────────────────────────────────────────────────────────── */
@@ -693,199 +271,6 @@ const AUDIT_EVENTS_ALL: AuditEvent[] = [
   },
 ];
 
-/* ──────────────────────────────────────────────────────────────────────── */
-/*  Models                                                                   */
-/* ──────────────────────────────────────────────────────────────────────── */
-
-const MODELS_ALL: ModelEntry[] = [
-  {
-    id: "m-extract-v3",
-    name: "Stirling Extract",
-    provider: "stirling",
-    type: "extraction",
-    status: "active",
-    latencyMs: 142,
-    cost: 0.9,
-    costUnit: "per-1k-docs",
-    version: "v3.4.2",
-    load: 0.71,
-    managed: true,
-  },
-  {
-    id: "m-classify-v2",
-    name: "Stirling Classify",
-    provider: "stirling",
-    type: "classification",
-    status: "active",
-    latencyMs: 61,
-    cost: 0.4,
-    costUnit: "per-1k-docs",
-    version: "v2.8.0",
-    load: 0.48,
-    managed: true,
-  },
-  {
-    id: "m-ocr-tess",
-    name: "Stirling OCR",
-    provider: "stirling",
-    type: "ocr",
-    status: "active",
-    latencyMs: 318,
-    cost: 1.2,
-    costUnit: "per-1k-docs",
-    version: "v3.1.0",
-    load: 0.55,
-    managed: true,
-  },
-  {
-    id: "m-gpt4o",
-    name: "GPT-4o",
-    provider: "openai",
-    type: "llm",
-    status: "active",
-    latencyMs: 880,
-    cost: 0.012,
-    costUnit: "per-call",
-    version: "2026-05",
-    load: 0.33,
-    managed: true,
-  },
-  {
-    id: "m-claude-sonnet",
-    name: "Claude Sonnet 4.5",
-    provider: "anthropic",
-    type: "llm",
-    status: "degraded",
-    latencyMs: 1240,
-    cost: 0.009,
-    costUnit: "per-call",
-    version: "2026-04",
-    load: 0.21,
-    managed: true,
-  },
-  {
-    id: "m-onprem-ocr",
-    name: "On-prem OCR (Tesseract)",
-    provider: "on-prem",
-    type: "ocr",
-    status: "active",
-    latencyMs: 502,
-    cost: 0,
-    costUnit: "per-1k-docs",
-    version: "byo-1.2",
-    load: 0.12,
-    managed: false,
-  },
-  // Registered but parked: a customer LLM weight kept warm without traffic.
-  {
-    id: "m-onprem-llm",
-    name: "On-prem Llama 3 70B",
-    provider: "on-prem",
-    type: "llm",
-    status: "disabled",
-    latencyMs: 0,
-    cost: 0,
-    costUnit: "per-call",
-    version: "byo-0.9",
-    load: 0,
-    managed: false,
-  },
-];
-
-export function modelsFor(tier: Tier): ModelEntry[] {
-  // Free sees only the two managed Stirling models it can actually use.
-  if (tier === "free")
-    return MODELS_ALL.filter(
-      (m) => m.id === "m-extract-v3" || m.id === "m-classify-v2",
-    );
-  // Pro gets the full managed catalogue but no bring-your-own / on-prem models.
-  if (tier === "pro") return MODELS_ALL.filter((m) => m.managed);
-  return MODELS_ALL;
-}
-
-const ROUTING_ALL: RoutingRule[] = [
-  {
-    id: "r-extract",
-    operation: "Field extraction",
-    docType: "Invoices",
-    modelId: "m-extract-v3",
-    modelName: "Stirling Extract",
-    isDefault: false,
-  },
-  {
-    id: "r-classify",
-    operation: "Document classification",
-    docType: "All document types",
-    modelId: "m-classify-v2",
-    modelName: "Stirling Classify",
-    isDefault: false,
-  },
-  {
-    id: "r-ocr",
-    operation: "Text recognition",
-    docType: "Scanned PDFs",
-    modelId: "m-ocr-tess",
-    modelName: "Stirling OCR",
-    isDefault: false,
-  },
-  {
-    id: "r-summarize",
-    operation: "Summarisation",
-    docType: "Contracts",
-    modelId: "m-gpt4o",
-    modelName: "GPT-4o",
-    isDefault: false,
-  },
-  // Catch-all: any operation without a narrower rule falls back here.
-  {
-    id: "r-default",
-    operation: "Default",
-    docType: "All document types",
-    modelId: "m-extract-v3",
-    modelName: "Stirling Extract",
-    isDefault: true,
-  },
-];
-
-export function routingFor(tier: Tier): RoutingRule[] {
-  // Free has no routing control — the table is locked behind an upgrade nudge,
-  // so there are no rules to surface.
-  if (tier === "free") return [];
-  if (tier === "pro") return ROUTING_ALL.filter((r) => r.modelId !== "m-gpt4o");
-  return ROUTING_ALL;
-}
-
-export function modelsResponseFor(tier: Tier): ModelsResponse {
-  const models = modelsFor(tier);
-  const active = models.filter((m) => m.status === "active");
-
-  // Average latency is capacity-weighted so a barely-used model doesn't skew
-  // the headline; falls back to a plain mean when nothing is taking load.
-  const totalLoad = active.reduce((sum, m) => sum + m.load, 0);
-  const avgLatencyMs =
-    totalLoad > 0
-      ? Math.round(
-          active.reduce((sum, m) => sum + m.latencyMs * m.load, 0) / totalLoad,
-        )
-      : active.length > 0
-        ? Math.round(
-            active.reduce((sum, m) => sum + m.latencyMs, 0) / active.length,
-          )
-        : 0;
-
-  const monthlySpend = tier === "free" ? 0 : tier === "pro" ? 1840 : 6120;
-
-  return {
-    summary: {
-      activeModels: active.length,
-      avgLatencyMs,
-      monthlySpend,
-    },
-    models,
-    routing: routingFor(tier),
-  };
-}
-
 export function auditLogFor(tier: Tier): AuditLogResponse {
   const events =
     tier === "free"
diff --git a/frontend/editor/src/portal/queries/keys.ts b/frontend/editor/src/portal/queries/keys.ts
index 6c29430cb4..e1c46a59c0 100644
--- a/frontend/editor/src/portal/queries/keys.ts
+++ b/frontend/editor/src/portal/queries/keys.ts
@@ -20,6 +20,8 @@ export const qk = {
   // Keyed on linkage: an unlinked account has no deal to read, so linking must not
   // serve the unlinked (null) snapshot back from cache.
   procurement: (linked: boolean) => ["portal", "procurement", linked] as const,
+  // Same reasoning: an unlinked instance has no wallet in the cloud.
+  wallet: (linked: boolean) => ["portal", "wallet", linked] as const,
 
   // Tier-dependent
   documents: (tier: Tier) => ["portal", "documents", tier] as const,
diff --git a/frontend/editor/src/portal/setupTests.ts b/frontend/editor/src/portal/setupTests.ts
index 9064c734ba..7de4f9f309 100644
--- a/frontend/editor/src/portal/setupTests.ts
+++ b/frontend/editor/src/portal/setupTests.ts
@@ -1,6 +1,9 @@
 import "@testing-library/jest-dom";
 import { vi } from "vitest";
 
+// The shims `src/index.tsx` installs - see core/setupTests.ts.
+import "@app/utils/engineShims";
+
 // Mirrors the editor's setup: jsdom lacks a handful of browser APIs that shared
 // components (Mantine FocusTrap, responsive helpers) touch on render.
 
diff --git a/frontend/editor/src/portal/theme/mantineTheme.ts b/frontend/editor/src/portal/theme/mantineTheme.ts
index 7108a90073..0c7afa94a7 100644
--- a/frontend/editor/src/portal/theme/mantineTheme.ts
+++ b/frontend/editor/src/portal/theme/mantineTheme.ts
@@ -128,7 +128,7 @@ export const suiCssVariablesResolver: CSSVariablesResolver = () => ({
   light: {
     ...suiAccessibleColorSlots,
     // Popover/dropdown background + combobox search input
-    "--mantine-color-white": "var(--c-surface)",
+    "--mantine-color-white": "var(--c-surface-raised)",
     // Option hover background
     "--mantine-color-gray-0": "var(--c-hover)",
     // Dropdown border
@@ -163,6 +163,10 @@ export const mantineTheme = createTheme({
     CloseButton: { defaultProps: { "aria-label": "Close" } },
     Modal: { defaultProps: { closeButtonProps: { "aria-label": "Close" } } },
     Drawer: { defaultProps: { closeButtonProps: { "aria-label": "Close" } } },
+    // The portal's md default radius (8px) is right for cards and buttons but
+    // rounds a 20px checkbox into a circle. Pin it to the smaller radius the
+    // editor's checkboxes use so the box reads as a checkbox.
+    Checkbox: { styles: { input: { borderRadius: "var(--radius-sm)" } } },
   },
   fontFamily: "var(--font-sans)",
   fontFamilyMonospace: "var(--font-mono)",
diff --git a/frontend/editor/src/portal/theme/surface.css b/frontend/editor/src/portal/theme/surface.css
new file mode 100644
index 0000000000..91ba40b41e
--- /dev/null
+++ b/frontend/editor/src/portal/theme/surface.css
@@ -0,0 +1,7 @@
+/* The portal's own in-page surface. Same look as SUI's `.sui-surface`, owned here because a
+   `sui-` class belongs to the component that emits it — feature markup doesn't apply one. */
+.portal-surface {
+  background: var(--c-surface);
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-nav);
+}
diff --git a/frontend/editor/src/portal/views/DeveloperDocs.css b/frontend/editor/src/portal/views/DeveloperDocs.css
index 6487a9afff..8ca485bc4e 100644
--- a/frontend/editor/src/portal/views/DeveloperDocs.css
+++ b/frontend/editor/src/portal/views/DeveloperDocs.css
@@ -438,8 +438,6 @@
 .portal-docs__endpoint-group {
   display: flex;
   flex-direction: column;
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-lg);
   overflow: hidden;
 }
 
diff --git a/frontend/editor/src/portal/views/Documents.tsx b/frontend/editor/src/portal/views/Documents.tsx
index 74bc26d320..6bd394c13d 100644
--- a/frontend/editor/src/portal/views/Documents.tsx
+++ b/frontend/editor/src/portal/views/Documents.tsx
@@ -96,7 +96,7 @@ export function Documents() {
         </div>
         <Button
           variant="secondary"
-          size="sm"
+          fat
           leftSection={<DownloadIcon />}
           onClick={exportCsv}
           disabled={documents.length === 0}
@@ -107,9 +107,13 @@ export function Documents() {
 
       <ReviewQueue documents={documents} loading={state.loading} />
 
-      {/* Recorded policy-run failures. Not mounted outside dev: the endpoints are live and
-          gated, but the surface itself is unfinished (no polling, no paging, no filters).
-          Vite folds this to false in a build, so neither the view nor its fetch ships. */}
+      {/* Recorded policy, pipeline and editor failures. DEV ONLY, deliberately: this list is a
+          stand-in until failures get their own review screen, and it is not the surface we want to
+          ship. The endpoints behind it are live and gated, so nothing here is load-bearing.
+
+          Vite folds this to false in a build, so neither the section nor its fetch ships. The bell's
+          "View in processor" action is gated the same way and for the same reason - lift both
+          together when the review screen lands, or that button navigates nowhere. */}
       {import.meta.env.DEV && <FileRunEventList />}
     </div>
   );
diff --git a/frontend/editor/src/portal/views/Infrastructure.css b/frontend/editor/src/portal/views/Infrastructure.css
index 660bd4a69f..962be38b04 100644
--- a/frontend/editor/src/portal/views/Infrastructure.css
+++ b/frontend/editor/src/portal/views/Infrastructure.css
@@ -122,27 +122,7 @@
   gap: 0.75rem;
 }
 
-/* Two-column split */
-.portal-infra__split {
-  display: grid;
-  grid-template-columns: 1fr 1fr;
-  gap: 1rem;
-  align-items: start;
-}
-
-@media (max-width: 60rem) {
-  .portal-infra__split {
-    grid-template-columns: 1fr;
-  }
-}
-
 /* Shared cell styles */
-.portal-infra__cell-stack {
-  display: flex;
-  flex-direction: column;
-  gap: 0.125rem;
-}
-
 .portal-infra__cell-strong {
   font-size: 0.8125rem;
   font-weight: 600;
@@ -165,26 +145,6 @@
   color: var(--c-text-muted);
 }
 
-.portal-infra__muted {
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-}
-
-/* Region load cell */
-.portal-infra__load {
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-}
-
-.portal-infra__load-pct {
-  font-family: var(--font-mono);
-  font-size: 0.6875rem;
-  color: var(--c-text-subtle);
-  min-width: 2.25rem;
-  text-align: right;
-}
-
 /* ── API keys ───────────────────────────────────────────────────────────── */
 .portal-infra__keys {
   display: flex;
@@ -252,10 +212,6 @@
   }
 }
 
-.portal-infra__kv-wide {
-  grid-column: 1 / -1;
-}
-
 .portal-infra__kv dt {
   font-size: 0.6875rem;
   text-transform: uppercase;
@@ -270,12 +226,6 @@
   color: var(--c-text-muted);
 }
 
-.portal-infra__chips {
-  display: flex;
-  flex-wrap: wrap;
-  gap: 0.375rem;
-}
-
 /* Modal form */
 .portal-infra__form {
   display: flex;
@@ -283,217 +233,12 @@
   gap: 1rem;
 }
 
-.portal-infra__perm-row {
-  display: flex;
-  gap: 1.25rem;
-  flex-wrap: wrap;
-}
-
 .portal-infra__modal-actions {
   display: flex;
   justify-content: flex-end;
   gap: 0.625rem;
 }
 
-/* ── Security ───────────────────────────────────────────────────────────── */
-.portal-infra__banner {
-  margin-top: 1rem;
-}
-
-.portal-infra__certs {
-  display: grid;
-  grid-template-columns: repeat(4, 1fr);
-  gap: 0.75rem;
-}
-
-@media (max-width: 60rem) {
-  .portal-infra__certs {
-    grid-template-columns: repeat(2, 1fr);
-  }
-}
-
-.portal-infra__cert-head {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 0.5rem;
-  margin-bottom: 0.375rem;
-}
-
-.portal-infra__cert-detail {
-  margin: 0;
-  font-size: 0.6875rem;
-  color: var(--c-text-subtle);
-  line-height: 1.4;
-}
-
-/* Encryption key management */
-.portal-infra__keymgmt-head {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 1rem;
-  margin-bottom: 1rem;
-}
-
-.portal-infra__keymgmt-title {
-  display: flex;
-  align-items: center;
-  gap: 0.625rem;
-  min-width: 0;
-}
-
-/* Compliance attestations — same grid rhythm as certs, but each card stacks
-   a framework chip + report link, so it needs a little more vertical room. */
-.portal-infra__attestations {
-  display: grid;
-  grid-template-columns: repeat(3, 1fr);
-  gap: 0.75rem;
-}
-
-@media (max-width: 60rem) {
-  .portal-infra__attestations {
-    grid-template-columns: repeat(2, 1fr);
-  }
-}
-
-@media (max-width: 36rem) {
-  .portal-infra__attestations {
-    grid-template-columns: 1fr;
-  }
-}
-
-.portal-infra__attestation {
-  display: flex;
-  flex-direction: column;
-  gap: 0.5rem;
-  align-items: flex-start;
-}
-
-.portal-infra__attestation-link {
-  font-size: 0.75rem;
-  font-weight: 600;
-  color: var(--c-accent-text);
-  text-decoration: none;
-}
-
-.portal-infra__attestation-link:hover {
-  text-decoration: underline;
-}
-
-/* ── Storage ────────────────────────────────────────────────────────────── */
-.portal-infra__usage-head {
-  display: flex;
-  align-items: center;
-  justify-content: space-between;
-  gap: 0.5rem;
-  margin-bottom: 0.625rem;
-}
-
-.portal-infra__usage-value {
-  font-size: 1.25rem;
-  font-weight: 650;
-  color: var(--c-text);
-}
-
-.portal-infra__usage-value .portal-infra__muted {
-  font-size: 0.875rem;
-  font-weight: 400;
-}
-
-.portal-infra__providers {
-  list-style: none;
-  margin: 0;
-  padding: 0;
-  display: flex;
-  flex-direction: column;
-  gap: 0.5rem;
-}
-
-.portal-infra__provider {
-  display: grid;
-  grid-template-columns: auto 1fr auto;
-  align-items: center;
-  gap: 0.75rem;
-  padding: 0.625rem 0.75rem;
-  background: var(--color-bg-subtle);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-md);
-}
-
-.portal-infra__provider-glyph {
-  display: inline-flex;
-  align-items: center;
-  justify-content: center;
-  width: 1.75rem;
-  height: 1.75rem;
-  border-radius: var(--radius-md);
-  background: var(--c-primary-tint);
-  color: var(--c-accent-text);
-  font-size: 0.875rem;
-}
-
-.portal-infra__provider-text {
-  display: flex;
-  flex-direction: column;
-  gap: 0.125rem;
-  min-width: 0;
-}
-
-.portal-infra__provider-meta {
-  display: flex;
-  align-items: center;
-  gap: 0.625rem;
-}
-
-/* Lifecycle timeline */
-.portal-infra__lifecycle {
-  display: flex;
-  align-items: stretch;
-  gap: 0.5rem;
-  margin-top: 1rem;
-}
-
-.portal-infra__lifecycle-stage {
-  flex: 1;
-  display: flex;
-  flex-direction: column;
-  gap: 0.25rem;
-  padding: 0.625rem 0.75rem;
-  background: var(--color-bg-subtle);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-md);
-}
-
-.portal-infra__lifecycle-stage.is-active {
-  background: var(--color-green-light);
-  border-color: var(--color-green-border);
-}
-
-.portal-infra__lifecycle-dot {
-  width: 0.5rem;
-  height: 0.5rem;
-  border-radius: 50%;
-  background: var(--c-text-subtle);
-}
-
-.portal-infra__lifecycle-stage.is-active .portal-infra__lifecycle-dot {
-  background: var(--color-green);
-}
-
-.portal-infra__lifecycle-label {
-  font-size: 0.8125rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
-.portal-infra__lifecycle-arrow {
-  display: flex;
-  align-items: center;
-  color: var(--c-text-subtle);
-  font-size: 0.875rem;
-}
-
 /* ── Audit ──────────────────────────────────────────────────────────────── */
 .portal-infra__event {
   display: flex;
diff --git a/frontend/editor/src/portal/views/Infrastructure.test.tsx b/frontend/editor/src/portal/views/Infrastructure.test.tsx
new file mode 100644
index 0000000000..afd23e0ff1
--- /dev/null
+++ b/frontend/editor/src/portal/views/Infrastructure.test.tsx
@@ -0,0 +1,124 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { fireEvent, render, screen } from "@testing-library/react";
+import { MemoryRouter } from "react-router-dom";
+import { MantineProvider } from "@mantine/core";
+
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    t: (key: string) => key,
+    i18n: { changeLanguage: vi.fn() },
+  }),
+}));
+
+vi.mock("@portal/contexts/ViewContext", () => ({
+  useView: () => ({ setActiveView: vi.fn() }),
+}));
+
+const enterprise = { enabled: true, loading: false };
+vi.mock("@portal/hooks/useEnterpriseEnabled", () => ({
+  useEnterpriseEnabled: () => enterprise,
+}));
+
+vi.mock("@portal/components/infrastructure/ApiKeysTab", () => ({
+  ApiKeysTab: () => <div data-testid="api-keys-tab" />,
+}));
+vi.mock("@portal/components/infrastructure/AuditTab", () => ({
+  AuditTab: () => <div data-testid="audit-tab" />,
+}));
+
+import { Infrastructure } from "@portal/views/Infrastructure";
+
+const T = "portal.infrastructure.tabs";
+
+function renderView(initialPath = "/infrastructure") {
+  return render(
+    <MantineProvider>
+      <MemoryRouter initialEntries={[initialPath]}>
+        <Infrastructure />
+      </MemoryRouter>
+    </MantineProvider>,
+  );
+}
+
+function tabButtons() {
+  return screen
+    .getAllByRole("button")
+    .filter((b) => b.className.includes("sui-tabs__tab"));
+}
+
+describe("Infrastructure view", () => {
+  beforeEach(() => {
+    enterprise.enabled = true;
+    enterprise.loading = false;
+  });
+
+  it("orders the working tabs first and defaults to API keys", () => {
+    renderView();
+
+    expect(tabButtons().map((b) => b.textContent)).toEqual([
+      `${T}.apiKeys`,
+      `${T}.audit`,
+      `${T}.deployments`,
+      `${T}.security`,
+      `${T}.models`,
+      `${T}.storage`,
+    ]);
+    expect(screen.getByTestId("api-keys-tab")).toBeInTheDocument();
+  });
+
+  it("renders the backend-less tabs as inert: disabled, aria-disabled, never active", () => {
+    renderView();
+
+    const byLabel = new Map(tabButtons().map((b) => [b.textContent, b]));
+    for (const key of ["deployments", "security", "models", "storage"]) {
+      const btn = byLabel.get(`${T}.${key}`) as HTMLButtonElement;
+      expect(btn).toBeDisabled();
+      expect(btn).toHaveAttribute("aria-disabled", "true");
+      expect(btn).toHaveAttribute("aria-pressed", "false");
+
+      fireEvent.click(btn);
+      expect(screen.getByTestId("api-keys-tab")).toBeInTheDocument();
+    }
+  });
+
+  it("switches to the audit tab when clicked", () => {
+    renderView();
+
+    fireEvent.click(screen.getByRole("button", { name: `${T}.audit` }));
+    expect(screen.getByTestId("audit-tab")).toBeInTheDocument();
+    expect(screen.queryByTestId("api-keys-tab")).not.toBeInTheDocument();
+  });
+
+  it("honours ?tab=audit deep links (used by the home visualiser)", () => {
+    renderView("/infrastructure?tab=audit");
+
+    expect(screen.getByTestId("audit-tab")).toBeInTheDocument();
+  });
+
+  it("ignores a deep link to a disabled tab and stays on the default", () => {
+    renderView("/infrastructure?tab=storage");
+
+    expect(screen.getByTestId("api-keys-tab")).toBeInTheDocument();
+    expect(screen.queryByTestId("audit-tab")).not.toBeInTheDocument();
+  });
+
+  it("disables the audit tab (inert, never opens) for non-enterprise users", () => {
+    enterprise.enabled = false;
+    renderView();
+
+    const auditBtn = screen.getByRole("button", { name: `${T}.audit` });
+    expect(auditBtn).toBeDisabled();
+
+    fireEvent.click(auditBtn);
+    expect(screen.getByTestId("api-keys-tab")).toBeInTheDocument();
+    expect(screen.queryByTestId("audit-tab")).not.toBeInTheDocument();
+  });
+
+  it("ignores a ?tab=audit deep link when not enterprise", () => {
+    enterprise.enabled = false;
+    renderView("/infrastructure?tab=audit");
+
+    expect(screen.getByTestId("api-keys-tab")).toBeInTheDocument();
+    expect(screen.queryByTestId("audit-tab")).not.toBeInTheDocument();
+  });
+});
diff --git a/frontend/editor/src/portal/views/Infrastructure.tsx b/frontend/editor/src/portal/views/Infrastructure.tsx
index 7d720f6895..fa1ff272b9 100644
--- a/frontend/editor/src/portal/views/Infrastructure.tsx
+++ b/frontend/editor/src/portal/views/Infrastructure.tsx
@@ -1,59 +1,71 @@
-import { useEffect, useState } from "react";
+import { useCallback, useEffect, useState } from "react";
 import { useSearchParams } from "react-router-dom";
 import { useTranslation } from "react-i18next";
 import { Button, Tabs, type TabItem } from "@app/ui";
 import { useView } from "@portal/contexts/ViewContext";
-import { DeploymentsTab } from "@portal/components/infrastructure/DeploymentsTab";
+import { useEnterpriseEnabled } from "@portal/hooks/useEnterpriseEnabled";
 import { ApiKeysTab } from "@portal/components/infrastructure/ApiKeysTab";
-import { SecurityTab } from "@portal/components/infrastructure/SecurityTab";
-import { ModelsTab } from "@portal/components/infrastructure/ModelsTab";
-import { StorageTab } from "@portal/components/infrastructure/StorageTab";
 import { AuditTab } from "@portal/components/infrastructure/AuditTab";
 import "@portal/views/Infrastructure.css";
 
-type InfraTab =
-  | "deployments"
-  | "api-keys"
-  | "security"
-  | "models"
-  | "storage"
-  | "audit";
+type InfraTab = "api-keys" | "audit";
 
-const INFRA_TABS: InfraTab[] = [
-  "deployments",
-  "api-keys",
-  "security",
-  "models",
-  "storage",
-  "audit",
-];
+/** Shown but inert: no backend behind these screens yet. */
+type DisabledInfraTab = "deployments" | "security" | "models" | "storage";
 
 export function Infrastructure() {
   const { t } = useTranslation();
-  const [tab, setTab] = useState<InfraTab>("deployments");
+  const [tab, setTab] = useState<InfraTab>("api-keys");
   const { setActiveView } = useView();
   const [searchParams, setSearchParams] = useSearchParams();
+  // Audit is Enterprise-only; disabled (greyed, inert) on non-enterprise instances.
+  const auditEnabled = useEnterpriseEnabled().enabled;
+
+  const canOpenTab = useCallback(
+    (key: string) => key === "api-keys" || (key === "audit" && auditEnabled),
+    [auditEnabled],
+  );
 
   // Deep-link (?tab=<key>) from elsewhere (e.g. the home visualiser's outcome
   // cards → audit log): open that tab, then drop the param.
   useEffect(() => {
     const requested = searchParams.get("tab");
     if (!requested) return;
-    if ((INFRA_TABS as string[]).includes(requested)) {
+    if (canOpenTab(requested)) {
       setTab(requested as InfraTab);
     }
     const next = new URLSearchParams(searchParams);
     next.delete("tab");
     setSearchParams(next, { replace: true });
-  }, [searchParams, setSearchParams]);
+  }, [searchParams, setSearchParams, canOpenTab]);
 
-  const tabs: TabItem<InfraTab>[] = [
-    { key: "deployments", label: t("portal.infrastructure.tabs.deployments") },
+  const tabs: TabItem<InfraTab | DisabledInfraTab>[] = [
     { key: "api-keys", label: t("portal.infrastructure.tabs.apiKeys") },
-    { key: "security", label: t("portal.infrastructure.tabs.security") },
-    { key: "models", label: t("portal.infrastructure.tabs.models") },
-    { key: "storage", label: t("portal.infrastructure.tabs.storage") },
-    { key: "audit", label: t("portal.infrastructure.tabs.audit") },
+    {
+      key: "audit",
+      label: t("portal.infrastructure.tabs.audit"),
+      disabled: !auditEnabled,
+    },
+    {
+      key: "deployments",
+      label: t("portal.infrastructure.tabs.deployments"),
+      disabled: true,
+    },
+    {
+      key: "security",
+      label: t("portal.infrastructure.tabs.security"),
+      disabled: true,
+    },
+    {
+      key: "models",
+      label: t("portal.infrastructure.tabs.models"),
+      disabled: true,
+    },
+    {
+      key: "storage",
+      label: t("portal.infrastructure.tabs.storage"),
+      disabled: true,
+    },
   ];
 
   return (
@@ -67,29 +79,23 @@ export function Infrastructure() {
             {t("portal.infrastructure.subtitle")}
           </p>
         </div>
-        <Button
-          variant="secondary"
-          size="sm"
-          onClick={() => setActiveView("editor")}
-        >
+        <Button fat onClick={() => setActiveView("editor")}>
           {t("portal.infrastructure.manageEditorDeployment")}
         </Button>
       </header>
 
-      <Tabs<InfraTab>
+      <Tabs<InfraTab | DisabledInfraTab>
         items={tabs}
         activeKey={tab}
-        onChange={setTab}
+        onChange={(key) => {
+          if (canOpenTab(key)) setTab(key as InfraTab);
+        }}
         variant="underline"
         ariaLabel={t("portal.infrastructure.sectionsAriaLabel")}
       />
 
       <div className="portal-infra__panel">
-        {tab === "deployments" && <DeploymentsTab />}
         {tab === "api-keys" && <ApiKeysTab />}
-        {tab === "security" && <SecurityTab />}
-        {tab === "models" && <ModelsTab />}
-        {tab === "storage" && <StorageTab />}
         {tab === "audit" && <AuditTab />}
       </div>
     </div>
diff --git a/frontend/editor/src/portal/views/Integrations.css b/frontend/editor/src/portal/views/Integrations.css
index d006fcbb84..bfc4cf06f3 100644
--- a/frontend/editor/src/portal/views/Integrations.css
+++ b/frontend/editor/src/portal/views/Integrations.css
@@ -116,9 +116,6 @@
 /* One list, table-shaped: a shared 4-column grid so the connected, available
    and coming-soon bands line up under the same headers. */
 .portal-integrations__table {
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-md);
-  background: var(--c-surface);
   overflow: hidden;
 }
 
diff --git a/frontend/editor/src/portal/views/Integrations.test.tsx b/frontend/editor/src/portal/views/Integrations.test.tsx
index c5e96d8666..8c4e684bfa 100644
--- a/frontend/editor/src/portal/views/Integrations.test.tsx
+++ b/frontend/editor/src/portal/views/Integrations.test.tsx
@@ -68,39 +68,35 @@ describe("Integrations view", () => {
     ).toBeInTheDocument();
   });
 
-  it("groups connections of the same type and expands to the instances", async () => {
+  it("groups connections of the same type, instances shown as rows (no expand)", async () => {
     fetchIntegrations.mockResolvedValue([
       bucket(1, "Claims"),
       bucket(2, "Archive"),
     ]);
     render(<Integrations />);
 
-    // One connected group row for S3 with the instance count, not two rows.
-    const group = await screen.findByText(
-      "portal.integrations.connectionCount",
-    );
-    expect(group).toBeInTheDocument();
-
-    fireEvent.click(screen.getByText("portal.connections.types.s3.label"));
+    // Instances are rows directly under the S3 vendor group - no expand click.
     expect(await screen.findByText("Claims")).toBeInTheDocument();
     expect(screen.getByText("Archive")).toBeInTheDocument();
+    // Vendor group header shows the instance count and the "add another" action.
     expect(
-      screen.getByText("portal.integrations.addAnother"),
+      screen.getByText("portal.integrations.connectionCount"),
     ).toBeInTheDocument();
+    // Each connected vendor group offers a Connect action (to add another).
+    expect(
+      screen.getAllByText("portal.integrations.connect").length,
+    ).toBeGreaterThan(0);
     // The available band remains for the other, unconnected vendors.
     expect(
       screen.getByText(/portal\.integrations\.availableHeading/),
     ).toBeInTheDocument();
   });
 
-  it("deletes an instance from the expanded group", async () => {
+  it("deletes an instance directly from its row", async () => {
     fetchIntegrations.mockResolvedValueOnce([bucket(5, "Claims")]);
     fetchIntegrations.mockResolvedValueOnce([]);
     render(<Integrations />);
 
-    fireEvent.click(
-      await screen.findByText("portal.connections.types.s3.label"),
-    );
     fireEvent.click(await screen.findByText("portal.connections.delete"));
 
     await waitFor(() => expect(deleteIntegration).toHaveBeenCalledWith(5));
@@ -115,9 +111,6 @@ describe("Integrations view", () => {
     );
     render(<Integrations />);
 
-    fireEvent.click(
-      await screen.findByText("portal.connections.types.s3.label"),
-    );
     fireEvent.click(await screen.findByText("portal.connections.delete"));
 
     expect(
diff --git a/frontend/editor/src/portal/views/Integrations.tsx b/frontend/editor/src/portal/views/Integrations.tsx
index dad19e750c..793c21f880 100644
--- a/frontend/editor/src/portal/views/Integrations.tsx
+++ b/frontend/editor/src/portal/views/Integrations.tsx
@@ -2,8 +2,15 @@ import { useCallback, useEffect, useMemo, useState } from "react";
 import { useTranslation } from "react-i18next";
 import AddRoundedIcon from "@mui/icons-material/AddRounded";
 import SearchRoundedIcon from "@mui/icons-material/SearchRounded";
-import ExpandMoreRoundedIcon from "@mui/icons-material/ExpandMoreRounded";
-import { Banner, Button, Skeleton } from "@app/ui";
+import {
+  Banner,
+  Button,
+  column,
+  DataTable,
+  type DataTableColumn,
+  type DataTableGroup,
+  EmptyState,
+} from "@app/ui";
 import { errorMessage } from "@portal/api/http";
 import {
   deleteIntegration,
@@ -24,17 +31,17 @@ import {
 } from "@portal/components/sources/connectionTypes";
 import { STEP_OPERATIONS } from "@portal/components/policies/stepOperations";
 import { COMING_SOON_SOURCE_TYPES } from "@portal/components/sources/sourceTypes";
+import "@portal/theme/surface.css";
 import "@portal/views/Integrations.css";
 
 /**
  * The integrations catalogue: everything Stirling can talk to, in one place.
  *
- * Three bands in one list. Connected first — stored connections grouped by
- * vendor, expandable when a vendor has several (two S3 buckets is normal, not
- * an error), each instance editable and one click from "add another". Then
- * Available — the supported vendors, each saying what it works with (sources,
- * policies, pipelines) so it's obvious whether a vendor feeds documents in or
- * receives them. Coming-soon source connectors close the list greyed out, so
+ * Three bands, one grouped table. Connected first - stored connections grouped
+ * by vendor (two S3 buckets is normal, not an error), every instance a row you
+ * can edit or remove, with "add another" on the vendor's group header. Then
+ * Available - the supported vendors, each saying what it works with (sources,
+ * policies, pipelines). Coming-soon source connectors close the list so
  * "do you support X?" is answered honestly instead of hidden.
  *
  * Setup itself stays in the shared {@link ConnectionModal}; every entry point
@@ -71,6 +78,20 @@ interface TypeGroup {
   connections: IntegrationConfig[];
 }
 
+/** One normalized row across the three bands, so a single grouped table renders
+ *  connected instances, available vendors, and coming-soon vendors alike. */
+type IntegrationRow = {
+  key: string;
+  brandId: string;
+  title: string;
+  subtitle: string;
+  worksWith: WorksWith[];
+} & (
+  | { kind: "instance"; connection: IntegrationConfig; canManage: boolean }
+  | { kind: "available"; typeId: string }
+  | { kind: "soon" }
+);
+
 export function Integrations() {
   const { t } = useTranslation();
   const [connections, setConnections] = useState<IntegrationConfig[] | null>(
@@ -81,13 +102,13 @@ export function Integrations() {
   >(undefined);
   const [filter, setFilter] = useState<Filter>("all");
   const [query, setQuery] = useState("");
-  const [expanded, setExpanded] = useState<Set<string>>(new Set());
   const [modal, setModal] = useState<{
     open: boolean;
     editing: IntegrationConfig | null;
     fixedTypeId?: string;
   }>({ open: false, editing: null });
   const [busy, setBusy] = useState(false);
+  const [deletingId, setDeletingId] = useState<number | null>(null);
   const [error, setError] = useState<string | null>(null);
 
   const refresh = useCallback(async () => {
@@ -191,45 +212,152 @@ export function Integrations() {
     return counts;
   }, [catalogue]);
 
-  function toggleExpand(typeId: string) {
-    setExpanded((current) => {
-      const next = new Set(current);
-      if (next.has(typeId)) next.delete(typeId);
-      else next.add(typeId);
-      return next;
-    });
-  }
-
-  function openCreate(typeId: string) {
+  const openCreate = useCallback((typeId: string) => {
     setModal({ open: true, editing: null, fixedTypeId: typeId });
-  }
+  }, []);
 
-  function openEdit(connection: IntegrationConfig) {
+  const openEdit = useCallback((connection: IntegrationConfig) => {
     setModal({ open: true, editing: connection });
-  }
+  }, []);
 
-  async function remove(connection: IntegrationConfig) {
-    if (busy) return;
-    setBusy(true);
-    setError(null);
-    try {
-      await deleteIntegration(connection.id);
-      await refresh();
-    } catch (e) {
-      setError(errorMessage(e));
-    } finally {
-      setBusy(false);
-    }
-  }
+  const remove = useCallback(
+    async (connection: IntegrationConfig) => {
+      if (busy) return;
+      setBusy(true);
+      setDeletingId(connection.id);
+      setError(null);
+      try {
+        await deleteIntegration(connection.id);
+        await refresh();
+      } catch (e) {
+        setError(errorMessage(e));
+      } finally {
+        setBusy(false);
+        setDeletingId(null);
+      }
+    },
+    [busy, refresh],
+  );
 
   const isLoading = connections === null;
 
-  const chip = (kind: WorksWith) => (
-    <span key={kind} className="portal-integrations__chip">
-      {t(`portal.integrations.worksWith.${kind}`)}
-    </span>
+  const worksWithText = useCallback(
+    (list: WorksWith[]) =>
+      list.map((w) => t(`portal.integrations.worksWith.${w}`)).join(", "),
+    [t],
   );
 
+  const columns = useMemo<DataTableColumn<IntegrationRow>[]>(
+    () => [
+      column.entity({
+        key: "integration",
+        header: t("portal.integrations.table.integration"),
+        icon: (r) => <BrandMark id={r.brandId} size={22} />,
+        primary: (r) => r.title,
+        note: (r) => r.subtitle || undefined,
+      }),
+      column.text({
+        key: "worksWith",
+        header: t("portal.integrations.table.worksWith"),
+        get: (r) => worksWithText(r.worksWith),
+      }),
+      column.actions({
+        key: "actions",
+        get: (r) => {
+          if (r.kind === "instance") {
+            return r.canManage
+              ? [
+                  {
+                    label: t("portal.connections.edit"),
+                    disabled: busy,
+                    onClick: () => openEdit(r.connection),
+                  },
+                  {
+                    label: t("portal.connections.delete"),
+                    tone: "danger",
+                    loading: busy && deletingId === r.connection.id,
+                    disabled: busy,
+                    onClick: () => void remove(r.connection),
+                  },
+                ]
+              : [];
+          }
+          if (r.kind === "available") {
+            return [
+              {
+                label: t("portal.integrations.connect"),
+                onClick: () => openCreate(r.typeId),
+              },
+            ];
+          }
+          return [];
+        },
+      }),
+    ],
+    [t, busy, deletingId, remove, openEdit, openCreate, worksWithText],
+  );
+
+  const tableGroups = useMemo<DataTableGroup<IntegrationRow>[]>(() => {
+    const gs: DataTableGroup<IntegrationRow>[] = [];
+    for (const { type, connections: list } of connectedGroups) {
+      gs.push({
+        key: `connected-${type.id}`,
+        title: t(type.labelKey),
+        meta:
+          list.length > 1
+            ? t("portal.integrations.connectionCount", { count: list.length })
+            : t("portal.integrations.status.connected"),
+        actions: [
+          {
+            label: t("portal.integrations.connect"),
+            onClick: () => openCreate(type.id),
+          },
+        ],
+        rows: list.map((c) => ({
+          kind: "instance" as const,
+          key: `i-${c.id}`,
+          brandId: type.id,
+          title: c.name,
+          subtitle: connectionDetail(c),
+          worksWith: worksWith(type),
+          connection: c,
+          canManage: !!c.canManage,
+        })),
+      });
+    }
+    if (availableTypes.length > 0) {
+      gs.push({
+        key: "available",
+        title: t("portal.integrations.availableHeading"),
+        rows: availableTypes.map((type) => ({
+          kind: "available" as const,
+          key: `a-${type.id}`,
+          brandId: type.id,
+          title: t(type.labelKey),
+          subtitle: t(type.descriptionKey),
+          worksWith: worksWith(type),
+          typeId: type.id,
+        })),
+      });
+    }
+    if (comingSoon.length > 0) {
+      gs.push({
+        key: "soon",
+        title: t("portal.integrations.comingSoonHeading"),
+        muted: true,
+        rows: comingSoon.map((entry) => ({
+          kind: "soon" as const,
+          key: `s-${entry.type}`,
+          brandId: entry.type,
+          title: t(entry.labelKey),
+          subtitle: t(entry.descriptionKey),
+          worksWith: ["sources"],
+        })),
+      });
+    }
+    return gs;
+  }, [connectedGroups, availableTypes, comingSoon, t, openCreate]);
+
   return (
     <div className="portal-integrations">
       <header className="portal-integrations__head">
@@ -243,6 +371,7 @@ export function Integrations() {
         </div>
         {capabilities?.customApi && (
           <Button
+            fat
             onClick={() => openCreate("api")}
             leftSection={<AddRoundedIcon style={{ fontSize: "1.125rem" }} />}
           >
@@ -299,187 +428,23 @@ export function Integrations() {
 
       {error && <Banner tone="danger" description={error} />}
 
-      {isLoading ? (
-        <div className="portal-integrations__skeleton" aria-hidden>
-          {Array.from({ length: 4 }).map((_, i) => (
-            <Skeleton key={i} height="3.25rem" />
-          ))}
-        </div>
+      {!isLoading && tableGroups.length === 0 ? (
+        <EmptyState
+          size="compact"
+          title={t("portal.integrations.noResults.title", "No matches")}
+          description={t(
+            "portal.integrations.noResults.description",
+            "No integrations match your filters. Try a different category or search.",
+          )}
+        />
       ) : (
-        <div className="portal-integrations__table">
-          <div className="portal-integrations__cols" aria-hidden>
-            <span>{t("portal.integrations.table.integration")}</span>
-            <span>{t("portal.integrations.table.worksWith")}</span>
-            <span />
-          </div>
-
-          {connectedGroups.length > 0 && (
-            <div className="portal-integrations__section">
-              {t("portal.integrations.connectedHeading")} ·{" "}
-              {connectedGroups.length}
-            </div>
-          )}
-          {connectedGroups.map(({ type, connections: list }) => {
-            const open = expanded.has(type.id);
-            return (
-              <div key={type.id} className="portal-integrations__group">
-                <button
-                  type="button"
-                  className="portal-integrations__row portal-integrations__row--connected"
-                  aria-expanded={open}
-                  onClick={() => toggleExpand(type.id)}
-                >
-                  <span className="portal-integrations__name">
-                    <BrandMark id={type.id} size={22} />
-                    <span className="portal-integrations__name-text">
-                      <span className="portal-integrations__label">
-                        {t(type.labelKey)}
-                      </span>
-                      <span className="portal-integrations__detail">
-                        {list.length === 1
-                          ? list[0].name
-                          : t("portal.integrations.connectionCount", {
-                              count: list.length,
-                            })}
-                      </span>
-                    </span>
-                  </span>
-                  <span className="portal-integrations__chips">
-                    {worksWith(type).map(chip)}
-                  </span>
-                  <span className="portal-integrations__status">
-                    <span className="portal-integrations__status-dot" />
-                    {t("portal.integrations.status.connected")}
-                    <ExpandMoreRoundedIcon
-                      fontSize="inherit"
-                      className={
-                        "portal-integrations__chevron" +
-                        (open ? " is-open" : "")
-                      }
-                    />
-                  </span>
-                </button>
-                {open && (
-                  <div className="portal-integrations__instances">
-                    {list.map((connection) => (
-                      <div
-                        key={connection.id}
-                        className="portal-integrations__instance"
-                      >
-                        <span className="portal-integrations__instance-name">
-                          {connection.name}
-                        </span>
-                        <span className="portal-integrations__instance-detail">
-                          {connectionDetail(connection)}
-                        </span>
-                        {connection.canManage && (
-                          <span className="portal-integrations__instance-actions">
-                            <Button
-                              variant="tertiary"
-                              size="sm"
-                              disabled={busy}
-                              onClick={() => openEdit(connection)}
-                            >
-                              {t("portal.connections.edit")}
-                            </Button>
-                            <Button
-                              variant="tertiary"
-                              size="sm"
-                              accent="danger"
-                              disabled={busy}
-                              onClick={() => void remove(connection)}
-                            >
-                              {t("portal.connections.delete")}
-                            </Button>
-                          </span>
-                        )}
-                      </div>
-                    ))}
-                    <div className="portal-integrations__instance portal-integrations__instance--add">
-                      <Button
-                        variant="tertiary"
-                        size="sm"
-                        onClick={() => openCreate(type.id)}
-                        leftSection={
-                          <AddRoundedIcon style={{ fontSize: "1rem" }} />
-                        }
-                      >
-                        {t("portal.integrations.addAnother")}
-                      </Button>
-                    </div>
-                  </div>
-                )}
-              </div>
-            );
-          })}
-
-          {availableTypes.length > 0 && (
-            <div className="portal-integrations__section">
-              {t("portal.integrations.availableHeading")} ·{" "}
-              {availableTypes.length}
-            </div>
-          )}
-          {availableTypes.map((type) => (
-            <div key={type.id} className="portal-integrations__row">
-              <span className="portal-integrations__name">
-                <BrandMark id={type.id} size={22} />
-                <span className="portal-integrations__name-text">
-                  <span className="portal-integrations__label">
-                    {t(type.labelKey)}
-                  </span>
-                  <span className="portal-integrations__detail">
-                    {t(type.descriptionKey)}
-                  </span>
-                </span>
-              </span>
-              <span className="portal-integrations__chips">
-                {worksWith(type).map(chip)}
-              </span>
-              <span className="portal-integrations__status">
-                <Button
-                  variant="secondary"
-                  size="sm"
-                  onClick={() => openCreate(type.id)}
-                >
-                  {t("portal.integrations.connect")}
-                </Button>
-              </span>
-            </div>
-          ))}
-
-          {comingSoon.length > 0 && (
-            <div className="portal-integrations__section">
-              {t("portal.integrations.comingSoonHeading")} · {comingSoon.length}
-            </div>
-          )}
-          {comingSoon.map((entry) => (
-            <div
-              key={entry.type}
-              className="portal-integrations__row portal-integrations__row--soon"
-              aria-disabled
-            >
-              <span className="portal-integrations__name">
-                <BrandMark id={entry.type} size={22} />
-                <span className="portal-integrations__name-text">
-                  <span className="portal-integrations__label">
-                    {t(entry.labelKey)}
-                  </span>
-                  <span className="portal-integrations__detail">
-                    {t(entry.descriptionKey)}
-                  </span>
-                </span>
-              </span>
-              <span className="portal-integrations__chips">
-                {chip("sources")}
-              </span>
-              <span className="portal-integrations__status">
-                <span className="portal-integrations__soon-badge">
-                  {t("portal.sources.builder.comingSoon")}
-                </span>
-              </span>
-            </div>
-          ))}
-        </div>
+        <DataTable<IntegrationRow>
+          columns={columns}
+          groups={tableGroups}
+          rowKey={(r) => r.key}
+          loading={isLoading}
+          skeletonRows={5}
+        />
       )}
 
       <ConnectionModal
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.css b/frontend/editor/src/portal/views/PipelineBuilder.css
index 464d3fad55..343aea95f6 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.css
+++ b/frontend/editor/src/portal/views/PipelineBuilder.css
@@ -225,3 +225,43 @@
   gap: 0.5rem;
   width: 100%;
 }
+
+/* The graph column IS the card: the test control is its header and the graph its body, so the test
+   control reads as the graph's toolbar and - crucially - the card's top lines up with the inspector
+   beside it (a toolbar sitting *above* the card pushed the graph down out of alignment). Caps at the
+   row height and clips its rounded corners; the body scrolls inside while the header stays put. */
+.portal-builder__canvas {
+  display: flex;
+  flex-direction: column;
+  min-height: 0;
+  max-height: 100%;
+  overflow: hidden;
+  border: 1px solid var(--c-border-subtle);
+  border-radius: var(--radius-lg);
+  background: var(--c-surface-sunken);
+}
+
+/* The test control as the card's header, ruled off from the graph below it. */
+.portal-builder__canvas > .portal-pipeline-toolbar {
+  flex: none;
+  padding: 0.75rem 1rem;
+  border-bottom: 1px solid var(--c-border-subtle);
+}
+
+/* The graph as the card's body: it drops its own frame (the canvas provides it now) and scrolls
+   inside while the header stays put. */
+.portal-builder__canvas > .portal-graph {
+  flex: 1 1 auto;
+  min-height: 0;
+  max-height: none;
+  border: none;
+  border-radius: 0;
+  background: transparent;
+}
+
+/* Stacked (short viewport): the page scrolls, so the column must not cap or nest its own scroll. */
+@media (max-width: 60rem) {
+  .portal-builder__canvas {
+    max-height: none;
+  }
+}
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.test.tsx b/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
index b1ff80682d..2737411c74 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.test.tsx
@@ -43,6 +43,13 @@ vi.mock("@portal/api/pipelines", () => ({
   fetchRun: (runId: string) => fetchRun(runId),
 }));
 
+const uploadPipelineAsset = vi.fn();
+const listPipelineAssets = vi.fn();
+vi.mock("@portal/api/pipelineAssets", () => ({
+  uploadPipelineAsset: (file: File) => uploadPipelineAsset(file),
+  listPipelineAssets: () => listPipelineAssets(),
+}));
+
 const fetchSources = vi.fn();
 vi.mock("@portal/api/sources", () => ({
   fetchSources: () => fetchSources(),
@@ -149,8 +156,21 @@ vi.mock("@app/contexts/ToolRegistryContext", () => {
       toolType: 0,
       endpoint: "/api/v1/misc/compress-pdf",
       defaultParameters: {},
-      buildFormData: () => new FormData(),
-      toApiParams: (params: Record<string, unknown>) => ({ ...params }),
+      // Sends the supporting file under a named field, like a real file tool, so the upload path
+      // has a field to bind. The scalar mapper drops the File (files never ride in parameters).
+      buildFormData: (params: Record<string, unknown>, file: File | File[]) => {
+        const fd = new FormData();
+        fd.append("fileInput", Array.isArray(file) ? file[0] : file);
+        if (params.watermarkImage instanceof File) {
+          fd.append("watermarkImage", params.watermarkImage);
+        }
+        return fd;
+      },
+      toApiParams: (params: Record<string, unknown>) => {
+        const scalars = { ...params };
+        delete scalars.watermarkImage;
+        return scalars;
+      },
       fromApiParams: (params: Record<string, unknown>) => ({ ...params }),
     },
   } as unknown as ToolRegistryEntry;
@@ -203,10 +223,32 @@ vi.mock("@app/contexts/ToolRegistryContext", () => {
       fromApiParams: (params: Record<string, unknown>) => ({ ...params }),
     },
   } as unknown as ToolRegistryEntry;
+  // A tool whose buildFormData throws, so it can't be probed: exercises the "activeFileFields is
+  // null" path where a reopened step's stored binding must be kept, not dropped.
+  const sign = {
+    name: "Sign",
+    icon: null,
+    component: null,
+    description: "",
+    categoryId: "recommendedTools",
+    subcategoryId: "general",
+    operationConfig: {
+      operationType: "certSign",
+      toolType: 0,
+      endpoint: "/api/v1/security/cert-sign",
+      defaultParameters: {},
+      buildFormData: () => {
+        throw new Error("cannot build");
+      },
+      toApiParams: (params: Record<string, unknown>) => ({ ...params }),
+      fromApiParams: (params: Record<string, unknown>) => ({ ...params }),
+    },
+  } as unknown as ToolRegistryEntry;
   const allTools = {
     compress,
     extractImages,
     ocr,
+    sign,
   } as unknown as ToolRegistryCatalog["allTools"];
   const catalog: ToolRegistryCatalog = {
     regularTools: allTools,
@@ -288,6 +330,16 @@ describe("PipelineBuilder", () => {
     fetchS3Connections.mockReset();
     fetchS3Connections.mockResolvedValue([]);
     createIntegration.mockReset();
+    uploadPipelineAsset.mockReset();
+    uploadPipelineAsset.mockResolvedValue({
+      id: "ast-1",
+      fileName: "logo.png",
+      contentType: "image/png",
+      size: 1,
+      createdAt: 0,
+    });
+    listPipelineAssets.mockReset();
+    listPipelineAssets.mockResolvedValue([]);
   });
 
   // The settings of a node are reached by selecting it in the graph, so every helper below opens
@@ -456,7 +508,7 @@ describe("PipelineBuilder", () => {
     expect(
       await screen.findByText("portal.pipelines.builder.needsSource"),
     ).toBeInTheDocument();
-    // Still nothing chosen, so the pipeline cannot be saved.
+    // Still nothing chosen, so the pipeline cannot be created.
     expect(
       screen.getByText("portal.pipelines.composer.create").closest("button"),
     ).toBeDisabled();
@@ -601,15 +653,15 @@ describe("PipelineBuilder", () => {
         target: { value: "Needs both" },
       },
     );
-    const saveButton = () =>
+    const createButton = () =>
       screen.getByText("portal.pipelines.composer.create").closest("button");
 
     // Name only: blocked (no source, no destination).
-    expect(saveButton()).toBeDisabled();
+    expect(createButton()).toBeDisabled();
 
     // An input with a source but still no destination: blocked.
     await pickInputSource("Claims intake");
-    expect(saveButton()).toBeDisabled();
+    expect(createButton()).toBeDisabled();
 
     // Both chosen: allowed, and both are sent.
     await pickDestination();
@@ -782,21 +834,23 @@ describe("PipelineBuilder", () => {
     ).toBeInTheDocument();
   });
 
-  it("clears processed history from the header and confirms", async () => {
+  it("reprocesses the source: clears the processed record, runs, and reports", async () => {
     renderBuilder("/processor/pipelines/plc-1");
 
     await openTray();
     fireEvent.click(screen.getByText("portal.pipelines.detail.clearHistory"));
 
+    // It forgets what was processed, then triggers a run so those files go through now.
     await waitFor(() =>
       expect(clearProcessedHistory).toHaveBeenCalledWith("plc-1"),
     );
+    await waitFor(() => expect(triggerPipeline).toHaveBeenCalledWith("plc-1"));
     expect(
-      await screen.findByText("portal.pipelines.run.historyCleared"),
+      await screen.findByText("portal.pipelines.run.completed"),
     ).toBeInTheDocument();
   });
 
-  it("blocks saving a step that needs an uploaded file", async () => {
+  it("uploads a step's supporting file and saves it as an asset binding", async () => {
     renderBuilder("/processor/pipelines/new");
 
     fireEvent.change(
@@ -808,15 +862,65 @@ describe("PipelineBuilder", () => {
       },
     );
     await addTool("Compress");
-    // The tool's settings upload a file, which a stored pipeline can't persist yet.
+    // The tool's settings attach a supporting file.
     fireEvent.click(await screen.findByText("upload logo"));
 
-    expect(
-      await screen.findByText("portal.pipelines.builder.uploadUnsupported"),
-    ).toBeInTheDocument();
-    expect(
-      screen.getByText("portal.pipelines.composer.create").closest("button"),
-    ).toBeDisabled();
+    await pickInputSource("Claims intake");
+    await pickDestination();
+
+    fireEvent.click(screen.getByText("portal.pipelines.composer.create"));
+
+    // The file is uploaded to the asset store first, then the policy is saved binding that asset.
+    await waitFor(() => expect(uploadPipelineAsset).toHaveBeenCalledTimes(1));
+    expect(uploadPipelineAsset.mock.calls[0][0]).toBeInstanceOf(File);
+    await waitFor(() => expect(savePipeline).toHaveBeenCalledTimes(1));
+    expect(savePipeline).toHaveBeenCalledWith(
+      expect.objectContaining({
+        steps: [
+          expect.objectContaining({
+            operation: "/api/v1/misc/compress-pdf",
+            fileParameters: { watermarkImage: "asset:ast-1" },
+          }),
+        ],
+      }),
+    );
+  });
+
+  it("keeps a step's stored file binding on save when the tool can't be probed", async () => {
+    // buildFormData throws for `sign`, so activeFileFields is null. The stored binding must survive
+    // the save unchanged - dropping it would let the server GC the user's uploaded file - and no
+    // re-upload should happen.
+    fetchPipeline.mockResolvedValue({
+      id: "plc-sign",
+      name: "Signed",
+      enabled: true,
+      inputs: [{ sourceId: "src-in", trigger: null }],
+      steps: [
+        {
+          operation: "/api/v1/security/cert-sign",
+          parameters: {},
+          fileParameters: { certFile: "asset:x" },
+        },
+      ],
+      output: { type: "inline", options: {} },
+      outputIds: ["src-1"],
+    });
+    renderBuilder("/processor/pipelines/plc-sign");
+
+    fireEvent.click(await screen.findByText("portal.pipelines.composer.save"));
+
+    await waitFor(() => expect(savePipeline).toHaveBeenCalledTimes(1));
+    expect(savePipeline).toHaveBeenCalledWith(
+      expect.objectContaining({
+        steps: [
+          expect.objectContaining({
+            operation: "/api/v1/security/cert-sign",
+            fileParameters: { certFile: "asset:x" },
+          }),
+        ],
+      }),
+    );
+    expect(uploadPipelineAsset).not.toHaveBeenCalled();
   });
 
   it("blocks saving an integration step with no account chosen", async () => {
@@ -846,6 +950,8 @@ describe("PipelineBuilder", () => {
   it("deletes an existing pipeline after confirmation", async () => {
     renderBuilder("/processor/pipelines/plc-1");
 
+    // Delete is a rare, destructive action, so it lives behind the overflow tray.
+    await openTray();
     fireEvent.click(await screen.findByText("portal.pipelines.detail.delete"));
     fireEvent.click(await screen.findByText("portal.pipelines.delete.confirm"));
 
@@ -853,6 +959,45 @@ describe("PipelineBuilder", () => {
     expect(await screen.findByText("pipelines list")).toBeInTheDocument();
   });
 
+  it("pauses a live pipeline at once, in place, and re-saves the persisted policy", async () => {
+    renderBuilder("/processor/pipelines/plc-1");
+
+    // POLICY.enabled is true, so the toggle offers to pause it.
+    fireEvent.click(await screen.findByText("portal.pipelines.builder.pause"));
+
+    await waitFor(() => expect(savePipeline).toHaveBeenCalledTimes(1));
+    expect(savePipeline).toHaveBeenCalledWith(
+      expect.objectContaining({ id: "plc-1", enabled: false }),
+    );
+    // It acts in place: the builder stays open and the control now offers to activate again.
+    expect(
+      await screen.findByText("portal.pipelines.builder.activate"),
+    ).toBeInTheDocument();
+    expect(screen.queryByText("pipelines list")).not.toBeInTheDocument();
+  });
+
+  it("creates a paused pipeline when Create paused is chosen", async () => {
+    renderBuilder("/processor/pipelines/new");
+
+    fireEvent.change(
+      await screen.findByRole("textbox", {
+        name: "portal.pipelines.composer.name",
+      }),
+      { target: { value: "Paused draft" } },
+    );
+    await addTool("Compress");
+    await pickInputSource("Claims intake");
+    await pickDestination();
+
+    fireEvent.click(screen.getByText("portal.pipelines.composer.createPaused"));
+
+    await waitFor(() => expect(savePipeline).toHaveBeenCalledTimes(1));
+    expect(savePipeline).toHaveBeenCalledWith(
+      expect.objectContaining({ name: "Paused draft", enabled: false }),
+    );
+    expect(await screen.findByText("pipelines list")).toBeInTheDocument();
+  });
+
   it("prompts to save or discard when leaving with unsaved edits", async () => {
     renderBuilder("/processor/pipelines/new");
 
@@ -864,7 +1009,7 @@ describe("PipelineBuilder", () => {
         target: { value: "Draft" },
       },
     );
-    fireEvent.click(screen.getByText("portal.pipelines.composer.cancel"));
+    fireEvent.click(screen.getByLabelText("portal.pipelines.builder.back"));
 
     expect(
       await screen.findByText("portal.pipelines.builder.unsavedTitle"),
@@ -928,7 +1073,7 @@ describe("PipelineBuilder", () => {
     await screen.findByRole("textbox", {
       name: "portal.pipelines.composer.name",
     });
-    fireEvent.click(screen.getByText("portal.pipelines.composer.cancel"));
+    fireEvent.click(screen.getByLabelText("portal.pipelines.builder.back"));
 
     expect(await screen.findByText("pipelines list")).toBeInTheDocument();
   });
diff --git a/frontend/editor/src/portal/views/PipelineBuilder.tsx b/frontend/editor/src/portal/views/PipelineBuilder.tsx
index 746fd61ab0..975a8e5cfe 100644
--- a/frontend/editor/src/portal/views/PipelineBuilder.tsx
+++ b/frontend/editor/src/portal/views/PipelineBuilder.tsx
@@ -17,14 +17,17 @@ import {
 } from "@app/ui";
 import { useToolRegistry } from "@app/contexts/ToolRegistryContext";
 import {
+  activeFileFields,
+  assetRef,
   deserializeToolStep,
+  extractStepFiles,
   getExecutableTools,
   newWorkingToolStep,
   serializeToolStep,
   stepNeedsConfiguring,
-  stepRequiresUpload,
   updateWorkingStepParams,
   type ExecutableTool,
+  type SupportingFileBindings,
   type WorkingToolStep,
 } from "@app/hooks/tools/shared/toolAutomation";
 import {
@@ -48,13 +51,20 @@ import {
   runPipelineTest,
   savePipeline,
   triggerPipeline,
+  type PipelineStep,
   type Policy,
   type PolicyRunView,
   type RunOutputFile,
+  type TestRunAsset,
   type TriggerConfig,
   type TriggerInfo,
   type TriggerOutcome,
 } from "@portal/api/pipelines";
+import {
+  listPipelineAssets,
+  uploadPipelineAsset,
+  type PolicyAsset,
+} from "@portal/api/pipelineAssets";
 import { clearProcessedHistory } from "@portal/api/policies";
 import { DestinationPicker } from "@portal/components/pipelines/DestinationPicker";
 import { availableOutputModes } from "@portal/components/pipelines/outputModes";
@@ -67,7 +77,9 @@ import { useQueryClient } from "@tanstack/react-query";
 import { qk } from "@portal/queries/keys";
 import { VIEW_PATHS, toPortalPath } from "@portal/contexts/ViewContext";
 import { humanizeOperation } from "@portal/components/pipelines/pipelineOperations";
-import { PipelineHeader } from "@portal/components/pipelines/PipelineHeader";
+import { PipelineCreateHeader } from "@portal/components/pipelines/PipelineCreateHeader";
+import { PipelineEditHeader } from "@portal/components/pipelines/PipelineEditHeader";
+import { PipelineGraphToolbar } from "@portal/components/pipelines/PipelineGraphToolbar";
 import { PipelineInspector } from "@portal/components/pipelines/PipelineInspector";
 import { PipelineDefinitionModal } from "@portal/components/pipelines/PipelineDefinitionModal";
 import {
@@ -205,6 +217,17 @@ export function PipelineBuilder() {
     [allTools],
   );
 
+  // Stored supporting files from earlier saves, so a reopened step can label its bindings by name.
+  const assetsState = useAsync<PolicyAsset[]>(
+    async () => await listPipelineAssets(),
+    [],
+  );
+  const assetNames = useMemo(() => {
+    const map: Record<string, string> = {};
+    for (const asset of assetsState.data ?? []) map[asset.id] = asset.fileName;
+    return map;
+  }, [assetsState.data]);
+
   const policyState = useAsync<Policy | null>(
     async () => (id ? await fetchPipeline(id) : null),
     [id],
@@ -258,10 +281,19 @@ export function PipelineBuilder() {
   const [inputAsked, setInputAsked] = useState(false);
   const [outputAsked, setOutputAsked] = useState(false);
   const [submitting, setSubmitting] = useState(false);
+  // Which create action is in flight, so only the button that was clicked (Create / Create paused)
+  // shows its spinner. Null in edit and while idle.
+  const [pendingCreateEnabled, setPendingCreateEnabled] = useState<
+    boolean | null
+  >(null);
   const [error, setError] = useState<string | null>(null);
   const [seeded, setSeeded] = useState(false);
   const [running, setRunning] = useState(false);
-  const [clearingHistory, setClearingHistory] = useState(false);
+  // Pausing/activating an existing pipeline acts immediately (a separate save), not on the next
+  // "Save changes"; this tracks that in-flight toggle.
+  const [togglingEnabled, setTogglingEnabled] = useState(false);
+  // Clearing the processed record then running, so already-handled files go through again.
+  const [reprocessing, setReprocessing] = useState(false);
   const [runResult, setRunResult] = useState<RunResult | null>(null);
   const [pendingDelete, setPendingDelete] = useState(false);
   const [deleting, setDeleting] = useState(false);
@@ -475,6 +507,21 @@ export function PipelineBuilder() {
     );
   }
 
+  /** Drop a step's stored supporting-file binding for one field (the chip's remove action). */
+  function clearStepBinding(index: number, field: string) {
+    setSteps((current) =>
+      current.map((step, i) => {
+        if (i !== index || !step.fileParameters) return step;
+        const next = { ...step.fileParameters };
+        delete next[field];
+        return {
+          ...step,
+          fileParameters: Object.keys(next).length > 0 ? next : undefined,
+        };
+      }),
+    );
+  }
+
   function stepLabel(step: WorkingToolStep): string {
     // An integration step's endpoint is the same for every vendor, so the raw path would read
     // "External api call" for all of them. Name it by the operation instead.
@@ -501,11 +548,6 @@ export function PipelineBuilder() {
     return step.toolId ? allTools[step.toolId]?.icon : undefined;
   }
 
-  // Steps whose params carry an uploaded file can't be saved: the bytes aren't persisted with the
-  // policy, so a later run would send null for that field (see stepRequiresUpload).
-  const uploadStepLabels = steps.filter(stepRequiresUpload).map(stepLabel);
-  const hasUploadSteps = uploadStepLabels.length > 0;
-
   // A step still missing a choice - an integration with no operation or account, a tool whose
   // mandatory parameters are unset - would fail at run time with a raw backend rejection, so block
   // saving on it here where the fix is one click away.
@@ -587,13 +629,33 @@ export function PipelineBuilder() {
   }
 
   // Track unsaved edits: snapshot the form and compare against the state captured just after
-  // seeding, so leaving the builder can prompt to save or discard.
+  // seeding, so leaving the builder can prompt to save or discard. `enabled` is deliberately left
+  // out: in edit it is toggled and persisted at once (never an unsaved edit), and in create it is
+  // chosen at submit - so it can never be the thing that makes the form dirty.
+  // Per-step dirty signature: the serialized step plus a stable identity (name/size/mtime) of its
+  // fresh file picks - a raw File JSON-stringifies to `{}`, so serializeToolStep (which excludes
+  // Files) can't see a file added or swapped. Memoized on the steps because it probes each tool's
+  // buildFormData; without this it would re-run for every step on any render (e.g. each keystroke in
+  // the name field). Stored bindings are covered by the serialized step.
+  const stepSnapshot = useMemo(
+    () =>
+      steps.map((step) => {
+        const files: Record<string, string[]> = {};
+        for (const [field, picks] of Object.entries(
+          extractStepFiles(step, allTools),
+        )) {
+          files[field] = picks.map(
+            (file) => `${file.name}:${file.size}:${file.lastModified}`,
+          );
+        }
+        return { step: serializeToolStep(step, allTools), files };
+      }),
+    [steps, allTools],
+  );
   const snapshot = JSON.stringify({
     name: name.trim(),
-    enabled,
     input,
-    steps: steps.map((step) => serializeToolStep(step, allTools)),
-    uploads: steps.map(stepRequiresUpload),
+    steps: stepSnapshot,
     outputIds: [...outputIds].sort(),
   });
   const baseline = useRef<string | null>(null);
@@ -602,20 +664,40 @@ export function PipelineBuilder() {
   }, [seeded, snapshot]);
   const dirty = baseline.current !== null && baseline.current !== snapshot;
 
-  // The input needs a source, and a scheduled input needs a positive interval; the pipeline
-  // needs exactly one output destination.
-  const inputValid =
-    input.sourceId !== "" &&
-    (input.triggerType !== "schedule" || Number(input.scheduleCount) > 0);
+  // Each validity condition is defined exactly once here, then consumed both by the graph (which
+  // flags each end) and by the blocker list below.
+  const sourceChosen = input.sourceId !== "";
+  const scheduleValid =
+    input.triggerType !== "schedule" || Number(input.scheduleCount) > 0;
+  const inputValid = sourceChosen && scheduleValid;
   const outputValid = outputIds.length === 1;
-  const canSave =
-    name.trim() !== "" &&
-    inputValid &&
-    outputValid &&
-    !hasUploadSteps &&
-    !hasUnconfiguredSteps &&
-    !hasIncompatibleSteps &&
-    !submitting;
+
+  // The single source of truth for "can this be committed": every reason it can't be, in the order
+  // they appear down the form, so a disabled Create / Save button can say exactly what is still owed.
+  const blockers: string[] = [];
+  if (name.trim() === "")
+    blockers.push(t("portal.pipelines.builder.blocker.name"));
+  if (!sourceChosen)
+    blockers.push(t("portal.pipelines.builder.blocker.source"));
+  else if (!scheduleValid)
+    blockers.push(t("portal.pipelines.builder.blocker.schedule"));
+  if (!outputValid)
+    blockers.push(t("portal.pipelines.builder.blocker.destination"));
+  if (hasUnconfiguredSteps)
+    blockers.push(
+      t("portal.pipelines.builder.blocker.setup", {
+        tools: unconfiguredStepLabels.join(", "),
+      }),
+    );
+  if (hasIncompatibleSteps)
+    blockers.push(
+      t("portal.pipelines.builder.blocker.incompatible", {
+        tools: blockingSteps.join(", "),
+      }),
+    );
+
+  // Nothing left to fix, and not already committing.
+  const canSave = blockers.length === 0 && !submitting;
 
   const listPath = toPortalPath(VIEW_PATHS.pipelines);
 
@@ -629,29 +711,123 @@ export function PipelineBuilder() {
     else navigate(destination);
   }
 
-  async function save(destination: string) {
+  /**
+   * The active supporting-file fields of a step, each paired with its fresh in-memory pick(s) and its
+   * stored `asset:<id>` binding (either may be absent). The single source both saving and test-running
+   * read, so the two agree on which fields are active and how a binding is chosen; they differ only in
+   * how a fresh pick is emitted - uploaded as an asset vs. sent inline.
+   */
+  function stepFileFields(
+    step: WorkingToolStep,
+  ): { field: string; fresh: File[] | null; stored: string | null }[] {
+    const fresh = extractStepFiles(step, allTools);
+    const stored = step.fileParameters ?? {};
+    const fields = activeFileFields(step, allTools) ?? Object.keys(stored);
+    return fields.map((field) => ({
+      field,
+      fresh: fresh[field] ?? null,
+      stored: stored[field] ?? null,
+    }));
+  }
+
+  /** A wire step, attaching fileParameters only when it has any. */
+  function toWireStep(
+    operation: string,
+    parameters: Record<string, unknown>,
+    bindings: SupportingFileBindings,
+  ): PipelineStep {
+    return Object.keys(bindings).length > 0
+      ? { operation, parameters, fileParameters: bindings }
+      : { operation, parameters };
+  }
+
+  /**
+   * The wire steps for saving: scalar params from serialization, plus supporting-file bindings. A
+   * fresh pick is uploaded to the asset store (the save-time validator rejects a policy that binds an
+   * asset id that doesn't yet exist); a stored binding the tool still uses is kept when the user
+   * didn't replace it. Uploads run in parallel; any abandoned by a later failure are GC'd server-side.
+   */
+  async function serializeStepsForSave(): Promise<PipelineStep[]> {
+    return Promise.all(
+      steps.map(async (step) => {
+        const { operation, parameters } = serializeToolStep(step, allTools);
+        const entries = await Promise.all(
+          stepFileFields(step).map(async ({ field, fresh, stored }) => {
+            if (fresh?.length) {
+              const ids = await Promise.all(
+                fresh.map((file) =>
+                  uploadPipelineAsset(file).then((a) => a.id),
+                ),
+              );
+              return [field, assetRef(ids)] as const;
+            }
+            return stored ? ([field, stored] as const) : null;
+          }),
+        );
+        const bindings: SupportingFileBindings = Object.fromEntries(
+          entries.filter((e): e is readonly [string, string] => e !== null),
+        );
+        return toWireStep(operation, parameters, bindings);
+      }),
+    );
+  }
+
+  async function save(destination: string, enabledOverride?: boolean) {
     if (!canSave) return;
     setSubmitting(true);
     setError(null);
-    const policy: Policy = {
-      id: policyState.data?.id ?? undefined,
-      name: name.trim(),
-      enabled,
-      // The wire shape stays a list; canSave guarantees the one input has a source.
-      inputs: [{ sourceId: input.sourceId, trigger: buildTriggerFor(input) }],
-      steps: steps.map((step) => serializeToolStep(step, allTools)),
-      // Destinations are the referenced saved sources; the inline output field is
-      // preserved as-is (e.g. an editor policy's membership metadata) or defaults to inline.
-      output: policyState.data?.output ?? { type: "inline", options: {} },
-      outputIds,
-    };
     try {
+      const policy: Policy = {
+        id: policyState.data?.id ?? undefined,
+        name: name.trim(),
+        enabled: enabledOverride ?? enabled,
+        // The wire shape stays a list; canSave guarantees the one input has a source.
+        inputs: [{ sourceId: input.sourceId, trigger: buildTriggerFor(input) }],
+        steps: await serializeStepsForSave(),
+        // Destinations are the referenced saved sources; the inline output field is
+        // preserved as-is (e.g. an editor policy's membership metadata) or defaults to inline.
+        output: policyState.data?.output ?? { type: "inline", options: {} },
+        outputIds,
+      };
       await savePipeline(policy);
       await invalidatePipelines();
       navigate(destination);
     } catch (e) {
       setError(errorMessage(e));
       setSubmitting(false);
+      setPendingCreateEnabled(null);
+    }
+  }
+
+  // Create live or paused. The buttons disable until the pipeline is valid, so this only fires on a
+  // saveable pipeline; the flag records which button spins and whether it starts live or paused.
+  function submitCreate(enabledValue: boolean) {
+    setPendingCreateEnabled(enabledValue);
+    void save(listPath, enabledValue);
+  }
+
+  /**
+   * Pause or activate the saved pipeline now, without leaving the builder. It re-saves the
+   * persisted policy with the flag flipped - deliberately NOT the working form - so a pending chain
+   * edit is not silently committed by a pause. The dirty tracker ignores `enabled`, so this never
+   * looks like an unsaved change.
+   */
+  async function handleTogglePause() {
+    // Never run alongside a Save: both write the whole policy, and a concurrent pair would race
+    // (the pause carries the persisted steps, so it could clobber the edits Save is committing).
+    if (togglingEnabled || submitting || !policyState.data) return;
+    const next = !enabled;
+    setTogglingEnabled(true);
+    setError(null);
+    try {
+      await savePipeline({ ...policyState.data, enabled: next });
+      if (!mounted.current) return;
+      setEnabled(next);
+      await invalidatePipelines();
+    } catch (e) {
+      if (mounted.current) setError(errorMessage(e));
+    } finally {
+      if (mounted.current) setTogglingEnabled(false);
     }
   }
 
@@ -670,6 +846,32 @@ export function PipelineBuilder() {
     return null;
   }
 
+  /**
+   * The steps + inline supporting files for a test run. A fresh (in-memory) pick rides along as a
+   * keyed `assets[i]` under a per-step run key; a stored file keeps its `asset:<id>` binding, which
+   * the backend resolves from the pipeline's saved policy (passed as policyId) - no re-fetch needed.
+   */
+  function buildTestSteps(): { steps: PipelineStep[]; assets: TestRunAsset[] } {
+    const assets: TestRunAsset[] = [];
+    const outSteps = steps.map((step, i) => {
+      const { operation, parameters } = serializeToolStep(step, allTools);
+      const bindings: SupportingFileBindings = {};
+      for (const { field, fresh, stored } of stepFileFields(step)) {
+        if (fresh?.length) {
+          // In-memory pick: inline the bytes under a run key.
+          const key = `s${i}_${field}`;
+          bindings[field] = key;
+          for (const file of fresh) assets.push({ key, file });
+        } else if (stored) {
+          // Already an asset: keep its ref for the backend to resolve from the saved policy.
+          bindings[field] = stored;
+        }
+      }
+      return toWireStep(operation, parameters, bindings);
+    });
+    return { steps: outSteps, assets };
+  }
+
   /**
    * Run the steps as they stand against one uploaded file. Output is forced inline so nothing
    * reaches the pipeline's real destination, and the pipeline need not be saved first - this is
@@ -681,13 +883,17 @@ export function PipelineBuilder() {
     setTestRun(null);
     setRunResult(null);
     try {
+      const { steps: testSteps, assets } = buildTestSteps();
       const { runId } = await runPipelineTest(
         {
           name: name.trim() || t("portal.pipelines.builder.testRun"),
-          steps: steps.map((step) => serializeToolStep(step, allTools)),
+          steps: testSteps,
           output: { type: "inline", options: {} },
         },
         file,
+        assets,
+        // Lets the backend resolve any stored `asset:<id>` refs from this saved policy.
+        policyState.data?.id,
       );
       const final = await awaitRun(runId, (view) => {
         if (mounted.current) setTestRun(view);
@@ -741,39 +947,45 @@ export function PipelineBuilder() {
     return { tone: "info", text: t("portal.pipelines.run.empty") };
   }
 
+  // Trigger the saved pipeline and report the outcome: what the sweep started (or why it started
+  // nothing), then each run's terminal state. Shared by Run now and the reprocess action.
+  async function reportRun(policyId: string) {
+    const outcome = await triggerPipeline(policyId);
+    const runIds = outcome.runIds;
+    if (runIds.length === 0) {
+      if (mounted.current) setRunResult(emptySweepResult(outcome));
+      return;
+    }
+    const finals = await Promise.all(runIds.map((runId) => awaitRun(runId)));
+    if (!mounted.current) return;
+    const failed = finals.find((r) => r?.status === "FAILED");
+    if (failed) {
+      setRunResult({
+        tone: "danger",
+        text: t("portal.pipelines.run.failed", { error: failed.error ?? "" }),
+      });
+    } else if (finals.some((r) => r === null)) {
+      // Gave up polling before a terminal status; the run may still finish server-side.
+      setRunResult({
+        tone: "warning",
+        text: t("portal.pipelines.run.timeout"),
+      });
+    } else if (finals.every((r) => r?.status === "COMPLETED")) {
+      setRunResult({
+        tone: "success",
+        text: t("portal.pipelines.run.completed", { count: finals.length }),
+      });
+    } else {
+      setRunResult({ tone: "info", text: t("portal.pipelines.run.running") });
+    }
+  }
+
   async function handleRun() {
-    if (running || !id) return;
+    if (running || reprocessing || !id) return;
     setRunning(true);
     setRunResult(null);
     try {
-      const outcome = await triggerPipeline(id);
-      const runIds = outcome.runIds;
-      if (runIds.length === 0) {
-        if (mounted.current) setRunResult(emptySweepResult(outcome));
-        return;
-      }
-      const finals = await Promise.all(runIds.map((runId) => awaitRun(runId)));
-      if (!mounted.current) return;
-      const failed = finals.find((r) => r?.status === "FAILED");
-      if (failed) {
-        setRunResult({
-          tone: "danger",
-          text: t("portal.pipelines.run.failed", { error: failed.error ?? "" }),
-        });
-      } else if (finals.some((r) => r === null)) {
-        // Gave up polling before a terminal status; the run may still finish server-side.
-        setRunResult({
-          tone: "warning",
-          text: t("portal.pipelines.run.timeout"),
-        });
-      } else if (finals.every((r) => r?.status === "COMPLETED")) {
-        setRunResult({
-          tone: "success",
-          text: t("portal.pipelines.run.completed", { count: finals.length }),
-        });
-      } else {
-        setRunResult({ tone: "info", text: t("portal.pipelines.run.running") });
-      }
+      await reportRun(id);
     } catch (e) {
       if (mounted.current)
         setRunResult({ tone: "danger", text: errorMessage(e) });
@@ -783,26 +995,22 @@ export function PipelineBuilder() {
   }
 
   /**
-   * Forget which source files this pipeline has processed, so the next sweep
-   * reprocesses everything currently in its sources (the standard retry for a
-   * parked-by-failure file). Does not touch the files themselves.
+   * Reprocess everything currently in the sources: forget which files the pipeline already handled,
+   * then run at once so those files - which a normal run skips - go through now. Reports the run's
+   * outcome exactly like Run now; does not touch the files themselves.
    */
-  async function handleClearHistory() {
-    if (clearingHistory || !id) return;
-    setClearingHistory(true);
+  async function handleReprocessAll() {
+    if (running || reprocessing || !id) return;
+    setReprocessing(true);
     setRunResult(null);
     try {
       await clearProcessedHistory(id);
-      if (mounted.current)
-        setRunResult({
-          tone: "success",
-          text: t("portal.pipelines.run.historyCleared"),
-        });
+      await reportRun(id);
     } catch (e) {
       if (mounted.current)
         setRunResult({ tone: "danger", text: errorMessage(e) });
     } finally {
-      if (mounted.current) setClearingHistory(false);
+      if (mounted.current) setReprocessing(false);
     }
   }
 
@@ -861,8 +1069,6 @@ export function PipelineBuilder() {
         return t("portal.pipelines.builder.chooseAccount");
       return undefined;
     }
-    if (stepRequiresUpload(step))
-      return t("portal.pipelines.builder.needsUpload");
     if (stepNeedsConfiguring(step, allTools))
       return t("portal.pipelines.builder.needsConfiguring");
     return undefined;
@@ -1047,6 +1253,8 @@ export function PipelineBuilder() {
           step={selectedStep}
           registry={allTools}
           onChange={(params) => updateStepParams(chosenSteps[0], params)}
+          assetNames={assetNames}
+          onClearBinding={(field) => clearStepBinding(chosenSteps[0], field)}
         />
       );
     }
@@ -1056,42 +1264,42 @@ export function PipelineBuilder() {
 
   return (
     <div className="portal-builder">
-      <PipelineHeader
-        name={name}
-        onNameChange={setName}
-        enabled={enabled}
-        onEnabledChange={setEnabled}
-        isEdit={isEdit}
-        stepCount={steps.length}
-        canSave={canSave}
-        saving={submitting}
-        onSave={() => save(listPath)}
-        onCancel={() => attemptLeave(listPath)}
-        onBack={() => attemptLeave(listPath)}
-        onTest={handleTest}
-        testing={testing}
-        onRun={handleRun}
-        running={running}
-        onClearHistory={handleClearHistory}
-        clearingHistory={clearingHistory}
-        onDelete={() => setPendingDelete(true)}
-        onViewDefinition={() => setDefinitionOpen(true)}
-        runResult={testSummary}
-        onDownloadOutput={downloadOutput}
-      />
+      {isEdit ? (
+        <PipelineEditHeader
+          name={name}
+          onNameChange={setName}
+          enabled={enabled}
+          onTogglePause={handleTogglePause}
+          togglingEnabled={togglingEnabled}
+          onBack={() => attemptLeave(listPath)}
+          canSave={canSave}
+          blockers={blockers}
+          saving={submitting}
+          onSave={() => save(listPath)}
+          onRun={handleRun}
+          running={running}
+          onReprocess={handleReprocessAll}
+          reprocessing={reprocessing}
+          onDelete={() => setPendingDelete(true)}
+        />
+      ) : (
+        <PipelineCreateHeader
+          name={name}
+          onNameChange={setName}
+          canSave={canSave}
+          blockers={blockers}
+          saving={submitting}
+          pendingCreateEnabled={pendingCreateEnabled}
+          onCreate={() => submitCreate(true)}
+          onCreatePaused={() => submitCreate(false)}
+          onBack={() => attemptLeave(listPath)}
+        />
+      )}
 
       {error && <Banner tone="danger" description={error} />}
       {runResult && (
         <Banner tone={runResult.tone} description={runResult.text} />
       )}
-      {hasUploadSteps && (
-        <Banner
-          tone="warning"
-          description={t("portal.pipelines.builder.uploadUnsupported", {
-            tools: uploadStepLabels.join(", "),
-          })}
-        />
-      )}
       {hasUnconfiguredSteps && (
         <Banner
           tone="warning"
@@ -1110,44 +1318,54 @@ export function PipelineBuilder() {
       )}
 
       <div className="portal-builder__grid">
-        <PipelineGraph
-          // An end is on the chain once it has been asked for or already holds a value, so a
-          // loaded pipeline needs no seeding: its source and destination place themselves.
-          input={
-            inputAsked || inputValid
-              ? {
-                  label:
-                    chosenSource?.name ??
-                    t("portal.pipelines.builder.chooseSource"),
-                  detail: chosenSource ? triggerSummary() : undefined,
-                  warning: inputValid
-                    ? undefined
-                    : t("portal.pipelines.builder.needsSource"),
-                }
-              : null
-          }
-          output={
-            outputAsked || outputValid
-              ? {
-                  label:
-                    chosenDestination?.name ??
-                    t("portal.pipelines.builder.chooseDestination"),
-                  warning: outputValid
-                    ? undefined
-                    : t("portal.pipelines.builder.needsDestination"),
-                }
-              : null
-          }
-          steps={graphSteps}
-          selected={selected}
-          onSelect={setSelected}
-          onAddEnd={addEnd}
-          onRemoveEnd={removeEnd}
-          onInsertStep={setPickerAt}
-          onRemoveSteps={removeSteps}
-          onReorderSteps={reorderSteps}
-          onOpenStepError={(index) => setSelected({ steps: [index] })}
-        />
+        <div className="portal-builder__canvas">
+          <PipelineGraphToolbar
+            stepCount={steps.length}
+            onTest={handleTest}
+            testing={testing}
+            runResult={testSummary}
+            onDownloadOutput={downloadOutput}
+            onViewDefinition={() => setDefinitionOpen(true)}
+          />
+          <PipelineGraph
+            // An end is on the chain once it has been asked for or already holds a value, so a
+            // loaded pipeline needs no seeding: its source and destination place themselves.
+            input={
+              inputAsked || inputValid
+                ? {
+                    label:
+                      chosenSource?.name ??
+                      t("portal.pipelines.builder.chooseSource"),
+                    detail: chosenSource ? triggerSummary() : undefined,
+                    warning: inputValid
+                      ? undefined
+                      : t("portal.pipelines.builder.needsSource"),
+                  }
+                : null
+            }
+            output={
+              outputAsked || outputValid
+                ? {
+                    label:
+                      chosenDestination?.name ??
+                      t("portal.pipelines.builder.chooseDestination"),
+                    warning: outputValid
+                      ? undefined
+                      : t("portal.pipelines.builder.needsDestination"),
+                  }
+                : null
+            }
+            steps={graphSteps}
+            selected={selected}
+            onSelect={setSelected}
+            onAddEnd={addEnd}
+            onRemoveEnd={removeEnd}
+            onInsertStep={setPickerAt}
+            onRemoveSteps={removeSteps}
+            onReorderSteps={reorderSteps}
+            onOpenStepError={(index) => setSelected({ steps: [index] })}
+          />
+        </div>
 
         <PipelineInspector
           title={
diff --git a/frontend/editor/src/portal/views/Pipelines.tsx b/frontend/editor/src/portal/views/Pipelines.tsx
index b0321cfee1..f2203de972 100644
--- a/frontend/editor/src/portal/views/Pipelines.tsx
+++ b/frontend/editor/src/portal/views/Pipelines.tsx
@@ -46,6 +46,7 @@ export function Pipelines() {
           </p>
         </div>
         <Button
+          fat
           onClick={openCreate}
           leftSection={<AddRoundedIcon style={{ fontSize: "1.125rem" }} />}
         >
diff --git a/frontend/editor/src/portal/views/Procurement.css b/frontend/editor/src/portal/views/Procurement.css
index 556fff726a..8bdd97c118 100644
--- a/frontend/editor/src/portal/views/Procurement.css
+++ b/frontend/editor/src/portal/views/Procurement.css
@@ -279,11 +279,7 @@
   margin: 0 calc(-1 * var(--flowmodal-inset));
 }
 .portal-qb__paper {
-  background: var(--c-surface);
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 12px;
   overflow: hidden;
-  box-shadow: 0 1px 3px rgba(0, 0, 0, 0.06);
 }
 .portal-qb__paper-head {
   display: flex;
@@ -386,10 +382,7 @@
 
 /* ── Deal-status hero (Home, active deal) ─────────────────────────────────── */
 .portal-hero {
-  border: 1px solid var(--c-border);
-  border-radius: 12px;
   padding: 1.1rem 1.25rem;
-  background: var(--c-surface);
   display: flex;
   flex-direction: column;
   gap: 1rem;
@@ -592,12 +585,12 @@
   cursor: pointer;
   transition:
     background 0.12s,
-    box-shadow 0.12s,
+    border-color 0.12s,
     transform 0.12s;
 }
 .portal-hero__chip--action:hover {
   background: var(--c-surface);
-  box-shadow: 0 2px 5px rgba(0, 0, 0, 0.1);
+  border-color: var(--c-border-strong);
   transform: translateY(-1px);
 }
 
@@ -786,10 +779,6 @@
      does the scrolling. */
   min-height: 16rem;
   padding: 1.35rem 1.6rem;
-  border: 1px solid var(--c-border-subtle);
-  border-radius: 12px;
-  background: var(--c-surface);
-  box-shadow: var(--shadow-sm);
   /* No serif token exists in the theme — the serif is specific to rendering legal terms as paper. */
   font-family: Georgia, "Times New Roman", "Liberation Serif", serif;
   font-size: 0.84rem;
diff --git a/frontend/editor/src/portal/views/Sources.css b/frontend/editor/src/portal/views/Sources.css
index bb39eae86c..67d94a0848 100644
--- a/frontend/editor/src/portal/views/Sources.css
+++ b/frontend/editor/src/portal/views/Sources.css
@@ -89,69 +89,6 @@
   color: var(--c-accent-text);
 }
 
-/* Expanded detail panel */
-.portal-sources__expanded {
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-lg);
-  box-shadow: var(--shadow-sm);
-  padding: 1.25rem;
-  animation: portal-sources-reveal var(--motion-fast) ease-out;
-}
-
-@keyframes portal-sources-reveal {
-  from {
-    opacity: 0;
-    transform: translateY(-0.25rem);
-  }
-  to {
-    opacity: 1;
-    transform: translateY(0);
-  }
-}
-
-.portal-sources__expanded-head {
-  display: flex;
-  align-items: center;
-  gap: 0.75rem;
-  padding-bottom: 0.875rem;
-  margin-bottom: 1rem;
-  border-bottom: 1px solid var(--c-border-subtle);
-}
-
-.portal-sources__expanded-title {
-  margin: 0;
-  font-size: 1rem;
-  font-weight: 600;
-  color: var(--c-text);
-}
-
-.portal-sources__expanded-sub {
-  font-size: 0.75rem;
-  color: var(--c-text-subtle);
-}
-
-.portal-sources__expanded-close {
-  margin-left: auto;
-  width: 1.75rem;
-  height: 1.75rem;
-  border-radius: var(--radius-md);
-  border: 1px solid var(--c-border);
-  background: var(--c-surface);
-  color: var(--c-text-subtle);
-  font-size: 1.125rem;
-  line-height: 1;
-  cursor: pointer;
-  transition:
-    background var(--motion-fast),
-    color var(--motion-fast);
-}
-
-.portal-sources__expanded-close:hover {
-  background: var(--c-hover);
-  color: var(--c-text);
-}
-
 /* Detail body */
 .portal-sources__detail {
   display: flex;
@@ -368,42 +305,6 @@
   }
 }
 
-/* Override the shared Button's flex-row label to a centred icon-over-label
-   column so the SVG sits above the name with real spacing. */
-.portal-sources__type-card .mantine-Button-label {
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  gap: 0.5rem;
-  width: 100%;
-}
-
-.portal-sources__type-card {
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 1rem 0.5rem;
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-md);
-  cursor: pointer;
-  transition:
-    border-color var(--motion-fast),
-    background var(--motion-fast);
-}
-
-.portal-sources__type-card:hover {
-  border-color: var(--color-border-strong, var(--c-border));
-  background: var(--c-hover);
-}
-
-.portal-sources__type-card.is-selected {
-  border-color: var(--c-primary);
-  background: color-mix(in srgb, var(--c-primary) 12%, var(--c-surface));
-  box-shadow: 0 0 0 1px var(--c-primary) inset;
-}
-
 /* Icon inside the type picker: a plain stroke icon above the label (no badge
    box — the tinted box read as an extra bordered chip floating on the tile). */
 .portal-sources__type-icon {
@@ -413,10 +314,6 @@
   color: var(--c-text-subtle);
 }
 
-.portal-sources__type-card.is-selected .portal-sources__type-icon {
-  color: var(--c-accent-text);
-}
-
 .portal-sources__type-icon .portal-sources__type-svg {
   width: 1.6rem;
   height: 1.6rem;
@@ -460,256 +357,3 @@
   gap: 0.5rem;
   width: 100%;
 }
-
-.portal-sources__connection-picker {
-  display: flex;
-  flex-direction: column;
-  gap: 0.5rem;
-  align-items: flex-start;
-}
-
-.portal-sources__connection-picker .sui-select,
-.portal-sources__connection-picker > div:first-child {
-  align-self: stretch;
-}
-
-.portal-sources__connection-create {
-  display: flex;
-  flex-direction: column;
-  gap: 0.75rem;
-  padding: 0.75rem;
-  border: 1px solid var(--color-border-2);
-  border-radius: 0.5rem;
-  align-self: stretch;
-}
-
-.portal-sources__connection-create-actions {
-  display: flex;
-  justify-content: flex-end;
-  gap: 0.5rem;
-}
-
-.portal-sources__connection-form {
-  display: flex;
-  flex-direction: column;
-  gap: 0.75rem;
-}
-
-/* Back to the grid from the form. Sits above the fields, where the type dropdown used to be. */
-.portal-sources__connection-back {
-  display: inline-flex;
-  align-items: center;
-  gap: 0.35rem;
-  margin-bottom: 1rem;
-  padding: 0;
-  background: none;
-  border: none;
-  cursor: pointer;
-  font: inherit;
-  font-size: 0.8125rem;
-  color: var(--c-text-muted);
-}
-
-.portal-sources__connection-back:hover {
-  color: var(--text-default, inherit);
-}
-
-/* The "request an integration" / "advanced" affordances, set below the form so presets read as
-   the primary path and these as the way out of it. */
-.portal-sources__connection-secondary {
-  display: flex;
-  flex-wrap: wrap;
-  gap: 1rem;
-  margin-top: 1rem;
-  padding-top: 0.75rem;
-  border-top: 1px solid var(--c-border-subtle);
-}
-
-.portal-sources__connection-link {
-  background: none;
-  border: none;
-  padding: 0;
-  cursor: pointer;
-  font: inherit;
-  font-size: 0.8125rem;
-  color: var(--c-conn-accent);
-  text-decoration: underline;
-  text-underline-offset: 2px;
-}
-
-.portal-sources__connection-link:hover {
-  opacity: 0.8;
-}
-
-/* Free-text fields (result-host list, body template) that outgrow a single-line input. */
-.portal-sources__connection-textarea {
-  width: 100%;
-  padding: 0.5rem 0.75rem;
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-sm, 0.375rem);
-  background: var(--surface-input, transparent);
-  color: inherit;
-  font-family: var(--font-mono, ui-monospace, monospace);
-  font-size: 0.8125rem;
-  line-height: 1.5;
-  resize: vertical;
-}
-
-.portal-sources__connection-textarea:focus-visible {
-  outline: 2px solid var(--c-conn-accent);
-  outline-offset: -1px;
-}
-
-/* ---- Integration picker ---------------------------------------------------------------------
-   A searchable grid of what we can connect to. Sized so a full category is visible without
-   scrolling on a laptop, and so the search box is the first thing focus lands on. */
-.portal-conn-picker {
-  display: flex;
-  flex-direction: column;
-  gap: 1.25rem;
-  /* Bounded rather than free-growing: the modal should not become the page. */
-  max-height: min(60vh, 32rem);
-  overflow-y: auto;
-}
-
-.portal-conn-picker__search {
-  position: sticky;
-  top: 0;
-  z-index: 1;
-  display: flex;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 0.5rem 0.75rem;
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-sm, 0.375rem);
-  /* Real theme token with a transparent fallback so it never falls back to opaque white in dark;
-     the border alone is enough to read as an input. */
-  background: var(--color-bg-subtle, transparent);
-}
-
-.portal-conn-picker__search-icon {
-  flex: none;
-  font-size: 1.125rem;
-  color: var(--c-text-muted);
-}
-
-.portal-conn-picker__search input {
-  flex: 1;
-  min-width: 0;
-  border: none;
-  background: none;
-  outline: none;
-  font: inherit;
-  color: inherit;
-}
-
-.portal-conn-picker__section {
-  display: flex;
-  flex-direction: column;
-  gap: 0.25rem;
-}
-
-.portal-conn-picker__section-title {
-  margin: 0;
-  font-size: 0.8125rem;
-  font-weight: 600;
-  text-transform: uppercase;
-  letter-spacing: 0.04em;
-  color: var(--c-text-muted);
-}
-
-.portal-conn-picker__section-desc {
-  margin: 0 0 0.5rem;
-  font-size: 0.8125rem;
-  color: var(--c-text-muted);
-}
-
-.portal-conn-picker__grid {
-  display: grid;
-  /* auto-fill so the grid reflows to the modal rather than to a fixed column count. */
-  grid-template-columns: repeat(auto-fill, minmax(13.5rem, 1fr));
-  gap: 0.5rem;
-}
-
-.portal-conn-picker__card {
-  display: flex;
-  align-items: flex-start;
-  gap: 0.625rem;
-  padding: 0.625rem 0.75rem;
-  text-align: left;
-  cursor: pointer;
-  border: 1px solid var(--c-border-subtle);
-  border-radius: var(--radius-sm, 0.375rem);
-  background: var(--surface-subtle, transparent);
-  font: inherit;
-  color: inherit;
-}
-
-.portal-conn-picker__card:hover {
-  border-color: var(--c-conn-accent);
-  background: color-mix(in srgb, var(--c-conn-neutral) 6%, transparent);
-}
-
-/* The custom-API card is an escape hatch, not a vendor: dashed, so it reads as "something else". */
-.portal-conn-picker__card--advanced {
-  border-style: dashed;
-}
-
-/* The vendor's real mark: full colour, no tinted plate behind it. Neutral
-   (currentColor) marks pick up the muted text tone instead. */
-.portal-conn-picker__mark {
-  flex: none;
-  display: grid;
-  place-items: center;
-  width: 1.5rem;
-  height: 1.5rem;
-  color: var(--c-text-subtle);
-}
-
-.portal-conn-picker__mark svg {
-  display: block;
-}
-
-.portal-conn-picker__card-text {
-  display: flex;
-  flex-direction: column;
-  gap: 0.125rem;
-  min-width: 0;
-}
-
-.portal-conn-picker__card-name {
-  font-size: 0.875rem;
-  font-weight: 500;
-}
-
-.portal-conn-picker__card-desc {
-  font-size: 0.75rem;
-  line-height: 1.35;
-  color: var(--c-text-muted);
-  /* Two lines keeps every card the same height without truncating most descriptions. */
-  display: -webkit-box;
-  -webkit-line-clamp: 2;
-  -webkit-box-orient: vertical;
-  overflow: hidden;
-}
-
-.portal-conn-picker__empty {
-  display: flex;
-  flex-direction: column;
-  align-items: center;
-  gap: 0.5rem;
-  padding: 2rem 1rem;
-  text-align: center;
-}
-
-.portal-conn-picker__empty-title {
-  margin: 0;
-  font-size: 0.9375rem;
-  font-weight: 600;
-}
-
-.portal-conn-picker__empty-body {
-  margin: 0 0 0.5rem;
-  font-size: 0.8125rem;
-  color: var(--c-text-muted);
-}
diff --git a/frontend/editor/src/portal/views/Sources.test.tsx b/frontend/editor/src/portal/views/Sources.test.tsx
index d4d4b0137f..166d4016fc 100644
--- a/frontend/editor/src/portal/views/Sources.test.tsx
+++ b/frontend/editor/src/portal/views/Sources.test.tsx
@@ -158,14 +158,14 @@ describe("Sources view", () => {
     expect(await screen.findByText("integrations view")).toBeInTheDocument();
   });
 
-  it("hides the KPI strip and shows the empty state when only the editor exists", async () => {
+  it("hides the KPI strip when only the editor exists", async () => {
     fetchSources.mockResolvedValue({
       kpis: RESPONSE.kpis,
       sources: [RESPONSE.sources[0]],
     });
     renderView();
     expect(
-      await screen.findByText("portal.sources.empty.title"),
+      await screen.findByText("portal.sources.types.editor.label"),
     ).toBeInTheDocument();
     expect(screen.queryByText("portal.sources.kpi.total")).toBeNull();
   });
diff --git a/frontend/editor/src/portal/views/Sources.tsx b/frontend/editor/src/portal/views/Sources.tsx
index dd449e71c8..f676b4f3db 100644
--- a/frontend/editor/src/portal/views/Sources.tsx
+++ b/frontend/editor/src/portal/views/Sources.tsx
@@ -2,10 +2,9 @@ import { useEffect, useState } from "react";
 import { useTranslation } from "react-i18next";
 import { Navigate, useSearchParams } from "react-router-dom";
 import AddRoundedIcon from "@mui/icons-material/AddRounded";
-import { Button, EmptyState, Skeleton } from "@app/ui";
+import { Button, Skeleton } from "@app/ui";
 import { useSectionFlags } from "@portal/hooks/useAsync";
 import { useSources } from "@portal/queries/sources";
-import { SourcesIcon } from "@portal/components/icons";
 import { type SourceView } from "@portal/api/sources";
 import { VIEW_PATHS, toPortalPath } from "@portal/contexts/ViewContext";
 import { KpiStrip } from "@portal/components/sources/KpiStrip";
@@ -39,9 +38,9 @@ export function Sources() {
   const sources = data?.sources ?? [];
 
   // The editor is a virtual row that's always present, so "empty" means no
-  // configured sources beyond it. Gates the KPI strip and empty panel.
+  // configured sources beyond it. Gates the KPI strip.
   const configuredCount = sources.filter((s) => s.type !== "editor").length;
-  const showEmpty = !isLoading && configuredCount === 0;
+  const showKpis = isLoading || configuredCount > 0;
 
   const openCreate = () => setModal({ open: true, sourceId: null });
   const openSource = (source: SourceView) =>
@@ -61,6 +60,7 @@ export function Sources() {
         </div>
         <div className="portal-sources__actions">
           <Button
+            fat
             onClick={openCreate}
             leftSection={<AddRoundedIcon style={{ fontSize: "1.125rem" }} />}
           >
@@ -69,7 +69,7 @@ export function Sources() {
         </div>
       </header>
 
-      {!showEmpty && <KpiStrip data={data} loading={loading} />}
+      {showKpis && <KpiStrip data={data} loading={loading} />}
 
       {isLoading && (
         <div className="portal-sources__table-skeleton" aria-hidden>
@@ -79,25 +79,7 @@ export function Sources() {
         </div>
       )}
 
-      {showEmpty && (
-        <EmptyState
-          icon={<SourcesIcon size={28} />}
-          title={t("portal.sources.empty.title")}
-          description={t("portal.sources.empty.description")}
-          actions={
-            <Button
-              onClick={openCreate}
-              leftSection={<AddRoundedIcon style={{ fontSize: "1.125rem" }} />}
-            >
-              {t("portal.sources.actions.connectSource")}
-            </Button>
-          }
-        />
-      )}
-
-      {!isLoading && sources.length > 0 && (
-        <SourcesTable sources={sources} onRowClick={openSource} />
-      )}
+      {!isLoading && <SourcesTable sources={sources} onRowClick={openSource} />}
 
       <SourceModal
         open={modal.open}
diff --git a/frontend/editor/src/portal/views/Usage.tsx b/frontend/editor/src/portal/views/Usage.tsx
index 776b210951..b8970c4094 100644
--- a/frontend/editor/src/portal/views/Usage.tsx
+++ b/frontend/editor/src/portal/views/Usage.tsx
@@ -176,7 +176,7 @@ export function Usage({ onWalletLoaded, onReauth }: UsageProps = {}) {
           {wallet?.status === "subscribed" && (
             <Button
               variant="secondary"
-              size="sm"
+              fat
               loading={portal.opening}
               onClick={portal.open}
             >
diff --git a/frontend/editor/src/portal/views/Users.css b/frontend/editor/src/portal/views/Users.css
index 12221be007..0b63c8baba 100644
--- a/frontend/editor/src/portal/views/Users.css
+++ b/frontend/editor/src/portal/views/Users.css
@@ -293,9 +293,6 @@
 }
 
 .portal-users__group {
-  background: var(--c-surface);
-  border: 1px solid var(--c-border);
-  border-radius: var(--radius-lg);
   overflow: hidden;
 }
 
diff --git a/frontend/editor/src/portal/views/Users.saas.test.tsx b/frontend/editor/src/portal/views/Users.saas.test.tsx
index a81dcf1c28..5313857c2c 100644
--- a/frontend/editor/src/portal/views/Users.saas.test.tsx
+++ b/frontend/editor/src/portal/views/Users.saas.test.tsx
@@ -138,7 +138,7 @@ describe("Users page (SaaS flavor, end-to-end via SaasTeamController mocks)", ()
     await screen.findByText("sam.lee@acme.com");
     const panel = screen
       .getByText("Pending invitations")
-      .closest("section") as HTMLElement;
+      .closest("table") as HTMLElement;
     fireEvent.click(within(panel).getByRole("button", { name: "Cancel" }));
     // Confirm dialog -> DELETE /invitations/{id} -> refetch drops the invite.
     fireEvent.click(
diff --git a/frontend/editor/src/portal/views/Users.tsx b/frontend/editor/src/portal/views/Users.tsx
index 311f2f7467..79c6c11611 100644
--- a/frontend/editor/src/portal/views/Users.tsx
+++ b/frontend/editor/src/portal/views/Users.tsx
@@ -1,4 +1,4 @@
-import { useEffect, useMemo, useState } from "react";
+import { useEffect, useMemo, useRef, useState } from "react";
 import { useSearchParams } from "react-router-dom";
 import { useTranslation } from "react-i18next";
 import { Button, EmptyState, Skeleton } from "@app/ui";
@@ -71,12 +71,14 @@ export function Users() {
   }, [searchParams, setSearchParams]);
 
   // Scroll to and flash the row for ?member=<id> (deep link from the super
-  // search), once the roster has rendered; then strip the param.
+  // search), once the roster has rendered; then strip the param. Scoped to the
+  // roster so a pending-invitation row sharing the id can't match first.
+  const rosterRef = useRef<HTMLDivElement>(null);
   useEffect(() => {
     const memberId = searchParams.get("member");
     if (memberId === null || usersState.loading) return;
-    const row = document.querySelector(
-      `[data-member-id="${CSS.escape(memberId)}"]`,
+    const row = rosterRef.current?.querySelector(
+      `[data-row-key="${CSS.escape(memberId)}"]`,
     );
     if (row) {
       row.scrollIntoView({ block: "center" });
@@ -280,11 +282,15 @@ export function Users() {
         </div>
         <div className="portal-users__head-actions">
           {caps.createTeam && (
-            <Button variant="secondary" onClick={() => setNewTeamOpen(true)}>
+            <Button
+              fat
+              variant="secondary"
+              onClick={() => setNewTeamOpen(true)}
+            >
               {t("users.newTeam.action", "+ New team")}
             </Button>
           )}
-          <Button onClick={() => openInvite(null)}>
+          <Button fat onClick={() => openInvite(null)}>
             {t("users.invite.action", "Invite people")}
           </Button>
         </div>
@@ -339,28 +345,30 @@ export function Users() {
       )}
 
       {!loading && members.length > 0 && (
-        <UsersDirectory
-          members={members}
-          teams={teams}
-          capabilities={caps}
-          onChangeRole={changeRole}
-          onGrantProcessor={grantProcessor}
-          onRevokeProcessor={revokeProcessor}
-          processorTeamIds={processorTeamIds}
-          onGrantTeamProcessor={grantTeamProcessor}
-          onRevokeTeamProcessor={revokeTeamProcessor}
-          onAddToTeam={(team) => openInvite(team.id)}
-          onResetPassword={setResetPwMember}
-          onMoveToTeam={setMoveMember}
-          onToggleEnabled={toggleEnabled}
-          onUnlock={unlock}
-          onDisableMfa={disableMfa}
-          onRemove={removeUser}
-          onRenameTeam={(team) =>
-            setRenameTarget({ id: team.id, name: team.name })
-          }
-          onDeleteTeam={deleteTeamAction}
-        />
+        <div ref={rosterRef}>
+          <UsersDirectory
+            members={members}
+            teams={teams}
+            capabilities={caps}
+            onChangeRole={changeRole}
+            onGrantProcessor={grantProcessor}
+            onRevokeProcessor={revokeProcessor}
+            processorTeamIds={processorTeamIds}
+            onGrantTeamProcessor={grantTeamProcessor}
+            onRevokeTeamProcessor={revokeTeamProcessor}
+            onAddToTeam={(team) => openInvite(team.id)}
+            onResetPassword={setResetPwMember}
+            onMoveToTeam={setMoveMember}
+            onToggleEnabled={toggleEnabled}
+            onUnlock={unlock}
+            onDisableMfa={disableMfa}
+            onRemove={removeUser}
+            onRenameTeam={(team) =>
+              setRenameTarget({ id: team.id, name: team.name })
+            }
+            onDeleteTeam={deleteTeamAction}
+          />
+        </div>
       )}
 
       <InviteMemberModal
diff --git a/frontend/editor/src/proprietary/billing/format.ts b/frontend/editor/src/proprietary/billing/format.ts
index f91f98af44..3d6372ab6f 100644
--- a/frontend/editor/src/proprietary/billing/format.ts
+++ b/frontend/editor/src/proprietary/billing/format.ts
@@ -33,7 +33,7 @@ export function formatMinor(
   minor: number,
   currency: string | null | undefined,
 ): string {
-  const num = new Intl.NumberFormat(undefined, {
+  const num = new Intl.NumberFormat("en-US", {
     minimumFractionDigits: 2,
     maximumFractionDigits: 3,
   }).format(minor / 100);
@@ -45,7 +45,7 @@ export function formatMoneyMajor(
   major: number,
   currency: string | null | undefined,
 ): string {
-  return `${currencySymbol(currency)}${major.toLocaleString()}`;
+  return `${currencySymbol(currency)}${major.toLocaleString("en-US")}`;
 }
 
 /**
@@ -293,6 +293,29 @@ export function computeBundleQuote(
 
 export type MeterState = "FULL" | "WARNED" | "DEGRADED";
 
+/**
+ * Meter for a balance that is spent DOWN — a free grant, a prepaid pool. The
+ * bar shows what is LEFT, so full reads as "plenty" and empty as "none", which
+ * is how the sidebar footer's credits row reads and the only direction that
+ * matches a figure quoting the remainder.
+ *
+ * The state bands still key on consumption, so the tone is unchanged: amber
+ * once 80% is gone, red once it's exhausted. Meters for money SPENT against a
+ * cap keep using {@link meterState} directly — there a full bar correctly means
+ * "at your ceiling".
+ */
+export function remainingMeter(
+  remaining: number,
+  total: number,
+): { state: MeterState; pct: number } {
+  const { state } = meterState(Math.max(0, total - remaining), total);
+  const pct =
+    total > 0
+      ? Math.min(100, Math.max(0, (Math.max(0, remaining) / total) * 100))
+      : 0;
+  return { state, pct };
+}
+
 /** Warn (≥80%) / degrade (≥100%) band for a usage meter; mirrors the BE thresholds. */
 export function meterState(
   used: number,
diff --git a/frontend/editor/src/proprietary/billing/index.ts b/frontend/editor/src/proprietary/billing/index.ts
index 687adec541..2fe9dffd93 100644
--- a/frontend/editor/src/proprietary/billing/index.ts
+++ b/frontend/editor/src/proprietary/billing/index.ts
@@ -14,6 +14,7 @@ export {
   docCapForMoney,
   formatPeriodDate,
   meterState,
+  remainingMeter,
   PREPAID_MONTHS_GRANTED,
   PREPAID_MONTHS_PAID,
   PDFS_PER_USER_MONTH,
diff --git a/frontend/editor/src/proprietary/components/notifications/notificationActions.test.tsx b/frontend/editor/src/proprietary/components/notifications/notificationActions.test.tsx
new file mode 100644
index 0000000000..950a8d41ff
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/notifications/notificationActions.test.tsx
@@ -0,0 +1,271 @@
+import type { ReactNode } from "react";
+import { beforeEach, describe, expect, it, vi } from "vitest";
+import { renderHook } from "@testing-library/react";
+import { MemoryRouter } from "react-router-dom";
+import type {
+  AppNotification,
+  NotificationActionOffer,
+} from "@app/services/notifications";
+import type { NotificationActionContext } from "@core/components/notifications/notificationActions";
+
+/**
+ * Where each action sends the reader. Only the editor has the workbench contexts above it, so the two
+ * shells are the interesting cases: opening the document, or handing it over.
+ */
+
+const navigate = vi.fn();
+vi.mock("react-router-dom", async () => ({
+  ...(await vi.importActual<typeof import("react-router-dom")>(
+    "react-router-dom",
+  )),
+  useNavigate: () => navigate,
+}));
+
+// No i18n instance here, and the plugin is stubbed because the contexts below reach `core/i18n`.
+vi.mock("react-i18next", () => ({
+  useTranslation: () => ({
+    t: (_key: string, fallback: string) => fallback,
+  }),
+  initReactI18next: { type: "3rdParty", init: () => {} },
+}));
+
+// IndexedDB, which jsdom has none of. Answered here so presence is a fact of the test.
+const h = vi.hoisted(() => ({
+  stub: { id: "f-1" } as unknown,
+  getStirlingFileStub: vi.fn(),
+}));
+
+vi.mock("@app/services/fileStorage", () => ({
+  fileStorage: {
+    getStirlingFileStub: (fileId: string) => h.getStirlingFileStub(fileId),
+  },
+}));
+
+const { FileActionsContext, FileStoreContext } =
+  await import("@app/contexts/file/contexts");
+const { NavigationActionsContext } =
+  await import("@app/contexts/NavigationContext");
+const { ViewerContext } = await import("@app/contexts/ViewerContext");
+const { useNotificationActions } =
+  await import("@app/components/notifications/notificationActions");
+
+const addStirlingFileStubs = vi.fn();
+const setActiveFileId = vi.fn();
+const setWorkbench = vi.fn();
+/** What the workbench already holds, so the "do not add it twice" path can be exercised. */
+let openFileIds: string[] = [];
+
+function notification(
+  overrides: Partial<AppNotification> = {},
+): AppNotification {
+  return {
+    id: "failure:evt-1",
+    source: "FAILURE",
+    kindId: "INPUT_PASSWORD_PROTECTED",
+    origin: "TOOL",
+    ownership: "MINE",
+    severity: "ERROR",
+    status: "NEW",
+    titleKey: "portal.failures.kind.inputPasswordProtected.title",
+    defaultTitle: "Password-protected document",
+    detail: "The PDF Document is passworded",
+    fileId: "f-1",
+    sourceId: null,
+    policyId: null,
+    occurrences: 3,
+    createdAt: "2026-08-06T00:00:00Z",
+    lastSeenAt: "2026-08-06T00:00:00Z",
+    actions: [],
+    ...overrides,
+  };
+}
+
+function offer(id: string): NotificationActionOffer {
+  return {
+    id,
+    labelKey: `portal.failures.action.${id.toLowerCase()}`,
+    defaultLabel: id,
+    enabled: true,
+    disabledReasonKey: null,
+  };
+}
+
+function context(
+  overrides: Partial<NotificationActionContext> = {},
+): NotificationActionContext {
+  return {
+    notification: notification(),
+    hasLocalFile: true,
+    ...overrides,
+  };
+}
+
+/** The editor shell: the workbench's providers all sit above the bell. */
+const inEditor = ({ children }: { children: ReactNode }) => (
+  <MemoryRouter>
+    <FileActionsContext.Provider
+      value={{
+        actions: { addStirlingFileStubs } as never,
+        dispatch: vi.fn(),
+      }}
+    >
+      <FileStoreContext.Provider
+        value={
+          {
+            getState: () => ({ files: { ids: openFileIds } }),
+            subscribe: () => () => {},
+            selectors: {},
+          } as never
+        }
+      >
+        <NavigationActionsContext.Provider
+          value={{ actions: { setWorkbench } } as never}
+        >
+          <ViewerContext.Provider value={{ setActiveFileId } as never}>
+            {children}
+          </ViewerContext.Provider>
+        </NavigationActionsContext.Provider>
+      </FileStoreContext.Provider>
+    </FileActionsContext.Provider>
+  </MemoryRouter>
+);
+
+/** The processor shell: the portal mounts above the app's providers, so there is none. */
+const inProcessor = ({ children }: { children: ReactNode }) => (
+  <MemoryRouter>{children}</MemoryRouter>
+);
+
+function registry(wrapper = inEditor) {
+  return renderHook(() => useNotificationActions(), { wrapper }).result.current;
+}
+
+beforeEach(() => {
+  navigate.mockReset();
+  addStirlingFileStubs.mockReset().mockResolvedValue([]);
+  setActiveFileId.mockReset();
+  setWorkbench.mockReset();
+  h.getStirlingFileStub.mockReset().mockResolvedValue(h.stub);
+  openFileIds = [];
+  window.sessionStorage.clear();
+  window.history.pushState({}, "", "/");
+});
+
+describe("useNotificationActions", () => {
+  it("offers to open the document only while it is still in this browser", () => {
+    const actions = registry();
+
+    expect(actions.VIEW_FILE?.available(context())).toBe(true);
+    expect(actions.VIEW_FILE?.available(context({ hasLocalFile: false }))).toBe(
+      false,
+    );
+  });
+
+  it("leaves View file as the only usable offer when the server offers actions this build cannot run", () => {
+    // An id this build wires nothing for drops out rather than rendering dead.
+    const actions = registry();
+    const usable = [offer("QUARANTINE"), offer("VIEW_FILE")].filter(
+      (candidate) => actions[candidate.id]?.available(context()) ?? false,
+    );
+
+    expect(usable.map((candidate) => candidate.id)).toEqual(["VIEW_FILE"]);
+  });
+
+  it("opens the document into the viewer when an editor is above", async () => {
+    await registry().VIEW_FILE?.run(context());
+
+    // Selecting alone shows nothing: the workbench holds neither the file nor the viewer yet.
+    expect(addStirlingFileStubs).toHaveBeenCalledWith([h.stub]);
+    expect(setActiveFileId).toHaveBeenCalledWith("f-1");
+    expect(setWorkbench).toHaveBeenCalledWith("viewer");
+  });
+
+  it("stays where it is rather than routing through the role-based root", async () => {
+    // "/" lands on a page chosen by the reader's role, which reads as the app reloading.
+    await registry().VIEW_FILE?.run(context());
+
+    expect(window.location.pathname).toBe("/");
+    expect(navigate).not.toHaveBeenCalled();
+  });
+
+  it("does not add a document the workbench is already holding", async () => {
+    openFileIds = ["f-1"];
+
+    await registry().VIEW_FILE?.run(context());
+
+    expect(addStirlingFileStubs).not.toHaveBeenCalled();
+    // Still brought to the front: the point of the click is to look at it.
+    expect(setActiveFileId).toHaveBeenCalledWith("f-1");
+    expect(setWorkbench).toHaveBeenCalledWith("viewer");
+  });
+
+  it("reports a document that has gone from storage instead of opening nothing", async () => {
+    h.getStirlingFileStub.mockResolvedValue(null);
+
+    const outcome = await registry().VIEW_FILE?.run(context());
+
+    expect(outcome).toEqual({ ok: false });
+    expect(setWorkbench).not.toHaveBeenCalled();
+  });
+
+  it("hands the document over to the editor when there is no workbench above it", async () => {
+    await registry(inProcessor).VIEW_FILE?.run(context());
+
+    // The intent outlives the navigation that mounts the editor.
+    expect(
+      window.sessionStorage.getItem("stirling.notifications.pendingSelection"),
+    ).toBe("f-1");
+    // The editor's own URL, not the role router at "/".
+    expect(window.location.pathname).toBe("/editor");
+  });
+
+  it("picks up a handed-over document as soon as an editor is there", async () => {
+    window.sessionStorage.setItem(
+      "stirling.notifications.pendingSelection",
+      "f-9",
+    );
+
+    registry();
+    await vi.waitFor(() => expect(setActiveFileId).toHaveBeenCalledWith("f-9"));
+
+    expect(setWorkbench).toHaveBeenCalledWith("viewer");
+    // One-shot: a later mount must not reopen a document the user has moved on from.
+    expect(
+      window.sessionStorage.getItem("stirling.notifications.pendingSelection"),
+    ).toBeNull();
+  });
+
+  it("says it cannot hand the document over rather than navigating to nothing", async () => {
+    // Spied on the prototype: jsdom's storage is a proxy, so an own-property spy does not take.
+    const setItem = vi
+      .spyOn(Storage.prototype, "setItem")
+      .mockImplementation(() => {
+        throw new Error("denied");
+      });
+
+    const outcome = await registry(inProcessor).VIEW_FILE?.run(context());
+
+    expect(outcome).toEqual({
+      ok: false,
+      message:
+        "This browser will not let the processor pass the document to the editor. Open it from the editor instead.",
+    });
+    // Still on the page it started on, so the failure is visible.
+    expect(window.location.pathname).toBe("/");
+    setItem.mockRestore();
+  });
+
+  it("links to the recorded failures section of the processor", () => {
+    registry().VIEW_IN_PROCESSOR?.run(context());
+
+    expect(navigate).toHaveBeenCalledWith("/processor/documents#failures");
+  });
+
+  it("offers the processor link whenever the server did", () => {
+    // The server only sends it to someone it will let read the queue.
+    expect(
+      registry(inProcessor).VIEW_IN_PROCESSOR?.available(
+        context({ hasLocalFile: false }),
+      ),
+    ).toBe(true);
+  });
+});
diff --git a/frontend/editor/src/proprietary/components/notifications/notificationActions.ts b/frontend/editor/src/proprietary/components/notifications/notificationActions.ts
new file mode 100644
index 0000000000..5f34561a5a
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/notifications/notificationActions.ts
@@ -0,0 +1,155 @@
+import { useCallback, useContext, useEffect, useMemo } from "react";
+import { useTranslation } from "react-i18next";
+import { useNavigate } from "react-router-dom";
+import { withBasePath } from "@app/constants/app";
+import {
+  FileActionsContext,
+  FileStoreContext,
+} from "@app/contexts/file/contexts";
+import { NavigationActionsContext } from "@app/contexts/NavigationContext";
+import { ViewerContext } from "@app/contexts/ViewerContext";
+import {
+  PORTAL_BASENAME,
+  PORTAL_FAILURES_ANCHOR,
+} from "@app/routes/portalBasename";
+import { EDITOR_BASENAME } from "@app/routes/editorBasename";
+import { fileStorage } from "@app/services/fileStorage";
+import type { FileId } from "@app/types/file";
+import {
+  type ClientActionOutcome,
+  type ClientActionRegistry,
+  type ClientActionSpec,
+  type NotificationActionContext,
+} from "@core/components/notifications/notificationActions";
+
+export {
+  type ClientActionOutcome,
+  type ClientActionRegistry,
+  type ClientActionSpec,
+  type NotificationActionContext,
+};
+
+/**
+ * The portal mounts as a sibling of `AppProviders`, so in the processor shell none of the workbench
+ * contexts exist above this hook. That is why contexts are read raw and a document is handed over.
+ */
+
+const HANDOFF_KEY = "stirling.notifications.pendingSelection";
+
+const FAILURES_DESTINATION = `${PORTAL_BASENAME}/documents#${PORTAL_FAILURES_ANCHOR}`;
+
+/** False when storage refused it: navigating anyway lands the user in an editor with nothing open. */
+function stashSelection(fileId: string): boolean {
+  try {
+    window.sessionStorage.setItem(HANDOFF_KEY, fileId);
+    return true;
+  } catch {
+    return false;
+  }
+}
+
+function takeSelection(): string | null {
+  try {
+    const fileId = window.sessionStorage.getItem(HANDOFF_KEY);
+    if (fileId !== null) window.sessionStorage.removeItem(HANDOFF_KEY);
+    return fileId;
+  } catch {
+    return null;
+  }
+}
+
+/**
+ * Not the router's `navigate`: the editor reads its tool from the URL on mount and on a history pop,
+ * and a router push is neither, so the address would change and the workbench would not.
+ */
+function goToEditor(path: string): void {
+  window.history.pushState({}, "", withBasePath(path));
+  window.dispatchEvent(new PopStateEvent("popstate"));
+}
+
+export function useNotificationActions(): ClientActionRegistry {
+  const { t } = useTranslation();
+  const navigate = useNavigate();
+  // Raw, because the hooks that wrap these throw when there is no provider, and in the processor
+  // shell there is none. All four are present together or not at all.
+  const fileContext = useContext(FileActionsContext);
+  const fileStore = useContext(FileStoreContext);
+  const navigation = useContext(NavigationActionsContext);
+  const viewer = useContext(ViewerContext);
+  const canOpenHere = Boolean(fileContext && fileStore && navigation && viewer);
+
+  /**
+   * Opens the way the file sidebar does. Selecting alone shows nothing: an id the workbench does not
+   * hold has nothing to render, and the workbench keeps whatever view it was on.
+   */
+  const openInWorkbench = useCallback(
+    async (fileId: string): Promise<boolean> => {
+      if (!fileContext || !fileStore || !navigation || !viewer) return false;
+
+      const stub = await fileStorage.getStirlingFileStub(fileId as FileId);
+      if (!stub) return false;
+
+      const alreadyOpen = fileStore
+        .getState()
+        .files.ids.some((id) => (id as string) === fileId);
+      if (!alreadyOpen) {
+        await fileContext.actions.addStirlingFileStubs([stub]);
+      }
+      viewer.setActiveFileId(fileId);
+      navigation.actions.setWorkbench("viewer");
+      return true;
+    },
+    [fileContext, fileStore, navigation, viewer],
+  );
+
+  // One-shot: read and cleared, so a later render cannot reopen a file the user has moved on from.
+  useEffect(() => {
+    if (!canOpenHere) return;
+    const fileId = takeSelection();
+    if (fileId) void openInWorkbench(fileId);
+  }, [canOpenHere, openInWorkbench]);
+
+  return useMemo<ClientActionRegistry>(() => {
+    const openDocument = async (
+      fileId: string | null,
+    ): Promise<ClientActionOutcome | void> => {
+      if (!fileId) return;
+
+      // In place, with no navigation: "/" is the role-based router, so going there reads as the app
+      // reloading and lands the user wherever their role says rather than on their document.
+      if (canOpenHere) {
+        return (await openInWorkbench(fileId)) ? undefined : { ok: false };
+      }
+
+      if (!stashSelection(fileId)) {
+        return {
+          ok: false,
+          message: t(
+            "notifications.handoffUnavailable",
+            "This browser will not let the processor pass the document to the editor. Open it from the editor instead.",
+          ),
+        };
+      }
+      goToEditor(EDITOR_BASENAME);
+    };
+
+    const viewFile: ClientActionSpec = {
+      available: (context) => context.hasLocalFile,
+      closesPanel: true,
+      run: (context) => openDocument(context.notification.fileId),
+    };
+
+    const viewInProcessor: ClientActionSpec = {
+      // Its destination is dev-only until failures get a review screen; the other half of this gate
+      // is in portal/views/Documents, and both lift together.
+      available: () => import.meta.env.DEV,
+      closesPanel: true,
+      run: () => navigate(FAILURES_DESTINATION),
+    };
+
+    return {
+      VIEW_FILE: viewFile,
+      VIEW_IN_PROCESSOR: viewInProcessor,
+    };
+  }, [canOpenHere, openInWorkbench, navigate, t]);
+}
diff --git a/frontend/editor/src/proprietary/components/notifications/useNotificationsAvailable.ts b/frontend/editor/src/proprietary/components/notifications/useNotificationsAvailable.ts
new file mode 100644
index 0000000000..2e21f0f33e
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/notifications/useNotificationsAvailable.ts
@@ -0,0 +1,7 @@
+/**
+ * This build ships the failure registry and the notification routes, so the bell has
+ * something to read and may mount.
+ */
+export function useNotificationsAvailable(): boolean {
+  return true;
+}
diff --git a/frontend/editor/src/proprietary/components/policies/policyRunSettles.test.ts b/frontend/editor/src/proprietary/components/policies/policyRunSettles.test.ts
new file mode 100644
index 0000000000..fdce331821
--- /dev/null
+++ b/frontend/editor/src/proprietary/components/policies/policyRunSettles.test.ts
@@ -0,0 +1,51 @@
+import { describe, expect, it } from "vitest";
+import { finishedWithNothingToDeliver } from "@app/components/policies/usePolicyAutoRun";
+import type { PolicyRunRecord } from "@app/components/policies/policyRunStore";
+
+/**
+ * A redaction that matches nothing completes with no output file. The import
+ * effect used to skip those runs entirely, so `imported` never flipped and the
+ * file's badge + blocking overlay spun forever - on every engine.
+ */
+const run = (overrides: Partial<PolicyRunRecord> = {}): PolicyRunRecord =>
+  ({
+    runId: "r",
+    categoryId: "security",
+    fileId: "f",
+    fileName: "f.pdf",
+    fileSize: 1,
+    target: "saas",
+    status: "COMPLETED",
+    outputs: [],
+    error: null,
+    startedAt: 0,
+    ...overrides,
+  }) as PolicyRunRecord;
+
+describe("finishedWithNothingToDeliver", () => {
+  it("settles a completed run that produced no output", () => {
+    expect(finishedWithNothingToDeliver(run())).toBe(true);
+  });
+
+  it("leaves a run with outputs to the import path", () => {
+    expect(
+      finishedWithNothingToDeliver(
+        run({ outputs: [{ fileId: "o", fileName: "o.pdf" }] as never }),
+      ),
+    ).toBe(false);
+  });
+
+  it("ignores runs that aren't finished, or are already settled", () => {
+    expect(finishedWithNothingToDeliver(run({ status: "PENDING" }))).toBe(
+      false,
+    );
+    expect(finishedWithNothingToDeliver(run({ status: "FAILED" }))).toBe(false);
+    expect(finishedWithNothingToDeliver(run({ imported: true }))).toBe(false);
+  });
+
+  it("leaves classification alone - it settles via its own label path", () => {
+    expect(
+      finishedWithNothingToDeliver(run({ categoryId: "classification" })),
+    ).toBe(false);
+  });
+});
diff --git a/frontend/editor/src/proprietary/components/policies/useClientSideClassification.ts b/frontend/editor/src/proprietary/components/policies/useClientSideClassification.ts
index aac4b7e3da..64fd849d87 100644
--- a/frontend/editor/src/proprietary/components/policies/useClientSideClassification.ts
+++ b/frontend/editor/src/proprietary/components/policies/useClientSideClassification.ts
@@ -1,5 +1,5 @@
-// With the AI engine off, the Classification policy runs here in the browser:
-// each upload is labelled by the heuristic engine and metered for billing parity.
+// The Classification policy's first pass: every upload is labelled locally before the AI is asked.
+// The confidence reported here decides whether the AI is asked at all - see usePolicyAutoRun.
 
 import { useEffect, useRef, useState } from "react";
 import { useAllFiles, useFileManagement } from "@app/contexts/FileContext";
@@ -7,7 +7,6 @@ import { useAppConfig } from "@app/contexts/AppConfigContext";
 import { useIndexedDB } from "@app/contexts/IndexedDBContext";
 import { fileStorage } from "@app/services/fileStorage";
 import { useClassificationEnabled } from "@app/hooks/useClassificationEnabled";
-import { useAiEngineEnabled } from "@app/hooks/useAiEngineEnabled";
 import { scheduleIdle } from "@app/utils/scheduleIdle";
 import { usePolicies } from "@app/hooks/usePolicies";
 import { classifyFileHeuristically } from "@app/services/heuristic/heuristicClassification";
@@ -15,12 +14,14 @@ import { meterClassificationRun } from "@app/services/classificationMeter";
 import {
   isDispatched,
   markDispatched,
+  recordRunStart,
+  updateRun,
 } from "@app/components/policies/policyRunStore";
 import type { FileId } from "@app/types/file";
 import type { StirlingFile, StirlingFileStub } from "@app/types/fileContext";
+import type { HeuristicConfidence } from "@app/services/heuristic/types";
+import { CLASSIFICATION_CATEGORY_ID } from "@app/data/classificationPolicy";
 
-/** The category id of the Classification policy (see policyDefinitions). */
-const CLASSIFICATION_CATEGORY = "classification";
 /** Files classified per idle pass, so a large library drains over several ticks. */
 const CLASSIFY_BATCH = 3;
 /** How long to wait for an upload's bytes to land in IndexedDB (20 × 250ms ≈ 5s).
@@ -47,9 +48,8 @@ export function useClientSideClassification(): void {
   const { bumpRevision } = useIndexedDB();
   const { policies } = usePolicies();
   const classificationEnabled = useClassificationEnabled();
-  const aiEnabled = useAiEngineEnabled();
-  // While app-config loads, aiEnabled reads false even on AI-on tenants; classifying
-  // in that window would double-run (and double-bill) files the server also labels.
+  // Still waited on: a verdict written before app-config lands would be acted on by the
+  // escalation decision before it knows whether the AI engine is even available.
   const { loading: configLoading } = useAppConfig();
   // Files claimed this session, keyed id+lastModified so a new version is retried once. A claim is
   // taken synchronously right before classifying, so overlapping batches never double-classify.
@@ -57,7 +57,9 @@ export function useClientSideClassification(): void {
   // Bumped after each batch to drain the next one.
   const [tick, setTick] = useState(0);
 
-  const policy = policies[CLASSIFICATION_CATEGORY];
+  // TODO: keyed on the Classification CATEGORY, so a pipeline that merely contains a classify
+  // step gets no local pass - suppressing one step of a chain is not expressible today.
+  const policy = policies[CLASSIFICATION_CATEGORY_ID];
   // Only when the admin has an active Classification policy - the same gate the AI path uses.
   const active = Boolean(
     policy?.configured &&
@@ -69,7 +71,8 @@ export function useClientSideClassification(): void {
   );
 
   useEffect(() => {
-    if (configLoading || !classificationEnabled || aiEnabled || !active) {
+    // Runs whether or not the AI engine is on: it is the first pass either way, not a fallback.
+    if (configLoading || !classificationEnabled || !active) {
       return;
     }
     const claimKey = (s: StirlingFileStub) =>
@@ -95,17 +98,23 @@ export function useClientSideClassification(): void {
           // Re-validate at execution time - another batch may have claimed it since.
           if (claimed.current.has(key)) continue;
           claimed.current.add(key);
-          const labels = await classifyStub(stub.id as FileId, stub.name);
+          const verdict = await classifyStub(
+            stub.id as FileId,
+            stub.name,
+            stub.size ?? 0,
+          );
           // Bytes never landed (file removed mid-wait): leave undelivered so a
           // reload (or new version) retries; the claim stops churn this session.
-          if (labels == null) continue;
+          if (verdict == null) continue;
           // Deliver unconditionally - a re-render must never discard a computed
           // (and already metered) result. Writes are idempotent.
           updateStirlingFileStub(stub.id as FileId, {
-            classificationLabels: labels,
+            classificationLabels: verdict.labels,
+            classificationConfidence: verdict.confidence,
           });
           const ok = await fileStorage.updateFileMetadata(stub.id as FileId, {
-            classificationLabels: labels,
+            classificationLabels: verdict.labels,
+            classificationConfidence: verdict.confidence,
           });
           if (ok) wrote = true;
         }
@@ -122,7 +131,6 @@ export function useClientSideClassification(): void {
     fileStubs,
     active,
     classificationEnabled,
-    aiEnabled,
     configLoading,
     updateStirlingFileStub,
     bumpRevision,
@@ -134,7 +142,8 @@ export function useClientSideClassification(): void {
 async function classifyStub(
   fileId: FileId,
   fileName: string,
-): Promise<string[] | null> {
+  fileSize: number,
+): Promise<{ labels: string[]; confidence: HeuristicConfidence } | null> {
   let file: StirlingFile | null = null;
   for (let i = 0; i < FILE_WAIT_TRIES; i++) {
     file = await fileStorage.getStirlingFile(fileId).catch(() => null);
@@ -149,10 +158,28 @@ async function classifyStub(
   }
   const debug = isClassificationDebug();
   const startedAt = performance.now();
+  // A local run is still a billable policy run, so it belongs in the activity feed; recorded only
+  // once the bytes are in hand, so a file whose bytes never land leaves no phantom row.
+
+  // Read before recordRunStart, which takes the dispatch key itself and would otherwise always
+  // answer "already dispatched", silently stopping metering.
+  const alreadyMetered = isDispatched(CLASSIFICATION_CATEGORY_ID, fileId);
+  const runId = `local-${CLASSIFICATION_CATEGORY_ID}-${fileId}-${Date.now()}`;
+  recordRunStart({
+    runId,
+    categoryId: CLASSIFICATION_CATEGORY_ID,
+    fileId: fileId as string,
+    fileName,
+    fileSize,
+    target: "local",
+    status: "RUNNING",
+    outputs: [],
+    error: null,
+    startedAt: Date.now(),
+  });
   try {
     const result = await classifyFileHeuristically(file, { explain: debug });
     const { labels } = result;
-    const alreadyMetered = isDispatched(CLASSIFICATION_CATEGORY, fileId);
     const ms = Math.round(performance.now() - startedAt);
     const verdict =
       labels.length > 0
@@ -174,12 +201,22 @@ async function classifyStub(
         labels,
       });
     }
-    markDispatched(CLASSIFICATION_CATEGORY, fileId);
-    return labels;
+    markDispatched(CLASSIFICATION_CATEGORY_ID, fileId);
+    // Labels, no output file - the same settle shape the server-run classification uses.
+    updateRun(runId, {
+      status: "COMPLETED",
+      imported: true,
+      outputFileIds: [fileId as string],
+    });
+    return { labels, confidence: result.confidence };
   } catch (err) {
     // Never persist a verdict for an unreadable file - the failure may be
     // environmental, so it must stay eligible to retry (and meter) later.
     console.warn(`[Classify] ${fileName}: could not be read, will retry`, err);
+    updateRun(runId, {
+      status: "FAILED",
+      error: err instanceof Error ? err.message : String(err),
+    });
     return null;
   }
 }
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx
index bc4fa54dff..08768f1aa7 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.batch.test.tsx
@@ -1,5 +1,6 @@
 import { describe, it, expect, vi, beforeEach } from "vitest";
 import { renderHook, act } from "@testing-library/react";
+import type { ClassificationConfidence } from "@app/types/fileContext";
 
 /**
  * Batch integration test (61 files, two chained upload policies) driving the real
@@ -12,7 +13,11 @@ const FILE_COUNT = 61;
 // the workbench, mirrored into useAllFiles. consumeFiles mutates it in place
 // (input id → output id) exactly as the real silent reducer would.
 const mocks = vi.hoisted(() => ({
-  workspace: [] as Array<{ id: string; classificationLabels?: string[] }>,
+  workspace: [] as Array<{
+    id: string;
+    classificationLabels?: string[];
+    classificationConfidence?: ClassificationConfidence;
+  }>,
   consumeSilentCalls: 0,
   consumeNonSilentCalls: 0,
   persistCalls: 0,
@@ -117,10 +122,20 @@ function Harness() {
   return null;
 }
 
+/** The heuristic verdict that escalates to the AI classifier; only "high" stands alone. */
+const LOW = "low" as const;
+
 function replaceInWorkspace(inputIds: string[], outputIds: string[]) {
+  // A versioned output carries its input's heuristic verdict; the escalation decision is about the
+  // document, not about which step produced the current bytes.
+  const inherited =
+    mocks.workspace.find((s) => inputIds.includes(s.id))
+      ?.classificationConfidence ?? LOW;
   mocks.workspace = mocks.workspace
     .filter((s) => !inputIds.includes(s.id))
-    .concat(outputIds.map((id) => ({ id })));
+    .concat(
+      outputIds.map((id) => ({ id, classificationConfidence: inherited })),
+    );
 }
 
 beforeEach(() => {
@@ -138,6 +153,7 @@ beforeEach(() => {
 
   mocks.workspace = Array.from({ length: FILE_COUNT }, (_, i) => ({
     id: `file-${i}`,
+    classificationConfidence: LOW,
   }));
 
   mocks.listPolicyRuns.mockResolvedValue([]);
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.chain.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.chain.test.tsx
index b87cbda445..a6f78392be 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.chain.test.tsx
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.chain.test.tsx
@@ -91,7 +91,12 @@ describe("auto-run ordered chaining", () => {
 
     // The first policy (order 0) runs on the upload; the second waits for the chain.
     expect(runStored).toHaveBeenCalledTimes(1);
-    expect(runStored).toHaveBeenCalledWith("backend-sec", [{ size: 100 }]);
+    // Recorded against a document this browser can resolve, which is what makes its failure actionable.
+    expect(runStored).toHaveBeenCalledWith(
+      "backend-sec",
+      [{ size: 100 }],
+      "file-1",
+    );
   });
 
   it("chains the next policy onto a completed run's output", async () => {
@@ -120,8 +125,12 @@ describe("auto-run ordered chaining", () => {
       await vi.advanceTimersByTimeAsync(1);
     });
 
-    // The next policy (order 1) fires on the first policy's output, not the original.
-    expect(runStored).toHaveBeenCalledWith("backend-cls", [{ size: 100 }]);
+    // Fires on the first policy's output and reports that output's own id, not the original's.
+    expect(runStored).toHaveBeenCalledWith(
+      "backend-cls",
+      [{ size: 100 }],
+      "file-1-v2",
+    );
   });
 
   it("keeps classification out of the server chain when the AI engine is off", async () => {
@@ -136,10 +145,31 @@ describe("auto-run ordered chaining", () => {
       await vi.advanceTimersByTimeAsync(1);
     });
 
-    expect(runStored).toHaveBeenCalledWith("backend-sec", [{ size: 100 }]);
+    expect(runStored).toHaveBeenCalledWith(
+      "backend-sec",
+      [{ size: 100 }],
+      "file-1",
+    );
     expect(runStored).not.toHaveBeenCalledWith(
       "backend-cls",
       expect.anything(),
+      expect.anything(),
     );
   });
+
+  it("never dispatches on a file marked derivedFromTool", async () => {
+    // A policy run is billed, so this gate is what stops `importOutputs` re-enforcing a policy on
+    // its own output forever. If this fails, fix the gate rather than the test.
+    setFileStubs([
+      { id: "file-1", name: "unlocked.pdf", derivedFromTool: true },
+    ]);
+    runStored.mockResolvedValue("run-sec");
+
+    renderHook(() => usePolicyAutoRun());
+    await act(async () => {
+      await vi.advanceTimersByTimeAsync(1);
+    });
+
+    expect(runStored).not.toHaveBeenCalled();
+  });
 });
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx
index b67648e7fc..84b6f58bf7 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.race.test.tsx
@@ -1,5 +1,6 @@
 import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
 import { renderHook, act } from "@testing-library/react";
+import type { ClassificationConfidence } from "@app/types/fileContext";
 
 /**
  * Mid-run race: classification is in flight (its labelled output is still
@@ -18,6 +19,7 @@ const mocks = vi.hoisted(() => ({
     sourceFileIds?: string[];
     derivedFromTool?: boolean;
     classificationLabels?: string[];
+    classificationConfidence?: ClassificationConfidence;
   }>,
   runStoredPolicy: vi.fn(),
   getPolicyRun: vi.fn(),
@@ -114,7 +116,7 @@ beforeEach(() => {
   resetPolicyRuns();
   vi.clearAllMocks();
 
-  mocks.workspace = [{ id: "file-0" }];
+  mocks.workspace = [{ id: "file-0", classificationConfidence: "low" }];
 
   mocks.listPolicyRuns.mockResolvedValue([]);
   mocks.getStirlingFile.mockResolvedValue(
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx
index 3c54e5cc42..b837b4beba 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.retry.test.tsx
@@ -113,7 +113,13 @@ describe("auto-run queue-rejection retry", () => {
     await act(async () => {
       await vi.advanceTimersByTimeAsync(6000);
     });
-    expect(runStored).toHaveBeenCalledWith("backend-1", [{ size: 1234 }]);
+    // The workspace id travels with the retry too, so a failure of it can still name the
+    // document this browser is holding.
+    expect(runStored).toHaveBeenCalledWith(
+      "backend-1",
+      [{ size: 1234 }],
+      "file-1",
+    );
     expect(getRun("run-1")).toBeUndefined();
     expect(getRun("run-2")?.status).toBe("RUNNING");
   });
diff --git a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
index 597136a32f..936fef8119 100644
--- a/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
+++ b/frontend/editor/src/proprietary/components/policies/usePolicyAutoRun.ts
@@ -1,18 +1,6 @@
 /**
- * Auto-run controller: every enabled policy enforces on every uploaded file.
- * Watches the session's files and fires a real backend run
- * (`POST /api/v1/policies/{id}/run`) per file, polling it to completion and
- * recording progress in {@link policyRunStore} for the activity feed.
- *
- * When several policies enforce on the same trigger they run as an ordered chain:
- * the first fires on the upload, and each subsequent policy fires on the previous
- * one's output once it lands — so their effects accumulate in the admin-defined
- * order rather than racing to fork the same version.
- *
- * Headless — call it from {@link PolicyAutoRunController}, which is mounted once
- * wherever the editor is open so enforcement happens regardless of whether the
- * policy panel is on screen. Each (policy, file) pair runs exactly once (tracked
- * in the run store), so re-renders and remounts don't re-fire.
+ * Headless auto-run controller: one backend run per (policy, file), fired exactly once and polled.
+ * Policies sharing a trigger run as an ordered chain so their effects accumulate.
  */
 
 import { useCallback, useEffect, useMemo, useRef } from "react";
@@ -22,6 +10,7 @@ import {
   useFileContext,
 } from "@app/contexts/FileContext";
 import { fileStorage } from "@app/services/fileStorage";
+import { refreshNotificationsNow } from "@app/hooks/useNotifications";
 import { useIndexedDB } from "@app/contexts/IndexedDBContext";
 import i18n from "@app/i18n";
 import {
@@ -39,7 +28,12 @@ import { dispatchPaygLimitReached } from "@app/services/usageLimitBridge";
 import type { FileId } from "@app/types/file";
 import { createStirlingFilesAndStubs } from "@app/services/fileStubHelpers";
 import { readClassificationLabelsFromFile } from "@app/services/fileClassification";
-import { isClassificationCategory } from "@app/data/policyCategories";
+import {
+  policyDeliversOutputFiles,
+  policyRequiresAiEngine,
+  policyRewritesDocument,
+  shouldDispatchToAi,
+} from "@app/data/classificationPolicy";
 import {
   acquireDispatchSlot,
   releaseDispatchSlot,
@@ -68,10 +62,8 @@ const POLL_MS = 2000;
  *  sitting on an indeterminate spinner for a full poll interval. */
 const FIRST_POLL_MS = 500;
 
-/** The server aborts any single tool step that runs longer than its internal-API
- *  read timeout, then fails the run — so a run can legitimately stay in flight
- *  for up to this long per step. The client must keep polling at least that long,
- *  or it abandons a run the server is still working on (which reads as a hang). */
+/** Server's per-step abort budget - poll at least this long per step, or we abandon
+ *  a run the server is still working on. */
 const STEP_TIMEOUT_MS = 300_000;
 
 /** Slack on top of the per-step budget: queueing before the first step starts and
@@ -91,11 +83,8 @@ const POLICY_QUEUE_FULL = "POLICY_QUEUE_FULL";
 const MAX_QUEUE_RETRIES = 5;
 const QUEUE_RETRY_BASE_MS = 4000;
 
-/** Consecutive "run not found" responses before giving up. The run state lives
- *  in memory on the server, so a restart or a second instance behind the load
- *  balancer makes a live run's status return 404 — and it won't come back. We
- *  tolerate a brief blip (e.g. a poll racing a just-dispatched run, or one hop
- *  to an instance that hasn't seen it) then fail, rather than polling forever. */
+/** Consecutive 404s before failing. Run state is in-memory server-side, so a restart
+ *  or a hop to another instance loses it permanently - tolerate a blip, not forever. */
 const MAX_NOT_FOUND = 3;
 
 /** A 404 (run status gone, or output file gone), across the web (axios) and
@@ -118,12 +107,23 @@ function failRun(runId: string, message: string): void {
   updateRun(runId, { status: "FAILED", error: message, errorCode: null });
 }
 
-/** How long to wait for an upload's bytes to land in IndexedDB before giving up
- *  (20 × 250ms ≈ 5s). The stub can surface in the file list a beat before its
- *  bytes are committed, so a too-eager fetch would otherwise miss the file. */
+/** Wait for an upload's bytes to land in IndexedDB (~5s): the stub surfaces in the
+ *  file list before its bytes are committed, so an eager fetch would miss the file. */
 const FILE_WAIT_TRIES = 20;
 const FILE_WAIT_MS = 250;
 
+/** A policy that changed nothing completes with no output; left unimported its badge
+ *  and blocking overlay spin forever. */
+export function finishedWithNothingToDeliver(run: PolicyRunRecord): boolean {
+  return (
+    run.status === "COMPLETED" &&
+    !run.imported &&
+    (run.outputs?.length ?? 0) === 0 &&
+    // An annotating policy settles on labels, not an output file.
+    policyDeliversOutputFiles(run.categoryId)
+  );
+}
+
 function isTerminal(status: PolicyRunStatus): boolean {
   return (
     status === "COMPLETED" || status === "FAILED" || status === "CANCELLED"
@@ -140,34 +140,23 @@ export function usePolicyAutoRun(): void {
   const { policies } = usePolicies();
   const aiEnabled = useAiEngineEnabled();
   const runs = usePolicyRuns();
-  // Live view of the workspace files, read inside the import effect WITHOUT making
-  // it a dependency. The silent consume that delivers an output mutates fileStubs,
-  // so if the import effect depended on fileStubs it would re-fire on its own
-  // delivery — an infinite import cascade (and a bumpRevision storm that trips
-  // React's max-update-depth). The effect only needs to fire when `runs` changes.
+  // Read in the import effect via ref, not as a dependency: delivery mutates fileStubs,
+  // so depending on them would re-fire the effect on its own delivery (infinite cascade).
   const fileStubsRef = useRef(fileStubs);
   fileStubsRef.current = fileStubs;
-  // Keys (run ids / dispatch keys) currently in flight, so the effects never
-  // double-fire across re-renders while their first async step is pending.
+  // Keys in flight, so effects never double-fire across re-renders while async work pends.
   const polling = useRef<Set<string>>(new Set());
   const importing = useRef<Set<string>>(new Set());
   const dispatching = useRef<Set<string>>(new Set());
   // Reconcile against the backend exactly once per mount.
   const reconciled = useRef(false);
 
-  // A policy's tool calls run server-side, so a usage-limit 402 never reaches the apiClient
-  // interceptor (and thus never pops the modal that direct calls get). The backend surfaces the
-  // limit sentinel on the run's errorCode; when a run we polled finishes blocked, broadcast a
-  // window event. A saas-layer listener (which can read the wallet + open the modal — this
-  // proprietary hook can't import the saas modal API) decides free-limit vs spend-cap. Dedupe per
-  // run so a folder-watch burst opens the modal once, not once per file.
+  // Server-side runs never hit the apiClient 402 interceptor, so we broadcast the limit
+  // sentinel for a saas listener to open the modal. Deduped per run.
   const firedLimitModal = useRef<Set<string>>(new Set());
 
-  // Active upload policies in execution order. When several enforce on upload they
-  // run as a chain — the first fires on the upload, each subsequent one on the
-  // previous policy's output — so their effects accumulate in a defined order
-  // instead of racing to fork the same version. Mirrors the dispatch filter
-  // (incl. the editor-source gate) so the chain honours the same eligibility.
+  // Active upload policies in chain order, so effects accumulate instead of racing to fork
+  // the same version. Mirrors the dispatch filter so the chain honours the same eligibility.
   const orderedUploadCategories = useMemo(
     () =>
       Object.entries(policies)
@@ -180,41 +169,40 @@ export function usePolicyAutoRun(): void {
               s.sources.length === 0 ||
               s.sources.includes("editor")) &&
             (s.runOn ?? "upload") === "upload" &&
-            // Non-AI systems classify in the browser (useClientSideClassification), so keep the
-            // Classification policy out of the server chain when the AI engine is off.
-            !(id === "classification" && !aiEnabled),
+            // An escalation-only policy has nothing to do with no engine to escalate to.
+            !(policyRequiresAiEngine(id) && !aiEnabled),
         )
-        // Classification runs last: it's non-blocking, so an enforcement policy
-        // running after it would fork a new version and drop the user's edits.
+        // Annotating policies run last: a rewriting one after them would fork a new
+        // version from the pre-annotation state and drop their labels.
         .sort(([idA, a], [idB, b]) => {
-          const ca = isClassificationCategory(idA) ? 1 : 0;
-          const cb = isClassificationCategory(idB) ? 1 : 0;
-          if (ca !== cb) return ca - cb;
+          const ra = policyRewritesDocument(idA) ? 0 : 1;
+          const rb = policyRewritesDocument(idB) ? 0 : 1;
+          if (ra !== rb) return ra - rb;
           return (a.order ?? 0) - (b.order ?? 0);
         })
         .map(([id]) => id),
     [policies, aiEnabled],
   );
 
-  // Runs whose chain-continuation we've already handled this session, so the next
-  // policy is dispatched exactly once per completed run.
+  // Chain-continuations handled this session, so the next policy fires once per run.
   const chained = useRef<Set<string>>(new Set());
 
   // Latest policies, read from inside the stable retry callback (which has no deps).
   const policiesRef = useRef(policies);
   policiesRef.current = policies;
+  // Latest stubs for the chaining effect, which keys off runs and must not depend on stubs.
+  const stubsRef = useRef(fileStubs);
+  stubsRef.current = fileStubs;
   // Per-file (dispatchKey) count of consecutive queue-rejection retries, so backoff escalates and
   // eventually gives up. Survives the run-id changing on each retry; reset on any real outcome.
   const queueRetries = useRef<Map<string, number>>(new Map());
 
-  // A queue-rejected run is just backpressure — drop the rejected record and fire a fresh run in
-  // its place after a growing backoff (one feed row, not a new one per attempt). Once the budget is
-  // spent, leave the last failure standing so the activity feed offers a manual Retry.
+  // Queue rejection is backpressure: replace the record with a fresh run after a backoff, so the
+  // feed keeps one row. Budget spent, leave the failure standing for a manual Retry.
   const scheduleQueueRetry = useCallback((runId: string) => {
     const rec = getRun(runId);
     if (!rec) return;
-    // A run rediscovered from the server (reconciled) has no local input fileId, so it can't be
-    // re-dispatched; leave it failed rather than spinning on a file we can't resolve.
+    // A reconciled run has no local fileId to re-dispatch; leave it failed.
     if (!rec.fileId) return;
     const key = dispatchKey(rec.categoryId, rec.fileId);
     const attempts = queueRetries.current.get(key) ?? 0;
@@ -254,6 +242,8 @@ export function usePolicyAutoRun(): void {
           dispatchKey(finished.categoryId, finished.fileId),
         );
       }
+      // Read now rather than leaving them a poll interval to hear about their own upload.
+      if (view.status === "FAILED") refreshNotificationsNow();
       const code = view.errorCode;
       if (code !== "PAYG_LIMIT_REACHED" && code !== "FEATURE_DEGRADED") return;
       if (firedLimitModal.current.has(view.runId)) return;
@@ -263,42 +253,38 @@ export function usePolicyAutoRun(): void {
     [scheduleQueueRetry],
   );
 
-  // Dispatch: fire only the FIRST upload policy on each not-yet-run file. The rest
-  // of the chain is dispatched by the chaining effect below, each on the previous
-  // policy's output, so the policies apply cumulatively in order.
+  // Fire only the FIRST upload policy per file; the chaining effect below runs the rest
+  // on each previous output, so policies apply cumulatively in order.
   useEffect(() => {
     const firstCategory = orderedUploadCategories[0];
     if (!firstCategory) return;
     const backendId = policies[firstCategory]?.backendId;
     if (!backendId) return;
     for (const stub of fileStubs) {
-      // Input-mode policies enforce only on files that actually entered the
-      // system as an upload — not on files a tool/automation produced in-app
-      // (versioned edits or independent artifacts like convert/split/merge).
-      // Those are enforced only by export-mode policies, at export time.
+      // Input-mode policies cover uploads only; tool-produced files are left to
+      // export-mode policies at export time.
       if (stub.derivedFromTool) continue;
       const key = dispatchKey(firstCategory, stub.id);
-      // Skip if already run (persisted) or a dispatch is in flight — the
-      // in-memory guard prevents double-firing during the async wait.
+      // Skip if already run (persisted) or in flight - the in-memory guard covers the async wait.
       if (
         isDispatched(firstCategory, stub.id) ||
         dispatching.current.has(key)
       ) {
         continue;
       }
+      // A confident local verdict stands; only an unsure one is escalated to the engine.
+      if (!shouldDispatchToAi(firstCategory, stub)) continue;
       dispatching.current.add(key);
       void runPolicyOnFile(firstCategory, backendId, stub.id, stub.name)
         .catch(() => {
-          // runPolicyOnFile handles its own failures; this is just a backstop
-          // so an unexpected rejection never becomes an unhandled rejection.
+          // Backstop: runPolicyOnFile handles its own failures.
         })
         .finally(() => dispatching.current.delete(key));
     }
   }, [fileStubs, policies, orderedUploadCategories]);
 
-  // Chain: once a run has completed AND its output landed in the workspace, fire the
-  // next upload policy on that output. Only chains on success (a failed run has no
-  // output), and only once per run. isDispatched guards re-dispatch across reloads.
+  // Once a run's output lands, fire the next upload policy on it - success only, once per
+  // run. isDispatched guards re-dispatch across reloads.
   useEffect(() => {
     for (const run of runs) {
       if (run.status !== "COMPLETED" || !run.imported) continue;
@@ -317,10 +303,15 @@ export function usePolicyAutoRun(): void {
       // Next policy not ready yet (still reconciling) — retry when policies change.
       if (!backendId) continue;
       chained.current.add(run.runId);
-      // Chain onto EVERY output, not just the first — a run that produced multiple files (split,
-      // ZIP-unpacked) must apply the next policy to all of them, or outputs 2..N silently skip it.
+      // Chain onto EVERY output: a run that produced several files (split, ZIP-unpacked)
+      // would otherwise silently skip the next policy on outputs 2..N.
       for (const outputId of outputIds) {
         if (isDispatched(nextCategory, outputId as FileId)) continue;
+        const outputStub = stubsRef.current.find((s) => s.id === outputId);
+        // Nothing to escalate: either the heuristic already answered confidently, or it has
+        // not reported yet and this effect re-runs when the verdict lands.
+        if (outputStub && !shouldDispatchToAi(nextCategory, outputStub))
+          continue;
         void runPolicyOnFile(
           nextCategory,
           backendId,
@@ -330,7 +321,7 @@ export function usePolicyAutoRun(): void {
         ).catch(() => {});
       }
     }
-  }, [runs, policies, orderedUploadCategories]);
+  }, [runs, policies, orderedUploadCategories, fileStubs]);
 
   // Poll each in-flight run to a terminal state.
   useEffect(() => {
@@ -343,29 +334,26 @@ export function usePolicyAutoRun(): void {
     }
   }, [runs, onRunFinished]);
 
-  // Import each completed run's outputs into the workspace (each output once),
-  // so the enforced file appears in the app rather than only on the backend.
+  // Import each completed run's outputs once, so the enforced file appears in the app.
   useEffect(() => {
     for (const run of runs) {
-      const classification = isClassificationCategory(run.categoryId);
+      const deliversFiles = policyDeliversOutputFiles(run.categoryId);
       if (
         run.status !== "COMPLETED" ||
         run.imported ||
-        importing.current.has(run.runId) ||
-        // Classification settles even with no outputs (nothing to tag); other
-        // policies need an output to import.
-        (!run.outputs?.length && !classification)
+        importing.current.has(run.runId)
       ) {
         continue;
       }
+      if (finishedWithNothingToDeliver(run)) {
+        updateRun(run.runId, { imported: true });
+        continue;
+      }
       importing.current.add(run.runId);
-      // Classification is metadata-only: stamp labels onto the current leaf of
-      // the file it ran on (no version fork). See importClassificationLabels.
-      if (classification) {
-        // Targets are resolved by importClassificationLabels AT WRITE TIME (not
-        // snapshotted here): its download/parse is an async window during which
-        // a manual tool run can consume the input and fork a new leaf, and a
-        // stale snapshot would no-op on the dead id and lose the labels.
+      // An annotating policy writes labels onto the current leaf; no version fork.
+      if (!deliversFiles) {
+        // Resolved at write time, not snapshotted: a tool run during the async parse can fork
+        // a new leaf, and a stale id would no-op and lose the labels.
         void importClassificationLabels(
           run,
           () =>
@@ -374,8 +362,7 @@ export function usePolicyAutoRun(): void {
         ).finally(() => importing.current.delete(run.runId));
         continue;
       }
-      // Honour the policy's output mode: a new file, or a new version of the
-      // input file it ran on (needs that input's stub, still in the workspace).
+      // Output mode: a new file, or a new version of the input (needs its stub in the workspace).
       const outputMode = policies[run.categoryId]?.outputMode ?? "new_version";
       const outputName = policies[run.categoryId]?.outputName ?? "";
       const outputNamePosition = policies[run.categoryId]?.outputNamePosition;
@@ -394,9 +381,8 @@ export function usePolicyAutoRun(): void {
         firstUploadCategory: orderedUploadCategories[0],
       }).finally(() => importing.current.delete(run.runId));
     }
-    // NB: fileStubs is intentionally NOT a dependency — it's read via a ref so a
-    // delivery's own workspace mutation can't re-trigger this effect (see the ref
-    // declaration above). The effect fires on run completions, which is all it needs.
+    // NB: fileStubs is read via a ref, not a dependency, so a delivery's own workspace
+    // mutation can't re-trigger this effect.
   }, [
     runs,
     addFiles,
@@ -406,11 +392,8 @@ export function usePolicyAutoRun(): void {
     orderedUploadCategories,
   ]);
 
-  // Reconcile against the backend on load. The server owns runs (durable, user-scoped),
-  // so a run started before this client recorded it, or before a refresh/crash, is
-  // rediscovered here; the poll + import effects above then collect its outputs rather
-  // than leaving them orphaned. Waits until policies are known so server runs can be
-  // attributed to their category.
+  // The server owns runs, so rediscover any this client never recorded and let the effects
+  // above collect their outputs. Waits for policies so runs can be attributed to a category.
   useEffect(() => {
     if (reconciled.current) return;
     if (Object.keys(policies).length === 0) return;
@@ -441,23 +424,18 @@ interface ImportContext {
   outputMode: "new_file" | "new_version";
   /** Rename rule. Empty → keep the input's filename. */
   outputName: string;
-  /** Where the rename is applied: before ("prefix") or after ("suffix") the
-   *  base filename. Defaults to "suffix" when absent. */
+  /** Rename position around the base filename; defaults to "suffix" when absent. */
   outputNamePosition?: "prefix" | "suffix" | "auto-number";
   /** The input file's stub — required to version it; absent if it's been removed. */
   parentStub: StirlingFileStub | undefined;
-  /** The first upload policy in the chain — the only one the dispatch effect ever
-   *  fires. Every policy output is marked dispatched for it so a downstream policy's
-   *  output is never mistaken for a fresh upload and re-enforced (an endless loop). */
+  /** The only policy the dispatch effect fires; every output is marked dispatched for it
+   *  so a downstream output is never mistaken for a fresh upload and re-enforced. */
   firstUploadCategory: string | undefined;
 }
 
 /**
- * Pull the caller's server-side runs and fold them into the local store. For a run we already
- * track, patch its status/outputs (preserving local import progress + attribution); for one we
- * don't, adopt it for feed visibility (polled if still live, but never auto-imported — see the
- * `imported` note below). Server-excluded ad-hoc runs and runs we can't map to a configured
- * category are skipped.
+ * Fold server-side runs into the local store: patch tracked ones, adopt untracked ones for feed
+ * visibility only. Unmappable and ad-hoc runs are skipped.
  */
 function applyOutputName(
   inputFileName: string,
@@ -473,8 +451,7 @@ function applyOutputName(
     : `${base}_${outputName}${ext}`;
 }
 
-/** The next upload policy after {@code categoryId} in the chain, or undefined if
- *  it's last or no longer in the ordered set (e.g. paused since it ran). */
+/** Next upload policy in the chain, or undefined if last or no longer eligible. */
 function nextUploadCategory(
   orderedUploadCategories: string[],
   categoryId: string,
@@ -506,13 +483,11 @@ async function reconcileServerRuns(
     addReconciledRun({
       runId: view.runId,
       categoryId,
-      // No local input link: a run rediscovered purely from the server was never recorded by
-      // this client, so it can't be tied back to a workspace/storage file (and isn't retried).
+      // Server-only run: never recorded here, so it can't be tied to a file (and isn't retried).
       fileId: "",
       fileName: view.outputs[0]?.fileName ?? "",
       fileSize: 0,
-      // Rediscovered from the SaaS run registry (listPolicyRuns), so its outputs
-      // live on the cloud backend.
+      // From the SaaS run registry, so its outputs live on the cloud backend.
       target: "saas",
       status: view.status,
       outputs: view.outputs,
@@ -544,10 +519,8 @@ interface ClassificationImportContext {
   bumpRevision: () => void;
 }
 
-/** Workspace stubs to tag with a classification run's labels: the file it ran
- *  on plus any live descendants, so an edit made during the async run (which
- *  forks a new leaf) still shows the tags. Empty once the document has left the
- *  workspace (closed, or a reconciled run with no local input link). */
+/** The run's file plus live descendants, so an edit during the run (which forks a new leaf)
+ *  still shows the tags. Empty once the document has left the workspace. */
 export function classificationLabelTargetStubs(
   runFileId: string,
   stubs: ReadonlyArray<StirlingFileStub>,
@@ -560,19 +533,14 @@ export function classificationLabelTargetStubs(
   );
 }
 
-/** Attempts to read a completed run's labels before giving up, and the backoff
- *  between them (delay × attempt). The import effect only re-runs when the run
- *  store changes, so a transient read failure has to be retried HERE: bailing
- *  out would leave the run unsettled and the file's "running" pill spinning
- *  until unrelated policy activity happened to nudge the effect. */
+/** Label-read attempts and backoff. Retried HERE because the import effect only re-runs on
+ *  run-store changes, so bailing out would leave the file's "running" pill spinning. */
 const LABEL_READ_ATTEMPTS = 3;
 const LABEL_READ_RETRY_MS = 2000;
 
 /**
- * Read classification labels out of a completed run's output PDF. A 404 means
- * that output aged out, so it's skipped; any other failure is transient and
- * retried with backoff. Returns null when there are genuinely no labels to
- * apply (including a run with no outputs), so the caller can settle the run.
+ * Read labels from a completed run's output PDF: a 404 means it aged out and is skipped, other
+ * failures retry with backoff. Null means no labels to apply, so the caller settles the run.
  */
 async function readRunLabels(run: PolicyRunRecord): Promise<string[] | null> {
   for (let attempt = 0; attempt < LABEL_READ_ATTEMPTS; attempt++) {
@@ -593,21 +561,13 @@ async function readRunLabels(run: PolicyRunRecord): Promise<string[] | null> {
     // Every output was read (or had aged out): there are no labels to apply.
     if (!transientFailure) return null;
   }
-  // Out of attempts. Settle the run unlabelled rather than spin forever; the
-  // file keeps its classification badge, just without tags.
+  // Out of attempts: settle unlabelled rather than spin forever - the badge stays, tags don't.
   return null;
 }
 
 /**
- * Stamp `labels` onto the run's live descendants in place (workspace + storage)
- * — no versioned child, no history entry, only tags. Returns the tagged ids.
- *
- * Runs twice, because `resolveTargets` reads a rendered snapshot of the
- * workspace: a CONSUME_FILES that was dispatched but not yet rendered when the
- * first pass ran leaves its target already gone by the time UPDATE_FILE_RECORD
- * is processed, so that stamp no-ops and the labels would be silently lost. The
- * second pass sees the forked leaf and tags it. Each id is stamped at most once
- * across both passes, so the pass costs nothing when no consume raced.
+ * Stamp `labels` in place (workspace + storage) - tags only, no versioned child. Two passes
+ * because a consume racing the first would strand its target and lose the labels.
  */
 async function stampClassificationLabels(
   labels: string[],
@@ -618,10 +578,8 @@ async function stampClassificationLabels(
   const tagged = new Set<FileId>();
 
   for (let pass = 0; pass < 2; pass++) {
-    // Resolve and stamp the store in one synchronous block — no await between
-    // them, so a target can't be consumed in between. A consume AFTER the stamp
-    // is safe too: the CONSUME_FILES reducer carries classificationLabels onto
-    // the new leaf.
+    // Resolve and stamp synchronously so no consume lands in between; a consume after the
+    // stamp is safe, as the reducer carries the labels onto the new leaf.
     const fresh = resolveTargets().filter((s) => !tagged.has(s.id));
     for (const stub of fresh) {
       tagged.add(stub.id);
@@ -635,25 +593,20 @@ async function stampClassificationLabels(
     }
     if (mutated) ctx.bumpRevision();
 
-    // Yield a macrotask so React processes this pass's stamps (and any consume
-    // that raced them) before the next pass re-resolves.
+    // Yield a macrotask so React processes this pass's stamps before the next re-resolves.
     if (pass === 0) await new Promise((resolve) => setTimeout(resolve));
   }
   return Array.from(tagged);
 }
 
-/**
- * Deliver a classification run: read its labels and tag the live document with
- * them. Metadata-only — nothing is versioned.
- */
+/** Deliver a classification run: read its labels and tag the live document. Nothing is versioned. */
 async function importClassificationLabels(
   run: PolicyRunRecord,
   resolveTargets: () => StirlingFileStub[],
   ctx: ClassificationImportContext,
 ): Promise<void> {
   if (resolveTargets().length === 0) {
-    // The document left the workspace (closed, or a server-reconciled run with
-    // no local input link) — nothing to tag.
+    // The document left the workspace - nothing to tag.
     updateRun(run.runId, { imported: true });
     return;
   }
@@ -662,9 +615,8 @@ async function importClassificationLabels(
     labels && labels.length > 0
       ? await stampClassificationLabels(labels, resolveTargets, ctx)
       : [];
-  // Settle either way so it stops re-importing. outputFileIds are the TAGGED
-  // workspace files (no forked version), so their policy badge persists. Safe
-  // to chain-key on: classification is always last, so nothing chains off it.
+  // Settle either way so it stops re-importing. outputFileIds are the TAGGED files, so their
+  // badge persists; safe to chain-key on, as classification is always last.
   updateRun(run.runId, {
     imported: true,
     importedFileIds: run.outputs.map((o) => o.fileId),
@@ -673,16 +625,8 @@ async function importClassificationLabels(
 }
 
 /**
- * Fetch a completed run's not-yet-imported output files and deliver them to the
- * workspace. Per-output, via allSettled: each output is tracked once delivered,
- * so a partial failure retries only the missing files on a later tick and the
- * ones that succeeded are never added twice. `imported` flips true only once
- * every output has landed.
- *
- * Delivery honours the policy's output mode: "new_version" replaces the input
- * file with a versioned child (its history chain), "new_file" adds the output
- * as a standalone file. Versioning falls back to a new file if the input is
- * gone (no parent stub).
+ * Deliver a run's outputs per-output, so a partial failure retries only the missing files and
+ * successes are never added twice. Honours the output mode; versioning needs the parent stub.
  */
 async function importOutputs(
   run: PolicyRunRecord,
@@ -695,9 +639,8 @@ async function importOutputs(
     return;
   }
 
-  // Keep the input's original filename unless a rename rule is set — without a
-  // rule the backend's auto-suffixed name (e.g. "_watermarked_sanitized") would
-  // otherwise rename every output.
+  // Keep the input's filename unless a rename rule is set, else the backend's auto-suffixed
+  // name renames every output.
   const targetName = ctx.outputName
     ? applyOutputName(
         run.fileName,
@@ -941,7 +884,9 @@ async function runPolicyOnFile(
   await acquireDispatchSlot(priority);
   try {
     const target = resolvePolicyRunTarget();
-    const runId = await runStoredPolicy(backendId, [file]);
+    // Recorded against a document this browser can resolve. One file per run, which is the only
+    // shape the server keeps a reference for.
+    const runId = await runStoredPolicy(backendId, [file], fileId);
     // recordRunStart marks this (policy, file) dispatched as it records the run.
     recordRunStart({
       runId,
diff --git a/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx b/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx
index 2e02db3068..9ba0b6438d 100644
--- a/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx
+++ b/frontend/editor/src/proprietary/components/shared/AppSwitcher.tsx
@@ -1,15 +1,21 @@
-import { useNavigate } from "react-router-dom";
-import { useAuth } from "@app/auth/context";
 import { Logo } from "@app/ui/Logo";
 import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
 import { type AppSwitcherProps } from "@core/components/shared/AppSwitcher";
-import { PORTAL_BASENAME } from "@app/routes/portalBasename";
+import { useOtherAppSwitch } from "@app/hooks/useOtherAppSwitch";
 
+/**
+ * Sidebar brand header for builds that ship the processor. When this user can
+ * open it, the Stirling logo doubles as the editor⇄processor switcher: the mark
+ * morphs into a chevron and opens the switch menu (the same BrandSwitcher the
+ * processor sidebar uses). Users without access get a plain logo.
+ *
+ * The access gate lives in {@link useOtherAppSwitch} so this header and the
+ * sidebar footer's "Open PDF Processor" row are driven by one answer.
+ */
 export function AppSwitcher({ collapsed }: AppSwitcherProps) {
-  const { portalAccess } = useAuth();
-  const navigate = useNavigate();
+  const otherApp = useOtherAppSwitch();
 
-  if (!portalAccess) {
+  if (!otherApp) {
     return (
       <Logo
         variant={collapsed ? "iconOnly" : "iconAndText"}
@@ -22,7 +28,7 @@ export function AppSwitcher({ collapsed }: AppSwitcherProps) {
   return (
     <BrandSwitcher
       current="editor"
-      onSwitch={() => navigate(PORTAL_BASENAME)}
+      onSwitch={otherApp.onOpen}
       collapsed={collapsed}
     />
   );
diff --git a/frontend/editor/src/proprietary/components/shared/ChangeUserPasswordModal.tsx b/frontend/editor/src/proprietary/components/shared/ChangeUserPasswordModal.tsx
index 89d648fcc5..a482b3fab1 100644
--- a/frontend/editor/src/proprietary/components/shared/ChangeUserPasswordModal.tsx
+++ b/frontend/editor/src/proprietary/components/shared/ChangeUserPasswordModal.tsx
@@ -38,7 +38,7 @@ function generateSecurePassword() {
   const uint8Array = new Uint8Array(length);
   window.crypto.getRandomValues(uint8Array);
   // To avoid modulo bias, discard values >= 256 - (256 % charsetLength)
-  for (let i = 0; password.length < length; ) {
+  for (let i = 0; password.length < length;) {
     const randomByte = uint8Array[i];
     i++;
     if (randomByte >= Math.floor(256 / charsetLength) * charsetLength) {
diff --git a/frontend/editor/src/proprietary/components/shared/UpgradeBanner.tsx b/frontend/editor/src/proprietary/components/shared/UpgradeBanner.tsx
index c3b5ae0307..365c64a030 100644
--- a/frontend/editor/src/proprietary/components/shared/UpgradeBanner.tsx
+++ b/frontend/editor/src/proprietary/components/shared/UpgradeBanner.tsx
@@ -3,7 +3,7 @@ import { useTranslation } from "react-i18next";
 import { useNavigate, useLocation } from "react-router-dom";
 import { isAuthRoute } from "@core/constants/routes";
 import { useCheckout } from "@app/contexts/CheckoutContext";
-import { InfoBanner } from "@app/components/shared/InfoBanner";
+import { AppBanner } from "@app/components/shared/AppBanner";
 import {
   SERVER_LICENSE_REQUEST_EVENT,
   type ServerLicenseRequestPayload,
@@ -300,7 +300,7 @@ const UpgradeBanner: React.FC = () => {
         );
 
     return (
-      <InfoBanner
+      <AppBanner
         icon="warning-rounded"
         tone="warning"
         title={t(
@@ -312,13 +312,6 @@ const UpgradeBanner: React.FC = () => {
         buttonIcon="info-rounded"
         onButtonClick={buttonText ? handleSeeInfo : undefined}
         dismissible={false}
-        minHeight={60}
-        background="#FFF4E6"
-        borderColor="var(--mantine-color-orange-7)"
-        textColor="#9A3412"
-        iconColor="#EA580C"
-        buttonVariant="filled"
-        buttonColor="orange.7"
       />
     );
   };
@@ -341,7 +334,7 @@ const UpgradeBanner: React.FC = () => {
   return (
     <>
       {friendlyVisible && (
-        <InfoBanner
+        <AppBanner
           icon="stars-rounded"
           title={t("upgradeBanner.title", "Upgrade to Server Plan")}
           message={t(
@@ -353,14 +346,7 @@ const UpgradeBanner: React.FC = () => {
           onButtonClick={handleUpgrade}
           onDismiss={handleFriendlyDismiss}
           show={friendlyVisible}
-          background="linear-gradient(135deg, #667eea 0%, #764ba2 100%)"
-          borderColor="transparent"
-          textColor="#fff"
-          iconColor="#fff"
-          closeIconColor="#fff"
-          buttonVariant="filled"
-          buttonColor="blue"
-          minHeight={48}
+          tone="promo"
           compact
         />
       )}
diff --git a/frontend/editor/src/proprietary/components/shared/config/LoginLandingSetting.tsx b/frontend/editor/src/proprietary/components/shared/config/LoginLandingSetting.tsx
index 1b20297eec..3ff1aebf64 100644
--- a/frontend/editor/src/proprietary/components/shared/config/LoginLandingSetting.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/LoginLandingSetting.tsx
@@ -42,6 +42,7 @@ export function LoginLandingSetting() {
   return (
     <Paper withBorder p="md" radius="md">
       <div
+        id="setting-login-landing"
         style={{
           display: "flex",
           alignItems: "center",
diff --git a/frontend/editor/src/proprietary/components/shared/config/configNavSections.tsx b/frontend/editor/src/proprietary/components/shared/config/configNavSections.tsx
index 34effc2df9..618f1e10b7 100644
--- a/frontend/editor/src/proprietary/components/shared/config/configNavSections.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/configNavSections.tsx
@@ -57,7 +57,7 @@ export const useConfigNavSections = (
   if (preferencesSection) {
     preferencesSection.items = preferencesSection.items.map((item) =>
       item.key === "general"
-        ? { ...item, component: <GeneralWithLoginLanding /> }
+        ? { ...item, component: <GeneralWithLoginLanding hideTitle /> }
         : item,
     );
 
diff --git a/frontend/editor/src/proprietary/components/shared/config/configSections/AdminPlanSection.tsx b/frontend/editor/src/proprietary/components/shared/config/configSections/AdminPlanSection.tsx
index f683861e8d..c69040f0e7 100644
--- a/frontend/editor/src/proprietary/components/shared/config/configSections/AdminPlanSection.tsx
+++ b/frontend/editor/src/proprietary/components/shared/config/configSections/AdminPlanSection.tsx
@@ -12,7 +12,7 @@ import AvailablePlansSection from "@app/components/shared/config/configSections/
 import StaticPlanSection from "@app/components/shared/config/configSections/plan/StaticPlanSection";
 import LicenseKeySection from "@app/components/shared/config/configSections/plan/LicenseKeySection";
 import { alert } from "@app/components/toast";
-import { InfoBanner } from "@app/components/shared/InfoBanner";
+import { AppBanner } from "@app/components/shared/AppBanner";
 import { useLicenseAlert } from "@app/hooks/useLicenseAlert";
 import {
   getPreferredCurrency,
@@ -200,7 +200,7 @@ const AdminPlanSection: React.FC = () => {
       <LoginRequiredBanner show={!loginEnabled} />
 
       {shouldShowLicenseWarning && (
-        <InfoBanner
+        <AppBanner
           icon="warning-rounded"
           tone="warning"
           title={t(
@@ -215,13 +215,6 @@ const AdminPlanSection: React.FC = () => {
           buttonIcon="upgrade-rounded"
           onButtonClick={scrollToPlans}
           dismissible={false}
-          minHeight={68}
-          background="#FFF4E6"
-          borderColor="var(--mantine-color-orange-7)"
-          textColor="#9A3412"
-          iconColor="#EA580C"
-          buttonVariant="filled"
-          buttonColor="orange.7"
         />
       )}
 
diff --git a/frontend/editor/src/proprietary/components/viewer/Viewer.tsx b/frontend/editor/src/proprietary/components/viewer/Viewer.tsx
index 1f04ea22ca..d5a2e7537d 100644
--- a/frontend/editor/src/proprietary/components/viewer/Viewer.tsx
+++ b/frontend/editor/src/proprietary/components/viewer/Viewer.tsx
@@ -8,7 +8,7 @@ import {
   usePolicyRuns,
   type PolicyRunRecord,
 } from "@app/components/policies/policyRunStore";
-import { isClassificationCategory } from "@app/data/policyCategories";
+import { isClassificationCategory } from "@app/data/classificationPolicy";
 import { PolicyEnforcementOverlay } from "@app/components/viewer/PolicyEnforcementOverlay";
 
 type SignatureOverlayPassThrough = Pick<
diff --git a/frontend/editor/src/proprietary/data/classificationPolicy.test.ts b/frontend/editor/src/proprietary/data/classificationPolicy.test.ts
new file mode 100644
index 0000000000..d3cb55c043
--- /dev/null
+++ b/frontend/editor/src/proprietary/data/classificationPolicy.test.ts
@@ -0,0 +1,91 @@
+import { describe, it, expect } from "vitest";
+import {
+  isClassificationCategory,
+  orderRewritesFirst,
+  policyDeliversOutputFiles,
+  policyRequiresAiEngine,
+  policyRewritesDocument,
+  shouldDispatchToAi,
+} from "@app/data/classificationPolicy";
+import type { StirlingFileStub } from "@app/types/fileContext";
+
+const stub = (
+  confidence?: StirlingFileStub["classificationConfidence"],
+): StirlingFileStub =>
+  ({ classificationConfidence: confidence }) as StirlingFileStub;
+
+describe("isClassificationCategory", () => {
+  it("recognises the classification category and nothing else", () => {
+    expect(isClassificationCategory("classification")).toBe(true);
+    expect(isClassificationCategory("security")).toBe(false);
+    expect(isClassificationCategory("")).toBe(false);
+  });
+});
+
+describe("policy capabilities", () => {
+  it("treats classification as annotating, everything else as rewriting", () => {
+    expect(policyRewritesDocument("security")).toBe(true);
+    expect(policyRewritesDocument("classification")).toBe(false);
+    // A builder pipeline (no catalogue category) runs tools, so it rewrites.
+    expect(policyRewritesDocument("pipeline-abc123")).toBe(true);
+  });
+
+  it("expects output files from rewriting policies only", () => {
+    expect(policyDeliversOutputFiles("security")).toBe(true);
+    expect(policyDeliversOutputFiles("classification")).toBe(false);
+  });
+
+  it("marks classification as the AI-escalation policy", () => {
+    expect(policyRequiresAiEngine("classification")).toBe(true);
+    expect(policyRequiresAiEngine("security")).toBe(false);
+  });
+});
+
+describe("orderRewritesFirst", () => {
+  it("moves annotating policies to the end, preserving other order", () => {
+    expect(
+      orderRewritesFirst(["classification", "security", "compliance"]),
+    ).toEqual(["security", "compliance", "classification"]);
+  });
+
+  it("leaves an order without an annotating policy untouched", () => {
+    expect(orderRewritesFirst(["security", "compliance"])).toEqual([
+      "security",
+      "compliance",
+    ]);
+  });
+
+  it("is a no-op when the annotating policy is already last", () => {
+    expect(orderRewritesFirst(["security", "classification"])).toEqual([
+      "security",
+      "classification",
+    ]);
+  });
+
+  it("handles the annotating policy as the only one", () => {
+    expect(orderRewritesFirst(["classification"])).toEqual(["classification"]);
+  });
+});
+
+describe("shouldDispatchToAi", () => {
+  it("always dispatches a policy that is not classification", () => {
+    expect(shouldDispatchToAi("security", stub())).toBe(true);
+    expect(shouldDispatchToAi("security", stub("high"))).toBe(true);
+  });
+
+  it("holds back until the local heuristic has reported", () => {
+    // Not a skip: dispatching now races the local pass and pays for a free answer;
+    // the caller re-evaluates once the verdict lands.
+    expect(shouldDispatchToAi("classification", stub())).toBe(false);
+  });
+
+  it("lets a confident local verdict stand", () => {
+    expect(shouldDispatchToAi("classification", stub("high"))).toBe(false);
+  });
+
+  it("escalates anything less than confident", () => {
+    expect(shouldDispatchToAi("classification", stub("medium"))).toBe(true);
+    expect(shouldDispatchToAi("classification", stub("low"))).toBe(true);
+    expect(shouldDispatchToAi("classification", stub("none"))).toBe(true);
+  });
+});
diff --git a/frontend/editor/src/proprietary/data/classificationPolicy.ts b/frontend/editor/src/proprietary/data/classificationPolicy.ts
new file mode 100644
index 0000000000..4327b40d39
--- /dev/null
+++ b/frontend/editor/src/proprietary/data/classificationPolicy.ts
@@ -0,0 +1,69 @@
+/**
+ * Everything specific to the built-in Classification policy, in one module. The generic policy
+ * runner asks the capability questions below instead of naming classification itself, so a second
+ * annotating policy needs a change here rather than in the runner.
+ *
+ * These are still keyed on the category id rather than a property each policy declares. That is
+ * deliberate for now: policies are becoming pipelines with labels behind a separate enforcement
+ * layer, which removes the category concept these would be declared against. Classification also
+ * stays genuinely privileged - it is the only policy with a browser-side implementation, so it can
+ * answer without the server. Ordering and output shape belong in that rework (an in-place output
+ * mode, and a run result that can carry findings as well as files), not in a flag added here first.
+ */
+
+import type {
+  ClassificationConfidence,
+  StirlingFileStub,
+} from "@app/types/fileContext";
+
+/** Catalogue category id of the built-in Classification policy. */
+export const CLASSIFICATION_CATEGORY_ID = "classification";
+
+export function isClassificationCategory(categoryId: string): boolean {
+  return categoryId === CLASSIFICATION_CATEGORY_ID;
+}
+
+/**
+ * Whether the policy rewrites the document rather than only annotating it. Annotating policies are
+ * ordered last: a rewriting one after them would fork from the pre-annotation version.
+ */
+export function policyRewritesDocument(categoryId: string): boolean {
+  return !isClassificationCategory(categoryId);
+}
+
+/** Whether a completed run is expected to deliver output files (annotators deliver labels). */
+export function policyDeliversOutputFiles(categoryId: string): boolean {
+  return policyRewritesDocument(categoryId);
+}
+
+/** Whether the policy's server-side run exists only to escalate to the AI engine. */
+export function policyRequiresAiEngine(categoryId: string): boolean {
+  return isClassificationCategory(categoryId);
+}
+
+/** Order annotating policies last; everything else keeps the order it was given. */
+export function orderRewritesFirst(categoryIds: string[]): string[] {
+  return [
+    ...categoryIds.filter(policyRewritesDocument),
+    ...categoryIds.filter((id) => !policyRewritesDocument(id)),
+  ];
+}
+
+/**
+ * The one heuristic verdict trusted to stand on its own; anything less escalates to the AI, which
+ * overwrites it. Deliberately strict - a wrong label costs more than an engine call.
+ */
+const TRUSTED_CONFIDENCE: ClassificationConfidence = "high";
+
+/**
+ * Whether the AI classifier should be asked about this file. Only once the heuristic has reported:
+ * dispatching before then races the first pass and bills for an answer it was about to produce.
+ */
+export function shouldDispatchToAi(
+  categoryId: string,
+  stub: StirlingFileStub,
+): boolean {
+  if (!isClassificationCategory(categoryId)) return true;
+  const confidence = stub.classificationConfidence;
+  return confidence != null && confidence !== TRUSTED_CONFIDENCE;
+}
diff --git a/frontend/editor/src/proprietary/data/policyCategories.test.ts b/frontend/editor/src/proprietary/data/policyCategories.test.ts
deleted file mode 100644
index 4b4fca2b7e..0000000000
--- a/frontend/editor/src/proprietary/data/policyCategories.test.ts
+++ /dev/null
@@ -1,41 +0,0 @@
-import { describe, it, expect } from "vitest";
-import {
-  isClassificationCategory,
-  pinClassificationLast,
-} from "@app/data/policyCategories";
-
-describe("isClassificationCategory", () => {
-  it("recognises the classification category and nothing else", () => {
-    expect(isClassificationCategory("classification")).toBe(true);
-    expect(isClassificationCategory("security")).toBe(false);
-    expect(isClassificationCategory("")).toBe(false);
-  });
-});
-
-describe("pinClassificationLast", () => {
-  it("moves classification to the end, preserving other order", () => {
-    expect(
-      pinClassificationLast(["classification", "security", "compliance"]),
-    ).toEqual(["security", "compliance", "classification"]);
-  });
-
-  it("leaves an order without classification untouched", () => {
-    expect(pinClassificationLast(["security", "compliance"])).toEqual([
-      "security",
-      "compliance",
-    ]);
-  });
-
-  it("is a no-op when classification is already last", () => {
-    expect(pinClassificationLast(["security", "classification"])).toEqual([
-      "security",
-      "classification",
-    ]);
-  });
-
-  it("handles classification as the only policy", () => {
-    expect(pinClassificationLast(["classification"])).toEqual([
-      "classification",
-    ]);
-  });
-});
diff --git a/frontend/editor/src/proprietary/data/policyCategories.ts b/frontend/editor/src/proprietary/data/policyCategories.ts
deleted file mode 100644
index 820a93366b..0000000000
--- a/frontend/editor/src/proprietary/data/policyCategories.ts
+++ /dev/null
@@ -1,21 +0,0 @@
-/** The classification policy's catalog category id. */
-export const CLASSIFICATION_CATEGORY_ID = "classification";
-
-/**
- * Classification is metadata-only: it runs async (never blocks), never forks a
- * version, and always runs last. This predicate gates that special handling.
- */
-export function isClassificationCategory(categoryId: string): boolean {
-  return categoryId === CLASSIFICATION_CATEGORY_ID;
-}
-
-/**
- * Move classification to the end of an execution order (others keep their order),
- * so a persisted/displayed order can't place it anywhere but last.
- */
-export function pinClassificationLast(orderedCategoryIds: string[]): string[] {
-  return [
-    ...orderedCategoryIds.filter((id) => !isClassificationCategory(id)),
-    ...orderedCategoryIds.filter((id) => isClassificationCategory(id)),
-  ];
-}
diff --git a/frontend/editor/src/proprietary/hooks/useOtherAppSwitch.ts b/frontend/editor/src/proprietary/hooks/useOtherAppSwitch.ts
new file mode 100644
index 0000000000..8bf07b5c2f
--- /dev/null
+++ b/frontend/editor/src/proprietary/hooks/useOtherAppSwitch.ts
@@ -0,0 +1,15 @@
+import { useNavigate } from "react-router-dom";
+import { useAuth } from "@app/auth/context";
+import { PORTAL_BASENAME } from "@app/routes/portalBasename";
+import { type NavFooterAppLink } from "@app/components/shared/navFooter/NavFooter";
+
+/**
+ * Self-hosted: the Spring session carries `portalAccess`, so the switch to the
+ * processor is offered exactly when that flag is set.
+ */
+export function useOtherAppSwitch(): NavFooterAppLink | null {
+  const { portalAccess } = useAuth();
+  const navigate = useNavigate();
+  if (!portalAccess) return null;
+  return { app: "processor", onOpen: () => navigate(PORTAL_BASENAME) };
+}
diff --git a/frontend/editor/src/proprietary/hooks/usePolicies.ts b/frontend/editor/src/proprietary/hooks/usePolicies.ts
index 389f98cd65..382a7f9222 100644
--- a/frontend/editor/src/proprietary/hooks/usePolicies.ts
+++ b/frontend/editor/src/proprietary/hooks/usePolicies.ts
@@ -35,7 +35,7 @@ import {
   removePolicy,
 } from "@app/services/policyBackend";
 import { reorderPolicies as reorderBackendPolicies } from "@app/services/policyApi";
-import { pinClassificationLast } from "@app/data/policyCategories";
+import { orderRewritesFirst } from "@app/data/classificationPolicy";
 import type { PolicyToStore } from "@app/services/policyPipeline";
 import type {
   PoliciesByCategory,
@@ -327,9 +327,9 @@ export function usePolicies() {
    * first for an instant re-render; the next reconcile re-reads the server order.
    */
   const reorderPolicies = useCallback((orderedCategoryIds: string[]) => {
-    // Pin classification last so the persisted/server order matches execution
-    // (it always runs last — see usePolicyAutoRun).
-    const ordered = pinClassificationLast(orderedCategoryIds);
+    // Annotating policies last, so the persisted order matches execution order
+    // (see usePolicyAutoRun).
+    const ordered = orderRewritesFirst(orderedCategoryIds);
     persistPolicyOrder(ordered);
     const current = loadPolicies();
     const backendIds = ordered
diff --git a/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts b/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts
index 52779b9cf8..85b2249cbb 100644
--- a/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts
+++ b/frontend/editor/src/proprietary/hooks/usePolicyFileBadges.ts
@@ -4,7 +4,7 @@ import type { PolicyRunRecord } from "@app/components/policies/policyRunStore";
 import { useAllFiles } from "@app/contexts/FileContext";
 import { loadPolicyCatalog } from "@app/services/policyCatalog";
 import { policyAccentVar } from "@app/components/policies/policyStatus";
-import { isClassificationCategory } from "@app/data/policyCategories";
+import { isClassificationCategory } from "@app/data/classificationPolicy";
 import type { FileItemPolicyRef } from "@app/components/shared/PolicyBadges";
 
 /** Minimal provenance shape needed to resolve a file's inherited badges. */
diff --git a/frontend/editor/src/proprietary/services/heuristic/types.ts b/frontend/editor/src/proprietary/services/heuristic/types.ts
index fbd8128ba4..5170feccd5 100644
--- a/frontend/editor/src/proprietary/services/heuristic/types.ts
+++ b/frontend/editor/src/proprietary/services/heuristic/types.ts
@@ -1,5 +1,7 @@
 // Shared types for the client-side heuristic (non-AI) document classifier.
 
+import type { ClassificationConfidence } from "@app/types/fileContext";
+
 /** Input document for the heuristic engine. */
 export interface HeuristicDoc {
   fileName: string;
@@ -11,7 +13,7 @@ export interface HeuristicDoc {
 }
 
 // "none" = no match or non-English; a real runtime value, not just a type state.
-export type HeuristicConfidence = "none" | "low" | "medium" | "high";
+export type HeuristicConfidence = ClassificationConfidence;
 
 /** One scored candidate label with the rule hits that produced its score (debug only). */
 export interface LabelScoreExplanation {
diff --git a/frontend/editor/src/proprietary/services/policyApi.test.ts b/frontend/editor/src/proprietary/services/policyApi.test.ts
new file mode 100644
index 0000000000..ae0b861e54
--- /dev/null
+++ b/frontend/editor/src/proprietary/services/policyApi.test.ts
@@ -0,0 +1,48 @@
+import { beforeEach, describe, expect, it, vi } from "vitest";
+
+/**
+ * Only the document reference is pinned, being the one field with a rule attached: a filename here
+ * would reach a table that deliberately has nowhere to keep one.
+ */
+
+const post = vi.fn().mockResolvedValue({ data: { jobId: "run-1" } });
+
+vi.mock("@app/services/apiClient", () => ({
+  default: { post: (...args: unknown[]) => post(...args) },
+}));
+
+const { runStoredPolicy } = await import("@app/services/policyApi");
+
+/** The multipart body the last call sent. */
+function sentForm(): FormData {
+  return post.mock.calls.at(-1)?.[1] as FormData;
+}
+
+const document = () =>
+  new File(["%PDF-1.7"], "quarterly-report.pdf", { type: "application/pdf" });
+
+describe("runStoredPolicy", () => {
+  beforeEach(() => {
+    post.mockClear();
+  });
+
+  it("sends the workspace id of the document it is running on", async () => {
+    await runStoredPolicy("policy-1", [document()], "editor-file-1");
+
+    expect(post.mock.calls.at(-1)?.[0]).toBe("/api/v1/policies/policy-1/run");
+    expect(sentForm().get("fileId")).toBe("editor-file-1");
+  });
+
+  it("sends no reference when the caller has none", async () => {
+    // The export path can enforce on bytes with no workspace document behind them.
+    await runStoredPolicy("policy-1", [document()]);
+
+    expect(sentForm().has("fileId")).toBe(false);
+  });
+
+  it("never sends the document's name as the reference", async () => {
+    await runStoredPolicy("policy-1", [document()], "editor-file-1");
+
+    expect(sentForm().get("fileId")).not.toContain("quarterly-report");
+  });
+});
diff --git a/frontend/editor/src/proprietary/services/policyApi.ts b/frontend/editor/src/proprietary/services/policyApi.ts
index b0d78f36f7..d93e51fa82 100644
--- a/frontend/editor/src/proprietary/services/policyApi.ts
+++ b/frontend/editor/src/proprietary/services/policyApi.ts
@@ -60,13 +60,18 @@ export async function reorderPolicies(orderedIds: string[]): Promise<void> {
   await apiClient.put("/api/v1/policies/order", orderedIds);
 }
 
-/** Run a stored policy by id on the supplied files; returns the run id. */
+/**
+ * Run a stored policy by id; returns the run id. `fileId` is this workspace's own opaque id, recorded
+ * against any failure of the run. Only honoured for a single-document run, and never a filename.
+ */
 export async function runStoredPolicy(
   id: string,
   files: File[],
+  fileId?: string,
 ): Promise<string> {
   const form = new FormData();
   for (const file of files) form.append("fileInput", file);
+  if (fileId) form.append("fileId", fileId);
   // Don't set Content-Type: the HTTP client must generate multipart/form-data
   // WITH its boundary from the FormData body. A manual boundary-less header makes
   // the server reject the request ("no multipart boundary parameter").
diff --git a/frontend/editor/src/proprietary/testing/serverExperienceSimulations.ts b/frontend/editor/src/proprietary/testing/serverExperienceSimulations.ts
index d92cf8fdf9..0519b9afb8 100644
--- a/frontend/editor/src/proprietary/testing/serverExperienceSimulations.ts
+++ b/frontend/editor/src/proprietary/testing/serverExperienceSimulations.ts
@@ -48,7 +48,7 @@ const FREE_LICENSE_INFO: LicenseInfo = {
 
 const BASE_NO_LOGIN_CONFIG: AppConfig = {
   enableAnalytics: true,
-  appVersion: "2.14.2",
+  appVersion: "2.14.3",
   serverCertificateEnabled: false,
   enableAlphaFunctionality: false,
   enableDesktopInstallSlide: true,
diff --git a/frontend/editor/src/proprietary/utils/scheduleIdle.ts b/frontend/editor/src/proprietary/utils/scheduleIdle.ts
index 8d3e5bec96..55d395b504 100644
--- a/frontend/editor/src/proprietary/utils/scheduleIdle.ts
+++ b/frontend/editor/src/proprietary/utils/scheduleIdle.ts
@@ -1,11 +1,10 @@
 // Idle-time scheduling shared by the classification/backfill passes.
 
-/** Schedule work for the browser's idle time (or soon after, as a fallback). */
+/**
+ * Schedule work for the browser's idle time. Main thread only: the entry-point
+ * shim guarantees `requestIdleCallback`, but not in worker scope.
+ */
 export function scheduleIdle(task: () => void): () => void {
-  if (typeof requestIdleCallback === "function") {
-    const handle = requestIdleCallback(task, { timeout: 2000 });
-    return () => cancelIdleCallback(handle);
-  }
-  const timer = window.setTimeout(task, 200);
-  return () => window.clearTimeout(timer);
+  const handle = requestIdleCallback(task, { timeout: 2000 });
+  return () => cancelIdleCallback(handle);
 }
diff --git a/frontend/editor/src/saas/components/shared/AppConfigModal.tsx b/frontend/editor/src/saas/components/shared/AppConfigModal.tsx
index cfd8aef1b4..ab93f734fb 100644
--- a/frontend/editor/src/saas/components/shared/AppConfigModal.tsx
+++ b/frontend/editor/src/saas/components/shared/AppConfigModal.tsx
@@ -1,13 +1,16 @@
 import React, { useCallback, useMemo, useState, useEffect } from "react";
-import { Modal, Text } from "@mantine/core";
+import { Group, Modal, Text } from "@mantine/core";
 import { Button } from "@app/ui/Button";
 import { ActionIcon } from "@app/ui/ActionIcon";
-import { useMediaQuery } from "@mantine/hooks";
+import { useIsMobile } from "@app/hooks/useIsMobile";
 import { useLocation } from "react-router-dom";
 import { useAuth } from "@app/auth/UseSession";
 import { isUserAnonymous } from "@app/auth/supabase";
 import { useTranslation } from "react-i18next";
 import LocalIcon from "@app/components/shared/LocalIcon";
+import { SettingsMobileBackButton } from "@app/components/shared/config/SettingsMobileBackButton";
+import { SettingsMobileNavHeader } from "@app/components/shared/config/SettingsMobileNavHeader";
+import { SettingsNavChevron } from "@app/components/shared/config/SettingsNavChevron";
 import Overview from "@app/components/shared/config/configSections/Overview";
 import { createSaasConfigNavSections } from "@app/components/shared/config/saasConfigNavSections";
 import { consumePendingSettingsNav } from "@app/utils/appSettings";
@@ -46,12 +49,13 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
   extraSections,
   hiddenSectionKeys,
 }) => {
-  const isMobile = useMediaQuery("(max-width: 1024px)");
+  const isMobile = useIsMobile();
 
   const { signOut, user } = useAuth();
   const { t } = useTranslation();
   const [confirmOpen, setConfirmOpen] = useState(false);
   const [active, setActive] = useState<NavKey>("overview");
+  const [mobilePane, setMobilePane] = useState<"nav" | "content">("nav");
   const [notice, setNotice] = useState<string | null>(null);
   const location = useLocation();
 
@@ -60,7 +64,10 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
   // Consume any section stashed by openAppSettings on mount to land on it.
   useEffect(() => {
     const pending = consumePendingSettingsNav();
-    if (pending) setActive(pending);
+    if (pending) {
+      setActive(pending);
+      setMobilePane("content");
+    }
   }, []);
 
   // Check if user can access billing features (non-anonymous users only)
@@ -70,6 +77,7 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
       const detail = (ev as CustomEvent).detail as { key?: NavKey } | undefined;
       if (detail?.key) {
         setActive(detail.key);
+        setMobilePane("content");
       }
     };
     window.addEventListener("appConfig:navigate", handler as EventListener);
@@ -90,6 +98,7 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
     if (!opened) return;
     if (initialSection) {
       setActive(initialSection);
+      setMobilePane("content");
       return;
     }
     const match = stripBasePath(location.pathname).match(
@@ -97,6 +106,9 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
     );
     if (match) {
       setActive(match[1] as NavKey);
+      setMobilePane("content");
+    } else {
+      setMobilePane("nav");
     }
   }, [opened, initialSection, location.pathname]);
 
@@ -225,34 +237,43 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
             className={`modal-nav ${isMobile ? "mobile" : ""}`}
             style={{
               background: colors.navBg,
-              borderRight: `1px solid ${colors.headerBorder}`,
+              ...(isMobile
+                ? { display: mobilePane === "nav" ? undefined : "none" }
+                : { borderRight: `1px solid ${colors.headerBorder}` }),
             }}
           >
+            <SettingsMobileNavHeader
+              show={isMobile}
+              onClose={onClose}
+              background={colors.navBg}
+              borderColor={colors.headerBorder}
+            />
             <div className="modal-nav-scroll">
               {configNavSections.map((section) => (
                 <div key={section.title} className="modal-nav-section">
-                  {!isMobile && (
-                    <Text
-                      size="xs"
-                      fw={600}
-                      c={colors.sectionTitle}
-                      style={{ textTransform: "uppercase", letterSpacing: 0.4 }}
-                    >
-                      {section.title}
-                    </Text>
-                  )}
+                  <Text
+                    size="xs"
+                    fw={600}
+                    c={colors.sectionTitle}
+                    style={{ textTransform: "uppercase", letterSpacing: 0.4 }}
+                  >
+                    {section.title}
+                  </Text>
                   <div className="modal-nav-section-items">
                     {section.items.map((item) => {
                       const isActive = active === item.key;
                       const color = isActive
                         ? colors.navItemActive
                         : colors.navItem;
-                      const iconSize = isMobile ? 28 : 18;
+                      const iconSize = 18;
                       return (
                         <div
                           key={item.key}
                           data-tour={`admin-${item.key}-nav`}
-                          onClick={() => setActive(item.key)}
+                          onClick={() => {
+                            setActive(item.key);
+                            setMobilePane("content");
+                          }}
                           className={`modal-nav-item ${isMobile ? "mobile" : ""}`}
                           style={{
                             background: isActive
@@ -264,13 +285,17 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
                             icon={item.icon}
                             width={iconSize}
                             height={iconSize}
-                            style={{ color }}
+                            style={{ color, flexShrink: 0 }}
                           />
-                          {!isMobile && (
-                            <Text size="sm" fw={500} style={{ color }}>
-                              {item.label}
-                            </Text>
-                          )}
+                          <Text
+                            size="sm"
+                            fw={500}
+                            truncate
+                            style={{ color, minWidth: 0, flex: 1 }}
+                          >
+                            {item.label}
+                          </Text>
+                          <SettingsNavChevron show={isMobile} />
                         </div>
                       );
                     })}
@@ -281,7 +306,14 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
           </div>
 
           {/* Right content */}
-          <div className="modal-content">
+          <div
+            className="modal-content"
+            style={
+              isMobile && mobilePane !== "content"
+                ? { display: "none" }
+                : undefined
+            }
+          >
             <div className="modal-content-scroll">
               {/* Sticky header with section title and small close button */}
               <div
@@ -291,20 +323,26 @@ const AppConfigModal: React.FC<AppConfigModalProps> = ({
                   borderBottom: `1px solid ${colors.headerBorder}`,
                 }}
               >
-                <Text fw={700} size="lg">
-                  {activeLabel}
-                  {active === "plan" && notice ? (
-                    <span
-                      style={{
-                        marginLeft: 8,
-                        fontWeight: 600,
-                        color: "var(--mantine-color-yellow-7)",
-                      }}
-                    >
-                      – {notice}
-                    </span>
-                  ) : null}
-                </Text>
+                <Group gap="xs" wrap="nowrap" style={{ minWidth: 0 }}>
+                  <SettingsMobileBackButton
+                    show={isMobile}
+                    onClick={() => setMobilePane("nav")}
+                  />
+                  <Text fw={700} size="lg" truncate>
+                    {activeLabel}
+                    {active === "plan" && notice ? (
+                      <span
+                        style={{
+                          marginLeft: 8,
+                          fontWeight: 600,
+                          color: "var(--mantine-color-yellow-7)",
+                        }}
+                      >
+                        – {notice}
+                      </span>
+                    ) : null}
+                  </Text>
+                </Group>
                 <ActionIcon
                   variant="tertiary"
                   onClick={onClose}
diff --git a/frontend/editor/src/saas/components/shared/AppSwitcher.tsx b/frontend/editor/src/saas/components/shared/AppSwitcher.tsx
deleted file mode 100644
index 364f094478..0000000000
--- a/frontend/editor/src/saas/components/shared/AppSwitcher.tsx
+++ /dev/null
@@ -1,41 +0,0 @@
-import { useNavigate } from "react-router-dom";
-import { Logo } from "@app/ui/Logo";
-import { BrandSwitcher } from "@app/components/shared/BrandSwitcher";
-import { type AppSwitcherProps } from "@core/components/shared/AppSwitcher";
-import { usePortalAccess } from "@app/hooks/usePortalAccess";
-import { PORTAL_BASENAME } from "@app/routes/portalBasename";
-
-/**
- * SaaS sidebar brand header. When the backend says this user can open the
- * processor (`/api/v1/auth/me` → `portalAccess` — the exact signal the
- * processor's own gate uses), the Stirling logo doubles as the
- * editor⇄processor switcher: the mark morphs into a chevron and opens the
- * switch menu (same BrandSwitcher the processor sidebar uses). Users without
- * access get a plain logo.
- *
- * Deliberately NOT gated on the editor's Supabase auth context: that context
- * never fetches /me, so it can't know about portal access (and its session
- * state doesn't always mirror the backend login that actually grants it).
- */
-export function AppSwitcher({ collapsed }: AppSwitcherProps) {
-  const portalAccess = usePortalAccess();
-  const navigate = useNavigate();
-
-  if (!portalAccess) {
-    return (
-      <Logo
-        variant={collapsed ? "iconOnly" : "iconAndText"}
-        iconHeight="1.6rem"
-        textHeight="1.3rem"
-      />
-    );
-  }
-
-  return (
-    <BrandSwitcher
-      current="editor"
-      onSwitch={() => navigate(PORTAL_BASENAME)}
-      collapsed={collapsed}
-    />
-  );
-}
diff --git a/frontend/editor/src/saas/components/shared/config/configSections/Overview.tsx b/frontend/editor/src/saas/components/shared/config/configSections/Overview.tsx
index fac87148fe..3a28152425 100644
--- a/frontend/editor/src/saas/components/shared/config/configSections/Overview.tsx
+++ b/frontend/editor/src/saas/components/shared/config/configSections/Overview.tsx
@@ -1,7 +1,6 @@
 import React, { useState } from "react";
 import {
   Alert,
-  Avatar,
   Divider,
   Group,
   Image,
@@ -11,10 +10,12 @@ import {
   TextInput,
   Modal,
 } from "@mantine/core";
+import { Avatar } from "@app/ui/Avatar";
 import { Button as DSButton } from "@app/ui/Button";
 import { FilePicker } from "@app/ui/FilePicker";
 import { useTranslation } from "react-i18next";
 import { useAuth } from "@app/auth/UseSession";
+import { useAccountIdentity } from "@app/hooks/useAccountIdentity";
 import {
   isUserAnonymous,
   linkEmailIdentity,
@@ -46,6 +47,8 @@ const Overview: React.FC<OverviewProps> = ({ onLogoutClick }) => {
     refreshProfilePicture,
     refreshProfilePictureMetadata,
   } = useAuth();
+  // Same name + initials the sidebar footer draws, so the two discs agree.
+  const { displayName } = useAccountIdentity();
 
   const PROFILE_BUCKET = "profile-pictures";
 
@@ -67,7 +70,6 @@ const Overview: React.FC<OverviewProps> = ({ onLogoutClick }) => {
   const provider = profilePictureMetadata?.provider;
 
   const profilePath = user ? `${user.id}/avatar` : null;
-  const profileInitial = user?.email?.trim()?.charAt(0)?.toUpperCase() || "U";
 
   const handleProfileUpload = async (file: File | null) => {
     if (!file || !user || !profilePath) {
@@ -410,12 +412,9 @@ const Overview: React.FC<OverviewProps> = ({ onLogoutClick }) => {
           <Group align="center" gap="md">
             <Avatar
               src={profilePictureUrl || undefined}
-              radius="xl"
-              size={72}
-              color="blue"
-            >
-              {profileInitial}
-            </Avatar>
+              name={displayName}
+              size="xl"
+            />
             <div
               style={{
                 display: "flex",
@@ -450,12 +449,9 @@ const Overview: React.FC<OverviewProps> = ({ onLogoutClick }) => {
           <Group align="center" gap="md">
             <Avatar
               src={profilePictureUrl || undefined}
-              radius="xl"
-              size={72}
-              color="blue"
-            >
-              {profileInitial}
-            </Avatar>
+              name={displayName}
+              size="xl"
+            />
             <div
               style={{
                 display: "flex",
diff --git a/frontend/editor/src/saas/hooks/useOtherAppSwitch.ts b/frontend/editor/src/saas/hooks/useOtherAppSwitch.ts
new file mode 100644
index 0000000000..824e612bd8
--- /dev/null
+++ b/frontend/editor/src/saas/hooks/useOtherAppSwitch.ts
@@ -0,0 +1,16 @@
+import { useNavigate } from "react-router-dom";
+import { usePortalAccess } from "@app/hooks/usePortalAccess";
+import { PORTAL_BASENAME } from "@app/routes/portalBasename";
+import { type NavFooterAppLink } from "@app/components/shared/navFooter/NavFooter";
+
+/**
+ * SaaS: the editor's Supabase context never fetches /me, so processor access
+ * comes from the backend via {@link usePortalAccess} — the same signal the
+ * processor's own gate uses.
+ */
+export function useOtherAppSwitch(): NavFooterAppLink | null {
+  const portalAccess = usePortalAccess();
+  const navigate = useNavigate();
+  if (!portalAccess) return null;
+  return { app: "processor", onOpen: () => navigate(PORTAL_BASENAME) };
+}
diff --git a/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx b/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx
index a0e8ba618d..809138850a 100644
--- a/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx
+++ b/frontend/editor/src/saas/hooks/usePortalAccess.test.tsx
@@ -1,5 +1,7 @@
 import { describe, it, expect, vi, beforeEach } from "vitest";
-import { renderHook, waitFor } from "@testing-library/react";
+import { renderHook as baseRenderHook, waitFor } from "@testing-library/react";
+import { QueryClient, QueryClientProvider } from "@tanstack/react-query";
+import type { ReactNode } from "react";
 
 const get = vi.fn();
 let currentUserId: string | null = null;
@@ -20,10 +22,28 @@ function meReturning(portalAccess: boolean) {
   return { data: { user: { portalAccess } } };
 }
 
+// A fresh client per render, so one test's cached answer can't satisfy the
+// next — each case exercises a cold cache unless it deliberately shares one.
+let client: QueryClient;
+
+function renderHook<T>(cb: () => T) {
+  return baseRenderHook(cb, {
+    wrapper: ({ children }: { children: ReactNode }) => (
+      <QueryClientProvider client={client}>{children}</QueryClientProvider>
+    ),
+  });
+}
+
 describe("usePortalAccess", () => {
   beforeEach(() => {
+    // The hook now remembers the last answer across mounts, so without this a
+    // prior test's result seeds the next one.
+    localStorage.clear();
     get.mockReset();
     currentUserId = null;
+    client = new QueryClient({
+      defaultOptions: { queries: { retry: false, gcTime: 0, staleTime: 0 } },
+    });
   });
 
   it("reports the backend's answer for the signed-in user", async () => {
@@ -82,12 +102,31 @@ describe("usePortalAccess", () => {
     expect(first.result.current).toBe(false);
     first.unmount();
 
-    // The failure isn't sticky.
+    // The failure isn't sticky — a cold cache asks again.
+    client.clear();
     get.mockResolvedValue(meReturning(true));
     const second = renderHook(() => usePortalAccess());
     await waitFor(() => expect(second.result.current).toBe(true));
   });
 
+  it("shows the last known answer at first paint, then revalidates", async () => {
+    // What stops the switcher and the footer's "Open ..." row popping in a
+    // request late on every mount.
+    currentUserId = "admin-1";
+    get.mockResolvedValue(meReturning(true));
+    const first = renderHook(() => usePortalAccess());
+    await waitFor(() => expect(first.result.current).toBe(true));
+    first.unmount();
+
+    client.clear();
+    get.mockResolvedValue(meReturning(false));
+    const second = renderHook(() => usePortalAccess());
+    // Seeded from the remembered answer before the request lands...
+    expect(second.result.current).toBe(true);
+    // ...and corrected once the backend disagrees.
+    await waitFor(() => expect(second.result.current).toBe(false));
+  });
+
   it("ignores a response that lands after unmount", async () => {
     currentUserId = "admin-1";
     let resolveMe: (v: unknown) => void = () => {};
diff --git a/frontend/editor/src/saas/hooks/usePortalAccess.ts b/frontend/editor/src/saas/hooks/usePortalAccess.ts
index 442061cbe1..6e91f0864c 100644
--- a/frontend/editor/src/saas/hooks/usePortalAccess.ts
+++ b/frontend/editor/src/saas/hooks/usePortalAccess.ts
@@ -1,52 +1,64 @@
 import { useEffect, useState } from "react";
+import { useQuery } from "@tanstack/react-query";
 import apiClient from "@app/services/apiClient";
 import { useAuth } from "@app/auth/UseSession";
+import {
+  readCachedOtherApp,
+  writeCachedOtherApp,
+} from "@app/services/navFooterCache";
+import { qk } from "@app/query/keys";
+
+async function fetchPortalAccess(): Promise<boolean> {
+  const res = await apiClient.get<{ user?: { portalAccess?: boolean } }>(
+    "/api/v1/auth/me",
+  );
+  return res.data.user?.portalAccess === true;
+}
 
 /**
  * Whether the current user can open the processor (admin portal), straight
  * from the backend (`/api/v1/auth/me` → `portalAccess`) — the same signal the
  * processor's own SaasPortalGate uses. Components that must mirror processor
- * access (e.g. the sidebar's editor⇄processor switcher) ask here.
+ * access (the sidebar's editor⇄processor switcher and its footer row) ask here.
  *
  * The editor's Supabase auth context can't *answer* this — it never fetches
- * /me — so it is used only to identify who is asking. Keying the effect on
- * that identity is what keeps the answer per-user: the SPA can swap users
+ * /me — so it is used only to identify who is asking. That identity is the
+ * cache key, which is what keeps the answer per-user: the SPA can swap users
  * without a reload (Supabase fires SIGNED_OUT/SIGNED_IN in place; only the
- * settings Logout button hard-navigates), so any answer held beyond the
- * current identity would leak to whoever signs in next.
+ * settings Logout button hard-navigates), and a keyed cache addresses each
+ * identity separately rather than holding one answer that would have to be
+ * invalidated on the swap — the bug class this hook once had.
  *
- * Deliberately unmemoised beyond the mount: the one consumer (the sidebar
- * switcher) mounts once, so a cross-mount cache would only add user-scoped
- * state that has to be invalidated on identity change — the bug class this
- * hook already had once. Guests skip the request entirely.
+ * Cached through the app query client, so leaving the editor for the processor
+ * and coming back resolves from cache: the switcher is there on first paint
+ * instead of appearing a request later. Guests skip the request entirely.
  */
 export function usePortalAccess(): boolean {
   const { user } = useAuth();
   const userId = user?.id ?? null;
-  const [access, setAccess] = useState(false);
+  // The query cache is per-tree and per-load, so it can't help a cold start or
+  // the hop into the processor, which mounts its own client. Seed from the last
+  // answer this browser saw so the switcher and the footer's "Open ..." row are
+  // there at first paint. Marked ancient so it still revalidates immediately.
+  const [seed] = useState(readCachedOtherApp);
+
+  const { data, isSuccess } = useQuery({
+    queryKey: qk.portalAccess(userId),
+    queryFn: fetchPortalAccess,
+    // Signed out: nothing to ask, and any previous answer is void.
+    enabled: userId !== null,
+    // Backend unreachable or guest (401) means no access now; a later refetch
+    // asks again rather than trusting the failure.
+    retry: false,
+    initialData: seed,
+    initialDataUpdatedAt: 0,
+  });
 
   useEffect(() => {
-    // Signed out: nothing to ask, and any previous answer is void.
-    if (userId === null) {
-      setAccess(false);
-      return;
-    }
+    // Only a real answer is recorded — a failed probe is not one, so the next
+    // mount trusts the last backend response rather than a network blip.
+    if (isSuccess && data !== undefined) writeCachedOtherApp(data);
+  }, [isSuccess, data]);
 
-    let cancelled = false;
-    apiClient
-      .get<{ user?: { portalAccess?: boolean } }>("/api/v1/auth/me")
-      .then((res) => {
-        if (!cancelled) setAccess(res.data.user?.portalAccess === true);
-      })
-      .catch(() => {
-        // Backend unreachable or guest (401): no access now; a remount or
-        // identity change asks again rather than trusting a failure.
-        if (!cancelled) setAccess(false);
-      });
-    return () => {
-      cancelled = true;
-    };
-  }, [userId]);
-
-  return access;
+  return data === true;
 }
diff --git a/frontend/editor/src/saas/hooks/useWallet.poll.test.tsx b/frontend/editor/src/saas/hooks/useWallet.poll.test.tsx
new file mode 100644
index 0000000000..b72eac67f8
--- /dev/null
+++ b/frontend/editor/src/saas/hooks/useWallet.poll.test.tsx
@@ -0,0 +1,158 @@
+import { describe, it, expect, vi, beforeEach, afterEach } from "vitest";
+import { renderHook, act, waitFor } from "@testing-library/react";
+import { expectConsole } from "@app/tests/failOnConsole";
+
+const get = vi.fn();
+vi.mock("@app/services/apiClient", () => ({
+  default: { get: (...args: unknown[]) => get(...args) },
+}));
+vi.mock("@app/hooks/walletDevPreview", () => ({
+  getWalletDevPreview: () => null,
+}));
+vi.mock("@app/services/billing", () => ({ createPortalSession: vi.fn() }));
+vi.mock("@app/platform/openExternal", () => ({ openExternal: vi.fn() }));
+
+const { useWallet } = await import("@app/hooks/useWallet");
+
+/** Full enough for the hook's deep-compare, which reads every field. */
+function walletWith(freeRemaining: number) {
+  return {
+    data: {
+      teamId: 1,
+      status: "free",
+      role: "leader",
+      billingPeriodStart: "2026-08-01",
+      billingPeriodEnd: "2026-08-31",
+      billableUsed: 500 - freeRemaining,
+      billableLimit: 500,
+      freeAllowance: 500,
+      freeRemaining,
+      pricePerDocMinor: 2,
+      bundleRatePerCreditMinor: null,
+      currency: "usd",
+      estimatedBillMinor: 0,
+      capUsd: null,
+      noCap: false,
+      stripeSubscriptionId: null,
+      spendUnitsThisPeriod: 0,
+      docsProcessedThisPeriod: 0,
+      uniquePdfsThisPeriod: 0,
+      sizeMultiplierPdfsThisPeriod: 0,
+      billingMode: "metered",
+      prepaidUnitsRemaining: 0,
+      prepaidUnitsTotal: 0,
+      prepaidExpiresAt: null,
+      recent: [],
+      members: [],
+      categoryBreakdown: { api: 0, ai: 0, automation: 0 },
+      categoryDocs: { api: 0, ai: 0, automation: 0 },
+    },
+  };
+}
+
+describe("useWallet — keeping the figures fresh", () => {
+  beforeEach(() => {
+    vi.useFakeTimers({ shouldAdvanceTime: true });
+    get.mockReset();
+    get.mockResolvedValue(walletWith(500));
+  });
+  afterEach(() => vi.useRealTimers());
+
+  it("re-reads the wallet on the poll interval", async () => {
+    const { result } = renderHook(() => useWallet());
+    await waitFor(() => expect(result.current.wallet).not.toBeNull());
+    expect(get).toHaveBeenCalledTimes(1);
+
+    get.mockResolvedValue(walletWith(480));
+    await act(async () => {
+      vi.advanceTimersByTime(30_000);
+    });
+
+    await waitFor(() => expect(result.current.wallet?.freeRemaining).toBe(480));
+  });
+
+  it("polls silently, so consumers gating on loading/error don't flicker", async () => {
+    const { result } = renderHook(() => useWallet());
+    await waitFor(() => expect(result.current.wallet).not.toBeNull());
+
+    // A poll that fails must leave the last good snapshot, and must not raise
+    // `error` — Plan swaps a working page for an alert on that.
+    get.mockRejectedValue(new Error("network blip"));
+    await act(async () => {
+      vi.advanceTimersByTime(30_000);
+    });
+
+    expect(result.current.loading).toBe(false);
+    expect(result.current.error).toBeNull();
+    expect(result.current.wallet?.freeRemaining).toBe(500);
+  });
+
+  it("settles loading when a silent poll supersedes an in-flight visible load", async () => {
+    // The mount load raises `loading`; a poll firing before it lands cancels it.
+    // If clearing the flag were the silent load's to skip, both would decline
+    // and `loading` would stay true forever — which permanently suppresses the
+    // limit modals, since they do `if (loading || !wallet) return null`.
+    const visibility = vi.spyOn(document, "visibilityState", "get");
+    visibility.mockReturnValue("visible");
+
+    let landMount: (v: unknown) => void = () => {};
+    get.mockReturnValueOnce(
+      new Promise((resolve) => {
+        landMount = resolve;
+      }),
+    );
+    const { result } = renderHook(() => useWallet());
+    expect(result.current.loading).toBe(true);
+
+    get.mockResolvedValue(walletWith(470));
+    await act(async () => {
+      document.dispatchEvent(new Event("visibilitychange"));
+    });
+    await act(async () => {
+      landMount(walletWith(500));
+    });
+
+    await waitFor(() => expect(result.current.wallet?.freeRemaining).toBe(470));
+    expect(result.current.loading).toBe(false);
+    visibility.mockRestore();
+  });
+
+  it("clears a stale error once a silent poll succeeds", async () => {
+    // The visible mount load failing is meant to be logged; only the silent
+    // retries stay quiet.
+    expectConsole.warn(/\[useWallet\] fetch failed/);
+    get.mockRejectedValueOnce(new Error("network blip"));
+    const { result } = renderHook(() => useWallet());
+    await waitFor(() => expect(result.current.error).not.toBeNull());
+
+    get.mockResolvedValue(walletWith(500));
+    await act(async () => {
+      vi.advanceTimersByTime(30_000);
+    });
+
+    await waitFor(() => expect(result.current.error).toBeNull());
+    expect(result.current.wallet?.freeRemaining).toBe(500);
+  });
+
+  it("stops polling while the tab is hidden and re-reads on return", async () => {
+    const visibility = vi.spyOn(document, "visibilityState", "get");
+    visibility.mockReturnValue("visible");
+    const { result } = renderHook(() => useWallet());
+    await waitFor(() => expect(result.current.wallet).not.toBeNull());
+    const afterMount = get.mock.calls.length;
+
+    visibility.mockReturnValue("hidden");
+    await act(async () => {
+      document.dispatchEvent(new Event("visibilitychange"));
+      vi.advanceTimersByTime(120_000);
+    });
+    expect(get).toHaveBeenCalledTimes(afterMount);
+
+    visibility.mockReturnValue("visible");
+    await act(async () => {
+      document.dispatchEvent(new Event("visibilitychange"));
+    });
+    await waitFor(() => expect(get.mock.calls.length).toBe(afterMount + 1));
+    visibility.mockRestore();
+  });
+});
diff --git a/frontend/editor/src/saas/setupTests.ts b/frontend/editor/src/saas/setupTests.ts
index 2c5f53e271..3e8864e49e 100644
--- a/frontend/editor/src/saas/setupTests.ts
+++ b/frontend/editor/src/saas/setupTests.ts
@@ -2,6 +2,9 @@ import "@testing-library/jest-dom";
 import { vi } from "vitest";
 import { installFailOnConsole } from "@app/tests/failOnConsole";
 
+// The shims `src/index.tsx` installs - see core/setupTests.ts.
+import "@app/utils/engineShims";
+
 installFailOnConsole();
 
 // Mock localStorage for tests
diff --git a/frontend/editor/vite.config.ts b/frontend/editor/vite.config.ts
index 3dc3272d59..96ce29c480 100644
--- a/frontend/editor/vite.config.ts
+++ b/frontend/editor/vite.config.ts
@@ -335,6 +335,11 @@ export default defineConfig(async ({ mode, command }) => {
       compressStaticCopyPlugin(),
       prerenderOgPlugin(effectiveMode === "saas"),
     ],
+    // Worker bundles are a separate Rollup pass and do NOT inherit `plugins`,
+    // so without this `@app/*` resolves in the app and fails in a worker.
+    worker: {
+      plugins: () => [tsconfigPaths({ projects: [tsconfigProject] })],
+    },
     server: {
       host: true,
       allowedHosts: allowedHosts.length > 0 ? allowedHosts : undefined,
diff --git a/frontend/editor/vitest.config.ts b/frontend/editor/vitest.config.ts
index 5d7a00bccf..16d457bbd3 100644
--- a/frontend/editor/vitest.config.ts
+++ b/frontend/editor/vitest.config.ts
@@ -1,6 +1,11 @@
 import { defineConfig } from "vitest/config";
 import react from "@vitejs/plugin-react-swc";
 import tsconfigPaths from "vite-tsconfig-paths";
+
+// Projects do NOT inherit the root test.testTimeout, so every project silently
+// ran at vitest's 5s default. Spread this into each one instead.
+const TIMEOUTS = { testTimeout: 10000, hookTimeout: 10000 };
+
 export default defineConfig({
   test: {
     globals: true,
@@ -12,8 +17,7 @@ export default defineConfig({
       "src/**/*.spec.ts", // Exclude Playwright E2E tests
       "src/tests/test-fixtures/**",
     ],
-    testTimeout: 10000,
-    hookTimeout: 10000,
+    ...TIMEOUTS,
     coverage: {
       reporter: ["text", "json", "html"],
       exclude: [
@@ -30,6 +34,7 @@ export default defineConfig({
       {
         test: {
           name: "core",
+          ...TIMEOUTS,
           include: ["src/core/**/*.test.{ts,tsx}"],
           environment: "jsdom",
           globals: true,
@@ -48,6 +53,7 @@ export default defineConfig({
       {
         test: {
           name: "portal",
+          ...TIMEOUTS,
           include: ["src/portal/**/*.test.{ts,tsx}"],
           environment: "jsdom",
           globals: true,
@@ -68,6 +74,7 @@ export default defineConfig({
       {
         test: {
           name: "proprietary",
+          ...TIMEOUTS,
           include: ["src/proprietary/**/*.test.{ts,tsx}"],
           environment: "jsdom",
           globals: true,
@@ -86,6 +93,7 @@ export default defineConfig({
       {
         test: {
           name: "desktop",
+          ...TIMEOUTS,
           include: ["src/desktop/**/*.test.{ts,tsx}"],
           environment: "jsdom",
           globals: true,
@@ -104,6 +112,7 @@ export default defineConfig({
       {
         test: {
           name: "saas",
+          ...TIMEOUTS,
           // src/saas = editor-saas layer; src/portal-saas = the portal's saas
           // overrides (sibling to src/portal). Both build under the saas flavor,
           // so both resolve @portal via the saas cascade (tsconfig.saas.vite.json).
@@ -128,6 +137,7 @@ export default defineConfig({
       {
         test: {
           name: "prototypes",
+          ...TIMEOUTS,
           include: ["src/prototypes/**/*.test.{ts,tsx}"],
           environment: "jsdom",
           globals: true,
diff --git a/frontend/oxlint.config.ts b/frontend/oxlint.config.ts
index ac29c9b2bb..314bc3178e 100644
--- a/frontend/oxlint.config.ts
+++ b/frontend/oxlint.config.ts
@@ -74,15 +74,14 @@ const modernGlobals: OxlintGlobals = {
 
 // Folders not yet conformant to the stricter no-explicit-any rule
 const noExplicitAnyExcludes = [
-  "editor/src/core/components/shared/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/components/shared/FilePickerModal.tsx",
   "editor/src/core/components/shared/config/configSections/*.{js,mjs,jsx,ts,tsx}",
   "editor/src/core/components/tools/addStamp/*.{js,mjs,jsx,ts,tsx}",
-  "editor/src/core/components/tools/automate/*.{js,mjs,jsx,ts,tsx}",
   "editor/src/core/components/viewer/*.{js,mjs,jsx,ts,tsx}",
   "editor/src/core/contexts/*.{js,mjs,jsx,ts,tsx}",
-  "editor/src/core/contexts/viewer/*.{js,mjs,jsx,ts,tsx}",
   "editor/src/core/hooks/*.{js,mjs,jsx,ts,tsx}",
-  "editor/src/core/services/*.{js,mjs,jsx,ts,tsx}",
+  "editor/src/core/services/pdfProcessingService.ts",
+  "editor/src/core/services/zipFileService.ts",
   "editor/src/core/tools/annotate/useAnnotationSelection.ts",
   "editor/src/core/types/*.{js,mjs,jsx,ts,tsx}",
   "editor/src/core/utils/*.{js,mjs,jsx,ts,tsx}",
diff --git a/frontend/package-lock.json b/frontend/package-lock.json
index c7ce36f314..6ade3d2a28 100644
--- a/frontend/package-lock.json
+++ b/frontend/package-lock.json
@@ -10,31 +10,31 @@
       "license": "SEE LICENSE IN https://raw.githubusercontent.com/Stirling-Tools/Stirling-PDF/refs/heads/main/proprietary/LICENSE",
       "dependencies": {
         "@atlaskit/pragmatic-drag-and-drop": "^1.7.7",
-        "@cantoo/pdf-lib": "^2.5.3",
+        "@cantoo/pdf-lib": "^2.8.2",
         "@dnd-kit/core": "^6.3.1",
-        "@embedpdf/core": "^2.14.4",
+        "@embedpdf/core": "^2.15.0",
         "@embedpdf/engines": "^2.14.4",
-        "@embedpdf/models": "^2.14.4",
-        "@embedpdf/plugin-annotation": "^2.14.4",
-        "@embedpdf/plugin-attachment": "^2.14.4",
-        "@embedpdf/plugin-bookmark": "^2.14.4",
-        "@embedpdf/plugin-document-manager": "^2.14.4",
-        "@embedpdf/plugin-export": "^2.14.4",
-        "@embedpdf/plugin-history": "^2.14.4",
-        "@embedpdf/plugin-interaction-manager": "^2.14.4",
-        "@embedpdf/plugin-pan": "^2.14.4",
-        "@embedpdf/plugin-print": "^2.14.4",
-        "@embedpdf/plugin-redaction": "^2.14.4",
-        "@embedpdf/plugin-render": "^2.14.4",
-        "@embedpdf/plugin-rotate": "^2.14.4",
-        "@embedpdf/plugin-scroll": "^2.14.4",
-        "@embedpdf/plugin-search": "^2.14.4",
+        "@embedpdf/models": "^2.15.0",
+        "@embedpdf/plugin-annotation": "^2.15.0",
+        "@embedpdf/plugin-attachment": "^2.15.0",
+        "@embedpdf/plugin-bookmark": "^2.15.0",
+        "@embedpdf/plugin-document-manager": "^2.15.0",
+        "@embedpdf/plugin-export": "^2.15.0",
+        "@embedpdf/plugin-history": "^2.15.0",
+        "@embedpdf/plugin-interaction-manager": "^2.15.0",
+        "@embedpdf/plugin-pan": "^2.15.0",
+        "@embedpdf/plugin-print": "^2.15.0",
+        "@embedpdf/plugin-redaction": "^2.15.0",
+        "@embedpdf/plugin-render": "^2.15.0",
+        "@embedpdf/plugin-rotate": "^2.15.0",
+        "@embedpdf/plugin-scroll": "^2.15.0",
+        "@embedpdf/plugin-search": "^2.15.0",
         "@embedpdf/plugin-selection": "^2.14.4",
-        "@embedpdf/plugin-spread": "^2.14.4",
-        "@embedpdf/plugin-thumbnail": "^2.14.4",
-        "@embedpdf/plugin-tiling": "^2.14.4",
-        "@embedpdf/plugin-viewport": "^2.14.4",
-        "@embedpdf/plugin-zoom": "^2.14.4",
+        "@embedpdf/plugin-spread": "^2.15.0",
+        "@embedpdf/plugin-thumbnail": "^2.15.0",
+        "@embedpdf/plugin-tiling": "^2.15.0",
+        "@embedpdf/plugin-viewport": "^2.15.0",
+        "@embedpdf/plugin-zoom": "^2.15.0",
         "@emotion/react": "^11.14.0",
         "@emotion/styled": "^11.14.1",
         "@mantine/core": "^8.3.1",
@@ -50,6 +50,7 @@
         "@supabase/supabase-js": "^2.47.13",
         "@tailwindcss/postcss": "^4.1.13",
         "@tanstack/react-query": "^5.101.4",
+        "@tanstack/react-table": "^9.1.2",
         "@tanstack/react-virtual": "^3.13.12",
         "@tauri-apps/api": "^2.10.1",
         "@tauri-apps/plugin-dialog": "2.7.0",
@@ -61,10 +62,10 @@
         "autoprefixer": "^10.4.21",
         "axios": "^1.15.0",
         "d3": "^7.9.0",
-        "i18next": "^25.10.10",
-        "i18next-browser-languagedetector": "^8.2.0",
+        "i18next": "^26.3.6",
+        "i18next-browser-languagedetector": "^8.2.1",
         "jszip": "^3.10.1",
-        "license-report": "^6.8.0",
+        "license-report": "^6.8.5",
         "pdfjs-dist": "^5.4.149",
         "peerjs": "^1.5.5",
         "pixelmatch": "^7.1.0",
@@ -73,7 +74,7 @@
         "react": "^19.2.8",
         "react-dom": "^19.2.8",
         "react-easy-crop": "^5.5.6",
-        "react-i18next": "^16.6.6",
+        "react-i18next": "^17.0.11",
         "react-markdown": "^9.0.3",
         "react-rnd": "^10.5.2",
         "react-router-dom": "^7.9.1",
@@ -120,12 +121,12 @@
         "license-checker": "^25.0.1",
         "msw": "^2.14.6",
         "msw-storybook-addon": "^2.0.7",
+        "oxfmt": "^0.62.0",
         "oxlint": "^1.77.0",
         "postcss": "^8.5.12",
         "postcss-cli": "^11.0.1",
         "postcss-preset-mantine": "^1.18.0",
         "postcss-simple-vars": "^7.0.1",
-        "prettier": "^3.8.1",
         "puppeteer": "^24.25.0",
         "rollup-plugin-visualizer": "^7.0.1",
         "storybook": "^9.1.20",
@@ -573,16 +574,6 @@
         "keyv": "^5.6.0"
       }
     },
-    "node_modules/@cacheable/memory/node_modules/keyv": {
-      "version": "5.6.0",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
-      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@keyv/serialize": "^1.1.1"
-      }
-    },
     "node_modules/@cacheable/utils": {
       "version": "2.5.0",
       "resolved": "https://registry.npmjs.org/@cacheable/utils/-/utils-2.5.0.tgz",
@@ -594,29 +585,23 @@
         "keyv": "^5.6.0"
       }
     },
-    "node_modules/@cacheable/utils/node_modules/keyv": {
-      "version": "5.6.0",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
-      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@keyv/serialize": "^1.1.1"
-      }
-    },
     "node_modules/@cantoo/pdf-lib": {
-      "version": "2.6.5",
-      "resolved": "https://registry.npmjs.org/@cantoo/pdf-lib/-/pdf-lib-2.6.5.tgz",
-      "integrity": "sha512-3eMHEaqKHt/G/q+6QjT06A3lz0S/a8x3+myiSN7FNeL3uWcedO0lpfs6TWofa4C03Z1wz3tWeHoa4CsI7DrTSA==",
+      "version": "2.8.2",
+      "resolved": "https://registry.npmjs.org/@cantoo/pdf-lib/-/pdf-lib-2.8.2.tgz",
+      "integrity": "sha512-f0BJM3uPOjbPR3YriSEUIaTM0qnqthjFmTZX9NGI0NDM2Tj4a8xv7Z5Hb6jzUrhfb3/9Y77+xxoOln0IIiYq+w==",
       "license": "MIT",
       "dependencies": {
         "@pdf-lib/standard-fonts": "^1.0.0",
         "@pdf-lib/upng": "^1.0.1",
         "color": "^4.2.3",
         "crypto-js": "^4.2.0",
-        "node-html-better-parser": ">=1.4.0",
-        "pako": "^1.0.11",
+        "html-entities": "^2.3.2",
+        "node-html-better-parser": ">=1.5.9",
+        "pako": "^2.2.0",
         "tslib": ">=2"
+      },
+      "peerDependencies": {
+        "html-entities": "^2.3.2"
       }
     },
     "node_modules/@csstools/color-helpers": {
@@ -869,13 +854,13 @@
       }
     },
     "node_modules/@embedpdf/core": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/core/-/core-2.14.4.tgz",
-      "integrity": "sha512-trrFhKePk1JnAS8Vd+NWrS1fU2SIj3sifwawho/MeWKTkferLLuBay96ccA4S/Q5D7glKNH//M58VRgns09P3A==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/core/-/core-2.15.0.tgz",
+      "integrity": "sha512-0yaPCgvbE5/cBf+5rHBUsRUm8i6hSl894xjC19HTOmb8DqrhxOxbOQSyjiTbJTQK52zZrNL79SigsPgGHPrYWA==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/engines": "2.14.4",
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/engines": "2.15.0",
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
         "preact": "^10.26.4",
@@ -886,9 +871,9 @@
       }
     },
     "node_modules/@embedpdf/engines": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/engines/-/engines-2.14.4.tgz",
-      "integrity": "sha512-1kWYvrxjpKr5QUt16r93pLQOLoWEuzD447OViwZyRECsZ8ePoTnErlNlxHiTkeAWBgwr4DD7Xd+2VkTdMAacNA==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/engines/-/engines-2.15.0.tgz",
+      "integrity": "sha512-fW5UoqpDRkAWDbGMl3y6ril3l2qXzoYz+klt4O2P8gWzYzhG3fmr0L2+qzjD+BPO+QfYMNNvmBI+teT/nYjm/g==",
       "license": "MIT",
       "dependencies": {
         "@embedpdf/fonts-arabic": "1.0.0",
@@ -898,8 +883,8 @@
         "@embedpdf/fonts-latin": "1.0.0",
         "@embedpdf/fonts-sc": "1.0.0",
         "@embedpdf/fonts-tc": "1.0.0",
-        "@embedpdf/models": "2.14.4",
-        "@embedpdf/pdfium": "2.14.4"
+        "@embedpdf/models": "2.15.0",
+        "@embedpdf/pdfium": "2.15.0"
       },
       "peerDependencies": {
         "preact": "^10.26.4",
@@ -952,32 +937,32 @@
       "license": "OFL-1.1"
     },
     "node_modules/@embedpdf/models": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/models/-/models-2.14.4.tgz",
-      "integrity": "sha512-RlxazYdS1ObWe3Rt78pVUXSqQEMeOb1oHFA0CT3aolwtVooZyop9XO3WTDWpEaGvGrHXvuSv7WQgcCLZ2zKyaQ==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/models/-/models-2.15.0.tgz",
+      "integrity": "sha512-gHr+hAN094kmzCB+6J2zaiHS8o4tKeY0IfTOxVEGwqntgKk8LCWD3s+P7dlVY3V8XUVmdyFWhFt7zwm0uw+VMg==",
       "license": "MIT"
     },
     "node_modules/@embedpdf/pdfium": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/pdfium/-/pdfium-2.14.4.tgz",
-      "integrity": "sha512-0tDPQEH1WtfXcASNVp5U3dqfzZboNvcE4rDok/P4JCN+DCTaJDG2E9lYHGMo9FtuS2IdHgrzkmPRpOo5WV9MKQ==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/pdfium/-/pdfium-2.15.0.tgz",
+      "integrity": "sha512-KgpRND2MYcdbhzb2EMb4WzWcJYrR0A6JXvhMv4WthEHKt6qmNo2v/MC68bpYvpveYT9GNnUnY/+TG5MpXY3pRw==",
       "license": "MIT"
     },
     "node_modules/@embedpdf/plugin-annotation": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-annotation/-/plugin-annotation-2.14.4.tgz",
-      "integrity": "sha512-ff7rczmrBUoZFXlxC3fT6pSciMUuFAySOxY27oyM1IO3m2QLmzz5Xt9yu3oNYsanRPuO5a8nsgaifd9o8HheNA==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-annotation/-/plugin-annotation-2.15.0.tgz",
+      "integrity": "sha512-1g7Ls9ak/TLaRY42H1GxLriH91yBxaP3ezFDbyGSfW/nV1V5tLJ8d1OZG7Dm1HbhAcnzSt7nOXOZRqFnmhpjyQ==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4",
-        "@embedpdf/utils": "2.14.4"
+        "@embedpdf/models": "2.15.0",
+        "@embedpdf/utils": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-history": "2.14.4",
-        "@embedpdf/plugin-interaction-manager": "2.14.4",
-        "@embedpdf/plugin-scroll": "2.14.4",
-        "@embedpdf/plugin-selection": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-history": "2.15.0",
+        "@embedpdf/plugin-interaction-manager": "2.15.0",
+        "@embedpdf/plugin-scroll": "2.15.0",
+        "@embedpdf/plugin-selection": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -986,15 +971,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-attachment": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-attachment/-/plugin-attachment-2.14.4.tgz",
-      "integrity": "sha512-ktcv48w5DQVG7LTTt45rsth5X4dyxaXZb5zS1bElF1ULp6g7SRy4a0s3UWBY/UDKbpVtrby3JTsfs5fMU2VaRg==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-attachment/-/plugin-attachment-2.15.0.tgz",
+      "integrity": "sha512-vv8uzyqNSujrXKsmIKyV9D/8UnWfyo/MLY5lSQFoFy8Egecbqlbe8LTFcyHYA3fNhvKds+JFLV1khxnnp6tBoA==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1003,15 +988,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-bookmark": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-bookmark/-/plugin-bookmark-2.14.4.tgz",
-      "integrity": "sha512-SfFhVsqEA+5rJUQSVTP259+cgMqbWR93G/kK6GhDcXou4jNGKNfmiWLeWSMp8lsnGhbMkWxFYJKLuH44NEm63g==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-bookmark/-/plugin-bookmark-2.15.0.tgz",
+      "integrity": "sha512-pioAUfmKWiM0uc1PkGL3um7SPpcSrtcNhzdV6sgKDtLYxNBzObaCRbsQzGr0vFRayMNkDIlsRsx2yiLK6D+JcQ==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1020,15 +1005,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-document-manager": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-document-manager/-/plugin-document-manager-2.14.4.tgz",
-      "integrity": "sha512-1qUKu/RAN9LV+Ih7geig0X/2i4jIn8P1D0I0nQUwSMM9hJmitcyDJ/9SK/eOSsdEs4SulIqt+a2W2IMZOY2Vew==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-document-manager/-/plugin-document-manager-2.15.0.tgz",
+      "integrity": "sha512-M8EwOuonICSHfOklTMwk0XfyPhG9v9EMDRU9Pvz0zAe1DJzUPtIxUh+CgxtFSSnUeKSfxE7JpTRryrbUW0XcGg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1037,15 +1022,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-export": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-export/-/plugin-export-2.14.4.tgz",
-      "integrity": "sha512-z1IGsGzWve+g81KCrNbZYN/jHkb9mImodVhTfL35mJfOjOahRmbN0OUn1TvcNHaiXKjy8xcfabvxHDnSaViGlA==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-export/-/plugin-export-2.15.0.tgz",
+      "integrity": "sha512-GFmC4nkZZnH1swivfSwLako2YV6d60QPSPUqvozQaMWDuE8rNq/ElYISVihkEAxbhI4h3q5AkhDKyCVFeJJVbg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1054,15 +1039,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-history": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-history/-/plugin-history-2.14.4.tgz",
-      "integrity": "sha512-X6SBfpyKgQTHNmawoZOfeTW/nhE3NUeqd+gPLFCUkeVTaYO31qSeje3Z7z7pm17dMp5ar9TsgT69ajn6zlsG1w==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-history/-/plugin-history-2.15.0.tgz",
+      "integrity": "sha512-3Dk4Atc5vdHsTjC8tJ8MOGPcUJLkCWbMzt3sTllmyNc534qTZtUvFHDeaaB65u50EJGjFRpUJ6Xcnp9A81lMdg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1071,15 +1056,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-interaction-manager": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-interaction-manager/-/plugin-interaction-manager-2.14.4.tgz",
-      "integrity": "sha512-y4MeHBy5s/SR5ma4rezYADIUujViAZSQe8A/CKehve4eU6Z9YF2AflL/M6KG24gCsUyW4D04AxAn3bvsXLR3nw==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-interaction-manager/-/plugin-interaction-manager-2.15.0.tgz",
+      "integrity": "sha512-YCMvTvu4Fm1KNuEhj+CftzG+T6F1+/QhI7eaYft9Lp5xm3CYSXdR3pNfGwNFy5XkDUDwB1IscLTiU0q75viMCw==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1088,17 +1073,17 @@
       }
     },
     "node_modules/@embedpdf/plugin-pan": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-pan/-/plugin-pan-2.14.4.tgz",
-      "integrity": "sha512-TAVGzXg9qgfiZHZfZFkHry9jCSQjk/borV1DB8HJTcgTk52phhaSr4EFjBZ808Hj5t+cc9VZWoE1JhL8AAiKfw==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-pan/-/plugin-pan-2.15.0.tgz",
+      "integrity": "sha512-bgFM7xTJRNzkFs5CH9apv5USR7Db2fdbNVbHq/U1GanEyz/71gZGoDWUN9FF/FbNvBfSfvPYZDv9DLJYLbeoBQ==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-interaction-manager": "2.14.4",
-        "@embedpdf/plugin-viewport": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-interaction-manager": "2.15.0",
+        "@embedpdf/plugin-viewport": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1107,15 +1092,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-print": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-print/-/plugin-print-2.14.4.tgz",
-      "integrity": "sha512-qk1aQhLS+8eBL6lcT46p+fZaNjvLMVQF2Nl/t78aOy+cNskXHeYsnZi9tJKNYGLHbi+8+Dg2iHVIhFvweFn/Ww==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-print/-/plugin-print-2.15.0.tgz",
+      "integrity": "sha512-IS6Wvi7zY0iozdYmVwfZXSjKURBe4AqhuyV1QtbcUS1hZxe0ASRETGiHe9ONpuokWemZmYDHNyTrdF7+5hdLEw==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=18.0.0",
         "react-dom": ">=18.0.0",
@@ -1124,20 +1109,20 @@
       }
     },
     "node_modules/@embedpdf/plugin-redaction": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-redaction/-/plugin-redaction-2.14.4.tgz",
-      "integrity": "sha512-pECosjyBaLlYz1Fgde4gqquV4uQY8LAkbx7TtMwP1EhBFtG0QeoeuhytoLm9I/cWPi84jfaQjkWZB58HPxR5Zw==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-redaction/-/plugin-redaction-2.15.0.tgz",
+      "integrity": "sha512-H4WgRSSqBlWtP7sgDbAqWW/w6HAyjA3RS6lMuEmCMF19trDyQMdeAC8ZyQkFCYudFk9L+ydradSbNBYK18PfDw==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4",
-        "@embedpdf/utils": "2.14.4"
+        "@embedpdf/models": "2.15.0",
+        "@embedpdf/utils": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-annotation": "2.14.4",
-        "@embedpdf/plugin-history": "2.14.4",
-        "@embedpdf/plugin-interaction-manager": "2.14.4",
-        "@embedpdf/plugin-selection": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-annotation": "2.15.0",
+        "@embedpdf/plugin-history": "2.15.0",
+        "@embedpdf/plugin-interaction-manager": "2.15.0",
+        "@embedpdf/plugin-selection": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1146,15 +1131,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-render": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-render/-/plugin-render-2.14.4.tgz",
-      "integrity": "sha512-KNY3EGYf9SRqtDBOEO9mR3Hyv9mN8TaC3ztERj0BX8zra7mkjkQnhGQlMxif1dGOoTD9XIcPqJvaw8o7PWDJDw==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-render/-/plugin-render-2.15.0.tgz",
+      "integrity": "sha512-EVfn8XsdU10VgrSs9qKo8nqjfUyt2/NWFJtlW3nX4sZ74Pi9xSvEa7/B99/LYZZMa0ENzi+4HKAXiQ6NUXisDg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1163,15 +1148,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-rotate": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-rotate/-/plugin-rotate-2.14.4.tgz",
-      "integrity": "sha512-+bBBHfoSMBMjHubDgPkCCu3o2NZn5vv8l/2gmzH6D8k90UVLB2AOei9VTmfy5xqoit+eoY6iSl7w3qyijNfB0A==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-rotate/-/plugin-rotate-2.15.0.tgz",
+      "integrity": "sha512-mhfDC8NCQ8H6ati3O6smA6ZxZoMgPGtloEeY6gs61+zoxPKyXiuCpxZKJctRfYdrTdoRgXpFa3fKflwStMcgFg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1180,16 +1165,16 @@
       }
     },
     "node_modules/@embedpdf/plugin-scroll": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-scroll/-/plugin-scroll-2.14.4.tgz",
-      "integrity": "sha512-0JgPwnQqB9THKJt/mOubgFkiTcCkOI6kFCZz8zlwl88DAJcUbdhJoTwCJZ2STYSfECTLB4ZFjb5fZ9AXyfkf0g==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-scroll/-/plugin-scroll-2.15.0.tgz",
+      "integrity": "sha512-UqjLH3lafrpqN1qcxIpfd1MfWW5Fdf6/4LjneUabHt+3gxy1qd2KU9oPR5wwinsh3vmjn90qURsnqIHL5jnaOg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-viewport": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-viewport": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1198,15 +1183,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-search": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-search/-/plugin-search-2.14.4.tgz",
-      "integrity": "sha512-ErRlg0MKLxZ0c4OKk5RjPOV8f8yCaqFi6zqUxBI49/3yN6wDINKvm8dxt5Q2QGUa740n/XylT5BTbjH6lAjCzQ==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-search/-/plugin-search-2.15.0.tgz",
+      "integrity": "sha512-mMzy8uo3xvDMjSc+xuBMgdI/mmmpgbZ6xKTmNxpF0d8BcaWu6Zp9a4ewamfjBwg8WF/qUW49U6HYZsiRr3NUEQ==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1215,17 +1200,17 @@
       }
     },
     "node_modules/@embedpdf/plugin-selection": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-selection/-/plugin-selection-2.14.4.tgz",
-      "integrity": "sha512-8w6ZUdwRcBhNCQjlS8mFvsMXI/wr1Q7DljwlFmKaEQyM9vXm2rI9WGN0z9ffjKHlsYn0yg98pqyPLtTevH1P7Q==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-selection/-/plugin-selection-2.15.0.tgz",
+      "integrity": "sha512-iEnhx0jeQrbze7WHkHhZtF21yfGBuqF2B+V2efLHT2O0a2fnof+PEVaQQRgERSfrwRvLvyEJL9ud54E41ahsRQ==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4",
-        "@embedpdf/utils": "2.14.4"
+        "@embedpdf/models": "2.15.0",
+        "@embedpdf/utils": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-interaction-manager": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-interaction-manager": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1234,15 +1219,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-spread": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-spread/-/plugin-spread-2.14.4.tgz",
-      "integrity": "sha512-ybJNbOMXBciD9cS+wwAUM1L5ZZMgF0+8Tpi78MaXGwnwH1wJUSx1Tx90YNsO9DxIKKckDsxUQREwUtTTcwFLEA==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-spread/-/plugin-spread-2.15.0.tgz",
+      "integrity": "sha512-Gj1Nl9E/T92MkaBxL+BCH8WHfzvfM+Vb9vgTPi0gnV7Jr1SaWrtIQpMlYom21f4p9pT/m7KuBVz3xA+NV8r39A==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1251,16 +1236,16 @@
       }
     },
     "node_modules/@embedpdf/plugin-thumbnail": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-thumbnail/-/plugin-thumbnail-2.14.4.tgz",
-      "integrity": "sha512-80D+R2uXoTsmQXFpGGhtapv3I45WNzTSIkcD3VvLywjS2MHwgCNY51RQsn5bc3HINZW9d/SX1F39qiv4HzPp6A==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-thumbnail/-/plugin-thumbnail-2.15.0.tgz",
+      "integrity": "sha512-39EojqobHmvSvk2ejKeh58m43ApGS3cie/sVZP+pkXr6MRogX6+ivMa5GfoqBzh9wdZAZ3l4XTd+RQ4kFZ4aqQ==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-render": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-render": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1269,18 +1254,18 @@
       }
     },
     "node_modules/@embedpdf/plugin-tiling": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-tiling/-/plugin-tiling-2.14.4.tgz",
-      "integrity": "sha512-++1bzvU0Xqi6a1XeUOLAHU7D/FVUNobC/behSSn3WZnY/wIpYG3dXs5NbhNzeomIGXYHC4jCXbKGBPe5TNdoSw==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-tiling/-/plugin-tiling-2.15.0.tgz",
+      "integrity": "sha512-zBjKCToAkL1tYvkIjFCjsbfUzZ0QBPczL3wRy/IdNZ9CQuZrqqqp3xEFrI4Nz2o9XQd9heBlMA9Zo/yieuazqA==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-render": "2.14.4",
-        "@embedpdf/plugin-scroll": "2.14.4",
-        "@embedpdf/plugin-viewport": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-render": "2.15.0",
+        "@embedpdf/plugin-scroll": "2.15.0",
+        "@embedpdf/plugin-viewport": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1289,15 +1274,15 @@
       }
     },
     "node_modules/@embedpdf/plugin-viewport": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-viewport/-/plugin-viewport-2.14.4.tgz",
-      "integrity": "sha512-ZhbDITPZ/h1Vd9cUbCPShSbH5RXd/biCw9w6fneTItruMauYIcTNUS2eWLJC0Yovhw7nu0TjRVYuTQ71jzs0dg==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-viewport/-/plugin-viewport-2.15.0.tgz",
+      "integrity": "sha512-MXNBQOitr1cAoCoBKwAR3O78eLtHBbIngOkWqgm6EpWTdoYDBVhZlvVcmwmjheZKjMJFnU3sFr98w6Qwix3Cjg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
+        "@embedpdf/core": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1306,17 +1291,17 @@
       }
     },
     "node_modules/@embedpdf/plugin-zoom": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-zoom/-/plugin-zoom-2.14.4.tgz",
-      "integrity": "sha512-a5kUjbG9sKMyO8qqDTrtL30VJ3dSEyNHHvszhfbvKtv4hppz/fSKS78vieu3lw48K11BoioImzCAF6Y3R0LMiw==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/plugin-zoom/-/plugin-zoom-2.15.0.tgz",
+      "integrity": "sha512-d+YhwqcQNZaaHczVGe4pbaAYQXWO4MEoivcW7jOpE31VnKqEAdjCMye8F0ctcF5OjgbXeb6AKCk4L4fDdLF4mg==",
       "license": "MIT",
       "dependencies": {
-        "@embedpdf/models": "2.14.4"
+        "@embedpdf/models": "2.15.0"
       },
       "peerDependencies": {
-        "@embedpdf/core": "2.14.4",
-        "@embedpdf/plugin-scroll": "2.14.4",
-        "@embedpdf/plugin-viewport": "2.14.4",
+        "@embedpdf/core": "2.15.0",
+        "@embedpdf/plugin-scroll": "2.15.0",
+        "@embedpdf/plugin-viewport": "2.15.0",
         "preact": "^10.26.4",
         "react": ">=16.8.0",
         "react-dom": ">=16.8.0",
@@ -1325,9 +1310,9 @@
       }
     },
     "node_modules/@embedpdf/utils": {
-      "version": "2.14.4",
-      "resolved": "https://registry.npmjs.org/@embedpdf/utils/-/utils-2.14.4.tgz",
-      "integrity": "sha512-W7BZSNAQeUPQhi6l96Q4oFtg8Vgbt622LQL5ql0oZjyJNJRbYqCJIiJpR+5ZvK6S/x2MadZnYSzBJ/ekL6394A==",
+      "version": "2.15.0",
+      "resolved": "https://registry.npmjs.org/@embedpdf/utils/-/utils-2.15.0.tgz",
+      "integrity": "sha512-13UEMPpu5XrxmYI/MPiLtJC3R3b1g8ii3zfhQ3g1WpECybnwTuhBgwqaOvqw3rVCKCnXEgNMs4PBCzLyFpZZTw==",
       "license": "MIT",
       "peerDependencies": {
         "preact": "^10.26.4",
@@ -2920,6 +2905,329 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/@oxfmt/binding-android-arm-eabi": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-android-arm-eabi/-/binding-android-arm-eabi-0.62.0.tgz",
+      "integrity": "sha512-pdsv0C4gPjJ8H1+sd8u0BDx+yLACTL+rgeMIOL1ln4ihSnhw8CWXtYWgvcSkyTfgGBIzFKab+d8rx9Xl4en/Kw==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-android-arm64": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-android-arm64/-/binding-android-arm64-0.62.0.tgz",
+      "integrity": "sha512-WC3YQ7uS/KtDrjmqwBviwFKe9qeoi+eXx8aX1z/ffG23Md75myjrJaQqTuJvdOLPoa4EYTjDWH0dHXfwulCVog==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "android"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-darwin-arm64": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-darwin-arm64/-/binding-darwin-arm64-0.62.0.tgz",
+      "integrity": "sha512-GM8Yf3LjjaR1I8PD0SfeoIlwhsh9GvSF+cQ8sf624Yxnjsyumn95aFzYfKJVefblfDIiOAnZ7QVm2sa21Er/0Q==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-darwin-x64": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-darwin-x64/-/binding-darwin-x64-0.62.0.tgz",
+      "integrity": "sha512-d5THp7F8bCxLqNogEXDORRsQD6dosf3EyFtnXfBer6v+8tGdcWIjoDX9WaXrrF/26zOmL8qHpPTKCEvpBDmZkQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "darwin"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-freebsd-x64": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-freebsd-x64/-/binding-freebsd-x64-0.62.0.tgz",
+      "integrity": "sha512-1DnrtXGZooOZ0fHgAXZUaDQzBVh1CM2MNW4oBXyQ2aWKvCHjyljvT9fgBkOM0fEOb96X5eqtcfJ0YUVt9jj66g==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "freebsd"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-arm-gnueabihf": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-arm-gnueabihf/-/binding-linux-arm-gnueabihf-0.62.0.tgz",
+      "integrity": "sha512-4pQDHOYRH+Huqe0StIaWyvk2CVl/aTaqSrbZpA3/pLS2xH24ME7lBgYprhQF2fRkHBzhGGGKliwxFsDdHwx59g==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-arm-musleabihf": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-arm-musleabihf/-/binding-linux-arm-musleabihf-0.62.0.tgz",
+      "integrity": "sha512-X0jAaZJFMCVKhB6YyWVTQ/wN2DLsBcZKSMqTS76bF6riT+XZdtg2FPEdjDvdVbunO9cG+tWiVaEs4Zs38lxYog==",
+      "cpu": [
+        "arm"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-arm64-gnu": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-arm64-gnu/-/binding-linux-arm64-gnu-0.62.0.tgz",
+      "integrity": "sha512-682Z8T5s8T5ATArYtsejKvbIfd8LEAXyyDkKkoZVq8HND7Vx8TYLlrDjDSeYfodMeVwHOgkj13lJYR8cj6vUSg==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-arm64-musl": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-arm64-musl/-/binding-linux-arm64-musl-0.62.0.tgz",
+      "integrity": "sha512-lk25fAl7KWaLWVJcW0CHEXB7QlQZtx5eDkjpaGMK0hzXTjUe0Wmlu8IKuFHoviSOcEJedRTs4VE/506VqGxGew==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-ppc64-gnu": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-ppc64-gnu/-/binding-linux-ppc64-gnu-0.62.0.tgz",
+      "integrity": "sha512-SFyNqHQLwySceWNLhiSldx7wPXRAzP0L0WcW9GegP3uWrpZGJiZlQO85NbHAFPEfxR9PhZ9qSnZryEh7+v+4Gw==",
+      "cpu": [
+        "ppc64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-riscv64-gnu": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-riscv64-gnu/-/binding-linux-riscv64-gnu-0.62.0.tgz",
+      "integrity": "sha512-KYj55C1ywJfHo6+aKDuEmUtVEdJALsC5GwayDGsI6FGz2GxFqNr/mA8nxVsNbJzm7sE5MRqTQ9ziImSzhYXysA==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-riscv64-musl": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-riscv64-musl/-/binding-linux-riscv64-musl-0.62.0.tgz",
+      "integrity": "sha512-BhZDNo5GOU5nC378RhD0/XpvaEBHsH3HLgJp8YZX3A0InC7oivzA63HsRmiXFLtLSHAstEVrDf6fbC7Rs8Jh/A==",
+      "cpu": [
+        "riscv64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-s390x-gnu": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-s390x-gnu/-/binding-linux-s390x-gnu-0.62.0.tgz",
+      "integrity": "sha512-UyAFmyHkgSgUJ/wOM4p3U8AC2yAFvRH5PNBs7TnK0fObTT/XSWcdr/lAzPSWaekHaZFaMeFZyk9n93Joq3J93A==",
+      "cpu": [
+        "s390x"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-x64-gnu": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-x64-gnu/-/binding-linux-x64-gnu-0.62.0.tgz",
+      "integrity": "sha512-1iYMP0leytWazFubD/WnINJuIrzRPuoL1aWEJdlGezEzDbTxcd29R4r8IUzP2oWeKst5V02uMJgR2NILlPlG6w==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-linux-x64-musl": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-linux-x64-musl/-/binding-linux-x64-musl-0.62.0.tgz",
+      "integrity": "sha512-4rA/URtJSTVNVAQz6Q8wf7SaRvOXVy+TizriT9hs/Y1XhLR/R+92uWKRQG8yFWRAIEBbFHJ6WevQcl/G9SXEfw==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "linux"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-openharmony-arm64": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-openharmony-arm64/-/binding-openharmony-arm64-0.62.0.tgz",
+      "integrity": "sha512-mSZuFHU2ar1KLUjXpI2QBQcJ1VsOB3mOCgQXuXCpKs19dgh4u+OaovNfrWDfiJb+ihJ2+f7YFcaO9bS2dlTCXA==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "openharmony"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-win32-arm64-msvc": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-win32-arm64-msvc/-/binding-win32-arm64-msvc-0.62.0.tgz",
+      "integrity": "sha512-OfwuhkcjDlqC4EgDojtiV9mzpLqeB9KqTOWPOjLEYBVdDCVSxqW3qzp/xcIxsbtI0UgGCnKvAqYKyY25kf5JZw==",
+      "cpu": [
+        "arm64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-win32-ia32-msvc": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-win32-ia32-msvc/-/binding-win32-ia32-msvc-0.62.0.tgz",
+      "integrity": "sha512-P9uDDNFRzghO3X8QAzhkjKhK7JvtABsVn8UYtFX7uor12IAnwNt8nNIctvfWj1JkQU/kE+fmLRPiw7XlrIHsZw==",
+      "cpu": [
+        "ia32"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
+    "node_modules/@oxfmt/binding-win32-x64-msvc": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/@oxfmt/binding-win32-x64-msvc/-/binding-win32-x64-msvc-0.62.0.tgz",
+      "integrity": "sha512-dlI5SY7XYQCiCBafntWagCR6HcAJB/NpsLtdlPx8x08+Osz8Ok1HHz1GZuusegCe/VoJ6pAnF5a4pd5OZAq7qQ==",
+      "cpu": [
+        "x64"
+      ],
+      "dev": true,
+      "license": "MIT",
+      "optional": true,
+      "os": [
+        "win32"
+      ],
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      }
+    },
     "node_modules/@oxlint/binding-android-arm-eabi": {
       "version": "1.77.0",
       "resolved": "https://registry.npmjs.org/@oxlint/binding-android-arm-eabi/-/binding-android-arm-eabi-1.77.0.tgz",
@@ -3861,12 +4169,12 @@
       "license": "MIT"
     },
     "node_modules/@sindresorhus/is": {
-      "version": "7.2.0",
-      "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-7.2.0.tgz",
-      "integrity": "sha512-P1Cz1dWaFfR4IR+U13mqqiGsLFf1KbayybWwdd2vfctdV6hDpUkgCY0nKOLLTMSoRd/jJNjtbqzf13K8DCCXQw==",
+      "version": "8.1.0",
+      "resolved": "https://registry.npmjs.org/@sindresorhus/is/-/is-8.1.0.tgz",
+      "integrity": "sha512-2SX/1jW6CIMAiebvVv5ZInoCEuWQmMyBoJXXGC6Vjakjp/fpxP5eHs7/V6WKuPEIbuK06+VpjH+vjLQhr98rDQ==",
       "license": "MIT",
       "engines": {
-        "node": ">=18"
+        "node": ">=22"
       },
       "funding": {
         "url": "https://github.com/sindresorhus/is?sponsor=1"
@@ -4936,6 +5244,44 @@
         "react": "^18 || ^19"
       }
     },
+    "node_modules/@tanstack/react-store": {
+      "version": "0.11.1",
+      "resolved": "https://registry.npmjs.org/@tanstack/react-store/-/react-store-0.11.1.tgz",
+      "integrity": "sha512-HaIGKI3YLmjBYIvy5DFDY23oNaYZIsTZfngey07Uh5iLVJgM3bIGCnZeOFOqzjFld9JHWcaHJnasD/bKoGKwJQ==",
+      "license": "MIT",
+      "dependencies": {
+        "@tanstack/store": "0.11.1",
+        "use-sync-external-store": "^1.6.0"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      },
+      "peerDependencies": {
+        "react": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0",
+        "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
+      }
+    },
+    "node_modules/@tanstack/react-table": {
+      "version": "9.1.2",
+      "resolved": "https://registry.npmjs.org/@tanstack/react-table/-/react-table-9.1.2.tgz",
+      "integrity": "sha512-YQPZFJ1nIi/bjjwsPZVouABgahDcl7Gdm33CdTStUJBn0DjEVJ2uhSTVmIoWt9MVKdQziXGAsXipSzy949Hygg==",
+      "license": "MIT",
+      "dependencies": {
+        "@tanstack/react-store": "^0.11.0",
+        "@tanstack/table-core": "9.1.2"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      },
+      "peerDependencies": {
+        "react": ">=18"
+      }
+    },
     "node_modules/@tanstack/react-virtual": {
       "version": "3.13.23",
       "resolved": "https://registry.npmjs.org/@tanstack/react-virtual/-/react-virtual-3.13.23.tgz",
@@ -4953,6 +5299,32 @@
         "react-dom": "^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0"
       }
     },
+    "node_modules/@tanstack/store": {
+      "version": "0.11.1",
+      "resolved": "https://registry.npmjs.org/@tanstack/store/-/store-0.11.1.tgz",
+      "integrity": "sha512-mzTOBhypOuDJAy/D8n2MfUZ1HFkXnmSETviRyhqEC8LUE7/IZQExOTxMANj3KjTofYTkFNpBY67qaVrT41YccA==",
+      "license": "MIT",
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
+    "node_modules/@tanstack/table-core": {
+      "version": "9.1.2",
+      "resolved": "https://registry.npmjs.org/@tanstack/table-core/-/table-core-9.1.2.tgz",
+      "integrity": "sha512-ONpWQeass1sfg80CWF1NSwQ8r3GiqxA2lT/EdqIcrDEPZ0Z+0mM94eQoFYLPN0Kztzj8TQVb2+PrSZSItqA61g==",
+      "license": "MIT",
+      "dependencies": {
+        "@tanstack/store": "^0.11.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "type": "github",
+        "url": "https://github.com/sponsors/tannerlinsley"
+      }
+    },
     "node_modules/@tanstack/virtual-core": {
       "version": "3.13.23",
       "resolved": "https://registry.npmjs.org/@tanstack/virtual-core/-/virtual-core-3.13.23.tgz",
@@ -7441,15 +7813,15 @@
       }
     },
     "node_modules/cacheable-request": {
-      "version": "13.0.18",
-      "resolved": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-13.0.18.tgz",
-      "integrity": "sha512-rFWadDRKJs3s2eYdXlGggnBZKG7MTblkFBB0YllFds+UYnfogDp2wcR6JN97FhRkHTvq59n2vhNoHNZn29dh/Q==",
+      "version": "13.0.19",
+      "resolved": "https://registry.npmjs.org/cacheable-request/-/cacheable-request-13.0.19.tgz",
+      "integrity": "sha512-SVXGH037+Mo1aIMO5B2UcleR43FGjFdN+M8JObSyEoQ2Mn4CODRWx28gN5jiTF0n5ItsgtIZfyargMNs8GX4kg==",
       "license": "MIT",
       "dependencies": {
-        "@types/http-cache-semantics": "^4.0.4",
+        "@types/http-cache-semantics": "^4.2.0",
         "get-stream": "^9.0.1",
         "http-cache-semantics": "^4.2.0",
-        "keyv": "^5.5.5",
+        "keyv": "^5.6.0",
         "mimic-response": "^4.0.0",
         "normalize-url": "^8.1.1",
         "responselike": "^4.0.2"
@@ -7458,25 +7830,6 @@
         "node": ">=18"
       }
     },
-    "node_modules/cacheable-request/node_modules/keyv": {
-      "version": "5.6.0",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
-      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
-      "license": "MIT",
-      "dependencies": {
-        "@keyv/serialize": "^1.1.1"
-      }
-    },
-    "node_modules/cacheable/node_modules/keyv": {
-      "version": "5.6.0",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
-      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
-      "dev": true,
-      "license": "MIT",
-      "dependencies": {
-        "@keyv/serialize": "^1.1.1"
-      }
-    },
     "node_modules/call-bind-apply-helpers": {
       "version": "1.0.2",
       "resolved": "https://registry.npmjs.org/call-bind-apply-helpers/-/call-bind-apply-helpers-1.0.2.tgz",
@@ -7664,6 +8017,18 @@
         "devtools-protocol": "*"
       }
     },
+    "node_modules/chunk-data": {
+      "version": "0.1.0",
+      "resolved": "https://registry.npmjs.org/chunk-data/-/chunk-data-0.1.0.tgz",
+      "integrity": "sha512-zFyPtyC0SZ6Zu79b9sOYtXZcgrsXe0RpePrzRyj52hYVFG1+Rk6rBqjjOEk+GNQwc3PIX+86teQMok970pod1g==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/cli-width": {
       "version": "4.1.0",
       "resolved": "https://registry.npmjs.org/cli-width/-/cli-width-4.1.0.tgz",
@@ -9369,15 +9734,6 @@
         "node": ">= 6"
       }
     },
-    "node_modules/form-data-encoder": {
-      "version": "4.1.0",
-      "resolved": "https://registry.npmjs.org/form-data-encoder/-/form-data-encoder-4.1.0.tgz",
-      "integrity": "sha512-G6NsmEW15s0Uw9XnCg+33H3ViYRyiM0hMrMhhqQOR8NFc5GhYrI+6I3u7OTw7b91J2g8rtvMBZJDbcGb2YUniw==",
-      "license": "MIT",
-      "engines": {
-        "node": ">= 18"
-      }
-    },
     "node_modules/fraction.js": {
       "version": "5.3.4",
       "resolved": "https://registry.npmjs.org/fraction.js/-/fraction.js-5.3.4.tgz",
@@ -9710,38 +10066,44 @@
       }
     },
     "node_modules/got": {
-      "version": "14.6.6",
-      "resolved": "https://registry.npmjs.org/got/-/got-14.6.6.tgz",
-      "integrity": "sha512-QLV1qeYSo5l13mQzWgP/y0LbMr5Plr5fJilgAIwgnwseproEbtNym8xpLsDzeZ6MWXgNE6kdWGBjdh3zT/Qerg==",
+      "version": "15.1.0",
+      "resolved": "https://registry.npmjs.org/got/-/got-15.1.0.tgz",
+      "integrity": "sha512-DG+DAAkRtno+oDr/GBsliAkhN9+zczOPM5qXk3efDZY3qvyRnZU+NwQlb/IOY6cSnxxTR9z3aHCcShJyjb0hJA==",
       "license": "MIT",
       "dependencies": {
-        "@sindresorhus/is": "^7.0.1",
+        "@sindresorhus/is": "^8.0.0",
         "byte-counter": "^0.1.0",
         "cacheable-lookup": "^7.0.0",
-        "cacheable-request": "^13.0.12",
+        "cacheable-request": "^13.0.18",
+        "chunk-data": "^0.1.0",
         "decompress-response": "^10.0.0",
-        "form-data-encoder": "^4.0.2",
         "http2-wrapper": "^2.2.1",
-        "keyv": "^5.5.3",
-        "lowercase-keys": "^3.0.0",
-        "p-cancelable": "^4.0.1",
+        "keyv": "^5.6.0",
+        "lowercase-keys": "^4.0.1",
         "responselike": "^4.0.2",
-        "type-fest": "^4.26.1"
+        "type-fest": "^5.6.0",
+        "uint8array-extras": "^1.5.0"
       },
       "engines": {
-        "node": ">=20"
+        "node": ">=22"
       },
       "funding": {
         "url": "https://github.com/sindresorhus/got?sponsor=1"
       }
     },
-    "node_modules/got/node_modules/keyv": {
-      "version": "5.6.0",
-      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
-      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
-      "license": "MIT",
+    "node_modules/got/node_modules/type-fest": {
+      "version": "5.8.0",
+      "resolved": "https://registry.npmjs.org/type-fest/-/type-fest-5.8.0.tgz",
+      "integrity": "sha512-YGYEVz3Fm5iy/AybuA0oyNFq7H4CgQNfRp/qfe8nurE1kuCeNm3/vfm9X4Mtl+qLyaKJUh5xrFZwogr41SMjYA==",
+      "license": "(MIT OR CC0-1.0)",
       "dependencies": {
-        "@keyv/serialize": "^1.1.1"
+        "tagged-tag": "^1.0.0"
+      },
+      "engines": {
+        "node": ">=20"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
       }
     },
     "node_modules/graceful-fs": {
@@ -9946,12 +10308,12 @@
       "license": "MIT"
     },
     "node_modules/html-parse-stringify": {
-      "version": "3.0.1",
-      "resolved": "https://registry.npmjs.org/html-parse-stringify/-/html-parse-stringify-3.0.1.tgz",
-      "integrity": "sha512-KknJ50kTInJ7qIScF3jeaFRpMpE8/lfiTdzf/twXyPBLAGrLRTmkz3AdTnKeh40X8k9L2fdYwEp/42WGXIRGcg==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/html-parse-stringify/-/html-parse-stringify-4.0.1.tgz",
+      "integrity": "sha512-0zHsZJrK7S3K2aucXWL6ycoYJ/iNtIcFHC/nYQgFklPtrv5LpJctIiSCroWZWeuoXvuyFdzp6KzjJQ+OT5MfFw==",
       "license": "MIT",
-      "dependencies": {
-        "void-elements": "3.1.0"
+      "funding": {
+        "url": "https://locize.com"
       }
     },
     "node_modules/html-tags": {
@@ -10025,9 +10387,9 @@
       }
     },
     "node_modules/i18next": {
-      "version": "25.10.10",
-      "resolved": "https://registry.npmjs.org/i18next/-/i18next-25.10.10.tgz",
-      "integrity": "sha512-cqUW2Z3EkRx7NqSyywjkgCLK7KLCL6IFVFcONG7nVYIJ3ekZ1/N5jUsihHV6Bq37NfhgtczxJcxduELtjTwkuQ==",
+      "version": "26.3.6",
+      "resolved": "https://registry.npmjs.org/i18next/-/i18next-26.3.6.tgz",
+      "integrity": "sha512-Bu5Z2nAXgfVyM8xvW3jk9EKRIuX37PudsrBViThNFx7CR7aaYTpP01cxNB/E4c4UUzTDiAZRstEhsRfPOL/8xA==",
       "funding": [
         {
           "type": "individual",
@@ -10043,11 +10405,8 @@
         }
       ],
       "license": "MIT",
-      "dependencies": {
-        "@babel/runtime": "^7.29.2"
-      },
       "peerDependencies": {
-        "typescript": "^5 || ^6"
+        "typescript": "^5 || ^6 || ^7"
       },
       "peerDependenciesMeta": {
         "typescript": {
@@ -10167,12 +10526,12 @@
       "license": "ISC"
     },
     "node_modules/ini": {
-      "version": "6.0.0",
-      "resolved": "https://registry.npmjs.org/ini/-/ini-6.0.0.tgz",
-      "integrity": "sha512-IBTdIkzZNOpqm7q3dRqJvMaldXjDHWkEDfrwGEQTs5eaQMWV+djAhR+wahyNNMAa+qpbDUhBMVt4ZKNwpPm7xQ==",
+      "version": "7.0.0",
+      "resolved": "https://registry.npmjs.org/ini/-/ini-7.0.0.tgz",
+      "integrity": "sha512-ifK0CgjALofS5bkrcTy4RaQ9Vx2Knf/eLeIO+NaswQEpH1UblrtTSCIvN71qQDMq0PeQ/SSPojvEJp9vvvfr+w==",
       "license": "ISC",
       "engines": {
-        "node": "^20.17.0 || >=22.9.0"
+        "node": "^22.22.2 || ^24.15.0 || >=26.0.0"
       }
     },
     "node_modules/inline-style-parser": {
@@ -10687,6 +11046,15 @@
         "setimmediate": "^1.0.5"
       }
     },
+    "node_modules/keyv": {
+      "version": "5.6.0",
+      "resolved": "https://registry.npmjs.org/keyv/-/keyv-5.6.0.tgz",
+      "integrity": "sha512-CYDD3SOtsHtyXeEORYRx2qBtpDJFjRTGXUtmNEMGyzYOKj1TE3tycdlho7kA1Ufx9OYWZzg52QFBGALTirzDSw==",
+      "license": "MIT",
+      "dependencies": {
+        "@keyv/serialize": "^1.1.1"
+      }
+    },
     "node_modules/kind-of": {
       "version": "6.0.3",
       "resolved": "https://registry.npmjs.org/kind-of/-/kind-of-6.0.3.tgz",
@@ -10828,19 +11196,19 @@
       }
     },
     "node_modules/license-report": {
-      "version": "6.8.2",
-      "resolved": "https://registry.npmjs.org/license-report/-/license-report-6.8.2.tgz",
-      "integrity": "sha512-eWzJujDhPm5bKTrolTBt8mvL6YW3c5SY1kpqnt7GmTLU01rOtzjqe3sevOQLF2dPY7dV+VnSZIWV774Cgqz/Eg==",
+      "version": "6.8.5",
+      "resolved": "https://registry.npmjs.org/license-report/-/license-report-6.8.5.tgz",
+      "integrity": "sha512-mUOQD1C1yEHShuPeZBjv7y/EXn7kYEfq7roY1lQmVtYm4FCE81aMn65gGrtU7Cw+YRuwchkoMYegoF3wdeZNLQ==",
       "license": "MIT",
       "dependencies": {
         "@kessler/tableify": "^1.0.2",
         "debug": "^4.4.3",
         "eol": "^0.10.0",
         "find-up-simple": "^1.0.1",
-        "got": "^14.6.6",
-        "ini": "^6.0.0",
+        "got": "^15.0.5",
+        "ini": "^7.0.0",
         "rc": "^1.2.8",
-        "semver": "^7.7.4",
+        "semver": "^7.8.0",
         "tablemark": "^4.1.0",
         "text-table": "^0.2.0",
         "visit-values": "^2.0.0"
@@ -11180,12 +11548,12 @@
       "license": "MIT"
     },
     "node_modules/lowercase-keys": {
-      "version": "3.0.0",
-      "resolved": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-3.0.0.tgz",
-      "integrity": "sha512-ozCC6gdQ+glXOQsveKD0YsDy8DSQFjDTz4zyzEHNV5+JP5D62LmfDZ6o1cycFx9ouG940M5dE8C8CTewdj2YWQ==",
+      "version": "4.0.1",
+      "resolved": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-4.0.1.tgz",
+      "integrity": "sha512-wI9Nui/L8VfADa/cr/7NQruaASk1k23/Uh1khQ02BCVYiiy8F4AhOGnQzJy3Fl/c44GnYSbZHv8g7EcG3kJ1Qg==",
       "license": "MIT",
       "engines": {
-        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+        "node": ">=20"
       },
       "funding": {
         "url": "https://github.com/sponsors/sindresorhus"
@@ -12394,9 +12762,9 @@
       }
     },
     "node_modules/node-html-better-parser": {
-      "version": "1.5.8",
-      "resolved": "https://registry.npmjs.org/node-html-better-parser/-/node-html-better-parser-1.5.8.tgz",
-      "integrity": "sha512-t/wAKvaTSKco43X+yf9+76RiMt18MtMmzd4wc7rKj+fWav6DV4ajDEKdWlLzSE8USDF5zr/06uGj0Wr/dGAFtw==",
+      "version": "1.5.9",
+      "resolved": "https://registry.npmjs.org/node-html-better-parser/-/node-html-better-parser-1.5.9.tgz",
+      "integrity": "sha512-z1I5UINMezJXYL9cH3h0a9KBth2G978gSLlfkpQ+CQzzVHVQy9gpARgm9eDsz1O4gn1HtgUqjdAIYxKFZm6uHQ==",
       "license": "MIT",
       "dependencies": {
         "html-entities": "^2.3.2"
@@ -12566,6 +12934,68 @@
       "dev": true,
       "license": "MIT"
     },
+    "node_modules/oxfmt": {
+      "version": "0.62.0",
+      "resolved": "https://registry.npmjs.org/oxfmt/-/oxfmt-0.62.0.tgz",
+      "integrity": "sha512-vxgGHTmnDU9j4CX7dDBLzxgmHxfda/yPcgJkGCMUSCwRmz+euo/V08xXLNgXTeqAB9Fhf3Pe2nO1RNKLCVgphQ==",
+      "dev": true,
+      "license": "MIT",
+      "dependencies": {
+        "tinypool": "2.1.0"
+      },
+      "bin": {
+        "oxfmt": "bin/oxfmt"
+      },
+      "engines": {
+        "node": "^20.19.0 || >=22.12.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/Boshen"
+      },
+      "optionalDependencies": {
+        "@oxfmt/binding-android-arm-eabi": "0.62.0",
+        "@oxfmt/binding-android-arm64": "0.62.0",
+        "@oxfmt/binding-darwin-arm64": "0.62.0",
+        "@oxfmt/binding-darwin-x64": "0.62.0",
+        "@oxfmt/binding-freebsd-x64": "0.62.0",
+        "@oxfmt/binding-linux-arm-gnueabihf": "0.62.0",
+        "@oxfmt/binding-linux-arm-musleabihf": "0.62.0",
+        "@oxfmt/binding-linux-arm64-gnu": "0.62.0",
+        "@oxfmt/binding-linux-arm64-musl": "0.62.0",
+        "@oxfmt/binding-linux-ppc64-gnu": "0.62.0",
+        "@oxfmt/binding-linux-riscv64-gnu": "0.62.0",
+        "@oxfmt/binding-linux-riscv64-musl": "0.62.0",
+        "@oxfmt/binding-linux-s390x-gnu": "0.62.0",
+        "@oxfmt/binding-linux-x64-gnu": "0.62.0",
+        "@oxfmt/binding-linux-x64-musl": "0.62.0",
+        "@oxfmt/binding-openharmony-arm64": "0.62.0",
+        "@oxfmt/binding-win32-arm64-msvc": "0.62.0",
+        "@oxfmt/binding-win32-ia32-msvc": "0.62.0",
+        "@oxfmt/binding-win32-x64-msvc": "0.62.0"
+      },
+      "peerDependencies": {
+        "svelte": "^5.0.0",
+        "vite-plus": "*"
+      },
+      "peerDependenciesMeta": {
+        "svelte": {
+          "optional": true
+        },
+        "vite-plus": {
+          "optional": true
+        }
+      }
+    },
+    "node_modules/oxfmt/node_modules/tinypool": {
+      "version": "2.1.0",
+      "resolved": "https://registry.npmjs.org/tinypool/-/tinypool-2.1.0.tgz",
+      "integrity": "sha512-Pugqs6M0m7Lv1I7FtxN4aoyToKg1C4tu+/381vH35y8oENM/Ai7f7C4StcoK4/+BSw9ebcS8jRiVrORFKCALLw==",
+      "dev": true,
+      "license": "MIT",
+      "engines": {
+        "node": "^20.0.0 || >=22.0.0"
+      }
+    },
     "node_modules/oxlint": {
       "version": "1.77.0",
       "resolved": "https://registry.npmjs.org/oxlint/-/oxlint-1.77.0.tgz",
@@ -12615,15 +13045,6 @@
         }
       }
     },
-    "node_modules/p-cancelable": {
-      "version": "4.0.1",
-      "resolved": "https://registry.npmjs.org/p-cancelable/-/p-cancelable-4.0.1.tgz",
-      "integrity": "sha512-wBowNApzd45EIKdO1LaU+LrMBwAcjfPaYtVzV3lmfM3gf8Z4CHZsiIqlM8TZZ8okYvh5A1cP6gTfCRQtwUpaUg==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=14.16"
-      }
-    },
     "node_modules/p-map": {
       "version": "7.0.4",
       "resolved": "https://registry.npmjs.org/p-map/-/p-map-7.0.4.tgz",
@@ -12686,9 +13107,19 @@
       "license": "MIT"
     },
     "node_modules/pako": {
-      "version": "1.0.11",
-      "resolved": "https://registry.npmjs.org/pako/-/pako-1.0.11.tgz",
-      "integrity": "sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==",
+      "version": "2.2.0",
+      "resolved": "https://registry.npmjs.org/pako/-/pako-2.2.0.tgz",
+      "integrity": "sha512-zJq6RP/5q+TO2OpFV3FHzlPnFjmkb7Nc99a5SNjJE+uu/PkpChs+NIZSSzbBoD+6kjiISXjfYdwj1ZRQ81dz/w==",
+      "funding": [
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/puzrin"
+        },
+        {
+          "type": "github",
+          "url": "https://github.com/sponsors/nodeca"
+        }
+      ],
       "license": "(MIT AND Zlib)"
     },
     "node_modules/parent-module": {
@@ -13767,19 +14198,19 @@
       }
     },
     "node_modules/react-i18next": {
-      "version": "16.6.6",
-      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-16.6.6.tgz",
-      "integrity": "sha512-ZgL2HUoW34UKUkOV7uSQFE1CDnRPD+tCR3ywSuWH7u2iapnz86U8Bi3Vrs620qNDzCf1F47NxglCEkchCTDOHw==",
+      "version": "17.0.11",
+      "resolved": "https://registry.npmjs.org/react-i18next/-/react-i18next-17.0.11.tgz",
+      "integrity": "sha512-cDtkXgxjuFTWUH6V+aQn1Ve5vDiUztCNPWW5GtSHDccsgRXO1nE6QFWCEmc1KAutrb3OUv87wFShJL5RhUwPXg==",
       "license": "MIT",
       "dependencies": {
         "@babel/runtime": "^7.29.2",
-        "html-parse-stringify": "^3.0.1",
+        "html-parse-stringify": "^4.0.1",
         "use-sync-external-store": "^1.6.0"
       },
       "peerDependencies": {
-        "i18next": ">= 25.10.9",
+        "i18next": ">= 26.2.0",
         "react": ">= 16.8.0",
-        "typescript": "^5 || ^6"
+        "typescript": "^5 || ^6 || ^7"
       },
       "peerDependenciesMeta": {
         "react-dom": {
@@ -14421,6 +14852,18 @@
         "url": "https://github.com/sponsors/sindresorhus"
       }
     },
+    "node_modules/responselike/node_modules/lowercase-keys": {
+      "version": "3.0.0",
+      "resolved": "https://registry.npmjs.org/lowercase-keys/-/lowercase-keys-3.0.0.tgz",
+      "integrity": "sha512-ozCC6gdQ+glXOQsveKD0YsDy8DSQFjDTz4zyzEHNV5+JP5D62LmfDZ6o1cycFx9ouG940M5dE8C8CTewdj2YWQ==",
+      "license": "MIT",
+      "engines": {
+        "node": "^12.20.0 || ^14.13.1 || >=16.0.0"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/rettime": {
       "version": "0.11.11",
       "resolved": "https://registry.npmjs.org/rettime/-/rettime-0.11.11.tgz",
@@ -14724,9 +15167,9 @@
       "license": "MIT"
     },
     "node_modules/semver": {
-      "version": "7.7.4",
-      "resolved": "https://registry.npmjs.org/semver/-/semver-7.7.4.tgz",
-      "integrity": "sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==",
+      "version": "7.8.5",
+      "resolved": "https://registry.npmjs.org/semver/-/semver-7.8.5.tgz",
+      "integrity": "sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==",
       "license": "ISC",
       "bin": {
         "semver": "bin/semver.js"
@@ -16229,7 +16672,6 @@
       "version": "1.0.0",
       "resolved": "https://registry.npmjs.org/tagged-tag/-/tagged-tag-1.0.0.tgz",
       "integrity": "sha512-yEFYrVhod+hdNyx7g5Bnkkb0G6si8HJurOoOEgC8B/O0uXLHlaey/65KRv6cuWBNhBgHKAROVpc7QyYqE5gFng==",
-      "dev": true,
       "license": "MIT",
       "engines": {
         "node": ">=20"
@@ -16638,6 +17080,18 @@
         "tsc6": "bin/tsc6"
       }
     },
+    "node_modules/uint8array-extras": {
+      "version": "1.5.0",
+      "resolved": "https://registry.npmjs.org/uint8array-extras/-/uint8array-extras-1.5.0.tgz",
+      "integrity": "sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==",
+      "license": "MIT",
+      "engines": {
+        "node": ">=18"
+      },
+      "funding": {
+        "url": "https://github.com/sponsors/sindresorhus"
+      }
+    },
     "node_modules/undici-types": {
       "version": "7.16.0",
       "resolved": "https://registry.npmjs.org/undici-types/-/undici-types-7.16.0.tgz",
@@ -17383,15 +17837,6 @@
       "dev": true,
       "license": "MIT"
     },
-    "node_modules/void-elements": {
-      "version": "3.1.0",
-      "resolved": "https://registry.npmjs.org/void-elements/-/void-elements-3.1.0.tgz",
-      "integrity": "sha512-Dhxzh5HZuiHQhbvTW9AMetFfBHDMYpo23Uo9btPXgdYP+3T5S+p+jgNy7spra+veYhBP2dCSgxR/i2Y02h5/6w==",
-      "license": "MIT",
-      "engines": {
-        "node": ">=0.10.0"
-      }
-    },
     "node_modules/vue": {
       "version": "3.5.39",
       "resolved": "https://registry.npmjs.org/vue/-/vue-3.5.39.tgz",
diff --git a/frontend/package.json b/frontend/package.json
index 3fd1f8e106..71a71661e7 100644
--- a/frontend/package.json
+++ b/frontend/package.json
@@ -7,31 +7,31 @@
   "proxy": "http://localhost:8080",
   "dependencies": {
     "@atlaskit/pragmatic-drag-and-drop": "^1.7.7",
-    "@cantoo/pdf-lib": "^2.5.3",
+    "@cantoo/pdf-lib": "^2.8.2",
     "@dnd-kit/core": "^6.3.1",
-    "@embedpdf/core": "^2.14.4",
+    "@embedpdf/core": "^2.15.0",
     "@embedpdf/engines": "^2.14.4",
-    "@embedpdf/models": "^2.14.4",
-    "@embedpdf/plugin-annotation": "^2.14.4",
-    "@embedpdf/plugin-attachment": "^2.14.4",
-    "@embedpdf/plugin-bookmark": "^2.14.4",
-    "@embedpdf/plugin-document-manager": "^2.14.4",
-    "@embedpdf/plugin-export": "^2.14.4",
-    "@embedpdf/plugin-history": "^2.14.4",
-    "@embedpdf/plugin-interaction-manager": "^2.14.4",
-    "@embedpdf/plugin-pan": "^2.14.4",
-    "@embedpdf/plugin-print": "^2.14.4",
-    "@embedpdf/plugin-redaction": "^2.14.4",
-    "@embedpdf/plugin-render": "^2.14.4",
-    "@embedpdf/plugin-rotate": "^2.14.4",
-    "@embedpdf/plugin-scroll": "^2.14.4",
-    "@embedpdf/plugin-search": "^2.14.4",
+    "@embedpdf/models": "^2.15.0",
+    "@embedpdf/plugin-annotation": "^2.15.0",
+    "@embedpdf/plugin-attachment": "^2.15.0",
+    "@embedpdf/plugin-bookmark": "^2.15.0",
+    "@embedpdf/plugin-document-manager": "^2.15.0",
+    "@embedpdf/plugin-export": "^2.15.0",
+    "@embedpdf/plugin-history": "^2.15.0",
+    "@embedpdf/plugin-interaction-manager": "^2.15.0",
+    "@embedpdf/plugin-pan": "^2.15.0",
+    "@embedpdf/plugin-print": "^2.15.0",
+    "@embedpdf/plugin-redaction": "^2.15.0",
+    "@embedpdf/plugin-render": "^2.15.0",
+    "@embedpdf/plugin-rotate": "^2.15.0",
+    "@embedpdf/plugin-scroll": "^2.15.0",
+    "@embedpdf/plugin-search": "^2.15.0",
     "@embedpdf/plugin-selection": "^2.14.4",
-    "@embedpdf/plugin-spread": "^2.14.4",
-    "@embedpdf/plugin-thumbnail": "^2.14.4",
-    "@embedpdf/plugin-tiling": "^2.14.4",
-    "@embedpdf/plugin-viewport": "^2.14.4",
-    "@embedpdf/plugin-zoom": "^2.14.4",
+    "@embedpdf/plugin-spread": "^2.15.0",
+    "@embedpdf/plugin-thumbnail": "^2.15.0",
+    "@embedpdf/plugin-tiling": "^2.15.0",
+    "@embedpdf/plugin-viewport": "^2.15.0",
+    "@embedpdf/plugin-zoom": "^2.15.0",
     "@emotion/react": "^11.14.0",
     "@emotion/styled": "^11.14.1",
     "@mantine/core": "^8.3.1",
@@ -47,6 +47,7 @@
     "@supabase/supabase-js": "^2.47.13",
     "@tailwindcss/postcss": "^4.1.13",
     "@tanstack/react-query": "^5.101.4",
+    "@tanstack/react-table": "^9.1.2",
     "@tanstack/react-virtual": "^3.13.12",
     "@tauri-apps/api": "^2.10.1",
     "@tauri-apps/plugin-dialog": "2.7.0",
@@ -58,10 +59,10 @@
     "autoprefixer": "^10.4.21",
     "axios": "^1.15.0",
     "d3": "^7.9.0",
-    "i18next": "^25.10.10",
-    "i18next-browser-languagedetector": "^8.2.0",
+    "i18next": "^26.3.6",
+    "i18next-browser-languagedetector": "^8.2.1",
     "jszip": "^3.10.1",
-    "license-report": "^6.8.0",
+    "license-report": "^6.8.5",
     "pdfjs-dist": "^5.4.149",
     "peerjs": "^1.5.5",
     "pixelmatch": "^7.1.0",
@@ -70,7 +71,7 @@
     "react": "^19.2.8",
     "react-dom": "^19.2.8",
     "react-easy-crop": "^5.5.6",
-    "react-i18next": "^16.6.6",
+    "react-i18next": "^17.0.11",
     "react-markdown": "^9.0.3",
     "react-rnd": "^10.5.2",
     "react-router-dom": "^7.9.1",
@@ -142,12 +143,12 @@
     "license-checker": "^25.0.1",
     "msw": "^2.14.6",
     "msw-storybook-addon": "^2.0.7",
+    "oxfmt": "^0.62.0",
     "oxlint": "^1.77.0",
     "postcss": "^8.5.12",
     "postcss-cli": "^11.0.1",
     "postcss-preset-mantine": "^1.18.0",
     "postcss-simple-vars": "^7.0.1",
-    "prettier": "^3.8.1",
     "puppeteer": "^24.25.0",
     "rollup-plugin-visualizer": "^7.0.1",
     "storybook": "^9.1.20",
@@ -170,6 +171,7 @@
   },
   "overrides": {
     "devalue": "^5.8.1",
+    "pako": "^2.2.0",
     "tsconfck": {
       "typescript": "$typescript"
     }
diff --git a/frontend/stylelint.config.mjs b/frontend/stylelint.config.mjs
index 2781e78516..79f3108c9c 100644
--- a/frontend/stylelint.config.mjs
+++ b/frontend/stylelint.config.mjs
@@ -1,4 +1,4 @@
-// Deliberately minimal: Prettier owns formatting and `task frontend:lint:colors`
+// Deliberately minimal: oxfmt owns formatting and `task frontend:lint:colors`
 // owns the theme tokens, so this only carries rules that catch real bugs.
 export default {
   ignoreFiles: [
diff --git a/gradle/wrapper/gradle-wrapper.jar b/gradle/wrapper/gradle-wrapper.jar
index b1b8ef56b4..eddabd2eef 100644
Binary files a/gradle/wrapper/gradle-wrapper.jar and b/gradle/wrapper/gradle-wrapper.jar differ
diff --git a/gradle/wrapper/gradle-wrapper.properties b/gradle/wrapper/gradle-wrapper.properties
index a9db11550c..ad7845be30 100644
--- a/gradle/wrapper/gradle-wrapper.properties
+++ b/gradle/wrapper/gradle-wrapper.properties
@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-9.6.1-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-9.7.1-bin.zip
 networkTimeout=10000
 retries=0
 retryBackOffMs=500
diff --git a/scripts/init-without-ocr.sh b/scripts/init-without-ocr.sh
index c55dc1e6d4..88a10ffa28 100755
--- a/scripts/init-without-ocr.sh
+++ b/scripts/init-without-ocr.sh
@@ -890,6 +890,11 @@ log "Setting permissions..."
 mkdir -p /tmp/stirling-pdf /tmp/stirling-pdf/heap_dumps /logs /configs /configs/heap_dumps /configs/cache /customFiles /pipeline /storage || true
 CHOWN_PATHS=("$HOME" "/logs" "/scripts" "/configs" "/customFiles" "/pipeline" "/storage" "/tmp/stirling-pdf" "/app.jar")
 [ -d /usr/share/fonts/truetype ] && CHOWN_PATHS+=("/usr/share/fonts/truetype")
+# Chowned here rather than at build time so it follows PUID/PGID remapping.
+if [ -d "${STIRLING_ENGINE_HOME:-/opt/stirling-engine}" ]; then
+  mkdir -p "${STIRLING_ENGINE_HOME:-/opt/stirling-engine}/data" || true
+  CHOWN_PATHS+=("${STIRLING_ENGINE_HOME:-/opt/stirling-engine}/data")
+fi
 CHOWN_OK=true
 for p in "${CHOWN_PATHS[@]}"; do
   if [ -e "$p" ]; then
@@ -962,6 +967,38 @@ else
   JAVA_CMD+=("org.springframework.boot.loader.launch.JarLauncher")
 fi
 
+# ---------- AI engine ----------
+# Only the fat image ships it. The backend already defaults to http://localhost:5001.
+STIRLING_ENGINE_HOME="${STIRLING_ENGINE_HOME:-/opt/stirling-engine}"
+ENGINE_PID=""
+if [ -x "$STIRLING_ENGINE_HOME/.venv/bin/python" ] && [ "${AIENGINE_ENABLED:-true}" = "false" ]; then
+  log "AI engine bundled but AIENGINE_ENABLED=false; not starting it."
+elif [ -x "$STIRLING_ENGINE_HOME/.venv/bin/python" ]; then
+  log "Starting bundled AI engine on port ${STIRLING_ENGINE_PORT:-5001}..."
+  ENGINE_CMD=(
+    "$STIRLING_ENGINE_HOME/.venv/bin/python" -m uvicorn
+    stirling.api.app:app
+    --host 127.0.0.1
+    --port "${STIRLING_ENGINE_PORT:-5001}"
+    --workers "${STIRLING_ENGINE_WORKERS:-2}"
+    --app-dir "$STIRLING_ENGINE_HOME/src"
+  )
+  # init.sh exports PYTHONPATH for unoserver's 3.12 venv; inheriting it breaks the 3.13 engine.
+  if [ "$CURRENT_USER" = "$RUNTIME_USER" ]; then
+    env -u PYTHONPATH "${ENGINE_CMD[@]}" &
+  elif [ "$CURRENT_UID" -eq 0 ] && command_exists setpriv; then
+    env -u PYTHONPATH \
+        HOME="$(getent passwd "$RUNTIME_USER" | cut -d: -f6)" \
+        USER="$RUNTIME_USER" \
+        LOGNAME="$RUNTIME_USER" \
+      setpriv --reuid="$RUNTIME_USER" --regid="$(id -gn "$RUNTIME_USER")" --init-groups -- "${ENGINE_CMD[@]}" &
+  else
+    env -u PYTHONPATH "${ENGINE_CMD[@]}" &
+  fi
+  ENGINE_PID=$!
+  log "AI engine started (PID $ENGINE_PID)"
+fi
+
 if [ "$CURRENT_USER" = "$RUNTIME_USER" ]; then
   "${JAVA_CMD[@]}" &
 elif [ "$CURRENT_UID" -eq 0 ] && command_exists setpriv; then
@@ -1074,6 +1111,12 @@ fi
 
 wait "$JAVA_PID" || true
 exit_code=$?
+
+if [ -n "$ENGINE_PID" ] && kill -0 "$ENGINE_PID" 2>/dev/null; then
+  log "Stopping AI engine (PID $ENGINE_PID)..."
+  kill "$ENGINE_PID" 2>/dev/null || true
+  wait "$ENGINE_PID" 2>/dev/null || true
+fi
 case "$exit_code" in
   0)   log "Stirling PDF exited normally." ;;
   137) log "Stirling PDF was OOM-killed (exit 137). Check container memory limits." ;;
diff --git a/testing/cucumber/behave.ini b/testing/cucumber/behave.ini
index 0b2a9e4bac..f838c8dad2 100644
--- a/testing/cucumber/behave.ini
+++ b/testing/cucumber/behave.ini
@@ -3,6 +3,7 @@
 # Run either directly, e.g. `python -m behave features/enterprise`.
 exclude_re = features/(enterprise|multinode)
 tags = ~@manual
+       ~@nightly
 
 [behave.formatters]
 # Registers the html report formatter (behave-html-formatter) used by run-multinode-regression.sh.
diff --git a/testing/cucumber/features/analysis.feature b/testing/cucumber/features/analysis.feature
index 0f7ed17b32..039dc31d76 100644
--- a/testing/cucumber/features/analysis.feature
+++ b/testing/cucumber/features/analysis.feature
@@ -15,6 +15,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains <pages> pages
         When I send the API request to the endpoint "/api/v1/analysis/page-count"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -35,6 +36,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 4 pages
         When I send the API request to the endpoint "/api/v1/analysis/basic-info"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -66,6 +68,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/analysis/document-properties"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -104,6 +107,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages with random text
         When I send the API request to the endpoint "/api/v1/analysis/page-dimensions"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -118,6 +122,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/analysis/form-fields"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -141,6 +146,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/analysis/annotation-info"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -164,6 +170,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/analysis/font-info"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -187,6 +194,7 @@ Feature: Analysis API Endpoints
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/analysis/security-info"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
diff --git a/testing/cucumber/features/async_jobs.feature b/testing/cucumber/features/async_jobs.feature
new file mode 100644
index 0000000000..b0181bbe94
--- /dev/null
+++ b/testing/cucumber/features/async_jobs.feature
@@ -0,0 +1,143 @@
+@jobs
+Feature: Asynchronous job API
+
+    # Any tool endpoint accepts ?async=true and returns a jobId instead of the file.
+    # No parallel step here: every step after the submit depends on that one jobId.
+
+    @positive
+    Scenario: An async job runs to completion and returns its result
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        And the request data includes
+            | parameter | value |
+            | angle     | 90    |
+        When I send the API request to the endpoint "/api/v1/general/rotate-pdf?async=true"
+        Then the response status code should be 200
+        And the response JSON field "async" should be true
+
+        When I store the job id from the response
+        And I wait for the job to complete
+        Then the job should be reported complete
+
+        When I request the job result
+        Then the response status code should be 200
+        And the response content type should be "application/pdf"
+        And the response PDF should contain 3 pages
+
+
+    @positive
+    Scenario: Async job results are listed and downloadable as individual files
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 4 pages
+        And the request data includes
+            | parameter   | value |
+            | pageNumbers | all   |
+        When I send the API request to the endpoint "/api/v1/general/split-pages?async=true"
+        Then the response status code should be 200
+
+        When I store the job id from the response
+        And I wait for the job to complete
+        And I request the job result file list
+        Then the response status code should be 200
+        And the job result file list should contain at least 4 file(s)
+
+        When I request the first job result file metadata
+        Then the response status code should be 200
+        And the response JSON field "fileName" should not be empty
+
+        When I download the first job result file
+        Then the response status code should be 200
+        And the response file should have size greater than 100
+
+
+    @negative
+    Scenario: Cancelling an already-finished job is rejected
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        And the request data includes
+            | parameter | value |
+            | angle     | 180   |
+        When I send the API request to the endpoint "/api/v1/general/rotate-pdf?async=true"
+        And I store the job id from the response
+        And I wait for the job to complete
+        And I cancel the job
+        Then the response status code should be 400
+
+
+    @negative
+    Scenario: Polling a job id the caller does not own is forbidden
+        When I send a GET request to "/api/v1/general/job/does-not-exist-1234"
+        Then the response status code should be 403
+
+
+    @negative
+    Scenario: Downloading an unknown file id is rejected
+        When I send a GET request to "/api/v1/general/files/does-not-exist-1234"
+        Then the response status code should be 404
+
+
+    # An async submit persists a copy of the upload and its results under the server's
+    # file store. Those outlive the request by design, so the only proof they are not a
+    # leak is that cleanup actually removes them. These scenarios exercise that, and
+    # environment.after_all sweeps the rest so the post-run temp-file diff stays honest.
+
+    @positive @cleanup
+    Scenario: Downloading a result does not consume it
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        And the request data includes
+            | parameter | value |
+            | angle     | 90    |
+        When I send the API request to the endpoint "/api/v1/general/rotate-pdf?async=true"
+        And I store the job id from the response
+        And I wait for the job to complete
+        And I request the job result file list
+        Then the response status code should be 200
+
+        When I download the first job result file
+        Then the response status code should be 200
+        And the response file should have size greater than 100
+        # A download is a read, not a take: the file survives for a retry or a second client.
+        And the job result file should still be downloadable
+
+
+    @positive @cleanup
+    Scenario: Cleanup releases a finished job and deletes its stored files
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        And the request data includes
+            | parameter   | value |
+            | pageNumbers | all   |
+        When I send the API request to the endpoint "/api/v1/general/split-pages?async=true"
+        And I store the job id from the response
+        And I wait for the job to complete
+        And I request the job result file list
+        Then the response status code should be 200
+        And the job result file list should contain at least 3 file(s)
+
+        When I trigger the async job cleanup
+        Then the response status code should be 200
+        # 3 split results plus the persisted copy of the upload.
+        And the cleanup should report at least 1 job(s) removed
+        And the cleanup should report at least 4 file(s) deleted
+        And the job should no longer exist
+        And the job result file should no longer be downloadable
+
+
+    @positive @cleanup
+    Scenario: A second cleanup finds nothing left behind
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        And the request data includes
+            | parameter | value |
+            | angle     | 180   |
+        When I send the API request to the endpoint "/api/v1/general/rotate-pdf?async=true"
+        And I store the job id from the response
+        And I wait for the job to complete
+        And I trigger the async job cleanup
+        Then the response status code should be 200
+        And the cleanup should report at least 1 job(s) removed
+
+        When I trigger the async job cleanup
+        Then the response status code should be 200
+        And the cleanup should report nothing left to remove
diff --git a/testing/cucumber/features/attachments.feature b/testing/cucumber/features/attachments.feature
index 6bb9cfd6ea..582abadda0 100644
--- a/testing/cucumber/features/attachments.feature
+++ b/testing/cucumber/features/attachments.feature
@@ -7,6 +7,7 @@ Feature: Attachments API Validation
         And the pdf contains 2 pages with random text
         And I also generate a PDF file as "attachments"
         When I send the API request to the endpoint "/api/v1/misc/add-attachments"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -30,6 +31,7 @@ Feature: Attachments API Validation
         And the pdf contains 2 pages
         And the pdf has an attachment named "test_doc.txt"
         When I send the API request to the endpoint "/api/v1/misc/list-attachments"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -49,6 +51,7 @@ Feature: Attachments API Validation
         And the pdf contains 2 pages
         And the pdf has an attachment named "report.txt"
         When I send the API request to the endpoint "/api/v1/misc/extract-attachments"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response file should have size greater than 0
 
@@ -62,6 +65,7 @@ Feature: Attachments API Validation
             | attachmentName | original.txt |
             | newName        | renamed.txt  |
         When I send the API request to the endpoint "/api/v1/misc/rename-attachment"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -76,6 +80,7 @@ Feature: Attachments API Validation
             | parameter      | value          |
             | attachmentName | to_delete.txt  |
         When I send the API request to the endpoint "/api/v1/misc/delete-attachment"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
diff --git a/testing/cucumber/features/bookmarks_chapters.feature b/testing/cucumber/features/bookmarks_chapters.feature
index 8bda991728..02fb33fb23 100644
--- a/testing/cucumber/features/bookmarks_chapters.feature
+++ b/testing/cucumber/features/bookmarks_chapters.feature
@@ -7,6 +7,7 @@ Feature: Bookmarks and Chapter Splitting API Validation
         And the pdf contains 3 pages with random text
         And the pdf has bookmarks
         When I send the API request to the endpoint "/api/v1/general/extract-bookmarks"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -31,6 +32,7 @@ Feature: Bookmarks and Chapter Splitting API Validation
             | includeMetadata | false |
             | allowDuplicates | false |
         When I send the API request to the endpoint "/api/v1/general/split-pdf-by-chapters"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response file should have size greater than 0
 
diff --git a/testing/cucumber/features/convert_nightly.feature b/testing/cucumber/features/convert_nightly.feature
new file mode 100644
index 0000000000..eb30bdbbac
--- /dev/null
+++ b/testing/cucumber/features/convert_nightly.feature
@@ -0,0 +1,53 @@
+@nightly @convert
+Feature: Heavy conversion endpoints
+
+    # Too slow for every PR: these shell out to LibreOffice, Calibre or Ghostscript.
+    # behave.ini excludes @nightly; the nightly job opts back in with --tags=@nightly.
+
+    @pdf-to-xlsx @positive
+    Scenario: Convert a PDF containing tables to XLSX
+        Given I use an example file at "exampleFiles/tables.pdf" as parameter "fileInput"
+        When I send the API request to the endpoint "/api/v1/convert/pdf/xlsx"
+        And this operation is run 3 times in parallel
+        Then the response status code should be 200
+        And the response file should have size greater than 1000
+        And the response file should have extension ".xlsx"
+
+
+    @pdf-to-xlsx @positive
+    Scenario: A PDF with no tables converts without producing a spreadsheet
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages with random text
+        When I send the API request to the endpoint "/api/v1/convert/pdf/xlsx"
+        Then the response status code should be 204
+
+
+    @text-editor @positive
+    Scenario: text-editor metadata describes the document for the editor
+        Given I use an example file at "exampleFiles/tables.pdf" as parameter "fileInput"
+        When I send the API request to the endpoint "/api/v1/convert/pdf/text-editor/metadata"
+        And this operation is run 3 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+        And the response JSON field "fonts" should not be empty
+
+
+    @vector @negative
+    Scenario: vector conversion rejects an input format Ghostscript cannot read
+        Given I generate an SVG file as "fileInput"
+        When I send the API request to the endpoint "/api/v1/convert/vector/pdf"
+        Then the response status code should be 400
+        And the response JSON error should contain "Unsupported"
+
+
+    @ebook @positive
+    Scenario: An EPUB produced by Stirling converts back to PDF
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages with random text
+        And the request data includes
+            | parameter    | value |
+            | outputFormat | EPUB  |
+        When I send the API request to the endpoint "/api/v1/convert/pdf/epub"
+        And this operation is run 3 times in parallel
+        Then the response status code should be 200
+        And the response file should have size greater than 200
diff --git a/testing/cucumber/features/environment.py b/testing/cucumber/features/environment.py
index 208e45b23b..84d30a50bc 100644
--- a/testing/cucumber/features/environment.py
+++ b/testing/cucumber/features/environment.py
@@ -1,8 +1,13 @@
 import os
 import subprocess
+import sys
 
 import requests
 
+sys.path.insert(0, os.path.join(os.path.dirname(__file__), "steps"))
+import job_support  # noqa: E402
+import parallel_support  # noqa: E402
+
 _BASE_URL = "http://localhost:8080"
 _CONTAINER_NAME = os.environ.get("TEST_CONTAINER_NAME", "")
 _REPORT_DIR = os.environ.get("TEST_REPORT_DIR", "")
@@ -142,8 +147,17 @@ def before_all(context):
 
 def before_scenario(context, scenario):
     """Reset all per-scenario state before each scenario runs."""
-    # Skip scenarios that require JWT Bearer auth when it is not functional.
     scenario_tags = set(scenario.effective_tags)
+
+    # Concurrency is opted into by a step in the feature, never by configuration.
+    context.parallel_repeat = 1
+    context.parallel_decoy = False
+    context.parallel_validated = False
+    context.parallel_ran_at = 0
+    context.parallel_request = None
+    context.parallel_get = None
+
+    # Skip scenarios that require JWT Bearer auth when it is not functional.
     if _JWT_DEPENDENT_TAGS & scenario_tags and not context.jwt_available:
         scenario.skip(
             "JWT Bearer authentication not available in this environment (V2 disabled). "
@@ -217,3 +231,48 @@ def after_scenario(context, scenario):
     context.jwt_token = None
     context.original_jwt_token = None
     context._status_ok = False
+    context.parallel_request = None
+    context.parallel_get = None
+
+
+def _cleanup_async_job_files():
+    """Release every async job result the run left on the server.
+
+    An async submit persists a copy of the upload plus its results, and both are held
+    for the job retention window (30 minutes by default) - far longer than a test run.
+    The regression check that diffs the container filesystem before and after this suite
+    would otherwise flag them as leaked temp files. Sweeping them here keeps that check
+    strict: anything it still reports afterwards is a genuine leak.
+    """
+    try:
+        response = job_support.trigger_cleanup()
+    except Exception as exc:
+        print(f"\n[CLEANUP] Async job cleanup request failed: {exc}")
+        return
+    if response.status_code == 404:
+        print(
+            "\n[CLEANUP] Async job cleanup endpoint not available on this build; "
+            "async job files will age out on their own."
+        )
+        return
+    if response.status_code != 200:
+        print(
+            f"\n[CLEANUP] Async job cleanup returned {response.status_code}: "
+            f"{response.text[:200]}"
+        )
+        return
+    try:
+        summary = response.json()
+    except ValueError:
+        print("\n[CLEANUP] Async job cleanup returned a non-JSON body")
+        return
+    print(
+        f"\n[CLEANUP] Released {summary.get('jobsRemoved', '?')} async job(s) and "
+        f"{summary.get('filesDeleted', '?')} stored file(s); "
+        f"{summary.get('jobsRetained', '?')} retained."
+    )
+
+
+def after_all(context):
+    _cleanup_async_job_files()
+    parallel_support.print_summary()
diff --git a/testing/cucumber/features/examples.feature b/testing/cucumber/features/examples.feature
index e0ea72024e..186d882e1c 100644
--- a/testing/cucumber/features/examples.feature
+++ b/testing/cucumber/features/examples.feature
@@ -10,6 +10,7 @@ Feature: API Validation
             | parameter | value       |
             | password  | password123 |
         When I send the API request to the endpoint "/api/v1/security/remove-password"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response file should have size greater than 0
         And the response PDF is not passworded
@@ -31,6 +32,7 @@ Feature: API Validation
     Scenario: Get info
         Given I generate a PDF file as "fileInput"
         When I send the API request to the endpoint "/api/v1/security/get-info-on-pdf"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/json"
         And the response file should have size greater than 100
         And the response status code should be 200
@@ -43,6 +45,7 @@ Feature: API Validation
             | parameter | value       |
             | password  | password123 |
         When I send the API request to the endpoint "/api/v1/security/add-password"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response file should have size greater than 100
         And the response PDF is passworded
@@ -81,6 +84,7 @@ Feature: API Validation
             | alphabet      | roman            |
             | customColor   | #d3d3d3          |
         When I send the API request to the endpoint "/api/v1/security/add-watermark"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response file should have size greater than 100
         And the response status code should be 200
@@ -94,6 +98,7 @@ Feature: API Validation
             | threshold    | 90    |
             | whitePercent | 99.9  |
         When I send the API request to the endpoint "/api/v1/misc/remove-blanks"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/octet-stream"
         And the response file should have extension ".zip"
         And the response ZIP should contain 1 files
@@ -106,6 +111,7 @@ Feature: API Validation
             | parameter        | value |
             | flattenOnlyForms | false |
         When I send the API request to the endpoint "/api/v1/misc/flatten"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response file should have size greater than 0
         And the response status code should be 200
@@ -121,6 +127,7 @@ Feature: API Validation
             | keywords  | sample, test   |
             | producer  | Test Producer  |
         When I send the API request to the endpoint "/api/v1/misc/update-metadata"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response file should have size greater than 0
         And the response PDF metadata should include "Author" as "John Doe"
diff --git a/testing/cucumber/features/external.feature b/testing/cucumber/features/external.feature
index e8e8d85272..3257657068 100644
--- a/testing/cucumber/features/external.feature
+++ b/testing/cucumber/features/external.feature
@@ -174,6 +174,7 @@ Feature: API Validation
             | dpi         | 300      |
             | imageFormat | <format> |
         When I send the API request to the endpoint "/api/v1/convert/pdf/img"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response file should have size greater than 100
         And the response file should have extension ".zip"
@@ -231,6 +232,7 @@ Feature: API Validation
         Given I generate a PDF file as "fileInput"
         And the pdf contains 3 pages with random text
         When I send the API request to the endpoint "/api/v1/convert/pdf/markdown"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response file should have size greater than 100
         And the response file should have extension ".md"
@@ -244,6 +246,7 @@ Feature: API Validation
             | outputFormat | csv   |
             | pageNumbers  | all   |
         When I send the API request to the endpoint "/api/v1/convert/pdf/csv"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response file should have size greater than 200
         And the response file should have extension ".zip"
diff --git a/testing/cucumber/features/filter.feature b/testing/cucumber/features/filter.feature
index d0f34c8731..2caf1eacf1 100644
--- a/testing/cucumber/features/filter.feature
+++ b/testing/cucumber/features/filter.feature
@@ -18,6 +18,7 @@ Feature: Filter API Endpoints
             | pageCount  | <pageCount>  |
             | comparator | <comparator> |
         When I send the API request to the endpoint "/api/v1/filter/filter-page-count"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -59,6 +60,7 @@ Feature: Filter API Endpoints
             | fileSize   | <fileSize>   |
             | comparator | <comparator> |
         When I send the API request to the endpoint "/api/v1/filter/filter-file-size"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -93,6 +95,7 @@ Feature: Filter API Endpoints
             | rotation   | 0     |
             | comparator | Equal |
         When I send the API request to the endpoint "/api/v1/filter/filter-page-rotation"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -170,6 +173,7 @@ Feature: Filter API Endpoints
             | standardPageSize | LETTER |
             | comparator       | Equal  |
         When I send the API request to the endpoint "/api/v1/filter/filter-page-size"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -242,6 +246,7 @@ Feature: Filter API Endpoints
             | text        | FINDME |
             | pageNumbers | all    |
         When I send the API request to the endpoint "/api/v1/filter/filter-contains-text"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -281,6 +286,7 @@ Feature: Filter API Endpoints
             | parameter   | value |
             | pageNumbers | all   |
         When I send the API request to the endpoint "/api/v1/filter/filter-contains-image"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
diff --git a/testing/cucumber/features/form_advanced.feature b/testing/cucumber/features/form_advanced.feature
index bb02a453b4..c66e7df2e0 100644
--- a/testing/cucumber/features/form_advanced.feature
+++ b/testing/cucumber/features/form_advanced.feature
@@ -8,6 +8,7 @@ Feature: Advanced Forms API Validation (JSON data parts)
         And the pdf has form fields
         And the request includes a JSON part "data" with content "{}"
         When I send the API request to the endpoint "/api/v1/form/fill"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
diff --git a/testing/cucumber/features/forms.feature b/testing/cucumber/features/forms.feature
index c0c1b0f7ff..05ece6f99d 100644
--- a/testing/cucumber/features/forms.feature
+++ b/testing/cucumber/features/forms.feature
@@ -6,6 +6,7 @@ Feature: Forms API Validation
         Given I generate a PDF file as "file"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/form/fields"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -24,6 +25,7 @@ Feature: Forms API Validation
         Given I generate a PDF file as "file"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/form/fields-with-coordinates"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 0
@@ -67,6 +69,7 @@ Feature: Forms API Validation
         Given I generate a PDF file as "file"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/form/modify-fields"
+        And this operation is run 5 times in parallel
         Then the response status code should be 400
 
     @modify-fields @negative
@@ -81,6 +84,7 @@ Feature: Forms API Validation
         Given I generate a PDF file as "file"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/form/delete-fields"
+        And this operation is run 5 times in parallel
         Then the response status code should be 400
 
     @delete-fields @negative
@@ -89,3 +93,34 @@ Feature: Forms API Validation
         And the pdf contains 4 pages
         When I send the API request to the endpoint "/api/v1/form/delete-fields"
         Then the response status code should be 400
+
+
+    @extract-csv @positive
+    Scenario: extract-csv returns CSV for a form PDF
+        Given I generate a PDF file as "file"
+        And the pdf contains 2 pages
+        And the pdf has form fields
+        When I send the API request to the endpoint "/api/v1/form/extract-csv"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "text/csv"
+
+
+    @extract-xlsx @positive
+    Scenario: extract-xlsx returns a spreadsheet for a form PDF
+        Given I generate a PDF file as "file"
+        And the pdf contains 2 pages
+        And the pdf has form fields
+        When I send the API request to the endpoint "/api/v1/form/extract-xlsx"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response file should have size greater than 200
+
+
+    @extract-csv @negative
+    Scenario: extract-csv rejects a upload sent under the wrong part name
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        When I send the API request to the endpoint "/api/v1/form/extract-csv"
+        Then the response status code should be 400
+        And the response JSON error should contain "file"
diff --git a/testing/cucumber/features/general.feature b/testing/cucumber/features/general.feature
index 6ede9bb4fc..747788a9b5 100644
--- a/testing/cucumber/features/general.feature
+++ b/testing/cucumber/features/general.feature
@@ -12,6 +12,7 @@ Feature: API Validation
             | verticalDivisions   | <verticalDivisions>   |
             | merge               | true                  |
         When I send the API request to the endpoint "/api/v1/general/split-pdf-by-sections"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response file should have size greater than 200
         And the response status code should be 200
@@ -34,6 +35,7 @@ Feature: API Validation
             | fileInput   | fileInput     |
             | pageNumbers | <pageNumbers> |
         When I send the API request to the endpoint "/api/v1/general/split-pages"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/octet-stream"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -57,6 +59,7 @@ Feature: API Validation
             | splitType  | <splitType>  |
             | splitValue | <splitValue> |
         When I send the API request to the endpoint "/api/v1/general/split-by-size-or-count"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/octet-stream"
         And the response status code should be 200
         And the response file should have size greater than 200
diff --git a/testing/cucumber/features/general_new.feature b/testing/cucumber/features/general_new.feature
index 9d07bb1749..cd25b09650 100644
--- a/testing/cucumber/features/general_new.feature
+++ b/testing/cucumber/features/general_new.feature
@@ -10,6 +10,7 @@ Feature: General PDF Operations API Validation
             | parameter | value   |
             | angle     | <angle> |
         When I send the API request to the endpoint "/api/v1/general/rotate-pdf"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -41,6 +42,7 @@ Feature: General PDF Operations API Validation
             | parameter   | value |
             | pageNumbers | 3     |
         When I send the API request to the endpoint "/api/v1/general/remove-pages"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -76,6 +78,7 @@ Feature: General PDF Operations API Validation
             | parameter  | value        |
             | customMode | <customMode> |
         When I send the API request to the endpoint "/api/v1/general/rearrange-pages"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -103,6 +106,7 @@ Feature: General PDF Operations API Validation
             | parameter | value      |
             | pageSize  | <pageSize> |
         When I send the API request to the endpoint "/api/v1/general/scale-pages"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -127,6 +131,7 @@ Feature: General PDF Operations API Validation
             | width     | 50    |
             | height    | 50    |
         When I send the API request to the endpoint "/api/v1/general/crop"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -155,6 +160,7 @@ Feature: General PDF Operations API Validation
         Given I generate a PDF file as "fileInput"
         And the pdf contains 5 pages
         When I send the API request to the endpoint "/api/v1/general/pdf-to-single-page"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -199,6 +205,7 @@ Feature: General PDF Operations API Validation
             | parameter     | value |
             | pagesPerSheet | 9     |
         When I send the API request to the endpoint "/api/v1/general/multi-page-layout"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -213,6 +220,7 @@ Feature: General PDF Operations API Validation
             | parameter     | value |
             | pagesPerSheet | 2     |
         When I send the API request to the endpoint "/api/v1/general/booklet-imposition"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -249,3 +257,55 @@ Feature: General PDF Operations API Validation
     #     Then the response content type should be "application/pdf"
     #     And the response status code should be 200
     #     And the response file should have size greater than 0
+
+
+    @edit-table-of-contents @positive
+    Scenario: edit-table-of-contents rewrites the outline
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        And the pdf has bookmarks
+        And the request data includes
+            | parameter    | value                                                    |
+            | bookmarkData | [{"title":"Intro","pageNumber":1,"children":[]}]          |
+        When I send the API request to the endpoint "/api/v1/general/edit-table-of-contents"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/pdf"
+        And the response PDF should contain 3 pages
+
+
+    @edit-text @positive
+    Scenario: edit-text applies a find and replace across the document
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        And the pdf pages all contain the text "Hello world"
+        And the request data includes
+            | parameter | value                                        |
+            | edits     | [{"find":"Hello","replace":"Goodbye"}]       |
+        When I send the API request to the endpoint "/api/v1/general/edit-text"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/pdf"
+
+
+    @edit-text @negative
+    Scenario: edit-text without any operations returns 400
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        When I send the API request to the endpoint "/api/v1/general/edit-text"
+        Then the response status code should be 400
+        And the response JSON error should contain "find/replace"
+
+
+    @split-for-poster-print @positive
+    Scenario: split-for-poster-print tiles each page into an archive
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        And the request data includes
+            | parameter           | value |
+            | horizontalDivisions | 1     |
+            | verticalDivisions   | 1     |
+        When I send the API request to the endpoint "/api/v1/general/split-for-poster-print"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response file should have size greater than 200
diff --git a/testing/cucumber/features/info_config.feature b/testing/cucumber/features/info_config.feature
new file mode 100644
index 0000000000..3559110c29
--- /dev/null
+++ b/testing/cucumber/features/info_config.feature
@@ -0,0 +1,134 @@
+@info @config
+Feature: Config, info and UI-data read APIs
+
+    # Cheap read-only JSON endpoints behind the frontend and admin surfaces.
+
+    @app-config @positive
+    Scenario: app-config returns the frontend configuration
+        When I send a GET request to "/api/v1/config/app-config"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+
+
+    @endpoints-availability @positive
+    Scenario: endpoints-availability reports per-endpoint availability
+        When I send a GET request to "/api/v1/config/endpoints-availability"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+
+
+    @endpoints-enabled @positive
+    Scenario: endpoints-enabled reports the status of a named endpoint
+        When I send a GET request to "/api/v1/config/endpoints-enabled" with parameters
+            | parameter | value      |
+            | endpoints | merge-pdfs |
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+
+
+    @endpoints-enabled @negative
+    Scenario: endpoints-enabled without the endpoints parameter returns 400
+        When I send a GET request to "/api/v1/config/endpoints-enabled"
+        Then the response status code should be 400
+
+
+    @login-disclaimer @positive
+    Scenario: login-disclaimer returns its configuration
+        When I send a GET request to "/api/v1/config/login-disclaimer"
+        Then the response status code should be 200
+        And the response JSON field "enabled" should be false
+
+
+    @health @positive
+    Scenario: info health reports the running version
+        When I send a GET request to "/api/v1/info/health"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response JSON field "status" should equal "UP"
+        And the response JSON field "version" should not be empty
+
+
+    @metrics @positive
+    Scenario Outline: metrics endpoints return a numeric aggregate
+        When I send a GET request to "<endpoint>"
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+        And the response should match the regex "^[0-9.]+$"
+
+        Examples:
+            | endpoint                       |
+            | /api/v1/info/load/unique       |
+            | /api/v1/info/requests/unique   |
+
+
+    @metrics @positive
+    Scenario Outline: metrics list endpoints return a JSON list
+        When I send a GET request to "<endpoint>"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response JSON should be a list
+
+        Examples:
+            | endpoint                          |
+            | /api/v1/info/load/all/unique      |
+            | /api/v1/info/requests/all/unique  |
+
+
+    @metrics @positive
+    Scenario: weekly active users reports tracking metadata
+        When I send a GET request to "/api/v1/info/wau"
+        Then the response status code should be 200
+        And the response JSON field "trackingSince" should not be empty
+
+
+    @settings @positive
+    Scenario: get-endpoints-status returns the endpoint toggle map
+        When I send a GET request to "/api/v1/settings/get-endpoints-status"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+
+
+    @ui-data @positive
+    Scenario Outline: UI data endpoints return JSON for the frontend
+        When I send a GET request to "<endpoint>"
+        Then the response status code should be 200
+        And the response content type should be "application/json"
+
+        Examples:
+            | endpoint                      |
+            | /api/v1/ui-data/footer-info   |
+            | /api/v1/ui-data/home          |
+            | /api/v1/ui-data/licenses      |
+            | /api/v1/ui-data/pipeline      |
+
+
+    @ui-data @positive
+    Scenario: OCR UI data lists the installed tesseract languages
+        When I send a GET request to "/api/v1/ui-data/ocr-pdf"
+        Then the response status code should be 200
+        And the response JSON field "languages" should be a list
+
+
+    @ui-data @positive
+    Scenario: Sign UI data lists the available signature fonts
+        When I send a GET request to "/api/v1/ui-data/sign"
+        Then the response status code should be 200
+        And the response JSON field "fonts" should be a list
+
+
+    @hardware-signing @positive
+    Scenario: Hardware signing capabilities are reported for the server build
+        When I send a GET request to "/api/v1/security/cert-sign/hardware/capabilities"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response JSON field "desktop" should be false
+
+
+    @hardware-signing @negative
+    Scenario: Windows certificate store is rejected outside the desktop app
+        When I send a GET request to "/api/v1/security/cert-sign/hardware/windows-certificates"
+        Then the response status code should be 400
+        And the response JSON error should contain "desktop"
diff --git a/testing/cucumber/features/merge_overlay.feature b/testing/cucumber/features/merge_overlay.feature
index 9e62d1ae99..2f7abe06bc 100644
--- a/testing/cucumber/features/merge_overlay.feature
+++ b/testing/cucumber/features/merge_overlay.feature
@@ -7,6 +7,7 @@ Feature: Merge and Overlay PDF API Validation
         And the pdf contains 2 pages with random text
         And I also generate a PDF file as "fileInput"
         When I send the API request to the endpoint "/api/v1/general/merge-pdfs"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -51,6 +52,7 @@ Feature: Merge and Overlay PDF API Validation
             | overlayMode     | SequentialOverlay |
             | overlayPosition | 0                 |
         When I send the API request to the endpoint "/api/v1/general/overlay-pdfs"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
diff --git a/testing/cucumber/features/misc_new.feature b/testing/cucumber/features/misc_new.feature
index c10f0601d7..528ed6391d 100644
--- a/testing/cucumber/features/misc_new.feature
+++ b/testing/cucumber/features/misc_new.feature
@@ -48,6 +48,7 @@ Feature: Miscellaneous PDF Operations API Validation
             | overrideX    | -1           |
             | overrideY    | -1           |
         When I send the API request to the endpoint "/api/v1/misc/add-stamp"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -92,6 +93,7 @@ Feature: Miscellaneous PDF Operations API Validation
             | position       | 2     |
             | fontSize       | 14    |
         When I send the API request to the endpoint "/api/v1/misc/add-page-numbers"
+        And this operation is run 5 times in parallel against decoy traffic
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 200
@@ -103,6 +105,7 @@ Feature: Miscellaneous PDF Operations API Validation
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/misc/unlock-pdf-forms"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 0
@@ -138,6 +141,7 @@ Feature: Miscellaneous PDF Operations API Validation
             | replaceAndInvertOption       | HIGH_CONTRAST_COLOR |
             | highContrastColorCombination | WHITE_TEXT_ON_BLACK |
         When I send the API request to the endpoint "/api/v1/misc/replace-invert-pdf"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 0
@@ -163,6 +167,7 @@ Feature: Miscellaneous PDF Operations API Validation
         Given I generate a PDF file as "fileInput"
         And the pdf contains 3 pages
         When I send the API request to the endpoint "/api/v1/misc/decompress-pdf"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 0
@@ -188,6 +193,7 @@ Feature: Miscellaneous PDF Operations API Validation
             | parameter              | value |
             | useFirstTextAsFallback | true  |
         When I send the API request to the endpoint "/api/v1/misc/auto-rename"
+        And this operation is run 5 times in parallel
         Then the response content type should be "application/pdf"
         And the response status code should be 200
         And the response file should have size greater than 0
@@ -212,6 +218,7 @@ Feature: Miscellaneous PDF Operations API Validation
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/misc/show-javascript"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response file should have size greater than 0
 
@@ -222,3 +229,28 @@ Feature: Miscellaneous PDF Operations API Validation
         And the pdf contains 5 pages with random text
         When I send the API request to the endpoint "/api/v1/misc/show-javascript"
         Then the response status code should be 200
+
+
+    @auto-rotate-pdf @positive
+    Scenario: auto-rotate-pdf returns a PDF with the page count preserved
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages with random text
+        When I send the API request to the endpoint "/api/v1/misc/auto-rotate-pdf"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/pdf"
+        And the response PDF should contain 3 pages
+
+
+    @add-comments @positive
+    Scenario: add-comments annotates a page without changing the page count
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        And the request data includes
+            | parameter | value                                                                        |
+            | comments  | [{"pageNumber":1,"x":100,"y":100,"text":"review me","author":"qa"}]           |
+        When I send the API request to the endpoint "/api/v1/misc/add-comments"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/pdf"
+        And the response PDF should contain 3 pages
diff --git a/testing/cucumber/features/security_new.feature b/testing/cucumber/features/security_new.feature
index 7058cf2fdd..13763e302f 100644
--- a/testing/cucumber/features/security_new.feature
+++ b/testing/cucumber/features/security_new.feature
@@ -14,6 +14,7 @@ Feature: Security API Validation
             | removeLinks          | true  |
             | removeFonts          | false |
         When I send the API request to the endpoint "/api/v1/security/sanitize-pdf"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -54,6 +55,7 @@ Feature: Security API Validation
             | wholeWordSearch| true         |
             | convertPDFToImage | false     |
         When I send the API request to the endpoint "/api/v1/security/auto-redact"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -96,6 +98,7 @@ Feature: Security API Validation
             | pageNumbers        | 2,4     |
             | pageRedactionColor | #000000 |
         When I send the API request to the endpoint "/api/v1/security/redact"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -130,6 +133,7 @@ Feature: Security API Validation
     Scenario: Verify PDF-A compliance
         Given I use an example file at "exampleFiles/pdfa1.pdf" as parameter "fileInput"
         When I send the API request to the endpoint "/api/v1/security/verify-pdf"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/json"
         And the response file should have size greater than 2
@@ -148,6 +152,7 @@ Feature: Security API Validation
         Given I generate a PDF file as "fileInput"
         And the pdf contains 2 pages
         When I send the API request to the endpoint "/api/v1/security/remove-cert-sign"
+        And this operation is run 5 times in parallel
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
@@ -161,3 +166,35 @@ Feature: Security API Validation
         Then the response status code should be 200
         And the response content type should be "application/pdf"
         And the response file should have size greater than 0
+
+
+    @validate-signature @positive
+    Scenario: validate-signature reports no signatures on an unsigned PDF
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        When I send the API request to the endpoint "/api/v1/security/validate-signature"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response JSON should be a list
+
+
+    @redact-execute @positive
+    Scenario: redact-execute removes the targeted text
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 3 pages
+        And the pdf pages all contain the text "Hello world"
+        And the request data includes
+            | parameter  | value |
+            | textValues | Hello |
+        When I send the API request to the endpoint "/api/v1/security/redact-execute"
+        And this operation is run 5 times in parallel
+        Then the response status code should be 200
+        And the response content type should be "application/pdf"
+
+
+    @redact-execute @negative
+    Scenario: redact-execute without any targets returns 400
+        Given I generate a PDF file as "fileInput"
+        And the pdf contains 2 pages
+        When I send the API request to the endpoint "/api/v1/security/redact-execute"
+        Then the response status code should be 400
diff --git a/testing/cucumber/features/steps/job_step_definitions.py b/testing/cucumber/features/steps/job_step_definitions.py
new file mode 100644
index 0000000000..44c695b7a4
--- /dev/null
+++ b/testing/cucumber/features/steps/job_step_definitions.py
@@ -0,0 +1,171 @@
+"""Steps for the async job API. DELETE is a cancel, so it 400s once the job finishes."""
+import time
+
+import requests
+from behave import then, when
+from job_support import API_HEADERS, BASE_URL, trigger_cleanup
+
+POLL_TIMEOUT_SECONDS = 60
+
+
+@when("I store the job id from the response")
+def step_store_job_id(context):
+    payload = context.response.json()
+    context.job_id = payload.get("jobId")
+    assert context.job_id, f"No jobId in async submit response: {payload}"
+
+
+@when("I wait for the job to complete")
+def step_wait_for_job(context):
+    deadline = time.time() + POLL_TIMEOUT_SECONDS
+    while time.time() < deadline:
+        response = requests.get(
+            f"{BASE_URL}/api/v1/general/job/{context.job_id}",
+            headers=API_HEADERS, timeout=30,
+        )
+        assert response.status_code == 200, (
+            f"Job status returned {response.status_code}: {response.text}"
+        )
+        context.response = response
+        payload = response.json()
+        if payload.get("complete"):
+            context.job_status = payload
+            return
+        time.sleep(0.2)
+    raise AssertionError(
+        f"Job {context.job_id} did not complete within {POLL_TIMEOUT_SECONDS}s"
+    )
+
+
+@when("I request the job result")
+def step_request_job_result(context):
+    context.response = requests.get(
+        f"{BASE_URL}/api/v1/general/job/{context.job_id}/result",
+        headers=API_HEADERS, timeout=60,
+    )
+
+
+@when("I request the job result file list")
+def step_request_job_result_files(context):
+    context.response = requests.get(
+        f"{BASE_URL}/api/v1/general/job/{context.job_id}/result/files",
+        headers=API_HEADERS, timeout=60,
+    )
+    files = context.response.json().get("files") or []
+    context.job_files = files
+    if files:
+        context.job_file_id = files[0].get("fileId")
+
+
+@when("I download the first job result file")
+def step_download_job_file(context):
+    assert getattr(context, "job_file_id", None), "No fileId captured from the result file list"
+    context.response = requests.get(
+        f"{BASE_URL}/api/v1/general/files/{context.job_file_id}",
+        headers=API_HEADERS, timeout=60,
+    )
+
+
+@when("I request the first job result file metadata")
+def step_job_file_metadata(context):
+    assert getattr(context, "job_file_id", None), "No fileId captured from the result file list"
+    context.response = requests.get(
+        f"{BASE_URL}/api/v1/general/files/{context.job_file_id}/metadata",
+        headers=API_HEADERS, timeout=60,
+    )
+
+
+@when("I cancel the job")
+def step_cancel_job(context):
+    context.response = requests.delete(
+        f"{BASE_URL}/api/v1/general/job/{context.job_id}",
+        headers=API_HEADERS, timeout=30,
+    )
+
+
+@then("the job result file list should contain at least {count:d} file(s)")
+def step_check_job_file_count(context, count):
+    files = context.response.json().get("files") or []
+    assert len(files) >= count, f"Expected at least {count} result file(s), got {len(files)}"
+
+
+@then("the job should be reported complete")
+def step_check_job_complete(context):
+    payload = context.response.json()
+    assert payload.get("complete") is True, f"Job not complete: {payload}"
+    assert not payload.get("error"), f"Job reported an error: {payload.get('error')}"
+
+
+# --- Cleanup: the async job files must actually go away, not just age out ---
+
+
+@when("I trigger the async job cleanup")
+def step_trigger_cleanup(context):
+    context.response = trigger_cleanup()
+    try:
+        context.cleanup_summary = context.response.json()
+    except ValueError:
+        context.cleanup_summary = {}
+
+
+@then("the cleanup should report at least {count:d} job(s) removed")
+def step_check_cleanup_jobs(context, count):
+    removed = context.cleanup_summary.get("jobsRemoved")
+    assert removed is not None, f"No jobsRemoved in cleanup response: {context.cleanup_summary}"
+    assert removed >= count, f"Expected at least {count} job(s) removed, got {removed}"
+
+
+@then("the cleanup should report at least {count:d} file(s) deleted")
+def step_check_cleanup_files(context, count):
+    deleted = context.cleanup_summary.get("filesDeleted")
+    assert deleted is not None, f"No filesDeleted in cleanup response: {context.cleanup_summary}"
+    assert deleted >= count, f"Expected at least {count} file(s) deleted, got {deleted}"
+
+
+@then("the cleanup should report nothing left to remove")
+def step_check_cleanup_idempotent(context):
+    removed = context.cleanup_summary.get("jobsRemoved")
+    deleted = context.cleanup_summary.get("filesDeleted")
+    assert removed == 0 and deleted == 0, (
+        "A repeat cleanup still found work to do, so the first pass did not fully clean up: "
+        f"{context.cleanup_summary}"
+    )
+
+
+@then("the job should no longer exist")
+def step_check_job_gone(context):
+    response = requests.get(
+        f"{BASE_URL}/api/v1/general/job/{context.job_id}",
+        headers=API_HEADERS, timeout=30,
+    )
+    assert response.status_code == 404, (
+        f"Job {context.job_id} still exists after cleanup: "
+        f"{response.status_code} {response.text[:200]}"
+    )
+
+
+@then("the job result file should no longer be downloadable")
+def step_check_job_file_gone(context):
+    assert getattr(context, "job_file_id", None), "No fileId captured from the result file list"
+    response = requests.get(
+        f"{BASE_URL}/api/v1/general/files/{context.job_file_id}",
+        headers=API_HEADERS, timeout=30,
+    )
+    assert response.status_code == 404, (
+        f"File {context.job_file_id} still downloadable after cleanup: "
+        f"{response.status_code} {response.text[:200]}"
+    )
+
+
+@then("the job result file should still be downloadable")
+def step_check_job_file_still_there(context):
+    assert getattr(context, "job_file_id", None), "No fileId captured from the result file list"
+    response = requests.get(
+        f"{BASE_URL}/api/v1/general/files/{context.job_file_id}",
+        headers=API_HEADERS, timeout=60,
+    )
+    assert response.status_code == 200, (
+        f"File {context.job_file_id} was not retrievable a second time: "
+        f"{response.status_code} {response.text[:200]}"
+    )
+    assert len(response.content) > 0, "Second download returned an empty body"
diff --git a/testing/cucumber/features/steps/job_support.py b/testing/cucumber/features/steps/job_support.py
new file mode 100644
index 0000000000..027bdcb9eb
--- /dev/null
+++ b/testing/cucumber/features/steps/job_support.py
@@ -0,0 +1,22 @@
+"""Shared helpers for the async job API.
+
+Support module, not a step module: behave execs everything under features/steps as
+step definitions, so anything environment.py needs to import has to live apart from
+the @when/@then decorators or they would register twice.
+"""
+import requests
+
+BASE_URL = "http://localhost:8080"
+API_HEADERS = {"X-API-KEY": "123456789"}
+CLEANUP_URL = f"{BASE_URL}/api/v1/general/jobs/cleanup"
+
+
+def trigger_cleanup():
+    """Force-expire finished jobs so their stored files are released now.
+
+    An async submit persists a copy of the upload plus its results and holds them for
+    the job retention window (30 minutes by default), which far outlasts a test run.
+    Calling this keeps the post-run temp-file check strict: anything it still reports
+    afterwards is a genuine leak rather than a file that simply had not aged out.
+    """
+    return requests.post(CLEANUP_URL, headers=API_HEADERS, timeout=60)
diff --git a/testing/cucumber/features/steps/parallel_step_definitions.py b/testing/cucumber/features/steps/parallel_step_definitions.py
new file mode 100644
index 0000000000..d832005fba
--- /dev/null
+++ b/testing/cucumber/features/steps/parallel_step_definitions.py
@@ -0,0 +1,47 @@
+"""Concurrency steps, usable either before the request or after it."""
+
+from behave import given, then, when
+
+import parallel_support
+
+
+def _set_repeat(context, count, decoy=False):
+    context.parallel_decoy = decoy
+    if count < 2:
+        context.parallel_repeat = 1
+        return
+    context.parallel_repeat = count
+
+    # An asked-for level higher than one already run wins.
+    if count > getattr(context, "parallel_ran_at", 0):
+        context.parallel_validated = False
+    if getattr(context, "parallel_validated", False):
+        return
+
+    # Placed after the request: replay whichever request was just sent.
+    pending = getattr(context, "parallel_request", None)
+    if pending is not None:
+        url, spec, headers, label = pending
+        parallel_support.validate(context, url, spec, headers, context.response, label)
+        return
+
+    pending_get = getattr(context, "parallel_get", None)
+    if pending_get is not None:
+        url, params, headers, label = pending_get
+        parallel_support.validate_get(context, url, params, headers, context.response, label)
+
+
+@given("this operation is run {count:d} times in parallel")
+@when("this operation is run {count:d} times in parallel")
+@then("this operation is run {count:d} times in parallel")
+def step_operation_run_in_parallel(context, count):
+    _set_repeat(context, count)
+
+
+# Decoy traffic is an equal number of concurrent requests carrying different page
+# text, so a response that came from the wrong request becomes visible.
+@given("this operation is run {count:d} times in parallel against decoy traffic")
+@when("this operation is run {count:d} times in parallel against decoy traffic")
+@then("this operation is run {count:d} times in parallel against decoy traffic")
+def step_operation_run_in_parallel_with_decoy(context, count):
+    _set_repeat(context, count, decoy=True)
diff --git a/testing/cucumber/features/steps/parallel_support.py b/testing/cucumber/features/steps/parallel_support.py
new file mode 100644
index 0000000000..d84d8354de
--- /dev/null
+++ b/testing/cucumber/features/steps/parallel_support.py
@@ -0,0 +1,478 @@
+"""Re-issues a request concurrently and asserts every response matches the baseline."""
+
+import io
+import json as json_module
+import os
+import re
+import sys
+import zipfile
+from concurrent.futures import ThreadPoolExecutor
+from hashlib import sha256
+
+import requests
+from pypdf import PdfReader
+
+_UUID_RE = re.compile(r"[0-9a-fA-F]{8}-(?:[0-9a-fA-F]{4}-){3}[0-9a-fA-F]{12}")
+_LONG_NUM_RE = re.compile(r"\d{10,}")
+_DATE_RE = re.compile(r"\d{4}-\d{2}-\d{2}[T ]\d{2}:\d{2}:\d{2}(?:\.\d+)?Z?")
+_VOLATILE_KEY_RE = re.compile(
+    r"^(id|uuid|.*Id|.*_id|.*[Tt]ime|.*[Dd]ate|timestamp|created.*|modified.*|"
+    r"updated.*|expires.*|token|traceId|requestId|duration.*|elapsed.*)$"
+)
+
+# Only hash text for reasonably sized documents so the check stays cheap.
+_MAX_TEXT_PAGES = 25
+
+# Sequential samples taken to separate inherent nondeterminism from a concurrency bug.
+NOISE_PROBE_SAMPLES = 3
+
+# Response size is allowed to drift this far before it counts as a difference.
+SIZE_TOLERANCE = 0.05
+
+# Collected per-scenario results, printed as a summary in after_all.
+VALIDATIONS = []
+
+
+# A spec replaces open file handles with bytes so it can be replayed from many threads.
+
+
+def materialize(spec):
+    """Turn a captured spec into a fresh `files=` list for one request."""
+    parts = []
+    for key, filename, payload, mime in spec:
+        if filename is None:
+            parts.append((key, (None, payload) if mime is None else (None, payload, mime)))
+        else:
+            parts.append((key, (filename, io.BytesIO(payload), mime)))
+    return parts
+
+
+def send(url, spec, headers, timeout=300):
+    return requests.post(url, files=materialize(spec), headers=headers, timeout=timeout)
+
+
+def _normalize_name(name):
+    name = _UUID_RE.sub("<uuid>", name)
+    return _LONG_NUM_RE.sub("<num>", name)
+
+
+def _strip_volatile(value):
+    """Drop keys whose values legitimately differ between two identical requests."""
+    if isinstance(value, dict):
+        return {
+            k: _strip_volatile(v)
+            for k, v in sorted(value.items())
+            if not _VOLATILE_KEY_RE.match(k)
+        }
+    if isinstance(value, list):
+        return [_strip_volatile(v) for v in value]
+    if isinstance(value, str):
+        return _normalize_name(value)
+    return value
+
+
+def _pdf_fingerprint(body, prefix=""):
+    parts = {}
+    try:
+        reader = PdfReader(io.BytesIO(body))
+    except Exception as exc:
+        parts[prefix + "pdf"] = f"unreadable: {type(exc).__name__}"
+        return parts
+    parts[prefix + "encrypted"] = reader.is_encrypted
+    if reader.is_encrypted:
+        return parts
+    try:
+        pages = reader.pages
+        parts[prefix + "pages"] = len(pages)
+    except Exception as exc:
+        parts[prefix + "pdf"] = f"unreadable pages: {type(exc).__name__}"
+        return parts
+    if len(pages) <= _MAX_TEXT_PAGES:
+        try:
+            text = "\n".join((page.extract_text() or "") for page in pages)
+            parts[prefix + "text_sha"] = sha256(text.encode("utf-8")).hexdigest()[:16]
+        except Exception:
+            pass
+    return parts
+
+
+def _entry_sha(entry):
+    """Hash an archive entry, normalizing the ids and timestamps EPUB/ODF restamp each run."""
+    try:
+        text = entry.decode("utf-8")
+        if "\x00" not in text:
+            entry = _DATE_RE.sub("<date>", _normalize_name(text)).encode("utf-8")
+    except UnicodeDecodeError:
+        pass
+    return sha256(entry).hexdigest()[:16]
+
+
+def _zip_fingerprint(body):
+    parts = {}
+    try:
+        with zipfile.ZipFile(io.BytesIO(body)) as archive:
+            names = sorted(_normalize_name(n) for n in archive.namelist())
+            parts["zip_entries"] = len(names)
+            parts["zip_names"] = names
+            for index, name in enumerate(sorted(archive.namelist())):
+                entry = archive.read(name)
+                if entry[:5] == b"%PDF-":
+                    parts.update(_pdf_fingerprint(entry, prefix=f"zip[{index}]."))
+                else:
+                    parts[f"zip[{index}].sha"] = _entry_sha(entry)
+    except Exception as exc:
+        parts["zip"] = f"unreadable: {type(exc).__name__}"
+    return parts
+
+
+def fingerprint(response):
+    """Structural signature of a response, ignoring benign per-request variance."""
+    body = response.content
+    content_type = (response.headers.get("Content-Type") or "").split(";")[0].strip()
+    parts = {"status": response.status_code, "content_type": content_type, "size": len(body)}
+
+
+    if "json" in content_type:
+        try:
+            parts["json"] = _strip_volatile(json_module.loads(body.decode("utf-8")))
+        except Exception:
+            parts["body_sha"] = sha256(body).hexdigest()[:16]
+    elif body[:5] == b"%PDF-":
+        parts.update(_pdf_fingerprint(body))
+    elif body[:2] == b"PK":
+        parts.update(_zip_fingerprint(body))
+    elif content_type.startswith("text/") or response.status_code >= 400:
+        try:
+            parts["text"] = _normalize_name(body.decode("utf-8", "replace"))[:2000]
+        except Exception:
+            parts["body_sha"] = sha256(body).hexdigest()[:16]
+    else:
+        parts["body_sha"] = sha256(body).hexdigest()[:16]
+    return parts
+
+
+def differing_keys(baseline, other):
+    return {
+        key
+        for key in set(baseline) | set(other)
+        if key != "size" and baseline.get(key) != other.get(key)
+    }
+
+
+def size_differs(baseline, other):
+    base_size, other_size = baseline.get("size", 0), other.get("size", 0)
+    return abs(other_size - base_size) > max(64, base_size * SIZE_TOLERANCE)
+
+
+def compare(baseline, other, ignore=frozenset(), ignore_size=False):
+    """Return a list of human-readable differences between two fingerprints."""
+    diffs = []
+    for key in sorted(differing_keys(baseline, other) - set(ignore)):
+        diffs.append(
+            f"{key}: baseline={_short(baseline.get(key))} parallel={_short(other.get(key))}"
+        )
+    if not ignore_size and size_differs(baseline, other):
+        diffs.append(
+            f"size: baseline={baseline.get('size', 0)} parallel={other.get('size', 0)} "
+            f"(differs by more than {SIZE_TOLERANCE:.0%})"
+        )
+    return diffs
+
+
+def _short(value):
+    text = repr(value)
+    return text if len(text) <= 160 else text[:157] + "..."
+
+
+def build_decoy_spec(spec):
+    """Clone a spec with each PDF stamped with unique text, or None if not possible.
+
+    Structure is preserved so parameters stay valid; only the text differs, which
+    is what makes bleed visible.
+    """
+    try:
+        from pypdf import PdfWriter
+        from reportlab.pdfgen import canvas
+    except ImportError:
+        return None
+
+    decoy = []
+    stamped_any = False
+    for key, filename, payload, mime in spec:
+        if filename is None or not isinstance(payload, bytes) or payload[:5] != b"%PDF-":
+            decoy.append((key, filename, payload, mime))
+            continue
+        try:
+            reader = PdfReader(io.BytesIO(payload))
+            if reader.is_encrypted:
+                return None
+            writer = PdfWriter()
+            for index, page in enumerate(reader.pages):
+                box = page.mediabox
+                width, height = float(box.width), float(box.height)
+                overlay_buffer = io.BytesIO()
+                overlay_canvas = canvas.Canvas(overlay_buffer, pagesize=(width, height))
+                overlay_canvas.drawString(
+                    20, max(20.0, height - 20), f"DECOY-MARKER-{index}-do-not-mix"
+                )
+                overlay_canvas.showPage()
+                overlay_canvas.save()
+                overlay_buffer.seek(0)
+                page.merge_page(PdfReader(overlay_buffer).pages[0])
+                writer.add_page(page)
+            out = io.BytesIO()
+            writer.write(out)
+            decoy.append((key, filename, out.getvalue(), mime))
+            stamped_any = True
+        except Exception:
+            return None
+    return decoy if stamped_any else None
+
+
+def _run_concurrently(url, specs, headers, timeout):
+    """Fire every spec at once and return (response, error) in submission order."""
+    results = [None] * len(specs)
+
+    def _worker(index):
+        try:
+            results[index] = (send(url, specs[index], headers, timeout=timeout), None)
+        except Exception as exc:
+            results[index] = (None, exc)
+
+    with ThreadPoolExecutor(max_workers=len(specs)) as pool:
+        list(pool.map(_worker, range(len(specs))))
+    return results
+
+
+def validate(context, url, spec, headers, baseline, label, timeout=300):
+    """Re-issue the request concurrently; no-op unless the repeat count is above 1."""
+    repeat = getattr(context, "parallel_repeat", 1)
+    if repeat < 2 or getattr(context, "parallel_validated", False):
+        return
+    context.parallel_validated = True
+    context.parallel_ran_at = repeat
+
+    decoy_spec = build_decoy_spec(spec) if getattr(context, "parallel_decoy", False) else None
+    specs = [spec] * repeat + ([decoy_spec] * repeat if decoy_spec else [])
+    results = _run_concurrently(url, specs, headers, timeout)
+
+    main_results = results[:repeat]
+    decoy_results = results[repeat:]
+    baseline_fp = fingerprint(baseline)
+
+    noise, noisy_size = frozenset(), False
+    failures = _collect_failures(
+        main_results, decoy_results, baseline_fp, repeat, noise, noisy_size
+    )
+    if failures:
+        # Some endpoints are inherently nondeterministic (embedded ids, timestamps,
+        # deliberate randomness). Re-run sequentially to tell that apart from a real bug.
+        noise, noisy_size = _probe_noise(url, spec, headers, baseline_fp, timeout)
+        failures = _collect_failures(
+            main_results, decoy_results, baseline_fp, repeat, noise, noisy_size
+        )
+
+    VALIDATIONS.append(
+        {
+            "label": label,
+            "repeat": repeat,
+            "decoy": bool(decoy_spec),
+            "failed": bool(failures),
+            "noise": sorted(noise) + (["size"] if noisy_size else []),
+        }
+    )
+
+    if failures:
+        raise AssertionError(
+            f"Parallel consistency failed for {label} at concurrency {repeat}.\n"
+            f"Two sequential runs agreed on these fields, so the differences below are "
+            f"caused by running the same operation concurrently.\n"
+            f"Baseline fingerprint: {_short(baseline_fp)}\n  - " + "\n  - ".join(failures)
+        )
+
+
+def _collect_failures(main_results, decoy_results, baseline_fp, repeat, noise, noisy_size):
+    decoy_fp = _decoy_reference(decoy_results, baseline_fp, noise, noisy_size)
+    failures = []
+
+    for index, (response, error) in enumerate(main_results):
+        if error is not None:
+            failures.append(f"copy {index + 1}/{repeat} raised {type(error).__name__}: {error}")
+            continue
+        actual_fp = fingerprint(response)
+        diffs = compare(baseline_fp, actual_fp, noise, noisy_size)
+        if not diffs:
+            continue
+        if decoy_fp is not None and not compare(
+            decoy_fp, actual_fp, noise, noisy_size
+        ):
+            failures.append(
+                f"copy {index + 1}/{repeat} returned the CONCURRENT DECOY REQUEST'S response "
+                f"(cross-request bleed)"
+            )
+        else:
+            failures.append(f"copy {index + 1}/{repeat} diverged: " + "; ".join(diffs))
+
+    failures.extend(_check_decoys(decoy_results, repeat, noise, noisy_size))
+    return failures
+
+
+def _probe_noise(url, spec, headers, baseline_fp, timeout, samples=NOISE_PROBE_SAMPLES):
+    """Fields that already vary between uncontended runs, so they prove nothing.
+
+    Several samples: high-variance output can look stable across any single pair.
+    """
+    probes = []
+    for _ in range(samples):
+        try:
+            probes.append(fingerprint(send(url, spec, headers, timeout=timeout)))
+        except Exception:
+            break
+    return _noise_from_samples(baseline_fp, probes)
+
+
+def _noise_from_samples(baseline_fp, probes):
+    noise = set()
+    noisy_size = False
+    for index, probe in enumerate(probes):
+        for other in [baseline_fp] + probes[:index]:
+            noise |= differing_keys(other, probe)
+            noisy_size = noisy_size or size_differs(other, probe)
+    return frozenset(noise), noisy_size
+
+
+def validate_get(context, url, params, headers, baseline, label, timeout=60):
+    """Concurrency check for read-only GET endpoints."""
+    repeat = getattr(context, "parallel_repeat", 1)
+    if repeat < 2 or getattr(context, "parallel_validated", False):
+        return
+    context.parallel_validated = True
+    context.parallel_ran_at = repeat
+
+    results = [None] * repeat
+
+    def _worker(index):
+        try:
+            results[index] = (
+                requests.get(url, params=params, headers=headers, timeout=timeout),
+                None,
+            )
+        except Exception as exc:
+            results[index] = (None, exc)
+
+    with ThreadPoolExecutor(max_workers=repeat) as pool:
+        list(pool.map(_worker, range(repeat)))
+
+    baseline_fp = fingerprint(baseline)
+
+    def _failures(noise, noisy_size):
+        found = []
+        for index, (response, error) in enumerate(results):
+            if error is not None:
+                found.append(f"copy {index + 1}/{repeat} raised {type(error).__name__}: {error}")
+                continue
+            diffs = compare(
+                baseline_fp,
+                fingerprint(response),
+                    noise,
+                noisy_size,
+            )
+            if diffs:
+                found.append(f"copy {index + 1}/{repeat} diverged: " + "; ".join(diffs))
+        return found
+
+    noise, noisy_size = frozenset(), False
+    failures = _failures(noise, noisy_size)
+    if failures:
+        probes = []
+        for _ in range(NOISE_PROBE_SAMPLES):
+            try:
+                probes.append(
+                    fingerprint(
+                        requests.get(url, params=params, headers=headers, timeout=timeout)
+                    )
+                )
+            except Exception:
+                break
+        noise, noisy_size = _noise_from_samples(baseline_fp, probes)
+        failures = _failures(noise, noisy_size)
+
+    VALIDATIONS.append(
+        {
+            "label": label,
+            "repeat": repeat,
+            "decoy": False,
+            "failed": bool(failures),
+            "noise": sorted(noise) + (["size"] if noisy_size else []),
+        }
+    )
+    if failures:
+        raise AssertionError(
+            f"Parallel consistency failed for GET {label} at concurrency {repeat}.\n  - "
+            + "\n  - ".join(failures)
+        )
+
+
+def _decoy_reference(decoy_results, baseline_fp, noise, noisy_size):
+    """Fingerprint of the decoy response, or None when it is not distinguishable."""
+    live = [r for r, _e in decoy_results if r is not None]
+    if not live:
+        return None
+    decoy_fp = fingerprint(live[0])
+    # Some endpoints ignore page content, so the decoy cannot prove anything there.
+    if not compare(baseline_fp, decoy_fp, noise, noisy_size):
+        return None
+    return decoy_fp
+
+
+def _check_decoys(decoy_results, repeat, noise, noisy_size):
+    """Assert the decoy load stayed self-consistent while contending with the main copies."""
+    if not decoy_results:
+        return []
+    live = [(i, r) for i, (r, _e) in enumerate(decoy_results) if r is not None]
+    if not live:
+        return ["every decoy request failed to complete"]
+
+    failures = []
+    reference_fp = fingerprint(live[0][1])
+    for index, response in live[1:]:
+        diffs = compare(
+            reference_fp,
+            fingerprint(response),
+            noise,
+            noisy_size,
+        )
+        if diffs:
+            failures.append(f"decoy {index + 1}/{repeat} diverged: " + "; ".join(diffs))
+    return failures
+
+
+def print_summary():
+    if not VALIDATIONS:
+        return
+    total = len(VALIDATIONS)
+    failed = sum(1 for v in VALIDATIONS if v["failed"])
+    max_repeat = max(v["repeat"] for v in VALIDATIONS)
+    requests_sent = sum(v["repeat"] * (2 if v["decoy"] else 1) for v in VALIDATIONS)
+
+    lines = [
+        f"\n[PARALLEL] {total - failed}/{total} operations stayed consistent under "
+        f"concurrency (up to {max_repeat} at once, {requests_sent} concurrent requests sent)."
+    ]
+    noisy = {}
+    for entry in VALIDATIONS:
+        if entry["noise"]:
+            noisy.setdefault(entry["label"], set()).update(entry["noise"])
+    if noisy:
+        lines.append(
+            f"[PARALLEL] {len(noisy)} endpoint(s) produce nondeterministic output. Those "
+            f"fields were excluded only after confirming they also vary across "
+            f"{NOISE_PROBE_SAMPLES} sequential runs:"
+        )
+        for label, fields in sorted(noisy.items()):
+            lines.append(f"           {label} -> {', '.join(sorted(fields))}")
+
+    # behave's --junit reporter swallows after_all stdout, so bypass any capture.
+    stream = getattr(sys, "__stderr__", None) or sys.stderr
+    stream.write("\n".join(lines) + "\n")
+    stream.flush()
diff --git a/testing/cucumber/features/steps/step_definitions.py b/testing/cucumber/features/steps/step_definitions.py
index aa1d45cac0..5abefa049a 100644
--- a/testing/cucumber/features/steps/step_definitions.py
+++ b/testing/cucumber/features/steps/step_definitions.py
@@ -15,6 +15,8 @@ import zipfile
 import re
 from PIL import Image, ImageDraw
 
+import parallel_support
+
 API_HEADERS = {"X-API-KEY": "123456789"}
 
 #########
@@ -585,6 +587,8 @@ def step_send_get_request(context, endpoint):
     full_url = f"{base_url}{endpoint}"
     response = requests.get(full_url, headers=API_HEADERS, timeout=60)
     context.response = response
+    context.parallel_get = (full_url, None, API_HEADERS, endpoint)
+    parallel_support.validate_get(context, full_url, None, API_HEADERS, response, endpoint)
 
 
 @when('I send a GET request to "{endpoint}" with parameters')
@@ -594,17 +598,18 @@ def step_send_get_request_with_params(context, endpoint):
     full_url = f"{base_url}{endpoint}"
     response = requests.get(full_url, params=params, headers=API_HEADERS, timeout=60)
     context.response = response
+    context.parallel_get = (full_url, params, API_HEADERS, endpoint)
+    parallel_support.validate_get(context, full_url, params, API_HEADERS, response, endpoint)
 
 
-@when('I send the API request to the endpoint "{endpoint}"')
-def step_send_api_request(context, endpoint):
-    url = f"http://localhost:8080{endpoint}"
+def _build_request_spec(context):
+    """Capture the multipart payload as replayable bytes rather than file handles."""
     files = context.files if hasattr(context, "files") else {}
 
     if not hasattr(context, "request_data") or context.request_data is None:
         context.request_data = {}
 
-    form_data = []
+    spec = []
     for key, value in context.request_data.items():
         # Handle list parameters (like 'languages') - send multiple form fields
         # Split comma-separated values or treat single values as single-item lists
@@ -612,32 +617,50 @@ def step_send_api_request(context, endpoint):
             # Split by comma if present, otherwise treat as single value
             values = [v.strip() for v in value.split(",")] if "," in value else [value]
             for val in values:
-                form_data.append((key, (None, val)))
+                spec.append((key, None, val, None))
         else:
-            form_data.append((key, (None, value)))
+            spec.append((key, None, value, None))
+
+    def _read(file):
+        file.seek(0)
+        payload = file.read()
+        file.seek(0)
+        return payload
 
     for key, file in files.items():
         mime_type, _ = mimetypes.guess_type(file.name)
         mime_type = mime_type or "application/octet-stream"
         print(f"form_data {file.name} with {mime_type}")
-        form_data.append((key, (file.name, file, mime_type)))
+        spec.append((key, file.name, _read(file), mime_type))
 
     # Multi-file entries (duplicate keys for MultipartFile[] endpoints, e.g. merge-pdfs)
     for key, file in getattr(context, "multi_files", []):
         mime_type, _ = mimetypes.guess_type(file.name)
         mime_type = mime_type or "application/octet-stream"
         print(f"form_data (multi) {file.name} with {mime_type}")
-        form_data.append((key, (file.name, file, mime_type)))
+        spec.append((key, file.name, _read(file), mime_type))
 
     # JSON multipart parts for @RequestPart endpoints (e.g. /form/fill)
     for part_name, json_content in getattr(context, "json_parts", {}).items():
-        form_data.append((part_name, (None, json_content, "application/json")))
+        spec.append((part_name, None, json_content, "application/json"))
+
+    return spec
+
+
+@when('I send the API request to the endpoint "{endpoint}"')
+def step_send_api_request(context, endpoint):
+    url = f"http://localhost:8080{endpoint}"
+    spec = _build_request_spec(context)
 
     # Set timeout to 300 seconds (5 minutes) to prevent infinite hangs
     print(f"Sending POST request to {endpoint} with timeout=300s")
-    response = requests.post(url, files=form_data, headers=API_HEADERS, timeout=300)
+    response = parallel_support.send(url, spec, API_HEADERS, timeout=300)
     context.response = response
 
+    # Remembered so a later "run N times in parallel" step can replay this request.
+    context.parallel_request = (url, spec, API_HEADERS, endpoint)
+    parallel_support.validate(context, url, spec, API_HEADERS, response, endpoint)
+
 
 ########
 # THEN #
diff --git a/testing/cucumber/run-parallel.sh b/testing/cucumber/run-parallel.sh
new file mode 100644
index 0000000000..40d30b3c40
--- /dev/null
+++ b/testing/cucumber/run-parallel.sh
@@ -0,0 +1,143 @@
+#!/bin/bash
+# Run the behave suite as N concurrent shards against one server.
+# Usage: ./run-parallel.sh [SHARDS] [-- behave args]   Env: BASE_URL
+
+set -uo pipefail
+
+SHARDS="${1:-10}"
+if [[ "$SHARDS" =~ ^[0-9]+$ ]]; then
+    shift
+else
+    SHARDS=10
+fi
+[[ "${1:-}" == "--" ]] && shift
+
+BASE_URL="${BASE_URL:-http://localhost:8080}"
+CUCUMBER_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+WORK_ROOT="$CUCUMBER_DIR/.parallel"
+REPORT_DIR="${PARALLEL_REPORT_DIR:-$WORK_ROOT/reports}"
+
+cd "$CUCUMBER_DIR" || exit 1
+
+if ! curl -sf --retry 30 --retry-delay 2 --retry-connrefused --retry-all-errors \
+    "$BASE_URL/api/v1/info/status" >/dev/null; then
+    echo "ERROR: no server responding at $BASE_URL"
+    exit 1
+fi
+
+mapfile -t ALL_FEATURES < <(
+    find features -name '*.feature' \
+        -not -path 'features/enterprise/*' \
+        -not -path 'features/multinode/*' | sort
+)
+
+if [ "${#ALL_FEATURES[@]}" -eq 0 ]; then
+    echo "ERROR: no feature files found under $CUCUMBER_DIR/features"
+    exit 1
+fi
+
+# user_management.feature changes the admin password mid-scenario, so a concurrent
+# shard logging in then gets a 401. Keep all admin-auth features in one shard.
+AUTH_RE='logged in as admin|I login with username|JWT authentication|stored JWT token'
+declare -a AUTH_FEATURES=() FEATURES=()
+for feature in "${ALL_FEATURES[@]}"; do
+    if grep -qE "$AUTH_RE" "$feature"; then
+        AUTH_FEATURES+=("$feature")
+    else
+        FEATURES+=("$feature")
+    fi
+done
+
+if [ "${#AUTH_FEATURES[@]}" -gt 0 ]; then
+    echo "Pinning ${#AUTH_FEATURES[@]} auth-coupled feature(s) to a single shard:"
+    printf '  %s\n' "${AUTH_FEATURES[@]##*/}"
+    SHARDS=$((SHARDS - 1))
+fi
+
+# The pin above can take SHARDS to 0 or below, which makes the shard loop run zero
+# times: every shardable feature is skipped and the run still reports success.
+[ "$SHARDS" -lt 0 ] && SHARDS=0
+[ "${#FEATURES[@]}" -gt 0 ] && [ "$SHARDS" -lt 1 ] && SHARDS=1
+
+if [ "$SHARDS" -gt "${#FEATURES[@]}" ]; then
+    echo "Only ${#FEATURES[@]} shardable feature files, reducing shards from $SHARDS"
+    SHARDS="${#FEATURES[@]}"
+fi
+
+rm -rf "$WORK_ROOT"
+mkdir -p "$WORK_ROOT" "$REPORT_DIR"
+
+TOTAL_SHARDS=$SHARDS
+[ "${#AUTH_FEATURES[@]}" -gt 0 ] && TOTAL_SHARDS=$((SHARDS + 1))
+echo "Running ${#ALL_FEATURES[@]} feature files across $TOTAL_SHARDS concurrent shards against $BASE_URL"
+
+declare -a PIDS=()
+
+start_shard() {
+    local shard=$1
+    shift
+    local SHARD_DIR="$WORK_ROOT/shard-$shard"
+    mkdir -p "$SHARD_DIR"
+    # Feature files reference exampleFiles/ and behave.ini relative to the CWD.
+    cp -r "$CUCUMBER_DIR/exampleFiles" "$SHARD_DIR/exampleFiles"
+    cp "$CUCUMBER_DIR/behave.ini" "$SHARD_DIR/behave.ini"
+
+    local assigned=("$@")
+    (
+        cd "$SHARD_DIR" || exit 1
+        uv run --project "$CUCUMBER_DIR/../../engine" --locked --group cucumber \
+            python -m behave "${assigned[@]}" \
+            --junit --junit-directory "$REPORT_DIR/shard-$shard" \
+            --no-capture -f plain "${BEHAVE_EXTRA[@]}" \
+            >"$REPORT_DIR/shard-$shard.log" 2>&1
+    ) &
+    PIDS+=($!)
+}
+
+declare -a BEHAVE_EXTRA=("$@")
+
+for ((shard = 0; shard < SHARDS; shard++)); do
+    assigned=()
+    for ((i = shard; i < ${#FEATURES[@]}; i += SHARDS)); do
+        assigned+=("$CUCUMBER_DIR/${FEATURES[$i]}")
+    done
+    start_shard "$shard" "${assigned[@]}"
+done
+
+if [ "${#AUTH_FEATURES[@]}" -gt 0 ]; then
+    assigned=()
+    for feature in "${AUTH_FEATURES[@]}"; do
+        assigned+=("$CUCUMBER_DIR/$feature")
+    done
+    start_shard "$SHARDS" "${assigned[@]}"
+fi
+
+FAILED=0
+for ((shard = 0; shard < TOTAL_SHARDS; shard++)); do
+    if wait "${PIDS[$shard]}"; then
+        echo "shard $shard PASSED"
+    else
+        echo "shard $shard FAILED"
+        FAILED=$((FAILED + 1))
+    fi
+done
+
+echo ""
+echo "=== Parallel shard summary ==="
+grep -h '^[0-9]* scenarios passed' "$REPORT_DIR"/shard-*.log 2>/dev/null || true
+grep -h '^\[PARALLEL\] [0-9]*/' "$REPORT_DIR"/shard-*.log 2>/dev/null || true
+
+if [ "$FAILED" -gt 0 ]; then
+    echo ""
+    echo "$FAILED of $TOTAL_SHARDS shards failed. Failing scenarios:"
+    sed -n '/^Failing scenarios:/,/^[0-9]* features/p' "$REPORT_DIR"/shard-*.log 2>/dev/null |
+        grep 'feature:' | sort -u
+    echo ""
+    echo "Parallel consistency failures:"
+    grep -h -A4 'Parallel consistency failed' "$REPORT_DIR"/shard-*.log 2>/dev/null | head -40
+    echo ""
+    echo "Full logs: $REPORT_DIR/shard-*.log"
+    exit 1
+fi
+
+echo "All $TOTAL_SHARDS shards passed."
diff --git a/testing/test.sh b/testing/test.sh
index 95c0c77edd..254d566763 100644
--- a/testing/test.sh
+++ b/testing/test.sh
@@ -391,6 +391,17 @@ capture_file_list() {
     gha_endgroup
 }
 
+# Tail of container logs shown when a leak is detected. The full log is captured as a
+# job artifact anyway, and dumping all of it here buried the actual finding.
+TEMP_FILE_LOG_TAIL=${TEMP_FILE_LOG_TAIL:-200}
+
+# Print the log context for a detected temp-file leak, bounded so the finding stays readable.
+print_temp_file_leak_logs() {
+    local container_name=$1
+    echo "Last $TEMP_FILE_LOG_TAIL lines of container logs (full log is in the uploaded artifacts):"
+    docker logs --tail "$TEMP_FILE_LOG_TAIL" "$container_name" 2>&1 || true
+}
+
 # Function to compare before and after file lists
 compare_file_lists() {
     local before_file=$1
@@ -417,8 +428,7 @@ compare_file_lists() {
             if [ -s "${diff_file}.tmp" ]; then
                 echo "WARNING: Temporary files found:"
                 cat "${diff_file}.tmp"
-                echo "Printing docker logs due to temporary file detection:"
-                docker logs "$container_name"  # Print logs when temp files are found
+                print_temp_file_leak_logs "$container_name"
                 gha_endgroup
                 return 1
             else
@@ -450,8 +460,11 @@ compare_file_lists() {
             if [ -s "${diff_file}.tmp" ]; then
                 echo "WARNING: Temporary files detected:"
                 cat "${diff_file}.tmp"
-                echo "Printing docker logs due to temporary file detection:"
-                docker logs "$container_name"  # Print logs when temp files are found
+                echo "These files were still present after the suite finished. Async job results"
+                echo "and their input copies live under the server's file store and are released"
+                echo "by the cleanup that features/environment.py runs in after_all - if they show"
+                echo "up here, that cleanup did not cover them."
+                print_temp_file_leak_logs "$container_name"
                 return 1
             fi
         fi