@cat-factory/app 0.154.1 → 0.156.0

package/app/stores/validationChecks.ts

@@ -0,0 +1,111 @@
+import { defineStore } from 'pinia'
+import { ref } from 'vue'
+import type { ServiceValidationConfig, ValidationCheck } from '~/types/validationChecks'
+import { VALIDATION_DEFAULT_MAX_ATTEMPTS } from '~/types/validationChecks'
+import { useUpsertList } from '~/composables/useUpsertList'
+import { useWorkspaceStore } from '~/stores/workspace'
+
+/**
+ * The workspace's PRE-PR VALIDATION CHECKS: per service frame, the shell commands the
+ * executor-harness runs against the checkout after the coder settles and BEFORE the PR opens.
+ * A failing command is fed back into the agent loop; only a green checkout opens a PR.
+ *
+ * Loaded on demand by the service inspector rather than from the workspace snapshot — it's
+ * operator configuration read on one panel, not something every board load needs.
+ */
+/**
+ * Whether a failed load is a SETTLED "you can't have this" — the facade wired no store (503) or
+ * this user lacks `settings.manage` (403) — rather than a transient fault. Only the settled cases
+ * latch `available` to false; everything else stays unresolved so a later visit retries.
+ */
+function isSettledUnavailable(error: unknown): boolean {
+  const status =
+    error && typeof error === 'object' && 'statusCode' in error
+      ? (error as { statusCode?: number }).statusCode
+      : undefined
+  return status === 503 || status === 403
+}
+
+export const useValidationChecksStore = defineStore('validationChecks', () => {
+  const api = useApi()
+
+  const {
+    items: configs,
+    upsert: upsertLocal,
+    remove: dropLocal,
+  } = useUpsertList<ServiceValidationConfig>({ key: (c) => c.blockId })
+  const loading = ref(false)
+  /**
+   * Mirrors the backend's wiring: `null` until first probed, then true/false. The inspector
+   * panel hides itself when false, so a facade that didn't wire the store shows no dead control.
+   */
+  const available = ref<boolean | null>(null)
+  let inFlight: Promise<void> | null = null
+
+  /** Force a refresh of every configured service's checks (used after a save/remove). */
+  async function load() {
+    const ws = useWorkspaceStore()
+    loading.value = true
+    try {
+      configs.value = await api.listServiceValidationConfigs(ws.requireId())
+      available.value = true
+    } catch (error) {
+      // A 503 means the facade wired no store and a 403 means this user may not manage settings:
+      // both are STABLE answers, so latch them and hide the entry point rather than showing a
+      // dead control. Anything else (a network blip, a 5xx) is TRANSIENT — leaving `available`
+      // unresolved so the next `ensureLoaded` retries, instead of hiding the panel for the rest
+      // of the session over one dropped request.
+      available.value = isSettledUnavailable(error) ? false : null
+    } finally {
+      loading.value = false
+    }
+  }
+
+  /** Load once per session; concurrent callers share the in-flight request. */
+  async function ensureLoaded(): Promise<void> {
+    if (available.value !== null) return
+    inFlight ??= load().finally(() => {
+      inFlight = null
+    })
+    return inFlight
+  }
+
+  /** The checks configured for a service frame (an empty default when it has none). */
+  function forBlock(blockId: string): ServiceValidationConfig {
+    return (
+      configs.value.find((c) => c.blockId === blockId) ?? {
+        blockId,
+        checks: [],
+        maxAttempts: VALIDATION_DEFAULT_MAX_ATTEMPTS,
+      }
+    )
+  }
+
+  /**
+   * Save a service frame's checks. An EMPTY list clears the config on the backend (the service
+   * deletes the row), which restores the exact pre-feature behaviour — so the local list drops
+   * the entry rather than keeping an empty one that reads as "configured".
+   */
+  async function save(
+    blockId: string,
+    checks: ValidationCheck[],
+    maxAttempts: number,
+  ): Promise<void> {
+    const ws = useWorkspaceStore()
+    const saved = await api.setServiceValidationConfig(ws.requireId(), blockId, {
+      checks,
+      maxAttempts,
+    })
+    if (saved.checks.length === 0) dropLocal(blockId)
+    else upsertLocal(saved)
+  }
+
+  /** Remove a service frame's checks entirely. */
+  async function remove(blockId: string): Promise<void> {
+    const ws = useWorkspaceStore()
+    await api.deleteServiceValidationConfig(ws.requireId(), blockId)
+    dropLocal(blockId)
+  }
+
+  return { configs, loading, available, load, ensureLoaded, forBlock, save, remove }
+})

package/app/types/domain.ts

@@ -171,6 +171,7 @@ export type * from './tasks'
 export type * from './bootstrap'
 export type * from './envConfigRepair'
 export type * from './github'
+export type * from './vcs'
 export type * from './accounts'
 export type * from './notifications'
 export type * from './slack'

package/app/types/validationChecks.ts

@@ -0,0 +1,17 @@
+// Pre-PR validation-check shapes: the per-service-frame commands the executor-harness runs
+// against the checkout before opening a PR, and the report it produces.
+//
+// All wire shapes are sourced from @cat-factory/contracts (single source of truth).
+
+export type {
+  ValidationCheck,
+  ValidationCheckOutcome,
+  ValidationReport,
+  ServiceValidationConfig,
+  UpsertServiceValidationConfigInput,
+} from '@cat-factory/contracts'
+export {
+  VALIDATION_DEFAULT_MAX_ATTEMPTS,
+  VALIDATION_MAX_ATTEMPTS_CEILING,
+  VALIDATION_MAX_CHECKS,
+} from '@cat-factory/contracts'

package/app/types/vcs.ts

@@ -0,0 +1,14 @@
+// ---------------------------------------------------------------------------
+// Provider-neutral VCS vocabulary. The platform talks to several git providers
+// (GitHub, GitLab, …) through one GitHub-shaped service layer, so the SPA's data
+// stays neutral and only its PRESENTATION switches on the provider.
+//
+// All wire shapes come from @cat-factory/contracts (single source of truth).
+// ---------------------------------------------------------------------------
+
+import type { VcsProviderWire } from '@cat-factory/contracts'
+
+export type { VcsConnectMethod, VcsConnectOption, VcsProviderWire } from '@cat-factory/contracts'
+
+/** The VCS a connection / repository belongs to — the discriminator presentation keys off. */
+export type VcsProvider = VcsProviderWire

package/app/utils/vcs.ts

@@ -0,0 +1,31 @@
+import type { VcsProvider } from '~/types/domain'
+
+// ---------------------------------------------------------------------------
+// Shared VCS provider presentation. The platform's repo DATA is provider-neutral (one
+// GitHub-shaped store serves GitLab through the backend adapter), so only presentation
+// switches on the provider — and it switches HERE, once, rather than per component.
+//
+// Labels are brand names, kept verbatim in every locale, so they are constants rather than
+// catalog keys (the same convention the login screen and the API-key provider descriptors
+// already use). Anything that is PROSE stays in the i18n catalog, keyed per provider.
+//
+// Each map is an exhaustive `Record<VcsProvider, …>`: adding a provider to the union fails
+// the typecheck here instead of silently rendering a GitHub icon for it.
+// ---------------------------------------------------------------------------
+
+/** Brand name, as rendered in titles and buttons. */
+export const VCS_PROVIDER_LABELS: Record<VcsProvider, string> = {
+  github: 'GitHub',
+  gitlab: 'GitLab',
+}
+
+export const VCS_PROVIDER_ICONS: Record<VcsProvider, string> = {
+  github: 'i-lucide-github',
+  gitlab: 'i-lucide-gitlab',
+}
+
+/** Where a user creates a personal access token for the provider (the PAT connect flow). */
+export const VCS_PROVIDER_TOKEN_URLS: Record<VcsProvider, string> = {
+  github: 'https://github.com/settings/tokens/new',
+  gitlab: 'https://gitlab.com/-/user_settings/personal_access_tokens',
+}

package/i18n/locales/de.json

@@ -1346,6 +1346,25 @@
       "remove": "{repo} entfernen",
       "connectFirst": "Verbinde GitHub, um Referenz-Repositories anzuhängen.",
       "hint": "Der Dokument-Writer klont diese schreibgeschützt, um beim Entwerfen vorhandene Lösungen als Referenz wiederzuverwenden. Er ändert sie nie."
+    },
+    "validationChecks": {
+      "title": "Prüfungen vor dem PR",
+      "sectionHint": "Befehle, die nach dem Coder und vor dem Öffnen eines Pull Requests im Checkout laufen. Ein Fehlschlag geht zur Behebung an den Agenten zurück; nur ein fehlerfreier Checkout öffnet einen PR.",
+      "hint": "Jeder Befehl läuft der Reihe nach mit `sh -c` im Checkout dieses Dienstes. Der Agent soll den Code reparieren, nicht die Prüfung abschwächen.",
+      "clear": "Leeren",
+      "configNoun": "Prüfungen",
+      "label": "Name",
+      "labelPlaceholder": "lint",
+      "command": "Befehl",
+      "addCheck": "Prüfung hinzufügen",
+      "removeCheck": "Diese Prüfung entfernen",
+      "empty": "Keine Prüfungen konfiguriert. Läufe für diesen Dienst öffnen einen Pull Request ohne lokale Überprüfung.",
+      "maxAttempts": "Versuche",
+      "maxAttemptsHint": "Korrekturrunden",
+      "save": "Prüfungen speichern",
+      "savedToast": "Prüfungen gespeichert",
+      "saveFailed": "Prüfungen konnten nicht gespeichert werden",
+      "clearFailed": "Prüfungen konnten nicht geleert werden"
     }
   },
   "panels": {
@@ -1512,6 +1531,16 @@
         "outOfTen": "{value}/10",
         "relatedFindings": "Zugehörige Befunde",
         "unnamed": "Standard"
+      },
+      "validation": {
+        "heading": "Prüfungen vor dem PR",
+        "passed": "Bestanden",
+        "failed": "Fehlgeschlagen",
+        "attempts": "Versuch {attempts} von {maxAttempts}",
+        "passedSummary": "Alle {total} Prüfungen wurden in Versuch {attempts} bestanden. Der Pull Request wurde aus einem fehlerfreien Checkout geöffnet.",
+        "failedSummary": "{failed} von {total} Prüfungen schlugen nach {attempts} von {maxAttempts} Versuchen weiterhin fehl, daher wurde kein Pull Request geöffnet.",
+        "exitCode": "Exit-Code {code}",
+        "timedOut": "Zeitüberschreitung"
       }
     },
     "inspector": {
@@ -2571,8 +2600,7 @@
   },
   "github": {
     "onboarding": {
-      "title": "cat-factory mit GitHub verbinden",
-      "intro": "cat-factory funktioniert, indem es Pull Requests in Ihren Repositorys öffnet. Installieren Sie die GitHub App auf Ihrem Account oder Ihrer Organisation, um fortzufahren; Sie können ihr jedes Repository oder eine Teilmenge gewähren.",
+      "appIntro": "Installieren Sie die GitHub App auf Ihrem Account oder Ihrer Organisation; Sie können ihr jedes Repository oder eine Teilmenge gewähren.",
       "signedInAs": "Angemeldet als {login}",
       "signOut": "Abmelden"
     },
@@ -2646,7 +2674,6 @@
         "closed": "geschlossen"
       },
       "toast": {
-        "disconnected": "GitHub getrennt",
         "resync": "Neusynchronisierung {status}",
         "reposUpdated": "Verknüpfte Repositorys aktualisiert",
         "branchCreated": "Branch {name} erstellt",
@@ -2662,10 +2689,6 @@
         "createBranch": "Branch konnte nicht erstellt werden",
         "openPr": "Pull Request konnte nicht geöffnet werden",
         "merge": "Mergen nicht möglich"
-      },
-      "confirmDisconnect": {
-        "title": "GitHub trennen?",
-        "body": "Die App verliert den Zugriff auf Ihre Repositorys, bis Sie sie erneut verbinden."
       }
     },
     "addService": {
@@ -5159,5 +5182,40 @@
       "sourceUnlinked": "Quelle getrennt",
       "unlinkSourceFailed": "Quelle konnte nicht getrennt werden"
     }
+  },
+  "vcs": {
+    "panel": {
+      "title": "Quellcodeverwaltung",
+      "patMeta": "Verbunden über ein persönliches Zugriffstoken",
+      "confirmDisconnect": {
+        "title": "{provider} trennen?",
+        "body": "Die App verliert den Zugriff auf Ihre Repositorys, bis Sie sie erneut verbinden."
+      },
+      "toast": {
+        "disconnected": "{provider} getrennt"
+      }
+    },
+    "connect": {
+      "or": "oder",
+      "noneConfigured": "Für dieses Deployment ist keine Quellcodeverbindung konfiguriert. Bitten Sie einen Betreiber, eine GitHub App oder einen GitLab-Zugang einzurichten.",
+      "gitlab": {
+        "intro": "Fügen Sie ein persönliches GitLab-Zugriffstoken ein, um diesen Workspace zu verbinden. cat-factory nutzt es, um Ihre Projekte aufzulisten, Branches zu pushen und Merge Requests zu öffnen.",
+        "tokenLabel": "Persönliches Zugriffstoken",
+        "scope": "Benötigt den Bereich api",
+        "createToken": "Token auf GitLab erstellen",
+        "submit": "GitLab verbinden",
+        "toast": {
+          "connected": "GitLab verbunden"
+        },
+        "errors": {
+          "connect": "GitLab konnte nicht verbunden werden"
+        }
+      }
+    },
+    "onboarding": {
+      "title": "cat-factory mit {provider} verbinden",
+      "titleAny": "cat-factory mit Ihren Repositorys verbinden",
+      "intro": "cat-factory funktioniert, indem es Pull Requests in Ihren Repositorys öffnet. Verbinden Sie Ihren Repository-Anbieter, um fortzufahren."
+    }
   }
 }

package/i18n/locales/en.json

@@ -1117,6 +1117,25 @@
       "remove": "Remove {repo}",
       "connectFirst": "Connect GitHub to attach reference repositories.",
       "hint": "The document writer clones these read-only to reuse existing solutions as a reference while drafting. It never changes them."
+    },
+    "validationChecks": {
+      "title": "Pre-PR validation",
+      "sectionHint": "Commands run against the checkout after the coder finishes and before a pull request is opened. A failure is handed back to the agent to fix; only a passing checkout opens a PR.",
+      "hint": "Each command runs with `sh -c` in this service's checkout, in order. Fix the code, not the check — the agent is told not to weaken them.",
+      "clear": "Clear",
+      "configNoun": "validation checks",
+      "label": "Name",
+      "labelPlaceholder": "lint",
+      "command": "Command",
+      "addCheck": "Add check",
+      "removeCheck": "Remove this check",
+      "empty": "No checks configured. Runs for this service open a pull request without any local verification.",
+      "maxAttempts": "Attempts",
+      "maxAttemptsHint": "Rounds of fixing",
+      "save": "Save checks",
+      "savedToast": "Validation checks saved",
+      "saveFailed": "Could not save the validation checks",
+      "clearFailed": "Could not clear the validation checks"
     }
   },
   "panels": {
@@ -1283,6 +1302,16 @@
         "outOfTen": "{value}/10",
         "relatedFindings": "Related findings",
         "unnamed": "Standard"
+      },
+      "validation": {
+        "heading": "Pre-PR validation",
+        "passed": "Passed",
+        "failed": "Failed",
+        "attempts": "Attempt {attempts} of {maxAttempts}",
+        "passedSummary": "All {total} checks passed on attempt {attempts}. The pull request was opened from a green checkout.",
+        "failedSummary": "{failed} of {total} checks were still failing after {attempts} of {maxAttempts} attempts, so no pull request was opened.",
+        "exitCode": "exit {code}",
+        "timedOut": "timed out"
       }
     },
     "inspector": {
@@ -3119,8 +3148,7 @@
   },
   "github": {
     "onboarding": {
-      "title": "Connect cat-factory to GitHub",
-      "intro": "cat-factory works by opening pull requests on your repositories. Install the GitHub App on your account or organization to continue, and you can grant it every repository or pick a subset.",
+      "appIntro": "Install the GitHub App on your account or organization; you can grant it every repository or pick a subset.",
       "signedInAs": "Signed in as {login}",
       "signOut": "Sign out"
     },
@@ -3194,7 +3222,6 @@
         "closed": "closed"
       },
       "toast": {
-        "disconnected": "GitHub disconnected",
         "resync": "Resync {status}",
         "reposUpdated": "Linked repositories updated",
         "branchCreated": "Branch {name} created",
@@ -3210,10 +3237,6 @@
         "createBranch": "Could not create branch",
         "openPr": "Could not open pull request",
         "merge": "Could not merge"
-      },
-      "confirmDisconnect": {
-        "title": "Disconnect GitHub?",
-        "body": "The app will lose access to your repositories until you reconnect."
       }
     },
     "addService": {
@@ -5288,5 +5311,40 @@
       "sourceUnlinked": "Source unlinked",
       "unlinkSourceFailed": "Could not unlink source"
     }
+  },
+  "vcs": {
+    "panel": {
+      "title": "Source control",
+      "patMeta": "Connected with a personal access token",
+      "confirmDisconnect": {
+        "title": "Disconnect {provider}?",
+        "body": "The app will lose access to your repositories until you reconnect."
+      },
+      "toast": {
+        "disconnected": "{provider} disconnected"
+      }
+    },
+    "connect": {
+      "or": "or",
+      "noneConfigured": "No source-control connection is configured for this deployment. Ask an operator to set up a GitHub App or GitLab access.",
+      "gitlab": {
+        "intro": "Paste a GitLab personal access token to connect this workspace. cat-factory uses it to list your projects, push branches and open merge requests.",
+        "tokenLabel": "Personal access token",
+        "scope": "Needs the api scope",
+        "createToken": "Create a token on GitLab",
+        "submit": "Connect GitLab",
+        "toast": {
+          "connected": "GitLab connected"
+        },
+        "errors": {
+          "connect": "Could not connect GitLab"
+        }
+      }
+    },
+    "onboarding": {
+      "title": "Connect cat-factory to {provider}",
+      "titleAny": "Connect cat-factory to your repositories",
+      "intro": "cat-factory works by opening pull requests on your repositories. Connect your repository host to continue."
+    }
   }
 }

package/i18n/locales/es.json

@@ -1060,6 +1060,25 @@
       "remove": "Quitar {repo}",
       "connectFirst": "Conecta GitHub para adjuntar repositorios de referencia.",
       "hint": "El escritor de documentos los clona en modo de solo lectura para reutilizar soluciones existentes como referencia al redactar. Nunca los modifica."
+    },
+    "validationChecks": {
+      "title": "Validación previa al PR",
+      "sectionHint": "Comandos que se ejecutan sobre la copia de trabajo cuando el programador termina y antes de abrir una solicitud de incorporación. Un fallo vuelve al agente para que lo corrija; solo una copia sin errores abre un PR.",
+      "hint": "Cada comando se ejecuta con `sh -c` en la copia de trabajo de este servicio, en orden. Hay que arreglar el código, no la comprobación: al agente se le indica que no las debilite.",
+      "clear": "Vaciar",
+      "configNoun": "comprobaciones de validación",
+      "label": "Nombre",
+      "labelPlaceholder": "lint",
+      "command": "Comando",
+      "addCheck": "Añadir comprobación",
+      "removeCheck": "Quitar esta comprobación",
+      "empty": "No hay comprobaciones configuradas. Las ejecuciones de este servicio abren una solicitud de incorporación sin verificación local.",
+      "maxAttempts": "Intentos",
+      "maxAttemptsHint": "Rondas de corrección",
+      "save": "Guardar comprobaciones",
+      "savedToast": "Comprobaciones guardadas",
+      "saveFailed": "No se pudieron guardar las comprobaciones",
+      "clearFailed": "No se pudieron vaciar las comprobaciones"
     }
   },
   "panels": {
@@ -1226,6 +1245,16 @@
         "outOfTen": "{value}/10",
         "relatedFindings": "Hallazgos relacionados",
         "unnamed": "Estándar"
+      },
+      "validation": {
+        "heading": "Validación previa al PR",
+        "passed": "Superada",
+        "failed": "Fallida",
+        "attempts": "Intento {attempts} de {maxAttempts}",
+        "passedSummary": "Las {total} comprobaciones se superaron en el intento {attempts}. La solicitud de incorporación se abrió desde una copia sin errores.",
+        "failedSummary": "{failed} de {total} comprobaciones seguían fallando tras {attempts} de {maxAttempts} intentos, así que no se abrió ninguna solicitud de incorporación.",
+        "exitCode": "código de salida {code}",
+        "timedOut": "tiempo agotado"
       }
     },
     "inspector": {
@@ -3032,8 +3061,7 @@
   },
   "github": {
     "onboarding": {
-      "title": "Conecta cat-factory con GitHub",
-      "intro": "cat-factory funciona abriendo solicitudes de incorporación de cambios en tus repositorios. Instala la GitHub App en tu cuenta u organización para continuar, y puedes concederle todos los repositorios o elegir un subconjunto.",
+      "appIntro": "Instala la GitHub App en tu cuenta u organización; puedes concederle todos los repositorios o elegir un subconjunto.",
       "signedInAs": "Sesión iniciada como {login}",
       "signOut": "Cerrar sesión"
     },
@@ -3107,7 +3135,6 @@
         "closed": "cerrada"
       },
       "toast": {
-        "disconnected": "GitHub desconectado",
         "resync": "Resincronización {status}",
         "reposUpdated": "Repositorios vinculados actualizados",
         "branchCreated": "Rama {name} creada",
@@ -3123,10 +3150,6 @@
         "createBranch": "No se pudo crear la rama",
         "openPr": "No se pudo abrir la solicitud de incorporación de cambios",
         "merge": "No se pudo fusionar"
-      },
-      "confirmDisconnect": {
-        "title": "¿Desconectar GitHub?",
-        "body": "La app perderá acceso a tus repositorios hasta que vuelvas a conectar."
       }
     },
     "addService": {
@@ -5147,5 +5170,40 @@
       "sourceUnlinked": "Fuente desvinculada",
       "unlinkSourceFailed": "No se pudo desvincular la fuente"
     }
+  },
+  "vcs": {
+    "panel": {
+      "title": "Control de código fuente",
+      "patMeta": "Conectado con un token de acceso personal",
+      "confirmDisconnect": {
+        "title": "¿Desconectar {provider}?",
+        "body": "La app perderá acceso a tus repositorios hasta que vuelvas a conectar."
+      },
+      "toast": {
+        "disconnected": "{provider} desconectado"
+      }
+    },
+    "connect": {
+      "or": "o",
+      "noneConfigured": "Este despliegue no tiene configurada ninguna conexión de control de código. Pide a un operador que configure una GitHub App o el acceso a GitLab.",
+      "gitlab": {
+        "intro": "Pega un token de acceso personal de GitLab para conectar este espacio de trabajo. cat-factory lo usa para listar tus proyectos, subir ramas y abrir solicitudes de fusión.",
+        "tokenLabel": "Token de acceso personal",
+        "scope": "Necesita el ámbito api",
+        "createToken": "Crear un token en GitLab",
+        "submit": "Conectar GitLab",
+        "toast": {
+          "connected": "GitLab conectado"
+        },
+        "errors": {
+          "connect": "No se pudo conectar GitLab"
+        }
+      }
+    },
+    "onboarding": {
+      "title": "Conecta cat-factory con {provider}",
+      "titleAny": "Conecta cat-factory con tus repositorios",
+      "intro": "cat-factory funciona abriendo solicitudes de incorporación de cambios en tus repositorios. Conecta tu proveedor de repositorios para continuar."
+    }
   }
 }

package/i18n/locales/fr.json

@@ -1060,6 +1060,25 @@
       "remove": "Retirer {repo}",
       "connectFirst": "Connectez GitHub pour joindre des dépôts de référence.",
       "hint": "Le rédacteur de documents les clone en lecture seule pour réutiliser des solutions existantes comme référence lors de la rédaction. Il ne les modifie jamais."
+    },
+    "validationChecks": {
+      "title": "Validation avant la PR",
+      "sectionHint": "Commandes exécutées sur la copie de travail une fois le développeur terminé et avant l'ouverture d'une demande de tirage. Un échec est renvoyé à l'agent pour correction ; seule une copie sans erreur ouvre une PR.",
+      "hint": "Chaque commande s'exécute avec `sh -c` dans la copie de travail de ce service, dans l'ordre. Il faut corriger le code, pas la vérification : il est demandé à l'agent de ne pas les affaiblir.",
+      "clear": "Vider",
+      "configNoun": "vérifications de validation",
+      "label": "Nom",
+      "labelPlaceholder": "lint",
+      "command": "Commande",
+      "addCheck": "Ajouter une vérification",
+      "removeCheck": "Supprimer cette vérification",
+      "empty": "Aucune vérification configurée. Les exécutions de ce service ouvrent une demande de tirage sans vérification locale.",
+      "maxAttempts": "Tentatives",
+      "maxAttemptsHint": "Cycles de correction",
+      "save": "Enregistrer les vérifications",
+      "savedToast": "Vérifications enregistrées",
+      "saveFailed": "Impossible d'enregistrer les vérifications",
+      "clearFailed": "Impossible de vider les vérifications"
     }
   },
   "panels": {
@@ -1226,6 +1245,16 @@
         "outOfTen": "{value}/10",
         "relatedFindings": "Constats associés",
         "unnamed": "Standard"
+      },
+      "validation": {
+        "heading": "Validation avant la PR",
+        "passed": "Réussie",
+        "failed": "Échouée",
+        "attempts": "Tentative {attempts} sur {maxAttempts}",
+        "passedSummary": "Les {total} vérifications ont réussi à la tentative {attempts}. La demande de tirage a été ouverte depuis une copie sans erreur.",
+        "failedSummary": "{failed} vérifications sur {total} échouaient encore après {attempts} tentatives sur {maxAttempts}, aucune demande de tirage n'a donc été ouverte.",
+        "exitCode": "code de sortie {code}",
+        "timedOut": "délai dépassé"
       }
     },
     "inspector": {
@@ -3032,8 +3061,7 @@
   },
   "github": {
     "onboarding": {
-      "title": "Connecter cat-factory à GitHub",
-      "intro": "cat-factory fonctionne en ouvrant des pull requests sur vos dépôts. Installez la GitHub App sur votre compte ou votre organisation pour continuer, et vous pouvez lui accorder tous les dépôts ou en choisir un sous-ensemble.",
+      "appIntro": "Installez la GitHub App sur votre compte ou votre organisation ; vous pouvez lui accorder tous les dépôts ou en choisir un sous-ensemble.",
       "signedInAs": "Connecté en tant que {login}",
       "signOut": "Se déconnecter"
     },
@@ -3107,7 +3135,6 @@
         "closed": "fermé"
       },
       "toast": {
-        "disconnected": "GitHub déconnecté",
         "resync": "Resynchronisation {status}",
         "reposUpdated": "Dépôts liés mis à jour",
         "branchCreated": "Branche {name} créée",
@@ -3123,10 +3150,6 @@
         "createBranch": "Impossible de créer la branche",
         "openPr": "Impossible d'ouvrir la pull request",
         "merge": "Impossible de fusionner"
-      },
-      "confirmDisconnect": {
-        "title": "Déconnecter GitHub ?",
-        "body": "L'application perdra l'accès à vos dépôts jusqu'à la reconnexion."
       }
     },
     "addService": {
@@ -5147,5 +5170,40 @@
       "sourceUnlinked": "Source dissociée",
       "unlinkSourceFailed": "Impossible de dissocier la source"
     }
+  },
+  "vcs": {
+    "panel": {
+      "title": "Gestion de code source",
+      "patMeta": "Connecté avec un jeton d'accès personnel",
+      "confirmDisconnect": {
+        "title": "Déconnecter {provider} ?",
+        "body": "L'application perdra l'accès à vos dépôts jusqu'à la reconnexion."
+      },
+      "toast": {
+        "disconnected": "{provider} déconnecté"
+      }
+    },
+    "connect": {
+      "or": "ou",
+      "noneConfigured": "Aucune connexion de gestion de code n'est configurée pour ce déploiement. Demandez à un opérateur de configurer une GitHub App ou un accès GitLab.",
+      "gitlab": {
+        "intro": "Collez un jeton d'accès personnel GitLab pour connecter cet espace de travail. cat-factory l'utilise pour lister vos projets, pousser des branches et ouvrir des merge requests.",
+        "tokenLabel": "Jeton d'accès personnel",
+        "scope": "Nécessite la portée api",
+        "createToken": "Créer un jeton sur GitLab",
+        "submit": "Connecter GitLab",
+        "toast": {
+          "connected": "GitLab connecté"
+        },
+        "errors": {
+          "connect": "Impossible de connecter GitLab"
+        }
+      }
+    },
+    "onboarding": {
+      "title": "Connecter cat-factory à {provider}",
+      "titleAny": "Connecter cat-factory à vos dépôts",
+      "intro": "cat-factory fonctionne en ouvrant des pull requests sur vos dépôts. Connectez votre hébergeur de dépôts pour continuer."
+    }
   }
 }