@cat-factory/app 0.288.2 → 0.290.0

package/app/utils/serviceCatalog.ts

@@ -0,0 +1,68 @@
+import type { ServiceCatalogAuthMode, ServiceCatalogSyncStatus } from '~/types/domain'
+
+// The SERVICE CATALOG connection's two closed vocabularies → their i18n keys, in ONE place each.
+//
+// Here rather than inline in `ServiceCatalogConnection.vue` for the reason `utils/vcs.ts` holds the
+// per-provider constants: an exhaustive `Record` over a wire union is the drift guard, and it only
+// guards if there is exactly one of it. A second copy in a template would keep rendering while this
+// one gained a member.
+//
+// Both are also the case the typed-message-key guard cannot see: the keys are reached through a
+// lookup rather than written out at the call site, so nothing proves the entry still names a key
+// that exists. `serviceCatalog.spec.ts` asserts every value against the base catalog, which is the
+// convention `test/i18nKeys.ts` exists for.
+
+/**
+ * The label for one authentication mode.
+ *
+ * The keys are camelCase where the wire values are kebab-case, because a vue-i18n path segment is
+ * read as a nested lookup and a hyphen in one reads fine but breaks the moment anyone writes the
+ * literal form.
+ */
+export const SERVICE_CATALOG_AUTH_KEYS: Record<ServiceCatalogAuthMode, string> = {
+  none: 'serviceCatalog.auth.none',
+  'static-token': 'serviceCatalog.auth.staticToken',
+  'legacy-shared-secret': 'serviceCatalog.auth.legacySharedSecret',
+  'oauth2-client-credentials': 'serviceCatalog.auth.oauth2',
+  basic: 'serviceCatalog.auth.basic',
+  headers: 'serviceCatalog.auth.headers',
+}
+
+/**
+ * The label for what the last import concluded.
+ *
+ * `never` is NOT a member of the wire union and has its own key beside these: "no import has run"
+ * is a null `lastSyncStatus` rather than a status value, and collapsing it into `failed` would tell
+ * an operator their portal is broken the moment they connect it.
+ */
+export const SERVICE_CATALOG_STATUS_KEYS: Record<ServiceCatalogSyncStatus, string> = {
+  ok: 'serviceCatalog.status.ok',
+  partial: 'serviceCatalog.status.partial',
+  failed: 'serviceCatalog.status.failed',
+}
+
+/** The key for a connection's last verdict, including the "never imported" case. */
+export function serviceCatalogStatusKey(status: ServiceCatalogSyncStatus | null): string {
+  return status ? SERVICE_CATALOG_STATUS_KEYS[status] : 'serviceCatalog.status.never'
+}
+
+/**
+ * The badge colour for one verdict. `partial` is a WARNING rather than a success, which is the
+ * whole point of the three-value status: a truncated import holds real services and not all of
+ * them, and a green badge over it is how a prefix of an estate comes to read as the estate.
+ */
+export const SERVICE_CATALOG_STATUS_COLORS = {
+  ok: 'success',
+  partial: 'warning',
+  failed: 'error',
+} as const satisfies Record<ServiceCatalogSyncStatus, string>
+
+/** The modes offered in the connect form, in the order an operator is most likely to want them. */
+export const SERVICE_CATALOG_AUTH_ORDER: readonly ServiceCatalogAuthMode[] = [
+  'static-token',
+  'legacy-shared-secret',
+  'oauth2-client-credentials',
+  'basic',
+  'headers',
+  'none',
+]

package/i18n/locales/de.json

@@ -1021,6 +1021,7 @@
       "context": "{value} Ktx",
       "contextThousands": "{value}K Ktx",
       "price": "{input}/{output} pro Mtok",
+      "retiresOn": "Auslauf am {date}",
       "toast": {
         "connected": "OpenRouter-Schlüssel verbunden",
         "connectFailed": "Schlüssel konnte nicht verbunden werden",
@@ -3843,6 +3844,8 @@
       "cacheRead": "{tokens} aus dem Cache gelesen",
       "cacheWrite": "{tokens} in den Cache geschrieben",
       "total": "gesamt {duration}",
+      "viaUpstream": "über {upstream}",
+      "reportedCost": "abgerechnet {cost}",
       "prompt": "Prompt",
       "promptPrefixOmitted": "(nur neue Nachrichten: {count} frühere ausgelassen)",
       "response": "Antwort",
@@ -5231,7 +5234,8 @@
     },
     "tab": {
       "catalog": "Katalog",
-      "sources": "Repo-Quellen"
+      "sources": "Repo-Quellen",
+      "portal": "Entwicklerportal"
     },
     "panel": {
       "title": "Basisdienste",
@@ -5245,7 +5249,10 @@
     "format": {
       "openapi": "OpenAPI",
       "toadContract": "toad-contracts",
-      "lokaliseApiContract": "lokalise/api-contract"
+      "lokaliseApiContract": "lokalise/api-contract",
+      "asyncapi": "AsyncAPI",
+      "graphql": "GraphQL",
+      "grpc": "gRPC"
     },
     "contracts": {
       "omitted": "+{count} weitere nicht aufgeführt",
@@ -5923,7 +5930,11 @@
         "binary_generators_unreachable": "Die generativen Integrationen dieser Installation konnten gerade nicht gelesen werden, deshalb wurde der Lauf nicht gestartet. Es ist nichts falsch konfiguriert und keine Änderung nötig: versuchen Sie es erneut, sobald die Verbindung wieder steht.",
         "foundational_builtins_unreachable": "Die integrierten Basisdienste dieser Installation konnten gerade nicht gelesen werden. Es ist nichts falsch konfiguriert und keine Änderung nötig: versuchen Sie es erneut, sobald die Verbindung wieder steht.",
         "connection_credentials_unreadable": "Die gespeicherten Zugangsdaten dieser Verbindung konnten nicht gelesen werden. Wenn diese Installation den Dienst mit dem zugehörigen Schlüssel erreicht, verbinden Sie die Quelle neu, um sie zu ersetzen; andernfalls versuchen Sie es erneut, sobald diese Verbindung wiederhergestellt ist.",
-        "vcs_capability_unsupported": "Der mit diesem Workspace verbundene Quellcode-Anbieter bietet diesen Vorgang nicht an. Es ist nichts falsch konfiguriert und eine Einrichtung hilft hier nicht: Für diesen Anbieter ist der Vorgang nicht verfügbar."
+        "vcs_capability_unsupported": "Der mit diesem Workspace verbundene Quellcode-Anbieter bietet diesen Vorgang nicht an. Es ist nichts falsch konfiguriert und eine Einrichtung hilft hier nicht: Für diesen Anbieter ist der Vorgang nicht verfügbar.",
+        "service_catalog_unreachable": "Das Entwicklerportal dieses Boards hat nicht geantwortet oder eine Antwort geliefert, die diese Plattform nicht lesen kann. Hier ist nichts falsch konfiguriert und keine Änderung hilft: versuche es erneut, sobald das Portal erreichbar ist.",
+        "service_catalog_unauthorized": "Das Entwicklerportal hat die gespeicherte Zugangsdaten abgelehnt. Sie wurden wahrscheinlich rotiert oder widerrufen: öffne die Servicekatalog-Einstellungen und trage aktuelle ein.",
+        "service_catalog_filter_missing": "Der Entitätsfilter dieser Verbindung konnte nicht gelesen werden, es gibt also nichts zu importieren. Speichere die Servicekatalog-Verbindung erneut, um ihn wiederherzustellen.",
+        "service_catalog_response_too_large": "Das Entwicklerportal hat mit mehr Daten geantwortet, als diese Plattform in einer Antwort aufnimmt. Öffne die Servicekatalog-Einstellungen und senke das Service-Limit oder deaktiviere den Import von Schnittstellendefinitionen, und importiere dann erneut."
       }
     },
     "action": {
@@ -6863,6 +6874,7 @@
     "empty": "Keine ephemere Umgebung für diesen Lauf.",
     "provisionTypeLabel": "Bereitstellungstyp:",
     "engineLabel": "Engine:",
+    "statusNote": "Hinweis des Anbieters: {note}",
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
@@ -6888,6 +6900,7 @@
       "teardown": "Abbauen",
       "teardown-verify": "Abbau-Prüfung",
       "status": "Statusprüfung",
+      "remediate": "Reparatur vor Ort",
       "dispatch": "Hochfahren",
       "release": "Abbauen",
       "poll-failure": "Health-Check"
@@ -8098,5 +8111,79 @@
       "title": "Nichts zu vergleichen"
     },
     "loadFailed": "Die erzeugten Kandidaten konnten nicht geladen werden."
+  },
+  "serviceCatalog": {
+    "unavailable": "Der Import eines Servicekatalogs ist für diese Installation nicht konfiguriert.",
+    "intro": "Verweise die Plattform auf das Entwicklerportal, das deine Organisation bereits betreibt: Ihre Services werden in den Katalog oben importiert, mit Identität, Verantwortlichkeit und den API-Definitionen, die jeder Service veröffentlicht. Agenten, die Fehler einordnen oder untersuchen, lesen sie, um zu bestimmen, zu welchem Service eine Aufgabe gehört.",
+    "summary": "Filter: {filter} · höchstens {max} Services",
+    "form": {
+      "connect": "Portal verbinden",
+      "replace": "Verbindung ersetzen"
+    },
+    "field": {
+      "baseUrl": "Portal-URL",
+      "authMode": "Authentifizierung",
+      "token": "Service-Token",
+      "sharedSecret": "Gemeinsames Geheimnis",
+      "tokenUrl": "Token-Endpunkt",
+      "clientId": "Client-ID",
+      "clientSecret": "Client-Secret",
+      "scope": "Scope (optional)",
+      "audience": "Audience (optional)",
+      "username": "Benutzername",
+      "password": "Passwort",
+      "headerName": "Header-Name",
+      "headerValue": "Header-Wert",
+      "secondHeaderName": "Zweiter Header-Name (optional)",
+      "secondHeaderValue": "Zweiter Header-Wert",
+      "entityFilter": "Entitätsfilter",
+      "maxServices": "Maximale Anzahl Services",
+      "includeApis": "API-Definitionen der Services mitimportieren"
+    },
+    "help": {
+      "baseUrl": "Die Basis-URL deiner Backstage-Instanz. Ein privater oder interner Host ist nur zulässig, wenn die Installation ihn erlaubt.",
+      "token": "Ein Service-zu-Service-Token aus der External-Access-Konfiguration von Backstage.",
+      "sharedSecret": "Ein base64-Geheimnis aus `backend.auth.keys`. Die Plattform signiert damit pro Anfrage ein kurzlebiges Token.",
+      "headers": "Für ein Gateway, das über eigene Header authentifiziert, etwa ein Cloudflare-Access-Service-Token.",
+      "entityFilter": "Ein `key=value`-Ausdruck pro Zeile; alle müssen zutreffen. Standard ist `kind=component`. Grenze ihn auf die Services ein, die als gemeinsame Fähigkeiten angeboten werden sollen.",
+      "maxServices": "Ein Import, der dieses Limit erreicht, wird als Auszug des Portals gemeldet, nicht als dessen Gesamtheit."
+    },
+    "auth": {
+      "none": "Keine",
+      "staticToken": "Statisches Service-Token",
+      "legacySharedSecret": "Gemeinsames Geheimnis (Legacy-Token)",
+      "oauth2": "OAuth2 Client Credentials",
+      "basic": "HTTP Basic",
+      "headers": "Eigene Header"
+    },
+    "status": {
+      "ok": "Importiert",
+      "partial": "Teilweise importiert",
+      "failed": "Import fehlgeschlagen",
+      "never": "Nie importiert"
+    },
+    "action": {
+      "connect": "Verbinden",
+      "replace": "Ersetzen",
+      "probe": "Verbindung testen",
+      "import": "Jetzt importieren",
+      "disconnect": "Trennen"
+    },
+    "disconnect": {
+      "title": "Servicekatalog trennen?",
+      "body": "Die von diesem Portal importierten Services werden aus dem Katalog zurückgezogen. Manuell registrierte oder hochgeladene Einträge bleiben unberührt.",
+      "confirm": "Trennen"
+    },
+    "toast": {
+      "connected": "Servicekatalog verbunden",
+      "connectFailed": "Servicekatalog konnte nicht verbunden werden",
+      "probeOk": "Das Portal hat geantwortet",
+      "probeFailed": "Das Portal war nicht erreichbar",
+      "imported": "Servicekatalog importiert",
+      "importedDetail": "{upserted} aktualisiert, {unchanged} unverändert, {tombstoned} zurückgezogen",
+      "importFailed": "Servicekatalog konnte nicht importiert werden",
+      "disconnected": "Servicekatalog getrennt",
+      "disconnectFailed": "Servicekatalog konnte nicht getrennt werden"
+    }
   }
 }

package/i18n/locales/en.json

@@ -686,7 +686,11 @@
         "binary_generators_unreachable": "This deployment's generative integrations could not be read just now, so the run was not started. Nothing is misconfigured and no change is needed: try again once the connection recovers.",
         "foundational_builtins_unreachable": "This deployment's built-in foundational services could not be read just now. Nothing is misconfigured and no change is needed: try again once the connection recovers.",
         "connection_credentials_unreadable": "The stored credentials for this connection could not be read. If this deployment can reach the service holding its key, re-connect the source to replace them; otherwise try again once that connection recovers.",
-        "vcs_capability_unsupported": "The source-control provider connected to this workspace does not offer this operation. Nothing is misconfigured and setting something up will not help: it is unavailable for this provider."
+        "vcs_capability_unsupported": "The source-control provider connected to this workspace does not offer this operation. Nothing is misconfigured and setting something up will not help: it is unavailable for this provider.",
+        "service_catalog_unreachable": "This workspace's developer portal did not answer, or answered with something this platform cannot read. Nothing here is misconfigured and no change will help: try again once the portal is reachable.",
+        "service_catalog_unauthorized": "The developer portal refused the stored credential. It has most likely been rotated or revoked: open the service-catalog settings and enter a current one.",
+        "service_catalog_filter_missing": "This connection's entity filter could not be read, so there is nothing to import. Re-save the service-catalog connection to restore it.",
+        "service_catalog_response_too_large": "The developer portal answered with more data than this platform will hold in one response. Open the service-catalog settings and lower the service cap, or turn off importing interface definitions, then import again."
       }
     },
     "action": {
@@ -1894,6 +1898,8 @@
       "cacheRead": "{tokens} cache read",
       "cacheWrite": "{tokens} cache write",
       "total": "total {duration}",
+      "viaUpstream": "via {upstream}",
+      "reportedCost": "billed {cost}",
       "prompt": "Prompt",
       "promptPrefixOmitted": "(new messages only: {count} earlier omitted)",
       "response": "Response",
@@ -3897,6 +3903,7 @@
       "context": "{value} ctx",
       "contextThousands": "{value}K ctx",
       "price": "{input}/{output} per Mtok",
+      "retiresOn": "Retires {date}",
       "toast": {
         "connected": "OpenRouter key connected",
         "connectFailed": "Could not connect key",
@@ -6590,6 +6597,7 @@
     "empty": "No ephemeral environment for this run.",
     "provisionTypeLabel": "Provision type:",
     "engineLabel": "Engine:",
+    "statusNote": "Provider note: {note}",
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
@@ -6615,6 +6623,7 @@
       "teardown": "Tear down",
       "teardown-verify": "Teardown check",
       "status": "Status check",
+      "remediate": "Repair in place",
       "dispatch": "Spin up",
       "release": "Tear down",
       "poll-failure": "Health check"
@@ -6852,7 +6861,8 @@
     },
     "tab": {
       "catalog": "Catalog",
-      "sources": "Repo sources"
+      "sources": "Repo sources",
+      "portal": "Developer portal"
     },
     "panel": {
       "title": "Foundational services",
@@ -6866,7 +6876,10 @@
     "format": {
       "openapi": "OpenAPI",
       "toadContract": "toad-contracts",
-      "lokaliseApiContract": "lokalise/api-contract"
+      "lokaliseApiContract": "lokalise/api-contract",
+      "asyncapi": "AsyncAPI",
+      "graphql": "GraphQL",
+      "grpc": "gRPC"
     },
     "contracts": {
       "omitted": "+{count} more not listed",
@@ -8387,5 +8400,79 @@
       "title": "Nothing to compare"
     },
     "loadFailed": "Could not load the generated candidates."
+  },
+  "serviceCatalog": {
+    "unavailable": "Importing a service catalog is not configured for this deployment.",
+    "intro": "Point the platform at the developer portal your organisation already runs, and its services are imported into the catalog above, with the identity, ownership and API definitions each one publishes. Agents that triage or investigate read them to work out which service a piece of work belongs to.",
+    "summary": "Filter: {filter} · at most {max} services",
+    "form": {
+      "connect": "Connect a portal",
+      "replace": "Replace this connection"
+    },
+    "field": {
+      "baseUrl": "Portal URL",
+      "authMode": "Authentication",
+      "token": "Service token",
+      "sharedSecret": "Shared secret",
+      "tokenUrl": "Token endpoint",
+      "clientId": "Client ID",
+      "clientSecret": "Client secret",
+      "scope": "Scope (optional)",
+      "audience": "Audience (optional)",
+      "username": "Username",
+      "password": "Password",
+      "headerName": "Header name",
+      "headerValue": "Header value",
+      "secondHeaderName": "Second header name (optional)",
+      "secondHeaderValue": "Second header value",
+      "entityFilter": "Entity filter",
+      "maxServices": "Maximum services",
+      "includeApis": "Import the API definitions each service publishes"
+    },
+    "help": {
+      "baseUrl": "The base URL of your Backstage instance. A private or internal host is allowed only where the deployment permits it.",
+      "token": "A service-to-service token from Backstage's external-access configuration.",
+      "sharedSecret": "A base64 secret from `backend.auth.keys`. The platform signs a short-lived token with it per request.",
+      "headers": "For a gateway that authenticates on its own header names, such as a Cloudflare Access service token.",
+      "entityFilter": "One `key=value` term per line, all of which must match. Defaults to `kind=component`. Narrow it to the services you want offered as shared capabilities.",
+      "maxServices": "An import that reaches this cap is reported as a prefix of the portal, not as the whole of it."
+    },
+    "auth": {
+      "none": "None",
+      "staticToken": "Static service token",
+      "legacySharedSecret": "Shared secret (legacy token)",
+      "oauth2": "OAuth2 client credentials",
+      "basic": "HTTP Basic",
+      "headers": "Custom headers"
+    },
+    "status": {
+      "ok": "Imported",
+      "partial": "Imported in part",
+      "failed": "Import failed",
+      "never": "Never imported"
+    },
+    "action": {
+      "connect": "Connect",
+      "replace": "Replace",
+      "probe": "Test connection",
+      "import": "Import now",
+      "disconnect": "Disconnect"
+    },
+    "disconnect": {
+      "title": "Disconnect the service catalog?",
+      "body": "The services this portal imported are withdrawn from the catalog. Nothing you registered or uploaded by hand is touched.",
+      "confirm": "Disconnect"
+    },
+    "toast": {
+      "connected": "Service catalog connected",
+      "connectFailed": "Could not connect the service catalog",
+      "probeOk": "The portal answered",
+      "probeFailed": "Could not reach the portal",
+      "imported": "Service catalog imported",
+      "importedDetail": "{upserted} updated, {unchanged} unchanged, {tombstoned} withdrawn",
+      "importFailed": "Could not import the service catalog",
+      "disconnected": "Service catalog disconnected",
+      "disconnectFailed": "Could not disconnect the service catalog"
+    }
   }
 }

package/i18n/locales/es.json

@@ -617,7 +617,11 @@
         "binary_generators_unreachable": "No se han podido leer las integraciones generativas de esta instalación en este momento, así que no se ha iniciado la ejecución. No hay nada mal configurado ni hace falta ningún cambio: inténtalo de nuevo cuando se restablezca la conexión.",
         "foundational_builtins_unreachable": "No se han podido leer los servicios fundamentales integrados de esta instalación en este momento. No hay nada mal configurado ni hace falta ningún cambio: inténtalo de nuevo cuando se restablezca la conexión.",
         "connection_credentials_unreadable": "No se han podido leer las credenciales guardadas de esta conexión. Si esta instalación puede acceder al servicio que custodia su clave, vuelve a conectar la fuente para reemplazarlas; si no, inténtalo de nuevo cuando se restablezca esa conexión.",
-        "vcs_capability_unsupported": "El proveedor de control de código conectado a este espacio de trabajo no ofrece esta operación. No hay nada mal configurado y configurar algo no servirá de nada: no está disponible para este proveedor."
+        "vcs_capability_unsupported": "El proveedor de control de código conectado a este espacio de trabajo no ofrece esta operación. No hay nada mal configurado y configurar algo no servirá de nada: no está disponible para este proveedor.",
+        "service_catalog_unreachable": "El portal de desarrollo de este espacio no respondió, o respondió con algo que esta plataforma no puede leer. Aquí no hay nada mal configurado y ningún cambio ayudará: vuelve a intentarlo cuando el portal esté accesible.",
+        "service_catalog_unauthorized": "El portal de desarrollo rechazó las credenciales guardadas. Lo más probable es que se hayan rotado o revocado: abre los ajustes del catálogo de servicios e introduce unas vigentes.",
+        "service_catalog_filter_missing": "No se pudo leer el filtro de entidades de esta conexión, así que no hay nada que importar. Vuelve a guardar la conexión del catálogo de servicios para restaurarlo.",
+        "service_catalog_response_too_large": "El portal de desarrollo respondió con más datos de los que esta plataforma admite en una sola respuesta. Abre la configuración del catálogo de servicios y reduce el límite de servicios, o desactiva la importación de definiciones de interfaz, y vuelve a importar."
       }
     },
     "action": {
@@ -1790,6 +1794,8 @@
       "cacheRead": "{tokens} leídos de caché",
       "cacheWrite": "{tokens} escritos en caché",
       "total": "total {duration}",
+      "viaUpstream": "vía {upstream}",
+      "reportedCost": "facturado {cost}",
       "prompt": "Prompt",
       "promptPrefixOmitted": "(solo mensajes nuevos: {count} anteriores omitidos)",
       "response": "Respuesta",
@@ -3612,6 +3618,7 @@
       "context": "{value} ctx",
       "contextThousands": "{value}K ctx",
       "price": "{input}/{output} por Mtok",
+      "retiresOn": "Se retira el {date}",
       "toast": {
         "connected": "Clave de OpenRouter conectada",
         "connectFailed": "No se pudo conectar la clave",
@@ -6286,6 +6293,7 @@
     "empty": "No hay entorno efímero para esta ejecución.",
     "provisionTypeLabel": "Tipo de aprovisionamiento:",
     "engineLabel": "Motor:",
+    "statusNote": "Nota del proveedor: {note}",
     "provisionType": {
       "kubernetes": "Kubernetes",
       "docker-compose": "Docker Compose",
@@ -6311,6 +6319,7 @@
       "teardown": "Desmontar",
       "teardown-verify": "Comprobación de desmontaje",
       "status": "Comprobación de estado",
+      "remediate": "Reparación en sitio",
       "dispatch": "Arrancar",
       "release": "Desmontar",
       "poll-failure": "Comprobación de salud"
@@ -6541,7 +6550,8 @@
     },
     "tab": {
       "catalog": "Catálogo",
-      "sources": "Repos vinculados"
+      "sources": "Repos vinculados",
+      "portal": "Portal de desarrollo"
     },
     "panel": {
       "title": "Servicios fundamentales",
@@ -6555,7 +6565,10 @@
     "format": {
       "openapi": "OpenAPI",
       "toadContract": "toad-contracts",
-      "lokaliseApiContract": "lokalise/api-contract"
+      "lokaliseApiContract": "lokalise/api-contract",
+      "asyncapi": "AsyncAPI",
+      "graphql": "GraphQL",
+      "grpc": "gRPC"
     },
     "contracts": {
       "omitted": "+{count} más sin listar",
@@ -8098,5 +8111,79 @@
       "title": "Nada que comparar"
     },
     "loadFailed": "No se pudieron cargar los candidatos generados."
+  },
+  "serviceCatalog": {
+    "unavailable": "La importación de un catálogo de servicios no está configurada en esta instalación.",
+    "intro": "Apunta la plataforma al portal de desarrollo que ya usa tu organización: sus servicios se importan al catálogo de arriba, con su identidad, su responsable y las definiciones de API que publica cada uno. Los agentes que clasifican o investigan incidencias los leen para deducir a qué servicio pertenece un trabajo.",
+    "summary": "Filtro: {filter} · como máximo {max} servicios",
+    "form": {
+      "connect": "Conectar un portal",
+      "replace": "Reemplazar esta conexión"
+    },
+    "field": {
+      "baseUrl": "URL del portal",
+      "authMode": "Autenticación",
+      "token": "Token de servicio",
+      "sharedSecret": "Secreto compartido",
+      "tokenUrl": "Endpoint de token",
+      "clientId": "ID de cliente",
+      "clientSecret": "Secreto de cliente",
+      "scope": "Scope (opcional)",
+      "audience": "Audience (opcional)",
+      "username": "Usuario",
+      "password": "Contraseña",
+      "headerName": "Nombre de la cabecera",
+      "headerValue": "Valor de la cabecera",
+      "secondHeaderName": "Segunda cabecera (opcional)",
+      "secondHeaderValue": "Valor de la segunda cabecera",
+      "entityFilter": "Filtro de entidades",
+      "maxServices": "Máximo de servicios",
+      "includeApis": "Importar las definiciones de API que publica cada servicio"
+    },
+    "help": {
+      "baseUrl": "La URL base de tu instancia de Backstage. Un host privado o interno solo se admite si la instalación lo permite.",
+      "token": "Un token de servicio a servicio de la configuración de acceso externo de Backstage.",
+      "sharedSecret": "Un secreto en base64 de `backend.auth.keys`. La plataforma firma con él un token de vida corta en cada petición.",
+      "headers": "Para una pasarela que autentica con sus propias cabeceras, como un token de servicio de Cloudflare Access.",
+      "entityFilter": "Un término `key=value` por línea; todos deben coincidir. Por defecto `kind=component`. Redúcelo a los servicios que quieras ofrecer como capacidades compartidas.",
+      "maxServices": "Una importación que alcanza este límite se informa como un extracto del portal, no como su totalidad."
+    },
+    "auth": {
+      "none": "Ninguna",
+      "staticToken": "Token de servicio estático",
+      "legacySharedSecret": "Secreto compartido (token heredado)",
+      "oauth2": "Credenciales de cliente OAuth2",
+      "basic": "HTTP Basic",
+      "headers": "Cabeceras personalizadas"
+    },
+    "status": {
+      "ok": "Importado",
+      "partial": "Importado en parte",
+      "failed": "Importación fallida",
+      "never": "Nunca importado"
+    },
+    "action": {
+      "connect": "Conectar",
+      "replace": "Reemplazar",
+      "probe": "Probar conexión",
+      "import": "Importar ahora",
+      "disconnect": "Desconectar"
+    },
+    "disconnect": {
+      "title": "¿Desconectar el catálogo de servicios?",
+      "body": "Los servicios importados de este portal se retiran del catálogo. Nada de lo que registraste o subiste a mano se ve afectado.",
+      "confirm": "Desconectar"
+    },
+    "toast": {
+      "connected": "Catálogo de servicios conectado",
+      "connectFailed": "No se pudo conectar el catálogo de servicios",
+      "probeOk": "El portal respondió",
+      "probeFailed": "No se pudo acceder al portal",
+      "imported": "Catálogo de servicios importado",
+      "importedDetail": "{upserted} actualizados, {unchanged} sin cambios, {tombstoned} retirados",
+      "importFailed": "No se pudo importar el catálogo de servicios",
+      "disconnected": "Catálogo de servicios desconectado",
+      "disconnectFailed": "No se pudo desconectar el catálogo de servicios"
+    }
   }
 }