@antelopejs/dms 0.11.0 → 0.12.0

package/frontend-vue/layers/dms-layout/server/render-token.ts

@@ -1,9 +1,6 @@
+import { isString } from "../../dms-core/app/utils/type-check";
 import { createHmac, timingSafeEqual } from "node:crypto";
 
-// The service token that guards the HTML render route, minted by the DMS
-// backend (`service-jwt.ts`) for its own render requests: its signature, its
-// claims and its single use.
-
 const RENDER_TOKEN_LIFETIME_SECONDS = 5 * 60;
 const RENDER_REPLAY_LIMIT = 10_000;
 
@@ -32,6 +29,10 @@ function signatureValid(parts: string[], secret: string): boolean {
   return timingSafeEqual(Buffer.from(expected), Buffer.from(parts[2]));
 }
 
+function isSafeInteger(value: RenderTokenClaims["iat"]): value is number {
+  return Number.isSafeInteger(value);
+}
+
 /**
  * The claims this service accepts. `exp - iat` is bounded so a token minted
  * with a far-future expiry cannot outlive the intended window.
@@ -44,14 +45,13 @@ function claimsValid(
     payload.namespace === "html-render-service" &&
     payload.purpose === "html-render" &&
     payload.aud === "dms-frontend" &&
-    typeof payload.jti === "string" &&
+    isString(payload.jti) &&
     payload.jti.length >= 16 &&
-    Number.isSafeInteger(payload.iat) &&
-    Number.isSafeInteger(payload.exp) &&
-    (payload.exp as number) > now &&
-    (payload.exp as number) - (payload.iat as number) <=
-      RENDER_TOKEN_LIFETIME_SECONDS &&
-    (payload.iat as number) <= now
+    isSafeInteger(payload.iat) &&
+    isSafeInteger(payload.exp) &&
+    payload.exp > now &&
+    payload.exp - payload.iat <= RENDER_TOKEN_LIFETIME_SECONDS &&
+    payload.iat <= now
   );
 }
 
@@ -64,6 +64,7 @@ function rememberToken(jti: string, exp: number, now: number) {
   for (const [spent, expiresAt] of usedRenderTokens)
     if (expiresAt <= now) usedRenderTokens.delete(spent);
   while (usedRenderTokens.size >= RENDER_REPLAY_LIMIT)
+    // SAFETY: The synchronous loop requires at least 10,000 entries in this Map<string, number>, so next() has a string key.
     usedRenderTokens.delete(usedRenderTokens.keys().next().value as string);
   usedRenderTokens.set(jti, exp);
 }
@@ -81,9 +82,9 @@ export function validRenderToken(
   if (parts.length !== 3) return false;
   if (!signatureValid(parts, secret)) return false;
   try {
-    const payload = JSON.parse(
+    const payload: Parameters<typeof claimsValid>[0] = JSON.parse(
       Buffer.from(parts[1], "base64url").toString("utf8"),
-    ) as RenderTokenClaims;
+    );
     const now = Math.floor(Date.now() / 1000);
     if (!claimsValid(payload, now)) return false;
     if (usedRenderTokens.has(payload.jti)) return false;

package/frontend-vue/layers/dms-onboarding/app/build/components/onboarding/StepIndicator.vue

@@ -13,14 +13,12 @@ const DONE_ICON = "i-ph-check-bold";
 
 const props = defineProps<StepIndicatorProps>();
 
-// Done steps show a check. On phones only the current step keeps its label,
-// so the three steps stay on one row (a done label beside the current one
-// pushed the last step onto a second line).
 const items = computed<StepperItem[]>(() =>
   props.labels.map((label, index) => ({
     title: label,
     icon: index < props.current ? DONE_ICON : undefined,
-    // Nuxt UI types an item's `ui` as every slot at once; one is enough.
+
+    // SAFETY: UStepper reads each item.ui slot optionally; its Pick type requires slots the renderer permits omitting.
     ui:
       index !== props.current
         ? ({ wrapper: "max-sm:hidden" } as StepperItem["ui"])

package/frontend-vue/layers/dms-onboarding/app/build/components/onboarding/steps/platform.vue

@@ -2,7 +2,7 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { SelectItem } from "@nuxt/ui";
-import StageCard from "../../../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import type { OnboardingPlatform } from "../../../composables/onboarding/steps";
 import StepMeta from "../StepMeta.vue";
 import {
@@ -39,7 +39,6 @@ const schema = useLocalizedSchema(
 const form = useTemplateRef<LiveFormHandle>("form");
 useLiveFormErrors(form, platform.value);
 
-// Read in the browser: the server render does not know the public address.
 const host = ref("");
 const isSecure = ref(false);
 

package/frontend-vue/layers/dms-onboarding/app/build/components/onboarding/steps/ready.vue

@@ -1,7 +1,8 @@
 <script setup lang="ts">
-import { TILE_ROW_INTERACTIVE_CLASS } from "#dms-ui/app/build/utils/tileRow";
+import type { AnchorHTMLAttributes, ButtonHTMLAttributes } from "vue";
+import { TILE_ROW_INTERACTIVE_CLASS } from "#dms-ui/app/entries/utils/tileRow";
 import type { KeyValueItem } from "#dms-ui/app/components/key-value-list/KeyValueList.vue";
-import StageCard from "../../../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import type {
   OnboardingAdministrator,
   OnboardingPlatform,
@@ -91,15 +92,15 @@ const recapItems = computed<KeyValueItem[]>(() => [
   },
 ]);
 
-function actionAttributes(action: NextAction): Record<string, unknown> {
+function actionAttributes(
+  action: NextAction,
+): AnchorHTMLAttributes | ButtonHTMLAttributes {
   if (action.isExternal) {
     return { href: action.to, ...EXTERNAL_LINK_ATTRIBUTES };
   }
   return { type: "button", disabled: isOpening.value };
 }
 
-// The session is refreshed on the way out, not before: the owner stays on
-// this page, and every exit first loads their permissions and language.
 async function open(destination?: string) {
   if (isOpening.value) return;
   isOpening.value = true;
@@ -110,7 +111,6 @@ async function open(destination?: string) {
       ),
     );
   } catch {
-    // A full reload also clears fatal layout errors from the failed refresh.
     window.location.replace(LOGIN_PATH);
   }
 }

package/frontend-vue/layers/dms-onboarding/app/components/onboarding/steps/register.vue

@@ -3,13 +3,13 @@ import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
 import striptags from "striptags";
-import StageCard from "../../../../../dms-layout/app/build/components/layout/StageCard.vue";
-import AuthFormAlert from "../../../../../dms-auth/app/build/components/AuthFormAlert.vue";
-import AuthNewPasswordField from "../../../../../dms-auth/app/build/components/AuthNewPasswordField.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
+import AuthFormAlert from "#dms-auth/app/entries/components/AuthFormAlert";
+import AuthNewPasswordField from "#dms-auth/app/entries/components/AuthNewPasswordField";
 import {
   type AuthFormHandle,
   useAuthFormError,
-} from "../../../../../dms-auth/app/build/composables/useAuthFormError";
+} from "#dms-auth/app/entries/composables/useAuthFormError";
 import type {
   OnboardingAdministrator,
   OnboardingPlatform,
@@ -101,12 +101,10 @@ async function onSubmit(event: FormSubmitEvent<Schema>) {
     });
   } catch (error: unknown) {
     if (isRegistered.value) {
-      // A full reload also clears fatal layout errors from the failed login.
       window.location.replace(LOGIN_PATH);
       return;
     }
-    // A refused value shows under its field; anything else (an administrator
-    // already set) above the form.
+
     await showError(error, "page.onboarding.administrator.error_title", {
       fields: ["firstName", "lastName", "email", "password"],
       form,

package/frontend-vue/layers/dms-onboarding/app/composables/onboarding/useOnboarding.ts

@@ -18,10 +18,6 @@ export const useOnboarding = async (): Promise<OnboardingInfo> => {
   const known = useDmsData<OnboardingInfo>(ONBOARDING_KEY).data.value;
   if (known) return known;
 
-  // One request per app however many callers ask before it answers: the
-  // preload started with the app and the `onboarding` middleware share the
-  // key. Its own triggers only: the status changes once, when the first
-  // administrator registers (`setOnboardingComplete`).
   const status = await useApiData<OnboardingInfo>(
     ONBOARDING_KEY,
     async ({ $authFetch, signal }) => {
@@ -33,8 +29,7 @@ export const useOnboarding = async (): Promise<OnboardingInfo> => {
     },
     { refreshOnPageRefresh: false },
   );
-  // A failed read leaves the status unknown: the middleware lets the
-  // navigation through, and the next one asks again.
+
   if (!status.data.value) throw status.error.value;
   return status.data.value;
 };

package/frontend-vue/layers/dms-onboarding/app/custom-pages/onboarding.vue

@@ -10,23 +10,17 @@ import {
   type OnboardingStep,
 } from "../build/composables/onboarding/steps";
 
-// A custom page runs the global middleware only once it declares its meta:
-// that is what lets the onboarding middleware send a visitor away from a
-// wizard that is already finished, on a direct load as on a navigation.
 defineDmsPageMeta({});
 
 const { t, locale } = useI18n();
 const { metaTitle } = useSystemState();
 
-// The steps live in this one page, so the middleware, which releases a
-// finished wizard, never runs between the account step and the Ready step.
 const step = ref<OnboardingStep>("platform");
 const platform = ref<OnboardingPlatform>({
   name: metaTitle.value,
   language: locale.value,
 });
 
-// The configured meta title only prefills the name, once it has loaded.
 watch(metaTitle, (title) => {
   if (!platform.value.name) platform.value.name = title;
 });

package/frontend-vue/layers/dms-onboarding/app/entries/component-registry.ts

@@ -0,0 +1,12 @@
+import type { Component } from "vue";
+
+const components = import.meta.glob<{ default: Component }>(
+  "../build/components/**/*.vue",
+);
+
+export const buildComponents = Object.fromEntries(
+  Object.entries(components).map(([path, loader]): [string, typeof loader] => [
+    `./layers/dms-onboarding/app/${path.slice(3)}`,
+    loader,
+  ]),
+);

package/frontend-vue/layers/dms-onboarding/app/entries/components/onboarding/steps/ready.ts

@@ -0,0 +1,2 @@
+export { default } from "../../../../build/components/onboarding/steps/ready.vue";
+export * from "../../../../build/components/onboarding/steps/ready.vue";

package/frontend-vue/layers/dms-onboarding/app/middleware/onboarding.global.ts

@@ -1,12 +1,8 @@
 const ONBOARDING_PATH = "/onboarding";
 const LOGIN_PATH = "/auth";
-// The block preview a docs site embeds draws blocks only, so an instance not
-// yet set up still serves it rather than the wizard.
+
 const BLOCK_PREVIEW_PATH = "/dms-preview";
 
-// Where a visit to the finished wizard lands: the app for a signed-in user, the
-// login page for anyone else rather than a homepage whose 401 would bounce
-// them there anyway.
 function completedOnboardingDestination(): string {
   const { loggedIn } = useDmsUserSession();
   return loggedIn.value ? useHomepage() : LOGIN_PATH;
@@ -16,18 +12,10 @@ export default defineDmsMiddleware(async (to) => {
   if (to.path === BLOCK_PREVIEW_PATH) return;
   const isOnboardingRoute = to.path.startsWith(ONBOARDING_PATH);
 
-  // While the instance has no admin yet, funnel every route to the onboarding
-  // wizard. Running as a global middleware (instead of a plugin) lets this take
-  // precedence over the homepage redirect: otherwise an anonymous visitor is
-  // sent to the configured homepage — a protected page whose 401 bounces them
-  // to /auth, interrupting onboarding.
   let info;
   try {
     info = await useOnboarding();
   } catch {
-    // If the onboarding status can't be resolved, don't block navigation: the
-    // wizard stays reachable, and it is its own register call that refuses a
-    // second admin.
     return;
   }
 

package/frontend-vue/layers/dms-ui/app/build/components/activity-feed/activityFeedDays.ts

@@ -7,7 +7,8 @@ import type {
   BlockText,
   ComposedTextParam,
 } from "#dms-core/app/types/composed-text";
-import type { Tone } from "../../../types/tone";
+import type { Tone } from "#dms-core/app/types/tone";
+import { isString } from "#dms-core/app/utils/type-check";
 
 /** One entry of an activity feed, as a page declares it or a source answers. */
 export interface ActivityFeedItem {
@@ -66,11 +67,12 @@ export function formatShortDate(date: Date, now: Date, locale: string): string {
   const sameYear =
     regionalDayKey(date).slice(0, YEAR_KEY_LENGTH) ===
     regionalDayKey(now).slice(0, YEAR_KEY_LENGTH);
-  return regionalDateTimeFormat(locale, {
+  const options: Intl.DateTimeFormatOptions = {
     month: "short",
     day: "numeric",
-    ...(sameYear ? {} : { year: "numeric" }),
-  }).format(date);
+  };
+  if (!sameYear) options.year = "numeric";
+  return regionalDateTimeFormat(locale, options).format(date);
 }
 
 /** How far back a day is, in the coarse buckets of a feed. */
@@ -150,7 +152,7 @@ export function formatActivityTime(date: string, locale: string): string {
 }
 
 const isTextKey = (value: ComposedTextParam): value is string =>
-  typeof value === "string" && value.startsWith("$");
+  isString(value) && value.startsWith("$");
 
 /**
  * The values an entry's title and details interpolate, as composed-text

package/frontend-vue/layers/dms-ui/app/build/components/blocks/BlockActions.vue

@@ -1,18 +1,11 @@
 <script setup lang="ts">
 import type { ButtonProps } from "@nuxt/ui";
 import { buttonLinkProps } from "../../utils/link";
-import type { Tone } from "../../../types/tone";
+import type { Tone } from "#dms-core/app/types/tone";
 import type { CustomButton } from "../../../composables/table-view/types/custom-button";
+import type { BlockAction } from "#dms-core/app/entries/types/block-action";
 
-/** A link button a block option declares (interface-dms `BlockLinkAction`). */
-export interface BlockAction {
-  label: string;
-  /** Route, `#anchor` or URL; an absolute URL opens in a new tab. */
-  to: string;
-  icon?: string;
-  variant?: ButtonProps["variant"];
-  color?: Tone;
-}
+export type { BlockAction } from "#dms-core/app/entries/types/block-action";
 
 /**
  * A button running a target (interface-dms `BannerButtonAction`): the block
@@ -27,11 +20,6 @@ export interface BlockButtonAction
 /** A link or a button a block offers. */
 export type BlockActionItem = BlockAction | BlockButtonAction;
 
-// The buttons of a display block (empty state, banner, card head): links, and
-// in a banner, buttons running a target, which the block runs on `press`. One
-// action leads (`leadVariant` / `leadColor`): the first, or the last in a
-// banner where the main action sits right-most. The others are quiet buttons,
-// unless an action sets its own look. Labels follow the `$` i18n convention.
 interface BlockActionsProps {
   actions: BlockActionItem[];
   size?: ButtonProps["size"];
@@ -58,7 +46,7 @@ const { processI18n } = useTranslation();
 const isButtonAction = (action: BlockActionItem): action is BlockButtonAction =>
   "target" in action && Boolean(action.target);
 
-function actionProps(action: BlockActionItem): Record<string, unknown> {
+function actionProps(action: BlockActionItem) {
   if (!isButtonAction(action)) return buttonLinkProps(action.to);
   return { onClick: () => emit("press", action) };
 }

package/frontend-vue/layers/dms-ui/app/build/components/blocks/BlockInlineStatus.vue

@@ -5,9 +5,6 @@ import {
   NOT_FOUND_TITLE_KEY,
 } from "../../utils/fetchNotFound";
 
-// The one-line status a compact block (a KPI card, a meter) shows in place of
-// its value: a first load that failed, with a retry, or a source that
-// answered 404 — nothing to retry there, the value does not exist.
 interface BlockInlineStatusProps {
   state: "error" | "not-found";
   /** What the 404 said; its `emptyState.title` replaces the default text. */

package/frontend-vue/layers/dms-ui/app/build/components/blocks/BlockStatus.vue

@@ -17,10 +17,6 @@ export interface BlockEmptyText {
  */
 export type BlockStatusState = "empty" | "error" | "not-found";
 
-// What a data-driven block shows instead of its content: an empty list, a
-// first load that failed (with a retry), or a source that answered 404.
-// Compact v2 .c-empty in a card, so it keeps the footprint of the block it
-// stands in for.
 interface BlockStatusProps {
   state: BlockStatusState;
   /** Replaces the default texts of the empty state. */

package/frontend-vue/layers/dms-ui/app/build/components/chart/internal/ChartSkeleton.vue

@@ -15,10 +15,9 @@ const props = withDefaults(defineProps<ChartSkeletonProps>(), {
   circular: false,
 });
 
-// Ghost columns at plot height, rising like a series would (heights in %).
 const GHOST_BAR_HEIGHTS = [38, 52, 46, 64, 58, 72, 66, 80, 74, 88, 70, 92];
 const PERCENT_UNIT = "%";
-// The ring spans most of the frame, like Apex sizes a donut to its box.
+
 const RING_SIZE = "min(78%, 16rem)";
 const RING_HOLE_MASK =
   "radial-gradient(circle, transparent 54%, #000 calc(54% + 1px))";

package/frontend-vue/layers/{dms-layout/app/build/components/layout → dms-ui/app/build/components/containers}/RowSidePanel.vue

@@ -44,7 +44,7 @@ watch(
       },
     );
   },
-  // At once: a second J right after the first steps from the row it opened.
+
   { immediate: true, flush: "sync" },
 );
 
@@ -67,8 +67,6 @@ onMounted(() => {
   ];
 });
 
-// Another side panel took its place, or the user signed out: the row is no
-// longer open.
 onBeforeUnmount(() => {
   stopKeys.forEach((stop) => stop());
   stopNavigation?.();

package/frontend-vue/layers/dms-ui/app/build/components/containers/TargetComponentTree.vue

@@ -1,9 +1,4 @@
 <script setup lang="ts">
-// The component of a drawer, modal or side panel action target that holds
-// blocks of its own (a Card, a VStack, a Grid, a Tab): drawn as a page draws
-// a layout block, its children mounted in its slots. The container's own
-// props (`rowData`, `navigation`, `onSuccessCallback`…) and listeners go to
-// the container block, as they go to a single block.
 import { useAttrs } from "vue";
 import DmsRecursiveComponent from "../../../components/RecursiveComponent.vue";
 

package/frontend-vue/layers/dms-ui/app/build/components/containers/drawer/DynamicDrawer.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { getCurrentInstance, type Component } from "vue";
+import { getCurrentInstance, type AppContext, type Component } from "vue";
 import {
   formBusInjectionKey,
   formErrorsInjectionKey,
@@ -14,6 +14,7 @@ import { DialogDescription, DialogTitle, VisuallyHidden } from "reka-ui";
 import { useWindowSize } from "@vueuse/core";
 import type {
   ContainerColor,
+  ContainerInstance,
   DrawerDirection,
 } from "../../../../composables/containers/types";
 import type { ModalSize } from "../../../../types/modal";
@@ -40,10 +41,12 @@ interface DynamicDrawerProps {
   description?: string;
   containerId: string;
   component: Component;
+  // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- ContainerOptions derives VNode props and constrains reserved keys such as key and ref. This legacy component-prop boundary accepts arbitrary values for every string key without validation.
   componentOptions?: Record<string, unknown>;
   /** Mounts the body component anew when it changes. */
   componentKey?: string;
   headerComponent?: Component;
+  // oxlint-disable-next-line anti-slop/no-unsafe-dictionary-type -- ContainerOptions derives VNode props and constrains reserved keys such as key and ref. This legacy header-prop boundary accepts arbitrary values for every string key without validation.
   headerComponentOptions?: Record<string, unknown>;
   direction?: DrawerDirection;
   /**
@@ -63,7 +66,7 @@ interface DynamicDrawerProps {
 }
 
 interface DynamicDrawerEmits {
-  (e: "close", result?: unknown): void;
+  (e: "close", result?: Parameters<ContainerInstance["close"]>[0]): void;
 }
 
 const props = withDefaults(defineProps<DynamicDrawerProps>(), {
@@ -80,11 +83,7 @@ const props = withDefaults(defineProps<DynamicDrawerProps>(), {
 });
 const emit = defineEmits<DynamicDrawerEmits>();
 
-// Mounted by the overlay provider, the drawer would only see the app's
-// provides: its own start from the caller's instead, before it provides
-// anything (Vue's `provide` then writes into them). What the drawer provides
-// itself (its container, the form surface) still wins over the caller's.
-const NUXT_UI_FORM_KEYS = [
+const NUXT_UI_FORM_KEYS: symbol[] = [
   formOptionsInjectionKey,
   formBusInjectionKey,
   formStateInjectionKey,
@@ -94,21 +93,16 @@ const NUXT_UI_FORM_KEYS = [
   formLoadingInjectionKey,
   formErrorsInjectionKey,
 ];
-const drawerInstance = getCurrentInstance() as { provides: object } | null;
+// SAFETY: Vue initializes every component instance's hidden provides from its parent or app context.
+const drawerInstance = getCurrentInstance() as {
+  provides: AppContext["provides"];
+} | null;
 if (drawerInstance && props.callerProvides) {
   drawerInstance.provides = Object.create(props.callerProvides);
-  // A drawer is a surface of its own: a field in its body does not join a
-  // Nuxt UI form or form field around the component that opened it.
-  for (const key of NUXT_UI_FORM_KEYS) provide(key as symbol, undefined);
+
+  for (const key of NUXT_UI_FORM_KEYS) provide(key, undefined);
 }
 
-// Below `lg` a side drawer is a sheet as wide as a side panel (see
-// `useAppSidePanels`), or a modal's width at its size, never wider than the
-// window less the drawer's gutter (Nuxt UI's `max-w-[calc(100%-2rem)]`): on
-// a phone every side drawer leaves the same strip of backdrop, sized or not,
-// and only `full` fills the screen. From
-// `lg` it takes the width the user resizes it to (600px at first), kept per
-// drawer. Its own padding is the gutter: the containers drop theirs.
 const SIDE_DRAWER_CONTENT = "w-[440px]";
 const SIDE_DRAWER_SIZE_CONTENT: Record<ModalSize, string> = {
   sm: "w-sm",
@@ -127,7 +121,6 @@ const EDGE_DRAWER_DESKTOP_CONTENT = "lg:h-(--dms-drawer-size)";
 const SIDE_CONTAINER_CLASS = "px-0 sm:px-0 lg:px-0";
 const EDGE_CONTAINER_CLASS = "max-sm:px-0";
 
-// The handle sits on the drawer's inner edge, over its border.
 const HANDLE_CLASSES: Record<ResizeSide, string> = {
   right: "inset-y-0 left-0 w-2 -translate-x-1/2 cursor-ew-resize",
   left: "inset-y-0 right-0 w-2 translate-x-1/2 cursor-ew-resize",
@@ -173,16 +166,14 @@ const sideContentClass = computed(() => {
     : SIDE_DRAWER_CONTENT;
   return `${narrow} ${SIDE_DRAWER_DESKTOP_CONTENT}`;
 });
-// A top or bottom drawer keeps its natural height until resized.
+
 const contentClass = computed(() => {
   if (isSide.value) return sideContentClass.value;
   return resizedSize.value === undefined
     ? undefined
     : EDGE_DRAWER_DESKTOP_CONTENT;
 });
-// Reka keeps the page's `pointer-events: none` on the body until the
-// panel has slid out (half a second): released as soon as the close starts,
-// a click on the page lands while the drawer animates away.
+
 const contentProps = computed(() => ({
   disableOutsidePointerEvents: isOpen.value,
   ...(resizedSize.value !== undefined && {
@@ -204,12 +195,8 @@ function renderedSize(handle: Element): number | undefined {
   return isSide.value ? rect.width : rect.height;
 }
 
-// The pointerdown is left to bubble: reka's outside-click detection listens
-// on the document and, if it never saw this press inside the drawer, would
-// take the next click on the backdrop for one inside and ignore it. The
-// drawer's own drag cannot start from it: vaul drags only a dismissible
-// drawer, and this one is not.
 function startHandleDrag(event: PointerEvent): void {
+  // SAFETY: This handler is registered on the drawer's HTMLElement resize grip, and runs synchronously while currentTarget is set.
   const handle = event.currentTarget as HTMLElement;
   handle.setPointerCapture?.(event.pointerId);
   const rendered = renderedSize(handle) || resizedSize.value;
@@ -217,24 +204,12 @@ function startHandleDrag(event: PointerEvent): void {
 }
 
 function resizeHandleFromKey(event: KeyboardEvent): void {
+  // SAFETY: This handler is registered on the drawer's HTMLElement resize grip, and runs synchronously while currentTarget is set.
   resizeFromKey(event, renderedSize(event.currentTarget as HTMLElement));
 }
 
-// From lg the resize handle takes the inner edge: the drawer's own grip,
-// drawn in its middle, would sit next to it. Below lg a top or bottom
-// drawer keeps it. A side drawer never draws one: it is not dragged away
-// (`dismissible` is off), and the grip took 22px of a phone's gutter.
-// Important: vaul's unlayered `[data-vaul-handle]` rule outranks a utility.
 const DESKTOP_HIDDEN_GRIP = "lg:hidden!";
 
-// The body scrolls, not the whole drawer: the header (title, row steps,
-// close) stays in view. The body reaches over the container's side padding
-// so its scrollbar sits on the drawer's edge, and carries the bottom padding
-// a form's sticky footer reaches over to sit flush with it (see Form.vue).
-// The body is a flex column: a body component whose root grows (`flex-1`)
-// fills the drawer's height while its content is short, so a
-// `<DmsContainerFooter>` at its end sits at the bottom, and it scrolls past
-// it while long.
 const DRAWER_CONTAINER_CLASS =
   "[--dms-form-foot-pb:1rem] min-h-0 overflow-y-hidden pb-0";
 const DRAWER_BODY_CLASS =
@@ -249,7 +224,6 @@ const drawerUi = computed(() => ({
   body: DRAWER_BODY_CLASS,
 }));
 
-// Let a DmsForm rendered in the body drop its DmsCard (the drawer is the surface).
 provide("dmsFormContainer", true);
 
 const { executeGuards, clearGuards } = useLeaveGuard();
@@ -276,12 +250,8 @@ async function tryClose() {
   closePromise = null;
 }
 
-// A form in the body closes through the guards (its Cancel button) and
-// registers its own under this id, whatever component wraps it.
 provide(DMS_CONTAINER_KEY, { id: props.containerId, close: tryClose });
 
-// Another page (Back, a link): the drawer belongs to the one left. Its
-// unsaved changes were already confirmed by the navigation guard.
 const route = useDmsRoute();
 watch(
   () => route.path,
@@ -292,7 +262,7 @@ watch(
   },
 );
 
-function handleSuccess(result?: unknown) {
+function handleSuccess(result?: Parameters<ContainerInstance["close"]>[0]) {
   clearGuards(props.containerId);
   isOpen.value = false;
   emit("close", result);