@antelopejs/dms 0.11.1 → 0.12.0

package/frontend-vue/layers/dms-auth/app/build/utils/authStyles.ts

@@ -1,4 +1,4 @@
-import { TEXT_LINK_CLASS } from "#dms-ui/app/build/utils/textLink";
+import { TEXT_LINK_CLASS } from "#dms-ui/app/entries/utils/textLink";
 
 /**
  * v2 .au-link: the accent text link of the auth cards. Below `sm` an invisible

package/frontend-vue/layers/dms-auth/app/components/OAuthButtons.vue

@@ -1,4 +1,6 @@
 <script setup lang="ts">
+import { isString } from "#dms-core/app/utils/type-check";
+
 interface Props {
   note?: string;
 }
@@ -14,9 +16,9 @@ const providers = computed(() => config.public.dms.oauthProviders ?? []);
 function appendQueryParam(
   query: URLSearchParams,
   key: string,
-  value: unknown,
+  value: ReturnType<typeof useDmsRoute>["query"][string],
 ): void {
-  if (typeof value === "string" && value) {
+  if (isString(value) && value) {
     query.set(key, value);
   }
 }

package/frontend-vue/layers/dms-auth/app/composables/useOAuthErrorToast.ts

@@ -1,3 +1,5 @@
+import { isString } from "#dms-core/app/utils/type-check";
+
 const OAUTH_ERROR_QUERY = "oauth_error";
 const ERROR_KEY_PREFIX = "error.";
 const FALLBACK_ERROR_KEY = "error.oauth.failed";
@@ -17,8 +19,10 @@ export function useOAuthErrorToast(): void {
   const toast = useToast();
   const { t, te } = useI18n();
 
-  function toErrorMessageKey(value: unknown): string | undefined {
-    if (typeof value !== "string" || !value) return undefined;
+  function toErrorMessageKey(
+    value: ReturnType<typeof useDmsRoute>["query"][string],
+  ): string | undefined {
+    if (!isString(value) || !value) return undefined;
     if (value.startsWith(ERROR_KEY_PREFIX) && te(value)) return value;
     return FALLBACK_ERROR_KEY;
   }

package/frontend-vue/layers/dms-auth/app/composables/usePostLoginRedirect.ts

@@ -1,3 +1,6 @@
+import { isFunction } from "../../../dms-core/app/utils/type-check";
+import type { User } from "#dms-core/app/types/user";
+
 type PostLoginDestination = string | (() => string | undefined);
 
 interface PostLoginRedirectOptions {
@@ -16,7 +19,7 @@ export async function usePostLoginRedirect(
   options: PostLoginRedirectOptions = {},
 ) {
   const dmsApp = useDmsApp();
-  const { fetch: refreshUser, user } = useDmsUserSession();
+  const { fetch: refreshUser, user } = useDmsUserSession<User>();
   const { addCurrentAccount } = useMultiAccount();
   const siteLayout = useSiteLayout();
   const homepage = useHomepage();
@@ -32,10 +35,9 @@ export async function usePostLoginRedirect(
   await siteLayout.refresh();
 
   if (user.value?.language) {
-    await dmsApp.$i18n.setLocale(user.value.language as "en" | "fr");
+    await dmsApp.$i18n.setLocale(user.value.language);
   }
 
-  const destination =
-    typeof redirectUrl === "function" ? redirectUrl() : redirectUrl;
+  const destination = isFunction(redirectUrl) ? redirectUrl() : redirectUrl;
   await navigateDms(destination || homepage, options);
 }

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/2fa.vue

@@ -1,8 +1,8 @@
 <script setup lang="ts">
 import { nextTick, useTemplateRef } from "vue";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthBackLink from "../../build/components/AuthBackLink.vue";
-import DmsOtpInput from "#dms-ui/app/build/components/form/OtpInput.vue";
+import DmsOtpInput from "#dms-ui/app/entries/components/form/OtpInput";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import { useAuthFormError } from "../../build/composables/useAuthFormError";
 import { AUTH_LINK_CLASS } from "../../build/utils/authStyles";
@@ -17,13 +17,13 @@ const { processApiMessage } = useTranslation();
 const { formError, showFormError, clearFormError, showError } =
   useAuthFormError();
 
-const token = computed(() => (route.query.token as string) || "");
+const token = computed(() => route.query.token || "");
 const availableMethods = computed(() =>
-  ((route.query.methods as string) || "").split(",").filter(Boolean),
+  (route.query.methods || "").split(",").filter(Boolean),
 );
 
 const PIN_LENGTH = 6;
-// Refusals of the typed code: shown under the cells, not above the form.
+
 const CODE_ERRORS = {
   "error.invalid_2fa_code": "code",
   "error.2fa_code_expired": "code",
@@ -46,7 +46,6 @@ const isEmailSent = ref(false);
 const codeError = ref<string>();
 const codeInput = useTemplateRef<{ focus: () => void }>("codeInput");
 
-// Typing a new code clears the refusal of the previous one.
 watch(pin, (digits) => {
   if (digits.some(Boolean)) codeError.value = undefined;
 });
@@ -93,7 +92,6 @@ async function requestEmailCode() {
 }
 
 async function verify() {
-  // An empty or partial code is flagged under the cells, not sent.
   const missing = codeEntryError(pin.value, PIN_LENGTH);
   if (missing) {
     codeError.value = processApiMessage(missing);
@@ -115,8 +113,6 @@ async function verify() {
       },
     });
 
-    // The sign-in token in this page's URL is spent: the destination takes
-    // its place in the history.
     await usePostLoginRedirect(undefined, { replace: true });
   } catch (error: unknown) {
     pin.value = [];

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/accounts.vue

@@ -2,8 +2,8 @@
 import {
   TILE_ROW_CLASS,
   TILE_ROW_INTERACTIVE_CLASS,
-} from "#dms-ui/app/build/utils/tileRow";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+} from "#dms-ui/app/entries/utils/tileRow";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 
 const ACCOUNT_SKELETON_ROWS = 2;
 

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/backup.vue

@@ -2,7 +2,7 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthBackLink from "../../build/components/AuthBackLink.vue";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import {
@@ -20,7 +20,7 @@ const route = useDmsRoute();
 const { formError, clearFormError, showError } = useAuthFormError();
 const form = useTemplateRef<AuthFormHandle>("form");
 
-const token = computed(() => (route.query.token as string) || "");
+const token = computed(() => route.query.token || "");
 
 const twoFactorTarget = computed(() => ({
   path: "/auth/2fa",
@@ -37,7 +37,6 @@ const backToLoginTarget = computed(() => ({
 
 const isLoading = ref(false);
 
-// Codes are issued in uppercase and compared by hash: normalise what was typed.
 const fields = z.object({
   code: z
     .string()
@@ -63,11 +62,8 @@ async function onSubmit(payload: FormSubmitEvent<Schema>) {
       },
     });
 
-    // The sign-in token in this page's URL is spent: the destination takes
-    // its place in the history.
     await usePostLoginRedirect(undefined, { replace: true });
   } catch (error: unknown) {
-    // A wrong code shows under the field; an expired sign-in above the form.
     await showError(error, "page.backup.error_title", {
       fields: ["code"],
       codes: { "error.invalid_backup_code": "code" },

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/forgot-validation.vue

@@ -1,9 +1,9 @@
 <script setup lang="ts">
 import { nextTick, useTemplateRef } from "vue";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthBackLink from "../../build/components/AuthBackLink.vue";
-import DmsOtpInput from "#dms-ui/app/build/components/form/OtpInput.vue";
+import DmsOtpInput from "#dms-ui/app/entries/components/form/OtpInput";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import AuthResendCode from "../../build/components/AuthResendCode.vue";
 import { useAuthFormError } from "../../build/composables/useAuthFormError";
@@ -27,13 +27,13 @@ if (!route.query.email) {
 }
 
 const PIN_LENGTH = 6;
-// Refusals of the typed code: shown under the cells, not above the form.
+
 const CODE_ERRORS = {
   "error.invalid_or_expired_token": "token",
 } as const;
 const COOLDOWN_DURATION = 60;
 
-const email = computed(() => route.query.email as string);
+const email = computed(() => route.query.email);
 
 const isLoading = ref(false);
 const form = useTemplateRef("form");
@@ -45,7 +45,6 @@ interface CodeState {
 }
 const state = reactive<CodeState>({});
 
-// Typing a new code clears the refusal of the previous one.
 watch(
   () => state.pin,
   (digits) => {
@@ -60,7 +59,6 @@ onMounted(() => {
 });
 
 async function onSubmit(event: FormSubmitEvent<CodeState>) {
-  // An empty or partial code is flagged under the cells, not sent.
   const missing = codeEntryError(event.data.pin, PIN_LENGTH);
   if (missing) {
     codeError.value = processApiMessage(missing);
@@ -99,7 +97,7 @@ async function onSubmit(event: FormSubmitEvent<CodeState>) {
   } finally {
     isLoading.value = false;
   }
-  // The cells are disabled while the request runs: focus them once enabled.
+
   if (codeError.value) {
     await nextTick();
     codeInput.value?.focus();
@@ -124,7 +122,7 @@ async function requestForgotPassword() {
     });
 
     startCooldown();
-    // The refusal was about the previous code: the new one starts clean.
+
     clearFormError();
     codeError.value = undefined;
 

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/forgot.vue

@@ -2,7 +2,7 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthBackLink from "../../build/components/AuthBackLink.vue";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import {
@@ -49,7 +49,6 @@ async function onSubmit(event: FormSubmitEvent<Schema>) {
       }),
     );
   } catch (error: unknown) {
-    // A refused address shows under its field; anything else above the form.
     await showError(error, "page.forgot.error_title", {
       fields: ["email"],
       form,

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/login.vue

@@ -2,9 +2,9 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
-import DmsPasswordInput from "#dms-ui/app/build/components/form/PasswordInput.vue";
+import DmsPasswordInput from "#dms-ui/app/entries/components/form/PasswordInput";
 import {
   type AuthFormHandle,
   useAuthFormError,
@@ -16,6 +16,7 @@ import {
   useLocalizedSchema,
 } from "#dms-core/app/composables/useFormValidation";
 import { ACCOUNTS_LIST_ROUTE } from "../../utils/accountsFlow";
+import { isObject } from "#dms-core/app/utils/type-check";
 
 const route = useDmsRoute();
 const homepage = useHomepage();
@@ -44,18 +45,14 @@ useLiveFormErrors(form, state);
 function isTwoFactorRequired(
   response: unknown,
 ): response is TwoFactorRequiredResponse {
-  return (
-    !!response && typeof response === "object" && "requires_2fa" in response
-  );
+  return !!response && isObject(response) && "requires_2fa" in response;
 }
 
 function isTenantAssignmentRequired(
   response: unknown,
 ): response is TenantAssignmentRequiredResponse {
   return (
-    !!response &&
-    typeof response === "object" &&
-    "requires_tenant_assignment" in response
+    !!response && isObject(response) && "requires_tenant_assignment" in response
   );
 }
 
@@ -81,7 +78,7 @@ async function handleTenantAssignmentRedirect(
 }
 
 async function onSubmit(payload: FormSubmitEvent<Schema>) {
-  const redirectUrl = route.query.redirect as string | undefined;
+  const redirectUrl = route.query.redirect;
 
   try {
     isLoading.value = true;
@@ -108,7 +105,6 @@ async function onSubmit(payload: FormSubmitEvent<Schema>) {
       usePostLoginRedirect(redirectUrl || homepage),
     );
   } catch (error: unknown) {
-    // Wrong credentials name no field: they stay above the form.
     await showError(error, "page.auth.error_title", {
       fields: ["email", "password"],
       form,

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/oauth-complete.vue

@@ -12,15 +12,16 @@ const redirect = computed(
   () => sanitizeRedirectPath(route.query.redirect) || homepage,
 );
 
+type HandoffByKind = {
+  [K in OAuthHandoff["kind"]]: Extract<OAuthHandoff, { kind: K }>;
+};
+
 type HandoffActions = {
-  [K in OAuthHandoff["kind"]]: (
-    handoff: Extract<OAuthHandoff, { kind: K }>,
-  ) => unknown;
+  [K in keyof HandoffByKind]: (
+    handoff: HandoffByKind[K],
+  ) => ReturnType<typeof navigateDms> | ReturnType<typeof usePostLoginRedirect>;
 };
 
-// `replace` is a navigation option, not part of the location: passed inside the
-// route object it was silently dropped, and the handoff left the OAuth callback
-// in the history for the back button to land on.
 const REPLACE = { replace: true } as const;
 
 const HANDOFF_ACTIONS: HandoffActions = {
@@ -43,14 +44,14 @@ const HANDOFF_ACTIONS: HandoffActions = {
   none: () => usePostLoginRedirect(redirect.value, REPLACE),
 };
 
-function runHandoffAction(handoff: OAuthHandoff): unknown {
-  const action = HANDOFF_ACTIONS[handoff.kind] as (
-    value: OAuthHandoff,
-  ) => unknown;
+function runHandoffAction<K extends keyof HandoffByKind>(
+  handoff: HandoffByKind[K],
+) {
+  const action = HANDOFF_ACTIONS[handoff.kind];
   return action(handoff);
 }
 
-function redirectToLoginWithError(): unknown {
+function redirectToLoginWithError() {
   return navigateDms(
     { path: "/auth", query: { oauth_error: OAUTH_FAILED_KEY } },
     REPLACE,
@@ -68,16 +69,15 @@ async function completeOAuth(): Promise<void> {
   }
 }
 
-// One completion per visit, held on the DMS app rather than by this instance.
-// The post-login redirect refreshes the site layout for the new identity,
-// which empties the page layout cache: the page unmounts this component and
-// mounts a new one while its layout is fetched again. Starting over from that
-// mount consumed the handoff once more and refreshed again, so the page
-// remounted in a loop instead of leaving. The new instance joins the running
-// completion; a later visit, once it has settled, starts its own.
+declare module "#dms/frontend-module" {
+  interface DmsAppContext {
+    [IN_FLIGHT_COMPLETION_KEY]?: Promise<void>;
+  }
+}
+
 function joinCompletion(): Promise<void> {
-  const holder = dmsApp as unknown as Record<PropertyKey, unknown>;
-  const running = holder[IN_FLIGHT_COMPLETION_KEY] as Promise<void> | undefined;
+  const holder = dmsApp;
+  const running = holder[IN_FLIGHT_COMPLETION_KEY];
   if (running) return running;
   const completion = completeOAuth().finally(() => {
     if (holder[IN_FLIGHT_COMPLETION_KEY] === completion) {

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/recover-success.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 </script>
 
 <template>

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/recover.vue

@@ -2,7 +2,7 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthBackLink from "../../build/components/AuthBackLink.vue";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import AuthNewPasswordField from "../../build/components/AuthNewPasswordField.vue";
@@ -58,7 +58,6 @@ async function onSubmit(event: FormSubmitEvent<Schema>) {
 
     await dmsApp.runWithContext(() => navigateDms("/auth/recover-success"));
   } catch (error: unknown) {
-    // A refused password shows under its field; an expired link above the form.
     await showError(error, "page.forgot.error_title", {
       fields: ["password"],
       form,

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/signup.vue

@@ -2,7 +2,7 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import AuthNewPasswordField from "../../build/components/AuthNewPasswordField.vue";
 import {
@@ -16,6 +16,7 @@ import {
   useLocalizedSchema,
 } from "#dms-core/app/composables/useFormValidation";
 import { resolveApiErrorMessage } from "#dms-core/app/composables/useApiError";
+import { isString } from "#dms-core/app/utils/type-check";
 
 const MIN_NAME_LENGTH = 2;
 
@@ -29,8 +30,10 @@ interface ClosedInvitationNotice {
   description: string;
 }
 
-// The refusals the server gives a link it would not sign up with.
-const CLOSED_INVITATION_CODES: Record<string, ClosedInvitation> = {
+const CLOSED_INVITATION_CODES: Record<
+  ReturnType<typeof resolveApiErrorMessage>,
+  ClosedInvitation
+> = {
   "error.invalid_token": "invalid",
   "error.invite_expired": "expired",
   "error.invite_revoked": "revoked",
@@ -69,7 +72,9 @@ const CLOSED_INVITATION_NOTICES: Record<
   },
 };
 
-function closedInvitationOf(error: unknown): ClosedInvitation | undefined {
+function closedInvitationOf(
+  error: Parameters<typeof resolveApiErrorMessage>[0],
+): ClosedInvitation | undefined {
   return CLOSED_INVITATION_CODES[resolveApiErrorMessage(error)];
 }
 
@@ -81,19 +86,14 @@ const { formError, clearFormError, showError } = useAuthFormError();
 const form = useTemplateRef<AuthFormHandle>("form");
 
 const route = useDmsRoute();
-const queryToken = computed(() => route.query.token as string);
-const queryEmail = computed(() => route.query.email as string);
-const queryName = computed(() => route.query.name as string | undefined);
-// Only an invitation email links here, so a link without its token was cut
-// short on the way: say so, rather than answering with a server error.
+const queryToken = computed(() => route.query.token);
+const queryEmail = computed(() => route.query.email);
+const queryName = computed(() => route.query.name);
+
 const hasInvitationToken = computed(
-  () => typeof queryToken.value === "string" && queryToken.value !== "",
+  () => isString(queryToken.value) && queryToken.value !== "",
 );
 
-// A revoked, replaced or expired link says so as the page opens, rather than
-// after the whole form was filled: checked with the page, so the server
-// renders the notice. The server answers with the very check the signup
-// runs; any other failure leaves the form to the signup to settle.
 const invitationCheck = useApiData(
   () => (hasInvitationToken.value ? "/api/auth/validate-invite-token" : null),
   {
@@ -101,7 +101,7 @@ const invitationCheck = useApiData(
     body: () => ({ token: queryToken.value, email: queryEmail.value }),
   },
 );
-// The invitation can be retired while the form is open: the signup says so.
+
 const closedOnSignup = ref<ClosedInvitation>();
 const invitationState = computed<InvitationState>(() => {
   if (!hasInvitationToken.value) return "invalid";
@@ -112,13 +112,11 @@ const invitationState = computed<InvitationState>(() => {
 });
 const closedInvitation = computed(() =>
   invitationState.value in CLOSED_INVITATION_NOTICES
-    ? CLOSED_INVITATION_NOTICES[invitationState.value as ClosedInvitation]
+    ? // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- The existing in lookup includes inherited keys; stronger own-key validation would change malformed error-code handling, and TypeScript does not narrow the key here.
+      CLOSED_INVITATION_NOTICES[invitationState.value as ClosedInvitation]
     : undefined,
 );
 
-// The invitation link carries the language the invitee was invited in: the
-// page opens in it, and the footer switcher still lets them pick another one
-// before the account is created with whichever is current.
 const invitationLanguage = locales.value.find(
   (available) => available.code === route.query.lang,
 );
@@ -161,14 +159,12 @@ async function onSubmit(payload: FormSubmitEvent<Schema>) {
       ),
     );
   } catch (error: unknown) {
-    // The invitation can be retired while the form is open.
     const closed = closedInvitationOf(error);
     if (closed) {
       closedOnSignup.value = closed;
       return;
     }
-    // A refused value (an address already used) shows under its field;
-    // anything else above the form.
+
     await showError(error, "page.signup.error_title", {
       fields: ["name", "email", "password"],
       codes: { "error.email_already_used": "email" },

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/validate.vue

@@ -1,8 +1,8 @@
 <script setup lang="ts">
 import { nextTick, useTemplateRef } from "vue";
 import type { FormSubmitEvent } from "@nuxt/ui";
-import StageCard from "../../../../dms-layout/app/build/components/layout/StageCard.vue";
-import DmsOtpInput from "#dms-ui/app/build/components/form/OtpInput.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
+import DmsOtpInput from "#dms-ui/app/entries/components/form/OtpInput";
 import AuthFormAlert from "../../build/components/AuthFormAlert.vue";
 import AuthResendCode from "../../build/components/AuthResendCode.vue";
 import { useAuthFormError } from "../../build/composables/useAuthFormError";
@@ -27,7 +27,7 @@ if (!route.query.id) {
 }
 
 const PIN_LENGTH = 6;
-// Refusals of the typed code: shown under the cells, not above the form.
+
 const CODE_ERRORS = {
   "error.invalid_token": "token",
   "error.token_expired": "token",
@@ -44,7 +44,6 @@ interface CodeState {
 }
 const state = reactive<CodeState>({});
 
-// Typing a new code clears the refusal of the previous one.
 watch(
   () => state.pin,
   (digits) => {
@@ -59,7 +58,6 @@ onMounted(() => {
 });
 
 async function onSubmit(event: FormSubmitEvent<CodeState>) {
-  // An empty or partial code is flagged under the cells, not sent.
   const missing = codeEntryError(event.data.pin, PIN_LENGTH);
   if (missing) {
     codeError.value = processApiMessage(missing);
@@ -74,7 +72,7 @@ async function onSubmit(event: FormSubmitEvent<CodeState>) {
       method: "POST",
       body: {
         token: (event.data.pin ?? []).join(""),
-        user_id: route.query.id as string,
+        user_id: route.query.id,
       },
     });
 
@@ -91,7 +89,7 @@ async function onSubmit(event: FormSubmitEvent<CodeState>) {
   } finally {
     isLoading.value = false;
   }
-  // The cells are disabled while the request runs: focus them once enabled.
+
   if (codeError.value) {
     await nextTick();
     codeInput.value?.focus();

package/frontend-vue/layers/dms-auth/app/entries/component-registry.ts

@@ -0,0 +1,12 @@
+import type { Component } from "vue";
+
+const components = import.meta.glob<{ default: Component }>(
+  "../build/components/**/*.vue",
+);
+
+export const buildComponents = Object.fromEntries(
+  Object.entries(components).map(([path, loader]): [string, typeof loader] => [
+    `./layers/dms-auth/app/${path.slice(3)}`,
+    loader,
+  ]),
+);

package/frontend-vue/layers/dms-auth/app/entries/components/AuthFormAlert.ts

@@ -0,0 +1,2 @@
+export { default } from "../../build/components/AuthFormAlert.vue";
+export * from "../../build/components/AuthFormAlert.vue";

package/frontend-vue/layers/dms-auth/app/entries/components/AuthNewPasswordField.ts

@@ -0,0 +1,2 @@
+export { default } from "../../build/components/AuthNewPasswordField.vue";
+export * from "../../build/components/AuthNewPasswordField.vue";

package/frontend-vue/layers/dms-auth/app/entries/composables/useAuthFormError.ts

@@ -0,0 +1 @@
+export * from "../../build/composables/useAuthFormError";

package/frontend-vue/layers/dms-auth/app/entries/server/accounts.ts

@@ -0,0 +1 @@
+export * from "../../../server/accounts";

package/frontend-vue/layers/dms-auth/app/entries/server/actions.ts

@@ -0,0 +1 @@
+export * from "../../../server/actions";

package/frontend-vue/layers/dms-auth/app/entries/server/oauth.ts

@@ -0,0 +1 @@
+export * from "../../../server/oauth";

package/frontend-vue/layers/dms-auth/app/entries/server/session.ts

@@ -0,0 +1 @@
+export * from "../../../server/session";

package/frontend-vue/layers/dms-auth/app/middleware/auth.ts

@@ -1,3 +1,4 @@
+import { isObject } from "../../../dms-core/app/utils/type-check";
 interface AuthMiddlewareOptions {
   navigateAuthenticatedTo?: string;
   navigateUnauthenticatedTo?: string;
@@ -6,16 +7,17 @@ interface AuthMiddlewareOptions {
 type MiddlewareMeta = boolean | AuthMiddlewareOptions;
 
 function isAuthOptions(value: MiddlewareMeta): value is AuthMiddlewareOptions {
-  return typeof value === "object" && value !== null;
+  return isObject(value) && value !== null;
 }
 
 async function loadPermissionsIfNeeded() {
   const { loadPermissions } = usePermissions();
 
+  // prettier-ignore
   try {
     await loadPermissions();
   } catch {
-    /* ignore — permissions load failure is not fatal here */
+    // eslint-disable-line no-empty -- Permission-load failures do not interrupt authentication.
   }
 }
 
@@ -70,13 +72,9 @@ async function isPublicAccessRoute(to: ReturnType<typeof useDmsRoute>) {
 export default defineDmsMiddleware(async (to) => {
   if (to.matched.length === 0) return;
 
-  // An error the page already raised (a failed `validation`, a missing page)
-  // is committed and rendered with its own status. Re-throwing it here would
-  // reject the pending navigation the SSR render awaits, turning that 404 into
-  // a 500 fallback render.
   if (useDmsError().value) return abortDmsNavigation();
 
-  const options = to.meta.auth as MiddlewareMeta | undefined;
+  const options = to.meta.auth;
   if (!options) return;
 
   if (await isPublicAccessRoute(to)) return;