@antelopejs/dms 0.11.1 → 0.12.0

package/frontend-vue/layers/dms-layout/app/build/composables/navigation/useVisitNavBadges.ts

@@ -3,7 +3,7 @@ import { useDmsInertiaPage } from "#dms/frontend-module";
 import {
   type CountedNavBadge,
   useNavBadges,
-} from "#dms-ui/app/build/composables/navigation/useNavBadges";
+} from "#dms-ui/app/entries/composables/navigation/useNavBadges";
 
 interface CountedPage {
   navBadges?: Record<string, CountedNavBadge>;
@@ -19,6 +19,7 @@ export function useVisitNavBadges(): void {
   const inertiaPage = useDmsInertiaPage();
   const { applyCountedNavBadges } = useNavBadges();
   watch(
+    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- The renderer page contract does not declare this optional module extension. Inference cannot expose it; validating badges here would change existing pass-through behavior for malformed pages.
     () => (inertiaPage.props.page as CountedPage | undefined)?.navBadges,
     applyCountedNavBadges,
     { immediate: true },

package/frontend-vue/layers/dms-layout/app/build/composables/notification/useNotificationCatalog.ts

@@ -59,8 +59,7 @@ export const useNotificationCatalog = (enabled: () => boolean = () => true) => {
   const loadFailed = computed(() => !isLoaded.value && hasFailed(catalog));
 
   /** Reads the catalog again (a retry). */
-  const loadCatalog = (): Promise<void> =>
-    catalog.refresh({ dedupe: "defer" });
+  const loadCatalog = (): Promise<void> => catalog.refresh({ dedupe: "defer" });
 
   const subjectsOf = (categoryId: string) =>
     subjects.value.filter((subject) => subject.category.id === categoryId);

package/frontend-vue/layers/dms-layout/app/build/composables/notification/useNotificationGroupsOpen.ts

@@ -17,10 +17,11 @@ function readStorage(key: string): string | null {
 }
 
 function writeStorage(key: string, value: string): void {
+  // prettier-ignore
   try {
     localStorage.setItem(key, value);
   } catch {
-    /* storage unavailable (private mode, quota): the group folds on reload */
+    // eslint-disable-line no-empty -- Unavailable storage loses only the persisted group choice.
   }
 }
 

package/frontend-vue/layers/dms-layout/app/build/composables/notification/useNotificationPreferences.ts

@@ -1,6 +1,6 @@
 import { pageRoutePath } from "#dms-core/app/utils/pageRoutes";
 import type { SaveStatusState } from "#dms-ui/app/components/save-bar/SaveStatus.vue";
-import { useInstantSave } from "#dms-ui/app/build/composables/instant-save/useInstantSave";
+import { useInstantSave } from "#dms-ui/app/entries/composables/instant-save/useInstantSave";
 import {
   hasFailed,
   type NotificationCategory,
@@ -32,23 +32,23 @@ export const useNotificationPreferences = (
   const stored = useApiData<PreferenceMap>(() =>
     enabled() ? PREFERENCES_URL : null,
   );
-  // The switches edit the read's data in place.
+
   const preferences = computed<PreferenceMap>({
     get: () => stored.data.value ?? {},
     set: (value) => {
       stored.data.value = value;
     },
   });
-  // A user who never changed a switch has no stored preferences (null).
+
   const isStoredRead = computed(
     () => stored.status.value === "success" || stored.data.value != null,
   );
   const loadFailed = computed(
-    () => (!isStoredRead.value && hasFailed(stored)) || catalog.loadFailed.value,
+    () =>
+      (!isStoredRead.value && hasFailed(stored)) || catalog.loadFailed.value,
   );
   const isLoading = computed(
-    () =>
-      !(isStoredRead.value && catalog.isLoaded.value) && !loadFailed.value,
+    () => !(isStoredRead.value && catalog.isLoaded.value) && !loadFailed.value,
   );
 
   const instant = useInstantSave<PreferenceMap>({
@@ -88,7 +88,7 @@ export const useNotificationPreferences = (
       stored.refresh({ dedupe: "defer" }),
       catalog.loadCatalog(),
     ]);
-    // A failed save then puts back what the server holds now.
+
     if (stored.status.value === "success") instant.confirm(preferences.value);
   };
 

package/frontend-vue/layers/dms-layout/app/build/composables/settings/profile/preferencesSummary.ts

@@ -1,8 +1,6 @@
-// The sentences of the profile's "Preferences & access" rows, and which rows
-// the user may see. Pure: useProfilePreferences reads the data.
-
 import type { TimeFormatPreference } from "#dms-core/app/utils/regional";
-import type { AccessibilityPreferences } from "#dms-ui/app/build/utils/accessibilityPreferences";
+import type { I18nTranslate } from "#dms-core/app/composables/translation/useTranslation";
+import type { AccessibilityPreferences } from "#dms-ui/app/entries/utils/accessibilityPreferences";
 import type { NotificationSubject } from "../../notification/useNotificationCatalog";
 import type {
   ColorModePreference,
@@ -12,13 +10,13 @@ import type {
 /** `t` as vue-i18n takes it: key, named params, plural count. */
 export type SummaryTranslate = (
   key: string,
-  params?: Record<string, unknown>,
+  params?: Parameters<I18nTranslate>[1],
   plural?: number,
 ) => string;
 
 const KEY = "page.settings.profile.preferences";
 const SEPARATOR = " · ";
-// 4 January 2026 is a Sunday: day `n` of the week is `n` days later.
+
 const FIRST_SUNDAY_UTC = Date.UTC(2026, 0, 4, 12);
 const DAY_MS = 24 * 60 * 60 * 1000;
 

package/frontend-vue/layers/dms-layout/app/build/composables/settings/profile/useAccountData.ts

@@ -1,8 +1,9 @@
+import { isString } from "../../../../../../dms-core/app/utils/type-check";
 import { pageRoutePath } from "#dms-core/app/utils/pageRoutes";
 import UFormField from "@nuxt/ui/components/FormField.vue";
 import UIcon from "@nuxt/ui/runtime/vue/components/Icon.vue";
 import UInput from "@nuxt/ui/components/Input.vue";
-import type { Component, Ref } from "vue";
+import type { Ref } from "vue";
 import { downloadFile } from "#dms-core/app/utils/downloadFile";
 import { useConfirm } from "#dms-ui/app/composables/confirm";
 import {
@@ -57,12 +58,7 @@ export function accountExportFilename(at: Date = new Date()): string {
   return `${EXPORT_FILE_PREFIX}-${at.toISOString().slice(0, ISO_DATE_LENGTH)}.json`;
 }
 
-/**
- * "Your data" on the profile page: download everything the DMS keeps about
- * the signed-in user, or delete the account after a password and a typed
- * e-mail, then sign out.
- */
-export function useAccountData() {
+function useAccountDataContext() {
   const { $authFetch } = useAuthFetch();
   const { confirm } = useConfirm();
   const { user, clear } = useDmsUserSession<User>();
@@ -76,7 +72,10 @@ export function useAccountData() {
   const isCheckingDeletion = ref(false);
 
   /** A message key the API answers with (`$…`), else a known error code. */
-  function describeError(error: unknown, fallbackKey: string): string {
+  function describeError(
+    error: Parameters<typeof errorCode>[0],
+    fallbackKey: string,
+  ): string {
     const code = errorCode(error);
     if (code?.startsWith("$")) return processI18n(code);
     return errorMessage(error, fallbackKey);
@@ -108,6 +107,38 @@ export function useAccountData() {
     }
   }
 
+  async function signOutDeleted(): Promise<void> {
+    const userId = user.value?._id;
+    await clear().catch(() => undefined);
+    if (userId) await removeAccount(userId).catch(() => undefined);
+    toast.add({
+      color: "success",
+      icon: "i-ph-check-circle",
+      title: t(`${I18N}.delete_done_title`),
+      description: t(`${I18N}.delete_done_description`),
+    });
+    await navigateDms(AUTH_ROUTE);
+  }
+
+  return {
+    $authFetch,
+    confirm,
+    processApiMessage,
+    toast,
+    t,
+    isExporting,
+    isCheckingDeletion,
+    describeError,
+    exportData,
+    signOutDeleted,
+  };
+}
+
+function createDeletionPresentation(
+  context: ReturnType<typeof useAccountDataContext>,
+) {
+  const { t, confirm, processApiMessage } = context;
+
   function impactList(impact: AccountDeletionImpact): ConfirmImpact[] {
     return [
       {
@@ -153,15 +184,14 @@ export function useAccountData() {
         { label: t(`${I18N}.delete_password`), error: error.value },
         {
           default: () =>
-            // Generic in its value type, which `h` cannot infer.
-            h(UInput as Component, {
+            h(UInput<typeof password.value, {}>, {
               ref: input,
               modelValue: password.value,
               type: "password",
               autocomplete: "current-password",
               class: "w-full",
-              "onUpdate:modelValue": (value: unknown) => {
-                password.value = typeof value === "string" ? value : "";
+              "onUpdate:modelValue": (value) => {
+                password.value = isString(value) ? value : "";
                 error.value = undefined;
               },
             }),
@@ -202,19 +232,44 @@ export function useAccountData() {
     });
   }
 
-  async function signOutDeleted(): Promise<void> {
-    const userId = user.value?._id;
-    await clear().catch(() => undefined);
-    if (userId) await removeAccount(userId).catch(() => undefined);
-    toast.add({
-      color: "success",
-      icon: "i-ph-check-circle",
-      title: t(`${I18N}.delete_done_title`),
-      description: t(`${I18N}.delete_done_description`),
-    });
-    await navigateDms(AUTH_ROUTE);
+  /** The password is required: an empty one is flagged, not sent. */
+  function passwordCheck(
+    password: Ref<string>,
+    error: Ref<string | undefined>,
+    input: Ref<PasswordInputHandle | null>,
+  ) {
+    return async (): Promise<boolean> => {
+      if (password.value) return true;
+      error.value = processApiMessage(REQUIRED_MESSAGE);
+      await nextTick();
+      input.value?.inputRef?.focus();
+      return false;
+    };
   }
 
+  return { impactList, passwordField, explainBlockers, passwordCheck };
+}
+
+/**
+ * "Your data" on the profile page: download everything the DMS keeps about
+ * the signed-in user, or delete the account after a password and a typed
+ * e-mail, then sign out.
+ */
+export function useAccountData() {
+  const context = useAccountDataContext();
+  const {
+    $authFetch,
+    confirm,
+    processApiMessage,
+    toast,
+    t,
+    isCheckingDeletion,
+    describeError,
+    signOutDeleted,
+  } = context;
+  const { impactList, passwordField, explainBlockers, passwordCheck } =
+    createDeletionPresentation(context);
+
   /**
    * Sends the deletion. A wrong password shows under the password field, a
    * refused e-mail under the typed one; anything else is a toast. The dialog
@@ -267,21 +322,6 @@ export function useAccountData() {
     }
   }
 
-  /** The password is required: an empty one is flagged, not sent. */
-  function passwordCheck(
-    password: Ref<string>,
-    error: Ref<string | undefined>,
-    input: Ref<PasswordInputHandle | null>,
-  ) {
-    return async (): Promise<boolean> => {
-      if (password.value) return true;
-      error.value = processApiMessage(REQUIRED_MESSAGE);
-      await nextTick();
-      input.value?.inputRef?.focus();
-      return false;
-    };
-  }
-
   async function confirmDeletion(impact: AccountDeletionImpact): Promise<void> {
     const password = ref("");
     const passwordError = ref<string>();
@@ -326,5 +366,10 @@ export function useAccountData() {
     return confirmDeletion(impact);
   }
 
-  return { isExporting, isCheckingDeletion, exportData, deleteAccount };
+  return {
+    isExporting: context.isExporting,
+    isCheckingDeletion,
+    exportData: context.exportData,
+    deleteAccount,
+  };
 }

package/frontend-vue/layers/dms-layout/app/build/composables/settings/profile/useProfilePreferences.ts

@@ -4,7 +4,7 @@ import { computed, onMounted, ref } from "vue";
 import { useUserRegionalPreferences } from "#dms-core/app/composables/user/useUserRegionalPreferences";
 import { useUniqueLocales } from "#dms-core/app/composables/translation/useUniqueLocales";
 import { formatDate } from "#dms-core/app/utils/formatter";
-import { iconWellToneOf } from "#dms-ui/app/build/utils/tone";
+import { iconWellToneOf } from "#dms-ui/app/entries/utils/tone";
 import { useAccessibilityPreferences } from "../../../../composables/general/useAccessibilityPreferences";
 import { useColorModePreference } from "../../../../composables/general/useColorModePreference";
 import { useInterfaceScale } from "../../../../composables/general/useInterfaceScale";
@@ -21,7 +21,6 @@ import {
   buildRegionSummary,
   type ProfileAccess,
   resolvePreferenceRows,
-  type SummaryTranslate,
   tallySubjects,
 } from "./preferencesSummary";
 
@@ -29,21 +28,20 @@ export const PROFILE_ACCESS_ENDPOINT = pageRoutePath(
   "/settings/user/profile",
   "/access",
 );
-// Sample values the skeletons are shaped from.
+
 const SAMPLE_ACCESS: ProfileAccess = {
   roles: ["Admin", "Finance"],
   workspaceOwner: false,
   platformOwner: false,
 };
-// Who holds every permission is most likely a platform owner.
+
 const SAMPLE_OWNER_ACCESS: ProfileAccess = {
   roles: [],
   workspaceOwner: false,
   platformOwner: true,
 };
 const SAMPLE_TIME_ZONE = "Europe/Brussels";
-// Noon UTC: the same calendar day in every time zone a server or browser
-// could run in, so both write the same sample date.
+
 const SAMPLE_DATE = new Date(Date.UTC(2026, 9, 3, 12));
 const SAMPLE_UNREAD = 3;
 const SAMPLE_TALLY = { on: 6, total: 9 };
@@ -61,14 +59,11 @@ const MONDAY = 1;
  * mount so the server and the hydrating browser render the same skeleton.
  */
 export function useProfilePreferences() {
-  const { t: translate, locale } = useI18n();
-  const t = translate as SummaryTranslate;
+  const { t, locale } = useI18n();
   const { groups } = useSettingsNavigation();
   const isOwner = useIsOwner();
   const isMounted = ref(false);
 
-  // The settings navigation's own list decides: a row shows when the page
-  // it leads to is one the nav offers.
   const rows = computed(() =>
     resolvePreferenceRows(
       new Map(
@@ -89,10 +84,9 @@ export function useProfilePreferences() {
 
   const { uniqueLocales } = useUniqueLocales();
   const regional = useUserRegionalPreferences();
-  // Frozen at mount: the row shows formats, not a ticking clock.
+
   let today = new Date();
-  // Some languages name themselves in lower case ("français"): it opens
-  // the summary, so it is capitalized.
+
   const languageName = computed(() => {
     const tag = locale.value;
     const name =
@@ -131,8 +125,7 @@ export function useProfilePreferences() {
   const hasUnread = computed(
     () => !isNotificationsLoading.value && unreadCount.value > 0,
   );
-  // The well takes the unread badge's tone, the bell's and the navigation's,
-  // which the server weighs; quiet when nothing is unread.
+
   const notificationsTone = computed(() =>
     hasUnread.value ? iconWellToneOf(unreadTone.value) : "muted",
   );
@@ -141,8 +134,7 @@ export function useProfilePreferences() {
   const scale = useInterfaceScale();
   const { preferences: accessibility } = useAccessibilityPreferences();
   const prefersDark = usePreferredDark();
-  // The cookies are read on the server too; only a theme that follows the
-  // system waits for the browser to say which it is.
+
   const appearanceSummary = computed(() => {
     if (colorMode.value === "system" && !isMounted.value) return undefined;
     return buildAppearanceSummary(t, {
@@ -154,9 +146,6 @@ export function useProfilePreferences() {
     });
   });
 
-  // What the skeletons are drawn from: the same sentences with what the
-  // server already knows, and sample values for the rest. Nothing here
-  // reads the browser, so the server and the hydrating browser agree.
   const placeholders = computed(() => {
     const { preferences } = regional;
     return {

package/frontend-vue/layers/dms-layout/app/build/composables/settings/security/useCodeFieldError.ts

@@ -1,5 +1,5 @@
 import { nextTick, watch, type Ref } from "vue";
-import { focusFirstEmptyCell } from "#dms-ui/app/build/utils/codeCells";
+import { focusFirstEmptyCell } from "#dms-ui/app/entries/utils/codeCells";
 
 /**
  * The inline error of a two-factor code entry. A code the API refused empties

package/frontend-vue/layers/dms-layout/app/build/composables/settings/security/useSecurityFormat.ts

@@ -1,4 +1,5 @@
 import { regionalDateTimeFormat } from "#dms-core/app/utils/regional";
+import { isString } from "#dms-core/app/utils/type-check";
 
 const MS_PER_SECOND = 1000;
 const MS_PER_MINUTE = 60 * MS_PER_SECOND;
@@ -71,9 +72,11 @@ export function useSecurityFormat() {
    * @param error What `$authFetch` threw
    * @param fallbackKey Message used when the error carries no known code
    */
+  // oxlint-disable-next-line anti-slop/no-unknown-parameters -- JavaScript throws arbitrary values. FetchError-derived parameters would reject the boundary inputs this formatter already handles.
   const errorMessage = (error: unknown, fallbackKey: string): string => {
+    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- Unchecked optional property projection preserves primitive and nullish thrown values; this is not a validated FetchError and owner typing cannot guarantee one.
     const code = (error as FetchErrorLike | undefined)?.data;
-    if (typeof code !== "string" || !code.startsWith(ERROR_CODE_PREFIX)) {
+    if (!isString(code) || !code.startsWith(ERROR_CODE_PREFIX)) {
       return t(fallbackKey);
     }
     const ownKey = `${SECURITY_ERRORS_PREFIX}${code.slice(ERROR_CODE_PREFIX.length)}`;
@@ -82,9 +85,11 @@ export function useSecurityFormat() {
   };
 
   /** @returns The error code (`error.xxx`) the API answered with, if any */
+  // oxlint-disable-next-line anti-slop/no-unknown-parameters -- JavaScript throws arbitrary values; a FetchError parameter would narrow this public error boundary.
   const errorCode = (error: unknown): string | undefined => {
+    // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- This historical projection is deliberately unchecked, including nullish and primitive errors; inference cannot project data from unknown without changing the boundary.
     const code = (error as FetchErrorLike | undefined)?.data;
-    return typeof code === "string" ? code : undefined;
+    return isString(code) ? code : undefined;
   };
 
   return {

package/frontend-vue/layers/dms-layout/app/build/composables/settings/security/useSecurityOverview.ts

@@ -1,6 +1,6 @@
 import { pageRoutePath } from "#dms-core/app/utils/pageRoutes";
-import { useNavBadges } from "#dms-ui/app/build/composables/navigation/useNavBadges";
-import type { Tone } from "#dms-ui/app/types/tone";
+import { useNavBadges } from "#dms-ui/app/entries/composables/navigation/useNavBadges";
+import type { Tone } from "#dms-core/app/types/tone";
 
 /** Base URL of the Security page API. */
 export const SECURITY_ENDPOINT = pageRoutePath("/settings/user/security");
@@ -78,7 +78,7 @@ const ATTENTION_TONE_ORDER: Tone[] = [
 export function useSecurityOverview() {
   const summary = useApiData<SecurityOverview>(SECURITY_ENDPOINT);
   const overview = computed(() => summary.data.value ?? null);
-  // A retry in progress is not a failure to show.
+
   const isUnavailable = computed(
     () => !!summary.error.value && summary.status.value !== "pending",
   );

package/frontend-vue/layers/dms-layout/app/build/composables/settings/useSettingsNavigation.ts

@@ -1,10 +1,10 @@
 import type { MenuItemStatus } from "#dms-core/app/types/menu";
-import type { SiteLayoutTree } from "../../../types/page";
+import type { SiteLayoutTree } from "#dms-core/app/types/page";
 import {
   listCategoryPages,
   listPagesAmong,
   orderedChildren,
-} from "../../utils/categoryPages";
+} from "#dms-ui/app/entries/utils/categoryPages";
 
 export const SETTINGS_ROOT_ID = "settings";
 const DEFAULT_SETTINGS_ICON = "i-ph-gear-six";

package/frontend-vue/layers/dms-layout/app/build/utils/dev-reload-stream.ts

@@ -2,7 +2,7 @@ import { type Ref, watch } from "vue";
 import {
   type CrossTabEnvironment,
   shareAcrossTabs,
-} from "#dms-core/app/build/utils/crossTab";
+} from "#dms-core/app/entries/utils/crossTab";
 
 const RELOAD_EVENT_NAME = "reload";
 const REOPEN_DELAY_MS = 2000;
@@ -26,8 +26,6 @@ interface StreamState {
   isClosed: boolean;
 }
 
-// The browser fires `error` on every failed retry while the backend is down,
-// so only the first one after a working connection is worth a warning.
 function handleError(state: StreamState): void {
   if (!state.isConnectionLost) {
     state.isConnectionLost = true;
@@ -35,9 +33,7 @@ function handleError(state: StreamState): void {
       "[dms-dev-reload] SSE connection lost, waiting for backend...",
     );
   }
-  // EventSource retries a dropped connection by itself, but gives up for good
-  // on an answer that is not an event stream (a 404 while the module reloads,
-  // a proxy error page): only then does it need a new source.
+
   if (state.source?.readyState !== EventSource.CLOSED) return;
   scheduleReopen(state);
 }

package/frontend-vue/layers/dms-layout/app/build/utils/module-store-catalog.ts

@@ -1,12 +1,15 @@
-import type { Tone } from "#dms-ui/app/types/tone";
+import type { Tone } from "#dms-core/app/types/tone";
 import type { StatusPillDot } from "#dms-ui/app/components/status-pill/StatusPill.vue";
-import { type ModuleCatalogEntry, MODULE_URL_PREFIX } from "../../types/page";
+import {
+  type ModuleCatalogEntry,
+  MODULE_URL_PREFIX,
+} from "#dms-core/app/types/page";
 import type {
   ModuleSourceKind,
   StoreListingEntry,
   StoreModuleState,
   StoreOperationKind,
-} from "../../types/module-store";
+} from "#dms-core/app/types/module-store";
 import {
   type DisplayResolver,
   compareDisplayNames,
@@ -120,8 +123,7 @@ export function toModuleStoreEntry(
   const registered = registeredModules.find((module) => module.id === entry.id);
   return {
     ...entry,
-    // The registration also names Installed and navigation. Keep the catalog
-    // fallback for unloaded modules, whose translations may not be served.
+
     title: registered?.title ?? entry.title,
     catalogCategory: resolveCatalogCategory(registered, entry),
   };
@@ -208,7 +210,6 @@ export function sortStoreModules<T extends StoreListingEntry>(
  * applying the file otherwise.
  */
 export function storeActions(entry: StoreListingEntry): StoreAction[] {
-  // The developer's working copy is theirs to change in antelope.config.ts.
   if (entry.isWorkingCopy) return [];
   const installed = entry.installedVersion !== undefined;
   const byState: Record<StoreModuleState, StoreOperationKind[]> = {
@@ -271,7 +272,7 @@ export function storeActionBlock(
 ): StoreActionBlock | undefined {
   if (RELEASE_ACTIONS.has(kind)) return releaseBlock(entry, kind);
   if (!TAKE_DOWN_ACTIONS.has(kind)) return undefined;
-  // The project cannot be removed first: only a change to its code frees it.
+
   if (entry.usedByProject) return "used_by_project";
   return entry.dependents.length > 0 ? "dependents" : undefined;
 }
@@ -396,7 +397,7 @@ export function storeOnlyModules(
       description: entry.description,
       icon: entry.icon,
       hasAccess: true,
-      // Nothing to open: the module serves no page.
+
       landingSlug: "",
       catalogCategory: entry.catalogCategory,
       version:

package/frontend-vue/layers/dms-layout/app/build/utils/module-store-install.ts

@@ -2,7 +2,8 @@ import type {
   MissingInterface,
   StoreActionBody,
   StoreDependencyChoice,
-} from "../../types/module-store";
+} from "#dms-core/app/types/module-store";
+import { isObject } from "#dms-core/app/utils/type-check";
 
 /**
  * The radio value of the "Other npm package" choice: not an npm package
@@ -43,7 +44,7 @@ export interface DependencyDraftErrors {
 /** A config as the dialog reads it: absent when left empty. */
 export interface ParsedDependencyConfig {
   isValid: boolean;
-  config?: Record<string, unknown>;
+  config?: StoreDependencyChoice["config"];
 }
 
 export function isNpmPackageName(value: string): boolean {
@@ -52,8 +53,10 @@ export function isNpmPackageName(value: string): boolean {
   );
 }
 
-const isPlainObject = (value: unknown): value is Record<string, unknown> =>
-  typeof value === "object" && value !== null && !Array.isArray(value);
+const isPlainObject = (
+  value: unknown,
+): value is NonNullable<StoreDependencyChoice["config"]> =>
+  isObject(value) && value !== null && !Array.isArray(value);
 
 /** Reads a typed config: empty is no config, anything else a JSON object. */
 export function parseDependencyConfig(text: string): ParsedDependencyConfig {

package/frontend-vue/layers/dms-layout/app/build/utils/modules-catalog.ts

@@ -5,7 +5,7 @@ import type {
   PageInfo,
   SiteLayout,
   SiteLayoutTree,
-} from "../../types/page";
+} from "#dms-core/app/types/page";
 import { resolveModuleLandingSlug } from "../../utils/moduleLanding";
 
 /** The Modules page, which lists and manages the installed modules. */
@@ -39,6 +39,7 @@ export const DEFAULT_MODULE_SORT_MODE: ModuleSortMode = "name";
 const MODULE_SORT_MODES: readonly ModuleSortMode[] = ["name", "recent"];
 
 /** A remembered sort mode, or the default when it is missing or unknown. */
+// oxlint-disable-next-line anti-slop/no-unknown-parameters -- This parser accepts arbitrary persisted values and falls back for invalid ones; ModuleSortMode would remove that public boundary contract.
 export function parseModuleSortMode(value: unknown): ModuleSortMode {
   return (
     MODULE_SORT_MODES.find((mode) => mode === value) ?? DEFAULT_MODULE_SORT_MODE
@@ -218,8 +219,7 @@ type ServedPage = PageInfo & {
 function isOpenablePage(page: ServedPage): boolean {
   if (page.hidden || page.hasAccess === false) return false;
   if (page.type === "label") return false;
-  // A page that needs a URL parameter or a query cannot be opened from a
-  // bare link.
+
   if (page.fullSlug.includes(":")) return false;
   return !page.validation?.requiredQueryParams?.length;
 }
@@ -236,7 +236,8 @@ export function findModulePageMatch(
 ): ModulePageMatch | null {
   const needle = normalizeQuery(query);
   if (!needle || !siteLayout) return null;
-  for (const page of Object.values(siteLayout.pages) as ServedPage[]) {
+  const pages: ServedPage[] = Object.values(siteLayout.pages);
+  for (const page of pages) {
     if (!page.module || !installedModuleIds.has(page.module)) continue;
     if (!isOpenablePage(page)) continue;
     const pageTitle = resolve(page.displayName);

package/frontend-vue/layers/dms-layout/app/build/utils/pageValidationRedirect.ts

@@ -2,8 +2,8 @@ import { parseURL, withoutTrailingSlash } from "ufo";
 import {
   type ReplaceUrlVariablesContext,
   resolveLinkVariables,
-} from "#dms-ui/app/build/utils/urlVariables";
-import type { PageValidation } from "../../types/page";
+} from "#dms-ui/app/entries/utils/urlVariables";
+import type { PageValidation } from "#dms-core/app/types/page";
 
 const ROOT_PATH = "/";
 

package/frontend-vue/layers/dms-layout/app/build/utils/publicErrorMessage.ts

@@ -1,6 +1,3 @@
-// A fetch failure names the request it failed: `[GET] "http://10.0.0.4:5010/
-// dms/page?path=/x": 502 Bad Gateway`. On a server, that is the backend's
-// internal address, which an error page must never show.
 const FETCH_FAILURE = /^\[[A-Z]+\]\s+"[^"]*":\s*(.*)$/s;
 const ABSOLUTE_URL = /\b[a-z][a-z0-9+.-]*:\/\/[^\s"'<>]+/gi;
 const SPACES = /\s{2,}/g;

package/frontend-vue/layers/dms-layout/app/components/layout/DashboardSearch.vue

@@ -22,9 +22,9 @@ const {
 
 const footerRef = useTemplateRef<HTMLElement>("footer");
 const input = { onKeydown: onInputKeydown };
-// The halo eases between the accent ring and the violet assistant ring.
+
 const MODAL_TRANSITION_CLASS = "transition-shadow duration-300";
-// In assistant mode, the empty slot holds the DMS's own padded states.
+
 const ASSISTANT_EMPTY_CLASS = "p-0 text-start";
 const SEARCH_UI = { modal: MODAL_TRANSITION_CLASS };
 const ASSISTANT_UI = {