@antelopejs/dms 0.11.1 → 0.12.0

package/frontend-vue/layers/dms-layout/app/theme/navigation.ts

@@ -23,8 +23,7 @@ const stepperTheme = {
     trigger:
       "border border-accented bg-default font-mono font-[650] text-muted transition-[background-color,border-color,box-shadow,color] duration-150",
     icon: "shrink-0",
-    // Steps the linear stepper cannot reach yet stay crisp: the upcoming
-    // look already reads as inactive.
+
     separator: "rounded-none group-data-[disabled]:opacity-100",
     title:
       "font-normal text-dimmed group-data-[state=completed]:text-muted group-data-[state=active]:font-semibold group-data-[state=active]:text-highlighted",
@@ -34,7 +33,7 @@ const stepperTheme = {
     orientation: {
       horizontal: {
         root: "gap-5",
-        // A row too long for a phone wraps its steps instead of overflowing.
+
         header: "flex-wrap items-center gap-x-2.5 gap-y-3",
         item: "flex w-auto items-center gap-2 text-start whitespace-nowrap",
         container: "contents",
@@ -96,8 +95,6 @@ const stepperTheme = {
     },
   },
   compoundVariants: [
-    // The current step glows in the row (.au-steps); the setup list keeps
-    // the flat tinted dot with its accent hairline (.cs-step__num).
     {
       orientation: "horizontal",
       color: "primary",
@@ -126,7 +123,7 @@ const stepperTheme = {
     { orientation: "horizontal", size: "md", class: { wrapper: "mt-0" } },
     { orientation: "horizontal", size: "lg", class: { wrapper: "mt-0" } },
     { orientation: "horizontal", size: "xl", class: { wrapper: "mt-0" } },
-    // Title centred on the dot, description under it, line between dots.
+
     {
       orientation: "vertical",
       size: "xs",
@@ -170,10 +167,9 @@ const PAGER_EDGE =
 
 const paginationTheme = {
   slots: {
-    // A long pager (edges + siblings) wraps on a phone instead of overflowing.
     list: "flex-wrap gap-1",
     item: "font-mono font-medium tabular-nums not-data-[selected=true]:text-toned data-[selected=true]:font-[650] disabled:opacity-40",
-    // Mono numbers run a step under the button text (12.5px at md).
+
     label: "min-w-5 text-[0.96em]",
     ellipsis:
       "w-5! min-w-5 px-0! justify-center text-dimmed! hover:bg-transparent!",
@@ -255,7 +251,7 @@ export const NAVIGATION_MENU_HORIZONTAL_COMPOUNDS = [
       list: "gap-[18px]",
       item: "py-0",
       link: "h-10 px-0.5 before:hidden",
-      // Counts as mono chips (`.tab__count`).
+
       linkTrailingBadge:
         "h-4 rounded-[4px] bg-elevated px-[5px] font-mono text-[10.5px] text-dimmed ring-0",
     },

package/frontend-vue/layers/dms-layout/app/theme/pin-input.ts

@@ -0,0 +1,50 @@
+/**
+ * v2 code cells (`.au-otp`, `.cs-otp`): mono semibold digits on the field
+ * surface, accent border plus halo on focus. Cells 28x32, 32x36, 38x44,
+ * 42x48 and 46x52 (the sign-in code); `xl` also widens the gap.
+ */
+const PIN_FIELD =
+  "bg-(--dms-bg-field) ring-accented shadow-(--shadow-xs) hover:ring-(--dms-field-border-hover)";
+
+export const pinInputTheme = {
+  slots: {
+    root: "gap-1.5",
+    base: "font-mono font-semibold text-highlighted tabular-nums rounded-lg disabled:opacity-50",
+  },
+  variants: {
+    variant: {
+      outline: PIN_FIELD,
+      soft: "bg-elevated hover:bg-accented/60 focus:bg-(--dms-bg-field)",
+      ghost: "hover:bg-elevated focus:bg-(--dms-bg-field)",
+    },
+    size: {
+      xs: { base: "h-8 w-7 text-[13px]/4" },
+      sm: { base: "h-9 w-8 text-[15px]/5" },
+      md: { base: "h-11 w-[38px] text-lg/6" },
+      lg: { base: "h-12 w-[42px] text-xl/6" },
+      xl: {
+        base: "h-[52px] w-[46px] rounded-[10px] text-[22px]/7 max-sm:h-[46px] max-sm:w-[38px]",
+      },
+    },
+  },
+  compoundVariants: [
+    {
+      color: "primary",
+      variant: ["outline", "subtle", "soft", "ghost"],
+      class: "outline-(--dms-accent-tint-strong)",
+    },
+    {
+      color: "error",
+      variant: ["outline", "subtle", "soft", "ghost"],
+      class: "outline-(--dms-error-tint)",
+    },
+    { color: "primary", highlight: true, class: "hover:ring-primary" },
+    { color: "error", highlight: true, class: "hover:ring-error" },
+    { fixed: false, size: "xs", class: "md:text-[13px]" },
+    { fixed: false, size: "sm", class: "md:text-[15px]" },
+    { fixed: false, size: "md", class: "md:text-lg" },
+    { fixed: false, size: "lg", class: "md:text-xl" },
+    { fixed: false, size: "xl", class: "md:text-[22px]" },
+    { size: "xl", class: { root: "gap-2 max-sm:gap-[5px]" } },
+  ],
+};

package/frontend-vue/layers/dms-layout/app/theme/surfaces.ts

@@ -8,11 +8,11 @@
  * Every class stays a literal string so Tailwind finds it when scanning.
  */
 
-import { EYEBROW_CLASS } from "#dms-ui/app/build/utils/eyebrow";
+import { EYEBROW_CLASS } from "#dms-ui/app/entries/utils/eyebrow";
 import {
   CLOSING_OVERLAY_CLASS,
   UNCOVERED_PANEL_CLASS,
-} from "#dms-ui/app/build/components/containers/constants";
+} from "#dms-ui/app/entries/components/containers/constants";
 
 /** Floating panels (menus, popovers, toasts): accented hairline and the pop shadow. */
 const FLOATING_SURFACE =
@@ -34,7 +34,6 @@ const CLOSING_PANEL = `data-[state=closed]:pointer-events-none! ${UNCOVERED_PANE
 
 const cardTheme = {
   slots: {
-    // 48px head carrying the mono eyebrow title, 18px body, muted footer band.
     header:
       "flex items-center gap-2.5 min-h-12 py-2 ps-[18px] pe-4 sm:ps-[18px] sm:pe-4",
     title: `${EYEBROW_CLASS} text-muted`,
@@ -44,7 +43,6 @@ const cardTheme = {
   },
   variants: {
     variant: {
-      // The shared .dms-card surface: 14px radius, hairline border, card shadow.
       outline: {
         root: "rounded-(--dms-radius-card) bg-(--dms-surface-card) ring ring-default shadow-(--dms-shadow-card)",
       },
@@ -92,7 +90,6 @@ const popoverTheme = {
 
 const tooltipTheme = {
   slots: {
-    // Inverted chip; its keycaps drop their surface and follow the ink.
     content:
       "bg-inverted text-inverted ring-0 rounded-[6px] h-auto min-h-6 px-2 py-1 text-xs font-medium shadow-(--dms-shadow-pop)",
     arrow: "fill-(--ui-bg-inverted) stroke-(--ui-bg-inverted)",
@@ -167,10 +164,10 @@ const toastTheme = {
     description: "text-[13px]/[1.45]",
     icon: "size-[18px] mt-px",
     actions: "gap-1.5",
-    // Ghost xs square button (design .toast__close), pulled into the corner.
+
     close:
       "-mt-1 -me-1.5 p-1 rounded-md text-dimmed hover:text-highlighted hover:bg-elevated [&_[data-slot=leadingIcon]]:size-4",
-    // 2px duration bar on the muted hairline (design .toast__timer).
+
     progress:
       "[&_[data-slot=base]]:h-0.5 [&_[data-slot=base]]:rounded-none [&_[data-slot=base]]:bg-(--ui-border-muted) [&_[data-slot=indicator]]:rounded-none",
   },
@@ -242,7 +239,6 @@ const alertTheme = {
     },
   },
   compoundVariants: [
-    // Tinted alerts: only the icon (and the tint) carries the colour.
     {
       variant: ["soft", "subtle", "outline"],
       class: { title: "text-highlighted", description: "text-muted" },
@@ -261,7 +257,6 @@ const alertTheme = {
 const avatarTheme = {
   variants: {
     color: {
-      // The default initials avatar: the brand gradient with mono dark ink.
       neutral: {
         root: "bg-linear-135 from-(--ui-color-primary-400) to-(--ui-color-secondary-400)",
         fallback: "font-mono font-bold text-(--dms-accent-on-fill)",

package/frontend-vue/layers/dms-layout/app/types/page-setup.ts

@@ -1,4 +1,5 @@
-import type { PageInfo } from "./page";
+import type { PageInfo } from "#dms-core/app/types/page";
+import type { ComponentEventData } from "#dms-core/app/types/component";
 
 /** Cleanup callback returned by a PageSetupFunction. Called on page unmount. */
 export type PageSetupCleanup = () => void;
@@ -14,9 +15,13 @@ export interface PageSetupContext {
   on(
     component: string,
     event: string,
-    handler: (data: unknown) => void,
+    handler: (data: ComponentEventData["data"]) => void,
   ): () => void;
-  emit(component: string, event: string, data?: unknown): void;
+  emit(
+    component: string,
+    event: string,
+    data?: ComponentEventData["data"],
+  ): void;
 }
 
 /**
@@ -24,8 +29,6 @@ export interface PageSetupContext {
  * frontend via useDefinedFunctions().registerFunction(). Runs in onMounted;
  * cleanup runs on onUnmounted.
  */
-/* eslint-disable @typescript-eslint/no-invalid-void-type -- void permits callers to omit return */
 export type PageSetupFunction = (
   context: PageSetupContext,
 ) => Promise<PageSetupCleanup | void> | PageSetupCleanup | void;
-/* eslint-enable @typescript-eslint/no-invalid-void-type */

package/frontend-vue/layers/dms-layout/app/utils/account-menu.ts

@@ -5,8 +5,7 @@ export interface AccountMenuEntry {
 }
 
 export const PROFILE_ROUTE = "/settings/user/profile";
-// The account menu is the only way to the settings: the sidebar footer has no
-// Settings entry, so this one opens all of them, not just the user's own.
+
 export const SETTINGS_ROUTE = "/settings";
 export const SWITCH_ACCOUNT_ROUTE = "/auth/accounts";
 

package/frontend-vue/layers/dms-layout/app/utils/breadcrumb.ts

@@ -1,4 +1,6 @@
-import type { PageValidation } from "../types/page";
+import { isString } from "../../../dms-core/app/utils/type-check";
+import type { PageValidation } from "#dms-core/app/types/page";
+import type { MenuRouteState } from "#dms-core/app/types/menu";
 
 export interface BreadcrumbTargetSource {
   layoutUrl?: string;
@@ -16,14 +18,14 @@ export interface BreadcrumbTargetSource {
 export function buildPageTarget(
   path: string,
   validation: PageValidation | undefined,
-  currentQuery: Record<string, unknown>,
+  currentQuery: MenuRouteState["query"],
 ): string | undefined {
   const requiredParams = validation?.requiredQueryParams ?? [];
   const carriedQuery = new URLSearchParams();
 
   for (const param of requiredParams) {
     const value = currentQuery[param];
-    if (typeof value !== "string" || value === "") {
+    if (!isString(value) || value === "") {
       return undefined;
     }
     carriedQuery.set(param, value);
@@ -41,7 +43,7 @@ export function buildPageTarget(
 export function buildBreadcrumbTarget(
   path: string,
   metadata: BreadcrumbTargetSource,
-  currentQuery: Record<string, unknown>,
+  currentQuery: MenuRouteState["query"],
 ): string | undefined {
   if (!metadata.layoutUrl) {
     return metadata.landingSlug;
@@ -60,6 +62,7 @@ export interface FoldedCrumbs<T> {
 export function isFoldedCrumbs<T>(
   crumb: T | FoldedCrumbs<T>,
 ): crumb is FoldedCrumbs<T> {
+  // oxlint-disable-next-line anti-slop/require-safety-comment-for-type-assertion -- T is unconstrained and no full FoldedCrumbs validation exists. Constraining T or adding object guards would change the existing public predicate and malformed-input behavior.
   return (crumb as Partial<FoldedCrumbs<T>>).isFolded === true;
 }
 
@@ -95,11 +98,10 @@ export function withParentCrumb<T extends object>(
   parent: T | null | undefined,
 ): T[] {
   if (!parent || crumbs.length < 2) return [...crumbs];
-  const parentTo = (parent as LinkedCrumb).to;
+  const { to: parentTo }: LinkedCrumb = parent;
   if (
     crumbs.some(
-      (crumb) =>
-        parentTo !== undefined && (crumb as LinkedCrumb).to === parentTo,
+      (crumb: LinkedCrumb) => parentTo !== undefined && crumb.to === parentTo,
     )
   ) {
     return [...crumbs];

package/frontend-vue/layers/dms-layout/app/utils/favorites.ts

@@ -1,6 +1,6 @@
 import { getQuery, parseURL } from "ufo";
 import type { FavoritePage } from "../composables/favorites/useFavoritePages";
-import type { PageValidation } from "../types/page";
+import type { PageValidation } from "#dms-core/app/types/page";
 import { buildPageTarget } from "./breadcrumb";
 
 const FAVORITE_TITLE_SEPARATOR = " · ";
@@ -15,7 +15,7 @@ export interface FavoritePageMetadata {
 export interface FavoritePageSource {
   path: string;
   metadata: FavoritePageMetadata;
-  query: Record<string, unknown>;
+  query: Parameters<typeof buildPageTarget>[2];
   translate: (text: string) => string;
 }
 
@@ -25,15 +25,13 @@ export type FavoriteRouteResolver = (
 
 function requiredQueryValues(
   validation: PageValidation | undefined,
-  query: Record<string, unknown>,
+  query: FavoritePageSource["query"],
 ): string[] {
   return (validation?.requiredQueryParams ?? []).map((param) =>
     String(query[param]),
   );
 }
 
-// A page narrowed by its query shows one entity out of many: its generic
-// display name would label every favorite of it the same way.
 function entityTitle(pageTitle: string, queryValues: string[]): string {
   return [pageTitle, ...queryValues].join(FAVORITE_TITLE_SEPARATOR);
 }

package/frontend-vue/layers/dms-layout/app/utils/moduleLanding.ts

@@ -1,4 +1,4 @@
-import type { SiteLayoutTree } from "../types/page";
+import type { SiteLayoutTree } from "#dms-core/app/types/page";
 
 const MODULES_TREE_KEY = "modules";
 

package/frontend-vue/layers/dms-layout/i18n/locales/layout-en-GB.json

@@ -270,6 +270,10 @@
           "connected": "User connection status",
           "last_active": "Last time the member used the dashboard"
         },
+        "status": {
+          "online": "Online",
+          "offline": "Offline"
+        },
         "invite": {
           "button": "Invite members",
           "title": "Invite members",

package/frontend-vue/layers/dms-layout/server/html-render.ts

@@ -1,6 +1,7 @@
 import type { DmsServerEvent } from "#dms/server";
 import { privateSecret } from "../../../server/private-options";
 import { validRenderToken } from "./render-token";
+import { isObject, isString } from "../../dms-core/app/utils/type-check";
 
 const SERVICE_TOKEN_HEADER = "x-dms-service-token";
 
@@ -37,15 +38,15 @@ export async function renderHtml(event: DmsServerEvent): Promise<Response> {
     return failure(401, "Invalid service token");
   const input = await event.readJson<RenderInput>();
   if (
-    typeof input.templateName !== "string" ||
+    !isString(input.templateName) ||
     input.templateName.trim() === "" ||
-    typeof input.props !== "object"
+    !isObject(input.props)
   )
     return failure(400, "Invalid request body");
   try {
     const html = await event.renderEmail(
       input.templateName,
-      (input.props ?? {}) as Record<string, unknown>,
+      input.props ?? {},
       { locale: event.request.headers.get("x-content-language") ?? undefined },
     );
     return Response.json({ html });

package/frontend-vue/layers/dms-layout/server/render-token.ts

@@ -1,9 +1,6 @@
+import { isString } from "../../dms-core/app/utils/type-check";
 import { createHmac, timingSafeEqual } from "node:crypto";
 
-// The service token that guards the HTML render route, minted by the DMS
-// backend (`service-jwt.ts`) for its own render requests: its signature, its
-// claims and its single use.
-
 const RENDER_TOKEN_LIFETIME_SECONDS = 5 * 60;
 const RENDER_REPLAY_LIMIT = 10_000;
 
@@ -32,6 +29,10 @@ function signatureValid(parts: string[], secret: string): boolean {
   return timingSafeEqual(Buffer.from(expected), Buffer.from(parts[2]));
 }
 
+function isSafeInteger(value: RenderTokenClaims["iat"]): value is number {
+  return Number.isSafeInteger(value);
+}
+
 /**
  * The claims this service accepts. `exp - iat` is bounded so a token minted
  * with a far-future expiry cannot outlive the intended window.
@@ -44,14 +45,13 @@ function claimsValid(
     payload.namespace === "html-render-service" &&
     payload.purpose === "html-render" &&
     payload.aud === "dms-frontend" &&
-    typeof payload.jti === "string" &&
+    isString(payload.jti) &&
     payload.jti.length >= 16 &&
-    Number.isSafeInteger(payload.iat) &&
-    Number.isSafeInteger(payload.exp) &&
-    (payload.exp as number) > now &&
-    (payload.exp as number) - (payload.iat as number) <=
-      RENDER_TOKEN_LIFETIME_SECONDS &&
-    (payload.iat as number) <= now
+    isSafeInteger(payload.iat) &&
+    isSafeInteger(payload.exp) &&
+    payload.exp > now &&
+    payload.exp - payload.iat <= RENDER_TOKEN_LIFETIME_SECONDS &&
+    payload.iat <= now
   );
 }
 
@@ -64,6 +64,7 @@ function rememberToken(jti: string, exp: number, now: number) {
   for (const [spent, expiresAt] of usedRenderTokens)
     if (expiresAt <= now) usedRenderTokens.delete(spent);
   while (usedRenderTokens.size >= RENDER_REPLAY_LIMIT)
+    // SAFETY: The synchronous loop requires at least 10,000 entries in this Map<string, number>, so next() has a string key.
     usedRenderTokens.delete(usedRenderTokens.keys().next().value as string);
   usedRenderTokens.set(jti, exp);
 }
@@ -81,9 +82,9 @@ export function validRenderToken(
   if (parts.length !== 3) return false;
   if (!signatureValid(parts, secret)) return false;
   try {
-    const payload = JSON.parse(
+    const payload: Parameters<typeof claimsValid>[0] = JSON.parse(
       Buffer.from(parts[1], "base64url").toString("utf8"),
-    ) as RenderTokenClaims;
+    );
     const now = Math.floor(Date.now() / 1000);
     if (!claimsValid(payload, now)) return false;
     if (usedRenderTokens.has(payload.jti)) return false;

package/frontend-vue/layers/dms-onboarding/app/build/components/onboarding/StepIndicator.vue

@@ -13,14 +13,12 @@ const DONE_ICON = "i-ph-check-bold";
 
 const props = defineProps<StepIndicatorProps>();
 
-// Done steps show a check. On phones only the current step keeps its label,
-// so the three steps stay on one row (a done label beside the current one
-// pushed the last step onto a second line).
 const items = computed<StepperItem[]>(() =>
   props.labels.map((label, index) => ({
     title: label,
     icon: index < props.current ? DONE_ICON : undefined,
-    // Nuxt UI types an item's `ui` as every slot at once; one is enough.
+
+    // SAFETY: UStepper reads each item.ui slot optionally; its Pick type requires slots the renderer permits omitting.
     ui:
       index !== props.current
         ? ({ wrapper: "max-sm:hidden" } as StepperItem["ui"])

package/frontend-vue/layers/dms-onboarding/app/build/components/onboarding/steps/platform.vue

@@ -2,7 +2,7 @@
 import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { SelectItem } from "@nuxt/ui";
-import StageCard from "../../../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import type { OnboardingPlatform } from "../../../composables/onboarding/steps";
 import StepMeta from "../StepMeta.vue";
 import {
@@ -39,7 +39,6 @@ const schema = useLocalizedSchema(
 const form = useTemplateRef<LiveFormHandle>("form");
 useLiveFormErrors(form, platform.value);
 
-// Read in the browser: the server render does not know the public address.
 const host = ref("");
 const isSecure = ref(false);
 

package/frontend-vue/layers/dms-onboarding/app/build/components/onboarding/steps/ready.vue

@@ -1,7 +1,8 @@
 <script setup lang="ts">
-import { TILE_ROW_INTERACTIVE_CLASS } from "#dms-ui/app/build/utils/tileRow";
+import type { AnchorHTMLAttributes, ButtonHTMLAttributes } from "vue";
+import { TILE_ROW_INTERACTIVE_CLASS } from "#dms-ui/app/entries/utils/tileRow";
 import type { KeyValueItem } from "#dms-ui/app/components/key-value-list/KeyValueList.vue";
-import StageCard from "../../../../../../dms-layout/app/build/components/layout/StageCard.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
 import type {
   OnboardingAdministrator,
   OnboardingPlatform,
@@ -91,15 +92,15 @@ const recapItems = computed<KeyValueItem[]>(() => [
   },
 ]);
 
-function actionAttributes(action: NextAction): Record<string, unknown> {
+function actionAttributes(
+  action: NextAction,
+): AnchorHTMLAttributes | ButtonHTMLAttributes {
   if (action.isExternal) {
     return { href: action.to, ...EXTERNAL_LINK_ATTRIBUTES };
   }
   return { type: "button", disabled: isOpening.value };
 }
 
-// The session is refreshed on the way out, not before: the owner stays on
-// this page, and every exit first loads their permissions and language.
 async function open(destination?: string) {
   if (isOpening.value) return;
   isOpening.value = true;
@@ -110,7 +111,6 @@ async function open(destination?: string) {
       ),
     );
   } catch {
-    // A full reload also clears fatal layout errors from the failed refresh.
     window.location.replace(LOGIN_PATH);
   }
 }

package/frontend-vue/layers/dms-onboarding/app/components/onboarding/steps/register.vue

@@ -3,13 +3,13 @@ import { useTemplateRef } from "vue";
 import * as z from "zod";
 import type { FormSubmitEvent } from "@nuxt/ui";
 import striptags from "striptags";
-import StageCard from "../../../../../dms-layout/app/build/components/layout/StageCard.vue";
-import AuthFormAlert from "../../../../../dms-auth/app/build/components/AuthFormAlert.vue";
-import AuthNewPasswordField from "../../../../../dms-auth/app/build/components/AuthNewPasswordField.vue";
+import StageCard from "#dms-layout/app/entries/components/layout/StageCard";
+import AuthFormAlert from "#dms-auth/app/entries/components/AuthFormAlert";
+import AuthNewPasswordField from "#dms-auth/app/entries/components/AuthNewPasswordField";
 import {
   type AuthFormHandle,
   useAuthFormError,
-} from "../../../../../dms-auth/app/build/composables/useAuthFormError";
+} from "#dms-auth/app/entries/composables/useAuthFormError";
 import type {
   OnboardingAdministrator,
   OnboardingPlatform,
@@ -101,12 +101,10 @@ async function onSubmit(event: FormSubmitEvent<Schema>) {
     });
   } catch (error: unknown) {
     if (isRegistered.value) {
-      // A full reload also clears fatal layout errors from the failed login.
       window.location.replace(LOGIN_PATH);
       return;
     }
-    // A refused value shows under its field; anything else (an administrator
-    // already set) above the form.
+
     await showError(error, "page.onboarding.administrator.error_title", {
       fields: ["firstName", "lastName", "email", "password"],
       form,

package/frontend-vue/layers/dms-onboarding/app/composables/onboarding/useOnboarding.ts

@@ -18,10 +18,6 @@ export const useOnboarding = async (): Promise<OnboardingInfo> => {
   const known = useDmsData<OnboardingInfo>(ONBOARDING_KEY).data.value;
   if (known) return known;
 
-  // One request per app however many callers ask before it answers: the
-  // preload started with the app and the `onboarding` middleware share the
-  // key. Its own triggers only: the status changes once, when the first
-  // administrator registers (`setOnboardingComplete`).
   const status = await useApiData<OnboardingInfo>(
     ONBOARDING_KEY,
     async ({ $authFetch, signal }) => {
@@ -33,8 +29,7 @@ export const useOnboarding = async (): Promise<OnboardingInfo> => {
     },
     { refreshOnPageRefresh: false },
   );
-  // A failed read leaves the status unknown: the middleware lets the
-  // navigation through, and the next one asks again.
+
   if (!status.data.value) throw status.error.value;
   return status.data.value;
 };

package/frontend-vue/layers/dms-onboarding/app/custom-pages/onboarding.vue

@@ -10,23 +10,17 @@ import {
   type OnboardingStep,
 } from "../build/composables/onboarding/steps";
 
-// A custom page runs the global middleware only once it declares its meta:
-// that is what lets the onboarding middleware send a visitor away from a
-// wizard that is already finished, on a direct load as on a navigation.
 defineDmsPageMeta({});
 
 const { t, locale } = useI18n();
 const { metaTitle } = useSystemState();
 
-// The steps live in this one page, so the middleware, which releases a
-// finished wizard, never runs between the account step and the Ready step.
 const step = ref<OnboardingStep>("platform");
 const platform = ref<OnboardingPlatform>({
   name: metaTitle.value,
   language: locale.value,
 });
 
-// The configured meta title only prefills the name, once it has loaded.
 watch(metaTitle, (title) => {
   if (!platform.value.name) platform.value.name = title;
 });

package/frontend-vue/layers/dms-onboarding/app/entries/component-registry.ts

@@ -0,0 +1,12 @@
+import type { Component } from "vue";
+
+const components = import.meta.glob<{ default: Component }>(
+  "../build/components/**/*.vue",
+);
+
+export const buildComponents = Object.fromEntries(
+  Object.entries(components).map(([path, loader]): [string, typeof loader] => [
+    `./layers/dms-onboarding/app/${path.slice(3)}`,
+    loader,
+  ]),
+);

package/frontend-vue/layers/dms-onboarding/app/entries/components/onboarding/steps/ready.ts

@@ -0,0 +1,2 @@
+export { default } from "../../../../build/components/onboarding/steps/ready.vue";
+export * from "../../../../build/components/onboarding/steps/ready.vue";

package/frontend-vue/layers/dms-onboarding/app/middleware/onboarding.global.ts

@@ -1,12 +1,8 @@
 const ONBOARDING_PATH = "/onboarding";
 const LOGIN_PATH = "/auth";
-// The block preview a docs site embeds draws blocks only, so an instance not
-// yet set up still serves it rather than the wizard.
+
 const BLOCK_PREVIEW_PATH = "/dms-preview";
 
-// Where a visit to the finished wizard lands: the app for a signed-in user, the
-// login page for anyone else rather than a homepage whose 401 would bounce
-// them there anyway.
 function completedOnboardingDestination(): string {
   const { loggedIn } = useDmsUserSession();
   return loggedIn.value ? useHomepage() : LOGIN_PATH;
@@ -16,18 +12,10 @@ export default defineDmsMiddleware(async (to) => {
   if (to.path === BLOCK_PREVIEW_PATH) return;
   const isOnboardingRoute = to.path.startsWith(ONBOARDING_PATH);
 
-  // While the instance has no admin yet, funnel every route to the onboarding
-  // wizard. Running as a global middleware (instead of a plugin) lets this take
-  // precedence over the homepage redirect: otherwise an anonymous visitor is
-  // sent to the configured homepage — a protected page whose 401 bounces them
-  // to /auth, interrupting onboarding.
   let info;
   try {
     info = await useOnboarding();
   } catch {
-    // If the onboarding status can't be resolved, don't block navigation: the
-    // wizard stays reachable, and it is its own register call that refuses a
-    // second admin.
     return;
   }
 

package/frontend-vue/layers/dms-ui/app/build/components/activity-feed/activityFeedDays.ts

@@ -7,7 +7,8 @@ import type {
   BlockText,
   ComposedTextParam,
 } from "#dms-core/app/types/composed-text";
-import type { Tone } from "../../../types/tone";
+import type { Tone } from "#dms-core/app/types/tone";
+import { isString } from "#dms-core/app/utils/type-check";
 
 /** One entry of an activity feed, as a page declares it or a source answers. */
 export interface ActivityFeedItem {
@@ -66,11 +67,12 @@ export function formatShortDate(date: Date, now: Date, locale: string): string {
   const sameYear =
     regionalDayKey(date).slice(0, YEAR_KEY_LENGTH) ===
     regionalDayKey(now).slice(0, YEAR_KEY_LENGTH);
-  return regionalDateTimeFormat(locale, {
+  const options: Intl.DateTimeFormatOptions = {
     month: "short",
     day: "numeric",
-    ...(sameYear ? {} : { year: "numeric" }),
-  }).format(date);
+  };
+  if (!sameYear) options.year = "numeric";
+  return regionalDateTimeFormat(locale, options).format(date);
 }
 
 /** How far back a day is, in the coarse buckets of a feed. */
@@ -150,7 +152,7 @@ export function formatActivityTime(date: string, locale: string): string {
 }
 
 const isTextKey = (value: ComposedTextParam): value is string =>
-  typeof value === "string" && value.startsWith("$");
+  isString(value) && value.startsWith("$");
 
 /**
  * The values an entry's title and details interpolate, as composed-text