@antelopejs/dms 0.4.5 → 0.4.6

package/dist/utils/index.d.ts

@@ -4,6 +4,5 @@ export * from "./export-jobs-run";
 export * from "./run-in-batches";
 export * from "./tenant-export-archive";
 export * from "@antelopejs/interface-dms/utils/row-instance";
-export * from "@antelopejs/interface-dms/utils/saas-mode";
 export * from "@antelopejs/interface-dms/utils/time";
 export * from "@antelopejs/interface-dms/utils/value-parser";

package/dist/utils/index.js

@@ -20,7 +20,6 @@ __exportStar(require("./export-jobs-run"), exports);
 __exportStar(require("./run-in-batches"), exports);
 __exportStar(require("./tenant-export-archive"), exports);
 __exportStar(require("@antelopejs/interface-dms/utils/row-instance"), exports);
-__exportStar(require("@antelopejs/interface-dms/utils/saas-mode"), exports);
 __exportStar(require("@antelopejs/interface-dms/utils/time"), exports);
 __exportStar(require("@antelopejs/interface-dms/utils/value-parser"), exports);
 //# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,gDAA8B;AAC9B,oDAAkC;AAClC,mDAAiC;AACjC,0DAAwC;AACxC,+EAA6D;AAC7D,4EAA0D;AAC1D,uEAAqD;AACrD,+EAA6D"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,gDAA8B;AAC9B,oDAAkC;AAClC,mDAAiC;AACjC,0DAAwC;AACxC,+EAA6D;AAC7D,uEAAqD;AACrD,+EAA6D"}

package/dist/validation/auth.schema.d.ts

@@ -4,20 +4,20 @@ export declare const authSchema: {
         name: z.ZodString;
         email: z.ZodString;
         password: z.ZodString;
-        lang: z.ZodString;
+        lang: z.ZodOptional<z.ZodString>;
         token: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         token: string;
         name: string;
         password: string;
         email: string;
-        lang: string;
+        lang?: string | undefined;
     }, {
         token: string;
         name: string;
         password: string;
         email: string;
-        lang: string;
+        lang?: string | undefined;
     }>;
     login: z.ZodObject<{
         email: z.ZodString;

package/dist/validation/auth.schema.js

@@ -44,7 +44,7 @@ exports.authSchema = {
         name: z.string(),
         email: z.string().email(),
         password: password_1.passwordSchema,
-        lang: z.string(),
+        lang: z.string().optional(),
         token: z.string(),
     }),
     login: z.object({

package/dist/validation/auth.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}
+{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/signup.vue

@@ -4,7 +4,7 @@ import type { FormSubmitEvent } from "@nuxt/ui";
 
 const MIN_VALID_PASSWORD_SCORE = 4;
 
-const { locale } = useI18n();
+const { locale, locales, setLocale } = useI18n();
 const config = useDmsRuntimeConfig();
 const homepage = useHomepage();
 
@@ -12,13 +12,20 @@ const route = useDmsRoute();
 const queryToken = computed(() => route.query.token as string);
 const queryEmail = computed(() => route.query.email as string);
 const queryName = computed(() => route.query.name as string | undefined);
+// Only an invitation email links here, so a link without its token was cut
+// short on the way: say so, rather than answering with a server error.
+const hasInvitationToken = computed(
+  () => typeof queryToken.value === "string" && queryToken.value !== "",
+);
 
-if (!queryToken.value) {
-  throw createError({
-    statusCode: HTTP_BAD_REQUEST,
-    statusMessage: INVALID_REQUEST,
-    message: "Missing required token parameter",
-  });
+// The invitation link carries the language the invitee was invited in: the
+// page opens in it, and the footer switcher still lets them pick another one
+// before the account is created with whichever is current.
+const invitationLanguage = locales.value.find(
+  (available) => available.code === route.query.lang,
+);
+if (invitationLanguage && invitationLanguage.code !== locale.value) {
+  void setLocale(invitationLanguage.code);
 }
 
 const isLoading = ref(false);
@@ -66,7 +73,29 @@ async function onSubmit(payload: FormSubmitEvent<Schema>) {
 </script>
 
 <template>
-  <div class="mx-auto max-w-xl">
+  <div v-if="!hasInvitationToken" class="mx-auto max-w-md">
+    <DmsCard
+      variant="elevated"
+      :padded="false"
+      class="p-6 sm:p-12"
+      data-testid="signup-invalid-invitation"
+    >
+      <UIcon
+        name="i-ph-link-break"
+        class="text-warning mb-4 size-10"
+        :aria-hidden="true"
+      />
+      <h1 class="pb-5 text-2xl font-bold">
+        {{ $t("page.signup.invalid_invitation_title") }}
+      </h1>
+      <p class="text-muted pb-7 text-sm font-normal">
+        {{ $t("page.signup.invalid_invitation_description") }}
+      </p>
+      <UButton :label="$t('button.login')" to="/auth" block />
+    </DmsCard>
+  </div>
+
+  <div v-else class="mx-auto max-w-xl">
     <DmsCard variant="elevated" :padded="false" class="p-6 sm:p-12">
       <h1 class="pb-11 text-xl font-bold sm:text-2xl">
         {{ $t("page.signup.create_account_title") }}

package/frontend-vue/layers/dms-auth/i18n/locales/auth-en-GB.json

@@ -15,7 +15,9 @@
     },
     "signup": {
       "create_account_title": "Create your account",
-      "error_title": "Account creation error"
+      "error_title": "Account creation error",
+      "invalid_invitation_title": "This invitation link is invalid or incomplete",
+      "invalid_invitation_description": "Open the link from your invitation email again, or ask the workspace owner to send you a new invitation. Already have an account? Log in."
     },
     "2fa": {
       "title": "Two-factor verification",

package/frontend-vue/layers/dms-auth/i18n/locales/auth-fr-FR.json

@@ -15,7 +15,9 @@
     },
     "signup": {
       "create_account_title": "Créer votre compte",
-      "error_title": "Erreur de création de compte"
+      "error_title": "Erreur de création de compte",
+      "invalid_invitation_title": "Ce lien d'invitation est invalide ou incomplet",
+      "invalid_invitation_description": "Rouvrez le lien de votre e-mail d'invitation, ou demandez au propriétaire de l'espace de travail de vous envoyer une nouvelle invitation. Vous avez déjà un compte ? Connectez-vous."
     },
     "2fa": {
       "title": "Vérification à deux facteurs",

package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardBanners.vue

@@ -0,0 +1,50 @@
+<script setup lang="ts">
+/**
+ * Stacks the global layout banners under the dashboard header, on every page
+ * of the dashboard layout. Each banner carries its own live-region role, so a
+ * banner appearing after a navigation is announced as well.
+ */
+const { banners, dismiss } = useLayoutBanners();
+const { processI18n } = useTranslation();
+
+const entries = computed(() =>
+  banners.value.map((banner) => ({
+    banner,
+    presentation: resolveLayoutBannerPresentation(banner),
+  })),
+);
+</script>
+
+<template>
+  <div
+    v-if="entries.length"
+    data-dms-layout-banners
+    class="border-default flex flex-col border-b"
+  >
+    <div
+      v-for="{ banner, presentation } in entries"
+      :key="banner.key"
+      :role="presentation.role"
+      :data-dms-layout-banner="banner.key"
+    >
+      <UAlert
+        variant="subtle"
+        orientation="horizontal"
+        :color="presentation.color"
+        :icon="presentation.icon"
+        :close="banner.dismissible"
+        class="rounded-none px-4 py-2.5 sm:px-6"
+        @update:open="dismiss(banner.key)"
+      >
+        <template #description>
+          <component
+            :is="banner.component"
+            v-if="banner.component"
+            v-bind="banner.props"
+          />
+          <template v-else>{{ processI18n(banner.text ?? "") }}</template>
+        </template>
+      </UAlert>
+    </div>
+  </div>
+</template>

package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardHeader.vue

@@ -58,22 +58,21 @@ const { processI18n } = useTranslation();
 const favoritePages = useFavoritePages();
 
 const currentPageInfo = computed((): FavoritePage | null => {
-  const currentPath = route.path;
-  const matchedRoute = siteLayout.findMatchingRoute(currentPath);
+  const matchedRoute = siteLayout.findMatchingRoute(route.path);
 
   if (!matchedRoute) {
     return null;
   }
 
-  return {
-    id: matchedRoute.metadata.id || currentPath,
-    path: currentPath,
-    title:
-      matchedRoute.metadata.displayName ||
-      route.name?.toString() ||
-      currentPath,
-    icon: matchedRoute.metadata.icon,
-  };
+  return buildFavoritePage({
+    path: route.path,
+    metadata: {
+      ...matchedRoute.metadata,
+      displayName: matchedRoute.metadata.displayName || route.name?.toString(),
+    },
+    query: route.query,
+    translate: processI18n,
+  });
 });
 
 const isCurrentPageFavorite = computed(() => {
@@ -112,11 +111,15 @@ const breadcrumb = computed((): BreadcrumbItem[] => {
           return null;
         }
 
-        const isPage = "layoutUrl" in matchingRoute.metadata;
+        const target = buildBreadcrumbTarget(
+          to,
+          matchingRoute.metadata,
+          route.query,
+        );
 
         return {
           label: processI18n(matchingRoute.metadata?.displayName || path),
-          ...(isPage ? { to } : {}),
+          ...(target ? { to: target } : {}),
         };
       })
       .filter((item) => item !== null),

package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardSidebar.vue

@@ -42,8 +42,8 @@ if (!siteLayout.siteLayout.value) {
 
 const favoritePages = useFavoritePages();
 
-favoritePages.cleanupInvalidFavorites(
-  (path) => siteLayout.findMatchingRoute(path) !== null,
+favoritePages.cleanupInvalidFavorites((path) =>
+  isFavoritePathValid(path, siteLayout.findMatchingRoute),
 );
 
 const isOwner = useIsOwner();

package/frontend-vue/layers/dms-layout/app/build/components/notification/NotificationPopover.vue

@@ -1,6 +1,7 @@
 <script setup lang="ts">
 import { formatRelativeTime } from "#dms-core/app/utils/formatter";
 import NotificationCard from "./NotificationCard.vue";
+import { settleWidgetRequest } from "./widgetRequest";
 
 const MAX_DISPLAYED_COUNT = 99;
 
@@ -25,9 +26,14 @@ const { isLoadingMore, setupObserver, disconnectObserver } = useInfiniteScroll(
   hasMore,
 );
 
+const refreshUnreadCount = () =>
+  settleWidgetRequest(fetchUnreadCount, () => {
+    unreadCount.value = 0;
+  });
+
 const handleNotificationEvent = async () => {
   if (!isOpen.value) {
-    await fetchUnreadCount();
+    await refreshUnreadCount();
   }
 };
 
@@ -37,14 +43,14 @@ const handleFormSubmitSuccess = async (event: Event) => {
 
   if (submitUrl && submitUrl.includes("/api/notification/")) {
     if (!isOpen.value) {
-      await fetchUnreadCount();
+      await refreshUnreadCount();
     }
   }
 };
 
 const markNotificationsAsRead = async () => {
   if (hasBeenOpened.value) {
-    await markAllAsRead();
+    await settleWidgetRequest(markAllAsRead);
     hasBeenOpened.value = false;
   }
 };
@@ -57,7 +63,7 @@ const handleBeforeUnload = () => {
 
 onMounted(async () => {
   if (!loggedIn.value) return;
-  await fetchUnreadCount();
+  await refreshUnreadCount();
 
   window.addEventListener(
     NotificationEvents.NOTIFICATION_RECEIVED,
@@ -87,7 +93,7 @@ onUnmounted(() => {
 watch(isOpen, async (isNowOpen) => {
   if (isNowOpen) {
     hasBeenOpened.value = true;
-    await fetchNotifications(true);
+    await settleWidgetRequest(() => fetchNotifications(true));
     await nextTick();
     setupObserver();
   } else {

package/frontend-vue/layers/dms-layout/app/build/components/notification/widgetRequest.ts

@@ -0,0 +1,20 @@
+const WIDGET_REQUEST_FAILED_MESSAGE = "[dms] Header widget request failed";
+
+/**
+ * Runs a request a layout widget issues on its own (on mount, on a realtime
+ * event, on open). A failure -- a tenant access gate answering 403, a network
+ * error -- is logged and degrades the widget through `onFailure` instead of
+ * reaching the app error handler, which would replace the whole page with an
+ * error screen.
+ */
+export async function settleWidgetRequest(
+  request: () => Promise<unknown>,
+  onFailure?: () => void,
+): Promise<void> {
+  try {
+    await request();
+  } catch (error) {
+    onFailure?.();
+    console.warn(WIDGET_REQUEST_FAILED_MESSAGE, error);
+  }
+}

package/frontend-vue/layers/dms-layout/app/composables/layout/useLayoutBanners.ts

@@ -0,0 +1,59 @@
+const DISMISSED_BANNERS_COOKIE = "dms-dismissed-banners";
+
+type LayoutBannerRole = "status" | "alert";
+
+interface LayoutBannerPresentation {
+  role: LayoutBannerRole;
+  color: LayoutBannerVariant;
+  icon: string;
+}
+
+// An error interrupts the screen reader; info and warning wait their turn.
+const PRESENTATIONS: Record<LayoutBannerVariant, LayoutBannerPresentation> = {
+  info: { role: "status", color: "info", icon: "i-ph-info-light" },
+  warning: { role: "status", color: "warning", icon: "i-ph-warning-light" },
+  error: { role: "alert", color: "error", icon: "i-ph-warning-octagon-light" },
+};
+
+/**
+ * Role, color and icon a banner renders with. An unknown variant — from a
+ * newer backend, or an untyped registration — renders as `info` rather than
+ * as an unstyled strip.
+ */
+export const resolveLayoutBannerPresentation = (
+  banner: LayoutBanner,
+): LayoutBannerPresentation => {
+  const presentation = PRESENTATIONS[banner.variant] ?? PRESENTATIONS.info;
+  return { ...presentation, icon: banner.icon ?? presentation.icon };
+};
+
+/**
+ * The global banners rendered under the dashboard header, as resolved by the
+ * server for this request (see `RegisterLayoutBanner` in
+ * `@antelopejs/interface-dms/layout-banners`), minus the ones the user
+ * dismissed.
+ *
+ * Dismissals are kept in a session cookie rather than in local storage so the
+ * server-rendered page already leaves a dismissed banner out, instead of
+ * painting it and removing it on hydration.
+ */
+export const useLayoutBanners = () => {
+  const { siteLayout } = useSiteLayout();
+  const dismissed = useDmsCookie<string[]>(DISMISSED_BANNERS_COOKIE, {
+    default: () => [],
+    sameSite: "lax",
+  });
+
+  const banners = computed<LayoutBanner[]>(() =>
+    (siteLayout.value?.banners ?? []).filter(
+      (banner) => !banner.dismissible || !dismissed.value.includes(banner.key),
+    ),
+  );
+
+  function dismiss(key: string): void {
+    if (dismissed.value.includes(key)) return;
+    dismissed.value = [...dismissed.value, key];
+  }
+
+  return { banners, dismiss };
+};

package/frontend-vue/layers/dms-layout/app/composables/page/useQuickActions.ts

@@ -1,5 +1,7 @@
 import {
   QUICK_ACTION_ADD,
+  QUICK_ACTION_BUTTON,
+  QUICK_ACTION_BUTTON_KEY,
   QUICK_ACTION_COMPONENT_KEY,
   QUICK_ACTION_QUERY_KEY,
 } from "#dms-ui/app/types/quick-actions";
@@ -32,6 +34,17 @@ const targetHandlers: Record<
       },
     });
   },
+  button: (target) => {
+    if (target.type !== "button") return;
+    return navigateDms({
+      path: target.to,
+      query: {
+        [QUICK_ACTION_QUERY_KEY]: QUICK_ACTION_BUTTON,
+        [QUICK_ACTION_COMPONENT_KEY]: target.component,
+        [QUICK_ACTION_BUTTON_KEY]: target.button,
+      },
+    });
+  },
   event: (target) => {
     if (target.type !== "event") return;
     if (typeof window === "undefined") return;
@@ -43,8 +56,8 @@ const targetHandlers: Record<
 
 /**
  * Runs the client-side behavior a quick action declares through its
- * discriminated `target`: `navigate` and `openForm` route to the action's
- * page, `event` dispatches a window `CustomEvent` in place for whoever
+ * discriminated `target`: `navigate`, `openForm` and `button` route to the
+ * action's page, `event` dispatches a window `CustomEvent` in place for whoever
  * listens.
  */
 export function dispatchQuickActionTarget(target: QuickActionTarget): unknown {

package/frontend-vue/layers/dms-layout/app/custom-layouts/DefaultLayout.vue

@@ -3,6 +3,7 @@ import Container from "../build/components/layout/Container.vue";
 import PageHeader from "../build/components/layout/PageHeader.vue";
 import DashboardSidebar from "../build/components/layout/DashboardSidebar.vue";
 import DashboardHeader from "../build/components/layout/DashboardHeader.vue";
+import DashboardBanners from "../build/components/layout/DashboardBanners.vue";
 
 interface Props {
   fullWidth?: boolean;
@@ -28,6 +29,7 @@ const props = withDefaults(defineProps<Props>(), {
     <UDashboardPanel>
       <template #header>
         <DashboardHeader />
+        <DashboardBanners />
       </template>
 
       <template #body>

package/frontend-vue/layers/dms-layout/app/emails/EmailAdminInvite.vue

@@ -1,31 +1,76 @@
 <script setup lang="ts">
+import { computed } from "vue";
+import { useI18n } from "vue-i18n";
 import EmailLayout from "./components/EmailLayout.vue";
 import EmailButton from "./components/EmailButton.vue";
 import { emailStyles } from "./components/index";
 
-defineProps<{
+const props = defineProps<{
   email: string;
   signupLink: string;
-  expiresIn: string;
+  expiresInDays: number;
+  workspaceName?: string;
+  inviterName?: string;
+  platformName?: string;
 }>();
+
+const { t, locale } = useI18n();
+
+const joinTarget = computed(() => {
+  const { workspaceName, platformName } = props;
+  if (workspaceName && platformName) {
+    return t("emails.admin_invite.workspace_on_platform", {
+      workspace: workspaceName,
+      platform: platformName,
+    });
+  }
+  return workspaceName || platformName;
+});
+
+const title = computed(() =>
+  props.workspaceName
+    ? t("emails.admin_invite.title_workspace", {
+        workspace: props.workspaceName,
+      })
+    : t("emails.admin_invite.title"),
+);
+
+const invitation = computed(() => {
+  if (!joinTarget.value) {
+    return t("emails.admin_invite.invitation");
+  }
+  return props.inviterName
+    ? t("emails.admin_invite.invitation_from_inviter", {
+        inviter: props.inviterName,
+        target: joinTarget.value,
+      })
+    : t("emails.admin_invite.invitation_to_target", {
+        target: joinTarget.value,
+      });
+});
 </script>
 
 <template>
-  <EmailLayout title="You're Invited!">
-    <EText :style="emailStyles.text">Hello,</EText>
+  <EmailLayout :title="title" :lang="locale">
+    <EText :style="emailStyles.text">
+      {{ t("emails.admin_invite.greeting") }}
+    </EText>
 
     <EText :style="emailStyles.text">
-      You've been invited to join our platform. Click the button below to create
-      your account:
+      {{ invitation }} {{ t("emails.admin_invite.call_to_action") }}
     </EText>
 
-    <EmailButton :href="signupLink" :expires-in="expiresIn">
-      Create Account
+    <EmailButton
+      :href="signupLink"
+      :expires-in="t('emails.admin_invite.expires_in', { days: expiresInDays })"
+      :expires-label="t('emails.admin_invite.expires_label')"
+    >
+      {{ t("emails.admin_invite.button") }}
     </EmailButton>
 
     <template #footer>
       <EText :style="emailStyles.footer">
-        If you didn't expect this invitation, you can safely ignore this email.
+        {{ t("emails.admin_invite.footer") }}
       </EText>
     </template>
   </EmailLayout>

package/frontend-vue/layers/dms-layout/app/error.vue

@@ -34,6 +34,13 @@ const DEFAULT_ERROR_CONFIG = {
 
 const DEFAULT_STATUS_CODE = 500;
 
+// Their cards already say what happened; the message behind them is the
+// technical cause ("DMS backend request failed"), which the server has logged.
+const STATUSES_WITHOUT_ERROR_MESSAGE = new Set([
+  HTTP_NOT_FOUND,
+  HTTP_FORBIDDEN,
+]);
+
 const props = defineProps<{
   error: DmsErrorData;
 }>();
@@ -45,6 +52,14 @@ const { loggedIn, reconcileSession, redirectToAuth } = useSessionRecovery();
 
 const isRecovering = ref(false);
 
+const visibleErrorMessage = computed(() =>
+  STATUSES_WITHOUT_ERROR_MESSAGE.has(
+    props.error.statusCode || DEFAULT_STATUS_CODE,
+  )
+    ? undefined
+    : props.error.message,
+);
+
 const errorConfig = computed(() => {
   const statusCode = props.error.statusCode || DEFAULT_STATUS_CODE;
   const config = ERROR_CONFIGS[statusCode] || DEFAULT_ERROR_CONFIG;
@@ -121,10 +136,10 @@ onMounted(() => {
         </p>
 
         <p
-          v-if="!isRecovering && error.message"
+          v-if="!isRecovering && visibleErrorMessage"
           class="text-dimmed mb-6 text-sm"
         >
-          {{ error.message }}
+          {{ visibleErrorMessage }}
         </p>
 
         <div v-if="!isRecovering" class="flex gap-3">

package/frontend-vue/layers/dms-layout/app/types/page.ts

@@ -65,9 +65,30 @@ export type SiteLayoutTree = Omit<PageInfo, "layoutUrl"> & {
   layoutUrl?: string;
   hasAccess?: boolean;
 };
+// Mirror of LayoutBannerVariant from @antelopejs/interface-dms/layout-banners.
+export type LayoutBannerVariant = "info" | "warning" | "error";
+
+/**
+ * Mirror of the backend's serialized layout banner. The payload only carries
+ * the banners whose visibility resolver passed for this request, so there is
+ * nothing left to decide here but the user's own dismissals.
+ */
+export interface LayoutBanner {
+  key: string;
+  variant: LayoutBannerVariant;
+  order: number;
+  dismissible: boolean;
+  icon?: string;
+  text?: string;
+  component?: string;
+  props?: Record<string, unknown>;
+}
+
 export type SiteLayout = {
   pages: Record<string, PageInfo>;
   categories: Record<string, CategoryInfo>;
+  /** Absent when the backend predates layout banners. */
+  banners?: LayoutBanner[];
 };
 
 export interface QuickActionCategoryInfo {
@@ -80,6 +101,7 @@ export interface QuickActionCategoryInfo {
 export type QuickActionTarget =
   | { type: "navigate"; to: string; query?: Record<string, string> }
   | { type: "openForm"; to: string; component: string }
+  | { type: "button"; to: string; component: string; button: string }
   | { type: "event"; name: string; payload?: unknown };
 
 /**