@antelopejs/dms 0.4.5 → 0.4.7

package/dist/utils/admin-invite-email.js

@@ -0,0 +1,51 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+exports.resolveAdminInviteLanguage = resolveAdminInviteLanguage;
+exports.buildAdminInviteSubject = buildAdminInviteSubject;
+exports.buildAdminInviteSignupLink = buildAdminInviteSignupLink;
+const DEFAULT_LANGUAGE = "en";
+const LANGUAGE_CODE_LENGTH = 2;
+const SUBJECT_COPY = {
+    en: {
+        generic: "You're Invited to Join",
+        join: (target) => `You're invited to join ${target}`,
+        joinFromInviter: (inviter, target) => `${inviter} invited you to join ${target}`,
+        workspaceOnPlatform: (workspace, platform) => `${workspace} on ${platform}`,
+    },
+    fr: {
+        generic: "Vous êtes invité à nous rejoindre",
+        join: (target) => `Vous êtes invité à rejoindre ${target}`,
+        joinFromInviter: (inviter, target) => `${inviter} vous invite à rejoindre ${target}`,
+        workspaceOnPlatform: (workspace, platform) => `${workspace} sur ${platform}`,
+    },
+};
+function resolveAdminInviteLanguage(language) {
+    const code = language?.slice(0, LANGUAGE_CODE_LENGTH).toLowerCase();
+    return code && Object.hasOwn(SUBJECT_COPY, code) ? code : DEFAULT_LANGUAGE;
+}
+function joinTarget(copy, names) {
+    const { workspaceName, platformName } = names;
+    if (workspaceName && platformName) {
+        return copy.workspaceOnPlatform(workspaceName, platformName);
+    }
+    return workspaceName || platformName;
+}
+function buildAdminInviteSubject(names, language) {
+    const copy = SUBJECT_COPY[resolveAdminInviteLanguage(language)];
+    const target = joinTarget(copy, names);
+    if (!target) {
+        return copy.generic;
+    }
+    return names.inviterName
+        ? copy.joinFromInviter(names.inviterName, target)
+        : copy.join(target);
+}
+function buildAdminInviteSignupLink(clientBaseUrl, { email, token, inviteeName, language }) {
+    const query = new URLSearchParams({ token, email });
+    if (inviteeName)
+        query.set("name", inviteeName);
+    if (language)
+        query.set("lang", language);
+    return `${clientBaseUrl}/auth/signup?${query.toString()}`;
+}
+//# sourceMappingURL=admin-invite-email.js.map

package/dist/utils/admin-invite-email.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"admin-invite-email.js","sourceRoot":"","sources":["../../src/utils/admin-invite-email.ts"],"names":[],"mappings":";;AAyCA,gEAGC;AAiBD,0DAYC;AAcD,gEAQC;AA/FD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,oBAAoB,GAAG,CAAC,CAAC;AAkB/B,MAAM,YAAY,GAA2C;IAC3D,EAAE,EAAE;QACF,OAAO,EAAE,wBAAwB;QACjC,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,0BAA0B,MAAM,EAAE;QACpD,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,GAAG,OAAO,wBAAwB,MAAM,EAAE;QAC5C,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAAC,GAAG,SAAS,OAAO,QAAQ,EAAE;KAC5E;IACD,EAAE,EAAE;QACF,OAAO,EAAE,mCAAmC;QAC5C,IAAI,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,gCAAgC,MAAM,EAAE;QAC1D,eAAe,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE,CACnC,GAAG,OAAO,4BAA4B,MAAM,EAAE;QAChD,mBAAmB,EAAE,CAAC,SAAS,EAAE,QAAQ,EAAE,EAAE,CAC3C,GAAG,SAAS,QAAQ,QAAQ,EAAE;KACjC;CACF,CAAC;AAMF,SAAgB,0BAA0B,CAAC,QAAiB;IAC1D,MAAM,IAAI,GAAG,QAAQ,EAAE,KAAK,CAAC,CAAC,EAAE,oBAAoB,CAAC,CAAC,WAAW,EAAE,CAAC;IACpE,OAAO,IAAI,IAAI,MAAM,CAAC,MAAM,CAAC,YAAY,EAAE,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,gBAAgB,CAAC;AAC7E,CAAC;AAED,SAAS,UAAU,CACjB,IAA4B,EAC5B,KAA4B;IAE5B,MAAM,EAAE,aAAa,EAAE,YAAY,EAAE,GAAG,KAAK,CAAC;IAC9C,IAAI,aAAa,IAAI,YAAY,EAAE,CAAC;QAClC,OAAO,IAAI,CAAC,mBAAmB,CAAC,aAAa,EAAE,YAAY,CAAC,CAAC;IAC/D,CAAC;IACD,OAAO,aAAa,IAAI,YAAY,CAAC;AACvC,CAAC;AAMD,SAAgB,uBAAuB,CACrC,KAA4B,EAC5B,QAAiB;IAEjB,MAAM,IAAI,GAAG,YAAY,CAAC,0BAA0B,CAAC,QAAQ,CAAC,CAAC,CAAC;IAChE,MAAM,MAAM,GAAG,UAAU,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC;IACvC,IAAI,CAAC,MAAM,EAAE,CAAC;QACZ,OAAO,IAAI,CAAC,OAAO,CAAC;IACtB,CAAC;IACD,OAAO,KAAK,CAAC,WAAW;QACtB,CAAC,CAAC,IAAI,CAAC,eAAe,CAAC,KAAK,CAAC,WAAW,EAAE,MAAM,CAAC;QACjD,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AACxB,CAAC;AAcD,SAAgB,0BAA0B,CACxC,aAAqB,EACrB,EAAE,KAAK,EAAE,KAAK,EAAE,WAAW,EAAE,QAAQ,EAA2B;IAEhE,MAAM,KAAK,GAAG,IAAI,eAAe,CAAC,EAAE,KAAK,EAAE,KAAK,EAAE,CAAC,CAAC;IACpD,IAAI,WAAW;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,WAAW,CAAC,CAAC;IAChD,IAAI,QAAQ;QAAE,KAAK,CAAC,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;IAC1C,OAAO,GAAG,aAAa,gBAAgB,KAAK,CAAC,QAAQ,EAAE,EAAE,CAAC;AAC5D,CAAC"}

package/dist/utils/index.d.ts

@@ -4,6 +4,5 @@ export * from "./export-jobs-run";
 export * from "./run-in-batches";
 export * from "./tenant-export-archive";
 export * from "@antelopejs/interface-dms/utils/row-instance";
-export * from "@antelopejs/interface-dms/utils/saas-mode";
 export * from "@antelopejs/interface-dms/utils/time";
 export * from "@antelopejs/interface-dms/utils/value-parser";

package/dist/utils/index.js

@@ -20,7 +20,6 @@ __exportStar(require("./export-jobs-run"), exports);
 __exportStar(require("./run-in-batches"), exports);
 __exportStar(require("./tenant-export-archive"), exports);
 __exportStar(require("@antelopejs/interface-dms/utils/row-instance"), exports);
-__exportStar(require("@antelopejs/interface-dms/utils/saas-mode"), exports);
 __exportStar(require("@antelopejs/interface-dms/utils/time"), exports);
 __exportStar(require("@antelopejs/interface-dms/utils/value-parser"), exports);
 //# sourceMappingURL=index.js.map

package/dist/utils/index.js.map

@@ -1 +1 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,gDAA8B;AAC9B,oDAAkC;AAClC,mDAAiC;AACjC,0DAAwC;AACxC,+EAA6D;AAC7D,4EAA0D;AAC1D,uEAAqD;AACrD,+EAA6D"}
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../../src/utils/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,0DAAwC;AACxC,gDAA8B;AAC9B,oDAAkC;AAClC,mDAAiC;AACjC,0DAAwC;AACxC,+EAA6D;AAC7D,uEAAqD;AACrD,+EAA6D"}

package/dist/validation/auth.schema.d.ts

@@ -4,20 +4,20 @@ export declare const authSchema: {
         name: z.ZodString;
         email: z.ZodString;
         password: z.ZodString;
-        lang: z.ZodString;
+        lang: z.ZodOptional<z.ZodString>;
         token: z.ZodString;
     }, "strip", z.ZodTypeAny, {
         token: string;
         name: string;
         password: string;
         email: string;
-        lang: string;
+        lang?: string | undefined;
     }, {
         token: string;
         name: string;
         password: string;
         email: string;
-        lang: string;
+        lang?: string | undefined;
     }>;
     login: z.ZodObject<{
         email: z.ZodString;

package/dist/validation/auth.schema.js

@@ -44,7 +44,7 @@ exports.authSchema = {
         name: z.string(),
         email: z.string().email(),
         password: password_1.passwordSchema,
-        lang: z.string(),
+        lang: z.string().optional(),
         token: z.string(),
     }),
     login: z.object({

package/dist/validation/auth.schema.js.map

@@ -1 +1 @@
-{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}
+{"version":3,"file":"auth.schema.js","sourceRoot":"","sources":["../../src/validation/auth.schema.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEzB,yCAA4C;AAE5C,MAAM,+BAA+B,GAAG,IAAI,CAAC;AAC7C,MAAM,uBAAuB,GAAG,EAAE,CAAC;AACnC,MAAM,uBAAuB,GAAG,GAAG,CAAC;AAEvB,QAAA,UAAU,GAAG;IACxB,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;QACxB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE;QAC3B,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE;QACpB,UAAU,EAAE,CAAC,CAAC,OAAO,EAAE,CAAC,QAAQ,EAAE;KACnC,CAAC;IACF,aAAa,EAAE,CAAC,CAAC,MAAM,CAAC;QACtB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC5D,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QAC7D,YAAY,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,+BAA+B,CAAC;QACpE,QAAQ,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;QAC5D,MAAM,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,uBAAuB,CAAC,CAAC,QAAQ,EAAE;KAC3D,CAAC;IACF,OAAO,EAAE,CAAC,CAAC,MAAM,CAAC;QAChB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,MAAM,EAAE,CAAC,CAAC,MAAM,CAAC;QACf,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,2BAA2B,EAAE,CAAC,CAAC,MAAM,CAAC;QACpC,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;KAC1B,CAAC;IACF,KAAK,EAAE,CAAC,CAAC,MAAM,CAAC;QACd,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE,CAAC,KAAK,EAAE;QACzB,QAAQ,EAAE,yBAAc;KACzB,CAAC;IACF,SAAS,EAAE,CAAC,CAAC,MAAM,CAAC;QAClB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;QACjB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;QAChB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,EAAE,QAAQ,CAAC,CAAC;KAC5C,CAAC;IACF,eAAe,EAAE,CAAC,CAAC,MAAM,CAAC;QACxB,KAAK,EAAE,CAAC,CAAC,MAAM,EAAE;KAClB,CAAC;IACF,WAAW,EAAE,CAAC,CAAC,MAAM,CAAC;QACpB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,MAAM,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;QACjC,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;IACF,gBAAgB,EAAE,CAAC,CAAC,MAAM,CAAC;QACzB,IAAI,EAAE,CAAC,CAAC,MAAM,EAAE;KACjB,CAAC;CACH,CAAC"}

package/dist/validation/password.d.ts

@@ -1,3 +1,2 @@
 import * as z from "zod";
-export declare const PASSWORD_REGEX: RegExp;
 export declare const passwordSchema: z.ZodString;

package/dist/validation/password.js

@@ -33,8 +33,11 @@ var __importStar = (this && this.__importStar) || (function () {
     };
 })();
 Object.defineProperty(exports, "__esModule", { value: true });
-exports.passwordSchema = exports.PASSWORD_REGEX = void 0;
+exports.passwordSchema = void 0;
 const z = __importStar(require("zod"));
-exports.PASSWORD_REGEX = /^(?=.*[A-Z])(?=.*\d)(?=.*[@$!%*?&])[A-Za-z\d@$!%*?&]+$/;
-exports.passwordSchema = z.string().min(8).regex(exports.PASSWORD_REGEX);
+const password_1 = require("@antelopejs/interface-dms/auth/password");
+exports.passwordSchema = z
+    .string()
+    .min(password_1.PASSWORD_MIN_LENGTH)
+    .regex(password_1.PASSWORD_PATTERN);
 //# sourceMappingURL=password.js.map

package/dist/validation/password.js.map

@@ -1 +1 @@
-{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/validation/password.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AAEZ,QAAA,cAAc,GACzB,wDAAwD,CAAC;AAE9C,QAAA,cAAc,GAAG,CAAC,CAAC,MAAM,EAAE,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,sBAAc,CAAC,CAAC"}
+{"version":3,"file":"password.js","sourceRoot":"","sources":["../../src/validation/password.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;AAAA,uCAAyB;AACzB,sEAGiD;AAEpC,QAAA,cAAc,GAAG,CAAC;KAC5B,MAAM,EAAE;KACR,GAAG,CAAC,8BAAmB,CAAC;KACxB,KAAK,CAAC,2BAAgB,CAAC,CAAC"}

package/frontend-vue/layers/dms-auth/app/custom-pages/auth/signup.vue

@@ -4,7 +4,7 @@ import type { FormSubmitEvent } from "@nuxt/ui";
 
 const MIN_VALID_PASSWORD_SCORE = 4;
 
-const { locale } = useI18n();
+const { locale, locales, setLocale } = useI18n();
 const config = useDmsRuntimeConfig();
 const homepage = useHomepage();
 
@@ -12,13 +12,20 @@ const route = useDmsRoute();
 const queryToken = computed(() => route.query.token as string);
 const queryEmail = computed(() => route.query.email as string);
 const queryName = computed(() => route.query.name as string | undefined);
+// Only an invitation email links here, so a link without its token was cut
+// short on the way: say so, rather than answering with a server error.
+const hasInvitationToken = computed(
+  () => typeof queryToken.value === "string" && queryToken.value !== "",
+);
 
-if (!queryToken.value) {
-  throw createError({
-    statusCode: HTTP_BAD_REQUEST,
-    statusMessage: INVALID_REQUEST,
-    message: "Missing required token parameter",
-  });
+// The invitation link carries the language the invitee was invited in: the
+// page opens in it, and the footer switcher still lets them pick another one
+// before the account is created with whichever is current.
+const invitationLanguage = locales.value.find(
+  (available) => available.code === route.query.lang,
+);
+if (invitationLanguage && invitationLanguage.code !== locale.value) {
+  void setLocale(invitationLanguage.code);
 }
 
 const isLoading = ref(false);
@@ -66,7 +73,29 @@ async function onSubmit(payload: FormSubmitEvent<Schema>) {
 </script>
 
 <template>
-  <div class="mx-auto max-w-xl">
+  <div v-if="!hasInvitationToken" class="mx-auto max-w-md">
+    <DmsCard
+      variant="elevated"
+      :padded="false"
+      class="p-6 sm:p-12"
+      data-testid="signup-invalid-invitation"
+    >
+      <UIcon
+        name="i-ph-link-break"
+        class="text-warning mb-4 size-10"
+        :aria-hidden="true"
+      />
+      <h1 class="pb-5 text-2xl font-bold">
+        {{ $t("page.signup.invalid_invitation_title") }}
+      </h1>
+      <p class="text-muted pb-7 text-sm font-normal">
+        {{ $t("page.signup.invalid_invitation_description") }}
+      </p>
+      <UButton :label="$t('button.login')" to="/auth" block />
+    </DmsCard>
+  </div>
+
+  <div v-else class="mx-auto max-w-xl">
     <DmsCard variant="elevated" :padded="false" class="p-6 sm:p-12">
       <h1 class="pb-11 text-xl font-bold sm:text-2xl">
         {{ $t("page.signup.create_account_title") }}

package/frontend-vue/layers/dms-auth/i18n/locales/auth-en-GB.json

@@ -15,7 +15,9 @@
     },
     "signup": {
       "create_account_title": "Create your account",
-      "error_title": "Account creation error"
+      "error_title": "Account creation error",
+      "invalid_invitation_title": "This invitation link is invalid or incomplete",
+      "invalid_invitation_description": "Open the link from your invitation email again, or ask the workspace owner to send you a new invitation. Already have an account? Log in."
     },
     "2fa": {
       "title": "Two-factor verification",

package/frontend-vue/layers/dms-auth/i18n/locales/auth-fr-FR.json

@@ -15,7 +15,9 @@
     },
     "signup": {
       "create_account_title": "Créer votre compte",
-      "error_title": "Erreur de création de compte"
+      "error_title": "Erreur de création de compte",
+      "invalid_invitation_title": "Ce lien d'invitation est invalide ou incomplet",
+      "invalid_invitation_description": "Rouvrez le lien de votre e-mail d'invitation, ou demandez au propriétaire de l'espace de travail de vous envoyer une nouvelle invitation. Vous avez déjà un compte ? Connectez-vous."
     },
     "2fa": {
       "title": "Vérification à deux facteurs",

package/frontend-vue/layers/dms-core/i18n/locales/core-en-GB.json

@@ -44,6 +44,10 @@
       "title": "Restoring your session...",
       "description": "Your session has expired. Refreshing your access and reloading the page."
     },
+    "network": {
+      "title": "Connection lost",
+      "description": "The server could not be reached. Check your connection and try again."
+    },
     "switch_account_failed": "Failed to switch account",
     "email_already_used": "This email address is already used.",
     "user_not_found": "No user found with this email address.",

package/frontend-vue/layers/dms-core/i18n/locales/core-fr-FR.json

@@ -44,6 +44,10 @@
       "title": "Restauration de votre session...",
       "description": "Votre session a expiré. Renouvellement de l'accès et rechargement de la page."
     },
+    "network": {
+      "title": "Connexion perdue",
+      "description": "Le serveur est injoignable. Vérifiez votre connexion et réessayez."
+    },
     "switch_account_failed": "Échec du changement de compte",
     "email_already_requested": "Cette adresse e-mail a déjà été demandée. Veuillez attendre avant de réessayer.",
     "email_already_used": "Cette adresse e-mail est déjà utilisée.",

package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardBanners.vue

@@ -0,0 +1,50 @@
+<script setup lang="ts">
+/**
+ * Stacks the global layout banners under the dashboard header, on every page
+ * of the dashboard layout. Each banner carries its own live-region role, so a
+ * banner appearing after a navigation is announced as well.
+ */
+const { banners, dismiss } = useLayoutBanners();
+const { processI18n } = useTranslation();
+
+const entries = computed(() =>
+  banners.value.map((banner) => ({
+    banner,
+    presentation: resolveLayoutBannerPresentation(banner),
+  })),
+);
+</script>
+
+<template>
+  <div
+    v-if="entries.length"
+    data-dms-layout-banners
+    class="border-default flex flex-col border-b"
+  >
+    <div
+      v-for="{ banner, presentation } in entries"
+      :key="banner.key"
+      :role="presentation.role"
+      :data-dms-layout-banner="banner.key"
+    >
+      <UAlert
+        variant="subtle"
+        orientation="horizontal"
+        :color="presentation.color"
+        :icon="presentation.icon"
+        :close="banner.dismissible"
+        class="rounded-none px-4 py-2.5 sm:px-6"
+        @update:open="dismiss(banner.key)"
+      >
+        <template #description>
+          <component
+            :is="banner.component"
+            v-if="banner.component"
+            v-bind="banner.props"
+          />
+          <template v-else>{{ processI18n(banner.text ?? "") }}</template>
+        </template>
+      </UAlert>
+    </div>
+  </div>
+</template>

package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardHeader.vue

@@ -58,22 +58,21 @@ const { processI18n } = useTranslation();
 const favoritePages = useFavoritePages();
 
 const currentPageInfo = computed((): FavoritePage | null => {
-  const currentPath = route.path;
-  const matchedRoute = siteLayout.findMatchingRoute(currentPath);
+  const matchedRoute = siteLayout.findMatchingRoute(route.path);
 
   if (!matchedRoute) {
     return null;
   }
 
-  return {
-    id: matchedRoute.metadata.id || currentPath,
-    path: currentPath,
-    title:
-      matchedRoute.metadata.displayName ||
-      route.name?.toString() ||
-      currentPath,
-    icon: matchedRoute.metadata.icon,
-  };
+  return buildFavoritePage({
+    path: route.path,
+    metadata: {
+      ...matchedRoute.metadata,
+      displayName: matchedRoute.metadata.displayName || route.name?.toString(),
+    },
+    query: route.query,
+    translate: processI18n,
+  });
 });
 
 const isCurrentPageFavorite = computed(() => {
@@ -112,11 +111,15 @@ const breadcrumb = computed((): BreadcrumbItem[] => {
           return null;
         }
 
-        const isPage = "layoutUrl" in matchingRoute.metadata;
+        const target = buildBreadcrumbTarget(
+          to,
+          matchingRoute.metadata,
+          route.query,
+        );
 
         return {
           label: processI18n(matchingRoute.metadata?.displayName || path),
-          ...(isPage ? { to } : {}),
+          ...(target ? { to: target } : {}),
         };
       })
       .filter((item) => item !== null),

package/frontend-vue/layers/dms-layout/app/build/components/layout/DashboardSidebar.vue

@@ -42,8 +42,8 @@ if (!siteLayout.siteLayout.value) {
 
 const favoritePages = useFavoritePages();
 
-favoritePages.cleanupInvalidFavorites(
-  (path) => siteLayout.findMatchingRoute(path) !== null,
+favoritePages.cleanupInvalidFavorites((path) =>
+  isFavoritePathValid(path, siteLayout.findMatchingRoute),
 );
 
 const isOwner = useIsOwner();

package/frontend-vue/layers/dms-layout/app/build/components/notification/NotificationPopover.vue

@@ -1,6 +1,7 @@
 <script setup lang="ts">
 import { formatRelativeTime } from "#dms-core/app/utils/formatter";
 import NotificationCard from "./NotificationCard.vue";
+import { settleWidgetRequest } from "./widgetRequest";
 
 const MAX_DISPLAYED_COUNT = 99;
 
@@ -25,9 +26,14 @@ const { isLoadingMore, setupObserver, disconnectObserver } = useInfiniteScroll(
   hasMore,
 );
 
+const refreshUnreadCount = () =>
+  settleWidgetRequest(fetchUnreadCount, () => {
+    unreadCount.value = 0;
+  });
+
 const handleNotificationEvent = async () => {
   if (!isOpen.value) {
-    await fetchUnreadCount();
+    await refreshUnreadCount();
   }
 };
 
@@ -37,14 +43,14 @@ const handleFormSubmitSuccess = async (event: Event) => {
 
   if (submitUrl && submitUrl.includes("/api/notification/")) {
     if (!isOpen.value) {
-      await fetchUnreadCount();
+      await refreshUnreadCount();
     }
   }
 };
 
 const markNotificationsAsRead = async () => {
   if (hasBeenOpened.value) {
-    await markAllAsRead();
+    await settleWidgetRequest(markAllAsRead);
     hasBeenOpened.value = false;
   }
 };
@@ -57,7 +63,7 @@ const handleBeforeUnload = () => {
 
 onMounted(async () => {
   if (!loggedIn.value) return;
-  await fetchUnreadCount();
+  await refreshUnreadCount();
 
   window.addEventListener(
     NotificationEvents.NOTIFICATION_RECEIVED,
@@ -87,7 +93,7 @@ onUnmounted(() => {
 watch(isOpen, async (isNowOpen) => {
   if (isNowOpen) {
     hasBeenOpened.value = true;
-    await fetchNotifications(true);
+    await settleWidgetRequest(() => fetchNotifications(true));
     await nextTick();
     setupObserver();
   } else {

package/frontend-vue/layers/dms-layout/app/build/components/notification/widgetRequest.ts

@@ -0,0 +1,20 @@
+const WIDGET_REQUEST_FAILED_MESSAGE = "[dms] Header widget request failed";
+
+/**
+ * Runs a request a layout widget issues on its own (on mount, on a realtime
+ * event, on open). A failure -- a tenant access gate answering 403, a network
+ * error -- is logged and degrades the widget through `onFailure` instead of
+ * reaching the app error handler, which would replace the whole page with an
+ * error screen.
+ */
+export async function settleWidgetRequest(
+  request: () => Promise<unknown>,
+  onFailure?: () => void,
+): Promise<void> {
+  try {
+    await request();
+  } catch (error) {
+    onFailure?.();
+    console.warn(WIDGET_REQUEST_FAILED_MESSAGE, error);
+  }
+}

package/frontend-vue/layers/dms-layout/app/composables/layout/useLayoutBanners.ts

@@ -0,0 +1,59 @@
+const DISMISSED_BANNERS_COOKIE = "dms-dismissed-banners";
+
+type LayoutBannerRole = "status" | "alert";
+
+interface LayoutBannerPresentation {
+  role: LayoutBannerRole;
+  color: LayoutBannerVariant;
+  icon: string;
+}
+
+// An error interrupts the screen reader; info and warning wait their turn.
+const PRESENTATIONS: Record<LayoutBannerVariant, LayoutBannerPresentation> = {
+  info: { role: "status", color: "info", icon: "i-ph-info-light" },
+  warning: { role: "status", color: "warning", icon: "i-ph-warning-light" },
+  error: { role: "alert", color: "error", icon: "i-ph-warning-octagon-light" },
+};
+
+/**
+ * Role, color and icon a banner renders with. An unknown variant — from a
+ * newer backend, or an untyped registration — renders as `info` rather than
+ * as an unstyled strip.
+ */
+export const resolveLayoutBannerPresentation = (
+  banner: LayoutBanner,
+): LayoutBannerPresentation => {
+  const presentation = PRESENTATIONS[banner.variant] ?? PRESENTATIONS.info;
+  return { ...presentation, icon: banner.icon ?? presentation.icon };
+};
+
+/**
+ * The global banners rendered under the dashboard header, as resolved by the
+ * server for this request (see `RegisterLayoutBanner` in
+ * `@antelopejs/interface-dms/layout-banners`), minus the ones the user
+ * dismissed.
+ *
+ * Dismissals are kept in a session cookie rather than in local storage so the
+ * server-rendered page already leaves a dismissed banner out, instead of
+ * painting it and removing it on hydration.
+ */
+export const useLayoutBanners = () => {
+  const { siteLayout } = useSiteLayout();
+  const dismissed = useDmsCookie<string[]>(DISMISSED_BANNERS_COOKIE, {
+    default: () => [],
+    sameSite: "lax",
+  });
+
+  const banners = computed<LayoutBanner[]>(() =>
+    (siteLayout.value?.banners ?? []).filter(
+      (banner) => !banner.dismissible || !dismissed.value.includes(banner.key),
+    ),
+  );
+
+  function dismiss(key: string): void {
+    if (dismissed.value.includes(key)) return;
+    dismissed.value = [...dismissed.value, key];
+  }
+
+  return { banners, dismiss };
+};

package/frontend-vue/layers/dms-layout/app/composables/page/useQuickActions.ts

@@ -1,5 +1,7 @@
 import {
   QUICK_ACTION_ADD,
+  QUICK_ACTION_BUTTON,
+  QUICK_ACTION_BUTTON_KEY,
   QUICK_ACTION_COMPONENT_KEY,
   QUICK_ACTION_QUERY_KEY,
 } from "#dms-ui/app/types/quick-actions";
@@ -32,6 +34,17 @@ const targetHandlers: Record<
       },
     });
   },
+  button: (target) => {
+    if (target.type !== "button") return;
+    return navigateDms({
+      path: target.to,
+      query: {
+        [QUICK_ACTION_QUERY_KEY]: QUICK_ACTION_BUTTON,
+        [QUICK_ACTION_COMPONENT_KEY]: target.component,
+        [QUICK_ACTION_BUTTON_KEY]: target.button,
+      },
+    });
+  },
   event: (target) => {
     if (target.type !== "event") return;
     if (typeof window === "undefined") return;
@@ -43,8 +56,8 @@ const targetHandlers: Record<
 
 /**
  * Runs the client-side behavior a quick action declares through its
- * discriminated `target`: `navigate` and `openForm` route to the action's
- * page, `event` dispatches a window `CustomEvent` in place for whoever
+ * discriminated `target`: `navigate`, `openForm` and `button` route to the
+ * action's page, `event` dispatches a window `CustomEvent` in place for whoever
  * listens.
  */
 export function dispatchQuickActionTarget(target: QuickActionTarget): unknown {

package/frontend-vue/layers/dms-layout/app/custom-layouts/DefaultLayout.vue

@@ -3,6 +3,7 @@ import Container from "../build/components/layout/Container.vue";
 import PageHeader from "../build/components/layout/PageHeader.vue";
 import DashboardSidebar from "../build/components/layout/DashboardSidebar.vue";
 import DashboardHeader from "../build/components/layout/DashboardHeader.vue";
+import DashboardBanners from "../build/components/layout/DashboardBanners.vue";
 
 interface Props {
   fullWidth?: boolean;
@@ -28,6 +29,7 @@ const props = withDefaults(defineProps<Props>(), {
     <UDashboardPanel>
       <template #header>
         <DashboardHeader />
+        <DashboardBanners />
       </template>
 
       <template #body>