@antelopejs/dms 0.7.13 → 0.7.15

package/dist/test/unit/implementations/dms/frontend-public-endpoints.test.js

@@ -0,0 +1,74 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const page_1 = require("../../../../implementations/dms/page");
+const RENDERER = { name: "public-endpoints-test", version: "1" };
+function register(name, publicEndpoints) {
+    const config = {
+        name,
+        sourcePath: process.cwd(),
+        renderer: RENDERER,
+    };
+    if (publicEndpoints)
+        config.publicEndpoints = publicEndpoints;
+    (0, page_1.AddFrontendModule)(config);
+}
+function endpointsOf(name) {
+    return (0, page_1.GetFrontendModules)().find((module) => module.name === name)
+        ?.publicEndpoints;
+}
+describe("[unit] frontend module public endpoints", () => {
+    it("defaults to declaring none", () => {
+        register("public-none");
+        (0, chai_1.expect)(endpointsOf("public-none")).to.deep.equal([]);
+    });
+    it("spells out the methods and lowercases the headers", () => {
+        register("public-declared", [
+            {
+                path: "/api/mailing/events/*/*",
+                headers: ["X-Mailing-Webhook-Secret"],
+            },
+            { path: "/api/hooks/stripe", methods: ["post", "PUT"] },
+        ]);
+        (0, chai_1.expect)(endpointsOf("public-declared")).to.deep.equal([
+            {
+                path: "/api/mailing/events/*/*",
+                methods: ["POST"],
+                headers: ["x-mailing-webhook-secret"],
+            },
+            { path: "/api/hooks/stripe", methods: ["POST", "PUT"], headers: [] },
+        ]);
+    });
+    it("hands out a copy the caller cannot use to widen the declaration", () => {
+        register("public-copy", [{ path: "/api/hooks/stripe" }]);
+        endpointsOf("public-copy")?.[0]?.headers?.push("x-other");
+        (0, chai_1.expect)(endpointsOf("public-copy")?.[0]?.headers).to.deep.equal([]);
+    });
+    for (const endpoint of [
+        { path: "/hooks/stripe" },
+        { path: "/api/../auth/login" },
+        { path: "/api/hooks?token=1" },
+        { path: "/api/hooks/**" },
+        { path: "/api" },
+        { path: "/api/" },
+        { path: "/api/*" },
+        { path: "/api/*/events" },
+        { path: "/api//hooks" },
+        { path: "/api/hooks/" },
+        { path: "/api/hooks/../../auth/login" },
+        { path: "/api/hooks/./stripe" },
+        { path: "/api/%2e%2e/auth/login" },
+        { path: "/api/hooks\\..\\auth" },
+        { path: "/api/hooks", methods: [] },
+        { path: "/api/hooks", methods: ["TRACE"] },
+        { path: "/api/hooks", headers: ["authorization"] },
+        { path: "/api/hooks", headers: ["x-forwarded-host"] },
+        { path: "/api/hooks", headers: ["x-dms-oauth-relay"] },
+        "/api/hooks",
+    ]) {
+        it(`refuses to register ${JSON.stringify(endpoint)}`, () => {
+            (0, chai_1.expect)(() => register("public-invalid", [endpoint])).to.throw(/invalid publicEndpoints/);
+        });
+    }
+});
+//# sourceMappingURL=frontend-public-endpoints.test.js.map

package/dist/test/unit/implementations/dms/frontend-public-endpoints.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"frontend-public-endpoints.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/frontend-public-endpoints.test.ts"],"names":[],"mappings":";;AAIA,+BAA8B;AAC9B,+DAG8C;AAE9C,MAAM,QAAQ,GAAG,EAAE,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;AAEjE,SAAS,QAAQ,CAAC,IAAY,EAAE,eAA0C;IACxE,MAAM,MAAM,GAA6B;QACvC,IAAI;QACJ,UAAU,EAAE,OAAO,CAAC,GAAG,EAAE;QACzB,QAAQ,EAAE,QAAQ;KACnB,CAAC;IACF,IAAI,eAAe;QAAE,MAAM,CAAC,eAAe,GAAG,eAAe,CAAC;IAC9D,IAAA,wBAAiB,EAAC,MAAM,CAAC,CAAC;AAC5B,CAAC;AAED,SAAS,WAAW,CAAC,IAAY;IAC/B,OAAO,IAAA,yBAAkB,GAAE,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,KAAK,IAAI,CAAC;QAChE,EAAE,eAAe,CAAC;AACtB,CAAC;AAED,QAAQ,CAAC,yCAAyC,EAAE,GAAG,EAAE;IACvD,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,QAAQ,CAAC,aAAa,CAAC,CAAC;QACxB,IAAA,aAAM,EAAC,WAAW,CAAC,aAAa,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACvD,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,QAAQ,CAAC,iBAAiB,EAAE;YAC1B;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,CAAC,0BAA0B,CAAC;aACtC;YACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE;SACxD,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,WAAW,CAAC,iBAAiB,CAAC,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YACnD;gBACE,IAAI,EAAE,yBAAyB;gBAC/B,OAAO,EAAE,CAAC,MAAM,CAAC;gBACjB,OAAO,EAAE,CAAC,0BAA0B,CAAC;aACtC;YACD,EAAE,IAAI,EAAE,mBAAmB,EAAE,OAAO,EAAE,CAAC,MAAM,EAAE,KAAK,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;SACrE,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,iEAAiE,EAAE,GAAG,EAAE;QACzE,QAAQ,CAAC,aAAa,EAAE,CAAC,EAAE,IAAI,EAAE,mBAAmB,EAAE,CAAC,CAAC,CAAC;QACzD,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,EAAE,IAAI,CAAC,SAAS,CAAC,CAAC;QAC1D,IAAA,aAAM,EAAC,WAAW,CAAC,aAAa,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;IACrE,CAAC,CAAC,CAAC;IAEH,KAAK,MAAM,QAAQ,IAAI;QACrB,EAAE,IAAI,EAAE,eAAe,EAAE;QACzB,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC9B,EAAE,IAAI,EAAE,oBAAoB,EAAE;QAC9B,EAAE,IAAI,EAAE,eAAe,EAAE;QACzB,EAAE,IAAI,EAAE,MAAM,EAAE;QAChB,EAAE,IAAI,EAAE,OAAO,EAAE;QACjB,EAAE,IAAI,EAAE,QAAQ,EAAE;QAClB,EAAE,IAAI,EAAE,eAAe,EAAE;QACzB,EAAE,IAAI,EAAE,aAAa,EAAE;QACvB,EAAE,IAAI,EAAE,aAAa,EAAE;QACvB,EAAE,IAAI,EAAE,6BAA6B,EAAE;QACvC,EAAE,IAAI,EAAE,qBAAqB,EAAE;QAC/B,EAAE,IAAI,EAAE,wBAAwB,EAAE;QAClC,EAAE,IAAI,EAAE,sBAAsB,EAAE;QAChC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,EAAE,EAAE;QACnC,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,OAAO,CAAC,EAAE;QAC1C,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,eAAe,CAAC,EAAE;QAClD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,kBAAkB,CAAC,EAAE;QACrD,EAAE,IAAI,EAAE,YAAY,EAAE,OAAO,EAAE,CAAC,mBAAmB,CAAC,EAAE;QACtD,YAAiD;KAClD,EAAE,CAAC;QACF,EAAE,CAAC,uBAAuB,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,EAAE,EAAE,GAAG,EAAE;YACzD,IAAA,aAAM,EAAC,GAAG,EAAE,CAAC,QAAQ,CAAC,gBAAgB,EAAE,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAC3D,yBAAyB,CAC1B,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC;AACH,CAAC,CAAC,CAAC"}

package/dist/test/unit/implementations/dms/manifest-strip.test.js

@@ -15,6 +15,9 @@ function buildManifest() {
                 options: { baseURL: "https://api.example.com" },
                 privateOptions: { oauth: { relaySecret: "s3cret" } },
                 authEstablishEndpoints: ["/api/saas/register/finalize"],
+                publicEndpoints: [
+                    { path: "/api/hooks/*", methods: ["POST"], headers: [] },
+                ],
             },
             {
                 name: "@scope/dms-lang-layer",
@@ -69,6 +72,7 @@ describe("[unit] manifest field policy", () => {
             (0, chai_1.expect)(module).to.not.have.property("privateOptions");
             (0, chai_1.expect)(module).to.not.have.property("path");
             (0, chai_1.expect)(module).to.not.have.property("authEstablishEndpoints");
+            (0, chai_1.expect)(module).to.not.have.property("publicEndpoints");
         }
     });
     it("serves the declared establish endpoints to an entitled caller", () => {
@@ -80,6 +84,7 @@ describe("[unit] manifest field policy", () => {
         (0, chai_1.expect)(shaped.modules[0].authEstablishEndpoints).to.deep.equal([
             "/api/saas/register/finalize",
         ]);
+        (0, chai_1.expect)(shaped.modules[0].publicEndpoints).to.have.length(1);
         (0, chai_1.expect)(shaped.modules[1]).to.not.have.property("authEstablishEndpoints");
     });
     it("leaves every other field untouched", () => {

package/dist/test/unit/implementations/dms/manifest-strip.test.js.map

@@ -1 +1 @@
-{"version":3,"file":"manifest-strip.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/manifest-strip.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,uEAIkD;AASlD,SAAS,aAAa;IACpB,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,qBAAqB;gBAClC,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,2CAA2C;gBACjD,OAAO,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE;gBAC/C,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;gBACpD,sBAAsB,EAAE,CAAC,6BAA6B,CAAC;aACxD;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,uBAAuB;gBACpC,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,gDAAgD;aACvD;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,QAAQ,EAAE;YAClD,cAAc,EAAE,IAAI;YACpB,IAAI,EAAE,IAAI;YACV,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,IAAI;YACV,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACxD,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CACrC,2CAA2C,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,IAAI;YACpB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YACrD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACtD,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;QAChE,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YAC7D,6BAA6B;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtE,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9C,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;QACjC,IAAA,qCAA0B,EAAC,QAAQ,EAAE;YACnC,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}
+{"version":3,"file":"manifest-strip.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/implementations/dms/manifest-strip.test.ts"],"names":[],"mappings":";;AAAA,+BAA8B;AAC9B,uEAIkD;AASlD,SAAS,aAAa;IACpB,OAAO;QACL,IAAI,EAAE,uBAAuB;QAC7B,OAAO,EAAE;YACP;gBACE,IAAI,EAAE,qBAAqB;gBAC3B,WAAW,EAAE,qBAAqB;gBAClC,QAAQ,EAAE,CAAC;gBACX,SAAS,EAAE,KAAK;gBAChB,IAAI,EAAE,2CAA2C;gBACjD,OAAO,EAAE,EAAE,OAAO,EAAE,yBAAyB,EAAE;gBAC/C,cAAc,EAAE,EAAE,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE,EAAE;gBACpD,sBAAsB,EAAE,CAAC,6BAA6B,CAAC;gBACvD,eAAe,EAAE;oBACf,EAAE,IAAI,EAAE,cAAc,EAAE,OAAO,EAAE,CAAC,MAAM,CAAC,EAAE,OAAO,EAAE,EAAE,EAAE;iBACzD;aACF;YACD;gBACE,IAAI,EAAE,uBAAuB;gBAC7B,WAAW,EAAE,uBAAuB;gBACpC,QAAQ,EAAE,CAAC;gBACX,IAAI,EAAE,gDAAgD;aACvD;SACF;KACF,CAAC;AACJ,CAAC;AAED,QAAQ,CAAC,8BAA8B,EAAE,GAAG,EAAE;IAC5C,EAAE,CAAC,6DAA6D,EAAE,GAAG,EAAE;QACrE,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;QACjC,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,QAAQ,EAAE;YAClD,cAAc,EAAE,IAAI;YACpB,IAAI,EAAE,IAAI;YACV,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC;IACzC,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,IAAI;YACV,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;QACxD,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CACrC,2CAA2C,CAC5C,CAAC;IACJ,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,IAAI;YACpB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;QAC9C,CAAC;QACD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,cAAc,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YACrD,KAAK,EAAE,EAAE,WAAW,EAAE,QAAQ,EAAE;SACjC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;QAC3D,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACpC,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,gBAAgB,CAAC,CAAC;YACtD,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;YAC5C,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;YAC9D,IAAA,aAAM,EAAC,MAAM,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,iBAAiB,CAAC,CAAC;QACzD,CAAC;IACH,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,+DAA+D,EAAE,GAAG,EAAE;QACvE,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,IAAI;SAC7B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,sBAAsB,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YAC7D,6BAA6B;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC;QAC5D,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,GAAG,CAAC,IAAI,CAAC,QAAQ,CAAC,wBAAwB,CAAC,CAAC;IAC3E,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;QAC5C,MAAM,MAAM,GAAG,IAAA,qCAA0B,EAAC,aAAa,EAAE,EAAE;YACzD,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,uBAAuB,CAAC,CAAC;QACtD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QAC/D,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,qBAAqB,CAAC,CAAC;QACtE,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC;QAC/C,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACpD,IAAA,aAAM,EAAC,MAAM,CAAC,OAAO,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC;YAC9C,OAAO,EAAE,yBAAyB;SACnC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,QAAQ,GAAG,aAAa,EAAE,CAAC;QACjC,IAAA,qCAA0B,EAAC,QAAQ,EAAE;YACnC,cAAc,EAAE,KAAK;YACrB,IAAI,EAAE,KAAK;YACX,sBAAsB,EAAE,KAAK;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,IAAI,CAAC,KAAK,CAAC,aAAa,EAAE,CAAC,CAAC;IAClD,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/test/unit/interfaces/dms/client-ip.test.d.ts

@@ -0,0 +1 @@
+export {};

package/dist/test/unit/interfaces/dms/client-ip.test.js

@@ -0,0 +1,61 @@
+"use strict";
+Object.defineProperty(exports, "__esModule", { value: true });
+const chai_1 = require("chai");
+const client_ip_1 = require("@antelopejs/interface-dms/client-ip");
+const config_1 = require("../../../../config");
+const PROXY_ADDRESS = "::ffff:10.0.0.9";
+const CLIENT_ADDRESS = "109.132.199.8";
+const SPOOFED_ADDRESS = "1.2.3.4";
+function requestContext(request) {
+    const headers = request.forwardedFor === undefined
+        ? {}
+        : { "x-forwarded-for": request.forwardedFor };
+    return {
+        rawRequest: {
+            socket: { remoteAddress: request.socketAddress },
+            headers,
+        },
+    };
+}
+describe("[unit] client ip interface", () => {
+    let configured;
+    beforeEach(() => {
+        configured = (0, config_1.getAuthConfig)().trustedProxies;
+    });
+    afterEach(() => {
+        (0, config_1.getAuthConfig)().trustedProxies = configured;
+    });
+    it("answers the socket peer, unmapped, when no proxy is trusted", async () => {
+        (0, config_1.getAuthConfig)().trustedProxies = 0;
+        const context = requestContext({
+            socketAddress: PROXY_ADDRESS,
+            forwardedFor: SPOOFED_ADDRESS,
+        });
+        (0, chai_1.expect)(await (0, client_ip_1.getClientIp)(context)).to.equal("10.0.0.9");
+    });
+    it("follows auth.trustedProxies through x-forwarded-for", async () => {
+        (0, config_1.getAuthConfig)().trustedProxies = 1;
+        const context = requestContext({
+            socketAddress: PROXY_ADDRESS,
+            forwardedFor: `${SPOOFED_ADDRESS}, ${CLIENT_ADDRESS}`,
+        });
+        (0, chai_1.expect)(await (0, client_ip_1.getClientIp)(context)).to.equal(CLIENT_ADDRESS);
+    });
+    it("reads a header repeated across lines as one chain", async () => {
+        (0, config_1.getAuthConfig)().trustedProxies = 1;
+        const context = requestContext({
+            socketAddress: PROXY_ADDRESS,
+            forwardedFor: [SPOOFED_ADDRESS, CLIENT_ADDRESS],
+        });
+        (0, chai_1.expect)(await (0, client_ip_1.getClientIp)(context)).to.equal(CLIENT_ADDRESS);
+    });
+    it("resolves a source handed to ResolveClientIp directly", async () => {
+        (0, config_1.getAuthConfig)().trustedProxies = 1;
+        const resolved = await (0, client_ip_1.ResolveClientIp)({
+            socketAddress: PROXY_ADDRESS,
+            forwardedFor: CLIENT_ADDRESS,
+        });
+        (0, chai_1.expect)(resolved).to.equal(CLIENT_ADDRESS);
+    });
+});
+//# sourceMappingURL=client-ip.test.js.map

package/dist/test/unit/interfaces/dms/client-ip.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client-ip.test.js","sourceRoot":"","sources":["../../../../../src/test/unit/interfaces/dms/client-ip.test.ts"],"names":[],"mappings":";;AACA,+BAA8B;AAC9B,mEAG6C;AAC7C,+CAAmD;AAEnD,MAAM,aAAa,GAAG,iBAAiB,CAAC;AACxC,MAAM,cAAc,GAAG,eAAe,CAAC;AACvC,MAAM,eAAe,GAAG,SAAS,CAAC;AAOlC,SAAS,cAAc,CAAC,OAAoB;IAC1C,MAAM,OAAO,GACX,OAAO,CAAC,YAAY,KAAK,SAAS;QAChC,CAAC,CAAC,EAAE;QACJ,CAAC,CAAC,EAAE,iBAAiB,EAAE,OAAO,CAAC,YAAY,EAAE,CAAC;IAClD,OAAO;QACL,UAAU,EAAE;YACV,MAAM,EAAE,EAAE,aAAa,EAAE,OAAO,CAAC,aAAa,EAAE;YAChD,OAAO;SACR;KAC2B,CAAC;AACjC,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,IAAI,UAA8B,CAAC;IAEnC,UAAU,CAAC,GAAG,EAAE;QACd,UAAU,GAAG,IAAA,sBAAa,GAAE,CAAC,cAAc,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,SAAS,CAAC,GAAG,EAAE;QACb,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,UAAU,CAAC;IAC9C,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,6DAA6D,EAAE,KAAK,IAAI,EAAE;QAC3E,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,aAAa,EAAE,aAAa;YAC5B,YAAY,EAAE,eAAe;SAC9B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,IAAA,uBAAW,EAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,UAAU,CAAC,CAAC;IAC1D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,qDAAqD,EAAE,KAAK,IAAI,EAAE;QACnE,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,aAAa,EAAE,aAAa;YAC5B,YAAY,EAAE,GAAG,eAAe,KAAK,cAAc,EAAE;SACtD,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,IAAA,uBAAW,EAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,CAAC,CAAC;QACnC,MAAM,OAAO,GAAG,cAAc,CAAC;YAC7B,aAAa,EAAE,aAAa;YAC5B,YAAY,EAAE,CAAC,eAAe,EAAE,cAAc,CAAC;SAChD,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,MAAM,IAAA,uBAAW,EAAC,OAAO,CAAC,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC9D,CAAC,CAAC,CAAC;IAEH,EAAE,CAAC,sDAAsD,EAAE,KAAK,IAAI,EAAE;QACpE,IAAA,sBAAa,GAAE,CAAC,cAAc,GAAG,CAAC,CAAC;QACnC,MAAM,QAAQ,GAAG,MAAM,IAAA,2BAAe,EAAC;YACrC,aAAa,EAAE,aAAa;YAC5B,YAAY,EAAE,cAAc;SAC7B,CAAC,CAAC;QACH,IAAA,aAAM,EAAC,QAAQ,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,cAAc,CAAC,CAAC;IAC5C,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/frontend-vue/layers/dms-core/app/composables/period/periodLink.ts

@@ -0,0 +1,60 @@
+/** The keys one `PeriodSelector` keeps its period under in the page URL. */
+export interface PeriodQueryKeys {
+  period: string;
+  compare: string;
+  from: string;
+  to: string;
+  compareFrom: string;
+  compareTo: string;
+}
+
+const KEY_NAMES: Array<keyof PeriodQueryKeys> = [
+  "period",
+  "compare",
+  "from",
+  "to",
+  "compareFrom",
+  "compareTo",
+];
+const QUERY_SEPARATOR = "?";
+const FRAGMENT_SEPARATOR = "#";
+
+/**
+ * The keys of selector `id` in the page URL (`<id>.period`), or the bare keys
+ * (`period`) of a selection kept on its own.
+ */
+export function periodQueryKeys(id?: string): PeriodQueryKeys {
+  const prefix = id ? `${id}.` : "";
+  return Object.fromEntries(
+    KEY_NAMES.map((name) => [name, `${prefix}${name}`]),
+  ) as unknown as PeriodQueryKeys;
+}
+
+function firstText(value: unknown): string | undefined {
+  const text = Array.isArray(value) ? value[0] : value;
+  return typeof text === "string" && text ? text : undefined;
+}
+
+/**
+ * `link` carrying the period selector `id` shows in `query` (the route query
+ * of the page it is followed from), so the page it opens, holding a selector
+ * with the same `id`, shows the same period. A key the link names itself
+ * wins, and a key the query does not hold is left out.
+ */
+export function withPeriodQuery(
+  link: string,
+  query: Record<string, unknown>,
+  id: string,
+): string {
+  const [beforeFragment = "", ...fragment] = link.split(FRAGMENT_SEPARATOR);
+  const [path = "", ...search] = beforeFragment.split(QUERY_SEPARATOR);
+  const params = new URLSearchParams(search.join(QUERY_SEPARATOR));
+  for (const key of Object.values(periodQueryKeys(id))) {
+    const value = firstText(query[key]);
+    if (value && !params.has(key)) params.set(key, value);
+  }
+  const text = params.toString();
+  return [text ? `${path}${QUERY_SEPARATOR}${text}` : path, ...fragment].join(
+    FRAGMENT_SEPARATOR,
+  );
+}

package/frontend-vue/layers/dms-core/app/composables/translation/useTranslation.ts

@@ -49,15 +49,17 @@ export function resolveI18nKey(
  * (`$page.settings.invites.error.not_found`). `translate` echoes the key back
  * when no translation exists in the active locale or its fallbacks: a message
  * marked with `$` then falls back to the bare key, and an unmarked one — which
- * may well be plain prose — is shown as it came in.
+ * may well be plain prose — is shown as it came in. `params` fill the
+ * translation's placeholders (`"At most {max}"` with `{ max: 5000 }`).
  */
 export function resolveApiMessage(
   translate: I18nTranslate,
   message: unknown,
+  params?: Record<string, unknown> | null,
 ): string {
   const text = typeof message === "string" ? message : String(message);
   const marked = readTranslationKey(text);
-  const translated = translate(marked.key, {});
+  const translated = translate(marked.key, params ?? {});
 
   if (translated !== marked.key) return translated;
   return marked.isKey ? marked.key : text;
@@ -93,8 +95,11 @@ export const useTranslation = () => {
     return resolveI18nKey(t, key, params);
   }
 
-  function processApiMessage(message: unknown) {
-    return resolveApiMessage(t, message);
+  function processApiMessage(
+    message: unknown,
+    params?: Record<string, unknown> | null,
+  ) {
+    return resolveApiMessage(t, message, params);
   }
 
   return {

package/frontend-vue/layers/dms-core/app/composables/useFieldErrors.ts

@@ -22,6 +22,12 @@ export interface ApiFieldError {
   message: string;
   /** The values of the field the error names (addresses of a list…). */
   values?: string[];
+  /**
+   * Values filling the placeholders of the translated message: a body
+   * `{ field: "budget", message: "$page.error.budget_max", params: { max: 5000 } }`
+   * shows "At most 5000" for a translation `"At most {max}"`.
+   */
+  params?: ApiFieldErrorParams;
   /**
    * The part of the field the error names, as a dotted path from the field
    * (`address.streetName`, `title.fr`); absent when it names the field.
@@ -29,6 +35,9 @@ export interface ApiFieldError {
   path?: string;
 }
 
+/** Placeholder values of a field error's message. */
+export type ApiFieldErrorParams = Record<string, string | number | boolean>;
+
 /** A code the API answers with that belongs to a field. */
 export type FieldErrorCode<F extends string = string> =
   | F
@@ -224,10 +233,26 @@ function fromIssues(issues: ValidationIssue[]): ApiFieldError[] {
   });
 }
 
-/** `{ field, message, values? }`, the shape the DMS answers with. */
+const PARAM_TYPES = new Set(["string", "number", "boolean"]);
+
+/** The placeholder values of a body, keeping only the plain ones. */
+function paramsOf(params: unknown): ApiFieldErrorParams | undefined {
+  if (typeof params !== "object" || params === null || Array.isArray(params)) {
+    return undefined;
+  }
+  const entries = Object.entries(params).filter(([, value]) =>
+    PARAM_TYPES.has(typeof value),
+  );
+  return entries.length > 0
+    ? (Object.fromEntries(entries) as ApiFieldErrorParams)
+    : undefined;
+}
+
+/** `{ field, message, values?, params? }`, the shape the DMS answers with. */
 function fromFieldObject(body: Record<string, unknown>): ApiFieldError[] {
-  const { field, message, values } = body;
+  const { field, message, values, params } = body;
   if (typeof field !== "string" || typeof message !== "string") return [];
+  const placeholders = paramsOf(params);
   return [
     {
       field,
@@ -235,6 +260,7 @@ function fromFieldObject(body: Record<string, unknown>): ApiFieldError[] {
       values: Array.isArray(values)
         ? values.filter((value): value is string => typeof value === "string")
         : undefined,
+      ...(placeholders && { params: placeholders }),
     },
   ];
 }
@@ -311,7 +337,7 @@ function isClientError(status: number | undefined): status is number {
  *
  * Read, in order: a code the form maps to a field (`codes`, for any 4xx), a
  * zod issue list (what `assertValidation` answers), a `{ field, message }`
- * body, the data API's "Missing mandatory fields: a, b" / "Invalid field
+ * body (with optional `values` and `params`), the data API's "Missing mandatory fields: a, b" / "Invalid field
  * type(s): a" and a `field: message` text. A network failure, a 403, a 429
  * or a 5xx never resolves to a field.
  *
@@ -478,7 +504,11 @@ export function useFieldErrors<F extends string>(
     if (fields.length === 0) return false;
     clear();
     for (const entry of fields) {
-      errors[entry.field as F] = resolveApiMessage(translate, entry.message);
+      errors[entry.field as F] = resolveApiMessage(
+        translate,
+        entry.message,
+        entry.params,
+      );
     }
     await focus(fields[0]!.field as F);
     return true;

package/frontend-vue/layers/dms-core/app/types/confirm-dialog.ts

@@ -83,6 +83,8 @@ export interface ConfirmDialog {
   blocked?: boolean;
   /** Text the user must type to confirm. */
   confirmText?: string;
+  /** Compares the typed text with `confirmText` ignoring case. */
+  confirmTextCaseInsensitive?: boolean;
   /** Fields whose values are sent with the action's request. */
   fields?: ConfirmDialogField[];
   /** A component drawn in the dialog's body. */

package/frontend-vue/layers/dms-layout/app/build/utils/pageValidationRedirect.ts

@@ -0,0 +1,32 @@
+import { parseURL, withoutTrailingSlash } from "ufo";
+import {
+  type ReplaceUrlVariablesContext,
+  resolveLinkVariables,
+} from "#dms-ui/app/build/utils/urlVariables";
+import type { PageValidation } from "../../types/page";
+
+const ROOT_PATH = "/";
+
+function normalizePath(path: string): string {
+  return withoutTrailingSlash(path) || ROOT_PATH;
+}
+
+/**
+ * Where a page that failed its validation sends the user: its `redirectTo`
+ * with the page URL's tokens filled, or `undefined` for the not-found error.
+ * A target on the page's own path would fail the same way again, so it is
+ * refused as well.
+ */
+export function pageValidationRedirect(
+  validation: PageValidation | undefined,
+  currentPath: string,
+  context: ReplaceUrlVariablesContext,
+): string | undefined {
+  if (!validation?.redirectTo) return undefined;
+  const target = resolveLinkVariables(validation.redirectTo, context);
+  const targetPath = parseURL(target).pathname;
+  if (!targetPath || normalizePath(targetPath) === normalizePath(currentPath)) {
+    return undefined;
+  }
+  return target;
+}

package/frontend-vue/layers/dms-layout/app/emails/components/EmailLayout.vue

@@ -1,5 +1,5 @@
 <script setup lang="ts">
-import { emailStyles } from "./index";
+import { emailLogoUrl, emailStyles } from "./index";
 
 interface EmailAppConfig {
   branding?: {
@@ -11,38 +11,61 @@ interface EmailAppConfig {
   };
 }
 
-defineProps<{
-  title: string;
-  lang?: string;
-}>();
+const props = withDefaults(
+  defineProps<{
+    /** Shown as the email's heading; no heading when omitted. */
+    title?: string;
+    lang?: string;
+    /** Inbox preview text, hidden in the message body. */
+    preheader?: string;
+    /** Draws the separator between the content and the `footer` slot. */
+    divider?: boolean;
+    logoAlt?: string;
+    /**
+     * Leaves the logo out unless a mail client can load it: an absolute
+     * public http(s) URL, not an SVG (see `emailLogoUrl`).
+     */
+    publicLogoOnly?: boolean;
+  }>(),
+  { divider: true, logoAlt: "Logo", publicLogoOnly: false },
+);
 
 const appConfig = useDmsAppConfig() as EmailAppConfig;
 const runtimeConfig = useDmsRuntimeConfig();
 
 const logoPath = appConfig.branding?.logo?.default?.light;
 const clientBaseUrl = runtimeConfig.public.dms?.clientBaseUrl ?? "";
-const logoUrl = logoPath?.startsWith("/")
-  ? `${clientBaseUrl}${logoPath}`
-  : logoPath;
+const logoUrl = props.publicLogoOnly
+  ? emailLogoUrl(logoPath, clientBaseUrl)
+  : logoPath?.startsWith("/")
+    ? `${clientBaseUrl}${logoPath}`
+    : logoPath;
 </script>
 
 <template>
   <EHtml :lang="lang ?? 'en'">
-    <EHead />
+    <EHead>
+      <slot name="head" />
+    </EHead>
     <EBody :style="emailStyles.main">
+      <EPreview v-if="preheader">{{ preheader }}</EPreview>
       <EContainer :style="emailStyles.container">
         <ESection :style="emailStyles.card">
           <ESection v-if="logoUrl" :style="emailStyles.logo">
-            <EImg :src="logoUrl" alt="Logo" :style="emailStyles.logoImage" />
+            <EImg
+              :src="logoUrl"
+              :alt="logoAlt"
+              :style="emailStyles.logoImage"
+            />
           </ESection>
 
-          <EHeading as="h1" :style="emailStyles.heading">
+          <EHeading v-if="title" as="h1" :style="emailStyles.heading">
             {{ title }}
           </EHeading>
 
           <slot />
 
-          <EHr :style="emailStyles.divider" />
+          <EHr v-if="divider" :style="emailStyles.divider" />
 
           <slot name="footer" />
         </ESection>

package/frontend-vue/layers/dms-layout/app/emails/components/email-logo.ts

@@ -0,0 +1,54 @@
+/**
+ * Which logo URL an email may carry. A recipient's mail client fetches the
+ * image from the internet, so it needs an absolute public http(s) URL; Gmail
+ * and Outlook also refuse SVG. A logo that fails either test is left out
+ * rather than drawn as a broken image.
+ */
+
+const ROOT_PATH = "/";
+const WEB_PROTOCOLS = ["http:", "https:"];
+const SVG_PATH = /\.svg(?:[?#]|$)/i;
+const LOCAL_HOSTS = ["localhost", "0.0.0.0", "[::]", "[::1]"];
+const LOCAL_SUFFIXES = [".localhost", ".local", ".internal"];
+const PRIVATE_ADDRESSES = [
+  /^127\./,
+  /^10\./,
+  /^192\.168\./,
+  /^172\.(1[6-9]|2\d|3[01])\./,
+  /^169\.254\./,
+  /^\[f[cd][0-9a-f]{0,2}:/i,
+  /^\[fe[89ab][0-9a-f]:/i,
+];
+
+function absoluteUrl(path: string, clientBaseUrl: string): URL | null {
+  const source = path.startsWith(ROOT_PATH) ? `${clientBaseUrl}${path}` : path;
+  try {
+    return new URL(source);
+  } catch {
+    return null;
+  }
+}
+
+/** Whether a mail client out on the internet can reach `hostname`. */
+export function isPublicEmailHost(hostname: string): boolean {
+  const name = hostname.toLowerCase();
+  if (LOCAL_HOSTS.includes(name)) return false;
+  if (LOCAL_SUFFIXES.some((suffix) => name.endsWith(suffix))) return false;
+  return !PRIVATE_ADDRESSES.some((pattern) => pattern.test(name));
+}
+
+/**
+ * The logo URL an email may use: `logoPath` made absolute against
+ * `clientBaseUrl` when it starts with `/`, or `""` when it is an SVG, not
+ * http(s), or served from a host a mail client cannot reach (localhost, a
+ * private address).
+ */
+export function emailLogoUrl(
+  logoPath: string | undefined,
+  clientBaseUrl: string,
+): string {
+  if (!logoPath || SVG_PATH.test(logoPath)) return "";
+  const url = absoluteUrl(logoPath, clientBaseUrl);
+  if (!url || !WEB_PROTOCOLS.includes(url.protocol)) return "";
+  return isPublicEmailHost(url.hostname) ? url.href : "";
+}

package/frontend-vue/layers/dms-layout/app/emails/components/index.ts

@@ -1,3 +1,5 @@
+export * from "./email-logo";
+
 export const emailFontFamily =
   '-apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial, sans-serif';
 

package/frontend-vue/layers/dms-layout/app/pages/[...slug].vue

@@ -3,6 +3,7 @@ import { withoutTrailingSlash } from "ufo";
 import { holdPageHeaderActions } from "../composables/layout/usePageHeaderActions";
 import { useDevReloading } from "../build/composables/dev-reload/useDevReloadHolder";
 import { usePageLiveHost } from "#dms-ui/app/build/composables/live/usePageLiveHost";
+import { pageValidationRedirect } from "../build/utils/pageValidationRedirect";
 
 defineOptions({ inheritAttrs: false });
 
@@ -95,13 +96,13 @@ async function recheckAccessWithFreshSession(): Promise<void> {
   });
 }
 
-function validatePage(
+function isPageValid(
   metadata: PageInfo | undefined,
   query: Record<string, unknown>,
   params: Record<string, unknown>,
-): void {
+): boolean {
   if (!metadata?.validation) {
-    return;
+    return true;
   }
 
   const { validation } = metadata;
@@ -121,12 +122,31 @@ function validatePage(
     { query, params },
   );
 
-  if (!isQueryValid || !isCustomValid) {
+  return isQueryValid && isCustomValid;
+}
+
+// Set while a page failing its validation leaves for its `redirectTo`: its
+// blocks are not drawn, so none of them requests a URL missing its context.
+const isLeavingPage = ref(false);
+
+async function enforcePageValidation(): Promise<void> {
+  const metadata = pagelayoutMetadata.value;
+  const query = route.query as Record<string, unknown>;
+  if (isPageValid(metadata, query, routeParams.value)) {
+    return;
+  }
+  const redirect = pageValidationRedirect(metadata?.validation, route.path, {
+    routeParams: routeParams.value,
+    routeQuery: query,
+  });
+  if (!redirect) {
     throw createError({
       statusCode: HTTP_NOT_FOUND,
       statusMessage: "Page not found",
     });
   }
+  isLeavingPage.value = true;
+  await navigateDms(redirect, { replace: true });
 }
 
 defineDmsPageMeta({
@@ -159,7 +179,7 @@ if (siteLayout.loadingError && siteLayout.loadingError.value) {
   });
 }
 
-validatePage(pagelayoutMetadata.value, route.query, routeParams.value);
+await enforcePageValidation();
 await checkPageMetadata(pagelayoutMetadata.value);
 
 // Same reason as the guard inside `checkPageMetadata`: while a dev reload is in
@@ -207,7 +227,8 @@ watch(
       siteLayout.refreshIfStale(),
       refreshPermissionsIfStale(),
     ]);
-    validatePage(pagelayoutMetadata.value, route.query, routeParams.value);
+    isLeavingPage.value = false;
+    await enforcePageValidation();
     await checkPageMetadata(pagelayoutMetadata.value);
   },
 );
@@ -488,7 +509,8 @@ if (import.meta.env.DEV) {
 </script>
 
 <template>
-  <div v-if="hidesEveryBlock" class="dms-card overflow-hidden">
+  <template v-if="isLeavingPage" />
+  <div v-else-if="hidesEveryBlock" class="dms-card overflow-hidden">
     <DmsEmptyState
       variant="no-access"
       :title="t('page.no_visible_blocks.title')"

package/frontend-vue/layers/dms-layout/app/types/page.ts

@@ -9,6 +9,8 @@ export type MenuItemType = "label" | "link";
 export interface PageValidation {
   requiredQueryParams?: string[];
   customFunctionId?: string;
+  /** Where a page failing its validation sends the user, not-found aside. */
+  redirectTo?: string;
 }
 
 export interface MenuOptions {