@antelopejs/dms 0.9.8 → 0.11.0

package/frontend-vue/layers/dms-ui/app/types/table/query.ts

@@ -10,5 +10,6 @@ export interface TableQueryParams {
   sortKey?: string;
   sortDirection?: SortDirection;
   showArchived?: boolean;
-  [key: `filter_${string}`]: string | number | undefined;
+  /** A list sends the key once per filter, which a row must all pass. */
+  [key: `filter_${string}`]: string | string[] | number | undefined;
 }

package/frontend-vue/layers/dms-ui/app/utils/blockRefresh.ts

@@ -1,3 +1,5 @@
+import { markPageRead } from "../build/composables/live/pageReadClock";
+
 /**
  * The window event a data block (StatGroup, KeyValueList, NavCardGrid,
  * ActivityFeed, KPI, top list, meter, chart, a tab set's badges, table view)
@@ -43,7 +45,7 @@ export function refreshPageBlocks(): Promise<void> {
     waitUntil: (work) => void pending.push(work),
   };
   window.dispatchEvent(new CustomEvent(BLOCK_REFRESH_EVENT, { detail }));
-  return Promise.allSettled(pending).then(() => undefined);
+  return Promise.allSettled(pending).then(() => markPageRead());
 }
 
 /**

package/frontend-vue/layers/dms-ui/app/utils/cascader.ts

@@ -27,6 +27,7 @@ export interface CascaderTreeOptions {
 
 export const CASCADER_PATH_SEPARATOR = " / ";
 
+/** How many rows the picker's open menu lists to browse the tree. */
 export const CASCADER_FETCH_LIMIT = 1000;
 
 export const DEFAULT_CASCADER_KEY_MAPPING: CascaderKeyMapping = {
@@ -220,10 +221,100 @@ export function cascaderValuePath(
 ): string[] {
   const row = asPickedRow(item);
   const ownLabel = row ? rowValue(row, keyMapping.label) : undefined;
-  const id = row
-    ? rowValue(row, keyMapping.value)
-    : rowValue({ id: item }, "id");
+  const id = cascaderValueId(item, keyMapping);
   if (!id) return ownLabel ? [ownLabel] : [];
   const labels = rows ? buildCascaderPathLabels(rows, keyMapping, id) : [];
   return labels.length > 0 ? labels : [ownLabel ?? id];
 }
+
+/** Reads the rows of the given ids from the cascader's `select` route. */
+export type CascaderRowsReader = (ids: string[]) => Promise<CascaderRow[]>;
+
+/** The rows a path is drawn from, and the picked ids none of them answer. */
+export interface CascaderAncestry {
+  rows: CascaderRow[];
+  notFound: string[];
+}
+
+/**
+ * The rows of the picked ids and of every ancestor above them, read with
+ * `?ids=` one level at a time: the picked rows, then their parents, then
+ * theirs, until a level names no row not read yet. A tree is as many reads as
+ * it is deep (a level is one request for all its ids), whatever its size, and
+ * a parent cycle ends because a row is never asked twice. A picked id no row
+ * answers (deleted, out of reach) is returned as not found.
+ */
+export async function readCascaderAncestry(
+  read: CascaderRowsReader,
+  keyMapping: CascaderKeyMapping,
+  ids: string[],
+): Promise<CascaderAncestry> {
+  const rowsByValue = new Map<string, CascaderRow>();
+  const asked = new Set<string>();
+  let pending = [...new Set(ids)];
+  while (pending.length > 0) {
+    for (const id of pending) asked.add(id);
+    const rows = await read(pending);
+    for (const row of rows) {
+      const value = rowValue(row, keyMapping.value);
+      if (value !== undefined) rowsByValue.set(value, row);
+    }
+    pending = [
+      ...new Set(
+        rows
+          .map((row) => rowValue(row, keyMapping.parent))
+          .filter(
+            (parent): parent is string =>
+              parent !== undefined && !asked.has(parent),
+          ),
+      ),
+    ];
+  }
+  return {
+    rows: [...rowsByValue.values()],
+    notFound: ids.filter((id) => !rowsByValue.has(id)),
+  };
+}
+
+/** The id of a picked value: an id, or a row carrying its id. */
+export function cascaderValueId(
+  item: unknown,
+  keyMapping: CascaderKeyMapping,
+): string | undefined {
+  const row = asPickedRow(item);
+  return row ? rowValue(row, keyMapping.value) : rowValue({ id: item }, "id");
+}
+
+/** What a cell already holds of its path, and the ids it still has to read. */
+export interface CascaderValueReads {
+  /** The rows the server joined: each one labels itself. */
+  joinedRows: CascaderRow[];
+  /** The picked ids sent plain, and the parents of the joined rows. */
+  idsToRead: string[];
+}
+
+/**
+ * Splits a cell's picked values into the rows the list joined and the ids it
+ * still reads: a plain id is read, a joined row only has its parent read
+ * (none for a root), so a list whose route joins the relation reads nothing
+ * for a pick at the top of the tree.
+ */
+export function cascaderValueReads(
+  values: unknown[],
+  keyMapping: CascaderKeyMapping,
+): CascaderValueReads {
+  const joinedRows = values
+    .map(asPickedRow)
+    .filter(
+      (row): row is CascaderRow =>
+        !!row && rowValue(row, keyMapping.value) !== undefined,
+    );
+  const plainIds = values
+    .filter((item) => !asPickedRow(item))
+    .map((item) => cascaderValueId(item, keyMapping))
+    .filter((id): id is string => id !== undefined);
+  const parents = joinedRows
+    .map((row) => rowValue(row, keyMapping.parent))
+    .filter((id): id is string => id !== undefined);
+  return { joinedRows, idsToRead: [...new Set([...plainIds, ...parents])] };
+}

package/frontend-vue/layers/dms-ui/app/utils/componentTree.ts

@@ -0,0 +1,24 @@
+/**
+ * The children of a layout block (a Card, a VStack, a Grid) as
+ * `RecursiveComponent` draws them: each child's component resolved by its
+ * registered name, a `div` when none matches, its own children likewise.
+ */
+export function resolveComponentChildren(
+  children: ComponentChild[],
+): ResolvedComponentInfo[] {
+  return children.map((child) => {
+    const { id, component, ...additionalProps } = child;
+    return {
+      id,
+      options: component.options,
+      component: component.componentName
+        ? resolveDmsComponent(component.componentName) || "div"
+        : "div",
+      componentName: component.componentName,
+      children: component.children
+        ? resolveComponentChildren(component.children)
+        : [],
+      ...additionalProps,
+    };
+  });
+}

package/frontend-vue/layers/dms-ui/i18n/locales/ui-en-GB.json

@@ -85,7 +85,8 @@
         "include": "Includes",
         "exclude": "Excludes",
         "contains": "Contains",
-        "not_contains": "Does not contain"
+        "not_contains": "Does not contain",
+        "array_contains_string": "Contains"
       },
       "filter": {
         "boolean": {
@@ -108,7 +109,7 @@
       "show_archived": "Show archived items",
       "archived": "Archived",
       "archive_toggle": "Archive",
-      "archived_count": "{count} archived",
+      "archived_count": "Archived: {count}",
       "archive_strip_title": "Viewing archived items.",
       "archive_strip_description": "They are hidden from the regular list until restored.",
       "archived_empty_title": "No archived items",
@@ -177,6 +178,8 @@
         "save_as": "Save as new view",
         "save_current": "Save current view",
         "delete": "Delete view",
+        "delete_title": "Delete this view?",
+        "delete_description": "\"{view}\" will be deleted for good. The table goes back to its default state if the view is open.",
         "save_as_title": "Save as a new view",
         "save_as_description": "Keep the current filters, search, sort, columns and display under a name. Only you will see it.",
         "save_as_confirm": "Save view",
@@ -257,6 +260,7 @@
       "reset": "Reset",
       "cancel": "Cancel",
       "save_changes": "Save changes",
+      "create": "Create",
       "refresh_data": "Refresh data",
       "export_data": "Export data"
     },
@@ -286,12 +290,15 @@
         "forbidden_description": "Your role doesn't let you view this entry, so the form can't open on its current values. Ask an administrator for access.",
         "missing_title": "No entry selected",
         "missing_description": "This form shows one entry, and the address names none. Open it from an entry to see its values.",
+        "not_found_title": "Not found",
+        "not_found_description": "This entry does not exist, or no longer does: it may have been deleted.",
         "retry": "Try again"
       },
       "select_date": "Select date",
       "relation": {
         "selected_count": "{count} selected",
-        "add_new": "Add new entry"
+        "add_new": "Add new entry",
+        "not_found": "Not found"
       },
       "cascader": {
         "placeholder": "Select an item",
@@ -406,7 +413,8 @@
         "invalid": "No errors | 1 field to fix | {count} fields to fix"
       },
       "error_summary": {
-        "title": "No field to fix | 1 field needs your attention | {count} fields need your attention"
+        "title": "No field to fix | 1 field needs your attention | {count} fields need your attention",
+        "resolved": "Everything is fixed: the form can be saved."
       },
       "repeater": {
         "add": "Add a row",
@@ -515,7 +523,7 @@
       },
       "livetoggle": {
         "l": {
-          "description": "Switch the page between Direct and Pause"
+          "description": "Switch the page between Live and Pause"
         }
       }
     },
@@ -687,6 +695,9 @@
         "info": "note"
       }
     },
+    "flow_canvas": {
+      "delete_node": "Delete node"
+    },
     "password_rules": {
       "head": "{met} of {total} met",
       "verdict": {
@@ -750,6 +761,7 @@
       "show_new": "Show",
       "paused": "Paused",
       "resume": "Resume",
+      "refresh": "Refresh",
       "reason_hidden": "tab hidden",
       "polling": "no realtime, polling",
       "table_held": "Table on hold",
@@ -771,6 +783,9 @@
       "invalid_state": "The preview state could not be read.",
       "empty": "Nothing to preview yet.",
       "unsafe_method": "{name} was not drawn: a preview only reads its data, and {value} writes."
+    },
+    "drawer": {
+      "resize": "Resize the drawer"
     }
   }
 }

package/frontend-vue/layers/dms-ui/i18n/locales/ui-fr-FR.json

@@ -85,7 +85,8 @@
         "include": "contient",
         "exclude": "ne contient pas",
         "contains": "contient",
-        "not_contains": "ne contient pas"
+        "not_contains": "ne contient pas",
+        "array_contains_string": "contient"
       },
       "filter": {
         "boolean": {
@@ -108,7 +109,7 @@
       "show_archived": "Voir les éléments archivés",
       "archived": "Archivés",
       "archive_toggle": "Archives",
-      "archived_count": "{count} archivés",
+      "archived_count": "Archives : {count}",
       "archive_strip_title": "Éléments archivés.",
       "archive_strip_description": "Ils restent masqués de la liste habituelle jusqu’à leur restauration.",
       "archived_empty_title": "Aucun élément archivé",
@@ -177,6 +178,8 @@
         "save_as": "Enregistrer comme nouvelle vue",
         "save_current": "Enregistrer la vue actuelle",
         "delete": "Supprimer la vue",
+        "delete_title": "Supprimer cette vue ?",
+        "delete_description": "« {view} » sera supprimée définitivement. Si elle est ouverte, le tableau revient à son état par défaut.",
         "save_as_title": "Enregistrer comme nouvelle vue",
         "save_as_description": "Conservez les filtres, la recherche, le tri, les colonnes et l'affichage actuels sous un nom. Vous seul la verrez.",
         "save_as_confirm": "Enregistrer la vue",
@@ -257,6 +260,7 @@
       "reset": "Réinitialiser",
       "cancel": "Annuler",
       "save_changes": "Enregistrer les modifications",
+      "create": "Créer",
       "refresh_data": "Actualiser les données",
       "export_data": "Exporter les données"
     },
@@ -287,12 +291,15 @@
         "forbidden_description": "Votre rôle ne vous permet pas de voir cet élément, le formulaire ne peut donc pas s'ouvrir sur ses valeurs actuelles. Demandez l'accès à un administrateur.",
         "missing_title": "Aucun élément sélectionné",
         "missing_description": "Ce formulaire affiche un élément, et l'adresse n'en désigne aucun. Ouvrez-le depuis un élément pour voir ses valeurs.",
+        "not_found_title": "Introuvable",
+        "not_found_description": "Cet élément n'existe pas, ou plus : il a peut-être été supprimé.",
         "retry": "Réessayer"
       },
       "select_date": "Sélectionner une date",
       "relation": {
         "selected_count": "{count} sélectionné(s)",
-        "add_new": "Ajouter une nouvelle entrée"
+        "add_new": "Ajouter une nouvelle entrée",
+        "not_found": "Introuvable"
       },
       "cascader": {
         "placeholder": "Sélectionner un élément",
@@ -407,7 +414,8 @@
         "invalid": "Aucune erreur | 1 champ à corriger | {count} champs à corriger"
       },
       "error_summary": {
-        "title": "Aucun champ à corriger | 1 champ demande votre attention | {count} champs demandent votre attention"
+        "title": "Aucun champ à corriger | 1 champ demande votre attention | {count} champs demandent votre attention",
+        "resolved": "Tout est corrigé : le formulaire peut être enregistré."
       },
       "repeater": {
         "add": "Ajouter une ligne",
@@ -688,6 +696,9 @@
         "info": "note"
       }
     },
+    "flow_canvas": {
+      "delete_node": "Supprimer le nœud"
+    },
     "password_rules": {
       "head": "{met} sur {total} respectées",
       "verdict": {
@@ -719,7 +730,7 @@
     },
     "save_bar": {
       "unsaved": "Modifications non enregistrées",
-      "discard": "Annuler",
+      "discard": "Abandonner",
       "save": "Enregistrer",
       "saving": "Enregistrement",
       "saved": "Enregistré",
@@ -751,6 +762,7 @@
       "show_new": "Afficher",
       "paused": "En pause",
       "resume": "Reprendre",
+      "refresh": "Actualiser",
       "reason_hidden": "onglet masqué",
       "polling": "sans temps réel, relecture régulière",
       "table_held": "Tableau figé",
@@ -772,6 +784,9 @@
       "invalid_state": "L’état de l’aperçu est illisible.",
       "empty": "Rien à prévisualiser pour l’instant.",
       "unsafe_method": "{name} n’a pas été affiché : un aperçu ne fait que lire ses données, et {value} écrit."
+    },
+    "drawer": {
+      "resize": "Redimensionner le tiroir"
     }
   }
 }

package/frontend-vue/package.json

@@ -11,7 +11,7 @@
   "license": "Apache-2.0",
   "packageManager": "pnpm@10.6.5",
   "engines": {
-    "@antelopejs/dms-frontend": ">=0.6.3 <0.8.0"
+    "@antelopejs/dms-frontend": ">=0.9.0 <0.10.0"
   },
   "scripts": {
     "typecheck": "ajs dms verify-source --layer \"$PWD\" --local-package @antelopejs/dms=.. --local-package @antelopejs/interface-dms=../../interface-dms",
@@ -37,7 +37,11 @@
     "@iconify-json/ph": "^1.2.2",
     "@internationalized/date": "^3.10.0",
     "@lezer/common": "^1.5.3",
+    "@lezer/css": "^1.3.8",
     "@lezer/highlight": "^1.2.5",
+    "@lezer/html": "^1.3.13",
+    "@lezer/javascript": "^1.5.6",
+    "@lezer/json": "^1.0.3",
     "@tailwindcss/typography": "^0.5.19",
     "@tanstack/vue-table": "^8.21.3",
     "@tiptap/core": "^3.30.2",
@@ -75,7 +79,7 @@
   },
   "devDependencies": {
     "@antelopejs/core": ">=1.16.0 <2",
-    "@antelopejs/dms-frontend": ">=0.6.3 <0.7.0",
+    "@antelopejs/dms-frontend": ">=0.9.0 <0.10.0",
     "@eslint/js": "^8.57.0",
     "@inertiajs/vue3": "^3.7.0",
     "@nuxt/ui": "4.10.0",

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@antelopejs/dms",
-  "version": "0.9.8",
+  "version": "0.11.0",
   "description": "The AntelopeJS dashboard management system: admin dashboards declared in TypeScript, with auth and tenancy, data management, file uploads, notifications and realtime.",
   "keywords": [
     "antelopejs",
@@ -22,6 +22,7 @@
   },
   "main": "dist/index.js",
   "types": "dist/index.d.ts",
+  "dmsFrontend": "dist/frontend-module.js",
   "files": [
     "dist",
     "!dist/.tsbuildinfo",
@@ -57,16 +58,15 @@
     "@antelopejs/interface-api": ">=0.0.15 <1.0.0",
     "@antelopejs/interface-api-util": ">=0.1.3 <1.0.0",
     "@antelopejs/interface-core": ">=0.2.4 <1.0.0",
-    "@antelopejs/interface-data-api": ">=0.2.2 <1.0.0",
-    "@antelopejs/interface-database": ">=0.1.10 <1.0.0",
-    "@antelopejs/interface-database-decorators": ">=0.1.9 <1.0.0",
-    "@antelopejs/interface-dms": ">=0.7.4 <0.8.0",
+    "@antelopejs/interface-data-api": ">=0.4.0 <1.0.0",
+    "@antelopejs/interface-database": ">=0.1.11 <1.0.0",
+    "@antelopejs/interface-database-decorators": ">=0.1.10 <1.0.0",
+    "@antelopejs/interface-dms": ">=0.9.0 <0.10.0",
     "@antelopejs/interface-email": ">=0.0.6 <1.0.0",
     "@antelopejs/interface-file-storage": ">=0.1.4 <1.0.0",
     "archiver": "^7.0.1",
     "csv-stringify": "^6.7.0",
     "defu": "^6.1.4",
-    "ignore": "^7.0.5",
     "jsonwebtoken": "^9.0.3",
     "mmdb-lib": "^3.0.3",
     "node-cron": "^4.2.1",
@@ -77,7 +77,7 @@
     "zod": "~3.24.2"
   },
   "devDependencies": {
-    "@antelopejs/core": ">=1.16.0 <2",
+    "@antelopejs/core": ">=1.17.0 <2",
     "@antelopejs/tooling-configs": ">=0.0.9 <1.0.0",
     "@types/archiver": "^6.0.4",
     "@types/chai": "^4.3.20",
@@ -116,11 +116,11 @@
     "registry": "https://registry.npmjs.org/"
   },
   "optionalDependencies": {
-    "@antelopejs/interface-dms-automation": ">=0.2.1 <1.0.0",
+    "@antelopejs/interface-dms-automation": ">=0.4.0 <1.0.0",
     "@antelopejs/interface-redis": ">=0.0.9 <1.0.0"
   },
   "peerDependencies": {
-    "@antelopejs/core": ">=1.16.0 <2"
+    "@antelopejs/core": ">=1.17.0 <2"
   },
   "peerDependenciesMeta": {
     "@antelopejs/core": {
@@ -145,6 +145,7 @@
     "knip:all": "knip",
     "docs:catalog": "node scripts/docs-catalog.mjs",
     "docs:catalog:check": "node scripts/docs-catalog.mjs --check",
-    "docs:screenshots": "node scripts/docs-screenshots.mjs"
+    "docs:screenshots": "node scripts/docs-screenshots.mjs",
+    "realtime:tabs-check": "node scripts/realtime-tabs-check.mjs"
   }
 }

package/skills/dms/SKILL.md

@@ -34,7 +34,7 @@ skill (shipped with `@antelopejs/core`).
   `pageRoutePath(slug, route)`); a plain `Controller` the frontend calls sits under
   `/api/<module>/`. A URL names the page's record with `{{params.id}}` /
   `{{query.X}}`; `periodScope` binds a block to a `PeriodSelector`; `realtimeTopic` re-fetches on a
-  `PublishMessage`. Texts are `$` i18n keys or `ComposedText`, never formatted server-side.
+  `PublishMessage` (publish tenant data with `{ tenantId }`). Texts are `$` i18n keys or `ComposedText`, never formatted server-side.
 - **It's interfaces all the way down.** Everything you consume is imported from an
   `@antelopejs/interface-dms/...` subpath; a distributable module exposes its own API from a companion
   `@antelopejs/interface-<name>` package listed in `antelopeJs.implements`.

package/skills/dms-auth/SKILL.md

@@ -78,7 +78,7 @@ RegisterPermission("cookbook.edit", {
   title: "$dms_cookbook.perm.edit",   // i18n key — add to every locale file
   icon: "i-ph-pencil",
   defaultGranted: false,
-  // dependencies: ["cookbook.view"],  // declarative metadata only — not enforced or auto-granted
+  // dependencies: ["cookbook.view"],  // enforced by HasPermission; granted with it by the roles editor and on save
 });
 ```
 
@@ -86,7 +86,9 @@ Then gate with `@AuthUserWithPermission(...)` or the page/component permission o
 check imperatively, use `dms/permissions`: `GetEffectiveUserPermissions`, `HasPermission`,
 `GetPermission` / `GetPermissions` (`GetUserPermissions` for the base set). Two extension
 points reshape the model: `RegisterPermissionsResolver` (`dms/permissions-resolver`) rewrites
-a user's effective set, and `RegisterTenantAccessGate` (`dms/tenant-access`, checked via
+a user's effective set (the role preview also runs it, with `context.preview` set on the
+resolver's fourth argument and the viewer's user id: shape the set as for an ordinary
+member there, never from the viewer's standing), and `RegisterTenantAccessGate` (`dms/tenant-access`, checked via
 `CheckTenantAccess` / `AssertTenantAccess`) can block a whole tenant. The `dms/guards`
 decorators also run the tenant access gate; routes that must stay reachable for a denied
 tenant (billing, recovery) opt out with `@AuthTenantOwner({ bypassTenantAccessGate: true })`.
@@ -102,7 +104,7 @@ there too); `RoleModel`, `UserInviteModel`, `TenantModel`, `TenantMemberModel` u
 The DMS is **multi-tenant by default** (single-tenant apps live in the `default` tenant).
 Primitives, covered in `docs/03.auth-and-tenancy/03.multi-tenant.md`: `@TenantScopedModel`
 (`dms/tenant-scoped-model`) scopes a model to the request's tenant, `getRequestTenantId`
-(`dms/request-tenant`) reads it, `applyTenantOwnership`
+(`dms/request-tenant`) reads it (the verified credential's tenant, `default` without one), `applyTenantOwnership`
 (`dms/tenant-ownership`) upserts a user's tenant membership (roles + owner flag),
 `inviteUserToTenant` (`dms/invites`, expiry `INVITE_EXPIRY_DAYS`), and `CROSS_INSTANCE`
 (`@antelopejs/interface-database`) for cross-tenant queries. SaaS mode (Stripe billing,

package/skills/dms-best-practices/REFERENCE.md

@@ -13,11 +13,13 @@ Material for [SKILL.md](SKILL.md): mapping design elements to DMS blocks, the `P
 | Ranked list, leaderboard | `TopListCard` | Bar position, rank badge style |
 | Date range picker | `PeriodSelector` (`variant: "segmented"` for pills) | Preset labels |
 | Live / pause switch | `LiveToggle` | Pill vs segmented |
+| Context bar of a page with a period or live data | `pageToolbar()` (a `PageToolbar` holding the `LiveToggle` and `PeriodSelector`) | Leading blocks, `size` |
 | Table, list with actions | `TableView` over a DataController (`displays` for cards / kanban) | Column widths, row height (`density`) |
 | Detail facts of a record | `KeyValueList` | Value alignment |
 | Recent events, audit log | `ActivityFeed` | Day separators vs relative times |
 | Usage bar, quota | `Meter` | Bar thickness (`size`) |
 | Notice, alert strip | `Banner` | Wash vs flat background |
+| Strip under the dashboard header, across pages | `RegisterLayoutBanner` (backend): the app's pages by default, `scope: "everywhere"` for a workspace-wide state | Not inside `/modules` unless scoped `everywhere` |
 | Empty / first-run screen | `EmptyState` (or `Guard` around blocks) | Illustration vs icon well |
 | Links to sub-pages as cards | `NavCardGrid` | Card height |
 | Code snippet | `CodeBlock` | Theme of the highlighting |

package/skills/dms-best-practices/SKILL.md

@@ -73,5 +73,9 @@ The protocol is done when every visibly different component has an answer and ev
 
 - Every page field and child is a DMS block, except custom blocks the user chose through the path.
 - Every `CustomComponent` has `.meta({ name, description, icon })` with `$` keys present in every locale file.
+- Every automation node a module registers names itself, its description and each schema property's `title` and `description` with `$` keys present in every locale file (`docs/02.building/06.backend-services.md`, Texts in the builder).
+- An automation action with side effects (email, notification, write) declares `dryRun(input, ctx)`: it checks the input as `execute` would and acts on nothing, so a builder Test run sends nothing (`docs/02.building/06.backend-services.md`, Test runs).
+- Locale values escape vue-i18n's special characters as literals (`{'@'}`, `{'{'}`, `{'}'}`, `{'|'}`): a raw `@` or brace breaks the message's compilation (`docs/02.building/07.localization.md`, Special characters).
 - Data comes from routes (`fetchUrl`) rather than options computed at registration; a custom block reads its route with `useApiData` (server-rendered, refreshed with the page) and writes with `$authFetch`.
+- Publish tenant data with the tenant id: a `PublishMessage` about one workspace's data passes `{ tenantId }`, or it wakes the page of every workspace.
 - Verified live with **dms-project** (the build only typechecks `src/`).

package/skills/dms-module/SKILL.md

@@ -85,7 +85,7 @@ module's frontend; without it the module is backend-only.
 
 `renderer` names the framework (Vue 3), not a loader release. The `@antelopejs/dms-frontend`
 releases the frontend module runs on go in the frontend module's own `package.json`, as
-`"engines": { "@antelopejs/dms-frontend": ">=0.6.0 <0.7.0" }`: the loader refuses the module
+`"engines": { "@antelopejs/dms-frontend": ">=0.9.0 <0.10.0" }`: the loader refuses the module
 outside that range. Cap it below the next loader minor while the loader is 0.x.
 
 An absolute link (a public file, a snippet to copy, a mail) is built on `await GetApiBaseUrl()`
@@ -103,7 +103,8 @@ module root** (nest under what `RegisterModule` returned, or rely on `defaultCat
 module pages cannot use the Settings category, and the module must exist before a page names
 it. Pages resolve at `/modules/<moduleId>/<urlSlug>`; entering the module lands on
 `landingPage` if set, else the first page by `order` — `/modules/<id>` itself redirects there (server
-redirect, query and hash kept), so never register a hidden page to forward it. Access is **owner-only by design**: the
+redirect, query and hash kept), so never register a hidden page to forward it. `store` is not a
+module id to take: `/modules/store` is the DMS's module store. Access is **owner-only by design**: the
 Modules group is visible to the platform owner alone (the `*` holder), and the
 `modules.<moduleId>.…` permission ids are module-scoped — never grantable through Roles. On a
 SaaS deployment that means you, the maker, not your customers; a screen for end users belongs