@conduction/nextcloud-vue 2.56.0-beta.30 → 2.56.0-beta.31

package/src/components/CnAppRoot/CnAppRoot.vue

@@ -31,10 +31,12 @@
 
   Hosts a per-user `NcAppSettingsDialog` that any descendant can open
   via the injected `cnOpenUserSettings()` method. CnAppNav binds the
-  inject to manifest entries with `action: "user-settings"`. Apps
-  populate the modal by passing `NcAppSettingsSection`s into the
-  `#user-settings` slot; the slot falls back to a single placeholder
-  section when no content is supplied.
+  inject to manifest entries with `action: "user-settings"`. The modal
+  draws the library's default sections (notifications, credentials,
+  walkthrough replay, integrations). Apps add their own
+  `NcAppSettingsSection`s through `#user-settings-sections` and place,
+  order or hide the defaults with the `userSettingsSections` prop. The
+  older `#user-settings` slot replaces the defaults instead.
 
   A SECOND, distinct `NcAppSettingsDialog` hosts admin-only, app-level
   (not per-user) settings, driven GENERICALLY by `manifest.adminSettings[]`
@@ -534,18 +536,33 @@
 			  User-settings modal. Always mounted so descendants can
 			  open it via the `cnOpenUserSettings` inject (CnAppNav
 			  wires this to manifest entries with
-			  `action: "user-settings"`). The `#user-settings` slot
-			  hosts NcAppSettingsSection children; the placeholder
-			  fallback below renders when no slot content is supplied.
+			  `action: "user-settings"`).
+
+			  The dialog draws its sections in the order
+			  `userSettingsSectionOrder()` returns: `app` (the app's own
+			  sections from the slots), `notifications`, `credentials`,
+			  `walkthrough` and `integrations`. A key that is left out is
+			  not drawn. Two slots carry the app's sections:
+			  - `#user-settings-sections` adds them: the library's default
+			    sections stay unless `userSettingsSections` leaves them out.
+			  - `#user-settings` (the original slot) replaces the defaults,
+			    as it always did: only the app's content and the
+			    integrations section are drawn, unless `userSettingsSections`
+			    names more.
 			-->
 			<NcAppSettingsDialog
 				:open="userSettingsOpen"
 				:showNavigation="true"
 				:name="resolvedUserSettingsTitle"
 				@update:open="userSettingsOpen = $event">
-				<!-- @slot user-settings Sections rendered inside the host NcAppSettingsDialog. Pass NcAppSettingsSection children. Defaults to the notification-preferences pane when omitted. -->
-				<slot name="user-settings">
-					<CnNotificationPreferences v-if="userSettingsOpen" />
+				<template v-for="section in userSettingsSectionOrder()" :key="section">
+					<template v-if="section === 'app'">
+						<!-- @slot user-settings The app's own sections (NcAppSettingsSection children), REPLACING the library's default sections: filling it draws only this content and the integrations section, unless the `userSettingsSections` prop names more. Prefer `#user-settings-sections`. -->
+						<slot name="user-settings" />
+						<!-- @slot user-settings-sections The app's own sections (NcAppSettingsSection children), ADDED to the library's default sections (notifications, credentials, walkthrough, integrations). Place, order or hide the defaults with the `userSettingsSections` prop. -->
+						<slot name="user-settings-sections" />
+					</template>
+					<CnNotificationPreferences v-else-if="section === 'notifications' && userSettingsOpen" />
 					<!--
 						Credential broker (OpenRegister). Lets the user manage the
 						secrets OR holds on their behalf; apps call external providers
@@ -553,9 +570,9 @@
 						`credentials[]` declarations drive the informational "Apps
 						requesting credentials" list.
 					-->
-					<NcAppSettingsSection v-if="userSettingsOpen"
+					<NcAppSettingsSection v-else-if="section === 'credentials' && userSettingsOpen"
 						id="credentials"
-						:name="translate('Credentials')">
+						:name="libraryCopy('Credentials')">
 						<CnCredentials
 							scope="personal"
 							:appId="appId"
@@ -567,7 +584,7 @@
 						when the manifest declares an enabled tour, so apps
 						without a walkthrough never show an empty section.
 					-->
-					<NcAppSettingsSection v-if="walkthroughEnabled"
+					<NcAppSettingsSection v-else-if="section === 'walkthrough' && walkthroughEnabled"
 						id="cn-walkthrough"
 						:name="restartWalkthroughSectionName">
 						<p class="cn-app-root__walkthrough-hint">
@@ -595,48 +612,47 @@
 							</NcButton>
 						</div>
 					</NcAppSettingsSection>
-				</slot>
-				<!--
-					Integrations (ADR-110) — the links that leave this app for
-					another one, gathered out of the navigation into one place.
-
-					DELIBERATELY OUTSIDE the #user-settings slot. Six fleet apps
-					override that slot, and anything placed inside the default
-					fallback disappears the moment an app supplies its own
-					content — silently, because an unmatched slot renders nothing
-					and reports nothing. A contract every app is supposed to
-					honour cannot live somewhere six apps switch off by accident.
-
-					Renders nothing when the app declares no integration
-					entries, so apps without any never show an empty section.
-				-->
-				<NcAppSettingsSection v-if="userSettingsOpen && integrationEntries.length"
-					id="cn-integrations"
-					:name="translate('Integrations')">
-					<p class="cn-app-root__integrations-hint">
-						{{ translate('These open in another app.') }}
-					</p>
-					<ul class="cn-app-root__integrations">
-						<li v-for="entry in integrationEntries" :key="entry.id">
-							<!--
-								One uniform external-link icon rather than the
-								entry's own: every row here goes to a different
-								app, which is the thing worth signalling, and
-								CnIcon falls back to a question mark for any
-								name an app has not registered — a broken-looking
-								glyph on a link that works fine.
-							-->
-							<NcButton variant="tertiary"
-								:href="entry.href"
-								:aria-label="entry.label">
-								<template #icon>
-									<OpenInNew :size="20" />
-								</template>
-								{{ entry.label }}
-							</NcButton>
-						</li>
-					</ul>
-				</NcAppSettingsSection>
+					<!--
+						Integrations (ADR-110): the links that leave this app for
+						another one, gathered out of the navigation into one place.
+
+						Drawn whether or not the app fills `#user-settings`: six
+						fleet apps fill that slot, and a section placed inside its
+						fallback disappeared for all of them in silence. Only an
+						explicit `userSettingsSections` without `integrations`
+						hides it, for an app whose board does not draw it.
+
+						Renders nothing when the app declares no integration
+						entries, so apps without any never show an empty section.
+					-->
+					<NcAppSettingsSection v-else-if="section === 'integrations' && userSettingsOpen && integrationEntries.length"
+						id="cn-integrations"
+						:name="translate('Integrations')">
+						<p class="cn-app-root__integrations-hint">
+							{{ libraryCopy('These open in another app.') }}
+						</p>
+						<ul class="cn-app-root__integrations">
+							<li v-for="entry in integrationEntries" :key="entry.id">
+								<!--
+									One uniform external-link icon rather than the
+									entry's own: every row here goes to a different
+									app, which is the thing worth signalling, and
+									CnIcon falls back to a question mark for any
+									name an app has not registered, a broken-looking
+									glyph on a link that works fine.
+								-->
+								<NcButton variant="tertiary"
+									:href="entry.href"
+									:aria-label="entry.label">
+									<template #icon>
+										<OpenInNew :size="20" />
+									</template>
+									{{ entry.label }}
+								</NcButton>
+							</li>
+						</ul>
+					</NcAppSettingsSection>
+				</template>
 			</NcAppSettingsDialog>
 
 			<!--
@@ -781,6 +797,12 @@ const KNOWN_REGISTRY_KINDS = Object.keys(REGISTRY_KIND_REQUIRED_FIELDS)
  */
 const OR_STORE_LINK = '/index.php/settings/apps/integration/openregister'
 
+/**
+ * The sections of the user-settings modal, in their default order. `app`
+ * stands for the app's own slot content.
+ */
+const USER_SETTINGS_SECTIONS = ['app', 'notifications', 'credentials', 'walkthrough', 'integrations']
+
 export default {
 	name: 'CnAppRoot',
 
@@ -1625,6 +1647,28 @@ export default {
 			default: '',
 		},
 
+		/**
+		 * The sections of the user-settings modal, in the order they are
+		 * drawn. Keys: `app` (the content of the `#user-settings-sections`
+		 * and `#user-settings` slots), `notifications`, `credentials`,
+		 * `walkthrough` and `integrations`. A key that is left out is not
+		 * drawn, so `['app', 'credentials', 'walkthrough']` hides the
+		 * notifications pane and the integrations section. Unknown keys are
+		 * ignored. The app's slot content is always drawn: without `app` in
+		 * the list it comes first.
+		 *
+		 * `null` (the default) keeps what each slot always did: all
+		 * defaults after the `#user-settings-sections` content, or only the
+		 * `#user-settings` content and the integrations section when an app
+		 * fills that older slot.
+		 *
+		 * @type {Array<string>|null}
+		 */
+		userSettingsSections: {
+			type: Array,
+			default: null,
+		},
+
 		/**
 		 * Title rendered at the top of the admin-settings modal
 		 * (NcAppSettingsDialog `name` prop). Defaults to the
@@ -3017,7 +3061,7 @@ export default {
 		},
 
 		resolvedUserSettingsTitle() {
-			return this.userSettingsTitle || this.translate('User settings')
+			return this.userSettingsTitle || this.libraryCopy('User settings')
 		},
 
 		/**
@@ -3036,7 +3080,7 @@ export default {
 		 * @return {string}
 		 */
 		restartWalkthroughSectionName() {
-			return this.translate('Walkthrough')
+			return this.libraryCopy('Walkthrough')
 		},
 
 		/**
@@ -3045,7 +3089,7 @@ export default {
 		 * @return {string}
 		 */
 		restartWalkthroughHint() {
-			return this.translate('Take the guided tour of this app again.')
+			return this.libraryCopy('Take the guided tour of this app again.')
 		},
 
 		/**
@@ -3054,7 +3098,7 @@ export default {
 		 * @return {string}
 		 */
 		restartWalkthroughLabel() {
-			return this.translate('Restart walkthrough')
+			return this.libraryCopy('Restart walkthrough')
 		},
 
 		/**
@@ -3389,6 +3433,54 @@ export default {
 			return legacy || null
 		},
 
+		/**
+		 * The keys of the user-settings sections to draw, in order. A method
+		 * rather than a computed, because which slots an app fills is read
+		 * from `$slots`, which a computed does not track.
+		 *
+		 * @return {Array<string>} Keys out of `USER_SETTINGS_SECTIONS`.
+		 * @spec openspec/changes/user-settings-sections/specs/user-settings-sections/spec.md#requirement-the-user-settings-dialog-keeps-its-default-sections-next-to-the-apps-own
+		 */
+		userSettingsSectionOrder() {
+			const replaces = Boolean(this.$slots['user-settings'])
+			const adds = Boolean(this.$slots['user-settings-sections'])
+			let order
+			if (Array.isArray(this.userSettingsSections)) {
+				order = [...new Set(this.userSettingsSections.filter((key) => USER_SETTINGS_SECTIONS.includes(key)))]
+			} else if (replaces) {
+				order = ['app', 'integrations']
+			} else {
+				order = [...USER_SETTINGS_SECTIONS]
+			}
+			if ((replaces || adds) && !order.includes('app')) {
+				order.unshift('app')
+			}
+			return order
+		},
+
+		/**
+		 * Copy for a part of the user settings dialog the library draws itself
+		 * (its title, the credentials and walkthrough sections). The library's
+		 * own catalogue answers first, because the app's catalogue may give
+		 * the same English word another meaning: learniq translates
+		 * "Credentials" as "Diploma's" for its own records, and the dialog
+		 * showed that above the vault pane. Only when the library has no
+		 * translation in the user's language does the host `translate` get a
+		 * turn, then the text as written.
+		 *
+		 * @param {string} key The English source string.
+		 * @return {string} The translated copy.
+		 * @spec openspec/changes/dutch-user-settings-dialog/specs/dutch-user-settings-dialog/spec.md#requirement-the-user-settings-dialog-reads-dutch-for-a-dutch-reader
+		 */
+		libraryCopy(key) {
+			const own = t('nextcloud-vue', key)
+			if (typeof own === 'string' && own !== '' && own !== key) {
+				return own
+			}
+			const host = this.translate(key)
+			return typeof host === 'string' && host !== '' ? host : key
+		},
+
 		/**
 		 * Return the translated copy for `key`, or `fallback` when the
 		 * `translate` prop leaves the key unchanged (its default is the

package/src/components/CnBannerWidget/CnBannerWidget.vue

@@ -7,7 +7,7 @@
 	<section
 		v-if="visible && isAttention"
 		class="cn-banner-widget cn-banner-widget--attention"
-		:class="'cn-banner-widget--' + resolvedVariant"
+		:class="['cn-banner-widget--' + resolvedVariant, { 'cn-banner-widget--stacked': isStacked }]"
 		:aria-labelledby="headingId"
 		data-testid="cn-banner-widget-attention">
 		<div class="cn-banner-widget__body">
@@ -65,7 +65,9 @@
 import { translate as t } from '@nextcloud/l10n'
 import { NcNoteCard } from '@nextcloud/vue'
 import { normalizeLook } from '../../composables/useLook.js'
+import { fillTemplate } from '../../utils/fillTemplate.js'
 import { followLinkClick, resolveHref } from '../../utils/linkNavigation.js'
+import { readPath } from '../../utils/readPath.js'
 import { safeHref } from '../../utils/safeHref.js'
 import { nextUid } from '../../utils/uid.js'
 import { compareVisibleWhen, readVisibleWhenValue } from '../../utils/visibleWhen.js'
@@ -266,6 +268,18 @@ export default {
 			default: null,
 		},
 
+		/**
+		 * Attention card: stack the actions under the text instead of beside it,
+		 * the "Begin hier" card of PqMijnWerk (16px title, the action under the
+		 * reason). Falls back to the `content` blob.
+		 *
+		 * @spec openspec/changes/screens-start-here-banner/specs/start-here-banner/spec.md#requirement-a-card-can-stack-its-action-under-the-text
+		 */
+		stacked: {
+			type: Boolean,
+			default: false,
+		},
+
 		/**
 		 * Stored content blob (CnDashboardPage registry branch) carrying the
 		 * same keys as the flat props: `{ variant, text, visibleWhen, route,
@@ -326,6 +340,12 @@ export default {
 			 * the text wherever it says `{value}`.
 			 */
 			conditionValue: null,
+			/**
+			 * The first row of the `visibleWhen` source query (its `order`
+			 * applied), the card's subject: `{subject.<field>}` in the texts
+			 * and `@subject.<field>` in an action route read it.
+			 */
+			conditionRow: null,
 			/** Whether the visibleWhen request itself failed (not: answered "no"). */
 			conditionFailed: false,
 			/** Why it failed, as the request reported it. */
@@ -383,6 +403,15 @@ export default {
 			return (this.layout || (this.content && this.content.layout) || 'banner') === 'attention'
 		},
 
+		/**
+		 * Whether the actions sit under the text.
+		 *
+		 * @return {boolean}
+		 */
+		isStacked() {
+			return this.stacked || Boolean(this.content && this.content.stacked)
+		},
+
 		/**
 		 * The attention card's kicker (prop, else content).
 		 *
@@ -391,7 +420,7 @@ export default {
 		 */
 		resolvedKicker() {
 			const kicker = this.kicker || (this.content && this.content.kicker) || ''
-			return kicker ? this.tl(kicker) : ''
+			return kicker ? this.fillValue(this.tl(kicker)) : ''
 		},
 
 		/**
@@ -459,7 +488,7 @@ export default {
 				let target = null
 				let href = ''
 				if (action.route) {
-					target = typeof action.route === 'string' ? { name: action.route } : action.route
+					target = typeof action.route === 'string' ? { name: action.route } : this.resolveSubject(action.route)
 					href = resolveHref(target, this.$router)
 				} else if (typeof action.href === 'string' && action.href !== '') {
 					const safe = safeHref(action.href)
@@ -518,7 +547,7 @@ export default {
 		 */
 		uncheckedText() {
 			const title = this.title || (this.content && this.content.title) || this.resolvedText
-			if (!title || title.includes('{value}')) {
+			if (!title || title.includes('{value}') || title.includes('{subject.')) {
 				return t('nextcloud-vue', 'Could not check')
 			}
 			// `escape: false`: the result is rendered through `{{ }}`, which escapes.
@@ -590,10 +619,55 @@ export default {
 		 * @spec openspec/changes/workplace-dashboard-primitives/specs/workplace-dashboard-primitives/spec.md#requirement-attention-card
 		 */
 		fillValue(text) {
-			if (this.conditionValue === null || !text.includes('{value}')) {
+			let out = text
+			if (this.conditionValue !== null && out.includes('{value}')) {
+				out = out.replaceAll('{value}', String(this.conditionValue))
+			}
+			return this.fillSubject(out)
+		},
+
+		/**
+		 * Fill `{subject.<field>}` (and `{subject.<field>|date}`, `|days`) from
+		 * the card's subject row. A token with no value empties the whole text,
+		 * as in a record list. Text without a subject token is untouched.
+		 *
+		 * @param {string} text The text.
+		 * @return {string} The filled text.
+		 * @spec openspec/changes/screens-start-here-banner/specs/start-here-banner/spec.md#requirement-a-banner-can-name-the-first-row-of-a-query
+		 */
+		fillSubject(text) {
+			if (typeof text !== 'string' || !text.includes('{subject.')) {
 				return text
 			}
-			return text.replaceAll('{value}', String(this.conditionValue))
+			// `{value}` is not a subject token: keep it out of the template fill.
+			const guard = '\u0000value\u0000'
+			const filled = fillTemplate(text.replaceAll('{value}', guard), { subject: this.conditionRow || {} })
+			return filled.replaceAll(guard, '{value}')
+		},
+
+		/**
+		 * Replace `@subject.<field>` strings anywhere in an action route
+		 * (params, query) by the subject's value.
+		 *
+		 * @param {unknown} node A route name, location or any nested part of one.
+		 * @return {unknown} The same shape with the tokens resolved.
+		 * @spec openspec/changes/screens-start-here-banner/specs/start-here-banner/spec.md#requirement-a-banner-can-name-the-first-row-of-a-query
+		 */
+		resolveSubject(node) {
+			if (typeof node === 'string') {
+				if (!node.startsWith('@subject.')) {
+					return node
+				}
+				const value = this.conditionRow ? readPath(this.conditionRow, node.slice('@subject.'.length)) : undefined
+				return value === undefined || value === null ? '' : String(value)
+			}
+			if (Array.isArray(node)) {
+				return node.map((item) => this.resolveSubject(item))
+			}
+			if (node && typeof node === 'object') {
+				return Object.fromEntries(Object.entries(node).map(([key, value]) => [key, this.resolveSubject(value)]))
+			}
+			return node
 		},
 
 		/**
@@ -636,6 +710,7 @@ export default {
 			if (outcome) {
 				this.conditionMet = outcome.met === true
 				this.conditionValue = outcome.value !== undefined ? outcome.value : null
+				this.conditionRow = outcome.row && typeof outcome.row === 'object' ? outcome.row : null
 				this.conditionFailed = outcome.failed === true
 				this.conditionFailureReason = outcome.failed === true && typeof outcome.reason === 'string' ? outcome.reason : ''
 				return
@@ -644,12 +719,15 @@ export default {
 			if (!cond) {
 				this.conditionMet = null
 				this.conditionValue = null
+				this.conditionRow = null
 				this.conditionFailed = false
 				this.conditionFailureReason = ''
 				return
 			}
 			try {
-				const value = await readVisibleWhenValue(cond)
+				const sink = {}
+				const value = await readVisibleWhenValue(cond, undefined, sink)
+				this.conditionRow = sink.row || null
 				this.conditionValue = value
 				this.conditionMet = compareVisibleWhen(value, cond.op || 'eq', cond.value)
 				this.conditionFailed = false
@@ -662,6 +740,7 @@ export default {
 				console.warn('[CnBannerWidget] visibleWhen could not be evaluated, banner hidden:', error?.message || error)
 				this.conditionMet = false
 				this.conditionValue = null
+				this.conditionRow = null
 				this.conditionFailed = true
 				this.conditionFailureReason = typeof error?.message === 'string' ? error.message : String(error ?? '')
 			}
@@ -784,6 +863,32 @@ export default {
 	color: var(--color-text-maxcontrast);
 }
 
+/* Stacked (PqMijnWerk "Begin hier"): the text, then the action under it. */
+.cn-banner-widget--stacked {
+	flex-direction: column;
+	align-items: flex-start;
+	gap: 10px;
+}
+
+.cn-banner-widget--stacked .cn-banner-widget__body {
+	flex: 0 0 auto;
+	gap: 10px;
+}
+
+.cn-banner-widget--stacked .cn-banner-widget__title {
+	font-size: 16px;
+	line-height: 1.4;
+}
+
+.cn-banner-widget--stacked .cn-banner-widget__reason {
+	font-size: 14px;
+}
+
+.cn-banner-widget--stacked .cn-banner-widget__action {
+	min-height: var(--cn-board-control-height, 40px);
+	font-size: 14px;
+}
+
 .cn-banner-widget__actions {
 	display: flex;
 	flex-wrap: wrap;

package/src/components/CnCellRenderer/CnCellRenderer.vue

@@ -882,11 +882,14 @@ export default {
 		 * a `{ value: variant }` map (e.g. `{ placed: 'primary', delivered: 'success' }`)
 		 * that CnStatusBadge resolves per label. Null when unset (falls back to
 		 * `badgeVariant`). Lets a manifest colour a status column without code.
+		 * A column-level `colorMap` (it reaches the cell as the property's
+		 * `colorMap`) works too, so `{ widget: 'badge', colorMap }` and
+		 * `{ widget: 'badge', widgetProps: { colorMap } }` read the same.
 		 *
 		 * @return {object|null}
 		 */
 		badgeColorMap() {
-			return (this.widgetProps && this.widgetProps.colorMap) || null
+			return (this.widgetProps && this.widgetProps.colorMap) || this.enumColorMap || null
 		},
 
 		/**

package/src/components/CnConversationThread/CnConversationWidget.vue

@@ -29,7 +29,7 @@ import { readPath } from '../../utils/readPath.js'
  * `content: { field, endpoint?, authorField?, timeField?, textField?, sideField?, usValue? }`.
  * `@objectId` in `endpoint` is replaced by the record's id. A reply the
  * endpoint accepts is shown at once, until the record is read again.
- * Resolved by its registry key, not exported.
+ * Resolved by its registry key, and exported for an app that renders it itself.
  */
 export default {
 	name: 'CnConversationWidget',

package/src/components/CnDashboardGrid/CnDashboardGrid.vue

@@ -424,14 +424,14 @@ export default {
 		 * anything whose height is whatever it turned out to have.
 		 *
 		 * @param {object} item the layout item.
-		 * @return {string|undefined} `'true'`, a row minimum as a string, or undefined.
+		 * @return {string|undefined} `'true'`, a row maximum as a string, or undefined.
 		 */
 		sizeToContentAttr(item) {
 			const v = item && item.sizeToContent
 			if (v === true) {
 				return 'true'
 			}
-			// A number is GridStack's "size to content, but never below N rows".
+			// A number is GridStack's "size to content, but never taller than N rows" (a maximum).
 			if (Number.isFinite(v) && v > 0) {
 				return String(v)
 			}

package/src/components/CnDashboardPage/CnDashboardPage.vue

@@ -933,7 +933,7 @@ import { normalizeLook } from '../../composables/useLook.js'
 import { pageViews } from '../../mixins/pageViews.js'
 import { mergeUserLayout, resolveUserLayoutApi } from '../../store/plugins/dashboardLayouts.js'
 import { isAppInstalled } from '../../utils/appInstalled.js'
-import { compareVisibleWhen, readVisibleWhenValue } from '../../utils/visibleWhen.js'
+import { compareVisibleWhen, evaluateWorkspaceCondition, isWorkspaceCondition, readVisibleWhenValue } from '../../utils/visibleWhen.js'
 import { canonicalWidgetType } from '../../utils/widgetTypeAliases.js'
 import { CnActionButtons } from '../CnActionButtons/index.js'
 import { CnActionsMenu } from '../CnActionsMenu/index.js'
@@ -2256,6 +2256,10 @@ export default {
 			const items = []
 			for (const id of ids) {
 				if (this.getWidgetDef(id) || this.hasWidgetSlot(id)) {
+					// A tile a page control hides surrenders its cell.
+					if (!this.gridEditable && this.isHiddenByWorkspace(id)) {
+						continue
+					}
 					items.push({ widgetId: id })
 				} else if (process.env.NODE_ENV !== 'production') {
 					// eslint-disable-next-line no-console
@@ -3435,6 +3439,11 @@ export default {
 			if (!visibleWhen) {
 				return false
 			}
+			// A workspace condition (a page control's choice) is answered at
+			// once from the reactive bag; nothing is fetched for it.
+			if (isWorkspaceCondition(visibleWhen)) {
+				return !evaluateWorkspaceCondition(visibleWhen, this.workspaceContext)
+			}
 			const outcome = this.widgetConditionOutcome[item.widgetId]
 			if (outcome && outcome.failed === true && layout === 'attention' && this.isBannerDef(def)) {
 				return false
@@ -3442,6 +3451,23 @@ export default {
 			return !outcome || outcome.met !== true
 		},
 
+		/**
+		 * Whether a page control (a workspace condition on `visibleWhen`)
+		 * hides this widget right now. Other conditions are not looked at.
+		 *
+		 * @param {string} widgetId The widget id.
+		 * @return {boolean} True when the widget must not draw.
+		 * @spec openspec/changes/screens-page-lenses/specs/page-lenses/spec.md#requirement-a-widget-can-be-shown-by-a-workspace-value
+		 */
+		isHiddenByWorkspace(widgetId) {
+			const def = this.getWidgetDef(widgetId)
+			if (!def || !def.type) {
+				return false
+			}
+			const { visibleWhen } = this.widgetDisplayConfig(def)
+			return isWorkspaceCondition(visibleWhen) && !evaluateWorkspaceCondition(visibleWhen, this.workspaceContext)
+		},
+
 		/**
 		 * Evaluate every conditional widget's `visibleWhen` into
 		 * `widgetConditionOutcome` — the verdict AND the raw field value,
@@ -3464,7 +3490,8 @@ export default {
 		async evaluateWidgetConditions() {
 			const defs = [...(this.widgets || []), ...this.normalizedViews.flatMap((view) => view.widgets)]
 			const conditional = defs.filter((def) => def && def.id && def.type
-				&& this.widgetDisplayConfig(def).visibleWhen)
+				&& this.widgetDisplayConfig(def).visibleWhen
+				&& !isWorkspaceCondition(this.widgetDisplayConfig(def).visibleWhen))
 			// Skip when the CONDITIONAL SET is unchanged: the deep `widgets`
 			// watch fires on any def edit, but only an added/removed/edited
 			// predicate warrants refetching every conditional endpoint.
@@ -3484,8 +3511,13 @@ export default {
 				const cond = this.widgetDisplayConfig(def).visibleWhen
 				let outcome
 				try {
-					const value = await readVisibleWhenValue(cond)
+					// `sink` keeps the first row of a source query, for a banner that names it.
+					const sink = {}
+					const value = await readVisibleWhenValue(cond, undefined, sink)
 					outcome = { met: compareVisibleWhen(value, cond.op || 'eq', cond.value), value }
+					if (sink.row) {
+						outcome.row = sink.row
+					}
 				} catch (error) {
 					// Fail-safe: not met. But the failure is kept, and said
 					// out loud: a failed count and "nothing to report" look
@@ -3985,6 +4017,11 @@ export default {
 			const def = this.getWidgetDef(item.widgetId)
 			const value = item.showTitle !== undefined ? item.showTitle : def?.showTitle
 			if (value === undefined || value === null) {
+				// A banner that names no title draws no title row: it used to show
+				// its widget id ("attention-first") as the card title.
+				if (this.isBannerDef(def) && !item.customTitle && !def?.customTitle && !def?.title) {
+					return false
+				}
 				return !this.isCardWidget(item)
 			}
 			return value !== false