@conduction/nextcloud-vue 2.99.0 → 2.100.0

package/src/components/CnIndexPage/CnIndexPage.vue

@@ -1578,6 +1578,8 @@ export default {
 	 */
 	inject: {
 		cnCustomComponents: { default: () => ({}) },
+		/** The permissions the user holds, provided by CnAppRoot; for gated page tabs. */
+		cnPermissions: { default: () => [] },
 		/** The app id CnAppRoot provides, for the plural form of `countSubtitle`. */
 		cnAppId: { default: '' },
 		/**
@@ -1668,7 +1670,9 @@ export default {
 
 		/**
 		 * A note after the breadcrumb and a middle dot (manifest `config.headerMeta`),
-		 * such as "{total} open": `{total}` and `{shown}` are the list's counts.
+		 * such as "{total} open": `{total}` and `{shown}` are the list's counts,
+		 * and `{count:<name>}` the count of a list named in `headerMetaCounts`
+		 * ("{total} contracten bij {count:suppliers} leveranciers").
 		 *
 		 * @spec openspec/changes/page-header-breadcrumb/specs/page-header/spec.md#requirement-a-list-dashboard-or-settings-page-can-show-a-breadcrumb-and-a-meta-note
 		 */
@@ -1677,12 +1681,29 @@ export default {
 			default: '',
 		},
 
+		/**
+		 * The other lists `headerMeta` counts (manifest `config.headerMetaCounts`):
+		 * `{ <name>: { register, schema, filter? } }`, each read as one list
+		 * total and filled in for `{count:<name>}`. While a count loads, or when
+		 * it fails, the note is left out rather than shown with a gap.
+		 *
+		 * @type {Record<string, {register: string, schema: string, filter?: object}>|null}
+		 */
+		headerMetaCounts: {
+			type: Object,
+			default: null,
+		},
+
 		/**
 		 * Tabs to sibling pages above the toolbar (manifest `config.pageTabs`),
 		 * each `{ id?, label, route?, params?, query?, href?, countFrom?: {
-		 * register, schema, filter? } }`: DqPrivacy's "AVG-verzoeken |
-		 * Datalekken". The current page's tab is marked; `countFrom` adds the
-		 * count of that list. Wins over a named source's own page tabs.
+		 * register, schema, filter? }, adminOnly?, permission? }`: DqPrivacy's
+		 * "AVG-verzoeken | Datalekken". The current page's tab is marked;
+		 * `countFrom` adds the count of that list. A tab with `adminOnly` shows
+		 * only to an instance admin, one with `permission` only to a user who
+		 * holds it. That hides the tab and nothing more: the page it points to
+		 * must still refuse the user on the server. Wins over a named source's
+		 * own page tabs.
 		 *
 		 * @type {Array<object>|null}
 		 * @spec openspec/changes/index-page-tabs-notice/specs/index-page/spec.md#requirement-an-index-page-can-link-its-sibling-pages-as-tabs
@@ -3722,6 +3743,8 @@ export default {
 			filterStripCounts: null,
 			/** The `countFrom` counts of the manifest page tabs, by index. */
 			pageTabCounts: {},
+			/** The `headerMetaCounts` totals, by name; a failed one is null. */
+			headerMetaCountValues: {},
 			/** The tabs `quickFiltersFrom` produced, or null before they load. */
 			generatedQuickFilters: null,
 			/** Count per saved-view id, for the views control; null = none. */
@@ -6202,9 +6225,13 @@ export default {
 			if (!Array.isArray(this.pageTabs) || this.pageTabs.length === 0) {
 				return this.sourcePageTabs
 			}
+			// The index is the tab's place in `pageTabs`, which is how its count
+			// is keyed, so the tabs are numbered before any is left out.
 			return this.pageTabs
-				.filter((tab) => tab && typeof tab.label === 'string' && tab.label !== '' && (tab.route || tab.to || tab.href))
-				.map((tab, index) => {
+				.map((tab, index) => ({ tab, index }))
+				.filter(({ tab }) => tab && typeof tab.label === 'string' && tab.label !== '' && (tab.route || tab.to || tab.href))
+				.filter(({ tab }) => this.pageTabVisible(tab))
+				.map(({ tab, index }) => {
 					const to = tab.route
 						? { name: tab.route, ...(tab.params ? { params: tab.params } : {}), ...(tab.query ? { query: tab.query } : {}) }
 						: (tab.to || tab.href)
@@ -6646,9 +6673,41 @@ export default {
 				return ''
 			}
 			const total = this.effectivePagination?.total
-			return this.cnTranslate(headerMeta)
+			let missing = false
+			const text = this.cnTranslate(headerMeta)
 				.replace('{shown}', String(this.effectiveObjects.length))
 				.replace('{total}', typeof total === 'number' ? String(total) : '')
+				.replace(/\{count:([\w-]+)\}/g, (match, name) => {
+					const value = this.headerMetaCountValues[name]
+					if (typeof value !== 'number') {
+						missing = true
+						return ''
+					}
+					return String(value)
+				})
+			return missing ? '' : text
+		},
+
+		/**
+		 * Whether the header note carries a count, so the board leaves out its
+		 * own "{shown} of {total}" line (DqPrivacy, DqContracten).
+		 *
+		 * @return {boolean}
+		 */
+		headerMetaCarriesCount() {
+			const headerMeta = this.presented('headerMeta')
+			return typeof headerMeta === 'string' && /\{(shown|total|count:[\w-]+)\}/.test(headerMeta)
+		},
+
+		/**
+		 * What the header note's other counts depend on, as one key.
+		 *
+		 * @return {string}
+		 */
+		headerMetaCountKey() {
+			const sources = this.headerMetaCounts && typeof this.headerMetaCounts === 'object' ? this.headerMetaCounts : {}
+			const valid = Object.entries(sources).filter(([, from]) => from && from.register && from.schema)
+			return valid.length > 0 ? JSON.stringify(valid) : ''
 		},
 
 		headerDescription() {
@@ -6661,6 +6720,10 @@ export default {
 				// reads "14 van 14" in Dutch; a page's own template goes
 				// through the app's label lookup.
 				const countText = this.presented('countText')
+				// The note after the breadcrumb already says how many there are.
+				if (!countText && !this.countSubtitle && this.headerMetaCarriesCount) {
+					return this.description
+				}
 				if (!countText && !this.countSubtitle) {
 					return t('nextcloud-vue', '{shown} of {total}', { shown, total })
 				}
@@ -6907,6 +6970,13 @@ export default {
 			},
 		},
 
+		headerMetaCountKey: {
+			immediate: true,
+			handler() {
+				this.loadHeaderMetaCounts()
+			},
+		},
+
 		pageTabCountKey: {
 			immediate: true,
 			/** @spec openspec/changes/index-page-tabs-notice/specs/index-page/spec.md#requirement-an-index-page-can-link-its-sibling-pages-as-tabs */
@@ -7326,6 +7396,65 @@ export default {
 			]
 		},
 
+		/**
+		 * Whether Nextcloud says the user administers this instance; false
+		 * when the user cannot be read.
+		 *
+		 * @return {boolean}
+		 */
+		viewerIsAdmin() {
+			try {
+				return getCurrentUser()?.isAdmin === true
+			} catch {
+				return false
+			}
+		},
+
+		/**
+		 * Whether a manifest page tab shows to this user: an `adminOnly` tab to
+		 * an instance admin, a tab with a `permission` to a user who holds it
+		 * (as a menu entry: with no permissions known, it shows). This only
+		 * decides whether the tab is drawn. It is not access control; the
+		 * page behind the tab must enforce its own access on the server.
+		 *
+		 * @param {object} tab The tab declaration.
+		 * @return {boolean} True when the tab is drawn.
+		 */
+		pageTabVisible(tab) {
+			if (tab.adminOnly === true && !this.viewerIsAdmin()) {
+				return false
+			}
+			if (tab.permission) {
+				const held = Array.isArray(this.cnPermissions) ? this.cnPermissions : []
+				if (held.length > 0 && !held.includes(tab.permission)) {
+					return false
+				}
+			}
+			return true
+		},
+
+		/**
+		 * Read the totals of the lists `headerMetaCounts` names, one list
+		 * request each. A failed count is null and leaves the note out.
+		 *
+		 * @return {Promise<void>}
+		 */
+		async loadHeaderMetaCounts() {
+			const key = this.headerMetaCountKey
+			if (key === '') {
+				this.headerMetaCountValues = {}
+				return
+			}
+			const ctx = typeof this.selfFetchTokenCtx === 'function' ? this.selfFetchTokenCtx() : {}
+			const values = {}
+			await Promise.all(JSON.parse(key).map(async ([name, from]) => {
+				values[name] = await fetchListTotal(from.register, from.schema, from.filter || {}, ctx).catch(() => null)
+			}))
+			if (key === this.headerMetaCountKey) {
+				this.headerMetaCountValues = values
+			}
+		},
+
 		/**
 		 * Count the lists behind the manifest page tabs (`countFrom`), one list
 		 * request each. A failed count shows no number.

package/src/components/CnRecordListWidget/CnRecordListWidget.vue

@@ -17,6 +17,22 @@
 		<p v-else-if="rows.length === 0" class="cn-record-list__empty" data-testid="cn-record-list-empty">
 			{{ emptyLabel }}
 		</p>
+		<!-- notice: the rows as sentences in one toned box ("2 waarschuwingen: ..."). -->
+		<div
+			v-else-if="presentation === 'notice'"
+			class="cn-record-list__notice"
+			:class="`cn-record-list__notice--${noticeVariant}`"
+			role="note"
+			data-testid="cn-record-list-notice">
+			<CnIcon
+				:name="noticeIcon"
+				:size="18"
+				class="cn-record-list__notice-icon"
+				aria-hidden="true" />
+			<p class="cn-record-list__notice-text">
+				{{ noticeText }}
+			</p>
+		</div>
 		<ul v-else class="cn-record-list__list">
 			<li
 				v-for="item in items"
@@ -210,7 +226,22 @@ import { readPath } from '../../utils/readPath.js'
 import { dropOptionalUnresolved, hasUnresolvedTokens, resolveFilterTokens } from '../../utils/resolveFilterTokens.js'
 
 const PAGE_REFRESH_CHANNEL = 'cn:page:refresh'
-const PRESENTATIONS = ['rows', 'feed', 'inline', 'cards']
+const PRESENTATIONS = ['rows', 'feed', 'inline', 'cards', 'notice']
+
+/** The tones a `notice` list takes. */
+const NOTICE_VARIANTS = ['info', 'warning', 'error']
+
+/**
+ * A row that is a plain string or number (an endpoint answering `["...", "..."]`)
+ * read as `{ value }`, so the templates reach it as `{value}` and a list
+ * without a `title` shows the value itself. An object row is returned as is.
+ *
+ * @param {(object|string|number)} row The row.
+ * @return {(object|string|number)} The row, or `{ value }` for a string or number.
+ */
+function scalarRow(row) {
+	return typeof row === 'string' || typeof row === 'number' ? { value: String(row) } : row
+}
 
 /**
  * Unwrap a value that may be a ref.
@@ -266,7 +297,7 @@ export default {
 	props: {
 		/**
 		 * The list config: `{ register, schema, filter?, sort?, limit?, extend?,
-		 * presentation?, title?, meta?, text?, label?, pill?, trailing?, icon?,
+		 * presentation?, variant?, lead?, title?, meta?, text?, label?, pill?, trailing?, icon?,
 		 * rowRoute?, rowIdField?, headerLink?, headerNote?, emptyText?, errorText?,
 		 * valueLabels?, endpointSource?, bar? }`. `bar` (`{ valueField, maxField?,
 		 * overVariant? }`) draws a thin track under each row: filled to
@@ -275,7 +306,14 @@ export default {
 		 * largest row. `endpointSource` (`{ url, method?,
 		 * params?, responsePath? }`) reads the rows from an app endpoint instead
 		 * of `register` / `schema`. `valueLabels` maps a field's stored values to the labels
-		 * the templates show.
+		 * the templates show. `headerNote` and `headerLink.label` fill `{total}`
+		 * and `{count:<field>=<value>}`, the loaded rows with that value.
+		 * A row that is a plain string or number (an endpoint
+		 * answering `["…", "…"]`) is read as `{ value }`: templates reach it as
+		 * `{value}`, and without `title` a row shows the value itself.
+		 * `presentation: "notice"` draws the rows as sentences in one box toned by
+		 * `variant` (`info`, `warning` or `error`), after an optional `lead`
+		 * (`{total}` filled in).
 		 *
 		 * @type {object}
 		 */
@@ -334,6 +372,35 @@ export default {
 
 	computed: {
 		/** @return {string} `rows`, `feed`, `inline` or `cards`. */
+		/**
+		 * The tone of a `notice` list (`content.variant`): info, warning or error.
+		 *
+		 * @return {string} The variant, `info` when unset or unknown.
+		 * @spec openspec/changes/record-list-string-rows/specs/record-list-string-rows/spec.md#requirement-a-record-list-draws-rows-that-are-plain-strings
+		 */
+		noticeVariant() {
+			const value = this.content?.variant
+			return NOTICE_VARIANTS.includes(value) ? value : 'info'
+		},
+
+		/** @return {string} The icon of the notice tone. */
+		noticeIcon() {
+			return this.noticeVariant === 'info' ? 'InformationOutline' : 'AlertOutline'
+		},
+
+		/**
+		 * The rows of a `notice` list as one paragraph: each row's title, as
+		 * sentences, after the optional `lead` with `{total}` filled in.
+		 *
+		 * @return {string} The text.
+		 * @spec openspec/changes/record-list-string-rows/specs/record-list-string-rows/spec.md#requirement-a-record-list-draws-rows-that-are-plain-strings
+		 */
+		noticeText() {
+			const parts = this.items.map((item) => item.title).filter((text) => text !== '')
+			const lead = typeof this.content?.lead === 'string' && this.content.lead !== '' ? this.withTotal(this.content.lead) : ''
+			return [lead, ...parts].filter(Boolean).join(' ')
+		},
+
 		presentation() {
 			const value = this.content?.presentation
 			return PRESENTATIONS.includes(value) ? value : 'rows'
@@ -421,7 +488,8 @@ export default {
 		items() {
 			const c = this.content || {}
 			const barScale = this.barScale
-			return this.rows.slice(0, this.limit).map((row, index) => {
+			return this.rows.slice(0, this.limit).map((raw, index) => {
+				const row = scalarRow(raw)
 				const link = this.rowLink(row)
 				return {
 					key: (row && (row.id || row['@self']?.id)) || `row-${index}`,
@@ -430,7 +498,7 @@ export default {
 					tag: link ? 'router-link' : 'div',
 					attrs: link ? { to: link } : {},
 					initials: this.initialsFor(row),
-					title: this.fill(c.title, row),
+					title: this.fill(c.title || (row !== raw ? '{value}' : ''), row),
 					meta: this.metaOf(row),
 					text: this.fill(c.text, row),
 					label: this.fill(c.label, row),
@@ -638,13 +706,22 @@ export default {
 		},
 
 		/**
-		 * Replace `{total}` in a translated label.
+		 * Fill a translated label's counts: `{total}` is the list's total, and
+		 * `{count:<field>=<value>}` the loaded rows whose field reads that
+		 * value ("{count:status=done} van {total} stappen klaar"). The count
+		 * reads the rows the list loaded, so it is exact when `limit` covers
+		 * the list.
 		 *
 		 * @param {string} label The label.
 		 * @return {string} The text.
 		 */
 		withTotal(label) {
-			return this.translate(label).replace(/\{total\}/g, String(this.total))
+			return this.translate(label)
+				.replace(/\{total\}/g, String(this.total))
+				.replace(/\{count:([^=}]+)=([^}]*)\}/g, (match, field, value) => {
+					const wanted = value.trim()
+					return String(this.rows.filter((row) => String(readPath(row, field.trim())) === wanted).length)
+				})
 		},
 
 		/**
@@ -1125,6 +1202,36 @@ export default {
 	margin: 0;
 }
 
+.cn-record-list__notice {
+	display: flex;
+	gap: 10px;
+	align-items: flex-start;
+	padding: 12px 14px;
+	border-radius: var(--border-radius-large, 10px);
+	background: var(--color-primary-element-light, var(--color-background-dark));
+	color: var(--color-main-text);
+}
+
+.cn-record-list__notice--warning {
+	background: var(--color-warning-light, rgba(255, 196, 0, 0.12));
+	color: var(--color-warning-text, var(--color-main-text));
+}
+
+.cn-record-list__notice--error {
+	background: var(--color-error-light, rgba(219, 0, 0, 0.08));
+	color: var(--color-error-text, var(--color-main-text));
+}
+
+.cn-record-list__notice-icon {
+	flex: 0 0 auto;
+	margin-top: 1px;
+}
+
+.cn-record-list__notice-text {
+	margin: 0;
+	line-height: 1.5;
+}
+
 .cn-record-list__loading {
 	display: flex;
 	justify-content: center;

package/src/components/CnSettingsFieldsSection/CnSettingsFieldsSection.vue

@@ -68,6 +68,32 @@ import { serverErrorMessage } from '../../utils/serverErrorMessage.js'
 import { CnSettingsField } from '../CnSettingsField/index.js'
 import { CnSettingsSection } from '../CnSettingsSection/index.js'
 
+/**
+ * A value by key: the key as written when the object holds it (a flat map
+ * with dotted keys such as `integration.brk.mode`), else as a dotted path.
+ *
+ * @param {object} data The object.
+ * @param {string} key The key or dotted path.
+ * @return {unknown}
+ */
+function literalFirst(data, key) {
+	if (data && typeof data === 'object' && Object.hasOwn(data, key)) {
+		return data[key]
+	}
+	return readPath(data, key)
+}
+
+/**
+ * The request options for a target: an OCS endpoint (`/ocs/...`) needs the
+ * `OCS-APIRequest` header; `prefixUrl` already serves it outside index.php.
+ *
+ * @param {string} url The target.
+ * @return {object}
+ */
+function ocsConfig(url) {
+	return /^\/ocs\//.test(String(url)) ? { headers: { 'OCS-APIRequest': 'true' } } : {}
+}
+
 /**
  * Up to two initials of a name, for an image field without an image.
  *
@@ -146,15 +172,16 @@ export default {
 		 * The fields: `[{ key, label, type?, hint?, placeholder?, required?,
 		 * pattern?, patternMessage?, min?, max?, rows?, options?, optionsUrl?,
 		 * optionsPath?, optionLabel?, optionValue?, default?, readOnly?, wide?,
-		 * url?, valuePath?, saveUrl?, saveMethod?, saveKey?, uploadUrl?,
+		 * url?, valuePath?, saveUrl?, saveMethod?, saveKey?, saveParams?, uploadUrl?,
 		 * uploadField?, uploadParams?, uploadValuePath?, initials?, initialsFrom? }]`.
 		 * `type` is `text` (default), `textarea`, `number`, `switch`, `select`,
 		 * `secret` or `image`. `key` names the setting; a dotted key reads a
 		 * nested value and is written as written. A field with its own `url`
 		 * is read there (at `valuePath`, default its key) and saved to its
 		 * `saveUrl` (default that `url`) with `saveMethod` (default POST) under
-		 * `saveKey` (default its key), so one section can hold the settings of
-		 * several apps. An `image` uploads at once to `uploadUrl`. Labels,
+		 * `saveKey` (default its key), with `saveParams` merged into the body,
+		 * so one section can hold the settings of several apps. A target under
+		 * `/ocs/` is sent the `OCS-APIRequest` header. An `image` uploads at once to `uploadUrl`. Labels,
 		 * hints, placeholders and messages go through the app's translate
 		 * function.
 		 *
@@ -343,7 +370,7 @@ export default {
 				const failures = {}
 				await Promise.all(targets.map(async (target) => {
 					try {
-						const response = await axios.get(prefixUrl(target))
+						const response = await axios.get(prefixUrl(target), ocsConfig(target))
 						answers[target] = response?.data ?? {}
 					} catch (error) {
 						failures[target] = error
@@ -396,7 +423,8 @@ export default {
 
 		/**
 		 * A field's value in its read answer: at its `valuePath` (a field with its
-		 * own `url`), else at the section's `valuesPath`, then its `key`.
+		 * own `url`), else at the section's `valuesPath`, then its `key`. A key
+		 * the answer holds as written wins over reading it as a dotted path.
 		 *
 		 * @param {object} field The field.
 		 * @param {object|null} data The answer of the field's read target.
@@ -407,10 +435,10 @@ export default {
 				return undefined
 			}
 			if (field.url) {
-				return readPath(data, field.valuePath || field.key)
+				return literalFirst(data, field.valuePath || field.key)
 			}
-			const values = (this.valuesPath ? readPath(data, this.valuesPath) : data) || {}
-			return Object.hasOwn(values, field.key) ? values[field.key] : readPath(values, field.key)
+			const values = (this.valuesPath ? literalFirst(data, this.valuesPath) : data) || {}
+			return literalFirst(values, field.key)
 		},
 
 		/**
@@ -494,6 +522,7 @@ export default {
 				}
 				const group = groups.get(id)
 				group.fields.push(field)
+				Object.assign(group.data, field.saveParams || {})
 				group.data[field.saveKey || field.key] = value
 			}
 			this.saving = true
@@ -502,7 +531,7 @@ export default {
 			const sent = {}
 			for (const group of groups.values()) {
 				try {
-					await axios.request({ url: prefixUrl(group.url), method: group.method, data: group.data })
+					await axios.request({ url: prefixUrl(group.url), method: group.method, data: group.data, ...ocsConfig(group.url) })
 					Object.assign(sent, group.data)
 					this.acceptSaved(group.fields)
 				} catch (error) {

package/src/components/CnSetupWizard/CnSetupWizard.vue

@@ -69,7 +69,12 @@
 
 				<!-- choice -->
 				<template v-else-if="step.type === 'choice'">
-					<NcNoteCard v-if="step.body" type="info">
+					<!-- The board sets the intro as a plain paragraph above the
+					     cards (DqInstellen); the Nextcloud look keeps the note. -->
+					<p v-if="step.body && isBoard" class="cn-setup-step__intro" data-testid="cn-setup-step-intro">
+						{{ stepBody(step) }}
+					</p>
+					<NcNoteCard v-else-if="step.body" type="info">
 						{{ stepBody(step) }}
 					</NcNoteCard>
 					<CnChoiceCards
@@ -119,6 +124,9 @@
 					<NcNoteCard v-if="isChoiceDisabled(step)" type="warning">
 						{{ dependsOnHint(step) }}
 					</NcNoteCard>
+					<p v-if="stepNote(step)" class="cn-setup-step__note" data-testid="cn-setup-step-note">
+						{{ stepNote(step) }}
+					</p>
 				</template>
 
 				<!-- config-fields -->
@@ -212,6 +220,7 @@ import CnChoiceCards from '../CnChoiceCards/CnChoiceCards.vue'
 import CnLeafDependencySettings from '../CnLeafDependencySettings/CnLeafDependencySettings.vue'
 import CnWizardDialog from '../CnWizardDialog/CnWizardDialog.vue'
 import { checkDependencies, isDependencyResolved, missingRequiredApps, readServerAppStatuses } from '../../composables/useDependencyCheck.js'
+import { useLook } from '../../composables/useLook.js'
 import { useSetupStatus } from '../../composables/useSetupStatus.js'
 import { fieldsFromSchema } from '../../utils/schema.js'
 
@@ -428,12 +437,13 @@ export default {
 	 * @return {object} `setupStatus` / `setupStatusLoading` for the option resolver.
 	 */
 	setup(props) {
+		const { isBoard } = useLook()
 		const wantsSource = (props.steps || []).some((s) => s && s.optionsSource)
 		if (!wantsSource) {
-			return {}
+			return { isBoard }
 		}
 		const { status, loading } = useSetupStatus(props.appId, { setup: { steps: props.steps } })
-		return { setupStatus: status, setupStatusLoading: loading }
+		return { isBoard, setupStatus: status, setupStatusLoading: loading }
 	},
 
 	data() {
@@ -793,6 +803,18 @@ export default {
 			return raw === '' ? '' : this.cnTranslate(raw)
 		},
 
+		/**
+		 * The footnote under a choice step's options, from the step's `note`
+		 * (or `footnote`), translated like the body.
+		 *
+		 * @param {object} step The step declaration.
+		 * @return {string} The translated footnote, or ''.
+		 */
+		stepNote(step) {
+			const raw = (step && (step.note || step.footnote)) || ''
+			return raw === '' ? '' : this.cnTranslate(raw)
+		},
+
 		stepSlot(step) {
 			return 'step-' + step.id
 		},
@@ -1338,6 +1360,18 @@ export default {
 	gap: 12px;
 }
 
+.cn-setup-step__intro {
+	margin: 0;
+	font-size: 15px;
+	line-height: 1.5;
+}
+
+.cn-setup-step__note {
+	margin: 0;
+	font-size: 13px;
+	color: var(--color-text-maxcontrast);
+}
+
 .cn-setup-step__nav {
 	display: flex;
 	justify-content: flex-end;

package/src/components/CnWizardDialog/CnWizardDialog.vue

@@ -208,7 +208,7 @@ export default {
 		 */
 		dialogTitle: {
 			type: String,
-			default: 'Wizard',
+			default: () => t('nextcloud-vue', 'Wizard'),
 		},
 
 		/**
@@ -279,17 +279,17 @@ export default {
 		submitIcon: { type: [Object, Function], default: null },
 
 		/** Cancel-button label (wizard phase). */
-		cancelLabel: { type: String, default: 'Cancel' },
+		cancelLabel: { type: String, default: () => t('nextcloud-vue', 'Cancel') },
 		/** Back-button label. */
-		backLabel: { type: String, default: 'Back' },
+		backLabel: { type: String, default: () => t('nextcloud-vue', 'Back') },
 		/** Next-button label (intermediate steps). */
-		nextLabel: { type: String, default: 'Next' },
+		nextLabel: { type: String, default: () => t('nextcloud-vue', 'Next') },
 		/** Submit-button label (last step). */
-		submitLabel: { type: String, default: 'Submit' },
+		submitLabel: { type: String, default: () => t('nextcloud-vue', 'Submit') },
 		/** Close-button label (result phase). */
-		closeLabel: { type: String, default: 'Close' },
+		closeLabel: { type: String, default: () => t('nextcloud-vue', 'Close') },
 		/** Success banner default text when result.message is empty. */
-		successText: { type: String, default: 'Done.' },
+		successText: { type: String, default: () => t('nextcloud-vue', 'Done.') },
 		/**
 		 * Whether the dialog can be dismissed (Cancel button, ESC, backdrop
 		 * click) before reaching the result phase. `false` hides Cancel and

package/src/css/detail-page.css

@@ -525,3 +525,18 @@
 	align-items: center;
 	gap: 4px;
 }
+
+/* The tag after an admin-only entry in a board detail page's Actions menu
+   ("beheerder", DqZaakMeer): 12px muted text at the end of the row. The menu
+   opens outside the page, so the rule keys on the attribute CnDetailPage sets
+   only in the board look. */
+.action-button[data-cn-admin-tag]::after,
+.action-link[data-cn-admin-tag]::after {
+	content: attr(data-cn-admin-tag);
+	margin-inline-start: auto;
+	padding-inline: 12px 4px;
+	color: var(--color-text-maxcontrast);
+	font-size: 12px;
+	font-weight: 400;
+	white-space: nowrap;
+}