@nocobase/app-template-default 1.0.0-beta.67 → 1.0.0-beta.69

package/client/locales/system/settings-en-US.ts

@@ -0,0 +1,141 @@
+const settings = {
+  revokeRoles: 'Revoke roles',
+  keyConflict: 'This role key is already in use.',
+  userPermissions: 'User management',
+  readUsers: 'View users',
+  createUsers: 'Create users',
+  updateUsers: 'Edit users',
+  inviteUsers: 'Invite users',
+  deleteUsers: 'Delete users',
+  resetUserPassword: 'Reset password',
+  assignRole: 'Assign roles',
+
+  assignedRoles: 'Assigned roles',
+  actionSaved: 'Updated access for "{{name}}"',
+
+  identityConflict: 'This email or username is already in use.',
+  signInAgain: 'Sign in again',
+  passwordPolicy: 'Password does not meet the current password policy.',
+
+  reload: 'Reload role',
+  title: 'System settings',
+  users: 'Users',
+  roles: 'Roles and permissions',
+  usersDescription: 'Manage accounts, access and active sessions.',
+  rolesDescription: 'Define what each role can access and do.',
+  userSearch: 'Search names, usernames or emails',
+  roleSearch: 'Search role names',
+  newUser: 'New user',
+  editUser: 'Edit user',
+  newRole: 'New role',
+  editRole: 'Edit role',
+  name: 'Name',
+  username: 'Username',
+  email: 'Email',
+  password: 'Initial password',
+  roleName: 'Role name',
+  key: 'Key',
+  status: 'Status',
+  actions: 'Actions',
+  actionsFor: 'Actions for {{name}}',
+  all: 'All statuses',
+  enabled: 'Enabled',
+  disabled: 'Disabled',
+  clear: 'Clear filters',
+  noResults: 'No matching results',
+  clearHint: 'Try a different search or clear the filters.',
+  noUsers: 'No users yet',
+  noRoles: 'No roles yet',
+  create: 'Create',
+  edit: 'Edit',
+  save: 'Save',
+  cancel: 'Cancel',
+  saving: 'Saving…',
+  confirm: 'Confirm',
+  enable: 'Enable',
+  disable: 'Disable',
+  revokeSessions: 'Revoke sessions',
+  disableTitle: 'Disable user "{{name}}"?',
+  disableHint:
+    'This user will be unable to sign in and existing sessions will end.',
+  enableTitle: 'Enable user "{{name}}"?',
+  enableHint: 'This user will be able to sign in again.',
+  revokeTitle: 'Revoke sessions for "{{name}}"?',
+  revokeHint: 'This user will need to sign in again.',
+  revokeRoleTitle: 'Revoke roles from "{{name}}"?',
+  revokeRoleHint: 'Access granted by the listed roles will be removed.',
+  created: 'Created user "{{name}}"',
+  saved: 'Saved "{{name}}"',
+  rolesSaved: 'Updated roles for "{{name}}"',
+  required: 'Enter a value for this field',
+  invalidEmail: 'Enter a valid email address',
+  protected: 'Protected',
+  custom: 'Custom',
+  protectedHint:
+    'This role is protected. Only explicitly permitted changes are available.',
+  unsaved: 'Unsaved changes',
+  discardTitle: 'Discard changes?',
+  discardHint: 'Your unsaved changes will be lost.',
+  failed: 'Unable to complete the request. Try again.',
+  retry: 'Retry',
+  loading: 'Loading',
+  denied: 'You do not have access. Contact an administrator.',
+  missing: 'This record does not exist or has been deleted.',
+  conflict:
+    'This role has changed. Reload it and merge your changes before saving.',
+  sessionEnded: 'Your session has ended. Sign in again.',
+  previous: 'Previous',
+  next: 'Next',
+  total_one: '{{count}} user',
+  total_other: '{{count}} users',
+  access: 'Access',
+  permissionSearch: 'Search categories, groups or permissions',
+  enabledOnly: 'Enabled only',
+  noPermissions: 'No permissions to configure',
+  permissionCategories: 'Permission categories',
+  selectAllPermissions: 'All',
+  selectVisiblePermissions: 'Select visible permissions in {{name}}',
+  permissionSummary: '{{enabled}} of {{total}} enabled',
+  noRecordScope: 'No records (not authorized)',
+  permissionFilter: {
+    limit: 'Up to 20 conditions',
+    configure: 'Conditions',
+    title: 'Configure record filter',
+    description:
+      'Apply conditions to the role draft, then save the role to make them effective.',
+    all: 'Match all conditions',
+    any: 'Match any condition',
+    field: 'Field',
+    operator: 'Operator',
+    valueType: 'Value type',
+    value: 'Value',
+    text: 'Text',
+    number: 'Number',
+    boolean: 'Boolean',
+    true: 'Yes',
+    false: 'No',
+    add: 'Add condition',
+    remove: 'Remove',
+    cancel: 'Cancel',
+    apply: 'Apply',
+    invalid:
+      'Choose valid fields and complete all values. Include at least one condition.',
+    advanced:
+      'This existing filter uses advanced conditions. It will be preserved unless you explicitly reconfigure it.',
+    reconfigure: 'Reconfigure',
+    operators: {
+      $eq: 'Equals',
+      $ne: 'Does not equal',
+      $includes: 'Contains',
+      $gt: 'Greater than',
+      $gte: 'At least',
+      $lt: 'Less than',
+      $lte: 'At most',
+      $empty: 'Is empty',
+      $notEmpty: 'Is not empty',
+    },
+  },
+  recordScope: 'Record scope',
+  levelFor: 'Scope for {{name}}',
+};
+export default settings;

package/client/locales/system/settings-zh-CN.ts

@@ -0,0 +1,135 @@
+const settings = {
+  revokeRoles: '撤销角色',
+  keyConflict: '此角色标识已被使用。',
+  userPermissions: '用户管理',
+  readUsers: '查看用户',
+  createUsers: '创建用户',
+  updateUsers: '编辑用户',
+  inviteUsers: '邀请用户',
+  deleteUsers: '删除用户',
+  resetUserPassword: '重置密码',
+  assignRole: '分配角色',
+
+  assignedRoles: '已分配角色',
+  actionSaved: '已更新“{{name}}”的访问状态',
+
+  identityConflict: '此邮箱或用户名已被使用。',
+  signInAgain: '重新登录',
+  passwordPolicy: '密码不符合当前密码策略。',
+
+  reload: '重新加载角色',
+  title: '系统设置',
+  users: '用户管理',
+  roles: '角色与权限',
+  usersDescription: '管理用户账户、角色及登录会话。',
+  rolesDescription: '设置每个角色可访问的页面与可执行的操作。',
+  userSearch: '搜索姓名、用户名或邮箱',
+  roleSearch: '搜索角色名称',
+  newUser: '新建用户',
+  editUser: '编辑用户',
+  newRole: '新建角色',
+  editRole: '编辑角色',
+  name: '姓名',
+  username: '用户名',
+  email: '邮箱',
+  password: '初始密码',
+  roleName: '角色名称',
+  key: '标识',
+  status: '状态',
+  actions: '操作',
+  actionsFor: '{{name}} 的操作',
+  all: '全部状态',
+  enabled: '启用',
+  disabled: '停用',
+  clear: '清除筛选',
+  noResults: '没有匹配的结果',
+  clearHint: '请更换搜索条件或清除筛选。',
+  noUsers: '暂无用户',
+  noRoles: '暂无角色',
+  create: '创建',
+  edit: '编辑',
+  save: '保存',
+  cancel: '取消',
+  saving: '正在保存…',
+  confirm: '确认',
+  enable: '启用',
+  disable: '禁用',
+  revokeSessions: '撤销会话',
+  disableTitle: '禁用用户“{{name}}”？',
+  disableHint: '该用户将无法登录，现有会话将失效。',
+  enableTitle: '启用用户“{{name}}”？',
+  enableHint: '该用户可以重新登录。',
+  revokeTitle: '撤销用户“{{name}}”的会话？',
+  revokeHint: '该用户需要重新登录。',
+  revokeRoleTitle: '撤销“{{name}}”的角色？',
+  revokeRoleHint: '将移除所列角色授予的访问权限。',
+  created: '已创建用户“{{name}}”',
+  saved: '已保存“{{name}}”',
+  rolesSaved: '已更新“{{name}}”的角色',
+  required: '请填写此字段',
+  invalidEmail: '请输入有效邮箱',
+  protected: '受保护',
+  custom: '自定义',
+  protectedHint: '此角色受系统保护，仅允许明确授权的修改。',
+  unsaved: '有未保存的更改',
+  discardTitle: '放弃未保存的更改？',
+  discardHint: '未保存的更改将丢失。',
+  failed: '请求失败，请重试。',
+  retry: '重试',
+  loading: '加载中',
+  denied: '无权查看，请联系管理员。',
+  missing: '记录不存在或已被删除。',
+  conflict: '角色已被其他人修改，请重新加载后合并。',
+  sessionEnded: '会话已结束，请重新登录。',
+  previous: '上一页',
+  next: '下一页',
+  total_one: '共 {{count}} 位用户',
+  total_other: '共 {{count}} 位用户',
+  access: '访问',
+  permissionSearch: '搜索分类、分组或权限',
+  enabledOnly: '仅看已开启',
+  noPermissions: '暂无可配置权限',
+  permissionCategories: '权限分类',
+  selectAllPermissions: '全选',
+  selectVisiblePermissions: '选择“{{name}}”中显示的权限',
+  permissionSummary: '已开启 {{enabled}} / {{total}}',
+  noRecordScope: '无记录（未授权）',
+  permissionFilter: {
+    limit: '最多支持 20 个条件',
+    configure: '筛选条件',
+    title: '配置记录筛选',
+    description: '应用条件后还需保存角色，权限才会生效。',
+    all: '满足全部条件',
+    any: '满足任一条件',
+    field: '字段',
+    operator: '比较方式',
+    valueType: '值类型',
+    value: '值',
+    text: '文本',
+    number: '数字',
+    boolean: '是或否',
+    true: '是',
+    false: '否',
+    add: '添加条件',
+    remove: '移除',
+    cancel: '取消',
+    apply: '应用',
+    invalid: '请选择有效字段并填写完整的值，至少保留一个条件。',
+    advanced: '现有筛选包含高级条件，将保留原样；重新配置后应用才会替换。',
+    reconfigure: '重新配置',
+    operators: {
+      $eq: '等于',
+      $ne: '不等于',
+      $includes: '包含',
+      $gt: '大于',
+      $gte: '大于或等于',
+      $lt: '小于',
+      $lte: '小于或等于',
+      $empty: '为空',
+      $notEmpty: '不为空',
+    },
+  },
+  recordScope: '数据范围',
+  levelFor: '{{name}} 的范围',
+};
+export default settings;

package/client/locales/system/zh-CN.ts

@@ -1,9 +1,19 @@
+import settings from './settings-zh-CN.js';
 import type { SystemResource } from './en-US.js';
 import deviceApprovalZhCN from '#extensions/nocobase-device-approval/locales/zh-CN';
 import inboxZhCN from '#extensions/nocobase-inbox/locales/zh-CN';
 
 /** The Chinese copy of what the template ships; see `./en-US.ts`. */
 const systemZhCN: SystemResource = {
+  settings,
+  'auth.preparingSession': '正在准备登录会话…',
+  'auth.connectionFailed': '连接失败',
+  'auth.connectionFailedDescription':
+    '实时连接暂时无法准备就绪。请重试后进入应用，或退出登录。',
+
+  'auth.passwordResetSuccess': '密码已重置，请用新密码登录。',
+  'auth.requestNewResetLink': '重新申请重置链接',
+
   // The UI Library block of the `/device` page; the keys below may reword it.
   ...deviceApprovalZhCN,
   // The UI Library block of the `/inbox` page; the keys below may reword it.
@@ -15,16 +25,16 @@ const systemZhCN: SystemResource = {
   'inboxButton.pendingHint': '{{count}} 项等你处理，处理后减少。',
   'inboxButton.unreadHint': '{{count}} 条未读，阅读后减少。',
   'auth.welcome': '欢迎回来',
-  'auth.loginDescription': '使用用户名或邮箱和密码登录。',
+  'auth.loginDescription': '使用用户名或邮箱和密码登录',
   'auth.registerTitle': '创建账户',
-  'auth.registerDescription': '创建账户以开始使用。',
+  'auth.registerDescription': '创建账户以开始使用',
   'auth.forgotTitle': '忘记密码',
-  'auth.forgotDescription': '输入邮箱，如果账户存在，我们将发送重置链接。',
+  'auth.forgotDescription': '输入邮箱，如果账户存在，我们将发送重置链接',
   'auth.passwordResetUnavailable': '未开启自助找回，请联系管理员重置密码。',
   'auth.capabilityLoadFailed': '无法检查自助找回是否已开启。',
   'auth.retry': '重试',
   'auth.loading': '加载中',
-  'auth.resetDescription': '为账户设置新密码。',
+  'auth.resetDescription': '为账户设置新密码',
   'auth.resetTitle': '重置密码',
   'auth.identifier': '用户名或邮箱',
   'auth.password': '密码',
@@ -57,16 +67,16 @@ const systemZhCN: SystemResource = {
   'auth.continueWith': '使用 {provider} 继续',
   'auth.about': '关于此应用',
   'auth.platform': 'AI 原生应用平台',
-  'auth.marketingTitleFirst': '让 AI 自由构建。',
+  'auth.marketingTitleFirst': '让 AI 自由构建',
   'auth.marketingTitleSecond': 'NocoBase 保障',
-  'auth.marketingTitleThird': '可靠运行。',
+  'auth.marketingTitleThird': '可靠运行',
   'auth.marketingDescription':
-    '让 AI 在灵活的前端框架上构建体验，由 NocoBase 保障底层数据、权限与治理。',
+    '让 AI 在灵活的前端框架上构建体验，由 NocoBase 保障底层数据、权限与治理',
   'auth.frontend': 'AI 原生前端',
-  'auth.frontendDescription': '在灵活的框架上自由构建界面。',
+  'auth.frontendDescription': '在灵活的框架上自由构建界面',
   'auth.foundation': 'NocoBase 基础能力',
-  'auth.foundationDescription': '可靠的数据、访问控制与治理。',
-  'auth.marketingFooter': '自由构建，可靠支撑。',
+  'auth.foundationDescription': '可靠的数据、访问控制与治理',
+  'auth.marketingFooter': '自由构建，可靠支撑',
   'status.loading': '加载中',
   'status.loadingPage': '正在加载页面',
   'status.denied': '无权访问',
@@ -79,8 +89,8 @@ const systemZhCN: SystemResource = {
   'status.routeFailedDescription':
     '无法加载 {{packageName}} 的路由 {{label}}。',
   shell: {
-    buildFreely: 'AI 自由构建。',
-    reliability: '<brand>NocoBase</brand> 保障可靠。',
+    buildFreely: 'AI 自由构建',
+    reliability: '<brand>NocoBase</brand> 保障可靠',
   },
   home: {
     platform: 'NocoBase · AI 原生应用平台',

package/client/pages/auth/auth-page.css

@@ -0,0 +1,52 @@
+.auth-brand-panel {
+  background: var(--auth-brand-background);
+  background-image: radial-gradient(
+    ellipse at top right,
+    color-mix(in srgb, var(--auth-brand-highlight) 8%, transparent),
+    transparent 65%
+  );
+}
+
+/* Authentication surfaces have their own palette; application pages keep the selected theme. */
+.dark .auth-page {
+  --background: #141923;
+  --foreground: #eef1f7;
+  --card: #1b2230;
+  --muted-foreground: #a4adbd;
+  --primary: #526bc7;
+  --primary-foreground: #ffffff;
+  --border: #30394b;
+  --input: #3b475c;
+  --ring: #8198ed;
+  --auth-brand-background: #192130;
+  --auth-brand-highlight: #a2b3ec;
+  --auth-brand-muted: #aab5c9;
+}
+
+.dark .auth-page > aside {
+  border-color: transparent;
+}
+
+.dark .auth-page [data-slot='input'],
+.dark .auth-page [data-slot='input-group'] {
+  background-color: var(--card);
+}
+
+.dark .auth-page [data-slot='input-group'] input {
+  background-color: transparent;
+}
+
+/* Keep login controls comfortable while tightening the form's vertical rhythm. */
+.auth-login-page main header {
+  margin-bottom: calc(var(--spacing) * 6);
+}
+
+.auth-login-page form > [data-slot='field-group'] {
+  gap: calc(var(--spacing) * 4);
+}
+
+.auth-login-page form [data-slot='input'],
+.auth-login-page form [data-slot='input-group'],
+.auth-login-page form button[type='submit'] {
+  height: calc(var(--spacing) * 10);
+}

package/client/pages/auth/login.tsx

@@ -21,6 +21,7 @@ export default function LoginPage(): ReactElement {
 
   return (
     <AuthPage
+      className='auth-login-page'
       description={t('auth.loginDescription')}
       title={t('auth.welcome')}
     >
@@ -36,7 +37,6 @@ export default function LoginPage(): ReactElement {
           {
             content: (
               <PasswordLoginForm
-                className='[&_[data-slot=input]]:h-12 [&_[data-slot=input-group]]:h-12 [&_button[type=submit]]:h-12'
                 error={login.error?.message}
                 footer={
                   signUpAvailable ? (

package/client/pages/auth/reset-password.tsx

@@ -1,3 +1,6 @@
+import { Button } from '#components/ui/button';
+import { AuthFormStatus } from '#extensions/nocobase-auth-forms/form-parts';
+import { usePasswordResetCapability } from '@nocobase/app-plugin-authentication/client';
 import { usePasswordReset } from '@nocobase/app-plugin-authentication/client/actions';
 import { useTranslation } from '@nocobase/i18n/client';
 import type { ReactElement } from 'react';
@@ -10,6 +13,7 @@ import { AuthPage } from './shared.js';
 export default function ResetPasswordPage(): ReactElement {
   const { t } = useTranslation();
   const reset = usePasswordReset();
+  const capability = usePasswordResetCapability();
   const [searchParams] = useSearchParams();
   // The link in the reset email carries the token; without one the form cannot do anything.
   const token = searchParams.get('token') ?? '';
@@ -19,20 +23,59 @@ export default function ResetPasswordPage(): ReactElement {
       description={t('auth.resetDescription')}
       title={t('auth.resetTitle')}
     >
-      <PasswordResetForm
-        disabled={!token}
-        error={token ? reset.error?.message : t('auth.invalidResetLink')}
-        footer={<Link to='/login'>{t('auth.backToSignIn')}</Link>}
-        labels={{
-          confirmPassword: t('auth.confirmNewPassword'),
-          password: t('auth.newPassword'),
-          passwordMismatch: t('auth.passwordMismatch'),
-          submit: t('auth.resetTitle'),
-          submitting: t('auth.resetting'),
-        }}
-        onSubmit={({ password }) => reset.submit({ password, token })}
-        submitting={reset.isPending}
-      />
+      {capability.isPending ? (
+        <div
+          className='h-48 animate-pulse rounded-md bg-muted'
+          aria-label={t('auth.loading')}
+        />
+      ) : capability.isError ? (
+        <div className='space-y-4'>
+          <AuthFormStatus type='error'>
+            {t('auth.capabilityLoadFailed')}
+          </AuthFormStatus>
+          <Button variant='outline' onClick={() => void capability.refetch()}>
+            {t('auth.retry')}
+          </Button>
+        </div>
+      ) : capability.data?.passwordResetAvailable !== true ? (
+        <div className='space-y-4'>
+          <AuthFormStatus type='error'>
+            {t('auth.passwordResetUnavailable')}
+          </AuthFormStatus>
+          <Link to='/login'>{t('auth.backToSignIn')}</Link>
+        </div>
+      ) : reset.isSuccess ? (
+        <div className='space-y-4'>
+          <AuthFormStatus type='success'>
+            {t('auth.passwordResetSuccess')}
+          </AuthFormStatus>
+          <Link to='/login'>{t('auth.backToSignIn')}</Link>
+        </div>
+      ) : (
+        <PasswordResetForm
+          disabled={!token}
+          error={token ? reset.error?.message : t('auth.invalidResetLink')}
+          footer={
+            <span className='flex flex-wrap justify-center gap-x-4 gap-y-2 [&>a]:underline [&>a]:underline-offset-4 [&>a:hover]:text-primary'>
+              <Link to='/login'>{t('auth.backToSignIn')}</Link>
+              {!token || reset.error ? (
+                <Link to='/forgot-password'>
+                  {t('auth.requestNewResetLink')}
+                </Link>
+              ) : null}
+            </span>
+          }
+          labels={{
+            confirmPassword: t('auth.confirmNewPassword'),
+            password: t('auth.newPassword'),
+            passwordMismatch: t('auth.passwordMismatch'),
+            submit: t('auth.resetTitle'),
+            submitting: t('auth.resetting'),
+          }}
+          onSubmit={({ password }) => reset.submit({ password, token })}
+          submitting={reset.isPending}
+        />
+      )}
     </AuthPage>
   );
 }

package/client/pages/auth/shared.tsx

@@ -5,7 +5,10 @@ import type { ReactElement, ReactNode } from 'react';
 
 import { AuthSplitLayout } from '#extensions/nocobase-auth-split-layout/auth-split-layout';
 
+import './auth-page.css';
+
 export interface AuthPageProps {
+  readonly className?: string;
   readonly title: ReactNode;
   readonly description: ReactNode;
   readonly children: ReactNode;
@@ -18,6 +21,7 @@ export interface AuthPageProps {
  */
 export function AuthPage({
   children,
+  className,
   description,
   title,
 }: AuthPageProps): ReactElement {
@@ -26,6 +30,7 @@ export function AuthPage({
     <AuthSplitLayout
       aside={<BrandPanel />}
       asideLabel={t('auth.about')}
+      className={['auth-page', className].filter(Boolean).join(' ')}
       description={description}
       logo={
         <>
@@ -68,42 +73,39 @@ function BrandPanel(): ReactElement {
   ];
 
   return (
-    <div className='relative grid h-full place-items-center overflow-hidden bg-(--auth-brand-background) p-12 text-white'>
-      <div className='pointer-events-none absolute inset-0 bg-[radial-gradient(ellipse_at_top_right,color-mix(in_srgb,var(--primary)_22%,transparent),transparent_65%)]' />
-      <div className='relative w-full max-w-xl'>
+    <div className='auth-brand-panel relative grid h-full place-items-center overflow-hidden p-12 text-white'>
+      <div className='relative w-full max-w-md'>
         <p className='text-xs font-semibold tracking-[0.16em] text-(--auth-brand-highlight) uppercase'>
           {t('auth.platform')}
         </p>
-        <h2 className='mt-4 text-5xl leading-[1.05] font-semibold tracking-[-0.045em]'>
+        <h2 className='mt-6 text-4xl leading-tight font-semibold tracking-tight'>
           {t('auth.marketingTitleFirst')}
           <br />
           {t('auth.marketingTitleSecond')}
           <br />
           {t('auth.marketingTitleThird')}
         </h2>
-        <p className='mt-5 text-sm leading-6 text-(--auth-brand-muted)'>
+        <p className='mt-6 text-sm leading-7 text-(--auth-brand-muted)'>
           {t('auth.marketingDescription')}
         </p>
-        <div className='mt-8 overflow-hidden rounded-2xl border border-white/10 bg-white/5 text-white shadow-lg backdrop-blur-sm'>
-          <div className='space-y-5 p-6'>
-            {features.map(({ description, icon: Icon, id, title }) => (
-              <div className='flex gap-4' key={id}>
-                <span className='grid size-11 shrink-0 place-items-center rounded-xl bg-(--auth-brand-highlight)/10 text-(--auth-brand-highlight)'>
-                  <Icon aria-hidden='true' className='size-5' />
-                </span>
-                <div>
-                  <p className='font-semibold'>{title}</p>
-                  <p className='mt-1 text-sm leading-6 text-(--auth-brand-muted)'>
-                    {description}
-                  </p>
-                </div>
+        <div className='mt-12 space-y-8'>
+          {features.map(({ description, icon: Icon, id, title }) => (
+            <div className='flex gap-4' key={id}>
+              <span className='grid size-10 shrink-0 place-items-center rounded-xl bg-(--auth-brand-highlight)/8 text-(--auth-brand-highlight)'>
+                <Icon aria-hidden='true' className='size-5' />
+              </span>
+              <div>
+                <p className='text-sm font-medium'>{title}</p>
+                <p className='mt-1.5 text-sm leading-6 text-(--auth-brand-muted)'>
+                  {description}
+                </p>
               </div>
-            ))}
-          </div>
-          <div className='flex items-center gap-3 border-t border-white/10 bg-white/3 px-6 py-4 text-sm font-medium text-(--auth-brand-muted)'>
-            <Blocks aria-hidden='true' className='size-4' />
-            <span>{t('auth.marketingFooter')}</span>
-          </div>
+            </div>
+          ))}
+        </div>
+        <div className='mt-12 flex items-center gap-2.5 border-t border-white/8 pt-6 text-xs text-(--auth-brand-muted)'>
+          <Blocks aria-hidden='true' className='size-4' />
+          <span>{t('auth.marketingFooter')}</span>
         </div>
       </div>
     </div>

package/client/pages/home/index.tsx

@@ -160,11 +160,11 @@ function CapabilityCard({
       onClick={onOpen}
       className='group flex w-full cursor-pointer rounded-xl text-left outline-none focus-visible:ring-3 focus-visible:ring-ring/50'
     >
-      <Card className='w-full transition-[translate,box-shadow] duration-200 ease-out group-hover:-translate-y-0.5 group-hover:shadow-md group-hover:ring-foreground/20 motion-reduce:transition-none motion-reduce:group-hover:translate-y-0'>
+      <Card className='w-full transition-[translate,box-shadow,background-color] duration-200 ease-out group-hover:-translate-y-0.5 group-hover:bg-hover group-hover:shadow-md motion-reduce:transition-none motion-reduce:group-hover:translate-y-0'>
         <CardHeader className='gap-3'>
           {/* The chip only deepens its tint on hover rather than inverting: swapping a light background and a dark icon
               passes both through the same color halfway, where the icon vanishes for a moment and reads as a flicker. */}
-          <span className='flex size-9 items-center justify-center rounded-lg bg-primary/5 text-primary ring-1 ring-transparent transition-[background-color,box-shadow] duration-200 ease-out group-hover:bg-primary/10 group-hover:ring-primary/20 motion-reduce:transition-none'>
+          <span className='flex size-9 items-center justify-center rounded-lg bg-primary/5 text-primary ring-1 ring-transparent transition-[background-color,box-shadow] duration-200 ease-out group-hover:bg-primary/10 group-hover:ring-border motion-reduce:transition-none'>
             <Icon
               className='size-4 transition-transform duration-200 ease-out group-hover:scale-110 motion-reduce:transition-none'
               aria-hidden