@nocobase/portal-template-default 1.0.16 → 1.0.17

package/dist/assets/{use-authenticator-sign-in-BzFeh7qe.js → use-authenticator-sign-in-CIj210ry.js}

@@ -1 +1 @@
-import{b5 as i}from"./index-CgkdZ6Oc.js";function o(r){const n=i();return{signIn:t=>n.mutateAsync({...t,authenticator:r}),isPending:n.isPending,error:n.error}}export{o as u};
+import{bf as i}from"./index-Cc6awvdg.js";function o(r){const n=i();return{signIn:t=>n.mutateAsync({...t,authenticator:r}),isPending:n.isPending,error:n.error}}export{o as u};

package/dist/assets/use-dingtalk-sign-in-BW4kkXD3.js

@@ -0,0 +1 @@
+import{b5 as g,b as a,b6 as d,b7 as i}from"./index-Cc6awvdg.js";function w(){return typeof navigator<"u"&&navigator.userAgent.toLowerCase().includes("dingtalk")}function b(n){const[r]=g(),[c,o]=a.useState(!1),[l,s]=a.useState(),u=a.useMemo(()=>{if(r.get("authenticator")!==n.name)return;const e=r.get("error");return e?new Error(e):void 0},[n.name,r]);return{signIn:a.useCallback(async()=>{s(void 0),o(!0);try{const e=d(r.get("to")||r.get("redirect")||"/"),t=await i.action("dingtalk","getAuthUrl",{method:"POST",authenticator:n.name,includeRole:!1,withAclMeta:!1,body:{redirect:e}});if(!(t!=null&&t.url))throw new Error("NocoBase did not return a DingTalk authorization URL.");window.location.replace(i.resolveUrl(t.url))}catch(e){s(e instanceof Error?e:new Error("Unable to start DingTalk sign-in.")),o(!1)}},[n.name,r]),isPending:c,error:l??u}}export{w as i,b as u};

package/dist/assets/{use-wecom-sign-in-PPIMLvGa.js → use-wecom-sign-in-dIqMtcN9.js}

@@ -1 +1 @@
-import{aX as m,b as n,aY as d,aZ as i}from"./index-CgkdZ6Oc.js";function g(){return typeof navigator<"u"&&navigator.userAgent.toLowerCase().includes("wxwork")}function h(o){const[r]=m(),[c,a]=n.useState(!1),[l,s]=n.useState(),u=n.useMemo(()=>{if(r.get("authenticator")!==o.name)return;const e=r.get("errorMsg");return e?new Error(e):void 0},[o.name,r]);return{signIn:n.useCallback(async()=>{s(void 0),a(!0);try{const e=d(r.get("to")||r.get("redirect")||"/"),t=await i.action("wecom","getAuthUrl",{method:"POST",authenticator:o.name,includeRole:!1,withAclMeta:!1,body:{redirect:e,isWeComBrowser:g()}});if(!(t!=null&&t.url))throw new Error("NocoBase did not return a WeCom authorization URL.");window.location.replace(i.resolveUrl(t.url))}catch(e){s(e instanceof Error?e:new Error("Unable to start WeCom sign-in.")),a(!1)}},[o.name,r]),isPending:c,error:l??u}}export{g as i,h as u};
+import{b5 as m,b as n,b6 as d,b7 as i}from"./index-Cc6awvdg.js";function g(){return typeof navigator<"u"&&navigator.userAgent.toLowerCase().includes("wxwork")}function b(o){const[r]=m(),[c,s]=n.useState(!1),[l,a]=n.useState(),u=n.useMemo(()=>{if(r.get("authenticator")!==o.name)return;const e=r.get("errorMsg");return e?new Error(e):void 0},[o.name,r]);return{signIn:n.useCallback(async()=>{a(void 0),s(!0);try{const e=d(r.get("to")||r.get("redirect")||"/"),t=await i.action("wecom","getAuthUrl",{method:"POST",authenticator:o.name,includeRole:!1,withAclMeta:!1,body:{redirect:e,isWeComBrowser:g()}});if(!(t!=null&&t.url))throw new Error("NocoBase did not return a WeCom authorization URL.");window.location.replace(i.resolveUrl(t.url))}catch(e){a(e instanceof Error?e:new Error("Unable to start WeCom sign-in.")),s(!1)}},[o.name,r]),isPending:c,error:l??u}}export{g as i,b as u};

package/dist/assets/{wecom-sign-in-button-rUq9RW8R.js → wecom-sign-in-button-Dn_2zDab.js}

@@ -1 +1 @@
-import{j as s,D as c,b6 as d,r as p,aD as x,aF as m,aG as g,b7 as u,b8 as j,b9 as T}from"./index-CgkdZ6Oc.js";import{u as b}from"./use-wecom-sign-in-PPIMLvGa.js";function f(e){return typeof e=="string"?e.replace(/<[^>]+>/g," ").replace(/\s+/g," ").trim():""}function y({authenticator:e,onSignIn:i}){var o;const{signIn:a,isPending:t,error:n}=b(e),r=f((o=e.options)==null?void 0:o.btnTooltip),l=s.jsxs(c,{type:"button",variant:"outline",className:"w-full",disabled:!i&&t,onClick:i??a,children:[s.jsx(d,{}),!i&&t?"Redirecting…":p(e.title||e.authTypeTitle||"Sign in via WeCom")]});return s.jsxs("div",{className:"space-y-3",children:[n&&s.jsxs(x,{variant:"destructive",children:[s.jsx(m,{children:"WeCom sign-in failed"}),s.jsx(g,{children:n.message})]}),r?s.jsxs(u,{children:[s.jsx(j,{render:l}),s.jsx(T,{side:"right",className:"max-w-xs",children:r})]}):l]})}export{y as default};
+import{j as s,K as c,bg as d,r as p,aN as x,aP as m,aQ as g,bh as u,bi as j,bj as T}from"./index-Cc6awvdg.js";import{u as b}from"./use-wecom-sign-in-dIqMtcN9.js";function f(e){return typeof e=="string"?e.replace(/<[^>]+>/g," ").replace(/\s+/g," ").trim():""}function y({authenticator:e,onSignIn:i}){var o;const{signIn:a,isPending:t,error:n}=b(e),r=f((o=e.options)==null?void 0:o.btnTooltip),l=s.jsxs(c,{type:"button",variant:"outline",className:"w-full",disabled:!i&&t,onClick:i??a,children:[s.jsx(d,{}),!i&&t?"Redirecting…":p(e.title||e.authTypeTitle||"Sign in via WeCom")]});return s.jsxs("div",{className:"space-y-3",children:[n&&s.jsxs(x,{variant:"destructive",children:[s.jsx(m,{children:"WeCom sign-in failed"}),s.jsx(g,{children:n.message})]}),r?s.jsxs(u,{children:[s.jsx(j,{render:l}),s.jsx(T,{side:"right",className:"max-w-xs",children:r})]}):l]})}export{y as default};

package/dist/index.html

@@ -20,8 +20,8 @@
       content="/logo-mark.png"
     />
     <title>NocoBase</title>
-    <script type="module" crossorigin src="/assets/index-CgkdZ6Oc.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-NH3aqqQz.css">
+    <script type="module" crossorigin src="/assets/index-Cc6awvdg.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-BBKV6O5d.css">
   </head>
   <body>
     <noscript>You need to enable JavaScript to run this app.</noscript>

package/dist/index.raw.html

@@ -29,8 +29,8 @@
   window.__nocobase_api_client_share_token__ = window.__nocobase_api_client_share_token__ ?? false;
 </script>
 <!-- nocobase-runtime-config:end -->
-<script type="module" crossorigin src="/assets/index-CgkdZ6Oc.js"></script>
-    <link rel="stylesheet" crossorigin href="/assets/index-NH3aqqQz.css">
+<script type="module" crossorigin src="/assets/index-Cc6awvdg.js"></script>
+    <link rel="stylesheet" crossorigin href="/assets/index-BBKV6O5d.css">
   </head>
   <body>
     <noscript>You need to enable JavaScript to run this app.</noscript>

package/package.json

@@ -1,6 +1,7 @@
 {
   "name": "@nocobase/portal-template-default",
-  "version": "1.0.16",
+  "displayName": "Default Template",
+  "version": "1.0.17",
   "packageManager": "pnpm@10.28.0",
   "type": "module",
   "devDependencies": {
@@ -24,6 +25,12 @@
     "@tailwindcss/vite": "^4.1.8",
     "@tanstack/react-query": "^5.81.5",
     "@tanstack/react-table": "^8.2.6",
+    "@tiptap/extension-link": "^3.29.0",
+    "@tiptap/extension-placeholder": "^3.29.0",
+    "@tiptap/extension-text-style": "3.29.0",
+    "@tiptap/pm": "^3.29.0",
+    "@tiptap/react": "^3.29.0",
+    "@tiptap/starter-kit": "^3.29.0",
     "@types/node": "^20",
     "@types/react": "^19.1.0",
     "@types/react-dom": "^19.1.0",
@@ -84,6 +91,7 @@
     "test:auth": "node tests/auth-session-regression.mjs",
     "test:acl": "node registry/nocobase-acl/tests/acl-regression.mjs",
     "test:i18n": "node registry/nocobase-i18n/tests/i18n-regression.mjs",
+    "test:mail": "node registry/nocobase-mail/tests/mail-regression.mjs",
     "start": "refine start",
     "refine": "refine"
   },

package/src/App.tsx

@@ -11,7 +11,10 @@ import { Toaster } from "./components/notifications/toaster";
 import { ThemeProvider } from "./components/theme/theme-provider";
 import { TooltipProvider } from "./components/ui/tooltip";
 import { BrandLogo } from "./components/app-shell/brand";
-import { AppAuthRuntimeProviders, extensionResources } from "./app/extensions";
+import {
+  AppAuthRuntimeProviders,
+  configuredResources,
+} from "./app/extensions";
 import "./App.css";
 import { authProvider } from "./providers/auth";
 import { accessControlProvider } from "./providers/access-control";
@@ -24,7 +27,7 @@ import { AppRoutes } from "./app/routes";
 const getResourcePriority = (resource: ResourceProps) =>
   typeof resource.meta?.priority === "number" ? resource.meta.priority : 100;
 
-const appResources = [...extensionResources].sort(
+const appResources = [...configuredResources].sort(
   (left, right) => getResourcePriority(left) - getResourcePriority(right)
 );
 

package/src/app/extension.ts

@@ -1,12 +1,14 @@
 import type { ResourceProps } from "@refinedev/core";
 import type { ComponentType, PropsWithChildren, ReactElement } from "react";
 import type { AuthenticatorAdapter } from "@/components/auth/types";
+import type { AppRouteDefinition } from "./route-runtime";
 
 export type AppExtension = {
   id: string;
   priority?: number;
   resources?: ResourceProps[];
   routes?: ReactElement;
+  appRoutes?: AppRouteDefinition[];
   dev?: {
     resources?: ResourceProps[];
     routes?: ReactElement;

package/src/app/extensions.tsx

@@ -6,7 +6,9 @@ import {
 } from "react";
 import type { AppExtension } from "./extension";
 import { LoadingState } from "@/components/app-shell/loading-state";
+import { appRoutes, registryRoutesEnabled } from "@/routes";
 import { createDevelopmentRoute } from "./development";
+import { buildRouteResources, renderAppRoutes } from "./route-runtime";
 
 const extensionModules = import.meta.glob<{ default: AppExtension }>(
   "@/extensions/*/extension.tsx",
@@ -21,13 +23,23 @@ export const appExtensions = Object.values(extensionModules)
       left.id.localeCompare(right.id)
   );
 
-export const extensionResources = appExtensions.flatMap(
-  (extension) => extension.resources ?? []
-);
+const routeExtensions = registryRoutesEnabled ? appExtensions : [];
+const routeDefinitions = [
+  ...appRoutes,
+  ...routeExtensions.flatMap((extension) => extension.appRoutes ?? []),
+];
+
+export const configuredResources = [
+  ...buildRouteResources(routeDefinitions),
+  ...routeExtensions.flatMap((extension) => extension.resources ?? []),
+];
 
-export const extensionRouteElements = appExtensions
-  .map((extension) => extension.routes)
-  .filter((routes): routes is ReactElement => Boolean(routes));
+export const configuredRouteElements = [
+  ...renderAppRoutes(routeDefinitions),
+  ...routeExtensions
+    .map((extension) => extension.routes)
+    .filter((routes): routes is ReactElement => Boolean(routes)),
+];
 
 export const extensionStandaloneRouteElements = import.meta.env.DEV
   ? [createDevelopmentRoute(appExtensions)]

package/src/app/route-access-guard.tsx

@@ -0,0 +1,22 @@
+import type { PropsWithChildren, ReactNode } from "react";
+
+import { AccessDenied } from "@/components/access-control/access-denied";
+import { CanAccess } from "@/components/access-control/can-access";
+import type { RouteAccessConstraint } from "@/lib/nocobase/acl";
+
+export function RouteAccessGuard({
+  access,
+  children,
+  fallback = <AccessDenied />,
+}: PropsWithChildren<{
+  access?: RouteAccessConstraint;
+  fallback?: ReactNode;
+}>) {
+  if (!access) return children;
+
+  return (
+    <CanAccess roles={access.roles} fallback={fallback}>
+      {children}
+    </CanAccess>
+  );
+}

package/src/app/route-runtime.ts

@@ -0,0 +1,173 @@
+import type { ResourceProps } from "@refinedev/core";
+import { createElement, type ReactElement, type ReactNode } from "react";
+import { Outlet, Route } from "react-router";
+
+import type { ResourceAcl, RouteAccessConstraint } from "@/lib/nocobase/acl";
+import { RouteAccessGuard } from "./route-access-guard";
+
+export { RouteAccessGuard } from "./route-access-guard";
+
+type ResourceRouteAction = "create" | "edit" | "show";
+
+export type AppRouteResource = Omit<
+  ResourceProps,
+  "name" | "list" | ResourceRouteAction
+>;
+
+type AppRouteBase = {
+  name: string;
+  element?: ReactNode;
+  access?: RouteAccessConstraint;
+};
+
+type AppRouteResourceBinding =
+  | {
+      resource: AppRouteResource;
+      resourceAction?: never;
+    }
+  | {
+      resource?: never;
+      resourceAction: ResourceRouteAction;
+    }
+  | {
+      resource?: never;
+      resourceAction?: never;
+    };
+
+type AppIndexRouteDefinition = AppRouteBase &
+  AppRouteResourceBinding & {
+    index: true;
+    path?: never;
+    children?: never;
+  };
+
+type AppPathRouteDefinition = AppRouteBase &
+  AppRouteResourceBinding & {
+    index?: false;
+    path?: string;
+    children?: AppRouteDefinition[];
+  };
+
+export type AppRouteDefinition =
+  | AppIndexRouteDefinition
+  | AppPathRouteDefinition;
+
+export function defineAppRoutes<const Routes extends AppRouteDefinition[]>(
+  routes: Routes
+) {
+  return routes;
+}
+
+const joinRoutePath = (parentPath: string, path?: string) => {
+  if (!path) return parentPath || "/";
+  if (path.startsWith("/")) return path;
+  return `${parentPath.replace(/\/$/, "")}/${path}`.replace(/\/+/g, "/");
+};
+
+const getResourceActionRoutes = (
+  routes: AppRouteDefinition[],
+  parentPath: string,
+  resourceName: string,
+  actions: Partial<Record<ResourceRouteAction, string>> = {}
+): Partial<Record<ResourceRouteAction, string>> => {
+  for (const route of routes) {
+    if (route.resource) continue;
+    const fullPath = joinRoutePath(parentPath, route.path);
+    if (route.resourceAction) {
+      if (actions[route.resourceAction] !== undefined) {
+        throw new Error(
+          `Resource "${resourceName}" declares multiple ${route.resourceAction} routes.`
+        );
+      }
+      actions[route.resourceAction] = fullPath;
+    }
+    getResourceActionRoutes(
+      route.children ?? [],
+      fullPath,
+      resourceName,
+      actions
+    );
+  }
+
+  return actions;
+};
+
+const getDefaultResourceAcl = (meta?: ResourceProps["meta"]): ResourceAcl =>
+  typeof meta?.acl === "undefined"
+    ? { type: "authenticated" }
+    : (meta.acl as ResourceAcl);
+
+export function buildRouteResources(
+  routes: AppRouteDefinition[],
+  parentPath = "",
+  parentResource?: string,
+  inheritedAccess: RouteAccessConstraint[] = []
+): ResourceProps[] {
+  return routes.flatMap((route) => {
+    if (route.resourceAction && !parentResource) {
+      throw new Error(
+        `Route "${route.name}" declares resourceAction without a parent resource.`
+      );
+    }
+
+    const fullPath = joinRoutePath(parentPath, route.path);
+    const routeAccess = route.access
+      ? [...inheritedAccess, route.access]
+      : inheritedAccess;
+    const resource = route.resource
+      ? {
+          name: route.name,
+          list: route.index
+            ? parentPath || "/"
+            : route.path
+            ? fullPath
+            : undefined,
+          ...getResourceActionRoutes(
+            route.children ?? [],
+            fullPath,
+            route.name
+          ),
+          ...route.resource,
+          meta: {
+            ...route.resource.meta,
+            parent: route.resource.meta?.parent ?? parentResource,
+            acl: getDefaultResourceAcl(route.resource.meta),
+            routeAccess: routeAccess.length ? routeAccess : undefined,
+          },
+        }
+      : undefined;
+    const childResources = buildRouteResources(
+      route.children ?? [],
+      fullPath,
+      resource ? route.name : parentResource,
+      routeAccess
+    );
+
+    return resource ? [resource, ...childResources] : childResources;
+  });
+}
+
+export function renderAppRoutes(routes: AppRouteDefinition[]): ReactElement[] {
+  return routes.map((route) => {
+    const content = route.element ?? createElement(Outlet);
+    const element = route.access
+      ? createElement(RouteAccessGuard, { access: route.access }, content)
+      : content;
+
+    return route.index
+      ? createElement(Route, {
+          key: route.name,
+          index: true,
+          element,
+        })
+      : createElement(
+          Route,
+          {
+            key: route.name,
+            path: route.path,
+            element,
+          },
+          renderAppRoutes(route.children ?? [])
+        );
+  });
+}

package/src/app/routes.tsx

@@ -11,7 +11,7 @@ import { Login } from "@/pages/login";
 import { Register } from "@/pages/register";
 import {
   AppExtensionProviders,
-  extensionRouteElements,
+  configuredRouteElements,
   extensionStandaloneRouteElements,
 } from "./extensions";
 
@@ -41,7 +41,7 @@ export function AppRoutes() {
           }
         >
           <Route index element={<NavigateToAccessibleResource />} />
-          {extensionRouteElements}
+          {configuredRouteElements}
           <Route path="*" element={<ErrorComponent />} />
         </Route>
       </Route>

package/src/components/app-shell/header.tsx

@@ -11,13 +11,31 @@ import {
 } from "@/components/ui/dropdown-menu";
 import { DropdownMenuTrigger } from "@/components/ui/dropdown-menu";
 import { ThemeToggle } from "@/components/theme/theme-toggle";
+import { Button } from "@/components/ui/button";
+import {
+  Tooltip,
+  TooltipContent,
+  TooltipTrigger,
+} from "@/components/ui/tooltip";
 import { UserAvatar } from "@/components/app-shell/user-avatar";
 import { UserInfo } from "@/components/app-shell/user-info";
+import { CanAccess } from "@/components/access-control/can-access";
 import { useSidebar, SidebarTrigger } from "@/components/ui/sidebar";
-import { LogOutIcon } from "lucide-react";
+import { LogOutIcon, SettingsIcon } from "lucide-react";
 import { cn } from "@/lib/utils";
 import { Brand } from "@/components/app-shell/brand";
 import { extensionUserMenuItems } from "@/app/extensions";
+import { resolveNocoBaseServerUrl } from "@/providers/runtime-config";
+
+const pluginSettingsResource = {
+  name: "plugin-settings",
+  meta: {
+    acl: {
+      type: "snippet",
+      name: "pm.*",
+    },
+  },
+} as const;
 
 export const Header = () => {
   const { isMobile } = useSidebar();
@@ -55,6 +73,7 @@ function DesktopHeader() {
         </span>
       </div>
       <div className="flex items-center gap-2">
+        <SettingsLink />
         <ThemeToggle />
         <UserDropdown />
       </div>
@@ -92,6 +111,7 @@ function MobileHeader() {
       />
       <Brand logoClassName="h-6" />
       <div className="flex shrink-0 items-center gap-1">
+        <SettingsLink className="size-9" />
         <ThemeToggle className="size-9" />
         <UserDropdown />
       </div>
@@ -99,6 +119,41 @@ function MobileHeader() {
   );
 }
 
+function SettingsLink({ className }: { className?: string }) {
+  const translate = useTranslate();
+  const label = translate("shell.settings", "System settings");
+
+  return (
+    <CanAccess resourceItem={pluginSettingsResource}>
+      <Tooltip>
+        <TooltipTrigger
+          render={
+            <Button
+              render={
+                <a
+                  href={resolveNocoBaseServerUrl("/settings")}
+                  target="_blank"
+                  rel="noopener noreferrer"
+                />
+              }
+              variant="outline"
+              size="icon"
+              className={cn(
+                "size-10 rounded-xl border-border/70 bg-background/60",
+                className
+              )}
+            >
+              <SettingsIcon />
+              <span className="sr-only">{label}</span>
+            </Button>
+          }
+        />
+        <TooltipContent>{label}</TooltipContent>
+      </Tooltip>
+    </CanAccess>
+  );
+}
+
 const UserDropdown = () => {
   const { mutate: logout, isPending: isLoggingOut } = useLogout();
   const translate = useTranslate();

package/src/components/app-shell/sidebar.tsx

@@ -294,6 +294,7 @@ function SidebarFooter() {
   return (
     <ShadcnSidebarFooter className="border-t border-sidebar-border/70 p-0">
       <div
+        title={`${__PORTAL_TEMPLATE_NAME__} v${__PORTAL_TEMPLATE_VERSION__}`}
         className={cn(
           "flex min-h-16 items-center",
           open ? "gap-3 px-5 py-3" : "justify-center px-2"
@@ -306,11 +307,22 @@ function SidebarFooter() {
               {translate("shell.footer.freedom", "AI builds freely.")}
             </div>
             <div className="text-muted-foreground">
+              <a
+                href="https://nocobase.com"
+                target="_blank"
+                rel="noopener noreferrer"
+                className="font-medium text-sidebar-foreground hover:underline"
+              >
+                NocoBase
+              </a>{" "}
               {translate(
-                "shell.footer.reliability",
-                "NocoBase keeps it reliable."
+                "shell.footer.reliabilitySuffix",
+                "keeps it reliable."
               )}
             </div>
+            <div className="mt-1 font-mono text-[10px] text-muted-foreground/70">
+              {__PORTAL_TEMPLATE_NAME__} v{__PORTAL_TEMPLATE_VERSION__}
+            </div>
           </div>
         )}
       </div>

package/src/extensions/nocobase-acl/README.md

@@ -12,11 +12,17 @@ After installation, import the components from `@/extensions/nocobase-acl`.
   normal roles, Anonymous when enabled, and Full permissions through the
   `__union__` role when the system role mode allows it.
 
-Route resource metadata and `AclPage` accept a `roles` constraint with `anyOf`,
-`allOf`, and `noneOf`. Role constraints use the roles in the current effective
-ACL context. In union mode this is the set of roles participating in the union;
-in single-role mode it is only the selected role. Regions, fields, and actions
-continue to use resource permissions.
+Application route definitions and `AclPage` accept a `roles` constraint with
+`anyOf`, `allOf`, and `noneOf`. Put route-level constraints in `access.roles`
+through `defineAppRoutes`; the Starter applies the same constraint to menu
+visibility and direct URL access. Role constraints use the roles in the current
+effective ACL context. In union mode this is the set of roles participating in
+the union; in single-role mode it is only the selected role. Regions, fields,
+and actions continue to use resource permissions.
+
+Nested routes inherit their parents' route access. The generated navigation
+item evaluates every constraint in that route chain, matching the nested route
+guards used for direct URL access.
 
 Use the Starter's `useGetRoles()` hook when application UI needs the same
 effective role names. Its result follows the familiar Refine query shape with
@@ -35,15 +41,23 @@ function CurrentAccessContext() {
 ```
 
 ```tsx
-const adminRoute = {
-  name: "administration",
-  meta: {
-    acl: {
-      type: "authenticated",
+import { defineAppRoutes } from "@/app/route-runtime";
+
+export const appRoutes = defineAppRoutes([
+  {
+    name: "administration",
+    path: "/administration",
+    element: <AdministrationPage />,
+    resource: {
+      meta: {
+        label: "Administration",
+      },
+    },
+    access: {
       roles: { anyOf: ["admin"] },
     },
   },
-};
+]);
 
 function AuditLogsRoute() {
   return (
@@ -56,9 +70,9 @@ function AuditLogsRoute() {
 }
 ```
 
-Mark non-collection resources with `meta.acl.type = "authenticated"`, or use
-the `collection`, `snippet`, and `route` ACL metadata variants when the resource
-should participate in NocoBase permission checks.
+The route runtime marks generated non-collection resources as authenticated.
+Use the `collection`, `snippet`, and `route` ACL metadata variants when a
+resource should also participate in NocoBase permission checks.
 
 The underlying `accessControlProvider`, `roles:check` cache, record permissions,
 and Refine integration are provided by the compatible Starter.