@starci/hfs 4.3.0 → 4.4.0

package/templates/be/table/migration.sql.tpl

@@ -8,6 +8,7 @@ create table public.{{tableSql}} (
 create index {{table}}_owner_id_idx on public.{{tableSql}} (owner_id);
 
 alter table public.{{tableSql}} enable row level security;
+alter table public.{{tableSql}} force row level security;
 
 create trigger {{table}}_set_updated_at
 before update on public.{{tableSql}}

package/templates/be/upgrade-full/apps/cli/src/app.module.ts

@@ -1,13 +1,11 @@
 import { Module } from "@nestjs/common";
-import { CliModule } from "@features/cli";
-import { ClockModule } from "@modules/platform/clock";
-import { LoggingModule } from "@modules/platform/logging";
+import { cliModules } from "./compose/cli";
+import { platformModules } from "./compose/platform";
 
 @Module({
   imports: [
-    ClockModule.register({ isGlobal: true }),
-    LoggingModule.register({ isGlobal: true }),
-    CliModule,
+    ...platformModules(),
+    ...cliModules(),
   ],
 })
 /** The cli composition root; database schema changes remain delegated to the Supabase CLI. */

package/templates/be/upgrade-full/apps/cli/src/cli.env.ts

@@ -0,0 +1,7 @@
+import type { EnvSource } from "@modules/platform/config"
+
+/** This command app delegates migration configuration to the managed Supabase CLI. */
+export interface CliEnv {}
+
+/** Keeps the command app's environment boundary explicit while no command needs app configuration. */
+export const readCliEnv = (_env: EnvSource): CliEnv => ({})

package/templates/be/upgrade-full/apps/cli/src/compose/cli.ts

@@ -0,0 +1,5 @@
+import type { DynamicModule, Type } from "@nestjs/common"
+import { CliModule } from "@features/cli"
+
+/** The command groups of the upgraded CLI app. */
+export const cliModules = (): Array<Type<unknown> | DynamicModule> => [CliModule.register({})]

package/templates/be/upgrade-full/apps/cli/src/compose/platform.ts

@@ -0,0 +1,9 @@
+import type { DynamicModule } from "@nestjs/common"
+import { ClockModule } from "@modules/platform/clock"
+import { LoggingModule } from "@modules/platform/logging"
+
+/** The shared clock and logger; migrations retain their Supabase CLI authority. */
+export const platformModules = (): Array<DynamicModule> => [
+    ClockModule.register({ isGlobal: true }),
+    LoggingModule.register({ isGlobal: true }),
+]

package/templates/be/upgrade-full/apps/cli/src/main.ts

@@ -1,11 +1,14 @@
 import "reflect-metadata";
 import { CommandFactory } from "nest-commander";
 import { SystemClockService } from "@modules/platform/clock";
+import { EnvSource } from "@modules/platform/config";
 import { createJsonLogger, LoggingLogEvent } from "@modules/platform/logging";
 import { AppModule } from "./app.module";
+import { readCliEnv } from "./cli.env";
 
 /** The one-off command app. Its migrate command delegates schema authority to the Supabase CLI. */
 async function bootstrap(): Promise<void> {
+  readCliEnv(EnvSource.fromProcess());
   const logger = createJsonLogger(new SystemClockService());
   await CommandFactory.run(AppModule, {
     logger: false,

package/templates/be/upgrade-full/src/features/cli/cli.module.ts

@@ -1,6 +1,7 @@
 import { Module } from "@nestjs/common";
+import { ConfigurableModuleClass } from "./cli.module-definition";
 import { MigrateModule } from "./migrate/migrate.module";
 
-@Module({ imports: [MigrateModule] })
+@Module({ imports: [MigrateModule.register({})] })
 /** The cli feature root of the upgraded app. */
-export class CliModule {}
+export class CliModule extends ConfigurableModuleClass {}

package/templates/fe/auth/supabase-client.ts.tpl

@@ -0,0 +1,34 @@
+const sessionOf = (session: Session | null): AuthSession | undefined =>
+    session === null
+        ? undefined
+        : { userId: session.user.id, ...(session.user.email === undefined ? {} : { email: session.user.email }) }
+
+/** A Supabase Auth error as the provider reports it: its HTTP status, its code and its message. */
+type ProviderError = { readonly status?: number; readonly code?: string; readonly message: string }
+
+/** The failure kind of a Supabase Auth error: refused credentials, rejected input, or the provider unavailable. */
+const kindOf = (status: number | undefined): string => {
+    if (status === 400 || status === 401 || status === 403) return "refused"
+    return status === 422 ? "invalid" : "unavailable"
+}
+
+/** The failure of a Supabase Auth call, or undefined when it succeeded. */
+const failureOf = (error: ProviderError | null): AuthFailure | undefined =>
+    error === null
+        ? undefined
+        : { code: error.code ?? String(error.status ?? "auth"), kind: kindOf(error.status), message: error.message }
+
+/** The Supabase Auth adapter shared by browser and cookie-backed PKCE flows. */
+export const authClient: AuthClient = {
+    session: async () => sessionOf((await supabase().auth.getSession()).data.session),
+    accessToken: async () => (await supabase().auth.getSession()).data.session?.access_token,
+    refreshAccessToken: async () => (await supabase().auth.refreshSession()).data.session?.access_token,
+    signInWithPassword: async (email, password) =>
+        failureOf((await supabase().auth.signInWithPassword({ email, password })).error),
+    signOut: async () => failureOf((await supabase().auth.signOut()).error),
+    // Supabase reports INITIAL_SESSION on subscribe, then every change: the subscription alone keeps the session current.
+    onChange: (listener) => {
+        const { data } = supabase().auth.onAuthStateChange((_event, session) => listener(sessionOf(session)))
+        return () => data.subscription.unsubscribe()
+    },
+}

package/templates/fe/skeleton/apps/__app__/src/app/auth/callback/route.ts

@@ -0,0 +1,11 @@
+import { NextResponse } from "next/server"
+import { exchangeAuthCode } from "@/modules/auth/server"
+import { APP_ROUTES } from "@/modules/routes"
+
+/** The opt-in Supabase PKCE callback only exchanges the code and redirects home. */
+export async function GET(request: Request): Promise<NextResponse> {
+    const url = new URL(request.url)
+    const code = url.searchParams.get("code")
+    if (code) await exchangeAuthCode(code)
+    return NextResponse.redirect(new URL(APP_ROUTES.home, url.origin))
+}

package/templates/fe/skeleton/apps/__app__/src/components/blocks/SignInForm/index.tsx

@@ -24,6 +24,11 @@ export const SignInForm = () => {
     const t = useTranslations("app.signIn")
     const { failure, pending, signIn, reject } = useSignIn()
     if (session.status !== "signed-out") return null
+    const failureMessages = {
+        refused: t("refused"),
+        invalid: t("invalid"),
+        unavailable: t("unavailable"),
+    } satisfies Record<SignInFailure, string>
     const submit = (input: FormData) => {
         const credentials = credentialsOf(input)
         if (credentials === undefined) reject()
@@ -37,7 +42,7 @@ export const SignInForm = () => {
                 emailLabel: t("email"),
                 passwordLabel: t("password"),
                 submitLabel: pending ? t("working") : t("submit"),
-                failure: failure === undefined ? undefined : t(failure),
+                failure: failure === undefined ? undefined : failureMessages[failure],
             }}
             on={{ submit }}
         />

package/templates/fe/skeleton/apps/__app__/src/components/leaves/Icon/index.tsx

@@ -0,0 +1,4 @@
+import { CircleIcon } from "@starci/heroicons/24/outline"
+
+/** The decorative completion ring, delegated to the custom Heroicons cut. Visible copy supplies its meaning. */
+export const Icon = () => <CircleIcon width={24} height={24} aria-hidden="true" />

package/templates/fe/skeleton/apps/__app__/src/features/overlays/AppGuideOverlay/component.tsx

@@ -0,0 +1,31 @@
+import { Button, Dialog, Text } from "@starci/grammar/common"
+import { Icon } from "@/components/leaves/Icon"
+
+/** The guide's copy, local open state and action supplied by the connected overlay. */
+export type AppGuideOverlayBaseProps = {
+    readonly props: {
+        readonly isOpen: boolean
+        readonly triggerLabel: string
+        readonly title: string
+        readonly description: string
+        readonly closeLabel: string
+    }
+    readonly on: { readonly openChange: (isOpen: boolean) => void }
+}
+
+/** A keyboard-accessible grammar dialog whose trigger and dismiss actions update the same local state. */
+export const AppGuideOverlayBase = (props: AppGuideOverlayBaseProps) => (
+    <Dialog
+        isOpen={props.props.isOpen}
+        onOpenChange={props.on.openChange}
+        title={props.props.title}
+        closeLabel={props.props.closeLabel}
+        trigger={
+            <Button variant="secondary" startContent={<Icon />}>
+                {props.props.triggerLabel}
+            </Button>
+        }
+    >
+        <Text>{props.props.description}</Text>
+    </Dialog>
+)

package/templates/fe/skeleton/apps/__app__/src/features/overlays/AppGuideOverlay/index.tsx

@@ -0,0 +1,24 @@
+"use client"
+
+import { useTranslations } from "next-intl"
+import { useAppGuideStore } from "@/hooks/zustand/appGuide"
+import { AppGuideOverlayBase } from "./component"
+
+/** The home guide connects localized copy to its feature-local zustand store. */
+export const AppGuideOverlay = () => {
+    const t = useTranslations("app.guide")
+    const isOpen = useAppGuideStore((state) => state.isOpen)
+    const setOpen = useAppGuideStore((state) => state.setOpen)
+    return (
+        <AppGuideOverlayBase
+            props={{
+                isOpen,
+                triggerLabel: t("open"),
+                title: t("title"),
+                description: t("description"),
+                closeLabel: t("close"),
+            }}
+            on={{ openChange: setOpen }}
+        />
+    )
+}

package/templates/fe/skeleton/apps/__app__/src/hooks/auth/useSession.ts

@@ -1,6 +1,11 @@
 "use client"
 
+import { useDebugValue } from "react"
 import { useAppSelector } from "@/redux"
 
 /** The reader's session as the app shares it (redux, kept by the auth session effect): unknown, signed in or signed out. */
-export const useSession = () => useAppSelector((state) => state.session)
+export const useSession = () => {
+    const session = useAppSelector((state) => state.session)
+    useDebugValue(session.status)
+    return session
+}

package/templates/fe/skeleton/apps/__app__/src/hooks/auth/useSignOut.ts

@@ -1,16 +1,15 @@
 "use client"
 
 import { useTransition } from "react"
-import type { GraphQLResponse } from "@/modules/api"
 import { authClient } from "@/modules/auth"
 import type { AuthFailure } from "@/modules/auth"
 import { useGraphQLWithToast } from "@/modules/toast"
 
 /** The app's one outcome of an auth call, so modules/toast reports it like any other write. */
-const responseOf = (failure: AuthFailure | undefined): GraphQLResponse<null> =>
+const responseOf = (failure: AuthFailure | undefined) =>
     failure === undefined
-        ? { success: true, data: null }
-        : { success: false, error: failure.code, kind: failure.kind, message: failure.message }
+        ? { success: true as const, data: null }
+        : { success: false as const, error: failure.code, kind: failure.kind, message: failure.message }
 
 /**
  * Ends the reader's session through modules/auth: whether the request runs and the sign-out itself. A failure is reported by

package/templates/fe/skeleton/apps/__app__/src/hooks/zustand/appGuide/index.ts

@@ -0,0 +1 @@
+export { useAppGuideStore } from "./store"

package/templates/fe/skeleton/apps/__app__/src/hooks/zustand/appGuide/store.ts

@@ -0,0 +1,15 @@
+"use client"
+
+import { create } from "zustand"
+
+/** The home guide's local UI state; it carries no session or server data. */
+type AppGuideState = {
+    readonly isOpen: boolean
+    readonly setOpen: (isOpen: boolean) => void
+}
+
+/** One feature-local store, shared by the guide trigger and its controlled dialog. */
+export const useAppGuideStore = create<AppGuideState>()((set) => ({
+    isOpen: false,
+    setOpen: (isOpen) => set({ isOpen }),
+}))

package/templates/fe/skeleton/apps/__app__/src/modules/auth/pkce-client.ts

@@ -0,0 +1,18 @@
+import { createBrowserClient } from "@supabase/ssr"
+import type { Session, SupabaseClient } from "@supabase/supabase-js"
+import { supabaseAnonKey, supabaseUrl } from "@/modules/config"
+import type { AuthClient, AuthFailure, AuthSession } from "./contracts"
+
+let client: SupabaseClient | undefined
+
+/**
+ * The cookie-backed browser client of the opt-in server PKCE flow, used for Supabase Auth only.
+ * The callback exchanges the code; this client shares its verifier and session cookies. It never calls `.from()`, `.rpc()` or storage:
+ * data goes through modules/api to the back end, which verifies the access token.
+ */
+const supabase = (): SupabaseClient =>
+    (client ??= createBrowserClient(supabaseUrl(), supabaseAnonKey(), {
+        auth: { flowType: "pkce", detectSessionInUrl: false, persistSession: true, autoRefreshToken: true },
+    }))
+
+// {{> fe/auth/supabase-client.ts.tpl}}

package/templates/fe/skeleton/apps/__app__/src/modules/auth/server.ts

@@ -0,0 +1,19 @@
+import "server-only"
+import { createServerClient } from "@supabase/ssr"
+import { cookies } from "next/headers"
+import { supabaseAnonKey, supabaseUrl } from "@/modules/config"
+
+/** The server auth owner reads the PKCE verifier and persists the exchanged session in cookies. */
+export async function exchangeAuthCode(code: string): Promise<void> {
+    const cookieStore = await cookies()
+    const client = createServerClient(supabaseUrl(), supabaseAnonKey(), {
+        cookies: {
+            getAll: () => cookieStore.getAll(),
+            setAll: (values) => {
+                for (const { name, value, options } of values) cookieStore.set(name, value, options)
+            },
+        },
+    })
+    const { error } = await client.auth.exchangeCodeForSession(code)
+    if (error) throw error
+}

package/templates/fe/skeleton/apps/app/src/features/pages/AppHomePage/index.tsx

@@ -1,5 +1,6 @@
 import type { Metadata } from "next"
 import { getTranslations } from "next-intl/server"
+import { AppGuideOverlay } from "@/features/overlays/AppGuideOverlay"
 import { AppHomePageBase } from "./component"
 
 /** The document title of the home page, from the catalog of the requested locale. */
@@ -11,5 +12,10 @@ export const appHomeMetadata = async (): Promise<Metadata> => {
 /** The first page of the product app: a server component; the session surface it draws runs on the client. */
 export const AppHomePage = async () => {
     const t = await getTranslations("app.home")
-    return <AppHomePageBase props={{ title: t("title") }} />
+    return (
+        <>
+            <AppHomePageBase props={{ title: t("title") }} />
+            <AppGuideOverlay />
+        </>
+    )
 }

package/templates/fe/skeleton/apps/app/src/modules/i18n/messages/en.json

@@ -0,0 +1,57 @@
+{
+  "app": {
+    "title": "{{project}}",
+    "shell": {
+      "brand": "{{project}}"
+    },
+    "home": {
+      "title": "Home"
+    },
+    "signIn": {
+      "title": "Sign in",
+      "email": "Email",
+      "password": "Password",
+      "submit": "Continue",
+      "working": "Signing in",
+      "refused": "The credentials were refused.",
+      "invalid": "Enter a valid email and password.",
+      "unavailable": "Sign-in is unavailable. Try again shortly."
+    },
+    "signOut": {
+      "signedIn": "Signed in",
+      "submit": "Sign out",
+      "working": "Signing out"
+    },
+    "toast": {
+      "successTitle": "Done",
+      "errorTitle": "Error",
+      "unauthorizedTitle": "Not signed in",
+      "unauthorizedDescription": "Sign in to continue.",
+      "defaultSuccess": "The change was saved.",
+      "defaultError": "Something went wrong."
+    },
+    "loading": {
+      "message": "Loading"
+    },
+    "notFound": {
+      "title": "Page not found",
+      "home": "Return home"
+    },
+    "errors": {
+      "page": {
+        "title": "Something went wrong",
+        "retry": "Try again"
+      },
+      "global": {
+        "title": "The application could not continue",
+        "retry": "Try again"
+      }
+    },
+    "guide": {
+      "open": "View guide",
+      "title": "Getting started",
+      "description": "Sign in to use the application. You can close this guide and open it again at any time.",
+      "close": "Close"
+    }
+  }
+}

package/templates/fe/skeleton/apps/app/src/modules/i18n/messages/vi.json

@@ -46,6 +46,12 @@
         "title": "Đã xảy ra lỗi nghiêm trọng",
         "retry": "Thử lại"
       }
+    },
+    "guide": {
+      "open": "Xem hướng dẫn",
+      "title": "Bắt đầu",
+      "description": "Đăng nhập để sử dụng ứng dụng. Bạn có thể đóng hướng dẫn này và mở lại bất cứ lúc nào.",
+      "close": "Đóng"
     }
   }
 }

package/templates/fe/skeleton/apps/landing/src/modules/i18n/messages/en.json

@@ -0,0 +1,31 @@
+{
+  "landing": {
+    "title": "{{project}}",
+    "description": "The introduction to {{project}}.",
+    "shell": {
+      "brand": "{{project}}"
+    },
+    "home": {
+      "title": "Welcome to {{project}}",
+      "lede": "Everything you need is in the application.",
+      "openApp": "Open the application"
+    },
+    "loading": {
+      "message": "Loading"
+    },
+    "notFound": {
+      "title": "Page not found",
+      "home": "Return home"
+    },
+    "errors": {
+      "page": {
+        "title": "Something went wrong",
+        "retry": "Try again"
+      },
+      "global": {
+        "title": "The application could not continue",
+        "retry": "Try again"
+      }
+    }
+  }
+}

package/templates/fe/skeleton/packages/__project__-i18n/src/routing.ts

@@ -1,7 +1,7 @@
 import { defineRouting } from "next-intl/routing"
 
 /** The locales every app of the product serves; every catalog of an app has the same keys in each. */
-const LOCALES = ["vi"] as const
+const LOCALES = ["vi", "en"] as const
 
 /** The locale served at the unprefixed path, and the language of a document no locale reached (the global error boundary). */
 export const DEFAULT_LOCALE = "vi"

package/templates/fe/skeleton/packages/__project__-ui/src/index.ts

@@ -4,3 +4,4 @@ export { LoadingNotice } from "./composites/LoadingNotice"
 export { LocaleShell } from "./composites/LocaleShell"
 export { NotFoundNotice } from "./composites/NotFoundNotice"
 export { SiteShell } from "./composites/SiteShell"
+export { Icon } from "./leaves/Icon"

package/templates/fe/skeleton-lite/apps/__app__/src/modules/auth/client.ts

@@ -15,37 +15,4 @@ const supabase = (): SupabaseClient =>
         auth: { flowType: "pkce", detectSessionInUrl: true, persistSession: true, autoRefreshToken: true },
     }))
 
-const sessionOf = (session: Session | null): AuthSession | undefined =>
-    session === null
-        ? undefined
-        : { userId: session.user.id, ...(session.user.email === undefined ? {} : { email: session.user.email }) }
-
-/** A Supabase Auth error as the provider reports it: its HTTP status, its code and its message. */
-type ProviderError = { readonly status?: number; readonly code?: string; readonly message: string }
-
-/** The failure kind of a Supabase Auth error: refused credentials, rejected input, or the provider unavailable. */
-const kindOf = (status: number | undefined): string => {
-    if (status === 400 || status === 401 || status === 403) return "refused"
-    return status === 422 ? "invalid" : "unavailable"
-}
-
-/** The failure of a Supabase Auth call, or undefined when it succeeded. */
-const failureOf = (error: ProviderError | null): AuthFailure | undefined =>
-    error === null
-        ? undefined
-        : { code: error.code ?? String(error.status ?? "auth"), kind: kindOf(error.status), message: error.message }
-
-/** The identity-provider client of a lite app: Supabase Auth in the browser. */
-export const authClient: AuthClient = {
-    session: async () => sessionOf((await supabase().auth.getSession()).data.session),
-    accessToken: async () => (await supabase().auth.getSession()).data.session?.access_token,
-    refreshAccessToken: async () => (await supabase().auth.refreshSession()).data.session?.access_token,
-    signInWithPassword: async (email, password) =>
-        failureOf((await supabase().auth.signInWithPassword({ email, password })).error),
-    signOut: async () => failureOf((await supabase().auth.signOut()).error),
-    // Supabase reports INITIAL_SESSION on subscribe, then every change: the subscription alone keeps the session current.
-    onChange: (listener) => {
-        const { data } = supabase().auth.onAuthStateChange((_event, session) => listener(sessionOf(session)))
-        return () => data.subscription.unsubscribe()
-    },
-}
+// {{> fe/auth/supabase-client.ts.tpl}}

package/templates/fe/skeleton-lite/apps/web/src/features/pages/AppHomePage/index.tsx

@@ -1,5 +1,6 @@
 import type { Metadata } from "next"
 import { getTranslations } from "next-intl/server"
+import { AppGuideOverlay } from "@/features/overlays/AppGuideOverlay"
 import { AppHomePageBase } from "./component"
 
 /** The document title of the home page. */
@@ -11,5 +12,10 @@ export const appHomeMetadata = async (): Promise<Metadata> => {
 /** The front door (the session is client-side, drawn by the blocks the page composes). */
 export const AppHomePage = async () => {
     const t = await getTranslations("app.home")
-    return <AppHomePageBase props={{ title: t("title") }} />
+    return (
+        <>
+            <AppHomePageBase props={{ title: t("title") }} />
+            <AppGuideOverlay />
+        </>
+    )
 }

package/templates/fe/skeleton-lite/apps/web/src/modules/i18n/messages/en.json

@@ -0,0 +1,57 @@
+{
+  "app": {
+    "title": "{{project}}",
+    "shell": {
+      "brand": "{{project}}"
+    },
+    "home": {
+      "title": "Home"
+    },
+    "signIn": {
+      "title": "Sign in",
+      "email": "Email",
+      "password": "Password",
+      "submit": "Continue",
+      "working": "Signing in",
+      "refused": "The credentials were refused.",
+      "invalid": "Enter a valid email and password.",
+      "unavailable": "Sign-in is unavailable. Try again shortly."
+    },
+    "signOut": {
+      "signedIn": "Signed in",
+      "submit": "Sign out",
+      "working": "Signing out"
+    },
+    "toast": {
+      "successTitle": "Done",
+      "errorTitle": "Error",
+      "unauthorizedTitle": "Not signed in",
+      "unauthorizedDescription": "Sign in to continue.",
+      "defaultSuccess": "The change was saved.",
+      "defaultError": "Something went wrong."
+    },
+    "loading": {
+      "message": "Loading"
+    },
+    "notFound": {
+      "title": "Page not found",
+      "home": "Return home"
+    },
+    "errors": {
+      "page": {
+        "title": "Something went wrong",
+        "retry": "Try again"
+      },
+      "global": {
+        "title": "The application could not continue",
+        "retry": "Try again"
+      }
+    },
+    "guide": {
+      "open": "View guide",
+      "title": "Getting started",
+      "description": "Sign in to use the application. You can close this guide and open it again at any time.",
+      "close": "Close"
+    }
+  }
+}

package/templates/fe/skeleton-lite/apps/web/src/modules/i18n/messages/vi.json

@@ -5,47 +5,53 @@
       "brand": "{{project}}"
     },
     "home": {
-      "title": "Home"
+      "title": "Trang chủ"
     },
     "signIn": {
-      "title": "Sign in",
+      "title": "Đăng nhập",
       "email": "Email",
-      "password": "Password",
-      "submit": "Continue",
-      "working": "Signing in",
-      "refused": "The credentials were refused.",
-      "invalid": "Enter a valid email and password.",
-      "unavailable": "Sign-in is unavailable. Try again shortly."
+      "password": "Mật khẩu",
+      "submit": "Tiếp tục",
+      "working": "Đang đăng nhập",
+      "refused": "Thông tin đăng nhập không đúng.",
+      "invalid": "Hãy nhập email và mật khẩu hợp lệ.",
+      "unavailable": "Chưa thể đăng nhập. Hãy thử lại sau."
     },
     "signOut": {
-      "signedIn": "Signed in",
-      "submit": "Sign out",
-      "working": "Signing out"
+      "signedIn": "Đã đăng nhập",
+      "submit": "Đăng xuất",
+      "working": "Đang đăng xuất"
     },
     "toast": {
-      "successTitle": "Done",
-      "errorTitle": "Error",
-      "unauthorizedTitle": "Not signed in",
-      "unauthorizedDescription": "Sign in to continue.",
-      "defaultSuccess": "The change was saved.",
-      "defaultError": "Something went wrong."
+      "successTitle": "Thành công",
+      "errorTitle": "Lỗi",
+      "unauthorizedTitle": "Chưa đăng nhập",
+      "unauthorizedDescription": "Hãy đăng nhập để tiếp tục.",
+      "defaultSuccess": "Đã hoàn tất.",
+      "defaultError": "Đã xảy ra lỗi."
     },
     "loading": {
-      "message": "Loading"
+      "message": "Đang tải"
     },
     "notFound": {
-      "title": "Page not found",
-      "home": "Return home"
+      "title": "Không tìm thấy trang",
+      "home": "Về trang chủ"
     },
     "errors": {
       "page": {
-        "title": "Something went wrong",
-        "retry": "Try again"
+        "title": "Đã xảy ra lỗi",
+        "retry": "Thử lại"
       },
       "global": {
-        "title": "The application could not continue",
-        "retry": "Try again"
+        "title": "Đã xảy ra lỗi nghiêm trọng",
+        "retry": "Thử lại"
       }
+    },
+    "guide": {
+      "open": "Xem hướng dẫn",
+      "title": "Bắt đầu",
+      "description": "Đăng nhập để sử dụng ứng dụng. Bạn có thể đóng hướng dẫn này và mở lại bất cứ lúc nào.",
+      "close": "Đóng"
     }
   }
 }