cabloy 5.1.136 → 5.1.138

package/zova/src/suite/a-home/modules/home-user/src/config/locale/en-us.ts

@@ -0,0 +1,52 @@
+export default {
+  AccountSettings: 'Account Settings',
+  AccountProfile: 'Profile',
+  AccountSecurity: 'Account Security',
+  AccountDisplayName: 'Display name',
+  AccountLocale: 'Locale',
+  AccountTimezone: 'Time zone',
+  AccountChooseAvatar: 'Choose avatar',
+  AccountClearAvatar: 'Clear avatar',
+  AccountAvatarReady: 'Avatar is ready to save.',
+  AccountAvatarUploadFailed: 'Avatar upload failed.',
+  AccountAvatarCropImage: 'Crop avatar',
+  AccountAvatarAdjustImage: 'Drag or resize the crop area to adjust your avatar.',
+  AccountAvatarCancelCrop: 'Cancel',
+  AccountAvatarApplyCrop: 'Apply crop',
+  AccountSaveProfile: 'Save profile',
+  AccountProfileSaved: 'Profile saved.',
+  AccountProfileSaveFailed: 'Profile could not be saved. Please try again.',
+  AccountLoadFailed: 'Account settings could not be loaded. Please try again.',
+  AccountChangePassword: 'Change password',
+  AccountChangePasswordHelp: 'Changing your password signs you out on every device.',
+  AccountPasswordChangeFailed:
+    'Password could not be changed. Check your current password and try again.',
+  AccountCurrentPassword: 'Current password',
+  AccountNewPassword: 'New password',
+  AccountPasswordConfirm: 'Confirm new password',
+  AccountPasswordsNotMatch: 'The new passwords do not match.',
+  AccountActivation: 'Activate account',
+  AccountActivationPreparing: 'Preparing account activation…',
+  AccountActivationInvalid: 'This activation link is invalid or has expired.',
+  AccountActivationCompleted: 'Your account has been activated. You can now sign in.',
+  AccountActivationBackToLogin: 'Back to login',
+  AccountSetPassword: 'Set password',
+  AccountSetPasswordHelp: 'Set a local password for future sign-in.',
+  AccountSetPasswordEmail: 'Email address',
+  AccountSetPasswordEmailHelp:
+    'Enter the email address where the password-set link should be sent.',
+  AccountSetPasswordRecipient: (email: string) =>
+    `Use your account email (${email}) to receive the password-set link.`,
+  AccountSendPasswordSetLink: 'Send password-set link',
+  AccountPasswordSetLinkSent: 'A password-set link has been sent.',
+  AccountPasswordSetLinkFailed: 'A password-set link could not be sent. Please try again later.',
+  AccountSetPasswordPublicHelp: 'Choose a new password to finish setting up local sign-in.',
+  AccountPasswordSetPreparing: 'Preparing password setup…',
+  AccountPasswordSetInvalid: 'This password-set link is invalid or has expired.',
+  AccountPasswordSetCompleted: 'Password set. Please sign in again.',
+  AccountResetPassword: 'Reset password',
+  AccountResetPasswordPublicHelp: 'Choose a new password for your local sign-in.',
+  AccountPasswordResetPreparing: 'Preparing password reset…',
+  AccountPasswordResetInvalid: 'This password-reset link is invalid or has expired.',
+  AccountPasswordResetCompleted: 'Password reset. Please sign in again.',
+};

package/zova/src/suite/a-home/modules/home-user/src/config/locale/zh-cn.ts

@@ -0,0 +1,49 @@
+export default {
+  AccountSettings: '账户设置',
+  AccountProfile: '个人资料',
+  AccountSecurity: '账户安全',
+  AccountDisplayName: '显示名称',
+  AccountLocale: '语言区域',
+  AccountTimezone: '时区',
+  AccountChooseAvatar: '选择头像',
+  AccountClearAvatar: '清除头像',
+  AccountAvatarReady: '头像已上传，保存个人资料后生效。',
+  AccountAvatarUploadFailed: '头像上传失败。',
+  AccountAvatarCropImage: '裁切头像',
+  AccountAvatarAdjustImage: '请拖拽或缩放裁切区域，调整头像显示范围。',
+  AccountAvatarCancelCrop: '取消',
+  AccountAvatarApplyCrop: '应用裁切',
+  AccountSaveProfile: '保存个人资料',
+  AccountProfileSaved: '个人资料已保存。',
+  AccountProfileSaveFailed: '无法保存个人资料，请重试。',
+  AccountLoadFailed: '无法加载账户设置，请重试。',
+  AccountChangePassword: '修改密码',
+  AccountChangePasswordHelp: '修改密码后，所有设备都需要重新登录。',
+  AccountPasswordChangeFailed: '无法修改密码。请检查当前密码后重试。',
+  AccountCurrentPassword: '当前密码',
+  AccountNewPassword: '新密码',
+  AccountPasswordConfirm: '确认新密码',
+  AccountPasswordsNotMatch: '两次输入的新密码不一致。',
+  AccountActivation: '激活账户',
+  AccountActivationPreparing: '正在准备账户激活…',
+  AccountActivationInvalid: '激活链接无效或已过期。',
+  AccountActivationCompleted: '您的账户已激活，现在可以登录。',
+  AccountActivationBackToLogin: '返回登录',
+  AccountSetPassword: '设置密码',
+  AccountSetPasswordHelp: '为后续登录设置本地密码。',
+  AccountSetPasswordEmail: '邮箱地址',
+  AccountSetPasswordEmailHelp: '请输入接收密码设置链接的邮箱地址。',
+  AccountSetPasswordRecipient: (email: string) => `您的账户邮箱是 ${email}。`,
+  AccountSendPasswordSetLink: '发送密码设置链接',
+  AccountPasswordSetLinkSent: '密码设置链接已发送。',
+  AccountPasswordSetLinkFailed: '无法发送密码设置链接，请稍后重试。',
+  AccountSetPasswordPublicHelp: '选择一个新密码以完成本地登录设置。',
+  AccountPasswordSetPreparing: '正在准备密码设置…',
+  AccountPasswordSetInvalid: '此密码设置链接无效或已过期。',
+  AccountPasswordSetCompleted: '密码已设置，请重新登录。',
+  AccountResetPassword: '重置密码',
+  AccountResetPasswordPublicHelp: '为本地登录设置一个新密码。',
+  AccountPasswordResetPreparing: '正在准备重置密码…',
+  AccountPasswordResetInvalid: '此密码重置链接无效或已过期。',
+  AccountPasswordResetCompleted: '密码已重置，请重新登录。',
+};

package/zova/src/suite/a-home/modules/home-user/src/index.ts

@@ -0,0 +1,2 @@
+export * from './.metadata/locales.js';
+export * from './.metadata/index.js';

package/zova/src/suite/a-home/modules/home-user/src/model/account.ts

@@ -0,0 +1,126 @@
+import type { IDecoratorModelOptions } from 'zova-module-a-model';
+import type {
+  ApiApiHomeUserAccountchangePasswordRequestBody,
+  ApiApiHomeUserAccountchangePasswordResponseBody,
+  ApiApiHomeUserAccountconsumeActivationRequestBody,
+  ApiApiHomeUserAccountconsumePasswordSetRequestBody,
+  ApiApiHomeUserAccountconsumePasswordSetResponseBody,
+  ApiApiHomeUserAccountissuePasswordSetLinkRequestBody,
+  ApiApiHomeUserAccountconsumePasswordResetRequestBody,
+  ApiApiHomeUserAccountconsumePasswordResetResponseBody,
+  ApiApiHomeUserAccountcurrentResponseBody,
+  ApiApiHomeUserAccountrequestPasswordResetRequestBody,
+  ApiApiHomeUserAccountrequestPasswordResetResponseBody,
+  ApiApiHomeUserAccountupdateProfileRequestBody,
+  ApiApiHomeUserAccountupdateProfileResponseBody,
+} from 'zova-module-home-api';
+
+import { BeanModelBase, Model } from 'zova-module-a-model';
+
+export interface IModelOptionsAccount extends IDecoratorModelOptions {}
+
+export type AccountProfileUpdateCommand = Omit<
+  ApiApiHomeUserAccountupdateProfileRequestBody,
+  'avatar' | 'locale' | 'tz'
+> & {
+  avatar?: string | null;
+  locale?: string | null;
+  tz?: string | null;
+};
+
+@Model<IModelOptionsAccount>()
+export class ModelAccount extends BeanModelBase {
+  current() {
+    if (!this.$passport.isAuthenticated) return;
+    return this.$useStateData<ApiApiHomeUserAccountcurrentResponseBody>({
+      queryKey: ['current'],
+      queryFn: async () => {
+        return await this.$api.homeUserAccount.current();
+      },
+    });
+  }
+
+  updateProfile() {
+    return this.$useMutationData<
+      ApiApiHomeUserAccountupdateProfileResponseBody,
+      AccountProfileUpdateCommand
+    >({
+      mutationKey: ['updateProfile'],
+      mutationFn: async body => {
+        return await this.$api.homeUserAccount.updateProfile(
+          body as ApiApiHomeUserAccountupdateProfileRequestBody,
+        );
+      },
+      onSuccess: async () => {
+        await this.$invalidateQueries({ queryKey: ['current'] });
+        await this.$passport.refreshCurrent();
+      },
+    });
+  }
+
+  changePassword() {
+    return this.$useMutationData<
+      ApiApiHomeUserAccountchangePasswordResponseBody,
+      ApiApiHomeUserAccountchangePasswordRequestBody
+    >({
+      mutationKey: ['changePassword'],
+      mutationFn: async body => {
+        return await this.$api.homeUserAccount.changePassword(body);
+      },
+    });
+  }
+
+  issuePasswordSetLink() {
+    return this.$useMutationData<void, ApiApiHomeUserAccountissuePasswordSetLinkRequestBody>({
+      mutationKey: ['issuePasswordSetLink'],
+      mutationFn: async body => {
+        await this.$api.homeUserAccount.issuePasswordSetLink(body);
+      },
+    });
+  }
+
+  consumeActivation() {
+    return this.$useMutationData<void, ApiApiHomeUserAccountconsumeActivationRequestBody>({
+      mutationKey: ['consumeActivation'],
+      mutationFn: async body => {
+        await this.$api.homeUserAccount.consumeActivation(body, { authToken: false });
+      },
+    });
+  }
+
+  consumePasswordSet() {
+    return this.$useMutationData<
+      ApiApiHomeUserAccountconsumePasswordSetResponseBody,
+      ApiApiHomeUserAccountconsumePasswordSetRequestBody
+    >({
+      mutationKey: ['consumePasswordSet'],
+      mutationFn: async body => {
+        return await this.$api.homeUserAccount.consumePasswordSet(body, { authToken: false });
+      },
+    });
+  }
+
+  requestPasswordReset() {
+    return this.$useMutationData<
+      ApiApiHomeUserAccountrequestPasswordResetResponseBody,
+      ApiApiHomeUserAccountrequestPasswordResetRequestBody
+    >({
+      mutationKey: ['requestPasswordReset'],
+      mutationFn: async body => {
+        return await this.$api.homeUserAccount.requestPasswordReset(body, { authToken: false });
+      },
+    });
+  }
+
+  consumePasswordReset() {
+    return this.$useMutationData<
+      ApiApiHomeUserAccountconsumePasswordResetResponseBody,
+      ApiApiHomeUserAccountconsumePasswordResetRequestBody
+    >({
+      mutationKey: ['consumePasswordReset'],
+      mutationFn: async body => {
+        return await this.$api.homeUserAccount.consumePasswordReset(body, { authToken: false });
+      },
+    });
+  }
+}

package/zova/src/suite/a-home/modules/home-user/src/page/account/controller.tsx

@@ -0,0 +1,357 @@
+import type {
+  ApiApiHomeUserAccountchangePasswordRequestBody,
+  ApiApiHomeUserAccountcurrentResponseBody,
+  ApiApiHomeUserAccountissuePasswordSetLinkRequestBody,
+} from 'zova-module-home-api';
+
+import { SchemaObject } from 'openapi3-ts/oas31';
+import { BeanControllerPageBase, Use } from 'zova';
+import { Controller } from 'zova-module-a-bean';
+import { TypeFormOnSubmitData, ZForm, ZFormField, ZFormFieldPreset } from 'zova-module-a-form';
+import { $QueryEnsureLoaded } from 'zova-module-a-model';
+import { resolveImagePreviewUrl, ZImageUploader } from 'zova-module-basic-image';
+import { ZPage } from 'zova-module-home-base';
+
+import type { AccountProfileUpdateCommand } from '../../model/account.js';
+
+import { ModelAccount } from '../../model/account.js';
+
+const homeUserAvatarScene = 'home-user:homeUserAvatar';
+
+type AccountCurrent = ApiApiHomeUserAccountcurrentResponseBody;
+
+type ProfileDraft = AccountProfileUpdateCommand;
+type PasswordDraft = ApiApiHomeUserAccountchangePasswordRequestBody;
+type PasswordSetIssueDraft = Omit<
+  ApiApiHomeUserAccountissuePasswordSetLinkRequestBody,
+  'consumerUrl'
+>;
+
+const emptyPasswordDraft = (): PasswordDraft => ({
+  currentPassword: '',
+  newPassword: '',
+  passwordConfirm: '',
+});
+
+@Controller()
+export class ControllerPageAccount extends BeanControllerPageBase {
+  @Use()
+  $$modelAccount: ModelAccount;
+
+  profileDraft?: ProfileDraft;
+  avatarPreview?: string;
+  schemaProfileUpdate?: SchemaObject;
+  schemaPasswordChange?: SchemaObject;
+  passwordDraft: PasswordDraft = emptyPasswordDraft();
+  passwordSetIssueDraft: PasswordSetIssueDraft = { email: '' };
+  passwordSetLinkSubmitting = false;
+  profileMessage?: string;
+  profileError?: string;
+  passwordSetLinkMessage?: string;
+  passwordSetLinkError?: string;
+
+  timezonePlaceholder?: string;
+
+  get apiSchemasProfileUpdate() {
+    return this.$apiSchema.homeUserAccount.updateProfile();
+  }
+
+  get apiSchemasPasswordChange() {
+    return this.$apiSchema.homeUserAccount.changePassword();
+  }
+
+  protected async __init__() {
+    await $QueryEnsureLoaded(() => this.queryCurrent);
+    await $QueryEnsureLoaded(() => this.apiSchemasProfileUpdate.sdk);
+    this.schemaProfileUpdate = this.$computed(() => {
+      return this.apiSchemasProfileUpdate.requestBody;
+    });
+    await $QueryEnsureLoaded(() => this.apiSchemasPasswordChange.sdk);
+    this.schemaPasswordChange = this.$computed(() => {
+      return this.apiSchemasPasswordChange.requestBody;
+    });
+    this._resetProfileDraft();
+    this.$ssr.handleDirectOrOnHydrated(() => {
+      this.timezonePlaceholder = Intl.DateTimeFormat().resolvedOptions().timeZone;
+    });
+  }
+
+  get queryCurrent() {
+    return this.$$modelAccount.current();
+  }
+
+  async submitProfile(data: TypeFormOnSubmitData<ProfileDraft>) {
+    const current = await this.$$modelAccount.updateProfile().mutateAsync(data.value);
+    this._resetProfileDraft(current);
+    this.profileMessage = this.scope.locale.AccountProfileSaved();
+  }
+
+  handleAvatarUploadError() {
+    this.profileMessage = this.scope.locale.AccountAvatarUploadFailed();
+  }
+
+  async submitPasswordChange(data: TypeFormOnSubmitData<PasswordDraft>) {
+    const result = await this.$$modelAccount.changePassword().mutateAsync(data.value);
+    if (result.requiresRelogin) await this.$passport.requireRelogin();
+  }
+
+  async issuePasswordSetLink() {
+    if (this.passwordSetLinkSubmitting) return;
+    this.passwordSetLinkSubmitting = true;
+    this.passwordSetLinkMessage = undefined;
+    this.passwordSetLinkError = undefined;
+    try {
+      const consumerUrl = this.$router.getPagePath('/home/user/password-set', undefined, true);
+      if (!consumerUrl) throw new Error('password-set consumer route is unavailable');
+      await this.$$modelAccount.issuePasswordSetLink().mutateAsync({
+        ...this.passwordSetIssueDraft,
+        consumerUrl,
+      });
+      this.passwordSetIssueDraft = { email: '' };
+      this.passwordSetLinkMessage = this.scope.locale.AccountPasswordSetLinkSent();
+    } catch {
+      this.passwordSetLinkError = this.scope.locale.AccountPasswordSetLinkFailed();
+    } finally {
+      this.passwordSetLinkSubmitting = false;
+    }
+  }
+
+  private _resetProfileDraft(current = this.queryCurrent?.data) {
+    if (!current) return;
+    this.profileDraft = {
+      name: current.name,
+      avatar: current.avatar ?? undefined,
+      locale: typeof current.locale === 'string' ? current.locale : undefined,
+      tz: current.tz ?? undefined,
+    };
+    this.avatarPreview = current.avatar || this.$scopeBase.config.avatar.empty;
+  }
+
+  protected render() {
+    const query = this.queryCurrent;
+    const current = query?.data;
+    if (!current) {
+      return (
+        <ZPage>
+          <section class="mx-auto max-w-4xl p-6">
+            {query?.error && (
+              <div role="alert" class="alert alert-error">
+                <span>{this.scope.locale.AccountLoadFailed()}</span>
+              </div>
+            )}
+          </section>
+        </ZPage>
+      );
+    }
+    return (
+      <ZPage>
+        <section class="mx-auto max-w-4xl p-6">
+          <h1 class="text-3xl font-semibold">{this.scope.locale.AccountSettings()}</h1>
+          <div class="mt-6 grid gap-6 lg:grid-cols-2">
+            {this._renderProfileCard()}
+            {this._renderSecurityCard(current)}
+          </div>
+          {query?.error && (
+            <div role="alert" class="alert alert-error mt-6">
+              <span>{this.scope.locale.AccountLoadFailed()}</span>
+            </div>
+          )}
+        </section>
+      </ZPage>
+    );
+  }
+
+  private _renderProfileCard() {
+    return this._renderProfileForm();
+  }
+
+  private _renderProfileForm() {
+    return (
+      <ZForm
+        class="card border border-base-300 bg-base-100 shadow-sm"
+        data={this.profileDraft!}
+        schema={this.schemaProfileUpdate}
+        onSubmitData={data => this.submitProfile(data)}
+        onShowError={async () => {
+          this.profileError = this.scope.locale.AccountProfileSaveFailed();
+        }}
+        slotWrapper={children => {
+          return <div class="card-body gap-4">{children}</div>;
+        }}
+        slotHeader={() => <h2 class="card-title">{this.scope.locale.AccountProfile()}</h2>}
+        slotFooter={$$form => {
+          return (
+            <>
+              {this.profileMessage && (
+                <p class="text-sm text-base-content/70">{this.profileMessage}</p>
+              )}
+              {this.profileError && (
+                <p role="alert" class="text-sm text-error">
+                  {this.profileError}
+                </p>
+              )}
+              <button
+                class="btn btn-primary"
+                disabled={$$form.formState.isSubmitting}
+                type="submit"
+              >
+                {this.scope.locale.AccountSaveProfile()}
+              </button>
+            </>
+          );
+        }}
+      >
+        <ZFormField
+          name="avatar"
+          slotDefault={({ propsBucket }, $$formField) => {
+            const avatarValue =
+              typeof propsBucket.value === 'string' ? propsBucket.value : this.avatarPreview;
+            const avatar =
+              resolveImagePreviewUrl(avatarValue, this.sys.config.api.baseURL) ||
+              this.$scopeBase.config.avatar.empty;
+            return (
+              <ZImageUploader
+                previewUrl={avatar}
+                emptyPreviewUrl={this.$scopeBase.config.avatar.empty}
+                previewAlt={this.scope.locale.AccountChooseAvatar()}
+                imageScene={homeUserAvatarScene}
+                chooseText={this.scope.locale.AccountChooseAvatar()}
+                clearText={this.scope.locale.AccountClearAvatar()}
+                crop={{
+                  labels: {
+                    title: this.scope.locale.AccountAvatarCropImage(),
+                    adjust: this.scope.locale.AccountAvatarAdjustImage(),
+                    cancel: this.scope.locale.AccountAvatarCancelCrop(),
+                    apply: this.scope.locale.AccountAvatarApplyCrop(),
+                  },
+                  aspectRatio: 1,
+                  shape: 'round',
+                }}
+                resize={{
+                  width: 512,
+                  height: 512,
+                  fit: 'cover',
+                  format: 'jpeg',
+                  quality: 90,
+                }}
+                onUploaded={uploaded => {
+                  if (!uploaded.url) {
+                    this.handleAvatarUploadError();
+                    return;
+                  }
+                  $$formField.setValue(uploaded.url, propsBucket.disableNotifyChanged);
+                  $$formField.handleBlur();
+                  this.avatarPreview = uploaded.url;
+                  this.profileMessage = this.scope.locale.AccountAvatarReady();
+                }}
+                onCleared={() => {
+                  $$formField.setValue(null, propsBucket.disableNotifyChanged);
+                  $$formField.handleBlur();
+                  this.avatarPreview = this.$scopeBase.config.avatar.empty;
+                }}
+                onError={() => this.handleAvatarUploadError()}
+              />
+            );
+          }}
+        />
+        <ZFormFieldPreset
+          name="name"
+          render="basic-input:formFieldInput"
+          options={{ type: 'text' }}
+        />
+        <ZFormFieldPreset
+          name="locale"
+          render="basic-input:formFieldInput"
+          options={{ type: 'text', placeholder: 'en-us' }}
+        />
+        <ZFormFieldPreset
+          name="tz"
+          render="basic-input:formFieldInput"
+          options={{ type: 'text', placeholder: this.timezonePlaceholder }}
+        />
+      </ZForm>
+    );
+  }
+
+  private _renderSecurityCard(current: AccountCurrent) {
+    return (
+      <section class="card border border-base-300 bg-base-100 shadow-sm">
+        <div class="card-body gap-4">
+          <h2 class="card-title">{this.scope.locale.AccountSecurity()}</h2>
+          {current.hasSimpleAuth ? this._renderChangePassword() : this._renderSetPassword(current)}
+        </div>
+      </section>
+    );
+  }
+
+  private _renderChangePassword() {
+    return (
+      <div class="space-y-4">
+        <p class="text-sm text-base-content/70">{this.scope.locale.AccountChangePasswordHelp()}</p>
+        {this._renderChangePasswordForm()}
+      </div>
+    );
+  }
+
+  private _renderChangePasswordForm() {
+    return (
+      <ZForm
+        data={this.passwordDraft}
+        schema={this.schemaPasswordChange}
+        onSubmitData={data => this.submitPasswordChange(data)}
+        onShowError={async () => {
+          await this.$performCommand('basic-commands:alert', {
+            type: 'error',
+            text: this.scope.locale.AccountPasswordChangeFailed(),
+          });
+        }}
+        slotFooter={$$form => {
+          return (
+            <button class="btn btn-primary" disabled={$$form.formState.isSubmitting} type="submit">
+              {this.scope.locale.AccountChangePassword()}
+            </button>
+          );
+        }}
+      ></ZForm>
+    );
+  }
+
+  private _renderSetPassword(current: AccountCurrent) {
+    return (
+      <form class="space-y-4" onSubmit={event => event.preventDefault()}>
+        <p class="text-sm text-base-content/70">{this.scope.locale.AccountSetPasswordHelp()}</p>
+        {current.eligibleEmailMasked && (
+          <p class="text-sm text-base-content/70">
+            {this.scope.locale.AccountSetPasswordRecipient(current.eligibleEmailMasked)}
+          </p>
+        )}
+        <label class="form-control gap-2">
+          <span class="label-text">{this.scope.locale.AccountSetPasswordEmail()}</span>
+          <input
+            class="input input-bordered w-full"
+            type="email"
+            required
+            autocomplete="email"
+            v-model={this.passwordSetIssueDraft.email}
+          />
+        </label>
+        {this.passwordSetLinkMessage && (
+          <p class="text-sm text-base-content/70">{this.passwordSetLinkMessage}</p>
+        )}
+        {this.passwordSetLinkError && (
+          <p role="alert" class="text-sm text-error">
+            {this.passwordSetLinkError}
+          </p>
+        )}
+        <button
+          class="btn btn-primary"
+          disabled={this.passwordSetLinkSubmitting}
+          type="submit"
+          onClick={() => void this.issuePasswordSetLink()}
+        >
+          {this.scope.locale.AccountSendPasswordSetLink()}
+        </button>
+      </form>
+    );
+  }
+}

package/zova/src/suite/a-home/modules/home-user/src/page/activation/controller.tsx

@@ -0,0 +1,83 @@
+import { z } from 'zod';
+import { BeanControllerPageBase, Use } from 'zova';
+import { Controller } from 'zova-module-a-bean';
+import { ZPage } from 'zova-module-home-base';
+
+import { ModelAccount } from '../../model/account.js';
+
+export const ControllerPageActivationSchemaQuery = z.object({
+  token: z.preprocess(
+    value => (typeof value === 'string' ? value : undefined),
+    z.string().optional(),
+  ),
+});
+
+@Controller()
+export class ControllerPageActivation extends BeanControllerPageBase {
+  @Use()
+  $$modelAccount: ModelAccount;
+
+  private token?: string;
+  tokenReady = false;
+  completed = false;
+
+  protected async __init__() {
+    this.ctx.meta.$ssr.handleDirectOrOnHydrated(async () => {
+      await this._consumeQueryToken();
+    });
+  }
+
+  gotoLogin() {
+    return this.app.$gotoPage('/home/login', {
+      query: { [this.sys.env.ROUTER_KEY_RETURNTO]: this.app.$getReturnTo() },
+    });
+  }
+
+  private async _consumeQueryToken() {
+    this.token = this.$query.token || undefined;
+    try {
+      if (!this.token) return;
+      await this.$$modelAccount.consumeActivation().mutateAsync({ token: this.token });
+      this.completed = true;
+    } catch {
+      // Invalid and expired tokens intentionally share the same public state.
+    } finally {
+      this.token = undefined;
+      const pagePath = this.$router.getPagePath('/home/user/activation');
+      await this.$router.replace(pagePath);
+      this.tokenReady = true;
+    }
+  }
+
+  protected render() {
+    return (
+      <ZPage>
+        <section class="mx-auto max-w-md p-6">
+          <div class="card border border-base-300 bg-base-100 shadow-sm">
+            <div class="card-body gap-4">
+              <h1 class="card-title text-2xl">{this.scope.locale.AccountActivation()}</h1>
+              {!this.tokenReady ? (
+                <p class="text-sm text-base-content/70">
+                  {this.scope.locale.AccountActivationPreparing()}
+                </p>
+              ) : this.completed ? (
+                <p class="text-sm text-base-content/70">
+                  {this.scope.locale.AccountActivationCompleted()}
+                </p>
+              ) : (
+                <p role="alert" class="text-sm text-error">
+                  {this.scope.locale.AccountActivationInvalid()}
+                </p>
+              )}
+              {this.tokenReady && (
+                <button class="btn btn-primary" type="button" onClick={() => this.gotoLogin()}>
+                  {this.scope.locale.AccountActivationBackToLogin()}
+                </button>
+              )}
+            </div>
+          </div>
+        </section>
+      </ZPage>
+    );
+  }
+}