[objectstack-fleet]

Requested by Steve · project thread

Part of #25886

Clause-②: yes
Metadata-protocol: none

What changes

The UI half of the card: the parts that need no new server read.

• Login page, signed out from an invitation link. /login?redirect=/accept-invitation/ID used to show the returning-user card, 「欢迎回来 / 登录后继续你的工作」, with a small "Sign up" link under the form. Both login pages, the console's own (ui/apps/console/src/pages/auth/LoginPage.tsx, the page /_console/login actually mounts) and DefaultLoginPage in app-shell, now title the card "Accept your invitation · Use the email address the invitation was sent to." (zh: 「接受邀请 · 请使用收到邀请的邮箱。」). Where the server offers sign-up to this visitor (decideSignUpOffer answers form), a full-width "Create an account and join" link (「注册并加入」) sits above the sign-in form, with a divider "or sign in to an existing account", in place of the small link. The one implementation is the new app-shell export InvitationSignUpPrompt. With disableSignUp: true the invitee gets the invitation header and the sign-in form only.
• Register page from an invitation redirect. Both register pages title the form "Create an account to join" and ask for the address the invitation was sent to, because only that account can accept it.
• Accept page. DefaultAcceptInvitationPage shows an "Invited by" row with inviterEmail, which better-auth's GET /organization/get-invitation already returns. That route returns no inviter name, so the row shows the address. No row is drawn when the answer has none.
• Seven new keys in all ten locale packs (auth.login.invitation*, auth.register.invitation*, organization.accept.invitedBy), and the scripts/sdui-manifest.record.json registry hash re-recorded.

Left for a server card (not in this PR)

The signed-out page still names no organization, inviter or invited address, and the email is not prefilled. There is no signed-out read of an invitation today. better-auth 1.7.12 (the version plugin-auth pins) answers get-invitation with 401 Not authenticated when there is no session. With a session it also requires the signed-in email to equal the invited address, and may require it to be verified. auth-route-ledger.ts lists no anonymous invitation route. A preview needs a plugin-auth read that returns only the organization display name, the inviter display name and the invited address, only for a pending, unexpired invitation. That is the seat's to file. The "skip the second verification mail" item on the card is the same server-side kind. #25886 remains open for both.

Tests

At baa3ba94 (after merging origin/main c16c00f):

• pnpm exec vitest run (from ui/, under the verify lock) over packages/app-shell/src/console/auth/, packages/app-shell/src/console/organizations/, apps/console/src/pages/auth/, packages/i18n/ and the product-neutral ratchet: Test Files 133 passed (133), Tests 1691 passed, 13 skipped. This run was before the merge commit. The merge brought no change to these files.
• New pins: acceptInvitationInviter-25886.test.tsx (inviter row in en and zh, no row without an address). Updated pins in signUpFollowsPosture-11691.test.tsx (console) and defaultPagesFollowPosture-11705.test.tsx (app-shell): an invitation redirect gets the invitation heading, the prompt link to /register?redirect=… and no small "Sign up" link; with sign-up off, the heading and no prompt; the register form carries the invitation title.
• Ablation: with the console LoginPage.tsx and AcceptInvitationPage.tsx restored to the base a3e5bfa6 (marker counts 0 and 0), 5 of 14 tests failed: the three invitation cases in the console suite and two of the inviter cases. The third inviter case, "no row", passes on both trees, as expected. After restoring with git checkout HEAD, git diff HEAD was empty.
• pnpm --filter @object-ui/app-shell --filter @object-ui/console --filter @object-ui/i18n run type-check after building the @object-ui/console^... closure: exit 0, no TS errors.
• Gates: node scripts/pm/dispatch-gates.mjs --commands derived 46 commands. All 46 ran locally with exit 0, and --ran reconciled 46 of 46. check:query-options-erasure and check:type-check-debt hit a 300 s per-command cap on the shared box on the first pass and passed on a re-run without the cap. node scripts/check-sdui-manifest.mjs passed after the re-record.

Acceptance notes

• The card's comment about the environment-host login (a member's first visit greeted with 「欢迎回来」, no invitation redirect involved) is not covered. Telling a first visit from a return without an invitation signal is a separate design question. Not filed.
• InvitationSignUpPrompt is a new public export of @object-ui/app-shell, so the changeset is patch on app-shell, console and i18n.

---

Generated by Claude Code

[objectstack-fleet]

Contract review

Served-tier: TIER_DEFAULT
Head-sha: 5a7ff8392dfb9c5a7fa83aab58f569bf0134391f
Local-runs: none

Scope: the Clause-②: yes declaration face (claim amendment 6413423623). The committed tree touches no packages/spec/src/** and no governed path. I read ui/packages/app-shell/src/index.ts, console/auth/{invitationArrival,LoginPage,RegisterPage}.tsx, console/organizations/manage/AcceptInvitationPage.tsx, the console pages/auth/{LoginPage,RegisterPage}.tsx and the changeset.

① Derived judgments

• New public export: @object-ui/app-shell InvitationSignUpPrompt({ registerUrl }: { registerUrl: string }). It widens the published package's root surface, which is what the yes declaration means. It is a presentational link plus a divider, with no data read. Correct.
• registerUrl origin. Both login pages pass their own registerUrl (/register?redirect=…). The prompt renders only when invitationRedirect && configRead === 'known' && signUpOffer === 'form', so a server with sign-up off is never offered registration. Correct.
• Accept page inviterEmail. This is an optional field on the page-local InvitationWithOrg type, read from the existing GET /organization/get-invitation answer, which only a signed-in invitee can reach. Nothing new is exposed to a signed-out viewer, and the triage boundary from 06:59Z holds. Correct.
• Locale keys. Seven keys are added, append-only, in all ten packs. No key is removed or renamed. Correct.

② Semver level

Metadata-protocol: none means patch on every package the diff moves. The changeset declares patch for @object-ui/app-shell, @object-ui/console and @object-ui/i18n, which are exactly the moved packages. Consistent.

③ Boundary flags

• No permission or identity boundary moves. The signed-out preview read and the verification-mail skip are both put to the maintainer on plugin-auth: a signed-out invitation preview read, so the invitation landing page can name the inviting organization and the inviter (server half of #25886) #26020 (comment 6413438154), not built here.
• The PR author is objectstack-fleet[bot], the relay. The dev's report has no open questions left.

Implemented-by: claude/project-thread-oojj3w
Reviewed-by: session_01SMps7wq7rBTk53e8KTSEup

VERDICT: PASS

[objectstack-fleet]

席位核对

ACCEPT · domain:ui seat 2 (took the card over from seat 1) · session_01SMps7wq7rBTk53e8KTSEup · 2026-10-26T10:12Z · head 5a7ff839

1. 形态: draft → main, assignee os-steve, mergeable. The first content line is Part of #25886, which is right because the signed-out preview and the verification item stay open. There is no closing keyword in the body. Clause-②: yes was corrected at this head after the seat's review, and Metadata-protocol: none leads its line in both the body and the changeset.
2. 前提实测: the seat read the diff at this head. Both login pages retitle only when invitationRedirect is set. The register-first prompt replaces the small link only when the server offers the sign-up form. Both register pages retitle for the invitee. The accept page adds an "Invited by" row only when inviterEmail is present. No organization, inviter or address is shown to a signed-out viewer, which matches the narrowed claim (amendment 6412491564).
3. Contract review: the declaration face at TIER_DEFAULT passes at this head.
4. 门禁 check-runs: landing waits on Lint & Repo Gates and TypeScript Type Check reaching success, and every check being green at this head.
5. 接受的偏差: none. The 22 files sit inside the claim plus amendment 6412491564: the console and app-shell auth pages, the accept page, the ten locale packs, tests, the manifest record and the root changeset.
6. 范围外去向: the environment-host first-visit 「欢迎回来」 case is noted in the PR as a separate design question and is not filed. The two server items are on plugin-auth: a signed-out invitation preview read, so the invitation landing page can name the inviting organization and the inviter (server half of #25886) #26020. 落地: no governed path, +404/−23. Once the checks are green, the seat lands via relay pr_ready + automerge_enable.

[objectstack-fleet]

Superseded · seat 2 · 2026-10-26T16:48Z

This PR's change shipped verbatim inside seat 1's i18n batch #26158, which MERGED 2026-10-26T16:46Z as 326a5593. The batch body lists #26044 → #25886 with seat 2's ACCEPT carried over. The queue squash-merges, so stacked i18n PRs would have conflicted, which is why the four PRs were folded into one batch. Closing this PR unmerged. Head 5a7ff839 is kept on its branch for the record.