@anchrd/intel-ui 0.21.0 → 0.23.0

package/src/data/intel-data-provider/intel-data-provider.types.ts

@@ -12,6 +12,8 @@ import type {
   ListFlowsInput,
   PreviewFlowPublishInput,
   PublishFlowInput,
+  PurgeFlowInput,
+  PurgeFlowResult,
   RelationGraph,
   RelationGraphScope,
   SaveFlowVersionInput,
@@ -37,6 +39,8 @@ import type {
   NodeList,
   NodeTable,
   NodeVersionList,
+  PurgeNodeInput,
+  PurgeNodeResult,
   ReindexResult,
   ResolveNodeLinksInput,
   ResolveNodeLinksResult,
@@ -125,6 +129,10 @@ export interface IntelDataProvider {
   listNodeVersions(nodeId: string): Promise<NodeVersionList>;
   updateNode(input: UpdateNodeInput): Promise<Node>;
   archiveNode(input: ArchiveNodeInput): Promise<Node>;
+  // ⚠️ The one way across this seam after which nothing is really left (#457). The title comes back
+  // because nothing can look it up afterwards.
+  purgeNode(input: PurgeNodeInput): Promise<PurgeNodeResult>;
+  purgeFlow(input: PurgeFlowInput): Promise<PurgeFlowResult>;
   searchNodes(input: SearchInput): Promise<SearchResult>;
   listGrants(resourceId: string): Promise<ResourceGrantList>;
   // The grant, and what the grant does not cover: the documents the flows in this folder read that

package/src/flow-runs/flow-runs.tsx

@@ -5,6 +5,7 @@ import { useState } from "react";
 import type { I18n } from "@/i18n/i18n.types.ts";
 import { useI18n } from "@/i18n/i18n-context.tsx";
 import { useIntelRouterContext } from "@/router/router-context.ts";
+import { useDateTime } from "@/time/time-context.tsx";
 
 // One page is what a person reads before deciding, not what a database can return. The server caps
 // it at fifty; twenty is what fits on a screen without scrolling past the answer.
@@ -115,6 +116,7 @@ export function FlowRuns({ flowId }: { flowId: string }) {
 
 function RunRow({ run, open, toggle }: { run: FlowRunSummary; open: boolean; toggle(): void }) {
   const i18n = useI18n();
+  const dateTime = useDateTime();
   const failed = run.status === "failed";
   const Chevron = open ? ChevronDown : ChevronRight;
   return (
@@ -133,7 +135,7 @@ function RunRow({ run, open, toggle }: { run: FlowRunSummary; open: boolean; tog
             >
               {i18n.t(`runs.status.${run.status}`)}
             </span>
-            <span>{new Date(run.startedAt).toLocaleString(i18n.locale)}</span>
+            <span>{dateTime.at(run.startedAt)}</span>
             <span className="text-muted-foreground">
               {run.durationMs === null
                 ? i18n.t("runs.stillRunning")

package/src/flows/flows.tsx

@@ -24,7 +24,6 @@ import {
 } from "@xyflow/react";
 import { FileSearch, Info, Send, Wrench } from "lucide-react";
 import { useEffect, useId, useMemo, useState } from "react";
-import { ActionSlot } from "@/app/action-slot/action-slot.tsx";
 import { TreeEntryMediaType } from "@/app/app-tree/app-tree.tsx";
 import { ViewToggle } from "@/app/view-toggle/view-toggle.tsx";
 import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@/components/ui/tooltip";
@@ -457,16 +456,6 @@ function FlowsEditor() {
 
   return (
     <div className="flex h-full min-h-0 flex-col">
-      {/* Only the view switch belongs to the area: it says how the thing the breadcrumb names is
-          being shown, and it is mounted only where there is a flow to draw — a switch with nothing
-          to point at is what #19 rules out for the header. A flow is the one level that has runs,
-          so it is the one that offers the third view (#35). Everything that acts on the flow itself
-          left this bar for the flow's own title line below (#24). */}
-      {selectedFlowId ? (
-        <ActionSlot>
-          <ViewToggle views={["editor", "graph", "runs"]} />
-        </ActionSlot>
-      ) : null}
       {selectedFlowId && document.data ? (
         <FlowTitle
           flow={document.data.flow}
@@ -736,6 +725,11 @@ function FlowTitle({
     // hit without looking is worth more than the primary button being outermost. `TitleRow` is what
     // enforces that — nothing passed in here can get past the menu.
     <TitleRow title={flow.title} description={flow.description} target={{ type: "flow", flow }}>
+      {/* ⚠️ #454: the toggle used to stand in the global header, beside the search — where what
+          applies EVERYWHERE stands. But it says how THIS flow is shown, and so belongs in the line
+          that names this flow. A flow is the only level with runs, and therefore the only one with
+          three views (#35). */}
+      <ViewToggle views={["editor", "graph", "runs"]} />
       <TooltipProvider delayDuration={300}>
         <Tooltip>
           <TooltipTrigger asChild>

package/src/folder-contents/folder-contents.tsx

@@ -14,6 +14,7 @@ import { useI18n } from "@/i18n/i18n-context.tsx";
 import { kindIcons } from "@/kind-icon.ts";
 import { ResourceMenu, type ResourceTarget } from "@/resource-menu/resource-menu.tsx";
 import { useIntelRouterContext } from "@/router/router-context.ts";
+import { useDateTime } from "@/time/time-context.tsx";
 
 // The same record the menu is handed everywhere else, read off a level row. A re-labelling, never a
 // second source of truth — a rename works on the whole record, not on a summary of it.
@@ -41,6 +42,7 @@ function targetOf(entry: TreeEntry): ResourceTarget {
 export function FolderContents({ folderId }: { folderId: string }) {
   const { data } = useIntelRouterContext();
   const i18n = useI18n();
+  const dateTime = useDateTime();
   const navigate = useNavigate();
   const level = useQuery({
     queryKey: treeLevelKey(folderId),
@@ -126,7 +128,7 @@ export function FolderContents({ folderId }: { folderId: string }) {
                     </button>
                   </TableCell>
                   <TableCell className="px-4 text-right text-sm text-muted-foreground tabular-nums">
-                    {new Date(changed).toLocaleDateString(i18n.locale)}
+                    {dateTime.on(changed)}
                   </TableCell>
                   {/* ⚠️ The same menu as the title line of the open thing, not a shorter one built
                       for here. #58 collected every action in one place so that place is always the

package/src/i18n/de.json

@@ -2,8 +2,6 @@
   "$locale": "de-DE",
   "app.name": "Intel",
   "nav.primary": "Hauptnavigation",
-  "nav.nodes": "Wissen",
-  "nav.flows": "Flows",
   "nav.tools": "Werkzeuge",
   "shell.toggleSidebar": "Seitenleiste ein- oder ausklappen",
   "shell.resizeSidebar": "Breite der Seitenleiste",
@@ -33,7 +31,8 @@
   "tree.expandCalls": "Die Flows zeigen, die {title} aufruft",
   "tree.collapseCalls": "Die Flows verbergen, die {title} aufruft",
   "tree.add": "Zu {title} hinzufügen",
-  "tree.addRoot": "Auf oberster Ebene anlegen",
+  "tree.addRoot": "Element",
+  "tree.addRoot.long": "Auf oberster Ebene anlegen",
   "tree.new.folder": "Neuer Ordner",
   "tree.new.document": "Neues Dokument",
   "tree.new.table": "Neue Tabelle",
@@ -50,6 +49,7 @@
   "tree.kind.table": "Tabelle",
   "tree.kind.flow": "Flow",
   "tree.move.action": "Verschieben nach …",
+  "tree.move.hint": "oder ziehen",
   "tree.move.title": "{title} verschieben",
   "tree.move.root": "Oberste Ebene",
   "tree.move.dropRoot": "Hier ablegen, um auf die oberste Ebene zu verschieben",
@@ -88,6 +88,12 @@
   "archive.empty": "Es ist nichts archiviert.",
   "archive.failed": "Das Archiv konnte nicht gelesen werden. Prüfe deinen Zugriff und versuche es erneut.",
   "archive.restoreFailed": "Es wurde nicht wiederhergestellt. Vielleicht hat jemand anderes es geändert — lade neu und versuche es erneut.",
+  "archive.purge": "{title} endgültig löschen",
+  "archive.purge.title": "Endgültig löschen?",
+  "archive.purge.body": "„{title}\u201c und alles, was dazugehört — jede Version, der Inhalt und die Einträge im Suchindex — ist danach weg. Das lässt sich nicht rückgängig machen.",
+  "archive.purge.confirm": "Endgültig löschen",
+  "archive.purge.cancel": "Abbrechen",
+  "archive.purgeFailed": "Es konnte nicht gelöscht werden. Ein Ordner muss zuerst leer sein, und was ein publizierter Flow noch benutzt, kann gar nicht weg.",
   "archive.archivedAt": "Archiviert {when}",
   "resource.conflict": "Nicht geändert: Jemand anderes hat diesen Eintrag zuerst geändert. Lade ihn neu und versuche es erneut.",
   "resource.forbidden": "Nicht geändert: Du darfst diesen Eintrag nicht ändern.",
@@ -97,6 +103,7 @@
   "node.attachmentHelp": "Die kanonische Datei liegt privat in Intel. Ihre KI-lesbare Projektion wird getrennt indexiert.",
   "node.table.summary": "{rows} Zeilen, {columns} Spalten",
   "node.table.download": "CSV herunterladen",
+  "node.table.downloadFailed": "Die CSV konnte nicht erzeugt werden. Möglicherweise ist die Tabelle noch leer.",
   "node.table.empty": "Noch keine Zeilen. Zeilen werden von Flows angehängt.",
   "node.table.undefined": "Diese Tabelle hat noch keine Spalten.",
   "node.select": "Wähle ein Dokument oder einen Ordner, um damit zu arbeiten.",
@@ -166,7 +173,7 @@
   "node.saveError": "Dieses Dokument konnte nicht gespeichert werden. Lade neu und versuche es erneut.",
   "tools.signingIn": "Du wirst am Firmenportal angemeldet …",
   "tools.noAccess": "Kein Zugriff auf das Firmenportal",
-  "tools.noAccessHelp": "Dein Intel-Konto erreicht das MCP-Portal der Firma nicht, deshalb gibt es hier nichts zu zeigen. Wer welchen Server nutzen darf, entscheidet eine Administration im Portal; bitte darum, aufgenommen zu werden.",
+  "tools.noAccessHelp": "Dein Konto darf das MCP-Portal der Firma nicht erreichen, deshalb gibt es hier nichts zu zeigen. Diese Erlaubnis wird nicht in Intel vergeben — bitte die Stelle darum, die in deiner Organisation die Konten verwaltet.",
   "tools.empty": "Keine Werkzeuge für dich verfügbar",
   "tools.emptyHelp": "Das Portal hat geantwortet, und es bietet deinem Konto keine Werkzeuge an. Welche Server es gibt und wer sie erreicht, entscheidet eine Administration im Portal.",
   "tools.unreachable": "Portal nicht erreichbar",
@@ -290,6 +297,9 @@
   "settings.description": "Sprache, Erscheinungsbild und Zeitzone. Alle drei gelten sofort und werden auf diesem Gerät gemerkt.",
   "settings.language": "Sprache",
   "settings.appearance": "Erscheinungsbild",
+  "settings.timezone": "Zeitzone",
+  "settings.timezone.device": "Dieses Gerät ({zone})",
+  "settings.timezone.hint": "Zeiten werden nur in dieser Zone GELESEN. Gespeichert und übertragen wird weiterhin UTC.",
   "settings.appearance.system": "Dem System folgen",
   "settings.appearance.light": "Hell",
   "settings.appearance.dark": "Dunkel",
@@ -303,6 +313,7 @@
   "reindex.failed": "Der Neuaufbau wurde nicht gestartet. Prüfe deine Berechtigung und versuche es noch einmal.",
   "auth.signOut": "Abmelden",
   "auth.signOutFailed": "Das Abmelden ist fehlgeschlagen. Prüfe deine Verbindung und versuche es erneut.",
+  "signIn.unreachable": "Intel war nicht erreichbar. Prüfe deine Verbindung und versuche es erneut.",
   "signIn.refusedTitle": "Angemeldet, aber nicht angenommen",
   "signIn.refusedBody": "Gate hat dich angemeldet, und diese Installation hat den Ausweis nicht angenommen. Du wurdest nicht zurück zum Login geschickt, denn dort beginnt die Schleife.",
   "signIn.refusedLikely": "Meistens ist die Sitzung zwischen den beiden Schritten abgelaufen, oder der Ausweis wurde für eine andere Installation ausgestellt. Ein Neuladen ist einen Versuch wert; danach muss sich anschauen, wer diese Installation betreibt.",

package/src/i18n/en.json

@@ -2,8 +2,6 @@
   "$locale": "en-US",
   "app.name": "Intel",
   "nav.primary": "Primary navigation",
-  "nav.nodes": "Intelligence",
-  "nav.flows": "Flows",
   "nav.tools": "Tools",
   "shell.toggleSidebar": "Collapse or expand the sidebar",
   "shell.resizeSidebar": "Sidebar width",
@@ -33,7 +31,8 @@
   "tree.expandCalls": "Show the flows {title} calls",
   "tree.collapseCalls": "Hide the flows {title} calls",
   "tree.add": "Add to {title}",
-  "tree.addRoot": "Add at the top level",
+  "tree.addRoot": "Element",
+  "tree.addRoot.long": "Add at the top level",
   "tree.new.folder": "New folder",
   "tree.new.document": "New document",
   "tree.new.table": "New table",
@@ -50,6 +49,7 @@
   "tree.kind.table": "Table",
   "tree.kind.flow": "Flow",
   "tree.move.action": "Move to…",
+  "tree.move.hint": "or drag",
   "tree.move.title": "Move {title}",
   "tree.move.root": "Top level",
   "tree.move.dropRoot": "Drop here to move to the top level",
@@ -88,6 +88,12 @@
   "archive.empty": "Nothing is archived.",
   "archive.failed": "The archive could not be read. Check your access and try again.",
   "archive.restoreFailed": "It was not restored. Somebody else may have changed it — reload and try again.",
+  "archive.purge": "Delete {title} for good",
+  "archive.purge.title": "Delete this for good?",
+  "archive.purge.body": "“{title}” and everything belonging to it — every version, its content and its entries in the search index — will be gone. This cannot be undone.",
+  "archive.purge.confirm": "Delete for good",
+  "archive.purge.cancel": "Cancel",
+  "archive.purgeFailed": "It could not be deleted. A folder has to be empty first, and a node a published flow still uses cannot go at all.",
   "archive.archivedAt": "Archived {when}",
   "resource.conflict": "It was not changed: somebody else changed this entry first. Reload it and try again.",
   "resource.forbidden": "It was not changed: you may not change this entry.",
@@ -97,6 +103,7 @@
   "node.attachmentHelp": "The canonical file is stored privately in Intel. Its AI-readable projection is indexed separately.",
   "node.table.summary": "{rows} rows, {columns} columns",
   "node.table.download": "Download CSV",
+  "node.table.downloadFailed": "The CSV could not be created. The table may still be empty.",
   "node.table.empty": "No rows yet. Rows are appended by flows.",
   "node.table.undefined": "This table has no columns yet.",
   "node.select": "Select a document or folder to work with it.",
@@ -166,7 +173,7 @@
   "node.saveError": "This document could not be saved. Reload and try again.",
   "tools.signingIn": "Signing you in to the company portal…",
   "tools.noAccess": "No access to the company portal",
-  "tools.noAccessHelp": "Your Intel account does not reach the company MCP portal, so there is nothing to show here. An administrator decides in the portal who may use which server; ask them to include you.",
+  "tools.noAccessHelp": "Your account is not permitted to reach the company MCP portal, so there is nothing to show here. That permission is not given in Intel — ask whoever administers the accounts of your organisation to grant it.",
   "tools.empty": "No tools available to you",
   "tools.emptyHelp": "The portal answered, and it offers your account no tools. An administrator decides in the portal which servers exist and who may reach them.",
   "tools.unreachable": "Portal not reachable",
@@ -290,6 +297,9 @@
   "settings.description": "Language, appearance and timezone. All three take effect immediately and are remembered on this device.",
   "settings.language": "Language",
   "settings.appearance": "Appearance",
+  "settings.timezone": "Time zone",
+  "settings.timezone.device": "This device ({zone})",
+  "settings.timezone.hint": "Times are only READ in this zone. What is stored and sent stays UTC.",
   "settings.appearance.system": "Follow the system",
   "settings.appearance.light": "Light",
   "settings.appearance.dark": "Dark",
@@ -303,6 +313,7 @@
   "reindex.failed": "The rebuild was not started. Check your access and try again.",
   "auth.signOut": "Sign out",
   "auth.signOutFailed": "Signing out failed. Check your connection and try again.",
+  "signIn.unreachable": "Intel could not be reached. Check your connection and try again.",
   "signIn.refusedTitle": "Signed in, but not accepted",
   "signIn.refusedBody": "Gate signed you in, and this installation did not accept the credential. You have not been sent back to the login, because that is where the loop starts.",
   "signIn.refusedLikely": "Most often the session expired between the two steps, or the credential was issued for a different installation. Reloading is worth one try; after that, whoever runs this installation has to look.",

package/src/i18n/es.json

@@ -2,8 +2,6 @@
   "$locale": "es-ES",
   "app.name": "Intel",
   "nav.primary": "Navegación principal",
-  "nav.nodes": "Conocimiento",
-  "nav.flows": "Flujos",
   "nav.tools": "Herramientas",
   "shell.toggleSidebar": "Plegar o desplegar la barra lateral",
   "shell.resizeSidebar": "Ancho de la barra lateral",
@@ -33,7 +31,8 @@
   "tree.expandCalls": "Mostrar los flujos a los que llama {title}",
   "tree.collapseCalls": "Ocultar los flujos a los que llama {title}",
   "tree.add": "Añadir a {title}",
-  "tree.addRoot": "Añadir en el nivel superior",
+  "tree.addRoot": "Elemento",
+  "tree.addRoot.long": "Añadir en el nivel superior",
   "tree.new.folder": "Carpeta nueva",
   "tree.new.document": "Documento nuevo",
   "tree.new.table": "Tabla nueva",
@@ -50,6 +49,7 @@
   "tree.kind.table": "Tabla",
   "tree.kind.flow": "Flujo",
   "tree.move.action": "Mover a…",
+  "tree.move.hint": "o arrastra",
   "tree.move.title": "Mover {title}",
   "tree.move.root": "Nivel superior",
   "tree.move.dropRoot": "Suelta aquí para mover al nivel superior",
@@ -88,6 +88,12 @@
   "archive.empty": "No hay nada archivado.",
   "archive.failed": "El archivo no se ha podido leer. Comprueba tu acceso e inténtalo de nuevo.",
   "archive.restoreFailed": "No se ha restaurado. Puede que otra persona lo haya cambiado — recarga e inténtalo de nuevo.",
+  "archive.purge": "Eliminar «{title}» definitivamente",
+  "archive.purge.title": "¿Eliminar definitivamente?",
+  "archive.purge.body": "«{title}» y todo lo que le pertenece — cada versión, su contenido y sus entradas en el índice de búsqueda — desaparecerá. Esto no se puede deshacer.",
+  "archive.purge.confirm": "Eliminar definitivamente",
+  "archive.purge.cancel": "Cancelar",
+  "archive.purgeFailed": "No se pudo eliminar. Una carpeta debe estar vacía primero, y lo que un flujo publicado todavía usa no puede eliminarse.",
   "archive.archivedAt": "Archivado {when}",
   "resource.conflict": "No se ha cambiado: otra persona ha cambiado esta entrada antes. Recárgala e inténtalo de nuevo.",
   "resource.forbidden": "No se ha cambiado: no puedes cambiar esta entrada.",
@@ -97,6 +103,7 @@
   "node.attachmentHelp": "El archivo canónico se guarda en privado en Intel. Su proyección legible por la IA se indexa por separado.",
   "node.table.summary": "{rows} filas, {columns} columnas",
   "node.table.download": "Descargar CSV",
+  "node.table.downloadFailed": "No se pudo crear el CSV. Puede que la tabla todavía esté vacía.",
   "node.table.empty": "Todavía no hay filas. Las filas las añaden los flujos.",
   "node.table.undefined": "Esta tabla todavía no tiene columnas.",
   "node.select": "Elige un documento o una carpeta para trabajar con ello.",
@@ -166,7 +173,7 @@
   "node.saveError": "Este documento no se ha podido guardar. Recarga e inténtalo de nuevo.",
   "tools.signingIn": "Iniciando tu sesión en el portal de la empresa…",
   "tools.noAccess": "Sin acceso al portal de la empresa",
-  "tools.noAccessHelp": "Tu cuenta de Intel no llega al portal MCP de la empresa, así que aquí no hay nada que mostrar. Quién puede usar qué servidor lo decide la administración en el portal; pídeles que te incluyan.",
+  "tools.noAccessHelp": "Tu cuenta no tiene permiso para llegar al portal MCP de la empresa, así que aquí no hay nada que mostrar. Ese permiso no se concede en Intel — pídeselo a quien administre las cuentas de tu organización.",
   "tools.empty": "No tienes herramientas disponibles",
   "tools.emptyHelp": "El portal ha respondido, y no ofrece ninguna herramienta a tu cuenta. Qué servidores existen y quién llega a ellos lo decide la administración en el portal.",
   "tools.unreachable": "Portal no accesible",
@@ -290,6 +297,9 @@
   "settings.description": "Idioma, apariencia y zona horaria. Las tres se aplican de inmediato y se recuerdan en este dispositivo.",
   "settings.language": "Idioma",
   "settings.appearance": "Apariencia",
+  "settings.timezone": "Zona horaria",
+  "settings.timezone.device": "Este dispositivo ({zone})",
+  "settings.timezone.hint": "Las horas solo se LEEN en esta zona. Lo que se guarda y se envía sigue siendo UTC.",
   "settings.appearance.system": "Seguir al sistema",
   "settings.appearance.light": "Claro",
   "settings.appearance.dark": "Oscuro",
@@ -303,6 +313,7 @@
   "reindex.failed": "No se inició la reconstrucción. Comprueba tu acceso e inténtalo de nuevo.",
   "auth.signOut": "Cerrar sesión",
   "auth.signOutFailed": "El cierre de sesión ha fallado. Comprueba tu conexión e inténtalo de nuevo.",
+  "signIn.unreachable": "No se pudo contactar con Intel. Revisa tu conexión e inténtalo de nuevo.",
   "signIn.refusedTitle": "Sesión iniciada, pero no aceptada",
   "signIn.refusedBody": "Gate ha iniciado tu sesión, y esta instalación no ha aceptado la credencial. No se te ha devuelto al inicio de sesión, porque ahí es donde empieza el bucle.",
   "signIn.refusedLikely": "Lo más habitual es que la sesión caducara entre los dos pasos, o que la credencial se emitiera para otra instalación. Recargar merece un intento; después de eso, tiene que mirarlo quien gestiona esta instalación.",

package/src/main.tsx

@@ -1,7 +1,7 @@
 import { QueryClientProvider } from "@tanstack/react-query";
-import { RouterProvider } from "@tanstack/react-router";
 import { StrictMode } from "react";
 import { createRoot } from "react-dom/client";
+import { AppRoot, createRefusalStore } from "@/app-root/app-root.tsx";
 import {
   createIntelDataProvider,
   loginPath,
@@ -11,9 +11,9 @@ import { createBrowserSignIn, createSignInGuard } from "@/data/sign-in/sign-in.t
 import { I18nProvider } from "@/i18n/i18n-context.tsx";
 import { createLanguages } from "@/i18n/i18n-languages/i18n-languages.ts";
 import { createIntelRouter } from "@/router/router.tsx";
-import { SignInRefused } from "@/sign-in-refused/sign-in-refused.tsx";
 import { applyTheme, readThemeChoice, SystemThemeQuery, themeFor } from "@/theme/theme.ts";
 import { ThemeProvider } from "@/theme/theme-context.tsx";
+import { TimeZoneProvider } from "@/time/time-context.tsx";
 import "./styles.css";
 import "./theme/custom.css";
 
@@ -35,37 +35,31 @@ const signIn = createBrowserSignIn(loginPath);
 const mounted = createRoot(root);
 const queryClient = createIntelQueryClient();
 
-// The shell is painted from a function because a refused sign-in has to replace it, and that
-// refusal arrives from inside a fetch rather than from React.
-let refused = false;
-
+// ⚠️ The refusal arrives from inside a fetch rather than from React, and it used to be answered by
+// a module-level `let` plus a hand-written repaint. Both are gone (#456): the flag is a store React
+// can subscribe to, and everything that decides what is on screen lives in `AppRoot` — a component
+// a test can render. `main.tsx` is wiring again, and only wiring.
+const refusal = createRefusalStore();
 const data = createIntelDataProvider({
-  onUnauthorized: createSignInGuard(signIn, () => {
-    refused = true;
-    paint();
-  }),
+  onUnauthorized: createSignInGuard(signIn, () => refusal.refuse()),
 });
 const router = createIntelRouter({ data });
 
-function paint(): void {
-  mounted.render(
-    <StrictMode>
-      {/* The refusal screen sits INSIDE the providers too: it is text like any other, and it is the
-          one screen a reader sees when nothing else works — English-only there would be the worst
-          place for it. */}
-      <I18nProvider languages={languages}>
-        <ThemeProvider store={window.localStorage}>
-          {refused ? (
-            <SignInRefused />
-          ) : (
-            <QueryClientProvider client={queryClient}>
-              <RouterProvider router={router} />
-            </QueryClientProvider>
-          )}
-        </ThemeProvider>
-      </I18nProvider>
-    </StrictMode>,
-  );
-}
-
-paint();
+mounted.render(
+  <StrictMode>
+    {/* The refusal screen sits INSIDE the providers too: it is text like any other, and it is the
+        one screen a reader sees when nothing else works — English-only there would be the worst
+        place for it. */}
+    <I18nProvider languages={languages}>
+      <ThemeProvider store={window.localStorage}>
+        {/* ⚠️ INSIDE `I18nProvider`: the formatter needs both — the language says HOW a time is
+            written, the zone WHICH time it is (#467). */}
+        <TimeZoneProvider store={window.localStorage}>
+          <QueryClientProvider client={queryClient}>
+            <AppRoot data={data} router={router} refusal={refusal} />
+          </QueryClientProvider>
+        </TimeZoneProvider>
+      </ThemeProvider>
+    </I18nProvider>
+  </StrictMode>,
+);

package/src/node-table/node-table.tsx

@@ -1,6 +1,5 @@
 import type { Node } from "@anchrd/intel-contract/node";
-import { useMutation, useQuery } from "@tanstack/react-query";
-import { Download } from "lucide-react";
+import { useQuery } from "@tanstack/react-query";
 import { ActionSlot } from "@/app/action-slot/action-slot.tsx";
 import { useI18n } from "@/i18n/i18n-context.tsx";
 import { useIntelRouterContext } from "@/router/router-context.ts";
@@ -23,35 +22,17 @@ export function NodeTablePanel({ node }: { node: Node }) {
     queryKey: ["node-table", node.id],
     queryFn: () => data.getNodeTable(node.id),
   });
-  // CSV is the export. The canonical body is already CSV, so downloading is handing over the bytes
-  // that are stored rather than rendering a second format that could drift from them.
-  const download = useMutation({
-    mutationFn: async () => {
-      const document_ = await data.getNode(node.id);
-      return new Blob([document_.content ?? ""], { type: "text/csv;charset=utf-8" });
-    },
-    onSuccess: (blob) => {
-      const url = URL.createObjectURL(blob);
-      const anchor = document.createElement("a");
-      anchor.href = url;
-      anchor.download = node.title.toLowerCase().endsWith(".csv")
-        ? node.title
-        : `${node.title}.csv`;
-      document.body.append(anchor);
-      anchor.click();
-      anchor.remove();
-      setTimeout(() => URL.revokeObjectURL(url), 0);
-    },
-  });
-
   return (
     <div className="flex min-h-0 flex-1 flex-col">
-      {/* ⚠️ Both of these used to be a second bar of their own, directly under the title line (#54):
-          two headers stacked, and the table starting a whole row lower for it. A table is one
-          node kind among four, not a screen with its own chrome — so the count goes beside the
-          title as a quiet word and the export joins the buttons in the title line. They are rendered
-          from here rather than from the screen because this is where the query lives; the screen
-          would otherwise have to load a table it does not show. */}
+      {/* ⚠️ This used to be a second bar of its own, directly under the title line (#54): two
+          headers stacked, and the table starting a whole row lower for it. A table is one node kind
+          among four, not a screen with its own chrome — so the count goes beside the title as a
+          quiet word. It is rendered from here rather than from the screen because this is where the
+          query lives; the screen would otherwise have to load a table it does not show.
+
+          ⚠️ The CSV export used to stand here too, as a button WITH TEXT beside two icon buttons.
+          Since #454 it is an entry in the title line's three-dot menu (`resource-menu.tsx`) — where
+          the bundle export sits as well, because both do the same: hand out the whole thing. */}
       <ActionSlot name="title-meta">
         {table.data
           ? i18n.t("node.table.summary", {
@@ -60,27 +41,6 @@ export function NodeTablePanel({ node }: { node: Node }) {
             })
           : ""}
       </ActionSlot>
-      <ActionSlot name="title-actions">
-        <button
-          type="button"
-          onClick={() => download.mutate()}
-          // Unchanged: nothing to export before the header is known, and a button that answers with
-          // an empty file is worse than one that says it is not ready.
-          disabled={download.isPending || !table.data?.columns.length}
-          className="inline-flex h-8 items-center gap-2 rounded-md border px-3 text-sm outline-none hover:bg-muted focus-visible:ring-2 focus-visible:ring-ring disabled:opacity-50"
-        >
-          <Download aria-hidden="true" className="size-4" />
-          {i18n.t("node.table.download")}
-        </button>
-      </ActionSlot>
-      {/* ⚠️ The refusal stays down here, in the body, where a sentence has room to be read. The
-          title line has none — a failed export that only greyed a button in a header would be a
-          failure nobody is told about. */}
-      {download.isError ? (
-        <p role="alert" className="mx-6 mt-4 text-sm text-destructive">
-          {i18n.t("node.downloadFailed")}
-        </p>
-      ) : null}
       {table.isPending ? (
         <p className="p-6 text-sm text-muted-foreground">{i18n.t("common.loading")}</p>
       ) : table.isError ? (

package/src/nodes/nodes.tsx

@@ -3,7 +3,6 @@ import { useMutation, useQuery, useQueryClient } from "@tanstack/react-query";
 import { useNavigate, useRouterState } from "@tanstack/react-router";
 import { Download, History, Paperclip } from "lucide-react";
 import { lazy, Suspense, useState } from "react";
-import { ActionSlot } from "@/app/action-slot/action-slot.tsx";
 import { ViewToggle } from "@/app/view-toggle/view-toggle.tsx";
 import { Tooltip, TooltipContent, TooltipProvider, TooltipTrigger } from "@/components/ui/tooltip";
 import { refusalOf } from "@/data/request-refusal/request-refusal.ts";
@@ -13,6 +12,7 @@ import { useI18n } from "@/i18n/i18n-context.tsx";
 import { NodeTablePanel } from "@/node-table/node-table.tsx";
 import { useIntelRouterContext } from "@/router/router-context.ts";
 import { graphViewFrom, selectedFrom } from "@/router/selection-search.ts";
+import { useDateTime } from "@/time/time-context.tsx";
 import { TitleRow } from "@/title-row/title-row.tsx";
 
 const NodeEditor = lazy(async () => ({
@@ -54,21 +54,24 @@ export function Nodes() {
   });
   return (
     <div className="flex h-full min-h-0 flex-col">
-      {/* The screen owns the one action that belongs to the tree as a whole. Creating things is
-          the tree's, in the sidebar, at the place a new thing is meant to go.
-
-          ⚠️ Mounted only where there is a graph to switch to. A switch on a document would point at
-          nothing, and the header is where that gets noticed first (#19). */}
-      {graphable ? (
-        <ActionSlot>
-          <ViewToggle />
-        </ActionSlot>
-      ) : null}
       <section className="relative flex min-h-0 min-w-0 flex-1 flex-col bg-card">
         {/* ⚠️ Only the root draws its graph on its own. A folder's graph hangs *under* the folder's
             title line rather than in place of it (#58): the line is the one place its menu lives,
             and a folder that could only be renamed while the graph happened to be switched off
             would be a folder one cannot rename. */}
+        {/* ⚠️ #454 took the toggle out of the GLOBAL header — there it applied to the whole
+            application although it is a view onto the selected item. For an item it now stands in
+            that item's title line.
+
+            ⚠️ The root has no title line, and that is exactly why it gets a row of its own here.
+            Without it the graph of the WHOLE tree would have been unreachable after the move — the
+            toggle was its only way in and out. Moving a control must not abolish a view; that would
+            be a decision the ticket did not contain. */}
+        {selectedId === null ? (
+          <div className="flex shrink-0 items-center justify-end gap-2 border-b px-6 py-2">
+            <ViewToggle />
+          </div>
+        ) : null}
         {selectedId === null && selection.graph ? (
           <GraphPane
             query={relations}
@@ -122,14 +125,16 @@ export function Nodes() {
                 ⚠️ The order of the right-hand group is `TitleRow`'s (#53), not this screen's: the
                 version button is handed over as a child and lands before the menu whatever else
                 shows up later.
-                ⚠️ The view switch is deliberately NOT here: it changes how the current area is
-                shown, not the document, and it stays beside the breadcrumb where the area is
-                named. */}
+                ⚠️ #454: the toggle now stands HERE. It used to stand in the global header, beside
+                the search — where what applies everywhere stands. But a graph view does not apply
+                everywhere, it is a view onto THIS item. It is only drawn where there is a graph: on
+                a document it pointed at nothing. */}
             <TitleRow
               title={selected.title}
               description={selected.description}
               target={{ type: "node", node: selected }}
             >
+              {graphable && <ViewToggle />}
               {selected.kind !== "folder" && (
                 <TooltipProvider delayDuration={300}>
                   <Tooltip>
@@ -234,6 +239,7 @@ function AttachmentPanel({ node }: { node: Node }) {
 function VersionHistory({ nodeId, close }: { nodeId: string; close(): void }) {
   const { data } = useIntelRouterContext();
   const i18n = useI18n();
+  const dateTime = useDateTime();
   const versions = useQuery({
     queryKey: ["node-versions", nodeId],
     queryFn: () => data.listNodeVersions(nodeId),
@@ -269,10 +275,7 @@ function VersionHistory({ nodeId, close }: { nodeId: string; close(): void }) {
               {i18n.t("node.version", { sequence: version.sequence })}
             </span>
             <time className="mt-1 block text-xs text-muted-foreground" dateTime={version.createdAt}>
-              {new Intl.DateTimeFormat(i18n.locale, {
-                dateStyle: "medium",
-                timeStyle: "short",
-              }).format(new Date(version.createdAt))}
+              {dateTime.at(version.createdAt)}
             </time>
           </li>
         ))}