@kelpie/ui 0.4.0 → 0.4.1

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kelpie/ui",
-  "version": "0.4.0",
+  "version": "0.4.1",
   "description": "React UI for Kelpie: components, pages, API client, and the extension registry an assembly composes modules through.",
   "keywords": [
     "kelpie",
@@ -48,7 +48,7 @@
     "@dnd-kit/core": "^6.3.1",
     "@dnd-kit/sortable": "^10.0.0",
     "@dnd-kit/utilities": "^3.2.2",
-    "@kelpie/schemas": "^0.4.0",
+    "@kelpie/schemas": "^0.4.1",
     "@tanstack/react-query": "^5.101.4",
     "react-markdown": "^10.1.0",
     "react-router": "^8.3.0",

package/src/api/resources/account.ts

@@ -18,11 +18,13 @@ import type {
 import { useMutation, useQuery, useQueryClient } from '@tanstack/react-query'
 import { useEffect, useState } from 'react'
 
+import { resolveTimezone } from '../../lib/dates.ts'
 import { applyTheme, getStoredTheme, setStoredTheme, watchSystemTheme } from '../../lib/theme.ts'
 import { useApiClient } from '../context.ts'
 import { toError } from '../errors.ts'
 import type { MutationResult } from '../resource.ts'
 import { asMutationResult } from './mutation.ts'
+import { useWorkspace } from './workspace.ts'
 
 /**
  * The signed-in person, as the `/account/*` pages read and write them.
@@ -218,3 +220,14 @@ export function useTheme(): ThemeControl {
 
   return { theme, setTheme }
 }
+
+/**
+ * The zone dates render in: the account's own choice, falling back to the
+ * workspace's while either query is still loading.
+ */
+export function useTimezone(): string {
+  const { preferences } = useAccountPreferences()
+  const { workspace } = useWorkspace()
+
+  return resolveTimezone(preferences?.timezone, workspace?.timezone)
+}

package/src/api/resources/apiKeys.ts

@@ -0,0 +1,60 @@
+import { apiKeySchema, createApiKeyBody, createdApiKeySchema } from '@kelpie/schemas'
+import type { ApiKey, ApiKeyKind, CreateApiKeyInput, CreatedApiKey } from '@kelpie/schemas'
+import { useMutation, useQueryClient } from '@tanstack/react-query'
+
+import { useApiClient } from '../context.ts'
+import { createReadOnlyResourceHooks } from '../resource.ts'
+import type { MutationResult, RecordListResult } from '../resource.ts'
+import { asMutationResult } from './mutation.ts'
+
+/**
+ * `/v1/api-keys`: workspace keys and personal keys, one endpoint told apart by
+ * `kind`. `kind` is required on every list request — the server answers `422`
+ * without it — so each page asks for exactly the one kind it manages.
+ */
+
+const { useList } = createReadOnlyResourceHooks<ApiKey>({
+  name: 'apiKeys',
+  path: '/api-keys',
+  decode: apiKeySchema.parse,
+})
+
+export function useApiKeys(kind: ApiKeyKind): RecordListResult<ApiKey> {
+  return useList({ kind })
+}
+
+/**
+ * Mints a key.
+ *
+ * Written out rather than taken from `createResourceHooks`, because the `201`
+ * is the only response that ever carries the secret and the shared hook decodes
+ * with the schema that has no such field. The secret has to survive the decode:
+ * it cannot be fetched again, so a page that dropped it would have created a key
+ * nobody can use.
+ */
+export function useCreateApiKey(): MutationResult<CreateApiKeyInput, CreatedApiKey> {
+  const client = useApiClient()
+  const queryClient = useQueryClient()
+  const mutation = useMutation({
+    mutationFn: (input: CreateApiKeyInput) =>
+      client.post('/api-keys', createApiKeyBody(input), createdApiKeySchema.parse),
+    onSettled: () => {
+      void queryClient.invalidateQueries({ queryKey: ['apiKeys', 'list'] })
+    },
+  })
+
+  return asMutationResult(mutation)
+}
+
+export function useRevokeApiKey(): MutationResult<string, void> {
+  const client = useApiClient()
+  const queryClient = useQueryClient()
+  const mutation = useMutation({
+    mutationFn: (id: string) => client.delete(`/api-keys/${id}`),
+    onSettled: () => {
+      void queryClient.invalidateQueries({ queryKey: ['apiKeys', 'list'] })
+    },
+  })
+
+  return asMutationResult(mutation)
+}

package/src/app/KelpieApp.tsx

@@ -27,9 +27,11 @@ import { RaiseDetail } from '../pages/RaiseDetail.tsx'
 import { RaiseStageSettingsPage } from '../pages/RaiseStageSettingsPage.tsx'
 import { RoleDetail } from '../pages/RoleDetail.tsx'
 import { AccountLayout } from '../pages/account/AccountLayout.tsx'
+import { PersonalApiKeysPage } from '../pages/account/PersonalApiKeysPage.tsx'
 import { PreferencesPage } from '../pages/account/PreferencesPage.tsx'
 import { ProfilePage } from '../pages/account/ProfilePage.tsx'
 import { SecurityPage } from '../pages/account/SecurityPage.tsx'
+import { ApiKeysPage } from '../pages/admin/ApiKeysPage.tsx'
 import { DataPage } from '../pages/admin/DataPage.tsx'
 import { McpPage } from '../pages/admin/McpPage.tsx'
 import { ModulesPage } from '../pages/admin/ModulesPage.tsx'
@@ -155,6 +157,7 @@ function AppRoutes(): React.JSX.Element {
           <Route path="admin/workspace" element={<WorkspaceSettingsPage />} />
           <Route path="admin/team" element={<TeamPage />} />
           <Route path="admin/data" element={<DataPage />} />
+          <Route path="admin/api-keys" element={<ApiKeysPage />} />
           <Route path="admin/mcp" element={<McpPage />} />
           <Route path="admin/webhooks" element={<WebhooksPage />} />
           <Route path="admin/modules" element={<ModulesPage />} />
@@ -164,6 +167,7 @@ function AppRoutes(): React.JSX.Element {
             <Route path="profile" element={<ProfilePage />} />
             <Route path="security" element={<SecurityPage />} />
             <Route path="preferences" element={<PreferencesPage />} />
+            <Route path="api-keys" element={<PersonalApiKeysPage />} />
             {accountRoutes.map((route) => (
               <Route
                 key={route.path}

package/src/components/ActivitiesPanel.tsx

@@ -1,5 +1,6 @@
 import type { Activity, ActivityKind, RecordTargetType } from '@kelpie/schemas'
 
+import { useTimezone } from '../api/resources/account.ts'
 import { useActivities } from '../api/resources/activities.ts'
 import { useMembers } from '../api/resources/members.ts'
 import { formatRelativeTime, monthLabel } from '../lib/dates.ts'
@@ -55,11 +56,15 @@ interface MonthGroup {
 }
 
 /** Consecutive runs, not a map: the list is already ordered, so a month never recurs. */
-function groupByMonth(activities: readonly Activity[], now: Date): readonly MonthGroup[] {
+function groupByMonth(
+  activities: readonly Activity[],
+  timezone: string,
+  now: Date,
+): readonly MonthGroup[] {
   const groups: { label: string; items: Activity[] }[] = []
 
   for (const activity of activities) {
-    const label = monthLabel(activity.createdAt, now)
+    const label = monthLabel(activity.createdAt, timezone, now)
     const last = groups.at(-1)
 
     if (last?.label === label) {
@@ -78,7 +83,8 @@ export function ActivitiesPanel({
 }: ActivitiesPanelProps): React.JSX.Element {
   const activities = useActivities({ targetType, targetId })
   const members = useMembers()
-  const groups = groupByMonth(activities.records, new Date())
+  const timezone = useTimezone()
+  const groups = groupByMonth(activities.records, timezone, new Date())
 
   return (
     <section>
@@ -104,6 +110,7 @@ export function ActivitiesPanel({
                   contextType={targetType}
                   contextId={targetId}
                   isLast={index === group.items.length - 1}
+                  timezone={timezone}
                 />
               ))}
             </ol>
@@ -137,6 +144,7 @@ export function LatestActivity({
 }: ActivitiesPanelProps): React.JSX.Element {
   const activities = useActivities({ targetType, targetId })
   const members = useMembers()
+  const timezone = useTimezone()
   const latest = activities.records[0]
 
   return (
@@ -158,6 +166,7 @@ export function LatestActivity({
             contextType={targetType}
             contextId={targetId}
             isLast
+            timezone={timezone}
           />
         </ol>
       )}
@@ -183,12 +192,14 @@ function ActivityEvent({
   contextType,
   contextId,
   isLast,
+  timezone,
 }: {
   readonly activity: Activity
   readonly actorName: string
   readonly contextType: RecordTargetType
   readonly contextId: string
   readonly isLast: boolean
+  readonly timezone: string
 }): React.JSX.Element {
   const isRolledUp = activity.targetType !== contextType || activity.targetId !== contextId
 
@@ -218,7 +229,7 @@ function ActivityEvent({
             dateTime={activity.createdAt.toISOString()}
             className="shrink-0 text-[11px] text-ink-faint"
           >
-            {formatRelativeTime(activity.createdAt)}
+            {formatRelativeTime(activity.createdAt, timezone)}
           </time>
         </div>
         {isRolledUp && (

package/src/components/ApiKeysPanel.tsx

@@ -0,0 +1,307 @@
+import type { ApiKey, ApiKeyKind, CreatedApiKey } from '@kelpie/schemas'
+import { useState } from 'react'
+import type { FormEvent } from 'react'
+
+import { useTimezone } from '../api/resources/account.ts'
+import { useApiKeys, useCreateApiKey, useRevokeApiKey } from '../api/resources/apiKeys.ts'
+import { formatDate } from '../lib/dates.ts'
+import { CopyButton } from './CopyButton.tsx'
+import { ErrorPanel, LoadingPanel } from './QueryState.tsx'
+
+/**
+ * The create/list/revoke flow shared by workspace keys (`/admin/api-keys`) and
+ * personal keys (`/account/api-keys`).
+ *
+ * `kind` and the three strings below are the only difference between the two
+ * pages, the same way `KanbanBoard` takes a `kind` for Deals versus
+ * Opportunities. Who may reach this component at all — the admin gate on the
+ * workspace page, none on the personal page — is the caller's decision; the API
+ * enforces its own half regardless.
+ */
+
+export interface ApiKeysPanelProps {
+  readonly kind: ApiKeyKind
+  /** Shown in the create form's name field, e.g. "CI pipeline" or "Laptop Claude". */
+  readonly namePlaceholder: string
+  readonly createTitle: string
+  readonly emptyMessage: string
+}
+
+export function ApiKeysPanel({
+  kind,
+  namePlaceholder,
+  createTitle,
+  emptyMessage,
+}: ApiKeysPanelProps): React.JSX.Element {
+  const { records, isLoading, error } = useApiKeys(kind)
+  const revokeApiKey = useRevokeApiKey()
+  const [showModal, setShowModal] = useState(false)
+  const [minted, setMinted] = useState<CreatedApiKey | null>(null)
+
+  return (
+    <div className="space-y-4">
+      <div className="flex justify-end">
+        <button
+          type="button"
+          onClick={() => {
+            setShowModal(true)
+          }}
+          className="shrink-0 rounded-md bg-accent px-3.5 py-2 text-[12px] font-semibold text-accent-fg transition hover:bg-accent-hover"
+        >
+          Create key
+        </button>
+      </div>
+
+      {minted !== null && (
+        <SecretOnce
+          apiKey={minted}
+          onDismiss={() => {
+            setMinted(null)
+          }}
+        />
+      )}
+
+      {error !== null && <ErrorPanel error={error} />}
+
+      {isLoading ? (
+        <LoadingPanel label="Loading API keys…" />
+      ) : (
+        <ApiKeyTable
+          keys={records}
+          emptyMessage={emptyMessage}
+          onRevoke={(id) => {
+            revokeApiKey.run(id)
+          }}
+          isRevoking={revokeApiKey.isPending}
+        />
+      )}
+
+      {revokeApiKey.error !== null && <ErrorPanel error={revokeApiKey.error} />}
+
+      {showModal && (
+        <CreateKeyModal
+          kind={kind}
+          title={createTitle}
+          namePlaceholder={namePlaceholder}
+          onCreated={(key) => {
+            setShowModal(false)
+            setMinted(key)
+          }}
+          onCancel={() => {
+            setShowModal(false)
+          }}
+        />
+      )}
+    </div>
+  )
+}
+
+function CreateKeyModal({
+  kind,
+  title,
+  namePlaceholder,
+  onCreated,
+  onCancel,
+}: {
+  readonly kind: ApiKeyKind
+  readonly title: string
+  readonly namePlaceholder: string
+  readonly onCreated: (key: CreatedApiKey) => void
+  readonly onCancel: () => void
+}): React.JSX.Element {
+  const createApiKey = useCreateApiKey()
+  const [name, setName] = useState('')
+
+  function submit(event: FormEvent): void {
+    event.preventDefault()
+    createApiKey
+      .runAsync({ name: name.trim(), kind })
+      .then(onCreated)
+      .catch(() => undefined)
+  }
+
+  return (
+    <div className="fixed inset-0 z-50 flex items-center justify-center bg-ink/40 p-4">
+      <div className="animate-slide-in w-full max-w-md rounded-md border border-border bg-surface-raised p-5">
+        <form onSubmit={submit}>
+          <h2 className="text-[15px] font-semibold text-ink">{title}</h2>
+          <label className="mt-4 block">
+            <span className="mb-1.5 block text-[12px] font-medium">Name</span>
+            <input
+              value={name}
+              onChange={(event) => {
+                setName(event.target.value)
+              }}
+              placeholder={namePlaceholder}
+              required
+              autoFocus
+              className="w-full rounded-md border border-border bg-surface px-3 py-2 text-[13px] outline-none focus:border-accent focus:ring-2 focus:ring-accent/20"
+            />
+          </label>
+
+          {createApiKey.error !== null && (
+            <div className="mt-3">
+              <ErrorPanel error={createApiKey.error} />
+            </div>
+          )}
+
+          <div className="mt-4 flex justify-end gap-2">
+            <button
+              type="button"
+              onClick={onCancel}
+              className="rounded-md px-3 py-2 text-[12px] font-medium text-ink-muted hover:text-ink"
+            >
+              Cancel
+            </button>
+            <button
+              type="submit"
+              disabled={createApiKey.isPending}
+              className="rounded-md bg-accent px-3.5 py-2 text-[12px] font-semibold text-accent-fg hover:bg-accent-hover disabled:opacity-50"
+            >
+              {createApiKey.isPending ? 'Creating…' : 'Create'}
+            </button>
+          </div>
+        </form>
+      </div>
+    </div>
+  )
+}
+
+/**
+ * The secret, shown once.
+ *
+ * Nothing can retrieve it afterwards, so this panel says so plainly instead of
+ * leaving a reader to discover it by coming back for the value later.
+ */
+function SecretOnce({
+  apiKey,
+  onDismiss,
+}: {
+  readonly apiKey: CreatedApiKey
+  readonly onDismiss: () => void
+}): React.JSX.Element {
+  return (
+    <div className="rounded-md border border-accent/40 bg-accent-soft px-4 py-3">
+      <div className="flex items-start justify-between gap-3">
+        <div className="min-w-0">
+          <p className="text-[13px] font-medium text-ink">Copy this key now. It is not shown again.</p>
+          <code className="mt-2 block break-all rounded border border-border bg-surface px-3 py-2 font-mono text-[12px] text-ink">
+            {apiKey.secret}
+          </code>
+        </div>
+        <CopyButton value={apiKey.secret} label="Copy the API key" />
+      </div>
+      <button
+        type="button"
+        onClick={onDismiss}
+        className="mt-2 text-[12px] font-medium text-accent hover:underline"
+      >
+        I have copied it
+      </button>
+    </div>
+  )
+}
+
+function ApiKeyTable({
+  keys,
+  emptyMessage,
+  onRevoke,
+  isRevoking,
+}: {
+  readonly keys: readonly ApiKey[]
+  readonly emptyMessage: string
+  readonly onRevoke: (id: string) => void
+  readonly isRevoking: boolean
+}): React.JSX.Element {
+  if (keys.length === 0) {
+    return (
+      <p className="rounded-md border border-border px-4 py-10 text-center text-[13px] text-ink-faint">
+        {emptyMessage}
+      </p>
+    )
+  }
+
+  return (
+    <div className="overflow-hidden rounded-md border border-border">
+      <table className="w-full text-left text-[13px]">
+        <thead>
+          <tr className="border-b border-border bg-surface text-[11px] font-semibold tracking-wide text-ink-muted uppercase">
+            <th className="px-4 py-2.5">Name</th>
+            <th className="px-4 py-2.5">Prefix</th>
+            <th className="px-4 py-2.5">Created</th>
+            <th className="px-4 py-2.5">Last used</th>
+            <th className="px-4 py-2.5 text-right">Actions</th>
+          </tr>
+        </thead>
+        <tbody>
+          {keys.map((key) => (
+            <ApiKeyRow key={key.id} apiKey={key} onRevoke={onRevoke} isRevoking={isRevoking} />
+          ))}
+        </tbody>
+      </table>
+    </div>
+  )
+}
+
+/**
+ * Revoking a key takes effect at once and cannot be undone, so this asks first,
+ * the same two-step confirm `WebhooksPage` uses for removing a registration.
+ */
+function ApiKeyRow({
+  apiKey,
+  onRevoke,
+  isRevoking,
+}: {
+  readonly apiKey: ApiKey
+  readonly onRevoke: (id: string) => void
+  readonly isRevoking: boolean
+}): React.JSX.Element {
+  const [isConfirming, setIsConfirming] = useState(false)
+  const timezone = useTimezone()
+
+  return (
+    <tr className="border-b border-border last:border-0">
+      <td className="px-4 py-3 font-medium">{apiKey.name}</td>
+      <td className="px-4 py-3 font-mono text-[12px] text-ink-muted">{apiKey.displayPrefix}</td>
+      <td className="px-4 py-3 text-ink-muted">{formatDate(apiKey.createdAt, timezone)}</td>
+      <td className="px-4 py-3 text-ink-muted">
+        {apiKey.lastUsedAt === null ? 'Never' : formatDate(apiKey.lastUsedAt, timezone)}
+      </td>
+      <td className="px-4 py-3 text-right">
+        {isConfirming ? (
+          <span className="inline-flex items-center gap-3">
+            <button
+              type="button"
+              onClick={() => {
+                setIsConfirming(false)
+              }}
+              className="text-[12px] font-medium text-ink-muted hover:text-ink"
+            >
+              Cancel
+            </button>
+            <button
+              type="button"
+              disabled={isRevoking}
+              onClick={() => {
+                onRevoke(apiKey.id)
+              }}
+              className="text-[12px] font-medium text-danger hover:underline disabled:opacity-50"
+            >
+              {isRevoking ? 'Revoking…' : 'Revoke'}
+            </button>
+          </span>
+        ) : (
+          <button
+            type="button"
+            onClick={() => {
+              setIsConfirming(true)
+            }}
+            className="text-[12px] font-medium text-danger hover:underline"
+          >
+            Revoke
+          </button>
+        )}
+      </td>
+    </tr>
+  )
+}

package/src/components/DecisionsPanel.tsx

@@ -3,6 +3,7 @@ import { useState } from 'react'
 import type { FormEvent } from 'react'
 import { Link } from 'react-router'
 
+import { useTimezone } from '../api/resources/account.ts'
 import { useCreateDecision, useDecisions, useDeleteDecision } from '../api/resources/decisions.ts'
 import { useMembers } from '../api/resources/members.ts'
 import { formatDate } from '../lib/dates.ts'
@@ -208,6 +209,8 @@ function DecisionItem({
   readonly ownerName: string | undefined
   readonly onRemove: () => void
 }): React.JSX.Element {
+  const timezone = useTimezone()
+
   return (
     <li className="border-b border-border px-4 py-3 last:border-0">
       <div className="flex items-start justify-between gap-2">
@@ -224,8 +227,8 @@ function DecisionItem({
         <p className="mt-1 text-[12px] text-ink-muted">{decision.rationale}</p>
       )}
       <div className="mt-2 flex flex-wrap gap-x-3 gap-y-1 text-[11px] text-ink-faint">
-        <span>Decided {formatDate(decision.decidedAt)}</span>
-        {decision.dueAt !== null && <span>By {formatDate(decision.dueAt)}</span>}
+        <span>Decided {formatDate(decision.decidedAt, timezone)}</span>
+        {decision.dueAt !== null && <span>By {formatDate(decision.dueAt, timezone)}</span>}
         {ownerName !== undefined && <span>{ownerName}</span>}
       </div>
     </li>

package/src/components/NotesPanel.tsx

@@ -2,6 +2,7 @@ import type { Note, RecordTargetType } from '@kelpie/schemas'
 import { useState } from 'react'
 import type { FormEvent } from 'react'
 
+import { useTimezone } from '../api/resources/account.ts'
 import { useMembers } from '../api/resources/members.ts'
 import { useCreateNote, useNotes } from '../api/resources/notes.ts'
 import { formatDateTime } from '../lib/dates.ts'
@@ -149,6 +150,8 @@ function NoteItem({
   readonly note: Note
   readonly authorName: string
 }): React.JSX.Element {
+  const timezone = useTimezone()
+
   return (
     <li className="rounded-md border border-border bg-surface-raised px-3.5 py-3">
       <div className="flex items-start justify-between gap-2">
@@ -162,7 +165,7 @@ function NoteItem({
       <div className="mt-2 flex items-center gap-2 text-[11px] text-ink-faint">
         <span>{authorName}</span>
         <span>·</span>
-        <span>{formatDateTime(note.createdAt)}</span>
+        <span>{formatDateTime(note.createdAt, timezone)}</span>
       </div>
     </li>
   )

package/src/components/Shell.tsx

@@ -23,6 +23,7 @@ const CORE_ADMIN_NAV: readonly NavItem[] = [
   { id: 'workspace', label: 'Workspace', to: '/admin/workspace', order: 100 },
   { id: 'team', label: 'Team', to: '/admin/team', order: 200 },
   { id: 'data', label: 'Data', to: '/admin/data', order: 300 },
+  { id: 'api-keys', label: 'API keys', to: '/admin/api-keys', order: 350 },
   { id: 'webhooks', label: 'Webhooks', to: '/admin/webhooks', order: 400 },
   { id: 'mcp', label: 'MCP', to: '/admin/mcp', order: 500 },
   { id: 'modules', label: 'Modules', to: '/admin/modules', order: 600 },