@kelpie/ui 0.4.0 → 0.5.0

package/src/pages/admin/ApiKeysPage.tsx

@@ -0,0 +1,43 @@
+import { useSession } from '../../api/resources/session.ts'
+import { ApiKeysPanel } from '../../components/ApiKeysPanel.tsx'
+import { PageHeader } from '../../components/PageHeader.tsx'
+
+/**
+ * Workspace keys, for shared agents and CI.
+ *
+ * `GET /v1/api-keys?kind=workspace` needs the admin role; the server answers
+ * `403` to anyone else. This page shows that plainly instead of rendering an
+ * empty table, the same shape `WebhooksPage` uses for the same reason.
+ */
+
+export function ApiKeysPage(): React.JSX.Element {
+  const { session } = useSession()
+  const isAdmin = session?.role === 'owner' || session?.role === 'admin'
+
+  return (
+    <div className="animate-slide-in mx-auto max-w-4xl space-y-4">
+      <PageHeader
+        title="API keys"
+        description="Workspace keys for shared agents and CI. Personal keys live under Account → API keys."
+      />
+      {isAdmin ? (
+        <ApiKeysPanel
+          kind="workspace"
+          namePlaceholder="CI pipeline"
+          createTitle="Create API key"
+          emptyMessage="No API keys yet."
+        />
+      ) : (
+        <MemberNotice />
+      )}
+    </div>
+  )
+}
+
+function MemberNotice(): React.JSX.Element {
+  return (
+    <p className="rounded-md border border-border px-4 py-3 text-[13px] text-ink-muted">
+      Workspace keys are managed by workspace admins.
+    </p>
+  )
+}

package/src/pages/admin/McpPage.tsx

@@ -3,6 +3,7 @@ import type { AgentRun, McpTool } from '@kelpie/schemas'
 import { useMemo, useState } from 'react'
 import { Link } from 'react-router'
 
+import { useTimezone } from '../../api/resources/account.ts'
 import {
   useAgentRuns,
   useAgents,
@@ -107,8 +108,8 @@ export function McpPage(): React.JSX.Element {
         </div>
         <p className="mt-1 text-[12px] text-ink-muted">
           Paste into your MCP client config, and replace the bearer token with a workspace key from{' '}
-          <Link to="/admin/workspace" className="text-accent hover:underline">
-            workspace settings
+          <Link to="/admin/api-keys" className="text-accent hover:underline">
+            API keys
           </Link>
           .
         </p>
@@ -133,6 +134,7 @@ function RegisteredAgents(): React.JSX.Element {
   const { records, isLoading, error } = useAgents()
   const createAgent = useCreateAgent()
   const deleteAgent = useDeleteAgent()
+  const timezone = useTimezone()
   const [adding, setAdding] = useState(false)
   const [name, setName] = useState('')
   const [endpoint, setEndpoint] = useState('')
@@ -253,7 +255,7 @@ function RegisteredAgents(): React.JSX.Element {
                 <span>
                   {agent.lastRunAt === null
                     ? 'Never run'
-                    : `Last run ${formatRelativeTime(agent.lastRunAt)}`}
+                    : `Last run ${formatRelativeTime(agent.lastRunAt, timezone)}`}
                 </span>
                 <button
                   type="button"
@@ -283,6 +285,7 @@ function RecentRuns(): React.JSX.Element {
   const { records: runs, isLoading, error } = useAgentRuns()
   const catalog = useAllAgentTasks()
   const agents = useAgents()
+  const timezone = useTimezone()
 
   const taskLabels = useMemo(
     () => new Map(catalog.records.map((task) => [task.id, task.label])),
@@ -333,7 +336,7 @@ function RecentRuns(): React.JSX.Element {
                 <span className={run.status === 'failed' ? 'font-medium text-danger' : 'text-ink-muted'}>
                   {AGENT_RUN_STATUS_LABELS[run.status]}
                 </span>
-                <span className="text-ink-faint">{formatRelativeTime(run.updatedAt)}</span>
+                <span className="text-ink-faint">{formatRelativeTime(run.updatedAt, timezone)}</span>
               </div>
             </li>
           ))}

package/src/pages/admin/WebhookDeliveries.tsx

@@ -1,6 +1,7 @@
 import type { WebhookDelivery, WebhookDeliveryStatus } from '@kelpie/schemas'
 import { useState } from 'react'
 
+import { useTimezone } from '../../api/resources/account.ts'
 import { useWebhookDeliveries } from '../../api/resources/webhooks.ts'
 import { Chip } from '../../components/Chip.tsx'
 import type { ChipTone } from '../../components/Chip.tsx'
@@ -37,6 +38,7 @@ const STATUS_TONES: Readonly<Record<WebhookDeliveryStatus, ChipTone>> = {
 export function WebhookDeliveries({ webhookId }: { readonly webhookId: string }): React.JSX.Element {
   const [status, setStatus] = useState<StatusFilter>('all')
   const [openPayloadId, setOpenPayloadId] = useState<string | null>(null)
+  const timezone = useTimezone()
   const deliveries = useWebhookDeliveries(webhookId, {
     status: status === 'all' ? undefined : status,
   })
@@ -68,7 +70,7 @@ export function WebhookDeliveries({ webhookId }: { readonly webhookId: string })
       className: 'w-32',
       render: (delivery) => (
         <span className="font-mono text-[12px] text-ink-muted">
-          {formatDateTime(delivery.createdAt)}
+          {formatDateTime(delivery.createdAt, timezone)}
         </span>
       ),
     },
@@ -80,7 +82,7 @@ export function WebhookDeliveries({ webhookId }: { readonly webhookId: string })
       // reader is looking for. An em dash says "never" without claiming a time.
       render: (delivery) => (
         <span className="font-mono text-[12px] text-ink-muted">
-          {delivery.deliveredAt === null ? '—' : formatDateTime(delivery.deliveredAt)}
+          {delivery.deliveredAt === null ? '—' : formatDateTime(delivery.deliveredAt, timezone)}
         </span>
       ),
     },

package/src/pages/admin/WebhooksPage.tsx

@@ -7,6 +7,7 @@ import type { CreatedWebhook, Webhook, WebhookEvent, WebhookStatus } from '@kelp
 import { useState } from 'react'
 import type { FormEvent } from 'react'
 
+import { useTimezone } from '../../api/resources/account.ts'
 import { useSession } from '../../api/resources/session.ts'
 import {
   useCreateWebhook,
@@ -250,6 +251,7 @@ function WebhookRow({
   const updateWebhook = useUpdateWebhook()
   const deleteWebhook = useDeleteWebhook()
   const rotateSecret = useRotateWebhookSecret()
+  const timezone = useTimezone()
   const [isConfirmingRemoval, setIsConfirmingRemoval] = useState(false)
   const [isShowingDeliveries, setIsShowingDeliveries] = useState(false)
   const [isRotating, setIsRotating] = useState(false)
@@ -319,7 +321,7 @@ function WebhookRow({
 
       <div className="mt-3 flex flex-wrap items-center gap-4 text-[11px] text-ink-faint">
         <span className="font-mono">Secret {webhook.secretPrefix}</span>
-        <span>Last delivery: {describeLastDelivery(webhook)}</span>
+        <span>Last delivery: {describeLastDelivery(webhook, timezone)}</span>
         <button
           type="button"
           aria-expanded={isShowingDeliveries}
@@ -434,10 +436,10 @@ function RotatePanel({
 }
 
 /** Both fields are null together until the first delivery settles. */
-function describeLastDelivery(webhook: Webhook): string {
+function describeLastDelivery(webhook: Webhook, timezone: string): string {
   if (webhook.lastDeliveryAt === null || webhook.lastDeliveryStatus === null) {
     return 'Never'
   }
 
-  return `${formatDateTime(webhook.lastDeliveryAt)} (${webhook.lastDeliveryStatus})`
+  return `${formatDateTime(webhook.lastDeliveryAt, timezone)} (${webhook.lastDeliveryStatus})`
 }

package/src/pages/auth/ForgotPasswordPage.tsx

@@ -2,7 +2,7 @@ import { useState } from 'react'
 import type { FormEvent } from 'react'
 import { Link } from 'react-router'
 
-import { resetUrlTemplate, useRequestPasswordReset } from '../../api/resources/session.ts'
+import { useRequestPasswordReset } from '../../api/resources/session.ts'
 import { ErrorPanel } from '../../components/QueryState.tsx'
 import { SubmitButton, TextField } from './AuthForm.tsx'
 import { AuthLayout } from './AuthLayout.tsx'
@@ -29,7 +29,7 @@ export function ForgotPasswordPage(): React.JSX.Element {
     const address = email.trim()
 
     request
-      .runAsync({ email: address, resetUrlTemplate: resetUrlTemplate(window.location.origin) })
+      .runAsync({ email: address })
       .then(() => {
         setSentTo(address)
       })

package/src/pages/auth/SignUpPage.tsx

@@ -11,9 +11,11 @@ import { AuthLayout } from './AuthLayout.tsx'
 /**
  * Creating an account, against `POST /v1/auth/signup`.
  *
- * Signup makes the user and nothing else, per `onboarding.md`, so success lands
- * on the first onboarding step rather than in the app. The response sets the
- * session cookie, which is why the next page can already write.
+ * Signup makes the user and nothing else, per `onboarding.md`, so success
+ * lands on the email-verification screen rather than in the app or the first
+ * onboarding step: the account cannot create a workspace until it verifies.
+ * The response sets the session cookie, which is why that next page can
+ * already act as the signed-in account.
  *
  * The mockup collected this into `sessionStorage` and committed the lot at the
  * end of the wizard. Here each step commits as it is finished: a draft account
@@ -41,15 +43,19 @@ export function SignUpPage(): React.JSX.Element {
     setLocalError(null)
 
     signUp
-      .runAsync({ name: name.trim(), email: email.trim(), password })
-      .then(() => navigate('/onboarding/workspace', { replace: true }))
+      .runAsync({
+        name: name.trim(),
+        email: email.trim(),
+        password,
+      })
+      .then(() => navigate('/verify-email/pending', { replace: true }))
       .catch(() => undefined)
   }
 
   return (
     <AuthLayout
       title="Create account"
-      description="Next you will create a workspace for your company."
+      description="Next you will verify your email, then create a workspace for your company."
       footer={
         <span className="text-ink-muted">
           Already have an account?{' '}

package/src/pages/auth/VerifyEmailConfirmPage.tsx

@@ -0,0 +1,81 @@
+import { useEffect, useRef, useState } from 'react'
+import { Navigate, useSearchParams } from 'react-router'
+
+import { useConfirmEmailVerification, useSession } from '../../api/resources/session.ts'
+import { ErrorPanel, LoadingPanel } from '../../components/QueryState.tsx'
+import { AuthLayout } from './AuthLayout.tsx'
+
+/**
+ * Where a verification email lands: `/verify-email?token=…`.
+ *
+ * Spent automatically on load, unlike accepting an invitation: confirming
+ * only flips whether the account is verified. There is no workspace
+ * membership or other side effect a confirmation button would be guarding.
+ */
+export function VerifyEmailConfirmPage(): React.JSX.Element {
+  const [searchParameters] = useSearchParams()
+  const token = searchParameters.get('token') ?? ''
+  const confirm = useConfirmEmailVerification()
+  // `confirm` is a fresh object every render, so the effect below reads it
+  // through a ref rather than depending on it: depending on it would spend
+  // the token again on every render instead of once per token.
+  const confirmRef = useRef(confirm)
+  confirmRef.current = confirm
+  const { isLoading, isSignedOut, needsWorkspace } = useSession()
+  const [succeeded, setSucceeded] = useState(false)
+
+  useEffect(() => {
+    if (token.length === 0) {
+      return
+    }
+
+    // Guards a state update after the token was already spent by an earlier
+    // mount of this effect, not a retry: the request itself only ever fires
+    // once per token, since `token` is the only dependency.
+    let active = true
+
+    confirmRef.current
+      .runAsync({ token })
+      .then(() => {
+        if (active) {
+          setSucceeded(true)
+        }
+      })
+      .catch(() => undefined)
+
+    return () => {
+      active = false
+    }
+  }, [token])
+
+  if (token.length === 0) {
+    return (
+      <AuthLayout title="This link is incomplete">
+        <p className="mt-4 text-[13px] text-ink-muted">It carries no verification token.</p>
+      </AuthLayout>
+    )
+  }
+
+  if (confirm.error !== null) {
+    return (
+      <AuthLayout title="This link is invalid or has expired">
+        <div className="mt-4">
+          <ErrorPanel error={confirm.error} />
+        </div>
+      </AuthLayout>
+    )
+  }
+
+  if (!succeeded || isLoading) {
+    return <LoadingPanel />
+  }
+
+  // Confirmed. A signed-in caller moves on; `SessionGate` and the onboarding
+  // routes take it from there. A signed-out one goes to sign in.
+  return (
+    <Navigate
+      to={isSignedOut ? '/login' : needsWorkspace ? '/onboarding/workspace' : '/dashboard'}
+      replace
+    />
+  )
+}

package/src/pages/auth/VerifyEmailPendingPage.tsx

@@ -0,0 +1,65 @@
+import { useState } from 'react'
+import { Navigate } from 'react-router'
+
+import { useLogOut, useRequestEmailVerification, useSession } from '../../api/resources/session.ts'
+import { ErrorPanel } from '../../components/QueryState.tsx'
+import { AuthLayout } from './AuthLayout.tsx'
+
+/**
+ * Where `SessionGate` sends a signed-in account with no workspace and an
+ * unverified email, and where `SignUpPage` navigates straight after signup.
+ *
+ * There is nothing to submit here: the account already exists, and the first
+ * verification link already went out with `POST /v1/auth/signup`. The only
+ * actions from this screen are asking for a fresh link and signing out.
+ */
+export function VerifyEmailPendingPage(): React.JSX.Element {
+  const { isSignedOut } = useSession()
+  const requestVerification = useRequestEmailVerification()
+  const logOut = useLogOut()
+  const [resent, setResent] = useState(false)
+
+  if (isSignedOut) {
+    return <Navigate to="/login" replace />
+  }
+
+  function resend(): void {
+    requestVerification
+      .runAsync()
+      .then(() => {
+        setResent(true)
+      })
+      .catch(() => undefined)
+  }
+
+  return (
+    <AuthLayout
+      title="Check your email"
+      description="Click the link we sent to finish setting up your account."
+      footer={
+        <button
+          type="button"
+          onClick={() => {
+            logOut.runAsync().catch(() => undefined)
+          }}
+          className="font-medium text-accent hover:underline"
+        >
+          Sign out
+        </button>
+      }
+    >
+      <div className="mt-5 space-y-3">
+        {resent && <p className="text-[12px] text-ink-muted">A new link is on its way.</p>}
+        {requestVerification.error !== null && <ErrorPanel error={requestVerification.error} />}
+        <button
+          type="button"
+          disabled={requestVerification.isPending}
+          onClick={resend}
+          className="w-full rounded-md bg-accent px-3.5 py-2 text-[12px] font-semibold text-accent-fg transition hover:bg-accent-hover disabled:opacity-50"
+        >
+          {requestVerification.isPending ? 'Sending…' : 'Resend link'}
+        </button>
+      </div>
+    </AuthLayout>
+  )
+}

package/src/pages/dashboard/DashboardPage.tsx

@@ -1,5 +1,6 @@
 import type { Dashboard } from '@kelpie/schemas'
 
+import { useTimezone } from '../../api/resources/account.ts'
 import { useDashboard } from '../../api/resources/dashboard.ts'
 import { useMembers } from '../../api/resources/members.ts'
 import { useWorkspace } from '../../api/resources/workspace.ts'
@@ -20,7 +21,7 @@ import { ActivityFeed, AttentionList, DecisionsList, NotesList } from './section
 
 /** The heading date, written in the workspace's own day rather than the browser's. */
 function briefHeading(dashboard: Dashboard): string {
-  return new Intl.DateTimeFormat('en-AU', {
+  return new Intl.DateTimeFormat(undefined, {
     weekday: 'long',
     month: 'short',
     day: 'numeric',
@@ -32,6 +33,7 @@ export function DashboardPage(): React.JSX.Element {
   const { dashboard, isLoading, error } = useDashboard()
   const { workspace } = useWorkspace()
   const { nameById } = useMembers()
+  const timezone = useTimezone()
 
   return (
     <div className="animate-fade-in">
@@ -46,6 +48,7 @@ export function DashboardPage(): React.JSX.Element {
           workspaceId={workspace?.id}
           workspaceName={workspace?.name ?? 'This workspace'}
           nameById={nameById}
+          timezone={timezone}
         />
       )}
     </div>
@@ -57,11 +60,13 @@ function DashboardBody({
   workspaceId,
   workspaceName,
   nameById,
+  timezone,
 }: {
   readonly dashboard: Dashboard
   readonly workspaceId: string | undefined
   readonly workspaceName: string
   readonly nameById: ReadonlyMap<string, string>
+  readonly timezone: string
 }): React.JSX.Element {
   // `generatedAt` rather than a fresh `new Date()`: every relative time on the
   // page is then measured from the same instant the counts were, so a tab left
@@ -97,11 +102,16 @@ function DashboardBody({
 
       <div className="mb-8 grid gap-8 lg:grid-cols-2">
         <AttentionList rows={attentionRows(dashboard)} />
-        <ActivityFeed activities={dashboard.recentActivity} nameById={nameById} now={now} />
+        <ActivityFeed
+          activities={dashboard.recentActivity}
+          nameById={nameById}
+          now={now}
+          timezone={timezone}
+        />
       </div>
       <div className="grid gap-8 lg:grid-cols-2">
-        <NotesList notes={dashboard.recentNotes} nameById={nameById} now={now} />
-        <DecisionsList decisions={dashboard.recentDecisions} nameById={nameById} />
+        <NotesList notes={dashboard.recentNotes} nameById={nameById} now={now} timezone={timezone} />
+        <DecisionsList decisions={dashboard.recentDecisions} nameById={nameById} timezone={timezone} />
       </div>
     </div>
   )

package/src/pages/dashboard/sections.tsx

@@ -106,10 +106,12 @@ export function ActivityFeed({
   activities,
   nameById,
   now,
+  timezone,
 }: {
   readonly activities: readonly DashboardActivity[]
   readonly nameById: ReadonlyMap<string, string>
   readonly now: Date
+  readonly timezone: string
 }): React.JSX.Element {
   return (
     <section>
@@ -145,7 +147,7 @@ export function ActivityFeed({
                     dateTime={activity.createdAt.toISOString()}
                     className="shrink-0 text-[11px] text-ink-faint"
                   >
-                    {formatRelativeTime(activity.createdAt, now)}
+                    {formatRelativeTime(activity.createdAt, timezone, now)}
                   </time>
                 </div>
                 <p className="text-[11px] leading-snug text-ink-faint">
@@ -184,10 +186,12 @@ export function NotesList({
   notes,
   nameById,
   now,
+  timezone,
 }: {
   readonly notes: readonly DashboardNote[]
   readonly nameById: ReadonlyMap<string, string>
   readonly now: Date
+  readonly timezone: string
 }): React.JSX.Element {
   return (
     <section>
@@ -211,7 +215,7 @@ export function NotesList({
                 <span>·</span>
                 <span>{note.authorId === null ? 'System' : (nameById.get(note.authorId) ?? 'Unknown')}</span>
                 <span>·</span>
-                <span>{formatRelativeTime(note.createdAt, now)}</span>
+                <span>{formatRelativeTime(note.createdAt, timezone, now)}</span>
               </div>
             </li>
           ))}
@@ -224,9 +228,11 @@ export function NotesList({
 export function DecisionsList({
   decisions,
   nameById,
+  timezone,
 }: {
   readonly decisions: readonly DashboardDecision[]
   readonly nameById: ReadonlyMap<string, string>
+  readonly timezone: string
 }): React.JSX.Element {
   return (
     <section>
@@ -254,7 +260,7 @@ export function DecisionsList({
               <div className="mt-2 flex flex-wrap items-center gap-2 text-[11px] text-ink-faint">
                 <TargetLink target={decision} />
                 <span>·</span>
-                <span>{formatDate(decision.decidedAt)}</span>
+                <span>{formatDate(decision.decidedAt, timezone)}</span>
                 <span>·</span>
                 <span>
                   {decision.ownerId === null ? '—' : (nameById.get(decision.ownerId) ?? 'Unknown')}

package/src/pages/forms/SubmissionsTable.tsx

@@ -3,6 +3,7 @@ import { useMemo } from 'react'
 import { Link } from 'react-router'
 
 import type { RecordListResult } from '../../api/resource.ts'
+import { useTimezone } from '../../api/resources/account.ts'
 import { useCompanies } from '../../api/resources/companies.ts'
 import { usePeople } from '../../api/resources/people.ts'
 import { DataTable } from '../../components/DataTable.tsx'
@@ -31,6 +32,7 @@ export interface SubmissionsTableProps {
 export function SubmissionsTable({ form, submissions }: SubmissionsTableProps): React.JSX.Element {
   const people = usePeople({ limit: MAX_PAGE })
   const companies = useCompanies({ limit: MAX_PAGE })
+  const timezone = useTimezone()
 
   const nameById = useMemo(
     () => new Map([...people.records, ...companies.records].map((record) => [record.id, record.name])),
@@ -44,7 +46,7 @@ export function SubmissionsTable({ form, submissions }: SubmissionsTableProps):
       className: 'w-40',
       render: (submission) => (
         <span className="font-mono text-[12px] text-ink-muted">
-          {formatDateTime(submission.submittedAt)}
+          {formatDateTime(submission.submittedAt, timezone)}
         </span>
       ),
     },

package/src/pages/handbook/HandbookPage.tsx

@@ -13,6 +13,7 @@ import type { HandbookPage } from '@kelpie/schemas'
 import { useEffect, useMemo, useState } from 'react'
 import { Link, useNavigate, useParams } from 'react-router'
 
+import { useTimezone } from '../../api/resources/account.ts'
 import {
   useCreateHandbookPage,
   useDeleteHandbookPage,
@@ -384,6 +385,7 @@ function HandbookEditor({
   const [editing, setEditing] = useState(false)
   const [title, setTitle] = useState(page.title)
   const [body, setBody] = useState(page.body)
+  const timezone = useTimezone()
 
   useEffect(() => {
     setTitle(page.title)
@@ -415,7 +417,7 @@ function HandbookEditor({
             <h1 className="text-[18px] font-semibold tracking-tight text-ink">{page.title}</h1>
           )}
           <div className="mt-1 text-[11px] text-ink-faint">
-            Updated {formatDateTime(page.updatedAt)}
+            Updated {formatDateTime(page.updatedAt, timezone)}
             {authorName === undefined ? '' : ` · ${authorName}`}
           </div>
         </div>