mrhid6
01eda1dbb0
Server Deploy / deploy (push) Successful in 1m6s
web/ was the last app on its own palette — a neutral #0f1117 ground with an indigo accent, unrelated to the logo navy that site/ and adminsite/ are built on. It now draws from the same tokens, so all three apps are one system. It stays locked to dark, taking site/'s dark values. That is what keeps adminsite/'s light default meaningful: an operator with both open tells them apart by the ground before clicking anything destructive, and now that both are the same palette, the ground is the only thing left doing that work. The colour names stay this app's own — text-primary, border, surface rather than ink, rule, panel — because every screen already reads that way, and adminsite/ already establishes that each app names the shared tokens after its own subject. Tokens are stored as RGB channels with the hex in a trailing comment. The console leans on Tailwind opacity modifiers far more than the other two (bg-danger/10, border-accent/50, ring-accent/30), and <alpha-value> only compiles against channels; the comments keep the three token blocks diffable by eye. Beyond colour: - radii collapse to site/'s 4px in tailwind.config.ts rather than rewriting ~140 rounded-lg classes; rounded-full is untouched for dots and pills - badges become site/'s chip — mono, uppercase, tracked, currentColor rule, no fill — keeping their dot so state is never colour alone - table column heads take the keyed-label idiom, at text-secondary rather than tertiary, which lands under 4.5:1 at that size - sidebar marks the active item with an accent bar, the device site/ uses for the chosen plan, instead of a filled pill that reads as pressable - filled accent and danger buttons take accent-ink; the dark accent is a light blue and danger a coral, and white on either was unreadable - login's packet pulses shift from green to the accent, so the sign-in screen is the same two blues as the marketing hero The last hex literals and stock-palette classes are gone; the only ones left are NetworkBackground's canvas fills, which cannot read a CSS variable and are commented with the token each came from. Only the web image rebuilds from this.
96 lines
3.5 KiB
TypeScript
96 lines
3.5 KiB
TypeScript
"use client";
|
|
|
|
import { createContext, useContext, useEffect, useState, ReactNode } from "react";
|
|
import { auth, type Instance, type Role, type SessionUser } from "@/lib/api";
|
|
|
|
export type { Instance, Role, SessionUser };
|
|
|
|
interface AuthContextType {
|
|
user: SessionUser | null;
|
|
instance: Instance | null;
|
|
/** True for owner and admin the roles the /api/settings and /api/instance routes require. */
|
|
isAdmin: boolean;
|
|
}
|
|
|
|
const AuthContext = createContext<AuthContextType>({ user: null, instance: null, isAdmin: false });
|
|
|
|
export function useAuth() {
|
|
return useContext(AuthContext);
|
|
}
|
|
|
|
/**
|
|
* Wraps the authenticated app shell only (see app/(app)/layout.tsx). /login and
|
|
* /setup live outside the group, so no pathname guard is needed here.
|
|
*/
|
|
export function AuthProvider({ children }: { children: ReactNode }) {
|
|
const [user, setUser] = useState<SessionUser | null>(null);
|
|
const [instance, setOrg] = useState<Instance | null>(null);
|
|
const [loading, setLoading] = useState(true);
|
|
const [error, setError] = useState<string | null>(null);
|
|
|
|
useEffect(() => {
|
|
let cancelled = false;
|
|
|
|
(async () => {
|
|
try {
|
|
const status = await auth.bootstrapStatus();
|
|
if (status.needs_setup) {
|
|
window.location.href = "/setup";
|
|
return;
|
|
}
|
|
|
|
const me = await auth.me();
|
|
if (cancelled) return;
|
|
setUser(me.user);
|
|
setOrg(me.instance);
|
|
setLoading(false);
|
|
} catch (err) {
|
|
if (cancelled) return;
|
|
const status = (err as { status?: number }).status;
|
|
if (status === 401) {
|
|
window.location.href = "/login";
|
|
return;
|
|
}
|
|
|
|
setError((err as Error).message || "Unable to load your session.");
|
|
setLoading(false);
|
|
}
|
|
})();
|
|
|
|
return () => {
|
|
cancelled = true;
|
|
};
|
|
}, []);
|
|
|
|
if (loading) {
|
|
return (
|
|
<div className="flex h-screen items-center justify-center bg-background">
|
|
<div className="h-8 w-8 animate-spin rounded-full border-2 border-border border-t-accent" />
|
|
</div>
|
|
);
|
|
}
|
|
|
|
if (error || !user) {
|
|
return (
|
|
<div className="flex h-screen items-center justify-center bg-background p-4">
|
|
<div className="w-full max-w-md rounded-xl border border-border bg-surface p-6 text-center">
|
|
<h1 className="text-base font-semibold text-text-primary">Can't load your session</h1>
|
|
<p className="mt-2 text-sm text-text-secondary">{error ?? "Unable to load your session."}</p>
|
|
<div className="mt-5 flex justify-center gap-2">
|
|
<button onClick={() => window.location.reload()} className="rounded bg-accent px-3 py-2 text-sm font-semibold text-accent-ink">
|
|
Retry
|
|
</button>
|
|
<a href="/login" className="rounded-lg border border-border px-3 py-2 text-sm font-medium text-text-secondary">
|
|
Sign in
|
|
</a>
|
|
</div>
|
|
</div>
|
|
</div>
|
|
);
|
|
}
|
|
|
|
const isAdmin = user.role === "owner" || user.role === "admin";
|
|
|
|
return <AuthContext.Provider value={{ user, instance, isAdmin }}>{children}</AuthContext.Provider>;
|
|
}
|