Replace the UI with the Organic design handoff (docs/design_handoff_pansy_ui)

The frontend is rebuilt screen by screen from the handoff: warm cream ground, terracotta + sage accents, Caprasimo over Figtree, every control a pill. Same React/Vite/TanStack stack and the same lib/ data layer; the presentation is new. - Tokens: web/src/styles/index.css declares the handoff's styles.css variables through Tailwind's @theme under the same names; dark mode is those variables overridden on <html> by the handoff's pansy-theme.js, inlined in index.html so it runs before first paint. Lucide glyphs at stroke 2.75; a small pill kit (Button, Dialog, Field, Seg, Toggle, Tag, toast). - Login / Register: the centered column over soft accent circles; OIDC button and signup footer still follow /auth/providers. - Gardens: cards with a real SVG plot thumbnail (objects + plant-colored dots from /full), a `plan` tag for "<name> — <year>" copies, shares line, Open + share/copy/edit/delete; New garden / Share / Plan-a-season dialogs. - Plants: monogram markers derived from the name (collision-resolved across the catalog — replaces emoji icons), category chips, expandable lot cards, the scan-packet flow as a two-step dialog that never auto-creates. - Settings: Appearance (theme seg), Who gets in (read-only sign-in config), Garden assistant (self-saving toggle + chat/vision model fields), You. - Editor: a new canvas with the prototype's pointer model (wheel-to-cursor, pinch about the centroid, 3″ snap, one PATCH per drop, semantic-zoom monograms/labels), plus corner resize handles; desktop three-card workspace (toolkit | plan | rail with Plot/Journal/History/Assistant) and, below 760px of container width, the phone chrome (header, peek panel, tool strip, mode bar). Seasons as a segmented control over the years with data plus plan copies; Undo re-reads history before reverting the newest step. - Public read-only view and the register page restyled to match. - GET /settings gains a read-only `auth` view (registration mode, local auth, OIDC issuer) so the Settings page can show what's in force. - README / DESIGN.md / CLAUDE.md updated; @use-gesture/react dropped. Co-Authored-By: Claude Fable 5 <[email protected]>
2026-08-22 19:12:29 -04:00
parent 18b36870d4
commit 52b2c09a9e
111 changed files with 6621 additions and 7215 deletions
@@ -81,6 +81,25 @@ func TestSettingsInheritFromEnv(t *testing.T) {
 	if eff["hasApiKey"] != true || eff["agentLive"] != true {
 		t.Errorf("effective = %+v, want a key present and the agent live", eff)
 	}
+
+	// The read-only sign-in view the Settings page renders under "Who gets in".
+	// These come straight from the environment config, so the shape is what's
+	// asserted: a registration mode, a local-auth flag, and no secret material.
+	auth, ok := body["auth"].(map[string]any)
+	if !ok {
+		t.Fatalf("settings response has no auth view: %v", body)
+	}
+	if reg := auth["registration"]; reg != "open" && reg != "closed" {
+		t.Errorf("auth.registration = %v, want open or closed", reg)
+	}
+	if _, isBool := auth["localAuth"].(bool); !isBool {
+		t.Errorf("auth.localAuth = %v, want a bool", auth["localAuth"])
+	}
+	for _, k := range []string{"clientId", "clientSecret", "oidcClientSecret"} {
+		if _, present := auth[k]; present {
+			t.Errorf("auth view exposes %q — secrets must never leave the environment", k)
+		}
+	}
 }

 // TestSettingsUpdateSwapsTheRunner is the core of #79: changing settings takes