feat(knowledge-base): Knowledge Base UI — browse/edit, modal, project links

- Knowledge Bases list page + sidebar entry + "+ New" create modal
- Detail page with a recursive structure tree: add/edit/delete topics,
  categories and facts inline, including name + description editing
- Create/metadata-edit modal (title, description)
- Project edit modal gains a link/remove knowledge base section
- Types and routes for /knowledge-bases and /knowledge-bases/:id
- Scoped .kb-* styles (contained panel, topic cards, hierarchy guides)

Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>

Dockerfile

@@ -1,6 +1,14 @@
 # Build stage
 FROM node:20-alpine AS build
 WORKDIR /app
+
+# Build-time backend URL — Vite inlines this into the bundle. Passed as
+# `--build-arg VITE_HF_BACKEND_BASE_URL=https://hf-api.example.com` in
+# the compose file. Without it the bundle calls relative paths (only
+# works in dev with the Vite proxy).
+ARG VITE_HF_BACKEND_BASE_URL=""
+ENV VITE_HF_BACKEND_BASE_URL=${VITE_HF_BACKEND_BASE_URL}
+
 COPY package.json package-lock.json* ./
 RUN npm install
 COPY . .

src/App.tsx

@@ -3,12 +3,13 @@ import { BrowserRouter, Routes, Route, Navigate } from 'react-router-dom'
 import { useAuth } from '@/hooks/useAuth'
 import Sidebar from '@/components/Sidebar'
 import LoginPage from '@/pages/LoginPage'
-import SetupWizardPage from '@/pages/SetupWizardPage'
 import DashboardPage from '@/pages/DashboardPage'
 import TasksPage from '@/pages/TasksPage'
 import TaskDetailPage from '@/pages/TaskDetailPage'
 import ProjectsPage from '@/pages/ProjectsPage'
 import ProjectDetailPage from '@/pages/ProjectDetailPage'
+import KnowledgeBasesPage from '@/pages/KnowledgeBasesPage'
+import KnowledgeBaseDetailPage from '@/pages/KnowledgeBaseDetailPage'
 import MilestonesPage from '@/pages/MilestonesPage'
 import MilestoneDetailPage from '@/pages/MilestoneDetailPage'
 import NotificationsPage from '@/pages/NotificationsPage'
@@ -24,19 +25,16 @@ import OidcCallbackPage from '@/pages/OidcCallbackPage'
 import OidcSettingsPage from '@/pages/OidcSettingsPage'
 import axios from 'axios'
 
-const getStoredWizardPort = (): number | null => {
+// Backend URL is baked in at build time via VITE_HF_BACKEND_BASE_URL
-  const stored = Number(localStorage.getItem('HF_WIZARD_PORT'))
+// (docker build --build-arg). Empty string → same-origin call (only
-  return stored && stored > 0 ? stored : null
+// works in dev with the Vite proxy).
-}
+const API_BASE = import.meta.env.VITE_HF_BACKEND_BASE_URL || ''
 
-const getApiBase = () => {
+type AppState = 'checking' | 'no-admin' | 'ready'
-  return localStorage.getItem('HF_BACKEND_BASE_URL') ?? undefined
-}
-
-type AppState = 'checking' | 'setup' | 'ready'
 
 export default function App() {
   const [appState, setAppState] = useState<AppState>('checking')
+  const [errorMessage, setErrorMessage] = useState<string>('')
   const { user, loading, login, loginWithToken, logout } = useAuth()
 
   useEffect(() => {
@@ -44,49 +42,61 @@ export default function App() {
   }, [])
 
   const checkInitialized = async () => {
-    // First try the backend /config/status endpoint (reads from config volume directly)
     try {
-      const res = await axios.get(`${getApiBase()}/config/status`, { timeout: 5000 })
+      const res = await axios.get(`${API_BASE}/config/status`, { timeout: 5000 })
       const cfg = res.data || {}
-      if (cfg.backend_url) {
-        localStorage.setItem('HF_BACKEND_BASE_URL', cfg.backend_url)
-      }
       if (cfg.initialized === true) {
         setAppState('ready')
         return
       }
-    } catch {
+      setAppState('no-admin')
-      // Backend unreachable — fall through to wizard check
+    } catch (err) {
+      const msg = err instanceof Error ? err.message : String(err)
+      setErrorMessage(`Backend unreachable at ${API_BASE || '<same origin>'} — ${msg}`)
+      setAppState('no-admin')
     }
-
-    // Fallback: if a wizard port was previously saved during setup, try it directly
-    const storedPort = getStoredWizardPort()
-    if (storedPort) {
-      try {
-        const res = await axios.get(`http://127.0.0.1:${storedPort}/api/v1/config/harborforge.json`, {
-          timeout: 5000,
-        })
-        const cfg = res.data || {}
-        if (cfg.backend_url) {
-          localStorage.setItem('HF_BACKEND_BASE_URL', cfg.backend_url)
-        }
-        if (cfg.initialized === true) {
-          setAppState('ready')
-          return
-        }
-      } catch {
-        // ignore — fall through to setup
-      }
-    }
-    setAppState('setup')
   }
 
   if (appState === 'checking') {
-    return <div className="loading">Checking configuration status...</div>
+    return <div className="loading">Checking deployment status…</div>
   }
 
-  if (appState === 'setup') {
+  if (appState === 'no-admin') {
-    return <SetupWizardPage initialWizardPort={getStoredWizardPort()} onComplete={checkInitialized} />
+    return (
+      <div className="login-page">
+        <div className="login-card">
+          <h1>⚓ HarborForge</h1>
+          {errorMessage ? (
+            <>
+              <p className="text-dim">Cannot reach the backend.</p>
+              <pre style={{ whiteSpace: 'pre-wrap', fontSize: '0.85em' }}>{errorMessage}</pre>
+              <p className="text-dim">
+                Set <code>VITE_HF_BACKEND_BASE_URL</code> at build time
+                (e.g. <code>https://hf-api.example.com</code>) in the
+                frontend container's compose entry.
+              </p>
+            </>
+          ) : (
+            <>
+              <p className="text-dim">
+                No admin user found. Bootstrap the deployment by running, on the host:
+              </p>
+              <pre style={{ whiteSpace: 'pre-wrap', fontSize: '0.85em' }}>
+{`docker exec hf-backend hf-cli admin create-user \\
+  --email you@example.com \\
+  --password '...' \\
+  # ...or in OIDC_ONLY mode:
+  --oidc-issuer https://login.example.com/realms/your-realm \\
+  --oidc-subject <sub-from-idp>`}
+              </pre>
+              <button className="btn-primary" onClick={checkInitialized}>
+                Recheck
+              </button>
+            </>
+          )}
+        </div>
+      </div>
+    )
   }
 
   if (loading) return <div className="loading">Loading...</div>
@@ -122,6 +132,8 @@ export default function App() {
             <Route path="/tasks/:taskCode" element={<TaskDetailPage />} />
             <Route path="/projects" element={<ProjectsPage />} />
             <Route path="/projects/:id" element={<ProjectDetailPage />} />
+            <Route path="/knowledge-bases" element={<KnowledgeBasesPage />} />
+            <Route path="/knowledge-bases/:id" element={<KnowledgeBaseDetailPage />} />
             <Route path="/milestones" element={<MilestonesPage />} />
             <Route path="/milestones/:milestoneCode" element={<MilestoneDetailPage />} />
             <Route path="/proposals" element={<ProposalsPage />} />

src/components/KnowledgeBaseFormModal.tsx

@@ -0,0 +1,104 @@
+import { useEffect, useState } from 'react'
+import api from '@/services/api'
+import type { KnowledgeBase } from '@/types'
+
+type Props = {
+  isOpen: boolean
+  onClose: () => void
+  onSaved?: (kb: KnowledgeBase) => void | Promise<void>
+  knowledgeBase?: KnowledgeBase | null
+}
+
+type FormState = {
+  title: string
+  description: string
+}
+
+const emptyForm: FormState = { title: '', description: '' }
+
+export default function KnowledgeBaseFormModal({ isOpen, onClose, onSaved, knowledgeBase }: Props) {
+  const [saving, setSaving] = useState(false)
+  const [error, setError] = useState('')
+  const [form, setForm] = useState<FormState>(emptyForm)
+
+  useEffect(() => {
+    if (!isOpen) return
+    setError('')
+    if (knowledgeBase) {
+      setForm({ title: knowledgeBase.title, description: knowledgeBase.description || '' })
+    } else {
+      setForm(emptyForm)
+    }
+  }, [isOpen, knowledgeBase])
+
+  const submit = async (e: React.FormEvent) => {
+    e.preventDefault()
+    setSaving(true)
+    setError('')
+    try {
+      if (knowledgeBase) {
+        const { data } = await api.patch<KnowledgeBase>(`/knowledge-bases/${knowledgeBase.id}`, {
+          title: form.title,
+          description: form.description || null,
+        })
+        await onSaved?.(data)
+      } else {
+        const { data } = await api.post<KnowledgeBase>('/knowledge-bases', {
+          title: form.title,
+          description: form.description || null,
+        })
+        await onSaved?.(data)
+      }
+      onClose()
+    } catch (err: any) {
+      setError(err?.response?.data?.detail || 'Failed to save knowledge base')
+    } finally {
+      setSaving(false)
+    }
+  }
+
+  if (!isOpen) return null
+
+  return (
+    <div className="modal-overlay" onClick={onClose}>
+      <div className="modal" onClick={(e) => e.stopPropagation()}>
+        <div className="modal-header">
+          <h3>{knowledgeBase ? 'Edit Knowledge Base' : 'Create Knowledge Base'}</h3>
+          <button type="button" className="btn-secondary" onClick={onClose}>✕</button>
+        </div>
+
+        <form className="task-create-form" onSubmit={submit}>
+          <label>
+            Title
+            <input
+              data-testid="kb-title-input"
+              required
+              placeholder="Knowledge base title"
+              value={form.title}
+              onChange={(e) => setForm((f) => ({ ...f, title: e.target.value }))}
+            />
+          </label>
+
+          <label>
+            Description
+            <textarea
+              data-testid="kb-description-input"
+              placeholder="Description (optional)"
+              value={form.description}
+              onChange={(e) => setForm((f) => ({ ...f, description: e.target.value }))}
+            />
+          </label>
+
+          {error && <p className="error-text" style={{ color: 'var(--danger, #e5534b)' }}>{error}</p>}
+
+          <div className="modal-actions">
+            <button type="submit" className="btn-primary" disabled={saving}>
+              {saving ? 'Saving...' : (knowledgeBase ? 'Save' : 'Create')}
+            </button>
+            <button type="button" className="btn-secondary" onClick={onClose} disabled={saving}>Cancel</button>
+          </div>
+        </form>
+      </div>
+    </div>
+  )
+}

src/components/KnowledgeBaseTree.tsx

@@ -0,0 +1,275 @@
+import { useState } from 'react'
+import api from '@/services/api'
+import type { KnowledgeBaseTree as Tree, KnowledgeTopicNode, KnowledgeCategoryNode, KnowledgeFact } from '@/types'
+
+type Reload = () => void | Promise<void>
+
+function errMsg(err: any, fallback: string): string {
+  return err?.response?.data?.detail || fallback
+}
+
+/** A toggle button that reveals a single-line input with save/cancel. */
+function InlineForm({ label, placeholder, onSubmit }: {
+  label: string
+  placeholder: string
+  onSubmit: (value: string) => Promise<void>
+}) {
+  const [open, setOpen] = useState(false)
+  const [value, setValue] = useState('')
+  const [busy, setBusy] = useState(false)
+
+  if (!open) {
+    return <button className="kb-mini-btn" onClick={() => { setValue(''); setOpen(true) }}>{label}</button>
+  }
+  const save = async () => {
+    if (!value.trim()) return
+    setBusy(true)
+    try { await onSubmit(value.trim()); setOpen(false) }
+    finally { setBusy(false) }
+  }
+  return (
+    <span className="kb-inline-form">
+      <input
+        autoFocus
+        placeholder={placeholder}
+        value={value}
+        disabled={busy}
+        onChange={(e) => setValue(e.target.value)}
+        onKeyDown={(e) => { if (e.key === 'Enter') save(); if (e.key === 'Escape') setOpen(false) }}
+      />
+      <button className="kb-mini-btn" disabled={busy} onClick={save}>✓</button>
+      <button className="kb-mini-btn" disabled={busy} onClick={() => setOpen(false)}>✕</button>
+    </span>
+  )
+}
+
+/** Inline editor for a node's name + description (used by topics & categories). */
+function NodeEditForm({ initialName, initialDesc, namePlaceholder, onSave, onCancel }: {
+  initialName: string
+  initialDesc: string
+  namePlaceholder: string
+  onSave: (name: string, description: string) => Promise<void>
+  onCancel: () => void
+}) {
+  const [name, setName] = useState(initialName)
+  const [desc, setDesc] = useState(initialDesc)
+  const [busy, setBusy] = useState(false)
+
+  const save = async () => {
+    if (!name.trim()) return
+    setBusy(true)
+    try { await onSave(name.trim(), desc) } finally { setBusy(false) }
+  }
+  return (
+    <div className="kb-edit-form">
+      <input
+        autoFocus
+        placeholder={namePlaceholder}
+        value={name}
+        disabled={busy}
+        onChange={(e) => setName(e.target.value)}
+        onKeyDown={(e) => { if (e.key === 'Enter') save(); if (e.key === 'Escape') onCancel() }}
+      />
+      <textarea
+        placeholder="Description (optional)"
+        rows={2}
+        value={desc}
+        disabled={busy}
+        onChange={(e) => setDesc(e.target.value)}
+      />
+      <span className="kb-row-actions">
+        <button className="kb-mini-btn" disabled={busy} onClick={save}>save</button>
+        <button className="kb-mini-btn" disabled={busy} onClick={onCancel}>cancel</button>
+      </span>
+    </div>
+  )
+}
+
+function FactRow({ fact, onChange }: { fact: KnowledgeFact; onChange: Reload }) {
+  const [editing, setEditing] = useState(false)
+  const [value, setValue] = useState(fact.fact)
+
+  const save = async () => {
+    try {
+      await api.patch(`/knowledge-facts/${fact.id}`, { fact: value })
+      setEditing(false)
+      await onChange()
+    } catch (err) { alert(errMsg(err, 'Failed to update fact')) }
+  }
+  const remove = async () => {
+    if (!confirm('Delete this fact?')) return
+    try { await api.delete(`/knowledge-facts/${fact.id}`); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to delete fact')) }
+  }
+
+  return (
+    <div className="kb-fact">
+      <span className="kb-bullet">•</span>
+      {editing ? (
+        <span className="kb-inline-form kb-inline-grow">
+          <input autoFocus value={value} onChange={(e) => setValue(e.target.value)}
+            onKeyDown={(e) => { if (e.key === 'Enter') save(); if (e.key === 'Escape') setEditing(false) }} />
+          <button className="kb-mini-btn" onClick={save}>✓</button>
+          <button className="kb-mini-btn" onClick={() => { setValue(fact.fact); setEditing(false) }}>✕</button>
+        </span>
+      ) : (
+        <>
+          <span className="kb-fact-text">{fact.fact}</span>
+          <span className="kb-row-actions">
+            <button className="kb-mini-btn" onClick={() => setEditing(true)}>edit</button>
+            <button className="kb-mini-btn kb-danger" onClick={remove}>del</button>
+          </span>
+        </>
+      )}
+    </div>
+  )
+}
+
+function CategoryNode({ cat, onChange }: { cat: KnowledgeCategoryNode; onChange: Reload }) {
+  const [editing, setEditing] = useState(false)
+
+  const saveEdit = async (name: string, description: string) => {
+    try {
+      await api.patch(`/knowledge-categories/${cat.id}`, { name, description: description || null })
+      setEditing(false)
+      await onChange()
+    } catch (err) { alert(errMsg(err, 'Failed to update category')) }
+  }
+  const remove = async () => {
+    if (!confirm('Delete this category and everything under it?')) return
+    try { await api.delete(`/knowledge-categories/${cat.id}`); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to delete category')) }
+  }
+  const addSubcategory = async (value: string) => {
+    try { await api.post('/knowledge-categories', { topic_id: cat.topic_id, parent: cat.id, name: value }); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to add category')) }
+  }
+  const addFact = async (value: string) => {
+    try { await api.post('/knowledge-facts', { topic_id: cat.topic_id, category_id: cat.id, fact: value }); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to add fact')) }
+  }
+
+  return (
+    <div className="kb-node kb-category">
+      {editing ? (
+        <div className="kb-node-header">
+          <NodeEditForm
+            initialName={cat.name}
+            initialDesc={cat.description || ''}
+            namePlaceholder="Category name"
+            onSave={saveEdit}
+            onCancel={() => setEditing(false)}
+          />
+        </div>
+      ) : (
+        <>
+          <div className="kb-node-header">
+            <span className="kb-node-title">📂 {cat.name}</span>
+            <span className="kb-row-actions">
+              <InlineForm label="+ category" placeholder="Category name" onSubmit={addSubcategory} />
+              <InlineForm label="+ fact" placeholder="Fact" onSubmit={addFact} />
+              <button className="kb-mini-btn" onClick={() => setEditing(true)}>edit</button>
+              <button className="kb-mini-btn kb-danger" onClick={remove}>del</button>
+            </span>
+          </div>
+          {cat.description && <div className="kb-node-desc">{cat.description}</div>}
+        </>
+      )}
+      <div className="kb-children">
+        {cat.facts.map((f) => <FactRow key={f.id} fact={f} onChange={onChange} />)}
+        {cat.categories.map((c) => <CategoryNode key={c.id} cat={c} onChange={onChange} />)}
+      </div>
+    </div>
+  )
+}
+
+function TopicNode({ topic, onChange }: { topic: KnowledgeTopicNode; onChange: Reload }) {
+  const [editing, setEditing] = useState(false)
+
+  const saveEdit = async (name: string, description: string) => {
+    try {
+      await api.patch(`/knowledge-topics/${topic.id}`, { topic: name, description: description || null })
+      setEditing(false)
+      await onChange()
+    } catch (err) { alert(errMsg(err, 'Failed to update topic')) }
+  }
+  const remove = async () => {
+    if (!confirm('Delete this topic and everything under it?')) return
+    try { await api.delete(`/knowledge-topics/${topic.id}`); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to delete topic')) }
+  }
+  const addCategory = async (value: string) => {
+    try { await api.post('/knowledge-categories', { topic_id: topic.id, name: value }); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to add category')) }
+  }
+  const addFact = async (value: string) => {
+    try { await api.post('/knowledge-facts', { topic_id: topic.id, fact: value }); await onChange() }
+    catch (err) { alert(errMsg(err, 'Failed to add fact')) }
+  }
+
+  return (
+    <div className="kb-node kb-topic">
+      {editing ? (
+        <div className="kb-node-header">
+          <NodeEditForm
+            initialName={topic.topic}
+            initialDesc={topic.description || ''}
+            namePlaceholder="Topic name"
+            onSave={saveEdit}
+            onCancel={() => setEditing(false)}
+          />
+        </div>
+      ) : (
+        <>
+          <div className="kb-node-header">
+            <span className="kb-node-title kb-topic-title"># {topic.topic}</span>
+            <span className="kb-row-actions">
+              <InlineForm label="+ category" placeholder="Category name" onSubmit={addCategory} />
+              <InlineForm label="+ fact" placeholder="Fact" onSubmit={addFact} />
+              <button className="kb-mini-btn" onClick={() => setEditing(true)}>edit</button>
+              <button className="kb-mini-btn kb-danger" onClick={remove}>del</button>
+            </span>
+          </div>
+          {topic.description && <div className="kb-node-desc">{topic.description}</div>}
+        </>
+      )}
+      <div className="kb-children">
+        {topic.facts.map((f) => <FactRow key={f.id} fact={f} onChange={onChange} />)}
+        {topic.categories.map((c) => <CategoryNode key={c.id} cat={c} onChange={onChange} />)}
+      </div>
+    </div>
+  )
+}
+
+export default function KnowledgeBaseTree({ tree, onChange }: { tree: Tree; onChange: Reload }) {
+  const [addingTopic, setAddingTopic] = useState(false)
+  const [topicName, setTopicName] = useState('')
+
+  const addTopic = async () => {
+    if (!topicName.trim()) return
+    try {
+      await api.post(`/knowledge-bases/${tree.id}/topics`, { topic: topicName.trim() })
+      setTopicName(''); setAddingTopic(false)
+      await onChange()
+    } catch (err) { alert(errMsg(err, 'Failed to add topic')) }
+  }
+
+  return (
+    <div className="kb-tree">
+      <div className="kb-tree-toolbar">
+        {addingTopic ? (
+          <span className="kb-inline-form">
+            <input autoFocus placeholder="Topic name" value={topicName} onChange={(e) => setTopicName(e.target.value)}
+              onKeyDown={(e) => { if (e.key === 'Enter') addTopic(); if (e.key === 'Escape') setAddingTopic(false) }} />
+            <button className="kb-mini-btn" onClick={addTopic}>✓</button>
+            <button className="kb-mini-btn" onClick={() => setAddingTopic(false)}>✕</button>
+          </span>
+        ) : (
+          <button className="btn-secondary" onClick={() => setAddingTopic(true)}>+ Add topic</button>
+        )}
+      </div>
+      {tree.topics.length === 0 && <p className="empty">No topics yet. Add one above.</p>}
+      {tree.topics.map((t) => <TopicNode key={t.id} topic={t} onChange={onChange} />)}
+    </div>
+  )
+}

src/components/ProjectFormModal.tsx

@@ -1,6 +1,6 @@
 import { useEffect, useMemo, useState } from 'react'
 import api from '@/services/api'
-import type { Project, User } from '@/types'
+import type { Project, User, KnowledgeBase } from '@/types'
 
 type Props = {
   isOpen: boolean
@@ -34,6 +34,15 @@ export default function ProjectFormModal({ isOpen, onClose, onSaved, project }:
   const [projects, setProjects] = useState<Project[]>([])
   const [saving, setSaving] = useState(false)
   const [form, setForm] = useState<FormState>(emptyForm)
+  const [allKBs, setAllKBs] = useState<KnowledgeBase[]>([])
+  const [linkedKBs, setLinkedKBs] = useState<KnowledgeBase[]>([])
+  const [kbToLink, setKbToLink] = useState('')
+
+  const refreshLinkedKBs = async () => {
+    if (!project) return
+    const { data } = await api.get<KnowledgeBase[]>(`/projects/${project.id}/knowledge-bases`)
+    setLinkedKBs(data)
+  }
 
   useEffect(() => {
     if (!isOpen) return
@@ -46,6 +55,21 @@ export default function ProjectFormModal({ isOpen, onClose, onSaved, project }:
       setUsers(userData)
       setProjects(projectData)
 
+      // Knowledge-base linking is only meaningful for an existing project.
+      if (project) {
+        try {
+          const [{ data: kbs }, { data: linked }] = await Promise.all([
+            api.get<KnowledgeBase[]>('/knowledge-bases'),
+            api.get<KnowledgeBase[]>(`/projects/${project.id}/knowledge-bases`),
+          ])
+          setAllKBs(kbs)
+          setLinkedKBs(linked)
+        } catch {
+          setAllKBs([])
+          setLinkedKBs([])
+        }
+      }
+
       if (project) {
         setForm({
           name: project.name,
@@ -79,6 +103,32 @@ export default function ProjectFormModal({ isOpen, onClose, onSaved, project }:
     setForm((f) => ({ ...f, [field]: values }))
   }
 
+  const linkableKBs = useMemo(
+    () => allKBs.filter((kb) => !linkedKBs.some((l) => l.id === kb.id)),
+    [allKBs, linkedKBs]
+  )
+
+  const linkKB = async () => {
+    if (!project || !kbToLink) return
+    try {
+      await api.post(`/projects/${project.id}/knowledge-bases`, { knowledge_base: kbToLink })
+      setKbToLink('')
+      await refreshLinkedKBs()
+    } catch (err: any) {
+      alert(err?.response?.data?.detail || 'Failed to link knowledge base')
+    }
+  }
+
+  const unlinkKB = async (kbId: number) => {
+    if (!project) return
+    try {
+      await api.delete(`/projects/${project.id}/knowledge-bases/${kbId}`)
+      await refreshLinkedKBs()
+    } catch (err: any) {
+      alert(err?.response?.data?.detail || 'Failed to unlink knowledge base')
+    }
+  }
+
   const submit = async (e: React.FormEvent) => {
     e.preventDefault()
     setSaving(true)
@@ -193,6 +243,32 @@ export default function ProjectFormModal({ isOpen, onClose, onSaved, project }:
             </select>
           </label>
 
+          {project && (
+            <div className="kb-link-section">
+              <label style={{ marginBottom: 4 }}>Knowledge Bases</label>
+              {linkedKBs.length === 0 && <p className="text-dim" style={{ margin: '4px 0' }}>None linked.</p>}
+              <ul className="kb-link-list">
+                {linkedKBs.map((kb) => (
+                  <li key={kb.id}>
+                    <span>{kb.knowledge_base_code ? `${kb.knowledge_base_code} · ` : ''}{kb.title}</span>
+                    <button type="button" className="kb-mini-btn kb-danger" onClick={() => unlinkKB(kb.id)}>remove</button>
+                  </li>
+                ))}
+              </ul>
+              <div className="kb-link-add">
+                <select value={kbToLink} onChange={(e) => setKbToLink(e.target.value)}>
+                  <option value="">— select a knowledge base —</option>
+                  {linkableKBs.map((kb) => (
+                    <option key={kb.id} value={kb.knowledge_base_code || String(kb.id)}>
+                      {kb.knowledge_base_code ? `${kb.knowledge_base_code} · ` : ''}{kb.title}
+                    </option>
+                  ))}
+                </select>
+                <button type="button" className="btn-secondary" disabled={!kbToLink} onClick={linkKB}>Link</button>
+              </div>
+            </div>
+          )}
+
           <div className="modal-actions">
             <button type="submit" className="btn-primary" disabled={saving}>{saving ? 'Saving...' : (project ? 'Save' : 'Create')}</button>
             <button type="button" className="btn-secondary" onClick={onClose} disabled={saving}>Cancel</button>

src/components/Sidebar.tsx

@@ -35,6 +35,7 @@ export default function Sidebar({ user, onLogout }: Props) {
   const links = user ? [
     { to: '/', icon: '📊', label: 'Dashboard' },
     { to: '/projects', icon: '📁', label: 'Projects' },
+    { to: '/knowledge-bases', icon: '📚', label: 'Knowledge Bases' },
     { to: '/proposals', icon: '💡', label: 'Proposals' },
     { to: '/calendar', icon: '📅', label: 'Calendar' },
     { to: '/notifications', icon: '🔔', label: 'Notifications' + (unreadCount > 0 ? ' (' + unreadCount + ')' : '') },

src/hooks/useAuthConfig.ts

@@ -45,14 +45,14 @@ async function load(): Promise<AuthConfig> {
 }
 
 /** Absolute backend URL for full-page OIDC redirects. */
+const BACKEND_BASE = import.meta.env.VITE_HF_BACKEND_BASE_URL || ''
+
 export function oidcLoginHref(cfg: AuthConfig): string {
-  const base = localStorage.getItem('HF_BACKEND_BASE_URL') ?? ''
+  return `${BACKEND_BASE}${cfg.oidcLoginUrl}`
-  return `${base}${cfg.oidcLoginUrl}`
 }
 
 export function oidcLinkHref(): string {
-  const base = localStorage.getItem('HF_BACKEND_BASE_URL') ?? ''
+  return `${BACKEND_BASE}/auth/oidc/link`
-  return `${base}/auth/oidc/link`
 }
 
 export function useAuthConfig() {

src/index.css

@@ -180,7 +180,7 @@ input, textarea, select, button { font-family: inherit; }
 .sidebar-footer button:hover { border-color: var(--accent); color: var(--accent); }
 
 /* ---- Login -------------------------------------------------------------- */
-.login-page, .setup-wizard {
+.login-page {
   display: flex; align-items: center; justify-content: center;
   min-height: 100vh; padding: 24px;
 }
@@ -469,43 +469,6 @@ dd { font-size: .92rem; font-family: 'JetBrains Mono', monospace; }
 .empty::after  { content: ' —'; color: var(--accent); }
 .text-dim { color: var(--text-dim); font-size: .82rem; }
 
-/* ---- Setup Wizard ------------------------------------------------------- */
-.setup-container {
-  position: relative; background: var(--bg-card); border: var(--hair);
-  border-radius: 6px; padding: 44px; max-width: 620px; width: 100%;
-  box-shadow: 0 40px 80px -30px rgba(0,0,0,.8);
-  animation: deck-in .55s cubic-bezier(.16,1,.3,1) both;
-}
-.setup-container::before { content: ''; position: absolute; left: 0; right: 0; top: 0; height: 3px; background: var(--ember); border-radius: 6px 6px 0 0; }
-.setup-header { text-align: center; margin-bottom: 34px; }
-.setup-header h1 { font-size: 1.6rem; margin-bottom: 22px; letter-spacing: .1em; }
-.setup-steps { display: flex; justify-content: center; gap: 8px; flex-wrap: wrap; }
-.setup-step {
-  font-size: .68rem; color: var(--text-dim); padding: 5px 12px; border-radius: 2px;
-  border: var(--hair); text-transform: uppercase; letter-spacing: .1em;
-  font-family: 'JetBrains Mono', monospace;
-}
-.setup-step.active { color: var(--accent); border-color: var(--accent); background: var(--ember-soft); }
-.setup-step.done { color: var(--success); border-color: var(--success); }
-.setup-step-content { animation: fadeIn .25s ease; }
-.setup-step-content h2 { margin-bottom: 10px; font-size: 1.3rem; }
-.setup-form { margin: 22px 0; }
-.setup-nav { display: flex; justify-content: space-between; margin-top: 28px; }
-.setup-nav button:disabled { opacity: .5; cursor: default; }
-.setup-error {
-  background: rgba(226,85,60,.12); border: 1px solid var(--danger); color: var(--danger);
-  padding: 13px 16px; border-radius: var(--radius); margin-bottom: 18px;
-  font-size: .85rem; white-space: pre-line; font-family: 'JetBrains Mono', monospace;
-}
-.setup-info { background: rgba(86,198,214,.07); border: 1px solid rgba(86,198,214,.25); padding: 18px; border-radius: var(--radius); margin: 18px 0; }
-.setup-info code {
-  display: block; background: var(--bg-sink); padding: 10px 13px; border-radius: 2px;
-  margin-top: 10px; font-size: .82rem; color: var(--steel); word-break: break-all;
-}
-.setup-hint { color: var(--warning); font-size: .82rem; margin-top: 8px; }
-.setup-done { text-align: center; }
-.setup-done h2 { color: var(--success); margin-bottom: 14px; }
-
 /* ---- Monitor ------------------------------------------------------------ */
 .monitor-grid { display: grid; grid-template-columns: repeat(auto-fill, minmax(270px, 1fr)); gap: 18px; margin-top: 14px; }
 .monitor-card {
@@ -550,6 +513,194 @@ dd { font-size: .92rem; font-family: 'JetBrains Mono', monospace; }
 .tab.active { color: var(--accent); border-bottom-color: var(--accent); }
 .tab-content { margin-top: 18px; animation: fadeIn .25s ease; }
 
+/* ---- Role Editor -------------------------------------------------------- */
+.role-editor-page { animation: deck-in .35s cubic-bezier(.16,1,.3,1) both; }
+.role-editor-page h2 { display: flex; align-items: center; gap: 10px; }
+.role-editor-page .lead {
+  color: var(--text-dim); font-size: .82rem;
+  text-transform: uppercase; letter-spacing: .12em; margin: 8px 0 22px;
+}
+
+.role-editor-banner {
+  border: var(--hair); border-radius: var(--radius);
+  padding: 12px 16px; margin-bottom: 18px;
+  font-family: 'JetBrains Mono', monospace; font-size: .85rem;
+  display: flex; align-items: center; gap: 10px;
+  animation: fadeIn .25s ease;
+}
+.role-editor-banner.ok    { background: rgba(70,180,135,.10); border-color: var(--success); color: var(--success); }
+.role-editor-banner.err   { background: rgba(226,85,60,.10);  border-color: var(--danger);  color: var(--danger);  }
+
+.role-editor-create {
+  background: var(--bg-card); border: var(--hair); border-radius: var(--radius);
+  padding: 22px 22px 18px; margin-bottom: 22px;
+  position: relative; max-width: 480px;
+  animation: fadeIn .2s ease;
+}
+.role-editor-create::before {
+  content: ''; position: absolute; left: 0; top: 0; bottom: 0; width: 3px;
+  background: var(--ember); border-radius: var(--radius) 0 0 var(--radius);
+}
+.role-editor-create h3 { margin-bottom: 14px; font-size: 1.05rem; letter-spacing: .04em; }
+.role-editor-create label {
+  display: block; margin-bottom: 5px;
+  font-size: .72rem; text-transform: uppercase; letter-spacing: .12em;
+  color: var(--text-dim); font-family: 'JetBrains Mono', monospace;
+}
+.role-editor-create input {
+  width: 100%; padding: 9px 12px; margin-bottom: 14px;
+  background: var(--bg-sink); color: var(--text);
+  border: var(--hair); border-radius: var(--radius);
+  font-family: inherit; font-size: .9rem; transition: .15s;
+}
+.role-editor-create input:focus { border-color: var(--accent); outline: none; }
+.role-editor-create .actions { display: flex; gap: 8px; }
+
+/* ---- two-column body ---- */
+.role-editor-grid {
+  display: grid; grid-template-columns: 280px 1fr; gap: 22px;
+  align-items: start;
+}
+@media (max-width: 980px) {
+  .role-editor-grid { grid-template-columns: 1fr; }
+}
+
+.role-editor-sidebar h3,
+.role-editor-detail h3 {
+  font-size: .82rem; text-transform: uppercase; letter-spacing: .14em;
+  color: var(--text-dim); margin-bottom: 12px;
+  border-bottom: var(--hair); padding-bottom: 8px;
+}
+.role-editor-detail h3 .name {
+  color: var(--accent); font-family: 'JetBrains Mono', monospace;
+  letter-spacing: .04em; text-transform: none;
+}
+
+.role-list { display: flex; flex-direction: column; gap: 8px; }
+.role-card {
+  position: relative; padding: 12px 14px;
+  background: var(--bg-card); border: var(--hair); border-radius: var(--radius);
+  cursor: pointer; transition: .15s; overflow: hidden;
+}
+.role-card:hover { background: var(--bg-hover); border-color: var(--border-bright); }
+.role-card.active {
+  background: var(--ember-soft); border-color: var(--accent);
+  box-shadow: var(--glow);
+}
+.role-card.active::before {
+  content: ''; position: absolute; left: 0; top: 0; bottom: 0; width: 3px;
+  background: var(--ember);
+}
+.role-card .role-name {
+  font-family: 'Saira Condensed', sans-serif; font-weight: 700;
+  font-size: .98rem; color: var(--text); letter-spacing: .04em;
+  display: flex; align-items: center; gap: 6px;
+}
+.role-card .role-desc {
+  color: var(--text-dim); font-size: .78rem; margin-top: 3px;
+  line-height: 1.35;
+}
+.role-card .role-meta {
+  color: var(--steel); font-size: .68rem; margin-top: 6px;
+  font-family: 'JetBrains Mono', monospace; letter-spacing: .04em;
+}
+.role-card .role-badge-global {
+  font-size: .72rem; color: var(--warning);
+  font-family: 'JetBrains Mono', monospace;
+}
+
+/* ---- permissions ---- */
+.perm-group {
+  background: var(--bg-card); border: var(--hair); border-radius: var(--radius);
+  padding: 14px 16px 16px; margin-bottom: 14px;
+}
+.perm-group-header {
+  font-family: 'Saira Condensed', sans-serif; font-weight: 600;
+  font-size: .85rem; text-transform: uppercase; letter-spacing: .14em;
+  color: var(--steel); margin-bottom: 12px;
+  padding-bottom: 8px; border-bottom: 1px dashed var(--border);
+}
+.perm-grid {
+  display: grid; gap: 8px;
+  grid-template-columns: repeat(auto-fill, minmax(230px, 1fr));
+}
+.perm-item {
+  display: flex; align-items: flex-start; gap: 10px;
+  padding: 9px 11px;
+  background: var(--bg-sink); border: 1px solid var(--border); border-radius: 3px;
+  cursor: pointer; transition: .12s;
+  user-select: none;
+}
+.perm-item:hover { background: var(--bg-hover); border-color: var(--border-bright); }
+.perm-item.checked {
+  background: var(--ember-soft);
+  border-color: var(--accent);
+  box-shadow: inset 0 0 0 1px rgba(255,122,31,.18);
+}
+.perm-item input[type="checkbox"] {
+  appearance: none; -webkit-appearance: none;
+  width: 14px; height: 14px; margin-top: 2px;
+  background: var(--bg); border: 1px solid var(--border-bright);
+  border-radius: 2px; cursor: pointer; flex: 0 0 14px;
+  position: relative; transition: .12s;
+}
+.perm-item input[type="checkbox"]:checked {
+  background: var(--accent); border-color: var(--accent);
+}
+.perm-item input[type="checkbox"]:checked::after {
+  content: ''; position: absolute; left: 3px; top: 0px;
+  width: 4px; height: 8px;
+  border: solid #1a0d02; border-width: 0 2px 2px 0;
+  transform: rotate(45deg);
+}
+.perm-item .perm-body { min-width: 0; }
+.perm-item .perm-name {
+  font-family: 'JetBrains Mono', monospace; font-size: .82rem;
+  color: var(--text); font-weight: 500; word-break: break-word;
+}
+.perm-item.checked .perm-name { color: var(--accent); }
+.perm-item .perm-desc {
+  color: var(--text-dim); font-size: .72rem; line-height: 1.35; margin-top: 2px;
+}
+
+.role-editor-template {
+  display: flex; align-items: center; gap: 10px;
+  background: var(--bg-card); border: var(--hair); border-radius: var(--radius);
+  padding: 10px 14px; margin-bottom: 14px;
+  font-size: .82rem;
+}
+.role-editor-template label {
+  color: var(--text-dim); text-transform: uppercase;
+  letter-spacing: .12em; font-size: .72rem;
+  font-family: 'JetBrains Mono', monospace;
+  white-space: nowrap;
+}
+.role-editor-template select {
+  flex: 1; min-width: 0;
+  padding: 7px 10px;
+  background: var(--bg-sink); color: var(--text);
+  border: var(--hair); border-radius: var(--radius);
+  font-family: 'JetBrains Mono', monospace; font-size: .82rem;
+  cursor: pointer; transition: .12s;
+}
+.role-editor-template select:hover  { border-color: var(--border-bright); }
+.role-editor-template select:focus  { border-color: var(--accent); outline: none; }
+.role-editor-template button:disabled {
+  opacity: .4; cursor: not-allowed; border-color: var(--border);
+}
+
+.role-editor-actions {
+  display: flex; gap: 10px; margin-top: 22px;
+  padding-top: 18px; border-top: var(--hair);
+}
+
+.role-editor-empty {
+  background: var(--bg-card); border: 1px dashed var(--border);
+  border-radius: var(--radius); padding: 40px 28px;
+  text-align: center; color: var(--text-dim);
+  font-family: 'JetBrains Mono', monospace; font-size: .85rem;
+}
+
 /* ---- Responsive --------------------------------------------------------- */
 @media (max-width: 860px) {
   :root { --sidebar-w: 0px; }
@@ -557,3 +708,127 @@ dd { font-size: .92rem; font-family: 'JetBrains Mono', monospace; }
   .main-content { padding: 22px 18px; }
   .task-create-grid { grid-template-columns: 1fr; }
 }
+
+/* ── Knowledge Base tree (browse + structure edit) ───────────────────── */
+.kb-tree {
+  background: var(--bg-card);
+  border: var(--hair);
+  border-radius: 8px;
+  padding: 16px 18px;
+  max-width: 960px;
+}
+.kb-tree-toolbar { margin-bottom: 14px; }
+
+.kb-node { margin: 0; }
+
+/* Each topic is a self-contained block */
+.kb-topic {
+  border: var(--hair);
+  border-radius: 6px;
+  background: var(--bg-sink);
+  padding: 10px 14px;
+  margin-bottom: 12px;
+}
+.kb-topic:last-child { margin-bottom: 0; }
+
+.kb-node-header {
+  display: flex;
+  align-items: center;
+  gap: 10px;
+  flex-wrap: wrap;
+  min-height: 30px;
+}
+.kb-node-title { color: var(--text); font-weight: 600; font-size: .94rem; }
+.kb-topic-title {
+  color: var(--accent);
+  font-family: 'Saira Condensed', sans-serif;
+  text-transform: uppercase;
+  letter-spacing: .05em;
+  font-size: 1.05rem;
+  font-weight: 700;
+}
+.kb-category > .kb-node-header > .kb-node-title { color: var(--steel); }
+
+/* Nested children indent under a guide line */
+.kb-children {
+  margin: 6px 0 0 6px;
+  padding-left: 16px;
+  border-left: 2px solid var(--border);
+  display: flex;
+  flex-direction: column;
+  gap: 2px;
+}
+.kb-category { padding: 3px 0; }
+
+.kb-fact {
+  display: flex;
+  align-items: center;
+  gap: 8px;
+  padding: 4px 6px;
+  font-size: .9rem;
+  color: var(--text);
+  border-radius: var(--radius);
+}
+.kb-fact:hover { background: var(--bg-hover); }
+.kb-bullet { color: var(--accent); }
+.kb-fact-text { flex: 1; min-width: 0; word-break: break-word; }
+.kb-row-actions { display: inline-flex; gap: 6px; align-items: center; flex-wrap: wrap; margin-left: auto; }
+/* reveal node actions on hover to keep the tree calm */
+.kb-node-header .kb-row-actions,
+.kb-fact .kb-row-actions { opacity: 0; transition: opacity .12s; }
+.kb-node-header:hover .kb-row-actions,
+.kb-topic:hover > .kb-node-header > .kb-row-actions,
+.kb-fact:hover .kb-row-actions { opacity: 1; }
+.kb-mini-btn {
+  background: transparent;
+  border: var(--hair);
+  color: var(--text-dim);
+  border-radius: var(--radius);
+  padding: 2px 8px;
+  font-size: .78rem;
+  cursor: pointer;
+  transition: .12s;
+  white-space: nowrap;
+}
+.kb-mini-btn:hover { border-color: var(--accent); color: var(--accent); }
+.kb-mini-btn.kb-danger:hover { border-color: var(--danger); color: var(--danger); }
+.kb-mini-btn:disabled { opacity: .5; cursor: default; }
+.kb-inline-form { display: inline-flex; gap: 4px; align-items: center; }
+.kb-inline-form input {
+  background: var(--bg-sink);
+  border: var(--hair);
+  color: var(--text);
+  border-radius: var(--radius);
+  padding: 2px 8px;
+  font-size: .9rem;
+}
+.kb-inline-grow { flex: 1; }
+.kb-inline-grow input { flex: 1; }
+
+/* Project-modal: linked knowledge bases */
+.kb-link-section { border-top: var(--hair); padding-top: 12px; margin-top: 4px; }
+.kb-link-list { list-style: none; padding: 0; margin: 6px 0; display: flex; flex-direction: column; gap: 4px; }
+.kb-link-list li { display: flex; align-items: center; justify-content: space-between; gap: 8px; font-size: .9rem; }
+.kb-link-add { display: flex; gap: 8px; align-items: center; margin-top: 6px; }
+.kb-link-add select { flex: 1; }
+
+/* KB node edit form (name + description) and description display */
+.kb-edit-form { display: flex; flex-direction: column; gap: 6px; width: 100%; max-width: 560px; }
+.kb-edit-form input,
+.kb-edit-form textarea {
+  background: var(--bg-sink);
+  border: var(--hair);
+  color: var(--text);
+  border-radius: var(--radius);
+  padding: 4px 8px;
+  font: inherit;
+  font-size: .9rem;
+}
+.kb-edit-form textarea { resize: vertical; }
+.kb-node-desc {
+  color: var(--text-dim);
+  font-size: .85rem;
+  margin: 4px 0 2px 22px;
+  white-space: pre-wrap;
+  line-height: 1.45;
+}

src/pages/KnowledgeBaseDetailPage.tsx

@@ -0,0 +1,87 @@
+import { useCallback, useEffect, useState } from 'react'
+import { useNavigate, useParams } from 'react-router-dom'
+import api from '@/services/api'
+import type { KnowledgeBase, KnowledgeBaseTree as Tree } from '@/types'
+import KnowledgeBaseTree from '@/components/KnowledgeBaseTree'
+import KnowledgeBaseFormModal from '@/components/KnowledgeBaseFormModal'
+
+export default function KnowledgeBaseDetailPage() {
+  const { id } = useParams<{ id: string }>()
+  const navigate = useNavigate()
+  const [kb, setKb] = useState<KnowledgeBase | null>(null)
+  const [tree, setTree] = useState<Tree | null>(null)
+  const [showEdit, setShowEdit] = useState(false)
+  const [error, setError] = useState('')
+
+  const loadTree = useCallback(async () => {
+    if (!id) return
+    const { data } = await api.get<Tree>(`/knowledge-bases/${id}/tree`)
+    setTree(data)
+  }, [id])
+
+  const loadMeta = useCallback(async () => {
+    if (!id) return
+    const { data } = await api.get<KnowledgeBase>(`/knowledge-bases/${id}`)
+    setKb(data)
+  }, [id])
+
+  useEffect(() => {
+    setError('')
+    Promise.all([loadMeta(), loadTree()]).catch((err) => {
+      setError(err?.response?.data?.detail || 'Failed to load knowledge base')
+    })
+  }, [loadMeta, loadTree])
+
+  const onDelete = async () => {
+    if (!kb) return
+    if (!confirm(`Delete knowledge base "${kb.title}" and all its content?`)) return
+    try {
+      await api.delete(`/knowledge-bases/${kb.id}`)
+      navigate('/knowledge-bases')
+    } catch (err: any) {
+      alert(err?.response?.data?.detail || 'Failed to delete knowledge base')
+    }
+  }
+
+  if (error) {
+    return (
+      <div className="project-detail-page">
+        <button className="btn-back" onClick={() => navigate('/knowledge-bases')}>← Knowledge Bases</button>
+        <p className="empty">{error}</p>
+      </div>
+    )
+  }
+
+  if (!kb) return <div className="loading">Loading…</div>
+
+  return (
+    <div className="project-detail-page">
+      <button className="btn-back" onClick={() => navigate('/knowledge-bases')}>← Knowledge Bases</button>
+
+      <div className="page-header">
+        <h2>
+          📚 {kb.title}
+          {kb.knowledge_base_code && <span className="badge" style={{ marginLeft: 8 }}>{kb.knowledge_base_code}</span>}
+        </h2>
+        <div style={{ display: 'flex', gap: 8 }}>
+          <button className="btn-secondary" onClick={() => setShowEdit(true)}>Edit</button>
+          <button className="btn-danger" onClick={onDelete}>Delete</button>
+        </div>
+      </div>
+
+      {kb.description && <p className="project-desc">{kb.description}</p>}
+
+      <KnowledgeBaseFormModal
+        isOpen={showEdit}
+        knowledgeBase={kb}
+        onClose={() => setShowEdit(false)}
+        onSaved={async () => { await loadMeta() }}
+      />
+
+      <div className="section">
+        <h3>Structure</h3>
+        {tree && <KnowledgeBaseTree tree={tree} onChange={loadTree} />}
+      </div>
+    </div>
+  )
+}

src/pages/KnowledgeBasesPage.tsx

@@ -0,0 +1,51 @@
+import { useState, useEffect } from 'react'
+import { useNavigate } from 'react-router-dom'
+import api from '@/services/api'
+import type { KnowledgeBase } from '@/types'
+import dayjs from 'dayjs'
+import KnowledgeBaseFormModal from '@/components/KnowledgeBaseFormModal'
+
+export default function KnowledgeBasesPage() {
+  const [items, setItems] = useState<KnowledgeBase[]>([])
+  const [showCreate, setShowCreate] = useState(false)
+  const navigate = useNavigate()
+
+  const fetchItems = () => {
+    api.get<KnowledgeBase[]>('/knowledge-bases').then(({ data }) => setItems(data)).catch(() => setItems([]))
+  }
+
+  useEffect(() => { fetchItems() }, [])
+
+  return (
+    <div className="projects-page">
+      <div className="page-header">
+        <h2>📚 Knowledge Bases ({items.length})</h2>
+        <button className="btn-primary" onClick={() => setShowCreate(true)}>+ New</button>
+      </div>
+
+      <KnowledgeBaseFormModal
+        isOpen={showCreate}
+        onClose={() => setShowCreate(false)}
+        onSaved={() => fetchItems()}
+      />
+
+      <div className="project-grid">
+        {items.map((kb) => (
+          <div
+            key={kb.id}
+            className="project-card"
+            onClick={() => navigate(`/knowledge-bases/${kb.knowledge_base_code || kb.id}`)}
+          >
+            <h3>{kb.title}</h3>
+            {kb.knowledge_base_code && <span className="badge" style={{ marginLeft: 8 }}>{kb.knowledge_base_code}</span>}
+            <p className="project-desc">{kb.description || 'No description'}</p>
+            <div className="project-meta">
+              <span>Created {kb.created_at ? dayjs(kb.created_at).format('YYYY-MM-DD') : '—'}</span>
+            </div>
+          </div>
+        ))}
+        {items.length === 0 && <p className="empty">No knowledge bases yet. Create one above.</p>}
+      </div>
+    </div>
+  )
+}

src/pages/RoleEditorPage.tsx

@@ -25,22 +25,22 @@ export default function RoleEditorPage() {
   const [loading, setLoading] = useState(true)
   const [saving, setSaving] = useState(false)
   const [message, setMessage] = useState('')
+  const [messageOk, setMessageOk] = useState(true)
   const [showCreateForm, setShowCreateForm] = useState(false)
   const [newRoleName, setNewRoleName] = useState('')
   const [newRoleDesc, setNewRoleDesc] = useState('')
   const [creating, setCreating] = useState(false)
+  const [templateRoleId, setTemplateRoleId] = useState<string>('')
 
   const isAdmin = user?.is_admin === true
 
-  useEffect(() => {
+  useEffect(() => { fetchData() }, [])
-    fetchData()
-  }, [])
 
   const fetchData = async () => {
     try {
       const [rolesRes, permsRes] = await Promise.all([
         api.get('/roles'),
-        api.get('/roles/permissions')
+        api.get('/roles/permissions'),
       ])
       setRoles(rolesRes.data)
       setPermissions(permsRes.data)
@@ -54,63 +54,81 @@ export default function RoleEditorPage() {
   const handlePermissionToggle = (permId: number) => {
     if (!selectedRole) return
     const newPermIds = selectedRole.permission_ids.includes(permId)
-      ? selectedRole.permission_ids.filter(id => id !== permId)
+      ? selectedRole.permission_ids.filter((id) => id !== permId)
       : [...selectedRole.permission_ids, permId]
     setSelectedRole({ ...selectedRole, permission_ids: newPermIds })
   }
 
+  // Copy a source role's permission_ids over the current selection.
+  // Replaces (not merges) — the user explicitly clicked "use as template".
+  // Local-only: nothing persists until they hit "Save changes".
+  const handleApplyTemplate = () => {
+    if (!selectedRole || !templateRoleId) return
+    const src = roles.find((r) => String(r.id) === templateRoleId)
+    if (!src) return
+    setSelectedRole({ ...selectedRole, permission_ids: [...src.permission_ids] })
+    flashMessage(
+      `Loaded ${src.permission_ids.length} permissions from "${src.name}" — not saved yet`,
+      true,
+    )
+  }
+
+  const flashMessage = (msg: string, ok: boolean) => {
+    setMessage(msg); setMessageOk(ok)
+  }
+
   const handleSave = async () => {
     if (!selectedRole) return
-    setSaving(true)
+    setSaving(true); setMessage('')
-    setMessage('')
     try {
       await api.post(`/roles/${selectedRole.id}/permissions`, {
-        permission_ids: selectedRole.permission_ids
+        permission_ids: selectedRole.permission_ids,
       })
-      setMessage('Saved successfully!')
+      flashMessage('Saved successfully', true)
       fetchData()
     } catch (err: any) {
-      setMessage(err.response?.data?.detail || 'Failed to save')
+      flashMessage(err.response?.data?.detail || 'Failed to save', false)
     } finally {
       setSaving(false)
     }
   }
 
   const handleDeleteRole = async () => {
-    if (!selectedRole || !confirm(`Are you sure you want to delete the "${selectedRole.name}" role?`)) return
+    if (!selectedRole) return
-    setSaving(true)
+    if (!confirm(`Delete the "${selectedRole.name}" role?`)) return
-    setMessage('')
+    setSaving(true); setMessage('')
     try {
       await api.delete(`/roles/${selectedRole.id}`)
-      setMessage('Role deleted successfully!')
+      flashMessage('Role deleted', true)
       setSelectedRole(null)
       fetchData()
     } catch (err: any) {
-      setMessage(err.response?.data?.detail || 'Failed to delete role')
+      flashMessage(err.response?.data?.detail || 'Failed to delete role', false)
     } finally {
       setSaving(false)
     }
   }
 
-  const canDeleteRole = selectedRole && !['admin', 'guest', 'account-manager'].includes(selectedRole.name) && isAdmin
+  const canDeleteRole =
+    selectedRole &&
+    !['admin', 'guest', 'account-manager'].includes(selectedRole.name) &&
+    isAdmin
 
   const handleCreateRole = async () => {
     if (!newRoleName.trim()) return
-    setCreating(true)
+    setCreating(true); setMessage('')
-    setMessage('')
     try {
       await api.post('/roles', {
         name: newRoleName.trim(),
         description: newRoleDesc.trim() || null,
-        is_global: false
+        is_global: false,
       })
-      setMessage('Role created successfully!')
+      flashMessage('Role created', true)
       setShowCreateForm(false)
-      setNewRoleName('')
+      setNewRoleName(''); setNewRoleDesc('')
-      setNewRoleDesc('')
       fetchData()
     } catch (err: any) {
-      setMessage(err.response?.data?.detail || 'Failed to create role')
+      flashMessage(err.response?.data?.detail || 'Failed to create role', false)
     } finally {
       setCreating(false)
     }
@@ -122,195 +140,156 @@ export default function RoleEditorPage() {
     return acc
   }, {} as Record<string, Permission[]>)
 
-  if (loading) return <div className="p-4">Loading...</div>
+  if (loading) return <div className="loading">Loading roles…</div>
 
   return (
-    <div className="role-editor-page" style={{ padding: '20px' }}>
+    <div className="role-editor-page">
       <h2>🔐 Role Editor</h2>
-      <p style={{ color: '#888', marginBottom: '20px' }}>
+      <p className="lead">Configure permissions for each role. Only admins can edit roles.</p>
-        Configure permissions for each role. Only admins can edit roles.
-      </p>
 
       {isAdmin && !showCreateForm && (
-        <button
+        <button className="btn-primary" onClick={() => setShowCreateForm(true)}
-          onClick={() => setShowCreateForm(true)}
+                style={{ marginBottom: 18 }}>
-          className="btn-primary"
-          style={{ marginBottom: '20px' }}
-        >
           + Create New Role
         </button>
       )}
 
       {showCreateForm && (
-        <div style={{ 
+        <div className="role-editor-create">
-          border: '2px solid #007bff', 
+          <h3>Create new role</h3>
-          borderRadius: '8px', 
+          <label>Role name *</label>
-          padding: '20px',
+          <input
-          marginBottom: '20px',
+            type="text"
-          backgroundColor: '#f8f9fa'
+            value={newRoleName}
-        }}>
+            onChange={(e) => setNewRoleName(e.target.value)}
-          <h3 style={{ marginTop: 0 }}>Create New Role</h3>
+            placeholder="e.g. developer, manager"
-          <div style={{ display: 'flex', flexDirection: 'column', gap: '12px', maxWidth: '400px' }}>
+          />
-            <div>
+          <label>Description</label>
-              <label style={{ display: 'block', marginBottom: '4px', fontWeight: 500 }}>
+          <input
-                Role Name *
+            type="text"
-              </label>
+            value={newRoleDesc}
-              <input
+            onChange={(e) => setNewRoleDesc(e.target.value)}
-                type="text"
+            placeholder="(optional) short description"
-                value={newRoleName}
+          />
-                onChange={(e) => setNewRoleName(e.target.value)}
+          <div className="actions">
-                placeholder="e.g., developer, manager"
+            <button className="btn-primary" disabled={creating || !newRoleName.trim()}
-                style={{ width: '100%', padding: '8px', borderRadius: '4px', border: '1px solid #ddd' }}
+                    onClick={handleCreateRole}>
-              />
+              {creating ? 'Creating…' : 'Create'}
-            </div>
+            </button>
-            <div>
+            <button className="btn-secondary"
-              <label style={{ display: 'block', marginBottom: '4px', fontWeight: 500 }}>
+                    onClick={() => { setShowCreateForm(false); setNewRoleName(''); setNewRoleDesc('') }}>
-                Description
+              Cancel
-              </label>
+            </button>
-              <input
-                type="text"
-                value={newRoleDesc}
-                onChange={(e) => setNewRoleDesc(e.target.value)}
-                placeholder="Role description"
-                style={{ width: '100%', padding: '8px', borderRadius: '4px', border: '1px solid #ddd' }}
-              />
-            </div>
-            <div style={{ display: 'flex', gap: '8px' }}>
-              <button
-                onClick={handleCreateRole}
-                disabled={creating || !newRoleName.trim()}
-                className="btn-primary"
-              >
-                {creating ? 'Creating...' : 'Create'}
-              </button>
-              <button
-                onClick={() => {
-                  setShowCreateForm(false)
-                  setNewRoleName('')
-                  setNewRoleDesc('')
-                }}
-                className="btn-secondary"
-                style={{ padding: '8px 16px', borderRadius: '4px', border: '1px solid #ddd', background: '#fff' }}
-              >
-                Cancel
-              </button>
-            </div>
           </div>
         </div>
       )}
 
       {message && (
-        <div style={{ 
+        <div className={`role-editor-banner ${messageOk ? 'ok' : 'err'}`}>
-          padding: '10px', 
+          <span>{messageOk ? '✓' : '✗'}</span>
-          marginBottom: '20px',
+          <span>{message}</span>
-          backgroundColor: message.includes('success') ? '#d4edda' : '#f8d7da',
-          borderRadius: '4px'
-        }}>
-          {message}
         </div>
       )}
 
-      <div style={{ display: 'flex', gap: '20px' }}>
+      <div className="role-editor-grid">
-        {/* Role List */}
+        {/* Roles sidebar */}
-        <div style={{ width: '250px' }}>
+        <aside className="role-editor-sidebar">
           <h3>Roles</h3>
-          <div style={{ display: 'flex', flexDirection: 'column', gap: '8px' }}>
+          <div className="role-list">
-            {roles.map(role => (
+            {roles.map((role) => {
-              <div
+              const active = selectedRole?.id === role.id
-                key={role.id}
+              return (
-                onClick={() => setSelectedRole({ ...role })}
+                <div
-                style={{
+                  key={role.id}
-                  padding: '12px',
+                  className={`role-card${active ? ' active' : ''}`}
-                  border: selectedRole?.id === role.id ? '2px solid #007bff' : '1px solid #ddd',
+                  onClick={() => setSelectedRole({ ...role })}
-                  borderRadius: '6px',
+                >
-                  cursor: 'pointer',
+                  <div className="role-name">
-                  backgroundColor: selectedRole?.id === role.id ? '#f0f8ff' : 'white'
+                    {role.name}
-                }}
+                    {role.is_global && <span className="role-badge-global" title="global">★</span>}
-              >
+                  </div>
-                <strong>{role.name}</strong>
+                  {role.description && <div className="role-desc">{role.description}</div>}
-                {role.is_global && <span style={{ fontSize: '12px', marginLeft: '8px', color: '#ff6b6b' }}>🌟</span>}
+                  <div className="role-meta">{role.permission_ids.length} permissions</div>
-                <div style={{ fontSize: '12px', color: '#666' }}>{role.description}</div>
-                <div style={{ fontSize: '11px', color: '#999', marginTop: '4px' }}>
-                  {role.permission_ids.length} permissions
                 </div>
-              </div>
+              )
-            ))}
+            })}
           </div>
-        </div>
+        </aside>
 
-        {/* Permission Editor */}
+        {/* Permission editor */}
-        <div style={{ flex: 1 }}>
+        <section className="role-editor-detail">
           {selectedRole ? (
             <>
-              <h3>Permissions for: {selectedRole.name}</h3>
+              <h3>Permissions for <span className="name">{selectedRole.name}</span></h3>
-              <div style={{ display: 'flex', flexDirection: 'column', gap: '20px' }}>
+
-                {Object.entries(groupedPermissions).map(([category, perms]) => (
+              {isAdmin && roles.length > 1 && (
-                  <div key={category} style={{ 
+                <div className="role-editor-template">
-                    border: '1px solid #eee', 
+                  <label htmlFor="tpl-select">Copy from template:</label>
-                    borderRadius: '8px', 
+                  <select
-                    padding: '12px' 
+                    id="tpl-select"
-                  }}>
+                    value={templateRoleId}
-                    <h4 style={{ margin: '0 0 10px 0', textTransform: 'capitalize' }}>
+                    onChange={(e) => setTemplateRoleId(e.target.value)}
-                      {category}
+                  >
-                    </h4>
+                    <option value="">— select a role —</option>
-                    <div style={{ display: 'grid', gridTemplateColumns: 'repeat(auto-fill, minmax(200px, 1fr))', gap: '8px' }}>
+                    {roles
-                      {perms.map(perm => (
+                      .filter((r) => r.id !== selectedRole.id)
-                        <label key={perm.id} style={{ 
+                      .map((r) => (
-                          display: 'flex', 
+                        <option key={r.id} value={r.id}>
-                          alignItems: 'center', 
+                          {r.name} ({r.permission_ids.length} perms)
-                          gap: '8px',
+                        </option>
-                          cursor: 'pointer',
+                      ))}
-                          padding: '6px',
+                  </select>
-                          borderRadius: '4px',
+                  <button
-                          backgroundColor: selectedRole.permission_ids.includes(perm.id) ? '#e8f5e9' : 'transparent'
+                    className="btn-secondary"
-                        }}>
+                    disabled={!templateRoleId}
+                    onClick={handleApplyTemplate}
+                    title="Replace current checkboxes with the template role's permission set (local; not saved until you click Save changes)"
+                  >
+                    Use as template
+                  </button>
+                </div>
+              )}
+
+              {Object.entries(groupedPermissions).map(([category, perms]) => (
+                <div key={category} className="perm-group">
+                  <div className="perm-group-header">{category}</div>
+                  <div className="perm-grid">
+                    {perms.map((perm) => {
+                      const checked = selectedRole.permission_ids.includes(perm.id)
+                      return (
+                        <label key={perm.id} className={`perm-item${checked ? ' checked' : ''}`}>
                           <input
                             type="checkbox"
-                            checked={selectedRole.permission_ids.includes(perm.id)}
+                            checked={checked}
                             onChange={() => handlePermissionToggle(perm.id)}
                           />
-                          <div>
+                          <div className="perm-body">
-                            <div style={{ fontWeight: 500 }}>{perm.name}</div>
+                            <div className="perm-name">{perm.name}</div>
-                            <div style={{ fontSize: '11px', color: '#666' }}>{perm.description}</div>
+                            <div className="perm-desc">{perm.description}</div>
                           </div>
                         </label>
-                      ))}
+                      )
-                    </div>
+                    })}
                   </div>
-                ))}
+                </div>
-              </div>
+              ))}
-              <button
+              <div className="role-editor-actions">
-                onClick={handleSave}
+                <button className="btn-primary" disabled={saving} onClick={handleSave}>
-                disabled={saving}
+                  {saving ? 'Saving…' : 'Save changes'}
-                className="btn-primary"
-                style={{ marginTop: '20px', marginRight: '10px' }}
-              >
-                {saving ? 'Saving...' : 'Save Changes'}
-              </button>
-              {canDeleteRole && (
-                <button
-                  onClick={handleDeleteRole}
-                  disabled={saving}
-                  style={{ 
-                    marginTop: '20px', 
-                    padding: '10px 20px',
-                    borderRadius: '4px',
-                    border: '1px solid #dc3545',
-                    backgroundColor: '#dc3545',
-                    color: 'white',
-                    cursor: 'pointer'
-                  }}
-                >
-                  Delete Role
                 </button>
-              )}
+                {canDeleteRole && (
+                  <button className="btn-danger" disabled={saving} onClick={handleDeleteRole}>
+                    Delete role
+                  </button>
+                )}
+              </div>
             </>
           ) : (
-            <div style={{ color: '#888', textAlign: 'center', marginTop: '40px' }}>
+            <div className="role-editor-empty">
-              Select a role to edit its permissions
+              ◆ Select a role on the left to edit its permissions
             </div>
           )}
-        </div>
+        </section>
       </div>
     </div>
   )

src/pages/SetupWizardPage.tsx

@@ -1,295 +0,0 @@
-import { useState } from 'react'
-import axios from 'axios'
-import { getRuntimeOidcOnly, getLogoUrl } from '@/runtime'
-
-interface Props {
-  initialWizardPort: number | null
-  onComplete: () => void
-}
-
-interface SetupForm {
-  admin_username: string
-  admin_password: string
-  admin_email: string
-  admin_full_name: string
-  backend_base_url: string
-  project_name: string
-  project_description: string
-  oidc_enabled: boolean
-  oidc_issuer: string
-  oidc_client_id: string
-  oidc_client_secret: string
-  oidc_redirect_uri: string
-  oidc_scopes: string
-  oidc_post_login_redirect: string
-  oidc_admin_role: string
-}
-
-const oidcOnly = getRuntimeOidcOnly() === true
-const STEPS = ['Wizard', 'Admin', 'OIDC', 'Backend', 'Finish']
-
-export default function SetupWizardPage({ initialWizardPort, onComplete }: Props) {
-  const [step, setStep] = useState(0)
-  const [error, setError] = useState('')
-  const [saving, setSaving] = useState(false)
-  const [connecting, setConnecting] = useState(false)
-  const [wizardPortInput, setWizardPortInput] = useState<string>(
-    initialWizardPort ? String(initialWizardPort) : ''
-  )
-  const [wizardBase, setWizardBase] = useState<string>('')
-  const [form, setForm] = useState<SetupForm>({
-    admin_username: 'admin',
-    admin_password: '',
-    admin_email: '',
-    admin_full_name: 'Admin',
-    backend_base_url: '',
-    project_name: '',
-    project_description: '',
-    oidc_enabled: oidcOnly,
-    oidc_issuer: '',
-    oidc_client_id: '',
-    oidc_client_secret: '',
-    oidc_redirect_uri: '',
-    oidc_scopes: 'openid email profile',
-    oidc_post_login_redirect: '',
-    oidc_admin_role: 'admin',
-  })
-
-  const set = (key: keyof SetupForm, value: string | number | boolean) =>
-    setForm((f) => ({ ...f, [key]: value }))
-
-  const checkWizard = async () => {
-    setError('')
-    const port = Number(wizardPortInput)
-    if (!port || port <= 0 || port > 65535) {
-      setError('Please enter a valid wizard port (1-65535).')
-      return
-    }
-    const base = `http://127.0.0.1:${port}`
-    setConnecting(true)
-    try {
-      await axios.get(`${base}/health`, { timeout: 5000 })
-      setWizardBase(base)
-      localStorage.setItem('HF_WIZARD_PORT', String(port))
-      setStep(1)
-    } catch {
-      setError(`Unable to connect to AbstractWizard at ${base}.\nMake sure the SSH tunnel is up:\nssh -L ${port}:127.0.0.1:${port} user@server`)
-    } finally {
-      setConnecting(false)
-    }
-  }
-
-  const validateOidc = (): string => {
-    if (!oidcOnly && !form.oidc_enabled) return ''
-    if (!form.oidc_issuer.trim()) return 'OIDC issuer is required'
-    if (!form.oidc_client_id.trim()) return 'OIDC client ID is required'
-    if (!form.oidc_client_secret.trim()) return 'OIDC client secret is required'
-    if (!form.oidc_redirect_uri.trim()) return 'OIDC redirect/callback URL is required'
-    if (oidcOnly && !form.oidc_admin_role.trim()) {
-      return 'In OIDC-only mode the admin role is required so the admin can bootstrap'
-    }
-    return ''
-  }
-
-  const saveConfig = async () => {
-    setError('')
-    setSaving(true)
-    try {
-      const includeOidc = oidcOnly || form.oidc_enabled
-      const config: Record<string, any> = {
-        initialized: true,
-        admin: {
-          username: form.admin_username,
-          password: form.admin_password,
-          email: form.admin_email,
-          full_name: form.admin_full_name,
-        },
-        backend_url: form.backend_base_url || undefined,
-      }
-      if (includeOidc) {
-        config.oidc = {
-          enabled: true,
-          issuer: form.oidc_issuer.trim(),
-          client_id: form.oidc_client_id.trim(),
-          client_secret: form.oidc_client_secret,
-          redirect_uri: form.oidc_redirect_uri.trim(),
-          scopes: form.oidc_scopes.trim() || 'openid email profile',
-          post_login_redirect: form.oidc_post_login_redirect.trim() || undefined,
-          admin_role: form.oidc_admin_role.trim() || 'admin',
-        }
-      }
-
-      await axios.put(`${wizardBase}/api/v1/config/harborforge.json`, config, {
-        headers: { 'Content-Type': 'application/json' },
-        timeout: 5000,
-      })
-
-      if (form.backend_base_url) {
-        localStorage.setItem('HF_BACKEND_BASE_URL', form.backend_base_url)
-      }
-
-      setStep(4)
-    } catch (err: any) {
-      setError(`Failed to save configuration: ${err.message}`)
-    } finally {
-      setSaving(false)
-    }
-  }
-
-  return (
-    <div className="setup-wizard">
-      <div className="setup-container">
-        <div className="setup-header">
-          <h1><img src={getLogoUrl()} className="brand-logo" alt="" /> HarborForge Setup Wizard</h1>
-          <div className="setup-steps">
-            {STEPS.map((s, i) => (
-              <span key={i} className={`setup-step ${i === step ? 'active' : i < step ? 'done' : ''}`}>
-                {i < step ? '✓' : i + 1}. {s}
-              </span>
-            ))}
-          </div>
-        </div>
-
-        {error && <div className="setup-error">{error}</div>}
-
-        {/* Step 0: Wizard connection */}
-        {step === 0 && (
-          <div className="setup-step-content">
-            <h2>Connect to AbstractWizard</h2>
-            <p className="text-dim">Enter the local port that forwards to AbstractWizard, then test the connection.</p>
-            <div className="setup-info">
-              <p>⚠️ AbstractWizard is reached over an SSH tunnel. Forward the port first:</p>
-              <code>ssh -L &lt;wizard_port&gt;:127.0.0.1:&lt;wizard_port&gt; user@your-server</code>
-            </div>
-            <div className="setup-form">
-              <label>
-                Wizard port
-                <input
-                  type="number"
-                  value={wizardPortInput}
-                  min={1}
-                  max={65535}
-                  onChange={(e) => setWizardPortInput(e.target.value)}
-                  placeholder="e.g. 8080"
-                />
-              </label>
-            </div>
-            <div className="setup-nav">
-              <button className="btn-primary" onClick={checkWizard} disabled={connecting}>
-                {connecting ? 'Connecting...' : 'Test connection & continue'}
-              </button>
-            </div>
-          </div>
-        )}
-
-        {/* Step 1: Admin */}
-        {step === 1 && (
-          <div className="setup-step-content">
-            <h2>Admin account</h2>
-            <p className="text-dim">Create the first admin user</p>
-            <div className="setup-form">
-              <label>Username <input value={form.admin_username} onChange={(e) => set('admin_username', e.target.value)} required /></label>
-              <label>Password <input type="password" value={form.admin_password} onChange={(e) => set('admin_password', e.target.value)} required placeholder="Set admin password" /></label>
-              <label>Email <input type="email" value={form.admin_email} onChange={(e) => set('admin_email', e.target.value)} placeholder="admin@example.com" /></label>
-              <label>Full name <input value={form.admin_full_name} onChange={(e) => set('admin_full_name', e.target.value)} /></label>
-            </div>
-            {oidcOnly && (
-              <p className="setup-hint">OIDC-only deployment: this admin will sign in via OIDC; the password is kept only as a fallback identity record.</p>
-            )}
-            <div className="setup-nav">
-              <button className="btn-back" onClick={() => setStep(0)}>Back</button>
-              <button className="btn-primary" onClick={() => {
-                if (!form.admin_password) { setError('Please set an admin password'); return }
-                setError('')
-                setStep(2)
-              }}>Next</button>
-            </div>
-          </div>
-        )}
-
-        {/* Step 2: OIDC */}
-        {step === 2 && (
-          <div className="setup-step-content">
-            <h2>OIDC {oidcOnly ? '(required)' : '(optional)'}</h2>
-            <p className="text-dim">
-              {oidcOnly
-                ? 'This deployment runs in OIDC-only mode — configure the identity provider now (the admin cannot reach this page again without it).'
-                : 'Optionally configure single sign-on. You can also do this later from the admin OIDC settings page.'}
-            </p>
-            {!oidcOnly && (
-              <label className="filter-check" style={{ marginBottom: 12 }}>
-                <input type="checkbox" checked={form.oidc_enabled} onChange={(e) => set('oidc_enabled', e.target.checked)} />
-                Enable OIDC sign-in
-              </label>
-            )}
-            {(oidcOnly || form.oidc_enabled) && (
-              <div className="setup-form">
-                <label>Issuer (OIDC source) <input value={form.oidc_issuer} onChange={(e) => set('oidc_issuer', e.target.value)} placeholder="https://idp.example.com/realms/hf" /></label>
-                <label>Client ID <input value={form.oidc_client_id} onChange={(e) => set('oidc_client_id', e.target.value)} /></label>
-                <label>Client Secret <input type="password" value={form.oidc_client_secret} onChange={(e) => set('oidc_client_secret', e.target.value)} /></label>
-                <label>Redirect / Callback URL <input value={form.oidc_redirect_uri} onChange={(e) => set('oidc_redirect_uri', e.target.value)} placeholder="https://hf-api.example.com/auth/oidc/callback" /></label>
-                <label>Scopes <input value={form.oidc_scopes} onChange={(e) => set('oidc_scopes', e.target.value)} /></label>
-                <label>Post-login redirect (frontend) <input value={form.oidc_post_login_redirect} onChange={(e) => set('oidc_post_login_redirect', e.target.value)} placeholder="https://hf.example.com/oidc/callback" /></label>
-                <label>Admin role (bootstrap)
-                  <input value={form.oidc_admin_role} onChange={(e) => set('oidc_admin_role', e.target.value)} placeholder="admin" />
-                </label>
-                <p className="setup-hint">Register the Redirect / Callback URL above at your identity provider.</p>
-                {oidcOnly && (
-                  <p className="setup-hint">
-                    OIDC-only: before any admin is linked, the first IdP user whose token carries the
-                    role above auto-connects to the HarborForge admin account. It then disables itself.
-                  </p>
-                )}
-              </div>
-            )}
-            <div className="setup-nav">
-              <button className="btn-back" onClick={() => setStep(1)}>Back</button>
-              <button className="btn-primary" onClick={() => {
-                const e = validateOidc()
-                if (e) { setError(e); return }
-                setError('')
-                setStep(3)
-              }}>Next</button>
-            </div>
-          </div>
-        )}
-
-        {/* Step 3: Backend */}
-        {step === 3 && (
-          <div className="setup-step-content">
-            <h2>Backend URL</h2>
-            <p className="text-dim">Configure the HarborForge backend API URL (leave blank to use the frontend default).</p>
-            <div className="setup-form">
-              <label>Backend Base URL <input value={form.backend_base_url} onChange={(e) => set('backend_base_url', e.target.value)} placeholder="http://backend:8000" /></label>
-            </div>
-            <div className="setup-nav">
-              <button className="btn-back" onClick={() => setStep(2)}>Back</button>
-              <button className="btn-primary" onClick={saveConfig} disabled={saving}>
-                {saving ? 'Saving...' : 'Finish setup'}
-              </button>
-            </div>
-          </div>
-        )}
-
-        {/* Step 4: Done */}
-        {step === 4 && (
-          <div className="setup-step-content">
-            <div className="setup-done">
-              <h2>✅ Setup complete!</h2>
-              <p>Configuration saved to AbstractWizard.</p>
-              <div className="setup-info">
-                <p>Restart services on the server:</p>
-                <code>docker compose restart</code>
-                <p style={{ marginTop: '1rem' }}>After the backend starts, refresh this page to go to login.</p>
-                <p>Admin account: <strong>{form.admin_username}</strong></p>
-              </div>
-              <button className="btn-primary" onClick={onComplete}>
-                Refresh to check
-              </button>
-            </div>
-          </div>
-        )}
-      </div>
-    </div>
-  )
-}

src/services/api.ts

@@ -1,15 +1,15 @@
 import axios from 'axios'
 
-const getApiBase = (): string | undefined => {
+// Backend URL is the build-time VITE_HF_BACKEND_BASE_URL baked into the
-  return localStorage.getItem('HF_BACKEND_BASE_URL') ?? undefined
+// bundle by docker build --build-arg. Empty → axios uses same-origin
-}
+// (only works in dev with the Vite proxy).
+const API_BASE = import.meta.env.VITE_HF_BACKEND_BASE_URL || undefined
 
 const api = axios.create({
-  baseURL: getApiBase(),
+  baseURL: API_BASE,
 })
 
 api.interceptors.request.use((config) => {
-  config.baseURL = getApiBase()
   const token = localStorage.getItem('token')
   if (token) {
     config.headers.Authorization = `Bearer ${token}`

src/test/setup.ts

@@ -1,11 +1,17 @@
 import '@testing-library/jest-dom'
 import { vi } from 'vitest'
 
+// VITE_HF_BACKEND_BASE_URL is the build-time backend URL; in tests we
+// stub it via import.meta.env (api.ts + useAuthConfig + App read it).
+;(import.meta as any).env = {
+  ...(import.meta as any).env,
+  VITE_HF_BACKEND_BASE_URL: 'http://localhost:8000',
+}
+
 // Mock localStorage
 const localStorageMock = {
   getItem: vi.fn((key: string) => {
     if (key === 'token') return 'mock-token'
-    if (key === 'HF_BACKEND_BASE_URL') return 'http://localhost:8000'
     return null
   }),
   setItem: vi.fn(),

src/types/index.ts

@@ -26,6 +26,51 @@ export interface Project {
   created_at: string
 }
 
+export interface KnowledgeBase {
+  id: number
+  knowledge_base_code: string | null
+  title: string
+  description: string | null
+  created_by: number
+  created_at: string | null
+  last_updated_at: string | null
+}
+
+export interface KnowledgeFact {
+  id: number
+  category_id: number | null
+  topic_id: number
+  fact: string
+  last_updated_at: string | null
+}
+
+export interface KnowledgeCategoryNode {
+  id: number
+  name: string
+  parent: number | null
+  topic_id: number
+  description: string | null
+  categories: KnowledgeCategoryNode[]
+  facts: KnowledgeFact[]
+}
+
+export interface KnowledgeTopicNode {
+  id: number
+  topic: string
+  knowledge_base_id: number
+  description: string | null
+  categories: KnowledgeCategoryNode[]
+  facts: KnowledgeFact[]
+}
+
+export interface KnowledgeBaseTree {
+  id: number
+  knowledge_base_code: string | null
+  title: string
+  description: string | null
+  topics: KnowledgeTopicNode[]
+}
+
 export interface ProjectMember {
   id: number
   user_id: number

src/vite-env.d.ts

@@ -2,6 +2,14 @@
 
 interface ImportMetaEnv {
   readonly VITE_API_BASE: string
+  /**
+   * Backend base URL baked in at build time (e.g.
+   * https://hf-api.example.com). Frontend uses this for all API calls.
+   * Passed to the Dockerfile as an ARG and forwarded to `npm run build`.
+   * Empty string falls back to same-origin (only useful in dev with the
+   * Vite proxy).
+   */
+  readonly VITE_HF_BACKEND_BASE_URL: string
 }
 
 interface ImportMeta {