feat(console): an administrator's first-run checklist on Home replaces the currency and time zone dialog - #30552

Requested by Sales · project thread

Fixes #30206

Clause-②: yes (widening) — new console i18n keys console.firstRunChecklist.* and console.settingsView.invalidFormat / .invalidFormatHelp / .invalidFormatPick (all ten packs); the retired console.workspaceTimezonePrompt.* keys had no reader outside the removed dialog
Metadata-protocol: none

维护者速读

• 改了什么：管理员首次打开首页（/home）时，顶部出现一张「完成初始设置」清单，原来一进系统就弹出的时区/货币对话框删掉了；在默认国家里输入「中国」现在能保存为 CN，格式错误的提示也改成读者语言。
• 为什么改：维护者原话「目前启动时就弹出选择货币很奇怪」；新部署的管理员不知道先设什么，默认语言、国家和货币还互相矛盾。
• 风险与回滚：只动控制台和语言包，不动服务端；清单只读设置，只有点「确认」才写，写的就是设置页同一个 PUT。回滚即 revert 本 PR，弹窗回来。
• 先看：ui/apps/console/src/pages/settings/FirstRunChecklist.tsx（读取与只在确认时写入）、firstRunChecklistLogic.ts（每行何时算完成）、SettingsField.tsx 的 optionByName（输入名称匹配代码）。
• 两分钟验证：os dev --fresh 后用管理员登录，打开 /home，顶部应有清单；中文浏览器下点「默认语言和国家/地区」的「设置」，在国家框输入「中国」后点「确认」，应提示已保存、该行打勾，Setup 页不再弹任何对话框。
• 需要你做的：无，席位落地。

What changes

The dialog is gone; Home carries an administrator's first-run checklist. WorkspaceTimezonePrompt.tsx and its mount in AppContent.tsx are removed. FirstRunChecklist is drawn at the top of Home by the console's Home route (App.tsx), above the page's own sections, inside the ConsolePermissionsScope that route already sits under. Its logic, firstRunChecklistLogic.ts, is the dialog's logic widened to every row (git shows it as a delete and an add; it keeps browserTimeZone, browserLanguage, browserCurrency, isAdmissibleValue and mayWrite).

Proposed row list (the card leaves it to the PR). Each row's state is read from the real setting every time it is drawn, never from a click:

A done row shows its value; a row whose state cannot be read (mail unreadable, members unreadable) is left out rather than shown as not done. Once every row shown is done the checklist draws nothing, and it comes back on its own if a setting is unset again.

The rulings the dialog was built on still hold (objectui#11693 B2, #28872). The browser only pre-fills rows 2 to 4. Nothing is written until the row's Confirm, which is saveSettingsNamespace('localization', changes), the Settings page's own PUT /api/settings/localization. Cancel writes nothing. An unset currency stays on the list until it is set. Language, country and currency are one offer read from the browser's first language (zh-CN → 中文, CN, CNY), so they cannot contradict each other.

Who sees it. A session that may write localization (its manifest's writePermission, failing closed on an unreported answer). A member sees nothing and sends one GET /api/settings (the list, which never refuses) and no namespace read. The close button hides it for that administrator, in that workspace, on that device (localStorage os:first-run-checklist:ORG:USER); nothing is written to the server and no row changes. Its reads wait for the console's first paint (whenBootPainted, objectui#12980), as the dialog's did.

「中国」 in 默认国家. The refusal started in the console: DomainCombobox swapped typed text for a code only when it equalled the option label (「中国 (CN)」) or the code, so 「中国」 went to the server as typed, and the server's ^[A-Za-z]{2}$ pattern refused it with invalid_format in English. Now a typed name that exactly one option carries (the label without its own code beside it, trimmed, case-insensitive) is committed as that option's code; any other text is still committed verbatim and the server stays the judge. A refusal with code: 'invalid_format' is now drawn in the console's words and the reader's language, naming the setting by the label its row draws (settingsFieldRefusals.ts): "Choose a value for Default country from the list." for a picker, and "Gateway model is not in a valid format. Use provider/model." for a typed field, repeating the field's own help line because the refusal takes its place. Every other refusal code keeps the server's sentence. The server's pattern check is unchanged (⛔ packages/**).

Files beyond the claim's named surface, each a reader of what was removed: ui/apps/console/src/pages/auth/SetupPage.tsx (imports browserTimeZone from the renamed module), ui/apps/console/src/loadLocales.ts (comment), the four console tests that mocked the dialog's module, ui/e2e/live/global-setup.ts (it waited up to 60 s for the dialog's testid before every live run; the checklist is not modal, so that step is removed), docs/qa/platform-checklist/RUNNER.md (told QA runners to dismiss the dialog), and three i18n pins that named the dialog's keys or file (machineLocaleCensus-9909, console-copy-system-noun-12956) or count the de pack's quotes (de-quote-pairing-3876, 104 → 106 for two new „…“ pairs).

Tests

• ui/apps/console/src/pages/settings/__tests__/FirstRunChecklist.test.tsx (10), on the real api.ts against a stubbed fetch and the real MePermissionsProvider: a member reads the list only and sees nothing; no capability answer or an empty one sends no request; a fresh workspace shows all six rows not done with their links and writes nothing; rows the server reports as set are done and a fully set workspace draws nothing; Set pre-fills the currency from the browser, nothing is written until Confirm, and Confirm sends exactly one PUT with { currency: 'CNY' }; language and country are one offer ({ locale: 'zh-CN', default_country: 'CN' }); Cancel and the close button write nothing and the hide survives a remount with no request; an invalid_format refusal is shown in the console's words and the row stays not done; zh copy; no read while the boot splash is up.
• firstRunChecklistLogic.test.ts (11): localeOffer, browserRegion, the admissible pre-fill, isKeySet, row done, isMailConfigured, isOrganizationNamed, hasInvitedColleagues, the dismissal record and unreadable storage.
• SettingsField.domainOptionTypedName-30206.test.tsx (5): 「中国」 commits CN; trimmed and case-insensitive with full-width brackets; a name two options carry and part of a name stay verbatim; a currency name commits its code.
• settingsFieldRefusals-30206.test.ts (5), against the shipped en templates.
• Updated: SettingsView.field-errors, SettingsView.crypto-unavailable and SettingsView.refusalToast-13146 asserted the server's English sentence for invalid_format; they now assert the console's sentence (and that the server's is gone).
• Removed with the dialog: WorkspaceTimezonePrompt.test.tsx, .currency-28872.test.tsx, .afterBootPaint-12980.test.tsx; their pins (only Confirm writes, the browser zone pre-fill, the currency arm, the boot-paint wait, members never asked) are carried by the new files above.

Acceptance notes

• Placement. Home is the environment's own home (ObjectUI ADR-0075) and every deployment that declares no landing app opens there after sign-in. A deployment whose app declares isDefault lands its administrator in that app, and the checklist is then seen on the next visit to Home, not at sign-in. The card allowed "the home page or the top of Setup"; drawing it at the top of Setup too would be an app-shell change and is left for the seat to call.
• DEFAULT_ORGANIZATION_NAME is a copy of plugin-auth's literal (ensure-default-organization.ts). No test holds the two equal: a ui/ test reading packages/** source would be a cross-package input outside both CI rosters. A rename on the server side would make row 1 read "named" for an organization nobody named.
• Refusal codes other than invalid_format (for example value_domain) still carry the server's English sentence; localizing FieldError.message is a server concern and out of this card.
• The dialog's old "asked once" record (os:workspace-timezone-prompt:*) is no longer read; it stays in browsers that have it, harmlessly.
• packages/plugins/plugin-auth/src/dev-admin-seed-workspace-timezone.test.ts still describes the dialog in its doc comment (the condition it pins is still the one row 3 reads). Left alone: ⛔ packages/** on this card.
• objectui#11693 is outside this session's repository scope; its ruling B2 is quoted from the code comments that carried it.
• The branch name is the card thread's platform-assigned claude/project-thread-5murn7, not claude/issue-30206-….
• First-run flow: small frictions a new deployment's first people meet #30125 rows 1 and 3 are covered here, as the card says.

Verification

All readings on head 9914c31f, unless a line names another.

🤖 Generated with Claude Code

https://claude.ai/code/session_01L6bhgVwQZbHRRM9CaXeKif