From 0e29567a6d969386495720a085cddd931cb87148 Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 14 Oct 2026 21:19:03 +0000
Subject: [PATCH 1/2] fix(web): remove doubled spacing in admin auth cards

Tailwind v4 space-y adds margin on top of the cards' own header padding
and an extra mt-4, so the Authentication, Helm-seeded OIDC and role
mapping cards ran 16-20px taller per gap than design frame uMiwd. With
pixelmatch 8 (PR 648) that pushes uMiwd over its 4% visual-diff limit.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Claude <noreply@anthropic.com>
---
 web/src/routes/AdminSettings.tsx | 16 ++++++++--------
 1 file changed, 8 insertions(+), 8 deletions(-)

diff --git a/web/src/routes/AdminSettings.tsx b/web/src/routes/AdminSettings.tsx
index b1d7d4f64..3fb17bbd2 100644
--- a/web/src/routes/AdminSettings.tsx
+++ b/web/src/routes/AdminSettings.tsx
@@ -474,7 +474,7 @@ function AuthSection({ initial, general, installTimeSettings }: { initial?: Auth
   return (
     <div className="space-y-6">
       <SectionCard
-        className="gap-0 p-0"
+        className="gap-0 space-y-0 p-0"
         title="Authentication"
         subtitle="Built-in local accounts plus federated identity providers. Changes take effect on save — no restart needed."
         titleClassName="text-sm font-medium"
@@ -551,7 +551,7 @@ function AuthSection({ initial, general, installTimeSettings }: { initial?: Auth
           )}
         </ul>
         {lastToggleLocked && (
-          <p className="mt-4 text-xs text-muted">
+          <p className="text-xs text-muted">
             At least one identity provider must stay enabled — the last enabled
             provider can&apos;t be turned off.
           </p>
@@ -1981,7 +1981,7 @@ function HelmOIDCProviderCard({ provider }: { provider: OIDCHelmProvider }) {
   const adminMapped = provider.roleMappings?.admin && provider.roleMappings.admin.length > 0;
   return (
     <SectionCard
-      className="gap-0 p-0"
+      className="gap-0 space-y-0 p-0"
       title="Helm-seeded OIDC provider"
       subtitle="Read-only snapshot of the identity provider configured via api.oidc.* Helm values at install time. Connection settings are not editable here; role mappings can be overridden below."
       titleClassName="text-sm font-medium"
@@ -1989,8 +1989,8 @@ function HelmOIDCProviderCard({ provider }: { provider: OIDCHelmProvider }) {
       headerClassName="px-5 pt-5 pb-4 space-y-1"
       contentClassName="px-5 pb-5 space-y-4"
     >
-      <div className="space-y-4">
-        <div className="space-y-2">
+      <div className="space-y-1">
+        <div className="space-y-2 pb-2">
           <div className="font-medium text-sm">Provider</div>
           <p className="text-[11px] text-muted">
             Groups claim and default role are seeded from the same Helm values and are not editable here.
@@ -2049,7 +2049,7 @@ function HelmOIDCProviderCard({ provider }: { provider: OIDCHelmProvider }) {
           </div>
         )}
         {adminMapped && (
-          <div className="rounded-lg border border-warning-soft-foreground bg-warning-soft px-4 py-3 flex gap-4">
+          <div className="mt-3 rounded-lg border border-warning-soft-foreground bg-warning-soft px-4 py-3 flex gap-4">
             <Megaphone className="h-4 w-4 text-warning-soft-foreground flex-shrink-0 mt-0.5" />
             <div className="text-sm">
               <div className="font-medium text-warning-soft-foreground mb-1">Helm-configured admin mapping</div>
@@ -2199,7 +2199,7 @@ function RoleMappingOverridesCard({
       <SectionCard
         title="Role mapping overrides"
         subtitle="Override the Helm-seeded OIDC group mappings per role from here. A change takes effect the next time an affected user logs in — no restart or reinstall needed."
-        className="bg-card gap-0 p-0"
+        className="bg-card gap-0 space-y-0 p-0"
         titleClassName="text-sm font-medium"
         subtitleClassName="text-sm"
         headerClassName="px-5 pt-5 pb-4 space-y-1"
@@ -2247,7 +2247,7 @@ function RoleMappingOverridesCard({
 
             return (
               <div key={role} role="group" aria-label={`${role.charAt(0).toUpperCase() + role.slice(1)} role mapping`}>
-                {role !== "admin" && <div className="h-px bg-border" />}
+                {role !== "admin" && <div className="mb-4 h-px bg-border" />}
                 <div className="space-y-2">
                   <div className="flex items-center justify-between">
                     <div className="flex items-center gap-2">

From 9059cdf200a614950444e0bd198c4a8d330e51bd Mon Sep 17 00:00:00 2001
From: Claude <noreply@anthropic.com>
Date: Wed, 14 Oct 2026 21:51:57 +0000
Subject: [PATCH 2/2] fix(web): tighten admin page header gap and Helm OIDC
 rows

The content column started 8px below design uMiwd because PageHeader's
pb-2 stacks on space-y-6, and the Helm-seeded OIDC provider rows were
about 22px taller than the design.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Signed-off-by: Claude <noreply@anthropic.com>
---
 web/src/routes/AdminSettings.tsx | 6 +++---
 1 file changed, 3 insertions(+), 3 deletions(-)

diff --git a/web/src/routes/AdminSettings.tsx b/web/src/routes/AdminSettings.tsx
index 3fb17bbd2..87fe0cecb 100644
--- a/web/src/routes/AdminSettings.tsx
+++ b/web/src/routes/AdminSettings.tsx
@@ -114,7 +114,7 @@ export function AdminSettingsPage() {
   };
 
   return (
-    <div className="space-y-6 p-6">
+    <div className="space-y-4 p-6">
       <PageHeader
         title="Admin settings"
         description="Platform-wide configuration for this Gameplane instance."
@@ -1989,8 +1989,8 @@ function HelmOIDCProviderCard({ provider }: { provider: OIDCHelmProvider }) {
       headerClassName="px-5 pt-5 pb-4 space-y-1"
       contentClassName="px-5 pb-5 space-y-4"
     >
-      <div className="space-y-1">
-        <div className="space-y-2 pb-2">
+      <div>
+        <div className="space-y-0.5 pb-1">
           <div className="font-medium text-sm">Provider</div>
           <p className="text-[11px] text-muted">
             Groups claim and default role are seeded from the same Helm values and are not editable here.