@multiplatform.one/backoffice 7.20.0 → 7.21.0

package/src/form/DocFormScreen.rights.spec.tsx

@@ -0,0 +1,130 @@
+// DocFormScreen's permission fallback (MPO-390). When docinfo carries no
+// usable permissions (a new record, or a token-auth bench answering
+// {"null": 0}) the screen used to union every role's DocPerm rows, so any
+// reader got an editable form and Save. It now resolves the session's roles.
+import { renderWithProviders } from "@multiplatform.one/test-utils";
+import { act, screen, waitFor } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { BackofficeProvider } from "../config/BackofficeProvider";
+import { createMemoryNavigator } from "../navigation/navigator";
+import { DocFormScreen } from "./DocFormScreen";
+
+const doctype = "Poke Move";
+
+const meta = {
+  name: doctype,
+  doctype: "DocType",
+  title_field: "move_name",
+  fields: [{ fieldname: "move_name", fieldtype: "Data", label: "Move Name" }],
+  permissions: [
+    { role: "Pokemon Editor", read: 1, write: 1, create: 1, delete: 1 },
+    { role: "Guest", read: 1 },
+  ],
+};
+
+const tackle = {
+  name: "a1b2c3",
+  doctype,
+  owner: "Administrator",
+  modified: "2026-09-27 00:00:00.000000",
+  docstatus: 0,
+  move_name: "tackle",
+};
+
+let run = 0;
+let roles: string[] = [];
+let sessionAnswered = false;
+
+function json(body: unknown, status = 200) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+beforeEach(() => {
+  run += 1;
+  sessionAnswered = false;
+  vi.stubGlobal("fetch", async (input: string | URL | Request) => {
+    const url = new URL(String(input instanceof Request ? input.url : input));
+    const method = url.pathname.replace(/^\/api\/method\//, "");
+    if (method === "frappe.auth.get_logged_user") return json({ message: "user@pokemon.test" });
+    if (method === "frappe.core.doctype.user.user.get_roles") {
+      sessionAnswered = true;
+      return json({ message: roles });
+    }
+    if (method === "frappe.desk.form.load.getdoctype") return json({ docs: [meta] });
+    if (method === "frappe.desk.form.load.getdoc") {
+      return json({ docs: [tackle], docinfo: { permissions: { null: 0 } } });
+    }
+    if (method === "frappe.desk.form.load.get_docinfo") {
+      return json({ docinfo: { permissions: { null: 0 } } });
+    }
+    const resource = `/api/resource/${encodeURIComponent(doctype)}`;
+    if (url.pathname === `${resource}/a1b2c3`) return json({ data: tackle });
+    if (url.pathname === resource) return json({ data: [tackle] });
+    return json({ data: [], message: [] });
+  });
+});
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  vi.unstubAllGlobals();
+});
+
+function renderForm(name: string) {
+  return renderWithProviders(
+    <BackofficeProvider
+      frappe={{ baseURL: `https://form-rights-${run}.spec.test` }}
+      navigation={createMemoryNavigator("/backoffice")}
+    >
+      <DocFormScreen doctype={doctype} name={name} />
+    </BackofficeProvider>,
+  );
+}
+
+function saveButton(): HTMLElement | undefined {
+  return Array.from(document.querySelectorAll('[role="button"], button')).find(
+    (node) => node.textContent?.trim() === "Save",
+  ) as HTMLElement | undefined;
+}
+
+function moveNameInput(): HTMLInputElement {
+  const field = screen.getByLabelText("Move Name", { exact: false });
+  return (
+    field instanceof HTMLInputElement ? field : field.querySelector("input")
+  ) as HTMLInputElement;
+}
+
+async function settle() {
+  await waitFor(() => expect(sessionAnswered).toBe(true), { timeout: 5000 });
+  await act(async () => {
+    await new Promise((resolve) => setTimeout(resolve, 50));
+  });
+}
+
+describe("DocFormScreen rights without docinfo permissions", () => {
+  it("lets an editor save a new record", async () => {
+    roles = ["Pokemon Editor", "Guest"];
+    renderForm("new");
+    await waitFor(() => expect(saveButton()).toBeTruthy(), { timeout: 5000 });
+    expect(moveNameInput().disabled || moveNameInput().readOnly).toBe(false);
+  });
+
+  it("gives a reader a read-only new record with no Save", async () => {
+    roles = ["Guest"];
+    renderForm("new");
+    await waitFor(() => expect(moveNameInput()).toBeTruthy(), { timeout: 5000 });
+    await settle();
+    expect(saveButton()).toBeUndefined();
+    expect(moveNameInput().disabled || moveNameInput().readOnly).toBe(true);
+  });
+
+  it("gives a reader an existing record read-only", async () => {
+    roles = ["Guest"];
+    renderForm("a1b2c3");
+    await waitFor(() => expect(moveNameInput().value).toBe("tackle"), { timeout: 5000 });
+    await settle();
+    expect(moveNameInput().disabled || moveNameInput().readOnly).toBe(true);
+  });
+});

package/src/form/DocFormScreen.tsx

@@ -30,7 +30,12 @@ import {
   type TabsItem,
 } from "@multiplatform.one/components";
 import { Input } from "@multiplatform.one/forms";
-import { SchemaForm, useFrappeConfig } from "@multiplatform.one/frappe-ui";
+import {
+  SchemaForm,
+  sessionDocRights,
+  useFrappeConfig,
+  type DocShareGrant,
+} from "@multiplatform.one/frappe-ui";
 import { useLayoutSizeClass, useResolvedKnobs } from "@multiplatform.one/theme";
 import { ListBulletsIcon } from "@phosphor-icons/react";
 import { useCallback, useEffect, useMemo, useRef, useState } from "react";
@@ -222,10 +227,14 @@ export function DocFormScreen({
   }, [modifiedStamp, docName, doctype, reloadDocinfo]);
 
   // -----------------------------------------------------------------------
-  // Permissions: per-doc flags from docinfo when usable, else the meta role
-  // matrix (union across roles — the session's role set is not exposed
-  // client-side; the desk itself relies on docinfo.permissions).
+  // Permissions: per-doc flags from docinfo when usable, else the session's
+  // roles against meta's DocPerm rows (sessionDocRights). Fixture mode has no
+  // session, so it keeps the union of every role's rows.
   // -----------------------------------------------------------------------
+  const { roles, user: sessionUser } = useUserRoles();
+  const fixtureMode = Boolean(config?.fixtures);
+  const recordOwner =
+    !isCreate && typeof engine.baseline?.owner === "string" ? engine.baseline.owner : undefined;
   const perms = useMemo(() => {
     const docPerms = normalizeDocPermissions(
       docinfo?.permissions as Record<string, number> | undefined,
@@ -242,6 +251,26 @@ export function DocFormScreen({
         print: !!docPerms.print,
       };
     }
+    if (!fixtureMode) {
+      const rights = sessionDocRights({
+        fixtures: false,
+        meta,
+        roles,
+        user: sessionUser,
+        owner: recordOwner,
+        shares: docinfo?.shared as DocShareGrant[] | undefined,
+      });
+      return {
+        write: rights.write,
+        create: rights.create,
+        delete: rights.delete,
+        submit: rights.submit,
+        cancel: rights.cancel,
+        amend: rights.amend,
+        email: rights.email,
+        print: rights.print,
+      };
+    }
     const rules = meta?.permissions ?? [];
     const anyRole = (key: keyof (typeof rules)[number]) =>
       rules.some((rule) => !rule.permlevel && !!rule[key]);
@@ -255,7 +284,7 @@ export function DocFormScreen({
       email: rules.length === 0 || anyRole("email"),
       print: rules.length === 0 || anyRole("print"),
     };
-  }, [docinfo?.permissions, meta?.permissions]);
+  }, [docinfo?.permissions, docinfo?.shared, meta, fixtureMode, roles, sessionUser, recordOwner]);
 
   const isSubmittable = !!meta?.is_submittable;
   const formReadOnly =
@@ -270,7 +299,6 @@ export function DocFormScreen({
   // -----------------------------------------------------------------------
   // Permlevel matrix: session roles × meta.permissions (desk perm.js). Roles
   // stay undefined in fixture mode → coarse permlevel>0 read-only fallback.
-  const { roles } = useUserRoles();
   const permLevels = useMemo(
     () => buildPermLevelMatrix(meta?.permissions, roles),
     [meta?.permissions, roles],

package/src/list/DoctypeListScreen.rights.spec.tsx

@@ -0,0 +1,113 @@
+// The backoffice list offers New and the write/delete bulk actions only as
+// far as the session's roles grant them on the doctype (MPO-390), measured
+// against a live-shaped bench: getdoctype for meta, the session RPCs for the
+// user and roles, and empty answers for everything else the list asks.
+import { renderWithProviders } from "@multiplatform.one/test-utils";
+import { act, fireEvent, screen, waitFor } from "@testing-library/react";
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import { BackofficeProvider } from "../config/BackofficeProvider";
+import { createMemoryNavigator } from "../navigation/navigator";
+import { DoctypeListScreen } from "./DoctypeListScreen";
+
+const doctype = "Poke Move";
+
+const meta = {
+  name: doctype,
+  doctype: "DocType",
+  title_field: "move_name",
+  fields: [{ fieldname: "move_name", fieldtype: "Data", label: "Move Name", in_list_view: 1 }],
+  permissions: [
+    { role: "Pokemon Editor", read: 1, write: 1, create: 1, delete: 1 },
+    { role: "Guest", read: 1 },
+  ],
+};
+
+let run = 0;
+let roles: string[] = [];
+let sessionAnswered = false;
+
+function json(body: unknown, status = 200) {
+  return new Response(JSON.stringify(body), {
+    status,
+    headers: { "content-type": "application/json" },
+  });
+}
+
+beforeEach(() => {
+  run += 1;
+  sessionAnswered = false;
+  vi.stubGlobal("fetch", async (input: string | URL | Request) => {
+    const url = new URL(String(input instanceof Request ? input.url : input));
+    const method = url.pathname.replace(/^\/api\/method\//, "");
+    if (method === "frappe.auth.get_logged_user") return json({ message: "user@pokemon.test" });
+    if (method === "frappe.core.doctype.user.user.get_roles") {
+      sessionAnswered = true;
+      return json({ message: roles });
+    }
+    if (method === "frappe.desk.form.load.getdoctype") return json({ docs: [meta] });
+    if (method === "frappe.client.get_count") return json({ message: 1 });
+    if (url.pathname === `/api/resource/${encodeURIComponent(doctype)}`) {
+      return json({ data: [{ name: "a1b2c3", doctype, move_name: "tackle" }] });
+    }
+    return json({ data: [], message: [] });
+  });
+});
+
+afterEach(() => {
+  vi.restoreAllMocks();
+  vi.unstubAllGlobals();
+});
+
+function renderList() {
+  return renderWithProviders(
+    <BackofficeProvider
+      frappe={{ baseURL: `https://list-rights-${run}.spec.test` }}
+      navigation={createMemoryNavigator("/backoffice")}
+    >
+      <DoctypeListScreen doctype={doctype} />
+    </BackofficeProvider>,
+  );
+}
+
+async function settle() {
+  await waitFor(() => expect(sessionAnswered).toBe(true));
+  await act(async () => {
+    await new Promise((resolve) => setTimeout(resolve, 50));
+  });
+}
+
+async function selectRow() {
+  const checkbox = await waitFor(() => screen.getAllByLabelText(/^Select row a1b2c3$/)[0], {
+    timeout: 5000,
+  });
+  fireEvent.click(checkbox as HTMLElement);
+}
+
+function bulkActionLabels(): string[] {
+  return Array.from(document.querySelectorAll('[role="button"], button'), (node) =>
+    node.textContent?.trim(),
+  ).filter((label): label is string => label === "Bulk Edit" || label === "Delete");
+}
+
+describe("DoctypeListScreen rights", () => {
+  it("offers an editor New, Bulk Edit and Delete", async () => {
+    roles = ["Pokemon Editor", "Guest"];
+    renderList();
+    await waitFor(() => expect(screen.getByLabelText(`New ${doctype}`)).toBeTruthy());
+    await selectRow();
+    await waitFor(() => expect(bulkActionLabels()).toEqual(["Bulk Edit", "Delete"]));
+  });
+
+  it("offers a reader no New, no Bulk Edit and no Delete", async () => {
+    roles = ["Guest"];
+    renderList();
+    await waitFor(() => expect(screen.getByRole("heading", { name: doctype })).toBeTruthy());
+    await settle();
+    expect(screen.queryByLabelText(`New ${doctype}`)).toBeNull();
+    await selectRow();
+    await act(async () => {
+      await new Promise((resolve) => setTimeout(resolve, 50));
+    });
+    expect(bulkActionLabels()).toEqual([]);
+  });
+});

package/src/list/DoctypeListScreen.tsx

@@ -33,6 +33,7 @@ import {
 import {
   FrappeTable,
   docFieldsToFilterFields,
+  sessionDocRights,
   useFrappeAggregate,
   useFrappeConfig,
 } from "@multiplatform.one/frappe-ui";
@@ -222,8 +223,17 @@ export function DoctypeListScreen({
     if (metaError && !meta) emitEvent({ type: "error", error: metaError, context: "list-meta" });
   }, [metaError, meta, emitEvent]);
 
-  // "New" affordances: host prop + the newDoc capability.
-  const showNew = !hideNewButton && capabilities.newDoc.enabled;
+  // Session roles × meta.permissions: the doctype-level rights (desk
+  // get_role_permissions) gate New and the write/delete bulk actions; fixture
+  // mode has no session and withholds nothing.
+  const { roles, user: rolesUser } = useUserRoles();
+  const rights = useMemo(
+    () => sessionDocRights({ fixtures: fixtureMode, meta, roles, user: rolesUser }),
+    [fixtureMode, meta, roles, rolesUser],
+  );
+
+  // "New" affordances: host prop + the newDoc capability + the create right.
+  const showNew = !hideNewButton && capabilities.newDoc.enabled && rights.create;
 
   // ONE FILTER SYSTEM (MOD-04): `baseFilters` is the single writable filter
   // state for this screen. Every filter surface — quick standard filters,
@@ -405,7 +415,6 @@ export function DoctypeListScreen({
   // fields above the roles' read level are pruned (desk hides them; the
   // server strips their values anyway). Undefined (fixtures / roles RPC
   // unavailable) prunes nothing — never hides more than desk would.
-  const { roles } = useUserRoles();
   const permMatrix = useMemo(
     () => buildPermLevelMatrix(meta?.permissions, roles),
     [meta?.permissions, roles],
@@ -690,14 +699,19 @@ export function DoctypeListScreen({
             },
           ] as BulkAction<ListRow>[])
         : []),
-      {
-        id: "edit",
-        label: t("list.editTitle", "Bulk Edit"),
-        onExecute: (items, clearSelection) => {
-          const names = items.map((item) => item.name).filter(Boolean) as string[];
-          if (names.length > 0) setPendingDialog({ type: "edit", names, clear: clearSelection });
-        },
-      },
+      ...(rights.write
+        ? ([
+            {
+              id: "edit",
+              label: t("list.editTitle", "Bulk Edit"),
+              onExecute: (items, clearSelection) => {
+                const names = items.map((item) => item.name).filter(Boolean) as string[];
+                if (names.length > 0)
+                  setPendingDialog({ type: "edit", names, clear: clearSelection });
+              },
+            },
+          ] as BulkAction<ListRow>[])
+        : []),
       {
         id: "export",
         label: t("list.export", "Export CSV"),
@@ -706,7 +720,7 @@ export function DoctypeListScreen({
           if (names.length > 0) await handleBulkExport(names);
         },
       },
-      ...(isSubmittable
+      ...(isSubmittable && rights.submit
         ? ([
             {
               id: "submit",
@@ -724,6 +738,10 @@ export function DoctypeListScreen({
                 clearSelection();
               },
             },
+          ] as BulkAction<ListRow>[])
+        : []),
+      ...(isSubmittable && rights.cancel
+        ? ([
             {
               id: "cancel",
               label: t("list.cancel", "Cancel"),
@@ -742,47 +760,51 @@ export function DoctypeListScreen({
             },
           ] as BulkAction<ListRow>[])
         : []),
-      {
-        id: "delete",
-        label: t("list.delete", "Delete"),
-        variant: "destructive",
-        requiresConfirmation: true,
-        confirmTitle: t("list.deleteTitle", "Delete documents"),
-        confirmMessage: t("list.deleteConfirm", {
-          defaultValue: "Permanently delete the selected {{doctype}} documents?",
-          doctype,
-        }),
-        onExecute: async (items, clearSelection) => {
-          if (!app) return;
-          const names = items.map((item) => item.name).filter(Boolean) as string[];
-          if (names.length === 0) return;
-          const result = await bulkDelete(app, doctype, names);
-          if (result.failed.length > 0) {
-            notify({
-              severity: "warning",
-              scope: "page",
-              body: t("list.deletePartial", {
-                count: result.succeeded.length,
-                total: names.length,
-                names: result.failed.map((failure) => failure.name).join(", "),
-                defaultValue: "Deleted {{count}} of {{total}} documents; failed: {{names}}",
-              }),
-            });
-          } else {
-            notify({
-              severity: "success",
-              scope: "page",
-              body: t("list.deleteDone", {
-                count: result.succeeded.length,
-                defaultValue_one: "Deleted {{count}} document",
-                defaultValue_other: "Deleted {{count}} documents",
+      ...(rights.delete
+        ? ([
+            {
+              id: "delete",
+              label: t("list.delete", "Delete"),
+              variant: "destructive",
+              requiresConfirmation: true,
+              confirmTitle: t("list.deleteTitle", "Delete documents"),
+              confirmMessage: t("list.deleteConfirm", {
+                defaultValue: "Permanently delete the selected {{doctype}} documents?",
+                doctype,
               }),
-            });
-          }
-          clearSelection();
-          count.refresh();
-        },
-      },
+              onExecute: async (items, clearSelection) => {
+                if (!app) return;
+                const names = items.map((item) => item.name).filter(Boolean) as string[];
+                if (names.length === 0) return;
+                const result = await bulkDelete(app, doctype, names);
+                if (result.failed.length > 0) {
+                  notify({
+                    severity: "warning",
+                    scope: "page",
+                    body: t("list.deletePartial", {
+                      count: result.succeeded.length,
+                      total: names.length,
+                      names: result.failed.map((failure) => failure.name).join(", "),
+                      defaultValue: "Deleted {{count}} of {{total}} documents; failed: {{names}}",
+                    }),
+                  });
+                } else {
+                  notify({
+                    severity: "success",
+                    scope: "page",
+                    body: t("list.deleteDone", {
+                      count: result.succeeded.length,
+                      defaultValue_one: "Deleted {{count}} document",
+                      defaultValue_other: "Deleted {{count}} documents",
+                    }),
+                  });
+                }
+                clearSelection();
+                count.refresh();
+              },
+            },
+          ] as BulkAction<ListRow>[])
+        : []),
       ...hostListActions,
     ],
     [
@@ -796,6 +818,7 @@ export function DoctypeListScreen({
       capabilities.assignments.enabled,
       capabilities.tags.enabled,
       hostListActions,
+      rights,
     ],
   );
 
@@ -1060,6 +1083,7 @@ export function DoctypeListScreen({
                   {...(bulkActionsEnabled ? { bulkActions } : {})}
                   onRowClick={handleRowClick}
                   onStateChange={handleStateChange}
+                  rights={rights}
                   layout="list"
                 />
               )}

package/src/list/listFields.spec.ts

@@ -86,7 +86,7 @@ describe("listFieldsToFetch permlevel pruning", () => {
     const matrix = buildPermLevelMatrix(meta.permissions, ["Desk User"]);
     const fields = listFieldsToFetch(meta, matrix);
     expect(fields).toEqual(
-      expect.arrayContaining(["name", "modified", "full_name", "enabled", "_comment_count"]),
+      expect.arrayContaining(["name", "modified", "full_name", "enabled", "_comments"]),
     );
     expect(fields).not.toContain("role_profile_name");
     expect(fields).not.toContain("api_secret_hint");
@@ -99,6 +99,42 @@ describe("listFieldsToFetch permlevel pruning", () => {
   });
 });
 
+// frappe/model/__init__.py default_fields and optional_fields: the only names
+// frappe.desk.reportview.validate_fields lets through without a DocField.
+// Anything else that isn't a field of the doctype answers 417 "Field not
+// permitted in query" for every user without the query bypass (MPO-389).
+const frappeStandardFields = new Set([
+  "doctype",
+  "name",
+  "owner",
+  "creation",
+  "modified",
+  "modified_by",
+  "docstatus",
+  "idx",
+  "_user_tags",
+  "_comments",
+  "_assign",
+  "_liked_by",
+  "_seen",
+]);
+
+describe("listFieldsToFetch asks only for columns Frappe will select", () => {
+  it("names nothing but the doctype's fields and Frappe's standard columns", () => {
+    const fieldnames = new Set(meta.fields.map((field) => field.fieldname));
+    const rejected = listFieldsToFetch(meta, undefined).filter(
+      (name) => !fieldnames.has(name) && !frappeStandardFields.has(name),
+    );
+    expect(rejected).toEqual([]);
+  });
+
+  it("reads the comment count from _comments instead of the computed _comment_count", () => {
+    const fields = listFieldsToFetch(meta, undefined);
+    expect(fields).toContain("_comments");
+    expect(fields).not.toContain("_comment_count");
+  });
+});
+
 describe("listDocumentColumnIds desk list anatomy", () => {
   it("is title, in_list_view values, then the activity cluster — no extra ID/modified", () => {
     expect(listDocumentColumnIds(meta)).toEqual([

package/src/list/listFields.ts

@@ -24,7 +24,7 @@ export function listFieldsToFetch(meta?: DoctypeMeta, permMatrix?: PermLevelMatr
     "_liked_by",
     "_assign",
     "_user_tags",
-    "_comment_count",
+    "_comments",
   ]);
   if (meta?.title_field) fields.add(meta.title_field);
   for (const field of meta?.fields ?? []) {

package/src/shared/useUserRoles.ts

@@ -1,14 +1,15 @@
 /**
  * Session user's role list for backoffice surfaces, read off the ambient
  * FrappeProvider. The fetch itself lives in frappe-ui's form engine
- * (`useSessionRoles`) so FrappeForm and the desk resolve permlevel from one
- * source; `roles` stays undefined while loading, in fixture mode, or when
- * the RPC fails.
+ * (`useFrappeSession`) so FrappeForm and the desk resolve permlevel and doc
+ * rights from one source; `roles` and `user` stay undefined while loading,
+ * in fixture mode, or when the RPC fails.
  */
 
-import { useFrappeConfig, useSessionRoles } from "@multiplatform.one/frappe-ui";
+import { useFrappeConfig, useFrappeSession } from "@multiplatform.one/frappe-ui";
 
-export function useUserRoles(): { roles?: string[] } {
+export function useUserRoles(): { roles?: string[]; user?: string } {
   const config = useFrappeConfig();
-  return { roles: useSessionRoles(config) };
+  const { roles, user } = useFrappeSession(config);
+  return { roles, user };
 }

package/types/form/DocFormScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DocFormScreen.d.ts","sourceRoot":"","sources":["../../src/form/DocFormScreen.tsx"],"names":[],"mappings":"AAqCA,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAqCtC,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,2CAA2C;IAC3C,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,wDAAwD;IACxD,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAID,wBAAgB,aAAa,CAAC,EAC5B,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,SAAS,EACT,eAAe,GAChB,EAAE,kBAAkB,2CAq+BpB"}
+{"version":3,"file":"DocFormScreen.d.ts","sourceRoot":"","sources":["../../src/form/DocFormScreen.tsx"],"names":[],"mappings":"AA0CA,OAAO,EAML,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAqCtC,oDAAoD;AACpD,MAAM,WAAW,sBAAsB;IACrC;;;OAGG;IACH,IAAI,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACzB,+EAA+E;IAC/E,KAAK,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CACrC;AAED,MAAM,WAAW,kBAAkB;IACjC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB,2DAA2D;IAC3D,IAAI,EAAE,MAAM,CAAC;IACb,gEAAgE;IAChE,QAAQ,CAAC,EAAE,OAAO,CAAC;IACnB,uEAAuE;IACvE,cAAc,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,2CAA2C;IAC3C,YAAY,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,6DAA6D;IAC7D,QAAQ,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnC,+EAA+E;IAC/E,OAAO,CAAC,EAAE,CAAC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG;QAAE,IAAI,EAAE,MAAM,CAAA;KAAE,KAAK,IAAI,CAAC;IACpE,wEAAwE;IACxE,SAAS,CAAC,EAAE,MAAM,IAAI,CAAC;IACvB,wDAAwD;IACxD,eAAe,CAAC,EAAE,sBAAsB,CAAC;CAC1C;AAID,wBAAgB,aAAa,CAAC,EAC5B,OAAO,EACP,IAAI,EACJ,QAAQ,EACR,cAAc,EACd,YAAY,EACZ,QAAQ,EACR,OAAO,EACP,SAAS,EACT,eAAe,GAChB,EAAE,kBAAkB,2CA4/BpB"}

package/types/list/DoctypeListScreen.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"DoctypeListScreen.d.ts","sourceRoot":"","sources":["../../src/list/DoctypeListScreen.tsx"],"names":[],"mappings":"AAsCA,OAAO,KAAK,EAEV,eAAe,EAIhB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAOL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAS1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,0BAA0B,CAAC;AAoB5E,OAAO,EAAgB,KAAK,OAAO,EAAoB,MAAM,eAAe,CAAC;AAY7E,MAAM,WAAW,sBAAsB;IACrC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B;;;OAGG;IACH,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,8EAA8E;IAC9E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtF,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,cAAc,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAsBD,wBAAgB,iBAAiB,CAAC,EAChC,OAAO,EACP,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,KAAK,EAAE,cAAc,EACrB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,SAAS,EACT,aAAa,EACb,cAAc,GACf,EAAE,sBAAsB,2CA86BxB"}
+{"version":3,"file":"DoctypeListScreen.d.ts","sourceRoot":"","sources":["../../src/list/DoctypeListScreen.tsx"],"names":[],"mappings":"AAuCA,OAAO,KAAK,EAEV,eAAe,EAIhB,MAAM,0BAA0B,CAAC;AAGlC,OAAO,EAOL,KAAK,gBAAgB,EACtB,MAAM,8BAA8B,CAAC;AAEtC,OAAO,KAAK,EAAE,cAAc,EAAE,MAAM,qBAAqB,CAAC;AAS1D,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,iBAAiB,CAAC;AACrD,OAAO,EAAE,KAAK,WAAW,EAAkB,MAAM,0BAA0B,CAAC;AAoB5E,OAAO,EAAgB,KAAK,OAAO,EAAoB,MAAM,eAAe,CAAC;AAY7E,MAAM,WAAW,sBAAsB;IACrC,6DAA6D;IAC7D,OAAO,EAAE,MAAM,CAAC;IAChB;;;;;;;OAOG;IACH,YAAY,CAAC,EAAE,MAAM,CAAC;IACtB;;;OAGG;IACH,SAAS,CAAC,EAAE,MAAM,CAAC;IACnB;;;OAGG;IACH,YAAY,CAAC,EAAE,WAAW,CAAC;IAC3B;;;OAGG;IACH,KAAK,CAAC,EAAE,SAAS,cAAc,EAAE,CAAC;IAClC;;;OAGG;IACH,cAAc,CAAC,EAAE,aAAa,CAAC;IAC/B;;;OAGG;IACH,YAAY,CAAC,EAAE,aAAa,CAAC;IAC7B,8EAA8E;IAC9E,eAAe,CAAC,EAAE,CAAC,OAAO,EAAE,eAAe,CAAC,OAAO,CAAC,EAAE,KAAK,eAAe,CAAC,OAAO,CAAC,EAAE,CAAC;IACtF,qEAAqE;IACrE,QAAQ,CAAC,EAAE,MAAM,CAAC;IAClB;;;OAGG;IACH,SAAS,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,KAAK,IAAI,CAAC;IACpD;;;OAGG;IACH,aAAa,CAAC,EAAE,OAAO,CAAC;IACxB,gFAAgF;IAChF,cAAc,CAAC,EAAE,SAAS,gBAAgB,EAAE,CAAC;CAC9C;AAsBD,wBAAgB,iBAAiB,CAAC,EAChC,OAAO,EACP,YAAY,EACZ,SAAS,EACT,YAAY,EACZ,KAAK,EAAE,cAAc,EACrB,cAAc,EACd,YAAY,EACZ,eAAe,EACf,QAAQ,EACR,SAAS,EACT,aAAa,EACb,cAAc,GACf,EAAE,sBAAsB,2CAq8BxB"}

package/types/shared/useUserRoles.d.ts

@@ -1,11 +1,12 @@
 /**
  * Session user's role list for backoffice surfaces, read off the ambient
  * FrappeProvider. The fetch itself lives in frappe-ui's form engine
- * (`useSessionRoles`) so FrappeForm and the desk resolve permlevel from one
- * source; `roles` stays undefined while loading, in fixture mode, or when
- * the RPC fails.
+ * (`useFrappeSession`) so FrappeForm and the desk resolve permlevel and doc
+ * rights from one source; `roles` and `user` stay undefined while loading,
+ * in fixture mode, or when the RPC fails.
  */
 export declare function useUserRoles(): {
     roles?: string[];
+    user?: string;
 };
 //# sourceMappingURL=useUserRoles.d.ts.map

package/types/shared/useUserRoles.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"useUserRoles.d.ts","sourceRoot":"","sources":["../../src/shared/useUserRoles.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,wBAAgB,YAAY,IAAI;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAA;CAAE,CAGnD"}
+{"version":3,"file":"useUserRoles.d.ts","sourceRoot":"","sources":["../../src/shared/useUserRoles.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAIH,wBAAgB,YAAY,IAAI;IAAE,KAAK,CAAC,EAAE,MAAM,EAAE,CAAC;IAAC,IAAI,CAAC,EAAE,MAAM,CAAA;CAAE,CAIlE"}