@multiplatform.one/backoffice 7.34.3 → 7.35.0

package/src/shell/useWorkspaces.ts

@@ -10,15 +10,11 @@
  * BackofficeProvider) — without one the hook settles on an empty, non-loading
  * result so isolated mounts stay deterministic.
  */
-import {
-  HttpClient,
-  useFrappeCollection,
-  useLiveQuery,
-  type AuthConfig,
-  type FixtureProvider,
-} from "@multiplatform.one/frappe";
-import { useFrappeConfig, type FrappeConfig } from "@multiplatform.one/frappe-ui";
-import { useEffect, useMemo, useState } from "react";
+import { useFrappeCollection, useLiveQuery, type FixtureProvider } from "@multiplatform.one/frappe";
+import { isPermissionError, useFrappeConfig } from "@multiplatform.one/frappe-ui";
+import { useMemo, useState } from "react";
+import { useSessionIdentity } from "../shared/sessionUser";
+import { useSessionUserId } from "../shared/useSessionUserId";
 
 export interface WorkspaceDoc {
   name: string;
@@ -49,54 +45,8 @@ const WORKSPACE_FIELDS = [
 // Session user (module cache — one fetch per session)
 // ---------------------------------------------------------------------------
 
-const sessionUserCache = new Map<string, Promise<string | undefined>>();
-
-async function fetchSessionUser(
-  baseURL: string,
-  auth?: FrappeConfig["auth"],
-): Promise<string | undefined> {
-  const client = new HttpClient(baseURL, auth as AuthConfig | undefined);
-  const res = await client.get<{ message?: string }>("/api/method/frappe.auth.get_logged_user");
-  const user = res.payload?.message;
-  return user && user !== "Guest" ? user : undefined;
-}
-
-/**
- * The frappe session user ("Administrator", …), or undefined while loading,
- * for Guest sessions, in fixture mode, without a provider, or when the
- * endpoint is unreachable.
- */
 export function useSessionUser(): string | undefined {
-  const config = useFrappeConfig();
-  const baseURL = config?.baseURL;
-  const auth = config?.auth;
-  const fixtures = config?.fixtures;
-  const [user, setUser] = useState<string | undefined>(undefined);
-
-  useEffect(() => {
-    // Fixture mode has no session endpoint; keep the private section off.
-    // No provider config → no bench to ask.
-    if (fixtures || !baseURL) return;
-    let cancelled = false;
-    let promise = sessionUserCache.get(baseURL);
-    if (!promise) {
-      promise = fetchSessionUser(baseURL, auth).catch(() => {
-        sessionUserCache.delete(baseURL);
-        return undefined;
-      });
-      sessionUserCache.set(baseURL, promise);
-    }
-    promise.then((value) => {
-      if (!cancelled) setUser(value);
-    });
-    return () => {
-      cancelled = true;
-    };
-    // `auth` is session-stable; the cache is keyed by baseURL.
-    // oxlint-disable-next-line exhaustive-deps
-  }, [baseURL, fixtures]);
-
-  return user;
+  return useSessionUserId();
 }
 
 // ---------------------------------------------------------------------------
@@ -104,6 +54,8 @@ export function useSessionUser(): string | undefined {
 // ---------------------------------------------------------------------------
 
 export interface WorkspacesResult {
+  error?: unknown;
+  refused: boolean;
   /** All visible workspaces, sorted by sequence_id. */
   workspaces: WorkspaceDoc[];
   /** Session user's private workspaces (desk shows these on top). */
@@ -127,7 +79,8 @@ function bySequence(a: WorkspaceDoc, b: WorkspaceDoc): number {
 
 export function useWorkspaces(): WorkspacesResult {
   const config = useFrappeConfig();
-  const sessionUser = useSessionUser();
+  const { user: sessionUser, resolved: sessionResolved } = useSessionIdentity();
+  const [failure, setFailure] = useState<{ connection: unknown; error: unknown }>();
 
   // Stable connection config: a fresh object identity per render would
   // re-run the collection hook's internal effects (DeskSidebar precedent).
@@ -150,7 +103,9 @@ export function useWorkspaces(): WorkspacesResult {
 
   const collection = useFrappeCollection<WorkspaceDoc>(connectionConfig, "Workspace", {
     fields: WORKSPACE_FIELDS as unknown as (keyof WorkspaceDoc & string)[],
+    onSyncError: (error) => setFailure({ connection: connectionConfig, error }),
   });
+  const error = failure?.connection === connectionConfig ? failure?.error : undefined;
   const { data: rawData, isLoading } = useLiveQuery(
     (q) => (collection ? q.from({ _workspace: collection }) : null),
     [collection],
@@ -181,15 +136,20 @@ export function useWorkspaces(): WorkspacesResult {
     }
 
     return {
+      error,
+      refused: isPermissionError(error),
       workspaces: all,
       privateWorkspaces,
       publicRoots,
       childrenByParent,
       // No provider config → settle empty instead of skeleting forever.
-      isLoading: connectionConfig ? Boolean(isLoading) || collection === undefined : false,
+      // A refused sync settles, but only once the session identity is known.
+      isLoading: connectionConfig
+        ? !sessionResolved || (!error && (Boolean(isLoading) || collection === undefined))
+        : false,
       sessionUser,
     };
-  }, [rawData, isLoading, collection, connectionConfig, sessionUser]);
+  }, [rawData, isLoading, collection, connectionConfig, sessionUser, sessionResolved, error]);
 }
 
 /**
@@ -197,8 +157,13 @@ export function useWorkspaces(): WorkspacesResult {
  * user's first private workspace, else the first public workspace by
  * sequence order.
  */
-export function useDefaultWorkspace(): { workspace?: string; isLoading: boolean } {
-  const { privateWorkspaces, publicRoots, isLoading } = useWorkspaces();
+export function useDefaultWorkspace(): {
+  workspace?: string;
+  isLoading: boolean;
+  error?: unknown;
+  refused: boolean;
+} {
+  const { privateWorkspaces, publicRoots, isLoading, error, refused } = useWorkspaces();
   const workspace = privateWorkspaces[0]?.name ?? publicRoots[0]?.name;
-  return { workspace, isLoading };
+  return { workspace, isLoading, error, refused };
 }

package/src/views/DashboardView.tsx

@@ -178,14 +178,14 @@ export function DashboardView({ doctype }: DashboardViewProps) {
               <ChartSkeletonCard height={CHART_HEIGHT} />
             ) : weekly.error ? (
               <AsyncBoundary
-                compact
+                size="$3"
                 error={weekly.error}
                 errorTitle={t("views.weeklyChartFailed", "Couldn't load weekly activity")}
                 onRetry={weekly.refresh}
               />
             ) : weekly.isEmpty ? (
               <AsyncBoundary
-                compact
+                size="$3"
                 empty
                 emptyTitle={t("views.weeklyChartEmpty", "No recent activity")}
                 emptyDescription={t(

package/src/views/ImageView.tsx

@@ -8,7 +8,7 @@ import { useTranslation } from "react-i18next";
 import { useBackofficeNavigator, useBackofficePaths } from "../config/BackofficeProvider";
 import { BACKOFFICE_I18N_NAMESPACE } from "../i18n";
 import { useDeskScope } from "../desk/scope";
-import { detectCardFields, detectImageField, useViewMeta, type AnyDoc } from "./viewMeta";
+import { detectCardFields, detectImageField, useViewSource, type AnyDoc } from "./viewMeta";
 import { ViewError, ViewLoading, ViewUnsupported } from "./ViewStates";
 
 // The `one` compiler breaks explicit JSX generics — instantiate once.
@@ -24,9 +24,25 @@ export function ImageView({ doctype }: ImageViewProps) {
   const deskScope = useDeskScope();
   const navigator = useBackofficeNavigator();
   const paths = useBackofficePaths();
-  const { meta, isLoading: isMetaLoading, error: metaError } = useViewMeta(doctype);
+  const {
+    layoutMeta: meta,
+    loading: isMetaLoading,
+    error: metaError,
+    metaRefused,
+    recordShape,
+  } = useViewSource(doctype);
 
-  if (isMetaLoading) return <ViewLoading />;
+  if (isMetaLoading || (metaRefused && recordShape.status === "pending")) return <ViewLoading />;
+  if (metaRefused && !meta)
+    return (
+      <ViewUnsupported
+        doctype={doctype}
+        title={t("views.imageNotPermitted", "You can't open the {{doctype}} image view", {
+          doctype,
+        })}
+        description={metaError?.message}
+      />
+    );
   if (metaError && !meta) return <ViewError doctype={doctype} error={metaError} />;
   if (!meta) return <ViewLoading />;
 

package/src/views/ViewHeader.tsx

@@ -20,24 +20,23 @@ import { BACKOFFICE_I18N_NAMESPACE } from "../i18n";
 import type { BackofficeView } from "../navigation/paths";
 import { deskViewUrl } from "../shared/deskLinks";
 import { deriveAvailableViews } from "./viewAvailability";
-import { useViewMeta } from "./viewMeta";
+import { useViewMeta, useViewSource } from "./viewMeta";
 import { ViewSwitcherMenu } from "./ViewSwitcherMenu";
 
 export { useViewLabels } from "./ViewSwitcherMenu";
 
-/**
- * Views this doctype can actually render, derived from meta by
- * `deriveAvailableViews` (viewAvailability.ts documents each view's desk
- * precondition). The provider's `capabilities.views.allow` gates the offer
- * list too. Conditional views stay hidden until meta confirms them;
- * `current` is always included so the switcher stays honest about where you
- * are (e.g. a deep link to /view/tree on a flat doctype, which renders its
- * own unsupported state).
- */
-export function useAvailableViews(doctype: string, current?: BackofficeView): BackofficeView[] {
-  const { meta } = useViewMeta(doctype);
+export function useAvailableViews(doctype: string, _current?: BackofficeView): BackofficeView[] {
+  const { meta, metaRefused, recordShape } = useViewSource(doctype);
+  const { rights } = useDocRights(useFrappeConfig(), meta);
   const { views } = useBackofficeCapabilities();
-  return deriveAvailableViews(meta, { current, allow: views.enabled ? views.allow : [] });
+  return deriveAvailableViews(
+    meta
+      ? { kind: "meta", meta, rights }
+      : metaRefused && recordShape.fields
+        ? { kind: "record", fields: recordShape.fields }
+        : undefined,
+    { allow: views.enabled ? views.allow : [] },
+  );
 }
 
 export interface ViewHeaderProps {
@@ -53,7 +52,7 @@ export function ViewHeader({ doctype, view }: ViewHeaderProps) {
   const { frappe } = useBackofficeConfig();
   const { t } = useTranslation(BACKOFFICE_I18N_NAMESPACE);
   const { knobProps } = useResolvedKnobs();
-  const availableViews = useAvailableViews(doctype, view);
+  const availableViews = useAvailableViews(doctype);
   const { meta } = useViewMeta(doctype);
   const { rights } = useDocRights(useFrappeConfig(), meta);
   // Desk counterpart of this exact view (fixture mode has no desk).

package/src/views/ViewSwitcherMenu.spec.tsx

@@ -20,6 +20,9 @@ describe("ViewSwitcherMenu", () => {
       />,
     );
     expect(getByTestId("list-view-switcher")).toBeTruthy();
+    for (const icon of getByTestId("list-view-switcher").querySelectorAll("svg")) {
+      expect(icon.getAttribute("fill")).not.toBe("currentColor");
+    }
     // Segments would paint every label in the toolbar. The menu keeps them
     // inside the dropdown — only the current view is visible at rest.
     expect(queryByText("Report")).toBeNull();

package/src/views/ViewSwitcherMenu.tsx

@@ -6,7 +6,7 @@
 // (calendar month/week/day, Pokemon image/list); seven doctype views as
 // segments dominated the toolbar. This is the desk shape: one trigger
 // showing the current view, the rest inside the menu, current check-marked.
-import { DropdownMenu, type DropdownMenuEntry } from "@multiplatform.one/components";
+import { DropdownMenu, themed, type DropdownMenuEntry } from "@multiplatform.one/components";
 import { Button } from "@multiplatform.one/forms";
 import {
   CalendarBlankIcon,
@@ -25,14 +25,15 @@ import type { BackofficeView } from "../navigation/paths";
 
 /** Phosphor stand-ins for desk's ListViewSelect icon_map. */
 const VIEW_ICONS: Record<BackofficeView, Icon> = {
-  list: ListBulletsIcon,
-  report: ChartBarIcon,
-  kanban: KanbanIcon,
-  calendar: CalendarBlankIcon,
-  tree: TreeStructureIcon,
-  image: ImageIcon,
-  dashboard: SquaresFourIcon,
+  list: themed(ListBulletsIcon),
+  report: themed(ChartBarIcon),
+  kanban: themed(KanbanIcon),
+  calendar: themed(CalendarBlankIcon),
+  tree: themed(TreeStructureIcon),
+  image: themed(ImageIcon),
+  dashboard: themed(SquaresFourIcon),
 };
+const ExpandGlyph = themed(CaretDownIcon);
 
 export function useViewLabels(): Record<BackofficeView, string> {
   const { t } = useTranslation(BACKOFFICE_I18N_NAMESPACE);
@@ -68,7 +69,7 @@ export function ViewSwitcherMenu({ views, current, onViewChange }: ViewSwitcherM
     return {
       key: candidate,
       label: labels[candidate],
-      icon: <ViewIcon size={16} />,
+      icon: <ViewIcon size="$3" />,
       checked: candidate === current,
       onSelect: () => {
         if (candidate !== current) onViewChange(candidate);
@@ -81,7 +82,7 @@ export function ViewSwitcherMenu({ views, current, onViewChange }: ViewSwitcherM
       <Button
         size="$3"
         icon={VIEW_ICONS[current]}
-        iconAfter={CaretDownIcon}
+        iconAfter={ExpandGlyph}
         aria-label={t("views.switchView", "Switch view")}
         testID="list-view-switcher"
       >

package/src/views/viewAvailability.spec.ts

@@ -2,9 +2,17 @@
 // bench doctypes whose desk switcher was observed live (frappe 15.8.1,
 // p-results/audit-view-switcher-meta.md): ToDo, Test Tree Node, Note, User,
 // Pokemon, Activity Log.
+import { allDocRights } from "@multiplatform.one/frappe-ui";
 import { describe, expect, it } from "vitest";
 import type { DoctypeMeta } from "../shared/useDoctypeMeta";
-import { deriveAvailableViews, isViewSupported } from "./viewAvailability";
+import { deriveAvailableViews as derive, isViewSupported } from "./viewAvailability";
+
+function deriveAvailableViews(
+  meta: DoctypeMeta | undefined,
+  options: { allow?: readonly import("../navigation/paths").BackofficeView[] } = {},
+) {
+  return derive(meta ? { kind: "meta", meta, rights: allDocRights(true) } : undefined, options);
+}
 
 function makeMeta(overrides: Partial<DoctypeMeta> = {}): DoctypeMeta {
   return { name: "QaDoc", fields: [], ...overrides };
@@ -142,26 +150,51 @@ describe("deriveAvailableViews", () => {
     expect(deriveAvailableViews(meta)).not.toContain("kanban");
   });
 
-  it("offers only the unconditional views while meta is loading", () => {
-    expect(deriveAvailableViews(undefined)).toEqual(["list", "report", "dashboard"]);
+  it("accepts the published metadata signature without restoring the current-view bypass", () => {
+    expect(derive(pokemonLike)).toEqual(["list", "report", "image", "dashboard"]);
+    expect(derive(pokemonLike, { current: "tree", allow: ["list", "image"] })).toEqual([
+      "list",
+      "image",
+    ]);
+    expect(derive(pokemonLike, { current: "report", allow: [] })).toEqual([]);
+  });
+
+  it("offers nothing until metadata or readable records confirm availability", () => {
+    expect(deriveAvailableViews(undefined)).toEqual([]);
   });
 
-  it("always keeps the current view, even when unsupported (honest deep link)", () => {
-    expect(deriveAvailableViews(noteLike, { current: "tree" })).toEqual([
+  it("does not bypass support or the host allowlist for a current route", () => {
+    expect(deriveAvailableViews(noteLike)).not.toContain("tree");
+    expect(deriveAvailableViews(todoLike, { allow: [] })).toEqual([]);
+    expect(deriveAvailableViews(todoLike, { allow: ["list", "kanban"] })).toEqual([
+      "list",
+      "kanban",
+    ]);
+  });
+
+  it("offers the same record-backed views without metadata or desk permissions", () => {
+    expect(derive({ kind: "record", fields: pokemonLike.fields })).toEqual([
       "list",
       "report",
-      "tree",
-      "dashboard",
+      "image",
     ]);
-    expect(deriveAvailableViews(undefined, { current: "kanban" })).toContain("kanban");
+    expect(derive({ kind: "record", fields: noteLike.fields })).toEqual(["list", "report"]);
+    expect(
+      derive({ kind: "record", fields: pokemonLike.fields }, { allow: ["list", "report"] }),
+    ).toEqual(["list", "report"]);
   });
 
-  it("intersects with the host allowlist (current view still wins)", () => {
-    expect(deriveAvailableViews(todoLike, { allow: ["list", "kanban"] })).toEqual([
+  it("withholds views without read rights and reports without report rights", () => {
+    const rights = { ...allDocRights(true), report: false };
+    expect(derive({ kind: "meta", meta: pokemonLike, rights })).toEqual([
       "list",
-      "kanban",
+      "image",
+      "dashboard",
     ]);
-    expect(deriveAvailableViews(todoLike, { allow: [], current: "report" })).toEqual(["report"]);
+    expect(derive({ kind: "meta", meta: pokemonLike, rights: { ...rights, read: false } })).toEqual(
+      [],
+    );
+    expect(derive({ kind: "meta", meta: pokemonLike, rights: allDocRights(false) })).toEqual([]);
   });
 });
 

package/src/views/viewAvailability.ts

@@ -5,7 +5,8 @@
 // Desk's per-view conditions, verified against the live bench (getdoctype
 // RPC payloads + the desk switcher itself — see
 // p-results/audit-view-switcher-meta.md):
-//   List / Report / Dashboard — unconditional.
+//   List / Report / Dashboard — supported with metadata; session rights
+//              and the host allowlist still gate availability.
 //   Tree     — frappe.treeview_settings[doctype] (registered by the meta's
 //              `__tree_js` asset) OR meta.is_tree.
 //   Image    — meta.image_field only (desk `list_view.meta.image_field`).
@@ -26,11 +27,10 @@
 // File manager) are out of scope — BACKOFFICE_VIEWS does not contain them.
 import { BACKOFFICE_VIEWS, type BackofficeView } from "../navigation/paths";
 import type { DoctypeMeta } from "../shared/useDoctypeMeta";
+import type { DocRights } from "@multiplatform.one/frappe-ui";
+import type { DocFieldMeta } from "../shared/useDoctypeMeta";
 import { detectSelectField } from "./viewMeta";
 
-/** Views offered for every doctype (desk parity: condition literally true). */
-const UNCONDITIONAL_VIEWS: ReadonlySet<BackofficeView> = new Set(["list", "report", "dashboard"]);
-
 /**
  * Can this doctype render `view` at all? (The meta preconditions above.)
  * "Supported but unconfigured" — e.g. a Select field but no Kanban Board
@@ -53,33 +53,36 @@ export function isViewSupported(view: BackofficeView, meta: DoctypeMeta): boolea
   }
 }
 
+export type ViewSource =
+  | { kind: "meta"; meta: DoctypeMeta; rights: Pick<DocRights, "read" | "report"> }
+  | { kind: "record"; fields: readonly DocFieldMeta[] };
+
 export interface DeriveAvailableViewsOptions {
-  /**
-   * The view being rendered right now — always kept in the result so the
-   * switcher stays honest about where you are (e.g. a deep link to
-   * /view/tree on a flat doctype, which renders its own unsupported state).
-   */
-  current?: BackofficeView;
-  /** Host allowlist (capabilities.views.allow ∩ any per-screen allowlist). */
   allow?: readonly BackofficeView[];
+  current?: BackofficeView;
 }
 
-/**
- * The views a doctype's switcher offers, in canonical BACKOFFICE_VIEWS
- * order. Pure: fixture meta in, view list out. While meta is still loading
- * (`undefined`), only the unconditional views are offered — conditional
- * views stay hidden until meta confirms them rather than flashing in and
- * out.
- */
 export function deriveAvailableViews(
-  meta: DoctypeMeta | undefined,
-  options: DeriveAvailableViewsOptions = {},
+  input: ViewSource | DoctypeMeta | undefined,
+  { allow }: DeriveAvailableViewsOptions = {},
 ): BackofficeView[] {
-  const { current, allow } = options;
+  const source: ViewSource | undefined =
+    input &&
+    ("kind" in input
+      ? (input as ViewSource)
+      : { kind: "meta", meta: input, rights: { read: true, report: true } });
+  if (!source || (source.kind === "meta" && !source.rights.read)) return [];
   return BACKOFFICE_VIEWS.filter((candidate) => {
-    if (candidate === current) return true;
     if (allow && !allow.includes(candidate)) return false;
-    if (!meta) return UNCONDITIONAL_VIEWS.has(candidate);
-    return isViewSupported(candidate, meta);
+    if (source.kind === "record") {
+      return (
+        candidate === "list" ||
+        candidate === "report" ||
+        (candidate === "image" &&
+          source.fields.some((field) => field.fieldtype === "Attach Image" && !field.hidden))
+      );
+    }
+    if (candidate === "report" && !source.rights.report) return false;
+    return isViewSupported(candidate, source.meta);
   });
 }

package/src/views/viewMeta.ts

@@ -2,6 +2,8 @@
 // sanctioned backoffice meta loader (shared/useDoctypeMeta: getdoctype RPC,
 // module-wide cache, fixture branch for stories) — every backoffice surface
 // shares one meta fetch per doctype per session.
+import { useMemo } from "react";
+import { isPermissionError, useFrappeConfig, useRecordShape } from "@multiplatform.one/frappe-ui";
 import { useDoctypeMeta, type DocFieldMeta, type DoctypeMeta } from "../shared/useDoctypeMeta";
 
 export function useViewMeta(doctype: string): {
@@ -14,6 +16,34 @@ export function useViewMeta(doctype: string): {
   return { meta, isLoading: loading, error: error ?? null, refetch: reload };
 }
 
+export function useViewSource(doctype: string, metaOverride?: DoctypeMeta) {
+  const loaded = useDoctypeMeta(metaOverride ? undefined : doctype);
+  const meta = metaOverride ?? loaded.meta;
+  const metaRefused = !meta && Boolean(loaded.error && isPermissionError(loaded.error));
+  const recordShape = useRecordShape(useFrappeConfig(), doctype, metaRefused);
+  const layoutMeta = useMemo<DoctypeMeta | undefined>(
+    () =>
+      meta ??
+      (recordShape.fields
+        ? {
+            name: doctype,
+            fields: [...recordShape.fields]
+              .sort(
+                (a, b) =>
+                  Number(b.fieldname === "title" || b.fieldname === "name") -
+                  Number(a.fieldname === "title" || a.fieldname === "name"),
+              )
+              .map((field, index) => ({
+                ...field,
+                in_list_view: index < 6 ? (1 as const) : (0 as const),
+              })),
+          }
+        : undefined),
+    [meta, recordShape.fields, doctype],
+  );
+  return { ...loaded, meta, metaRefused, recordShape, layoutMeta };
+}
+
 const DATE_FIELD_TYPES = new Set(["Date", "Datetime"]);
 
 function isDateField(field: DocFieldMeta): boolean {

package/src/workspace/WorkspaceChartBlock.tsx

@@ -110,7 +110,7 @@ export function WorkspaceChartBlock({ row }: WorkspaceChartBlockProps) {
   if (error || !config) {
     return (
       <AsyncBoundary
-        compact
+        size="$3"
         error={error ?? true}
         errorTitle={t("workspaceChartError", "Couldn't load chart {{title}}", {
           title,

package/src/workspace/WorkspaceLinkDirectory.tsx

@@ -108,7 +108,7 @@ export function WorkspaceLinkDirectory({ items }: WorkspaceLinkDirectoryProps) {
                 value={filter}
                 onChange={setFilter}
                 debounceMs={0}
-                compact
+                size="$3"
                 placeholder={t("workspaceFilterLinks", "Filter links...")}
                 aria-label={t("workspaceFilterLinks", "Filter links...")}
                 inputProps={{
@@ -121,7 +121,7 @@ export function WorkspaceLinkDirectory({ items }: WorkspaceLinkDirectoryProps) {
             </YStack>
             {filteredItems.length === 0 ? (
               <EmptyState
-                compact
+                size="$3"
                 title={t("workspaceFilterNoMatch", 'No links match "{{query}}"', {
                   query: filter.trim(),
                 })}

package/src/workspace/WorkspaceRecents.tsx

@@ -12,7 +12,14 @@
  * too) are filtered out so every chip stays navigable in this app.
  */
 import { ClockCounterClockwiseIcon } from "@phosphor-icons/react";
-import { Card, PageSection, Text, XStack, useTheme } from "@multiplatform.one/components";
+import {
+  componentColors,
+  Card,
+  PageSection,
+  Text,
+  XStack,
+  useTheme,
+} from "@multiplatform.one/components";
 import {
   TOUCH_HEIGHT_FLOOR,
   ensureFocusVisibleRing,
@@ -83,7 +90,7 @@ export function WorkspaceRecents() {
             padding={0}
             onPress={() => navigator.navigate(item.path)}
             cursor="pointer"
-            hoverStyle={{ borderColor: "$accentBackground" }}
+            hoverStyle={{ borderColor: componentColors.selection.ring }}
             pressStyle={{ scale: 0.98 }}
             role="link"
             aria-label={item.label}

package/src/workspace/WorkspaceShortcut.tsx

@@ -23,7 +23,15 @@ import {
   SquaresFourIcon,
   type Icon,
 } from "@phosphor-icons/react";
-import { Card, Chip, Skeleton, Text, XStack, useTheme } from "@multiplatform.one/components";
+import {
+  componentColors,
+  Card,
+  Chip,
+  Skeleton,
+  Text,
+  XStack,
+  useTheme,
+} from "@multiplatform.one/components";
 import { useFrappeAggregate, useFrappeConfig } from "@multiplatform.one/frappe-ui";
 import { openUrl } from "@multiplatform.one/platform";
 import {
@@ -208,7 +216,9 @@ export function WorkspaceShortcut({ row, onPress }: WorkspaceShortcutProps) {
       disabled={target.disabled && !onPress}
       opacity={target.disabled && !onPress ? 0.5 : 1}
       cursor={target.disabled && !onPress ? "default" : "pointer"}
-      hoverStyle={target.disabled && !onPress ? undefined : { borderColor: "$accentBackground" }}
+      hoverStyle={
+        target.disabled && !onPress ? undefined : { borderColor: componentColors.selection.ring }
+      }
       pressStyle={target.disabled && !onPress ? undefined : { scale: 0.98 }}
       role="button"
       aria-label={row.label}

package/types/chrome/BackofficeAwesomebar.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"BackofficeAwesomebar.d.ts","sourceRoot":"","sources":["../../src/chrome/BackofficeAwesomebar.tsx"],"names":[],"mappings":"AAcA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAMjC,2EAA2E;AAC3E,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,GAAG,CAAC,0BAA0B,CAAC,CAAC;CAC5C;AAaD,wBAAgB,oBAAoB,CAAC,EAAE,QAAQ,EAAE,GAAE,yBAA8B,2CA+ChF"}
+{"version":3,"file":"BackofficeAwesomebar.d.ts","sourceRoot":"","sources":["../../src/chrome/BackofficeAwesomebar.tsx"],"names":[],"mappings":"AAeA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,OAAO,CAAC;AAQjC,2EAA2E;AAC3E,MAAM,WAAW,0BAA0B;IACzC,yEAAyE;IACzE,KAAK,EAAE,MAAM,IAAI,CAAC;CACnB;AAED,MAAM,WAAW,yBAAyB;IACxC,8EAA8E;IAC9E,QAAQ,CAAC,EAAE,GAAG,CAAC,0BAA0B,CAAC,CAAC;CAC5C;AAaD,wBAAgB,oBAAoB,CAAC,EAAE,QAAQ,EAAE,GAAE,yBAA8B,2CAqDhF"}

package/types/chrome/CommandPalette.d.ts

@@ -2,5 +2,11 @@ export interface CommandPaletteProps {
     open: boolean;
     onOpenChange: (open: boolean) => void;
 }
-export declare function CommandPalette({ open, onOpenChange }: CommandPaletteProps): import("react/jsx-runtime").JSX.Element;
+/**
+ * The palette is a modal of its own, not a part of the top bar it opens
+ * from: it resets the Surface ceiling the bar sets (`bar.sizeToken`, `$3`)
+ * so its rows keep the default menuRow pitch shared with DropdownMenu and
+ * Select (LC-78 bounds nesting, and a modal does not nest in its trigger).
+ */
+export declare function CommandPalette(props: CommandPaletteProps): import("react/jsx-runtime").JSX.Element;
 //# sourceMappingURL=CommandPalette.d.ts.map

package/types/chrome/CommandPalette.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"CommandPalette.d.ts","sourceRoot":"","sources":["../../src/chrome/CommandPalette.tsx"],"names":[],"mappings":"AAgEA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;CACvC;AAED,wBAAgB,cAAc,CAAC,EAAE,IAAI,EAAE,YAAY,EAAE,EAAE,mBAAmB,2CA4SzE"}
+{"version":3,"file":"CommandPalette.d.ts","sourceRoot":"","sources":["../../src/chrome/CommandPalette.tsx"],"names":[],"mappings":"AAgEA,MAAM,WAAW,mBAAmB;IAClC,IAAI,EAAE,OAAO,CAAC;IACd,YAAY,EAAE,CAAC,IAAI,EAAE,OAAO,KAAK,IAAI,CAAC;CACvC;AAED;;;;;GAKG;AACH,wBAAgB,cAAc,CAAC,KAAK,EAAE,mBAAmB,2CAMxD"}

package/types/chrome/NotificationsButton.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"NotificationsButton.d.ts","sourceRoot":"","sources":["../../src/chrome/NotificationsButton.tsx"],"names":[],"mappings":"AAwBA,wBAAgB,mBAAmB,4CAmElC"}
+{"version":3,"file":"NotificationsButton.d.ts","sourceRoot":"","sources":["../../src/chrome/NotificationsButton.tsx"],"names":[],"mappings":"AAyBA,wBAAgB,mBAAmB,4CAoElC"}

package/types/chrome/UserMenu.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"UserMenu.d.ts","sourceRoot":"","sources":["../../src/chrome/UserMenu.tsx"],"names":[],"mappings":"AAqBA,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,QAAQ,CAAC,EAAE,WAAW,EAAE,GAAE,aAAkB,2CAuJ3D"}
+{"version":3,"file":"UserMenu.d.ts","sourceRoot":"","sources":["../../src/chrome/UserMenu.tsx"],"names":[],"mappings":"AA+BA,MAAM,WAAW,aAAa;IAC5B,mDAAmD;IACnD,WAAW,CAAC,EAAE,OAAO,CAAC;CACvB;AAED,wBAAgB,QAAQ,CAAC,EAAE,WAAW,EAAE,GAAE,aAAkB,2CA6M3D"}