@multiplatform.one/backoffice 7.34.3 → 7.35.0

package/src/chrome/command-palette-model.ts

@@ -76,6 +76,7 @@ export interface CommandPaletteModel {
   items: CommandPaletteItem[];
   /** Global search in flight for the debounced query. */
   searching: boolean;
+  searchUnavailable: boolean;
   /** The trimmed query the sections were built from. */
   query: string;
   /** Trimmed query is non-empty. */
@@ -135,8 +136,16 @@ export function useCommandPaletteModel({
   const capabilities = useBackofficeCapabilities();
   const isDoctypeAllowed = useIsDoctypeAllowed();
 
-  const { catalog } = useAwesomebarCatalog();
-  const { hits, searching } = useGlobalSearch(debouncedQuery);
+  const { catalog } = useAwesomebarCatalog(open);
+  const remote = useGlobalSearch(open ? debouncedQuery.trim() : "");
+  const trimmed = query.trim();
+  const searching =
+    open && Boolean(trimmed) && (trimmed !== debouncedQuery.trim() || remote.searching);
+  const searchUnavailable = open && remote.query === trimmed && remote.error;
+  const hits = useMemo(
+    () => (remote.query === trimmed ? remote.hits : []),
+    [remote.query, remote.hits, trimmed],
+  );
   const [recents, setRecents] = useState<RecentItem[]>([]);
 
   // Fresh recents on every open (another surface may have pushed a visit
@@ -152,8 +161,6 @@ export function useCommandPaletteModel({
     };
   }, [open]);
 
-  const trimmed = query.trim();
-
   const sections = useMemo<CommandPaletteSection[]>(() => {
     const next: CommandPaletteSection[] = [];
 
@@ -284,8 +291,9 @@ export function useCommandPaletteModel({
     sections,
     items,
     searching,
+    searchUnavailable,
     query: trimmed,
     hasQuery: Boolean(trimmed),
-    noResults: Boolean(trimmed) && !searching && items.length === 0,
+    noResults: Boolean(trimmed) && !searching && !searchUnavailable && items.length === 0,
   };
 }

package/src/chrome/notifications-data.tsx

@@ -24,7 +24,8 @@ import {
   type FrappeApp,
 } from "@multiplatform.one/frappe";
 import { useFrappeConfig } from "@multiplatform.one/frappe-ui";
-import { useCallback, useEffect, useMemo, useState } from "react";
+import { useCallback, useMemo, useState } from "react";
+import { useSessionIdentity } from "../shared/sessionUser";
 import { useFrappeApp } from "../shared/useFrappeApp";
 import { parseFrappeTimestamp, stripHtmlToText } from "./notifications-utils";
 
@@ -72,54 +73,6 @@ const MARK_ALL_AS_READ_METHOD =
 // Session user (module cache — one fetch per FrappeApp per session)
 // ---------------------------------------------------------------------------
 
-const sessionUserCache = new WeakMap<FrappeApp, Promise<string | undefined>>();
-
-interface SessionUserState {
-  user?: string;
-  /** True once the probe settled (Guest / unreachable resolve to no user). */
-  resolved: boolean;
-}
-
-function useNotificationsSessionUser(fixtureMode: boolean): SessionUserState {
-  const app = useFrappeApp();
-  const [state, setState] = useState<SessionUserState>({ resolved: false });
-
-  useEffect(() => {
-    // Fixture mode has no session endpoint; report resolved-with-no-user.
-    // No app (no provider config) settles the same way so the panel never
-    // skeletons forever.
-    if (fixtureMode || !app) {
-      setState({ resolved: true });
-      return;
-    }
-    let cancelled = false;
-    let promise = sessionUserCache.get(app);
-    if (!promise) {
-      promise = app
-        .call()
-        .get<{ message?: string }>("frappe.auth.get_logged_user")
-        .then((res) => {
-          const user = res.payload?.message;
-          return user && user !== "Guest" ? user : undefined;
-        })
-        .catch(() => {
-          // Evict failed probes so a later mount can retry.
-          sessionUserCache.delete(app);
-          return undefined;
-        });
-      sessionUserCache.set(app, promise);
-    }
-    promise.then((user) => {
-      if (!cancelled) setState({ user, resolved: true });
-    });
-    return () => {
-      cancelled = true;
-    };
-  }, [app, fixtureMode]);
-
-  return state;
-}
-
 // ---------------------------------------------------------------------------
 // Mark-as-read RPCs
 // ---------------------------------------------------------------------------
@@ -174,7 +127,7 @@ export function useNotifications(): UseNotificationsResult {
   const config = useFrappeConfig();
   const app = useFrappeApp();
   const fixtureMode = Boolean(config?.fixtures);
-  const { user: sessionUser, resolved: sessionResolved } = useNotificationsSessionUser(fixtureMode);
+  const { user: sessionUser, resolved: sessionResolved } = useSessionIdentity();
 
   // Stable connection config (fresh identities would churn the collection).
   const connectionConfig = useMemo(

package/src/chrome/notifications-panel.tsx

@@ -5,6 +5,7 @@
  * the popover/sheet shell live in NotificationsButton.
  */
 import {
+  componentColors,
   Avatar,
   Button,
   EmptyState,
@@ -91,7 +92,7 @@ function NotificationRow({ item, onPress }: { item: NotificationItem; onPress: (
             width="$0.75"
             height="$0.75"
             borderRadius={1000}
-            backgroundColor="$accentBackground"
+            backgroundColor={componentColors.indicator.mark}
           />
         </View>
       )}
@@ -180,13 +181,9 @@ export function NotificationsPanel({
         <NotificationSkeletonRows />
       ) : items.length === 0 ? (
         <EmptyState
-          compact
+          size="$3"
           paddingVertical="$6"
           title={t("notifications.emptyTitle", "No new notifications")}
-          description={t(
-            "notifications.emptyDescription",
-            "Mentions, assignments, and shares will show up here.",
-          )}
         />
       ) : (
         <YStack>

package/src/chrome/user-session.tsx

@@ -7,8 +7,14 @@ import React from "react";
  * frappe.client.get_value(User, <name>, ["full_name","user_image","email"]).
  */
 import type { FrappeApp } from "@multiplatform.one/frappe";
-import { useFrappeConfig } from "@multiplatform.one/frappe-ui";
+import { useFrappeConfig, type FrappeConfig } from "@multiplatform.one/frappe-ui";
 import { useEffect, useMemo, useState } from "react";
+import {
+  clearSessionIdentityCache,
+  loadSessionUser,
+  sessionUserKey,
+  useSessionRevision,
+} from "../shared/sessionUser";
 import { useFrappeApp } from "../shared/useFrappeApp";
 
 export interface SessionUserInfo {
@@ -26,14 +32,12 @@ interface UserDocBits {
   email?: string;
 }
 
-// Keyed by FrappeApp instance: a different bench/auth config gets its own
-// entry (useFrappeApp memoizes apps per config). Failed fetches self-evict
-// so the next mount retries.
-let sessionCache = new WeakMap<FrappeApp, Promise<SessionUserInfo>>();
+const sessionCache = new Map<string, Promise<SessionUserInfo>>();
 
 /** Logout hygiene: drops every cached session-user fetch in this module. */
 export function clearSessionUserCache(): void {
-  sessionCache = new WeakMap();
+  sessionCache.clear();
+  clearSessionIdentityCache();
 }
 
 /** Resolve a User.user_image value (usually "/files/…") to an absolute URL. */
@@ -47,8 +51,13 @@ export function resolveUserImageUrl(
   return `${baseURL.replace(/\/+$/, "")}${userImage.startsWith("/") ? "" : "/"}${userImage}`;
 }
 
-async function fetchSessionUserInfo(app: FrappeApp, baseURL: string): Promise<SessionUserInfo> {
-  const user = await app.auth().getLoggedInUser();
+async function fetchSessionUserInfo(
+  app: FrappeApp,
+  config: FrappeConfig,
+): Promise<SessionUserInfo> {
+  const user = await loadSessionUser(config);
+  const baseURL = config.baseURL ?? "";
+  if (user === "Guest") return { user, fullName: user };
   if (!user) throw new Error("No session user");
   // Param format probed against the bench: filters takes the plain docname,
   // fieldname a JSON array (the http client JSON-encodes non-string params).
@@ -74,26 +83,28 @@ export function useSessionUserInfo(): {
 } {
   const app = useFrappeApp();
   const config = useFrappeConfig();
-  const baseURL = config?.baseURL ?? "";
+  const revision = useSessionRevision();
+  const key = config ? sessionUserKey(config) : "";
   const [info, setInfo] = useState<SessionUserInfo | undefined>(undefined);
   const [loading, setLoading] = useState(true);
   const [error, setError] = useState<Error | undefined>(undefined);
 
   useEffect(() => {
-    if (!app) {
+    if (!app || !config || config.fixtures) {
       setInfo(undefined);
       setLoading(false);
       return;
     }
     let cancelled = false;
-    let promise = sessionCache.get(app);
+    let promise = sessionCache.get(key);
     if (!promise) {
-      promise = fetchSessionUserInfo(app, baseURL);
-      sessionCache.set(app, promise);
+      promise = fetchSessionUserInfo(app, config);
+      sessionCache.set(key, promise);
       promise.catch(() => {
-        if (sessionCache.get(app) === promise) sessionCache.delete(app);
+        if (sessionCache.get(key) === promise) sessionCache.delete(key);
       });
     }
+    setInfo(undefined);
     setLoading(true);
     setError(undefined);
     promise
@@ -110,7 +121,7 @@ export function useSessionUserInfo(): {
     return () => {
       cancelled = true;
     };
-  }, [app, baseURL]);
+  }, [app, key, config, revision]);
 
   return useMemo(() => ({ info, loading, error }), [info, loading, error]);
 }

package/src/config/BackofficeProvider.spec.tsx

@@ -53,13 +53,14 @@ function renderShell(props: Partial<BackofficeProviderProps> = {}) {
 
 describe("BackofficeProvider capability flags", () => {
   it("renders the full chrome by default", () => {
-    const { container } = renderShell();
+    renderShell();
 
     expect(screen.getByTestId("backoffice-shell")).toBeTruthy();
     expect(screen.getByTestId("backoffice-awesomebar")).toBeTruthy();
     expect(screen.getByTestId("backoffice-notifications-button")).toBeTruthy();
     expect(screen.getByTestId("backoffice-help-trigger")).toBeTruthy();
-    expect(container.querySelector('[aria-label="User menu"]')).toBeTruthy();
+    expect(screen.getByRole("button", { name: "Log in" })).toBeTruthy();
+    fireEvent.click(screen.getByRole("button", { name: "Toggle sidebar" }));
     expect(screen.getByTestId("backoffice-sidebar-rail")).toBeTruthy();
     expect(screen.getByText("page body")).toBeTruthy();
   });
@@ -79,7 +80,9 @@ describe("BackofficeProvider capability flags", () => {
     expect(screen.queryByTestId("backoffice-notifications-button")).toBeNull();
     expect(screen.queryByTestId("backoffice-help-trigger")).toBeNull();
     expect(container.querySelector('[aria-label="User menu"]')).toBeNull();
+    expect(screen.queryByRole("button", { name: "Log in" })).toBeNull();
     expect(screen.queryByTestId("backoffice-sidebar-rail")).toBeNull();
+    expect(screen.queryByTestId("backoffice-sidebar-toggle")).toBeNull();
     // Content always renders — flags remove chrome, not the page.
     expect(screen.getByText("page body")).toBeTruthy();
   });
@@ -98,6 +101,7 @@ describe("BackofficeProvider capability flags", () => {
       slots: { renderSidebarFooter: () => <div data-testid="host-sidebar-footer">custom</div> },
     });
 
+    fireEvent.click(screen.getByRole("button", { name: "Toggle sidebar" }));
     expect(screen.getByTestId("host-sidebar-footer")).toBeTruthy();
   });
 });

package/src/config/BackofficeProvider.tsx

@@ -80,6 +80,11 @@ export interface BackofficeAppearance {
   setScheme: (scheme: "light" | "dark" | "system") => void;
 }
 
+export interface BackofficeAuth {
+  login: () => void | Promise<void>;
+  logout?: () => void | Promise<void>;
+}
+
 /** Result contract of a host navigation blocker (one's useBlocker shape). */
 export interface BackofficeNavigationBlocker {
   blocked: boolean;
@@ -167,6 +172,7 @@ export interface BackofficeProviderProps {
   slots?: BackofficeSlots;
   /** Color-scheme adapter for the user menu's "Toggle Theme". */
   appearance?: BackofficeAppearance;
+  auth?: BackofficeAuth;
   /** Router-integration hooks (navigation blocker, …). */
   integrations?: BackofficeIntegrations;
   /** Event bus — every notable backoffice action lands here. */
@@ -189,6 +195,7 @@ export interface BackofficeConfig {
   actions: BackofficeActions;
   slots: BackofficeSlots;
   appearance?: BackofficeAppearance;
+  auth?: BackofficeAuth;
   integrations?: BackofficeIntegrations;
   /** Emit an event to the host's `onEvent` bus (no-op when unset). */
   emitEvent: (event: BackofficeEvent) => void;
@@ -262,6 +269,7 @@ export function BackofficeProvider({
   actions,
   slots,
   appearance,
+  auth,
   integrations,
   onEvent,
   i18nInstance,
@@ -333,6 +341,7 @@ export function BackofficeProvider({
       actions: actions ?? {},
       slots: slots ?? {},
       appearance,
+      auth,
       integrations,
       emitEvent,
     }),
@@ -346,6 +355,7 @@ export function BackofficeProvider({
       actions,
       slots,
       appearance,
+      auth,
       integrations,
       emitEvent,
     ],

package/src/config/capabilities.spec.ts

@@ -0,0 +1,13 @@
+import { describe, expect, it } from "vitest";
+import { resolveCapabilities } from "./capabilities";
+
+describe("form builder capability", () => {
+  it("defaults on and accepts boolean or configured opt-outs", () => {
+    expect(resolveCapabilities().formBuilder.enabled).toBe(true);
+    expect(resolveCapabilities({ formBuilder: false }).formBuilder.enabled).toBe(false);
+    expect(resolveCapabilities({ formBuilder: { enabled: false } }).formBuilder.enabled).toBe(
+      false,
+    );
+    expect(resolveCapabilities({ formBuilder: {} }).formBuilder.enabled).toBe(true);
+  });
+});

package/src/config/capabilities.ts

@@ -46,6 +46,8 @@ export interface BackofficeCapabilities {
   newDoc?: CapabilityInput;
   /** List bulk-action bar (multi-select edit/assign/tag/delete). */
   bulkActions?: CapabilityInput;
+  /** Form layout editor and its document-menu entry. Defaults on. */
+  formBuilder?: CapabilityInput;
   /** Form sidebar attachments section. */
   attachments?: CapabilityInput;
   /** Form activity timeline (comments, versions, communications). */
@@ -86,6 +88,7 @@ export interface ResolvedBackofficeCapabilities {
   views: ResolvedCapability & { allow: readonly BackofficeView[] };
   newDoc: ResolvedCapability;
   bulkActions: ResolvedCapability;
+  formBuilder: ResolvedCapability;
   attachments: ResolvedCapability;
   timeline: ResolvedCapability;
   assignments: ResolvedCapability;
@@ -143,6 +146,7 @@ export function resolveCapabilities(
     }),
     newDoc: resolveFlag<ResolvedCapability>(input.newDoc, { enabled: true }),
     bulkActions: resolveFlag<ResolvedCapability>(input.bulkActions, { enabled: true }),
+    formBuilder: resolveFlag<ResolvedCapability>(input.formBuilder, { enabled: true }),
     attachments: resolveFlag<ResolvedCapability>(input.attachments, { enabled: true }),
     timeline: resolveFlag<ResolvedCapability>(input.timeline, { enabled: true }),
     assignments: resolveFlag<ResolvedCapability>(input.assignments, { enabled: true }),

package/src/desk/Desk.spec.tsx

@@ -21,6 +21,13 @@ import { createMemoryNavigator } from "../navigation/navigator";
 import { Desk } from "./Desk";
 import type { DeskSurfaceProps } from "./DeskSurface";
 import { useDeskScope } from "./scope";
+import { guessDeskTarget } from "./target";
+
+vi.mock("../formBuilder/FormBuilderScreen", () => ({
+  FormBuilderScreen: ({ doctype }: { doctype?: string }) => (
+    <div data-testid="builder-screen">{doctype ?? "picker"}</div>
+  ),
+}));
 
 const MOCK_HOST = "https://desk-assembly.mock.test";
 
@@ -360,3 +367,44 @@ describe("<Desk frappe> under an ambient FrappeProvider", () => {
     expect(screen.getByTestId("probe-connection").textContent).toBe(AMBIENT_HOST);
   });
 });
+
+describe("<Desk /> form builder dispatch", () => {
+  it("guesses builder targets for navigation interception", () => {
+    expect(guessDeskTarget("/admin/customize-form?doc_type=Sales%20Order", "/admin")).toEqual({
+      kind: "form-builder",
+      doctype: "Sales Order",
+    });
+  });
+  it.each([undefined, "Sales Order"])("opens the builder for %s", (doctype) => {
+    const path = doctype
+      ? `/customize-form?doc_type=${encodeURIComponent(doctype)}`
+      : "/customize-form";
+    renderWithProviders(<Desk frappe={frappe()} basePath="/admin" path={path} />);
+    expect(screen.getByTestId("builder-screen").textContent).toBe(doctype ?? "picker");
+  });
+
+  it("supports a form-builder surface override", () => {
+    renderWithProviders(
+      <Desk
+        frappe={frappe()}
+        path="/customize-form?doc_type=ToDo"
+        surfaces={{ "form-builder": { ToDo: SurfaceProbe } }}
+      />,
+    );
+    expect(screen.getByTestId("probe-form-builder").textContent).toContain('"ToDo"');
+  });
+
+  it("blocks the builder and its overrides when the capability is off", () => {
+    renderWithProviders(
+      <Desk
+        frappe={frappe()}
+        path="/customize-form"
+        capabilities={{ formBuilder: false }}
+        surfaces={{ "form-builder": SurfaceProbe }}
+      />,
+    );
+    expect(screen.getByText("Not found")).toBeTruthy();
+    expect(screen.queryByTestId("builder-screen")).toBeNull();
+    expect(screen.queryByTestId("probe-form-builder")).toBeNull();
+  });
+});

package/src/desk/Desk.tsx

@@ -18,6 +18,7 @@ import {
   BackofficeProvider,
   type BackofficeActions,
   type BackofficeAppearance,
+  type BackofficeAuth,
   type BackofficeFrappeConfig,
   type BackofficeIntegrations,
 } from "../config/BackofficeProvider";
@@ -99,6 +100,7 @@ export interface DeskProps {
   slots?: BackofficeSlots;
   /** Color-scheme adapter for the user menu's "Toggle Theme". */
   appearance?: BackofficeAppearance;
+  auth?: BackofficeAuth;
   /** Router-integration hooks (navigation blocker, …). */
   integrations?: BackofficeIntegrations;
 
@@ -233,6 +235,7 @@ export function Desk(props: DeskProps) {
       actions={props.actions}
       slots={props.slots}
       appearance={props.appearance}
+      auth={props.auth}
       integrations={props.integrations}
       onEvent={props.onEvent}
     >
@@ -300,5 +303,26 @@ function DeskBody({
       </YStack>
     );
   }
-  return <BackofficeShell>{surface}</BackofficeShell>;
+  return (
+    <BackofficeShell title={target ? deskTargetTitle(target) : undefined}>
+      {surface}
+    </BackofficeShell>
+  );
+}
+
+/** The surface name a compact banner shows; home falls back to the desk title. */
+function deskTargetTitle(target: DeskTarget): string | undefined {
+  switch (target.kind) {
+    case "list":
+    case "view":
+    case "new":
+    case "form":
+      return target.doctype;
+    case "workspace":
+      return target.workspace;
+    case "report":
+      return target.reportName;
+    default:
+      return undefined;
+  }
 }

package/src/desk/DeskSurface.spec.tsx

@@ -80,6 +80,7 @@ const everyKind: DeskTarget[] = [
   { kind: "view", doctype: TASK_DOCTYPE, view: "kanban" },
   { kind: "new", doctype: TASK_DOCTYPE },
   { kind: "form", doctype: TASK_DOCTYPE, name: "QDT-0001" },
+  { kind: "form-builder", doctype: TASK_DOCTYPE },
   { kind: "report", reportName: "Open Tasks" },
   { kind: "not-found", slug: "nope" },
 ];
@@ -100,6 +101,7 @@ describe("<DeskSurface />", () => {
             new: Probe,
             form: Probe,
             report: Probe,
+            "form-builder": Probe,
             "not-found": Probe,
           }}
         />,

package/src/desk/DeskSurface.tsx

@@ -9,6 +9,8 @@
  */
 import { Spinner, YStack } from "@multiplatform.one/components";
 import { useMemo, type ComponentType } from "react";
+import { useBackofficeCapabilities } from "../config/BackofficeProvider";
+import { FormBuilderScreen } from "../formBuilder/FormBuilderScreen";
 import { setCreatePrefill } from "../form/createPrefill";
 import { DocFormScreen } from "../form/DocFormScreen";
 import { DoctypeListScreen } from "../list/DoctypeListScreen";
@@ -85,6 +87,10 @@ export function DeskSurface({
   initialFilters,
   views,
 }: DeskSurfaceHostProps) {
+  const capabilities = useBackofficeCapabilities();
+  if (target.kind === "form-builder" && !capabilities.formBuilder.enabled) {
+    return <NotFoundScreen />;
+  }
   const Override = resolveOverride(overrides, target);
   if (Override) return <Override target={target} readOnly={readOnly} />;
 
@@ -115,6 +121,8 @@ export function DeskSurface({
       // returns, so this branch and a bare <FrappeForm> resolve a doctype
       // the same way.
       return <DocFormScreen doctype={target.doctype} name={target.name} readOnly={readOnly} />;
+    case "form-builder":
+      return <FormBuilderScreen doctype={target.doctype} />;
     case "report":
       return <QueryReportScreen reportName={target.reportName} />;
     case "not-found":

package/src/desk/resolveDeskPath.spec.ts

@@ -172,3 +172,23 @@ describe("resolveDeskPath rejections", () => {
     });
   });
 });
+
+describe("form builder addresses", () => {
+  it("reserves the single customize-form segment for the picker", () => {
+    expect(resolveDeskPath("/backoffice/customize-form")).toEqual({
+      kind: "form-builder",
+      doctype: undefined,
+    });
+    expect(
+      resolveDeskPath("/admin/customize-form", "/admin", { doc_type: ["Sales Order", "ToDo"] }),
+    ).toEqual({ kind: "form-builder", doctype: "Sales Order" });
+  });
+
+  it("keeps named Customize Form documents on the form route", () => {
+    expect(resolveDeskPath("/backoffice/customize-form/Sales%20Order")).toEqual({
+      kind: "slug-name",
+      slug: "customize-form",
+      name: "Sales Order",
+    });
+  });
+});

package/src/desk/resolveDeskPath.ts

@@ -32,6 +32,7 @@ export interface DeskViewParams {
  */
 export type DeskAddress =
   | { kind: "home" }
+  | { kind: "form-builder"; doctype?: string }
   | { kind: "slug"; slug: string; filtersParam?: string; sortParam?: string }
   | {
       kind: "slug-view";
@@ -58,7 +59,7 @@ function decode(segment: string): string {
 
 /**
  * Resolve `path` (no query string; query lives in `params`, One-router
- * semantics) against the six route shapes `createBackofficePaths` writes.
+ * semantics) against the seven route shapes `createBackofficePaths` writes.
  * Paths outside `basePath` resolve to `not-found`.
  */
 export function resolveDeskPath(
@@ -77,6 +78,10 @@ export function resolveDeskPath(
   const segments = rest.split("/").filter(Boolean).map(decode);
   if (segments.length === 0) return { kind: "home" };
 
+  if (segments.length === 1 && segments[0] === "customize-form") {
+    return { kind: "form-builder", doctype: first(params.doc_type) };
+  }
+
   if (segments[0] === "query-report") {
     if (segments.length === 2 && segments[1]) {
       return { kind: "report", reportName: segments[1], filtersParam: first(params.filters) };

package/src/desk/target.ts

@@ -20,6 +20,7 @@ import { resolveDeskPath, type DeskAddress, type DeskViewParams } from "./resolv
 
 export type DeskTarget =
   | { kind: "home" }
+  | { kind: "form-builder"; doctype?: string }
   | { kind: "workspace"; workspace: string }
   | { kind: "list"; doctype: string; filtersParam?: string; sortParam?: string }
   | {
@@ -72,6 +73,8 @@ function addressToTarget(
   switch (address.kind) {
     case "home":
       return { kind: "home" };
+    case "form-builder":
+      return { kind: "form-builder", doctype: address.doctype };
     case "report":
       return { kind: "report", reportName: address.reportName, filtersParam: address.filtersParam };
     case "not-found":

package/src/form/DocFormScreen.guest.screen.spec.tsx

@@ -121,6 +121,10 @@ describe("DocFormScreen with DocType meta refused (LC-96)", () => {
     expect(screen.queryByText(/Could not load/)).toBeNull();
     expect(screen.queryByLabelText("Owner", { exact: true })).toBeNull();
     expect(button("Save")).toBeUndefined();
+    expect(screen.queryByTestId("form-toolbar-footer")).toBeNull();
+    expect(
+      screen.getByTestId("form-toolbar").contains(screen.getByTestId("form-toolbar-menu")),
+    ).toBe(true);
     expect(metaReads).toBe(1);
   });
 
@@ -149,13 +153,13 @@ describe("DocFormScreen with DocType meta refused (LC-96)", () => {
     expect(screen.queryByRole("button", { name: /retry/i })).toBeNull();
   });
 
-  it("says the reader can't create, with each server message on its own line", async () => {
+  it("explains a create refusal without exposing server internals", async () => {
     renderForm("new");
     const state = await screen.findByTestId("frappe-form-not-permitted", {}, settle);
     expect(state.textContent).toContain(`You can't create ${doctype}`);
     const lines = Array.from(state.querySelectorAll("p")).map((node) => node.textContent);
-    expect(lines).toContain("You are not permitted to access this resource. Login to access");
-    expect(lines).toContain("Function frappe.desk.form.load.getdoctype is not whitelisted.");
+    expect(lines).toContain("You don't have permission to create this document.");
+    expect(state.textContent).not.toMatch(/frappe\.|whitelisted|Function/);
     expect(lines.some((line) => line?.includes("accessFunction"))).toBe(false);
     expect(button("Save")).toBeUndefined();
   });