gloomberb 0.17.6 → 0.18.0

package/src/api-client/web-experiments.ts

@@ -13,6 +13,7 @@
  * later milestone as `experiments`, which the API turns into `exp_<key>` and
  * saves to the account once they sign in.
  */
+import { logFailure } from "../utils/log-failure";
 
 export interface StorageLike {
   getItem(key: string): string | null;
@@ -75,6 +76,7 @@ function read(storage: StorageLike, key: string): string | null {
   try {
     return storage.getItem(key);
   } catch {
+    // Intentional ignore: Private browsing may deny optional experiment storage.
     return null;
   }
 }
@@ -83,7 +85,7 @@ function write(storage: StorageLike, key: string, value: string): void {
   try {
     storage.setItem(key, value);
   } catch {
-    /* Private browsing still runs the terminal; the arm is just not remembered. */
+    // Intentional ignore: Private browsing may deny optional experiment storage.
   }
 }
 
@@ -112,7 +114,8 @@ export function exposeExperiment(experiment: string, env: WebExperimentEnvironme
     let answer: ExperimentAnswer;
     try {
       answer = await env.ask({ experiment, variant: assignments.get(experiment) });
-    } catch {
+    } catch (error) {
+      logFailure("cloud-experiments", "Experiment exposure request failed")(error);
       // Not counted, so the next page load in this session may ask again.
       return null;
     }

package/src/api-client/yield-curves.ts

@@ -33,9 +33,26 @@ export interface CloudCurveView {
     percentile1y: number | null;
     observations1y: number;
   }>;
+  /** Each tenor's 1D and 1W move ranked against its whole stored history; absent on servers older than it. */
+  moves?: CloudCurveMove[];
   checkedAt: string | null;
 }
 
+/** How big a tenor's move into the session was, against every move of the same horizon through it. */
+export interface CloudCurveMove {
+  tenor: string;
+  horizon: "1D" | "1W";
+  /** The session the move is measured from (the day before, or seven days before, within ten days). */
+  from: string | null;
+  /** Percentage points. */
+  change: number | null;
+  /** Midrank percentile of the move's size, 0 to 100; null below a year of moves. */
+  percentile: number | null;
+  observations: number;
+  /** The session the oldest ranked move ends on. */
+  since: string | null;
+}
+
 /** One tenor of a stored curve over time, oldest first (`GET /cloud/econ/curves/:curve/history`). */
 export interface CloudCurveHistory {
   curve: CloudCurveHeader;

package/src/app/command-bar-intro.ts

@@ -0,0 +1,38 @@
+import type { AppConfig } from "../types/config";
+
+/**
+ * The empty command bar's introduction: the Start Here rows in plain words and
+ * a placeholder with plain words to type. It shows for the first opens of the
+ * empty bar on this machine and then never again, so the bar settles into the
+ * list someone who knows the codes expects.
+ */
+const COMMAND_BAR_INTRO_OPENS = 10;
+
+/**
+ * Where the count stops: one past the last open with the introduction. It
+ * changes no more after that, so it is never saved again.
+ */
+const COMMAND_BAR_OPENS_DONE = COMMAND_BAR_INTRO_OPENS + 1;
+
+/**
+ * The saved count, or done when there is none. A new config starts at 0, so a
+ * config without one was made by a build from before the count, by someone who
+ * has been opening the bar all along.
+ */
+export function sanitizeCommandBarOpens(value: unknown): number {
+  if (typeof value !== "number" || !Number.isFinite(value)) return COMMAND_BAR_OPENS_DONE;
+  return Math.min(COMMAND_BAR_OPENS_DONE, Math.max(0, Math.floor(value)));
+}
+
+/** The count after the empty bar opens once more. */
+export function recordCommandBarOpen(opens: number | undefined): number {
+  return Math.min(COMMAND_BAR_OPENS_DONE, sanitizeCommandBarOpens(opens) + 1);
+}
+
+/**
+ * Whether the open bar is one of the first opens. The count already includes
+ * this open, so it reads the same for as long as the bar stays open.
+ */
+export function showsCommandBarIntro(config: Pick<AppConfig, "commandBarOpens">): boolean {
+  return sanitizeCommandBarOpens(config.commandBarOpens) <= COMMAND_BAR_INTRO_OPENS;
+}

package/src/app/keybindings/actions.ts

@@ -231,7 +231,7 @@ export const KEYBINDING_ACTIONS: readonly KeybindingActionDef[] = [
   {
     id: "pane-share",
     category: "Pane Management",
-    description: "Share the focused pane: post a picture to chat or copy its link.",
+    description: "Share the focused pane: copy a link to it.",
     defaults: ["CmdOrCtrl+Shift+S"],
   },
   {

package/src/app/pane-runtime/pane-template-runtime.ts

@@ -11,6 +11,7 @@ import type { DataProvider } from "../../types/data-provider";
 import type {
   PaneDef,
   PaneTemplateCreateOptions,
+  PaneTemplateDef,
   PaneTemplateInstanceConfig,
 } from "../../types/plugin";
 
@@ -35,6 +36,39 @@ interface UseAppPaneTemplateRuntimeOptions {
   tickerRepository: AppTickerRepositoryPort;
 }
 
+/**
+ * Whether shared data opens the pane by itself: the template takes it whole
+ * (a chart a plugin built), so its settings form would ask for what the data
+ * already says. A template that restores shares decides; any other takes data
+ * that holds something.
+ */
+function shareDataOpens(template: Pick<PaneTemplateDef, "publicShare">, shareData: unknown): boolean {
+  if (!shareData || typeof shareData !== "object" || Array.isArray(shareData)) return false;
+  const restore = template.publicShare?.restore;
+  if (!restore) return Object.keys(shareData).length > 0;
+  try {
+    return restore(shareData as Record<string, unknown>) !== null;
+  } catch {
+    // Intentional ignore: data the template cannot restore asks for its settings form instead.
+    return false;
+  }
+}
+
+/**
+ * Whether opening a template asks for its settings first, in the same form the
+ * command bar opens, which creates the pane when it is sent.
+ */
+export function templateAsksForSettings(
+  template: Pick<PaneTemplateDef, "wizard" | "publicShare">,
+  options: PaneTemplateCreateOptions | undefined,
+): boolean {
+  return !!template.wizard
+    && template.wizard.length > 0
+    && !options?.values
+    && !shareDataOpens(template, options?.shareData)
+    && (!options?.arg || template.wizard.some((step) => step.type === "textarea"));
+}
+
 export function useAppPaneTemplateRuntime({
   buildPaneInstance,
   dataProvider,
@@ -49,13 +83,7 @@ export function useAppPaneTemplateRuntime({
     const template = pluginRegistry.paneTemplates.get(templateId);
     if (!template) return;
 
-    // A template that asks for settings asks in the same form the command bar
-    // opens, which creates the pane when it is sent.
-    const asksForSettings = !!template.wizard
-      && template.wizard.length > 0
-      && !options?.values
-      && (!options?.arg || template.wizard.some((step) => step.type === "textarea"));
-    if (asksForSettings) {
+    if (templateAsksForSettings(template, options)) {
       openFormModal({ kind: "pane-template", templateId, arg: options?.arg, options });
       return;
     }

package/src/app/pane-runtime/plugin-bindings.ts

@@ -177,6 +177,10 @@ export function bindAppPanePluginRegistry({
       if (isDetachedWindow || isDialogOpen()) return;
       dispatch({ type: "SET_COMMAND_BAR", open: true, query });
     },
+    runCommandBarQuery: (query) => {
+      if (isDetachedWindow || isDialogOpen()) return;
+      dispatch({ type: "SET_COMMAND_BAR", open: true, query, launch: { kind: "run-query", query } });
+    },
     // Forms submit through the main window's state, so a detached window says where to go.
     openPluginCommandWorkflow: (commandId) => {
       if (isDetachedWindow) {

package/src/app/pane-runtime/ticker-open-runtime.ts

@@ -24,8 +24,8 @@ import {
   tickerOpenFailureMessage,
   type TickerOpenTarget,
 } from "../../tickers/open-target";
-import { AmbiguousTickerError, findExactTickerSearchMatch } from "../../tickers/search";
-import { isDialogOpen } from "../../ui/dialog-stack";
+import { findExactTickerSearchMatch } from "../../tickers/search";
+import { offerTickerListings, publishTickerOpenTarget as publishOpenTarget } from "./ticker-open-target";
 import { parsePublicTickerKey, publicTickerKey } from "../../utils/exchanges";
 import { attentionActionForPane, captureAttentionAction } from "../../telemetry/attention-counts";
 import { tickerHasListingSuffix } from "../../sources/listing-symbols";
@@ -79,11 +79,7 @@ export function useAppTickerOpenRuntime({
       return target;
     } catch (err) {
       if (!canPresentFeedback()) return null;
-      // Ticker search offers the listings, unless a dialog would sit over the bar.
-      if (err instanceof AmbiguousTickerError && !isDialogOpen()) {
-        dispatch({ type: "SET_COMMAND_BAR", open: true, query: rawSymbol,
-          launch: { kind: "ticker-search", query: rawSymbol } });
-      }
+      offerTickerListings(err, rawSymbol, dispatch);
       const message = err instanceof Error ? err.message : String(err);
       pluginRegistry.notify({ body: `Failed to open ${rawSymbol}: ${message}`, type: "error" });
       return null;
@@ -91,13 +87,7 @@ export function useAppTickerOpenRuntime({
   }, [dataProvider, dispatch, pluginRegistry, stateRef, tickerRepository]);
 
   const publishTickerOpenTarget = useCallback((target: TickerOpenTarget) => {
-    const currentTicker = stateRef.current.tickers.get(target.symbol);
-    if (currentTicker !== target.ticker) {
-      dispatch({ type: "UPDATE_TICKER", ticker: target.ticker });
-    }
-    if (target.created) {
-      pluginRegistry.events.emit("ticker:added", { symbol: target.symbol, ticker: target.ticker });
-    }
+    publishOpenTarget(target, { tickers: stateRef.current.tickers, dispatch, events: pluginRegistry.events });
   }, [dispatch, pluginRegistry.events, stateRef]);
 
   /**

package/src/app/pane-runtime/ticker-open-target.ts

@@ -0,0 +1,31 @@
+import type { Dispatch } from "react";
+import type { PluginRegistry } from "../../plugins/registry";
+import type { AppAction } from "../../state/app/context";
+import type { TickerRecord } from "../../types/ticker";
+import type { TickerOpenTarget } from "../../tickers/open-target";
+import { AmbiguousTickerError } from "../../tickers/search";
+import { isDialogOpen } from "../../ui/dialog-stack";
+
+/**
+ * A resolved open joins the app's tickers: the store takes the record when it
+ * is not the one it holds, and a ticker new to the app is announced once.
+ * Every open, from the command bar, a link or a pane, publishes it this way.
+ */
+export function publishTickerOpenTarget(target: TickerOpenTarget, { tickers, dispatch, events }: {
+  tickers: ReadonlyMap<string, TickerRecord>;
+  dispatch: Dispatch<AppAction>;
+  events: Pick<PluginRegistry["events"], "emit">;
+}): void {
+  if (tickers.get(target.symbol) !== target.ticker) {
+    dispatch({ type: "UPDATE_TICKER", ticker: target.ticker });
+  }
+  if (target.created) {
+    events.emit("ticker:added", { symbol: target.symbol, ticker: target.ticker });
+  }
+}
+
+/** An open whose symbol names several listings offers them in ticker search, unless a dialog would sit over the bar. */
+export function offerTickerListings(error: unknown, rawSymbol: string, dispatch: Dispatch<AppAction>): void {
+  if (!(error instanceof AmbiguousTickerError) || isDialogOpen()) return;
+  dispatch({ type: "SET_COMMAND_BAR", open: true, query: rawSymbol, launch: { kind: "ticker-search", query: rawSymbol } });
+}

package/src/app/runtime/desktop-deeplink.ts

@@ -1,3 +1,4 @@
+import { logFailure } from "../../utils/log-failure";
 import { useEffect, type Dispatch } from "react";
 import { apiClient } from "../../api-client";
 import { getDockedPaneIds } from "../../layout/pane-manager";
@@ -81,9 +82,7 @@ function parseGloomUrl(rawUrl: string): ParsedGloomUrl | null {
   let url: URL;
   try {
     url = new URL(rawUrl);
-  } catch {
-    return null;
-  }
+  } catch { /* Intentional ignore: Malformed external deep links are rejected as non-matches. */ return null; }
   if (url.protocol !== "gloomberb:") return null;
 
   const host = url.hostname.trim().toLowerCase();
@@ -575,7 +574,7 @@ export function handleDesktopDeepLink(rawUrl: string, options: DesktopDeepLinkHa
       if (action.route.kind === "cloud-success") {
         requestAccountManagementTab("pro");
         // Checkout just completed: re-read the session so the new plan shows at once.
-        void chatController.refreshSession().catch(() => {});
+        void chatController.refreshSession().catch(logFailure("app.runtime.desktop-deeplink", "Checkout session refresh failed"));
       }
       options.pluginRegistry.showPane("account-management");
       notifySuccess(options.pluginRegistry, action.message);

package/src/app/runtime/plugin-bindings.ts

@@ -1,3 +1,4 @@
+import { logFailure } from "../../utils/log-failure";
 import type { Dispatch } from "react";
 import {
   clearPersistedBrokerAccounts,
@@ -136,7 +137,7 @@ export function bindPluginRegistryRuntimeAccess({
       const broker = pluginRegistry.brokers.get(instance.brokerType);
       if (!broker) throw new Error(`Broker "${instance.brokerType}" is not available.`);
 
-      const valid = await broker.validate(instance).catch(() => false);
+      const valid = await broker.validate(instance).catch(logFailure("app.runtime.plugin-bindings", "Broker setup validation failed", false));
       if (!valid) throw new Error(`${broker.name} setup is incomplete.`);
 
       await broker.connect?.(instance);
@@ -272,7 +273,7 @@ export function bindPluginRegistryRuntimeAccess({
       pluginRegistry.events.emit("config:changed", { config: nextConfig });
       // The profile that kept a portfolio fills in what the removed one held there.
       for (const heirId of new Set(heirs.values())) {
-        void importBrokerPositions(heirId).catch(() => {});
+        void importBrokerPositions(heirId).catch(logFailure("app.runtime.plugin-bindings", "Replacement broker positions import failed"));
       }
     },
   });

package/src/app/runtime/startup.ts

@@ -1,3 +1,4 @@
+import { logFailure } from "../../utils/log-failure";
 import { useCallback, useEffect, type Dispatch } from "react";
 import { loadPersistedBrokerAccountMap } from "../../brokers/account-cache";
 import type { AppSessionSnapshot } from "../../core/state/session-persistence";
@@ -155,7 +156,7 @@ export function useAppStartupRuntime({
           sessionHydrationTargetCount: sessionSnapshot?.hydrationTargets.length ?? 0,
         });
       } catch (err) {
-        // Will show empty state.
+        logFailure("app.runtime.startup", "Workspace startup hydration failed")(err);
       }
     })();
   }, [
@@ -215,9 +216,7 @@ export function useAppStartupRuntime({
     });
     void Promise.race([pluginsReady, waitForPlugins]).then(() => {
       recordRestoredFunctions(restoredUsageFunctions(config.layout, pluginRegistry, config.disabledPlugins));
-    }).catch(() => {
-      /* Counting is best effort and must not surface as a crash. */
-    });
+    }).catch(logFailure("app.runtime.startup", "Restored function usage recording failed"));
   }, [getState, isDetachedWindow, pluginRegistry, pluginsReady, state.initialized]);
 
   useEffect(() => {

package/src/app/runtime/ticker-refresh.ts

@@ -1,3 +1,4 @@
+import { logFailure } from "../../utils/log-failure";
 import { useCallback, useEffect, useRef, type Dispatch } from "react";
 import type { MarketDataCoordinator } from "../../market-data/coordinator";
 import { instrumentFromTicker, type InstrumentRef } from "../../market-data/request-types";
@@ -75,10 +76,10 @@ export function useTickerRefreshRuntime({
       const data = entry.data ?? entry.lastGoodData;
       if (data) pluginRegistry.events.emit("ticker:refreshed", { symbol: instrument.symbol, financials: data });
       const currency = data?.quote?.currency;
-      if (currency) void marketData.loadFxRate(currency).catch(() => {});
-      void marketData.loadFxRate(baseCurrency).catch(() => {});
-    } catch {
-      // Silently fail - will show "—" for missing data.
+      if (currency) void marketData.loadFxRate(currency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
+      void marketData.loadFxRate(baseCurrency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
+    } catch (error) {
+      logFailure("app.runtime.ticker-refresh", "Ticker refresh failed")(error);
     } finally {
       refreshInFlight.delete(key);
       setRefreshing(instrument.symbol, false);
@@ -93,10 +94,10 @@ export function useTickerRefreshRuntime({
       const entry = await marketData.loadQuote(instrument, { forceRefresh: true });
       const quote = entry.data ?? entry.lastGoodData;
       if (!quote) return;
-      if (quote.currency) void marketData.loadFxRate(quote.currency).catch(() => {});
-      void marketData.loadFxRate(baseCurrency).catch(() => {});
-    } catch {
-      // Silently fail - the list can fall back to stale cache or the backend.
+      if (quote.currency) void marketData.loadFxRate(quote.currency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
+      void marketData.loadFxRate(baseCurrency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
+    } catch (error) {
+      logFailure("app.runtime.ticker-refresh", "Quote refresh failed")(error);
     } finally {
       quoteRefreshInFlight.delete(key);
     }
@@ -154,10 +155,10 @@ export function useTickerRefreshRuntime({
             const data = entry.data ?? entry.lastGoodData;
             if (instrument && data) {
               pluginRegistry.events.emit("ticker:refreshed", { symbol: instrument.symbol, financials: data });
-              if (data.quote?.currency) void marketData.loadFxRate(data.quote.currency).catch(() => {});
+              if (data.quote?.currency) void marketData.loadFxRate(data.quote.currency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
             }
           });
-          void marketData.loadFxRate(baseCurrency).catch(() => {});
+          void marketData.loadFxRate(baseCurrency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
         } finally {
           for (const { instrument, key } of runnable) {
             refreshInFlight.delete(key);
@@ -183,9 +184,9 @@ export function useTickerRefreshRuntime({
           const results = await marketData.loadQuotesBatch(runnable.map(({ instrument }) => instrument));
           for (const entry of results) {
             const quote = entry.data ?? entry.lastGoodData;
-            if (quote?.currency) void marketData.loadFxRate(quote.currency).catch(() => {});
+            if (quote?.currency) void marketData.loadFxRate(quote.currency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
           }
-          void marketData.loadFxRate(baseCurrency).catch(() => {});
+          void marketData.loadFxRate(baseCurrency).catch(logFailure("app.runtime.ticker-refresh", "Refreshing an exchange rate failed"));
         } finally {
           for (const { key } of runnable) {
             quoteRefreshInFlight.delete(key);

package/src/app/runtime/update.ts

@@ -1,3 +1,4 @@
+import { logFailure } from "../../utils/log-failure";
 import { useCallback, useEffect, useRef, type Dispatch } from "react";
 import type { PluginRegistry } from "../../plugins/registry";
 import { saveConfigImmediately } from "../../state/config-save-scheduler";
@@ -214,13 +215,13 @@ export function useAppUpdateRuntime({
     const isUpgrade = !!config.lastLaunchedVersion;
     const nextConfig = { ...config, lastLaunchedVersion: VERSION };
     dispatch({ type: "SET_CONFIG", config: nextConfig });
-    void saveConfigImmediately(nextConfig).catch(() => {});
+    void saveConfigImmediately(nextConfig).catch(logFailure("update", "Saving the last launched version failed"));
     // Nightly builds come daily and the changelog lists stable releases only.
     if (!isUpgrade || isPrereleaseVersion(VERSION)) return;
     // Opened by the app, not the user: usage counts leave it out.
     void runAutomated(() => pluginRegistry.createPaneFromTemplateAsync("changelog-pane", {
       values: { version: VERSION },
-    })).catch(() => {});
+    })).catch(logFailure("update", "Opening release notes failed"));
   }, [dispatch, enabled, isDetachedWindow, pluginRegistry, stateRef]);
 
   useEffect(() => {

package/src/architecture/core-builtin-allowlist.json

@@ -20,10 +20,7 @@
   "src/cli/pane-functions/screenshot.ts": ["chart-composer","econ-statistics","market-valuation","portfolio-list","ticker-detail","time-sales"],
   "src/components/command-bar/commands/direct/index.ts": ["broker-manager"],
   "src/components/command-bar/routes/root/help-items.ts": ["help"],
-  "src/components/command-bar/workflow/builtin.ts": ["portfolio-list"],
   "src/components/command-bar/workflow/ops.ts": ["correlation","portfolio-list","ticker-detail"],
-  "src/components/form-modal/routes.ts": ["portfolio-list"],
-  "src/components/index.ts": ["portfolio-list"],
   "src/components/layout/shell/index.tsx": ["cloud"],
   "src/components/onboarding/use-onboarding-upgrade.ts": ["chat"],
   "src/layout/desks.ts": ["chart-composer"],

package/src/architecture/silent-catch-allowlist.json

@@ -0,0 +1,3 @@
+{
+
+}

package/src/architecture/ui-literals-allowlist.json

@@ -0,0 +1,186 @@
+{
+  "src/cli/desktop-pane-shot.ts": {
+    "literals": {
+      "font size": 1
+    },
+    "why": "A pane picture's caption, drawn by the CLI into a page without the app's styles."
+  },
+  "src/components/metric-treemap/heat-surface.tsx": {
+    "literals": {
+      "font size": 2,
+      "font weight": 1,
+      "radius": 2
+    },
+    "why": "Heat map tiles size, weigh and round their labels to fit each tile; the hover tooltip is the kit's tooltip surface."
+  },
+  "src/components/metric-treemap/index.tsx": {
+    "literals": {
+      "font size": 1,
+      "font weight": 1,
+      "radius": 1,
+      "spacing": 1
+    },
+    "why": "Treemap labels are fitted and padded to their tile's size."
+  },
+  "src/components/onboarding/onboarding-frame.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "The progress bar is a 2px data mark rounded at its ends."
+  },
+  "src/components/ui/country-flag.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "A flag is a data mark with its own small rounding."
+  },
+  "src/components/ui/fields.tsx": {
+    "literals": {
+      "spacing": 1
+    },
+    "why": "A framed text area's text keeps 6px off its frame above and below, the padding its fields were given in #1426; its sides are the inset."
+  },
+  "src/components/ui/range-track.tsx": {
+    "literals": {
+      "radius": 1,
+      "spacing": 1
+    },
+    "why": "The range track is a data mark rounded at its ends; its marker is centred on its value by a negative margin."
+  },
+  "src/components/ui/ratio-bar.tsx": {
+    "literals": {
+      "radius": 2
+    },
+    "why": "Ratio bar segments are data marks rounded at their ends."
+  },
+  "src/components/ui/split-bar.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "Split bar segments are data marks rounded at their ends."
+  },
+  "src/plugins/builtin/chat/attachments/desktop.tsx": {
+    "literals": {
+      "font size": 3,
+      "radius": 5,
+      "spacing": 2
+    },
+    "why": "Chat has its own owner and conventions; reported, not changed (GLO-768)."
+  },
+  "src/plugins/builtin/chat/content/handle-prompt.tsx": {
+    "literals": {
+      "font weight": 1,
+      "spacing": 2
+    },
+    "why": "Chat has its own owner and conventions; reported, not changed (GLO-768)."
+  },
+  "src/plugins/builtin/chat/message/pane-chip.tsx": {
+    "literals": {
+      "font weight": 1,
+      "radius": 3,
+      "spacing": 2
+    },
+    "why": "Chat has its own owner and conventions; reported, not changed (GLO-768)."
+  },
+  "src/plugins/builtin/credit-documents/gauge.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "The gauge's fill is a data mark rounded at its end."
+  },
+  "src/plugins/builtin/executives/pane.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "A legend swatch is a data mark."
+  },
+  "src/plugins/builtin/gpu/ladder.tsx": {
+    "literals": {
+      "radius": 4,
+      "spacing": 6
+    },
+    "why": "Ladder rungs, ranges and markers are data marks, centred on their values by negative margins."
+  },
+  "src/plugins/builtin/revenue-breakdown/bars.tsx": {
+    "literals": {
+      "radius": 1,
+      "spacing": 3
+    },
+    "why": "Revenue bars are data marks, spaced by their own gaps."
+  },
+  "src/plugins/builtin/supply-chain/graph-pane.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "A graph node's dot is a data mark."
+  },
+  "src/plugins/builtin/world-venue-map/geo-svg.tsx": {
+    "literals": {
+      "font weight": 1
+    },
+    "why": "Map labels are fitted to the map's shapes."
+  },
+  "src/plugins/builtin/world-venue-map/map.tsx": {
+    "literals": {
+      "radius": 1
+    },
+    "why": "A legend swatch is the series' line, drawn as a data mark."
+  },
+  "src/renderers/dom/build-assets.ts": {
+    "literals": {
+      "grey": 1
+    },
+    "why": "The page's background before the app's styles load."
+  },
+  "src/renderers/dom/desktop/controls.tsx": {
+    "literals": {
+      "font size": 1,
+      "grey": 4,
+      "spacing": 2
+    },
+    "why": "The checkbox's tick is white on the accent for contrast in every theme; the message composer (its size and padding) belongs to chat."
+  },
+  "src/renderers/dom/host/media-surface.tsx": {
+    "literals": {
+      "grey": 3
+    },
+    "why": "A video's letterbox is black in every theme."
+  },
+  "src/renderers/dom/host/overflow-fade.ts": {
+    "literals": {
+      "grey": 4
+    },
+    "why": "Black here is a mask's opacity, not a colour."
+  },
+  "src/renderers/dom/host/surface-3d.tsx": {
+    "literals": {
+      "grey": 1,
+      "radius": 2
+    },
+    "why": "The 3D surface's colour bar and probe are data marks."
+  },
+  "src/renderers/dom/styles.css": {
+    "literals": {
+      "font size": 2,
+      "grey": 9,
+      "radius": 1,
+      "spacing": 17
+    },
+    "why": "The root font size the tokens scale from, the fatal page drawn when the app could not start (its own size, button, spacing and fallbacks), theme fallbacks inside var(), Windows' red close button, the pane header's 7px beside its 1px edge, the 1px a band or bar leaves its hairline, the toast's own layout (indicator, heading, actions) and the call player's thumb centred on its track."
+  },
+  "src/renderers/share/styles.css": {
+    "literals": {
+      "font size": 8,
+      "grey": 2,
+      "radius": 2,
+      "spacing": 43
+    },
+    "why": "Share pages are a separate public page with their own styles."
+  },
+  "src/types/config.ts": {
+    "literals": {
+      "font size": 1
+    },
+    "why": "The default font size setting, a number of pixels the user changes."
+  }
+}

package/src/architecture/ui-tokens-allowlist.json

@@ -0,0 +1,40 @@
+{
+  "ADJ": [
+    {
+      "measure": "inset",
+      "value": 0,
+      "component": "LevelLine",
+      "why": "Registry plugin (gloomberb-adjacent-indices): its detail's level line is its own code and is fixed in its repository."
+    }
+  ],
+  "CFNG": [
+    {
+      "measure": "font size",
+      "value": 31,
+      "component": "SvgText",
+      "why": "Registry plugin (gloomberb-crypto-fear-greed): the gauge's figure is drawn to the gauge's size, a fitted chart label."
+    },
+    {
+      "measure": "font weight",
+      "value": 800,
+      "component": "SvgText",
+      "why": "Registry plugin (gloomberb-crypto-fear-greed): the gauge's figure, as above."
+    }
+  ],
+  "CHAT": [
+    {
+      "measure": "inset",
+      "value": 7.2,
+      "component": "PaneSidebarRow",
+      "why": "Chat has its own owner: its channel rows start 7px in (reported, not changed, in GLO-768)."
+    }
+  ],
+  "FXMD_REST_HEALTH": [
+    {
+      "measure": "inset",
+      "value": 0,
+      "component": "ResearchPane",
+      "why": "Registry plugin (gloomberb-fxmacrodata): its results line is its own code and is fixed in its repository."
+    }
+  ]
+}