pixelize-design-library 2.4.2-beta.64 → 2.4.2-beta.66

package/CHANGELOG.md

@@ -3,9 +3,9 @@
 All notable changes to `pixelize-design-library`.
 
 Versions follow semver. The `beta` dist-tag is released manually from the active feature branch;
-`latest` is published by CI from `develop`. **Pin a prerelease exactly** (`2.4.2-beta.43`, never
-`^2.4.2-beta.43`) — a caret range on a prerelease is satisfied by the next stable publish, which
-silently downgrades you.
+`latest` is published by CI from `develop`. **Pin a prerelease exactly** (`X.Y.Z-beta.N`, never
+`^X.Y.Z-beta.N`) — a caret range on a prerelease is satisfied by that version's stable release as
+soon as it exists, which silently downgrades you.
 
 Found a bug or a gap? Report it as a GitHub issue and track it to closure — see
 [COMPONENT-GOTCHAS.md](COMPONENT-GOTCHAS.md#found-a-gap-or-a-bug-report-it-then-track-it). A fix's
@@ -18,12 +18,82 @@ next major.
 
 ### Added
 
+- **Development warning for an unthemed `colorScheme`.** `Tag` (dot), `RadioButton` and every style that resolves a scale
+  by name now log one `console.warn` per unknown name outside production, then fall back exactly as before (gray, or
+  primary for `RadioButton`). Nothing throws and production is silent.
+- **Six prop types reach the package root.** `CopyButtonProps`, `FilterSidebarProps`, `LazyWrapperProps`,
+  `ScrollToTopProps`, `FieldSelectModalProps` and `ThemedSwitchProps` (the props of `InputSwitch`) were declared beside
+  their exported components but not re-exported. Type-only, additive.
+- **`Tag` `removeLabel` and `TagInput` `labels.remove`.** Name the chip remove button in your own language: `removeLabel`
+  takes a string or a function of the label, `labels.remove` a function of the tag. Both default to `Remove <label>`, so
+  existing output is unchanged.
+- **`TextInput` `onRightIconClick`**: the correctly spelt name for the right-icon button handler. It wins when both
+  names are set; omitted, the output is exactly as before.
+- **`TimePicker` `onClear`**: makes the "--" option pickable once a time is set; choosing it in any select calls `onClear`
+  instead of `onChange` (which still only emits a `Date`). Omitted, the output is exactly as before.
+- **`Slider` `showPauseControl`** (default off) adds a play/pause button for the auto-advance (WCAG 2.2.2). It shows only
+  while the timer can run (`interval` > 0, two or more slides, no reduced motion). Omitted, the output is exactly as before.
+- **`formatRelativeTime` takes `{ labels, locale }`.** `labels` ({`justNow`, `minutesAgo(n)`, `hoursAgo(n)`, `daysAgo(n)`})
+  replaces the English wording and `locale` sets the short date shown past a week (default `en-US`). Omitted, the output is
+  exactly as before.
+- **`Tag` and `IconButton` accept any typed `data-*` prop.** The type moved from `Button` to `Common/dataAttributes.ts`; `Tag`
+  now puts every `data-*` prop on its root (chip and dot), not only `data-testid`. Omitted, the output is exactly as before.
+- **`ChoiceCardGroup` `columns` and `gap`; `ChoiceCard` `isDisabled`.** `columns` (default `1`, today's column) lays the
+  cards out in an equal-width grid, `gap` sets the space between them, and `isDisabled` is an alias of `disabled`
+  (either disables the card and skips it for the tab stop). Omitted, the output is exactly as before.
+- **`VerifyEmailOtp` `subtitle` and `labels`**: `subtitle` replaces the hardcoded second line "your new Pixel Account"
+  (`""` drops it); `labels` ({`verificationCode`, `digit(index, total)`, `didntReceive`, `resend`}) replaces the English
+  UI text. Both optional; omitted, the text is exactly as before.
+- **`WorkspaceTrayPreview` render-prop children**: `{({ triggerProps }) => <button {...triggerProps} />}` hands the one
+  focusable trigger `aria-expanded`, plus `aria-controls` and `aria-describedby` pointing at the card while it is open.
+  Plain `ReactNode` children work as before and get no ARIA (a bare wrapper `div` cannot hold `aria-expanded`).
+- **`Select` (`native={false}`) gains nine additive props, all default-off.** Search: `searchFields`
+  (`["label","description"]` makes the description searchable) and `filterOption(option, query)` (replaces the
+  substring match). Multi: `isSelectAll` (Select All / Unselect All row over the rows the filter shows, skipping
+  disabled ones), `chipMaxLength`, `isChipRemovable`. Trigger: `rightIcon` (static, or a labelled button via
+  `onClick` + `ariaLabel`) and `isFieldLoading` (spinner in the trailing slot, `aria-busy`). Create: `createWhen`
+  (`"no-exact-match"` offers Create beside partial matches) and `footerAction` (a persistent last row that calls
+  `onSelect(query)` and closes). The Select All, Create and footer rows are keyboard stops.
+- **`TagInput` `labels`**: translate the rejection messages (`maxTags`, `duplicate`, `invalid`) and the live-region announcements
+  (`added`, `removed`); omitted keys keep today's English text. The chips' `Remove <tag>` buttons are named by `Tag` and stay English.
+
+- **`FilteredEmptyState`, and `QueryStateBoundary` `isFiltered` / `filteredEmpty`.** The "nothing matches your filters" panel:
+  `filterCount`, `onClearFilters`, `onRemoveLastFilter` (+ `removeLastFilterLabel`, `clearLabel`), `scale` `"page" | "card"`,
+  `title`, `description`. On the boundary, `isEmpty` + `isFiltered` shows it instead of `empty`/`emptyFallback`; omitted, the
+  boundary is unchanged.
+
+- **`ConfirmDialog` consequences.** `entityName` / `entityKind` (default title `Delete leave type "Sabbatical"?`), `dependents`,
+  `consequence` (defaults to "This cannot be undone." with `entityName`), `alternative` (`label`, `description`, `onSelect`,
+  `isLoading`; Confirm turns outline, focus still opens on Cancel) and `isConfirmDisabled`. `iconBg` / `iconColor` are now
+  optional and derive a soft tint from `tone`; `title` is optional when `entityName` is set. Existing call sites render as before.
+
+- **`PIXELIZE_SUITE`, `resolveSuiteApps` and `buildSuiteApps` `devFallbackBaseUrl`.** One catalogue of the six suite apps with
+  per-app `preRelease` and `overrides`; `devFallbackBaseUrl` lets a plain-`localhost` host derive the other apps from a labelled
+  dev URL instead of throwing (the throw stays the default).
+
+- **`RangeDatePicker` `presets`**: `{ label, range: { from, to } }[]` replaces the five built-in shortcuts; `[]` hides the row.
+  Omitted, the list is unchanged.
+
 - **`WorkspaceTray` is usable over an open modal.** It is portalled above the modal layer, labelled as a live region
   (so Chakra's modal aria-hidden skips it) and outside the focus trap, so a window minimised over a wizard can be
-  restored without closing the wizard. New props: `placement` (`"bottom-end"` | `"bottom-start"`), `offset`,
+  restored by pointer without closing the wizard; Tab does not reach the tray until the modal closes. New props:
+  `placement` (`"bottom-end"` | `"bottom-start"`), `offset`,
   `closeLabel(item)`, `dirtyLabel`, `label`; `WorkspaceTrayItem` gains `isDirty` (unsaved dot) and `subtitle`.
   `WorkspaceWindow` gains `labels` ({minimize, close, openFullPage}) and `finalFocusRef`.
   The tray now renders in a portal, so a test that queries inside its render container must query `document.body`.
+- **`WorkspaceTray` `renderItem` receives the built-in pill** as a third argument, `renderItem(item, api, pill)`: the pill
+  already carries the unsaved dot, subtitle and close button, so a consumer can return it or wrap it (in
+  `WorkspaceTrayPreview` for a hover preview, say) instead of rebuilding it. Two-argument callbacks and the default
+  pill are unchanged.
+- **`FormDrawer` `isSubmitDisabled`**: disables the primary button and makes the form ignore Enter and any other submit,
+  so `onSubmit` never fires, not even from `requestSubmit()` or a dispatched submit event (the drawer is a real
+  `<form>`; the button alone does not guard those). Unlike `isSubmitting` it shows no spinner, and Cancel and every
+  close path stay live. Omitted, nothing changes.
+- **`WizardDialog` `chrome="inline"`** (default `"modal"`): draws the wizard (title, stepper, step, review, footer) in place
+  with no Modal, for a host that is already the dialog, such as a `WorkspaceWindow`: no overlay, focus trap, close X,
+  Esc-to-close or `role="dialog"`. It renders nothing while `isOpen` is false, ignores `size`, and Cancel still calls
+  `onClose`. It reuses the same flow as the modal (`useWizardFlow`, `validate`, `finishDisabled`, `finishBlockedReason`,
+  `stepId`); test ids are `wizard-inline` / `${data-testid}-inline`. `Wizard` does not take the prop.
 - **`optionRowFill(rows, isActive)`** and **`optionRowCursorSx(rows)`** are exported from the package root: the one
   fill an option row paints (the cursor's), and its `:hover`/`:focus` form for roving-focus lists.
 - **`accentTextOnPlanes(scale, planes)`** is exported from the package root: the first accent rung clearing AA on every
@@ -95,6 +165,53 @@ next major.
   document-wide `prefers-reduced-motion` rule; `pz-motion-keep` (`MOTION_KEEP_CLASS`) opts an element out.
   The default is unchanged. `CustomThemeProps` gains `zIndices.popoverNested` and the two font sizes, so
   code that hand-builds a full `CustomThemeProps` needs those keys.
+- **`LauncherSearchEngine.matches` and `.createMatcher`**: the boolean form of the engine for table and list filters.
+  `matches(query, ...texts)` is true when every query word hits some text (same folding, typo tolerance and `synonyms`
+  option as `search`, no ranking); `createMatcher(query)` compiles the query once for a loop over rows, and an empty query
+  matches every row. `LauncherMatcher` is exported as a type.
+- **`LauncherSearchEngine` searches Hindi and Tamil by written letter**: Latin accents, the Devanagari nukta and
+  zero-width joiners are ignored, chandrabindu folds into anusvara, and every other combining mark stays part of its
+  letter, so a bare vowel sign never matches ("का" does not find "कमाई"). Typo length and distance count letters
+  ("कम्मचारी" finds "कर्मचारी"), and a Tamil word ending in ம் also finds titles that drop it ("நேரம்" finds "நேர அட்டவணை").
+  `editDistance` accepts arrays of letters. Latin results are unchanged. `engine/conformance.fixture.json` is the
+  behaviour contract shared with HRMS mobile search, asserted by `engine/conformance.test.ts`.
+- **`NavLauncher` spotlight search** (all additive; an app passing none of these renders as before):
+  - `searchMode="spotlight"` ranks every row by relevance (exact > prefix > word > word-prefix >
+    initialism > substring > typo > subsequence, label > keyword > context), tolerates typos
+    (Damerau-Levenshtein 1 from 4 letters, 2 from 8), folds case and accents, expands `synonyms`
+    both ways, boosts `pinnedIds` / `frequentIds` / `recentIds`, and shows the best row first as a
+    **Top hit** card naming the keyword or fact that matched. Groups collapse to `groupLimit` rows
+    (default 5 in spotlight, unlimited in classic) behind a "Show N more" option.
+  - `scopes` + `activeScope` / `onScopeChange`: filter chips in the header row beside the field
+    (their own row below `md`), always shown so they say what can be searched; while typing each
+    chip shows its live match count and is named "People, 3 results". One Tab stop (radiogroup,
+    roving tabindex, arrows / Home / End); the strip scrolls sideways behind an edge fade with a
+    mouse page arrow and keeps the selected chip in view, so the field never drops below 15rem (or a
+    third of a wide row). "All" is prepended, `screens`
+    and `actions` are built in and `LauncherResultGroup.scope` (default its `id`) places any other
+    group. A chip other than All / Screens picked with an empty field lists that scope's items as
+    passed, with the facts pane; `LauncherScope.placeholder` narrows the field's placeholder.
+  - `quickActions`: up to 5 pill buttons at the top of the menu while the query is empty and the
+    scope is All.
+  - `LauncherSearchItem.facts` (`{ label, value, copyable? }`): a right preview pane at `lg`+ for the
+    highlighted row with Copy buttons (blocked clipboard selects the value instead), docked under the
+    list below `lg`. `answers` (items with `answer: { label, value, hint? }`) render as direct-answer
+    cards above every result; Enter copies an answer that has no `run` / `href`.
+  - `LauncherResultGroup.matchLocally`: the launcher filters and ranks a static group itself.
+  - `LauncherSearchEngine` — the framework-free engine behind it (`createIndex`, `search`,
+    `searchDocuments`, `highlightRanges`, `usageBoosts`, `foldText`, `tokenize`, `editDistance`; options
+    `synonyms`, `boosts`, `fuzzy`, `relativeCutoff`, `limit`) for any other list or palette; `highlightSegments` now exported, with an opt-in `{ fuzzy, synonyms }`.
+  - New optional `LauncherLabels` keys: `topHit`, `matchedOn`, `answers`, `hintCopy`, `scopes`,
+    `scopeAll`, `scopeChanged`, `scopeCount`, `scopeEmpty`, `quickActions`, `showMore`, `preview`,
+    `copy`, `copied`, `copySelected`.
+  - The dialog is now always named `labels.title`; the search value and `headerActions` no longer
+    join its accessible name.
+  - Types `LauncherFact`, `LauncherAnswer`, `LauncherScope`, `LauncherSearchMode`, `HighlightOptions`,
+    `LauncherSearch*` / `LauncherSynonyms` / `LauncherMatchKind` / `LauncherTokenMatch`.
+- `CopyButton` `onCopyError` — fires when the clipboard is missing or denied, instead of failing silently.
+- `Drawer` `aria-label` / `aria-labelledby` — name the dialog instead of its whole header (a header
+  holding a field or buttons otherwise becomes the name); `contentProps["aria-labelledby"]` never
+  worked.
 - **HRMS library requests** — a navigation launcher, key caps, a merge-field `Editor`, a wizard and
   smaller gaps found by the HRMS migration:
   - `NavLauncher` — full-height navigation launcher (browse modules, pins, Frequent, Recent, search
@@ -260,8 +377,9 @@ next major.
   library; bring your own.
 
 - **Dark mode.** `PixelizeThemeProvider` (defaults to `system`), `useThemeMode`, `ThemeSwitcher`.
-  Dark palettes are derived per brand from that brand's own light palette, so brand hue carries
-  through. `withTheme` stays light-only, so existing apps are visually unchanged — dark is opt-in.
+  Dark palettes are derived per brand from that brand's own light palette: surfaces are hue-neutral,
+  and the brand hue carries through on the accent, ink, rules and rail. `withTheme` stays light-only,
+  so existing apps are visually unchanged — dark is opt-in.
 - **`MediaViewer`** — a full-screen viewer for images, video, audio, PDF, Office documents, text
   and archives, with a filmstrip, keyboard navigation and per-kind fallbacks. `index` is optional:
   omit it and the viewer owns navigation itself.
@@ -279,9 +397,53 @@ next major.
 - **`RangeSlider`** as an owned dual/single-thumb component with a `marks` prop.
 - `resolveFilledSurface(scale, colors)` — picks readable ink for any filled surface.
 - `size="2xs"` (16px) on `Avatar`, and `getInitials` to override the built-in derivation.
+- **`Drawer` / `FormDrawer` warn in development when an open drawer has no accessible name.** A drawer with no
+  `DrawerHeader`, `aria-label` or `aria-labelledby` is announced as an unnamed dialog; it now logs
+  `UNNAMED_DRAWER_WARNING` once per mount (production is silent and unchanged).
+- **77 prop types now reach the package root**, so a consumer can type a wrapper without a deep import of `dist/`:
+  `AccordionProps`, the `Apex*ChartProps` and their variant unions, `PaymentCardProps` (+ `Plan` as `PaymentCardPlan`),
+  `DropdownProps`, `FilePreviewProps`, `NoteTextAreaProps`, `NotificationProps`, the `NotificationBell*` family,
+  `PhoneNumberInputProps`, `Reorder*`, `Select{Single,Multi,Field}Props`, `SelectV2{Single,Multi}Props`, the Drawer, Modal
+  and ProfileCard slot props, `UpgradeButtonProps`, `CustomThemeProps` and more (type-only, no runtime change).
+  `src/index.propTypes.test.ts` now fails when a prop type in a `*Props` file is neither exported nor marked internal.
+- **`toCsv`, `downloadBlob`, `safeFileName` and the `TabularCell` / `TabularColumn` / `ToCsvOptions` types** (`Utils/tabular.ts`):
+  RFC 4180 CSV with a formula-injection guard (a leading `=`, `+`, `-`, `@` gets a `'`, plain signed numbers excepted) and an
+  optional BOM; a browser download that revokes its object URL; a file name safe on every OS. Port of the Mobile library's
+  `core/files/tabular.ts`. No `.xlsx` and no `Table` export button yet.
+- **Editor token helpers on the root:** `fieldToken`, `extractTokens`, `unknownTokens`, `chipHtml`, `chipify`, `serializeChips`
+  and the `ChipContext` type, so an app no longer copies `chipHtml`. `EditorMergeField` gains optional `object`,
+  `objectDescription`, `description`, `example`, `source` and `image` for a field browser; `Editor` itself ignores them.
+- **`DarkPaletteOptions` and `DarkPlanes` types** are exported, so the options of `buildDarkPalette` can be named.
+- **README Exports index.** Every value the package root exports is listed in `README.md`, grouped as components,
+  hooks, constants and helpers, so a developer or LLM with only this package can find any export. It is generated
+  (`UPDATE_README_EXPORTS=1 npx jest src/readmeExportsIndex.test.ts`) and `readmeExportsIndex.test.ts` fails when it
+  drifts from `src/index.ts`. `DESIGN-GUIDE.md` gains the type ramp (`textStyle`, `NUMERIC_TEXT`), radius by role,
+  the `Table` studio default and a table of parts that belong to a parent (`DrawerBody`, `ProfileCardFooter`,
+  `StageItem`, `MediaScrubber`, `LazyWrapper`, `AppearanceSettings`, `ApexPolarChart` and the rest).
+- **Repo tooling, no package change.** `mouseOnlyHandlers.test.ts` is a lower-only ratchet on click-only elements (host
+  elements and Chakra layout primitives with `onClick` and no `role`, `tabIndex` or key handler).
+- **Repo tooling, no package change.** `npm run size:web` bundles the root barrel with esbuild and fails over the beta.65
+  size +3% (opt-in, not wired to CI).
+- **Repo tooling, no package change.** `scripts/verify-consumers.sh` now covers `lfour/frontend`, finds consumers from a git
+  worktree (`CONSUMERS_ROOT`), writes nothing in a consumer, and exits non-zero when nothing was compared or `tsc` rejected
+  its own config, instead of printing a clean pass.
 
 ### Changed
 
+- **`ProfileCard` shares the dropped-slot dev warning with `Modal` and `Drawer`.** The helper takes any owner name and
+  warns once per owner and type (previously one set across owners); `ProfileCard` keeps its own message text.
+- **`MediaViewer` image pan no longer re-renders the viewer on every pointer move.** The pan offset is held in a ref and
+  written to the image's transform directly, so dragging a zoomed photo re-renders nothing (the toolbar and its five
+  tooltip-wrapped buttons used to re-render per move). Zooming out or resetting mid-drag now ends the drag.
+- **`MediaViewer` no longer loads `date-fns`** for its one "Uploaded" date; `Intl.DateTimeFormat` prints the same
+  `Oct 12, 2026` text (-5.6 KB gzip for an app that does not also use `DatePicker`).
+- **NavLauncher** search rows are `memo` with stable handlers: moving the active option with the arrow keys or the pointer re-renders the 2 rows that change instead of every row (80 rows: 80 renders before, 2 after); the consumer's `onClose`, `onNavigate` and `onTogglePin` may be inline functions without defeating it. Pixel-identical.
+- **`ProfileCard` warns in development when it drops a child**, once per dropped type, like `Drawer` and `Modal`: anything
+  that is not a `ProfileCardHeader`/`Body`/`Footer` (or a Fragment of them) never renders.
+- **`Table` rows render once on mount, not three times.** Measured column widths and the select slot's width only feed frozen columns and the row-detail chevron, but a fresh offsets array on every measurement re-rendered every row. Tables without a frozen column or `renderRowDetail` now keep a stable offsets array; frozen and detail tables still update when widths settle. No visual change.
+- **`Table`, `Button` and `Toaster` hairlines and small text read the tokens.** 18 `0.063rem` borders now use `BORDER_WIDTHS.hairline` and 12 pixel font sizes use the `fontSizes` keys; the token-ownership baselines drop to match (`remHairline` 24 to 6, `fontSizePx` 54 to 42). Computed styles and layout of the demo page, filter pane, chips and settings sheet are identical before and after, in light and dark.
+- **`KanbanBoard` cards no longer re-render when `onOpen` or `onDelete` is an inline arrow.** The board hands cards stable wrappers that call the latest prop, so a parent re-render leaves every card alone and a click still reaches the current handler. No visual change.
+- **`Table` header controls skip renders they do not need.** Each column's sort, search and filter-open handlers keep their identity, so hovering a header or sorting one column no longer re-renders every other column's sort icon and filter control. No visual change.
 - **Performance, no visual change** (web premium/perf campaign):
   - Theme colour math is memoised (`resolveFilledSurface`, `liftToContrast`, `softenToContrast`,
     `resolveSoftTone`, luminance) in bounded, content-keyed caches: the hot calls are 5-20x faster and
@@ -390,9 +552,71 @@ next major.
   `colorScheme` (any brand/global scale, via `resolveFilledSurface`), `isReadOnly` with real
   `aria-readonly`, and `m`/`mt`/`mb`/`ml`/`mr`/`mx`/`my` on the wrapper. `InputSwitch` is now a
   genuine thin wrapper — no prop it previously accepted is silently dropped.
+- `jsdoc/require-jsdoc` now also covers exported `*Props` / `*Options` types outside `*Props` files; around 30 types gained a one-line doc.
 
 ### Changed (visual)
 
+- **`NavLauncher` text snaps to the type scale.** The trigger, panel and spotlight (`NavLauncher`, `launcherParts`, `spotlightParts`) read
+  `xs-plus` (13px) where they drew `12.5px` and `xs-minus` (11px) where they drew `11.5px`; the `13.5px` sizes stay. Each size moves by 0.5px.
+- **Disabled `Button` dims to the shared 0.5.** The base style drew `opacity: 0.6` while every other disabled control reads
+  `DISABLED_OPACITY` (0.5); disabled buttons, and the `IconButton`s that inherit them, now read slightly dimmer.
+- **`Toaster` card no longer slides twice.** The card added a 24px `x` slide on top of Chakra's own wrapper slide (400ms), so a toast travelled twice and settled late. The card now only fades; the wrapper's slide is the only one.
+- **Focus on dark chrome draws the library's two-band ring.** `Header` edit/create buttons, the `MediaViewer` controls (icon buttons, scrubber, volume and seek thumbs) and the `Dropdown` option rows replace a single 2px band with halo + ring (`surfaceFocusRing` on the dark surface; `insetFocusRingShadow` for the rows), so the ring is 4px at its outer edge like every other control.
+- **Overlay and card elevation read the shadow tokens.** The `AppSwitcher` and `OrgSwitcher` panels use `shadows.float` (was a single `0 10px 30px` layer), `SignInActivityTable` uses `shadows.sm`, and the `SearchSelect` open-state inset border and `Timeline` node rings are `BORDER_WIDTHS.hairline` (1px) instead of `0.063rem`.
+- **Hover fades and small transforms take the motion tokens.** `CopyButton`, `CustomModulesTable`, `UserDetails`, `SignInActivityTable`, `RolesPermission`, `OrgSwitcher`, `AppSwitcher`, `NavigationBar`, `ButtonGroupIcon`, `DatePicker` days, `Checkbox`, `PlanPill`, `FilePreview` and `MediaViewer` replace literal `0.12s` / `0.15s` / `0.2s` with `transitionFor`: fades are 150ms and `PlanPill` / zoom are 200ms, on the standard curve (the `ease-out` drags use the out curve). Differences are at most 30ms.
+- **`PlanPill` and the `SideBar` chrome snap to the type scale.** `12.5px` becomes `13px` (`xs-plus`; `PlanPill` label, `SIDEBAR_CHROME.titleFontSize`) and `11.5px` / `9.5px` become `11px` (`xs-minus`; `SIDEBAR_CHROME.labelFontSize`, section captions in `MenuItems`, `OtherApps`, `PinnedSection`). Sizes change by at most 0.5px; `10px` and `15px` stay as they are.
+- **Hover lift and the `Timeline` divider use whole pixels.** `KanbanBoard` account cards and clickable `Timeline` cards lift by `-1px` (was `-0.063rem`, 1.008px at the default root size, which anti-aliases a transform), and the `Timeline` divider is `BORDER_WIDTHS.hairline` tall.
+- **Disabled and blocked rows dim to `DISABLED_OPACITY` (0.5).** `CouponField` options, `CheckoutKit` selectable cards, `SideBar` blocked items (primary and secondary), `StageProgress` / `StepperStage` and `UpgradeButton` dimmed to 0.6 or 0.55; they now match `Tag` and the token. Busy-state dims are unchanged.
+- **NavLauncher Top hit and answer cards show their ENTER chip only while active.** Both drew "ENTER" (and an answer its "copy" hint) permanently, so while another row was active two results claimed Enter; search rows already showed the chip on the active row only. The chip is hidden with `visibility`, so nothing shifts, and a card that just copied still shows "Copied".
+- **NavLauncher footer stays one row on a tablet.** Between `md` and `lg` (768-1023px) the legend plus the footer note wrapped to two rows, 53px; the "+ click for new tab" hint (a mouse hint) now shows from `lg` up, so the footer is 32px at 768px and 820px. Unchanged from `lg` up.
+- **NavLauncher footer legend follows the active entry on a Show more option and for copy-only answers.** ENTER read "open here" while a Show N more row was active although Enter expands the group; it now reads `labels.hintExpand` (new, default "expand"). The ⌘ ENTER "new tab" hint dims while the active result cannot open in a tab (a copy-only answer, an action, Show more). The ENTER label reserves the widest of its three texts, so nothing after it moves.
+- **Inset focus ring: ring on the outer edge, halo inside.** `insetFocusRingShadow` drew them the other way round, so a child
+  covering the inner band left only the surface-coloured halo. It now matches `Accordion` (unchanged). Affects NoteTextArea,
+  CalendarGrid, SearchSelect, SelectSearch, MediaGallery and the FilterSidebar range and options sections.
+- **Focus ring settles against the table header band.** `focusRing.ring` is now also lifted to 3:1 on the table header band
+  (raw and as stepped): rosewood light and lavender, meadow, skyline and slate dark move one or two lightness steps from
+  2.97-2.99:1; every other brand and mode keeps its ring.
+- **`Timeline` attachment chip hover ink clears AA in light.** The hovered chip kept the rest ink on the darker
+  `primary[100]` fill (3.86:1 radiant, 4.05:1 lavender, 4.39:1 slate); the ink is now picked against the hover fill in
+  both modes. Only light hover on brands whose rest ink fell short changes.
+- **Commerce hover fills are a visible step in dark.** `OffersList`, `CouponField`, `DetailSections`, `StickyBuyBar` (notify), `QuantityStepper`, `WishlistToggle` (soft, ghost), `ProductCard`'s off-photo action, `ProductDetails`' share button, selectable `AddressCard`/`PaymentOption` and `OptionChip` hovered `background[100]` to `[200]` (`[300]` to `[400]` for the chip), 1.05-1.08:1 in dark. The hover now steps 1.15:1 or more off the resting fill; light is unchanged.
+- **`ApexPieChart` `variant="pie-with-image"` no longer calls imgur** (two hard-coded URLs that answered 403, so the slices
+  painted nothing). Each slice now gets an inline striped texture in its own colour, light and dark. New optional
+  `images?: string[]` supplies your own sources (one per slice; the first repeats past the end).
+- **`ApexLineChart` toolbar and its "Download SVG/PNG/CSV" menu are themed in dark.** The chart never told ApexCharts the
+  canvas mode, so its menu rendered light text on a white panel (1.13:1); it now follows the palette (15:1). Light is unchanged.
+- **`FilterSidebar`'s rules inside the card use the in-card weight** (`cardRule`): the section dividers, the Filters header rule,
+  the cards-variant section edge, the range track and the range value chips. Dark lifts them off the card; light is unchanged.
+  The outer container outline keeps `boxborder[200]`.
+- **`SelectSearch`'s separator above the bottom action** uses the overlay rule (`raisedRule`) like the action row below it,
+  not Chakra's default border colour. Dark gets the in-card weight; light moves by a few channel values.
+- **`SelectSearch` colour-option swatch** uses the `full` radius token instead of `50%`. The dot is the same circle; Chromium
+  anti-aliases its edge pixels slightly differently.
+- **`Notification` countdown label keeps counting.** It was computed once at first render and stayed at "due in 5
+  hours" for the life of the card; it now refreshes every minute while a `dueDate` or `endDate` is set (no timer
+  otherwise, cleared on unmount).
+- **`NoteTextArea` dark footer band separates from the note area.** In dark the active band under the note was 1.11:1
+  against it and read as one slab; it now steps to 1.19:1, and the attachment chip fill, its remove-hover and the control
+  hover follow so a chip keeps a visible step and its text stays above 4.5:1. Light mode is byte-identical.
+- **`Notification` overdue label** reads "Task overdue by 3 hours", without the trailing "ago".
+- **`Notification` dismiss control** shows the focus ring on keyboard focus, like the title button beside it. It was
+  focusable with no visible indicator.
+- **`WorkspaceWindow` header and `WorkspaceTrayPreview` card rule in dark**: the header strip read 1.08:1 off the raised
+  window and its rule 1.00-1.07:1; both now step off `surfaceRaised` (`bandOn`, `raisedRule`) to 1.16:1 and about 1.35:1.
+  The preview card's border takes the same rule. Light is unchanged.
+- **`Table` settings sheet option cards and column-row hover outline are visible in dark.** The Density and Group option cards and the Manage Columns row hover used `boxborder[200]` on the raised surface (about 1.0-1.07:1); they now use `raisedRule`. Light is unchanged.
+- **`Table` filter pane rules and expanded row are visible in dark.** The pane's edge, header, search and Apply-bar rules use `cardRule` instead of `boxborder[200]` (1.08-1.16:1 on the lifted card), and an expanded section steps off the card with `bandOn`. Light is unchanged.
+- **`Table` active-filter strip reads as a band in dark.** The strip behind the filter chips was 1.06:1 from the card; it now uses `bandOn` (about 1.19:1), and the chip tone and Clear All ink are derived against that strip. Light is unchanged.
+- **`Table` bulk-action hover fill is visible in dark.** The hover on Delete and Mass Update used `background[100]`, which sits about 1.06:1 from the card; it now steps off the card with `bandOn` and the accent ink is re-derived against the lifted fill. Light is unchanged.
+- **`Table`'s date filter loads on demand.** The filter pane's `DatePicker` (and date-fns) no longer ships in `Table`'s static graph: the Table's initial JS drops about 7.5 KB gzip (51.9 to 44.4 KB measured with peers external) and the picker loads as its own 8.8 KB chunk, preloaded when the pane has a date item. Once loaded the control is pixel-identical; a control-height skeleton shows only if it renders before the chunk arrives.
+- **Dark surfaces are hue-neutral on every brand.** The canvas, card, overlay, named `backgroundColor` ladder,
+  `background[50-900]` and `table.hover` no longer take a brand tint (`SURFACE_SAT` 14 to 0): all 9 brands share
+  canvas `#121212`, card `#212121` (1.163:1 over the canvas) and overlay `#2c2c2c` (1.153:1 over the card), so
+  switching brand no longer recolours the app background. The brand hue stays on the accent, ink, rules and the
+  sidebar rail. Light palettes are byte-identical to before (SHA-256 of all 9 resolved light palettes). Muted dark
+  text re-derives against the neutral surfaces and shifts a few hex values on lavender, rosewood, slate and zinc
+  (lavender `#9f92aa` to `#a498ae`); every muted token still passes the same AA gate. `planes: "flat"` keeps its
+  meaning (card = canvas) on the same canvas.
 - **`Table` loading state.** With `isLoading` and no rows, each row now draws one skeleton per column (a checkbox
   placeholder in the checkbox column, blank spacer cells) with the variant's row rule, instead of one bar spanning the
   table. If `columns` is still empty while loading, the header shows four placeholder cells and a disabled select-all
@@ -461,11 +685,10 @@ next major.
   2px on hover; the shadow still deepens.
 - **`Button` (solid, outline, ghost) and `IconButton` scale to 0.98 while pressed** (`MOTION_PRESS_SCALE`).
   Never when disabled or loading, nor under `prefers-reduced-motion`.
-- **Dark planes carry the brand hue and separate by lift.** The dark canvas takes a faint brand tint and cards
-  (`background[50]`) sit one step (1.16:1) above it, with overlays (`surfaceRaised`) one step (1.15:1) above
-  the card; every filled mark keeps 3:1 on all three. Light mode is unchanged. A brand opts out with
-  `buildDarkPalette(light, { planes: "flat" })`. `meadow` and `rosewood` dark `accentText` move one rung
-  lighter so they clear AA on selected list rows.
+- **Dark planes separate by lift.** Cards (`background[50]`) sit one step (1.16:1) above the canvas, with
+  overlays (`surfaceRaised`) one step (1.15:1) above the card; every filled mark keeps 3:1 on all three. Light
+  mode is unchanged. A brand opts out of the lift with `buildDarkPalette(light, { planes: "flat" })`. `meadow`
+  and `rosewood` dark `accentText` move one rung lighter so they clear AA on selected list rows.
 - **`zinc`:** muted text in light mode is `#515157` (was `#27272a`, 14.9:1), settled under a new 8:1 muted
   ceiling; zinc's dark card is no longer darker than its canvas.
 - **A brand's primary never reads as danger.** `radiant`'s danger colour (`red` and `semantic.error`) is
@@ -484,9 +707,155 @@ next major.
 - **Light page canvas (`backgroundColor.base`) sits 1.09:1 below the card on all 9 brands**, so a borderless card keeps
   its top edge (zinc and slate `#fafafa` to `#f5f5f5`, lavender `#fbfafd` to `#f5f4f8`). `main` and every other token
   are unchanged.
+- **`NavLauncher` outlines stay visible on the dark overlay.** Scope chips and arrows, the Top hit and answer cards,
+  suggestion chips, pinned tiles, the Pin buttons, the tab bar, section rules and the rail and preview-pane edges were
+  `boxborder[200]`, 1.00-1.07:1 against `surfaceRaised` in dark (zinc 1.07, the other eight under 1.03). They now use
+  `raisedRule`: 1.32-1.39:1 against the overlay and 1.64-1.73:1 where a recessed pane meets it. Section rules inside the
+  recessed rail use `ruleOn` against `backgroundColor.subtle` (1.31-1.36:1, was 1.17-1.26:1). Measured on all 9 brands;
+  light mode is pixel-identical, since both helpers return `boxborder[200]` there.
+- **`NavLauncher` confirms a copy on screen.** Enter or a click on a copy-only answer swaps the hint on its card and in
+  the preview pane (`ENTER copy`) to `labels.copied` in `accentText` for 1.5 s, then restores it; only a visually hidden
+  live region announced a copy before. The swap reserves the longer label's width, so nothing shifts, and its fade is
+  off under `prefers-reduced-motion`. The live region still announces each copy once, focus stays in the field and a
+  blocked clipboard never shows "Copied". On touch (`hover: none`), where the hint is hidden, the label alone pins over
+  the card's right edge for the same 1.5 s.
+- **`NavLauncher` drops the keyboard-hint row below `md`.** At 390px wide the legend wrapped to three rows (63.8px) and
+  made the footer 100px tall, over a footer note that needs 32px; the footer is now 32px there, so the scrolling area
+  (results, then the Pinned block) gains 68px. Touch devices already hid the legend at any width, and from `md` up it
+  is unchanged.
+- **`Button` `outline` / `ghost` / `link` ink clears AA on the light page canvas too.** The ink was lifted against the
+  canvas, a card and an overlay but not `backgroundColor.base` (the canvas the example pages and any borderless-card layout
+  sit on, 1.09:1 under the card), where it measured 4.21-4.49:1. It now steps one rung darker in 21 brand/scheme pairs, light
+  mode only: zinc `gray` and `secondary` `#71717a` to `#52525b`, slate `primary` `#6b7280` to `#4b5563`, emerald and
+  storefront `gray` `#617474` to `#5e7070`, `purple` `#805ad5` to `#6b46c1` on 8 brands, `green` `#198341` to `#136533` on 7,
+  zinc `yellow` `#887425` to `#68591c`. Dark mode and every other `Button` pair are byte-identical.
+- **`Tabs` selected ink clears AA on the light page canvas.** The selected `outline`, `ghost` and `line` ink was lifted
+  against the tab canvas only, not `backgroundColor.base`, where slate measured 4.43:1 (record detail). On slate, light
+  mode only, that ink, the `outline` border and the `line` indicator step from `#6b7280` to `#4b5563` (6.93:1). Every
+  other brand and mode is byte-identical.
+- **`Tabs variant="ghost"` selected ink clears AA on its own tint.** The ink was lifted against the canvas, but a
+  selected ghost tab paints its own gray tint and the ink sits on that, where it measured 4.21-4.31:1 on radiant (light),
+  emerald (dark) and rosewood (dark). It now steps one rung: radiant light `#b84533` to `#983628`, emerald dark
+  `#0f9d8a` to `#14e3c7`, rosewood dark `#cb6b94` to `#ce91ab`. The other 15 brand and mode pairs are byte-identical.
+- **`FilterSidebar`'s Clear control, range triggers and value rows, and rating rows draw the focus ring on keyboard focus
+  only.** The shared halo and ring (`focusVisibleRing`), drawn inset on the value and rating rows because their panel
+  clips overflow. Rest and mouse click look exactly as before.
+- **`FilePreviewTrigger` shows its preview scrim and a focus ring on keyboard focus.** The eye-icon scrim that hover
+  reveals now also appears when the thumbnail takes keyboard focus, with the shared halo and ring (`focusVisibleRing`).
+  Rest, hover and mouse click look exactly as before.
+- **`SelectSearch`'s `isBottomIcon` footer draws the focus ring on keyboard focus only.** The shared halo and ring
+  (`insetFocusRingShadow`), drawn inset because the popup panel clips overflow. Rest, hover and mouse click look
+  exactly as before.
+- **`Editor`'s editing area joins the Tab order and its frame shows focus** (axe `scrollable-region-focusable`, WCAG
+  2.1.1 and 2.4.7). Jodit ships the surface at `tabindex="-1"`, so a keyboard could not reach the text and a
+  scrollable read-only editor could not be scrolled. `Editor` now sets `tabIndex: 0` (a `config.tabIndex` you pass
+  wins), and while focus is inside it the Jodit frame takes the field focus look: a `primary[500]` border and the soft
+  bloom, light and dark. At rest nothing changes. Each editor adds one Tab stop between its toolbar and its status bar.
+- **`OrganizationDetails`' header avatar is the library's own `Avatar`** (it rendered a raw Chakra one). Chakra picked
+  the initials ink by a brightness threshold: dark mode measured 1.98:1 (zinc 2.17:1) on all 9 brands and emerald and
+  storefront 4.26:1 in light, at 9.6px. The fill now follows the brand and mode like every other avatar and the ink
+  clears AA on all 9 brands in both modes. The avatar renders only with `userName`, since the owned `name` is required:
+  without it the grey placeholder icon is gone.
+- **`Header`'s bar row is `min-height` 4.3rem instead of a fixed `height`**, so a nav that wraps (many items, or
+  `HeaderActions` labels in a narrow bar) grows the bar around it. The fixed height let the wrapped row hang off the
+  bar onto the page canvas, where its count badge measured 1.55-1.91:1 on all 9 brands in light (axe `color-contrast`,
+  `/header`). A bar whose nav fits on one row is pixel-identical, and 4.3rem is still its height.
+- **`ScrollbarBox` is a keyboard stop while it scrolls.** A box whose content overflows a scrollable axis (more than
+  1px) and holds nothing focusable now takes `tabIndex={0}`, so a keyboard user can scroll it, and draws the library
+  focus ring on `:focus-visible` only. A box that fits, scrolls `hidden`, or holds a button or link is unchanged, as
+  is a mouse click. The new optional `aria-label` names the stop as a `region`; without it the stop has no name.
+  Closes axe `scrollable-region-focusable` on `/scrollbarBox` (6 regions).
+- **`StageProgress`'s strip is a keyboard stop while it scrolls with nothing focusable in it.** At phone width a
+  read-only strip (or one with every stage disabled) overflows and a keyboard user could not scroll it; it now takes
+  `tabIndex={0}` and draws the library focus ring on `:focus-visible` only. A strip with a stage button, or whose
+  stages fit, is unchanged, as is a mouse click. The new optional `aria-label` names the stop as a `region`, or names
+  the list when `variant="stepper"`. Closes axe `scrollable-region-focusable` on `/stageProgress` (`[data-stage-strip]`).
+- **`SignInActivityTable`'s scroll area is a keyboard stop while the table scrolls.** At phone width the three columns
+  overflow the card and a keyboard user could not scroll them; the wrapper now takes `tabIndex={0}`, is a `region`
+  named by `labels.title`, and draws a 2px ring on `:focus-visible` only. The ring is an outline in `focusRing.ring`
+  (lifted until it clears 3:1 on the header band, on all 9 brands in both modes), because the library's inset shadow
+  hides under the opaque header. A table that fits, a mouse click and the rest state are unchanged. Closes axe
+  `scrollable-region-focusable` on `/signInActivityTable`.
+- **`Menu` dividers keep their full weight in dark.** Chakra's stock divider carries `opacity: 0.6`, which pulled the
+  `NavigationBar` avatar menu and `ThemeSwitcher` rules down to 1.17-1.21:1 on the overlay; the `divider` part now
+  draws `raisedRule(colors)` at full opacity in dark (1.32-1.39:1) and stays at 0.6 in light, which is unchanged.
+- **`Timeline` attachment-chip hover steps off the chip in dark.** The hover fill (`primary[100]`) sat 1.01-1.07:1 off
+  the resting chip on meadow, emerald and storefront and kept the resting ink, 3.82-4.29:1 on it; it now uses `bandOn`
+  (1.17-1.20:1 on those three) with an `accentTextOnCanvas` ink above 4.5:1 on every brand. Light is unchanged.
+- **`Timeline` note box and "from" change pill step off the card in dark.** Both painted `gray[50]` on the event card
+  at 1.11:1; they now use `bandOn(gray[50], background[50])` (1.19:1), and the note's attachment chip, edit hover and
+  icon ink re-derive against the lifted box so they keep their step and AA ink. Light is unchanged.
+- **`Timeline` rules inside the event card use the card rule in dark.** The note box outline and the divider above the
+  notes drew `boxborder[200]` at 1.13-1.16:1 on the card (1.08:1 on zinc); both now read `cardRule(colors)` (1.31-1.34:1).
+  The card's own outline and the date chips on the page canvas are unchanged. Light is unchanged.
+- **`OrgSwitcher` search-header rule is visible in dark.** The rule under the search field was `gray[100]`, 1.11:1 on
+  the raised popover; it now reads `raisedRule(colors)` (1.32-1.39:1). Light keeps `gray[100]`.
+- **`ProfilePhotoViewer` view-button hover steps off the button in dark.** The hover fill (`gray[50]`) sat 1.11:1 off
+  the resting `background[50]` button; it now uses `bandOn` (1.19:1) with the accent ink re-derived against it. The PDF
+  fallback tile (`gray[100]`, 1.27:1) already steps and is unchanged. Light is unchanged.
+- **`RolesPermission` header band and in-card rules are visible in dark.** The table header band (`background[100]`) sat
+  1.06:1 off the card and the rules inside the card (card header, table rows, footer divider) drew `boxborder[200]` at
+  1.08-1.16:1; the band now uses `bandOn` (1.19:1) and the rules `cardRule(colors)` (1.31-1.34:1). The card's own
+  outline is unchanged. Light is unchanged.
+- **`SearchSelect` `insideSelect` divider is visible in dark.** The rule between the nested picker and the input drew
+  `boxborder[200]` at 1.22-1.25:1 on the trigger (eight of nine brands); it now reads `ruleOn` that plane (1.31:1+).
+  The popup outlines are unchanged. Light is unchanged.
 
 ### Fixed
 
+- **`FileUploader` revokes its `blob:` preview URLs on unmount.** Images still listed when the component unmounted kept their
+  object URLs alive for the life of the page; removal, `maxFiles` overflow and `maxTotalSize` rejection already revoked.
+- **`SearchSelect`'s "Clear all" button no longer opens the menu.** Its click bubbled to the control, so Enter, Space or a
+  click on it cleared the value and then opened the list; the click is now stopped at the button, as the chip remove
+  button already did.
+- **`DescriptionList` stacked values wrap long unbroken strings.** A token or URL with no break opportunity overflowed
+  its cell; stacked values now carry `overflow-wrap: anywhere`. Only strings that overflowed before change; the inline
+  layout keeps its single-line truncation.
+- **`FilterSidebar`'s section Clear control is no longer nested inside the accordion header button** (axe
+  `nested-interactive`). `Accordion` items gain `headerAction` (a control beside the header button, which keeps the header
+  hover lit) and `customStyles.headerActionStyle`; rest, hover and focus render the same pixels. The header button's
+  accessible name is now the section label alone, and a click on Clear no longer reaches the header.
+- **`FilterSidebar`'s maximum range picker is portalled like the minimum one.** Only the minimum picker was, so a host
+  that clips or stacks over the sidebar (a positioned `overflow` ancestor) could cut the maximum list off. Both now share one picker.
+  A range drag or an option toggle also re-renders only its own section instead of the whole sidebar.
+- **`SelectSearch` popup keyboard and axe defects.** The sticky `isBottomIcon` footer no longer covers the row Arrow keys
+  focus last (the panel reserves its height as scroll padding). An empty or loading panel is no longer a `listbox` with
+  no options (axe `aria-required-children`); it keeps its text and drops the role. Tab out of the popup now closes it.
+  Picking an option with the keyboard returns focus to the input instead of dropping it to `body`, and Escape in the
+  input no longer swallows the next Tab-in open.
+- **`NoteTextArea` Save stays disabled while either field is over its word cap.** Two effects each wrote the disabled
+  state, so whichever field was edited last decided it: a long title could be saved after editing the note, and a long
+  note after editing the title. Save is now derived from both counts.
+- **`FormWrapper` forwards `id`, `data-*`, `aria-*`, `className` and handlers to its outer wrapper** instead of dropping
+  them, and `icon` accepts a rendered element (`<FiUser />`) as well as a component reference; an element used to throw
+  "Element type is invalid".
+- **`VerifyEmailOtp` cells now offer one-time-code autofill.** `otp` is passed to the pin input, so the cells carry
+  `autocomplete="one-time-code"` instead of `"off"` and the browser or OS can suggest the emailed code. The resend link
+  is the owned `Button`.
+- **`WorkspaceTrayPreview` no longer closes while the pointer sits on its trigger.** Moving from the card back onto the
+  trigger ran the card's own leave handler and closed the preview after the grace delay; the wrapper alone now owns
+  open and close.
+- **`Select` `virtualizeAfter` now windows grouped lists.** It used to switch itself off whenever any option had a
+  `group`, rendering every row; headers now take part in the window.
+- **`Select`: Enter and Space on the clear (x) or a chip's remove button did nothing from the keyboard.** The trigger
+  swallowed them to open the popup; keys from a nested button now reach the button.
+- **The date, range and time picker popovers and `FilePreview` honour `prefers-reduced-motion`**: the popover slide/scale and the preview
+  scale-in are skipped when the user asks for reduced motion.
+
+- **The required `*` is hidden from screen readers** in `FormField` and every `TextLabel` label (it was read as "star" and
+  became part of the field's accessible name). The control's own `aria-required` still announces it; sighted users see no change.
+
+- **Legacy `DatePicker` (Table filter pane) no longer puts `aria-expanded` on a non-focusable wrapper `div`.** It anchors the
+  popover like `SingleDatePicker` and the input carries `aria-haspopup="dialog"`; Escape on the focused field now closes the
+  calendar. Looks and click behaviour are unchanged.
+
+- **`Table` filter pane search box honours reduced motion.** The search field no longer slides in over 200 ms when the user prefers reduced motion; it appears in place.
+- **`Table` notices when replaced rows gain or lose `content`, `onLink`, `onEdit` or `onDelete`.** The row-action and expand columns were decided from the row count and first id only, so a same-sized reload with the same first row kept a stale layout.
+- **`ThemeSwitcher variant="segmented"`** is one tab stop, on the selected mode, like the radiogroup it declares.
+  All three modes were separate tab stops. Arrow keys still move focus and selection together; a Tab from outside
+  lands on the selected mode.
+- **`LazyWrapper`** `fallback={null}` now renders nothing while loading, as written. `??` swapped the built-in
+  spinner in for an explicit `null`; only an omitted `fallback` (`undefined`) selects the spinner now.
 - **`WorkspaceTrayPreview`** reports `onOpenChange(false)` only after the card actually opened (it used to fire when
   the pointer left before the open delay).
 - **`FileUploader`** revokes the blob URL of an image the moment it is removed, and of images it rejects (over the total
@@ -503,8 +872,55 @@ next major.
   control. No visual change.
 - **`SearchSelect`'s open listbox and `Select`'s popup dialog have an accessible name**, from `label`, then
   `aria-label`, then `placeholder`.
+- **Unnamed controls now have names, with no visual change.** `NoteTextArea`'s remove-attachment button is
+  named `Remove <file name>`; the legacy `DatePicker` that `Table`'s filter pane renders names its month buttons
+  (`Previous month`, `Next month`) and its two selects (`Month`, `Year`), as `CalendarPanel` does.
+- **`FilterSidebar`'s Clear control, range triggers and value rows, and rating rows work from the keyboard.** They were
+  mouse-only. Each is now a named control that Enter and Space operate (`Clear <section>`, `<section> minimum: <value>`,
+  `<section>: N stars & up`), the open range picker is a named dialog, and the current value or rating reports
+  `aria-pressed`. A test that counts `getAllByRole("button")` inside a `FilterSidebar` sees more of them. Rest and
+  click look as before, except that opening a range picker with the mouse no longer paints a focus ring around the
+  popover: the trigger now takes focus first, so the popover's own focus move is no longer keyboard-visible.
+- **`FilePreviewTrigger` is a real button, named `Preview <file name>`** (`Preview file` without one). It was a click-only
+  `role="group"` div the keyboard could not reach. Tab now lands on it, Enter and Space open the preview, and closing the
+  preview returns focus to it. A test that found it by `role="group"` must query the button. Rest, hover and a mouse
+  close look as before; opening the preview with the mouse no longer paints a stray focus ring on its first toolbar
+  button, because the thumbnail now takes focus first.
+- **`SelectSearch`'s `isBottomIcon` footer works from the keyboard.** It was a click-only div. It is now the last
+  `option` of the listbox, named by its text: ArrowDown, ArrowUp, Home and End reach it, Enter and Space run
+  `handleBottomClick` with the popup left open, Escape closes the list, and it is the only stop while nothing matches or
+  the options load. `getByRole("listbox")` now contains the footer, and a test that counts `getAllByRole("option")`
+  with `isBottomIcon` sees one more. Rest and click look as before.
 - **`WorkspaceWindow`'s dialog is named by its visible title**; while a window is open the page behind it is
   `aria-hidden`, as for any modal.
+- **`UpgradeButton`, `PlanPill` and `PlanBadge` are named by what they show** (WCAG 2.5.3, axe
+  `label-content-name-mismatch`). The fixed `aria-label` left out the subtitle, the status chip and, on phones, the
+  `mobileLabel`. Without an `ariaLabel` the name now comes from the content: `Pro 5d left`, where it was
+  `Pro — 5d left`. A passed `ariaLabel` still wins and should contain the visible text. A test that looks the
+  button up by the old dashed name needs the new one. Nothing changes visually.
+- **`OrgSwitcher` names its trigger by what it shows** (WCAG 2.5.3, axe `label-content-name-mismatch`). The full
+  layout was named by `ariaLabel` alone (`Switch organization`) and the avatar layout by the name without its
+  initials, so neither held the visible text. Both now read `${ariaLabel}, ${shown organization}` (the placeholder
+  when none is active). The avatar initials are `aria-hidden` generated content (`data-initials`), no longer text,
+  which also takes them out of each dropdown row's name. A test that finds the initials with `getByText` must query
+  `[data-initials]`; one that looks the trigger up by the exact name `Switch organization` needs the longer name.
+  Nothing changes visually.
+- **`CalendarGrid` day cells are named by what they show** (WCAG 2.5.3, axe `label-content-name-mismatch`). A
+  cell's `aria-label` (`Monday, October 5, 2026, 1 event`) left out the event chips and `renderDayCell` content it
+  displays. The cell now has no `aria-label`: a visually hidden date and count (`labels.eventCount`) come first and
+  the cell's own content follows, so the name reads `Monday, October 5, 2026, 1 event Payroll cut-off`. A test that
+  finds a cell by its old exact name needs a pattern or `data-date`. No layout change.
+- **`FileUpload`'s progress bars are named** (axe `aria-progressbar-name`). Each `progress` entry rendered a
+  `progressbar` with no name; it is now `Upload progress for <file name>`.
+- **`FileUpload`'s drop zone is named by what it shows** (WCAG 2.5.3, axe `label-content-name-mismatch`).
+  `label`, or `inputAriaLabel` (default `Upload files`), was the whole name, so it left out the visible `Drag and
+  drop files here` and the type and size limits. The name is now `${label ?? inputAriaLabel}, Drag and drop files
+  here .jpg, .png up to 5.00 MB`: a passed `inputAriaLabel` still leads. A test that looks the zone up by the old
+  exact name needs a pattern. No visual change.
+- **`Editor`'s editing area is named** (axe `aria-input-field-name`). Without a visible `label` the
+  `role="textbox"` surface had no name at all; it is now `labels.editor` (default `Rich text editor`), and still
+  `label` when one is given. A read-only editor also exposes `aria-readonly`. Give each unlabelled editor on a page
+  its own `labels.editor`. No visual change.
 - **`CustomModulesTable`'s edit-module field is named** by `labels.moduleNamePlaceholder`.
 - **`StageProgress` no longer scrolls the page when it mounts**: the active stage was revealed with
   `scrollIntoView`, which also scrolled every ancestor, so a tracker below the fold pulled the page down
@@ -538,6 +954,13 @@ next major.
 - **`FileUpload` no longer leaks a blob URL per image thumbnail per render.** Each file gets one URL,
   revoked when the file is removed or the component unmounts.
 - **`Table` column search shows the current search when reopened**, instead of stale text.
+- **`NavLauncher` search rows shorten the `· keyword` hint before the label**, so a long keyword list
+  no longer cuts "Apply for leave" down to "Apply…".
+- **`NavLauncher`'s preview pane says what Enter does on a copy-only answer**: for an answer with no `run` or `href` it
+  showed `labels.hintOpen` ("open here") while Enter copied the value; it now shows `labels.hintCopy`, as the answer card does.
+- **`NavLauncher`'s footer legend says what Enter does**: it read `labels.hintOpen` ("open here") on every result, also while
+  Enter copied a copy-only answer. It now follows the active result and shows `labels.hintCopy` while Enter copies. The
+  other hints do not shift when it flips.
 - **`NavigationBar` right cluster no longer overflows onto the avatar at phone widths.** The title
   truncates first (overflow-only tooltip when it is a string); the `moreIcon` cluster can shrink, while
   the sidebar toggle, back button and avatar menu never do. (HRMS, beta.60 launcher trigger overflow)
@@ -780,36 +1203,115 @@ next major.
 - `sidebar.hoverBg` no longer shares `sidebar.divider`'s value.
 - `InputSwitch`'s `colorScheme` was destructured and discarded — every switch rendered `primary`
   regardless of the prop. Now forwarded to `ToggleSwitch` and actually applied.
+- **The `NavLauncher` search engine no longer puts Indic characters in a consumer's minified bundle.** Tamil final-ma and
+  the Devanagari anusvara are built from code points, so hrms's first-load budget gate (it counts Tamil and Devanagari
+  characters) stops reading the engine as locale data. `src/index.indicLiterals.test.ts` bundles the package root with
+  esbuild and fails on any code point in U+0900 to U+0DFF.
+- **`Table` / `KanbanBoard` saved preferences refetch when `orgId`, `authToken`, `page`, `key` or `name` change after mount.**
+  The fetch depended on `baseUrl` alone, so a switched organisation kept the previous one's saved columns. A slow
+  earlier response can no longer overwrite a newer one, the render a re-key lands is already `loading: true` with no
+  stale data, and `useSavePreferences` clears `error` after a later success.
+- **`KanbanBoard` re-hydrates its collapsed columns when `orgId` or `token` changes.** The reset effect listed `baseurl`,
+  `page`, `key` and `name` only, so after an organisation switch the previous one's collapsed columns stayed.
+- **`resolveFilledSurface` / `darkerFillRung`** no longer throw for a scale whose only white-carrying rung is `[50]`. The
+  hover and active steps walked to rungs `150` and `250`, which do not exist; a step now moves along the rung table and
+  clamps at both ends. Every scale that already worked resolves to the same rungs.
+- **Playground demos stop touching the network and clear their axe findings** (demo-only, nothing here ships in the
+  package). `/charts`, `/avatar`, `/editor` and `/examples/template-editor` no longer request imgur, a dead host or cdnjs;
+  `/contactForm` no longer POSTs to the dev API. `/switch` names its narrow-cell options, the `/chartTheme` legend and the
+  `/wishlistToggle` glass caption clear AA, and `/notification`'s colour override follows dark mode. `visuallyHidden`,
+  `skipLink` and `productDetails` gain a Playground.
+
+### Removed
+
+Nothing exported from the package root. These files were never exported and nothing in the repo imported them; they are
+gone from `dist/`, so a deep import of one no longer resolves. Measured 2026-10-14: no file in hrms, crm-frontend,
+account-frontend, tickets, lfour, social-frontend or commerce deep-imports any of them.
+
+- `services/feedback.ts` (use `FeedbackForm`), the legacy `Input/Input` field (`Input.tsx`, `InputProps.tsx`; use
+  `TextInput`), `Common/ErrorComponent` (use `ErrorMessage` or `FieldMessage`), `Common/FormattedDescription`,
+  `Common/Label` (use `TextLabel`) and `Buttons` (`Buttons.tsx`, `ButtonsProps.ts`; use `Button`).
 
 ### Deprecated
 
-Nothing is removed yet — each of these still ships its full implementation.
+Each of these still ships its full implementation.
 
+- **`OrganizationDetails` `uiInvite` is now optional and ignored.** The component never read it (active vs. invited is
+  decided by which array an organization is in); callers that still pass it compile unchanged, and new ones can drop it.
+- **`TextInput` `onRightIconclick`** (lower-case `c`): use `onRightIconClick`. Behaviour is unchanged; tagged `@deprecated` in JSDoc.
+- **`NoteTextArea` callback arguments that are never passed**: `handleCancel`'s `isActive` (always `false`) and
+  `handleSubmit`'s fourth `resetState`. Behaviour is unchanged; both are tagged `@deprecated` in JSDoc.
+- **`Skeletons` `alignSelf` and `flexShrink`** are marked `@deprecated` in the type: they have never been applied, and
+  applying them now would move layout for anyone passing them. Wrap the skeleton in an element that sets them.
 - `UploadedFile.type` (FileUploader) — never set; read the extension from `name`.
 - `ProfileCard` `color` — no visual effect; Card styles never read a colour scheme.
 - `NotificationData.status` — never read; the status dot colour comes from `dueDate`/`endDate`.
 - `CustomModulesTableLabels.loading` — never rendered; the loading state shows skeleton bars only.
 - `WorkspaceWindow` `onMedium` and `onMaximize` — never called; the window has no such controls.
 - `NavLauncher` `openShortcutHint` and `LauncherLabels.hintOpenMenu` — no longer rendered (the launcher
-  is already open when its footer shows); bind the open chord in the app only.
+  is already open when its footer shows); bind the open chord in the app only. `hintOpenMenu` is now
+  optional, so a full `LauncherLabels` object type-checks without it.
+- `searchLauncher` — legacy flat search (one Screens group); `NavLauncher` never calls it. Classic mode
+  runs `searchLauncherSections`, which matches a screen on its own label and keywords only ("leave
+  balance" finds nothing unless one screen's keywords carry both words); `searchMode="spotlight"`
+  ranks and also matches a screen on its module and section.
 - `SelectV2` — use `Select` with `native={false}`; it is already a thin wrapper over it.
 - `SearchSelect`, `SelectSearch` are **no longer `@deprecated`.** Both now say "prefer `Select`
   for new work" instead: `@deprecated` claimed a migration that loses real capabilities
-  (`insideSelect`, `isSelectAll`, `addNew`, field-level loading; and `SelectSearch`'s combobox is
-  the text input itself, a different ARIA pattern). The marker returns once `Select` absorbs them.
+  (`insideSelect`; and `SelectSearch`'s combobox is the text input itself, a different ARIA
+  pattern). The marker returns once `Select` absorbs them.
 - `Dropdown` is **no longer deprecated.** The marker was an artifact of the Select-consolidation
   pass; `Dropdown` is a `role="menu"` action menu, never a value picker, and nothing replaces it.
 - `Notification` is **no longer deprecated.** `NotificationItem` cannot replace it —
   `formatRelativeTime` clamps every future date to "Just now", so a countdown card silently
   renders wrong text through it.
+- `FilterSidebar` `onApply`, `headerPadding`, `sliderMode` and `FilterSection.checkboxes` — dead, never read.
+  Every change is already live through `onChange`, the range slider is always native, and radio mode comes
+  from `type: "radio"` or `radio`.
 - Dead props now marked rather than silently ignored: `Checkbox.variant`, `ProgressBar.variant`,
   `Table.isVisiblity` and its export props, `SideBar.selectedSubMenu`, `InputSwitch.variant`/
   `.spacing`/`.isFocusable`, and nine native-only `Select` props that are inert under
   `native={false}` (these now warn in dev).
-- `disabled` → `isDisabled` on `SideBar`, `Buttons`, `StageProgress`, `Input`, `DatePicker`. Both
+- `disabled` → `isDisabled` on `SideBar`, `StageProgress`, `DatePicker` and `TimePicker`. Both
   are accepted; `isDisabled` wins.
 - `MultiSelctOPtions` → `MultiSelectOption` (two typos in a shipped public type name).
 
+Also tagged `@deprecated` in the JSDoc, by component; each tag names its replacement. None is removed in this release.
+
+- `AlertDialog` `addRole`, `colorScheme`, `size`, `status`, `variant` and `key` — never read. The dialog is always
+  `role="alertdialog"` at Chakra's default size; use `tone` for the colour props, and React strips `key`.
+- `ApexLineChart` `variant="realtime"` — does not animate the data it is given: it appends `Math.random()` values every
+  second. No replacement ships; `"basic"`, the default, plots your `data`.
+- `Breadcrumbs` `isLastChild` — never read, no effect.
+- `ButtonGoupIconProps` (misspelled file path, a one-line re-export) — import `ButtonGroupIconProps`.
+- `Card` `colorScheme` and `color` — no visual effect, Card styles read no colour scheme. `dividercolor`,
+  `dividersize` and `dividervariant` — never rendered, Card draws no divider.
+- `DatePicker` `placeholderText` — use `placeholder`; `placeholder` wins when both are set.
+- `Drawer` `vaiant` — typo of `variant`, kept as an alias; `variant` wins.
+- `Dropdown` `optionsSize` — use `size`.
+- `InputSwitch` and `ThemedSwitchProps` — use `ToggleSwitch`; `InputSwitch` is a thin wrapper around it.
+- `MediaViewerLabels` `photoCount`, `videoCount`, `documentCount`, `youtubeCount` and `shortcuts`, and the `loading`
+  label of `MediaAudioPlayerLabels` and `MediaVideoPlayerLabels` — defined but never read.
+- `OrganizationDetails` `OrganizationItem.uiInvite` — never read (active vs. invited comes from which array an item is in)
+  but still required, so keep passing it. `CreateOrgFormValues` `default` and `defaultOrg` — never populated by the
+  built-in create modal.
+- `STATUS_INK` (`PlanPill`) — use `colors.white` from `useCustomTheme()`.
+- `ProfileCardVariantLegacy` (`variant="outlein"`) — misspelling kept for existing callers; use `"outline"`.
+- `ProgressBar` `color` — use `colorScheme`; `color` is still honoured while `colorScheme` is unset.
+- `Search` `onclose` — use `onClear`; same behaviour, consistent casing.
+- `SearchSelect` `onSelect` — use `onChange`, same payload. `virtualization` — not implemented, the list never
+  virtualizes; page large datasets with `pagination`. `SelectSearch` `isSearchEnabled` and `BottomIconStyle` — never read.
+- `chakraSelectProps` — the deep-import name of `SelectProps`; import `SelectProps` from the package root.
+- `SelectV2SingleProps`, `SelectV2MultiProps` and `SelectV2Props` — use `SelectSingleProps`, `SelectMultiProps` and
+  `SelectProps` with `native={false}`.
+- `Switch` and `SwitchProps` — two labelled choices; use `SegmentedControl`, or `ToggleSwitch` for a single on/off field.
+- `Table` `handleExportChange`, `exportOptions`, `exportLabel`, `headerBgColor`, `tableBorderColor`, `onColumnFilter`,
+  `tableSettings` and the column-level `isSearch` — dead, never read.
+- `Timeline` `events` and its `TimelineEvent` type — use `timelineEvents`. `TimelineNote.logs_id` is never read;
+  `TimelineEvents.primary_id` and `is_from` are never read but still required, so keep passing them.
+- `Toaster` `showToast({ children })` — never rendered; pass `description`.
+- `avatarFillFor` — use `resolveAvatarColorway(seed, colors)`; different arity, returns `{ bg, color }`.
+
 ### Breaking — staged for the next major, not yet released
 
 **`ProductCard` / `ProductDetails` props are replaced, and `ProductImageSlider` is gone.** Zero
@@ -841,9 +1343,8 @@ differ, so `tsc` names each site and nothing must be found by hand.
 - `Avatar`/`AvatarGroup` keep their names but narrow their props: `name` is required, Chakra style
   props are rejected, and `AvatarGroup` takes a `people` array instead of `Avatar` children.
 
-**Blast radius concentrates in `hrms`, with a long tail in `social-frontend`, `tickets`,
-`account-frontend`, `spare-cart` and `lfour`.** `crm-frontend` and `commerce/frontend` import no
-affected name at all.
+**Blast radius is measured per consumer and stated once**, in the repository's `CLAUDE.md` section 7, rather
+than copied here where it can drift.
 
 Get the current number from `scripts/verify-consumers.sh check`, which typechecks every consumer
 against a real build — **do not estimate it by grep.** A grep conflates names that were removed
@@ -861,8 +1362,6 @@ Consumers pin published versions, so none of this bites until a repo upgrades.
 
 Tracked in `.cursor/plans/deferred-breaking-changes.md` (repo-only). The ones a consumer can hit:
 
-- `Select`'s search matches `label` only — no `searchFields` / `filterOption`.
-- `Select`'s `virtualizeAfter` silently disables itself when any option has a `group`.
 - `Select`'s `onLoadMore` is zero-arg with no `hasMore` gate, unlike `SearchSelect.pagination`.
 - Migrating `SearchSelect` → `Select` by hand: `SearchSelect.onSearch` debounces **1000 ms**;
   `Select.searchDebounceMs` defaults to **0**. A mechanical rename starts firing the consumer's