Skip to content

ui: complete and activate the v2 design system - #1616

Merged
BigSimmo merged 108 commits into
mainfrom
codex/v2-design-system-completion
Aug 5, 2026
Merged

ui: complete and activate the v2 design system#1616
BigSimmo merged 108 commits into
mainfrom
codex/v2-design-system-completion

Conversation

@BigSimmo

@BigSimmoBigSimmo commented Aug 5, 2026

Copy link
Copy Markdown
Owner

Summary

  • Activate the canonical white/blue v2 design-system layer globally while preserving the existing answer, mode-home, search-results, and document workflow compositions.
  • Complete registered component accessibility and maturity work, including semantic tables, announcements, overlays, segmented controls, responsive clinical notices, and generated design-sync contracts.
  • Add deterministic adoption evidence and regression ratchets for component registration, source props, previews, direct tests, tokens, geometry, and production-surface ownership.
  • Keep hosted Linux visual/Lighthouse baselines and remote design publication fail-closed until they are reviewed against this exact PR head.

RAG impact: no retrieval behaviour change — protected retrieval, ranking, eval, comparator, RPC, and producer paths are untouched; retrieval-named changes are presentation-only.

Verification

  • Whole-tree npm run format on the exact pushed commit; no changes required
  • npm run verify:pr-local — the post-main-sync run reached the full unit suite and had one unchanged Codex Cloud setup test timeout at 30 seconds; the exact test passed immediately on focused rerun in 16.1 seconds
  • npm run verify:ui — 349/349 Chromium checks passed on the integrated v2 head before the final two main-sync commits
  • npm run verify:phone-chrome — 116 contracts, 182 changed-browser checks, 7 focused phone journeys, and 349 full UI checks passed
  • Accessibility browser suite — 15/15 passed
  • Responsive/theme matrix — 130 cases passed with zero failures
  • Design-system adoption tests — 49/49 passed
  • Exact focused timeout rerun — 1 passed in 16.1 seconds
  • npm run verify:release — not run; provider/release checks remain approval-gated
  • npm run check:production-readiness — configured-secret environment passed all 9 checks and reported READY: no blocking production-readiness failures.

The 14 production-surface declarations now target v2. check:design-system-adoption / check:design-system-contract stay green during draft with baseline.status: "not-committed" and empty files; human-approved Linux screenshots and exact hosted provenance remain the draft→ready promotion gate, not a red CI check.

Risk and rollout

  • Risk: broad shared-UI and clinical source-rendering change. Main risks are visual drift, phone geometry, theme cascade, accessibility naming, and incomplete publication evidence.
  • Rollback: revert the global root v2 activation and associated surface/component commits, retaining the scoped v2 token layer as the rollback boundary. No database or provider rollback is required.
  • Provider or production effects: Git branch, draft PR, and hosted CI artifacts only. No deployment, production data mutation, Supabase change, OpenAI call, or protected RAG behavior change.

Clinical Governance Preflight

  • Source-backed claims still require linked source verification before clinical use
  • No patient-identifiable document workflow was introduced or expanded without explicit governance approval
  • Supabase target remains Clinical KB Database (sjrfecxgysukkwxsowpy)
  • Service-role keys and private document access remain server-only
  • Demo/synthetic content remains clearly separated from real clinical sources
  • Source metadata, review status, and outdated/unknown-source behavior remain conservative
  • Deployment classification/TGA SaMD impact was checked when clinical decision-support behavior changed

Notes

This PR is intentionally draft until:

  1. Linux visual candidates are generated and all six screenshots are human-reviewed.
  2. A complete Linux Lighthouse artifact is accepted and stable advisory comparisons are recorded.
  3. The 14 adoption declarations are promoted to v2 with matching baseline evidence.
  4. Remote design-system publication is read back against the exact accepted SHA.
  5. Clinical-owner approval for the compact phone verification wording is formally recorded in docs/design-system/ADOPTION.md; physical Safari/installed-PWA acceptance remains separate.

Add an explicit responsive compact presentation for production answers while keeping the complete governed wording on larger screens, print, and default consumers. Restore the original phone geometry budgets and cover every model/extractive state with focused DOM tests (66 passed).
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
devin-ai-integration[bot]

This comment was marked as resolved.

devin-ai-integration[bot]

This comment was marked as resolved.

@BigSimmo

Copy link
Copy Markdown
OwnerAuthor

Review-batch disposition (1ea30c19)

Unresolved review threads: 0.

Fixed

FindingResolution
Mode-home permanent empty composer bandReserve gated on data-composer-reserve=pending / :not(:empty); header clears pending when media misses, composer hidden, or adoption falls back (#243 closed)
Chip category tones only on compatibility layer--type-* / --tone-* triads promoted into ckb-v2-tokens.css (light, dark, forced-colours) with contract pins

Dispositioned (tracked, no product change)

FindingTracking
AccessibleTable MissingValue density#237
Therapy home build-time summary count#241
Adoption v2 + not-committed baselines#242 + PR draft→ready checklist
Lighthouse baseline comparison#118
Sheet portal-default visual pass#238
Phone overlay ResizeObserver rotation check#239
Tooltip hard-clip asymmetry#240
Hero 8s / sm-up holeAlready guarded by homeComposerMediaEligible

Validation

  • vitestsearch-route-ownership 12/12
  • vitestckb-v2-token-contract + design-token-contract + therapy/header contracts green
  • Required CI re-running on tip 1ea30c19

cursoragentand others added 2 commits August 5, 2026 12:35
Local-only bookkeeping for tip 1ea30c1; not pushed alone per babysit ledger policy.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
Static PR failed because adoption-manifest.json omitted the new
tests/ckb-v2-token-contract.test.ts after the mode-home composer sync.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>

@BigSimmoBigSimmo left a comment

Copy link
Copy Markdown
OwnerAuthor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

no more review

ckb-v2 category chip tokens changed the generated adoption hash; regenerate
so check:design-system-adoption stays green on Static PR.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@BigSimmo
BigSimmo disabled auto-merge August 5, 2026 12:41
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>

@devin-ai-integrationdevin-ai-integrationBot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Devin Review found 1 new potential issue.

View 11 additional findings in Devin Review.

Open in Devin Review

Comment threadsrc/components/ui/chip.tsx
max-w-full clamped the remove button to its w-5 track, so the intended
32px tap target never applied. Drop the clamp and ratchet the regression
in the component DOM tests.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
@BigSimmo

Copy link
Copy Markdown
OwnerAuthor

Babysit checkpoint — looks CI-green (2d8fc24f)

Required CI:run 31006895221Static PR checks, Unit coverage, Build, Production UI, PR required all success.

Review threads: 0 unresolved.

Product fixes landed for this feedback batch:

  1. Mode-home empty composer band — reserve gated on data-composer-reserve / portal fill; collapses when never adopted.
  2. Chip category tones — --type-* / --tone-* promoted into ckb-v2-tokens.css with contract pins.

Tracked residuals (no blocker for this feedback pass):#237#238#239#240#241#242#118 (visual/Lighthouse promotion + manual confirmations).

Merge still left to you — PR Notes draft→ready checklist (Linux visual baselines / adoption promotion) remains human-gated.

@BigSimmo
BigSimmo merged commit 08595cc into mainAug 5, 2026
25 checks passed
@BigSimmo
BigSimmo deleted the codex/v2-design-system-completion branch August 5, 2026 13:02
@cursorcursorBot mentioned this pull request Aug 5, 2026
15 tasks
BigSimmo pushed a commit that referenced this pull request Aug 5, 2026
Resolves the four expected conflicts. #1616's contribution to the three
component files is a token migration plus a rename, so each resolution takes
this branch's structure and re-applies #1616's change onto it:
- search-screen.tsx: keep clearSearchFilters. Both sides had already converged
on --text-muted for the className, so only the handler differed, and
clearSearch also wipes the query - the defect #1611 fixed on the shelf's
Clear. This branch's comment anticipated the merge and pre-matched the
className so exactly this one decision was left.
- search-results-header-band.tsx: keep this branch's shelf scroll-track and
tap-target work; migrate the Funnel glyph this branch introduced off the
deprecated --text-soft to --decoration-soft, matching what #1616 did to the
equally decorative ChevronsUpDown.
- document-search-results.tsx: keep SearchResultsEmptyState; adopt #1616's
metadataPill -> metadataPillDensity rename. The import still said
metadataPill while the auto-merged bodies already called
metadataPillDensity, so taking either side wholesale would not have
compiled. Drops the now-unused EmptyState import and migrates three further
decorative --text-soft glyphs.
- outstanding-issues.md: take main's next-id=246. Ours said 239, which is below
main's highest allocated id and fails check:outstanding-issues.
docs/design-system/adoption-manifest.json is regenerated, not hand-edited.
document-search-results.tsx drops off EmptyState's adoption lists because this
branch replaces EmptyState with the shared SearchResultsEmptyState there - a
reviewed change with its own announcement rationale, not a fall back to a local
panel. The manifest describes the tree, so it now describes the merged one.
Verified on the merged result: tsc --noEmit exit 0 (the import break would have
failed here), full unit suite 503 files / 5325 tests after the manifest
regeneration, decoration-on-text contract 6 passed, lint clean on all three
components.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01T97Kqdj9Xh1Cubv5ms3KVy
BigSimmo pushed a commit that referenced this pull request Aug 5, 2026
…sign
Four conflicts, resolved as the trial merge recorded in the PR body predicted.
`search-screen.tsx` reduced to the handler alone, exactly as forecast: both
sides had independently arrived at `--text-muted`, so the only disagreement
left was `clearSearchFilters` (here) versus `clearSearch` (main). Kept this
branch's — #1616 branched before defect #1611's sibling was fixed, and
`clearSearch` on a control labelled `Clear` inside a filter row deletes the
query the reader is looking at.
`search-results-header-band.tsx` (2 hunks) took this branch: main's side is
the pre-restructure shelf carrying only the token migration this branch had
already applied.
`document-search-results.tsx` (3 hunks): the two empty-state hunks took this
branch's shared `SearchResultsEmptyState`. The import hunk is a genuine merge —
v2 renamed `metadataPill` to `metadataPillDensity`, and the auto-merged body now
calls `metadataPillDensity.roomyCompact`, so the import must follow. `EmptyState`
is dropped from it because both of v2's call sites are the ones this branch
replaced.
`docs/outstanding-issues.md`: #1616 minted its own #237 and #238 from the same
`next-id`, so both sides landed rows under both numbers. Renumbered *this*
branch's to #246 and #247 and bumped the marker to 248, rather than taking one
side wholesale — main's rows are already landed and referenced. This is the
collision `#156` and `#168` predict; the guard caught it.
Two v2 gates then failed on the merged tree and are now satisfied:
- `check:design-system-contract` ratchets `textSoftConsumers` per file, and v2
had driven both of these to zero. The four remaining usages here are icons and
glyphs, which this branch had deliberately left on `--text-soft` because v1
defined no decoration token. v2 defines `--decoration-soft`, so that
constraint is gone and they move there — the tier v2 itself uses for the same
nodes.
- The generated adoption manifest and COMPONENTS.md maturity section went stale
as a result; regenerated with `design-system:adoption:update`.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
BigSimmo pushed a commit that referenced this pull request Aug 5, 2026
…tap floor
Two sessions resolved the #1616 merge independently. The pushed one (`5c0fe4d`)
failed `Static PR checks` on the outstanding-issues guard: #1616 minted its own
#237 and #238 from the same `next-id`, and that resolution kept both sides under
both numbers. This merge keeps the resolution that renumbers *this* branch's
rows to #246/#247 and bumps the marker to 248 — main's are already landed and
referenced, so they keep their numbers. The guard now passes: 245 rows, unique
ids, next-id above the highest, no ids dropped from base 08595cc.
The only other conflict was a duplicated comment block on the therapy quick-filter
`Clear`; both sides already agreed on `--text-muted` and `clearSearchFilters`.
Also fixes a review finding, which is a real inconsistency this branch
introduced: the find-a-filter field shipped at `min-h-10` — 40px — in the very
commit that raised the facets, the disclosure headings, the shelf `Clear` and the
sheet footer to `min-h-tap` (48px). On the surface that exists for phones, the
one control added to make a long filter list usable was the smallest target in
the sheet. It now matches the facets exactly (`min-h-tap sm:min-h-9`).
`decoration-on-text.contract.test.ts` had pinned that field by slicing 600
characters after its testid, so documenting the line broke the guard. It now
walks forward to the element's own `className`, and additionally pins the tap
floor so the 40px version cannot come back.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
BigSimmo added a commit that referenced this pull request Aug 5, 2026
* fix(ui): make the applied-filter shelf reachable and its dead ends readable
Four review findings land on one row and interact.
F4 — the shelf was a single `overflow-x-auto` row: label, chips, a `flex-1`
spacer, then `Clear`. With four or five chips on a phone the spacer collapses
and `Clear` sits past the right edge, reachable only by swiping a row whose
scrollbar is hidden. That is the same defect the shelf was built to avoid for
the chips themselves. The chips now scroll in an inner track and `Clear` is
pinned outside it.
F5 — the rail fades its edge on overflow and the shelf did not, so a sixth chip
simply stopped existing visually. The chip track now carries the same mask on
the same overflow condition, via a second instance of the existing
`useRailOverflow` hook.
F3 — `Clear` was `px-2 py-1`, about 26px beside 48px chips: the row's only
global action was also its hardest target. Matched to the chips instead, staying
quiet through weight and an underline. 48px rather than the 44px generic tap
guidance suggests, because `min-h-11` reintroduces a fixed `ui-smoke` sub-pixel
flake and `--spacing-tap` is this repo's floor.
F10 — zero-count facets in the documents sheet were dimmed with `opacity-50`,
which multiplies against an already-muted foreground and lands at 2.34:1. The
disabled state was least readable exactly when it most needed explaining.
Replaced with a real muted pair plus a dashed border: 4.72:1, and it survives
forced colors, where border-style is preserved and opacity is not. The three
facet states are now mutually exclusive branches rather than a base plus an
override — `cn` is a plain join, so competing `border-[color:…]` utilities would
both reach the DOM and stylesheet order, not intent, would pick the winner.
Also rewires the therapy-compass quick-filter row's `Clear` to
`clearSearchFilters`. It sits among the filter chips and is labelled `Clear`,
but it called `clearSearch`, which wipes the query with them — the sibling of
the defect #1611 fixed on the shelf, missed when that was reviewed. The sheet's
`Clear all` is deliberately a full reset and is untouched.
Shelf label becomes a funnel glyph below `sm` and the wordmark from `sm`: a
prefixed chip costs ~215px of a 350px bar, so every character the label spends
is a chip the reader cannot see. The group keeps `aria-label="Applied filters"`
either way, so both forms are decorative.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* feat(ui): give the filtered-to-zero empty state its relax-the-filter route back
F11. The release that made filters real (#1555) is also the one that removed the
only copy pointing at relaxing them. The old empty state read "Relax the scope,
try an example, or jump to another mode" with a `Clear scope filters (N)`
button; both were dead — they keyed off the inert scope system and never
rendered — so the change deleted them and left "Try an example, or jump to
another mode." A reader who has filtered to zero is offered an unrelated example
query and a different mode, never the chips sitting directly above that caused
it.
`SearchResultsEmptyState` now takes the same `appliedFilters` the shelf renders,
plus `onClearFilters` and `onBrowseAll`. When the set is non-empty it leads with
`Remove "X"` and `Clear all filters`, and demotes the example and cross-mode
routes below a rule — an example query is a different search, and the reader has
not finished this one. With nothing applied the current copy is already correct
and is untouched.
Two things it deliberately does not claim. The heading counts the filters rather
than quoting the query, because the query is not what emptied the set and saying
so sends the reader to rewrite the one thing that was working. And `Remove "X"`
names the last chip without calling it the most recent: `appliedFilters` arrives
in group order, not application order, so that would be a claim the data cannot
support.
Documents and therapy-compass rendered their own bare `EmptyState` for this
case — naming the problem while offering no route out of it — so both now use
the shared surface. Documents also passes Browse, because when narrowing this
result set is not the answer, reaching the whole corpus is.
This retires the last `clearSearch` mislabel on therapy-compass. Its empty state
had one button labelled `Clear filters` wired to `clearSearch`, which wiped the
query too; `Remove "X"` and `Clear all filters` are now separate controls, so
each label matches its own action. The guard added in the previous commit
tightens to assert exactly one full reset survives that screen — the sheet's
`Clear all`, the only control whose label says it clears everything.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* feat(ui): rebuild the documents filter sheet around eleven groups
F7 — facet buttons were `min-h-7`: 28px targets, packed at `gap-1.5`, on the
surface that exists for phones and whose only interactive elements they are.
Raised to the tap token, relaxing to 36px from `sm` and 32px from `lg` where a
pointer is likely. 48px rather than the 44px the design called for, because
`min-h-11` reintroduces a fixed `ui-smoke` sub-pixel flake and `--spacing-tap`
is this repo's floor; the sheet has the vertical room.
F8 — source type is a `radiogroup` and the facets below are `aria-pressed`
toggles, but both rendered as chips of near-identical size, colour and radius,
directly adjacent. Nothing said one row replaces and the next accumulates, so
the OR-within-group, AND-across-groups model had to be found by experiment.
Source type is now a joined segmented control, which reads as one-of on sight,
with a `one only` hint for the first time it is seen. The ARIA is unchanged —
this is presentation.
F9 — eleven groups stacked in one phone column with no collapsing and no search,
so reaching Document type meant scrolling past ten sections. Adds a
find-a-filter field and collapses groups by default, each carrying its selected
count. Both are gated on the same density threshold: a sheet showing two groups
that are both shut is a scroll saved that never existed and two taps added that
did, so below four groups everything stays open and the heading is not a
disclosure control at all. A group holding a selection cannot be collapsed —
a closed section silently narrowing the list is worse than the scroll it saves.
F12 — Library leaves the utility rail. It sat adjacent to Filter while answering
a different question, and it occupied the rail space the pinned Filter needs; it
is also the reason the phone rail could overflow at all. It is moved, not
removed: the requirement the old comment protected still holds, since the
documents action menu routes through `onSearchModeChange`, which clears the
query. Both new homes preserve it — the sheet footer under a rule, phrased as
reach with the corpus count beside it, and the zero-result state.
Also drops the footer's duplicate count. It printed "12 documents" beside "Show
12 documents", spending the sheet's most prominent slot on a number two
centimetres to its left; the button carries it, the new meter and readout carry
the proportion, and the live announcement moves to `sr-only` so it still speaks
as the number changes underneath. The header's `Clear all` becomes `Clear
filters`, matching a handler that was already filter-only.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* feat(ui): collapse the results bar to one line and pin what must not scroll away
The band was 123px on a phone to say "12 documents". The utility rail dropped to
its own row and that row was ~85% empty, so the height was spent on the layout
rather than on anything the reader needed. It is now 58px, 60px from `sm`.
F1 — the rationale for moving Filter last was that the right edge is where a
thumb already rests, but the spacer that pushed the rail right was
`hidden lg:block lg:flex-1`, so it did nothing below 1024px. On every phone the
rail was left-packed and Filter sat mid-rail: the change delivered its stated
benefit only at the width where thumbs are least relevant. The query now takes
the flexible space and the control group is edge-aligned at every width, with no
conditional spacer. `mr-auto` does it rather than moving `lg:flex-1` down —
auto margins only absorb what is left after flexible lengths resolve, so the
wide layout is byte-identical and no breakpoint had to move.
F2 — the rail was one `overflow-x-auto` region with Filter as its last child, so
the only control carrying filter state was the first to fall off the right edge
once a Retry button or a longer sort label appeared. The code's own comment
explained that applied-filter chips had been moved out of that rail for exactly
this reason. Only the optional controls scroll now; Filter and Retry are pinned
siblings outside the track. Retry too, because it is the recovery action in a
degraded state — the one control that must never need a horizontal swipe.
The state tile is deleted and the full-width accent border becomes a 2 x 18px
lead rule inside the padding: at bar height a line across the whole width read as
a divider between the composer and the results rather than as the band's accent.
That deletion is where the design as drawn had to be extended. The tile carried
state as SHAPE — alert when faulted, spinner while running, funnel once filtered
— and the mockup replaced it with colour alone, which makes a failed search
identical to a successful one for a reader who cannot separate the hues, and
contradicts a recorded decision. The tile turned out to carry three jobs and only
one needed a tile. Narrowed is now carried by the shelf, which grows the band by
a whole labelled row. Running was already inline. Faulted keeps three
independent non-chromatic channels: the lead rule doubles from one stroke to
two, a CircleAlert renders before the count for non-ready states only, and a
faulted band still renders no digit at all. The mark is a `border-left` on a
zero-width box rather than a background precisely so that forced colors, which
drops backgrounds but maps border colour to CanvasText and preserves
border-style, keeps all of it.
F12 — Library leaves the rail (moved in the previous commit), which is what makes
the arithmetic work: at 390px count + query + Library + Filter does not fit, and
without Library it fits comfortably.
One line is not safe for every mode, and the mockup was drawn for documents. Six
modes pass `MobileResultFilterControl` into `mobileControls` — a `w-full` native
select, and formulation and specifiers pass two in a two-column grid — which is
unreadable pinned into a 58px line at 320px. `mobileControlsPlacement` therefore
defaults to `row` whenever a page passes a phone control and to `inline` when it
passes none; documents and therapy-compass opt in explicitly. The default is the
safe one so a new mode that forgets the prop degrades to today's layout rather
than to an unusable one. Verified at 320/390/430/768/1024/1440 in light, dark and
forced-colors with no page horizontal overflow at any of them.
`tests/ui-accessibility.spec.ts` is rewritten, not deleted: it caught the accent
degrading to a neutral border when Tailwind's utilities layer outranked the
component layer, which has actually happened here, and the same failure now shows
up as a zero-width box. It gains the fault assertion the border-top version could
not make — a border has no style to change — and a guard that its own probe
returned real values, because a silently-null measurement reads as a pass. The
style-effect contract in `tests/helpers/style-contracts.ts` is retargeted from
`search-band` to `search-band-lead` for the same reason.
`docs/search-results-bar-decisions.md` is amended in this commit, since two of
its records go stale here: the state tile, and Library staying in the bar.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* docs(ui): correct two comments the redesign left describing the old band
`search-band` no longer paints the accent, and the placement note referenced a
variable name that never shipped. Also drops the claim that `refetching` is
dimmed "via CSS `data-status`": no such rule exists in globals.css and there is
no evidence one ever did, so the sentence described an intention rather than the
code. Adding the rule is a visual change across twelve modes and belongs to
whoever decides a background refresh should look different — asserting it here
while it does not exist is what let it go unnoticed.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* docs(issues): capture the two follow-ups the results-bar redesign surfaced
#237 — the band claimed a `refetching` dimming rule that globals.css has never
defined, so a background refresh is signalled by a pulsing dot alone against
text that is deliberately identical to `ready`. Corrected the comment in the
redesign rather than adding the rule, because adding it is a visual change
across twelve modes.
#238 — the one-line bar currently reaches two modes plus every mode that passes
no phone control. Six pass a `w-full` native select (two of them pass a pair),
which is unreadable pinned into a 58px line at 320px, so they keep their own
row by default. Widening them is per-mode work, not a shared-band change.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): reach the corpus from the sheet, and re-point the test that pinned it
Fallout from moving Library off the utility rail, caught by `verify:ui`
(`348 passed, 1 failed`) rather than by anything offline.
`ui-smoke.spec.ts` asserted the ribbon still carried an "Open source library"
button, then used that same button further down to open the Sources drawer and
check focus returned to it on Escape. Both are re-pointed at Library's new home
in the filter sheet's footer rather than deleted — the ribbon assertion is
inverted into an absence, so putting Library back on the rail re-creates the
overflow F12 removed and fails loudly instead of passing quietly.
The behaviour fix the test exposed: the footer control called `onOpenLibrary`
without dismissing the sheet, so the Sources drawer opened underneath a filter
panel still covering the results both of them describe. Browsing the corpus is
leaving the filter surface, not another thing to do on it, so it now closes the
sheet on the way out.
That in turn moves where focus lands when the drawer closes: the opener has
unmounted with the sheet, so the app falls back to the documents options button.
Asserted explicitly, with the reasoning, rather than loosened to "not body" —
it is a visible related control in the same workspace and the app's existing
restore target, but it is a fallback and the comment says so.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* docs(ledger): record the results-bar redesign review at 7eb723b
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): keep document filter sheet chrome scoped to the active query
Reset the find-a-filter needle and expand set when the search query changes,
and keep selected facets visible while the find field narrows the list so an
active constraint cannot become unreachable inside the sheet.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
* fix: restore empty-state recovery and rail observation
* fix: restore therapy zero-result recovery
* fix: keep document filter recovery paths reachable
* test: cover announced empty-state recovery
* test: cover document filter recovery paths
* test: intercept the differential search endpoint
* fix: close filter disclosure click handler
* fix: use a valid exact search route regex
* style: format empty-state regression test
* style: format document-search-results.tsx
* fix(ui): observe overflow without effect state writes
* chore(ui): remove obsolete empty-state import
* fix(ui): stop the empty state claiming a second status region
The auto-fix for Devin's announcement finding gave `SearchResultsEmptyState` a
`role="status"` root. The band already renders one unconditionally on every
search route, so `getByRole("status")` became ambiguous everywhere the empty
state can appear — which is every mode. Devin's own prompt flagged the risk
("checking it does not collide with the band's own single-status-region
assertions"); the collision landed anyway and broke three suites.
A bare `aria-live="polite"` announces identically — `role="status"` is just
implicit polite + atomic — without adding a node to the role query. `aria-atomic`
is deliberately left off: heading and body change together, and re-reading the
whole panel on every keystroke is worse than reading what changed.
Also repairs three tests that were asserting the wrong things:
- The therapy guard counted `b.clearSearch` call sites and required exactly one.
An agent then added a correctly-labelled `Clear search` recovery, and the count
read it as a regression. The rule was never about head-count — it is that a
control wired to `clearSearch` must be *labelled* for clearing the search.
Rewritten to assert that, so `onClear`/`onClearSearch` pass and an
`onClearFilters` or bare `onClick` still fails. A duplicate copy of the same
test carrying the old assertion is removed.
- `states the proportion once…` expected `Show 0 documents` from selecting
Clozapine + Suicide. The panel deliberately prevents that: once Clozapine
narrows the set, Suicide re-counts to 0, becomes a dead end, and dead ends are
click-guarded. The test read the feature as a bug. It now asserts the guard —
`aria-disabled`, the description, and that the guarded click leaves the count
alone.
- Two `getByRole("status")` queries in the empty-state tests are now by text,
matching the role change above.
Two failures in `document-search-record-fault.dom.test.tsx` are untouched here
and are not from this commit — verified failing with these changes stashed.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* test: follow the zero-match state onto the shared empty state
`document-search-record-fault.dom.test.tsx` still expected "No matching
documents". That branch adopted `SearchResultsEmptyState` so Library stays
reachable from a search that returned nothing — the gap Codex and Devin both
raised — which changed the heading to the shared "No matches for <query>".
Re-pointed rather than loosened: the assertions still name the exact copy and
still distinguish the loading state from the settled one, so a state that stops
rendering its heading fails here the way it did before.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): keep the documents zero-result title a heading
Adopting the shared empty state demoted the main document-search
zero-result title from `h3` back to a paragraph, silently undoing #1612 —
the release that gave `EmptyState` an optional heading level precisely so
the two states owning their region could keep one. Nothing offline
noticed; the only signal was `ui-smoke`'s `@critical` journey going red on
`getByRole("heading", { name: "No matching documents" })`.
`SearchResultsEmptyState` now takes the same opt-in, un-defaulted
`headingLevel` as `EmptyState`, for the same reason: most of the twelve
modes rendering it sit inside a region whose heading the band already
owns, so promoting every title would insert an outline level the page
never declared. Documents passes `3` at the call site that owns its
region; the inline filtered-to-zero state inside the results grid stays a
paragraph.
The Playwright assertion follows the new copy but keeps asserting the
role and level, and `document-search-record-fault` now pins the same
level so the fast gate catches this next time instead of a Chromium
journey.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(test): restore the differentials fault interception, and match empty-state copy to its controls
Three review findings, one of which was a live CI failure caused by acting on
a fourth without running it.
`ui-accessibility`'s two fault tests were switched from intercepting
`/api/differentials` to `/api/search` on review advice. That page's catalog
hook fetches `/api/differentials?kind=diagnosis|presentation` and never
touches `/api/search`, so the interception faulted nothing, the band stayed
healthy, and both tests hung waiting for a fault panel that could not render
— two red `Production UI` shards. Restored, with the endpoint named in a
comment so the swap is not made again.
The empty state's body told every reader to "try an example, or jump to
another mode". `searchCommandSurfaceByMode` is a `Partial<Record<…>>` with no
therapy-compass entry, so on that mode the panel renders neither control and
the copy named two affordances that were not there. The body is now derived
from what the panel actually offers.
Also drops a hardcoded neutral colour literal from the lead-rule assertion —
the line above it already compares against the probed neutral — and scopes the
style-effect contract's selector to `[data-tone="accent"]`, so a degraded
live result cannot fail a contract that exists to catch cascade regressions.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): move the new search-surface text nodes off the deprecated decoration tier
Readying this change for the v2 design system (#1616), which activates the
canonical token layer across 224 files and touches four of the same files.
`--text-soft` is a deprecated alias of `--decoration-soft`, and
`ckb-v2-token-contract` pins it *below* 4.5:1 deliberately, "so the tier cannot
be fixed away". TOKENS.md §7 forbids it on any text node. This branch added
eight new text-node usages, which under the v1 palette measure a comfortable
4.72:1 and look correct — and under the v2 palette measure 2.99:1.
The dead-end facet is the one that matters. Its entire reason to exist is that
the previous `opacity-50` treatment measured 2.34:1; putting the replacement on
the decoration tier meant the fix held only until the v2 layer activated, at
which point the same markup would have been worse than the AA floor again with
nothing reporting it.
dead-end facet copy on --surface-subtle
opacity-50, before this branch 2.34:1
--text-soft v1 / v2 4.72:1 / 2.99:1
--text-muted v1 / v2 7.29:1 / 5.99:1 (7.54:1 v2 dark)
Counts, the shelf label, the shelf Clear and the disabled-facet copy move to
`--text-muted`; the find-a-filter placeholder moves to `--text-placeholder`,
which is the role the existing recipe contract already requires. Icons and
glyphs keep `--text-soft` — that is what the tier is for, and v1 defines no
`--decoration-soft` to move them to.
Two of these lines are the exact lines #1616 migrates, so both sides now make
the same change and those hunks merge instead of conflicting.
`decoration-on-text.contract.test.ts` gains four cases pinning the tier per
surface, verified to fail on the regression and pass when restored. A DOM
assertion cannot do this job: jsdom sees the class, not the resolved colour, so
it would pass on either token.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): move the therapy quick-filter Clear label off the decoration tier
The last text node on this branch still using `--text-soft`. It is a button
label, so under the v2 palette it measures 2.99:1; `--text-muted` gives 5.99:1
light and 7.54:1 dark. Found by trial-merging the v2 branch rather than by
reading the diff — the conflict hunk showed v2 migrating this exact line while
this branch kept the old tier.
Matching v2's token choice also shrinks that conflict to the handler alone,
which is the part the two branches genuinely disagree about
(`clearSearchFilters` here versus `clearSearch` on v2's base).
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): restore Library on the record-match path, and stop the phantom collapse
Two defects raised in review, both verified against the code and both introduced
by this branch. Neither was covered — the existing suites passed before these
fixes as well as after, which is why each gets a guard proven by inversion.
**Library was unreachable from a services or forms search that matched records
but no documents.** Moving Library off the utility rail left it three homes: the
sheet footer, the zero-result empty state, and the inline fallback. The footer
needs `matches.length > 0`; the empty state needs `recordMatchCount === 0`. The
record-match render satisfies neither and returned `null` outright, so on that
path the only route to the corpus was the documents action menu — which calls
`setQuery("")` and destroys the search being read. That is the precise thing
`docs/search-results-bar-decisions.md` requires an in-context route for. The
control is now a shared const rendered from both paths, so a fourth branch
cannot be added without one.
**A group heading reported a collapse it did not perform.** `isOpen` is forced
true while the find-a-filter field has text, but the disclosure button stayed
mounted and its handler still branched on that forced-true value: tapping it
left `aria-expanded="true"`, rotated no chevron, hid nothing — and wrote the
group into `collapsed`, so the collapse ambushed the reader later, once the
field was cleared and the tap forgotten. While searching, the needle owns what
is open, so the heading now renders in its static form. This is the rule the
comment three lines above it already stated; the needle case was simply missed.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
* fix(ui): stabilize results-band review findings on #1615
Keep phone-control row geometry across loading, stop wide selects sharing a
shrinkable flex line with Sort, announce empty states without double-speaking
filtered zeros, and clear the stale docs/comments the redesign left behind.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
* fix(ui): keep the deferred empty-state announce out of the effect body
`788b664` added a deferred screen-reader announcement for the query-only empty
state — a live region that mounts already populated is silent in most screen
readers, so the message has to arrive on a later frame. The mechanism is right;
the implementation called `setLiveMessage("")` synchronously in the effect body
twice, which `react-hooks/set-state-in-effect` blocks. `Static PR checks` went
red on that lint error, and nothing offline caught it: lint is in neither the
unit suite nor `tsc`.
Both cleared calls were dead anyway. The region renders only when `!filtered`,
so the filtered branch had nothing mounted to clear, and that same gate unmounts
and remounts the region across the transition, so it starts empty on its own.
Only the `requestAnimationFrame` callback now sets state, which is the form the
rule allows and the one the deferral needs.
CodeRabbit reached the same fix independently on the same head.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Qm3i3eLCDcwytzge1sKM4a
---------
Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
BigSimmo added a commit that referenced this pull request Aug 5, 2026
… (#1629)
Re-applies PR #1604's intended change on top of current main. That PR's
merge commit c593e62 resolved tests/ui-smoke.spec.ts entirely to the
branch side, discarding every change #1616 had already landed on main --
CI confirmed it, failing on a re-hardcoded 14px action font size against
the current --text-sm of 0.8125rem.
Only the three files carrying real work are carried over:
- universal-search-also-matches.tsx: raised card, min-h-tap toggle with
Layers icon, count badge and subtitle, subtitle excluded from the
accessible name, phone bottom clearance.
- globals.css and tests/helpers/style-contracts.ts: supporting tokens and
contract entries.
tests/ui-smoke.spec.ts gets only the one edit #1604 actually intended --
including vertical margins in the alsoMatchesHeight measurement, so the
phone bottom margin does not eat the phantom-scroll budget. It is applied
to main's current version of that test, so the +61/-152 revert is gone
and the file stays at +13/-2.
Also fixes a defect the original carried: the desktop "Across Clinical KB"
label used --text-soft, a deprecated alias of --decoration-soft that the
design system pins below 4.5:1 and bans on text nodes. It now uses
--text-muted, matching the sibling subtitle. This is what made #1604 red
on check:design-system-contract.
Co-authored-by: Claude <noreply@anthropic.com>
BigSimmo added a commit that referenced this pull request Aug 8, 2026
…sured (#1719)
* docs(issues): correct the re-measured A3 scope and B1 adoption count
Replays a correction stranded in a local-only worktree when PR #1712 squash-merged
and its branch was deleted before the commit could be pushed. Both figures were
re-measured today against origin/main 2675e6e rather than copied forward, and one
claim in the stranded version turned out to be wrong.
#262: legacyShadowAliases counts SEVEN tokens, not one and not eight — the regex has
matched tight|card|soft|hover|elevated|lux|lift since PR #1616 and has never included
focus. Measured total 228 = tight 100, soft 72, elevated 17, hover 17, card 12, lux 8,
lift 2. So --shadow-tight is 100 production sites across 55 files rather than the 155
or 229 previously recorded, clearing all 100 will not zero the ratchet, and #261's
--shadow-focus does not appear in this metric at all.
#266: adoption is 23 unadopted, not 24, since Button moved via #263 — its sole
production importer is src/components/AccessibleTable.tsx.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
* docs(design-system): mark the TextField/SearchField/Select row done, it was stale
Replays a correction stranded in a local-only worktree when PR #1712 squash-merged
and its branch was deleted before the commit could be pushed.
Re-measured today against origin/main 2675e6e: all three fold onto FormField, which
renders hint AND error unconditionally (form-field.tsx:131-132) and merges
aria-describedby caller -> hint -> error (form-field.tsx:107-109); TextField and
SearchField each take an external id and a Ref<HTMLInputElement>, Select an external id
and a Ref<HTMLSelectElement>. Landed in PR 13, not the PR 7 the row pointed at.
Section 4's 'Do: fold TextField/SearchField/Select/Checkbox/RadioGroup onto this shell
(PR 7)' was stale in a second way and is corrected too: Checkbox and RadioGroup
deliberately do NOT fold onto FormField — a group keeps fieldset/legend and composes
FieldHint/FieldError directly (choice.tsx:207-210). Left as written, that line asks a
future session to 'finish' a fold that is finished and to break one that was a
deliberate decision.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
* docs: correct future-dated re-measurement records to 2026-08-08
Codex review on PR #1719 flagged SCOPE/COUNT RE-MEASURED and COMPONENTS.md
rows dated 2026-08-09 while the recording commits were authored on 2026-08-08.
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
* docs(design-system): separate FormField integration from product adoption, re-measure the ui-primitives row
Two review findings on PR #1719, both valid.
Section 4 said 'Select/choice controls remain separate adoption work', which
contradicted the section above it and was wrong on both axes for Select:
select.tsx consumes FormField (folded in PR 13), and adoption-manifest.json gives
Select 2 production importers, so it is adopted. The genuinely unadopted member of
the trio is SearchField, at zero, which the sentence did not mention. Rewritten to
state the two axes explicitly — integration is complete for TextField, SearchField
and Select, and deliberately declined for Checkbox/RadioGroup; adoption is measured
TextField 3, Select 2, SearchField/Checkbox/RadioGroup 0 — so a control cannot be
read as pending on one axis because it is pending on the other.
The ui-primitives row carried three stale figures. Re-measured on this head: the
module is 698 lines, not 686; 157 production files import it, not 200 — that
figure is 202 including mockups, the same mockup-inclusive mislabelling this PR
already corrects for the shadow aliases; and 30 of the 53 registered components
are adopted, not 27.
Future-dated 2026-08-09 records were already corrected to 2026-08-08 by f3a91c6
before this commit; verified none remain under docs/.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
---------
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
Co-authored-by: Cursor Agent <cursoragent@cursor.com>
Co-authored-by: BigSimmo <BigSimmo@users.noreply.github.com>
BigSimmo pushed a commit that referenced this pull request Aug 12, 2026
Measured, not assumed. Two independent runs of the offline harness this row
specifies, on Chromium 141 — the same browser that produced the row's original
figures, so before/after is like-for-like. Mobile CLS (run1/run2 vs recorded):
/dsm 0.035 / 0.035 was 0.363
/documents/search 0.000 / 0.000 was 0.220
/ 0.013 / 0.013 was 0.023
/forms 0.081 / 0.081 was 0.310 local
/therapy-compass 0.000 / 0.000 was 0.240 local
The 128px reserve round trip is gone. The cause was fixed by PR #1616, not by
this session: use-phone-overlay-chrome-reserve.ts keeps the CSS seed until an
observer candidate holds across an 80ms quiet window and publishes only via
ResizeObserver — both remedies the row proposed — and its comment at :61 cites
the row by number.
Two controls make this a pass rather than the false clean the row warns about:
values are not uniformly 0.000, so the observer is live; and the /dsm variance
the row recorded (0.363 vs 0.219) has itself vanished, which is what you expect
once the transient write causing it stopped.
Also recorded: #118 updated — the Lighthouse browser drift is 141-vs-151, wider
than the 150-vs-151 the row states, so the budget cannot grade from this
container at all. New row #308 for desktop /documents/search CLS 0.119, stable
against a 0.119 baseline, above threshold, and outside #147's mobile scope —
which also makes the row's "desktop passes everywhere 0.016-0.097" stale.
Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_017paT42ZVMf8jaLtkjFxdy5
Sign up for freeto join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants

@BigSimmo@cursoragent