Audit & Drift

About 18 hardcoded box-shadows use literal rgba() instead of the --ui-shadow-* tokens. Some (e.g. CanvasAssetsList’s `0 1px 2px rgb(0 0 0 / 8–12%)`) closely match --ui-shadow-soft; others are genuinely context-specific depth.

Portaled UI primitives (Tooltip/Toast/Select) use the --ui-z-* tokens; canvas overlays and node chrome use raw z-index integers.

By design: Intentional, not drift. scripts/validate-canvas-layer-contract.ts deliberately pins canvas selectors (.sheet=35, .toolbar=36, .promptHud=37, .root/.quickZoomDock=40, …) to LITERAL z-index values so the stacking order is statically verifiable. A --canvas-z-* token scale was tried during the sweep and reverted because it broke that contract. Leave canvas z-index as literals.

`box-shadow: var(--ui-shadow-md)` was used with no fallback, but tokens.css only defines --ui-shadow-panel / -popover / -tooltip / -toast / -soft. There was no -md, so the shadow silently resolved to nothing and the node rendered with no elevation.

Fix: Changed to var(--ui-shadow-soft) — CSS token sweep (main @ d84f8332c). This is the one intentional visual change in the sweep (the node now shows its intended elevation).

`.input` declared `border: 1px solid rgb(115 115 115 / 0.5)` then a later `border-color: rgb(0 0 0 / 0.12)` that overrode the color, so the 115-grey never rendered.

Fix: Collapsed to a single `border: 1px solid rgb(0 0 0 / 0.12)` (the value that actually rendered) — CSS token sweep (main @ d84f8332c). Pixel-identical.

The keyframe had zero consumers anywhere in the repo. Its comment claimed it was "used by CanvasLoadingScreen", but that component uses its own keyframes (rootReveal, loaderLogoEnter, textEnter).

Fix: Deleted the keyframe and the stale comment — CSS token sweep (main @ d84f8332c). The generated dead-keyframes scan is now 0.

The comment implied multiple animation utility classes live in animations.css, but exactly one exists (.animate-canvas-card-exit).

Fix: Comment corrected to name the single class — CSS token sweep (main @ d84f8332c).

`.paramSelectContent` hard-set z-index:1200 on a portaled Select dropdown. The Select primitive uses var(--ui-z-overlay)=1000 and toasts are --ui-z-toast=1100, so a node-param (and the date-picker) dropdown rendered on top of toasts.

Fix: Both dropdowns now use var(--ui-z-overlay) so toasts sit above them — CSS token sweep (main @ d84f8332c).

Two back-to-back rule blocks for the same selector (both set `border: 0`; the second added height/place-items/gap/radius/padding). Harmless but read as an incomplete refactor.

Fix: Merged into one block (and deduped a doubled :focus selector) — CSS token sweep (main @ d84f8332c).

Eight custom properties (--node-property-label-font-size, -help-font-size, -section-gap, -description-line-clamp, etc.) were read only with fallbacks and never assigned in any CSS or TS — dead indirection. Contrast with --bs-select-* and --canvas-viewport-* which ARE set at runtime (see cleared list).

Fix: All 8 reads inlined to their fallback values — CSS token sweep (main @ d84f8332c). Pixel-identical.

--tone-scroll-thumb, -hover and -focus were byte-identical (rgba(0,0,0,0.2)) yet wired to 3 call sites (default / :hover / :focus) as if the thumb changed color on interaction — it did not.

Fix: Collapsed to one --tone-scroll-thumb token; the 3 call sites point at it — CSS token sweep (main @ d84f8332c). Pixel-identical.

There was no --ui-radius-full token, so full/pill radius was hardcoded as 999px / 9999px (and 50% circles) across the codebase.

Fix: Added --ui-radius-full (and --ui-radius-2xs for 2px); ~120 border-radius literals tokenized (999px/9999px→full, 2px/0.125rem→2xs, plus exact-match px→token), pixel-identical — CSS token sweep (main @ d84f8332c). The pill-scan dropped 76→19; the remaining 19 are intentional 50% circles left as a documented idiom.

Pure white was defined under 6+ token names; #111827 under 3; plus error-shell ≡ error-bg/border, auth-text-muted ≡ public-text-muted, the node-header colour pair, and text-caption ≡ ui-text-xs.

Fix: Duplicates redefined as var() aliases of a canonical token (white→--color-background, fg→--color-foreground, error-shell→base, auth-text-muted→public, node-header icon→label, text-caption→--ui-text-xs) — CSS token sweep (main @ d84f8332c). One source of truth; zero visual change. (Genuinely-distinct values like --text-micro / --text-node-label were left alone.)

--ui-text-xs/sm/md/lg coexisted with --text-caption/micro/node-label/label, with --text-caption byte-identical to --ui-text-xs.

Fix: The overlapping --text-caption is now an alias of --ui-text-xs (and --text-label was already an alias of --ui-text-md) — CSS token sweep (main @ d84f8332c). --text-micro (10px) and --text-node-label (9px) are unique canvas values with no scale-A equivalent, so they stay as-is by design.