@actuate-media/cms-core 0.35.1 → 0.36.0

package/dist/__tests__/api/appearance-routes.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appearance-routes.test.d.ts.map

package/dist/__tests__/api/appearance-routes.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appearance-routes.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/api/appearance-routes.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/api/appearance-routes.test.js

@@ -0,0 +1,134 @@
+import { beforeEach, describe, expect, it } from 'vitest';
+import { handleActuateAPI } from '../../api/index.js';
+import { initDB } from '../../db.js';
+import { generateApiKey } from '../../security/api-key-enhanced.js';
+/**
+ * Contract tests for the appearance/brand endpoints:
+ *   - GET /public/brand  → public, exposes ONLY the public brand + favicon.
+ *   - GET /appearance     → authed, exposes stored settings + resolved views.
+ *
+ * Pins the response shapes the public frontend and admin Appearance tab depend
+ * on, and proves the public route never leaks the admin-only brand.
+ */
+const VALID_SECRET = 'a'.repeat(48);
+const SETTINGS_BLOB = {
+    siteTitle: 'Actuate Media',
+    brand: {
+        mode: 'customAdminBrand',
+        publicPrimaryLogoAssetId: 'pub-logo',
+        adminPrimaryLogoAssetId: 'admin-logo',
+        faviconSourceAssetId: 'fav',
+        updatedAt: '2026-02-03T00:00:00.000Z',
+    },
+    appearance: { adminAccentColor: 'teal', sidebarDensity: 'compact', reduceMotion: true },
+};
+const MEDIA_ROWS = [
+    {
+        id: 'pub-logo',
+        publicUrl: 'https://cdn.example.com/pub.svg',
+        mimeType: 'image/svg+xml',
+        width: 400,
+        height: 100,
+    },
+    {
+        id: 'admin-logo',
+        publicUrl: 'https://cdn.example.com/admin.svg',
+        mimeType: 'image/svg+xml',
+        width: 380,
+        height: 90,
+    },
+    {
+        id: 'fav',
+        publicUrl: 'https://cdn.example.com/fav.png',
+        mimeType: 'image/png',
+        width: 32,
+        height: 32,
+    },
+];
+function createMockDB(opts = {}) {
+    const apiKey = opts.apiKey;
+    return {
+        apiKey: {
+            findMany: async () => (apiKey ? [apiKey] : []),
+            findUnique: async ({ where }) => apiKey && apiKey.keyHash === where.keyHash ? apiKey : null,
+            update: async () => apiKey,
+        },
+        document: {
+            findFirst: async () => ({ data: SETTINGS_BLOB }),
+            findMany: async () => [],
+            count: async () => 0,
+        },
+        media: {
+            findMany: async () => MEDIA_ROWS,
+        },
+        user: {},
+        session: {},
+    };
+}
+async function makeKey(scopes) {
+    const { key, keyHash, keyPrefix } = await generateApiKey({ prefix: 'act_sk', scopes });
+    return {
+        key,
+        record: {
+            id: 'apikey-1',
+            keyHash,
+            keyPrefix,
+            userId: 'user-1',
+            scopes,
+            ipRestrictions: null,
+            expiresAt: null,
+            lastUsedAt: null,
+            revokedAt: null,
+        },
+    };
+}
+describe('GET /public/brand', () => {
+    beforeEach(() => {
+        delete globalThis.__actuateConfig;
+        process.env.CMS_SECRET = VALID_SECRET;
+    });
+    it('returns the public brand + favicon without auth and hides the admin brand', async () => {
+        const db = createMockDB();
+        initDB(db);
+        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
+        const res = await handler(new Request('https://example.com/api/cms/public/brand'));
+        expect(res.status).toBe(200);
+        const body = (await res.json());
+        expect(body.data.public.primary.url).toBe('https://cdn.example.com/pub.svg');
+        expect(body.data.favicon.icon).toContain('https://cdn.example.com/fav.png');
+        // The admin-only brand must NOT be exposed publicly.
+        expect(body.data.admin).toBeUndefined();
+        expect(JSON.stringify(body)).not.toContain('admin.svg');
+    });
+});
+describe('GET /appearance', () => {
+    beforeEach(() => {
+        delete globalThis.__actuateConfig;
+        process.env.CMS_SECRET = VALID_SECRET;
+    });
+    it('requires authentication', async () => {
+        const db = createMockDB();
+        initDB(db);
+        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
+        const res = await handler(new Request('https://example.com/api/cms/appearance'));
+        expect(res.status).toBe(401);
+    });
+    it('returns stored appearance + brand + resolved admin/public views when authed', async () => {
+        const { key, record } = await makeKey({ admin: true });
+        const db = createMockDB({ apiKey: record });
+        initDB(db);
+        const handler = handleActuateAPI({ prismaClient: db, config: { collections: {} } });
+        const res = await handler(new Request('https://example.com/api/cms/appearance', {
+            headers: { Authorization: `Bearer ${key}` },
+        }));
+        expect(res.status).toBe(200);
+        const body = (await res.json());
+        expect(body.data.appearance.adminAccentColor).toBe('teal');
+        expect(body.data.appearance.sidebarDensity).toBe('compact');
+        expect(body.data.brand.mode).toBe('customAdminBrand');
+        // customAdminBrand → admin primary resolves to the admin asset.
+        expect(body.data.resolved.admin.primary.url).toBe('https://cdn.example.com/admin.svg');
+        expect(body.data.resolved.public.primary.url).toBe('https://cdn.example.com/pub.svg');
+    });
+});
+//# sourceMappingURL=appearance-routes.test.js.map

package/dist/__tests__/api/appearance-routes.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appearance-routes.test.js","sourceRoot":"","sources":["../../../src/__tests__/api/appearance-routes.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAEzD,OAAO,EAAE,gBAAgB,EAAE,MAAM,oBAAoB,CAAA;AACrD,OAAO,EAAE,MAAM,EAAE,MAAM,aAAa,CAAA;AACpC,OAAO,EAAE,cAAc,EAAE,MAAM,oCAAoC,CAAA;AAGnE;;;;;;;GAOG;AACH,MAAM,YAAY,GAAG,GAAG,CAAC,MAAM,CAAC,EAAE,CAAC,CAAA;AAEnC,MAAM,aAAa,GAAG;IACpB,SAAS,EAAE,eAAe;IAC1B,KAAK,EAAE;QACL,IAAI,EAAE,kBAAkB;QACxB,wBAAwB,EAAE,UAAU;QACpC,uBAAuB,EAAE,YAAY;QACrC,oBAAoB,EAAE,KAAK;QAC3B,SAAS,EAAE,0BAA0B;KACtC;IACD,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,cAAc,EAAE,SAAS,EAAE,YAAY,EAAE,IAAI,EAAE;CACxF,CAAA;AAED,MAAM,UAAU,GAAG;IACjB;QACE,EAAE,EAAE,UAAU;QACd,SAAS,EAAE,iCAAiC;QAC5C,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,GAAG;QACV,MAAM,EAAE,GAAG;KACZ;IACD;QACE,EAAE,EAAE,YAAY;QAChB,SAAS,EAAE,mCAAmC;QAC9C,QAAQ,EAAE,eAAe;QACzB,KAAK,EAAE,GAAG;QACV,MAAM,EAAE,EAAE;KACX;IACD;QACE,EAAE,EAAE,KAAK;QACT,SAAS,EAAE,iCAAiC;QAC5C,QAAQ,EAAE,WAAW;QACrB,KAAK,EAAE,EAAE;QACT,MAAM,EAAE,EAAE;KACX;CACF,CAAA;AAcD,SAAS,YAAY,CAAC,OAAsC,EAAE;IAC5D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAA;IAC1B,OAAO;QACL,MAAM,EAAE;YACN,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC;YAC9C,UAAU,EAAE,KAAK,EAAE,EAAE,KAAK,EAAkC,EAAE,EAAE,CAC9D,MAAM,IAAI,MAAM,CAAC,OAAO,KAAK,KAAK,CAAC,OAAO,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YAC5D,MAAM,EAAE,KAAK,IAAI,EAAE,CAAC,MAAM;SAC3B;QACD,QAAQ,EAAE;YACR,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,aAAa,EAAE,CAAC;YAChD,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,EAAE;YACxB,KAAK,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;SACrB;QACD,KAAK,EAAE;YACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC,UAAU;SACjC;QACD,IAAI,EAAE,EAAE;QACR,OAAO,EAAE,EAAE;KACL,CAAA;AACV,CAAC;AAED,KAAK,UAAU,OAAO,CAAC,MAAmB;IACxC,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,SAAS,EAAE,GAAG,MAAM,cAAc,CAAC,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,CAAC,CAAA;IACtF,OAAO;QACL,GAAG;QACH,MAAM,EAAE;YACN,EAAE,EAAE,UAAU;YACd,OAAO;YACP,SAAS;YACT,MAAM,EAAE,QAAQ;YAChB,MAAM;YACN,cAAc,EAAE,IAAI;YACpB,SAAS,EAAE,IAAI;YACf,UAAU,EAAE,IAAI;YAChB,SAAS,EAAE,IAAI;SAChB;KACF,CAAA;AACH,CAAC;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,UAAU,CAAC,GAAG,EAAE;QACd,OAAQ,UAAkB,CAAC,eAAe,CAAA;QAC1C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2EAA2E,EAAE,KAAK,IAAI,EAAE;QACzF,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,0CAA0C,CAAC,CAAC,CAAA;QAClF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QAEtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;QAC5E,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,iCAAiC,CAAC,CAAA;QAC3E,qDAAqD;QACrD,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,CAAC,aAAa,EAAE,CAAA;QACvC,MAAM,CAAC,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,CAAC,CAAC,GAAG,CAAC,SAAS,CAAC,WAAW,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,iBAAiB,EAAE,GAAG,EAAE;IAC/B,UAAU,CAAC,GAAG,EAAE;QACd,OAAQ,UAAkB,CAAC,eAAe,CAAA;QAC1C,OAAO,CAAC,GAAG,CAAC,UAAU,GAAG,YAAY,CAAA;IACvC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yBAAyB,EAAE,KAAK,IAAI,EAAE;QACvC,MAAM,EAAE,GAAG,YAAY,EAAE,CAAA;QACzB,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,MAAM,OAAO,CAAC,IAAI,OAAO,CAAC,wCAAwC,CAAC,CAAC,CAAA;QAChF,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC9B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,6EAA6E,EAAE,KAAK,IAAI,EAAE;QAC3F,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,GAAG,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAA;QACtD,MAAM,EAAE,GAAG,YAAY,CAAC,EAAE,MAAM,EAAE,MAAM,EAAE,CAAC,CAAA;QAC3C,MAAM,CAAC,EAAE,CAAC,CAAA;QACV,MAAM,OAAO,GAAG,gBAAgB,CAAC,EAAE,YAAY,EAAE,EAAE,EAAE,MAAM,EAAE,EAAE,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC,CAAA;QAEnF,MAAM,GAAG,GAAG,MAAM,OAAO,CACvB,IAAI,OAAO,CAAC,wCAAwC,EAAE;YACpD,OAAO,EAAE,EAAE,aAAa,EAAE,UAAU,GAAG,EAAE,EAAE;SAC5C,CAAC,CACH,CAAA;QACD,MAAM,CAAC,GAAG,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAC5B,MAAM,IAAI,GAAG,CAAC,MAAM,GAAG,CAAC,IAAI,EAAE,CAAQ,CAAA;QAEtC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,gBAAgB,CAAC,CAAC,IAAI,CAAC,MAAM,CAAC,CAAA;QAC1D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,UAAU,CAAC,cAAc,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC3D,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,kBAAkB,CAAC,CAAA;QACrD,gEAAgE;QAChE,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,mCAAmC,CAAC,CAAA;QACtF,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,QAAQ,CAAC,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,iCAAiC,CAAC,CAAA;IACvF,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/__tests__/appearance/appearance.test.d.ts

@@ -0,0 +1,2 @@
+export {};
+//# sourceMappingURL=appearance.test.d.ts.map

package/dist/__tests__/appearance/appearance.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"appearance.test.d.ts","sourceRoot":"","sources":["../../../src/__tests__/appearance/appearance.test.ts"],"names":[],"mappings":""}

package/dist/__tests__/appearance/appearance.test.js

@@ -0,0 +1,273 @@
+import { describe, expect, it } from 'vitest';
+import { classifyLogoShape, logoShapeWarning, contrastRatio, isParseableColor, validateAccentColor, generateAdminThemeTokens, accentTokensToCssVars, ACCENT_PRESETS, siteInitials, resolveAdminBrand, resolvePublicBrand, getFaviconMetadata, parseAppearance, parseBrand, brandAssetIds, resolveBrand, DEFAULT_APPEARANCE, } from '../../appearance/index.js';
+describe('classifyLogoShape', () => {
+    it('classifies by aspect ratio', () => {
+        expect(classifyLogoShape(100, 100)).toBe('square');
+        expect(classifyLogoShape(120, 100)).toBe('square'); // ratio 1.2
+        expect(classifyLogoShape(400, 100)).toBe('horizontal'); // ratio 4
+        expect(classifyLogoShape(100, 400)).toBe('vertical'); // ratio 0.25
+        expect(classifyLogoShape(160, 100)).toBe('neutral'); // ratio 1.6
+    });
+    it('returns unknown for missing/invalid dimensions', () => {
+        expect(classifyLogoShape(undefined, undefined)).toBe('unknown');
+        expect(classifyLogoShape(0, 100)).toBe('unknown');
+        expect(classifyLogoShape(100, null)).toBe('unknown');
+    });
+});
+describe('logoShapeWarning', () => {
+    it('warns when a square is used as a primary logo', () => {
+        expect(logoShapeWarning('publicPrimaryLogo', 'square')).toMatch(/square mark/i);
+    });
+    it('warns when a horizontal is used as a logo mark', () => {
+        expect(logoShapeWarning('adminLogoMark', 'horizontal')).toMatch(/square mark works better/i);
+    });
+    it('warns when a non-square favicon source is uploaded', () => {
+        expect(logoShapeWarning('faviconSource', 'horizontal')).toMatch(/not square/i);
+    });
+    it('warns about vertical logos in wide slots', () => {
+        expect(logoShapeWarning('publicPrimaryLogo', 'vertical')).toMatch(/vertical/i);
+    });
+    it('is silent for good fits and unknown shapes', () => {
+        expect(logoShapeWarning('publicPrimaryLogo', 'horizontal')).toBeNull();
+        expect(logoShapeWarning('publicLogoMark', 'square')).toBeNull();
+        expect(logoShapeWarning('publicPrimaryLogo', 'unknown')).toBeNull();
+    });
+});
+describe('color + contrast', () => {
+    it('computes the canonical black/white contrast as 21:1', () => {
+        expect(contrastRatio('#000000', '#ffffff')).toBeCloseTo(21, 0);
+    });
+    it('returns 1 for identical colors', () => {
+        expect(contrastRatio('#ffffff', '#ffffff')).toBeCloseTo(1, 5);
+    });
+    it('parses oklch and hex', () => {
+        expect(isParseableColor('oklch(0.54 0.23 293)')).toBe(true);
+        expect(isParseableColor('#abc')).toBe(true);
+        expect(isParseableColor('rebeccapurple')).toBe(false);
+        expect(isParseableColor('')).toBe(false);
+    });
+    it('ranks a dark oklch accent as high contrast against white', () => {
+        // The purple preset on white should clear the 3:1 UI bar comfortably.
+        expect(contrastRatio('oklch(0.54 0.23 293)', '#ffffff')).toBeGreaterThan(3);
+    });
+});
+describe('validateAccentColor', () => {
+    it('accepts every preset', () => {
+        for (const name of Object.keys(ACCENT_PRESETS)) {
+            expect(validateAccentColor(name).valid).toBe(true);
+        }
+    });
+    it('rejects an unparseable color', () => {
+        const r = validateAccentColor('not-a-color');
+        expect(r.valid).toBe(false);
+        expect(r.reason).toMatch(/valid hex or oklch/i);
+    });
+    it('rejects a custom color that fails contrast against white', () => {
+        const r = validateAccentColor('#fff8dc'); // near-white, low contrast
+        expect(r.valid).toBe(false);
+        expect(r.reason).toMatch(/below the 3:1/i);
+    });
+    it('accepts a sufficiently dark custom color', () => {
+        expect(validateAccentColor('#0a3d62').valid).toBe(true);
+    });
+});
+describe('generateAdminThemeTokens', () => {
+    it('returns preset tokens for light and dark', () => {
+        expect(generateAdminThemeTokens({ adminAccentColor: 'blue' }, 'light')).toEqual(ACCENT_PRESETS.blue.light);
+        expect(generateAdminThemeTokens({ adminAccentColor: 'blue' }, 'dark')).toEqual(ACCENT_PRESETS.blue.dark);
+    });
+    it('drives tokens from a custom color', () => {
+        const tokens = generateAdminThemeTokens({ adminAccentColor: '#0a3d62' }, 'light');
+        expect(tokens.brand).toBe('#0a3d62');
+        expect(tokens.primary).toBe('#0a3d62');
+    });
+    it('falls back to purple for an unknown name', () => {
+        expect(generateAdminThemeTokens({ adminAccentColor: 'chartreuse' }, 'light')).toEqual(ACCENT_PRESETS.purple.light);
+    });
+    it('maps tokens to the expected CSS variables', () => {
+        const vars = accentTokensToCssVars(ACCENT_PRESETS.purple.light);
+        expect(Object.keys(vars).sort()).toEqual([
+            '--brand',
+            '--brand-foreground',
+            '--primary',
+            '--primary-foreground',
+            '--ring',
+            '--sidebar-primary',
+            '--sidebar-primary-foreground',
+        ].sort());
+    });
+});
+describe('siteInitials', () => {
+    it('derives up to two initials', () => {
+        expect(siteInitials('Actuate Media')).toBe('AM');
+        expect(siteInitials('Actuate')).toBe('AC');
+        expect(siteInitials('')).toBe('A');
+        expect(siteInitials(undefined)).toBe('A');
+    });
+});
+function assetMap(...assets) {
+    return new Map(assets.map((a) => [a.id, a]));
+}
+const HORIZONTAL = {
+    id: 'primary-1',
+    publicUrl: 'https://cdn.example.com/logo.svg',
+    mimeType: 'image/svg+xml',
+    width: 400,
+    height: 100,
+};
+const MARK = {
+    id: 'mark-1',
+    publicUrl: 'https://cdn.example.com/mark.svg',
+    mimeType: 'image/svg+xml',
+    width: 64,
+    height: 64,
+};
+const FAVICON = {
+    id: 'fav-1',
+    publicUrl: 'https://cdn.example.com/favicon.png',
+    mimeType: 'image/png',
+    width: 32,
+    height: 32,
+};
+describe('resolveAdminBrand', () => {
+    it('inherits the public brand by default', () => {
+        const brand = {
+            mode: 'inheritPublicBrand',
+            publicPrimaryLogoAssetId: 'primary-1',
+            publicLogoMarkAssetId: 'mark-1',
+        };
+        const r = resolveAdminBrand(brand, assetMap(HORIZONTAL, MARK), 'Actuate Media');
+        expect(r.inherited).toBe(true);
+        expect(r.primary?.url).toBe(HORIZONTAL.publicUrl);
+        expect(r.mark?.url).toBe(MARK.publicUrl);
+        expect(r.primary?.shape).toBe('horizontal');
+        expect(r.initials).toBe('AM');
+    });
+    it('prefers admin assets in customAdminBrand mode, falling back to public', () => {
+        const adminPrimary = { ...HORIZONTAL, id: 'admin-primary' };
+        const brand = {
+            mode: 'customAdminBrand',
+            adminPrimaryLogoAssetId: 'admin-primary',
+            publicLogoMarkAssetId: 'mark-1',
+        };
+        const r = resolveAdminBrand(brand, assetMap(adminPrimary, MARK), 'Actuate Media');
+        expect(r.inherited).toBe(false);
+        expect(r.primary?.url).toBe(adminPrimary.publicUrl);
+        // No admin mark → falls back to the public mark.
+        expect(r.mark?.url).toBe(MARK.publicUrl);
+    });
+    it('falls back the collapsed mark to the favicon source', () => {
+        const brand = {
+            mode: 'inheritPublicBrand',
+            publicPrimaryLogoAssetId: 'primary-1',
+            faviconSourceAssetId: 'fav-1',
+        };
+        const r = resolveAdminBrand(brand, assetMap(HORIZONTAL, FAVICON), 'Actuate Media');
+        expect(r.mark?.url).toBe(FAVICON.publicUrl);
+    });
+    it('returns null logos and initials when nothing is configured', () => {
+        const r = resolveAdminBrand({ mode: 'inheritPublicBrand' }, assetMap(), 'Globex Corp');
+        expect(r.primary).toBeNull();
+        expect(r.mark).toBeNull();
+        expect(r.initials).toBe('GC');
+    });
+});
+describe('resolvePublicBrand', () => {
+    it('resolves public assets and mark fallback', () => {
+        const brand = {
+            mode: 'customAdminBrand', // irrelevant to public resolution
+            publicPrimaryLogoAssetId: 'primary-1',
+            faviconSourceAssetId: 'fav-1',
+        };
+        const r = resolvePublicBrand(brand, assetMap(HORIZONTAL, FAVICON), 'Actuate Media');
+        expect(r.primary?.url).toBe(HORIZONTAL.publicUrl);
+        expect(r.mark?.url).toBe(FAVICON.publicUrl);
+    });
+});
+describe('getFaviconMetadata', () => {
+    it('returns null icons when no favicon source is set', () => {
+        const r = getFaviconMetadata({ mode: 'inheritPublicBrand' }, assetMap());
+        expect(r.icon).toBeNull();
+        expect(r.apple).toBeNull();
+    });
+    it('cache-busts the icon URL from updatedAt', () => {
+        const brand = {
+            mode: 'inheritPublicBrand',
+            faviconSourceAssetId: 'fav-1',
+            updatedAt: '2026-02-03T00:00:00.000Z',
+        };
+        const r = getFaviconMetadata(brand, assetMap(FAVICON));
+        expect(r.icon).toBe(`${FAVICON.publicUrl}?v=${Date.parse(brand.updatedAt)}`);
+        expect(r.apple).toBe(r.icon);
+        expect(r.type).toBe('image/png');
+    });
+});
+describe('parse + ids', () => {
+    it('parses appearance with defaults', () => {
+        expect(parseAppearance({})).toEqual(DEFAULT_APPEARANCE);
+        expect(parseAppearance({ appearance: { adminAccentColor: 'teal' } }).adminAccentColor).toBe('teal');
+    });
+    it('parses brand with defaults', () => {
+        expect(parseBrand({}).mode).toBe('inheritPublicBrand');
+    });
+    it('collects unique asset ids', () => {
+        const brand = {
+            mode: 'customAdminBrand',
+            publicPrimaryLogoAssetId: 'a',
+            adminPrimaryLogoAssetId: 'a', // duplicate
+            faviconSourceAssetId: 'b',
+            generatedFaviconAssetIds: ['c', 'b'],
+        };
+        expect(brandAssetIds(brand).sort()).toEqual(['a', 'b', 'c']);
+    });
+});
+describe('resolveBrand (async)', () => {
+    it('reads the settings global and resolves every view', async () => {
+        const db = {
+            document: {
+                findFirst: async () => ({
+                    data: {
+                        siteTitle: 'Actuate Media',
+                        brand: {
+                            mode: 'inheritPublicBrand',
+                            publicPrimaryLogoAssetId: 'primary-1',
+                            faviconSourceAssetId: 'fav-1',
+                            updatedAt: '2026-02-03T00:00:00.000Z',
+                        },
+                    },
+                }),
+            },
+            media: {
+                findMany: async () => [
+                    {
+                        id: 'primary-1',
+                        publicUrl: HORIZONTAL.publicUrl,
+                        mimeType: 'image/svg+xml',
+                        width: 400,
+                        height: 100,
+                    },
+                    {
+                        id: 'fav-1',
+                        publicUrl: FAVICON.publicUrl,
+                        mimeType: 'image/png',
+                        width: 32,
+                        height: 32,
+                    },
+                ],
+            },
+        };
+        const r = await resolveBrand(db, null);
+        expect(r.admin.primary?.url).toBe(HORIZONTAL.publicUrl);
+        expect(r.public.primary?.url).toBe(HORIZONTAL.publicUrl);
+        expect(r.favicon.icon).toContain(FAVICON.publicUrl);
+        expect(r.admin.initials).toBe('AM');
+    });
+    it('degrades gracefully with no media table', async () => {
+        const db = { document: { findFirst: async () => ({ data: {} }) } };
+        const r = await resolveBrand(db, 'Globex');
+        expect(r.admin.primary).toBeNull();
+        expect(r.favicon.icon).toBeNull();
+        expect(r.public.initials).toBe('GL');
+    });
+});
+//# sourceMappingURL=appearance.test.js.map

package/dist/__tests__/appearance/appearance.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"appearance.test.js","sourceRoot":"","sources":["../../../src/__tests__/appearance/appearance.test.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,QAAQ,EAAE,MAAM,EAAE,EAAE,EAAE,MAAM,QAAQ,CAAA;AAE7C,OAAO,EACL,iBAAiB,EACjB,gBAAgB,EAChB,aAAa,EACb,gBAAgB,EAChB,mBAAmB,EACnB,wBAAwB,EACxB,qBAAqB,EACrB,cAAc,EACd,YAAY,EACZ,iBAAiB,EACjB,kBAAkB,EAClB,kBAAkB,EAClB,eAAe,EACf,UAAU,EACV,aAAa,EACb,YAAY,EACZ,kBAAkB,GACnB,MAAM,2BAA2B,CAAA;AAGlC,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA;QAClD,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,QAAQ,CAAC,CAAA,CAAC,YAAY;QAC/D,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA,CAAC,UAAU;QACjE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA,CAAC,aAAa;QAClE,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA,CAAC,YAAY;IAClE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,iBAAiB,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QAC/D,MAAM,CAAC,iBAAiB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,iBAAiB,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACtD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,+CAA+C,EAAE,GAAG,EAAE;QACvD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,cAAc,CAAC,CAAA;IACjF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gDAAgD,EAAE,GAAG,EAAE;QACxD,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,2BAA2B,CAAC,CAAA;IAC9F,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,oDAAoD,EAAE,GAAG,EAAE;QAC5D,MAAM,CAAC,gBAAgB,CAAC,eAAe,EAAE,YAAY,CAAC,CAAC,CAAC,OAAO,CAAC,aAAa,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,UAAU,CAAC,CAAC,CAAC,OAAO,CAAC,WAAW,CAAC,CAAA;IAChF,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;QACpD,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,YAAY,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QACtE,MAAM,CAAC,gBAAgB,CAAC,gBAAgB,EAAE,QAAQ,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC/D,MAAM,CAAC,gBAAgB,CAAC,mBAAmB,EAAE,SAAS,CAAC,CAAC,CAAC,QAAQ,EAAE,CAAA;IACrE,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;IAChC,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,EAAE,EAAE,CAAC,CAAC,CAAA;IAChE,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,gCAAgC,EAAE,GAAG,EAAE;QACxC,MAAM,CAAC,aAAa,CAAC,SAAS,EAAE,SAAS,CAAC,CAAC,CAAC,WAAW,CAAC,CAAC,EAAE,CAAC,CAAC,CAAA;IAC/D,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,MAAM,CAAC,gBAAgB,CAAC,sBAAsB,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3D,MAAM,CAAC,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC3C,MAAM,CAAC,gBAAgB,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QACrD,MAAM,CAAC,gBAAgB,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,sEAAsE;QACtE,MAAM,CAAC,aAAa,CAAC,sBAAsB,EAAE,SAAS,CAAC,CAAC,CAAC,eAAe,CAAC,CAAC,CAAC,CAAA;IAC7E,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,qBAAqB,EAAE,GAAG,EAAE;IACnC,EAAE,CAAC,sBAAsB,EAAE,GAAG,EAAE;QAC9B,KAAK,MAAM,IAAI,IAAI,MAAM,CAAC,IAAI,CAAC,cAAc,CAAC,EAAE,CAAC;YAC/C,MAAM,CAAC,mBAAmB,CAAC,IAAI,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QACpD,CAAC;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,8BAA8B,EAAE,GAAG,EAAE;QACtC,MAAM,CAAC,GAAG,mBAAmB,CAAC,aAAa,CAAC,CAAA;QAC5C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,qBAAqB,CAAC,CAAA;IACjD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0DAA0D,EAAE,GAAG,EAAE;QAClE,MAAM,CAAC,GAAG,mBAAmB,CAAC,SAAS,CAAC,CAAA,CAAC,2BAA2B;QACpE,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC3B,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,OAAO,CAAC,gBAAgB,CAAC,CAAA;IAC5C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,mBAAmB,CAAC,SAAS,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACzD,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,0BAA0B,EAAE,GAAG,EAAE;IACxC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CAC7E,cAAc,CAAC,IAAI,CAAC,KAAK,CAC1B,CAAA;QACD,MAAM,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC,OAAO,CAC5E,cAAc,CAAC,IAAI,CAAC,IAAI,CACzB,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,mCAAmC,EAAE,GAAG,EAAE;QAC3C,MAAM,MAAM,GAAG,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,SAAS,EAAE,EAAE,OAAO,CAAC,CAAA;QACjF,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACpC,MAAM,CAAC,MAAM,CAAC,OAAO,CAAC,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IACxC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,CAAC,wBAAwB,CAAC,EAAE,gBAAgB,EAAE,YAAY,EAAE,EAAE,OAAO,CAAC,CAAC,CAAC,OAAO,CACnF,cAAc,CAAC,MAAM,CAAC,KAAK,CAC5B,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;QACnD,MAAM,IAAI,GAAG,qBAAqB,CAAC,cAAc,CAAC,MAAM,CAAC,KAAK,CAAC,CAAA;QAC/D,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CACtC;YACE,SAAS;YACT,oBAAoB;YACpB,WAAW;YACX,sBAAsB;YACtB,QAAQ;YACR,mBAAmB;YACnB,8BAA8B;SAC/B,CAAC,IAAI,EAAE,CACT,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,cAAc,EAAE,GAAG,EAAE;IAC5B,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,YAAY,CAAC,eAAe,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAChD,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC1C,MAAM,CAAC,YAAY,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;QAClC,MAAM,CAAC,YAAY,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,CAAA;IAC3C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,SAAS,QAAQ,CAAC,GAAG,MAAwB;IAC3C,OAAO,IAAI,GAAG,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAA;AAC9C,CAAC;AAED,MAAM,UAAU,GAAmB;IACjC,EAAE,EAAE,WAAW;IACf,SAAS,EAAE,kCAAkC;IAC7C,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,GAAG;IACV,MAAM,EAAE,GAAG;CACZ,CAAA;AACD,MAAM,IAAI,GAAmB;IAC3B,EAAE,EAAE,QAAQ;IACZ,SAAS,EAAE,kCAAkC;IAC7C,QAAQ,EAAE,eAAe;IACzB,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;CACX,CAAA;AACD,MAAM,OAAO,GAAmB;IAC9B,EAAE,EAAE,OAAO;IACX,SAAS,EAAE,qCAAqC;IAChD,QAAQ,EAAE,WAAW;IACrB,KAAK,EAAE,EAAE;IACT,MAAM,EAAE,EAAE;CACX,CAAA;AAED,QAAQ,CAAC,mBAAmB,EAAE,GAAG,EAAE;IACjC,EAAE,CAAC,sCAAsC,EAAE,GAAG,EAAE;QAC9C,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,wBAAwB,EAAE,WAAW;YACrC,qBAAqB,EAAE,QAAQ;SAChC,CAAA;QACD,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QAC/E,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAC9B,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;QACxC,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,KAAK,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,CAAA;QAC3C,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,uEAAuE,EAAE,GAAG,EAAE;QAC/E,MAAM,YAAY,GAAmB,EAAE,GAAG,UAAU,EAAE,EAAE,EAAE,eAAe,EAAE,CAAA;QAC3E,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,kBAAkB;YACxB,uBAAuB,EAAE,eAAe;YACxC,qBAAqB,EAAE,QAAQ;SAChC,CAAA;QACD,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,YAAY,EAAE,IAAI,CAAC,EAAE,eAAe,CAAC,CAAA;QACjF,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,CAAA;QAC/B,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,YAAY,CAAC,SAAS,CAAC,CAAA;QACnD,iDAAiD;QACjD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,SAAS,CAAC,CAAA;IAC1C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;QAC7D,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,wBAAwB,EAAE,WAAW;YACrC,oBAAoB,EAAE,OAAO;SAC9B,CAAA;QACD,MAAM,CAAC,GAAG,iBAAiB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;QAClF,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4DAA4D,EAAE,GAAG,EAAE;QACpE,MAAM,CAAC,GAAG,iBAAiB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,EAAE,aAAa,CAAC,CAAA;QACtF,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IAC/B,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;QAClD,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,kBAAkB,EAAE,kCAAkC;YAC5D,wBAAwB,EAAE,WAAW;YACrC,oBAAoB,EAAE,OAAO;SAC9B,CAAA;QACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,UAAU,EAAE,OAAO,CAAC,EAAE,eAAe,CAAC,CAAA;QACnF,MAAM,CAAC,CAAC,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACjD,MAAM,CAAC,CAAC,CAAC,IAAI,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;IAC7C,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,oBAAoB,EAAE,GAAG,EAAE;IAClC,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;QAC1D,MAAM,CAAC,GAAG,kBAAkB,CAAC,EAAE,IAAI,EAAE,oBAAoB,EAAE,EAAE,QAAQ,EAAE,CAAC,CAAA;QACxE,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACzB,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,QAAQ,EAAE,CAAA;IAC5B,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,GAAG,EAAE;QACjD,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,oBAAoB;YAC1B,oBAAoB,EAAE,OAAO;YAC7B,SAAS,EAAE,0BAA0B;SACtC,CAAA;QACD,MAAM,CAAC,GAAG,kBAAkB,CAAC,KAAK,EAAE,QAAQ,CAAC,OAAO,CAAC,CAAC,CAAA;QACtD,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC,SAAS,MAAM,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAU,CAAC,EAAE,CAAC,CAAA;QAC7E,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAA;QAC5B,MAAM,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,WAAW,CAAC,CAAA;IAClC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,aAAa,EAAE,GAAG,EAAE;IAC3B,EAAE,CAAC,iCAAiC,EAAE,GAAG,EAAE;QACzC,MAAM,CAAC,eAAe,CAAC,EAAE,CAAC,CAAC,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAA;QACvD,MAAM,CAAC,eAAe,CAAC,EAAE,UAAU,EAAE,EAAE,gBAAgB,EAAE,MAAM,EAAE,EAAE,CAAC,CAAC,gBAAgB,CAAC,CAAC,IAAI,CACzF,MAAM,CACP,CAAA;IACH,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,4BAA4B,EAAE,GAAG,EAAE;QACpC,MAAM,CAAC,UAAU,CAAC,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC,oBAAoB,CAAC,CAAA;IACxD,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,2BAA2B,EAAE,GAAG,EAAE;QACnC,MAAM,KAAK,GAAkB;YAC3B,IAAI,EAAE,kBAAkB;YACxB,wBAAwB,EAAE,GAAG;YAC7B,uBAAuB,EAAE,GAAG,EAAE,YAAY;YAC1C,oBAAoB,EAAE,GAAG;YACzB,wBAAwB,EAAE,CAAC,GAAG,EAAE,GAAG,CAAC;SACrC,CAAA;QACD,MAAM,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC,OAAO,CAAC,CAAC,GAAG,EAAE,GAAG,EAAE,GAAG,CAAC,CAAC,CAAA;IAC9D,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA;AAEF,QAAQ,CAAC,sBAAsB,EAAE,GAAG,EAAE;IACpC,EAAE,CAAC,mDAAmD,EAAE,KAAK,IAAI,EAAE;QACjE,MAAM,EAAE,GAAG;YACT,QAAQ,EAAE;gBACR,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC;oBACtB,IAAI,EAAE;wBACJ,SAAS,EAAE,eAAe;wBAC1B,KAAK,EAAE;4BACL,IAAI,EAAE,oBAAoB;4BAC1B,wBAAwB,EAAE,WAAW;4BACrC,oBAAoB,EAAE,OAAO;4BAC7B,SAAS,EAAE,0BAA0B;yBACtC;qBACF;iBACF,CAAC;aACH;YACD,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,IAAI,EAAE,CAAC;oBACpB;wBACE,EAAE,EAAE,WAAW;wBACf,SAAS,EAAE,UAAU,CAAC,SAAS;wBAC/B,QAAQ,EAAE,eAAe;wBACzB,KAAK,EAAE,GAAG;wBACV,MAAM,EAAE,GAAG;qBACZ;oBACD;wBACE,EAAE,EAAE,OAAO;wBACX,SAAS,EAAE,OAAO,CAAC,SAAS;wBAC5B,QAAQ,EAAE,WAAW;wBACrB,KAAK,EAAE,EAAE;wBACT,MAAM,EAAE,EAAE;qBACX;iBACF;aACF;SACF,CAAA;QACD,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,IAAI,CAAC,CAAA;QACtC,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACvD,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,OAAO,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,UAAU,CAAC,SAAS,CAAC,CAAA;QACxD,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,SAAS,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACnD,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACrC,CAAC,CAAC,CAAA;IAEF,EAAE,CAAC,yCAAyC,EAAE,KAAK,IAAI,EAAE;QACvD,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,EAAE,SAAS,EAAE,KAAK,IAAI,EAAE,CAAC,CAAC,EAAE,IAAI,EAAE,EAAE,EAAE,CAAC,EAAE,EAAE,CAAA;QAClE,MAAM,CAAC,GAAG,MAAM,YAAY,CAAC,EAAE,EAAE,QAAQ,CAAC,CAAA;QAC1C,MAAM,CAAC,CAAC,CAAC,KAAK,CAAC,OAAO,CAAC,CAAC,QAAQ,EAAE,CAAA;QAClC,MAAM,CAAC,CAAC,CAAC,OAAO,CAAC,IAAI,CAAC,CAAC,QAAQ,EAAE,CAAA;QACjC,MAAM,CAAC,CAAC,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;IACtC,CAAC,CAAC,CAAA;AACJ,CAAC,CAAC,CAAA"}

package/dist/api/handlers.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAyRD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CA0tUzD"}
+{"version":3,"file":"handlers.d.ts","sourceRoot":"","sources":["../../src/api/handlers.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,SAAS,EAAE,MAAM,aAAa,CAAA;AA+/B5C,iFAAiF;AACjF,wBAAgB,wBAAwB,IAAI,IAAI,CAE/C;AA8JD,wBAAgB,iBAAiB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAS9E;AAyRD,wBAAgB,iBAAiB,CAAC,MAAM,EAAE,SAAS,GAAG,IAAI,CAwxUzD"}

package/dist/api/handlers.js

@@ -8897,6 +8897,58 @@ export function registerCMSRoutes(router) {
             return internalError(err);
         }
     });
+    // Public brand: resolved logos + favicon for the public frontend. No auth —
+    // brand assets are public site data. Only the PUBLIC brand view + favicon are
+    // exposed here (never the admin-only brand) so a white-labeled admin doesn't
+    // leak through the public API.
+    router.get('/public/brand', async (request) => {
+        try {
+            const { resolveBrand } = await import('../appearance/index.js');
+            const resolved = await resolveBrand(db(), null);
+            return cachedRead(request, {
+                cache: getActuateConfig()?.cache,
+                tags: [ACTUATE_TAG_ROOT, actuateTag('global', 'settings')],
+                wrap: jsonWithCache,
+                build: async () => ({
+                    data: { public: resolved.public, favicon: resolved.favicon },
+                }),
+            });
+        }
+        catch (err) {
+            return internalError(err, 'public/brand GET');
+        }
+    });
+    // Authenticated appearance read: stored appearance + brand settings plus the
+    // fully resolved admin/public/favicon views (with asset URLs) so the admin
+    // Appearance tab can render live previews. View-only auth — writes go through
+    // PUT /globals/settings (ADMIN_ROLES), so editors can view but not save.
+    router.get('/appearance', async (request) => {
+        try {
+            const auth = await requireAuth(request);
+            if (auth.error)
+                return auth.error;
+            const { getAppearanceSettings, getBrandSettings, resolveBrand } = await import('../appearance/index.js');
+            const [appearance, brand, resolved] = await Promise.all([
+                getAppearanceSettings(db()),
+                getBrandSettings(db()),
+                resolveBrand(db(), null),
+            ]);
+            return json({
+                data: {
+                    appearance,
+                    brand,
+                    resolved: { admin: resolved.admin, public: resolved.public, favicon: resolved.favicon },
+                    // Direct per-asset URLs so the editor shows each field's actual
+                    // asset (not the resolved fallback chain).
+                    assets: resolved.assets,
+                    siteTitle: resolved.siteTitle,
+                },
+            });
+        }
+        catch (err) {
+            return internalError(err, 'appearance GET');
+        }
+    });
     router.get('/globals/:slug', async (request, params) => {
         try {
             const auth = await requireAuth(request);
@@ -8946,8 +8998,17 @@ export function registerCMSRoutes(router) {
             // Audit settings changes (title/tagline/URL/locale/timezone/etc.) with a
             // per-key before/after diff so the audit trail records what changed and
             // who changed it. Scalar values only — we never log nested secret blobs.
+            // Nested config blobs (`appearance`, `brand`) are logged as a changed
+            // key (not their contents) so appearance/branding edits are auditable
+            // without dumping asset IDs or theme objects into the log.
             try {
                 const changes = diffScalarKeys(previous ?? {}, body);
+                const prev = (previous ?? {});
+                for (const key of ['appearance', 'brand']) {
+                    if (key in body && JSON.stringify(prev[key]) !== JSON.stringify(body[key])) {
+                        changes.push({ key, from: '[changed]', to: '[changed]' });
+                    }
+                }
                 if (changes.length > 0) {
                     void logEvent({
                         event: 'settings_changed',