@arcblock/did-connect-service 4.1.41 → 4.1.42

package/dist/logo-paths.d.ts

@@ -2,6 +2,9 @@
  * The logo URL contract shared by BrandingHandler (which serves these paths)
  * and the admin console (which renders them).
  *
+ * It is also the home of {@link BRANDING_PUBLIC_PATHS}, the one list of public
+ * branding paths that both routing and host-side cache purges read.
+ *
  * Dependency-free on purpose: the admin page modules that import it are loaded
  * by `build-assets.mjs` in plain Node, so nothing here may drag in a handler,
  * a store, or a Workers-only binding.
@@ -34,6 +37,26 @@ export declare const LOGO_PREVIEW_BASE = "/.well-known/service/blocklet/logo-pre
  * is a 404, never a fall-through to some other type's bytes).
  */
 export declare function previewLogoType(pathname: string): string | null;
+/**
+ * The public OG card. Branding-derived (name, description, logo, og-image
+ * background) and publicly cacheable, so it belongs to the purge set; served by
+ * the OG renderer rather than as a stored logo, hence not a logo route.
+ */
+export declare const OG_PNG_PATH = "/.well-known/service/blocklet/og.png";
+/**
+ * Every public, cacheable path whose bytes derive from an instance's branding —
+ * the single list a host purges after branding changes (a release, or an admin
+ * save via the `purgeBrandingPaths` hook) and the list `fetchPublic` routes.
+ *
+ * Deliberately excluded:
+ * - `logo-preview/*` ({@link LOGO_PREVIEW_BASE}) — `no-store`, cached by nothing,
+ *   so there is nothing to purge; it is the admin console's cache-proof view.
+ * - `theme/styles.css`, `theme/init.js` — derived from `app:theme`, not branding,
+ *   and served with a 60s max-age.
+ */
+export declare const BRANDING_PUBLIC_PATHS: readonly string[];
+/** The logo type a canonical public logo path serves, or null when it is not one. */
+export declare function publicLogoType(pathname: string): string | null;
 /** Cache policy for the canonical logo paths — short, so branding changes reflect quickly. */
 export declare const LOGO_CACHE_CONTROL = "public, max-age=300";
 /** Cache policy for the preview alias — stored by nothing, anywhere. */

package/dist/logo-paths.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"logo-paths.d.ts","sourceRoot":"","sources":["../src/logo-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AA2B9E;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI/D;AAED,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,wBAAwB,CAAC"}
+{"version":3,"file":"logo-paths.d.ts","sourceRoot":"","sources":["../src/logo-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,eAAO,MAAM,iBAAiB,+CAA+C,CAAC;AA2B9E;;;;GAIG;AACH,wBAAgB,eAAe,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAI/D;AA8BD;;;;GAIG;AACH,eAAO,MAAM,WAAW,yCAAyC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,eAAO,MAAM,qBAAqB,EAAE,SAAS,MAAM,EAGjD,CAAC;AAEH,qFAAqF;AACrF,wBAAgB,cAAc,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,GAAG,IAAI,CAE9D;AAED,8FAA8F;AAC9F,eAAO,MAAM,kBAAkB,wBAAwB,CAAC;AAExD,wEAAwE;AACxE,eAAO,MAAM,0BAA0B,wBAAwB,CAAC"}

package/dist/logo-paths.js

@@ -2,6 +2,9 @@
  * The logo URL contract shared by BrandingHandler (which serves these paths)
  * and the admin console (which renders them).
  *
+ * It is also the home of {@link BRANDING_PUBLIC_PATHS}, the one list of public
+ * branding paths that both routing and host-side cache purges read.
+ *
  * Dependency-free on purpose: the admin page modules that import it are loaded
  * by `build-assets.mjs` in plain Node, so nothing here may drag in a handler,
  * a store, or a Workers-only binding.
@@ -30,8 +33,8 @@
 export const LOGO_PREVIEW_BASE = "/.well-known/service/blocklet/logo-preview";
 /**
  * Matched positionally rather than as a full prefix, so a prefixed mount still
- * resolves — the same tolerance the `endsWith` checks in
- * `BrandingHandler.resolveLogoType` already have.
+ * resolves the type. (`fetchPublic` itself only routes the full
+ * {@link LOGO_PREVIEW_BASE} prefix.)
  */
 const LOGO_PREVIEW_SEGMENT = "/logo-preview/";
 /**
@@ -62,6 +65,58 @@ export function previewLogoType(pathname) {
         return null;
     return PREVIEW_LOGO_TYPES.get(pathname.slice(at + LOGO_PREVIEW_SEGMENT.length)) ?? null;
 }
+/**
+ * The canonical public logo routes, keyed by exact pathname → logo type.
+ *
+ * This table IS the router: `BrandingHandler.fetchPublic` matches a public logo
+ * request only by looking its pathname up here, and `resolveLogoType` reads the
+ * type from here. {@link BRANDING_PUBLIC_PATHS} is projected from the same table,
+ * so a logo type added here is served AND listed for purge in one edit — the two
+ * can never drift apart (EPIC arc#7073 red line 5; the hand-maintained-twice
+ * failure mode is the one `isMutableSiteArtifactPath` in arc records, where
+ * arc#3336's shard path was silently missed).
+ *
+ * Exact pathnames, never prefixes: a prefix would let the purge list and the
+ * router disagree about what "a logo path" is.
+ */
+const PUBLIC_LOGO_ROUTES = new Map([
+    ["/favicon.ico", "favicon"],
+    ["/.well-known/service/blocklet/logo", "square"],
+    ["/.well-known/service/blocklet/logo-dark", "squareDark"],
+    ["/.well-known/service/blocklet/logo-rect", "rect"],
+    ["/.well-known/service/blocklet/logo-rect-dark", "rectDark"],
+    ["/.well-known/service/blocklet/logo-favicon", "favicon"],
+    // alias added for blocklet-server parity
+    ["/.well-known/service/blocklet/favicon", "favicon"],
+    ["/.well-known/service/blocklet/splash/portrait", "splashPortrait"],
+    ["/.well-known/service/blocklet/splash/landscape", "splashLandscape"],
+    ["/.well-known/service/blocklet/og-image", "ogImage"],
+]);
+/**
+ * The public OG card. Branding-derived (name, description, logo, og-image
+ * background) and publicly cacheable, so it belongs to the purge set; served by
+ * the OG renderer rather than as a stored logo, hence not a logo route.
+ */
+export const OG_PNG_PATH = "/.well-known/service/blocklet/og.png";
+/**
+ * Every public, cacheable path whose bytes derive from an instance's branding —
+ * the single list a host purges after branding changes (a release, or an admin
+ * save via the `purgeBrandingPaths` hook) and the list `fetchPublic` routes.
+ *
+ * Deliberately excluded:
+ * - `logo-preview/*` ({@link LOGO_PREVIEW_BASE}) — `no-store`, cached by nothing,
+ *   so there is nothing to purge; it is the admin console's cache-proof view.
+ * - `theme/styles.css`, `theme/init.js` — derived from `app:theme`, not branding,
+ *   and served with a 60s max-age.
+ */
+export const BRANDING_PUBLIC_PATHS = Object.freeze([
+    ...PUBLIC_LOGO_ROUTES.keys(),
+    OG_PNG_PATH,
+]);
+/** The logo type a canonical public logo path serves, or null when it is not one. */
+export function publicLogoType(pathname) {
+    return PUBLIC_LOGO_ROUTES.get(pathname) ?? null;
+}
 /** Cache policy for the canonical logo paths — short, so branding changes reflect quickly. */
 export const LOGO_CACHE_CONTROL = "public, max-age=300";
 /** Cache policy for the preview alias — stored by nothing, anywhere. */

package/dist/logo-paths.js.map

@@ -1 +1 @@
-{"version":3,"file":"logo-paths.js","sourceRoot":"","sources":["../src/logo-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAE9E;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAiB;IACjD,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,aAAa,EAAE,YAAY,CAAC;IAC7B,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,WAAW,EAAE,UAAU,CAAC;IACzB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,UAAU,EAAE,SAAS,CAAC;IACvB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;IACrC,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;CACxC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClD,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1F,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAExD,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC"}
+{"version":3,"file":"logo-paths.js","sourceRoot":"","sources":["../src/logo-paths.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;GAUG;AAEH;;;;;;;;;;;;;;;;;;;;GAoBG;AACH,MAAM,CAAC,MAAM,iBAAiB,GAAG,4CAA4C,CAAC;AAE9E;;;;GAIG;AACH,MAAM,oBAAoB,GAAG,gBAAgB,CAAC;AAE9C;;;;;;GAMG;AACH,MAAM,kBAAkB,GAAG,IAAI,GAAG,CAAiB;IACjD,CAAC,QAAQ,EAAE,QAAQ,CAAC;IACpB,CAAC,aAAa,EAAE,YAAY,CAAC;IAC7B,CAAC,MAAM,EAAE,MAAM,CAAC;IAChB,CAAC,WAAW,EAAE,UAAU,CAAC;IACzB,CAAC,SAAS,EAAE,SAAS,CAAC;IACtB,CAAC,UAAU,EAAE,SAAS,CAAC;IACvB,CAAC,iBAAiB,EAAE,gBAAgB,CAAC;IACrC,CAAC,kBAAkB,EAAE,iBAAiB,CAAC;CACxC,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,UAAU,eAAe,CAAC,QAAgB;IAC9C,MAAM,EAAE,GAAG,QAAQ,CAAC,OAAO,CAAC,oBAAoB,CAAC,CAAC;IAClD,IAAI,EAAE,KAAK,CAAC,CAAC;QAAE,OAAO,IAAI,CAAC;IAC3B,OAAO,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,GAAG,oBAAoB,CAAC,MAAM,CAAC,CAAC,IAAI,IAAI,CAAC;AAC1F,CAAC;AAED;;;;;;;;;;;;;GAaG;AACH,MAAM,kBAAkB,GAAgC,IAAI,GAAG,CAAiB;IAC9E,CAAC,cAAc,EAAE,SAAS,CAAC;IAC3B,CAAC,oCAAoC,EAAE,QAAQ,CAAC;IAChD,CAAC,yCAAyC,EAAE,YAAY,CAAC;IACzD,CAAC,yCAAyC,EAAE,MAAM,CAAC;IACnD,CAAC,8CAA8C,EAAE,UAAU,CAAC;IAC5D,CAAC,4CAA4C,EAAE,SAAS,CAAC;IACzD,yCAAyC;IACzC,CAAC,uCAAuC,EAAE,SAAS,CAAC;IACpD,CAAC,+CAA+C,EAAE,gBAAgB,CAAC;IACnE,CAAC,gDAAgD,EAAE,iBAAiB,CAAC;IACrE,CAAC,wCAAwC,EAAE,SAAS,CAAC;CACtD,CAAC,CAAC;AAEH;;;;GAIG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,sCAAsC,CAAC;AAElE;;;;;;;;;;GAUG;AACH,MAAM,CAAC,MAAM,qBAAqB,GAAsB,MAAM,CAAC,MAAM,CAAC;IACpE,GAAG,kBAAkB,CAAC,IAAI,EAAE;IAC5B,WAAW;CACZ,CAAC,CAAC;AAEH,qFAAqF;AACrF,MAAM,UAAU,cAAc,CAAC,QAAgB;IAC7C,OAAO,kBAAkB,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,IAAI,CAAC;AAClD,CAAC;AAED,8FAA8F;AAC9F,MAAM,CAAC,MAAM,kBAAkB,GAAG,qBAAqB,CAAC;AAExD,wEAAwE;AACxE,MAAM,CAAC,MAAM,0BAA0B,GAAG,qBAAqB,CAAC"}

package/dist/package-branding.d.ts

@@ -1,12 +1,107 @@
+/**
+ * A partial MUI palette for one mode, as projected by the host from the package's
+ * palette preset (arc#7078). Every field is optional; whatever is absent is completed
+ * from the built-in defaults by `formatThemeForOutput`'s deep merge.
+ */
+export interface PackagePalette {
+    primary?: {
+        main?: string;
+        contrastText?: string;
+    };
+    background?: {
+        default?: string;
+        paper?: string;
+    };
+    text?: {
+        primary?: string;
+        secondary?: string;
+    };
+    divider?: string;
+    success?: {
+        main?: string;
+    };
+    error?: {
+        main?: string;
+    };
+    warning?: {
+        main?: string;
+    };
+}
+export interface PackageTheme {
+    light?: PackagePalette;
+    dark?: PackagePalette;
+}
+/**
+ * Host-supplied package identity — the `x-arc-pkg-branding` header on Workers
+ * (base64url, no padding, of UTF-8 JSON), or the same object in-process on the
+ * embedded (Node) host. connect-service never reads the package itself
+ * (ArcBlock/arc#7073 red line 1); the host projects it into exactly this shape.
+ *
+ * Wire shape (pinned by test/package-branding-wire.test.ts — arc encodes to it):
+ *
+ * ```jsonc
+ * {
+ *   "name": "Market Pulse",                  // ≤ 256 UTF-8 bytes
+ *   "description": "Real-time dashboard.",   // ≤ 2048 UTF-8 bytes
+ *   "logo": { "v": "3f9a0c1d2e4b5a67" },     // exactly 16 chars [A-Za-z0-9_-]: the first 16
+ *                                            //   chars of a content hash of the logo bytes
+ *                                            //   (red line 4). No path, no slot list.
+ *   "theme": {
+ *     "light": {                             // partial MUI palette; each key optional
+ *       "primary":    { "main": "#8a6208", "contrastText": "#fef7e5" },
+ *       "background": { "default": "#f5f3ef", "paper": "#fefdfb" },
+ *       "text":       { "primary": "#2c2418", "secondary": "#736756" },
+ *       "divider":    "#e0dcd4",
+ *       "success":    { "main": "#4d8a30" },
+ *       "error":      { "main": "#c53030" },
+ *       "warning":    { "main": "#a16207" }
+ *     },
+ *     "dark": { ...same keys... }
+ *   },
+ *   "passportColor": "#8a6208"               // #rrggbb only (the OG gradient parses 6-hex)
+ * }
+ * ```
+ *
+ * Colors: `#rgb`/`#rgba`/`#rrggbb`/`#rrggbbaa`, or `rgb()`/`rgba()`/`hsl()`/`hsla()` with
+ * 3–4 comma-separated numeric arguments (`12`, `12.5`, `.5`, optional `%`; literal ASCII
+ * spaces only) — what MUI's `decomposeColor` accepts, and a subset of the character
+ * whitelist `serveThemeStyles` applies — at most 64 UTF-8 bytes. In every group whose
+ * `main` the package sets (primary / success / error / warning), the default
+ * `light` / `dark` / `contrastText` are dropped so MUI derives them from that `main`
+ * (`contrastText` is kept when the package sends one).
+ *
+ * Trust boundary: this is an INTERNAL header. connect-service trusts it as the package's
+ * own declaration, so it must only be set by a host that first deletes any
+ * client-supplied `x-arc-pkg-branding` from the incoming request (arc-worker does:
+ * `handle-fetch.ts` deletes then re-injects it). A host that forwards client headers
+ * unfiltered must not use `parsePackageBrandingHeader` — a client could otherwise set
+ * any app's name, palette and passportColor on its own responses and on shared caches.
+ *
+ * Degradation: `name` / `description` keep their all-or-nothing rule (a wrong type or an
+ * over-limit value, or a dangerous / accessor top-level key, discards the whole object).
+ * The newer parts degrade individually: an invalid `logo` or `passportColor` is dropped on
+ * its own, and inside `theme` each invalid color is dropped on its own (a group or mode
+ * left empty disappears); unknown keys are ignored. None of them ever takes `name` /
+ * `description` down.
+ */
 export interface PackageBranding {
     name?: string;
     description?: string;
+    logo?: {
+        v: string;
+    };
+    theme?: PackageTheme;
+    passportColor?: string;
 }
 export interface AppInfo extends PackageBranding {
     name: string;
     icon?: string;
 }
 export declare function sanitizePackageBranding(value: unknown): PackageBranding | undefined;
+/**
+ * Decode `x-arc-pkg-branding`. Call ONLY with a value the host itself injected after
+ * deleting any client-supplied copy — see the trust boundary on {@link PackageBranding}.
+ */
 export declare function parsePackageBrandingHeader(value: string | null | undefined): PackageBranding | undefined;
 export declare function packageBrandingCacheToken(value: unknown): string;
 //# sourceMappingURL=package-branding.d.ts.map

package/dist/package-branding.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"package-branding.d.ts","sourceRoot":"","sources":["../src/package-branding.ts"],"names":[],"mappings":"AAAA,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;CACtB;AAED,MAAM,WAAW,OAAQ,SAAQ,eAAe;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AASD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CAoBnF;AAgBD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAUxG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAQhE"}
+{"version":3,"file":"package-branding.d.ts","sourceRoot":"","sources":["../src/package-branding.ts"],"names":[],"mappings":"AAEA;;;;GAIG;AACH,MAAM,WAAW,cAAc;IAC7B,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAC;QAAC,YAAY,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACnD,UAAU,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,KAAK,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAClD,IAAI,CAAC,EAAE;QAAE,OAAO,CAAC,EAAE,MAAM,CAAC;QAAC,SAAS,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAChD,OAAO,CAAC,EAAE,MAAM,CAAC;IACjB,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC5B,KAAK,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IAC1B,OAAO,CAAC,EAAE;QAAE,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;CAC7B;AAED,MAAM,WAAW,YAAY;IAC3B,KAAK,CAAC,EAAE,cAAc,CAAC;IACvB,IAAI,CAAC,EAAE,cAAc,CAAC;CACvB;AAED;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAoDG;AACH,MAAM,WAAW,eAAe;IAC9B,IAAI,CAAC,EAAE,MAAM,CAAC;IACd,WAAW,CAAC,EAAE,MAAM,CAAC;IACrB,IAAI,CAAC,EAAE;QAAE,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC;IACrB,KAAK,CAAC,EAAE,YAAY,CAAC;IACrB,aAAa,CAAC,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,OAAQ,SAAQ,eAAe;IAC9C,IAAI,EAAE,MAAM,CAAC;IACb,IAAI,CAAC,EAAE,MAAM,CAAC;CACf;AASD,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,eAAe,GAAG,SAAS,CA2BnF;AAmFD;;;GAGG;AACH,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAUxG;AAED,wBAAgB,yBAAyB,CAAC,KAAK,EAAE,OAAO,GAAG,MAAM,CAWhE"}

package/dist/package-branding.js

@@ -1,3 +1,4 @@
+import { isPackageThemeColor } from "./theme-utils.js";
 const HEADER_MAX_BYTES = 4096;
 const JSON_MAX_BYTES = 3072;
 const NAME_MAX_BYTES = 256;
@@ -22,12 +23,85 @@ export function sanitizePackageBranding(value) {
                 return undefined;
             result[key] = descriptor.value;
         }
+        const logo = sanitizeLogo(dataValue(descriptors.logo));
+        if (logo)
+            result.logo = logo;
+        const theme = sanitizeTheme(dataValue(descriptors.theme));
+        if (theme)
+            result.theme = theme;
+        const passportColor = dataValue(descriptors.passportColor);
+        if (typeof passportColor === "string" && PASSPORT_COLOR.test(passportColor))
+            result.passportColor = passportColor;
         return result;
     }
     catch {
         return undefined;
     }
 }
+// ─── The newer parts: each degrades on its own ────────────────────────────
+const LOGO_VERSION = /^[A-Za-z0-9_-]{16}$/;
+const PASSPORT_COLOR = /^#[0-9a-fA-F]{6}$/;
+/** The palette keys the wire carries, in canonical order. `null` = a bare color. */
+const PALETTE_SCHEMA = [
+    ["primary", ["main", "contrastText"]],
+    ["background", ["default", "paper"]],
+    ["text", ["primary", "secondary"]],
+    ["divider", null],
+    ["success", ["main"]],
+    ["error", ["main"]],
+    ["warning", ["main"]],
+];
+function isPlainObject(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+/** A descriptor's value only when it is a data property (never runs a getter). */
+function dataValue(descriptor) {
+    return descriptor && "value" in descriptor ? descriptor.value : undefined;
+}
+/** An own data property of a plain object; anything else (accessor, throw) → undefined. */
+function ownData(object, key) {
+    if (!isPlainObject(object))
+        return undefined;
+    try {
+        return dataValue(Object.getOwnPropertyDescriptor(object, key));
+    }
+    catch {
+        return undefined;
+    }
+}
+function sanitizeLogo(value) {
+    const v = ownData(value, "v");
+    return typeof v === "string" && LOGO_VERSION.test(v) ? { v } : undefined;
+}
+function sanitizePalette(value) {
+    const palette = {};
+    for (const [group, keys] of PALETTE_SCHEMA) {
+        const raw = ownData(value, group);
+        if (keys === null) {
+            if (isPackageThemeColor(raw))
+                palette[group] = raw;
+            continue;
+        }
+        const colors = {};
+        for (const key of keys) {
+            const color = ownData(raw, key);
+            if (isPackageThemeColor(color))
+                colors[key] = color;
+        }
+        if (Object.keys(colors).length > 0)
+            palette[group] = colors;
+    }
+    return Object.keys(palette).length > 0 ? palette : undefined;
+}
+function sanitizeTheme(value) {
+    const theme = {};
+    for (const mode of ["light", "dark"]) {
+        const palette = sanitizePalette(ownData(value, mode));
+        if (palette)
+            theme[mode] = palette;
+    }
+    return theme.light || theme.dark ? theme : undefined;
+}
 function decodeBase64Url(value) {
     if (!value || value.length > HEADER_MAX_BYTES || !/^[A-Za-z0-9_-]+$/.test(value))
         return undefined;
@@ -44,6 +118,10 @@ function decodeBase64Url(value) {
         return undefined;
     }
 }
+/**
+ * Decode `x-arc-pkg-branding`. Call ONLY with a value the host itself injected after
+ * deleting any client-supplied copy — see the trust boundary on {@link PackageBranding}.
+ */
 export function parsePackageBrandingHeader(value) {
     if (value == null)
         return undefined;
@@ -62,10 +140,13 @@ export function packageBrandingCacheToken(value) {
     const branding = sanitizePackageBranding(value);
     if (!branding)
         return "-1:";
-    const canonical = JSON.stringify({
-        ...(Object.hasOwn(branding, "name") ? { name: branding.name } : {}),
-        ...(Object.hasOwn(branding, "description") ? { description: branding.description } : {}),
-    });
+    // `sanitizePackageBranding` rebuilds every part in a fixed key order, so its JSON is
+    // canonical. It covers name/description AND logo.v / theme / passportColor: this
+    // token keys the CF `getOrBuildHandler` cache, the embedded `brandedHandlers` map
+    // and (through those handlers) `BrandingHandler._themeCache` — a part missing here
+    // would let two tenants share a handler and serve each other's logo or palette.
+    // Branding with only name/description yields the same bytes as before S5.
+    const canonical = JSON.stringify(branding);
     return `${encoder.encode(canonical).byteLength}:${canonical}`;
 }
 // `resolveAppInfo` moved to app-identity.ts (did#247) — it is now a view over

package/dist/package-branding.js.map

@@ -1 +1 @@
-{"version":3,"file":"package-branding.js","sourceRoot":"","sources":["../src/package-branding.ts"],"names":[],"mappings":"AAUA,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAC1E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU;gBAAE,OAAO,SAAS,CAAC;QAC9F,CAAC;QAED,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAU,EAAE,CAAC;YACvG,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC1B,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,KAAK;gBAAE,OAAO,SAAS,CAAC;YAClH,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACjC,CAAC;QACD,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,UAAU,GAAG,cAAc;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5F,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,0BAA0B,CAAC,KAAgC;IACzE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC;QAC/B,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,EAAE,IAAI,EAAE,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;QACnE,GAAG,CAAC,MAAM,CAAC,MAAM,CAAC,QAAQ,EAAE,aAAa,CAAC,CAAC,CAAC,CAAC,EAAE,WAAW,EAAE,QAAQ,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KACzF,CAAC,CAAC;IACH,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,uEAAuE"}
+{"version":3,"file":"package-branding.js","sourceRoot":"","sources":["../src/package-branding.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AAwFvD,MAAM,gBAAgB,GAAG,IAAI,CAAC;AAC9B,MAAM,cAAc,GAAG,IAAI,CAAC;AAC5B,MAAM,cAAc,GAAG,GAAG,CAAC;AAC3B,MAAM,qBAAqB,GAAG,IAAI,CAAC;AACnC,MAAM,cAAc,GAAG,IAAI,GAAG,CAAC,CAAC,WAAW,EAAE,aAAa,EAAE,WAAW,CAAC,CAAC,CAAC;AAC1E,MAAM,OAAO,GAAG,IAAI,WAAW,EAAE,CAAC;AAElC,MAAM,UAAU,uBAAuB,CAAC,KAAc;IACpD,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IAE1F,IAAI,CAAC;QACH,MAAM,WAAW,GAAG,MAAM,CAAC,yBAAyB,CAAC,KAAK,CAAC,CAAC;QAC5D,KAAK,MAAM,CAAC,GAAG,EAAE,UAAU,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,WAAW,CAAC,EAAE,CAAC;YAC5D,IAAI,cAAc,CAAC,GAAG,CAAC,GAAG,CAAC,IAAI,KAAK,IAAI,UAAU,IAAI,KAAK,IAAI,UAAU;gBAAE,OAAO,SAAS,CAAC;QAC9F,CAAC;QAED,MAAM,MAAM,GAAoB,EAAE,CAAC;QACnC,KAAK,MAAM,CAAC,GAAG,EAAE,KAAK,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,cAAc,CAAC,EAAE,CAAC,aAAa,EAAE,qBAAqB,CAAC,CAAU,EAAE,CAAC;YACvG,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC;YACpC,IAAI,CAAC,UAAU;gBAAE,SAAS;YAC1B,IAAI,OAAO,UAAU,CAAC,KAAK,KAAK,QAAQ,IAAI,OAAO,CAAC,MAAM,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,UAAU,GAAG,KAAK;gBAAE,OAAO,SAAS,CAAC;YAClH,MAAM,CAAC,GAAG,CAAC,GAAG,UAAU,CAAC,KAAK,CAAC;QACjC,CAAC;QAED,MAAM,IAAI,GAAG,YAAY,CAAC,SAAS,CAAC,WAAW,CAAC,IAAI,CAAC,CAAC,CAAC;QACvD,IAAI,IAAI;YAAE,MAAM,CAAC,IAAI,GAAG,IAAI,CAAC;QAC7B,MAAM,KAAK,GAAG,aAAa,CAAC,SAAS,CAAC,WAAW,CAAC,KAAK,CAAC,CAAC,CAAC;QAC1D,IAAI,KAAK;YAAE,MAAM,CAAC,KAAK,GAAG,KAAK,CAAC;QAChC,MAAM,aAAa,GAAG,SAAS,CAAC,WAAW,CAAC,aAAa,CAAC,CAAC;QAC3D,IAAI,OAAO,aAAa,KAAK,QAAQ,IAAI,cAAc,CAAC,IAAI,CAAC,aAAa,CAAC;YAAE,MAAM,CAAC,aAAa,GAAG,aAAa,CAAC;QAClH,OAAO,MAAM,CAAC;IAChB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,6EAA6E;AAE7E,MAAM,YAAY,GAAG,qBAAqB,CAAC;AAC3C,MAAM,cAAc,GAAG,mBAAmB,CAAC;AAE3C,oFAAoF;AACpF,MAAM,cAAc,GAAG;IACrB,CAAC,SAAS,EAAE,CAAC,MAAM,EAAE,cAAc,CAAC,CAAC;IACrC,CAAC,YAAY,EAAE,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC;IACpC,CAAC,MAAM,EAAE,CAAC,SAAS,EAAE,WAAW,CAAC,CAAC;IAClC,CAAC,SAAS,EAAE,IAAI,CAAC;IACjB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;IACrB,CAAC,OAAO,EAAE,CAAC,MAAM,CAAC,CAAC;IACnB,CAAC,SAAS,EAAE,CAAC,MAAM,CAAC,CAAC;CACb,CAAC;AAEX,SAAS,aAAa,CAAC,KAAc;IACnC,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAC;AAC9E,CAAC;AAED,kFAAkF;AAClF,SAAS,SAAS,CAAC,UAA0C;IAC3D,OAAO,UAAU,IAAI,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AAC5E,CAAC;AAED,2FAA2F;AAC3F,SAAS,OAAO,CAAC,MAAe,EAAE,GAAW;IAC3C,IAAI,CAAC,aAAa,CAAC,MAAM,CAAC;QAAE,OAAO,SAAS,CAAC;IAC7C,IAAI,CAAC;QACH,OAAO,SAAS,CAAC,MAAM,CAAC,wBAAwB,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC;IACjE,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,SAAS,YAAY,CAAC,KAAc;IAClC,MAAM,CAAC,GAAG,OAAO,CAAC,KAAK,EAAE,GAAG,CAAC,CAAC;IAC9B,OAAO,OAAO,CAAC,KAAK,QAAQ,IAAI,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAC,SAAS,CAAC;AAC3E,CAAC;AAED,SAAS,eAAe,CAAC,KAAc;IACrC,MAAM,OAAO,GAA4B,EAAE,CAAC;IAC5C,KAAK,MAAM,CAAC,KAAK,EAAE,IAAI,CAAC,IAAI,cAAc,EAAE,CAAC;QAC3C,MAAM,GAAG,GAAG,OAAO,CAAC,KAAK,EAAE,KAAK,CAAC,CAAC;QAClC,IAAI,IAAI,KAAK,IAAI,EAAE,CAAC;YAClB,IAAI,mBAAmB,CAAC,GAAG,CAAC;gBAAE,OAAO,CAAC,KAAK,CAAC,GAAG,GAAG,CAAC;YACnD,SAAS;QACX,CAAC;QACD,MAAM,MAAM,GAA2B,EAAE,CAAC;QAC1C,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,KAAK,GAAG,OAAO,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;YAChC,IAAI,mBAAmB,CAAC,KAAK,CAAC;gBAAE,MAAM,CAAC,GAAG,CAAC,GAAG,KAAK,CAAC;QACtD,CAAC;QACD,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC,MAAM,GAAG,CAAC;YAAE,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC;IAC9D,CAAC;IACD,OAAO,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAE,OAA0B,CAAC,CAAC,CAAC,SAAS,CAAC;AACnF,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,MAAM,KAAK,GAAiB,EAAE,CAAC;IAC/B,KAAK,MAAM,IAAI,IAAI,CAAC,OAAO,EAAE,MAAM,CAAU,EAAE,CAAC;QAC9C,MAAM,OAAO,GAAG,eAAe,CAAC,OAAO,CAAC,KAAK,EAAE,IAAI,CAAC,CAAC,CAAC;QACtD,IAAI,OAAO;YAAE,KAAK,CAAC,IAAI,CAAC,GAAG,OAAO,CAAC;IACrC,CAAC;IACD,OAAO,KAAK,CAAC,KAAK,IAAI,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;AACvD,CAAC;AAED,SAAS,eAAe,CAAC,KAAa;IACpC,IAAI,CAAC,KAAK,IAAI,KAAK,CAAC,MAAM,GAAG,gBAAgB,IAAI,CAAC,kBAAkB,CAAC,IAAI,CAAC,KAAK,CAAC;QAAE,OAAO,SAAS,CAAC;IACnG,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,KAAK,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC;QAC/D,MAAM,MAAM,GAAG,IAAI,CAAC,MAAM,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,CAAC,MAAM,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,GAAG,CAAC,CAAC,CAAC;QAC1E,MAAM,KAAK,GAAG,UAAU,CAAC,IAAI,CAAC,MAAM,EAAE,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,UAAU,CAAC,CAAC,CAAC,CAAC,CAAC;QACpE,IAAI,KAAK,CAAC,UAAU,GAAG,cAAc;YAAE,OAAO,SAAS,CAAC;QACxD,MAAM,SAAS,GAAG,IAAI,CAAC,MAAM,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,UAAU,CAAC,GAAG,EAAE,GAAG,CAAC,CAAC,OAAO,CAAC,KAAK,EAAE,EAAE,CAAC,CAAC;QAC5F,OAAO,SAAS,KAAK,KAAK,CAAC,CAAC,CAAC,KAAK,CAAC,CAAC,CAAC,SAAS,CAAC;IACjD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,0BAA0B,CAAC,KAAgC;IACzE,IAAI,KAAK,IAAI,IAAI;QAAE,OAAO,SAAS,CAAC;IACpC,MAAM,KAAK,GAAG,eAAe,CAAC,KAAK,CAAC,CAAC;IACrC,IAAI,CAAC,KAAK;QAAE,OAAO,SAAS,CAAC;IAC7B,IAAI,CAAC;QACH,MAAM,IAAI,GAAG,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;QACrE,OAAO,uBAAuB,CAAC,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC,CAAC;IACnD,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAC;IACnB,CAAC;AACH,CAAC;AAED,MAAM,UAAU,yBAAyB,CAAC,KAAc;IACtD,MAAM,QAAQ,GAAG,uBAAuB,CAAC,KAAK,CAAC,CAAC;IAChD,IAAI,CAAC,QAAQ;QAAE,OAAO,KAAK,CAAC;IAC5B,qFAAqF;IACrF,iFAAiF;IACjF,kFAAkF;IAClF,mFAAmF;IACnF,gFAAgF;IAChF,0EAA0E;IAC1E,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,QAAQ,CAAC,CAAC;IAC3C,OAAO,GAAG,OAAO,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,UAAU,IAAI,SAAS,EAAE,CAAC;AAChE,CAAC;AAED,8EAA8E;AAC9E,uEAAuE"}

package/dist/pages/admin/i18n.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../../src/pages/admin/i18n.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAkwFzF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,EACb,MAAM,SAAK,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAcD;;;;;;;GAOG;AACH,wBAAgB,MAAM,CACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CASR;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO1D"}
+{"version":3,"file":"i18n.d.ts","sourceRoot":"","sources":["../../../src/pages/admin/i18n.ts"],"names":[],"mappings":"AAAA;;GAEG;AAEH,KAAK,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC;AAkyFzF;;;;;;GAMG;AACH,wBAAgB,eAAe,CAC7B,GAAG,EAAE,QAAQ,EACb,MAAM,SAAK,GACV,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAYxB;AAcD;;;;;;;GAOG;AACH,wBAAgB,MAAM,CACpB,GAAG,EAAE,MAAM,EACX,MAAM,EAAE,MAAM,EACd,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,GAC9B,MAAM,CASR;AAED;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,MAAM,EAAE,MAAM,GAAG,MAAM,CAO1D"}

package/dist/pages/admin/i18n.js

@@ -674,6 +674,14 @@ const en = {
         subPortrait: "ArcSphere Portrait",
         subLandscape: "ArcSphere Landscape",
         subSocial: "Social Preview",
+        sourceOverridden: "Overridden",
+        sourcePackage: "Inherited from app package",
+        sourceDeployment: "Deployment setting",
+        sourceDefault: "Built-in default",
+        sourceFollows: "Uses {slot}",
+        sourceNodeOnly: "Node deployments only",
+        restorePackage: "Restore package default",
+        restoreDefault: "Restore default",
     },
     appearance: {
         title: "Appearance",
@@ -1375,6 +1383,14 @@ const zh = {
         subPortrait: "ArcSphere \u7AD6\u5C4F",
         subLandscape: "ArcSphere \u6A2A\u5C4F",
         subSocial: "\u793E\u4EA4\u9884\u89C8",
+        sourceOverridden: "已覆盖",
+        sourcePackage: "继承自应用包",
+        sourceDeployment: "部署设置",
+        sourceDefault: "内置默认",
+        sourceFollows: "沿用{slot}",
+        sourceNodeOnly: "仅 Node 部署生效",
+        restorePackage: "恢复为包默认",
+        restoreDefault: "恢复默认",
     },
     appearance: {
         title: "\u5916\u89C2",
@@ -2079,6 +2095,14 @@ const zhTW = {
         subPortrait: "ArcSphere 豎屏",
         subLandscape: "ArcSphere 橫屏",
         subSocial: "社交預覽",
+        sourceOverridden: "已覆寫",
+        sourcePackage: "繼承自應用包",
+        sourceDeployment: "部署設定",
+        sourceDefault: "內建預設",
+        sourceFollows: "沿用{slot}",
+        sourceNodeOnly: "僅 Node 部署生效",
+        restorePackage: "恢復為包預設",
+        restoreDefault: "恢復預設",
     },
     appearance: {
         title: "外觀",
@@ -2780,6 +2804,14 @@ const ja = {
         subPortrait: "ArcSphere 縦向き",
         subLandscape: "ArcSphere 横向き",
         subSocial: "ソーシャルプレビュー",
+        sourceOverridden: "上書き済み",
+        sourcePackage: "アプリパッケージから継承",
+        sourceDeployment: "デプロイ設定",
+        sourceDefault: "組み込みの既定値",
+        sourceFollows: "{slot} を使用",
+        sourceNodeOnly: "Node デプロイのみ有効",
+        restorePackage: "パッケージの既定値に戻す",
+        restoreDefault: "既定値に戻す",
     },
     appearance: {
         title: "外観",