@emotionalamo/plugin-extratheme 0.0.5

package/dist/index.js

@@ -0,0 +1,48 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var src_exports = {};
+__export(src_exports, {
+  default: () => import_server.default
+});
+module.exports = __toCommonJS(src_exports);
+__reExport(src_exports, require("./server"), module.exports);
+var import_server = __toESM(require("./server"));
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ...require("./server")
+});

package/dist/locale/en-US.json

@@ -0,0 +1,80 @@
+{
+  "ExtraTheme": "ExtraTheme",
+  "主题增强": "ExtraTheme",
+  "工作区外观": "Workspace",
+  "登录页外观": "Sign-in page",
+  "总开关": "Enable",
+  "背景": "Background",
+  "类型": "Type",
+  "纯色": "Solid",
+  "渐变": "Gradient",
+  "图片": "Image",
+  "背景颜色": "Background color",
+  "渐变预设": "Preset",
+  "自定义": "Custom",
+  "角度": "Angle",
+  "自定义色标": "Custom stops",
+  "图片 URL": "Image URL",
+  "需公网可读": "Must be public",
+  "上传": "Upload",
+  "铺法": "Fit",
+  "铺满": "Cover",
+  "适应": "Contain",
+  "拉伸": "Stretch",
+  "平铺": "Repeat",
+  "暗化遮罩": "Dim",
+  "内容区卡片": "Content cards",
+  "卡片不透明度": "Card opacity",
+  "背景模糊": "Blur",
+  "浅色描边": "Light border",
+  "风格": "Style",
+  "实色": "Solid",
+  "毛玻璃": "Frosted",
+  "不透明度": "Opacity",
+  "文字颜色": "Text color",
+  "深色": "Dark",
+  "浅色": "Light",
+  "登录卡片": "Login card",
+  "圆角": "Radius",
+  "投影": "Shadow",
+  "顶部导航栏": "Top navigation",
+  "侧边导航栏": "Side navigation",
+  "颜色由主题编辑器管理，这里只叠加透明度与模糊。": "Color is managed by the theme editor — here you only add opacity and blur.",
+  "滚动条": "Scrollbar",
+  "显示方式": "Display",
+  "始终显示": "Always show",
+  "始终隐藏": "Always hide",
+  "“始终显示”为常驻细滚动条；“始终隐藏”完全隐藏滚动条（内容仍可滚动）。": "“Always show” is a persistent slim scrollbar; “Always hide” removes the scrollbar (content still scrolls).",
+  "全局字体": "Global font",
+  "字体": "Font",
+  "自定义字体": "Custom font",
+  "字体预览": "Preview",
+  "字体来源": "Font source",
+  "系统字体": "System font",
+  "上传字体": "Upload font",
+  "上传字体文件": "Upload font file",
+  "选择字体文件": "Choose font file",
+  "字体名称": "Font name",
+  "已上传": "Uploaded",
+  "重新上传": "Replace",
+  "移除": "Remove",
+  "提示：字体需系统已安装才生效；“无衬线/系统默认”通常与本机默认字体一致，选“楷体/宋体”等可看到明显变化。": "The font must be installed on the viewer's system. “Sans / System default” usually matches the OS default — pick e.g. Kaiti / Songti to see a clear change.",
+  "提示：上传字体对所有访问者生效，无需本机安装；中文字体文件较大，建议使用 woff2 或先做子集化以加快加载。": "An uploaded font works for every viewer without a local install. CJK font files are large — prefer woff2 or subset the font to speed up loading.",
+  "上传成功": "Uploaded",
+  "上传失败": "Upload failed",
+  "已保存并应用": "Saved and applied",
+  "保存失败": "Save failed",
+  "保存并应用": "Save & apply",
+  "重置本组": "Reset",
+  "实时预览": "Live preview",
+  "提示：默认关闭，开启总开关并保存后才生效；关闭插件或关闭开关立即恢复原生外观。": "Off by default — turn on the switch and save to apply; disabling the plugin or the switch restores the native look instantly.",
+  "概览": "Overview",
+  "数据": "Data",
+  "设置": "Settings",
+  "菜单": "Menu",
+  "订单": "Orders",
+  "报表": "Reports",
+  "内容卡片": "Content card",
+  "欢迎登录": "Welcome back",
+  "登录": "Sign in"
+}

package/dist/locale/zh-CN.json

@@ -0,0 +1,80 @@
+{
+  "ExtraTheme": "主题增强",
+  "主题增强": "主题增强",
+  "工作区外观": "工作区外观",
+  "登录页外观": "登录页外观",
+  "总开关": "总开关",
+  "背景": "背景",
+  "类型": "类型",
+  "纯色": "纯色",
+  "渐变": "渐变",
+  "图片": "图片",
+  "背景颜色": "背景颜色",
+  "渐变预设": "渐变预设",
+  "自定义": "自定义",
+  "角度": "角度",
+  "自定义色标": "自定义色标",
+  "图片 URL": "图片 URL",
+  "需公网可读": "需公网可读",
+  "上传": "上传",
+  "铺法": "铺法",
+  "铺满": "铺满",
+  "适应": "适应",
+  "拉伸": "拉伸",
+  "平铺": "平铺",
+  "暗化遮罩": "暗化遮罩",
+  "内容区卡片": "内容区卡片",
+  "卡片不透明度": "卡片不透明度",
+  "背景模糊": "背景模糊",
+  "浅色描边": "浅色描边",
+  "风格": "风格",
+  "实色": "实色",
+  "毛玻璃": "毛玻璃",
+  "不透明度": "不透明度",
+  "文字颜色": "文字颜色",
+  "深色": "深色",
+  "浅色": "浅色",
+  "登录卡片": "登录卡片",
+  "圆角": "圆角",
+  "投影": "投影",
+  "顶部导航栏": "顶部导航栏",
+  "侧边导航栏": "侧边导航栏",
+  "颜色由主题编辑器管理，这里只叠加透明度与模糊。": "颜色由主题编辑器管理，这里只叠加透明度与模糊。",
+  "滚动条": "滚动条",
+  "显示方式": "显示方式",
+  "始终显示": "始终显示",
+  "始终隐藏": "始终隐藏",
+  "“始终显示”为常驻细滚动条；“始终隐藏”完全隐藏滚动条（内容仍可滚动）。": "“始终显示”为常驻细滚动条；“始终隐藏”完全隐藏滚动条（内容仍可滚动）。",
+  "全局字体": "全局字体",
+  "字体": "字体",
+  "自定义字体": "自定义字体",
+  "字体预览": "预览",
+  "字体来源": "字体来源",
+  "系统字体": "系统字体",
+  "上传字体": "上传字体",
+  "上传字体文件": "上传字体文件",
+  "选择字体文件": "选择字体文件",
+  "字体名称": "字体名称",
+  "已上传": "已上传",
+  "重新上传": "重新上传",
+  "移除": "移除",
+  "提示：字体需系统已安装才生效；“无衬线/系统默认”通常与本机默认字体一致，选“楷体/宋体”等可看到明显变化。": "提示：字体需系统已安装才生效；“无衬线/系统默认”通常与本机默认字体一致，选“楷体/宋体”等可看到明显变化。",
+  "提示：上传字体对所有访问者生效，无需本机安装；中文字体文件较大，建议使用 woff2 或先做子集化以加快加载。": "提示：上传字体对所有访问者生效，无需本机安装；中文字体文件较大，建议使用 woff2 或先做子集化以加快加载。",
+  "上传成功": "上传成功",
+  "上传失败": "上传失败",
+  "已保存并应用": "已保存并应用",
+  "保存失败": "保存失败",
+  "保存并应用": "保存并应用",
+  "重置本组": "重置本组",
+  "实时预览": "实时预览",
+  "提示：默认关闭，开启总开关并保存后才生效；关闭插件或关闭开关立即恢复原生外观。": "提示：默认关闭，开启总开关并保存后才生效；关闭插件或关闭开关立即恢复原生外观。",
+  "概览": "概览",
+  "数据": "数据",
+  "设置": "设置",
+  "菜单": "菜单",
+  "订单": "订单",
+  "报表": "报表",
+  "内容卡片": "内容卡片",
+  "欢迎登录": "欢迎登录",
+  "登录": "登录"
+}

package/dist/server/collections/extraThemeSettings.d.ts

@@ -0,0 +1,2 @@
+declare const _default: import("@nocobase/database").CollectionOptions;
+export default _default;

package/dist/server/collections/extraThemeSettings.js

@@ -0,0 +1,39 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var extraThemeSettings_exports = {};
+__export(extraThemeSettings_exports, {
+  default: () => extraThemeSettings_default
+});
+module.exports = __toCommonJS(extraThemeSettings_exports);
+var import_database = require("@nocobase/database");
+var extraThemeSettings_default = (0, import_database.defineCollection)({
+  name: "extraThemeSettings",
+  fields: [
+    { type: "string", name: "key", unique: true },
+    { type: "json", name: "config" }
+  ]
+});

package/dist/server/index.d.ts

@@ -0,0 +1,2 @@
+export * from './plugin';
+export { default } from './plugin';

package/dist/server/index.js

@@ -0,0 +1,48 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __reExport = (target, mod, secondTarget) => (__copyProps(target, mod, "default"), secondTarget && __copyProps(secondTarget, mod, "default"));
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var server_exports = {};
+__export(server_exports, {
+  default: () => import_plugin.default
+});
+module.exports = __toCommonJS(server_exports);
+__reExport(server_exports, require("./plugin"), module.exports);
+var import_plugin = __toESM(require("./plugin"));
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  ...require("./plugin")
+});

package/dist/server/plugin.d.ts

@@ -0,0 +1,6 @@
+import { Plugin } from '@nocobase/server';
+export declare class PluginExtraThemeServer extends Plugin {
+    load(): Promise<void>;
+    install(): Promise<void>;
+}
+export default PluginExtraThemeServer;

package/dist/server/plugin.js

@@ -0,0 +1,64 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __create = Object.create;
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __getProtoOf = Object.getPrototypeOf;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
+  // If the importer is in node compatibility mode or this is not an ESM
+  // file that has been converted to a CommonJS file using a Babel-
+  // compatible transform (i.e. "__esModule" has not been set), then set
+  // "default" to the CommonJS "module.exports" for node compatibility.
+  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
+  mod
+));
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var plugin_exports = {};
+__export(plugin_exports, {
+  PluginExtraThemeServer: () => PluginExtraThemeServer,
+  default: () => plugin_default
+});
+module.exports = __toCommonJS(plugin_exports);
+var import_server = require("@nocobase/server");
+var import_extraTheme = __toESM(require("./resources/extraTheme"));
+const SNIPPET = "pm.extra-theme";
+class PluginExtraThemeServer extends import_server.Plugin {
+  async load() {
+    this.app.resourceManager.define(import_extraTheme.default);
+    this.app.acl.allow("extraTheme", "getPublic", "public");
+    this.app.acl.registerSnippet({ name: SNIPPET, actions: ["extraTheme:set"] });
+  }
+  async install() {
+    const repo = this.db.getRepository("extraThemeSettings");
+    for (const key of ["app", "login"]) {
+      const found = await repo.findOne({ filter: { key } });
+      if (!found) await repo.create({ values: { key, config: { enabled: false } } });
+    }
+  }
+}
+var plugin_default = PluginExtraThemeServer;
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  PluginExtraThemeServer
+});

package/dist/server/resources/extraTheme.d.ts

@@ -0,0 +1,24 @@
+/**
+ * `extraTheme` — a collection-less resource with two actions:
+ *   - getPublic  (anonymous, see ACL in plugin.ts) → the raw stored config for
+ *     both scopes: `{ app, login }` (null when not yet saved). The client fills
+ *     defaults via shared `mergeConfig`, so this stays free of shared imports
+ *     (the NocoBase server build only compiles src/server/**).
+ *   - set        (admin, gated by the `pm.extra-theme` snippet) → upsert one
+ *     scope's config. body: { scope: 'app' | 'login', config: {...} }.
+ *     NB: a CUSTOM action name (not the built-in `update`) so the resourcer
+ *     routes to this handler instead of the reserved built-in update action.
+ */
+import { Context, Next } from '@nocobase/actions';
+declare const _default: {
+    name: string;
+    actions: {
+        getPublic: {
+            handler: (ctx: Context, next: Next) => Promise<void>;
+        };
+        set: {
+            handler: (ctx: Context, next: Next) => Promise<never>;
+        };
+    };
+};
+export default _default;

package/dist/server/resources/extraTheme.js

@@ -0,0 +1,65 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var extraTheme_exports = {};
+__export(extraTheme_exports, {
+  default: () => extraTheme_default
+});
+module.exports = __toCommonJS(extraTheme_exports);
+const SCOPES = ["app", "login"];
+var extraTheme_default = {
+  name: "extraTheme",
+  actions: {
+    getPublic: {
+      handler: async (ctx, next) => {
+        const repo = ctx.db.getRepository("extraThemeSettings");
+        const rows = await repo.find();
+        const out = { app: null, login: null };
+        for (const r of rows) {
+          const key = r.get("key");
+          if (key === "app" || key === "login") out[key] = r.get("config") ?? null;
+        }
+        ctx.body = out;
+        await next();
+      }
+    },
+    set: {
+      handler: async (ctx, next) => {
+        var _a, _b;
+        const values = ((_b = (_a = ctx.action) == null ? void 0 : _a.params) == null ? void 0 : _b.values) || {};
+        const { scope, config } = values;
+        if (!SCOPES.includes(scope)) return ctx.throw(400, "invalid scope");
+        if (config == null || typeof config !== "object") return ctx.throw(400, "invalid config");
+        const repo = ctx.db.getRepository("extraThemeSettings");
+        const existing = await repo.findOne({ filter: { key: scope } });
+        if (existing) await repo.update({ filter: { key: scope }, values: { config } });
+        else await repo.create({ values: { key: scope, config } });
+        ctx.body = { ok: true };
+        await next();
+      }
+    }
+  }
+};

package/dist/shared/buildTheme.d.ts

@@ -0,0 +1,35 @@
+import type { AppConfig } from './types';
+/**
+ * Builds the antd ThemeConfig that ExtraTheme applies through NocoBase's global
+ * theme (a `themeConfig` record + `useGlobalTheme().setTheme`). Changing tokens
+ * at the global source is what penetrates isolated "code-block" React roots —
+ * NocoBase re-bridges the merged ConfigProvider theme into every nested root
+ * (flow-engine provider.tsx -> ReactView.tsx), which raw CSS cannot reach.
+ *
+ * Token map (verified against @nocobase/client-v2 defaultTheme / customAlgorithm):
+ *   colorBgContainer  → Card/surface bodies (make translucent)
+ *   colorBgLayout     → page body (transparent so the bg image shows through)
+ *   colorBgHeader     → NocoBase custom token: top nav bar
+ *   colorBgSider      → NocoBase custom token: side nav bar
+ *   colorBgElevated   → ALL overlays (Modal/Drawer/Dropdown/Popover/Select-panel/
+ *                       DatePicker/Message/Notification) — KEEP opaque #fff.
+ * The "leak set" (Input/Select/Table/... also read colorBgContainer) is pinned
+ * back to #fff via components.<C>.colorBgContainer so controls stay readable.
+ */
+/** Components that also read colorBgContainer — pin opaque so they stay usable over a translucent theme. */
+export declare const KEEP_OPAQUE_COMPONENTS: Record<string, any>;
+export interface ExtraThemeConfigOut {
+    name: string;
+    token: Record<string, any>;
+    components: Record<string, any>;
+    cssVar: boolean;
+}
+/**
+ * @param app       the 工作区外观 config
+ * @param baseToken the current theme token (pass theme.token) — carries the user's
+ *                  own non-managed customizations (colorPrimary, etc.) which pass through.
+ * @param nativeToken the pristine NocoBase token (pass defaultTheme.token) — the source
+ *                  of truth for chrome tokens that must stay set when a section is off
+ *                  (e.g. colorBgHeader is a NocoBase custom token; losing it breaks the header).
+ */
+export declare function buildThemeConfig(app: AppConfig, baseToken?: Record<string, any>, nativeToken?: Record<string, any>): ExtraThemeConfigOut;

package/dist/shared/buildTheme.js

@@ -0,0 +1,72 @@
+/**
+ * This file is part of the NocoBase (R) project.
+ * Copyright (c) 2020-2024 NocoBase Co., Ltd.
+ * Authors: NocoBase Team.
+ *
+ * This project is dual-licensed under AGPL-3.0 and NocoBase Commercial License.
+ * For more information, please refer to: https://www.nocobase.com/agreement.
+ */
+
+var __defProp = Object.defineProperty;
+var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
+var __getOwnPropNames = Object.getOwnPropertyNames;
+var __hasOwnProp = Object.prototype.hasOwnProperty;
+var __export = (target, all) => {
+  for (var name in all)
+    __defProp(target, name, { get: all[name], enumerable: true });
+};
+var __copyProps = (to, from, except, desc) => {
+  if (from && typeof from === "object" || typeof from === "function") {
+    for (let key of __getOwnPropNames(from))
+      if (!__hasOwnProp.call(to, key) && key !== except)
+        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
+  }
+  return to;
+};
+var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
+var buildTheme_exports = {};
+__export(buildTheme_exports, {
+  KEEP_OPAQUE_COMPONENTS: () => KEEP_OPAQUE_COMPONENTS,
+  buildThemeConfig: () => buildThemeConfig
+});
+module.exports = __toCommonJS(buildTheme_exports);
+var import_color = require("./color");
+const KEEP_OPAQUE_COMPONENTS = {
+  Table: { colorBgContainer: "#ffffff" },
+  Input: { colorBgContainer: "#ffffff" },
+  InputNumber: { colorBgContainer: "#ffffff" },
+  Select: { colorBgContainer: "#ffffff" },
+  TreeSelect: { colorBgContainer: "#ffffff" },
+  Cascader: { colorBgContainer: "#ffffff" },
+  Mentions: { colorBgContainer: "#ffffff" },
+  DatePicker: { colorBgContainer: "#ffffff" }
+};
+const MANAGED_TOKENS = ["colorBgContainer", "colorBgLayout", "fontFamily"];
+function buildThemeConfig(app, baseToken = {}, nativeToken = {}) {
+  var _a;
+  const token = { ...baseToken };
+  for (const k of MANAGED_TOKENS) delete token[k];
+  token.colorBgElevated = "#ffffff";
+  if (app.enabled) {
+    token.colorBgLayout = "transparent";
+    if (app.card.glass) {
+      token.colorBgContainer = (0, import_color.hexToRgba)("#ffffff", app.card.opacity / 100);
+    }
+  }
+  const font = app.font;
+  if (font == null ? void 0 : font.enabled) {
+    if (font.source === "upload" && ((_a = font.upload) == null ? void 0 : _a.url)) {
+      const name = (0, import_color.sanitizeFontFamily)(font.upload.name || "").replace(/["']/g, "");
+      if (name) token.fontFamily = `"${name}"`;
+    } else if (font.source !== "upload") {
+      const fam = (0, import_color.sanitizeFontFamily)(font.family || "");
+      if (fam) token.fontFamily = fam;
+    }
+  }
+  return { name: "Modern", token, components: { ...KEEP_OPAQUE_COMPONENTS }, cssVar: true };
+}
+// Annotate the CommonJS export names for ESM import in node:
+0 && (module.exports = {
+  KEEP_OPAQUE_COMPONENTS,
+  buildThemeConfig
+});

package/dist/shared/color.d.ts

@@ -0,0 +1,44 @@
+import type { BackgroundConfig } from './types';
+/**
+ * Sanitize a (possibly hand-typed) CSS font-family stack so it can't break out of
+ * the injected declaration or corrupt the whole <style>. A font-family only needs
+ * letters/digits/space/comma/quotes/hyphen. Strip:
+ *   - `;{}<>\` — declaration/rule breakout chars,
+ *   - `/` and `*` — CSS comment markers (a lone `/​*` would comment out the rest of
+ *     the injected stylesheet, silently killing every rule after the font),
+ *   - control chars (collapsed to a space),
+ * then drop quotes if unbalanced (a lone quote runs a CSS string past the `}`), and
+ * cap the length. Returns '' for empty.
+ */
+export declare function sanitizeFontFamily(family: string): string;
+/** Map a font file URL's extension to an @font-face src `format()` value (''=unknown). */
+export declare function fontFormatFromUrl(url: string): string;
+/** Make a URL safe to drop inside CSS `url("...")` — strip chars that could close the string/rule. */
+export declare function sanitizeCssUrl(url: string): string;
+/** '#ffffff', 0.9 -> 'rgba(255,255,255,0.9)'. Accepts 3/6-digit hex, with or without '#'. */
+export declare function hexToRgba(hex: string, alpha: number): string;
+/**
+ * Strict allow-list for a CSS color that gets interpolated into a declaration. Accepts
+ * only #hex (3/4/6/8), rgb()/rgba()/hsl()/hsla() built from digits/%/./,//space, or a
+ * bare word (named color — no breakout chars possible). ANYTHING else → 'transparent'.
+ * This is the security boundary: config values are admin-writable but the compiled CSS
+ * is served to every visitor incl. the anonymous sign-in page, so a value like
+ * `red}body::before{...}` MUST NOT reach the stylesheet.
+ */
+export declare function safeCssColor(color: string): string;
+/** Coerce to a finite number (default 0) — for numeric CSS values interpolated raw. */
+export declare function safeNum(v: any, def?: number): number;
+/** Drop any alpha and return a solid 'rgb(r,g,b)'. Unparseable → safe black (never raw). */
+export declare function toSolidRgb(color: string): string;
+/** Apply an alpha to a hex/rgb/rgba color; RGB preserved. Unparseable → 'transparent'
+ * (never echo the raw value into the declaration — that was a CSS-injection sink). */
+export declare function withAlpha(color: string, alpha: number): string;
+/** Resolve a BackgroundConfig into CSS background-* values. Every interpolated value is
+ * sanitized (color → safeCssColor, angle → safeNum, url → sanitizeCssUrl) so nothing
+ * can break out of the injected declaration. */
+export declare function buildBackground(bg: BackgroundConfig): {
+    image: string;
+    size: string;
+    repeat: string;
+    position: string;
+};