@malloy-publisher/server 0.0.219 → 0.0.220

package/dist/server.mjs

@@ -158407,6 +158407,11 @@ var require_utils74 = __commonJS((exports, module) => {
   };
 });
 
+// ../../node_modules/ssh2/lib/protocol/crypto/build/Release/sshcrypto.node
+var require_sshcrypto = __commonJS((exports, module) => {
+  module.exports = __require("./sshcrypto-8m50vnmb.node");
+});
+
 // ../../node_modules/ssh2/lib/protocol/crypto/poly1305.js
 var require_poly1305 = __commonJS((exports, module) => {
   var __dirname = "/home/runner/work/publisher/publisher/node_modules/ssh2/lib/protocol/crypto", __filename = "/home/runner/work/publisher/publisher/node_modules/ssh2/lib/protocol/crypto/poly1305.js";
@@ -158893,7 +158898,7 @@ var require_crypto = __commonJS((exports, module) => {
   var ChaChaPolyDecipher;
   var GenericDecipher;
   try {
-    binding = (()=>{throw new Error("Cannot require module "+"./crypto/build/Release/sshcrypto.node");})();
+    binding = require_sshcrypto();
     ({
       AESGCMCipher,
       ChaChaPolyCipher,
@@ -242924,6 +242929,15 @@ function resolvePublisherConfigPath(serverRoot) {
   }
   return null;
 }
+var PER_MODE_COLOR_KEYS = [
+  "background",
+  "tableHeader",
+  "tableHeaderBackground",
+  "tableBody",
+  "tile",
+  "tileTitle",
+  "mapColor"
+];
 var DEFAULT_HIGH_WATER_FRACTION = 0.8;
 var DEFAULT_LOW_WATER_FRACTION = 0.7;
 var DEFAULT_CHECK_INTERVAL_MS = 5000;
@@ -243113,11 +243127,98 @@ var getPublisherConfig = (serverRoot) => {
   if (processedConfig && typeof processedConfig === "object" && "frozenConfig" in processedConfig) {
     frozenConfig = Boolean(processedConfig.frozenConfig);
   }
+  const instanceTheme = sanitizeTheme(processedConfig && typeof processedConfig === "object" && "theme" in processedConfig ? processedConfig.theme : undefined, "publisher.config.json");
   return {
     frozenConfig,
+    ...instanceTheme ? { theme: instanceTheme } : {},
     environments
   };
 };
+function sanitizeTheme(raw, context) {
+  if (raw === undefined || raw === null)
+    return;
+  if (typeof raw !== "object" || Array.isArray(raw)) {
+    logger.warn(`Invalid "theme" in ${context}: expected an object. Ignoring.`);
+    return;
+  }
+  const obj = raw;
+  const theme = {};
+  if ("defaultMode" in obj) {
+    const mode = obj.defaultMode;
+    if (mode === "light" || mode === "dark" || mode === "auto") {
+      theme.defaultMode = mode;
+    } else {
+      logger.warn(`Invalid "theme.defaultMode" in ${context}: expected "light" | "dark" | "auto" (got ${JSON.stringify(mode)}). Ignoring field.`);
+    }
+  }
+  if ("allowUserToggle" in obj) {
+    const value = obj.allowUserToggle;
+    if (typeof value === "boolean") {
+      theme.allowUserToggle = value;
+    } else {
+      logger.warn(`Invalid "theme.allowUserToggle" in ${context}: expected a boolean (got ${JSON.stringify(value)}). Ignoring field.`);
+    }
+  }
+  if ("palette" in obj && obj.palette && typeof obj.palette === "object") {
+    const palette = obj.palette;
+    const sanitized = {};
+    if (Array.isArray(palette.series)) {
+      sanitized.series = palette.series.filter((c) => typeof c === "string");
+    }
+    for (const key of PER_MODE_COLOR_KEYS) {
+      const raw2 = palette[key];
+      if (!raw2 || typeof raw2 !== "object" || Array.isArray(raw2))
+        continue;
+      const r = raw2;
+      const out = {};
+      if (typeof r.light === "string")
+        out.light = r.light;
+      if (typeof r.dark === "string")
+        out.dark = r.dark;
+      if (Object.keys(out).length > 0) {
+        sanitized[key] = out;
+      }
+    }
+    if (Object.keys(sanitized).length > 0)
+      theme.palette = sanitized;
+  }
+  if ("font" in obj && obj.font && typeof obj.font === "object") {
+    const font = obj.font;
+    const sanitized = {};
+    if (typeof font.family === "string")
+      sanitized.family = font.family;
+    if (typeof font.size === "number" && Number.isFinite(font.size)) {
+      sanitized.size = font.size;
+    }
+    if (Object.keys(sanitized).length > 0)
+      theme.font = sanitized;
+  }
+  return Object.keys(theme).length > 0 ? theme : undefined;
+}
+function mergeThemes(base, override) {
+  if (!base)
+    return override;
+  if (!override)
+    return base;
+  const merged = { ...base, ...override };
+  if (base.palette || override.palette) {
+    merged.palette = {
+      ...base.palette ?? {},
+      ...override.palette ?? {}
+    };
+    for (const key of PER_MODE_COLOR_KEYS) {
+      const b = base.palette?.[key];
+      const o = override.palette?.[key];
+      if (b || o) {
+        merged.palette[key] = { ...b ?? {}, ...o ?? {} };
+      }
+    }
+  }
+  if (base.font || override.font) {
+    merged.font = { ...base.font ?? {}, ...override.font ?? {} };
+  }
+  return merged;
+}
 var isPublisherConfigFrozen = (serverRoot) => {
   try {
     const publisherConfig = getPublisherConfig(serverRoot);
@@ -243193,17 +243294,29 @@ var getProcessedPublisherConfig = (serverRoot) => {
       logger.warn(`Environment "${environment.name}" has no valid packages. Skipping entry.`);
       continue;
     }
+    const envTheme = sanitizeTheme(environment.theme, `environment "${environment.name}"`);
+    const resolvedTheme = mergeThemes(rawConfig.theme, envTheme);
     validEnvironments.push({
       name: environment.name,
       packages: validPackages,
-      connections: convertConnectionsToApiConnections(environment.connections || [])
+      connections: convertConnectionsToApiConnections(environment.connections || []),
+      ...resolvedTheme ? { theme: resolvedTheme } : {}
     });
   }
   return {
     frozenConfig: rawConfig.frozenConfig ?? false,
+    ...rawConfig.theme ? { theme: rawConfig.theme } : {},
     environments: validEnvironments
   };
 };
+var getInstanceTheme = (serverRoot) => {
+  try {
+    return getPublisherConfig(serverRoot).theme;
+  } catch (error) {
+    logger.error(`Error reading instance theme from ${PUBLISHER_CONFIG_NAME}`, { error });
+    return;
+  }
+};
 
 // src/controller/connection.controller.ts
 init_errors();
@@ -247871,6 +247984,13 @@ function buildAzureDuckDBConnection(metadata, entry) {
 function getMetadataForLookup(metadata, name) {
   return name ? metadata.get(name) : undefined;
 }
+function applyConnectionFingerprint(connection, metadata) {
+  const fingerprint = metadata?.apiConnection.fingerprint;
+  if (fingerprint) {
+    connection.getDigest = () => fingerprint;
+  }
+  return connection;
+}
 function isDuckDBConnection(connection) {
   return connection instanceof DuckDBConnection;
 }
@@ -247896,9 +248016,8 @@ function buildEnvironmentMalloyConfig(connections = [], environmentPath = "", is
     }
     await attachPromise;
   }
-  malloyConfig.wrapConnections((base) => ({
-    lookupConnection: async (name) => {
-      const metadata = getMetadataForLookup(assembled.metadata, name);
+  malloyConfig.wrapConnections((base) => {
+    const resolveConnection = async (name, metadata) => {
       if (metadata?.isDuckLake) {
         let connectionPromise = duckLakeCache.get(name);
         if (!connectionPromise) {
@@ -247970,8 +248089,14 @@ function buildEnvironmentMalloyConfig(connections = [], environmentPath = "", is
         await attachOnce(connection, metadata);
       }
       return connection;
-    }
-  }));
+    };
+    return {
+      lookupConnection: async (name) => {
+        const metadata = getMetadataForLookup(assembled.metadata, name);
+        return applyConnectionFingerprint(await resolveConnection(name, metadata), metadata);
+      }
+    };
+  });
   return {
     malloyConfig,
     apiConnections: assembled.apiConnections,
@@ -256512,13 +256637,10 @@ class DuckDBRepository {
 init_logger();
 async function initializeSchema(db, force = false) {
   const initialized = await db.isInitialized();
-  if (initialized && !force) {
-    return;
-  }
   if (force) {
     logger.info("Reinitializing database schema dropping and recreating all tables");
     await dropAllTables(db);
-  } else {
+  } else if (!initialized) {
     await dropLegacyProjectSchema(db);
     logger.info("Creating database schema for the first time...");
   }
@@ -256577,6 +256699,14 @@ async function initializeSchema(db, force = false) {
       FOREIGN KEY (environment_id) REFERENCES environments(id)
     )
   `);
+  await db.run(`
+    CREATE TABLE IF NOT EXISTS themes (
+      id VARCHAR PRIMARY KEY,
+      payload JSON NOT NULL,
+      created_at TIMESTAMP NOT NULL,
+      updated_at TIMESTAMP NOT NULL
+    )
+  `);
   await db.run("CREATE INDEX IF NOT EXISTS idx_packages_environment_id ON packages(environment_id)");
   await db.run("CREATE INDEX IF NOT EXISTS idx_connections_environment_id ON connections(environment_id)");
   await db.run("CREATE INDEX IF NOT EXISTS idx_materializations_environment_package ON materializations(environment_id, package_name)");
@@ -256609,7 +256739,8 @@ async function dropAllTables(db) {
     "materializations",
     "packages",
     "connections",
-    "environments"
+    "environments",
+    "themes"
   ];
   logger.info("Dropping tables:", tables.join(", "));
   for (const table of tables) {
@@ -256655,6 +256786,15 @@ class StorageManager {
     this.connection = connection;
     this.repository = new DuckDBRepository(connection);
   }
+  getDuckDbConnection() {
+    if (!this.connection) {
+      throw new Error("Storage not initialized");
+    }
+    if (!(this.connection instanceof DuckDBConnection2)) {
+      throw new Error("Underlying storage connection is not DuckDB");
+    }
+    return this.connection;
+  }
   getRepository() {
     if (!this.repository) {
       throw new Error("Storage not initialized. Call initialize() first.");
@@ -256801,16 +256941,16 @@ async function fetchManifestEntries(uri) {
     throw new Error(`Failed to parse build manifest at ${uri}: ${err instanceof Error ? err.message : String(err)}`);
   }
   const entries = {};
-  for (const [buildId, entry] of Object.entries(parsed.entries ?? {})) {
+  for (const [sourceEntityId, entry] of Object.entries(parsed.entries ?? {})) {
     const physicalTableName = entry?.physicalTableName;
     if (!physicalTableName) {
       logger.warn("Manifest entry has no physicalTableName; skipping", {
         uri,
-        buildId
+        sourceEntityId
       });
       continue;
     }
-    entries[buildId] = { tableName: physicalTableName };
+    entries[sourceEntityId] = { tableName: physicalTableName };
   }
   return entries;
 }
@@ -258302,7 +258442,7 @@ function* iterGraphSources(graph, sources) {
     }
   }
 }
-function computeBuildId(source, connectionDigests) {
+function computeSourceEntityId(source, connectionDigests) {
   return source.makeBuildId(connectionDigests[source.connectionName], source.getSQL());
 }
 async function resolvePackageConnections(pkg, names) {
@@ -258390,7 +258530,7 @@ function deriveBuildPlan(graphs, sources, connectionDigests, sourceNames, source
       sourceID: source.sourceID,
       connectionName: source.connectionName,
       dialect: source.dialectName,
-      buildId: computeBuildId(source, connectionDigests),
+      sourceEntityId: computeSourceEntityId(source, connectionDigests),
       sql: source.getSQL(),
       columns: deriveColumns(source),
       annotationFields: deriveAnnotationFields(source),
@@ -261030,7 +261170,7 @@ class MaterializationController {
     }
     const instruction = raw;
     const required = [
-      "buildId",
+      "sourceEntityId",
       "materializedTableId",
       "physicalTableName",
       "realization"
@@ -261044,7 +261184,7 @@ class MaterializationController {
       throw new BadRequestError("Build instruction 'realization' must be COPY or SNAPSHOT");
     }
     return {
-      buildId: instruction.buildId,
+      sourceEntityId: instruction.sourceEntityId,
       sourceID: typeof instruction.sourceID === "string" ? instruction.sourceID : undefined,
       materializedTableId: instruction.materializedTableId,
       physicalTableName: instruction.physicalTableName,
@@ -261065,6 +261205,40 @@ class MaterializationController {
   }
 }
 
+// src/controller/theme.controller.ts
+init_errors();
+class ThemeController {
+  themeStore;
+  serverRoot;
+  constructor(themeStore, serverRoot) {
+    this.themeStore = themeStore;
+    this.serverRoot = serverRoot;
+  }
+  getTheme = async () => {
+    const theme = await this.themeStore.get();
+    return theme ?? {};
+  };
+  putTheme = async (body) => {
+    if (isPublisherConfigFrozen(this.serverRoot)) {
+      throw new FrozenConfigError('Cannot edit theme: publisher.config.json has "frozenConfig": true.');
+    }
+    const isEmptyObject2 = typeof body === "object" && body !== null && !Array.isArray(body) && Object.keys(body).length === 0;
+    const sanitized = sanitizeTheme(body, "PUT /api/v0/theme");
+    if (!sanitized && !isEmptyObject2) {
+      throw new BadRequestError("Theme payload was malformed (expected an object).");
+    }
+    const saved = await this.themeStore.set(sanitized ?? {});
+    return saved;
+  };
+  resetTheme = async () => {
+    if (isPublisherConfigFrozen(this.serverRoot)) {
+      throw new FrozenConfigError('Cannot reset theme: publisher.config.json has "frozenConfig": true.');
+    }
+    const reseeded = await this.themeStore.reset();
+    return reseeded ?? {};
+  };
+}
+
 // ../../node_modules/@modelcontextprotocol/sdk/dist/esm/shared/protocol.js
 var DEFAULT_REQUEST_TIMEOUT_MSEC = 60000;
 
@@ -267628,9 +267802,9 @@ async function resolveEnvironmentId(repository, environmentName) {
 }
 
 // src/service/materialization_service.ts
-var STAGING_BUILD_ID_LEN = 12;
-function stagingSuffix(buildId) {
-  return `_${buildId.substring(0, STAGING_BUILD_ID_LEN)}`;
+var STAGING_ID_LEN = 12;
+function stagingSuffix(sourceEntityId) {
+  return `_${sourceEntityId.replace(/-/g, "").substring(0, STAGING_ID_LEN)}`;
 }
 function selfAssignTableName(persistSource) {
   return deriveAnnotationFields(persistSource).name || persistSource.name;
@@ -267792,18 +267966,18 @@ class MaterializationService {
       for (const persistSource of iterGraphSources(graph, compiled.sources)) {
         if (include && !include.has(persistSource.name))
           continue;
-        const buildId = computeBuildId(persistSource, compiled.connectionDigests);
-        if (seen.has(buildId))
+        const sourceEntityId = computeSourceEntityId(persistSource, compiled.connectionDigests);
+        if (seen.has(sourceEntityId))
           continue;
-        seen.add(buildId);
-        const prior = priorEntries[buildId];
+        seen.add(sourceEntityId);
+        const prior = priorEntries[sourceEntityId];
         if (prior && prior.physicalTableName) {
-          carried[buildId] = prior;
+          carried[sourceEntityId] = prior;
           continue;
         }
         instructions.push({
-          buildId,
-          materializedTableId: `local-${buildId.substring(0, STAGING_BUILD_ID_LEN)}`,
+          sourceEntityId,
+          materializedTableId: `local-${sourceEntityId.substring(0, STAGING_ID_LEN)}`,
           physicalTableName: selfAssignTableName(persistSource),
           realization: "COPY"
         });
@@ -267824,9 +267998,11 @@ class MaterializationService {
   }
   async autoLoadManifest(environment, packageName, entries) {
     const manifestEntries = {};
-    for (const [buildId, entry] of Object.entries(entries)) {
+    for (const [sourceEntityId, entry] of Object.entries(entries)) {
       if (entry.physicalTableName) {
-        manifestEntries[buildId] = { tableName: entry.physicalTableName };
+        manifestEntries[sourceEntityId] = {
+          tableName: entry.physicalTableName
+        };
       }
     }
     try {
@@ -267848,13 +268024,13 @@ class MaterializationService {
     if (!plan) {
       throw new BadRequestError("Package has no persist sources; buildInstructions cannot be applied");
     }
-    const plannedBuildIds = new Set;
+    const plannedSourceEntityIds = new Set;
     for (const source of Object.values(plan.sources)) {
-      plannedBuildIds.add(source.buildId);
+      plannedSourceEntityIds.add(source.sourceEntityId);
     }
     for (const instruction of instructions) {
-      if (!plannedBuildIds.has(instruction.buildId)) {
-        throw new BadRequestError(`Instruction references unknown buildId '${instruction.buildId}'`);
+      if (!plannedSourceEntityIds.has(instruction.sourceEntityId)) {
+        throw new BadRequestError(`Instruction references unknown sourceEntityId '${instruction.sourceEntityId}'`);
       }
       if (instruction.realization === "SNAPSHOT") {
         throw new BadRequestError("realization=SNAPSHOT is not supported (COPY only)");
@@ -267864,20 +268040,22 @@ class MaterializationService {
   async executeInstructedBuild(compiled, instructions, seedEntries, signal) {
     const { graphs, sources, connectionDigests, connections } = compiled;
     const bySourceID = new Map;
-    const byBuildId = new Map;
+    const bySourceEntityId = new Map;
     for (const instruction of instructions) {
       if (instruction.sourceID) {
         bySourceID.set(instruction.sourceID, instruction);
       }
-      byBuildId.set(instruction.buildId, instruction);
+      bySourceEntityId.set(instruction.sourceEntityId, instruction);
     }
     const manifest = new Manifest;
     const entries = {};
-    for (const [buildId, entry] of Object.entries(seedEntries)) {
+    for (const [sourceEntityId, entry] of Object.entries(seedEntries)) {
       if (entry.physicalTableName) {
-        manifest.update(buildId, { tableName: entry.physicalTableName });
+        manifest.update(sourceEntityId, {
+          tableName: entry.physicalTableName
+        });
       }
-      entries[buildId] = entry;
+      entries[sourceEntityId] = entry;
     }
     for (const graph of graphs) {
       const connection = connections.get(graph.connectionName);
@@ -267887,25 +268065,25 @@ class MaterializationService {
       for (const persistSource of iterGraphSources(graph, sources)) {
         if (signal.aborted)
           throw new Error("Build cancelled");
-        const buildId = computeBuildId(persistSource, connectionDigests);
-        const instruction = bySourceID.get(persistSource.sourceID) ?? byBuildId.get(buildId);
+        const sourceEntityId = computeSourceEntityId(persistSource, connectionDigests);
+        const instruction = bySourceID.get(persistSource.sourceID) ?? bySourceEntityId.get(sourceEntityId);
         if (!instruction)
           continue;
         const entry = await this.buildOneSource(persistSource, instruction, connection, connectionDigests, manifest);
-        entries[buildId] = entry;
+        entries[sourceEntityId] = entry;
       }
     }
     return entries;
   }
   async buildOneSource(persistSource, instruction, connection, connectionDigests, manifest) {
-    const buildId = instruction.buildId;
+    const sourceEntityId = instruction.sourceEntityId;
     const physicalTableName = instruction.physicalTableName;
     const buildSQL = persistSource.getSQL({
       buildManifest: manifest.buildManifest,
       connectionDigests
     });
     const bareName = bareTableName(physicalTableName);
-    const stagingTableName = `${physicalTableName}${stagingSuffix(buildId)}`;
+    const stagingTableName = `${physicalTableName}${stagingSuffix(sourceEntityId)}`;
     const dialect = persistSource.dialectName;
     const quotedStaging = quoteTablePath(stagingTableName, dialect);
     const quotedPhysical = quoteTablePath(physicalTableName, dialect);
@@ -267928,7 +268106,7 @@ class MaterializationService {
       }
       throw err;
     }
-    manifest.update(buildId, { tableName: physicalTableName });
+    manifest.update(sourceEntityId, { tableName: physicalTableName });
     const durationMs = Math.round(performance.now() - startTime);
     recordSourceBuildDuration(durationMs);
     logger.info(`Built materialized source ${persistSource.name}`, {
@@ -267936,7 +268114,7 @@ class MaterializationService {
       durationMs
     });
     return {
-      buildId,
+      sourceEntityId,
       sourceName: persistSource.name,
       materializedTableId: instruction.materializedTableId,
       physicalTableName,
@@ -267993,7 +268171,7 @@ class MaterializationService {
       if (!connectionName || !physicalTableName) {
         logger.warn("Skipping manifest entry with no connection/table", {
           materializationId: m.id,
-          buildId: entry.buildId
+          sourceEntityId: entry.sourceEntityId
         });
         continue;
       }
@@ -268005,7 +268183,7 @@ class MaterializationService {
         }
         const dialect = connection.dialectName;
         await connection.runSQL(`DROP TABLE IF EXISTS ${quoteTablePath(physicalTableName, dialect)}`);
-        await connection.runSQL(`DROP TABLE IF EXISTS ${quoteTablePath(`${physicalTableName}${stagingSuffix(entry.buildId)}`, dialect)}`);
+        await connection.runSQL(`DROP TABLE IF EXISTS ${quoteTablePath(`${physicalTableName}${stagingSuffix(entry.sourceEntityId)}`, dialect)}`);
         recordDropTables("success");
         logger.info("Dropped materialized table on delete", {
           materializationId: m.id,
@@ -268172,6 +268350,122 @@ class PackageMemoryGovernor {
   }
 }
 
+// src/service/theme_store.ts
+init_logger();
+var THEME_ROW_ID = "default";
+
+class ThemeStore {
+  storageManager;
+  serverRoot;
+  mutex = new Mutex;
+  cached;
+  cacheLoaded = false;
+  constructor(storageManager, serverRoot) {
+    this.storageManager = storageManager;
+    this.serverRoot = serverRoot;
+  }
+  get db() {
+    return this.storageManager.getDuckDbConnection();
+  }
+  async initialize() {
+    await this.mutex.runExclusive(async () => {
+      await this.loadLocked();
+    });
+  }
+  async get() {
+    if (!this.cacheLoaded) {
+      await this.initialize();
+    }
+    return this.cached;
+  }
+  async set(theme) {
+    return this.mutex.runExclusive(async () => {
+      await this.persistLocked(theme);
+      this.cached = theme;
+      this.cacheLoaded = true;
+      return theme;
+    });
+  }
+  async reset() {
+    return this.mutex.runExclusive(async () => {
+      await this.db.run("DELETE FROM themes WHERE id = ?", [THEME_ROW_ID]);
+      this.cached = undefined;
+      this.cacheLoaded = false;
+      await this.loadLocked();
+      return this.cached;
+    });
+  }
+  async loadLocked() {
+    if (this.cacheLoaded)
+      return;
+    const row = await this.db.get("SELECT payload FROM themes WHERE id = ?", [THEME_ROW_ID]);
+    if (row?.payload) {
+      let parsed;
+      try {
+        parsed = JSON.parse(row.payload);
+      } catch (error) {
+        logger.warn("ThemeStore: stored theme JSON is unparseable; treating as empty", { error });
+        this.cacheLoaded = true;
+        return;
+      }
+      const sanitized = sanitizeTheme(parsed, "ThemeStore.load");
+      const dropped = listSanitizerDrops(parsed, sanitized);
+      if (dropped.length > 0) {
+        logger.info("ThemeStore: dropped stale fields from stored theme during load", { dropped });
+      }
+      this.cached = sanitized;
+    } else {
+      const seed = getInstanceTheme(this.serverRoot);
+      if (seed) {
+        this.cached = seed;
+        await this.persistLocked(seed);
+      }
+    }
+    this.cacheLoaded = true;
+  }
+  async persistLocked(theme) {
+    const now = new Date().toISOString();
+    const payload = JSON.stringify(theme);
+    await this.db.run(`INSERT INTO themes (id, payload, created_at, updated_at)
+          VALUES (?, ?, ?, ?)
+          ON CONFLICT (id) DO UPDATE SET
+            payload = EXCLUDED.payload,
+            updated_at = EXCLUDED.updated_at`, [THEME_ROW_ID, payload, now, now]);
+  }
+}
+function listSanitizerDrops(raw, sanitized) {
+  if (!raw || typeof raw !== "object" || Array.isArray(raw))
+    return [];
+  const r = raw;
+  const drops = [];
+  const topKeys = ["defaultMode", "allowUserToggle"];
+  for (const k of topKeys) {
+    if (r[k] !== undefined && sanitized?.[k] === undefined)
+      drops.push(k);
+  }
+  if (r.palette && typeof r.palette === "object" && !Array.isArray(r.palette)) {
+    const rp = r.palette;
+    const sp = sanitized?.palette ?? {};
+    for (const k of Object.keys(rp)) {
+      if (rp[k] !== undefined && sp[k] === undefined)
+        drops.push(`palette.${k}`);
+    }
+  } else if (r.palette !== undefined && (!sanitized || sanitized.palette === undefined)) {
+    drops.push("palette");
+  }
+  if (r.font && typeof r.font === "object" && !Array.isArray(r.font)) {
+    const rf = r.font;
+    const sf = sanitized?.font ?? {};
+    for (const k of Object.keys(rf)) {
+      if (rf[k] !== undefined && sf[k] === undefined)
+        drops.push(`font.${k}`);
+    }
+  } else if (r.font !== undefined && (!sanitized || sanitized.font === undefined)) {
+    drops.push("font");
+  }
+  return drops;
+}
+
 // src/server.ts
 function parseArgs() {
   const args = process.argv.slice(2);
@@ -268266,6 +268560,8 @@ var queryController = new QueryController(environmentStore);
 var compileController = new CompileController(environmentStore);
 var materializationService = new MaterializationService(environmentStore);
 var materializationController = new MaterializationController(materializationService);
+var themeStore = new ThemeStore(environmentStore.storageManager, SERVER_ROOT);
+var themeController = new ThemeController(themeStore, SERVER_ROOT);
 var mcpApp = import_express2.default();
 registerHealthEndpoints(mcpApp);
 mcpApp.use(MCP_ENDPOINT, import_express2.default.json());
@@ -268539,13 +268835,44 @@ app.get(`${API_PREFIX2}/environments/:environmentName/packages/:packageName/page
 app.get(`${API_PREFIX2}/status`, async (_req, res) => {
   try {
     const status = await environmentStore.getStatus();
-    res.status(200).json(status);
+    const theme = environmentStore.storageManager.isInitialized() ? await themeStore.get() : undefined;
+    res.status(200).json({ ...status, theme: theme ?? {} });
   } catch (error) {
     logger.error("Error getting status", { error });
     const { json, status } = internalErrorToHttpError(error);
     res.status(status).json(json);
   }
 });
+app.get(`${API_PREFIX2}/theme`, async (_req, res) => {
+  try {
+    if (!environmentStore.storageManager.isInitialized()) {
+      throw new ServiceUnavailableError("Theme storage is still initializing. Retry shortly.");
+    }
+    res.status(200).json(await themeController.getTheme());
+  } catch (error) {
+    logger.error("Error getting theme", { error });
+    const { json, status } = internalErrorToHttpError(error);
+    res.status(status).json(json);
+  }
+});
+app.put(`${API_PREFIX2}/theme`, async (req, res) => {
+  try {
+    res.status(200).json(await themeController.putTheme(req.body));
+  } catch (error) {
+    logger.error("Error saving theme", { error });
+    const { json, status } = internalErrorToHttpError(error);
+    res.status(status).json(json);
+  }
+});
+app.delete(`${API_PREFIX2}/theme`, async (_req, res) => {
+  try {
+    res.status(200).json(await themeController.resetTheme());
+  } catch (error) {
+    logger.error("Error resetting theme", { error });
+    const { json, status } = internalErrorToHttpError(error);
+    res.status(status).json(json);
+  }
+});
 app.get(`${API_PREFIX2}/watch-mode/status`, watchModeController.getWatchStatus);
 app.post(`${API_PREFIX2}/watch-mode/start`, watchModeController.startWatching);
 app.post(`${API_PREFIX2}/watch-mode/stop`, watchModeController.stopWatchMode);