@odla-ai/brand 0.3.0 → 0.4.0

package/dist/index.d.cts

@@ -534,6 +534,15 @@ interface BrandDiscussionReferenceTarget {
     bookId: string;
     resourceId?: string;
 }
+/** Bounded color projection shared with Discussion people and agents. */
+interface BrandDiscussionSwatch {
+    /** Semantic role used by the Brand token compiler. */
+    role: string;
+    /** Normalized opaque sRGB color (`#rrggbb`). */
+    hex: string;
+    /** Optional product-authored color name. */
+    name?: string;
+}
 /** Product-owned projection returned to Discussion typeahead and exact lookup. */
 interface BrandDiscussionReference {
     /** Canonical Brand kind used in stored Discussion ref markup. */
@@ -552,6 +561,8 @@ interface BrandDiscussionReference {
     destination: string;
     /** Same-origin native link; navigation is not mutation authority. */
     href: string;
+    /** Present only for a validated Brand palette, capped by Brand's swatch limit. */
+    swatches?: BrandDiscussionSwatch[];
 }
 /** Durable ref id: a book id, or `bookId/resourceId` for a child resource. */
 declare function brandDiscussionReferenceId(target: BrandDiscussionReferenceTarget): string;
@@ -1274,6 +1285,11 @@ interface BrandRouteOpts {
     basePath?: string;
     /** Native UI mount used by returned Discussion deep links. Default "/". */
     discussionBasePath?: string;
+    /**
+     * Product-owned fetch used only for a short-lived URL minted from a linked
+     * private Brand asset. Callers never provide this URL or receive it back.
+     */
+    fetchPrivateAsset?: typeof fetch;
     /** Upload size cap in bytes (checked against `File.size`). Default 8 MiB. */
     maxUploadBytes?: number;
     /** Serve `GET /books/:id/tokens.css` and `tokens.json` without authorize —
@@ -1296,6 +1312,7 @@ interface BrandRouteCtx {
     newId: () => string;
     maxUploadBytes: number;
     discussionBasePath: string;
+    fetchPrivateAsset: typeof fetch;
 }
 
 /** Freeze the exact OPEN proposal fields a reviewer sees. */
@@ -1513,4 +1530,4 @@ interface CreateBrandIntegrationOptions {
  */
 declare function createBrandIntegration(options?: CreateBrandIntegrationOptions): BrandIntegrationDescriptor;
 
-export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, type DeriveChartOptions, type DerivePaletteOptions, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_SWATCHES, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, complementary, contrastRatio, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, dispatchBrandTurn, finishAssetDeleteOps, formatBrandDiscussionReference, hexToOklch, hslToRgb, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseHex, pickTextOn, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readTools, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, rgbToHsl, rgbToOklab, rotateHue, safeFileName, sectionKey, splitComplementary, srgbToLinear, supportsBrandVision, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };
+export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDiscussionSwatch, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, type DeriveChartOptions, type DerivePaletteOptions, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_SWATCHES, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, complementary, contrastRatio, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, dispatchBrandTurn, finishAssetDeleteOps, formatBrandDiscussionReference, hexToOklch, hslToRgb, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseHex, pickTextOn, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readTools, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, rgbToHsl, rgbToOklab, rotateHue, safeFileName, sectionKey, splitComplementary, srgbToLinear, supportsBrandVision, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };

package/dist/index.d.ts

@@ -534,6 +534,15 @@ interface BrandDiscussionReferenceTarget {
     bookId: string;
     resourceId?: string;
 }
+/** Bounded color projection shared with Discussion people and agents. */
+interface BrandDiscussionSwatch {
+    /** Semantic role used by the Brand token compiler. */
+    role: string;
+    /** Normalized opaque sRGB color (`#rrggbb`). */
+    hex: string;
+    /** Optional product-authored color name. */
+    name?: string;
+}
 /** Product-owned projection returned to Discussion typeahead and exact lookup. */
 interface BrandDiscussionReference {
     /** Canonical Brand kind used in stored Discussion ref markup. */
@@ -552,6 +561,8 @@ interface BrandDiscussionReference {
     destination: string;
     /** Same-origin native link; navigation is not mutation authority. */
     href: string;
+    /** Present only for a validated Brand palette, capped by Brand's swatch limit. */
+    swatches?: BrandDiscussionSwatch[];
 }
 /** Durable ref id: a book id, or `bookId/resourceId` for a child resource. */
 declare function brandDiscussionReferenceId(target: BrandDiscussionReferenceTarget): string;
@@ -1274,6 +1285,11 @@ interface BrandRouteOpts {
     basePath?: string;
     /** Native UI mount used by returned Discussion deep links. Default "/". */
     discussionBasePath?: string;
+    /**
+     * Product-owned fetch used only for a short-lived URL minted from a linked
+     * private Brand asset. Callers never provide this URL or receive it back.
+     */
+    fetchPrivateAsset?: typeof fetch;
     /** Upload size cap in bytes (checked against `File.size`). Default 8 MiB. */
     maxUploadBytes?: number;
     /** Serve `GET /books/:id/tokens.css` and `tokens.json` without authorize —
@@ -1296,6 +1312,7 @@ interface BrandRouteCtx {
     newId: () => string;
     maxUploadBytes: number;
     discussionBasePath: string;
+    fetchPrivateAsset: typeof fetch;
 }
 
 /** Freeze the exact OPEN proposal fields a reviewer sees. */
@@ -1513,4 +1530,4 @@ interface CreateBrandIntegrationOptions {
  */
 declare function createBrandIntegration(options?: CreateBrandIntegrationOptions): BrandIntegrationDescriptor;
 
-export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, type DeriveChartOptions, type DerivePaletteOptions, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_SWATCHES, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, complementary, contrastRatio, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, dispatchBrandTurn, finishAssetDeleteOps, formatBrandDiscussionReference, hexToOklch, hslToRgb, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseHex, pickTextOn, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readTools, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, rgbToHsl, rgbToOklab, rotateHue, safeFileName, sectionKey, splitComplementary, srgbToLinear, supportsBrandVision, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };
+export { ASSET_CONTENT_TYPES, type AcceptProposalInput, AssetAnalysis, AssetKind, type AttrType, type AudienceChildren, BRAND_AGENT_PROFILE, BRAND_DISCUSSION_REFERENCE_KINDS, BRAND_INSTRUCTIONS, BRAND_RULES, BRAND_SCHEMA, BookStatus, type BrandActor, type BrandAgentBridge, type BrandAgentProfile, type BrandApprovalReceipt, type BrandAsset, type BrandAttrs, type BrandBook, type BrandBotTriggerOpts, type BrandCapabilityAuthority, BrandConflictError, type BrandDb, type BrandDecisionBinding, type BrandDeps, type BrandDiscussionReference, type BrandDiscussionReferenceKind, type BrandDiscussionReferenceTarget, type BrandDiscussionSwatch, type BrandDispatchBody, type BrandDispatchDeps, type BrandEntityRef, type BrandFetchedBytes, type BrandFileRecord, BrandForbiddenError, BrandGoneError, type BrandHumanAuthorityConsumption, BrandInputError, type BrandIntegrationDescriptor, type BrandIntegrationProbe, type BrandLookup, BrandNotFoundError, type BrandOp, type BrandPalette, type BrandPrincipalProjection, type BrandProposal, type BrandProposalProvenance, type BrandProposalReviewSnapshot, type BrandResult, BrandReviewStateChangedError, type BrandRouteCtx, type BrandRouteOpts, type BrandRow, type BrandRule, type BrandRules, type BrandScalar, type BrandSection, type BrandSkillOpts, type BrandSkillSelf, type BrandSourceAssetSnapshot, type BrandStorage, BrandTokensSnapshot, type BrandToolCtx, type BrandTransactGuard, type BrandTransactOptions, type BrandTrigger, type BrandUploadBody, type BrandVisionCapabilities, type BrandVisionSpec, CHART_DELTA_MIN, CHAT_MESSAGE_NS, CSS_NAMED_COLORS, type ContrastKind, type CreateAssetInput, type CreateBookInput, type CreateBrandIntegrationOptions, type CreateBrandPersonaOpts, DEFAULT_BRAND_SYSTEM, type DeriveChartOptions, type DerivePaletteOptions, type Hsl, type IntegrationProvision, type IntegrationSecret, type IntegrationSetting, type LightnessDirection, MAX_SWATCHES, MAX_VIEW_BYTES, type NamedColor, type NearestNamedColor, type Oklab, type Oklch, PICK_TEXT_DEFAULT_CANDIDATES, PaletteSource, PaletteStatus, ProposalKind, ProposalStatus, type ProposePaletteInput, type ProposeSectionInput, RAMP_L_MAX, RAMP_L_MIN, type RejectProposalInput, type ResolvedBrandDeps, type Rgb, SectionKind, SectionStatus, type SerializedAttr, type SerializedEntity, type SerializedLink, type SerializedLinkEnd, type SerializedSchema, Swatch, type UpsertSectionInput, acceptProposalOps, adjustLightnessUntil, analogous, assertAnalysis, assertAssetContentType, assertHex, assertSectionContent, assertSwatches, assetTools, attachedBrandAssetIds, audienceFanoutOps, base64FromBytes, beginAssetDeleteOps, bookForChannel, bookTools, brandAuthorityRef, brandBotTrigger, brandDiscussionReferenceHref, brandDiscussionReferenceId, brandInputFor, brandIntegration, brandJsonDigest, brandRules, brandSkill, canonicalBrandJson, capString, capStringArray, clamp01, clampToGamut, complementary, contrastRatio, createAssetOps, createBookOps, createBrandIntegration, createBrandPersona, createBrandRoutes, deltaEOK, deltaEOKLab, deriveChartColors, derivePalette, dispatchBrandTurn, finishAssetDeleteOps, formatBrandDiscussionReference, hexToOklch, hslToRgb, inSrgbGamut, isBoundedBrandJson, isBrandHumanAuthorityConsumption, linearToSrgb, meetsAA, meetsAAA, monochrome, nearestNamedColor, normalizeHex, oklabToOklch, oklabToRgb, oklchToHex, oklchToOklab, paletteTools, parseBrandDiscussionReference, parseBrandDispatch, parseHex, pickTextOn, proposalReviewSnapshot, proposePaletteOps, proposeSectionOps, readTools, recordAnalysisOps, rejectProposalOps, relativeLuminance, resolveDeps, rgbToHsl, rgbToOklab, rotateHue, safeFileName, sectionKey, splitComplementary, srgbToLinear, supportsBrandVision, tetradic, tintShadeRamp, toHex, triadic, updateBookOps, upsertSectionOps, verifyBrandApprovalReceipt };

package/dist/index.js

@@ -2372,13 +2372,13 @@ async function proposalDecisionOps(input) {
 
 // src/routes/proposal-resolution-receipts.ts
 async function proposalResolutionMutationKey(bookId, proposalId, mutationId) {
-  const digest = await brandJsonDigest({
+  const digest2 = await brandJsonDigest({
     version: 3,
     bookId,
     proposalId,
     mutationId
   });
-  return `brand:proposal-resolution:v3:${digest.slice("sha256:".length)}`;
+  return `brand:proposal-resolution:v3:${digest2.slice("sha256:".length)}`;
 }
 async function proposalReceiptByMutation(ctx, mutationKey) {
   const result = await ctx.db.query({
@@ -2928,6 +2928,130 @@ async function handleTokens(db, req, bookId, which, actor) {
   });
 }
 
+// src/routes/discussion-asset.ts
+var MAX_DISCUSSION_ASSET_BYTES = 4718592;
+var SIGN_TTL_SECONDS = 30;
+var TYPES = /* @__PURE__ */ new Set([
+  "image/png",
+  "image/jpeg",
+  "image/gif",
+  "image/webp",
+  "application/pdf"
+]);
+var bare = (value) => (value?.split(";", 1)[0] ?? "").trim().toLowerCase();
+var starts = (bytes, expected) => expected.every((value, index) => bytes[index] === value);
+function magicMatches(contentType, bytes) {
+  if (contentType === "image/png") {
+    return starts(bytes, [137, 80, 78, 71, 13, 10, 26, 10]);
+  }
+  if (contentType === "image/jpeg") {
+    return starts(bytes, [255, 216, 255]);
+  }
+  const prefix = new TextDecoder().decode(bytes.subarray(0, 16));
+  if (contentType === "image/gif") {
+    return prefix.startsWith("GIF87a") || prefix.startsWith("GIF89a");
+  }
+  if (contentType === "image/webp") {
+    return prefix.startsWith("RIFF") && prefix.slice(8, 12) === "WEBP";
+  }
+  return contentType === "application/pdf" && prefix.startsWith("%PDF-");
+}
+async function boundedBytes(response, max) {
+  const length = Number(response.headers.get("content-length"));
+  if (Number.isFinite(length) && length > max) return null;
+  if (!response.body) return new Uint8Array();
+  const reader = response.body.getReader();
+  const chunks = [];
+  let total = 0;
+  while (true) {
+    const next = await reader.read();
+    if (next.done) break;
+    total += next.value.byteLength;
+    if (total > max) {
+      await reader.cancel();
+      return null;
+    }
+    chunks.push(next.value);
+  }
+  const out = new Uint8Array(total);
+  let offset = 0;
+  for (const chunk of chunks) {
+    out.set(chunk, offset);
+    offset += chunk.byteLength;
+  }
+  return out;
+}
+async function digest(bytes) {
+  const value = await crypto.subtle.digest("SHA-256", bytes.slice().buffer);
+  return `sha256:${[...new Uint8Array(value)].map((byte) => byte.toString(16).padStart(2, "0")).join("")}`;
+}
+function exactAsset(beforeBook, before, afterBook, after) {
+  return afterBook.id === beforeBook.id && after.id === before.id && after.bookId === before.bookId && after.status === "live" && after.path === before.path && after.storageObjectId === before.storageObjectId && after.contentDigest === before.contentDigest && after.contentType === before.contentType && after.size === before.size;
+}
+function safeSignedUrl(value) {
+  try {
+    const url = new URL(value);
+    return value.length <= 4096 && url.protocol === "https:" && !url.username && !url.password ? url : null;
+  } catch {
+    return null;
+  }
+}
+async function handleBrandDiscussionAsset(ctx, req, target) {
+  const beforeBook = await loadMemberBook(ctx.db, target.bookId, ctx.actor.id);
+  const before = await linkedAsset(ctx, beforeBook, target.resourceId);
+  const contentType = bare(before.contentType);
+  if (!TYPES.has(contentType)) {
+    return json({ error: "asset content type is not viewable" }, 415);
+  }
+  if (before.size < 1 || before.size > MAX_DISCUSSION_ASSET_BYTES) {
+    return json({ error: "asset exceeds the discussion media limit" }, 413);
+  }
+  const signed = safeSignedUrl(
+    await ctx.db.storage.sign(before.path, SIGN_TTL_SECONDS)
+  );
+  if (!signed) throw new BrandInputError("private asset signing failed");
+  const response = await ctx.fetchPrivateAsset(signed, {
+    headers: { accept: contentType },
+    redirect: "manual",
+    signal: req.signal
+  });
+  if (!response.ok || response.type === "opaqueredirect") {
+    throw new BrandNotFoundError(`asset ${before.id}`);
+  }
+  const served = bare(response.headers.get("content-type"));
+  if (served === "image/svg+xml" || served && served !== "application/octet-stream" && served !== contentType) {
+    return json({ error: "asset content type is inconsistent" }, 415);
+  }
+  const bytes = await boundedBytes(response, MAX_DISCUSSION_ASSET_BYTES);
+  if (!bytes || bytes.byteLength !== before.size || !magicMatches(contentType, bytes) || await digest(bytes) !== before.contentDigest) {
+    return json({ error: "asset bytes failed validation" }, 422);
+  }
+  const afterBook = await loadMemberBook(ctx.db, target.bookId, ctx.actor.id);
+  const after = await linkedAsset(ctx, afterBook, target.resourceId);
+  if (!exactAsset(beforeBook, before, afterBook, after)) {
+    return json({ error: "asset changed during inspection" }, 409);
+  }
+  return json({
+    asset: {
+      reference: { kind: "brand:asset", id: `${before.bookId}/${before.id}` },
+      contentType,
+      byteLength: bytes.byteLength,
+      data: base64(bytes),
+      taint: "untrusted_project_material"
+    }
+  }, 200, {
+    "cache-control": "private, no-store",
+    "x-content-type-options": "nosniff"
+  });
+}
+function base64(bytes) {
+  let binary = "";
+  for (let index = 0; index < bytes.length; index += 8192) {
+    binary += String.fromCharCode(...bytes.subarray(index, index + 8192));
+  }
+  return btoa(binary);
+}
+
 // src/routes/discussion-references.ts
 var capLimit = (raw) => {
   const parsed = Number(raw ?? 20);
@@ -2959,6 +3083,7 @@ var projection = (req, ctx, book, target, row) => {
   let summary = `${book.name} brand book`;
   let status = book.status;
   let destination = "Brand Studio \xB7 Brand book";
+  let swatches;
   if (target.kind === "brand:asset") {
     const asset = row;
     label = asset.title?.trim() || `${asset.kind} asset`;
@@ -2968,6 +3093,11 @@ var projection = (req, ctx, book, target, row) => {
     destination = "Brand Studio \xB7 Conversation";
   } else if (target.kind === "brand:palette") {
     const palette = row;
+    swatches = assertSwatches(palette.swatches).map((swatch) => ({
+      role: swatch.role,
+      hex: swatch.hex,
+      ...swatch.name ? { name: swatch.name } : {}
+    }));
     label = palette.name;
     hint = `${book.name} \xB7 ${palette.status} palette`;
     summary = `${palette.swatches.length}-color palette in ${book.name}`;
@@ -3000,7 +3130,8 @@ var projection = (req, ctx, book, target, row) => {
       new URL(req.url),
       target,
       ctx.discussionBasePath
-    )
+    ),
+    ...swatches ? { swatches } : {}
   };
 };
 async function exact(ctx, req, target) {
@@ -3054,11 +3185,23 @@ async function search(ctx, req, url) {
 }
 async function handleBrandDiscussionReferences(ctx, req, url) {
   if (req.method !== "GET") return methodNotAllowed();
+  const inspect = url.searchParams.get("inspect");
   const kind = url.searchParams.get("kind");
   const id = url.searchParams.get("id");
   if (kind && !id || !kind && id) return json({ error: "kind and id must be paired" }, 400);
   const target = targetFromQuery(url);
   if ((kind || id) && !target) return json({ items: [] });
+  if (inspect === "asset-content") {
+    const allowed = /* @__PURE__ */ new Set(["inspect", "kind", "id"]);
+    if ([...url.searchParams.keys()].some((key) => !allowed.has(key)) || target?.kind !== "brand:asset" || !target.resourceId) return json({ error: "exact brand asset kind and id required" }, 400);
+    return handleBrandDiscussionAsset(ctx, req, {
+      bookId: target.bookId,
+      resourceId: target.resourceId
+    });
+  }
+  if (inspect !== null && inspect !== "1") {
+    return json({ error: "invalid inspection mode" }, 400);
+  }
   return json({
     items: target ? await exact(ctx, req, target) : await search(ctx, req, url)
   });
@@ -3099,7 +3242,8 @@ function createBrandRoutes(options) {
     now: options.now ?? Date.now,
     newId: options.newId ?? (() => crypto.randomUUID()),
     maxUploadBytes: options.maxUploadBytes ?? 8 * 1024 * 1024,
-    discussionBasePath: options.discussionBasePath ?? "/"
+    discussionBasePath: options.discussionBasePath ?? "/",
+    fetchPrivateAsset: options.fetchPrivateAsset ?? fetch
   };
   return async (req) => {
     const url = new URL(req.url);