@teamscala/service-boot 0.23.373 → 0.23.375

package/package.json

@@ -6,7 +6,7 @@
   },
   "name": "@teamscala/service-boot",
   "type": "module",
-  "version": "0.23.373",
+  "version": "0.23.375",
   "sideEffects": false,
   "imports": {
     "#service-boot/*": "./src/*",

package/src/register-registry-page-route.ts

@@ -559,7 +559,20 @@ export async function registerRegistryPageRoute(
 			// authoritative, the menu switcher changes which tenant's pages you
 			// view. Anonymous/public (no session) keeps the resolved brand. Same
 			// fetchOrganisationPageBranding pattern as the /sign-in brand override.
+			//
+			// A PUBLIC PAGE IS NEVER PERSONALISED TO THE READER'S ORG. Personalising
+			// the brand is right for a portal — you are looking at your own
+			// workspace. It is wrong for a public document, which belongs to the org
+			// that PUBLISHED it and must look identical to every reader.
+			//
+			// Measured 2026-08-17: the Launcha Authority Blueprint, owned by GMG
+			// APAC, rendered correctly for an anonymous customer and in GBG Indo's
+			// navy with the scala logo for any signed-in staff member — so the two
+			// people checking it before it went to clients were the only two who
+			// could not see what a client sees. Silent, and inverted: the reviewers
+			// got the wrong page.
 			if (
+				routeConfig.render_mode !== "public" &&
 				sessionOrgId &&
 				sessionOrgId !== (pageData.orgId as string | undefined) &&
 				// Page-org-first (portal-branding-resolves-page-org-first): the
@@ -599,6 +612,73 @@ export async function registerRegistryPageRoute(
 					// Branding fetch failed — keep the default brand (no regression).
 				}
 			}
+			// BRAND FROM THE ORG THAT OWNS THE RESOURCE, not the website's owner.
+			// A public resource page (an assessment report, a shared document) is
+			// hosted on a shared website but BELONGS to a tenant. resolvePageBrand
+			// reads pageData.orgId, which is the WEBSITE's org, so every tenant's
+			// report rendered the host org's logo and palette.
+			//
+			// Measured 2026-08-17: the Launcha Authority Blueprint is owned by GMG
+			// APAC (#FF4500, launcha logo) and rendered with GBG Indo's navy and
+			// scala mark, because both pages live on the shared "Public Pages"
+			// site. The loader had already resolved the right org — nothing
+			// consumed it.
+			//
+			// `brand_org_path` names where the owning org id lives in the resolved
+			// loader data (e.g. "quiz.organisation_id"), so which resource owns the
+			// brand is a ROW, never a per-service branch
+			// (`business-logic-is-rows-plus-executors`). Absent or unresolvable,
+			// the website's org stands — this can only ever narrow the brand to a
+			// more specific owner, never blank it.
+			const brandOrgPath = (routeConfig as { brand_org_path?: string }).brand_org_path;
+			if (brandOrgPath) {
+				let cursor: unknown = resolved;
+				for (const key of brandOrgPath.split(".")) {
+					if (cursor == null || typeof cursor !== "object") {
+						cursor = undefined;
+						break;
+					}
+					cursor = (cursor as Record<string, unknown>)[key];
+				}
+				if (typeof cursor === "string" && cursor.length > 0) {
+					pageData.orgId = cursor;
+					// orgId alone is not enough. resolvePageBrand fills only the
+					// accent/secondary/muted gaps from the org; primaryColor, logo and
+					// companyName come from pageData.brand, which was built from the
+					// website's org. Replace those too, the same way the session
+					// override above does, or the page keeps the host's logo while
+					// claiming the tenant's org.
+					try {
+						const owner = await fetchOrganisationPageBranding(
+							getServerClient() as never,
+							cursor,
+						);
+						if (owner) {
+							const existing = (pageData.brand as Record<string, unknown>) ?? {};
+							const existingLogo = (existing.logo as Record<string, unknown>) ?? {};
+							pageData.brand = {
+								...existing,
+								companyName: owner.company_name,
+								companyFriendlyName: owner.company_name,
+								primaryColor: owner.brand_primary_color ?? existing.primaryColor,
+								headingFont: owner.brand_heading_font ?? existing.headingFont,
+								bodyFont: owner.brand_body_font ?? existing.bodyFont,
+								logo: {
+									light: owner.company_logo_for_light_theme,
+									dark: owner.company_logo_for_dark_theme,
+									brand: existingLogo.brand ?? null,
+								},
+							};
+						}
+					} catch {
+						// Branding fetch failed — keep the website brand (no regression).
+					}
+				} else {
+					log.warn(
+						`[scala-install:${serviceSlug}] brand_org_path "${brandOrgPath}" resolved no org id for ${params.path}; keeping the website org brand`,
+					);
+				}
+			}
 			warnUncoveredBlocks(pageData, components, serviceSlug, params.path, log);
 			// Fire the AI-chat conversation prefetch NOW (in parallel with the
 			// proposal/partner/client post-processors below) so its ~eager cost is