@the-portland-company/shell 0.93.0 → 0.95.0

package/dist/app-icons.cjs

@@ -2,6 +2,7 @@
 
 // src/app-icons.ts
 var SPECS_ICONS_BASE = "https://specs.politogyvrm.com/api/icons";
+var SPECS_FAVICON_URL = "https://specs.politogyvrm.com/api/favicon";
 var VRM_FALLBACK_ICON = "https://lzhzqtzwlwdffxhjjrba.supabase.co/storage/v1/object/public/brand-assets/logo-square/logo-square-mrspraen.png";
 function pick(icons, ...keys) {
   if (!icons) return null;
@@ -36,6 +37,13 @@ function toMetadataIcons(data) {
   const icons = data?.icons;
   const favicon = pick(icons, "favicon-color-square", "favicon-color-round");
   const apple = pick(icons, "ios-color-square", "ios-color-round", "favicon-color-square") ?? favicon;
+  if (!favicon) {
+    return {
+      icon: [{ url: SPECS_FAVICON_URL }],
+      shortcut: [{ url: SPECS_FAVICON_URL }],
+      apple: [{ url: `${SPECS_FAVICON_URL}?kind=apple` }]
+    };
+  }
   const entry = (url) => url ? [{ url: withVersion(url, data) }] : [];
   return {
     icon: entry(favicon),
@@ -44,6 +52,7 @@ function toMetadataIcons(data) {
   };
 }
 
+exports.SPECS_FAVICON_URL = SPECS_FAVICON_URL;
 exports.SPECS_ICONS_BASE = SPECS_ICONS_BASE;
 exports.VRM_FALLBACK_ICON = VRM_FALLBACK_ICON;
 exports.politogyAppIcons = politogyAppIcons;

package/dist/app-icons.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/app-icons.ts"],"names":[],"mappings":";;;AAuBO,IAAM,gBAAA,GAAmB;AAOzB,IAAM,iBAAA,GACX;AAmBF,SAAS,IAAA,CACP,UACG,IAAA,EACY;AACf,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAG,CAAA,EAAG,GAAA;AACxB,IAAA,IAAI,KAAK,OAAO,GAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT;AASA,eAAsB,gBAAA,CACpB,KACA,IAAA,EACgC;AAChC,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,IAAW,gBAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,MAAM,iBAAA,IAAqB,EAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,IAAA,EAAM,SAAA,IAAa,UAAA,CAAW,KAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAA,EAAI;AAAA;AAAA,MAE9D,IAAA,EAAM,EAAE,UAAA;AAAW,KACL,CAAA;AAChB,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,GAAG,CAAA,EAAA,EAAK,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B;AACF;AASA,SAAS,WAAA,CAAY,KAAa,IAAA,EAA4C;AAC5E,EAAA,MAAM,GAAA,GACJ,OAAO,IAAA,EAAM,OAAA,KAAY,WACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,GACnB,IAAA,EAAM,SAAA,GACJ,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA,IAAK,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GAC1D,EAAA;AACR,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AACjB,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAA,EAAK,GAAG,CAAA,CAAA;AACvD;AAGO,SAAS,gBAAgB,IAAA,EAA2D;AACzF,EAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AAGpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,EAAO,sBAAA,EAAwB,qBAAqB,CAAA;AACzE,EAAA,MAAM,QACJ,IAAA,CAAK,KAAA,EAAO,kBAAA,EAAoB,iBAAA,EAAmB,sBAAsB,CAAA,IAAK,OAAA;AAChF,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAwB,GAAA,GAAM,CAAC,EAAE,GAAA,EAAK,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA,EAAG,IAAI,EAAC;AAClF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAM,OAAO,CAAA;AAAA,IACnB,QAAA,EAAU,MAAM,OAAO,CAAA;AAAA,IACvB,KAAA,EAAO,MAAM,KAAK;AAAA,GACpB;AACF","file":"app-icons.cjs","sourcesContent":["// ---------------------------------------------------------------------------\n// App icons — favicons and platform icons resolved from the Brand API at\n// RUNTIME, never hand-dropped as static files in an app repo (Global Rules →\n// \"App Icons — Favicons & Browser Icons\").\n//\n// `GET https://specs.politogyvrm.com/api/icons/<app>` returns the FULLY\n// RESOLVED variant grid: the server already walks the fallback chain (exact\n// variant → same-platform color/square → color fallback → the app's base\n// favicon → the global platform icon → the VRM Core logo), and marks each entry\n// `fallback: true` when it is inherited rather than app-specific. So an app that\n// has never uploaded its own icon still gets the platform favicon (Brand\n// `assets.favicon`) from the API, with no per-app defaulting logic.\n//\n// The shell itself carries NO icon image and never substitutes one Brand asset\n// for another (Brand guideline \"Logo standard: use the uploaded Brand assets\n// as-is\"). If the API cannot be reached, or returns no browser-tab icon, this\n// returns no icon entries at all rather than a baked-in stand-in.\n//\n// Server-safe: no React, no client deps. Next apps call this from\n// `generateMetadata()` so the icon updates when Brand changes, without a\n// redeploy of the app.\n// ---------------------------------------------------------------------------\n\nexport const SPECS_ICONS_BASE = 'https://specs.politogyvrm.com/api/icons'\n\n/**\n * @deprecated No longer used and will be removed. It was a hardcoded copy of an\n * old `assets.logoSquare` upload, used as a stand-in favicon — a bundled copy\n * of one Brand asset substituted for another, which the Brand forbids.\n */\nexport const VRM_FALLBACK_ICON =\n  'https://lzhzqtzwlwdffxhjjrba.supabase.co/storage/v1/object/public/brand-assets/logo-square/logo-square-mrspraen.png'\n\nexport type PolitogyIconVariant = { url: string; fallback?: boolean }\n\nexport type PolitogyIconsResponse = {\n  app: string\n  version?: number\n  updatedAt?: string\n  icons: Record<string, PolitogyIconVariant>\n}\n\n/** Next.js `metadata.icons` shape (a subset — url/rel entries). */\nexport type PolitogyMetadataIcons = {\n  /** Empty when the Brand API supplied no browser-tab icon — never a stand-in. */\n  icon: { url: string }[]\n  shortcut?: { url: string }[]\n  apple?: { url: string }[]\n}\n\nfunction pick(\n  icons: Record<string, PolitogyIconVariant> | undefined,\n  ...keys: string[]\n): string | null {\n  if (!icons) return null\n  for (const key of keys) {\n    const hit = icons[key]?.url\n    if (hit) return hit\n  }\n  return null\n}\n\n/**\n * Fetch the resolved icon set for an app and shape it for Next `metadata`.\n *\n * Cached for 60s with revalidation, matching the tokens contract — a Brand edit\n * shows up promptly without defeating caching. Never throws: on any failure it\n * returns no icon entries, so an app can call this unguarded in metadata.\n */\nexport async function politogyAppIcons(\n  app: string,\n  init?: { baseUrl?: string; revalidateSeconds?: number; fetchImpl?: typeof globalThis.fetch },\n): Promise<PolitogyMetadataIcons> {\n  const base = init?.baseUrl ?? SPECS_ICONS_BASE\n  const revalidate = init?.revalidateSeconds ?? 60\n  const doFetch = init?.fetchImpl ?? globalThis.fetch\n  try {\n    const res = await doFetch(`${base}/${encodeURIComponent(app)}`, {\n      // `next.revalidate` is ignored by non-Next fetch implementations.\n      next: { revalidate },\n    } as RequestInit)\n    if (!res.ok) throw new Error(`icons ${app}: ${res.status}`)\n    const data = (await res.json()) as PolitogyIconsResponse\n    return toMetadataIcons(data)\n  } catch {\n    return toMetadataIcons(null)\n  }\n}\n\n/**\n * Cache-buster: stamp the Brand revision onto an icon URL as `?v=<version>`\n * (falling back to the `updatedAt` timestamp). The stored filenames are already\n * content-hashed, but favicons are cached so aggressively by browsers that a new\n * Brand publish can still show stale; a version-keyed URL forces every publish to\n * be treated as a distinct resource. No-op for an unknown rev.\n */\nfunction withVersion(url: string, data: PolitogyIconsResponse | null): string {\n  const rev =\n    typeof data?.version === 'number'\n      ? String(data.version)\n      : data?.updatedAt\n        ? String(Date.parse(data.updatedAt) || '').replace(/\\D/g, '')\n        : ''\n  if (!rev) return url\n  return `${url}${url.includes('?') ? '&' : '?'}v=${rev}`\n}\n\n/** Pure shaping step — exported for tests and for callers with their own fetch. */\nexport function toMetadataIcons(data: PolitogyIconsResponse | null): PolitogyMetadataIcons {\n  const icons = data?.icons\n  // The API has already resolved the chain down to Brand `assets.favicon`\n  // (and `assets.appleIcon` for iOS). Nothing is substituted here.\n  const favicon = pick(icons, 'favicon-color-square', 'favicon-color-round')\n  const apple =\n    pick(icons, 'ios-color-square', 'ios-color-round', 'favicon-color-square') ?? favicon\n  const entry = (url: string | null) => (url ? [{ url: withVersion(url, data) }] : [])\n  return {\n    icon: entry(favicon),\n    shortcut: entry(favicon),\n    apple: entry(apple),\n  }\n}\n"]}
+{"version":3,"sources":["../src/app-icons.ts"],"names":[],"mappings":";;;AA0BO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,iBAAA,GAAoB;AAO1B,IAAM,iBAAA,GACX;AAmBF,SAAS,IAAA,CACP,UACG,IAAA,EACY;AACf,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAG,CAAA,EAAG,GAAA;AACxB,IAAA,IAAI,KAAK,OAAO,GAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT;AASA,eAAsB,gBAAA,CACpB,KACA,IAAA,EACgC;AAChC,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,IAAW,gBAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,MAAM,iBAAA,IAAqB,EAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,IAAA,EAAM,SAAA,IAAa,UAAA,CAAW,KAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAA,EAAI;AAAA;AAAA,MAE9D,IAAA,EAAM,EAAE,UAAA;AAAW,KACL,CAAA;AAChB,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,GAAG,CAAA,EAAA,EAAK,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B;AACF;AASA,SAAS,WAAA,CAAY,KAAa,IAAA,EAA4C;AAC5E,EAAA,MAAM,GAAA,GACJ,OAAO,IAAA,EAAM,OAAA,KAAY,WACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,GACnB,IAAA,EAAM,SAAA,GACJ,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA,IAAK,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GAC1D,EAAA;AACR,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AACjB,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAA,EAAK,GAAG,CAAA,CAAA;AACvD;AAGO,SAAS,gBAAgB,IAAA,EAA2D;AACzF,EAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AAGpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,EAAO,sBAAA,EAAwB,qBAAqB,CAAA;AACzE,EAAA,MAAM,QACJ,IAAA,CAAK,KAAA,EAAO,kBAAA,EAAoB,iBAAA,EAAmB,sBAAsB,CAAA,IAAK,OAAA;AAChF,EAAA,IAAI,CAAC,OAAA,EAAS;AAGZ,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,CAAC,EAAE,GAAA,EAAK,mBAAmB,CAAA;AAAA,MACjC,QAAA,EAAU,CAAC,EAAE,GAAA,EAAK,mBAAmB,CAAA;AAAA,MACrC,OAAO,CAAC,EAAE,KAAK,CAAA,EAAG,iBAAiB,eAAe;AAAA,KACpD;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAwB,GAAA,GAAM,CAAC,EAAE,GAAA,EAAK,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA,EAAG,IAAI,EAAC;AAClF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAM,OAAO,CAAA;AAAA,IACnB,QAAA,EAAU,MAAM,OAAO,CAAA;AAAA,IACvB,KAAA,EAAO,MAAM,KAAK;AAAA,GACpB;AACF","file":"app-icons.cjs","sourcesContent":["// ---------------------------------------------------------------------------\n// App icons — favicons and platform icons resolved from the Brand API at\n// RUNTIME, never hand-dropped as static files in an app repo (Global Rules →\n// \"App Icons — Favicons & Browser Icons\").\n//\n// `GET https://specs.politogyvrm.com/api/icons/<app>` returns the FULLY\n// RESOLVED variant grid: the server already walks the fallback chain (exact\n// variant → same-platform color/square → color fallback → the app's base\n// favicon → the global platform icon → the VRM Core logo), and marks each entry\n// `fallback: true` when it is inherited rather than app-specific. So an app that\n// has never uploaded its own icon still gets the platform favicon (Brand\n// `assets.favicon`) from the API, with no per-app defaulting logic.\n//\n// The shell itself carries NO icon image and never substitutes one Brand asset\n// for another (Brand guideline \"Logo standard: use the uploaded Brand assets\n// as-is\"). If the API cannot be reached, or returns no browser-tab icon, this\n// returns SPECS_FAVICON_URL: Specs' public redirect to Brand `assets.favicon`,\n// which the BROWSER resolves. In production Cloudflare's bot check challenges\n// the server-side fetch below, so this is the usual path there. The link is in\n// the server HTML, so the browser never falls back to /favicon.ico.\n//\n// Server-safe: no React, no client deps. Next apps call this from\n// `generateMetadata()` so the icon updates when Brand changes, without a\n// redeploy of the app.\n// ---------------------------------------------------------------------------\n\nexport const SPECS_ICONS_BASE = 'https://specs.politogyvrm.com/api/icons'\n\n/** Public 302 to Brand `assets.favicon` (`?kind=apple` → `assets.appleIcon`). */\nexport const SPECS_FAVICON_URL = 'https://specs.politogyvrm.com/api/favicon'\n\n/**\n * @deprecated No longer used and will be removed. It was a hardcoded copy of an\n * old `assets.logoSquare` upload, used as a stand-in favicon — a bundled copy\n * of one Brand asset substituted for another, which the Brand forbids.\n */\nexport const VRM_FALLBACK_ICON =\n  'https://lzhzqtzwlwdffxhjjrba.supabase.co/storage/v1/object/public/brand-assets/logo-square/logo-square-mrspraen.png'\n\nexport type PolitogyIconVariant = { url: string; fallback?: boolean }\n\nexport type PolitogyIconsResponse = {\n  app: string\n  version?: number\n  updatedAt?: string\n  icons: Record<string, PolitogyIconVariant>\n}\n\n/** Next.js `metadata.icons` shape (a subset — url/rel entries). */\nexport type PolitogyMetadataIcons = {\n  /** Falls back to SPECS_FAVICON_URL when the Brand API supplied no browser-tab icon. */\n  icon: { url: string }[]\n  shortcut?: { url: string }[]\n  apple?: { url: string }[]\n}\n\nfunction pick(\n  icons: Record<string, PolitogyIconVariant> | undefined,\n  ...keys: string[]\n): string | null {\n  if (!icons) return null\n  for (const key of keys) {\n    const hit = icons[key]?.url\n    if (hit) return hit\n  }\n  return null\n}\n\n/**\n * Fetch the resolved icon set for an app and shape it for Next `metadata`.\n *\n * Cached for 60s with revalidation, matching the tokens contract — a Brand edit\n * shows up promptly without defeating caching. Never throws: on any failure it\n * returns the SPECS_FAVICON_URL redirect, so an app can call this unguarded in metadata.\n */\nexport async function politogyAppIcons(\n  app: string,\n  init?: { baseUrl?: string; revalidateSeconds?: number; fetchImpl?: typeof globalThis.fetch },\n): Promise<PolitogyMetadataIcons> {\n  const base = init?.baseUrl ?? SPECS_ICONS_BASE\n  const revalidate = init?.revalidateSeconds ?? 60\n  const doFetch = init?.fetchImpl ?? globalThis.fetch\n  try {\n    const res = await doFetch(`${base}/${encodeURIComponent(app)}`, {\n      // `next.revalidate` is ignored by non-Next fetch implementations.\n      next: { revalidate },\n    } as RequestInit)\n    if (!res.ok) throw new Error(`icons ${app}: ${res.status}`)\n    const data = (await res.json()) as PolitogyIconsResponse\n    return toMetadataIcons(data)\n  } catch {\n    return toMetadataIcons(null)\n  }\n}\n\n/**\n * Cache-buster: stamp the Brand revision onto an icon URL as `?v=<version>`\n * (falling back to the `updatedAt` timestamp). The stored filenames are already\n * content-hashed, but favicons are cached so aggressively by browsers that a new\n * Brand publish can still show stale; a version-keyed URL forces every publish to\n * be treated as a distinct resource. No-op for an unknown rev.\n */\nfunction withVersion(url: string, data: PolitogyIconsResponse | null): string {\n  const rev =\n    typeof data?.version === 'number'\n      ? String(data.version)\n      : data?.updatedAt\n        ? String(Date.parse(data.updatedAt) || '').replace(/\\D/g, '')\n        : ''\n  if (!rev) return url\n  return `${url}${url.includes('?') ? '&' : '?'}v=${rev}`\n}\n\n/** Pure shaping step — exported for tests and for callers with their own fetch. */\nexport function toMetadataIcons(data: PolitogyIconsResponse | null): PolitogyMetadataIcons {\n  const icons = data?.icons\n  // The API has already resolved the chain down to Brand `assets.favicon`\n  // (and `assets.appleIcon` for iOS). Nothing is substituted here.\n  const favicon = pick(icons, 'favicon-color-square', 'favicon-color-round')\n  const apple =\n    pick(icons, 'ios-color-square', 'ios-color-round', 'favicon-color-square') ?? favicon\n  if (!favicon) {\n    // No resolved icon (API unreachable, or nothing set): let the browser\n    // follow Specs' redirect to the Brand favicon. Never a bundled image.\n    return {\n      icon: [{ url: SPECS_FAVICON_URL }],\n      shortcut: [{ url: SPECS_FAVICON_URL }],\n      apple: [{ url: `${SPECS_FAVICON_URL}?kind=apple` }],\n    }\n  }\n  const entry = (url: string | null) => (url ? [{ url: withVersion(url, data) }] : [])\n  return {\n    icon: entry(favicon),\n    shortcut: entry(favicon),\n    apple: entry(apple),\n  }\n}\n"]}

package/dist/app-icons.d.cts

@@ -1,4 +1,6 @@
 declare const SPECS_ICONS_BASE = "https://specs.politogyvrm.com/api/icons";
+/** Public 302 to Brand `assets.favicon` (`?kind=apple` → `assets.appleIcon`). */
+declare const SPECS_FAVICON_URL = "https://specs.politogyvrm.com/api/favicon";
 /**
  * @deprecated No longer used and will be removed. It was a hardcoded copy of an
  * old `assets.logoSquare` upload, used as a stand-in favicon — a bundled copy
@@ -17,7 +19,7 @@ type PolitogyIconsResponse = {
 };
 /** Next.js `metadata.icons` shape (a subset — url/rel entries). */
 type PolitogyMetadataIcons = {
-    /** Empty when the Brand API supplied no browser-tab icon — never a stand-in. */
+    /** Falls back to SPECS_FAVICON_URL when the Brand API supplied no browser-tab icon. */
     icon: {
         url: string;
     }[];
@@ -33,7 +35,7 @@ type PolitogyMetadataIcons = {
  *
  * Cached for 60s with revalidation, matching the tokens contract — a Brand edit
  * shows up promptly without defeating caching. Never throws: on any failure it
- * returns no icon entries, so an app can call this unguarded in metadata.
+ * returns the SPECS_FAVICON_URL redirect, so an app can call this unguarded in metadata.
  */
 declare function politogyAppIcons(app: string, init?: {
     baseUrl?: string;
@@ -43,4 +45,4 @@ declare function politogyAppIcons(app: string, init?: {
 /** Pure shaping step — exported for tests and for callers with their own fetch. */
 declare function toMetadataIcons(data: PolitogyIconsResponse | null): PolitogyMetadataIcons;
 
-export { type PolitogyIconVariant, type PolitogyIconsResponse, type PolitogyMetadataIcons, SPECS_ICONS_BASE, VRM_FALLBACK_ICON, politogyAppIcons, toMetadataIcons };
+export { type PolitogyIconVariant, type PolitogyIconsResponse, type PolitogyMetadataIcons, SPECS_FAVICON_URL, SPECS_ICONS_BASE, VRM_FALLBACK_ICON, politogyAppIcons, toMetadataIcons };

package/dist/app-icons.d.ts

@@ -1,4 +1,6 @@
 declare const SPECS_ICONS_BASE = "https://specs.politogyvrm.com/api/icons";
+/** Public 302 to Brand `assets.favicon` (`?kind=apple` → `assets.appleIcon`). */
+declare const SPECS_FAVICON_URL = "https://specs.politogyvrm.com/api/favicon";
 /**
  * @deprecated No longer used and will be removed. It was a hardcoded copy of an
  * old `assets.logoSquare` upload, used as a stand-in favicon — a bundled copy
@@ -17,7 +19,7 @@ type PolitogyIconsResponse = {
 };
 /** Next.js `metadata.icons` shape (a subset — url/rel entries). */
 type PolitogyMetadataIcons = {
-    /** Empty when the Brand API supplied no browser-tab icon — never a stand-in. */
+    /** Falls back to SPECS_FAVICON_URL when the Brand API supplied no browser-tab icon. */
     icon: {
         url: string;
     }[];
@@ -33,7 +35,7 @@ type PolitogyMetadataIcons = {
  *
  * Cached for 60s with revalidation, matching the tokens contract — a Brand edit
  * shows up promptly without defeating caching. Never throws: on any failure it
- * returns no icon entries, so an app can call this unguarded in metadata.
+ * returns the SPECS_FAVICON_URL redirect, so an app can call this unguarded in metadata.
  */
 declare function politogyAppIcons(app: string, init?: {
     baseUrl?: string;
@@ -43,4 +45,4 @@ declare function politogyAppIcons(app: string, init?: {
 /** Pure shaping step — exported for tests and for callers with their own fetch. */
 declare function toMetadataIcons(data: PolitogyIconsResponse | null): PolitogyMetadataIcons;
 
-export { type PolitogyIconVariant, type PolitogyIconsResponse, type PolitogyMetadataIcons, SPECS_ICONS_BASE, VRM_FALLBACK_ICON, politogyAppIcons, toMetadataIcons };
+export { type PolitogyIconVariant, type PolitogyIconsResponse, type PolitogyMetadataIcons, SPECS_FAVICON_URL, SPECS_ICONS_BASE, VRM_FALLBACK_ICON, politogyAppIcons, toMetadataIcons };

package/dist/app-icons.js

@@ -1,5 +1,6 @@
 // src/app-icons.ts
 var SPECS_ICONS_BASE = "https://specs.politogyvrm.com/api/icons";
+var SPECS_FAVICON_URL = "https://specs.politogyvrm.com/api/favicon";
 var VRM_FALLBACK_ICON = "https://lzhzqtzwlwdffxhjjrba.supabase.co/storage/v1/object/public/brand-assets/logo-square/logo-square-mrspraen.png";
 function pick(icons, ...keys) {
   if (!icons) return null;
@@ -34,6 +35,13 @@ function toMetadataIcons(data) {
   const icons = data?.icons;
   const favicon = pick(icons, "favicon-color-square", "favicon-color-round");
   const apple = pick(icons, "ios-color-square", "ios-color-round", "favicon-color-square") ?? favicon;
+  if (!favicon) {
+    return {
+      icon: [{ url: SPECS_FAVICON_URL }],
+      shortcut: [{ url: SPECS_FAVICON_URL }],
+      apple: [{ url: `${SPECS_FAVICON_URL}?kind=apple` }]
+    };
+  }
   const entry = (url) => url ? [{ url: withVersion(url, data) }] : [];
   return {
     icon: entry(favicon),
@@ -42,6 +50,6 @@ function toMetadataIcons(data) {
   };
 }
 
-export { SPECS_ICONS_BASE, VRM_FALLBACK_ICON, politogyAppIcons, toMetadataIcons };
+export { SPECS_FAVICON_URL, SPECS_ICONS_BASE, VRM_FALLBACK_ICON, politogyAppIcons, toMetadataIcons };
 //# sourceMappingURL=app-icons.js.map
 //# sourceMappingURL=app-icons.js.map

package/dist/app-icons.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../src/app-icons.ts"],"names":[],"mappings":";AAuBO,IAAM,gBAAA,GAAmB;AAOzB,IAAM,iBAAA,GACX;AAmBF,SAAS,IAAA,CACP,UACG,IAAA,EACY;AACf,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAG,CAAA,EAAG,GAAA;AACxB,IAAA,IAAI,KAAK,OAAO,GAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT;AASA,eAAsB,gBAAA,CACpB,KACA,IAAA,EACgC;AAChC,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,IAAW,gBAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,MAAM,iBAAA,IAAqB,EAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,IAAA,EAAM,SAAA,IAAa,UAAA,CAAW,KAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAA,EAAI;AAAA;AAAA,MAE9D,IAAA,EAAM,EAAE,UAAA;AAAW,KACL,CAAA;AAChB,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,GAAG,CAAA,EAAA,EAAK,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B;AACF;AASA,SAAS,WAAA,CAAY,KAAa,IAAA,EAA4C;AAC5E,EAAA,MAAM,GAAA,GACJ,OAAO,IAAA,EAAM,OAAA,KAAY,WACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,GACnB,IAAA,EAAM,SAAA,GACJ,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA,IAAK,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GAC1D,EAAA;AACR,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AACjB,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAA,EAAK,GAAG,CAAA,CAAA;AACvD;AAGO,SAAS,gBAAgB,IAAA,EAA2D;AACzF,EAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AAGpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,EAAO,sBAAA,EAAwB,qBAAqB,CAAA;AACzE,EAAA,MAAM,QACJ,IAAA,CAAK,KAAA,EAAO,kBAAA,EAAoB,iBAAA,EAAmB,sBAAsB,CAAA,IAAK,OAAA;AAChF,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAwB,GAAA,GAAM,CAAC,EAAE,GAAA,EAAK,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA,EAAG,IAAI,EAAC;AAClF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAM,OAAO,CAAA;AAAA,IACnB,QAAA,EAAU,MAAM,OAAO,CAAA;AAAA,IACvB,KAAA,EAAO,MAAM,KAAK;AAAA,GACpB;AACF","file":"app-icons.js","sourcesContent":["// ---------------------------------------------------------------------------\n// App icons — favicons and platform icons resolved from the Brand API at\n// RUNTIME, never hand-dropped as static files in an app repo (Global Rules →\n// \"App Icons — Favicons & Browser Icons\").\n//\n// `GET https://specs.politogyvrm.com/api/icons/<app>` returns the FULLY\n// RESOLVED variant grid: the server already walks the fallback chain (exact\n// variant → same-platform color/square → color fallback → the app's base\n// favicon → the global platform icon → the VRM Core logo), and marks each entry\n// `fallback: true` when it is inherited rather than app-specific. So an app that\n// has never uploaded its own icon still gets the platform favicon (Brand\n// `assets.favicon`) from the API, with no per-app defaulting logic.\n//\n// The shell itself carries NO icon image and never substitutes one Brand asset\n// for another (Brand guideline \"Logo standard: use the uploaded Brand assets\n// as-is\"). If the API cannot be reached, or returns no browser-tab icon, this\n// returns no icon entries at all rather than a baked-in stand-in.\n//\n// Server-safe: no React, no client deps. Next apps call this from\n// `generateMetadata()` so the icon updates when Brand changes, without a\n// redeploy of the app.\n// ---------------------------------------------------------------------------\n\nexport const SPECS_ICONS_BASE = 'https://specs.politogyvrm.com/api/icons'\n\n/**\n * @deprecated No longer used and will be removed. It was a hardcoded copy of an\n * old `assets.logoSquare` upload, used as a stand-in favicon — a bundled copy\n * of one Brand asset substituted for another, which the Brand forbids.\n */\nexport const VRM_FALLBACK_ICON =\n  'https://lzhzqtzwlwdffxhjjrba.supabase.co/storage/v1/object/public/brand-assets/logo-square/logo-square-mrspraen.png'\n\nexport type PolitogyIconVariant = { url: string; fallback?: boolean }\n\nexport type PolitogyIconsResponse = {\n  app: string\n  version?: number\n  updatedAt?: string\n  icons: Record<string, PolitogyIconVariant>\n}\n\n/** Next.js `metadata.icons` shape (a subset — url/rel entries). */\nexport type PolitogyMetadataIcons = {\n  /** Empty when the Brand API supplied no browser-tab icon — never a stand-in. */\n  icon: { url: string }[]\n  shortcut?: { url: string }[]\n  apple?: { url: string }[]\n}\n\nfunction pick(\n  icons: Record<string, PolitogyIconVariant> | undefined,\n  ...keys: string[]\n): string | null {\n  if (!icons) return null\n  for (const key of keys) {\n    const hit = icons[key]?.url\n    if (hit) return hit\n  }\n  return null\n}\n\n/**\n * Fetch the resolved icon set for an app and shape it for Next `metadata`.\n *\n * Cached for 60s with revalidation, matching the tokens contract — a Brand edit\n * shows up promptly without defeating caching. Never throws: on any failure it\n * returns no icon entries, so an app can call this unguarded in metadata.\n */\nexport async function politogyAppIcons(\n  app: string,\n  init?: { baseUrl?: string; revalidateSeconds?: number; fetchImpl?: typeof globalThis.fetch },\n): Promise<PolitogyMetadataIcons> {\n  const base = init?.baseUrl ?? SPECS_ICONS_BASE\n  const revalidate = init?.revalidateSeconds ?? 60\n  const doFetch = init?.fetchImpl ?? globalThis.fetch\n  try {\n    const res = await doFetch(`${base}/${encodeURIComponent(app)}`, {\n      // `next.revalidate` is ignored by non-Next fetch implementations.\n      next: { revalidate },\n    } as RequestInit)\n    if (!res.ok) throw new Error(`icons ${app}: ${res.status}`)\n    const data = (await res.json()) as PolitogyIconsResponse\n    return toMetadataIcons(data)\n  } catch {\n    return toMetadataIcons(null)\n  }\n}\n\n/**\n * Cache-buster: stamp the Brand revision onto an icon URL as `?v=<version>`\n * (falling back to the `updatedAt` timestamp). The stored filenames are already\n * content-hashed, but favicons are cached so aggressively by browsers that a new\n * Brand publish can still show stale; a version-keyed URL forces every publish to\n * be treated as a distinct resource. No-op for an unknown rev.\n */\nfunction withVersion(url: string, data: PolitogyIconsResponse | null): string {\n  const rev =\n    typeof data?.version === 'number'\n      ? String(data.version)\n      : data?.updatedAt\n        ? String(Date.parse(data.updatedAt) || '').replace(/\\D/g, '')\n        : ''\n  if (!rev) return url\n  return `${url}${url.includes('?') ? '&' : '?'}v=${rev}`\n}\n\n/** Pure shaping step — exported for tests and for callers with their own fetch. */\nexport function toMetadataIcons(data: PolitogyIconsResponse | null): PolitogyMetadataIcons {\n  const icons = data?.icons\n  // The API has already resolved the chain down to Brand `assets.favicon`\n  // (and `assets.appleIcon` for iOS). Nothing is substituted here.\n  const favicon = pick(icons, 'favicon-color-square', 'favicon-color-round')\n  const apple =\n    pick(icons, 'ios-color-square', 'ios-color-round', 'favicon-color-square') ?? favicon\n  const entry = (url: string | null) => (url ? [{ url: withVersion(url, data) }] : [])\n  return {\n    icon: entry(favicon),\n    shortcut: entry(favicon),\n    apple: entry(apple),\n  }\n}\n"]}
+{"version":3,"sources":["../src/app-icons.ts"],"names":[],"mappings":";AA0BO,IAAM,gBAAA,GAAmB;AAGzB,IAAM,iBAAA,GAAoB;AAO1B,IAAM,iBAAA,GACX;AAmBF,SAAS,IAAA,CACP,UACG,IAAA,EACY;AACf,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,KAAA,MAAW,OAAO,IAAA,EAAM;AACtB,IAAA,MAAM,GAAA,GAAM,KAAA,CAAM,GAAG,CAAA,EAAG,GAAA;AACxB,IAAA,IAAI,KAAK,OAAO,GAAA;AAAA,EAClB;AACA,EAAA,OAAO,IAAA;AACT;AASA,eAAsB,gBAAA,CACpB,KACA,IAAA,EACgC;AAChC,EAAA,MAAM,IAAA,GAAO,MAAM,OAAA,IAAW,gBAAA;AAC9B,EAAA,MAAM,UAAA,GAAa,MAAM,iBAAA,IAAqB,EAAA;AAC9C,EAAA,MAAM,OAAA,GAAU,IAAA,EAAM,SAAA,IAAa,UAAA,CAAW,KAAA;AAC9C,EAAA,IAAI;AACF,IAAA,MAAM,GAAA,GAAM,MAAM,OAAA,CAAQ,CAAA,EAAG,IAAI,CAAA,CAAA,EAAI,kBAAA,CAAmB,GAAG,CAAC,CAAA,CAAA,EAAI;AAAA;AAAA,MAE9D,IAAA,EAAM,EAAE,UAAA;AAAW,KACL,CAAA;AAChB,IAAA,IAAI,CAAC,GAAA,CAAI,EAAA,EAAI,MAAM,IAAI,KAAA,CAAM,CAAA,MAAA,EAAS,GAAG,CAAA,EAAA,EAAK,GAAA,CAAI,MAAM,CAAA,CAAE,CAAA;AAC1D,IAAA,MAAM,IAAA,GAAQ,MAAM,GAAA,CAAI,IAAA,EAAK;AAC7B,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,gBAAgB,IAAI,CAAA;AAAA,EAC7B;AACF;AASA,SAAS,WAAA,CAAY,KAAa,IAAA,EAA4C;AAC5E,EAAA,MAAM,GAAA,GACJ,OAAO,IAAA,EAAM,OAAA,KAAY,WACrB,MAAA,CAAO,IAAA,CAAK,OAAO,CAAA,GACnB,IAAA,EAAM,SAAA,GACJ,OAAO,IAAA,CAAK,KAAA,CAAM,KAAK,SAAS,CAAA,IAAK,EAAE,CAAA,CAAE,OAAA,CAAQ,KAAA,EAAO,EAAE,CAAA,GAC1D,EAAA;AACR,EAAA,IAAI,CAAC,KAAK,OAAO,GAAA;AACjB,EAAA,OAAO,CAAA,EAAG,GAAG,CAAA,EAAG,GAAA,CAAI,QAAA,CAAS,GAAG,CAAA,GAAI,GAAA,GAAM,GAAG,CAAA,EAAA,EAAK,GAAG,CAAA,CAAA;AACvD;AAGO,SAAS,gBAAgB,IAAA,EAA2D;AACzF,EAAA,MAAM,QAAQ,IAAA,EAAM,KAAA;AAGpB,EAAA,MAAM,OAAA,GAAU,IAAA,CAAK,KAAA,EAAO,sBAAA,EAAwB,qBAAqB,CAAA;AACzE,EAAA,MAAM,QACJ,IAAA,CAAK,KAAA,EAAO,kBAAA,EAAoB,iBAAA,EAAmB,sBAAsB,CAAA,IAAK,OAAA;AAChF,EAAA,IAAI,CAAC,OAAA,EAAS;AAGZ,IAAA,OAAO;AAAA,MACL,IAAA,EAAM,CAAC,EAAE,GAAA,EAAK,mBAAmB,CAAA;AAAA,MACjC,QAAA,EAAU,CAAC,EAAE,GAAA,EAAK,mBAAmB,CAAA;AAAA,MACrC,OAAO,CAAC,EAAE,KAAK,CAAA,EAAG,iBAAiB,eAAe;AAAA,KACpD;AAAA,EACF;AACA,EAAA,MAAM,KAAA,GAAQ,CAAC,GAAA,KAAwB,GAAA,GAAM,CAAC,EAAE,GAAA,EAAK,WAAA,CAAY,GAAA,EAAK,IAAI,CAAA,EAAG,IAAI,EAAC;AAClF,EAAA,OAAO;AAAA,IACL,IAAA,EAAM,MAAM,OAAO,CAAA;AAAA,IACnB,QAAA,EAAU,MAAM,OAAO,CAAA;AAAA,IACvB,KAAA,EAAO,MAAM,KAAK;AAAA,GACpB;AACF","file":"app-icons.js","sourcesContent":["// ---------------------------------------------------------------------------\n// App icons — favicons and platform icons resolved from the Brand API at\n// RUNTIME, never hand-dropped as static files in an app repo (Global Rules →\n// \"App Icons — Favicons & Browser Icons\").\n//\n// `GET https://specs.politogyvrm.com/api/icons/<app>` returns the FULLY\n// RESOLVED variant grid: the server already walks the fallback chain (exact\n// variant → same-platform color/square → color fallback → the app's base\n// favicon → the global platform icon → the VRM Core logo), and marks each entry\n// `fallback: true` when it is inherited rather than app-specific. So an app that\n// has never uploaded its own icon still gets the platform favicon (Brand\n// `assets.favicon`) from the API, with no per-app defaulting logic.\n//\n// The shell itself carries NO icon image and never substitutes one Brand asset\n// for another (Brand guideline \"Logo standard: use the uploaded Brand assets\n// as-is\"). If the API cannot be reached, or returns no browser-tab icon, this\n// returns SPECS_FAVICON_URL: Specs' public redirect to Brand `assets.favicon`,\n// which the BROWSER resolves. In production Cloudflare's bot check challenges\n// the server-side fetch below, so this is the usual path there. The link is in\n// the server HTML, so the browser never falls back to /favicon.ico.\n//\n// Server-safe: no React, no client deps. Next apps call this from\n// `generateMetadata()` so the icon updates when Brand changes, without a\n// redeploy of the app.\n// ---------------------------------------------------------------------------\n\nexport const SPECS_ICONS_BASE = 'https://specs.politogyvrm.com/api/icons'\n\n/** Public 302 to Brand `assets.favicon` (`?kind=apple` → `assets.appleIcon`). */\nexport const SPECS_FAVICON_URL = 'https://specs.politogyvrm.com/api/favicon'\n\n/**\n * @deprecated No longer used and will be removed. It was a hardcoded copy of an\n * old `assets.logoSquare` upload, used as a stand-in favicon — a bundled copy\n * of one Brand asset substituted for another, which the Brand forbids.\n */\nexport const VRM_FALLBACK_ICON =\n  'https://lzhzqtzwlwdffxhjjrba.supabase.co/storage/v1/object/public/brand-assets/logo-square/logo-square-mrspraen.png'\n\nexport type PolitogyIconVariant = { url: string; fallback?: boolean }\n\nexport type PolitogyIconsResponse = {\n  app: string\n  version?: number\n  updatedAt?: string\n  icons: Record<string, PolitogyIconVariant>\n}\n\n/** Next.js `metadata.icons` shape (a subset — url/rel entries). */\nexport type PolitogyMetadataIcons = {\n  /** Falls back to SPECS_FAVICON_URL when the Brand API supplied no browser-tab icon. */\n  icon: { url: string }[]\n  shortcut?: { url: string }[]\n  apple?: { url: string }[]\n}\n\nfunction pick(\n  icons: Record<string, PolitogyIconVariant> | undefined,\n  ...keys: string[]\n): string | null {\n  if (!icons) return null\n  for (const key of keys) {\n    const hit = icons[key]?.url\n    if (hit) return hit\n  }\n  return null\n}\n\n/**\n * Fetch the resolved icon set for an app and shape it for Next `metadata`.\n *\n * Cached for 60s with revalidation, matching the tokens contract — a Brand edit\n * shows up promptly without defeating caching. Never throws: on any failure it\n * returns the SPECS_FAVICON_URL redirect, so an app can call this unguarded in metadata.\n */\nexport async function politogyAppIcons(\n  app: string,\n  init?: { baseUrl?: string; revalidateSeconds?: number; fetchImpl?: typeof globalThis.fetch },\n): Promise<PolitogyMetadataIcons> {\n  const base = init?.baseUrl ?? SPECS_ICONS_BASE\n  const revalidate = init?.revalidateSeconds ?? 60\n  const doFetch = init?.fetchImpl ?? globalThis.fetch\n  try {\n    const res = await doFetch(`${base}/${encodeURIComponent(app)}`, {\n      // `next.revalidate` is ignored by non-Next fetch implementations.\n      next: { revalidate },\n    } as RequestInit)\n    if (!res.ok) throw new Error(`icons ${app}: ${res.status}`)\n    const data = (await res.json()) as PolitogyIconsResponse\n    return toMetadataIcons(data)\n  } catch {\n    return toMetadataIcons(null)\n  }\n}\n\n/**\n * Cache-buster: stamp the Brand revision onto an icon URL as `?v=<version>`\n * (falling back to the `updatedAt` timestamp). The stored filenames are already\n * content-hashed, but favicons are cached so aggressively by browsers that a new\n * Brand publish can still show stale; a version-keyed URL forces every publish to\n * be treated as a distinct resource. No-op for an unknown rev.\n */\nfunction withVersion(url: string, data: PolitogyIconsResponse | null): string {\n  const rev =\n    typeof data?.version === 'number'\n      ? String(data.version)\n      : data?.updatedAt\n        ? String(Date.parse(data.updatedAt) || '').replace(/\\D/g, '')\n        : ''\n  if (!rev) return url\n  return `${url}${url.includes('?') ? '&' : '?'}v=${rev}`\n}\n\n/** Pure shaping step — exported for tests and for callers with their own fetch. */\nexport function toMetadataIcons(data: PolitogyIconsResponse | null): PolitogyMetadataIcons {\n  const icons = data?.icons\n  // The API has already resolved the chain down to Brand `assets.favicon`\n  // (and `assets.appleIcon` for iOS). Nothing is substituted here.\n  const favicon = pick(icons, 'favicon-color-square', 'favicon-color-round')\n  const apple =\n    pick(icons, 'ios-color-square', 'ios-color-round', 'favicon-color-square') ?? favicon\n  if (!favicon) {\n    // No resolved icon (API unreachable, or nothing set): let the browser\n    // follow Specs' redirect to the Brand favicon. Never a bundled image.\n    return {\n      icon: [{ url: SPECS_FAVICON_URL }],\n      shortcut: [{ url: SPECS_FAVICON_URL }],\n      apple: [{ url: `${SPECS_FAVICON_URL}?kind=apple` }],\n    }\n  }\n  const entry = (url: string | null) => (url ? [{ url: withVersion(url, data) }] : [])\n  return {\n    icon: entry(favicon),\n    shortcut: entry(favicon),\n    apple: entry(apple),\n  }\n}\n"]}

package/dist/brand-favicon.cjs

@@ -0,0 +1,87 @@
+"use client";
+'use strict';
+
+var react = require('react');
+
+function parseCssUrl(value) {
+  if (!value) return null;
+  const m = /^url\(\s*(['"]?)(.*?)\1\s*\)$/i.exec(value.trim());
+  const url = m?.[2]?.trim();
+  return url && /^https:\/\//i.test(url) ? url : null;
+}
+function readBrandAsset(kind) {
+  if (typeof document === "undefined") return null;
+  try {
+    return parseCssUrl(
+      window.getComputedStyle(document.documentElement).getPropertyValue(`--asset-${kind}`)
+    );
+  } catch {
+    return null;
+  }
+}
+
+// src/lib/brandFavicon.ts
+var BRAND_FAVICON_LINK_ID = "politogy-brand-favicon";
+var BRAND_APPLE_ICON_LINK_ID = "politogy-brand-apple-icon";
+function upsertLink(id, rel, href) {
+  let link = document.getElementById(id);
+  if (!link) {
+    link = document.createElement("link");
+    link.id = id;
+    link.rel = rel;
+  }
+  if (link.getAttribute("href") !== href) link.href = href;
+  const icons = document.head.querySelectorAll(`link[rel~="${rel.split(" ")[0]}"]`);
+  if (icons[icons.length - 1] !== link) document.head.appendChild(link);
+}
+function applyBrandFavicon() {
+  if (typeof document === "undefined") return false;
+  const favicon = readBrandAsset("favicon");
+  if (!favicon) return false;
+  upsertLink(BRAND_FAVICON_LINK_ID, "icon", favicon);
+  const apple = readBrandAsset("apple-icon");
+  if (apple) upsertLink(BRAND_APPLE_ICON_LINK_ID, "apple-touch-icon", apple);
+  return true;
+}
+var RETRY_MS = [0, 250, 1e3, 3e3];
+function watchBrandFavicon() {
+  if (typeof document === "undefined") return () => {
+  };
+  let done = false;
+  const apply = () => {
+    if (!done) applyBrandFavicon();
+  };
+  const sheets = /* @__PURE__ */ new Set();
+  const listen = () => {
+    document.querySelectorAll('link[rel="stylesheet"][href*="api/tokens"]').forEach((l) => {
+      if (sheets.has(l)) return;
+      sheets.add(l);
+      l.addEventListener("load", apply);
+    });
+  };
+  listen();
+  const timers = RETRY_MS.map((ms) => window.setTimeout(apply, ms));
+  const observer = typeof MutationObserver === "undefined" ? null : new MutationObserver(() => {
+    listen();
+    apply();
+  });
+  observer?.observe(document.head, { childList: true });
+  return () => {
+    done = true;
+    sheets.forEach((l) => l.removeEventListener("load", apply));
+    timers.forEach((t) => window.clearTimeout(t));
+    observer?.disconnect();
+  };
+}
+function BrandFavicon() {
+  react.useEffect(() => watchBrandFavicon(), []);
+  return null;
+}
+
+exports.BRAND_APPLE_ICON_LINK_ID = BRAND_APPLE_ICON_LINK_ID;
+exports.BRAND_FAVICON_LINK_ID = BRAND_FAVICON_LINK_ID;
+exports.BrandFavicon = BrandFavicon;
+exports.applyBrandFavicon = applyBrandFavicon;
+exports.watchBrandFavicon = watchBrandFavicon;
+//# sourceMappingURL=brand-favicon.cjs.map
+//# sourceMappingURL=brand-favicon.cjs.map

package/dist/brand-favicon.cjs.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../src/lib/brandAssets.ts","../src/lib/brandFavicon.ts"],"names":["useEffect"],"mappings":";;;;AAmBO,SAAS,YAAY,KAAA,EAAiD;AAC3E,EAAA,IAAI,CAAC,OAAO,OAAO,IAAA;AACnB,EAAA,MAAM,CAAA,GAAI,gCAAA,CAAiC,IAAA,CAAK,KAAA,CAAM,MAAM,CAAA;AAC5D,EAAA,MAAM,GAAA,GAAM,CAAA,GAAI,CAAC,CAAA,EAAG,IAAA,EAAK;AACzB,EAAA,OAAO,GAAA,IAAO,cAAA,CAAe,IAAA,CAAK,GAAG,IAAI,GAAA,GAAM,IAAA;AACjD;AAGO,SAAS,eAAe,IAAA,EAAqC;AAClE,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,IAAA;AAC5C,EAAA,IAAI;AACF,IAAA,OAAO,WAAA;AAAA,MACL,MAAA,CAAO,iBAAiB,QAAA,CAAS,eAAe,EAAE,gBAAA,CAAiB,CAAA,QAAA,EAAW,IAAI,CAAA,CAAE;AAAA,KACtF;AAAA,EACF,CAAA,CAAA,MAAQ;AACN,IAAA,OAAO,IAAA;AAAA,EACT;AACF;;;ACdO,IAAM,qBAAA,GAAwB;AAC9B,IAAM,wBAAA,GAA2B;AAExC,SAAS,UAAA,CAAW,EAAA,EAAY,GAAA,EAAa,IAAA,EAAoB;AAC/D,EAAA,IAAI,IAAA,GAAO,QAAA,CAAS,cAAA,CAAe,EAAE,CAAA;AACrC,EAAA,IAAI,CAAC,IAAA,EAAM;AACT,IAAA,IAAA,GAAO,QAAA,CAAS,cAAc,MAAM,CAAA;AACpC,IAAA,IAAA,CAAK,EAAA,GAAK,EAAA;AACV,IAAA,IAAA,CAAK,GAAA,GAAM,GAAA;AAAA,EACb;AACA,EAAA,IAAI,KAAK,YAAA,CAAa,MAAM,CAAA,KAAM,IAAA,OAAW,IAAA,GAAO,IAAA;AAGpD,EAAA,MAAM,KAAA,GAAQ,QAAA,CAAS,IAAA,CAAK,gBAAA,CAAiB,CAAA,WAAA,EAAc,GAAA,CAAI,KAAA,CAAM,GAAG,CAAA,CAAE,CAAC,CAAC,CAAA,EAAA,CAAI,CAAA;AAChF,EAAA,IAAI,KAAA,CAAM,MAAM,MAAA,GAAS,CAAC,MAAM,IAAA,EAAM,QAAA,CAAS,IAAA,CAAK,WAAA,CAAY,IAAI,CAAA;AACtE;AAOO,SAAS,iBAAA,GAA6B;AAC3C,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,KAAA;AAC5C,EAAA,MAAM,OAAA,GAAU,eAAe,SAAS,CAAA;AACxC,EAAA,IAAI,CAAC,SAAS,OAAO,KAAA;AACrB,EAAA,UAAA,CAAW,qBAAA,EAAuB,QAAQ,OAAO,CAAA;AACjD,EAAA,MAAM,KAAA,GAAQ,eAAe,YAAY,CAAA;AACzC,EAAA,IAAI,KAAA,EAAO,UAAA,CAAW,wBAAA,EAA0B,kBAAA,EAAoB,KAAK,CAAA;AACzE,EAAA,OAAO,IAAA;AACT;AAIA,IAAM,QAAA,GAAW,CAAC,CAAA,EAAG,GAAA,EAAK,KAAM,GAAI,CAAA;AAO7B,SAAS,iBAAA,GAAgC;AAC9C,EAAA,IAAI,OAAO,QAAA,KAAa,WAAA,EAAa,OAAO,MAAM;AAAA,EAAC,CAAA;AACnD,EAAA,IAAI,IAAA,GAAO,KAAA;AACX,EAAA,MAAM,QAAQ,MAAM;AAClB,IAAA,IAAI,CAAC,MAAM,iBAAA,EAAkB;AAAA,EAC/B,CAAA;AAEA,EAAA,MAAM,MAAA,uBAAa,GAAA,EAAqB;AACxC,EAAA,MAAM,SAAS,MAAM;AACnB,IAAA,QAAA,CACG,gBAAA,CAAkC,4CAA4C,CAAA,CAC9E,OAAA,CAAQ,CAAC,CAAA,KAAM;AACd,MAAA,IAAI,MAAA,CAAO,GAAA,CAAI,CAAC,CAAA,EAAG;AACnB,MAAA,MAAA,CAAO,IAAI,CAAC,CAAA;AACZ,MAAA,CAAA,CAAE,gBAAA,CAAiB,QAAQ,KAAK,CAAA;AAAA,IAClC,CAAC,CAAA;AAAA,EACL,CAAA;AACA,EAAA,MAAA,EAAO;AACP,EAAA,MAAM,MAAA,GAAS,SAAS,GAAA,CAAI,CAAC,OAAO,MAAA,CAAO,UAAA,CAAW,KAAA,EAAO,EAAE,CAAC,CAAA;AAChE,EAAA,MAAM,WACJ,OAAO,gBAAA,KAAqB,cACxB,IAAA,GACA,IAAI,iBAAiB,MAAM;AACzB,IAAA,MAAA,EAAO;AACP,IAAA,KAAA,EAAM;AAAA,EACR,CAAC,CAAA;AACP,EAAA,QAAA,EAAU,QAAQ,QAAA,CAAS,IAAA,EAAM,EAAE,SAAA,EAAW,MAAM,CAAA;AACpD,EAAA,OAAO,MAAM;AACX,IAAA,IAAA,GAAO,IAAA;AACP,IAAA,MAAA,CAAO,QAAQ,CAAC,CAAA,KAAM,EAAE,mBAAA,CAAoB,MAAA,EAAQ,KAAK,CAAC,CAAA;AAC1D,IAAA,MAAA,CAAO,QAAQ,CAAC,CAAA,KAAM,MAAA,CAAO,YAAA,CAAa,CAAC,CAAC,CAAA;AAC5C,IAAA,QAAA,EAAU,UAAA,EAAW;AAAA,EACvB,CAAA;AACF;AAGO,SAAS,YAAA,GAAqB;AACnC,EAAAA,eAAAA,CAAU,MAAM,iBAAA,EAAkB,EAAG,EAAE,CAAA;AACvC,EAAA,OAAO,IAAA;AACT","file":"brand-favicon.cjs","sourcesContent":["// Brand assets — logo URLs read at RUNTIME from the Brand token sheet.\n//\n// Brand guideline \"Logo standard: use the uploaded Brand assets as-is\": apps\n// (and the shell) never bundle their own copy of a logo; they read the URLs\n// from the Brand `assets` group. `/api/tokens?format=css` emits each set asset\n// as `--asset-<kebab>: url(\"…\")` on `:root`, and every app already loads that\n// sheet at runtime (see ../runtime-tokens.ts), so the rail logo is resolved\n// from the same live sheet as every other chrome value — a Brand upload swaps\n// the logo in every app without a deploy, and there is nothing to fall back to\n// that could drift.\n\n'use client'\n\nimport { useEffect, useState } from 'react'\n\n/** Brand `assets` keys the chrome renders, by their `--asset-<kebab>` name. */\nexport type BrandAssetKind = 'logo-horizontal' | 'logo-square' | 'favicon' | 'apple-icon'\n\n/** `url(\"https://…\")` / `url(https://…)` → the bare https URL, else null. */\nexport function parseCssUrl(value: string | null | undefined): string | null {\n  if (!value) return null\n  const m = /^url\\(\\s*(['\"]?)(.*?)\\1\\s*\\)$/i.exec(value.trim())\n  const url = m?.[2]?.trim()\n  return url && /^https:\\/\\//i.test(url) ? url : null\n}\n\n/** One Brand asset URL from the live token sheet, or null while it is unset. */\nexport function readBrandAsset(kind: BrandAssetKind): string | null {\n  if (typeof document === 'undefined') return null\n  try {\n    return parseCssUrl(\n      window.getComputedStyle(document.documentElement).getPropertyValue(`--asset-${kind}`),\n    )\n  } catch {\n    return null\n  }\n}\n\nexport type BrandAssets = {\n  /** `assets.logoHorizontal` — the all-white lockup at the top of the rail. */\n  logoHorizontal: string | null\n  /** `assets.logoSquare` — the all-white vrm tile on the collapsed rail. */\n  logoSquare: string | null\n}\n\nconst EMPTY: BrandAssets = { logoHorizontal: null, logoSquare: null }\n\n// The token sheet is a <link> the app appends at startup, so it may still be\n// in flight on first paint. Re-read when it loads, and a few times after, to\n// cover a link that is inserted after this effect ran.\nconst RETRY_MS = [0, 250, 1000, 3000]\n\n/**\n * The Brand logo URLs, resolved after mount (null on the server and until the\n * runtime token sheet has loaded). Callers reserve the logo's box and draw\n * nothing while a value is null — never a stand-in image.\n */\nexport function useBrandAssets(): BrandAssets {\n  const [assets, setAssets] = useState<BrandAssets>(EMPTY)\n  useEffect(() => {\n    let done = false\n    const read = () => {\n      if (done) return\n      const next = {\n        logoHorizontal: readBrandAsset('logo-horizontal'),\n        logoSquare: readBrandAsset('logo-square'),\n      }\n      setAssets((prev) =>\n        prev.logoHorizontal === next.logoHorizontal && prev.logoSquare === next.logoSquare\n          ? prev\n          : next,\n      )\n    }\n    const links = Array.from(\n      document.querySelectorAll<HTMLLinkElement>('link[rel=\"stylesheet\"][href*=\"api/tokens\"]'),\n    )\n    links.forEach((l) => l.addEventListener('load', read))\n    const timers = RETRY_MS.map((ms) => window.setTimeout(read, ms))\n    read()\n    return () => {\n      done = true\n      links.forEach((l) => l.removeEventListener('load', read))\n      timers.forEach((t) => window.clearTimeout(t))\n    }\n  }, [])\n  return assets\n}\n","// Browser-tab icon — Brand `assets.favicon` read at RUNTIME from the Brand\n// token sheet, the same way the rail logo is (./brandAssets).\n//\n// `politogyAppIcons()` (../app-icons) resolves the icon on the SERVER from\n// specs.politogyvrm.com/api/icons/<app>. In production that request comes from\n// a Worker, not a browser, and Cloudflare's bot check answers it with a\n// challenge page, so the metadata comes back with no icon and the tab shows the\n// browser default (or an app's leftover Next.js `favicon.ico` triangle). The\n// token sheet, by contrast, is loaded by the BROWSER in every app, and emits\n// `--asset-favicon` / `--asset-apple-icon` from Brand `assets.*`. Reading those\n// gives every app the Brand's VRM tile with no static file in any repo (Global\n// Rules → App Icons) and no extra request.\n//\n// The link carries a fixed id and is kept the LAST icon link in <head>, so a\n// stale icon from metadata or an old static file never wins over the Brand's.\n\n'use client'\n\nimport { useEffect } from 'react'\n\nimport { readBrandAsset } from './brandAssets'\n\nexport const BRAND_FAVICON_LINK_ID = 'politogy-brand-favicon'\nexport const BRAND_APPLE_ICON_LINK_ID = 'politogy-brand-apple-icon'\n\nfunction upsertLink(id: string, rel: string, href: string): void {\n  let link = document.getElementById(id) as HTMLLinkElement | null\n  if (!link) {\n    link = document.createElement('link')\n    link.id = id\n    link.rel = rel\n  }\n  if (link.getAttribute('href') !== href) link.href = href\n  // Last icon link in <head> wins. Re-appending an already-last node is a no-op\n  // for the browser, so only move it when something was added after it.\n  const icons = document.head.querySelectorAll(`link[rel~=\"${rel.split(' ')[0]}\"]`)\n  if (icons[icons.length - 1] !== link) document.head.appendChild(link)\n}\n\n/**\n * Point the tab icon (and the iOS home-screen icon) at the Brand's uploaded\n * assets. Returns true once the favicon was set; false while the token sheet\n * has not defined `--asset-favicon` yet. Never draws a stand-in.\n */\nexport function applyBrandFavicon(): boolean {\n  if (typeof document === 'undefined') return false\n  const favicon = readBrandAsset('favicon')\n  if (!favicon) return false\n  upsertLink(BRAND_FAVICON_LINK_ID, 'icon', favicon)\n  const apple = readBrandAsset('apple-icon')\n  if (apple) upsertLink(BRAND_APPLE_ICON_LINK_ID, 'apple-touch-icon', apple)\n  return true\n}\n\n// The token sheet is a <link> the app appends at startup, so it may still be in\n// flight on first paint. Re-read when it loads and a few times after.\nconst RETRY_MS = [0, 250, 1000, 3000]\n\n/**\n * Apply the Brand favicon now and keep it applied: on token sheet load, on a\n * few retries, and whenever <head> changes (a client navigation can re-insert\n * metadata icon links after ours). Returns a cleanup function.\n */\nexport function watchBrandFavicon(): () => void {\n  if (typeof document === 'undefined') return () => {}\n  let done = false\n  const apply = () => {\n    if (!done) applyBrandFavicon()\n  }\n  // A token sheet inserted after mount is picked up by the observer below.\n  const sheets = new Set<HTMLLinkElement>()\n  const listen = () => {\n    document\n      .querySelectorAll<HTMLLinkElement>('link[rel=\"stylesheet\"][href*=\"api/tokens\"]')\n      .forEach((l) => {\n        if (sheets.has(l)) return\n        sheets.add(l)\n        l.addEventListener('load', apply)\n      })\n  }\n  listen()\n  const timers = RETRY_MS.map((ms) => window.setTimeout(apply, ms))\n  const observer =\n    typeof MutationObserver === 'undefined'\n      ? null\n      : new MutationObserver(() => {\n          listen()\n          apply()\n        })\n  observer?.observe(document.head, { childList: true })\n  return () => {\n    done = true\n    sheets.forEach((l) => l.removeEventListener('load', apply))\n    timers.forEach((t) => window.clearTimeout(t))\n    observer?.disconnect()\n  }\n}\n\n/** Renders nothing; sets the Brand favicon after mount. PolitogyAppFrame renders it. */\nexport function BrandFavicon(): null {\n  useEffect(() => watchBrandFavicon(), [])\n  return null\n}\n"]}

package/dist/brand-favicon.d.cts

@@ -0,0 +1,18 @@
+declare const BRAND_FAVICON_LINK_ID = "politogy-brand-favicon";
+declare const BRAND_APPLE_ICON_LINK_ID = "politogy-brand-apple-icon";
+/**
+ * Point the tab icon (and the iOS home-screen icon) at the Brand's uploaded
+ * assets. Returns true once the favicon was set; false while the token sheet
+ * has not defined `--asset-favicon` yet. Never draws a stand-in.
+ */
+declare function applyBrandFavicon(): boolean;
+/**
+ * Apply the Brand favicon now and keep it applied: on token sheet load, on a
+ * few retries, and whenever <head> changes (a client navigation can re-insert
+ * metadata icon links after ours). Returns a cleanup function.
+ */
+declare function watchBrandFavicon(): () => void;
+/** Renders nothing; sets the Brand favicon after mount. PolitogyAppFrame renders it. */
+declare function BrandFavicon(): null;
+
+export { BRAND_APPLE_ICON_LINK_ID, BRAND_FAVICON_LINK_ID, BrandFavicon, applyBrandFavicon, watchBrandFavicon };

package/dist/brand-favicon.d.ts

@@ -0,0 +1,18 @@
+declare const BRAND_FAVICON_LINK_ID = "politogy-brand-favicon";
+declare const BRAND_APPLE_ICON_LINK_ID = "politogy-brand-apple-icon";
+/**
+ * Point the tab icon (and the iOS home-screen icon) at the Brand's uploaded
+ * assets. Returns true once the favicon was set; false while the token sheet
+ * has not defined `--asset-favicon` yet. Never draws a stand-in.
+ */
+declare function applyBrandFavicon(): boolean;
+/**
+ * Apply the Brand favicon now and keep it applied: on token sheet load, on a
+ * few retries, and whenever <head> changes (a client navigation can re-insert
+ * metadata icon links after ours). Returns a cleanup function.
+ */
+declare function watchBrandFavicon(): () => void;
+/** Renders nothing; sets the Brand favicon after mount. PolitogyAppFrame renders it. */
+declare function BrandFavicon(): null;
+
+export { BRAND_APPLE_ICON_LINK_ID, BRAND_FAVICON_LINK_ID, BrandFavicon, applyBrandFavicon, watchBrandFavicon };

package/dist/brand-favicon.js

@@ -0,0 +1,4 @@
+"use client";
+export { BRAND_APPLE_ICON_LINK_ID, BRAND_FAVICON_LINK_ID, BrandFavicon, applyBrandFavicon, watchBrandFavicon } from './chunk-BMR5WAWH.js';
+//# sourceMappingURL=brand-favicon.js.map
+//# sourceMappingURL=brand-favicon.js.map

package/dist/brand-favicon.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":[],"names":[],"mappings":"","file":"brand-favicon.js"}

package/dist/{chunk-EN5ANFMB.js → chunk-BA3GITRQ.js}

@@ -1,6 +1,6 @@
-import { PageHeaderView, BreadcrumbBarView, resolveOrgLogoUrl, topBarIconButtonClass, TopBarTooltip, TopBarPanelArrow, NavThemeControl, NAV_DISPLAY_OPTIONS, useTopBarIconSlotGlyph, resolveBrandGlyph, TOPBAR_GLYPH_SIZE, resolveTabGlyph, warnDeprecated, SpeculationRulesScript } from './chunk-Y66PVCZO.js';
-import { readRailPreference, writeRailPreference } from './chunk-7YVJ7HQG.js';
 import { orgIdTail, authBaseUrl } from './chunk-5LO5W7W5.js';
+import { PageHeaderView, BreadcrumbBarView, resolveOrgLogoUrl, topBarIconButtonClass, TopBarTooltip, TopBarPanelArrow, NavThemeControl, NAV_DISPLAY_OPTIONS, useTopBarIconSlotGlyph, resolveBrandGlyph, TOPBAR_GLYPH_SIZE, resolveTabGlyph, warnDeprecated, SpeculationRulesScript } from './chunk-JQ53VZO5.js';
+import { readRailPreference, writeRailPreference } from './chunk-7YVJ7HQG.js';
 import { createContext, useRef, useEffect, useMemo, useState, Fragment as Fragment$1, useContext } from 'react';
 import clsx from 'clsx';
 import { jsx, jsxs, Fragment } from 'react/jsx-runtime';
@@ -2026,5 +2026,5 @@ function NavAppShell({
 }
 
 export { BETA_BANNER_DISMISS_KEY, BreadcrumbBar, CAMPAIGN_FEATURE_AVAILABILITY, NavAppShell, NavBetaBanner, NavSidebar, NavTabStrip, NavTopBar, PageHeader, clearBetaBannerDismissal, envChipClasses, isNavItemActive, modeIdFromLabel, shortEnvLabel, shortUserName, standardNavIcons, standardPolitogyNav };
-//# sourceMappingURL=chunk-EN5ANFMB.js.map
-//# sourceMappingURL=chunk-EN5ANFMB.js.map
+//# sourceMappingURL=chunk-BA3GITRQ.js.map
+//# sourceMappingURL=chunk-BA3GITRQ.js.map