open-multi-agent-kit 0.78.6 → 0.78.8

package/AGENTS.md

@@ -25,7 +25,7 @@ Keep these surfaces aligned when editing init/runtime docs:
 - Reasoning Trace Engine: `src/runtime/reasoning-trace.ts` stores intent, plan, tools, evidence, results, privacy. Consent-aware NLG via `src/runtime/nlg-renderer.ts`.
 - Harness: chat agent mode writes `.omk/runs/<run-id>/chat-agent-harness.json`. Prompts carry compact MCP/skills/hooks counts; read the harness manifest for the full inventory.
 - Evidence: `scripts/run-tests.mjs` and OMK verification surfaces record sanitized MCP/skill/hook resource metadata. Do not emit resource secrets, headers, or raw env values.
-- Architecture doc: `OMK_CLI_V2_RUNTIME_ARCHITECTURE.md` (2058 lines), ~85% implemented.
+- Architecture doc: `docs/OMK_CLI_V2_RUNTIME_ARCHITECTURE.md` (2058 lines), ~85% implemented.
 - Obsidian knowledge base: `/home/yu/.openclaw/workspace/llm-wiki/projects/omk/`
 
 ---

package/CHANGELOG.md

@@ -1,5 +1,43 @@
 # Changelog
 
+## [Unreleased]
+
+## v0.78.8 — persona-token surface cleanup and CI-gated hotfix (2026-06-11)
+
+### Fixed
+
+- Removed exact legacy persona-token strings from source, proof notes, ignore-file comments, doctor allowlists, tests, and published `dist` output while retaining bracketed deploy-exclusion globs and runtime guard coverage.
+- Extended the persona isolation guard to scan publishable artifacts plus tracked source paths for exact legacy identity/override tokens before release.
+
+### Notes
+
+- Supersedes `0.78.7` for package consumers because `0.78.7` still exposed guard-only filename strings in the npm tarball.
+- Stable release claims remain gated on exact-tag CI and registry verification.
+
+## v0.78.7 — README assertions, Fable enablement, and release gates (2026-06-11)
+
+### Added
+
+- **README/NPM assertion assets** — Added packaged `readmeasset/omk-control-surfaces.svg` and `readmeasset/omk-release-assertions.svg`, wired them into README, asset provenance, asset index, and `assets:check`.
+- **Fable/OpenRouter activation coverage** — Added tests documenting `fable`/`fable-5` alias resolution, OpenRouter advisory routing, and the explicit enable + API-key activation contract.
+- **Opt-in append-only memory durability** — `OMK_MEMORY_DURABILITY=legacy|delta` (default `legacy`). Delta mode uses CRC-framed JSONL append + replay with snapshot compaction, avoiding per-write full serialization. Legacy mode remains byte-identical and the default.
+- **Opt-in sandbox writableRoots enforcement** — `assertWritable` with deepest-existing-ancestor realpath resolution denies symlink escapes outside declared writable roots. Safe-default unrestricted when roots are empty; wired into `buildGatedDispatch` only when enforce, roots, resolver, and path are all present.
+
+### Changed
+
+- **Release truthfulness assertions** — README now states the exact package/bin/proof/package-audit assertions used before publish and keeps published-version claims conditional on tagged checks plus registry verification.
+- **Provider/runtime metadata** — Added Anthropic Messages wire API support, direct Anthropic provider metadata, Fable/Opus aliases, and max-thinking coverage for Fable/DuckCoding-style routes while preserving advisory boundaries.
+- **Root-orchestrator chrome** — Reworded OMK entry/HUD/cockpit surfaces around root-orchestrator control, dynamic package/runtime version labels, and Rust Forge independent-control copy.
+- **Performance: hot-path optimizations** — `secret-scanner` `getLineColumn` reduced from O(matches × n) to O(n + matches × log lines) via precomputed newline-offset binary search. Memory store search reduced from O(N²) to O(N + E) one-pass content index; `mutateState` reuses a process-local parsed-state cache guarded by mtime/size/ctime/inode. Routing regex cache (~150× fewer recompiles per node). `runtime-router` precomputes capability scores before sort. `control-loop` six filters collapsed to one bucket pass. `cockpit`/`system24`/`terminal-layout` reduced ANSI strip/regex passes.
+
+### Removed
+
+- **BREAKING: Native (Rust) omk-safety lane** — Removed `crates/omk-safety`, root `Cargo.toml`/`Cargo.lock`, `scripts/build-native.mjs`, `scripts/rust-safety-check.mjs`, `scripts/normalize-native-artifacts.mjs`, `src/util/native-safety.ts`, and native-only tests. Removed npm scripts `rust:build`, `rust:check`, `native:build`, `native:normalize`, `native:no-kimi:turn`, and the shipped `omk-safety` binary. Safety checks are now pure TypeScript. See [ADR-0001](docs/adr/0001-no-native-rust-lane.md).
+
+### Fixed
+
+- **Cockpit color determinism test flake** — Timer-normalized the control-output determinism test to remove wall-clock dependency.
+
 ## v0.78.6 — exclude AdaptOrch skills and MCP install template from package (2026-06-09)
 
 ### Changed

package/MATURITY.md

@@ -1,7 +1,7 @@
 # OMK Command Maturity Matrix
 
 Last updated: 2026-06-07
-Current source version: v0.78.6 (`v1.2` runtime contract family)
+Current source version: v0.78.8 (`v1.2` runtime contract family)
 
 | Level | Meaning |
 |-------|---------|
@@ -76,6 +76,6 @@ Regression Proof Matrix is a release-defense gate, not a stable-release claim. S
 | Native runtime safety | OMK owns the root-orchestrator direction, but native chat must still lock turn-risk inference, approval/sandbox propagation, authority resolution, provider health probes, and DeepSeek read-only enforcement before stable provider-neutral claims. | Treat `docs/native-root-runtime-hardening.md` and `.omk/specs/native-orchestrator-phase1/` as the active hardening contract. |
 | MCP diagnostics | `mcp list/doctor/test` exist; invalid project/global MCP JSON now fails visibly through diagnostics without exposing config contents. | Add machine-readable MCP JSON and structured failure categories for command resolution, timeout, permission, and server health. |
 | Skills and harness templates | `omk skill` exposes current core/TypeScript/review packs, while init templates document project MCP scope, runtime skills, portable `.agents/skills`, and run-scoped harness manifests. | Keep external-inspired skills compact, source-linked, and non-vendored; verify install/sync through `skill-command` tests and package audit. |
-| Release docs and site | README, CHANGELOG, MATURITY, ROADMAP, versioning docs, provider-maturity docs, package audit, and release-gate commands distinguish the `0.78.x` public package line from the `v1.2` runtime contract family while documenting alpha/experimental surfaces, current harness templates, provider limits, and the public project repository at `https://github.com/dmae97/open-multi-agent-kit`. | Treat `npm run release:check`, native safety packaging, tarball install smoke, and CI evidence on the exact commit as the publish/deploy gate before claiming `0.78.6` published or release-ready. |
+| Release docs and site | README, CHANGELOG, MATURITY, ROADMAP, versioning docs, provider-maturity docs, package audit, and release-gate commands distinguish the `0.78.x` public package line from the `v1.2` runtime contract family while documenting alpha/experimental surfaces, current harness templates, provider limits, and the public project repository at `https://github.com/dmae97/open-multi-agent-kit`. | Treat `npm run release:check`, native safety packaging, tarball install smoke, and CI evidence on the exact commit as the publish/deploy gate before claiming `0.78.8` published or release-ready. |
 | Public proof bundles | `omk.proof-bundle.v1`, `npm run proof:check`, `npm run proof:index`, and ten scoped RC hardening bundles now cover no-Kimi, provider/doctor, fallback routing, native safety, contract/version, evidence-block, replay/inspect, and graph-audit axes. Proof integrity includes runId/commit/evidence/decision linkage and per-bundle `sha256sums.txt` artifact hashes. | Keep strengthening proof authenticity with sanitized repo-relative artifacts, non-empty known limitations, and broader provider fallback variants. |
 | Goal planner | Goal lifecycle exists, including continue, generated plan/evidence criteria, and verification. | Expand planner quality scoring and release evidence. |

package/README.md

@@ -39,7 +39,7 @@ Use OMK when one coding agent is not enough: route Codex, OpenCode, Kimi, DeepSe
 - Teams that need MCP-scoped agent execution instead of unrestricted tool access.
 - Agent builders who want routing, fallback, evidence gates, telemetry, and replay.
 
-> Current package source target: `open-multi-agent-kit@0.78.6`.
+> Current package source target: `open-multi-agent-kit@0.78.8`.
 > Public package name: `open-multi-agent-kit` (`@omk/cli` is not the active npm package).
 > Runtime contract family: `v1.2` (contract family, not a stable npm `1.x` release).
 > Release channel: `pre-1.0`.
@@ -63,7 +63,7 @@ omk chat
 
 ## Current release reality
 
-- The public npm line is `open-multi-agent-kit@0.78.x`. The source target is `open-multi-agent-kit@0.78.6`;
+- The public npm line is `open-multi-agent-kit@0.78.x`. The source target is `open-multi-agent-kit@0.78.8`;
   treat npm `latest` as release-truthful only after the tagged release workflow and registry verification both pass.
 - The `v1.2` label in docs is a runtime contract family for the source tree, not a claim that
   an npm `1.2.x` stable release exists.
@@ -88,7 +88,7 @@ Most coding agents optimize for a single prompt/result loop. OMK wraps agent exe
 
 ## OMK//CONTROL visual console
 
-The GitHub visual set presents OMK as a Night City Ops Console: route status, DAG lanes, provider fallback, scoped MCP, evidence gates, and replayable run telemetry. Assets are provenance-covered in [`readmeasset/ASSET_PROVENANCE.md`](readmeasset/ASSET_PROVENANCE.md).
+The GitHub visual set presents OMK as a Night City Ops Console: route status, DAG lanes, provider fallback, scoped MCP, evidence gates, replayable run telemetry, and publish-time assertions. Assets are provenance-covered in [`readmeasset/ASSET_PROVENANCE.md`](readmeasset/ASSET_PROVENANCE.md).
 
 <p align="center">
   <img src="readmeasset/omk_tui.png" alt="OMK//CONTROL terminal dashboard — live DAG lanes, provider routing, MCP health, evidence gates, and telemetry in Night City Ops Console style" width="100%" />
@@ -106,6 +106,10 @@ The GitHub visual set presents OMK as a Night City Ops Console: route status, DA
   <img src="readmeasset/omk-core-loop.svg" alt="OMK core loop: goal to DAG plan to evidence to verify to replay" width="100%" />
 </p>
 
+| Control surfaces | Release assertions |
+| ---------------- | ------------------ |
+| <img src="readmeasset/omk-control-surfaces.svg" alt="OMK control surfaces: CLI, provider router, MCP scope, evidence gate, replay ledger, and package audit" /> | <img src="readmeasset/omk-release-assertions.svg" alt="OMK release assertions: package name, CLI bins, release gates, package-safe exclusions, and registry verification" /> |
+
 ## Install
 
 Requires Node.js `>=20` and npm `>=10`. The [3-minute route](#quickstart-3-minutes) uses the global install; these are the alternatives:
@@ -305,11 +309,12 @@ The npm package is intentionally package-safe:
 | Contract          | Value                                                                                                                                                                                                                          |
 | ----------------- | ------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------ |
 | Package           | [`open-multi-agent-kit`](https://www.npmjs.com/package/open-multi-agent-kit)                                                                                                                                                   |
-| Version           | `0.78.6`                                                                                                                                                                                                                       |
+| Version           | `0.78.8`                                                                                                                                                                                                                       |
 | Runtime contract family | `v1.2`                                                                                                                                                                                                                         |
 | Bins              | `omk`, `omk-project-mcp`, `omk-acp`, `omk-mcp-host`                                                                                                                                                                            |
 | Packaged docs     | `README.md`, `docs/`, `SECURITY.md`, `ROADMAP.md`, `MATURITY.md`, `DESIGN.md`                                                                                                                                                  |
 | Packaged branding | Canonical hero/social/TUI/runtime images plus the curated derivative gallery documented in [`readmeasset/ASSET_INDEX.md`](readmeasset/ASSET_INDEX.md) and [`readmeasset/ASSET_PROVENANCE.md`](readmeasset/ASSET_PROVENANCE.md) |
+| Release assertions | README and package audit assert package name/version, required CLI bins, package-safe file set, local-state exclusions, proof metadata, and registry-verification wording. |
 | Excluded          | source-only tests, scripts, local state, logs, secrets, private runtime directories                                                                                                                                            |
 
 Release checks:
@@ -321,6 +326,14 @@ npm run pack:dry
 npm run audit:package
 ```
 
+What those checks assert before publish:
+
+- `package.json` and `package-lock.json` agree on `open-multi-agent-kit` and the current package version.
+- The npm tarball exposes `omk`, `omk-project-mcp`, `omk-acp`, and `omk-mcp-host` from `dist/` with executable shebangs.
+- README/docs/changelog/release-truthfulness proof metadata mention the same package version and keep `v1.2` scoped to runtime contracts.
+- The packaged file set includes docs, templates, and provenance-covered README assets while excluding source, tests, local `.omk`/`.kimi` state, logs, tarballs, and secret-shaped files.
+- Published-version claims remain conditional until the tagged workflow and npm registry verification both pass.
+
 ## Contract versions
 
 Machine-readable contracts currently include:
@@ -367,6 +380,8 @@ Public copy stays OMK-owned: **OMK//CONTROL**, **NEON GRID ONLINE**, route/evide
 
 Safe by default: child env is sanitized, ambient secrets are dropped, and workspace-write routes require approval. OS-level sandboxing is planned, not claimed; see [SECURITY.md](SECURITY.md).
 
+Safety checks run as pure TypeScript (no native/Rust build step). The former Rust `omk-safety` probe was retired; see [docs/adr/0001-no-native-rust-lane.md](docs/adr/0001-no-native-rust-lane.md).
+
 ## Links
 
 - GitHub: <https://github.com/dmae97/open-multi-agent-kit>

package/dist/brand/night-city.theme.json

@@ -0,0 +1,80 @@
+{
+    "$schema": "../schemas/omk.theme.v1.schema.json",
+    "schemaVersion": "omk.theme.v1",
+    "name": "night-city",
+    "displayName": "OMK//CONTROL — Night City Ops Console",
+    "mode": "dark",
+    "primitives": {
+        "dark": "#070B14",
+        "surface": "#101826",
+        "cyan": "#00D6FF",
+        "mint": "#00FFC2",
+        "magenta": "#FF47B2",
+        "purple": "#9D4EDD",
+        "amber": "#FFB000",
+        "red": "#FF5874",
+        "cream": "#E8F8FF",
+        "muted": "#9DB3C7",
+        "gray": "#758FA8"
+    },
+    "backgrounds": ["dark", "surface"],
+    "semantics": {
+        "route.active": { "color": "cyan", "glyph": "▸", "usage": "text" },
+        "route.fallback": { "color": "amber", "glyph": "↻", "usage": "text" },
+        "route.dead": { "color": "red", "glyph": "✕", "usage": "text" },
+        "evidence.pass": { "color": "mint", "glyph": "✓", "usage": "text" },
+        "evidence.fail": { "color": "red", "glyph": "✗", "usage": "text" },
+        "evidence.pending": { "color": "amber", "glyph": "◐", "usage": "text" },
+        "dag.lane.running": { "color": "cyan", "glyph": "▶", "usage": "text" },
+        "dag.lane.blocked": { "color": "amber", "glyph": "⏸", "usage": "text" },
+        "dag.lane.done": { "color": "mint", "glyph": "●", "usage": "text" },
+        "dag.lane.queued": { "color": "muted", "glyph": "◌", "usage": "text" },
+        "telemetry.info": { "color": "cream", "glyph": "·", "usage": "text" },
+        "telemetry.warn": { "color": "amber", "glyph": "▲", "usage": "text" },
+        "telemetry.error": { "color": "red", "glyph": "✖", "usage": "text" },
+        "control.accent": { "color": "purple", "glyph": "◆", "kind": "chrome", "usage": "indicator" },
+        "control.dim": { "color": "gray", "glyph": "┊", "kind": "chrome", "usage": "text" },
+        "control.fg": { "color": "cream", "kind": "chrome", "usage": "text" },
+        "control.bg": { "color": "dark", "kind": "background", "usage": "background" }
+    },
+    "components": {
+        "statusCard": { "border": "control.accent", "title": "control.fg", "body": "telemetry.info", "meta": "control.dim" },
+        "routerTable": { "active": "route.active", "fallback": "route.fallback", "dead": "route.dead", "header": "control.accent" },
+        "evidenceGate": { "pass": "evidence.pass", "fail": "evidence.fail", "pending": "evidence.pending" },
+        "dagLanes": { "running": "dag.lane.running", "blocked": "dag.lane.blocked", "done": "dag.lane.done", "queued": "dag.lane.queued" },
+        "logStream": { "info": "telemetry.info", "warn": "telemetry.warn", "error": "telemetry.error", "dim": "control.dim" }
+    },
+    "fallback16": {
+        "route.active": "brightCyan",
+        "route.fallback": "brightYellow",
+        "route.dead": "brightRed",
+        "evidence.pass": "brightGreen",
+        "evidence.fail": "brightRed",
+        "evidence.pending": "brightYellow",
+        "dag.lane.running": "brightCyan",
+        "dag.lane.blocked": "brightYellow",
+        "dag.lane.done": "brightGreen",
+        "dag.lane.queued": "white",
+        "telemetry.info": "brightWhite",
+        "telemetry.warn": "brightYellow",
+        "telemetry.error": "brightRed",
+        "control.accent": "brightMagenta",
+        "control.dim": "white",
+        "control.fg": "brightWhite",
+        "control.bg": "black"
+    },
+    "meta": {
+        "provenance": "Canonical Night City palette extracted from readmeasset/ASSET_PROVENANCE.md theme mapping + SVG frequency analysis (proof/theme-2026-06-10/phase0-recon.md). #101826 surface and #9DB3C7 muted promoted from SVG/provenance into primitives; src/brand/palette.ts gray #758FA8 kept as control.dim.",
+        "reservedPrimitives": {
+            "magenta": "#FF47B2 is reserved brand accent, referenced by no semantic role yet, so it is not contrast-gated. If a future role adopts it the theme:check gate applies automatically (quantizes to xterm idx 205 #FF5FAF; CR 7.07/6.39 on quantized dark/surface — passes). See proof/theme-2026-06-10/t3-a11y-review.md §5."
+        },
+        "tierAssumptions": "16-color tier is gated against stock VGA/xterm ANSI values; terminals with remapped ANSI-16 palettes (e.g. Solarized) are outside the contract — glyphs are the safety net. NO_COLOR note: control.dim uses ┊ so logStream info (telemetry.info ·) and dim rows stay distinguishable without color (t3-a11y-review.md §4).",
+        "derivedAssets": [
+            "readmeasset/omk-badges.svg",
+            "readmeasset/omk-core-loop.svg",
+            "readmeasset/omk-evidence-ledger.svg",
+            "readmeasset/omk-logo-mark.svg",
+            "readmeasset/omk-provider-lanes.svg"
+        ]
+    }
+}

package/dist/brand/palette.d.ts

@@ -1,183 +1,79 @@
 /**
- * OMK brand color palette — hex values and conversion helpers.
+ * OMK brand color palette -- compiled from active omk.theme.v1 documents
+ * (theme contract T5b) plus conversion helpers.
+ *
+ * P and BRAND_HEX keep their public object shapes, but shared brand slots are
+ * updated in place when setBrandPaletteTheme() switches the live brand theme.
+ * Night-city remains the default and preserves the legacy RGB/HEX bytes.
  */
-export declare const P: {
-    readonly purple: {
-        readonly r: 157;
-        readonly g: 78;
-        readonly b: 221;
-    };
-    readonly lightPurple: {
-        readonly r: 214;
-        readonly g: 108;
-        readonly b: 255;
-    };
-    readonly darkPurple: {
-        readonly r: 64;
-        readonly g: 18;
-        readonly b: 133;
-    };
-    readonly pink: {
-        readonly r: 255;
-        readonly g: 71;
-        readonly b: 178;
-    };
-    readonly hotPink: {
-        readonly r: 255;
-        readonly g: 71;
-        readonly b: 178;
-    };
-    readonly mint: {
-        readonly r: 0;
-        readonly g: 255;
-        readonly b: 194;
-    };
-    readonly darkMint: {
-        readonly r: 0;
-        readonly g: 196;
-        readonly b: 153;
-    };
-    readonly orange: {
-        readonly r: 255;
-        readonly g: 176;
-        readonly b: 0;
-    };
-    readonly red: {
-        readonly r: 255;
-        readonly g: 88;
-        readonly b: 116;
-    };
-    readonly blue: {
-        readonly r: 0;
-        readonly g: 214;
-        readonly b: 255;
-    };
-    readonly cream: {
-        readonly r: 232;
-        readonly g: 248;
-        readonly b: 255;
-    };
-    readonly dark: {
-        readonly r: 7;
-        readonly g: 11;
-        readonly b: 20;
-    };
-    readonly gray: {
-        readonly r: 117;
-        readonly g: 143;
-        readonly b: 168;
-    };
-    readonly skin: {
-        readonly r: 255;
-        readonly g: 214;
-        readonly b: 102;
-    };
-    readonly rustOrange: {
-        readonly r: 249;
-        readonly g: 115;
-        readonly b: 22;
-    };
-    readonly rustOxide: {
-        readonly r: 124;
-        readonly g: 45;
-        readonly b: 18;
-    };
-    readonly cargoGreen: {
-        readonly r: 0;
-        readonly g: 255;
-        readonly b: 194;
-    };
-    readonly matrixGreen: {
-        readonly r: 0;
-        readonly g: 255;
-        readonly b: 194;
-    };
-    readonly matrixDark: {
-        readonly r: 8;
-        readonly g: 39;
-        readonly b: 31;
-    };
-    readonly matrixRainGreen: {
-        readonly r: 0;
-        readonly g: 255;
-        readonly b: 65;
-    };
-    readonly matrixDeepBg: {
-        readonly r: 0;
-        readonly g: 8;
-        readonly b: 0;
-    };
-    readonly matrixRainDim: {
-        readonly r: 0;
-        readonly g: 95;
-        readonly b: 25;
-    };
-    readonly matrixWarningAmber: {
-        readonly r: 255;
-        readonly g: 176;
-        readonly b: 0;
-    };
-    readonly matrixErrorRed: {
-        readonly r: 255;
-        readonly g: 50;
-        readonly b: 50;
-    };
-    readonly metricsCyan: {
-        readonly r: 6;
-        readonly g: 182;
-        readonly b: 212;
-    };
-    readonly metricsTeal: {
-        readonly r: 20;
-        readonly g: 184;
-        readonly b: 166;
-    };
-    readonly metricsNavy: {
-        readonly r: 10;
-        readonly g: 25;
-        readonly b: 41;
-    };
-    readonly metricsSlate: {
-        readonly r: 30;
-        readonly g: 41;
-        readonly b: 59;
-    };
-    readonly metricsSilver: {
-        readonly r: 203;
-        readonly g: 213;
-        readonly b: 225;
-    };
-    readonly metricsWhite: {
-        readonly r: 241;
-        readonly g: 245;
-        readonly b: 249;
-    };
-    readonly metricsAmber: {
-        readonly r: 245;
-        readonly g: 158;
-        readonly b: 11;
-    };
-    readonly metricsGreen: {
-        readonly r: 34;
-        readonly g: 197;
-        readonly b: 94;
-    };
-    readonly metricsRed: {
-        readonly r: 239;
-        readonly g: 68;
-        readonly b: 68;
-    };
-    readonly metricsBlue: {
-        readonly r: 59;
-        readonly g: 130;
-        readonly b: 246;
-    };
-    readonly metricsViolet: {
-        readonly r: 139;
-        readonly g: 92;
-        readonly b: 246;
-    };
+import type { BrandRgb, BrandThemeName } from "./theme-compiled.js";
+export type { BrandRgb, BrandThemeName } from "./theme-compiled.js";
+export declare function buildBrandPalette(): {
+    purple: BrandRgb;
+    lightPurple: BrandRgb;
+    darkPurple: BrandRgb;
+    pink: BrandRgb;
+    hotPink: BrandRgb;
+    mint: BrandRgb;
+    darkMint: BrandRgb;
+    orange: BrandRgb;
+    red: BrandRgb;
+    blue: BrandRgb;
+    cream: BrandRgb;
+    dark: BrandRgb;
+    gray: BrandRgb;
+    skin: BrandRgb;
+    gridLine: BrandRgb;
+    rustOrange: BrandRgb;
+    rustOxide: BrandRgb;
+    rustEmber: BrandRgb;
+    rustCrimson: BrandRgb;
+    cargoGreen: BrandRgb;
+    matrixGreen: BrandRgb;
+    matrixDark: BrandRgb;
+    matrixRainGreen: BrandRgb;
+    matrixDeepBg: BrandRgb;
+    matrixRainDim: BrandRgb;
+    matrixWarningAmber: BrandRgb;
+    matrixErrorRed: BrandRgb;
+    sparkleWhite: BrandRgb;
+    sparkleGold: BrandRgb;
+    metricsCyan: BrandRgb;
+    metricsTeal: BrandRgb;
+    metricsNavy: BrandRgb;
+    metricsSlate: BrandRgb;
+    metricsSilver: BrandRgb;
+    metricsWhite: BrandRgb;
+    metricsAmber: BrandRgb;
+    metricsGreen: BrandRgb;
+    metricsRed: BrandRgb;
+    metricsBlue: BrandRgb;
+    metricsViolet: BrandRgb;
 };
+export type BrandPalette = ReturnType<typeof buildBrandPalette>;
+export declare function buildBrandHex(palette: BrandPalette): {
+    dark: string;
+    surface: string;
+    cyan: string;
+    mint: string;
+    magenta: string;
+    purple: string;
+    amber: string;
+    red: string;
+    cream: string;
+    muted: string;
+    gray: string;
+    gridLine: string;
+    sparkleWhite: string;
+    sparkleGold: string;
+    rustEmber: string;
+    rustCrimson: string;
+};
+export type BrandHex = ReturnType<typeof buildBrandHex>;
+export declare const P: BrandPalette;
+export declare const BRAND_HEX: BrandHex;
+export declare function setBrandPaletteTheme(name: string | undefined): BrandThemeName;
+export declare function resetBrandPaletteTheme(): BrandThemeName;
 export declare function hexToRgb(hex: string): {
     r: number;
     g: number;