feat(core): derive every brand token from the agency color by contrast

[SishirP17]

applyAgencyTheme overrode three variables and left everything else at the RayHealth defaults:

• --color-on-brand stayed #FFFFFF forever, so a pale agency brand color would produce white-on-pale text app-wide.
• accentColor was read from the database and never applied.
• The set and clear paths listed their variables separately, so they could drift.

This is the part that makes a future home-care agency's color scheme safe rather than lucky.

How it works

theme-resolver.ts derives all 25 brand tokens as a pure function of the agency's colors. Two properties do the work:

• The foreground is chosen, not assumed. --color-on-brand is whichever of white or slate-900 scores higher — measured against every stop of --gradient-brand, not just --color-primary, because a gradient-filled button shows all three.
• The fill moves, not the ink. A color that cannot carry a label is deepened until it can, and the agency's literal color is preserved as --color-brand-raw for logo marks and other text-free surfaces, so the branding survives.

#107480 → primary #107480   (untouched)
#1A5FA8 → primary #1A5FA8   (untouched)
#EE6C2C → primary #CE4C10   "deepened so labels stay readable; original kept for logo/gradient"
#FFD400 → primary #877000
#FFFFFF → primary #737373

Alpha tints solve for their composited result: --color-sidebar-active lowers its alpha until white still clears AA over the dark rail, and the focus ring raises its alpha until it is actually visible on the surface.

resolveAgencyTheme is total — {}, null, garbage, and attempted CSS injection all return a complete AA-clean set. Every emitted value is built from numbers, so no caller-supplied text reaches the CSSOM. 3,753 assertions over 416 brand colors, including pure white, pure black, and mid-grey #808080, which fails against both white and black ink.

Boundary

agencyThemeSchema validates the colors instead of typing them as bare z.string(). findTheme salvages field by field rather than all-or-nothing, so a legacy row with one bad hex keeps its brand name — read-time normalization, no migration.

Two things worth knowing

• The web bundle deep-imports the resolver rather than the package barrel. The barrel re-exports every repository and would drag knex, pg, and ssh2-sftp-client into the browser. Verified absent from the built bundle.
• vitest.config.ts needs its own @rayhealth/core alias because it replaces vite.config.ts rather than merging with it.

Third of five, stacked on #203.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
rayhealth-evv-platform-app	Ready	Preview	Aug 18, 2026 11:01pm