Brand Preview
Build a temporary static dashboard harness from the relevant application components. Then use the bundled runner to render local customer theme fixtures, five by default or all twelve with the full pack. The runner makes no Brand API request. It applies the same application_theme contract that the API returns and labels bundled fixtures as local test data, not live extraction results. Render each preview at its natural dashboard height in one vertical scroll. Do not use a cramped comparison grid as the default view.
Privacy boundary
Keep the repository, preview, report, and configuration on the developer machine.
Do not read .env, .git, node_modules, browser profiles, or files outside the current repository. Do not retrieve live domains. Do not send source code, preview files, local paths, or customer data to Hermai.
Workflow
- Run the bundled
scripts/preview.mjs inspect command from the application root.
- Read only the likely dashboard components and styles. Use mock company and user data. Do not run the application or access its session.
- Present the source files and an
apply, protect, and uncertain surface map.
- Wait for approval before writing
.hermai/. Keep the generated folder ignored by Git.
- Run
scripts/preview.mjs init. Replace the generated harness with a faithful static representation of the dashboard code. Follow harness requirements. Never bind a semantic status color, such as a profit or loss, danger, or success color, to a hermai brand token. Render now warns when a binding's selector name reads as a status color, but that check is a heuristic prompt, not a guarantee. Confirm every flagged binding by hand, and do not rely on the absence of a warning to prove a binding is safe. Give each identity placement one logo variant and keep it in its own parent container; put company name text only where no wordmark renders. Render now warns when a parent container binds more than one data-hermai-logo, or pairs data-hermai-company with a standard variant logo, but treat that warning the same way, a prompt to check by hand, not a guarantee.
- Run
scripts/preview.mjs render as shown in runner details.
- Run
scripts/preview.mjs serve and open its private localhost URL. Do not open index.html in a code editor. Scroll through each complete dashboard before summarizing overflow, contrast, long name, missing logo, and fallback results.
- Verify that long company names, code, API keys, and adjacent actions stay inside their cards at the narrowest preview width. Treat overflow as a harness defect before proposing application changes.
- Treat a correction such as "leave navigation neutral" as a protected surface. Update only the temporary harness and render again.
- Show the proposed application changes separately. Do not edit application source until the developer approves implementation.
Mapping policy
Apply only approved semantic surfaces:
- Customer logo and company name in identity surfaces, with standard, compact, and on dark slots.
- Primary actions, selected navigation, active tabs, links, focus indicators, progress, one nonsemantic data series, and customer context cards.
- Onboarding or empty state tints and nonsemantic badges when text remains readable.
Protect errors, warnings, destructive actions, semantic status colors, user photos, integration logos, ordinary text, code, API keys, and the application canvas. Keep semantic chart colors neutral. A raw Brand API response provides selected identity slots and an application theme. Do not ask the caller to rank logos or colors. Never invent a customer accent. When application_theme.mode is fallback, preserve the host theme and label Fallback applied.
brand.description, when present, is prefill material for an operator editable form field only, never published, customer facing, uneditable copy. Bind it only with data-hermai-description on a textarea, an input, or an explicitly contenteditable element. See harness requirements for the full rule and its reasons.
Never pair a real company name with a fabricated logo or guessed brand asset. A real company fixture must come from a saved Hermai Brand API response and retain its provenance. Synthetic fixtures must use fictional names and reserved .test domains.
Ask one focused question if the route, selector, or token mapping is uncertain. Do not replace raw colors globally. Label a no accent result as Fallback applied.
Approval boundaries
Inspection is read only. Preview writes only under .hermai/. It does not need a local server, login, browser session, or application runtime.
Do not install a dependency, write application source code, commit, push, deploy, or share an artifact unless the developer separately asks.
1---2name: brand-preview3description: Build a private code based preview of a local React or Next.js dashboard across Hermai's bundled customer brand test pack. Use when a developer wants to test automated customer branding, inspect dashboard components, choose safe brand surfaces, or review a white label experience without login, API credits, or source upload.4---56# Brand Preview78Build a temporary static dashboard harness from the relevant application components. Then use the bundled runner to render local customer theme fixtures, five by default or all twelve with the full pack. The runner makes no Brand API request. It applies the same `application_theme` contract that the API returns and labels bundled fixtures as local test data, not live extraction results. Render each preview at its natural dashboard height in one vertical scroll. Do not use a cramped comparison grid as the default view.910## Privacy boundary1112Keep the repository, preview, report, and configuration on the developer machine.1314Do not read `.env`, `.git`, `node_modules`, browser profiles, or files outside the current repository. Do not retrieve live domains. Do not send source code, preview files, local paths, or customer data to Hermai.1516## Workflow17181. Run the bundled `scripts/preview.mjs inspect` command from the application root.192. Read only the likely dashboard components and styles. Use mock company and user data. Do not run the application or access its session.203. Present the source files and an `apply`, `protect`, and `uncertain` surface map.214. Wait for approval before writing `.hermai/`. Keep the generated folder ignored by Git.225. Run `scripts/preview.mjs init`. Replace the generated harness with a faithful static representation of the dashboard code. Follow [harness requirements](references/harness.md). Never bind a semantic status color, such as a profit or loss, danger, or success color, to a hermai brand token. Render now warns when a binding's selector name reads as a status color, but that check is a heuristic prompt, not a guarantee. Confirm every flagged binding by hand, and do not rely on the absence of a warning to prove a binding is safe. Give each identity placement one logo variant and keep it in its own parent container; put company name text only where no wordmark renders. Render now warns when a parent container binds more than one `data-hermai-logo`, or pairs `data-hermai-company` with a standard variant logo, but treat that warning the same way, a prompt to check by hand, not a guarantee.236. Run `scripts/preview.mjs render` as shown in [runner details](references/runner.md).247. Run `scripts/preview.mjs serve` and open its private localhost URL. Do not open `index.html` in a code editor. Scroll through each complete dashboard before summarizing overflow, contrast, long name, missing logo, and fallback results.258. Verify that long company names, code, API keys, and adjacent actions stay inside their cards at the narrowest preview width. Treat overflow as a harness defect before proposing application changes.269. Treat a correction such as "leave navigation neutral" as a protected surface. Update only the temporary harness and render again.2710. Show the proposed application changes separately. Do not edit application source until the developer approves implementation.2829## Mapping policy3031Apply only approved semantic surfaces:3233* Customer logo and company name in identity surfaces, with standard, compact, and on dark slots.34* Primary actions, selected navigation, active tabs, links, focus indicators, progress, one nonsemantic data series, and customer context cards.35* Onboarding or empty state tints and nonsemantic badges when text remains readable.3637Protect errors, warnings, destructive actions, semantic status colors, user photos, integration logos, ordinary text, code, API keys, and the application canvas. Keep semantic chart colors neutral. A raw Brand API response provides selected identity slots and an application theme. Do not ask the caller to rank logos or colors. Never invent a customer accent. When `application_theme.mode` is `fallback`, preserve the host theme and label `Fallback applied`.3839`brand.description`, when present, is prefill material for an operator editable form field only, never published, customer facing, uneditable copy. Bind it only with `data-hermai-description` on a `textarea`, an `input`, or an explicitly `contenteditable` element. See [harness requirements](references/harness.md) for the full rule and its reasons.4041Never pair a real company name with a fabricated logo or guessed brand asset. A real company fixture must come from a saved Hermai Brand API response and retain its provenance. Synthetic fixtures must use fictional names and reserved `.test` domains.4243Ask one focused question if the route, selector, or token mapping is uncertain. Do not replace raw colors globally. Label a no accent result as `Fallback applied`.4445## Approval boundaries4647Inspection is read only. Preview writes only under `.hermai/`. It does not need a local server, login, browser session, or application runtime.4849Do not install a dependency, write application source code, commit, push, deploy, or share an artifact unless the developer separately asks.
hermai-ai