Merge pull request 'ci: build on the shared ci-workflows workflow' (#179) from ci/ci-workflows into develop

The Selenium ITs need a headless Chrome and the HTTPS React dev server on
:3001. Move the prebuild into scripts/ci-prebuild.sh, which also starts the
dev server (HTTPS, port 3001, backend proxy 8001) the way the qqq-orb
frontend-material pipeline did, and treat CI=true like QQQ_SELENIUM_HEADLESS
(and like CIRCLECI for waitForever) so the tests run headless on any CI.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

.circleci/config.yml

@@ -1,69 +0,0 @@
----
-version: 2.1
-
-orbs:
-  qqq-orb: kingsrook/qqq-orb@0.3.11
-
-workflows:
-  test_only:
-    jobs:
-      - qqq-orb/mvn_frontend_test_only:
-          context: [qqq-maven-registry-credentials]
-          filters:
-            branches:
-              ignore: /(develop|main|release/.*|hotfix/.*)/
-            tags:
-              only: []
-
-  publish_snapshot:
-    jobs:
-      - qqq-orb/mvn_frontend_publish:
-          context: [qqq-maven-registry-credentials]
-          branch_type: snapshot
-          filters:
-            branches:
-              only:
-                - develop
-
-  publish_feature:
-    jobs:
-      - qqq-orb/mvn_frontend_publish:
-          context: [qqq-maven-registry-credentials]
-          branch_type: feature
-          filters:
-            branches:
-              only:
-                - feature/.*
-            tags:
-              only: [/publish.*/]
-
-  publish_release_candidate:
-    jobs:
-      - qqq-orb/mvn_frontend_publish:
-          context: [qqq-maven-registry-credentials]
-          branch_type: release_candidate
-          filters:
-            branches:
-              only:
-                - /release\/.*/
-
-  publish_release:
-    jobs:
-      - qqq-orb/mvn_frontend_publish:
-          context: [qqq-maven-registry-credentials]
-          branch_type: release
-          filters:
-            branches:
-              ignore: /.*/
-            tags:
-              only: [/v.*/]
-
-  publish_hotfix_release:
-    jobs:
-      - qqq-orb/mvn_frontend_publish:
-          context: [qqq-maven-registry-credentials]
-          branch_type: hotfix
-          filters:
-            branches:
-              only:
-                - /hotfix\/.*/

.claude-context

@@ -0,0 +1,60 @@
+# Claude Context File - QQQ Frontend Material Dashboard
+# This file helps Claude Code quickly orient itself when starting a new session
+
+## Project Overview
+- **Name:** QQQ Frontend Material Dashboard
+- **Type:** React 18 + TypeScript hybrid Maven project
+- **Purpose:** Default UI for QQQ low-code application framework
+- **Version:** 0.28.3-SNAPSHOT
+- **Core Dependency:** @qrunio/qqq-frontend-core
+
+## Technology Stack
+- React 18.0.0, TypeScript 4.9.4
+- Material-UI (MUI) v5.11.1
+- Formik + Yup for forms
+- React Router v6
+- Maven + frontend-maven-plugin for builds
+- Node.js 18.17.0 (via Maven)
+
+## Key Directories
+- `src/qqq/pages/` - Page components (RecordQuery, RecordView, etc.)
+- `src/qqq/components/` - Reusable components
+- `src/qqq/utils/qqq/Client.ts` - API client singleton
+- `src/qqq/authorization/` - Pluggable auth modules
+- `src/qqq/assets/theme*/` - Light/dark theming
+
+## Code Style (ESLint enforced)
+- 3-space indentation
+- Double quotes
+- Allman brace style (opening brace on new line)
+- Functional components with hooks
+- React Context for state (no Redux)
+
+## Development Commands
+```bash
+npm run install:legacy    # Install with --legacy-peer-deps
+npm start                 # Dev server on port 3000
+npm run build             # Production build
+mvn clean package         # Full Maven build with embedded frontend
+```
+
+## Important Patterns
+1. **Metadata-driven UI** - Components render from QQQ field/table metadata
+2. **Path-agnostic SPA** - Detects base path from script location (PathUtils.ts)
+3. **Dynamic components** - useDynamicComponents() loads from qqq-frontend-core
+4. **Modal stack** - QContext tracks open modals with push/pop
+5. **API client** - Always use Client.getInstance(), never hardcode paths
+
+## Recent Work (Dec 2024)
+- Row Builder widget with drag & drop
+- Field As Widget (adornmentType=widget)
+- Multiple SPA support (path-agnostic routing)
+
+## Related Resources
+- Backend: /Users/james.maes/Git.Local/QRun-IO/qqq/
+- User AI config: ~/.ai/ (Nix-managed)
+- QQQ CODE_STYLE.md for Java conventions
+
+## CI/CD
+- CircleCI with kingsrook/qqq-orb
+- develop -> snapshot, release/* -> RC, tags -> production

.gitea/workflows/build.yaml

@@ -0,0 +1,12 @@
+name: build
+on:
+  push:
+jobs:
+  maven:
+    uses: self:KofTwentyTwo/ci-workflows/.gitea/workflows/maven.yaml@v1
+    secrets: inherit
+    with:
+      # Selenium ITs need the Chrome-capable image; the React build is packaged into the jar.
+      browsers: true
+      node-version: '22.20.0'
+      prebuild: bash scripts/ci-prebuild.sh

.github/CODEOWNERS

@@ -0,0 +1 @@
+* @KofTwentyTwo

.github/CONTRIBUTING.md

@@ -43,7 +43,7 @@ This repository does NOT contain:
 
 ### Prerequisites
 
-- **Node.js**: LTS version (18.x or higher)
+- **Node.js**: LTS version (20.x or higher)
 - **npm**: 8.x or higher
 - **Git**: For version control
 - **QQQ Server**: Running instance for testing
@@ -154,7 +154,7 @@ When reporting frontend-specific issues, include:
 
 ## 📄 License
 
-By contributing to this project, you agree that your contributions will be licensed under the same license as the project (GNU Affero General Public License v3.0).
+By contributing to this project, you agree that your contributions will be licensed under the same license as the project (Apache License, Version 2.0).
 
 ## 🙏 Thank You
 

.github/release.yml

@@ -0,0 +1,38 @@
+# GitHub Release Configuration
+# Auto-generates release notes from PR labels
+
+changelog:
+  exclude:
+    labels:
+      - ignore-for-release
+      - duplicate
+      - invalid
+    authors:
+      - dependabot
+      - dependabot[bot]
+  categories:
+    - title: Breaking Changes
+      labels:
+        - breaking-change
+        - breaking
+    - title: New Features
+      labels:
+        - enhancement
+        - feature
+    - title: Bug Fixes
+      labels:
+        - bug
+        - fix
+    - title: Performance Improvements
+      labels:
+        - performance
+    - title: Documentation
+      labels:
+        - documentation
+        - docs
+    - title: Dependencies
+      labels:
+        - dependencies
+    - title: Other Changes
+      labels:
+        - "*"

.github/workflows/codeql.yml

@@ -0,0 +1,23 @@
+name: CodeQL
+'on':
+  push:
+    branches:
+    - main
+    - develop
+    - release/**
+    - hotfix/**
+  pull_request: {}
+  schedule:
+  - cron: 41 16 * * 0
+  workflow_dispatch: {}
+permissions:
+  contents: read
+  actions: read
+  security-events: write
+  packages: read
+concurrency:
+  group: codeql-${{ github.event.pull_request.number || github.ref }}
+  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
+jobs:
+  analyze:
+    uses: QRun-IO/qqq-orb/.github/workflows/qbit-codeql.yml@c288a8864fe9054f68410e1d78f5863aea4c4d22

.gitignore

@@ -17,6 +17,8 @@ yalc.lock
 
 # testing
 /coverage
+/playwright-report
+/test-results
 
 # production
 /build
@@ -26,6 +28,7 @@ yalc.lock
 
 # misc
 .DS_Store
+.claude/
 .env.local
 .env.development.local
 .env.test.local

.gitleaksignore

@@ -0,0 +1,4 @@
+
+
+# Reviewed findings committed before the Gitea migration; exact historical fingerprints only.
+267580b44babf4935c152da8fa2320d6059105f3:src/qqq/components/processes/GoogleDriveFolderPicker.tsx:gcp-api-key:43

CHANGELOG.md

@@ -1,58 +1,99 @@
 # Changelog
 
-All notable changes to QBit User Role Permissions will be documented in this file.
+All notable changes to QQQ Frontend Material Dashboard will be documented in this file.
 
 The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/)
 and this project adheres to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [Unreleased]
 
-### Added
-- Comprehensive README documentation following QQQ sub repo standards
-- Standard GitHub files (LICENSE, CHANGELOG, CONTRIBUTING, SECURITY, CODE_OF_CONDUCT)
-- Proper project structure and documentation
+
+## [0.35.0] - 2025-12-29
 
 ### Changed
-- Updated README to follow QQQ framework standards
-- Improved project documentation and structure
-- Enhanced GitHub repository setup
-
-## [0.30.0-SNAPSHOT] - 2024-01-XX
+- Upgraded to Java 21
+- Updated qqq-orb to 0.5.0 for Java 21 CI support
+- Updated qqq.version dependency to 0.35.0
+- Updated license to AGPL-3.0 with QRun-IO copyright
 
 ### Added
-- Initial QBit implementation for user role permissions
-- Database schema for users, roles, and permissions
-- Java classes for User, Role, Permission, UserRole, and RolePermission
-- Integration with QQQ Backend Core framework
-- H2 database support for testing
-- JUnit 5 test framework integration
-- AssertJ assertions for testing
-- Checkstyle configuration for code quality
+- Row builder widget with drag & drop reordering support
+- Field-as-widget adornment support for custom field UI rendering
+- Path-agnostic SPA support for multiple hosting paths
+- OAuth2 authentication flow with dynamic base path support
+- Pluggable themes design documentation
+
+### Fixed
+- Boolean equals-false filter being lost when saved as a view
+- Null pointer when setting up grid column models without table path
+- Query operator labels showing inaccurate 'or equals' text
+- Record sidebar min-height to prevent shrinking on short screens
+
+## [0.25.0] - 2025-05-20
+
+### Added
+- OAuth2 authentication module
+- Banner support for system-wide notifications
+- Query-param default process values as JSON object
+- Min/max input record validation alerts for processes
 
 ### Changed
-- Initial public release of QBit User Role Permissions
-- Established QBit development standards
-- Created modular architecture for permission management
+- Refactored authentication handling to pass metadata into App
+- Improved goto dialog behavior for empty string fields
 
----
+### Fixed
+- Goto fields quick bug fix
+- Full-width file upload adornment for lg-size fields
 
-## 📚 For Detailed Information
+## [0.24.0] - 2025-03-06
 
-**📖 [Complete Documentation Wiki](https://github.com/Kingsrook/qqq/wiki)** - Start here for comprehensive guides
-- **[🏠 Home](https://github.com/Kingsrook/qqq/wiki/Home)** - Project overview and quick start
-- **[🚀 Release Flow](https://github.com/Kingsrook/qqq/wiki/Release-Flow)** - Detailed release process
-- **[🏷️ Changelog & Tagging](https://github.com/Kingsrook/qqq/wiki/Changelog-and-Tagging)** - Commit conventions and release notes
-- **[🔧 Developer Onboarding](https://github.com/Kingsrook/qqq/wiki/Developer-Onboarding)** - Setup and contribution guide
+### Added
+- SFTP and headless bulk load support
+- Dynamic URL support for blob downloads
+- Field column width support on view and edit forms
+- Default values for new child records from parent fields
+- Filter JSON field improvements with preview
 
-## 🔄 Version Compatibility
+### Changed
+- Removed textTransform="capitalize" from page headers
+- Added LONG to types that get numeric operators
 
-QBit User Role Permissions follows semantic versioning:
-- **MAJOR** versions may contain breaking changes
-- **MINOR** versions add new functionality (backward compatible)
-- **PATCH** versions contain bug fixes (backward compatible)
+### Fixed
+- Blob download URLs when not using dynamic URL
+- Child record dashboard widget force reload on removal
 
-For detailed compatibility information, see [QQQ Compatibility Matrix](https://github.com/Kingsrook/qqq/wiki/Compatibility-Matrix).
+## [0.23.0] - 2024-11-22
 
----
+### Added
+- Mobile-first UI/UX improvements
+- Ad-hoc composite/block widgets
+- Non-linear process flow support
+- Child record widget data display
+- Generate labels POC
 
-**Thank you for using QBit User Role Permissions!** 🚀
+### Changed
+- Updated block widget rendering for Android app compatibility
+- Added proxy for /qqq/* versioned middleware
+- Improved next/submit handling for validation screens
+
+### Fixed
+- Filter-as-widget dropping possible-value fields with defaultFilter
+- Non-blob file downloads in value utils
+
+## [0.22.0] - 2024-09-04
+
+### Added
+- Query filter widget preview functionality
+- Timezone conversion for date formatting
+
+### Changed
+- Default operator for DATE fields changed to equals
+- Added tabular-nums font variant for counting numbers
+
+### Fixed
+- Possible value filter bug with use-case handling
+- Date query bugs with timezone conversion
+
+## [0.21.0] - 2024-08-23
+
+- Initial tracked release

CLAUDE.md

@@ -0,0 +1,335 @@
+# CLAUDE.md
+
+This file provides guidance to Claude Code (claude.ai/code) when working with code in this repository.
+
+## Build & Development Commands
+
+```bash
+# Install dependencies (required due to peer dependency conflicts)
+npm run install:legacy
+
+# Development server (http://localhost:3000)
+npm start
+
+# Production build
+npm run build
+
+# Full Maven build (frontend + Java packaging)
+mvn clean package -Pci
+
+# Run tests
+npm test
+
+# Type checking
+npm run type-check
+
+# Linting
+npm run lint
+npm run lint:fix
+```
+
+## Architecture Overview
+
+This is a **metadata-driven React dashboard** that dynamically generates UI from QQQ backend metadata. The backend defines tables, processes, and apps; this frontend renders them without per-entity frontend code.
+
+### Data Flow
+
+```
+QQQ Backend (Java)
+    │
+    ▼ /metaData endpoint
+@qrunio/qqq-frontend-core (npm)
+    │ TypeScript models (QInstance, QTableMetaData, etc.)
+    ▼
+qqq-frontend-material-dashboard
+    │ Dynamic route generation
+    ▼
+MUI components + generated screens
+```
+
+### Key Entry Points
+
+- `src/App.tsx` - Main app, authentication, route generation from metadata
+- `src/QContext.tsx` - Global state (accentColor, tableMetaData, modalStack, branding)
+- `src/qqq/utils/qqq/Client.ts` - Singleton wrapper for `@qrunio/qqq-frontend-core` API client
+- `src/qqq/components/legacy/Theme.ts` - MUI theme configuration
+
+### Source Structure
+
+```
+src/qqq/
+├── assets/theme/          # MUI theme tokens (colors, typography, shadows)
+│   ├── base/              # Design tokens: colors.ts, typography.ts, boxShadows.ts
+│   └── components/        # 55 MUI component style overrides
+├── components/
+│   ├── horseshoe/         # Core layout: SideNav, NavBar, Footer, Breadcrumbs
+│   ├── forms/             # DynamicForm, EntityForm, field components
+│   ├── widgets/           # Dashboard widgets, charts, statistics
+│   ├── query/             # Table filtering components
+│   └── legacy/            # Material Dashboard 2 PRO base components, Theme.ts
+├── pages/
+│   ├── apps/              # App home pages
+│   ├── records/           # CRUD screens: query/, create/, edit/, view/
+│   └── processes/         # ProcessRun, ReportRun
+├── authorization/         # Auth0, OAuth2, Anonymous auth modules
+├── context/               # MaterialUIControllerProvider
+├── styles/                # qqq-override-styles.css, globals.scss
+└── utils/qqq/             # Client.ts, ProcessUtils, TableUtils
+```
+
+### Route Generation
+
+Routes are dynamically created from `QInstance.appTree` metadata in `App.tsx`:
+
+- Apps become sidebar navigation entries
+- Tables get CRUD routes: `/app/{table}`, `/app/{table}/create`, `/app/{table}/:id`, `/app/{table}/:id/edit`
+- Processes get execution routes under their parent table or app
+
+## Cross-Repository Dependencies
+
+This project is part of a three-repo system:
+
+| Repository | Artifact | Current Version |
+|------------|----------|-----------------|
+| qqq (backend-core) | `com.kingsrook.qqq:qqq-backend-core` | `0.36.0` |
+| qqq-frontend-core | `@qrunio/qqq-frontend-core` | `1.4.2` |
+| qqq-frontend-material-dashboard | `com.kingsrook.qqq:qqq-frontend-material-dashboard` | `0.36.0-RC.4` |
+
+**Dependency order for commits/publishes:** backend-core → frontend-core → dashboard
+
+## Dependencies
+
+### Core Dependencies
+
+- `@qrunio/qqq-frontend-core` - QQQ data models and API client (no UI)
+- `@mui/material` 5.11.1 - Component library
+- `@mui/x-data-grid-pro` - Data grid (requires license key)
+- `react-router-dom` 6.x - Routing
+
+### Authentication
+
+- `@auth0/auth0-react` - Auth0 integration
+- `oidc-client-ts` + `react-oidc-context` - OAuth2/OIDC
+
+### Peer Dependency Note
+
+This project requires `--legacy-peer-deps` due to React 18 conflicts with some MUI dependencies. Always use `npm run install:legacy` for installation.
+
+## Environment Variables
+
+```env
+REACT_APP_QQQ_API_BASE_URL=https://your-qqq-server.com/api
+REACT_APP_MATERIAL_UI_LICENSE_KEY=your-mui-license
+REACT_APP_AUTH0_DOMAIN=your-domain.auth0.com
+REACT_APP_AUTH0_CLIENT_ID=your-client-id
+```
+
+## Context Providers
+
+The app uses two main context providers:
+
+1. **MaterialUIControllerProvider** (`src/qqq/context/index.tsx`)
+   - `miniSidenav`, `sidenavColor`, `darkMode`, `direction`
+
+2. **QContext** (`src/QContext.tsx`)
+   - `accentColor`, `accentColorLight` - Theme colors
+   - `tableMetaData`, `tableProcesses` - Current table context
+   - `modalStack` - Nested modal management
+   - `branding` - Backend branding metadata
+   - `pathToLabelMap` - Route breadcrumb labels
+
+## Working with QQQ Backend
+
+The dashboard expects a QQQ backend serving:
+- `GET /metaData` - Returns `QInstance` with apps, tables, processes, branding
+- `GET /qqq/v1/*` - CRUD operations, process execution
+
+The `Client.ts` singleton handles all API communication and 401 redirects to logout.
+
+## Backend Asset Overlay System
+
+QQQ backend supports a `material-dashboard-overlay/` directory for serving custom static assets (logos, icons, images) alongside the dashboard.
+
+### How It Works
+
+1. **Backend setup** (in your QQQ Java project):
+   ```
+   src/main/resources/material-dashboard-overlay/
+   ├── my-logo.png
+   ├── my-icon.png
+   └── other-assets/
+   ```
+
+2. **Branding configuration** (in Java MetaDataProvider):
+   ```java
+   qInstance.setBranding(new QBrandingMetaData()
+      .withLogo("/my-logo.png")
+      .withIcon("/my-icon.png")
+      .withAccentColor("#1976D2")
+      .withAppName("My App"));
+   ```
+
+3. **Frontend resolution**: Assets are served at web root, and `resolveAssetUrl()` in `PathUtils.ts` handles base path resolution.
+
+## Testing
+
+### Visual Regression Tests (Playwright)
+
+18 Playwright screenshot tests verify UI appearance doesn't regress. Uses **dual-platform snapshots** for CI (Linux) and local development (macOS).
+
+```bash
+# Run visual regression tests (uses platform-appropriate snapshots automatically)
+npm run e2e
+
+# Regenerate Linux snapshots (for CI) - requires Docker
+./scripts/update-snapshots-linux.sh
+
+# Regenerate macOS snapshots (for local dev)
+./scripts/update-snapshots-mac.sh
+```
+
+Key files:
+- `playwright.config.ts` - Configuration with `{platform}` in snapshot paths
+- `e2e/fixture-server.js` - Node.js server for fixture JSON (port 8001)
+- `e2e/tests/visual-regression.spec.ts` - 18 screenshot tests
+- `e2e/snapshots/.../linux/` - Linux snapshots (for CI)
+- `e2e/snapshots/.../darwin/` - macOS snapshots (for local dev)
+
+**Dual-Platform Workflow:** Playwright automatically selects the correct snapshots based on platform. Update both when making visual changes.
+
+### Selenium Integration Tests
+
+Selenium tests use a two-server setup:
+- **React dev server** on port 3001 - serves the dashboard frontend
+- **Javalin mock server** on port 8001 - serves fixture JSON responses
+
+```bash
+# Manual run (requires React server running)
+PORT=3001 REACT_APP_PROXY_LOCALHOST_PORT=8001 npm start &
+QQQ_SELENIUM_HEADLESS=true mvn test -Dtest="**/selenium/tests/*IT"
+```
+
+Key test classes:
+- `QBaseSeleniumTest` - Base class, starts Javalin on 8001
+- `QSeleniumJavalin` - Serves fixture JSON from `src/test/resources/fixtures/`
+- `ServerHealthChecker` - Waits for React server readiness
+
+### Test Fixtures
+
+Located in `src/test/resources/fixtures/metaData/`:
+- `index.json` - Default metaData response (used by visual regression tests)
+
+### CI/CD
+
+CircleCI runs both test suites:
+- **Playwright tests** - Custom job using `mcr.microsoft.com/playwright:v1.57.0-jammy`
+- **Selenium tests** - Via `qqq-orb/mvn_frontend_test_only`
+
+## Session State & Continuity
+
+**IMPORTANT:** Never use `~/.claude/session-state.md`. Always use local repo files.
+
+### On "continue from last session"
+
+Read these files in order:
+1. `docs/SESSION_STATE.md` - Current status, branch, recent commits, next steps
+2. `docs/TODO.md` - Active and completed tasks
+3. This file (`CLAUDE.md`) - Project context
+
+### Current Status (as of 2026-01-14)
+
+| Item | Value |
+|------|-------|
+| Branch | `feature/fix-visual-regressions-128` |
+| Version | `0.40.0-SNAPSHOT` |
+| Latest Commit | `12934bb` - fix: align typography fallbacks with production typography.ts (#128) |
+| Status | **READY FOR REVIEW** - All typography fixes verified, waiting on Darin |
+| GitHub Issue | [#128](https://github.com/QRun-IO/qqq-frontend-material-dashboard/issues/128) |
+
+### Active Work: Issue #128 Visual Regressions (Round 5 - COMPLETE)
+
+**Status:** All fixes complete and verified, waiting on Darin's approval
+
+**Root Cause Identified:** The `createDynamicTheme.ts` fallback values and `DEFAULT_THEME` values didn't match the original `typography.ts` source of truth. The original `Theme.ts` used `typography: {...typography}` (direct spread), so production always used `typography.ts` values directly.
+
+**What was fixed:**
+- Round 1-3: CSS scoping with `.qqq-themed` class
+- Round 4: Added CSS variable fallbacks to all `var(--qqq-*)` instances
+- Round 5: Aligned ALL 32 typography fallbacks with `typography.ts`
+
+**Key Typography Corrections (verified against typography.ts):**
+| Property | Before (WRONG) | After (CORRECT) | Source |
+|----------|---------------|-----------------|--------|
+| textPrimary | #344767 | #212121 | colors.ts dark.main |
+| fontWeightMedium | 500 | 600 | typography.ts:156 |
+| H3 fontSize/weight | 1.5rem/700 | 1.75rem/600 | typography.ts:202-205 |
+| H6 fontSize/weight | 0.875rem/600 | 1.125rem/500 | typography.ts:221-224 |
+| body2 weight | 400 | 300 | typography.ts:251 |
+| button weight | 500 | 300 | typography.ts:258 |
+| caption weight | 400 | 300 | typography.ts:266 |
+
+**Next steps:**
+1. Wait for Darin to test on branch `feature/fix-visual-regressions-128`
+2. If approved, create PR to merge into develop
+3. Publish snapshot after merge
+
+### Test Status
+
+| Suite | Tests | Status |
+|-------|-------|--------|
+| Playwright themed | 26 | PASS |
+| Playwright unthemed | 13 | PASS |
+
+### Key Files for Theme System
+
+| File | Purpose |
+|------|---------|
+| `src/qqq/assets/theme/base/typography.ts` | **SOURCE OF TRUTH** for typography values |
+| `src/qqq/assets/theme/base/colors.ts` | Color definitions (dark.main = #212121) |
+| `src/qqq/utils/createDynamicTheme.ts` | Builds MUI theme from QThemeMetaData |
+| `src/qqq/utils/themeUtils.ts` | DEFAULT_THEME values, CSS variable injection |
+| `src/qqq/components/legacy/Theme.ts` | Original theme (spreads typography.ts directly) |
+
+### Running Locally for Testing
+
+```bash
+# Unthemed (original MUI styling, no CSS variable overrides)
+THEME_FIXTURE=index npm run fixture-server &
+HTTPS=true PORT=3000 REACT_APP_PROXY_LOCALHOST_PORT=8001 npm start
+
+# Themed (full theme applied with CSS variables)
+THEME_FIXTURE=withFullCustomTheme npm run fixture-server &
+HTTPS=true PORT=3000 REACT_APP_PROXY_LOCALHOST_PORT=8001 npm start
+
+# Run all e2e tests (themed + unthemed)
+npm run e2e:all
+```
+
+### Key Documentation Files
+
+| File | Purpose |
+|------|---------|
+| `docs/SESSION_STATE.md` | Current work status, branch, version, recent commits |
+| `docs/TODO.md` | Task tracking for current feature |
+| `docs/QQQ_THEMING_GUIDE.md` | Complete theming reference |
+| `docs/QQQ_CSS_SELECTORS_GUIDE.md` | CSS selector patterns reference |
+| `docs/THEME_TESTING_GUIDE.md` | Guide for testing theme features |
+
+### Publishing
+
+Release candidates publish automatically on `release/*` branches via CircleCI `publish_release_candidate` workflow.
+
+Snapshots publish on `develop` via `publish_snapshot` workflow.
+
+## Knowledge base
+
+Durable cross-repo knowledge for QQQ lives in the second-brain vault
+(`$SECOND_BRAIN_VAULT`, i.e. `R:/Git.Local/KofTwentyTwo/second-brain`):
+
+- Hub: `knowledge/qqq/qqq-hub.md`
+- This repo's dossier: `knowledge/qqq/repos/qqq-frontend-material-dashboard.md`
+  (includes the full server-API consumption inventory, legacy vs `/qqq/v1`)
+
+Dossier reviewed at commit `628e36f64e9a` on branch `develop` (2026-07-04).
+Note: the cross-repo version table earlier in this file is stale (0.36-era);
+trust `pom.xml` / `package.json` for current pins.

LICENSE

@@ -1,670 +1,202 @@
-                    GNU AFFERO GENERAL PUBLIC LICENSE
-                       Version 3, 19 November 2007
-
- Copyright (C) 2007 Free Software Foundation, Inc. <https://fsf.org/>
- Everyone is permitted to copy and distribute verbatim copies
- of this license document, but changing it is not allowed.
-
-                            Preamble
-
-  The GNU Affero General Public License is a free, copyleft license for
-software and other kinds of works, specifically designed to ensure
-cooperation with the community in the case of network server software.
-
-  The licenses for most software and other practical works are designed
-to take away your freedom to share and change the works.  By contrast,
-our General Public Licenses are intended to guarantee your freedom to
-share and change all versions of a program--to make sure it remains free
-software for all its users.
-
-  When we speak of free software, we are referring to freedom, not
-price.  Our General Public Licenses are designed to make sure that you
-have the freedom to distribute copies of free software (and charge for
-them if you wish), that you receive source code or can get it if you
-want it, that you can change the software or use pieces of it in new
-free programs, and that you know you can do these things.
-
-  Developers that use our General Public Licenses protect your rights
-with two steps: (1) assert copyright on the software, and (2) offer
-you this License which gives you legal permission to copy, distribute
-and/or modify the software.
-
-  A secondary benefit of defending all users' freedom is that
-improvements made in alternate versions of the program, if they
-receive widespread use, become available for other developers to
-incorporate.  Many developers of free software are heartened and
-encouraged by the resulting cooperation.  However, in the case of
-software used on network servers, this result may fail to come about.
-The GNU General Public License permits making a modified version and
-letting the public access it on a server without ever releasing its
-source code to the public.
-
-  The GNU Affero General Public License is designed specifically to
-ensure that, in such cases, the modified source code becomes available
-to the community.  It requires the operator of a network server to
-provide the source code of the modified version running there to the
-users of that server.  Therefore, public use of a modified version, on
-a publicly accessible server, gives the public access to the source
-code of the modified version.
-
-  An older license, called the Affero General Public License and
-published by Affero, was designed to accomplish similar goals.  This is
-a different license, not a version of the Affero GPL, but Affero has
-released a new version of the Affero GPL which permits relicensing under
-this license.
-
-  The precise terms and conditions for copying, distribution and
-modification follow.
-
-                       TERMS AND CONDITIONS
-
-  0. Definitions.
-
-  "This License" refers to version 3 of the GNU Affero General Public License.
-
-  "Copyright" also means copyright-like laws that apply to other kinds of
-works, such as semiconductor masks.
-
-  "The Program" refers to any copyrightable work licensed under this
-License.  Each licensee is addressed as "you".  "Licensees" and
-"recipients" may be individuals or organizations.
-
-  To "modify" a work means to copy from or adapt all or part of the work
-in a way requiring copyright permission, other than the making of an
-exact copy.  The resulting work is called a "modified version" of the
-earlier work or a work "based on" the earlier work.
-
-  A "covered work" means either the unmodified Program or a work based
-on the Program.
-
-  To "propagate" a work means to do anything with it that, without
-permission, would make you directly or secondarily liable for
-infringement under applicable copyright law, except executing it on a
-computer or modifying a private copy.  Propagation includes copying,
-distribution (with or without modification), making available to the
-public, and in some countries other activities as well.
-
-  To "convey" a work means any kind of propagation that enables other
-parties to make or receive copies.  Mere interaction with a user through
-a computer network, with no transfer of a copy, is not conveying.
-
-  An interactive user interface displays "Appropriate Legal Notices"
-to the extent that it includes a convenient and prominently visible
-feature that (1) displays an appropriate copyright notice, and (2)
-tells the user that there is no warranty for the work (except to the
-extent that warranties are provided), that licensees may convey the
-work under this License, and how to view a copy of this License.  If
-the interface presents a list of user commands or options, such as a
-menu, a prominent item in the list meets this criterion.
-
-  1. Source Code.
-
-  The "source code" for a work means the preferred form of the work
-for making modifications to it.  "Object code" means any non-source
-form of a work.
-
-  A "Standard Interface" means an interface that either is an official
-standard defined by a recognized standards body, or, in the case of
-interfaces specified for a particular programming language, one that
-is widely used among developers working in that language.
-
-  The "System Libraries" of an executable work include anything, other
-than the work as a whole, that (a) is included in the normal form of
-packaging a Major Component, but which is not part of that Major
-Component, and (b) serves only to enable use of the work with that
-Major Component, or to implement a Standard Interface for which an
-implementation is available to the public in source code form.  A
-"Major Component", in this context, means a major essential component
-(kernel, window system, and so on) of the specific operating system
-(if any) on which the executable work runs, or a compiler used to
-produce the work, or an object code interpreter used to run it.
-
-  The "Corresponding Source" for a work in object code form means all
-the source code needed to generate, install, and (for an executable
-work) run the object code and to modify the work, including scripts to
-control those activities.  However, it does not include the work's
-System Libraries, or general-purpose tools or generally available free
-programs which are used unmodified in performing those activities but
-which are not part of the work.  For example, Corresponding Source
-includes interface definition files associated with source files for
-the work, and source code for shared libraries and dynamically
-linked subprograms that the work is specifically designed to require,
-such as by intimate data communication or control flow between those
-subprograms and other parts of the work.
-
-  The Corresponding Source need not include anything that users
-can regenerate automatically from other parts of the Corresponding
-Source.
-
-  The Corresponding Source for a work in source code form is that
-same work.
-
-  2. Basic Permissions.
-
-  All rights granted under this License are granted for the term of
-copyright on the Program, and are irrevocable provided the stated
-conditions are met.  This License explicitly affirms your unlimited
-permission to run the unmodified Program.  The output from running a
-covered work is covered by this License only if the output, given its
-content, constitutes a covered work.  This License acknowledges your
-rights of fair use or other equivalent, as provided by copyright law.
-
-  You may make, run and propagate covered works that you do not
-convey, without conditions so long as your license otherwise remains
-in force.  You may convey covered works to others for the sole purpose
-of having them make modifications exclusively for you, or provide you
-with facilities for running those works, provided that you comply with
-the terms of this License in conveying all material for which you do
-not control copyright.  Those thus making or running the covered works
-for you must do so exclusively on your behalf, under your direction
-and control, on terms that prohibit them from making any copies of
-your copyrighted material outside their relationship with you.
-
-  Conveying under any other circumstances is permitted solely under
-the conditions stated below.  Sublicensing is not allowed; section 10
-makes it unnecessary.
-
-  3. Protecting Users' Legal Rights From Anti-Circumvention Law.
-
-  No covered work shall be deemed part of an effective technological
-measure under any applicable law fulfilling obligations under article
-11 of the WIPO copyright treaty adopted on 20 December 1996, or
-similar laws prohibiting or restricting circumvention of such
-measures.
-
-  When you convey a covered work, you waive any legal power to forbid
-circumvention of technological measures to the extent such
-circumvention is effected by exercising rights under this License
-with respect to the covered work, and you disclaim any intention to
-limit operation or modification of the work as a means of enforcing,
-against the work's users, your or third parties' legal rights to
-forbid circumvention of technological measures.
-
-  4. Conveying Verbatim Copies.
-
-  You may convey verbatim copies of the Program's source code as you
-receive it, in any medium, provided that you conspicuously and
-appropriately publish on each copy an appropriate copyright notice;
-keep intact all notices stating that this License and any
-non-permissive terms added in accord with section 7 apply to the code;
-keep intact all notices of the absence of any warranty; and give all
-recipients a copy of this License along with the Program.
-
-  You may charge any price or no price for each copy that you convey,
-and you may offer support or warranty protection for a fee.
-
-  5. Conveying Modified Source Versions.
-
-  You may convey a work based on the Program, or the modifications to
-produce it from the Program, in the form of source code under the
-terms of section 4, provided that you also meet all of these conditions:
-
-    a) The work must carry prominent notices stating that you modified
-    it, and giving a relevant date.
-
-    b) The work must carry prominent notices stating that it is
-    released under this License and any conditions added under section
-    7.  This requirement modifies the requirement in section 4 to
-    "keep intact all notices".
-
-    c) You must license the entire work, as a whole, under this
-    License to anyone who comes into possession of a copy.  This
-    License will therefore apply, along with any applicable section 7
-    additional terms, to the whole of the work, and all its parts,
-    regardless of how they are packaged.  This License gives no
-    permission to license the work in any other way, but it does not
-    invalidate such permission if you have separately received it.
-
-    d) If the work has interactive user interfaces, each must display
-    Appropriate Legal Notices; however, if the Program has interactive
-    interfaces that do not display Appropriate Legal Notices, your
-    work need not make them do so.
-
-  A compilation of a covered work with other separate and independent
-works, which are not by their nature extensions of the covered work,
-and which are not combined with it such as to form a larger program,
-in or on a volume of a storage or distribution medium, is called an
-"aggregate" if the compilation and its resulting copyright are not
-used to limit the access or legal rights of the compilation's users
-beyond what the individual works permit.  Inclusion of a covered work
-in an aggregate does not cause this License to apply to the other
-parts of the aggregate.
-
-  6. Conveying Non-Source Forms.
-
-  You may convey covered works in object code form under the terms
-of sections 4 and 5, provided that you also convey the
-machine-readable Corresponding Source under the terms of this License,
-in one of these ways:
-
-    a) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by the
-    Corresponding Source fixed on a durable physical medium
-    customarily used for software interchange.
-
-    b) Convey the object code in, or embodied in, a physical product
-    (including a physical distribution medium), accompanied by a
-    written offer, valid for at least three years and valid for as
-    long as you offer spare parts or customer support for that product
-    model, to give anyone who possesses the object code either (1) a
-    copy of the Corresponding Source for all the software in the
-    product that is covered by this License, on a durable physical
-    medium customarily used for software interchange, for a price no
-    more than your reasonable cost of physically performing this
-    conveying of source, or (2) access to copy the
-    Corresponding Source from a network server at no charge.
-
-    c) Convey individual copies of the object code with a copy of the
-    written offer to provide the Corresponding Source.  This
-    alternative is allowed only occasionally and noncommercially, and
-    only if you received the object code with such an offer, in accord
-    with subsection 6b.
-
-    d) Convey the object code by offering access from a designated
-    place (gratis or for a charge), and offer equivalent access to the
-    Corresponding Source in the same way through the same place at no
-    further charge.  You need not require recipients to copy the
-    Corresponding Source along with the object code.  If the place to
-    copy the object code is a network server, the Corresponding Source
-    may be at a different server (operated by you or a third party)
-    that supports equivalent copying facilities, provided you maintain
-    clear directions next to the object code saying where to find the
-    Corresponding Source.  Regardless of what server hosts the
-    Corresponding Source, you remain obligated to ensure that it is
-    available for as long as needed to satisfy these requirements.
-
-    e) Convey the object code using peer-to-peer transmission, provided
-    you inform other peers where the object code and Corresponding
-    Source of the work are being offered to the general public at no
-    charge under subsection 6d.
-
-  A separable portion of the object code, whose source code is excluded
-from the Corresponding Source as a System Library, need not be
-included in conveying the object code work.
-
-  A "User Product" is either (1) a "consumer product", which means any
-tangible personal property which is normally used for personal, family,
-or household purposes, or (2) anything designed or sold for incorporation
-into a dwelling.  In determining whether a product is a consumer product,
-doubtful cases shall be resolved in favor of coverage.  For a particular
-product received by a particular user, "normally used" refers to a
-typical or common use of that class of product, regardless of the status
-of the particular user or of the way in which the particular user
-actually uses, or expects or is expected to use, the product.  A product
-is a consumer product regardless of whether the product has substantial
-commercial, industrial or non-consumer uses, unless such uses represent
-the only significant mode of use of the product.
-
-  "Installation Information" for a User Product means any methods,
-procedures, authorization keys, or other information required to install
-and execute modified versions of a covered work in that User Product from
-a modified version of its Corresponding Source.  The information must
-suffice to ensure that the continued functioning of the modified object
-code is in no case prevented or interfered with solely because
-modification has been made.
-
-  If you convey an object code work under this section in or with, or
-specifically for use in, a User Product, and the conveying occurs as
-part of a transaction in which the right of possession and use of the
-User Product is transferred to the recipient in perpetuity or for a
-fixed term (regardless of how the transaction is characterized), the
-Corresponding Source conveyed under this section must be accompanied
-by the Installation Information.  But this requirement does not apply
-if neither you nor any third party retains the ability to install
-modified object code on the User Product (for example, the work has
-been installed in ROM).
-
-  The requirement to provide Installation Information does not include a
-requirement to continue to provide support service, warranty, or updates
-for a work that has been modified or installed by the recipient, or for
-the User Product in which it has been modified or installed.  Access to
-a network may be denied when the modification itself materially and
-adversely affects the operation of the network or violates the rules and
-protocols for communication across the network.
-
-  Corresponding Source conveyed, and Installation Information provided,
-in accord with this section must be in a format that is publicly
-documented (and with an implementation available to the public in
-source code form), and must require no special password or key for
-unpacking, reading or copying.
-
-  7. Additional Terms.
-
-  "Additional permissions" are terms that supplement the terms of this
-License by making exceptions from one or more of its conditions.
-Additional permissions that are applicable to the entire Program shall
-be treated as though they were included in this License, to the extent
-that they are valid under applicable law.  If additional permissions
-apply only to part of the Program, that part may be used separately
-under those permissions, but the entire Program remains governed by
-this License without regard to the additional permissions.
-
-  When you convey a copy of a covered work, you may at your option
-remove any additional permissions from that copy, or from any part of
-it.  (Additional permissions may be written to require their own
-removal in certain cases when you modify the work.)  You may place
-additional permissions on material, added by you to a covered work,
-for which you have or can give appropriate copyright permission.
-
-  Notwithstanding any other provision of this License, for material you
-add to a covered work, you may (if authorized by the copyright holders of
-that material) supplement the terms of this License with terms:
-
-    a) Disclaiming warranty or limiting liability differently from the
-    terms of sections 15 and 16 of this License; or
-
-    b) Requiring preservation of specified reasonable legal notices or
-    author attributions in that material or in the Appropriate Legal
-    Notices displayed by the work containing it; or
-
-    c) Prohibiting misrepresentation of the origin of that material, or
-    requiring that modified versions of such material be marked in
-    reasonable ways as different from the original version; or
-
-    d) Limiting the use for publicity purposes of names of licensors or
-    authors of the material; or
-
-    e) Declining to grant rights under trademark law for use of some
-    trade names, trademarks, or service marks; or
-
-    f) Requiring indemnification of licensors and authors of that
-    material by anyone who conveys the material (or modified versions of
-    it) with contractual assumptions of liability to the recipient, for
-    any liability that these contractual assumptions directly impose on
-    those licensors and authors.
-
-  All other non-permissive additional terms are considered "further
-restrictions" within the meaning of section 10.  If the Program as you
-received it, or any part of it, contains a notice stating that it is
-governed by this License along with a term that is a further
-restriction, you may remove that term.  If a license document contains
-a further restriction but permits relicensing or conveying under this
-License, you may add to a covered work material governed by the terms
-of that license document, provided that the further restriction does
-not survive such relicensing or conveying.
-
-  If you add terms to a covered work in accord with this section, you
-must place, in the relevant source files, a statement of the
-additional terms that apply to those files, or a notice indicating
-where to find the applicable terms.
-
-  Additional terms, permissive or non-permissive, may be stated in the
-form of a separately written license, or stated as exceptions;
-the above requirements apply either way.
-
-  8. Termination.
-
-  You may not propagate or modify a covered work except as expressly
-provided under this License.  Any attempt otherwise to propagate or
-modify it is void, and will automatically terminate your rights under
-this License (including any patent licenses granted under the third
-paragraph of section 11).
-
-  However, if you cease all violation of this License, then your
-license from a particular copyright holder is reinstated (a)
-provisionally, unless and until the copyright holder explicitly and
-finally terminates your license, and (b) permanently, if the copyright
-holder fails to notify you of the violation by some reasonable means
-prior to 60 days after the cessation.
-
-  Moreover, your license from a particular copyright holder is
-reinstated permanently if the copyright holder notifies you of the
-violation by some reasonable means, this is the first time you have
-received notice of violation of this License (for any work) from that
-copyright holder, and you cure the violation within 30 days after
-receiving the notice.
-
-  Termination of your rights under this section does not terminate the
-licenses of parties who have received copies or rights from you under
-this License.  If your rights have been terminated and not permanently
-reinstated, you do not qualify to receive new licenses for the same
-material under section 10.
-
-  9. Acceptance Not Required for Having Copies.
-
-  You are not required to accept this License in order to receive or
-run a copy of the Program.  Ancillary propagation of a covered work
-occurring solely as a consequence of using peer-to-peer transmission
-to receive a copy likewise does not require acceptance.  However,
-nothing other than this License grants you permission to propagate or
-modify any covered work.  These actions infringe copyright if you do
-not accept this License.  Therefore, by modifying or propagating a
-covered work, you indicate your acceptance of this License to do so.
-
-  10. Automatic Licensing of Downstream Recipients.
-
-  Each time you convey a covered work, the recipient automatically
-receives a license from the original licensors, to run, modify and
-propagate that work, subject to this License.  You are not responsible
-for enforcing compliance by third parties to this License.
-
-  An "entity transaction" is a transaction transferring control of an
-organization, or substantially all of its assets, or subdividing an
-organization, or merging organizations.  If propagation of a covered
-work results from an entity transaction, each party to that
-transaction who receives a copy of the work also receives whatever
-licenses to the work the party's predecessor in interest had or could
-give under the previous paragraph, plus a right to possession of the
-Corresponding Source of the work from the predecessor in interest, if
-the predecessor has it or can get it with reasonable efforts.
-
-  You may not impose any further restrictions on the exercise of the
-rights granted or affirmed under this License.  For example, you may
-not impose a license fee, royalty, or other charge for exercise of
-rights granted under this License, and you may not initiate litigation
-(including a cross-claim or counterclaim in a lawsuit) alleging that
-any patent claim is infringed by making, using, selling, offering for
-sale, or importing the Program or any portion of it.
-
-  11. Patents.
-
-  A "contributor" is a copyright holder who authorizes use under this
-License of the Program or a work on which the Program is based.  The
-work thus licensed is called the contributor's "contributor version".
-
-  A contributor's "essential patent claims" are all patent claims
-owned or controlled by the contributor, whether already acquired or
-hereafter acquired, that would be infringed by some manner, permitted
-by this License, of making, using, or selling its contributor version,
-but do not include claims that would be infringed only as a
-consequence of further modification of the contributor version.  For
-purposes of this definition, "control" includes the right to grant
-patent sublicenses in a manner consistent with the requirements of
-this License.
-
-  Each contributor grants you a non-exclusive, worldwide, royalty-free
-patent license under the contributor's essential patent claims, to
-make, use, sell, offer for sale, import and otherwise run, modify and
-propagate the contents of its contributor version.
-
-  In the following three paragraphs, a "patent license" is any express
-agreement or commitment, however denominated, not to enforce a patent
-(such as an express permission to practice a patent or covenant not to
-sue for patent infringement).  To "grant" such a patent license to a
-party means to make such an agreement or commitment not to enforce a
-patent against the party.
-
-  If you convey a covered work, knowingly relying on a patent license,
-and the Corresponding Source of the work is not available for anyone
-to copy, free of charge and under the terms of this License, through a
-publicly available network server or other readily accessible means,
-then you must either (1) cause the Corresponding Source to be so
-available, or (2) arrange to deprive yourself of the benefit of the
-patent license for this particular work, or (3) arrange, in a manner
-consistent with the requirements of this License, to extend the patent
-license to downstream recipients.  "Knowingly relying" means you have
-actual knowledge that, but for the patent license, your conveying the
-covered work in a country, or your recipient's use of the covered work
-in a country, would infringe one or more identifiable patents in that
-country that you have reason to believe are valid.
-
-  If, pursuant to or in connection with a single transaction or
-arrangement, you convey, or propagate by procuring conveyance of, a
-covered work, and grant a patent license to some of the parties
-receiving the covered work authorizing them to use, propagate, modify
-or convey a specific copy of the covered work, then the patent license
-you grant is automatically extended to all recipients of the covered
-work and works based on it.
-
-  A patent license is "discriminatory" if it does not include within
-the scope of its coverage, prohibits the exercise of, or is
-conditioned on the non-exercise of one or more of the rights that are
-specifically granted under this License.  You may not convey a covered
-work if you are a party to an arrangement with a third party that is
-in the business of distributing software, under which you make payment
-to the third party based on the extent of your activity of conveying
-the work, and under which the third party grants, to any of the
-parties who would receive the covered work from you, a discriminatory
-patent license (a) in connection with copies of the covered work
-conveyed by you (or copies made from those copies), or (b) primarily
-for and in connection with specific products or compilations that
-contain the covered work, unless you entered into that arrangement,
-or that patent license was granted, prior to 28 March 2007.
-
-  Nothing in this License shall be construed as excluding or limiting
-any implied license or other defenses to infringement that may
-otherwise be available to you under applicable patent law.
-
-  12. No Surrender of Others' Freedom.
-
-  If conditions are imposed on you (whether by court order, agreement or
-otherwise) that contradict the conditions of this License, they do not
-excuse you from the conditions of this License.  If you cannot convey a
-covered work so as to satisfy simultaneously your obligations under this
-License and any other pertinent obligations, then as a consequence you may
-not convey it at all.  For example, if you agree to terms that obligate you
-to collect a royalty for further conveying from those to whom you convey
-the Program, the only way you could satisfy both those terms and this
-License would be to refrain entirely from conveying the Program.
-
-  13. Use with the GNU Affero General Public License.
-
-  Notwithstanding any other provision of this License, you have
-permission to link or combine any covered work with a work licensed
-under version 3 of the GNU Affero General Public License into a single
-combined work, and to convey the resulting work.  The terms of this
-License will continue to apply to the part which is the covered work,
-but the work with which it is combined will remain governed by version
-3 of the GNU Affero General Public License.
-
-  14. Revised Versions of this License.
-
-  The Free Software Foundation may publish revised and/or new versions of
-the GNU Affero General Public License from time to time.  Such new versions
-will be similar in spirit to the present version, but may differ in detail to
-address new problems or concerns.
-
-  Each version is given a distinguishing version number.  If the
-Program specifies that a certain numbered version of the GNU Affero General
-Public License "or any later version" applies to it, you have the
-option of following the terms and conditions either of that numbered
-version or of any later version published by the Free Software
-Foundation.  If the Program does not specify a version number of the
-GNU Affero General Public License, you may choose any version ever published
-by the Free Software Foundation.
-
-  If the Program specifies that a proxy can decide which future
-versions of the GNU Affero General Public License can be used, that proxy's
-public statement of acceptance of a version permanently authorizes you
-to choose that version for the Program.
-
-  15. Disclaimer of Warranty.
-
-  THERE IS NO WARRANTY FOR THE PROGRAM, TO THE EXTENT PERMITTED BY
-APPLICABLE LAW.  EXCEPT WHEN OTHERWISE STATED IN WRITING THE COPYRIGHT
-HOLDERS AND/OR OTHER PARTIES PROVIDE THE PROGRAM "AS IS" WITHOUT WARRANTY
-OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING, BUT NOT LIMITED TO,
-THE IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR
-PURPOSE.  THE ENTIRE RISK AS TO THE QUALITY AND PERFORMANCE OF THE PROGRAM
-IS WITH YOU.  SHOULD THE PROGRAM PROVE DEFECTIVE, YOU ASSUME THE COST OF
-ALL NECESSARY SERVICING, REPAIR OR CORRECTION.
-
-  16. Limitation of Liability.
-
-  IN NO EVENT UNLESS REQUIRED BY APPLICABLE LAW OR AGREED TO IN WRITING
-WILL ANY COPYRIGHT HOLDER, OR ANY OTHER PARTY WHO MODIFIES AND/OR CONVEYS
-THE PROGRAM AS PERMITTED ABOVE, BE LIABLE TO YOU FOR DAMAGES, INCLUDING ANY
-GENERAL, SPECIAL, INCIDENTAL OR CONSEQUENTIAL DAMAGES ARISING OUT OF THE
-USE OR INABILITY TO USE THE PROGRAM (INCLUDING BUT NOT LIMITED TO LOSS OF
-DATA OR DATA BEING RENDERED INACCURATE OR LOSSES SUSTAINED BY YOU OR THIRD
-PARTIES OR A FAILURE OF THE PROGRAM TO OPERATE WITH ANY OTHER PROGRAMS),
-EVEN IF SUCH HOLDER OR OTHER PARTY HAS BEEN ADVISED OF THE POSSIBILITY OF
-SUCH DAMAGES.
-
-  17. Interpretation of Sections 15 and 16.
-
-  If the disclaimer of warranty and limitation of liability provided
-above cannot be given local legal effect according to their terms,
-reviewing courts shall apply local law that most closely approximates
-an absolute waiver of all civil liability in connection with the
-Program, unless a warranty or assumption of liability accompanies a
-copy of the Program in return for a fee.
-
-                     END OF TERMS AND CONDITIONS
-
-            How to Apply These Terms to Your New Programs
-
-  If you develop a new program, and you want it to be of the greatest
-possible use to the public, the best way to achieve this is to make it
-free software which everyone can redistribute and change under these terms.
-
-  To do so, attach the following notices to the program.  It is safest
-to attach them to the start of each source file to most effectively
-state the exclusion of warranty; and each file should have at least
-the "copyright" line and a pointer to where the full notice is found.
-
-    <one line to give the program's name and a brief idea of what it does.>
-    Copyright (C) <year>  <name of author>
-
-    This program is free software: you can redistribute it and/or modify
-    it under the terms of the GNU Affero General Public License as
-    published by the Free Software Foundation, either version 3 of the
-    License, or (at your option) any later version.
-
-    This program is distributed in the hope that it will be useful,
-    but WITHOUT ANY WARRANTY; without even the implied warranty of
-    MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-    GNU Affero General Public License for more details.
-
-    You should have received a copy of the GNU Affero General Public License
-    along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-  Also add information on how to contact you by electronic and paper mail.
-
-  If your software can interact with users remotely through a computer
-network, you should also make sure that it provides a way for users to
-get its source.  For example, if your program is a web application, its
-interface could display a "Source" link that leads users to an archive
-of the code.  There are many ways you could offer source, and different
-solutions will be better for different programs; see section 13 for the
-specific requirements.
-
-  You should also get your employer (if you work as a programmer) or school,
-if any, to sign a "copyright disclaimer" for the program, if necessary.
-For more information on this, and how to apply and follow the GNU AGPL, see
-<https://www.gnu.org/licenses/>.
-
----
-
-**QQQ Frontend Material Dashboard**  
-Copyright (C) 2021-2022 Kingsrook, LLC  
-651 N Broad St Ste 205 # 6917 | Middletown DE 19709 | United States  
-contact@kingsrook.com | https://github.com/Kingsrook/
-
-This program is free software: you can redistribute it and/or modify
-it under the terms of the GNU Affero General Public License as
-published by the Free Software Foundation, either version 3 of the
-License, or (at your option) any later version.
-
-This program is distributed in the hope that it will be useful,
-but WITHOUT ANY WARRANTY; without even the implied warranty of
-MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-GNU Affero General Public License for more details.
-
-You should have received a copy of the GNU Affero General Public License
-along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
----
-
-**Note**: This is a component of the QQQ framework. For the complete license and
-more information, see the main QQQ repository: https://github.com/Kingsrook/qqq
+                                 Apache License
+                           Version 2.0, January 2004
+                        http://www.apache.org/licenses/
+
+   TERMS AND CONDITIONS FOR USE, REPRODUCTION, AND DISTRIBUTION
+
+   1. Definitions.
+
+      "License" shall mean the terms and conditions for use, reproduction,
+      and distribution as defined by Sections 1 through 9 of this document.
+
+      "Licensor" shall mean the copyright owner or entity authorized by
+      the copyright owner that is granting the License.
+
+      "Legal Entity" shall mean the union of the acting entity and all
+      other entities that control, are controlled by, or are under common
+      control with that entity. For the purposes of this definition,
+      "control" means (i) the power, direct or indirect, to cause the
+      direction or management of such entity, whether by contract or
+      otherwise, or (ii) ownership of fifty percent (50%) or more of the
+      outstanding shares, or (iii) beneficial ownership of such entity.
+
+      "You" (or "Your") shall mean an individual or Legal Entity
+      exercising permissions granted by this License.
+
+      "Source" form shall mean the preferred form for making modifications,
+      including but not limited to software source code, documentation
+      source, and configuration files.
+
+      "Object" form shall mean any form resulting from mechanical
+      transformation or translation of a Source form, including but
+      not limited to compiled object code, generated documentation,
+      and conversions to other media types.
+
+      "Work" shall mean the work of authorship, whether in Source or
+      Object form, made available under the License, as indicated by a
+      copyright notice that is included in or attached to the work
+      (an example is provided in the Appendix below).
+
+      "Derivative Works" shall mean any work, whether in Source or Object
+      form, that is based on (or derived from) the Work and for which the
+      editorial revisions, annotations, elaborations, or other modifications
+      represent, as a whole, an original work of authorship. For the purposes
+      of this License, Derivative Works shall not include works that remain
+      separable from, or merely link (or bind by name) to the interfaces of,
+      the Work and Derivative Works thereof.
+
+      "Contribution" shall mean any work of authorship, including
+      the original version of the Work and any modifications or additions
+      to that Work or Derivative Works thereof, that is intentionally
+      submitted to the Licensor for inclusion in the Work by the copyright
+      owner or by an individual or Legal Entity authorized to submit on
+      behalf of the copyright owner. For the purposes of this definition,
+      "submitted" means any form of electronic, verbal, or written
+      communication sent to the Licensor or its representatives, including
+      but not limited to communication on electronic mailing lists, source
+      code control systems, and issue tracking systems that are managed by,
+      or on behalf of, the Licensor for the purpose of discussing and
+      improving the Work, but excluding communication that is conspicuously
+      marked or otherwise designated in writing by the copyright owner as
+      "Not a Contribution."
+
+      "Contributor" shall mean Licensor and any individual or Legal Entity
+      on behalf of whom a Contribution has been received by Licensor and
+      subsequently incorporated within the Work.
+
+   2. Grant of Copyright License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      copyright license to reproduce, prepare Derivative Works of,
+      publicly display, publicly perform, sublicense, and distribute the
+      Work and such Derivative Works in Source or Object form.
+
+   3. Grant of Patent License. Subject to the terms and conditions of
+      this License, each Contributor hereby grants to You a perpetual,
+      worldwide, non-exclusive, no-charge, royalty-free, irrevocable
+      (except as stated in this section) patent license to make, have made,
+      use, offer to sell, sell, import, and otherwise transfer the Work,
+      where such license applies only to those patent claims licensable
+      by such Contributor that are necessarily infringed by their
+      Contribution(s) alone or by combination of their Contribution(s)
+      with the Work to which such Contribution(s) was submitted. If You
+      institute patent litigation against any entity (including a
+      cross-claim or counterclaim in a lawsuit) alleging that the Work
+      or a Contribution incorporated within the Work constitutes direct
+      or contributory patent infringement, then any patent licenses
+      granted to You under this License for that Work shall terminate
+      as of the date such litigation is filed.
+
+   4. Redistribution. You may reproduce and distribute copies of the
+      Work or Derivative Works thereof in any medium, with or without
+      modifications, and in Source or Object form, provided that You
+      meet the following conditions:
+
+      (a) You must give any other recipients of the Work or
+          Derivative Works a copy of this License; and
+
+      (b) You must cause any modified files to carry prominent notices
+          stating that You changed the files; and
+
+      (c) You must retain, in the Source form of any Derivative Works
+          that You distribute, all copyright, patent, trademark, and
+          attribution notices from the Source form of the Work,
+          excluding those notices that do not pertain to any part of
+          the Derivative Works; and
+
+      (d) If the Work includes a "NOTICE" text file as part of its
+          distribution, then any Derivative Works that You distribute must
+          include a readable copy of the attribution notices contained
+          within such NOTICE file, excluding those notices that do not
+          pertain to any part of the Derivative Works, in at least one
+          of the following places: within a NOTICE text file distributed
+          as part of the Derivative Works; within the Source form or
+          documentation, if provided along with the Derivative Works; or,
+          within a display generated by the Derivative Works, if and
+          wherever such third-party notices normally appear. The contents
+          of the NOTICE file are for informational purposes only and
+          do not modify the License. You may add Your own attribution
+          notices within Derivative Works that You distribute, alongside
+          or as an addendum to the NOTICE text from the Work, provided
+          that such additional attribution notices cannot be construed
+          as modifying the License.
+
+      You may add Your own copyright statement to Your modifications and
+      may provide additional or different license terms and conditions
+      for use, reproduction, or distribution of Your modifications, or
+      for any such Derivative Works as a whole, provided Your use,
+      reproduction, and distribution of the Work otherwise complies with
+      the conditions stated in this License.
+
+   5. Submission of Contributions. Unless You explicitly state otherwise,
+      any Contribution intentionally submitted for inclusion in the Work
+      by You to the Licensor shall be under the terms and conditions of
+      this License, without any additional terms or conditions.
+      Notwithstanding the above, nothing herein shall supersede or modify
+      the terms of any separate license agreement you may have executed
+      with Licensor regarding such Contributions.
+
+   6. Trademarks. This License does not grant permission to use the trade
+      names, trademarks, service marks, or product names of the Licensor,
+      except as required for reasonable and customary use in describing the
+      origin of the Work and reproducing the content of the NOTICE file.
+
+   7. Disclaimer of Warranty. Unless required by applicable law or
+      agreed to in writing, Licensor provides the Work (and each
+      Contributor provides its Contributions) on an "AS IS" BASIS,
+      WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or
+      implied, including, without limitation, any warranties or conditions
+      of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A
+      PARTICULAR PURPOSE. You are solely responsible for determining the
+      appropriateness of using or redistributing the Work and assume any
+      risks associated with Your exercise of permissions under this License.
+
+   8. Limitation of Liability. In no event and under no legal theory,
+      whether in tort (including negligence), contract, or otherwise,
+      unless required by applicable law (such as deliberate and grossly
+      negligent acts) or agreed to in writing, shall any Contributor be
+      liable to You for damages, including any direct, indirect, special,
+      incidental, or consequential damages of any character arising as a
+      result of this License or out of the use or inability to use the
+      Work (including but not limited to damages for loss of goodwill,
+      work stoppage, computer failure or malfunction, or any and all
+      other commercial damages or losses), even if such Contributor
+      has been advised of the possibility of such damages.
+
+   9. Accepting Warranty or Additional Liability. While redistributing
+      the Work or Derivative Works thereof, You may choose to offer,
+      and charge a fee for, acceptance of support, warranty, indemnity,
+      or other liability obligations and/or rights consistent with this
+      License. However, in accepting such obligations, You may act only
+      on Your own behalf and on Your sole responsibility, not on behalf
+      of any other Contributor, and only if You agree to indemnify,
+      defend, and hold each Contributor harmless for any liability
+      incurred by, or claims asserted against, such Contributor by reason
+      of your accepting any such warranty or additional liability.
+
+   END OF TERMS AND CONDITIONS
+
+   APPENDIX: How to apply the Apache License to your work.
+
+      To apply the Apache License to your work, attach the following
+      boilerplate notice, with the fields enclosed by brackets "[]"
+      replaced with your own identifying information. (Don't include
+      the brackets!)  The text should be enclosed in the appropriate
+      comment syntax for the file format. We also recommend that a
+      file or class name and description of purpose be included on the
+      same "printed page" as the copyright notice for easier
+      identification within third-party archives.
+
+   Copyright 2022-2025 QRunIO, LLC
+
+   Licensed under the Apache License, Version 2.0 (the "License");
+   you may not use this file except in compliance with the License.
+   You may obtain a copy of the License at
+
+       http://www.apache.org/licenses/LICENSE-2.0
+
+   Unless required by applicable law or agreed to in writing, software
+   distributed under the License is distributed on an "AS IS" BASIS,
+   WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+   See the License for the specific language governing permissions and
+   limitations under the License.

NOTICE

@@ -0,0 +1,15 @@
+QQQ Frontend Material Dashboard
+Copyright 2022-2025 QRunIO, LLC
+
+This product includes software developed at QRunIO, LLC (https://qrun.io/).
+
+Licensed under the Apache License, Version 2.0.
+
+================================================================================
+
+Trademarks:
+
+QQQ, qBits, qRun, qStudio, and the QRunIO logo are trademarks of QRunIO, LLC.
+Use of these trademarks must comply with QRunIO's Trademark Guidelines.
+
+================================================================================

README.md

@@ -1,148 +1,120 @@
-# QQQ Frontend Material Dashboard
+# qqq-frontend-material-dashboard
 
-[![Version](https://img.shields.io/badge/version-0.26.0--SNAPSHOT-blue.svg)](https://github.com/Kingsrook/qqq-frontend-material-dashboard)
-[![License](https://img.shields.io/badge/license-GNU%20Affero%20GPL%20v3-green.svg)](https://www.gnu.org/licenses/agpl-3.0.en.html)
-[![React](https://img.shields.io/badge/React-18.0.0-blue.svg)](https://reactjs.org/)
-[![TypeScript](https://img.shields.io/badge/TypeScript-4.9.4-blue.svg)](https://www.typescriptlang.org/)
-[![MUI](https://img.shields.io/badge/MUI-5.11.1-blue.svg)](https://mui.com/)
+[![License](https://img.shields.io/badge/License-Apache_2.0-blue.svg)](https://opensource.org/licenses/Apache-2.0)
 
-> **Frontend Component for QQQ - Low-code Application Framework for Engineers**
+> ℹ️ **Future direction:** The qqq admin UI is being rewritten as [qqq-frontend-next](https://github.com/QRun-IO/qqq-frontend-next) (Next.js 15 + Tailwind 4 + shadcn/ui). `qqq-frontend-material-dashboard` remains the supported choice today and will continue to receive fixes until existing qqq apps complete migration to `qqq-frontend-next`. New qqq apps starting in 2026 should evaluate `qqq-frontend-next` first.
 
-React-based user interface for the QQQ low-code platform, built with TypeScript and Material-UI.
+React admin dashboard for QQQ applications.
 
-## 🚀 Local Development
+**For:** Teams using QQQ who want a ready-to-use admin UI without writing frontend code  
+**Status:** Stable (on long-term deprecation track — see banner above)
 
-### Quick Start
+## Why This Exists
+
+QQQ generates backend APIs automatically, but you still need a UI. This dashboard connects to any QQQ backend and renders:
+
+- Table views with sorting, filtering, and pagination
+- Record forms with validation
+- Process execution screens
+- Navigation based on your QQQ metadata
+
+No frontend code required. The dashboard reads your QQQ metadata and builds the interface dynamically.
+
+If you need a custom UI, use [qqq-frontend-core](https://github.com/QRun-IO/qqq-frontend-core) directly instead.
+
+## Features
+
+- **Auto-generated screens** - Tables, forms, and processes from QQQ metadata
+- **Material-UI styling** - Clean, professional appearance out of the box
+- **Authentication** - Auth0, OAuth2, or anonymous modes
+- **Customizable** - Override components when defaults aren't enough
+- **Responsive** - Works on desktop and tablet
+
+## Quick Start
+
+**Prerequisites:** Node.js 20+, running QQQ backend
 
 ```bash
-# Install dependencies
+git clone https://github.com/QRun-IO/qqq-frontend-material-dashboard
+cd qqq-frontend-material-dashboard
 npm run install:legacy
-
-# Start development server (for testing directly)
 npm start
-# Opens at http://localhost:3000
 ```
 
-### Package Installation
+Opens at http://localhost:3000. Point it at your QQQ server.
 
-```bash
-# Build and install for QQQ development locally
-npm run build-and-install; mvn clean install
-```
+## Configuration
 
-### Prerequisites
-
-- **Node.js**: LTS version (18.x or higher)
-- **npm**: 8.x or higher
-- **Java**: 17 or higher (for full builds)
-- **Maven**: 3.8+ (for full builds)
-- **QQQ Server**: Running instance of the QQQ framework
-
-## 🏗️ Technology Stack
-
-- **Frontend**: React 18 with TypeScript
-- **UI Library**: Material-UI (MUI) v5 with custom theming
-- **State Management**: React Context API with custom hooks
-- **Routing**: React Router v6 with dynamic route generation
-- **Authentication**: Auth0, OAuth2, and anonymous auth modules
-- **Build Tool**: Create React App with TypeScript configuration
-
-## 📁 Project Structure
-
-```
-src/
-├── qqq/                    # QQQ-specific frontend code
-│   ├── components/         # Reusable UI components
-│   ├── pages/             # Application pages and views
-│   ├── context/           # React context providers
-│   ├── layouts/           # Page layout components
-│   └── utils/             # Frontend utility functions
-├── App.tsx                # Main application component
-└── index.tsx              # Application entry point
-```
-
-## 📋 Available Scripts
-
-| Script | Purpose |
-|--------|---------|
-| `npm start` | Start React dev server |
-| `npm run build` | Build React for production |
-| `npm test` | Run Jest tests |
-| `npm run lint` | Check code quality |
-| `npm run build-and-install` | Build and install for QQQ development |
-
-
-## 🔧 Configuration
-
-### Environment Variables
-
-Create a `.env` file in the root directory:
+Create `.env`:
 
 ```env
-# QQQ Server Configuration
 REACT_APP_QQQ_API_BASE_URL=https://your-qqq-server.com/api
-REACT_APP_QQQ_WS_BASE_URL=wss://your-qqq-server.com/ws
+```
 
-# Authentication (if using external providers)
+For authentication:
+
+```env
 REACT_APP_AUTH0_DOMAIN=your-domain.auth0.com
 REACT_APP_AUTH0_CLIENT_ID=your-client-id
 ```
 
-### CI/CD Pipeline
+## Usage
 
-For CI/CD environments, use Maven as the single build tool:
+### Development
+
+```bash
+npm start              # Start dev server
+npm test               # Run tests
+npm run build          # Production build
+```
+
+### Production Build
+
+```bash
+npm run build
+# Output in build/ directory
+```
+
+### With Maven (full QQQ integration)
 
 ```bash
 mvn clean package -Pci
 ```
 
-## 🧪 Testing
+### Verify published JAR notices
+
+After staging the built UI in `src/main/resources/material-dashboard/` (as the
+publishing orb does), package with the `release` profile to produce main, sources,
+tests and Javadoc JARs. Before publication, run the archive guard with the actual
+version's archive prefix:
 
 ```bash
-# Run all tests
+mvn -Prelease -DskipTests -Dgpg.skip=true clean package
+./scripts/check-packaged-notices.py target/qqq-frontend-material-dashboard-0.41.0-SNAPSHOT
+```
+
+This command verifies packaging only: it skips runtime tests and does not sign
+or publish. Existing runtime and hosted release gates are still required.
+The guard requires Python 3 and checks that every JAR contains exactly one
+`META-INF/LICENSE` and `META-INF/NOTICE`, byte-identical to the root files. It exits
+nonzero for missing archives, missing/duplicate entries or altered text. This is
+an explicit post-package check; the unchanged Circle orb does not invoke it
+automatically. It supplements the existing runtime and hosted release gates.
+
+## Project Status
+
+**Maturity:** Stable, production use  
+**Breaking changes:** Follows QQQ versioning  
+
+## Contributing
+
+Submit issues and PRs to the [main QQQ repository](https://github.com/QRun-IO/qqq/issues).
+
+```bash
+npm run install:legacy
 npm test
-
-# Run tests with coverage
-npm test -- --coverage
 ```
 
-## 📦 Building for Production
-
-```bash
-npm run build
-```
-
-The build process compiles TypeScript, optimizes assets, and generates production-ready files in the `build/` directory.
-
-**Important**: The frontend must be configured to connect to a running QQQ server instance.
-
-## 🔧 Configuration
-
-Create a `.env` file in the root directory:
-
-```env
-# QQQ Server Configuration
-REACT_APP_QQQ_API_BASE_URL=https://your-qqq-server.com/api
-REACT_APP_QQQ_WS_BASE_URL=wss://your-qqq-server.com/ws
-
-# Authentication (if using external providers)
-REACT_APP_AUTH0_DOMAIN=your-domain.auth0.com
-REACT_APP_AUTH0_CLIENT_ID=your-client-id
-```
-
-## 🤝 Contributing
-
-**Important**: This repository is a component of the QQQ framework. All contributions, issues, and discussions should go through the main QQQ repository.
-
-1. Fork the main QQQ repository: https://github.com/Kingsrook/qqq
-2. Create a feature branch: `git checkout -b feature/amazing-feature`
-3. Make your changes and run tests: `npm test`
-4. Open a Pull Request to the main QQQ repository
-
-## 📄 License
-
-This project is licensed under the GNU Affero General Public License v3.0 - see the [LICENSE](LICENSE) file for details.
-
-**Note**: This is a component of the QQQ framework. For complete information, support, and community, visit: https://github.com/Kingsrook/qqq
-
+## License
 
+Apache-2.0 - See [LICENSE](LICENSE) for details.

docs/PLAN-css-selectors.md

@@ -0,0 +1,66 @@
+# PLAN: Stable CSS Selectors via `data-qqq-*` Attributes
+
+**Status:** COMPLETE
+
+## Goal
+
+Add stable, semantic CSS selectors so QQQ app developers can target specific UI elements in 
+`MaterialDashboardThemeMetaData.customCss`.
+
+## Approach
+
+- **Auto-generate** unique IDs for key interactive elements (buttons, inputs, nav items, menu items, table headers)
+- **Require explicit `qqqId`** prop for custom overrides
+- ID format: `data-qqq-id="{type}-{identifier}"`
+
+## Implementation Summary
+
+### New Files Created
+- `src/qqq/utils/qqqIdUtils.ts` - ID sanitization utilities
+- `src/qqq/context/QqqIdContext.tsx` - Optional scope context provider
+- `docs/QQQ_CSS_SELECTORS_GUIDE.md` - Complete selector reference
+
+### Components Modified
+
+| Component | Selectors Added |
+|-----------|-----------------|
+| MDButton | `button-{text}`, `button-icon-{icon}` |
+| SideNav | `sidenav-root`, `sidenav-{name}`, `sidenav-logout-button` |
+| DynamicFormField | `input-{field}` |
+| DynamicSelect | `select-{field}` |
+| DataGridUtils | `table-header-{field}` |
+| QueryScreenActionMenu | `menu-item-{text}` |
+| RecordView | `record-view-*`, `record-section-*`, `menu-item-*` |
+| EntityForm | `record-{mode}-*`, `form-section-*` |
+| RecordSidebar | `record-sidebar`, `sidebar-item-*` |
+| Home | `app-header-*`, `app-section-*`, `table-card-*`, `process-card-*` |
+
+## Selector Patterns
+
+| Element | Pattern | Example |
+|---------|---------|---------|
+| Buttons | `button-{text}` | `button-save` |
+| Icon buttons | `button-icon-{icon}` | `button-icon-delete` |
+| Menu items | `menu-item-{text}` | `menu-item-bulk-edit` |
+| Nav items | `sidenav-{name}` | `sidenav-orders` |
+| Inputs | `input-{field}` | `input-first-name` |
+| Selects | `select-{field}` | `select-status` |
+| Table headers | `table-header-{field}` | `table-header-order-id` |
+| Record view | `record-view-{element}-{table}` | `record-view-header-orders` |
+| Sections | `record-section-{name}` | `record-section-identity` |
+
+## Example CSS Usage
+
+```css
+[data-qqq-id="menu-item-delete"] { display: none; }
+[data-qqq-id="record-view-header-orders"] { background: #1976D2; }
+[data-qqq-id^="sidebar-item-"] { border-left: 3px solid transparent; }
+```
+
+## Explicit Override
+
+All components accept `qqqId` prop:
+```tsx
+<MDButton qqqId="custom-action">Do Something</MDButton>
+// Result: data-qqq-id="button-custom-action"
+```

docs/PLAN-fix-visual-regressions-128.md

@@ -0,0 +1,42 @@
+# PLAN: Fix Visual Regressions (Issue #128) - COMPLETE
+
+**Status:** COMPLETE - Waiting on Darin to test
+**Branch:** `feature/fix-visual-regressions-128`
+**Latest Commit:** `d4251be`
+
+## Goal
+Fix visual regressions caused by PR #125 pluggable themes so that unthemed apps look identical to pre-PR-125.
+
+## Solution Summary
+
+The key fix was **scoping CSS override rules to themed apps only**:
+1. Added `.qqq-themed` class toggle in `injectIslandVariables.ts`
+2. Scoped all CSS rules in `qqq-override-styles.css` to `.qqq-themed`
+3. Fixed e2e test infrastructure (`setupProxy.js` missing `/metaData` route)
+4. Fixed fixture structure (theme must be under `supplementalInstanceMetaData.theme`)
+
+### Key Insight
+`QInstance` class in `@qrunio/qqq-frontend-core` only looks for theme at `object.supplementalInstanceMetaData["theme"]`, NOT at root level.
+
+## Files Modified
+
+| File | Change |
+|------|--------|
+| `src/qqq/utils/injectIslandVariables.ts` | Added `.qqq-themed` class toggle |
+| `src/qqq/styles/qqq-override-styles.css` | Scoped rules to `.qqq-themed` |
+| `src/setupProxy.js` | Added `/metaData` route |
+| `src/test/resources/fixtures/metaData/withFullCustomTheme.json` | Fixed theme location |
+
+## Test Results
+
+| Suite | Tests | Status |
+|-------|-------|--------|
+| Playwright themed | 26 | PASS |
+| Playwright unthemed | 13 | PASS |
+| Selenium fixture-based | 115 | PASS |
+
+## Next Steps
+
+1. Wait for Darin's approval on issue #128
+2. Create PR to merge into develop
+3. Publish snapshot after merge

docs/PLAN-pluggable-themes-mui-refactor.md

@@ -0,0 +1,476 @@
+# PLAN: Pluggable Themes - MUI ThemeProvider Refactor
+
+## Overview
+
+Refactor the pluggable themes implementation from CSS-variable-override approach to MUI ThemeProvider-first approach. The goal is to eliminate the 1200-line CSS override file by letting MUI style its own components correctly from the start.
+
+## Git Branch Surgery
+
+### Current State
+- `develop` branch contains 42 commits of CSS variable theme work (since 0.35.0)
+- All commits have been pushed to `origin/develop`
+- Commit `759581b` is the version bump to 0.36.0-SNAPSHOT (clean base)
+- Commit `f807698` is the 0.35.0 release
+
+### Target State
+- CSS variable work preserved on `feature/pluggable-themes-v1-css-vars`
+- `develop` reset to `759581b` (0.36.0-SNAPSHOT, pre-theme work)
+- New `feature/pluggable-themes-v2-mui` branch for MUI refactor
+
+### Step 1: Create Branch to Preserve CSS Variable Work
+```bash
+# From develop (which has all the CSS var work)
+git checkout develop
+git checkout -b feature/pluggable-themes-v1-css-vars
+
+# Push to origin to preserve it
+git push -u origin feature/pluggable-themes-v1-css-vars
+```
+
+### Step 2: Reset develop to Pre-Theme State
+```bash
+# Switch back to develop
+git checkout develop
+
+# Reset to the version bump commit (before any theme work)
+git reset --hard 759581b
+
+# Force push to origin (CAUTION: coordinate with team first)
+git push --force-with-lease origin develop
+```
+
+### Step 3: Create MUI Refactor Branch
+```bash
+# Create new feature branch from clean develop
+git checkout -b feature/pluggable-themes-v2-mui
+
+# Push to origin
+git push -u origin feature/pluggable-themes-v2-mui
+```
+
+### Verification
+```bash
+# Verify develop is clean
+git log --oneline develop -5
+# Should show: 759581b as HEAD
+
+# Verify v1 branch has all the CSS var work
+git log --oneline feature/pluggable-themes-v1-css-vars -5
+# Should show: 385130a (chore: ignore Playwright test artifacts) as HEAD
+
+# Verify v2 branch is ready for new work
+git log --oneline feature/pluggable-themes-v2-mui -5
+# Should show: 759581b as HEAD
+```
+
+---
+
+## Implementation Phases
+
+### Phase 1: Infrastructure Setup (Day 1)
+
+#### 1.1 Copy Essential Files from v1 Branch
+Files to bring over (they contain valuable work):
+```
+src/qqq/utils/themeUtils.ts          # DEFAULT_THEME, helper functions
+src/test/java/com/kingsrook/qqq/frontend/materialdashboard/selenium/tests/ThemeIT.java
+src/test/java/com/kingsrook/qqq/frontend/materialdashboard/selenium/tests/ThemeComponentRenderingIT.java
+src/test/java/com/kingsrook/qqq/frontend/materialdashboard/selenium/tests/ThemeMuiComponentIT.java
+src/test/resources/fixtures/metaData/withFullCustomTheme.json
+src/test/resources/fixtures/metaData/withBrandedHeader.json
+src/test/resources/fixtures/metaData/withCompactDensity.json
+docs/blog-drafts/*                    # Blog posts for reference
+```
+
+```bash
+# From feature/pluggable-themes-v2-mui
+git checkout feature/pluggable-themes-v1-css-vars -- src/qqq/utils/themeUtils.ts
+git checkout feature/pluggable-themes-v1-css-vars -- "src/test/java/com/kingsrook/qqq/frontend/materialdashboard/selenium/tests/Theme*.java"
+git checkout feature/pluggable-themes-v1-css-vars -- "src/test/resources/fixtures/metaData/with*.json"
+git checkout feature/pluggable-themes-v1-css-vars -- docs/blog-drafts/
+```
+
+#### 1.2 Create createDynamicTheme.ts
+New file: `src/qqq/utils/createDynamicTheme.ts`
+
+```typescript
+import { createTheme, Theme } from "@mui/material";
+import { MaterialDashboardThemeMetaData } from "qqq/models/metadata/MaterialDashboardThemeMetaData";
+import { DEFAULT_THEME } from "./themeUtils";
+
+export function createDynamicTheme(themeData?: MaterialDashboardThemeMetaData): Theme {
+   // Merge with defaults
+   const theme = { ...DEFAULT_THEME, ...filterUndefined(themeData) };
+
+   return createTheme({
+      palette: {
+         primary: { main: theme.primaryColor },
+         secondary: { main: theme.secondaryColor },
+         background: {
+            default: theme.backgroundColor,
+            paper: theme.surfaceColor,
+         },
+         text: {
+            primary: theme.textPrimary,
+            secondary: theme.textSecondary,
+         },
+         error: { main: theme.errorColor },
+         warning: { main: theme.warningColor },
+         success: { main: theme.successColor },
+         info: { main: theme.infoColor },
+      },
+      typography: {
+         fontFamily: theme.fontFamily,
+         h1: {
+            fontSize: theme.typographyH1FontSize,
+            fontWeight: theme.typographyH1FontWeight,
+            lineHeight: theme.typographyH1LineHeight,
+            letterSpacing: theme.typographyH1LetterSpacing,
+         },
+         // ... h2-h6, body1, body2, button, caption
+      },
+      shape: {
+         borderRadius: parseInt(theme.borderRadius) || 8,
+      },
+      components: {
+         // Component overrides go here - see Phase 2
+      },
+   });
+}
+
+function filterUndefined(obj?: Record<string, unknown>): Record<string, unknown> {
+   if (!obj) return {};
+   return Object.fromEntries(
+      Object.entries(obj).filter(([_, v]) => v !== undefined)
+   );
+}
+```
+
+#### 1.3 Create injectIslandVariables.ts
+New file: `src/qqq/utils/injectIslandVariables.ts`
+
+This injects CSS variables ONLY for sidebar, branded header, and non-MUI components.
+
+```typescript
+import { MaterialDashboardThemeMetaData } from "qqq/models/metadata/MaterialDashboardThemeMetaData";
+import { DEFAULT_THEME } from "./themeUtils";
+
+const CSS_VAR_PREFIX = "--qqq-";
+
+export function injectIslandVariables(themeData?: MaterialDashboardThemeMetaData): void {
+   const root = document.documentElement;
+   const theme = { ...DEFAULT_THEME, ...filterUndefined(themeData) };
+
+   // Sidebar island
+   setVar(root, "sidebar-background-color", theme.sidebarBackgroundColor);
+   setVar(root, "sidebar-text-color", theme.sidebarTextColor);
+   setVar(root, "sidebar-icon-color", theme.sidebarIconColor);
+   setVar(root, "sidebar-selected-background-color", theme.sidebarSelectedBackgroundColor);
+   setVar(root, "sidebar-selected-text-color", theme.sidebarSelectedTextColor);
+   setVar(root, "sidebar-hover-background-color", theme.sidebarHoverBackgroundColor);
+   setVar(root, "sidebar-divider-color", theme.sidebarDividerColor);
+
+   // Branded header island
+   setVar(root, "branded-header-background-color", theme.brandedHeaderBackgroundColor);
+   setVar(root, "branded-header-text-color", theme.brandedHeaderTextColor);
+   setVar(root, "branded-header-height", theme.brandedHeaderHeight);
+
+   // DataGrid (has its own theming needs)
+   setVar(root, "table-header-background-color", theme.tableHeaderBackgroundColor);
+   setVar(root, "table-header-text-color", theme.tableHeaderTextColor);
+   setVar(root, "table-row-hover-color", theme.tableRowHoverColor);
+   setVar(root, "table-row-selected-color", theme.tableRowSelectedColor);
+   setVar(root, "table-border-color", theme.tableBorderColor);
+
+   // Icon style (for material icons variant selection)
+   setVar(root, "icon-style", theme.iconStyle);
+}
+
+function setVar(root: HTMLElement, name: string, value: unknown): void {
+   if (value != null) {
+      root.style.setProperty(`${CSS_VAR_PREFIX}${name}`, String(value));
+   }
+}
+```
+
+#### 1.4 Update App.tsx Theme Integration
+Modify `src/App.tsx` to use the new theme builder:
+
+```typescript
+// Old imports
+import { injectThemeVariables } from "qqq/utils/themeUtils";
+import { createQqqTheme } from "qqq/components/legacy/Theme";
+
+// New imports
+import { createDynamicTheme } from "qqq/utils/createDynamicTheme";
+import { injectIslandVariables } from "qqq/utils/injectIslandVariables";
+
+// In the metadata loading effect:
+useEffect(() => {
+   // ... existing metadata loading ...
+
+   // OLD:
+   // injectThemeVariables(metaData.theme);
+   // setTheme(createQqqTheme());
+
+   // NEW:
+   const muiTheme = createDynamicTheme(metaData.theme);
+   setTheme(muiTheme);
+   injectIslandVariables(metaData.theme);
+
+}, [metaData]);
+```
+
+---
+
+### Phase 2: Migrate Component Overrides (Days 1-2)
+
+The goal is to move component styling from CSS overrides into MUI's theme.components.
+
+#### 2.1 Component Override Migration Order
+
+| Priority | Component | Current Location | Complexity |
+|----------|-----------|------------------|------------|
+| 1 | MuiButton | button/contained.ts, button/outlined.ts | Low - already uses CSS vars |
+| 2 | MuiCard | card/index.ts | Low |
+| 3 | MuiTextField, MuiInput | form/input.ts, form/textField.ts | Medium |
+| 4 | MuiTypography | (CSS overrides) | Medium |
+| 5 | MuiAppBar | appBar.ts | Low |
+| 6 | MuiDivider | divider.ts | Low |
+| 7 | MuiTableHead, MuiTableCell | table/*.ts | Medium |
+| 8 | MuiStepper, MuiStep* | stepper/*.ts | Medium |
+| 9 | MuiTabs, MuiTab | tabs/*.ts | Low |
+| 10 | MuiMenu, MuiMenuItem | menu/*.ts | Low |
+| 11 | MuiTooltip | tooltip.ts | Low |
+| 12 | MuiDialog* | dialog/*.ts | Low |
+| 13 | Remaining components | Various | Low-Medium |
+
+#### 2.2 Migration Pattern
+
+For each component:
+
+1. **Read current CSS override** in `qqq-override-styles.css`
+2. **Read current component file** in `assets/theme/components/`
+3. **Identify which styles need theme values**
+4. **Add to createDynamicTheme.ts** components section
+5. **Remove from CSS override file**
+6. **Run tests** to verify
+
+Example for MuiButton:
+
+```typescript
+// In createDynamicTheme.ts components section:
+MuiButton: {
+   styleOverrides: {
+      root: {
+         textTransform: 'none',
+         borderRadius: theme.borderRadius,
+      },
+      containedPrimary: {
+         backgroundColor: theme.primaryColor,
+         color: '#fff',
+         '&:hover': {
+            backgroundColor: theme.primaryColor,
+            filter: 'brightness(0.9)',
+         },
+      },
+      containedSecondary: {
+         backgroundColor: theme.secondaryColor,
+         color: '#fff',
+         '&:hover': {
+            backgroundColor: theme.secondaryColor,
+            filter: 'brightness(0.9)',
+         },
+      },
+      outlinedPrimary: {
+         borderColor: theme.primaryColor,
+         color: theme.primaryColor,
+         '&:hover': {
+            borderColor: theme.primaryColor,
+            backgroundColor: `${theme.primaryColor}10`,
+         },
+      },
+   },
+},
+```
+
+#### 2.3 Files to Modify
+
+| File | Action |
+|------|--------|
+| `src/qqq/utils/createDynamicTheme.ts` | Add component overrides progressively |
+| `src/qqq/assets/theme/components/button/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/card/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/form/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/table/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/menu/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/stepper/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/tabs/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/components/dialog/*.ts` | May delete or simplify |
+| `src/qqq/assets/theme/base/colors.ts` | Simplify - remove CSS var getters |
+| `src/qqq/components/legacy/Theme.ts` | Simplify or remove |
+
+---
+
+### Phase 3: Reduce CSS Override File (Day 2-3)
+
+#### 3.1 Categorize Current Overrides
+
+The current `qqq-override-styles.css` has ~1213 lines. Categorize:
+
+| Category | Lines (est.) | Action |
+|----------|--------------|--------|
+| DataGrid-specific | ~300 | Keep (DataGrid has own theming) |
+| Sidebar (island) | ~80 | Keep (CSS vars for island) |
+| Branded Header (island) | ~30 | Keep (CSS vars for island) |
+| MUI component colors | ~400 | DELETE (handled by MUI theme) |
+| MUI component spacing/layout | ~200 | Review - some may stay |
+| Typography overrides | ~100 | DELETE (handled by MUI theme) |
+| Miscellaneous/utility | ~100 | Review case by case |
+
+#### 3.2 Lines to Delete
+
+Search and remove patterns like:
+```css
+/* DELETE - MUI theme handles this */
+.MuiButton-containedPrimary { background-color: var(--qqq-primary-color) !important; }
+.MuiTypography-body2:not(...) { color: var(--qqq-text-secondary) !important; }
+.MuiCard-root { border-color: var(--qqq-card-border-color) !important; }
+```
+
+#### 3.3 Lines to Keep
+
+Keep patterns like:
+```css
+/* KEEP - DataGrid specific */
+.MuiDataGrid-cell { font-size: 0.85rem; }
+.MuiDataGrid-columnHeaderTitle { font-size: 0.75rem; }
+
+/* KEEP - Sidebar island */
+.MuiDrawer-root .MuiListItemText-primary { color: var(--qqq-sidebar-text-color); }
+
+/* KEEP - Layout/structure (not theming) */
+.recordQuery .MuiDataGrid-virtualScrollerContent { min-height: calc(100vh - 450px); }
+```
+
+#### 3.4 Target Metrics
+
+| Metric | Before | After |
+|--------|--------|-------|
+| Total lines | 1213 | ~300-400 |
+| `!important` count | 82 | ~10-15 |
+| `:not()` chains | 19 | ~2-3 |
+
+---
+
+### Phase 4: Testing and Validation (Day 3)
+
+#### 4.1 Playwright Test Execution
+
+```bash
+# Start React dev server
+PORT=3001 REACT_APP_PROXY_LOCALHOST_PORT=8001 npm start
+
+# In another terminal, run theme tests
+QQQ_SELENIUM_HEADLESS=true mvn test -Dtest=ThemeIT
+QQQ_SELENIUM_HEADLESS=true mvn test -Dtest=ThemeComponentRenderingIT
+QQQ_SELENIUM_HEADLESS=true mvn test -Dtest=ThemeMuiComponentIT
+```
+
+#### 4.2 Expected Test Behavior
+
+The tests verify RENDERED colors, not implementation. They should pass with no changes because:
+- Tests check `getComputedStyle(element).backgroundColor`
+- Whether that color came from CSS vars or MUI theme, the rendered result is the same
+- If a test fails, it indicates a regression in the refactor
+
+#### 4.3 Manual Verification Checklist
+
+- [ ] Primary color applies to buttons, links, active states
+- [ ] Secondary color applies where expected
+- [ ] Background color applies to page background
+- [ ] Surface color applies to cards, paper elements
+- [ ] Text primary/secondary colors render correctly
+- [ ] Sidebar has correct background, text, icon colors
+- [ ] Sidebar hover and selected states work
+- [ ] Branded header (when enabled) has correct colors
+- [ ] DataGrid headers and rows have correct colors
+- [ ] Typography variants (h1-h6, body1, body2) look correct
+- [ ] Border radius applies to buttons, cards, inputs
+- [ ] No visual regressions in existing app screens
+
+#### 4.4 CI Pipeline
+
+Ensure CircleCI runs all tests:
+```bash
+# Full test suite
+mvn verify -Pci
+```
+
+---
+
+## File Inventory
+
+### New Files to Create
+
+| File | Purpose                                               |
+|------|-------------------------------------------------------|
+| `src/qqq/utils/createDynamicTheme.ts` | MUI theme builder from MaterialDashboardThemeMetaData |
+| `src/qqq/utils/injectIslandVariables.ts` | CSS vars for sidebar/header islands only              |
+
+### Files to Modify
+
+| File | Changes |
+|------|---------|
+| `src/App.tsx` | Use new theme builder |
+| `src/qqq/utils/themeUtils.ts` | Keep DEFAULT_THEME, remove injectThemeVariables |
+| `src/qqq/styles/qqq-override-styles.css` | Delete ~800 lines |
+| `src/qqq/assets/theme/base/colors.ts` | Simplify, remove getters |
+| `src/qqq/components/legacy/Theme.ts` | Simplify or delete |
+| `src/qqq/assets/theme/components/*.ts` | Many files simplified or deleted |
+
+### Files to Delete (Maybe)
+
+| File | Reason |
+|------|--------|
+| `src/qqq/assets/theme/components/button/contained.ts` | Moved to createDynamicTheme |
+| `src/qqq/assets/theme/components/button/outlined.ts` | Moved to createDynamicTheme |
+| (evaluate each component file) | |
+
+---
+
+## Success Criteria
+
+1. All 26 Playwright tests pass
+2. CSS override file reduced from 1213 to <400 lines
+3. `!important` count reduced from 82 to <15
+4. Theme data flows directly: MaterialDashboardThemeMetaData -> MUI Theme -> Components
+5. No visual regressions in app
+6. CI pipeline passes
+
+---
+
+## Rollback Plan
+
+If refactor causes significant issues:
+```bash
+# The v1 CSS variable approach is preserved
+git checkout feature/pluggable-themes-v1-css-vars
+
+# Or cherry-pick specific fixes back
+git cherry-pick <commit-hash>
+```
+
+---
+
+## Timeline Estimate
+
+| Phase | Duration | Dependencies |
+|-------|----------|--------------|
+| Git branch surgery | 30 min | None |
+| Phase 1: Infrastructure | 4-6 hours | Branch surgery complete |
+| Phase 2: Component migration | 8-12 hours | Phase 1 complete |
+| Phase 3: CSS reduction | 4-6 hours | Phase 2 complete |
+| Phase 4: Testing | 4-6 hours | Phase 3 complete |
+| Buffer for issues | 4-8 hours | |
+| **Total** | **3-5 days** | |

docs/QQQ_CSS_SELECTORS_GUIDE.md

@@ -0,0 +1,76 @@
+# QQQ CSS Selectors Guide
+
+QQQ automatically generates stable `data-qqq-id` attributes on key UI elements, enabling precise CSS targeting via `MaterialDashboardThemeMetaData.customCss`.
+
+## ID Format
+
+```
+data-qqq-id="{type}-{identifier}"
+```
+
+IDs are generated from element text, field names, or labels. Values are lowercase, alphanumeric with dashes, max 50 characters.
+
+## Auto-Generated Elements
+
+| Element | ID Source | Example |
+|---------|-----------|---------|
+| Buttons | Text content or icon | `button-save`, `button-icon-edit` |
+| Text Inputs | Field name or label | `input-first-name` |
+| Selects | Field name or label | `select-status` |
+| Checkboxes | Field name or label | `switch-is-active` |
+| Nav Items | Name prop | `sidenav-orders` |
+| Menu Items | Text content | `menu-item-bulk-edit` |
+| Table Headers | Field name | `table-header-order-id` |
+
+## CSS Usage Examples
+
+```css
+/* Target specific button */
+[data-qqq-id="button-save"] {
+   background-color: green;
+}
+
+/* Target inputs by pattern */
+[data-qqq-id^="input-order"] {
+   border-color: blue;
+}
+
+/* Hide specific menu item */
+[data-qqq-id="menu-item-developer-mode"] {
+   display: none;
+}
+
+/* Style table header */
+[data-qqq-id="table-header-status"] {
+   font-weight: bold;
+}
+
+/* Combine with scope context */
+[data-qqq-scope="record-view"] [data-qqq-id="button-edit"] {
+   display: none;
+}
+```
+
+## Explicit Override
+
+Components accept an optional `qqqId` prop for explicit IDs:
+
+```tsx
+<MDButton qqqId="custom-action">Do Something</MDButton>
+// Result: data-qqq-id="button-custom-action"
+```
+
+## Scoping Context
+
+Use `QqqIdProvider` to add scope attributes for page-level targeting:
+
+```tsx
+<QqqIdProvider scope="record-view">
+   {/* Children get wrapped in data-qqq-scope="record-view" */}
+</QqqIdProvider>
+```
+
+## Key Files
+
+- `src/qqq/utils/qqqIdUtils.ts` - ID generation utilities
+- `src/qqq/context/QqqIdContext.tsx` - Scoping context provider

docs/QQQ_THEMING_GUIDE.md

@@ -0,0 +1,301 @@
+# QQQ Theming System Guide
+
+This document explains the QQQ pluggable theming system for AI assistants and developers.
+
+## Architecture Overview
+
+QQQ uses a **backend-driven theming model**:
+
+1. **Java Backend**: Define theme in `MaterialDashboardThemeMetaData` object
+2. **Frontend Model**: TypeScript `MaterialDashboardThemeMetaData` interface mirrors Java class
+3. **Frontend Dashboard**: `themeUtils.ts` injects CSS custom properties at runtime
+
+Theme data flows: `MaterialDashboardThemeMetaData.java` → `/metaData` API → `MaterialDashboardThemeMetaData.ts` → CSS variables (`--qqq-*`)
+
+## Configuring a Theme (Java Backend)
+
+Create a `MaterialDashboardThemeMetaData` instance using fluent setters:
+
+```java
+MaterialDashboardThemeMetaData theme = new MaterialDashboardThemeMetaData()
+   .withPrimaryColor("#1976D2")
+   .withSidebarBackgroundColor("#1E1E2D");
+
+qInstance.add(theme);
+```
+
+All properties are optional. Omitted properties use frontend defaults.
+
+---
+
+## Available Theme Properties
+
+### Core Color Palette
+
+| Property | Purpose | Example |
+|----------|---------|---------|
+| `primaryColor` | Main brand color (buttons, links, highlights) | `#1976D2` |
+| `secondaryColor` | Secondary accent color | `#9C27B0` |
+| `backgroundColor` | Page/app background | `#F5F5F5` |
+| `surfaceColor` | Card/panel backgrounds | `#FFFFFF` |
+| `textPrimary` | Primary text color | `#212121` |
+| `textSecondary` | Muted/secondary text | `#757575` |
+| `errorColor` | Error states | `#D32F2F` |
+| `warningColor` | Warning states | `#F57C00` |
+| `successColor` | Success states | `#388E3C` |
+| `infoColor` | Info states | `#1976D2` |
+
+### Typography - Base Settings
+
+| Property | Purpose | Example |
+|----------|---------|---------|
+| `fontFamily` | Primary body font stack | `"Inter", "Roboto", sans-serif` |
+| `headerFontFamily` | Heading font stack | `"Poppins", "Roboto", sans-serif` |
+| `monoFontFamily` | Monospace font stack | `"JetBrains Mono", monospace` |
+| `fontSizeBase` | Base font size | `14px` |
+| `fontWeightLight` | Light weight value | `300` |
+| `fontWeightRegular` | Regular weight value | `400` |
+| `fontWeightMedium` | Medium weight value | `500` |
+| `fontWeightBold` | Bold weight value | `700` |
+
+### Typography Variants
+
+Each variant (h1-h6, body1, body2, button, caption) has 5 properties:
+- `FontSize` - e.g., `2.5rem`
+- `FontWeight` - e.g., `700`
+- `LineHeight` - e.g., `1.2`
+- `LetterSpacing` - e.g., `-0.02em`
+- `TextTransform` - e.g., `none`, `uppercase`
+
+**Property naming pattern:** `typography{Variant}{Property}`
+
+Examples:
+- `typographyH1FontSize`, `typographyH1FontWeight`, `typographyH1LineHeight`
+- `typographyBody1FontSize`, `typographyButtonTextTransform`
+
+**Available variants:** `H1`, `H2`, `H3`, `H4`, `H5`, `H6`, `Body1`, `Body2`, `Button`, `Caption`
+
+### Sizing & Density
+
+| Property | Purpose | Values/Example |
+|----------|---------|----------------|
+| `borderRadius` | Default corner radius | `8px` |
+| `density` | UI density | `compact`, `normal`, `comfortable` |
+
+### Asset Paths
+
+| Property | Purpose |
+|----------|---------|
+| `logoPath` | Main logo (sidebar, login) |
+| `iconPath` | Small icon (favicon base) |
+| `faviconPath` | Browser favicon |
+
+### Icon Style
+
+| Property | Values |
+|----------|--------|
+| `iconStyle` | `filled`, `outlined`, `rounded`, `sharp`, `two-tone` |
+
+### Branded Header Bar
+
+Optional banner at viewport top, above the main navigation.
+
+| Property | Purpose | Example |
+|----------|---------|---------|
+| `brandedHeaderEnabled` | Toggle visibility | `true` / `false` |
+| `brandedHeaderBackgroundColor` | Banner background | `#0D47A1` |
+| `brandedHeaderTextColor` | Banner text color | `#FFFFFF` |
+| `brandedHeaderLogoPath` | Logo image path | `/header-logo.png` |
+| `brandedHeaderLogoAltText` | Logo alt text | `Company Logo` |
+| `brandedHeaderHeight` | Banner height | `48px` |
+| `brandedHeaderTagline` | Optional tagline text | `Enterprise Platform` |
+
+### App Bar (Top Navigation)
+
+| Property | Purpose |
+|----------|---------|
+| `appBarBackgroundColor` | NavBar background |
+| `appBarTextColor` | NavBar text/icons |
+
+### Sidebar Navigation
+
+| Property | Purpose |
+|----------|---------|
+| `sidebarBackgroundColor` | Sidebar background |
+| `sidebarTextColor` | Sidebar text |
+| `sidebarIconColor` | Sidebar icons |
+| `sidebarSelectedBackgroundColor` | Selected item background |
+| `sidebarSelectedTextColor` | Selected item text |
+| `sidebarHoverBackgroundColor` | Hover state background |
+| `sidebarDividerColor` | Section dividers |
+
+### Data Tables
+
+| Property | Purpose |
+|----------|---------|
+| `tableHeaderBackgroundColor` | Header row background |
+| `tableHeaderTextColor` | Header text |
+| `tableRowHoverColor` | Row hover background |
+| `tableRowSelectedColor` | Selected row background |
+| `tableBorderColor` | Table borders |
+
+### General UI Elements
+
+| Property | Purpose |
+|----------|---------|
+| `dividerColor` | Horizontal/vertical dividers |
+| `borderColor` | Input/form borders |
+| `cardBorderColor` | Card borders |
+
+### Form Inputs
+
+| Property | Purpose |
+|----------|---------|
+| `inputBorderColor` | Input field border color |
+
+### Custom CSS
+
+| Property | Purpose |
+|----------|---------|
+| `customCss` | Raw CSS injection for advanced customization |
+
+---
+
+## CSS Variable Reference
+
+All theme properties become CSS custom properties with `--qqq-` prefix using kebab-case:
+
+| Java Property | CSS Variable |
+|--------------|--------------|
+| `primaryColor` | `--qqq-primary-color` |
+| `sidebarBackgroundColor` | `--qqq-sidebar-background-color` |
+| `typographyH1FontSize` | `--qqq-typography-h1-font-size` |
+
+**Pattern:** `camelCase` → `--qqq-kebab-case`
+
+### Additional Generated Variables
+
+The frontend also generates these derived variables:
+
+```css
+/* Grey scale */
+--qqq-grey-100 through --qqq-grey-900
+
+/* Chart colors */
+--qqq-chart-grid-color
+--qqq-chart-text-color
+--qqq-chart-background-color
+
+/* Link color (derived from primaryColor) */
+--qqq-link-color
+
+/* Spacing (derived from density) */
+--qqq-spacing-base
+--qqq-spacing-small
+--qqq-spacing-medium
+--qqq-spacing-large
+
+/* Action colors */
+--qqq-action-active
+--qqq-action-hover
+--qqq-action-selected
+--qqq-action-disabled
+
+/* Status variants (light/dark derived from status colors) */
+--qqq-info-light, --qqq-info-dark
+--qqq-success-light, --qqq-success-dark
+--qqq-warning-light, --qqq-warning-dark
+--qqq-error-light, --qqq-error-dark
+
+/* Primary contrast text */
+--qqq-primary-contrast-text
+```
+
+### Component-Specific Variables
+
+These variables are used by components with fallback values. Override them via `customCss`:
+
+```css
+/* Stepper */
+--qqq-stepper-inactive-color: #9fc9ff;
+
+/* Tooltip */
+--qqq-tooltip-background-color: #ffffff;
+--qqq-tooltip-text-color: var(--qqq-text-primary, #344767);
+--qqq-tooltip-shadow: 0px 0px 12px rgba(128, 128, 128, 0.40);
+
+/* Form Inputs */
+--qqq-input-border-color: #d2d6da;
+
+/* Menu */
+--qqq-menu-hover-color: #f0f2f5;
+
+/* Switch */
+--qqq-switch-track-color: #bdbdbd;
+```
+
+---
+
+## Using CSS Variables in Components
+
+Frontend components use CSS variables with fallbacks:
+
+```css
+background-color: var(--qqq-primary-color, #1976D2);
+color: var(--qqq-sidebar-text-color, #A2A3B7);
+```
+
+The fallback value (after comma) is used if the variable is undefined.
+
+---
+
+## Theme Application Flow
+
+1. Backend serves `MaterialDashboardThemeMetaData` via `/metaData` endpoint
+2. Frontend receives theme in `QInstance.theme`
+3. `themeUtils.ts` calls `injectThemeVariables(theme)`
+4. Function sets CSS custom properties on `:root`
+5. Components read values via `var(--qqq-*)` references
+6. Icon fonts are dynamically loaded based on `iconStyle`
+
+---
+
+## Minimal vs Complete Configuration
+
+**Minimal** - Override only what differs from defaults:
+```java
+new MaterialDashboardThemeMetaData()
+   .withPrimaryColor("#E91E63")
+   .withBrandedHeaderEnabled(true);
+```
+
+**Complete** - Specify all properties for full control (see `EXAMPLE_THEME_CONFIGURATION.md`).
+
+---
+
+## Dark Theme Considerations
+
+For dark themes, invert the typical light/dark relationships:
+- `backgroundColor`: Dark (e.g., `#121212`)
+- `surfaceColor`: Slightly lighter dark (e.g., `#1E1E1E`)
+- `textPrimary`: Light (e.g., `#FFFFFF`)
+- `primaryColor`: Use lighter/brighter variant for visibility
+- Adjust sidebar, table, and border colors accordingly
+
+---
+
+## File Locations
+
+| Repository                      | Key Files |
+|---------------------------------|-----------|
+| qqq-backend-core                | `MaterialDashboardThemeMetaData.java` |
+| qqq-frontend-material-dashboard | `MaterialDashboardThemeMetaData.ts` |
+| qqq-frontend-material-dashboard | `themeUtils.ts`, `qqq-override-styles.css` |
+
+---
+
+## Backwards Compatibility
+
+- All properties are optional
+- Missing properties use sensible defaults
+- Existing applications without theme configuration continue to work unchanged

docs/SESSION_STATE.md

@@ -0,0 +1,70 @@
+# Session State - QQQ Frontend Material Dashboard
+
+**Last Updated:** 2026-01-15
+**Branch:** `feature/fix-visual-regressions-128`
+**Version:** `0.40.0-SNAPSHOT`
+
+## Current Status
+
+**ROUND 6 FIXES COMPLETE (ALL 5 ISSUES)** - Ready for Darin to test.
+
+## What Was Done This Session
+
+### Issue #128 Visual Regressions - Round 6
+
+Fixed 5 regressions reported by Darin (compared to develop branch):
+
+| Issue | Root Cause | Fix |
+|-------|------------|-----|
+| Sidenav double-highlight | CSS hover rules added in `064e86d` conflicted with JS hover | Removed CSS rules (lines 949-953) |
+| Chip border radius changed | `shape.borderRadius: 8` vs MUI default 4 | Changed default to 4 |
+| Menu padding increased | MuiMenuItem override set 8px vs menuItem.ts's ~5px | Removed override |
+| View field height reduced | Button typography changed (lineHeight 1.5→1.75, fontWeight 300→500) | Reverted to develop values |
+| Button color change | Button CSS scoped to `.qqq-themed` class (develop was unscoped) | Removed `.qqq-themed` scoping from button rules |
+
+### Files Modified
+
+| File | Change |
+|------|--------|
+| `src/qqq/styles/qqq-override-styles.css` | Removed sidenav hover CSS; removed `.qqq-themed` scoping from button rules |
+| `src/qqq/utils/createDynamicTheme.ts` | Fixed borderRadius default (4), removed MuiMenuItem, fixed button typography |
+| `src/qqq/utils/themeUtils.ts` | Fixed DEFAULT_THEME borderRadius and button typography |
+| `e2e/tests/round6-regressions.spec.ts` | Added 10 tests for Round 6 fixes (including Issue 5) |
+
+## Test Status
+
+| Suite | Tests | Status |
+|-------|-------|--------|
+| Playwright themed | 26 | PASS |
+| Round 6 regression tests | 10 | PASS |
+
+## Next Steps
+
+1. Commit Round 6 fixes
+2. Darin to test on branch `feature/fix-visual-regressions-128`
+3. If approved, create PR to merge into develop
+
+## GitHub Issue
+
+https://github.com/QRun-IO/qqq-frontend-material-dashboard/issues/128
+
+## QQQ #923 license alignment — 2026-09-30
+
+Owner-approved first-party Apache-2.0 declarations now align across source headers, Maven/npm metadata and current contributor/theme documentation. Attribution, third-party notices, dependency pins and executable source are preserved. The license delta passed independent review. QQQ #937 adds bounded waits before existing saved-view background assertions; production behavior is unchanged. Browser verification requires the HTTPS frontend on port 3001 (proxy 8001), CIRCLECI=true and QQQ_SELENIUM_HEADLESS=true. Publish a new candidate only after validation, review and release gates pass. Earlier work recorded above is unchanged.
+
+## QQQ #939/#940 dependency security — 2026-09-30
+
+Isolated patch from `f80d76bffa1a9ba24a304a056eb5d9df606d4ab7`: Jackson BOM 2.21.7, root Axios <1 override 0.34.0 and webpack-dev-middleware override 7.4.6. The published middleware backport preserves the APIs/options used by CRA 5.0.1 and dev-server 4.15.2; its Node >=18.12/webpack 5 requirements fit this project's Node >=20 and webpack 5.105.4. Local verification passed 22 Maven units, 54 JS tests, security regressions, Material serialization and the production build (source-map warnings retained). Full dev-server tests rejected all 27 traversal probes while preserving assets, proxy/service-worker/history hooks, HMR and rebuilds; actual root/subpath `npm start` checks also passed. Evidence: `qqq-license-923/evidence/alignment/material-security-940/` in the coordinating workspace. No UI source or runtime modernization is included.
+
+Fresh full and production-only npm audits both report 0 High/0 Critical; remaining totals are 15 Moderate/12 Low and 5 Moderate respectively. The old subpath disclosure baseline is retained; the middleware fix rejects traversal even though CRA still strips PUBLIC_URL's slash. The existing CRA source-overlay `_stats` mismatch reproduced identically before/after and is not fixed here. Public frontend-core 0.40.19-SNAPSHOT still pins Axios 0.33.0 outside this root override; #902 is separately coordinated. Independent review, full browser/hosted gates, GitHub alert reconciliation, RC2 integration and publication remain with the coordinator.
+
+
+## Public frontend-core integration — 2026-09-30
+
+Pin the verified public frontend-core 0.40.20-SNAPSHOT from core PR48/snapshot job388. Its exact registry integrity, Apache LICENSE/NOTICE and library files match the reviewed package; an isolated public consumer passes four HTTP and three security checks with zero audit findings. Only the root dependency and core lock node changed in this integration. Independent pin review passed.
+
+The combined Jackson/Axios/middleware/core candidate passes 54 JavaScript tests, production build and full Maven clean verify: 121 tests, zero failures/errors/skips/retries. Full audit reports zero High/Critical, 14 Moderate/12 Low; production reports zero High/Critical and five Moderate. Existing source-map/overlay and tool warnings remain recorded. Evidence is in the coordinating workspace under qqq-license-923/evidence/alignment/material-integrated-940/. Hosted checks, alert reconciliation, RC2 integration and existing publication gates remain; this is not RC/GA acceptance.
+
+## QQQ #942 / #923 packaged notices — 2026-09-30
+
+Bounded correction from signed PR162 merge `a37ead3b8c6b5a4819d29d853176374055dc1e8b`: Maven shared archive resources now copy the unchanged root LICENSE/NOTICE into all four published JARs. Resources 3.4.0 matches the prior integrated build. Actual release-profile packaging passed with reused verified public UI and runtime tests skipped; the executable archive guard fails on the existing public JARs and passes on all new local archives. Dependencies, Java/UI behavior and third-party notices are unchanged. Evidence: `qqq-license-923/evidence/alignment/material-notices-942/` in the coordination workspace. Independent review, signed integration, hosted required checks and verification of a newly published timestamped artifact remain; no public correction is claimed.

docs/THEME_TESTING_GUIDE.md

@@ -0,0 +1,206 @@
+# QQQ Pluggable Theme System - Testing Guide
+
+**Version:** 0.36.0-SNAPSHOT
+**Date:** 2026-01-03
+
+## Overview
+
+The QQQ dashboard now supports runtime theme customization via CSS custom properties. Theme configuration is defined in Java and automatically injected as `--qqq-*` CSS variables.
+
+## Dependencies
+
+```xml
+<dependency>
+    <groupId>com.kingsrook.qqq</groupId>
+    <artifactId>qqq-backend-core</artifactId>
+    <version>0.36.0-SNAPSHOT</version>
+</dependency>
+```
+
+## Basic Configuration
+
+Add theme configuration to your QInstance:
+
+```java
+MaterialDashboardThemeMetaData theme = new MaterialDashboardThemeMetaData()
+   // Core colors
+   .withPrimaryColor("#1976D2")
+   .withSecondaryColor("#9C27B0")
+   .withBackgroundColor("#F5F5F5")
+   .withSurfaceColor("#FFFFFF")
+   .withTextPrimary("#212121")
+   .withTextSecondary("#757575")
+
+   // Status colors
+   .withErrorColor("#D32F2F")
+   .withWarningColor("#F57C00")
+   .withSuccessColor("#388E3C")
+   .withInfoColor("#1976D2")
+
+   // Sidebar
+   .withSidebarBackgroundColor("#1E1E2D")
+   .withSidebarTextColor("#FFFFFF")
+   .withSidebarIconColor("#FFFFFF")
+
+   // Tables
+   .withTableHeaderBackgroundColor("#F5F5F5")
+   .withTableHeaderTextColor("#212121")
+
+   // Typography
+   .withFontFamily("Inter, sans-serif")
+   .withTypographyH1FontSize("2.5rem")
+   .withTypographyH1FontWeight(700)
+
+   // Sizing
+   .withBorderRadius("8px")
+   .withDensity("comfortable");
+
+qInstance.withSupplementalMetaData(theme);
+```
+
+## Available Properties
+
+### Core Colors
+| Property | CSS Variable | Default |
+|----------|--------------|---------|
+| `primaryColor` | `--qqq-primary-color` | `#0062FF` |
+| `secondaryColor` | `--qqq-secondary-color` | `#7b809a` |
+| `backgroundColor` | `--qqq-background-color` | `#f0f2f5` |
+| `surfaceColor` | `--qqq-surface-color` | `#ffffff` |
+| `textPrimary` | `--qqq-text-primary` | `#344767` |
+| `textSecondary` | `--qqq-text-secondary` | `#7b809a` |
+
+### Status Colors
+| Property | CSS Variable | Default |
+|----------|--------------|---------|
+| `errorColor` | `--qqq-error-color` | `#F44335` |
+| `warningColor` | `--qqq-warning-color` | `#fb8c00` |
+| `successColor` | `--qqq-success-color` | `#4CAF50` |
+| `infoColor` | `--qqq-info-color` | `#0062FF` |
+
+### Sidebar
+| Property | CSS Variable |
+|----------|--------------|
+| `sidebarBackgroundColor` | `--qqq-sidebar-background-color` |
+| `sidebarTextColor` | `--qqq-sidebar-text-color` |
+| `sidebarIconColor` | `--qqq-sidebar-icon-color` |
+| `sidebarSelectedBackgroundColor` | `--qqq-sidebar-selected-background-color` |
+| `sidebarSelectedTextColor` | `--qqq-sidebar-selected-text-color` |
+| `sidebarHoverBackgroundColor` | `--qqq-sidebar-hover-background-color` |
+| `sidebarDividerColor` | `--qqq-sidebar-divider-color` |
+
+### Tables
+| Property | CSS Variable |
+|----------|--------------|
+| `tableHeaderBackgroundColor` | `--qqq-table-header-background-color` |
+| `tableHeaderTextColor` | `--qqq-table-header-text-color` |
+| `tableRowHoverColor` | `--qqq-table-row-hover-color` |
+| `tableRowSelectedColor` | `--qqq-table-row-selected-color` |
+| `tableBorderColor` | `--qqq-table-border-color` |
+
+### Typography
+| Property | CSS Variable |
+|----------|--------------|
+| `fontFamily` | `--qqq-font-family` |
+| `headerFontFamily` | `--qqq-header-font-family` |
+| `monoFontFamily` | `--qqq-mono-font-family` |
+| `typographyH1FontSize` | `--qqq-typography-h1-font-size` |
+| `typographyH1FontWeight` | `--qqq-typography-h1-font-weight` |
+| `typographyH1LineHeight` | `--qqq-typography-h1-line-height` |
+| `typographyH1LetterSpacing` | `--qqq-typography-h1-letter-spacing` |
+
+Same pattern for H2-H6, Body1, Body2, Button, Caption.
+
+### General
+| Property | CSS Variable | Values |
+|----------|--------------|--------|
+| `borderRadius` | `--qqq-border-radius` | CSS size (e.g., `8px`) |
+| `density` | `--qqq-density` | `compact`, `normal`, `comfortable` |
+| `dividerColor` | `--qqq-divider-color` | Hex color |
+| `borderColor` | `--qqq-border-color` | Hex color |
+| `cardBorderColor` | `--qqq-card-border-color` | Hex color |
+
+### Branded Header
+| Property | CSS Variable |
+|----------|--------------|
+| `brandedHeaderEnabled` | `--qqq-branded-header-enabled` |
+| `brandedHeaderBackgroundColor` | `--qqq-branded-header-background-color` |
+| `brandedHeaderTextColor` | `--qqq-branded-header-text-color` |
+| `brandedHeaderLogoPath` | `--qqq-branded-header-logo-path` |
+| `brandedHeaderLogoAltText` | N/A (used in component) |
+| `brandedHeaderHeight` | `--qqq-branded-header-height` |
+| `brandedHeaderTagline` | N/A (used in component) |
+
+### Assets & Icons
+| Property | Values |
+|----------|--------|
+| `logoPath` | URL to logo image |
+| `iconPath` | URL to icon |
+| `faviconPath` | URL to favicon |
+| `iconStyle` | `filled`, `outlined`, `rounded`, `sharp`, `two-tone` |
+| `customCss` | Raw CSS string injected into page |
+
+## Test Cases
+
+### 1. Basic Color Test
+```java
+new MaterialDashboardThemeMetaData()
+   .withPrimaryColor("#FF5722")
+   .withSidebarBackgroundColor("#263238");
+```
+**Verify:** Primary buttons are orange, sidebar is dark blue-gray.
+
+### 2. Typography Test
+```java
+new MaterialDashboardThemeMetaData()
+   .withFontFamily("Georgia, serif")
+   .withTypographyH1FontSize("3rem")
+   .withTypographyH1FontWeight(800);
+```
+**Verify:** Page uses serif font, H1 headers are large and bold.
+
+### 3. Branded Header Test
+```java
+new MaterialDashboardThemeMetaData()
+   .withBrandedHeaderEnabled(true)
+   .withBrandedHeaderBackgroundColor("#1a237e")
+   .withBrandedHeaderTextColor("#ffffff")
+   .withBrandedHeaderTagline("My Application")
+   .withBrandedHeaderHeight("48px");
+```
+**Verify:** Fixed header bar appears at top with tagline.
+
+### 4. Density Test
+```java
+new MaterialDashboardThemeMetaData()
+   .withDensity("compact");
+```
+**Verify:** Reduced spacing throughout the UI.
+
+### 5. DevTools Verification
+1. Open browser DevTools
+2. Inspect `:root` element
+3. Verify `--qqq-*` CSS variables are present with configured values
+
+## Expected Behavior
+
+1. Properties serialize to JSON via `/metaData` endpoint under `supplementalMetaData.theme`
+2. Frontend reads theme from metadata response
+3. `themeUtils.ts` injects values as CSS custom properties on `:root`
+4. MUI components and CSS overrides reference these variables
+5. Unset properties fall back to sensible defaults
+
+## Troubleshooting
+
+**Theme not applying:**
+- Check `/metaData` response includes `supplementalMetaData.theme`
+- Verify CSS variables exist on `:root` in DevTools
+- Clear browser cache and hard refresh
+
+**Colors look wrong:**
+- Ensure hex colors include `#` prefix
+- Verify color format is `#RGB`, `#RRGGBB`, or `#RRGGBBAA`
+
+**Typography not changing:**
+- Font family must be available (loaded via Google Fonts or local)
+- Check `--qqq-font-family` variable is set correctly

docs/TODO-hardcoded-colors.md

@@ -0,0 +1,192 @@
+# TODO: Convert Hardcoded Colors to CSS Variables
+
+## Priority 1: Component Files (User-Facing)
+
+### 1. Widget.tsx
+**File:** `src/qqq/components/widgets/Widget.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 754 | `background: colors.info.main` | `background: "var(--qqq-info-color)"` |
+| 772 | `background: colors.info.main` | `background: "var(--qqq-info-color)"` |
+
+Remove `colors` import if no longer used.
+
+---
+
+### 2. ChartSubheaderWithData.tsx
+**File:** `src/qqq/components/widgets/components/ChartSubheaderWithData.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 49 | `const GOOD_COLOR = colors.success.main;` | `const GOOD_COLOR = "var(--qqq-success-color)";` |
+| 50 | `const BAD_COLOR = colors.error.main;` | `const BAD_COLOR = "var(--qqq-error-color)";` |
+
+Remove `colors` import if no longer used.
+
+---
+
+### 3. FilterUtils.tsx
+**File:** `src/qqq/utils/qqq/FilterUtils.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 608 | `background: "#0062FF"` | `background: "var(--qqq-info-color)"` |
+| 609 | `background: "#757575"` | `background: "var(--qqq-grey-600, #757575)"` |
+| 610 | `background: "#009971"` | `background: "var(--qqq-success-color)"` |
+
+---
+
+### 4. HorizontalBarChart.tsx
+**File:** `src/qqq/components/widgets/charts/barchart/HorizontalBarChart.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 136 | `colors.info.main` | `"var(--qqq-info-color)"` |
+
+Note: This is inside a chart config - verify CSS vars work in chart.js context.
+
+---
+
+### 5. CronUIWidget.tsx
+**File:** `src/qqq/components/widgets/misc/CronUIWidget.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 861 | `color={colors.error.main}` | `color="var(--qqq-error-color)"` |
+
+---
+
+### 6. RowBuilderWidget.tsx
+**File:** `src/qqq/components/widgets/misc/RowBuilderWidget.tsx`
+
+| Lines | Current | Change To |
+|-------|---------|-----------|
+| 963-966 | `color: colors.error.main` (4 instances) | `color: "var(--qqq-error-color)"` |
+
+All 4 lines are delete button hover states.
+
+---
+
+### 7. ShareModal.tsx
+**File:** `src/qqq/components/sharing/ShareModal.tsx`
+
+| Lines | Current | Change To |
+|-------|---------|-----------|
+| 482-485 | `color: colors.error.main` (4 instances) | `color: "var(--qqq-error-color)"` |
+
+All 4 lines are delete button hover states.
+
+---
+
+## Priority 2: Bulk Load Components
+
+### 8. BulkLoadFileMappingField.tsx
+**File:** `src/qqq/components/processes/BulkLoadFileMappingField.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 64-67 | `color: colors.error.main` (4 instances) | `color: "var(--qqq-error-color)"` |
+| 313 | `color={colors.warning.main}` | `color="var(--qqq-warning-color)"` |
+| 319 | `color={colors.error.main}` | `color="var(--qqq-error-color)"` |
+
+---
+
+### 9. BulkLoadFileMappingForm.tsx
+**File:** `src/qqq/components/processes/BulkLoadFileMappingForm.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 274 | `color={colors.error.main}` | `color="var(--qqq-error-color)"` |
+
+---
+
+### 10. BulkLoadValueMappingForm.tsx
+**File:** `src/qqq/components/processes/BulkLoadValueMappingForm.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 220 | `color={colors.error.main}` | `color="var(--qqq-error-color)"` |
+
+---
+
+### 11. SavedBulkLoadProfiles.tsx
+**File:** `src/qqq/components/misc/SavedBulkLoadProfiles.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 634 | `color={colors.success.main}` | `color="var(--qqq-success-color)"` |
+| 637 | `color={colors.error.main}` | `color="var(--qqq-error-color)"` |
+
+---
+
+## Priority 3: Theme Components
+
+### 12. tabs/index.ts
+**File:** `src/qqq/assets/theme/components/tabs/index.ts`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 69 | `borderBottomColor: colors.info.main` | `borderBottomColor: "var(--qqq-info-color)"` |
+
+---
+
+### 13. flatpickr.ts
+**File:** `src/qqq/assets/theme/components/flatpickr.ts`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 46 | `background: \`${gradients.info.state} !important\`` | `background: "var(--qqq-info-color) !important"` |
+
+---
+
+### 14. switchButton.ts
+**File:** `src/qqq/assets/theme/components/form/switchButton.ts`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 68 | `backgroundImage: linearGradient(gradients.info.main, gradients.info.state)` | `backgroundImage: "linear-gradient(195deg, var(--qqq-info-color), var(--qqq-info-color-dark, var(--qqq-info-color)))"` |
+
+---
+
+## Priority 4: Legacy Components
+
+### 15. MDBadgeDot/index.tsx
+**File:** `src/qqq/components/legacy/MDBadgeDot/index.tsx`
+
+| Lines | Current | Change To |
+|-------|---------|-----------|
+| 94 | `"primary": "#e91e63"` | `"primary": "var(--qqq-primary-color, #e91e63)"` |
+| 97 | `"success": "#4CAF50"` | `"success": "var(--qqq-success-color, #4CAF50)"` |
+| 98 | `"warning": "#fb8c00"` | `"warning": "var(--qqq-warning-color, #fb8c00)"` |
+| 99 | `"error": "#F44335"` | `"error": "var(--qqq-error-color, #F44335)"` |
+
+Note: Line 96 already uses `accentColor` which is correct.
+
+---
+
+### 16. MDProgressRoot.tsx
+**File:** `src/qqq/components/legacy/MDProgress/MDProgressRoot.tsx`
+
+| Line | Current | Change To |
+|------|---------|-----------|
+| 42 | `linearGradient(gradients.info.main, gradients.info.state)` | `"linear-gradient(195deg, var(--qqq-info-color), var(--qqq-info-color-dark, var(--qqq-info-color)))"` |
+
+---
+
+## Summary
+
+| Priority | Files | Instances |
+|----------|-------|-----------|
+| P1: Components | 7 | ~15 |
+| P2: Bulk Load | 4 | ~10 |
+| P3: Theme | 3 | ~3 |
+| P4: Legacy | 2 | ~5 |
+| **Total** | **16** | **~33** |
+
+## After Each Change
+
+1. Remove unused `colors` import if file no longer uses it
+2. Remove unused `gradients` import if file no longer uses it
+3. Run `npm run build` to verify no TypeScript errors
+4. Test visually that colors still appear correctly

docs/TODO.md

@@ -0,0 +1,77 @@
+# TODO - QQQ Frontend Material Dashboard
+
+**Last Updated:** 2026-01-14
+
+## In Progress
+
+### Issue #128: Visual Regressions - READY FOR REVIEW
+
+**Branch:** `feature/fix-visual-regressions-128`
+**Status:** All fixes complete, waiting on Darin to test
+
+- [x] Round 1-3: Add `.qqq-themed` class toggle, scope CSS overrides
+- [x] Round 4: Add CSS variable fallbacks to all `var(--qqq-*)` instances
+- [x] Round 5: Align ALL typography fallbacks with `typography.ts`
+- [x] Verify all 39 e2e tests pass (26 themed + 13 unthemed)
+- [x] Triple-check all 32 typography values against source of truth
+- [x] Commit typography fixes
+- [ ] **WAITING:** Darin to test and approve
+- [ ] Create PR to merge into develop
+- [ ] Publish snapshot after merge
+
+---
+
+### CI Playwright Timeout (Separate Issue)
+
+**Branch:** `fix/ci-playwright-timeout`
+**Status:** Parked - lower priority than visual regressions
+
+- [x] Diagnosed: webserver timeout (120s not enough for webpack)
+- [ ] Debug blank page issue in combined fixture server
+- [ ] Test locally until passing
+- [ ] Merge to develop
+
+## Completed (Recent)
+
+- [x] **Issue #128 Round 5** - Typography fallbacks aligned with typography.ts
+- [x] **Issue #128 Round 4** - CSS variable fallbacks added
+- [x] **Issue #128 Round 3** - Scoped CSS to `.qqq-themed` class
+- [x] **39 Playwright tests passing** (26 themed + 13 unthemed)
+- [x] **PR #127 merged** - Playwright e2e test integration
+- [x] **PR #125 merged** - Pluggable themes + CSS selectors system
+
+## Test Status
+
+| Suite | Tests | Status |
+|-------|-------|--------|
+| Playwright themed | 26 | PASS |
+| Playwright unthemed | 13 | PASS |
+
+## Known Issues
+
+- CI Playwright tests may timeout (WIP fix on separate branch)
+- `seleniumwithqapplication` tests require full QQQ backend (hang locally)
+
+## QQQ #923 license alignment — 2026-09-30
+
+Owner-approved first-party Apache-2.0 declarations now align across source headers, Maven/npm metadata and current contributor/theme documentation. Attribution, third-party notices, dependency pins and executable source are preserved. The license delta passed independent review. QQQ #937 adds bounded waits before existing saved-view background assertions; production behavior is unchanged. Browser verification requires the HTTPS frontend on port 3001 (proxy 8001), CIRCLECI=true and QQQ_SELENIUM_HEADLESS=true. Publish a new candidate only after validation, review and release gates pass. Earlier work recorded above is unchanged.
+
+## QQQ #939/#940 dependency security — 2026-09-30
+
+- [x] Verify public Jackson 2.21.7/Axios 0.34.0 artifacts and middleware 7.4.6 backport; update BOM, overrides and their lock entries/transitive development dependencies.
+- [x] Preserve vulnerable Jackson/Axios baselines; pass security regressions, 22 Maven units, 54 JS tests, Material serialization and production build.
+- [x] Reproduce subpath disclosure on 5.3.4; verify the 7.4.6 override blocks all 27 full-server probes while preserving assets/hooks/HMR/rebuilds and actual root/subpath npm start. Rerun JS/build/audits: 0 High/0 Critical; preserve existing overlay defect evidence and remaining Moderate/Low tracking.
+- [ ] Coordinator: independently review/integrate this patch, reconcile GitHub alerts under #940/#892, coordinate frontend-core's own Axios pin under #902, and rerun RC2 browser/hosted/release gates before publication.
+
+
+## Public frontend-core integration — 2026-09-30
+
+- [x] Verify public frontend-core 0.40.20-SNAPSHOT, pin its exact registry version/integrity and independently review the dependency delta.
+- [x] Pass the integrated 54 JavaScript tests, production build and 121 Maven/Selenium tests without failures, skips or retries; preserve remaining Moderate/Low audit findings.
+- [ ] Pass hosted PR checks, reconcile alerts and integrate the accepted changes into the RC2 draft while retaining #892 and the other release gates.
+
+## QQQ #942 / #923 packaged notices
+
+- [x] Include exact root LICENSE/NOTICE in main, sources, tests and Javadoc JARs using native Maven resource packaging; preserve existing archive contents.
+- [x] Prove the archive guard fails on the public baseline and altered notice bytes, and passes on all four actual local archives; document explicit post-package invocation.
+- [ ] Coordinator: independent review, signed integration and hosted checks; verify all four newly published JARs before claiming public correction, then coordinate the RC input with existing release gates.

docs/blog-drafts/01-why-pluggable-themes.md

@@ -0,0 +1,70 @@
+# Lets build pluggable themes. I'm Scared.
+
+Every enterprise app eventually gets the same request. "Can we make it blue instead of purple?" "Can we put our logo up there?" "The sidebar needs to match our brand guidelines."
+
+And every time it's grep through the codebase for hex codes, find them in twelve different files, change them, miss one, deploy, customer notices, repeat.
+
+So let's build a proper theme system.
+
+The theme should be defined on the backend, in Java, because that's where the rest of the app configuration lives. Tables, processes, reports - all defined in Java metadata. The theme should work the same way.
+
+```java
+qInstance.setTheme(new QThemeMetaData()
+   .withPrimaryColor("#1976D2")
+   .withSecondaryColor("#9C27B0")
+   .withSidebarBackgroundColor("#1E1E2D")
+   .withSidebarTextColor("#FFFFFF")
+   .withFontFamily("Inter")
+   .withBrandedHeaderEnabled(true)
+   .withBrandedHeaderTagline("Acme Corp Portal"));
+```
+
+Fluent API. Discoverable. Type-safe.
+
+How does that get to the frontend? Two options. Bake it into the build - generate CSS at compile time. But the frontend is built and packaged upstream as a static SPA. Downstream apps consume it as a dependency. They can't rebuild it with different colors.
+
+So it has to be runtime. Send the theme with the metadata response. The frontend already fetches `/metaData` on load. Include the theme there. Each consuming app defines its own theme in Java, the frontend picks it up and applies it.
+
+So the frontend gets a theme object. How do you apply it?
+
+React context is one option - pass theme values down through providers. But every component needs to consume the context. That's a lot of changes. And it doesn't help with third-party components.
+
+CSS-in-JS with a theme provider is another option. MUI supports this. But we're already fighting MUI's default styles. More abstraction isn't the answer.
+
+CSS custom properties though. Set them once at the root:
+
+```css
+:root {
+   --qqq-primary-color: #1976D2;
+   --qqq-sidebar-background: #1E1E2D;
+}
+```
+
+Reference them everywhere:
+
+```css
+.sidebar {
+   background-color: var(--qqq-sidebar-background);
+}
+```
+
+This cascades naturally. Set the variables, everything that uses them just works. No prop drilling. No context. No build step.
+
+The frontend reads the theme from metadata, injects variables into the document root. Done.
+
+The challenge is MUI. It has its own theming system, its own styled-components that inject styles at runtime with high specificity. CSS variables don't automatically win against that. Override styles are needed, with enough specificity to beat MUI's generated classes.
+
+And there are multiple theming islands. The sidebar has its own colors - background, text, icons, hover states, selected states, dividers. The branded header has its own colors. Data tables have their own. They can't just inherit from global theme variables.
+
+So we're looking at roughly 60 properties:
+
+- Core palette: primary, secondary, background, surface, error, warning, success, info
+- Typography: font family, sizes, weights for different variants
+- Sidebar: background, text, icons, hover, selected, dividers
+- Branded header: background, text, logo path, tagline
+- Tables: header background, header text, row hover, borders
+- General: border radius, spacing scale, density
+
+Each one flows from Java to frontend to CSS to rendered component.
+
+The infrastructure first - theme object flowing from backend to frontend, CSS variable injection. Then components one by one. Buttons, inputs, sidebar, tables.

docs/blog-drafts/02-implementation-grind.md

@@ -0,0 +1,59 @@
+# The Implementation Grind
+
+First attempt:
+
+```css
+.MuiButton-root {
+   background-color: var(--qqq-primary-color);
+}
+```
+
+Doesn't work. MUI generates class names like `.css-1hw9j7s` and injects them with inline-level specificity. Regular stylesheets don't stand a chance.
+
+`!important` it is:
+
+```css
+.MuiButton-containedPrimary {
+   background-color: var(--qqq-primary-color) !important;
+}
+```
+
+Not elegant, but effective. Buttons, inputs, cards - all picking up theme colors now.
+
+Then a weirder problem. A test for `textSecondary` keeps failing even though the CSS variable is set correctly and the value matches.
+
+After debugging: the test was finding a `.MuiTypography-body2` element in the sidebar, not the main content. The sidebar has its own text color variable. The test found an element, checked its color, but checked the wrong element.
+
+The fix:
+
+```css
+.MuiTypography-body2:not(.MuiDrawer-root *):not(.MuiDrawer-paper *) {
+   color: var(--qqq-text-secondary) !important;
+}
+```
+
+"Apply this style, but not if inside the drawer."
+
+Same pattern needed for the branded header - it has its own text color too. So now there are `:not()` selectors everywhere.
+
+```css
+.MuiTypography-body2:not(.MuiDrawer-root *):not(.MuiDrawer-paper *):not(.qqq-branded-header-bar *) {
+   color: var(--qqq-text-secondary) !important;
+}
+```
+
+The CSS override file is around 1200 lines now. Organized by component group:
+
+- Core colors and typography
+- Sidebar states (default, hover, selected)
+- Branded header
+- Data tables (headers, cells, borders)
+- Form inputs
+- Cards and surfaces
+- Buttons and links
+
+Each section targets the MUI classes for that component type and forces them to use CSS variables.
+
+What's working: font family and sizes flow through cleanly. Border radius applies everywhere. Table headers picked up the colors without issues. Sidebar selected and hover states work correctly.
+
+Next: actual browser tests. Playwright, not Jest. Render the page and check `getComputedStyle()`. The tests need to verify what the user actually sees, not just that variables are set.

docs/blog-drafts/03-tests-green-feature-in-testing.md

@@ -0,0 +1,136 @@
+# 26 Tests Green
+
+All green. Finally.
+
+Pushed it to CI, watched the pipeline, held my breath... and it passed. 26 Playwright tests, all checking actual rendered colors on actual components. Not mocked. Not faked. Real browser, real CSS, real values.
+
+Getting here was annoying though.
+
+My first tests were wrong. Like, fundamentally wrong. They checked if the CSS variable was *set*:
+
+```typescript
+const cssVar = getComputedStyle(root).getPropertyValue('--qqq-primary-color');
+expect(cssVar).toBe('#E91E63');
+```
+
+Those passed. Great, right? No. The button on screen was still the wrong color. The variable existed, the component just wasn't using it.
+
+So I had to rewrite everything to check what actually renders:
+
+```typescript
+const btn = document.querySelector('.MuiButton-containedPrimary');
+const bg = getComputedStyle(btn).backgroundColor;
+```
+
+If the button looks wrong, the test fails. That's the whole point.
+
+## The Testing Architecture
+
+Ended up with three test classes, each with a different purpose:
+
+**ThemeIT** - CSS variable injection tests. Does the theme JSON get converted into `--qqq-*` variables? Simple, fast, catches the obvious stuff.
+
+**ThemeComponentRenderingIT** - Component rendering tests. Given a sidebar with `sidebarBackgroundColor: '#1B5E20'`, does the MuiDrawer actually render green? This is where we catch the "variable exists but nothing uses it" problem.
+
+**ThemeMuiComponentIT** - Strict MUI component tests. These are the brutal ones. They find the exact MUI element and assert the exact computed style. No fallbacks, no "well close enough."
+
+```java
+WebElement drawer = findElementOrFail(
+   By.cssSelector(".MuiDrawer-paper"),
+   "MUI Drawer (sidebar)"
+);
+
+String drawerBgColor = getComputedStyle(drawer, "background-color");
+assertThat(normalizeColorToHex(drawerBgColor))
+   .as("MUI Drawer sidebar MUST render with green background #1B5E20, but was %s", drawerBgColor)
+   .isEqualToIgnoringCase("#1B5E20");
+```
+
+No silent skipping. `findElementOrFail` means if the element doesn't exist, the test fails with a clear message. Not "element not found," but "Could not find MUI Drawer (sidebar)."
+
+## The Two-Server Setup
+
+Tests run against a real React dev server and a mock Javalin backend. React on port 3001, Javalin on 8001. The mock serves JSON fixtures from `src/test/resources/fixtures/`.
+
+Different fixtures for different test scenarios:
+- `withFullCustomTheme.json` - all 60+ properties set
+- `withCompactDensity.json` - compact spacing values
+- `withBrandedHeader.json` - branded header enabled
+- `index.json` - no theme, uses defaults
+
+Each test picks its fixture, restarts Javalin, loads the page, runs assertions.
+
+## The Color Comparison Problem
+
+The annoying part was elements showing up in the wrong containers. I'd query for `.MuiTypography-body2` and find one - but it was in the sidebar, which has its own color scheme. Or in the branded header. Both of which should be *excluded* from the general text color rules.
+
+So now every test does this dance:
+
+```typescript
+for (const el of allElements) {
+   if (el.closest('.MuiDrawer-root')) continue;
+   if (el.closest('.qqq-branded-header-bar')) continue;
+   return getComputedStyle(el).color;
+}
+```
+
+Loop through, skip the containers we don't want, grab the first valid one.
+
+Oh and there was this one bug that took me way too long. Test output said:
+
+```
+expected #CFD8DC, got #CFD8DC
+```
+
+Same value. Still failing. What?
+
+Turns out my color comparison function was trying to parse both as RGB, failing because they were hex, and returning false. I just needed to check if both start with `#` and compare directly. Twenty minutes I'll never get back.
+
+```java
+private String normalizeColorToHex(String color)
+{
+   if(color.startsWith("#"))
+   {
+      return color.toUpperCase();
+   }
+
+   if(color.startsWith("rgb"))
+   {
+      String numbers = color.replaceAll("[^0-9,.]", "");
+      String[] parts = numbers.split(",");
+      int r = Integer.parseInt(parts[0].trim());
+      int g = Integer.parseInt(parts[1].trim());
+      int b = Integer.parseInt(parts[2].trim());
+      return String.format("#%02X%02X%02X", r, g, b);
+   }
+   return color.toUpperCase();
+}
+```
+
+Browsers return computed colors as RGB. Theme fixtures use hex. Need to normalize both to the same format before comparing.
+
+## What's Not Tested Yet
+
+Hover and focus states are partially covered. We use JavaScript to dispatch mouse events:
+
+```java
+js.executeScript("arguments[0].dispatchEvent(new MouseEvent('mouseenter', {bubbles: true}));", item);
+```
+
+But it's flaky. The hover state might not apply before we read the style. There's a `waitForSeconds(1)` in there which is gross. Need a better way to verify CSS transitions complete.
+
+Visual regression testing would catch things unit tests miss. Compare screenshots across builds, flag pixel differences. Tools like Percy or Chromatic do this. Worth exploring for the theme system specifically.
+
+Cross-browser testing is another gap. These run in headless Chrome. Safari renders things slightly differently. Firefox has its own quirks. CI should probably run the suite against multiple browsers.
+
+Accessibility testing for color contrast. If someone sets `textPrimary: '#CCCCCC'` on `backgroundColor: '#EEEEEE'`, that's technically valid but unreadable. Should probably warn about insufficient contrast ratios.
+
+## Where This Goes Next
+
+The test suite proves the theme system works. But it's testing qfmd in isolation. Downstream apps like me-health-portal have their own test suites. They pull qfmd as a dependency, apply their own theme, and their tests should verify the theming works in their context.
+
+Right now other teams are pulling the snapshot to test in their apps. Real usage, real feedback. If something breaks, I'll hear about it.
+
+Then docs. 60+ theme properties need to be documented somewhere. But that's a problem for next week.
+
+[43522d6](https://github.com/QRun-IO/qqq-frontend-material-dashboard/commit/43522d6)

docs/blog-drafts/04-where-we-are-now.md

@@ -0,0 +1,113 @@
+# Where We Are Now
+
+The theme system works. 60+ properties flow from Java metadata to CSS variables to rendered components. Tests pass. Other teams are testing in their apps. The feature is real.
+
+But after living with the code for a few days, I'm not happy with how we got here.
+
+## What's Working
+
+The architecture holds up. Define theme in Java, ship it with metadata, inject as CSS variables, components pick it up. No rebuild required. No separate config files. Each tenant can have different colors without touching the frontend codebase.
+
+```java
+qInstance.setTheme(new QThemeMetaData()
+   .withPrimaryColor("#1976D2")
+   .withSidebarBackgroundColor("#1E1E2D"));
+```
+
+That's it. Two lines and the app looks different.
+
+The sidebar theming is solid. Background, text, icons, hover, selected states - all wired up. Same with the branded header. Same with data tables. The component "islands" each have their own color namespace and it works.
+
+## What's Ugly
+
+The CSS override file. 1200+ lines of specificity battles with MUI.
+
+```css
+.MuiButton-containedPrimary {
+   background-color: var(--qqq-primary-color) !important;
+}
+```
+
+`!important` everywhere. 82 of them. That's not engineering, that's brute force.
+
+The `:not()` chains are getting ridiculous:
+
+```css
+.MuiTypography-body2:not(.MuiDrawer-root *):not(.MuiDrawer-paper *):not(.qqq-branded-header-bar *) {
+   color: var(--qqq-text-secondary) !important;
+}
+```
+
+Every new MUI component needs its own override. Every MUI version bump might break something. Every new island component means adding more `:not()` exclusions everywhere.
+
+The disconnect hit me when I traced the data flow:
+
+```
+QThemeMetaData (backend)
+    -> injectThemeVariables() -> CSS variables on :root
+    -> colors.ts reads CSS vars -> Theme.ts builds MUI theme
+    -> ThemeProvider wraps app
+    -> PLUS: 1200 lines of CSS overrides fighting MUI anyway
+```
+
+We're already using MUI's ThemeProvider. We're already building a dynamic theme. But then we're overriding everything with CSS because we didn't trust MUI to do its job.
+
+Two theming systems fighting each other. That's the problem.
+
+## The Decision
+
+We're going to refactor.
+
+The CSS variable approach taught us a lot. We understand the 60+ theme properties. We know which components need which colors. We have 26 Playwright tests that verify the rendered output. That's not wasted work - that's reconnaissance.
+
+But the implementation needs to change. Instead of CSS variables overriding MUI from the outside, we're going to:
+
+1. Build the MUI theme directly from QThemeMetaData
+2. Let MUI style its own components correctly from the start
+3. Keep CSS variables only for "islands" (sidebar, branded header) and non-MUI components
+4. Delete most of the 1200-line override file
+
+```typescript
+// Before: CSS variables -> colors.ts reads them -> Theme.ts -> overrides anyway
+// After: QThemeMetaData -> createDynamicTheme() -> MUI handles it
+
+function createDynamicTheme(themeData: QThemeMetaData): Theme {
+   return createTheme({
+      palette: {
+         primary: { main: themeData.primaryColor },
+         secondary: { main: themeData.secondaryColor },
+         background: { default: themeData.backgroundColor },
+         text: { primary: themeData.textPrimary },
+      },
+      components: {
+         MuiButton: {
+            styleOverrides: {
+               containedPrimary: {
+                  backgroundColor: themeData.primaryColor,
+               },
+            },
+         },
+      },
+   });
+}
+```
+
+Direct data flow. No round-trip through CSS variables. MUI components styled correctly without `!important`. The browser's CSS engine isn't fighting itself.
+
+## What We Gain
+
+- **Smaller override file.** 1200 lines -> maybe 200-300 for islands and DataGrid.
+- **Fewer `!important`.** 82 -> maybe 10-15.
+- **Easier debugging.** Theme is an inspectable object, not scattered CSS vars.
+- **MUI version safety.** We're using MUI's API, not fighting its internals.
+- **Future features.** Dark mode, hot reload, theme switching - all become possible.
+
+## What's Next
+
+The 26 Playwright tests stay. They verify rendered colors, not implementation details. When the refactor is done, they should all pass with no changes.
+
+The CSS variable work moves to a feature branch. It's not getting deleted - it's useful as reference and for the blog posts. But develop goes back to pre-theme state.
+
+New feature branch for the MUI refactor. Clean implementation, right architecture.
+
+Sometimes the fastest way forward is to step back and do it right.

docs/blog-drafts/05-stable-css-selectors.md

@@ -0,0 +1,180 @@
+# The Selector Problem
+
+The theme system works. Colors flow from Java to CSS variables to rendered components. Ship it, right?
+
+Then the first real feedback: "How do I hide the Developer Mode menu item?"
+
+Good question. Check the DOM. The menu item is a `<li>` with class `.MuiMenuItem-root` and some generated hash like `.css-kk1bwy-MuiMenuItem-root`. No stable identifier. No way to target just that one menu item.
+
+"Use the text content?"
+
+```css
+/* This doesn't exist in CSS */
+.MuiMenuItem-root:contains("Developer Mode") {
+   display: none;
+}
+```
+
+CSS doesn't have a `:contains()` selector. JavaScript does, but we're trying to enable customization through `customCss` in `QThemeMetaData`. Pure CSS. No JS allowed.
+
+The customer could override the whole menu. Or hide all menu items and recreate them. But that's insane for "hide one button."
+
+## The MUI Class Name Problem
+
+MUI generates class names at build time. They're deterministic but meaningless:
+
+```html
+<button class="MuiButton-root MuiButton-containedPrimary css-1hw9j7s">
+   Save
+</button>
+```
+
+That `css-1hw9j7s` changes if MUI's internals change. Can't rely on it. The `MuiButton-*` classes are stable but they're type selectors, not instance selectors. Every primary button has the same classes.
+
+Checked if MUI has built-in solutions. It does have a `className` generator you can configure. Doesn't help - it changes the hash algorithm, not the semantic meaning. Still no way to say "this specific button."
+
+There's no built-in "give every element a unique stable ID" feature. MUI expects you to know which button you're styling because you wrote the code. Makes sense for apps, breaks down for configurable frameworks.
+
+## Data Attributes
+
+The answer is `data-*` attributes. HTML's escape hatch for custom metadata.
+
+```html
+<button data-qqq-id="button-save" class="MuiButton-root ...">
+   Save
+</button>
+```
+
+Now CSS can target it:
+
+```css
+[data-qqq-id="button-save"] {
+   background-color: green !important;
+}
+```
+
+Stable. Semantic. Survives MUI upgrades. Works in `customCss`.
+
+## Auto-Generation
+
+Could require developers to manually add `qqqId` props everywhere. But that's tedious and error-prone. Most elements have obvious identifiers already - button text, field names, menu item labels.
+
+So: auto-generate from what's already there.
+
+```typescript
+function generateButtonId(qqqId?: string, children?: ReactNode, iconName?: string): string {
+   if (qqqId) return `button-${sanitizeId(qqqId)}`;
+
+   const text = extractTextFromChildren(children);
+   if (text) return `button-${sanitizeId(text)}`;
+
+   if (iconName) return `button-icon-${sanitizeId(iconName)}`;
+
+   return undefined;
+}
+```
+
+A "Save" button becomes `button-save`. An icon-only edit button becomes `button-icon-edit`. Explicit `qqqId` prop overrides everything.
+
+Same pattern for inputs (from field name), selects (from field name), nav items (from route), menu items (from text), table headers (from column field).
+
+The sanitizer strips everything down to lowercase alphanumeric with dashes:
+
+```typescript
+function sanitizeId(text: string): string {
+   return text
+      .toLowerCase()
+      .replace(/[^a-z0-9]+/g, "-")
+      .replace(/^-+|-+$/g, "")
+      .substring(0, 50);
+}
+```
+
+"Bulk Edit With File" becomes `bulk-edit-with-file`. Predictable. Debuggable.
+
+## The Implementation
+
+Modified eight components:
+
+- `MDButton` - core button, auto-generates from children or icon
+- `DefaultButtons` - standard buttons get explicit IDs (`button-save`, `button-cancel`, etc.)
+- `SideNavItem` - nav items from `name` prop
+- `QueryScreenActionMenu` - all menu items from text
+- `DynamicFormField` - text inputs from field name
+- `DynamicSelect` - dropdowns from field name
+- `DataGridUtils` - table headers from column field
+
+Created utility file `qqqIdUtils.ts` with generators for each element type. Created `QqqIdContext.tsx` for optional page-level scoping (not used yet, but there for future).
+
+Total: ~200 lines of new code, ~50 lines of modifications across existing components.
+
+## What You Can Do Now
+
+Hide a menu item:
+
+```java
+.withCustomCss("""
+   [data-qqq-id="menu-item-developer-mode"] {
+      display: none;
+   }
+""")
+```
+
+Style a specific button:
+
+```css
+[data-qqq-id="button-save"] {
+   background-color: #4CAF50 !important;
+}
+```
+
+Target inputs by pattern:
+
+```css
+[data-qqq-id^="input-order"] {
+   border-left: 3px solid blue;
+}
+```
+
+Hide a nav item:
+
+```css
+[data-qqq-id="sidenav-admin"] {
+   display: none;
+}
+```
+
+Style table headers:
+
+```css
+[data-qqq-id="table-header-status"] {
+   font-weight: bold;
+   background-color: #FFF3E0;
+}
+```
+
+Inspect any element in DevTools, find its `data-qqq-id`, target it in CSS. That simple.
+
+## What's Not Covered Yet
+
+Tabs aren't wired up. Neither are cards, modals, or the dozens of other component types. The pattern is established though - adding more is mechanical.
+
+No tests yet for the selectors themselves. The theme tests verify colors render correctly; should add tests that verify IDs appear on elements.
+
+The scoping context exists but isn't used. Idea is to wrap pages in `<QqqIdProvider scope="record-view">` so you can write:
+
+```css
+[data-qqq-scope="record-view"] [data-qqq-id="button-edit"] {
+   display: none;
+}
+```
+
+Hide the edit button only on view screens, not everywhere. That's future work.
+
+## The Pattern
+
+This keeps happening. Build a feature, ship it, get feedback that reveals a gap in the abstraction. Theme colors work but you can't target specific elements. Fix that, ship it, wait for the next gap.
+
+The architecture is holding up though. Java metadata → frontend → CSS → rendered output. Each layer adds capability without breaking the ones below.
+
+Version for testing: `0.36.0-pluggable-themes-css-selectors-SNAPSHOT`

docs/blog-drafts/06-apache-2-migration.md

@@ -0,0 +1,71 @@
+# We're Dropping AGPL. Here's Why.
+
+Starting with version 0.36, qqq and its related modules are Apache 2.0.
+
+This isn't a small change. AGPL was our license from day one. It felt right - copyleft, network-use provisions, protect the commons. But after talking to dozens of developers and potential users, we kept hitting the same wall.
+
+"We can't use it. Legal won't approve AGPL for our SaaS."
+
+## The Problem
+
+AGPL Section 13 requires anyone running AGPL software as a service to open-source their entire application. That's the point of the license - if you use it, you contribute back.
+
+But our target customers are SaaS builders. Startups. Teams building proprietary products on tight timelines. They don't want to open-source their business logic. They can't. And we don't think they should have to.
+
+We said "free for startups under $10M ARR" but that wasn't legally accurate. Under AGPL, they'd have to release their code regardless of revenue. The license contradicted our messaging.
+
+## Why Apache 2.0
+
+Apache 2.0 is what Kubernetes uses. And React. And Supabase. There's a reason.
+
+- **No copyleft.** Build proprietary software. Keep your code.
+- **Explicit patent grant.** Protection that MIT doesn't provide.
+- **Enterprise-friendly.** Legal teams approve it without a fight.
+- **SaaS-compatible.** Deploy as a service, no obligations.
+
+The trade-off is real. Cloud providers could fork qqq tomorrow. Competitors can build on our work without contributing back. We're betting we can out-execute rather than out-license.
+
+## What Changes
+
+**Apache 2.0 (open, free, no obligations):**
+- `qqq` - core framework
+- `qqq-frontend-core` - frontend foundation
+- `qqq-frontend-material-dashboard` - Material UI dashboard
+- `qqq-android` - mobile
+- `qctl` - CLI tools
+- Community qBits (process-trace, webhooks, geo-data, etc.)
+- Templates and tooling
+
+**Proprietary (premium features):**
+- qStudio
+- qRun platform
+- Premium qBits (OMS, WMS, CRM when they ship)
+- Enterprise support
+
+The core stays open. The stuff that costs us money to build and support stays commercial. Open-core model, same as GitLab or HashiCorp.
+
+## What This Means For You
+
+If you're building on qqq today: nothing changes in your workflow. The API is the same. The framework works the same. You just have more freedom with what you build.
+
+If you were waiting because of AGPL: the door is open. Build your SaaS. Keep your code private. We won't ask for anything except that you build something great.
+
+If you were contributing under AGPL: thank you. Your contributions are now under Apache 2.0. Same code, more permissive license.
+
+## The Version Boundary
+
+Everything before 0.36 stays AGPL-3.0. We can't retroactively change that.
+
+0.36 and forward is Apache 2.0. Clean break.
+
+If you need AGPL for some reason (it does exist), pin to 0.35.x. But we think most people will prefer the freedom.
+
+## What's Next
+
+The LICENSE file in each repository is the authoritative source. Those are updated now with Apache 2.0. NOTICE files with proper attribution are in place. README badges reflect the change.
+
+You'll still see old AGPL headers in some source files. That's cosmetic - the LICENSE file governs. We'll update file headers gradually as we touch code, but don't let stale headers confuse you. Check the LICENSE file in the repo root. That's what counts.
+
+The framework itself keeps improving. This is a legal change, not a technical one. Same roadmap. Same velocity. Just fewer barriers to adoption.
+
+Build your SaaS on qqq. Your code stays yours.

docs/blog-drafts/07-visual-regression-testing.md

@@ -0,0 +1,15 @@
+# Visual Regression Testing with Playwright and Docker
+
+Added visual regression tests to the material dashboard today. 18 Playwright screenshot tests covering the home page, sidebar, nav bar, buttons, typography, cards—the usual suspects.
+
+Ran into the classic problem: screenshots generated on my Mac don't match CI because fonts render differently on Linux. 1-2px height differences on everything. Tried bumping tolerance but that defeats the purpose.
+
+The fix was running the entire stack inside Docker—not just Playwright, but the fixture server and React dev server too. Wrote a script that spins up the same container CI uses (`mcr.microsoft.com/playwright:v1.57.0-jammy`), starts everything inside, and regenerates the baselines.
+
+```bash
+./scripts/update-snapshots.sh
+```
+
+Run that after any visual changes, commit the updated snapshots, and CI will pass. All 18 tests run in about 90 seconds with 1% pixel tolerance.
+
+The snapshots live in `e2e/snapshots/`. Tests are in `e2e/tests/visual-regression.spec.ts`.

e2e/fixture-server.js

@@ -0,0 +1,340 @@
+/**
+ * Simple fixture server for Playwright e2e tests.
+ * Serves fixture JSON files from src/test/resources/fixtures/
+ * mimicking the Javalin mock server used in Selenium tests.
+ */
+const http = require('http');
+const fs = require('fs');
+const path = require('path');
+
+const PORT = process.env.FIXTURE_PORT || 8001;
+const FIXTURES_DIR = path.join(__dirname, '..', 'src', 'test', 'resources', 'fixtures');
+
+// Determine which metaData fixture to serve based on env var
+const FIXTURE_NAME = process.env.THEME_FIXTURE || 'index';
+
+function loadFixture(relativePath) {
+   const fixturePath = path.join(FIXTURES_DIR, relativePath);
+   if (fs.existsSync(fixturePath)) {
+      return JSON.parse(fs.readFileSync(fixturePath, 'utf8'));
+   }
+   return null;
+}
+
+function serveJson(res, data) {
+   res.writeHead(200, { 'Content-Type': 'application/json' });
+   res.end(JSON.stringify(data));
+}
+
+function serve404(res, pathname) {
+   console.log(`404: ${pathname}`);
+   res.writeHead(404, { 'Content-Type': 'application/json' });
+   res.end(JSON.stringify({ error: 'Not found', path: pathname }));
+}
+
+const server = http.createServer((req, res) => {
+   // Enable CORS for local development
+   res.setHeader('Access-Control-Allow-Origin', '*');
+   res.setHeader('Access-Control-Allow-Methods', 'GET, POST, PUT, DELETE, OPTIONS');
+   res.setHeader('Access-Control-Allow-Headers', 'Content-Type, Authorization');
+
+   if (req.method === 'OPTIONS') {
+      res.writeHead(204);
+      res.end();
+      return;
+   }
+
+   const url = new URL(req.url, `http://localhost:${PORT}`);
+   const pathname = url.pathname;
+
+   // Support per-request fixture selection via ?fixture=name query parameter
+   // This allows unthemed tests to request the 'index' fixture explicitly
+   const requestedFixture = url.searchParams.get('fixture') || FIXTURE_NAME;
+
+   // /metaData endpoint - return main metadata with theme
+   if (pathname === '/metaData' || pathname === '/metaData/' || pathname === '/api/metaData') {
+      const data = loadFixture(`metaData/${requestedFixture}.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+   }
+
+   // /metaData/authentication - authentication config
+   if (pathname === '/metaData/authentication' || pathname === '/api/metaData/authentication') {
+      const data = loadFixture('metaData/authentication.json');
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+   }
+
+   // /metaData/table/{tableName} - table metadata
+   const tableMetaMatch = pathname.match(/^\/metaData\/table\/(\w+)$/);
+   if (tableMetaMatch) {
+      const tableName = tableMetaMatch[1];
+      const data = loadFixture(`metaData/table/${tableName}.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      // If specific table not found, return generic person table
+      const personData = loadFixture('metaData/table/person.json');
+      if (personData) {
+         serveJson(res, personData);
+         return;
+      }
+   }
+
+   // /qqq/v1/metaData/table/{tableName} - API table metadata
+   const apiTableMetaMatch = pathname.match(/^\/qqq\/v1\/metaData\/table\/(\w+)$/);
+   if (apiTableMetaMatch) {
+      const tableName = apiTableMetaMatch[1];
+      const data = loadFixture(`qqq/v1/metaData/table/${tableName}.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+   }
+
+   // /metaData/process/{processName} - process metadata (supports dots in name like person.bulkEdit)
+   const processMetaMatch = pathname.match(/^\/metaData\/process\/(.+)$/);
+   if (processMetaMatch) {
+      const processName = processMetaMatch[1];
+      const data = loadFixture(`metaData/process/${processName}.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      // Default process metadata response (wrapped in 'process' key)
+      serveJson(res, {
+         process: {
+            name: processName,
+            label: processName.charAt(0).toUpperCase() + processName.slice(1).replace(/([A-Z])/g, ' $1'),
+            tableName: 'person',
+            frontendSteps: [
+               { name: 'input', label: 'Input', stepType: 'frontend', formFields: [], components: [] },
+               { name: 'review', label: 'Review', stepType: 'frontend', recordListFields: [], components: [] },
+               { name: 'result', label: 'Result', stepType: 'frontend', components: [{ type: 'PROCESS_SUMMARY_RESULTS' }] }
+            ]
+         }
+      });
+      return;
+   }
+
+   // /processes/{processName}/init - process init
+   const processInitMatch = pathname.match(/^\/processes\/([\w.\-]+)\/init$/);
+   if (processInitMatch) {
+      const processName = processInitMatch[1];
+      const data = loadFixture(`processes/${processName}/init.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      // Default process init response with stepper and UUID
+      serveJson(res, {
+         processUUID: 'test-process-uuid-12345',
+         values: {},
+         processMetaData: {
+            name: processName,
+            label: processName,
+            frontendSteps: [
+               { name: 'input', label: 'Input', stepType: 'frontend', formFields: [], components: [] },
+               { name: 'review', label: 'Review', stepType: 'frontend', recordListFields: [], components: [] },
+               { name: 'result', label: 'Result', stepType: 'frontend', components: [{ type: 'PROCESS_SUMMARY_RESULTS' }] }
+            ]
+         },
+         nextStep: 'input'
+      });
+      return;
+   }
+
+   // /processes/{processName}/{uuid}/records - get process records
+   const processRecordsMatch = pathname.match(/^\/processes\/(\w+)\/([^\/]+)\/records$/);
+   if (processRecordsMatch) {
+      serveJson(res, {
+         records: [],
+         count: 0
+      });
+      return;
+   }
+
+   // /processes/{processName}/{uuid}/step/{stepName} - process step with UUID
+   const processStepWithUuidMatch = pathname.match(/^\/processes\/(\w+)\/([^\/]+)\/step\/(\w+)$/);
+   if (processStepWithUuidMatch) {
+      const processName = processStepWithUuidMatch[1];
+      const uuid = processStepWithUuidMatch[2];
+      const stepName = processStepWithUuidMatch[3];
+      // Return next step
+      serveJson(res, {
+         processUUID: uuid,
+         values: {},
+         processMetaData: {
+            name: processName,
+            label: processName,
+            frontendSteps: [
+               { name: 'input', label: 'Input', stepType: 'frontend', formFields: [], components: [] },
+               { name: 'review', label: 'Review', stepType: 'frontend', recordListFields: [], components: [] },
+               { name: 'result', label: 'Result', stepType: 'frontend', components: [{ type: 'PROCESS_SUMMARY_RESULTS' }] }
+            ]
+         },
+         nextStep: stepName === 'input' ? 'review' : (stepName === 'review' ? 'result' : null),
+         processResults: stepName === 'result' ? { message: 'Process completed successfully!' } : undefined
+      });
+      return;
+   }
+
+   // /processes/{processName}/step/{stepName} - process step (legacy, no UUID)
+   const processStepMatch = pathname.match(/^\/processes\/(\w+)\/step\/(\w+)$/);
+   if (processStepMatch) {
+      const processName = processStepMatch[1];
+      const stepName = processStepMatch[2];
+      // Return next step
+      serveJson(res, {
+         processUUID: 'test-process-uuid-12345',
+         values: {},
+         processMetaData: {
+            name: processName,
+            label: processName,
+            frontendSteps: [
+               { name: 'input', label: 'Input', stepType: 'frontend', formFields: [], components: [] },
+               { name: 'review', label: 'Review', stepType: 'frontend', recordListFields: [], components: [] },
+               { name: 'result', label: 'Result', stepType: 'frontend', components: [{ type: 'PROCESS_SUMMARY_RESULTS' }] }
+            ]
+         },
+         nextStep: stepName === 'input' ? 'review' : (stepName === 'review' ? 'result' : null),
+         processResults: stepName === 'result' ? { message: 'Process completed successfully!' } : undefined
+      });
+      return;
+   }
+
+   // /widget/{widgetName} - widget data
+   const widgetMatch = pathname.match(/^\/widget\/(.+)$/);
+   if (widgetMatch) {
+      const widgetName = widgetMatch[1];
+      const data = loadFixture(`widget/${widgetName}.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      // Default empty widget response
+      serveJson(res, {
+         type: 'table',
+         data: []
+      });
+      return;
+   }
+
+   // /manageSession - session management
+   if (pathname === '/manageSession' || pathname === '/api/manageSession') {
+      serveJson(res, {
+         uuid: 'test-session-uuid',
+         values: {}
+      });
+      return;
+   }
+
+   // /qqq/v1/table/{tableName}/query - table queries
+   const queryMatch = pathname.match(/^\/qqq\/v1\/table\/(\w+)\/query$/);
+   if (queryMatch) {
+      const tableName = queryMatch[1];
+      const data = loadFixture(`qqq/v1/table/${tableName}/query.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      // Default query response
+      serveJson(res, {
+         records: [
+            { values: { id: 1, firstName: 'Test', lastName: 'User' } },
+            { values: { id: 2, firstName: 'Another', lastName: 'Person' } }
+         ],
+         count: 2
+      });
+      return;
+   }
+
+   // /qqq/v1/table/{tableName}/count - table counts
+   const countMatch = pathname.match(/^\/qqq\/v1\/table\/(\w+)\/count$/);
+   if (countMatch) {
+      const tableName = countMatch[1];
+      const data = loadFixture(`qqq/v1/table/${tableName}/count.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      serveJson(res, { count: 2 });
+      return;
+   }
+
+   // /data/{tableName}/query - alternate query endpoint
+   const dataQueryMatch = pathname.match(/^\/data\/(\w+)\/query$/);
+   if (dataQueryMatch) {
+      serveJson(res, {
+         records: [],
+         count: 0
+      });
+      return;
+   }
+
+   // /data/{tableName}/count - alternate count endpoint
+   const dataCountMatch = pathname.match(/^\/data\/(\w+)\/count$/);
+   if (dataCountMatch) {
+      serveJson(res, { count: 2 });
+      return;
+   }
+
+   // /data/{tableName}/{id} - alternate single record lookup
+   const dataRecordMatch = pathname.match(/^\/data\/(\w+)\/(\d+)$/);
+   if (dataRecordMatch) {
+      const tableName = dataRecordMatch[1];
+      const recordId = dataRecordMatch[2];
+      serveJson(res, {
+         values: {
+            id: parseInt(recordId),
+            firstName: recordId === '1' ? 'John' : 'Jane',
+            lastName: recordId === '1' ? 'Doe' : 'Smith',
+            email: recordId === '1' ? 'john.doe@example.com' : 'jane.smith@example.com',
+            birthDate: '1990-01-15',
+            createDate: '2024-01-01T00:00:00Z',
+            modifyDate: '2024-01-01T00:00:00Z'
+         },
+         tableName: tableName
+      });
+      return;
+   }
+
+   // /qqq/v1/table/{tableName}/{id} - single record lookup
+   const recordMatch = pathname.match(/^\/qqq\/v1\/table\/(\w+)\/(\d+)$/);
+   if (recordMatch) {
+      const tableName = recordMatch[1];
+      const recordId = recordMatch[2];
+      const data = loadFixture(`qqq/v1/table/${tableName}/${recordId}.json`);
+      if (data) {
+         serveJson(res, data);
+         return;
+      }
+      // Default person record response
+      serveJson(res, {
+         values: {
+            id: parseInt(recordId),
+            firstName: recordId === '1' ? 'John' : 'Jane',
+            lastName: recordId === '1' ? 'Doe' : 'Smith',
+            email: recordId === '1' ? 'john.doe@example.com' : 'jane.smith@example.com',
+            birthDate: '1990-01-15',
+            createDate: '2024-01-01T00:00:00Z',
+            modifyDate: '2024-01-01T00:00:00Z'
+         },
+         tableName: tableName
+      });
+      return;
+   }
+
+   // Default 404
+   serve404(res, pathname);
+});
+
+server.listen(PORT, () => {
+   console.log(`Fixture server running on http://localhost:${PORT}`);
+   console.log(`Using fixture: ${FIXTURE_NAME}`);
+});

e2e/tests/joined-read-permissions.spec.ts

@@ -0,0 +1,94 @@
+import {test, expect, Page} from "@playwright/test";
+import {readFileSync} from "fs";
+import path from "path";
+
+/** First-party HTTP fixtures exercise browser request and error behavior; backend authorization is tested separately. */
+async function configure(page: Page, bridgeReadable = false, denyCount = false, denyQuery = false)
+{
+   const fixture = (name: string) => JSON.parse(readFileSync(path.resolve(__dirname, "../../src/test/resources/fixtures", name), "utf8"));
+   const global = fixture("metaData/index.json");
+   const person = fixture("qqq/v1/metaData/table/person.json");
+   const toy = {name: "toy", label: "Toy", primaryKeyField: "id", readPermission: true, insertPermission: true,
+      fields: {name: {name: "name", label: "Toy name", type: "STRING"}}};
+   global.tables.pet = {name: "pet", label: "Pet", readPermission: bridgeReadable, insertPermission: true};
+   global.tables.toy = {...toy};
+   person.exposedJoins = [{label: "Toys", isMany: true, joinTable: toy, joinPath: [
+      {name: "personPet", leftTable: "person", rightTable: "pet", type: "ONE_TO_MANY"},
+      {name: "toyPet", leftTable: "toy", rightTable: "pet", type: "MANY_TO_ONE"}
+   ]}];
+   const queryInputs: any[] = [];
+   const countInputs: any[] = [];
+   const errors: string[] = [];
+   page.on("pageerror", error => errors.push(error.message));
+   await page.route(/\/metaData\/?(?:\?.*)?$/, route => route.fulfill({json: global}));
+   await page.route("**/metaData/table/person*", route => route.fulfill({json: person}));
+   await page.route("**/qqq/v1/table/person/query*", async route =>
+   {
+      queryInputs.push(route.request().postDataJSON());
+      if (denyQuery) await route.fulfill({status: 403, json: {error: "Permission denied."}});
+      else
+      {
+         // Complete the successful Query after the denied Count is already displayed.
+         if (denyCount) await page.getByRole("alert").filter({hasText: "Cannot count records:"}).waitFor();
+         await route.continue();
+      }
+   });
+   await page.route("**/qqq/v1/table/person/count*", async route =>
+   {
+      countInputs.push(route.request().postDataJSON());
+      if (denyCount) await route.fulfill({status: 403, json: {error: "Permission denied."}});
+      else await route.continue();
+   });
+   return {queryInputs, countInputs, errors};
+}
+
+test("restricted bridge stays out of automatic requests and field choices", async ({page}) =>
+{
+   const {queryInputs, countInputs, errors} = await configure(page);
+   await page.goto("/peopleApp/greetingsApp/person");
+   await expect.poll(() => queryInputs.length).toBeGreaterThan(0);
+   await expect.poll(() => countInputs.length).toBeGreaterThan(0);
+   await expect(page.getByRole("cell", {name: "Test", exact: true})).toBeVisible();
+   expect(queryInputs.every(input => !input.joins?.some((join: any) => join.joinTable === "toy"))).toBe(true);
+   expect(countInputs.every(input => !input.joins?.some((join: any) => join.joinTable === "toy"))).toBe(true);
+   await page.locator('[data-qqq-id="button-columns"]').click();
+   await expect(page.locator(".fieldListMenuBody-columns")).toBeVisible();
+   await expect(page.locator(".fieldListMenuBody-columns")).not.toContainText("Toy name");
+   expect(errors).toEqual([]);
+});
+
+test("readable bridge restores query choices and selected joins", async ({page}) =>
+{
+   const {queryInputs, errors} = await configure(page, true);
+   await page.goto("/peopleApp/greetingsApp/person");
+   await expect.poll(() => queryInputs.length).toBeGreaterThan(0);
+   await page.locator('[data-qqq-id="button-columns"]').click();
+   await page.locator(".fieldListMenuBody-columns").getByText("Toy name", {exact: true}).click();
+   await expect.poll(() => queryInputs.some(input => input.joins?.some((join: any) => join.joinTable === "toy"))).toBe(true);
+   expect(errors).toEqual([]);
+});
+
+test("denied Count remains visible after successful record loading", async ({page}) =>
+{
+   const {queryInputs, countInputs, errors} = await configure(page, false, true);
+   await page.goto("/peopleApp/greetingsApp/person");
+   await expect.poll(() => queryInputs.length).toBeGreaterThan(0);
+   await expect.poll(() => countInputs.length).toBeGreaterThan(0);
+   await expect(page.getByRole("cell", {name: "Test", exact: true})).toBeVisible();
+   await expect(page.getByRole("alert").filter({hasText: "Cannot count records:"})).toBeVisible();
+   expect(errors).toEqual([]);
+});
+
+test("saved denied criteria and ordering are retained and show an error", async ({page}) =>
+{
+   const {queryInputs, countInputs, errors} = await configure(page, false, true, true);
+   const filter = {criteria: [{fieldName: "toy.name", operator: "EQUALS", values: ["restricted"]}], orderBys: [{fieldName: "toy.name", isAscending: true}]};
+   await page.goto("/peopleApp/greetingsApp/person?filter=" + encodeURIComponent(JSON.stringify(filter)));
+   await expect.poll(() => queryInputs.length).toBeGreaterThan(0);
+   await expect.poll(() => countInputs.length).toBeGreaterThan(0);
+   expect(queryInputs[0].filter.criteria).toEqual(filter.criteria);
+   expect(queryInputs[0].filter.orderBys).toEqual(filter.orderBys);
+   expect(countInputs[0].filter.criteria).toEqual(filter.criteria);
+   await expect(page.getByRole("alert").filter({hasText: "Permission denied."}).first()).toBeVisible();
+   expect(errors).toEqual([]);
+});

e2e/tests/round6-regressions.spec.ts

@@ -0,0 +1,345 @@
+import { test, expect } from '@playwright/test';
+
+/**
+ * Round 6 Visual Regression Tests
+ *
+ * Tests verify fixes for issues reported by Darin:
+ * 1. Sidenav double-highlight on hover
+ * 2. Chip border radius changed
+ * 3. Menu item padding increased
+ * 4. View field height reduced (button typography)
+ */
+
+test.describe('Round 6 Regression Fixes - Themed App', () => {
+   test.beforeEach(async ({ page }) => {
+      // Use themed fixture
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2000);
+   });
+
+   test.describe('Issue 1: Sidenav Hover - Single Highlight Only', () => {
+      test('sidenav item has only JS-controlled hover styling (no CSS override)', async ({ page }) => {
+         // The fix removed CSS hover rules that were causing double-highlight
+         // Wait for sidebar to be visible (it may be collapsed on smaller screens)
+         const drawer = page.locator('.MuiDrawer-paper');
+         await expect(drawer).toBeVisible();
+
+         // Find any visible nav item in the sidebar
+         const sidenavItem = page.locator('.MuiDrawer-paper .MuiListItem-root').first();
+         await expect(sidenavItem).toBeVisible({ timeout: 10000 });
+
+         // Get initial background
+         const initialBg = await sidenavItem.evaluate(el => getComputedStyle(el).backgroundColor);
+
+         // Hover and check background changes (should be controlled by JS, not CSS)
+         await sidenavItem.hover();
+         await page.waitForTimeout(300);
+         const hoverBg = await sidenavItem.evaluate(el => getComputedStyle(el).backgroundColor);
+
+         // The hover background should change, but there should not be multiple overlapping backgrounds
+         // The key test is that the page renders without visual artifacts
+         expect(hoverBg).toBeTruthy();
+      });
+
+      test('no redundant CSS hover rules in computed styles', async ({ page }) => {
+         // Check that the removed CSS rule is not applying
+         const result = await page.evaluate(() => {
+            // Look for any sidenav item
+            const item = document.querySelector('.MuiDrawer-paper a, .MuiDrawer-paper .MuiListItem-root');
+            if (!item) return { found: false, hasInlineHover: false };
+
+            // Check if any external stylesheet is applying the removed hover rule
+            // We removed: .MuiDrawer-paper a:hover, .MuiDrawer-paper .MuiListItem-root:hover
+            const sheets = Array.from(document.styleSheets);
+            let hasRemovedRule = false;
+
+            try {
+               for (const sheet of sheets) {
+                  try {
+                     const rules = Array.from(sheet.cssRules || []);
+                     for (const rule of rules) {
+                        if (rule instanceof CSSStyleRule) {
+                           const selector = rule.selectorText;
+                           if (selector &&
+                               (selector.includes('.MuiDrawer-paper a:hover') ||
+                                selector.includes('.MuiDrawer-paper .MuiListItem-root:hover'))) {
+                              // Check if this rule sets background-color
+                              if (rule.style.backgroundColor) {
+                                 hasRemovedRule = true;
+                              }
+                           }
+                        }
+                     }
+                  } catch (e) {
+                     // Cross-origin stylesheets will throw, ignore them
+                  }
+               }
+            } catch (e) {
+               // Ignore errors
+            }
+
+            return { found: true, hasRemovedRule };
+         });
+
+         expect(result.found).toBe(true);
+         expect(result.hasRemovedRule).toBe(false);
+      });
+   });
+
+   test.describe('Issue 2: Chip Border Radius (4px default, not 8px)', () => {
+      test('chips use borderRadius based on 4px default (2px for chip)', async ({ page }) => {
+         // Navigate to a page with chips if available, or test with a chip if present
+         // The default borderRadius is 4px, chips use borderRadius/2 = 2px
+         const result = await page.evaluate(() => {
+            // Check the shape.borderRadius from the theme via CSS variable
+            const root = document.documentElement;
+            const borderRadiusVar = getComputedStyle(root).getPropertyValue('--qqq-border-radius').trim();
+
+            // Also check if any chip is rendered
+            const chip = document.querySelector('.MuiChip-root');
+            let chipBorderRadius = '';
+            if (chip) {
+               chipBorderRadius = getComputedStyle(chip).borderRadius;
+            }
+
+            return {
+               cssVar: borderRadiusVar,
+               chipBorderRadius,
+               hasChip: !!chip
+            };
+         });
+
+         // The fixture uses 12px, but default should be 4px
+         // If no chip found, at least verify the CSS variable is set
+         if (result.hasChip) {
+            // Chip borderRadius should be half of the theme borderRadius
+            // With 12px theme (from fixture), chip should be 6px
+            expect(result.chipBorderRadius).toBeTruthy();
+         }
+      });
+   });
+
+   test.describe('Issue 3: Menu Item Padding (original values, not increased)', () => {
+      test('menu items have correct padding from menuItem.ts (~5px 16px)', async ({ page }) => {
+         // Find a button that opens a menu
+         const menuButton = page.locator('[aria-haspopup="true"]').first();
+
+         if (await menuButton.isVisible().catch(() => false)) {
+            await menuButton.click();
+            await page.waitForTimeout(500);
+
+            const result = await page.evaluate(() => {
+               const menuItem = document.querySelector('.MuiMenuItem-root');
+               if (!menuItem) return { found: false, padding: '' };
+
+               const styles = getComputedStyle(menuItem);
+               return {
+                  found: true,
+                  padding: styles.padding,
+                  paddingTop: styles.paddingTop,
+                  paddingBottom: styles.paddingBottom,
+                  paddingLeft: styles.paddingLeft,
+                  paddingRight: styles.paddingRight,
+               };
+            });
+
+            if (result.found) {
+               // Original menuItem.ts uses pxToRem(4.8) which is ~5px vertical
+               // Should NOT be 8px (that was our regression)
+               const topPadding = parseFloat(result.paddingTop);
+               const bottomPadding = parseFloat(result.paddingBottom);
+
+               // Padding should be less than 7px (the regression was 8px)
+               expect(topPadding).toBeLessThan(7);
+               expect(bottomPadding).toBeLessThan(7);
+            }
+         } else {
+            // Skip if no menu button found - test passes vacuously
+            test.skip();
+         }
+      });
+   });
+
+   test.describe('Issue 5: Button Color (Edit Filters and Columns)', () => {
+      test('text primary buttons have correct color styling (not scoped to .qqq-themed)', async ({ page }) => {
+         // The fix removed .qqq-themed scoping so button color applies to ALL apps
+         const result = await page.evaluate(() => {
+            // Look for any text primary button (like "Edit Filters and Columns")
+            const button = document.querySelector('.MuiButton-textPrimary');
+            if (!button) return { found: false, color: '' };
+
+            const styles = getComputedStyle(button);
+            return {
+               found: true,
+               color: styles.color,
+            };
+         });
+
+         if (result.found) {
+            // Button should have a color applied (not default inherited)
+            expect(result.color).toBeTruthy();
+            // The color should be from our CSS (--qqq-primary-color fallback is #0062FF)
+            // RGB values will vary based on theme, but should not be black/inherit
+         } else {
+            // Skip if no text primary button found
+            test.skip();
+         }
+      });
+
+      test('button CSS rules are NOT scoped to .qqq-themed class', async ({ page }) => {
+         // Verify that button color CSS is not restricted to themed apps
+         const result = await page.evaluate(() => {
+            const sheets = Array.from(document.styleSheets);
+            let hasUnscopedButtonRule = false;
+            let hasScopedButtonRule = false;
+
+            try {
+               for (const sheet of sheets) {
+                  try {
+                     const rules = Array.from(sheet.cssRules || []);
+                     for (const rule of rules) {
+                        if (rule instanceof CSSStyleRule) {
+                           const selector = rule.selectorText;
+                           if (selector) {
+                              // Check for unscoped button rules (what we want)
+                              if (selector === '.MuiButton-textPrimary' ||
+                                  selector === '.MuiButton-containedPrimary') {
+                                 hasUnscopedButtonRule = true;
+                              }
+                              // Check for scoped button rules (what we removed)
+                              if (selector.includes('.qqq-themed') &&
+                                  selector.includes('.MuiButton-')) {
+                                 hasScopedButtonRule = true;
+                              }
+                           }
+                        }
+                     }
+                  } catch (e) {
+                     // Cross-origin stylesheets will throw, ignore them
+                  }
+               }
+            } catch (e) {
+               // Ignore errors
+            }
+
+            return { hasUnscopedButtonRule, hasScopedButtonRule };
+         });
+
+         // Should have unscoped button rules (matching develop behavior)
+         expect(result.hasUnscopedButtonRule).toBe(true);
+         // Should NOT have .qqq-themed scoped button rules (regression fix)
+         expect(result.hasScopedButtonRule).toBe(false);
+      });
+   });
+
+   test.describe('Issue 4: Button Typography (view field height)', () => {
+      test('buttons have lineHeight of 1.75 (not 1.5)', async ({ page }) => {
+         const result = await page.evaluate(() => {
+            // Find any button
+            const button = document.querySelector('.MuiButton-root');
+            if (!button) return { found: false, lineHeight: '' };
+
+            const styles = getComputedStyle(button);
+            return {
+               found: true,
+               lineHeight: styles.lineHeight,
+               fontWeight: styles.fontWeight,
+            };
+         });
+
+         if (result.found) {
+            // lineHeight should be 1.75, not 1.5
+            // Note: computed lineHeight may be in px, so we check it's not the smaller value
+            const lineHeight = parseFloat(result.lineHeight);
+
+            // If it's a ratio (like 1.75), check it directly
+            // If it's in px, it should reflect the larger lineHeight
+            if (lineHeight < 10) {
+               // It's a ratio
+               expect(lineHeight).toBeGreaterThanOrEqual(1.7);
+            }
+         } else {
+            test.skip();
+         }
+      });
+
+      test('buttons have fontWeight of 500 or configured value (not 300)', async ({ page }) => {
+         const result = await page.evaluate(() => {
+            const button = document.querySelector('.MuiButton-root');
+            if (!button) return { found: false, fontWeight: '' };
+
+            return {
+               found: true,
+               fontWeight: getComputedStyle(button).fontWeight,
+            };
+         });
+
+         if (result.found) {
+            // fontWeight should be >= 500 (develop value), not 300
+            // The fixture sets 600, default should be 500
+            const weight = parseInt(result.fontWeight);
+            expect(weight).toBeGreaterThanOrEqual(500);
+         } else {
+            test.skip();
+         }
+      });
+   });
+});
+
+/**
+ * NOTE: Unthemed tests are in unthemed-regression.spec.ts
+ * This file tests the themed app behavior after Round 6 fixes.
+ *
+ * The key verifications for default values:
+ * - Default borderRadius changed from 8px to 4px (in parseBorderRadius)
+ * - Default button fontWeight changed from 300 to 500
+ * - Default button lineHeight changed from 1.5 to 1.75
+ *
+ * These defaults apply when no theme is configured OR when theme
+ * properties are not explicitly set.
+ */
+test.describe('Round 6 - Default Value Verification (via themed fixture override)', () => {
+   test('parseBorderRadius defaults to 4 (verified via code inspection)', async ({ page }) => {
+      // This test verifies our code change by checking the DEFAULT_THEME
+      // The actual rendered value in themed tests uses fixture's 12px
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+
+      // Check that the CSS variable is set (fixture uses 12px)
+      const result = await page.evaluate(() => {
+         const cssVar = getComputedStyle(document.documentElement)
+            .getPropertyValue('--qqq-border-radius').trim();
+         return { cssVar };
+      });
+
+      // Fixture uses 12px, which proves the theming system works
+      // The default of 4px applies when no theme is configured
+      expect(result.cssVar).toBe('12px');
+   });
+
+   test('DEFAULT_THEME button values are correct (500 weight, 1.75 lineHeight)', async ({ page }) => {
+      // The fixture overrides these, but we verify the themed app works
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+
+      const result = await page.evaluate(() => {
+         const button = document.querySelector('.MuiButton-root');
+         if (!button) return { found: false };
+
+         const styles = getComputedStyle(button);
+         return {
+            found: true,
+            fontWeight: styles.fontWeight,
+            lineHeight: styles.lineHeight,
+         };
+      });
+
+      if (result.found) {
+         // Fixture sets typographyButtonFontWeight: 600
+         // This proves the theming override works
+         const weight = parseInt(result.fontWeight);
+         expect(weight).toBeGreaterThanOrEqual(500);
+      }
+   });
+});

e2e/tests/theme.spec.ts

@@ -0,0 +1,523 @@
+import { test, expect } from '@playwright/test';
+import {colorsMatch} from "../utils/color-helpers";
+
+/**
+ * STRICT Theme Verification Tests for QQQ MaterialDashboardThemeMetaData
+ *
+ * ALL tests verify ACTUAL rendered values on components.
+ * Tests FAIL if:
+ * 1. The expected element is not found
+ * 2. The rendered value doesn't match the configured value
+ *
+ * Theme values from withFullCustomTheme.json fixture
+ */
+const THEME = {
+   // Core colors
+   primaryColor: '#E91E63',
+   secondaryColor: '#9C27B0',
+   backgroundColor: '#ECEFF1',
+   surfaceColor: '#FAFAFA',
+   textPrimary: '#263238',
+   textSecondary: '#607D8B',
+   // Status colors
+   errorColor: '#D50000',
+   warningColor: '#FF6D00',
+   successColor: '#00C853',
+   infoColor: '#2962FF',
+   // Typography
+   fontFamily: '"Inter", "Helvetica", sans-serif',
+   fontSizeBase: '15px',
+   fontWeightLight: 300,
+   fontWeightRegular: 400,
+   fontWeightMedium: 500,
+   fontWeightBold: 700,
+   // Button typography (from fixture - buttons use this, not fontWeightMedium)
+   typographyButtonFontWeight: 600,
+   // UI
+   borderRadius: '12px',
+   density: 'normal',
+   iconStyle: 'rounded',
+   // Branded header
+   brandedHeaderEnabled: true,
+   brandedHeaderBackgroundColor: '#1A237E',
+   brandedHeaderTextColor: '#E8EAF6',
+   brandedHeaderHeight: '56px',
+   // Sidebar
+   sidebarBackgroundColor: '#1B5E20',
+   sidebarTextColor: '#C8E6C9',
+   sidebarIconColor: '#A5D6A7',
+   sidebarSelectedBackgroundColor: '#2E7D32',
+   sidebarSelectedTextColor: '#FFFFFF',
+   sidebarHoverBackgroundColor: 'rgba(255, 255, 255, 0.15)',
+   sidebarDividerColor: 'rgba(255, 255, 255, 0.25)',
+   // Tables
+   tableHeaderBackgroundColor: '#7B1FA2',
+   tableHeaderTextColor: '#FFFFFF',
+   tableRowHoverColor: '#F3E5F5',
+   tableBorderColor: '#E1BEE7',
+   // General UI
+   dividerColor: '#CFD8DC',
+   borderColor: '#B0BEC5',
+};
+
+// Helper to format assertion message
+function colorMismatch(property: string, expected: string, actual: string): string {
+   return `${property}: expected ${expected}, got ${actual}`;
+}
+
+// ============================================================================
+// CORE COLORS - Actual Rendered Values
+// ============================================================================
+
+test.describe('Core Colors - Rendered', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2500);
+   });
+
+   test('primaryColor: CSS variable is set correctly', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Check if CSS variable is properly set - this is the authoritative source
+         // Note: This app uses "info" colored buttons, not "primary", so we verify
+         // the CSS variable rather than button backgrounds
+         const cssVar = getComputedStyle(document.documentElement).getPropertyValue('--qqq-primary-color').trim();
+         if (cssVar) {
+            return { found: true, value: cssVar, debug: 'CSS variable --qqq-primary-color' };
+         }
+         // Fallback: Try to find primary-styled buttons
+         const selectors = [
+            '.MuiButton-containedPrimary',
+            'button[class*="containedPrimary"]',
+            '.MuiButton-root[class*="Primary"]'
+         ];
+         for (const sel of selectors) {
+            const btn = document.querySelector(sel);
+            if (btn) {
+               const bg = getComputedStyle(btn).backgroundColor;
+               if (bg && bg !== 'rgba(0, 0, 0, 0)' && bg !== 'transparent') {
+                  return { found: true, value: bg, debug: btn.className };
+               }
+            }
+         }
+         return { found: false, value: '', debug: 'No primary color CSS variable or primary button found' };
+      });
+      expect(result.found, `Primary color not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.primaryColor), colorMismatch('primaryColor', THEME.primaryColor, result.value)).toBe(true);
+   });
+
+   test('secondaryColor: links use configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('a.MuiLink-root, main a:not(.MuiButton-root), .MuiTypography-root a');
+         if (!el) return { found: false, value: '', debug: 'No link found' };
+         return { found: true, value: getComputedStyle(el).color, debug: el.className };
+      });
+      expect(result.found, `Link not found: ${result.debug}`).toBe(true);
+      // Accept either primary or secondary color for links
+      const matchesPrimary = colorsMatch(result.value, THEME.primaryColor);
+      const matchesSecondary = colorsMatch(result.value, THEME.secondaryColor);
+      expect(matchesPrimary || matchesSecondary, colorMismatch('secondaryColor', THEME.secondaryColor, result.value)).toBe(true);
+   });
+
+   test('backgroundColor: page body uses configured background', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         return { value: getComputedStyle(document.body).backgroundColor };
+      });
+      expect(colorsMatch(result.value, THEME.backgroundColor), colorMismatch('backgroundColor', THEME.backgroundColor, result.value)).toBe(true);
+   });
+
+   test('surfaceColor: cards use configured background', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Find cards/paper in main content, NOT in the drawer (sidebar)
+         const el = document.querySelector('main .MuiCard-root, main .MuiPaper-root, .MuiCard-root:not(.MuiDrawer-paper):not(.MuiDrawer-root *)');
+         if (!el) return { found: false, value: '', debug: 'No card/paper found in main content' };
+         return { found: true, value: getComputedStyle(el).backgroundColor, debug: el.className };
+      });
+      expect(result.found, `Card/Paper not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.surfaceColor), colorMismatch('surfaceColor', THEME.surfaceColor, result.value)).toBe(true);
+   });
+
+   test('textPrimary: headings use configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Find headings NOT in the sidebar/drawer
+         const allHeadings = document.querySelectorAll('h1, h2, h3, h4, h5, h6, .MuiTypography-h1, .MuiTypography-h2, .MuiTypography-h3, .MuiTypography-h4, .MuiTypography-h5, .MuiTypography-h6');
+         for (const el of allHeadings) {
+            // Skip headings inside drawer/sidebar
+            if (el.closest('.MuiDrawer-root') || el.closest('.MuiDrawer-paper')) continue;
+            return { found: true, value: getComputedStyle(el).color, debug: el.className };
+         }
+         return { found: false, value: '', debug: 'No heading found outside sidebar' };
+      });
+      expect(result.found, `Heading not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.textPrimary), colorMismatch('textPrimary', THEME.textPrimary, result.value)).toBe(true);
+   });
+
+   test('textSecondary: body2/caption use configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Find body2/caption NOT in sidebar, drawer, or branded header
+         const allElements = document.querySelectorAll('.MuiTypography-body2, .MuiTypography-caption, .MuiTypography-subtitle2');
+         for (const el of allElements) {
+            // Skip elements inside drawer, sidebar, or branded header
+            if (el.closest('.MuiDrawer-root') || el.closest('.MuiDrawer-paper') || el.closest('.qqq-branded-header-bar')) continue;
+            return { found: true, value: getComputedStyle(el).color, debug: el.className };
+         }
+         // Fallback: check if the CSS variable is properly set
+         const cssVar = getComputedStyle(document.documentElement).getPropertyValue('--qqq-text-secondary').trim();
+         if (cssVar) {
+            return { found: true, value: cssVar, debug: 'CSS variable --qqq-text-secondary' };
+         }
+         return { found: false, value: '', debug: 'No body2/caption found outside sidebar/header and no CSS variable' };
+      });
+      expect(result.found, `Secondary text not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.textSecondary), colorMismatch('textSecondary', THEME.textSecondary, result.value)).toBe(true);
+   });
+});
+
+// ============================================================================
+// BRANDED HEADER - Actual Rendered Values
+// ============================================================================
+
+test.describe('Branded Header - Rendered', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2000);
+   });
+
+   test('brandedHeaderBackgroundColor: header uses configured background', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const selectors = ['.qqq-branded-header-bar', '[class*="NavBar"]', 'header', '.MuiAppBar-root'];
+         for (const sel of selectors) {
+            const el = document.querySelector(sel);
+            if (el) {
+               const bg = getComputedStyle(el).backgroundColor;
+               if (bg && bg !== 'rgba(0, 0, 0, 0)') {
+                  return { found: true, value: bg, selector: sel };
+               }
+            }
+         }
+         return { found: false, value: '', selector: '' };
+      });
+      expect(result.found, 'Branded header not found').toBe(true);
+      expect(colorsMatch(result.value, THEME.brandedHeaderBackgroundColor), colorMismatch('brandedHeaderBackgroundColor', THEME.brandedHeaderBackgroundColor, result.value)).toBe(true);
+   });
+
+   test('brandedHeaderTextColor: header text uses configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Specifically look for the branded header bar
+         const header = document.querySelector('.qqq-branded-header-bar');
+         if (!header) return { found: false, value: '', debug: 'No .qqq-branded-header-bar found' };
+
+         // First try to find a typography element with actual text
+         const textElements = header.querySelectorAll('.MuiTypography-root, span:not(:empty)');
+         for (const el of textElements) {
+            const text = el.textContent?.trim();
+            if (text && text.length > 0) {
+               return { found: true, value: getComputedStyle(el).color, debug: `${el.className}: "${text.substring(0, 20)}"` };
+            }
+         }
+
+         // Fallback: check the CSS variable is set correctly
+         const cssVar = getComputedStyle(document.documentElement).getPropertyValue('--qqq-branded-header-text-color').trim();
+         if (cssVar) {
+            return { found: true, value: cssVar, debug: 'CSS variable --qqq-branded-header-text-color' };
+         }
+
+         return { found: false, value: '', debug: 'No text element in branded header' };
+      });
+      expect(result.found, `Header text not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.brandedHeaderTextColor), colorMismatch('brandedHeaderTextColor', THEME.brandedHeaderTextColor, result.value)).toBe(true);
+   });
+
+   test('brandedHeaderHeight: header uses configured height', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const header = document.querySelector('.qqq-branded-header-bar')
+            || document.querySelector('[class*="NavBar"]')
+            || document.querySelector('header');
+         if (!header) return { found: false, value: '', debug: 'No header found' };
+         return { found: true, value: getComputedStyle(header).height, debug: '' };
+      });
+      expect(result.found, `Header not found: ${result.debug}`).toBe(true);
+      expect(result.value, colorMismatch('brandedHeaderHeight', THEME.brandedHeaderHeight, result.value)).toBe(THEME.brandedHeaderHeight);
+   });
+});
+
+// ============================================================================
+// SIDEBAR - Actual Rendered Values
+// ============================================================================
+
+test.describe('Sidebar - Rendered', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2000);
+   });
+
+   test('sidebarBackgroundColor: drawer uses configured background', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper');
+         if (!el) return { found: false, value: '', debug: 'No .MuiDrawer-paper found' };
+         return { found: true, value: getComputedStyle(el).backgroundColor, debug: '' };
+      });
+      expect(result.found, `Sidebar drawer not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.sidebarBackgroundColor), colorMismatch('sidebarBackgroundColor', THEME.sidebarBackgroundColor, result.value)).toBe(true);
+   });
+
+   test('sidebarTextColor: nav item text uses configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper .MuiListItemText-primary, .MuiDrawer-paper .MuiListItemText-root span');
+         if (!el) return { found: false, value: '', debug: 'No sidebar text found' };
+         return { found: true, value: getComputedStyle(el).color, debug: el.className };
+      });
+      expect(result.found, `Sidebar text not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.sidebarTextColor), colorMismatch('sidebarTextColor', THEME.sidebarTextColor, result.value)).toBe(true);
+   });
+
+   test('sidebarIconColor: nav item icons use configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper .MuiSvgIcon-root, .MuiDrawer-paper svg, .MuiDrawer-paper .MuiIcon-root');
+         if (!el) return { found: false, value: '', debug: 'No sidebar icon found' };
+         return { found: true, value: getComputedStyle(el).color, debug: el.className };
+      });
+      expect(result.found, `Sidebar icon not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.sidebarIconColor), colorMismatch('sidebarIconColor', THEME.sidebarIconColor, result.value)).toBe(true);
+   });
+
+   test('sidebarSelectedBackgroundColor: selected nav item uses configured background', async ({ page }) => {
+      // Click on a nav item to select it
+      await page.click('.MuiDrawer-paper .MuiListItem-root');
+      await page.waitForTimeout(500);
+
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper .qqq-sidebar-active');
+         if (!el) return { found: false, value: '', debug: 'No .qqq-sidebar-active found' };
+         return { found: true, value: getComputedStyle(el).backgroundColor, debug: el.className };
+      });
+      expect(result.found, `Selected sidebar item not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.sidebarSelectedBackgroundColor), colorMismatch('sidebarSelectedBackgroundColor', THEME.sidebarSelectedBackgroundColor, result.value)).toBe(true);
+   });
+
+   test('sidebarSelectedTextColor: selected nav item text uses configured color', async ({ page }) => {
+      await page.click('.MuiDrawer-paper .MuiListItem-root');
+      await page.waitForTimeout(500);
+
+      const result = await page.evaluate(() => {
+         const selected = document.querySelector('.MuiDrawer-paper .qqq-sidebar-active');
+         if (!selected) return { found: false, value: '', debug: 'No .qqq-sidebar-active found' };
+         const text = selected.querySelector('.MuiTypography-root, span') || selected;
+         return { found: true, value: getComputedStyle(text).color, debug: (text as Element).className };
+      });
+      expect(result.found, `Selected sidebar text not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.sidebarSelectedTextColor), colorMismatch('sidebarSelectedTextColor', THEME.sidebarSelectedTextColor, result.value)).toBe(true);
+   });
+
+   test('sidebarDividerColor: sidebar dividers use configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper .MuiDivider-root, .MuiDrawer-paper hr');
+         if (!el) return { found: false, value: '', debug: 'No sidebar divider found' };
+         const styles = getComputedStyle(el);
+         return { found: true, value: styles.borderColor || styles.backgroundColor, debug: el.className };
+      });
+      expect(result.found, `Sidebar divider not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.sidebarDividerColor), colorMismatch('sidebarDividerColor', THEME.sidebarDividerColor, result.value)).toBe(true);
+   });
+});
+
+// ============================================================================
+// TABLES (MUI DataGrid) - Actual Rendered Values
+// ============================================================================
+
+test.describe('Tables - Rendered', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2500);
+   });
+
+   test('tableHeaderBackgroundColor: DataGrid header cells use configured background', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDataGrid-columnHeader');
+         if (!el) return { found: false, value: '', debug: 'No .MuiDataGrid-columnHeader found' };
+         return { found: true, value: getComputedStyle(el).backgroundColor, debug: '' };
+      });
+      expect(result.found, `DataGrid column header not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.tableHeaderBackgroundColor), colorMismatch('tableHeaderBackgroundColor', THEME.tableHeaderBackgroundColor, result.value)).toBe(true);
+   });
+
+   test('tableHeaderTextColor: DataGrid header text uses configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDataGrid-columnHeaderTitle');
+         if (!el) return { found: false, value: '', debug: 'No .MuiDataGrid-columnHeaderTitle found' };
+         return { found: true, value: getComputedStyle(el).color, debug: '' };
+      });
+      expect(result.found, `DataGrid header text not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.tableHeaderTextColor), colorMismatch('tableHeaderTextColor', THEME.tableHeaderTextColor, result.value)).toBe(true);
+   });
+
+   test('tableBorderColor: DataGrid cells use configured border color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const cell = document.querySelector('.MuiDataGrid-cell');
+         if (!cell) return { found: false, value: '', debug: 'No .MuiDataGrid-cell found' };
+         return { found: true, value: getComputedStyle(cell).borderColor, debug: '' };
+      });
+      expect(result.found, `DataGrid cell not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.tableBorderColor), colorMismatch('tableBorderColor', THEME.tableBorderColor, result.value)).toBe(true);
+   });
+});
+
+// ============================================================================
+// TYPOGRAPHY - Actual Rendered Values
+// ============================================================================
+
+test.describe('Typography - Rendered', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2000);
+   });
+
+   test('fontFamily: body uses configured font family', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         return { value: getComputedStyle(document.body).fontFamily };
+      });
+      expect(result.value, 'fontFamily should contain Inter').toMatch(/Inter/i);
+   });
+
+   test('fontSizeBase: body uses configured font size', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         return { value: getComputedStyle(document.body).fontSize };
+      });
+      expect(result.value, colorMismatch('fontSizeBase', THEME.fontSizeBase, result.value)).toBe(THEME.fontSizeBase);
+   });
+
+   test('fontWeightRegular: body text uses configured weight', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiTypography-body1, p, span');
+         if (!el) return { found: false, value: '', debug: 'No body text found' };
+         return { found: true, value: getComputedStyle(el).fontWeight, debug: el.className };
+      });
+      expect(result.found, `Body text not found: ${result.debug}`).toBe(true);
+      expect(result.value, colorMismatch('fontWeightRegular', String(THEME.fontWeightRegular), result.value)).toBe(String(THEME.fontWeightRegular));
+   });
+
+   test('typographyButtonFontWeight: buttons use configured weight', async ({ page }) => {
+      await page.goto('/testApp/person');
+      await page.waitForTimeout(2500);
+
+      const result = await page.evaluate(() => {
+         const btn = document.querySelector('.MuiButton-root');
+         if (!btn) return { found: false, value: '', debug: 'No button found' };
+         return { found: true, value: getComputedStyle(btn).fontWeight, debug: btn.className };
+      });
+      expect(result.found, `Button not found: ${result.debug}`).toBe(true);
+      // Buttons use typographyButtonFontWeight, NOT fontWeightMedium
+      expect(result.value, colorMismatch('typographyButtonFontWeight', String(THEME.typographyButtonFontWeight), result.value)).toBe(String(THEME.typographyButtonFontWeight));
+   });
+});
+
+// ============================================================================
+// UI ELEMENTS - Actual Rendered Values
+// ============================================================================
+
+test.describe('UI Elements - Rendered', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2500);
+   });
+
+   test('borderRadius: buttons use configured border radius', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const btn = document.querySelector('.MuiButton-root');
+         if (!btn) return { found: false, value: '', debug: 'No button found' };
+         return { found: true, value: getComputedStyle(btn).borderRadius, debug: btn.className };
+      });
+      expect(result.found, `Button not found: ${result.debug}`).toBe(true);
+      expect(result.value, colorMismatch('borderRadius', THEME.borderRadius, result.value)).toBe(THEME.borderRadius);
+   });
+
+   test('borderColor: inputs use configured border color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiOutlinedInput-notchedOutline');
+         if (!el) return { found: false, value: '', debug: 'No .MuiOutlinedInput-notchedOutline found' };
+         return { found: true, value: getComputedStyle(el).borderColor, debug: '' };
+      });
+      expect(result.found, `Input border not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.borderColor), colorMismatch('borderColor', THEME.borderColor, result.value)).toBe(true);
+   });
+
+   test('dividerColor: dividers use configured color', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Find a divider NOT in the drawer (sidebar has its own divider color)
+         const selectors = [
+            'main .MuiDivider-root',
+            '.MuiDivider-root:not(.MuiDrawer-root *):not(.MuiDrawer-paper *)'
+         ];
+         for (const sel of selectors) {
+            const el = document.querySelector(sel);
+            if (el) {
+               const styles = getComputedStyle(el);
+               return { found: true, value: styles.borderColor || styles.backgroundColor, debug: el.className };
+            }
+         }
+         // If no divider element found, check if the CSS variable is properly set
+         const cssVar = getComputedStyle(document.documentElement).getPropertyValue('--qqq-divider-color').trim();
+         if (cssVar) {
+            return { found: true, value: cssVar, debug: 'CSS variable --qqq-divider-color' };
+         }
+         return { found: false, value: '', debug: 'No divider found outside drawer' };
+      });
+      expect(result.found, `Divider not found: ${result.debug}`).toBe(true);
+      expect(colorsMatch(result.value, THEME.dividerColor), colorMismatch('dividerColor', THEME.dividerColor, result.value)).toBe(true);
+   });
+});
+
+// ============================================================================
+// DIAGNOSTIC DUMP - outputs actual values for debugging
+// ============================================================================
+
+test.describe('Diagnostic Dump', () => {
+   test('output all rendered theme values', async ({ page }) => {
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2500);
+
+      const diagnostics = await page.evaluate(() => {
+         const getColor = (selector: string, prop: string) => {
+            const el = document.querySelector(selector);
+            if (!el) return { found: false, value: 'NOT FOUND' };
+            return { found: true, value: getComputedStyle(el)[prop as any] };
+         };
+
+         return {
+            primaryButton: getColor('.MuiButton-containedPrimary', 'backgroundColor'),
+            link: getColor('a.MuiLink-root, main a', 'color'),
+            body: getColor('body', 'backgroundColor'),
+            card: getColor('.MuiCard-root, .MuiPaper-root', 'backgroundColor'),
+            heading: getColor('h1, h2, h3, h4', 'color'),
+            body2: getColor('.MuiTypography-body2', 'color'),
+            brandedHeader: getColor('.qqq-branded-header-bar', 'backgroundColor'),
+            brandedHeaderText: getColor('.qqq-branded-header-bar span', 'color'),
+            sidebarBg: getColor('.MuiDrawer-paper', 'backgroundColor'),
+            sidebarText: getColor('.MuiDrawer-paper .MuiListItemText-primary', 'color'),
+            sidebarIcon: getColor('.MuiDrawer-paper .MuiSvgIcon-root', 'color'),
+            sidebarActive: getColor('.qqq-sidebar-active', 'backgroundColor'),
+            sidebarActiveText: getColor('.qqq-sidebar-active .MuiTypography-root', 'color'),
+            tableHeader: getColor('.MuiDataGrid-columnHeader', 'backgroundColor'),
+            tableHeaderText: getColor('.MuiDataGrid-columnHeaderTitle', 'color'),
+            tableCell: getColor('.MuiDataGrid-cell', 'borderColor'),
+            inputBorder: getColor('.MuiOutlinedInput-notchedOutline', 'borderColor'),
+            buttonRadius: getColor('.MuiButton-root', 'borderRadius'),
+            buttonWeight: getColor('.MuiButton-root', 'fontWeight'),
+            bodyWeight: getColor('.MuiTypography-body1', 'fontWeight'),
+         };
+      });
+
+      console.log('=== DIAGNOSTIC OUTPUT ===');
+      console.log(JSON.stringify(diagnostics, null, 2));
+      console.log('=========================');
+
+      // This test always passes - it's just for diagnostics
+      expect(true).toBe(true);
+   });
+});

e2e/tests/unthemed-regression.spec.ts

@@ -0,0 +1,421 @@
+import { test, expect } from '@playwright/test';
+import {colorsMatch, hexToRgb, isTransparentOrNearlyTransparent, parseRgb} from "../utils/color-helpers";
+
+/**
+ * STRICT Visual Regression Tests for UNTHEMED Apps (Issue #128)
+ *
+ * These tests verify that apps WITHOUT a backend theme look correct.
+ * Run with: THEME_FIXTURE=index npm run e2e:unthemed
+ *
+ * IMPORTANT: These tests require the 'index' fixture (no theme configured).
+ * They will be SKIPPED if running with a themed fixture (e.g., withFullCustomTheme).
+ *
+ * To run these tests:
+ *   npm run e2e:unthemed     (uses THEME_FIXTURE=index)
+ *
+ * To run all tests properly:
+ *   npm run e2e:all          (runs themed then unthemed with correct fixtures)
+ *
+ * Tests verify:
+ * 1. Sidebar has correct DEFAULT_THEME colors (dark background, white text)
+ * 2. Navbar/AppBar is NOT white (transparent, not affected by surfaceColor)
+ * 3. CSS variables are injected with DEFAULT_THEME values
+ * 4. Cards/Paper get surfaceColor but AppBar does not
+ */
+
+// Helper function to check if themed fixture is loaded and skip if so
+async function skipIfThemedFixture(page: import('@playwright/test').Page) {
+   const hasTheme = await page.evaluate(() => {
+      const primaryColor = getComputedStyle(document.documentElement)
+         .getPropertyValue('--qqq-primary-color').trim();
+      return primaryColor !== '';
+   });
+
+   if (hasTheme) {
+      test.skip(true, 'Skipping unthemed test: themed fixture detected. Run with: npm run e2e:unthemed');
+   }
+}
+
+// DEFAULT_THEME values from src/qqq/utils/themeUtils.ts
+// These must match the values in themeUtils.ts to restore pre-PR-125 appearance
+const DEFAULT_THEME = {
+   // Core colors
+   primaryColor: '#0062FF',
+   backgroundColor: '#f0f2f5',
+   surfaceColor: '#ffffff',
+   // Sidebar (dark gray matching original gradients.dark.main)
+   sidebarBackgroundColor: '#42424a',
+   sidebarTextColor: '#ffffff',
+   sidebarIconColor: '#ffffff',
+   sidebarSelectedBackgroundColor: 'rgba(255, 255, 255, 0.2)',
+   sidebarSelectedTextColor: '#ffffff',
+   sidebarHoverBackgroundColor: 'rgba(255, 255, 255, 0.2)',
+   // Typography (matching original typography.ts)
+   fontFamily: '"SF Pro Display", "Roboto", "Helvetica", "Arial", sans-serif',
+};
+
+// Helper to check if color is NOT white (surfaceColor)
+function isNotWhite(color: string): boolean {
+   // Check if transparent
+   if (isTransparentOrNearlyTransparent(color)) {
+      return true;
+   }
+   // Check if NOT white (#ffffff or rgb(255,255,255))
+   const actualRgb = parseRgb(color);
+   if (!actualRgb) {
+      if (color.startsWith('#')) {
+         const hex = hexToRgb(color);
+         if (!hex) {
+            return true;
+         }
+         return !(hex.r > 250 && hex.g > 250 && hex.b > 250);
+      }
+      return true;
+   }
+   // Allow some tolerance - if it's close to white, it's a problem
+   return !(actualRgb.r > 250 && actualRgb.g > 250 && actualRgb.b > 250);
+}
+
+// Helper to check if a background (which may be a gradient) contains a color
+function backgroundContainsColor(background: string, expectedColor: string, tolerance = 5): boolean {
+   // Extract all rgb/rgba values from the background string
+   const rgbMatches = background.matchAll(/rgb\((\d+),\s*(\d+),\s*(\d+)\)/g);
+   const expectedRgb = expectedColor.startsWith('#') ? hexToRgb(expectedColor) : parseRgb(expectedColor);
+   if (!expectedRgb) return false;
+
+   for (const match of rgbMatches) {
+      const r = parseInt(match[1]);
+      const g = parseInt(match[2]);
+      const b = parseInt(match[3]);
+      if (
+         Math.abs(r - expectedRgb.r) <= tolerance &&
+         Math.abs(g - expectedRgb.g) <= tolerance &&
+         Math.abs(b - expectedRgb.b) <= tolerance
+      ) {
+         return true;
+      }
+   }
+   return false;
+}
+
+// ============================================================================
+// CSS VARIABLES - Verify they are NOT injected for unthemed apps
+// CSS variables are 100% optional - CSS uses fallback values
+// ============================================================================
+
+test.describe('Unthemed App - CSS Variables Are Optional', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(1000);
+      await skipIfThemedFixture(page);
+   });
+
+   test('no --qqq-* CSS variables are injected when no theme is configured', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const root = document.documentElement;
+         const style = getComputedStyle(root);
+         return {
+            sidebarBg: style.getPropertyValue('--qqq-sidebar-background-color').trim(),
+            sidebarText: style.getPropertyValue('--qqq-sidebar-text-color').trim(),
+            surfaceColor: style.getPropertyValue('--qqq-surface-color').trim(),
+            primaryColor: style.getPropertyValue('--qqq-primary-color').trim(),
+         };
+      });
+      // All CSS variables should be empty (not injected) for unthemed apps
+      expect(result.sidebarBg, 'CSS variable should not be injected for unthemed app').toBe('');
+      expect(result.sidebarText, 'CSS variable should not be injected for unthemed app').toBe('');
+      expect(result.surfaceColor, 'CSS variable should not be injected for unthemed app').toBe('');
+      expect(result.primaryColor, 'CSS variable should not be injected for unthemed app').toBe('');
+   });
+
+   test('body does NOT have .qqq-themed class when no theme is configured', async ({ page }) => {
+      const hasClass = await page.evaluate(() => {
+         return document.body.classList.contains('qqq-themed');
+      });
+      expect(hasClass, 'Body should not have .qqq-themed class for unthemed app').toBe(false);
+   });
+});
+
+// ============================================================================
+// SIDEBAR - Verify dark theme colors via CSS fallbacks
+// ============================================================================
+
+test.describe('Unthemed App - Sidebar Colors', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(1000);
+      await skipIfThemedFixture(page);
+   });
+
+   test('sidebar has dark background via CSS fallback', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper');
+         if (!el) return { found: false, value: '', debug: 'No .MuiDrawer-paper found' };
+         // Use 'background' not 'backgroundColor' because gradients set background-image
+         return { found: true, value: getComputedStyle(el).background, debug: '' };
+      });
+      expect(result.found, `Sidebar not found: ${result.debug}`).toBe(true);
+      // Check that the background contains the expected dark color (gradient includes #42424a)
+      expect(
+         backgroundContainsColor(result.value, DEFAULT_THEME.sidebarBackgroundColor),
+         `Sidebar background should contain ${DEFAULT_THEME.sidebarBackgroundColor}, got ${result.value}`
+      ).toBe(true);
+   });
+
+   test('sidebar text is white from DEFAULT_THEME', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper .MuiListItemText-primary, .MuiDrawer-paper .MuiTypography-root');
+         if (!el) return { found: false, value: '', debug: 'No sidebar text found' };
+         return { found: true, value: getComputedStyle(el).color, debug: el.className };
+      });
+      expect(result.found, `Sidebar text not found: ${result.debug}`).toBe(true);
+      expect(
+         colorsMatch(result.value, DEFAULT_THEME.sidebarTextColor, 5),
+         `Sidebar text color: expected ${DEFAULT_THEME.sidebarTextColor}, got ${result.value}`
+      ).toBe(true);
+   });
+
+   test('sidebar icons are white from DEFAULT_THEME', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const el = document.querySelector('.MuiDrawer-paper .MuiIcon-root, .MuiDrawer-paper .material-icons');
+         if (!el) return { found: false, value: '', debug: 'No sidebar icon found' };
+         return { found: true, value: getComputedStyle(el).color, debug: el.className };
+      });
+      expect(result.found, `Sidebar icon not found: ${result.debug}`).toBe(true);
+      expect(
+         colorsMatch(result.value, DEFAULT_THEME.sidebarIconColor, 5),
+         `Sidebar icon color: expected ${DEFAULT_THEME.sidebarIconColor}, got ${result.value}`
+      ).toBe(true);
+   });
+});
+
+// ============================================================================
+// NAVBAR/APPBAR - Verify NOT white (Issue #128 regression)
+// ============================================================================
+
+test.describe('Unthemed App - Navbar NOT White (Issue #128)', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(1000);
+      await skipIfThemedFixture(page);
+   });
+
+   test('CRITICAL: AppBar background is NOT white/surfaceColor', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const appBar = document.querySelector('.MuiAppBar-root');
+         if (!appBar) return { found: false, value: '', debug: 'No .MuiAppBar-root found' };
+         return { found: true, value: getComputedStyle(appBar).backgroundColor, debug: '' };
+      });
+      expect(result.found, `AppBar not found: ${result.debug}`).toBe(true);
+      expect(
+         isNotWhite(result.value),
+         `REGRESSION: AppBar background is white (${result.value}). Should be transparent or non-white.`
+      ).toBe(true);
+   });
+
+   test('CRITICAL: Breadcrumb area is NOT white', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Find the breadcrumb container or navbar area
+         const selectors = [
+            '.MuiBreadcrumbs-root',
+            '.MuiToolbar-root',
+            '.MuiAppBar-root .MuiBox-root'
+         ];
+         for (const sel of selectors) {
+            const el = document.querySelector(sel);
+            if (el) {
+               const bg = getComputedStyle(el).backgroundColor;
+               return { found: true, value: bg, selector: sel };
+            }
+         }
+         return { found: false, value: '', selector: '' };
+      });
+      expect(result.found, 'Breadcrumb/toolbar area not found').toBe(true);
+      expect(
+         isNotWhite(result.value),
+         `REGRESSION: Breadcrumb area (${result.selector}) is white (${result.value}). Should not be white.`
+      ).toBe(true);
+   });
+
+   test('AppBar does not have --qqq-surface-color applied', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const appBar = document.querySelector('.MuiAppBar-root');
+         if (!appBar) return { found: false, isSurfaceColor: false, value: '' };
+         const bg = getComputedStyle(appBar).backgroundColor;
+         // Check if it matches surfaceColor (#ffffff)
+         const isSurfaceColor = bg === 'rgb(255, 255, 255)' || bg === '#ffffff';
+         return { found: true, isSurfaceColor, value: bg };
+      });
+      expect(result.found, 'AppBar not found').toBe(true);
+      expect(
+         result.isSurfaceColor,
+         `REGRESSION: AppBar has surfaceColor (#ffffff) applied. Value: ${result.value}`
+      ).toBe(false);
+   });
+});
+
+// ============================================================================
+// CARDS/PAPER - Verify surfaceColor IS applied (but not to AppBar)
+// ============================================================================
+
+test.describe('Unthemed App - Cards Use Surface Color', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/testApp/person');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2500);
+      await skipIfThemedFixture(page);
+   });
+
+   test('Cards in main content use surfaceColor', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         // Find a card in main content, NOT in drawer/sidebar
+         const el = document.querySelector('main .MuiCard-root, .MuiCard-root:not(.MuiDrawer-paper *)');
+         if (!el) return { found: false, value: '', debug: 'No card found in main content' };
+         return { found: true, value: getComputedStyle(el).backgroundColor, debug: el.className };
+      });
+      expect(result.found, `Card not found: ${result.debug}`).toBe(true);
+      expect(
+         colorsMatch(result.value, DEFAULT_THEME.surfaceColor, 5),
+         `Card background: expected ${DEFAULT_THEME.surfaceColor}, got ${result.value}`
+      ).toBe(true);
+   });
+});
+
+// ============================================================================
+// BRANDED HEADER - Verify NOT shown when disabled
+// ============================================================================
+
+test.describe('Unthemed App - Branded Header Disabled', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2000);
+      await skipIfThemedFixture(page);
+   });
+
+   test('branded header is not visible when not configured', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const header = document.querySelector('.qqq-branded-header-bar');
+         if (!header) return { exists: false, height: '0' };
+         const height = getComputedStyle(header).height;
+         const display = getComputedStyle(header).display;
+         return { exists: true, height, display };
+      });
+      // Either the element doesn't exist, or it has 0 height, or it's hidden
+      const isHidden = !result.exists ||
+         result.height === '0px' ||
+         result.height === '0' ||
+         result.display === 'none';
+      expect(isHidden, `Branded header should not be visible. Height: ${result.height}`).toBe(true);
+   });
+
+   test('--qqq-branded-header-height is not set (CSS fallback to 0px)', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const value = getComputedStyle(document.documentElement)
+            .getPropertyValue('--qqq-branded-header-height').trim();
+         return { value };
+      });
+      // CSS variable should be empty (not injected) - CSS fallback handles it
+      expect(
+         result.value === '' || result.value === '0px' || result.value === '0',
+         `--qqq-branded-header-height should be empty or 0px, got ${result.value}`
+      ).toBe(true);
+   });
+
+   test('sidebar does not overhang content area', async ({ page }) => {
+      const result = await page.evaluate(() => {
+         const sidebar = document.querySelector('.MuiDrawer-paper');
+         // Try multiple selectors for main content area
+         const mainContent = document.querySelector('main') ||
+            document.querySelector('[class*="content"]') ||
+            document.querySelector('.MuiBox-root > .MuiBox-root');
+         if (!sidebar) {
+            return { found: false, sidebarTop: 0, contentTop: 0, debug: 'No sidebar found' };
+         }
+         const sidebarRect = sidebar.getBoundingClientRect();
+         // If we can't find main content, just verify sidebar starts at top (no overhang)
+         if (!mainContent) {
+            // Sidebar should start at or near the top of viewport
+            return {
+               found: true,
+               sidebarTop: sidebarRect.top,
+               contentTop: 0,
+               isAligned: sidebarRect.top <= 100, // Should be near top
+               debug: 'Using viewport top as reference'
+            };
+         }
+         const contentRect = mainContent.getBoundingClientRect();
+         return {
+            found: true,
+            sidebarTop: sidebarRect.top,
+            contentTop: contentRect.top,
+            // Sidebar should start at same level or below content
+            isAligned: sidebarRect.top <= contentRect.top + 50,
+            debug: 'Found main content'
+         };
+      });
+      expect(result.found, `Sidebar not found: ${result.debug}`).toBe(true);
+      expect(
+         result.isAligned,
+         `Sidebar overhang: sidebar top (${result.sidebarTop}) should align with content top (${result.contentTop}). Debug: ${result.debug}`
+      ).toBe(true);
+   });
+});
+
+// ============================================================================
+// DIAGNOSTIC - Output actual values for debugging
+// ============================================================================
+
+test.describe('Unthemed App - Diagnostic Dump', () => {
+   test.beforeEach(async ({ page }) => {
+      await page.goto('/');
+      await page.waitForSelector('[id="root"]');
+      await page.waitForTimeout(2000);
+      await skipIfThemedFixture(page);
+   });
+
+   test('output all CSS variables and rendered values', async ({ page }) => {
+
+      const diagnostics = await page.evaluate(() => {
+         const root = document.documentElement;
+         const getVar = (name: string) => getComputedStyle(root).getPropertyValue(name).trim();
+         const getBg = (selector: string) => {
+            const el = document.querySelector(selector);
+            return el ? getComputedStyle(el).backgroundColor : 'NOT FOUND';
+         };
+         const getColor = (selector: string) => {
+            const el = document.querySelector(selector);
+            return el ? getComputedStyle(el).color : 'NOT FOUND';
+         };
+
+         return {
+            cssVariables: {
+               '--qqq-sidebar-background-color': getVar('--qqq-sidebar-background-color'),
+               '--qqq-sidebar-text-color': getVar('--qqq-sidebar-text-color'),
+               '--qqq-surface-color': getVar('--qqq-surface-color'),
+               '--qqq-primary-color': getVar('--qqq-primary-color'),
+               '--qqq-branded-header-height': getVar('--qqq-branded-header-height'),
+               '--qqq-branded-header-enabled': getVar('--qqq-branded-header-enabled'),
+            },
+            renderedValues: {
+               sidebarBackground: getBg('.MuiDrawer-paper'),
+               sidebarText: getColor('.MuiDrawer-paper .MuiTypography-root'),
+               appBarBackground: getBg('.MuiAppBar-root'),
+               toolbarBackground: getBg('.MuiToolbar-root'),
+               cardBackground: getBg('.MuiCard-root'),
+               bodyBackground: getBg('body'),
+            }
+         };
+      });
+
+      console.log('=== UNTHEMED APP DIAGNOSTIC ===');
+      console.log(JSON.stringify(diagnostics, null, 2));
+      console.log('===============================');
+
+      // This test always passes - diagnostic only
+      expect(true).toBe(true);
+   });
+});

e2e/tests/visual-regression.spec.ts

@@ -0,0 +1,305 @@
+/**
+ * Visual Regression Tests for QQQ Frontend Material Dashboard
+ *
+ * These tests capture baseline screenshots of the unthemed application.
+ * When theming is re-implemented, these tests will ensure the unthemed
+ * appearance remains unchanged.
+ *
+ * Run with: npx playwright test
+ * Update baselines with: npx playwright test --update-snapshots
+ */
+import { test, expect } from '@playwright/test';
+
+// Tight tolerance for pixel-level regression detection
+// Snapshots must be generated on Linux (via Docker) to match CI environment
+const SCREENSHOT_OPTIONS = {
+   maxDiffPixelRatio: 0.01, // 1% tolerance - pixel-level accuracy
+};
+
+test.describe('Visual Regression - Unthemed Baseline', () => {
+
+   test.beforeEach(async ({ page }) => {
+      // Wait for app to fully load
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+   });
+
+   test('app home page layout', async ({ page }) => {
+      // Wait for main content to render (the app bar is always visible)
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+      // Give time for all content to load
+      await page.waitForTimeout(2000);
+
+      // Capture full page screenshot
+      await expect(page).toHaveScreenshot('home-page-full.png', {
+         fullPage: true,
+         ...SCREENSHOT_OPTIONS,
+      });
+   });
+
+   test('sidebar navigation', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // The sidebar drawer paper contains the navigation
+      const sidebarPaper = page.locator('.MuiDrawer-paper');
+
+      if (await sidebarPaper.count() > 0 && await sidebarPaper.isVisible()) {
+         // Capture sidebar screenshot
+         await expect(sidebarPaper).toHaveScreenshot('sidebar-navigation.png', SCREENSHOT_OPTIONS);
+      } else {
+         // If sidebar is collapsed/hidden, skip this test
+         test.skip();
+      }
+   });
+
+   test('top navigation bar', async ({ page }) => {
+      // Wait for app bar to render
+      const appBar = page.locator('.MuiAppBar-root');
+      await expect(appBar).toBeVisible({ timeout: 10000 });
+
+      // Capture app bar screenshot
+      await expect(appBar).toHaveScreenshot('top-navigation-bar.png', SCREENSHOT_OPTIONS);
+   });
+
+   test('button styles - contained primary', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Find a contained primary button
+      const button = page.locator('.MuiButton-containedPrimary').first();
+
+      if (await button.count() > 0) {
+         await expect(button).toHaveScreenshot('button-contained-primary.png', SCREENSHOT_OPTIONS);
+      }
+   });
+
+   test('button styles - text primary', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Find a text primary button
+      const button = page.locator('.MuiButton-textPrimary').first();
+
+      if (await button.count() > 0) {
+         await expect(button).toHaveScreenshot('button-text-primary.png', SCREENSHOT_OPTIONS);
+      }
+   });
+
+   test('typography hierarchy', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Capture various typography elements if visible
+      const h6 = page.locator('h6').first();
+      const body = page.locator('.MuiTypography-body1').first();
+
+      // Capture h6 (commonly used in dashboard)
+      if (await h6.count() > 0 && await h6.isVisible()) {
+         await expect(h6).toHaveScreenshot('typography-h6.png', SCREENSHOT_OPTIONS);
+      }
+
+      // Capture body text
+      if (await body.count() > 0 && await body.isVisible()) {
+         await expect(body).toHaveScreenshot('typography-body1.png', SCREENSHOT_OPTIONS);
+      }
+   });
+
+   test('card component styles', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Find a card component
+      const card = page.locator('.MuiCard-root').first();
+
+      if (await card.count() > 0) {
+         await expect(card).toHaveScreenshot('card-component.png', SCREENSHOT_OPTIONS);
+      }
+   });
+
+   test('paper component styles', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Find a paper component (excluding cards)
+      const paper = page.locator('.MuiPaper-root:not(.MuiCard-root)').first();
+
+      if (await paper.count() > 0) {
+         await expect(paper).toHaveScreenshot('paper-component.png', SCREENSHOT_OPTIONS);
+      }
+   });
+
+   test('input field styles', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Find an input field
+      const input = page.locator('.MuiTextField-root, .MuiOutlinedInput-root').first();
+
+      if (await input.count() > 0) {
+         await expect(input).toHaveScreenshot('input-field.png', SCREENSHOT_OPTIONS);
+      }
+   });
+
+   test('chip/badge styles', async ({ page }) => {
+      // Wait for app to load
+      await page.waitForSelector('.MuiAppBar-root', { timeout: 10000 });
+
+      // Find a chip component
+      const chip = page.locator('.MuiChip-root').first();
+
+      if (await chip.count() > 0) {
+         await expect(chip).toHaveScreenshot('chip-component.png', SCREENSHOT_OPTIONS);
+      }
+   });
+});
+
+test.describe('Visual Regression - Table Views', () => {
+
+   test('data grid header styles', async ({ page }) => {
+      // Navigate to a table view if available
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      // Look for data grid
+      const dataGrid = page.locator('.MuiDataGrid-root');
+
+      if (await dataGrid.count() > 0) {
+         // Capture data grid header
+         const header = dataGrid.locator('.MuiDataGrid-columnHeaders');
+         if (await header.count() > 0) {
+            await expect(header).toHaveScreenshot('datagrid-header.png', SCREENSHOT_OPTIONS);
+         }
+      }
+   });
+
+   test('table pagination styles', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      // Find pagination component
+      const pagination = page.locator('.MuiTablePagination-root');
+
+      if (await pagination.count() > 0) {
+         await expect(pagination).toHaveScreenshot('table-pagination.png', SCREENSHOT_OPTIONS);
+      }
+   });
+});
+
+test.describe('Visual Regression - Color Verification', () => {
+
+   test('primary color usage', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      // Verify primary buttons are NOT blue (#0062FF was the theming color)
+      const primaryButton = page.locator('.MuiButton-containedPrimary').first();
+
+      if (await primaryButton.count() > 0) {
+         const bgColor = await primaryButton.evaluate(el =>
+            window.getComputedStyle(el).backgroundColor
+         );
+
+         // Should not be the theming blue
+         expect(bgColor).not.toBe('rgb(0, 98, 255)');
+      }
+   });
+
+   test('text colors are correct', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      // Check body text color
+      const bodyText = page.locator('.MuiTypography-body1, .MuiTypography-body2').first();
+
+      if (await bodyText.count() > 0) {
+         const color = await bodyText.evaluate(el =>
+            window.getComputedStyle(el).color
+         );
+
+         // Text should be dark (not the theming blue-gray #344767)
+         expect(color).not.toBe('rgb(52, 71, 103)');
+      }
+   });
+
+   test('sidebar background color', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      const sidebar = page.locator('.MuiDrawer-paper');
+
+      if (await sidebar.count() > 0) {
+         const bgColor = await sidebar.evaluate(el =>
+            window.getComputedStyle(el).backgroundColor
+         );
+
+         // Capture the actual color for baseline comparison
+         console.log('Sidebar background color:', bgColor);
+      }
+   });
+});
+
+test.describe('Visual Regression - Layout Integrity', () => {
+
+   test('no CSS variable fallback indicators', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      // Check that no elements have CSS variable fallbacks visible
+      // (This would indicate theming variables are leaking through)
+      const pageContent = await page.content();
+
+      // Should not contain any --qqq- CSS variables in computed styles
+      const elements = await page.locator('*').evaluateAll(els =>
+         els.filter(el => {
+            const style = window.getComputedStyle(el);
+            return style.cssText.includes('--qqq-');
+         }).length
+      );
+
+      // In unthemed mode, no elements should use --qqq- variables
+      expect(elements).toBe(0);
+   });
+
+   test('consistent border radius on cards', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      const cards = page.locator('.MuiCard-root');
+      const count = await cards.count();
+
+      if (count > 0) {
+         const radii = await cards.evaluateAll(els =>
+            els.map(el => window.getComputedStyle(el).borderRadius)
+         );
+
+         // All cards should have consistent border radius
+         const uniqueRadii = [...new Set(radii)];
+         console.log('Card border radii:', uniqueRadii);
+
+         // Verify consistency (allow 1-2 different values for different card types)
+         expect(uniqueRadii.length).toBeLessThanOrEqual(2);
+      }
+   });
+
+   test('consistent typography sizing', async ({ page }) => {
+      await page.goto('/');
+      await page.waitForLoadState('networkidle');
+
+      // Check h6 elements have consistent size
+      const h6Elements = page.locator('h6');
+      const count = await h6Elements.count();
+
+      if (count > 0) {
+         const fontSizes = await h6Elements.evaluateAll(els =>
+            els.map(el => window.getComputedStyle(el).fontSize)
+         );
+
+         const uniqueSizes = [...new Set(fontSizes)];
+         console.log('H6 font sizes:', uniqueSizes);
+
+         // All h6 elements should have the same font size
+         expect(uniqueSizes.length).toBe(1);
+      }
+   });
+});

e2e/utils/color-helpers.ts

@@ -0,0 +1,110 @@
+export type RgbColor = { r: number; g: number; b: number; a?: number };
+
+/**
+ * Utility functions to help with assertions in theme tests
+ */
+
+export function hexToRgb(hex: string): { r: number; g: number; b: number } | null
+{
+   const normalized = hex.trim().replace(/^#/, "");
+   if (!/^[a-f\d]+$/i.test(normalized))
+   {
+      return null;
+   }
+
+   let rHex: string;
+   let gHex: string;
+   let bHex: string;
+
+   if (normalized.length === 3)
+   {
+      rHex = normalized[0] + normalized[0];
+      gHex = normalized[1] + normalized[1];
+      bHex = normalized[2] + normalized[2];
+   }
+   else if (normalized.length === 6 || normalized.length === 8)
+   {
+      // Ignore alpha channel for 8-digit hex values (#RRGGBBAA).
+      rHex = normalized.slice(0, 2);
+      gHex = normalized.slice(2, 4);
+      bHex = normalized.slice(4, 6);
+   }
+   else
+   {
+      return null;
+   }
+
+   return {
+      r: parseInt(rHex, 16),
+      g: parseInt(gHex, 16),
+      b: parseInt(bHex, 16),
+   };
+}
+
+export function parseRgb(rgbString: string): RgbColor | null
+{
+   const rgbMatch = rgbString.match(/rgba?\((\d+),\s*(\d+),\s*(\d+)(?:,\s*([\d.]+))?\)/);
+   if (rgbMatch)
+   {
+      return {
+         r: parseInt(rgbMatch[1]),
+         g: parseInt(rgbMatch[2]),
+         b: parseInt(rgbMatch[3]),
+         a: rgbMatch[4] ? parseFloat(rgbMatch[4]) : undefined,
+      };
+   }
+   return null;
+}
+
+function parseColor(color: string): RgbColor | null
+{
+   if (color.startsWith("rgb"))
+   {
+      return parseRgb(color);
+   }
+   if (color.startsWith("#"))
+   {
+      const rgb = hexToRgb(color);
+      return rgb ? {...rgb, a: undefined} : null;
+   }
+   return null;
+}
+
+export function colorsMatch(actual: string, expected: string, tolerance = 2): boolean
+{
+   if (actual.startsWith("#") && expected.startsWith("#"))
+   {
+      return actual.toLowerCase() === expected.toLowerCase();
+   }
+
+   const actualRgb = parseColor(actual);
+   const expectedRgb = parseColor(expected);
+   if (!actualRgb || !expectedRgb)
+   {
+      return false;
+   }
+
+   const rgbMatch = (
+      Math.abs(actualRgb.r - expectedRgb.r) <= tolerance &&
+      Math.abs(actualRgb.g - expectedRgb.g) <= tolerance &&
+      Math.abs(actualRgb.b - expectedRgb.b) <= tolerance
+   );
+
+   if (actualRgb.a !== undefined && expectedRgb.a !== undefined)
+   {
+      return rgbMatch && Math.abs(actualRgb.a - expectedRgb.a) <= 0.05;
+   }
+
+   return rgbMatch;
+}
+
+export function isTransparentOrNearlyTransparent(color: string): boolean
+{
+   if (color === "transparent" || color === "rgba(0, 0, 0, 0)")
+   {
+      return true;
+   }
+
+   const rgb = parseRgb(color);
+   return !!(rgb && rgb.a !== undefined && rgb.a < 0.1);
+}

package.json

@@ -1,6 +1,7 @@
 {
   "name": "qqq-frontend-material-dashboard",
-  "version": "0.28.3-SNAPSHOT",
+  "license": "Apache-2.0",
+  "version": "0.41.0-SNAPSHOT",
   "homepage": ".",
   "description": "QQQ Default Dashboard",
   "dependencies": {
@@ -15,7 +16,7 @@
     "@mui/x-data-grid-pro": "5.17.23",
     "@mui/x-date-pickers": "7.1.1",
     "@mui/x-license-pro": "5.12.3",
-    "@qrunio/qqq-frontend-core": "1.3.7-SNAPSHOT",
+    "@qrunio/qqq-frontend-core": "0.40.20-SNAPSHOT",
     "@react-jvectormap/core": "1.0.1",
     "@react-jvectormap/unitedstates": "1.0.1",
     "@react-oauth/google": "0.2.8",
@@ -31,19 +32,19 @@
     "dayjs": "1.11.10",
     "downshift": "3.2.10",
     "faker": "5.5.3",
-    "form-data": "4.0.0",
+    "form-data": "4.0.6",
     "formik": "2.2.9",
     "html-react-parser": "1.4.8",
     "html-to-text": "^9.0.5",
-    "http-proxy-middleware": "2.0.6",
+    "http-proxy-middleware": "2.0.9",
     "jwt-decode": "3.1.2",
-    "lodash": "4.17.21",
+    "lodash": "4.18.1",
     "oidc-client-ts": "2.4.1",
     "rapidoc": "9.3.4",
     "react": "18.0.0",
     "react-ace": "10.1.0",
     "react-chartjs-2": "3.0.4",
-    "react-cookie": "4.1.1",
+    "react-cookie": "8.0.1",
     "react-dnd": "16.0.1",
     "react-dnd-html5-backend": "16.0.1",
     "react-dom": "18.0.0",
@@ -53,7 +54,7 @@
     "react-google-drive-picker": "^1.2.0",
     "react-markdown": "9.0.1",
     "react-oidc-context": "2.3.1",
-    "react-router-dom": "6.2.1",
+    "react-router-dom": "6.30.3",
     "react-router-hash-link": "2.4.3",
     "react-table": "7.7.0",
     "sass": "1.63.4",
@@ -62,14 +63,24 @@
   },
   "scripts": {
     "build": "react-scripts build",
-    "build-and-publish": "react-scripts build && rm -rvf src/main/resources/material-dashboard; mkdir -p src/main/resources/material-dashboard; cp -rv build/* src/main/resources/material-dashboard",
+    "build-and-publish": "react-scripts build && rm -rvf src/main/resources/material-dashboard && mkdir -p src/main/resources/material-dashboard && cp -rv build/* src/main/resources/material-dashboard",
     "clean": "rm -rf node_modules package-lock.json lib",
     "eject": "react-scripts eject",
     "clean-and-install": "rm -rf node_modules/ && rm -rf package-lock.json && rm -rf lib/ && npm install --legacy-peer-deps && npm dedupe --force",
     "npm-install": "npm install --legacy-peer-deps",
     "prepublishOnly": "tsc -p ./ --outDir lib/",
     "start": "BROWSER=none react-scripts --max-http-header-size=65535 start",
-    "test": "react-scripts test"
+    "test": "react-scripts test",
+    "install:legacy": "npm install --legacy-peer-deps",
+    "test:e2e": "npx playwright test",
+    "test:e2e:ui": "npx playwright test --ui",
+    "test:e2e:headed": "npx playwright test --headed",
+    "fixture-server": "node e2e/fixture-server.js",
+    "fixture-server:unthemed": "THEME_FIXTURE=index node e2e/fixture-server.js",
+    "e2e": "npx playwright test",
+    "e2e:themed": "THEME_FIXTURE=withFullCustomTheme npx playwright test e2e/tests/theme.spec.ts",
+    "e2e:unthemed": "THEME_FIXTURE=index npx playwright test e2e/tests/unthemed-regression.spec.ts",
+    "e2e:all": "npm run e2e:themed && npm run e2e:unthemed"
   },
   "eslintConfig": {
     "extends": [
@@ -94,12 +105,14 @@
   },
   "devDependencies": {
     "@babel/plugin-proposal-private-property-in-object": "7.21.11",
+    "@playwright/test": "^1.57.0",
     "@svgr/webpack": "6.5.1",
     "@types/chroma-js": "2.1.3",
     "@types/faker": "5.5.9",
     "@types/react-table": "7.7.9",
     "@typescript-eslint/eslint-plugin": "5.10.2",
     "@typescript-eslint/parser": "5.10.2",
+    "concurrently": "^8.2.0",
     "eslint": "8.8.0",
     "eslint-import-resolver-typescript": "2.5.0",
     "eslint-plugin-import": "2.25.4",
@@ -108,12 +121,26 @@
     "typescript": "4.9.4"
   },
   "overrides": {
-    "@svgr/webpack": "$@svgr/webpack"
+    "@svgr/webpack": "$@svgr/webpack",
+    "axios@<1.0.0": "0.34.0",
+    "form-data@^4.0.0": "$form-data",
+    "resolve-url-loader": "5.0.0",
+    "serialize-javascript": "7.0.3",
+    "underscore": "1.13.8",
+    "webpack-dev-middleware": "7.4.6"
   },
   "main": "qqq-frontend-material-dashboard.js",
   "module": "lib/qqq-frontend-material-dashboard.js",
   "files": [
     "lib",
     "package.json"
-  ]
+  ],
+  "jest": {
+    "transformIgnorePatterns": [
+      "node_modules/(?!(@qrunio/qqq-frontend-core|@mui|@babel/runtime)/)"
+    ]
+  },
+  "engines": {
+    "node": ">=20"
+  }
 }

playwright.config.ts

@@ -0,0 +1,61 @@
+import { defineConfig, devices } from '@playwright/test';
+
+const fixturePort = process.env.FIXTURE_PORT || '8001';
+const dashboardPort = process.env.DASHBOARD_PORT || '3001';
+
+export default defineConfig({
+  testDir: './e2e/tests',
+  fullyParallel: false,
+  forbidOnly: !!process.env.CI,
+  retries: process.env.CI ? 2 : 0,
+  workers: 1,
+  reporter: [['html', { open: 'never' }], ['list']],
+  timeout: 60000,
+  // Snapshot configuration for visual regression
+  // Platform-specific snapshots: linux/ for CI, darwin/ for local macOS
+  snapshotDir: './e2e/snapshots',
+  snapshotPathTemplate: '{snapshotDir}/{testFilePath}/{platform}/{arg}{ext}',
+  expect: {
+    toHaveScreenshot: {
+      maxDiffPixels: 100,
+      maxDiffPixelRatio: 0.01,
+      animations: 'disabled',
+    },
+  },
+  use: {
+    baseURL: `https://localhost:${dashboardPort}`,
+    trace: 'on-first-retry',
+    screenshot: 'only-on-failure',
+    ignoreHTTPSErrors: true,
+    channel: process.env.PLAYWRIGHT_CHANNEL,
+    // Consistent viewport for visual regression
+    viewport: { width: 1280, height: 720 },
+  },
+  projects: [
+    {
+      name: 'themed',
+      testMatch: /.*(?<!unthemed-regression)\.spec\.ts$/,
+      use: { ...devices['Desktop Chrome'] },
+    },
+    {
+      name: 'unthemed',
+      testMatch: /unthemed-regression\.spec\.ts$/,
+      use: { ...devices['Desktop Chrome'] },
+    },
+  ],
+  webServer: [
+    {
+      command: `THEME_FIXTURE=${process.env.THEME_FIXTURE || 'withFullCustomTheme'} node e2e/fixture-server.js`,
+      url: `http://localhost:${fixturePort}/metaData`,
+      reuseExistingServer: true,
+      timeout: 60000, // 1 minute - Docker startup can be slow
+    },
+    {
+      command: `HTTPS=true PORT=${dashboardPort} REACT_APP_PROXY_LOCALHOST_PORT=${fixturePort} npm start`,
+      url: `https://localhost:${dashboardPort}`,
+      reuseExistingServer: true,
+      timeout: 300000, // 5 minutes - React compilation in Docker takes time
+      ignoreHTTPSErrors: true,
+    },
+  ],
+});

pom.xml

@@ -6,18 +6,17 @@
   ~ contact@kingsrook.com
   ~ https://github.com/Kingsrook/
   ~
-  ~ This program is free software: you can redistribute it and/or modify
-  ~ it under the terms of the GNU Affero General Public License as
-  ~ published by the Free Software Foundation, either version 3 of the
-  ~ License, or (at your option) any later version.
+  ~ Licensed under the Apache License, Version 2.0 (the "License");
+  ~ you may not use this file except in compliance with the License.
+  ~ You may obtain a copy of the License at
   ~
-  ~ This program is distributed in the hope that it will be useful,
-  ~ but WITHOUT ANY WARRANTY; without even the implied warranty of
-  ~ MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-  ~ GNU Affero General Public License for more details.
+  ~     https://www.apache.org/licenses/LICENSE-2.0
   ~
-  ~ You should have received a copy of the GNU Affero General Public License
-  ~ along with this program.  If not, see <https://www.gnu.org/licenses/>.
+  ~ Unless required by applicable law or agreed to in writing, software
+  ~ distributed under the License is distributed on an "AS IS" BASIS,
+  ~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+  ~ See the License for the specific language governing permissions and
+  ~ limitations under the License.
   -->
 
 <project xmlns="http://maven.apache.org/POM/4.0.0"
@@ -36,8 +35,8 @@
 
   <licenses>
     <license>
-      <name>GNU Affero General Public License v3.0</name>
-      <url>https://www.gnu.org/licenses/agpl-3.0.html</url>
+      <name>Apache License, Version 2.0</name>
+      <url>https://www.apache.org/licenses/LICENSE-2.0</url>
       <distribution>repo</distribution>
     </license>
   </licenses>
@@ -58,20 +57,25 @@
   </developers>
 
   <properties>
-    <revision>0.28.0-SNAPSHOT</revision>
-    <qqq.version>
-      0.32.0-SNAPSHOT
-    </qqq.version>
+    <revision>0.41.0-SNAPSHOT</revision>
+    <qqq.version>4.0.0</qqq.version>
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
-    <maven.compiler.source>17</maven.compiler.source>
-    <maven.compiler.target>17</maven.compiler.target>
+    <maven.compiler.source>21</maven.compiler.source>
+    <maven.compiler.target>21</maven.compiler.target>
     <maven.compiler.showDeprecation>true</maven.compiler.showDeprecation>
     <maven.compiler.showWarnings>true</maven.compiler.showWarnings>
   </properties>
 
   <dependencyManagement>
     <dependencies>
+      <dependency>
+        <groupId>com.fasterxml.jackson</groupId>
+        <artifactId>jackson-bom</artifactId>
+        <version>2.21.7</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>com.kingsrook.qqq</groupId>
         <artifactId>qqq-bom-pom</artifactId>
@@ -124,13 +128,13 @@
     <dependency>
       <groupId>io.github.bonigarcia</groupId>
       <artifactId>webdrivermanager</artifactId>
-      <version>5.6.2</version>
+      <version>6.1.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.11.0</version>
+      <version>2.14.0</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -148,13 +152,13 @@
     <dependency>
       <groupId>org.assertj</groupId>
       <artifactId>assertj-core</artifactId>
-      <version>3.23.1</version>
+      <version>3.27.7</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>io.javalin</groupId>
       <artifactId>javalin</artifactId>
-      <version>6.7.0</version>
+      <version>7.2.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
@@ -166,13 +170,13 @@
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-api</artifactId>
-      <version>2.17.1</version>
+      <version>2.25.3</version>
       <scope>test</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.17.1</version>
+      <version>2.25.3</version>
       <scope>test</scope>
     </dependency>
   </dependencies>
@@ -251,7 +255,51 @@
   </profiles>
 
   <build>
+    <resources>
+      <resource>
+        <directory>src/main/resources</directory>
+      </resource>
+      <resource>
+        <directory>${project.build.directory}/maven-shared-archive-resources</directory>
+      </resource>
+    </resources>
+    <testResources>
+      <testResource>
+        <directory>src/test/resources</directory>
+      </testResource>
+      <testResource>
+        <directory>${project.build.directory}/maven-shared-archive-resources</directory>
+      </testResource>
+    </testResources>
     <plugins>
+      <!-- Source and Javadoc JARs also include Maven's shared archive resources. -->
+      <plugin>
+        <groupId>org.apache.maven.plugins</groupId>
+        <artifactId>maven-resources-plugin</artifactId>
+        <version>3.4.0</version>
+        <executions>
+          <execution>
+            <id>package-root-notices</id>
+            <phase>generate-resources</phase>
+            <goals>
+              <goal>copy-resources</goal>
+            </goals>
+            <configuration>
+              <outputDirectory>${project.build.directory}/maven-shared-archive-resources/META-INF</outputDirectory>
+              <resources>
+                <resource>
+                  <directory>${project.basedir}</directory>
+                  <filtering>false</filtering>
+                  <includes>
+                    <include>LICENSE</include>
+                    <include>NOTICE</include>
+                  </includes>
+                </resource>
+              </resources>
+            </configuration>
+          </execution>
+        </executions>
+      </plugin>
       <plugin>
         <groupId>org.apache.maven.plugins</groupId>
         <artifactId>maven-surefire-plugin</artifactId>
@@ -300,35 +348,6 @@
         </executions>
       </plugin>
 
-      <!-- GPG signing for Maven Central -->
-      <plugin>
-        <groupId>org.apache.maven.plugins</groupId>
-        <artifactId>maven-gpg-plugin</artifactId>
-        <version>3.1.0</version>
-        <executions>
-          <execution>
-            <id>sign-artifacts</id>
-            <phase>verify</phase>
-            <goals>
-              <goal>sign</goal>
-            </goals>
-          </execution>
-        </executions>
-      </plugin>
-
-      <!-- Sonatype Central publishing (replaces deploy to distributionManagement) -->
-      <plugin>
-        <groupId>org.sonatype.central</groupId>
-        <artifactId>central-publishing-maven-plugin</artifactId>
-        <version>0.8.0</version>
-        <extensions>true</extensions>
-        <configuration>
-          <!-- Server credentials with this ID must be provided in settings.xml -->
-          <publishingServerId>central</publishingServerId>
-          <autoPublish>true</autoPublish>
-        </configuration>
-      </plugin>
-
     </plugins>
   </build>
 

run-tests.sh

@@ -0,0 +1,254 @@
+#!/bin/bash
+############################################################################
+## run-tests.sh
+## Run all tests for qqq-frontend-material-dashboard
+##
+## This script handles:
+## - Starting required servers (React, fixture server)
+## - Running Playwright e2e tests
+## - Running Selenium integration tests
+## - Cleanup and teardown
+##
+## Usage:
+##   ./run-tests.sh              # Run all tests
+##   ./run-tests.sh --playwright # Run only Playwright tests
+##   ./run-tests.sh --selenium   # Run only Selenium tests
+##   ./run-tests.sh --help       # Show help
+############################################################################
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+cd "$SCRIPT_DIR"
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+BLUE='\033[0;34m'
+NC='\033[0m' # No Color
+
+# PID tracking
+REACT_PID=""
+FIXTURE_PID=""
+
+log() { echo -e "${GREEN}[run-tests]${NC} $1"; }
+info() { echo -e "${BLUE}[run-tests]${NC} $1"; }
+warn() { echo -e "${YELLOW}[run-tests]${NC} $1"; }
+error() { echo -e "${RED}[run-tests]${NC} $1"; }
+
+usage() {
+    echo "Usage: $0 [OPTIONS]"
+    echo ""
+    echo "Options:"
+    echo "  --playwright    Run only Playwright e2e tests"
+    echo "  --selenium      Run only Selenium integration tests"
+    echo "  --all           Run all tests (default)"
+    echo "  --help          Show this help message"
+    echo ""
+    echo "Environment variables:"
+    echo "  QQQ_SELENIUM_HEADLESS=true   Run browser in headless mode"
+    exit 0
+}
+
+cleanup() {
+    log "Cleaning up..."
+
+    if [ -n "$REACT_PID" ] && kill -0 "$REACT_PID" 2>/dev/null; then
+        log "Stopping React dev server (PID: $REACT_PID)"
+        kill "$REACT_PID" 2>/dev/null || true
+        wait "$REACT_PID" 2>/dev/null || true
+    fi
+
+    if [ -n "$FIXTURE_PID" ] && kill -0 "$FIXTURE_PID" 2>/dev/null; then
+        log "Stopping fixture server (PID: $FIXTURE_PID)"
+        kill "$FIXTURE_PID" 2>/dev/null || true
+        wait "$FIXTURE_PID" 2>/dev/null || true
+    fi
+
+    # Kill any orphaned processes on our ports
+    lsof -ti :3001 2>/dev/null | xargs kill -9 2>/dev/null || true
+    lsof -ti :8001 2>/dev/null | xargs kill -9 2>/dev/null || true
+}
+
+trap cleanup EXIT INT TERM
+
+free_port() {
+    local port=$1
+    if lsof -i :$port >/dev/null 2>&1; then
+        warn "Port $port is in use. Killing process..."
+        lsof -ti :$port | xargs kill -9 2>/dev/null || true
+        sleep 1
+    fi
+}
+
+start_react_server() {
+    log "Starting React dev server on https://localhost:3001..."
+    HTTPS=true PORT=3001 REACT_APP_PROXY_LOCALHOST_PORT=8001 npm start > /tmp/react-dev-server.log 2>&1 &
+    REACT_PID=$!
+
+    log "Waiting for React server to be ready..."
+    local MAX_WAIT=120
+    local WAITED=0
+    while ! curl -sk https://localhost:3001 >/dev/null 2>&1; do
+        if ! kill -0 "$REACT_PID" 2>/dev/null; then
+            error "React server failed to start. Check /tmp/react-dev-server.log"
+            tail -50 /tmp/react-dev-server.log
+            exit 1
+        fi
+        if [ $WAITED -ge $MAX_WAIT ]; then
+            error "Timeout waiting for React server after ${MAX_WAIT}s"
+            exit 1
+        fi
+        sleep 2
+        WAITED=$((WAITED + 2))
+        echo -n "."
+    done
+    echo ""
+    log "React server is ready!"
+}
+
+start_fixture_server() {
+    log "Starting fixture server on http://localhost:8001..."
+    node e2e/fixture-server.js > /tmp/fixture-server.log 2>&1 &
+    FIXTURE_PID=$!
+
+    log "Waiting for fixture server to be ready..."
+    local MAX_WAIT=30
+    local WAITED=0
+    while ! curl -s http://localhost:8001/metaData >/dev/null 2>&1; do
+        if ! kill -0 "$FIXTURE_PID" 2>/dev/null; then
+            error "Fixture server failed to start. Check /tmp/fixture-server.log"
+            tail -20 /tmp/fixture-server.log
+            exit 1
+        fi
+        if [ $WAITED -ge $MAX_WAIT ]; then
+            error "Timeout waiting for fixture server after ${MAX_WAIT}s"
+            exit 1
+        fi
+        sleep 1
+        WAITED=$((WAITED + 1))
+        echo -n "."
+    done
+    echo ""
+    log "Fixture server is ready!"
+}
+
+run_playwright_tests() {
+    info "=========================================="
+    info "Running Playwright E2E Tests"
+    info "=========================================="
+
+    # Playwright manages its own servers via playwright.config.ts
+    # but we can start them manually for consistency
+    npx playwright test --reporter=list
+
+    local result=$?
+    if [ $result -eq 0 ]; then
+        log "Playwright tests PASSED"
+    else
+        error "Playwright tests FAILED"
+    fi
+    return $result
+}
+
+run_selenium_tests() {
+    info "=========================================="
+    info "Running Selenium Integration Tests"
+    info "=========================================="
+
+    # Selenium needs React server but Javalin starts its own mock server
+    # So we stop the fixture server to free port 8001 for Javalin
+    if [ -n "$FIXTURE_PID" ] && kill -0 "$FIXTURE_PID" 2>/dev/null; then
+        log "Stopping fixture server for Selenium tests..."
+        kill "$FIXTURE_PID" 2>/dev/null || true
+        wait "$FIXTURE_PID" 2>/dev/null || true
+        FIXTURE_PID=""
+        sleep 1
+    fi
+
+    # Free port 8001 for Javalin
+    free_port 8001
+
+    # Run Selenium tests with headless mode
+    QQQ_SELENIUM_HEADLESS=${QQQ_SELENIUM_HEADLESS:-true} mvn test -Dtest="**/selenium/tests/*IT" "$@"
+
+    local result=$?
+    if [ $result -eq 0 ]; then
+        log "Selenium tests PASSED"
+    else
+        error "Selenium tests FAILED"
+    fi
+    return $result
+}
+
+# Parse arguments
+RUN_PLAYWRIGHT=false
+RUN_SELENIUM=false
+
+while [[ $# -gt 0 ]]; do
+    case $1 in
+        --playwright)
+            RUN_PLAYWRIGHT=true
+            shift
+            ;;
+        --selenium)
+            RUN_SELENIUM=true
+            shift
+            ;;
+        --all)
+            RUN_PLAYWRIGHT=true
+            RUN_SELENIUM=true
+            shift
+            ;;
+        --help|-h)
+            usage
+            ;;
+        *)
+            # Pass remaining args to mvn
+            break
+            ;;
+    esac
+done
+
+# Default to running all tests if nothing specified
+if [ "$RUN_PLAYWRIGHT" = false ] && [ "$RUN_SELENIUM" = false ]; then
+    RUN_PLAYWRIGHT=true
+    RUN_SELENIUM=true
+fi
+
+# Track overall success
+FAILED=false
+
+info "=========================================="
+info "QQQ Frontend Material Dashboard - Test Runner"
+info "=========================================="
+
+# Free ports before starting
+free_port 3001
+free_port 8001
+
+# Start React server (needed for both test types)
+start_react_server
+
+# Run Playwright tests
+if [ "$RUN_PLAYWRIGHT" = true ]; then
+    start_fixture_server
+    run_playwright_tests || FAILED=true
+fi
+
+# Run Selenium tests
+if [ "$RUN_SELENIUM" = true ]; then
+    run_selenium_tests "$@" || FAILED=true
+fi
+
+# Summary
+echo ""
+info "=========================================="
+if [ "$FAILED" = true ]; then
+    error "SOME TESTS FAILED"
+    exit 1
+else
+    log "ALL TESTS PASSED"
+    exit 0
+fi

scripts/check-packaged-notices.py

@@ -0,0 +1,40 @@
+#!/usr/bin/env python3
+"""Check all four published JARs against this checkout's root license files."""
+
+import argparse
+from pathlib import Path
+import sys
+from zipfile import BadZipFile, ZipFile
+
+
+def main():
+    parser = argparse.ArgumentParser(description=__doc__)
+    parser.add_argument("archive_prefix", type=Path,
+                        help="archive path without classifier or .jar suffix")
+    args = parser.parse_args()
+    root = Path(__file__).resolve().parents[1]
+    expected = {name: (root / name).read_bytes() for name in ("LICENSE", "NOTICE")}
+    failures = []
+
+    for classifier in ("", "-sources", "-tests", "-javadoc"):
+        archive = Path(f"{args.archive_prefix}{classifier}.jar")
+        try:
+            with ZipFile(archive) as jar:
+                for name, content in expected.items():
+                    entry = f"META-INF/{name}"
+                    if jar.namelist().count(entry) != 1:
+                        failures.append(f"{archive}: expected exactly one {entry}")
+                    elif jar.read(entry) != content:
+                        failures.append(f"{archive}: {entry} differs from root {name}")
+        except (OSError, BadZipFile) as error:
+            failures.append(f"{archive}: {error}")
+
+    if failures:
+        print("\n".join(failures), file=sys.stderr)
+        return 1
+    print("PASS: main, sources, tests and javadoc JARs contain exact root LICENSE/NOTICE")
+    return 0
+
+
+if __name__ == "__main__":
+    sys.exit(main())

scripts/ci-prebuild.sh

@@ -0,0 +1,27 @@
+#!/usr/bin/env bash
+############################################################################
+## ci-prebuild.sh
+## CI prebuild for the shared ci-workflows maven.yaml (runs before Maven):
+## Jest unit tests, the React build that is packaged into the jar, and the
+## HTTPS dev server on :3001 that the Selenium ITs drive (as the old
+## qqq-orb frontend-material pipeline did). Maven then runs the ITs headless.
+############################################################################
+set -euo pipefail
+
+npm ci --legacy-peer-deps
+npm test -- --watchAll=false
+npm run build-and-publish
+
+HTTPS=true PORT=3001 REACT_APP_PROXY_LOCALHOST_PORT=8001 \
+   nohup setsid npm run start > /tmp/react-dev-server.log 2>&1 < /dev/null &
+
+for _ in $(seq 1 150); do
+   if curl -ksf -o /dev/null https://localhost:3001/; then
+      echo "React dev server is up on https://localhost:3001"
+      exit 0
+   fi
+   sleep 2
+done
+echo "React dev server did not come up on :3001"
+cat /tmp/react-dev-server.log
+exit 1

scripts/update-snapshots-linux.sh

@@ -0,0 +1,60 @@
+#!/bin/bash
+# Generate Playwright snapshots for Linux/CI using Docker
+#
+# Usage:
+#   ./scripts/update-snapshots-linux.sh
+#
+# Prerequisites:
+#   - Docker must be running
+#   - Run from project root
+#
+# This script:
+#   1. Runs everything inside Docker matching CI environment
+#   2. Starts the fixture server and React dev server inside Docker
+#   3. Runs Playwright tests with --update-snapshots flag
+#   4. Generates snapshots in e2e/snapshots/.../linux/
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+cd "$PROJECT_ROOT"
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+echo -e "${YELLOW}=== Generating Playwright Snapshots via Docker ===${NC}"
+
+# Check if Docker is running
+if ! docker info > /dev/null 2>&1; then
+    echo -e "${RED}Error: Docker is not running. Please start Docker and try again.${NC}"
+    exit 1
+fi
+
+# Use the same Playwright image as CI
+echo -e "${YELLOW}Running Playwright tests in Docker to update snapshots...${NC}"
+echo -e "${YELLOW}This will install dependencies, start servers, run tests, and update snapshots inside Docker.${NC}"
+echo -e "${YELLOW}This may take several minutes...${NC}"
+
+docker run --rm \
+    -v "$PROJECT_ROOT:/app" \
+    -w /app \
+    -e HTTPS=true \
+    -e PORT=3001 \
+    -e REACT_APP_PROXY_LOCALHOST_PORT=8001 \
+    mcr.microsoft.com/playwright:v1.57.0-jammy \
+    bash -c '
+        echo "=== Installing dependencies..."
+        npm ci --legacy-peer-deps
+
+        echo "=== Running Playwright tests with --update-snapshots..."
+        echo "=== (Playwright will start servers automatically)..."
+        npx playwright test --update-snapshots --reporter=list
+    '
+
+echo -e "${GREEN}=== Linux snapshots updated successfully! ===${NC}"
+echo -e "${YELLOW}Snapshots are in e2e/snapshots/.../linux/${NC}"
+echo -e "${YELLOW}Don't forget to commit the updated snapshots.${NC}"

scripts/update-snapshots-mac.sh

@@ -0,0 +1,46 @@
+#!/bin/bash
+# Generate Playwright snapshots for macOS (local development)
+#
+# Usage:
+#   ./scripts/update-snapshots-mac.sh
+#
+# Prerequisites:
+#   - Run from project root
+#   - Dependencies installed (npm ci --legacy-peer-deps)
+#
+# This script:
+#   1. Runs Playwright tests locally with --update-snapshots flag
+#   2. Generates snapshots in e2e/snapshots/.../darwin/
+
+set -e
+
+SCRIPT_DIR="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
+PROJECT_ROOT="$(dirname "$SCRIPT_DIR")"
+cd "$PROJECT_ROOT"
+
+# Colors for output
+RED='\033[0;31m'
+GREEN='\033[0;32m'
+YELLOW='\033[1;33m'
+NC='\033[0m' # No Color
+
+echo -e "${YELLOW}=== Generating Playwright Snapshots for macOS ===${NC}"
+
+# Check if node_modules exists
+if [ ! -d "node_modules" ]; then
+    echo -e "${RED}Error: node_modules not found. Run 'npm run install:legacy' first.${NC}"
+    exit 1
+fi
+
+# Check if Playwright is installed
+if [ ! -d "node_modules/@playwright" ]; then
+    echo -e "${RED}Error: Playwright not found. Run 'npm run install:legacy' first.${NC}"
+    exit 1
+fi
+
+echo -e "${YELLOW}Running Playwright tests with --update-snapshots...${NC}"
+npx playwright test --update-snapshots --reporter=list
+
+echo -e "${GREEN}=== macOS snapshots updated successfully! ===${NC}"
+echo -e "${YELLOW}Snapshots are in e2e/snapshots/.../darwin/${NC}"
+echo -e "${YELLOW}Don't forget to commit the updated snapshots.${NC}"

src/App.tsx

@@ -5,20 +5,25 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
+import Avatar from "@mui/material/Avatar";
+import Box from "@mui/material/Box";
+import CssBaseline from "@mui/material/CssBaseline";
+import Icon from "@mui/material/Icon";
+import {Theme, ThemeProvider} from "@mui/material/styles";
+import {LicenseInfo} from "@mui/x-license-pro";
 import {QException} from "@qrunio/qqq-frontend-core/lib/exceptions/QException";
 import {QAppNodeType} from "@qrunio/qqq-frontend-core/lib/model/metaData/QAppNodeType";
 import {QAppTreeNode} from "@qrunio/qqq-frontend-core/lib/model/metaData/QAppTreeNode";
@@ -27,44 +32,42 @@ import {QBrandingMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QB
 import {QInstance} from "@qrunio/qqq-frontend-core/lib/model/metaData/QInstance";
 import {QProcessMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QProcessMetaData";
 import {QTableMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QTableMetaData";
-import Avatar from "@mui/material/Avatar";
-import Box from "@mui/material/Box";
-import CssBaseline from "@mui/material/CssBaseline";
-import Icon from "@mui/material/Icon";
-import {ThemeProvider} from "@mui/material/styles";
-import {LicenseInfo} from "@mui/x-license-pro";
 import CommandMenu from "CommandMenu";
 import QContext from "QContext";
 import useAnonymousAuthenticationModule from "qqq/authorization/anonymous/useAnonymousAuthenticationModule";
 import useAuth0AuthenticationModule from "qqq/authorization/auth0/useAuth0AuthenticationModule";
 import useOAuth2AuthenticationModule from "qqq/authorization/oauth2/useOAuth2AuthenticationModule";
+import BrandedHeaderBar from "qqq/components/horseshoe/BrandedHeaderBar";
 import Sidenav from "qqq/components/horseshoe/sidenav/SideNav";
-import theme from "qqq/components/legacy/Theme";
-import {getBannerClassName, getBannerStyles, getBanner, makeBannerContent} from "qqq/components/misc/Banners";
+import {getBanner, getBannerClassName, getBannerStyles, makeBannerContent} from "qqq/components/misc/Banners";
 import {setMiniSidenav, useMaterialUIController} from "qqq/context";
+import {MaterialDashboardThemeMetaData} from "qqq/models/metadata/MaterialDashboardThemeMetaData";
 import AppHome from "qqq/pages/apps/Home";
 import NoApps from "qqq/pages/apps/NoApps";
 import ProcessRun from "qqq/pages/processes/ProcessRun";
 import ReportRun from "qqq/pages/processes/ReportRun";
 import EntityCreate from "qqq/pages/records/create/RecordCreate";
 import TableDeveloperView from "qqq/pages/records/developer/TableDeveloperView";
-import {resolveAssetUrl, detectBasePath} from "qqq/utils/PathUtils";
 import EntityEdit from "qqq/pages/records/edit/RecordEdit";
 import RecordQuery from "qqq/pages/records/query/RecordQuery";
 import RecordDeveloperView from "qqq/pages/records/view/RecordDeveloperView";
 import RecordView from "qqq/pages/records/view/RecordView";
 import RecordViewByUniqueKey from "qqq/pages/records/view/RecordViewByUniqueKey";
-import GoogleAnalyticsUtils, {AnalyticsModel} from "qqq/utils/GoogleAnalyticsUtils";
+import {createDynamicTheme} from "qqq/utils/createDynamicTheme";
+import AnalyticsUtils, {AnalyticsModel} from "qqq/utils/analytics/AnalyticsUtils";
+import {injectIslandVariables} from "qqq/utils/injectIslandVariables";
+import {detectBasePath, resolveAssetUrl} from "qqq/utils/PathUtils";
 import Client from "qqq/utils/qqq/Client";
 import ProcessUtils from "qqq/utils/qqq/ProcessUtils";
-import React, {JSXElementConstructor, Key, ReactElement, useEffect, useState,} from "react";
+import React, {JSXElementConstructor, Key, ReactElement, ReactNode, useEffect, useMemo, useState,} from "react";
 import {useCookies} from "react-cookie";
-import {Navigate, Route, Routes, useLocation, useSearchParams,} from "react-router-dom";
+import {Navigate, Route, Routes, useLocation, useParams, useSearchParams,} from "react-router-dom";
 import {Md5} from "ts-md5/dist/md5";
 
 
 const qController = Client.getInstance();
 export const SESSION_UUID_COOKIE_NAME = "sessionUUID";
+const MATERIAL_DASHBOARD_THEME_META_DATA_NAME = "com.kingsrook.qqq.frontend.materialdashboard.model.metadata.MaterialDashboardThemeMetaData";
 
 interface Props
 {
@@ -78,6 +81,7 @@ export default function App({authenticationMetaData}: Props)
    const [isFullyAuthenticated, setIsFullyAuthenticated] = useState(false);
    const [profileRoutes, setProfileRoutes] = useState({});
    const [branding, setBranding] = useState({} as QBrandingMetaData);
+   const [themeMetaData, setThemeMetaData] = useState(null as MaterialDashboardThemeMetaData | null);
    const [metaData, setMetaData] = useState({} as QInstance);
    const [needLicenseKey, setNeedLicenseKey] = useState(true);
    const [loggedInUser, setLoggedInUser] = useState({} as { name?: string, email?: string });
@@ -87,6 +91,7 @@ export default function App({authenticationMetaData}: Props)
    const {setupSession: auth0SetupSession, logout: auth0Logout} = useAuth0AuthenticationModule({setIsFullyAuthenticated, setLoggedInUser, setEarlyReturnForAuth});
    const {setupSession: oauth2SetupSession, logout: oauth2Logout} = useOAuth2AuthenticationModule({setIsFullyAuthenticated, setLoggedInUser, setEarlyReturnForAuth, inOAuthContext: authenticationMetaData.type === "OAUTH2"});
    const {setupSession: anonymousSetupSession, logout: anonymousLogout} = useAnonymousAuthenticationModule({setIsFullyAuthenticated, setLoggedInUser, setEarlyReturnForAuth});
+   const [analyticsUtils] = useState(new AnalyticsUtils());
 
    /////////////////////////////////////////////////////////
    // tell the client how to do a logout if it sees a 401 //
@@ -142,6 +147,8 @@ export default function App({authenticationMetaData}: Props)
     ***************************************************************************/
    function doLogout()
    {
+      analyticsUtils.reset();
+
       if (authenticationMetaData?.type === "AUTH_0")
       {
          auth0Logout();
@@ -199,7 +206,7 @@ export default function App({authenticationMetaData}: Props)
             }
 
             const childList: any[] = [];
-            if (app.children)
+            if (app.children && !app.hideChildrenFromNavigation)
             {
                app.children.forEach((child: QAppTreeNode) =>
                {
@@ -244,6 +251,7 @@ export default function App({authenticationMetaData}: Props)
                   dropdown: true,
                   icon: <Icon fontSize="medium">{app.iconName}</Icon>,
                   collapse: childList,
+                  ["data-qqq-sidenav-item-type"]: "top-level-parent-app"
                });
             }
          }
@@ -488,17 +496,35 @@ export default function App({authenticationMetaData}: Props)
                {
                   setAccentColor(metaData.branding.accentColor);
                }
+               if (metaData.branding.accentColorLight)
+               {
+                  setAccentColorLight(metaData.branding.accentColorLight);
+               }
+            }
+
+            ////////////////////////////////////////////
+            // Set theme metadata for dynamic theming //
+            ////////////////////////////////////////////
+            const themeMetaDataObject = metaData.supplementalInstanceMetaData?.get(MATERIAL_DASHBOARD_THEME_META_DATA_NAME);
+            if (themeMetaDataObject)
+            {
+               setThemeMetaData(new MaterialDashboardThemeMetaData(themeMetaDataObject));
             }
 
             const gravatarBase = "https://www.gravatar.com/avatar/";
             const hash = Md5.hashStr(loggedInUser?.email || "user");
-            const profilePicture = `${gravatarBase}${hash}`;
+            let profilePicture = `${gravatarBase}${hash}`;
+            if(metaData?.branding?.gravatarDefault)
+            {
+               profilePicture += `?d=${metaData?.branding?.gravatarDefault}`;
+            }
             const profileRoutes = {
                type: "collapse",
                name: loggedInUser?.name ?? "Anonymous",
                key: "username",
                noCollapse: true,
                icon: <Avatar src={profilePicture} alt="{loggedInUser?.name}" />,
+               ["data-qqq-sidenav-item-type"]: "user-profile"
             };
             setProfileRoutes(profileRoutes);
 
@@ -570,6 +596,21 @@ export default function App({authenticationMetaData}: Props)
       })();
    }, [needToLoadRoutes, isFullyAuthenticated]);
 
+   ///////////////////////////////////////////////////////////////
+   // write routes to manage redirects specified by the backend //
+   ///////////////////////////////////////////////////////////////
+   const getRedirectRoutes = (redirects: Map<string, string>): any =>
+   {
+      const rs = [] as any[];
+
+      for (let from of redirects.keys())
+      {
+         rs.push(<Route key={from} path={from} element={<RedirectRoute to={redirects.get(from)} />} />);
+      }
+
+      return (rs);
+   };
+
    ///////////////////////////////////////////////////
    // Open sidenav when mouse enter on mini sidenav //
    ///////////////////////////////////////////////////
@@ -633,7 +674,26 @@ export default function App({authenticationMetaData}: Props)
       },
    );
 
+   /////////////////////////////////////////////////////////////////////////////
+   // Create dynamic MUI theme from themeMetaData                            //
+   // Theme is rebuilt when themeMetaData changes (from backend)             //
+   /////////////////////////////////////////////////////////////////////////////
+   const dynamicTheme: Theme = useMemo(() =>
+   {
+      return createDynamicTheme(themeMetaData || undefined);
+   }, [themeMetaData]);
+
+   /////////////////////////////////////////////////////////////////////////////
+   // Inject CSS variables for island components (sidebar, header, DataGrid) //
+   // These components can't use MUI palette, so they need CSS variables      //
+   /////////////////////////////////////////////////////////////////////////////
+   useEffect(() =>
+   {
+      injectIslandVariables(themeMetaData || undefined);
+   }, [themeMetaData]);
+
    const [pageHeader, setPageHeader] = useState("" as string | JSX.Element);
+   const [pageHeaderRightContent, setPageHeaderRightContent] = useState(null as ReactNode);
    const [accentColor, setAccentColor] = useState("#0062FF");
    const [accentColorLight, setAccentColorLight] = useState("#C0D6F7");
    const [tableMetaData, setTableMetaData] = useState(null);
@@ -650,14 +710,20 @@ export default function App({authenticationMetaData}: Props)
    }, [loggedInUser]);
 
 
-   const [googleAnalyticsUtils] = useState(new GoogleAnalyticsUtils());
+   useEffect(() =>
+   {
+      if (isFullyAuthenticated)
+      {
+         analyticsUtils.initialize();
+      }
+   }, [isFullyAuthenticated, analyticsUtils]);
 
    /*******************************************************************************
     **
     *******************************************************************************/
    function recordAnalytics(model: AnalyticsModel)
    {
-      googleAnalyticsUtils.recordAnalytics(model);
+      analyticsUtils.recordAnalytics(model);
    }
 
    ///////////////////////////////////////////////////////////////////
@@ -682,7 +748,7 @@ export default function App({authenticationMetaData}: Props)
          return (null);
       }
 
-      return (<Box className={getBannerClassName(banner)} sx={{display: "flex", justifyContent: "center", padding: "0.5rem", position: "sticky", top: "0", zIndex: 1, ...getBannerStyles(banner)}}>
+      return (<Box className={getBannerClassName(banner)} sx={{display: "flex", justifyContent: "center", padding: "0.5rem", position: "sticky", top: "0", zIndex: 1000, ...getBannerStyles(banner)}}>
          {makeBannerContent(banner)}
       </Box>);
    }
@@ -693,7 +759,7 @@ export default function App({authenticationMetaData}: Props)
     ***************************************************************************/
    function pushModalOnStack(modalIdentifier: string): void
    {
-      if(modalStack.length > 0 && modalStack[modalStack.length] == modalIdentifier)
+      if (modalStack.length > 0 && modalStack[modalStack.length] == modalIdentifier)
       {
          console.warn(`Pushing a new modal on the QContext modalStack that is a duplicate of the current top-of-stack [${modalIdentifier}]`)
       }
@@ -707,7 +773,7 @@ export default function App({authenticationMetaData}: Props)
     ***************************************************************************/
    function popModalOffStack(modalIdentifier: string): void
    {
-      if(modalStack.length > 0 && modalStack[modalStack.length - 1] != modalIdentifier)
+      if (modalStack.length > 0 && modalStack[modalStack.length - 1] != modalIdentifier)
       {
          console.warn(`Request to pop a modal [${modalIdentifier}] off the QContext modalStack that is not currently on top [${modalStack[modalStack.length - 1]}]`)
          return;
@@ -726,11 +792,25 @@ export default function App({authenticationMetaData}: Props)
    }
 
 
+   /***************************************************************************
+    * handle routes that need to redirect to another path.
+    *
+    * Uses `replace` so that the browser history doesn't get updated with a new entry.
+    ***************************************************************************/
+   function RedirectRoute({to}: { to: string })
+   {
+      const params = useParams();
+      const wildcardPath = params["*"] || "";
+      return <Navigate to={`${to}/${wildcardPath}`} replace />;
+   }
+
+
    return (
 
       appRoutes && (
          <QContext.Provider value={{
             pageHeader: pageHeader,
+            pageHeaderRightContent: pageHeaderRightContent,
             accentColor: accentColor,
             accentColorLight: accentColorLight,
             tableMetaData: tableMetaData,
@@ -741,6 +821,7 @@ export default function App({authenticationMetaData}: Props)
             helpHelpActive: helpHelpActive,
             userId: userId,
             setPageHeader: (header: string | JSX.Element) => setPageHeader(header),
+            setPageHeaderRightContent: (content: ReactNode) => setPageHeaderRightContent(content),
             setAccentColor: (accentColor: string) => setAccentColor(accentColor),
             setAccentColorLight: (accentColorLight: string) => setAccentColorLight(accentColorLight),
             setTableMetaData: (tableMetaData: QTableMetaData) => setTableMetaData(tableMetaData),
@@ -754,10 +835,11 @@ export default function App({authenticationMetaData}: Props)
             pathToLabelMap: pathToLabelMap,
             branding: branding
          }}>
-            <ThemeProvider theme={theme}>
+            <ThemeProvider theme={dynamicTheme}>
                <CssBaseline />
                <CommandMenu metaData={metaData} />
                {banner()}
+               <BrandedHeaderBar theme={themeMetaData} />
                <Sidenav
                   color={sidenavColor}
                   icon={resolveAssetUrl(branding.icon)}
@@ -771,6 +853,7 @@ export default function App({authenticationMetaData}: Props)
                />
                <Routes>
                   <Route path="*" element={<Navigate to={defaultRoute} />} />
+                  {metaData?.redirects && getRedirectRoutes(metaData.redirects)}
                   {appRoutes && getRoutes(appRoutes)}
                   {profileRoutes && getRoutes([profileRoutes])}
                </Routes>

src/CommandMenu.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {Capability} from "@qrunio/qqq-frontend-core/lib/model/metaData/Capability";

src/HandleAuthorizationError.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {useAuth0} from "@auth0/auth0-react";

src/QContext.tsx

@@ -5,30 +5,31 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {QBrandingMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QBrandingMetaData";
 import {QProcessMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QProcessMetaData";
 import {QTableMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QTableMetaData";
-import {AnalyticsModel} from "qqq/utils/GoogleAnalyticsUtils";
-import {createContext} from "react";
+import {AnalyticsModel} from "qqq/utils/analytics/AnalyticsUtils";
+import {createContext, ReactNode} from "react";
 
 interface QContext
 {
    pageHeader: string | JSX.Element;
    setPageHeader?: (header: string | JSX.Element) => void;
+   pageHeaderRightContent?: ReactNode;
+   setPageHeaderRightContent?: (content: ReactNode) => void;
 
    accentColor: string;
    setAccentColor?: (color: string) => void;
@@ -69,6 +70,7 @@ interface QContext
 
 const defaultState = {
    pageHeader: "",
+   pageHeaderRightContent: null as ReactNode,
    accentColor: "#0062FF",
    accentColorLight: "#C0D6F7",
    dotMenuOpen: false,

src/index.tsx

@@ -5,22 +5,22 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {QAuthenticationMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QAuthenticationMetaData";
 import React from "react";
+import {CookiesProvider} from "react-cookie";
 import ReactDOM from "react-dom";
 import {createRoot} from "react-dom/client";
 import {BrowserRouter, useNavigate, useSearchParams} from "react-router-dom";
@@ -99,21 +99,27 @@ authenticationMetaDataPromise.then((authenticationMetaData) =>
 
    if (authenticationMetaData.type === "AUTH_0")
    {
-      root.render(<BrowserRouter basename={detectBasePath()}>
-         <Auth0RouterBody />
-      </BrowserRouter>);
+      root.render(<CookiesProvider>
+         <BrowserRouter basename={detectBasePath()}>
+            <Auth0RouterBody />
+         </BrowserRouter>
+      </CookiesProvider>);
    }
    else if (authenticationMetaData.type === "OAUTH2")
    {
-      root.render(<BrowserRouter basename={detectBasePath()}>
-         <OAuth2RouterBody />
-      </BrowserRouter>);
+      root.render(<CookiesProvider>
+         <BrowserRouter basename={detectBasePath()}>
+            <OAuth2RouterBody />
+         </BrowserRouter>
+      </CookiesProvider>);
    }
    else if (authenticationMetaData.type === "FULLY_ANONYMOUS" || authenticationMetaData.type === "MOCK")
    {
-      root.render(<BrowserRouter basename={detectBasePath()}>
-         <AnonymousRouterBody />
-      </BrowserRouter>);
+      root.render(<CookiesProvider>
+         <BrowserRouter basename={detectBasePath()}>
+            <AnonymousRouterBody />
+         </BrowserRouter>
+      </CookiesProvider>);
    }
    else
    {

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/FormAdjusterInput.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/FormAdjusterInterface.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/FormAdjusterOutput.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/FormAdjusterOutputBuilder.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/FormAdjusterOutputBuilderFieldChanges.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/FormAdjusterRegistry.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;
@@ -31,8 +30,8 @@ import com.kingsrook.qqq.backend.core.logging.QLogger;
 import com.kingsrook.qqq.backend.core.model.metadata.QInstance;
 import com.kingsrook.qqq.backend.core.model.metadata.code.QCodeReference;
 import com.kingsrook.qqq.backend.core.utils.ClassPathUtils;
-import com.kingsrook.qqq.backend.javalin.QJavalinMetaData;
 import com.kingsrook.qqq.frontend.materialdashboard.model.metadata.MaterialDashboardFieldMetaData;
+import com.kingsrook.qqq.middleware.javalin.QJavalinMetaData;
 import com.kingsrook.qqq.middleware.javalin.metadata.JavalinRouteProviderMetaData;
 
 

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/actions/formadjuster/RunFormAdjusterProcess.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.actions.formadjuster;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/MaterialDashboardAppMetaData.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/MaterialDashboardBannerSlots.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/MaterialDashboardFieldMetaData.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/MaterialDashboardIconRoleNames.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/MaterialDashboardInstanceMetaData.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;
@@ -29,7 +28,7 @@ import com.kingsrook.qqq.backend.core.model.metadata.QSupplementalInstanceMetaDa
 
 
 /*******************************************************************************
- ** table-level meta-data for this module (handled as QSupplementalTableMetaData)
+ ** instance-level meta-data for this module (handled as QSupplementalTableMetaData)
  *******************************************************************************/
 public class MaterialDashboardInstanceMetaData implements QSupplementalInstanceMetaData
 {
@@ -39,6 +38,10 @@ public class MaterialDashboardInstanceMetaData implements QSupplementalInstanceM
 
    private Integer queryScreenCopyFullQueryColumnValuesLimit = 100_000;
 
+   private MaterialDashboardTableMetaData.RecordViewActionsPlacement recordViewActionsPlacement = MaterialDashboardTableMetaData.RecordViewActionsPlacement.IN_IDENTITY_SECTION;
+
+   private WeekdayCriteriaSettings weekdayCriteriaSettings = new WeekdayCriteriaSettings();
+
 
 
    /*******************************************************************************
@@ -155,4 +158,71 @@ public class MaterialDashboardInstanceMetaData implements QSupplementalInstanceM
    }
 
 
+
+   /*******************************************************************************
+    ** Getter for recordViewActionsPlacement
+    *******************************************************************************/
+   public MaterialDashboardTableMetaData.RecordViewActionsPlacement getRecordViewActionsPlacement()
+   {
+      return (this.recordViewActionsPlacement);
+   }
+
+
+
+   /*******************************************************************************
+    ** Setter for recordViewActionsPlacement
+    *******************************************************************************/
+   public void setRecordViewActionsPlacement(MaterialDashboardTableMetaData.RecordViewActionsPlacement recordViewActionsPlacement)
+   {
+      this.recordViewActionsPlacement = recordViewActionsPlacement;
+   }
+
+
+
+   /*******************************************************************************
+    ** Fluent setter for recordViewActionsPlacement
+    *******************************************************************************/
+   public MaterialDashboardInstanceMetaData withRecordViewActionsPlacement(MaterialDashboardTableMetaData.RecordViewActionsPlacement recordViewActionsPlacement)
+   {
+      this.recordViewActionsPlacement = recordViewActionsPlacement;
+      return (this);
+   }
+
+
+
+   /*******************************************************************************
+    * Getter for weekdayCriteriaSettings
+    * @see #withWeekdayCriteriaSettings(WeekdayCriteriaSettings)
+    *******************************************************************************/
+   public WeekdayCriteriaSettings getWeekdayCriteriaSettings()
+   {
+      return (this.weekdayCriteriaSettings);
+   }
+
+
+
+   /*******************************************************************************
+    * Setter for weekdayCriteriaSettings
+    * @see #withWeekdayCriteriaSettings(WeekdayCriteriaSettings)
+    *******************************************************************************/
+   public void setWeekdayCriteriaSettings(WeekdayCriteriaSettings weekdayCriteriaSettings)
+   {
+      this.weekdayCriteriaSettings = weekdayCriteriaSettings;
+   }
+
+
+
+   /*******************************************************************************
+    * Fluent setter for weekdayCriteriaSettings
+    *
+    * @param weekdayCriteriaSettings
+    * @return this
+    *******************************************************************************/
+   public MaterialDashboardInstanceMetaData withWeekdayCriteriaSettings(WeekdayCriteriaSettings weekdayCriteriaSettings)
+   {
+      this.weekdayCriteriaSettings = weekdayCriteriaSettings;
+      return (this);
+   }
+
+
 }

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/MaterialDashboardTableMetaData.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;
@@ -45,6 +44,12 @@ import static com.kingsrook.qqq.backend.core.logging.LogUtils.logPair;
  *******************************************************************************/
 public class MaterialDashboardTableMetaData extends QSupplementalTableMetaData
 {
+   public enum RecordViewActionsPlacement
+   {
+      IN_IDENTITY_SECTION,
+      INLINE_WITH_PAGE_TITLE
+   }
+
    private static final QLogger LOG = QLogger.getLogger(MaterialDashboardTableMetaData.class);
 
    public static final String TYPE = "materialDashboard";
@@ -52,6 +57,8 @@ public class MaterialDashboardTableMetaData extends QSupplementalTableMetaData
    private List<List<String>> gotoFieldNames;
    private List<String>       defaultQuickFilterFieldNames;
    private List<FieldRule>    fieldRules;
+   private Boolean            showRecordSidebar = true;
+   private RecordViewActionsPlacement recordViewActionsPlacement = RecordViewActionsPlacement.IN_IDENTITY_SECTION;
 
    private QCodeReference onLoadFormAdjuster = null;
 
@@ -262,6 +269,68 @@ public class MaterialDashboardTableMetaData extends QSupplementalTableMetaData
 
 
 
+   /*******************************************************************************
+    ** Getter for showRecordSidebar
+    *******************************************************************************/
+   public Boolean getShowRecordSidebar()
+   {
+      return (this.showRecordSidebar);
+   }
+
+
+
+   /*******************************************************************************
+    ** Setter for showRecordSidebar
+    *******************************************************************************/
+   public void setShowRecordSidebar(Boolean showRecordSidebar)
+   {
+      this.showRecordSidebar = showRecordSidebar;
+   }
+
+
+
+   /*******************************************************************************
+    ** Fluent setter for showRecordSidebar
+    *******************************************************************************/
+   public MaterialDashboardTableMetaData withShowRecordSidebar(Boolean showRecordSidebar)
+   {
+      this.showRecordSidebar = showRecordSidebar;
+      return (this);
+   }
+
+
+
+   /*******************************************************************************
+    ** Getter for recordViewActionsPlacement
+    *******************************************************************************/
+   public RecordViewActionsPlacement getRecordViewActionsPlacement()
+   {
+      return (this.recordViewActionsPlacement);
+   }
+
+
+
+   /*******************************************************************************
+    ** Setter for recordViewActionsPlacement
+    *******************************************************************************/
+   public void setRecordViewActionsPlacement(RecordViewActionsPlacement recordViewActionsPlacement)
+   {
+      this.recordViewActionsPlacement = recordViewActionsPlacement;
+   }
+
+
+
+   /*******************************************************************************
+    ** Fluent setter for recordViewActionsPlacement
+    *******************************************************************************/
+   public MaterialDashboardTableMetaData withRecordViewActionsPlacement(RecordViewActionsPlacement recordViewActionsPlacement)
+   {
+      this.recordViewActionsPlacement = recordViewActionsPlacement;
+      return (this);
+   }
+
+
+
    /*******************************************************************************
     ** Getter for fieldRules
     *******************************************************************************/
@@ -384,6 +453,9 @@ public class MaterialDashboardTableMetaData extends QSupplementalTableMetaData
          clone.onLoadFormAdjuster = onLoadFormAdjuster.clone();
       }
 
+      clone.showRecordSidebar = showRecordSidebar;
+      clone.recordViewActionsPlacement = recordViewActionsPlacement;
+
       return abstractClone;
    }
 

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/WeekdayCriteriaSettings.java

@@ -0,0 +1,156 @@
+/*
+ * QQQ - Low-code Application Framework for Engineers.
+ * Copyright (C) 2021-2026.  Kingsrook, LLC
+ * 651 N Broad St Ste 205 # 6917 | Middletown DE 19709 | United States
+ * contact@kingsrook.com
+ * https://github.com/Kingsrook/
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+package com.kingsrook.qqq.frontend.materialdashboard.model.metadata;
+
+
+import java.io.Serializable;
+import java.util.HashMap;
+import java.util.Map;
+
+
+/*******************************************************************************
+ * Material dashboard instance metadata settings - to control weekday criteria
+ * on date & date-time fields.  e.g., day-is-any-of or day-is-non-eof.
+ *
+ * <p>These criteria are on by default - but this object can turn them off with
+ * the {@code enabled} setting.</p>
+ *
+ * <p>Also - since how time zones should apply can be a hotly contested issue,
+ * values for the parameters supported by QQQ's {@code WeekdayOfDateTimeFunction}
+ * can be set as {@code dateTimeFieldFunctionArguments}</p>
+ *
+ * <p>e.g., to always use US/Central time:
+ * <pre>
+new WeekdayCriteriaSettings().withDateTimeFieldFunctionArguments(
+   Map.of(WeekdayOfDateTimeFunction.PARAM_TIME_ZONE_ID, "US/Central")));</pre></p>
+ *
+ * <p>or to use user/session time zone:
+ * <pre>
+ new WeekdayCriteriaSettings().withDateTimeFieldFunctionArguments(
+    Map.of(WeekdayOfDateTimeFunction.PARAM_USE_SESSION_ZONE_ID, true)));</pre></p>
+ *******************************************************************************/
+public class WeekdayCriteriaSettings implements Serializable, Cloneable
+{
+   private Boolean                   enabled                        = true;
+   private Map<String, Serializable> dateTimeFieldFunctionArguments = new HashMap<>();
+
+
+
+   /*******************************************************************************
+    * Getter for enabled
+    * @see #withEnabled(Boolean)
+    *******************************************************************************/
+   public Boolean getEnabled()
+   {
+      return (this.enabled);
+   }
+
+
+
+   /*******************************************************************************
+    * Setter for enabled
+    * @see #withEnabled(Boolean)
+    *******************************************************************************/
+   public void setEnabled(Boolean enabled)
+   {
+      this.enabled = enabled;
+   }
+
+
+
+   /*******************************************************************************
+    * Fluent setter for enabled
+    *
+    * @param enabled
+    * TODO document this property
+    *
+    * @return this
+    *******************************************************************************/
+   public WeekdayCriteriaSettings withEnabled(Boolean enabled)
+   {
+      this.enabled = enabled;
+      return (this);
+   }
+
+
+
+   /*******************************************************************************
+    * Getter for dateTimeFieldFunctionArguments
+    * @see #withDateTimeFieldFunctionArguments(Map)
+    *******************************************************************************/
+   public Map<String, Serializable> getDateTimeFieldFunctionArguments()
+   {
+      return (this.dateTimeFieldFunctionArguments);
+   }
+
+
+
+   /*******************************************************************************
+    * Setter for dateTimeFieldFunctionArguments
+    * @see #withDateTimeFieldFunctionArguments(Map)
+    *******************************************************************************/
+   public void setDateTimeFieldFunctionArguments(Map<String, Serializable> dateTimeFieldFunctionArguments)
+   {
+      this.dateTimeFieldFunctionArguments = dateTimeFieldFunctionArguments;
+   }
+
+
+
+   /*******************************************************************************
+    * Fluent setter for dateTimeFieldFunctionArguments
+    *
+    * @param dateTimeFieldFunctionArguments
+    * TODO document this property
+    *
+    * @return this
+    *******************************************************************************/
+   public WeekdayCriteriaSettings withDateTimeFieldFunctionArguments(Map<String, Serializable> dateTimeFieldFunctionArguments)
+   {
+      this.dateTimeFieldFunctionArguments = dateTimeFieldFunctionArguments;
+      return (this);
+   }
+
+
+
+   /***************************************************************************
+    *
+    ***************************************************************************/
+   @Override
+   public WeekdayCriteriaSettings clone()
+   {
+      try
+      {
+         WeekdayCriteriaSettings clone = (WeekdayCriteriaSettings) super.clone();
+
+         if(dateTimeFieldFunctionArguments != null)
+         {
+            clone.dateTimeFieldFunctionArguments = new HashMap<>(dateTimeFieldFunctionArguments);
+         }
+
+         return clone;
+      }
+      catch(CloneNotSupportedException e)
+      {
+         throw new AssertionError();
+      }
+   }
+
+}

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/fieldrules/FieldRule.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata.fieldrules;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/fieldrules/FieldRuleAction.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata.fieldrules;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/model/metadata/fieldrules/FieldRuleTrigger.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.model.metadata.fieldrules;

src/main/java/com/kingsrook/qqq/frontend/materialdashboard/savedreports/SavedReportTableFrontendMaterialDashboardEnricher.java

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 package com.kingsrook.qqq.frontend.materialdashboard.savedreports;

src/qqq/assets/theme/functions/preferInfoColorToPrimaryColor.ts

@@ -0,0 +1,98 @@
+
+/***************************************************************************
+ * The original version of this app had the "primary" color set to a bright
+ * red/fuchsia/pink tone (#E91E63).  So, whenever we would try to add something
+ * that might have made sense to use "primary" color, we'd see that tone that
+ * we didn't like, and we'd use "info" instead - a nice blue.
+ *
+ * But now, with the backend-provided themes, apps might set their primary
+ * color to something like, let's say teal, and the expectation is to make a
+ * lot of things like the new & save buttons be that primary color.
+ *
+ * But, we don't want to make "info" that teal tone - it should be blue
+ * (e.g,. for an info alert or icon - blue for info is the expectation).
+ *
+ * So the mistake we made all along I think was using "info" instead of
+ * "primary" in lots of UI elements that we added.
+ *
+ * To preserve backward compatibility as much as possible, while also changing
+ * some elements from "info" to "primary", then here's what I've come up with
+ * as an approach:
+ *
+ * 1. Define a CSS variable on `:root`called `--qqq-prefer-info-color-to-primary-color`.
+ *   (which flows from MaterialDashboardThemeMetaData.preferInfoColorToPrimaryColor)
+ *   - If this variable is 1, then places that /should/ have used "primary"
+ *     all along would instead still use "info".  We'd set that to 1 to
+ *     maintain backward-compatibility (e.g., so the create-new button would
+ *     still be info-blue, not primary-fuchsia).
+ *   - But then, an app can override that value to `0`, to say "no no, don't
+ *     prefer info - instead, use primary where it would have made sense
+ *     (but you just didn't want that fuchsia color)".  So an app could set
+ *     MaterialDashboardThemeMetaData.preferInfoColorToPrimaryColor to false,
+ *     or set `--qqq-prefer-info-color-to-primary-color: 0` in their custom CSS
+ *     so its create new button would be primary (e.g., teal as mentioned above),
+ *     not info-blue.
+ *
+ * 2. Define a family of functions (e.g., this file) that, based on that css
+ *    variable, either output `"info"` or `"primary"`; or `var(--qqq-info-color)`
+ *    or `var(--qqq-primary-color)`, or the hard-coded fallbacks for info & primary
+ *
+ * 3. Update components that are using `"info"` (or `--qqq-info-color`
+ *    (or `var(--qqq-info-color, "#0062FF")`)) to call the appropriate
+ *    `preferredInfoOrPrimaryXXX` function.  I don't think this is a
+ *    "change them all" scenario (because info should still be used where it's
+ *    intention is truly 'info'), but, i'm not sure entirely which ones
+ *    it should be... my current list looks like:
+ *    A. Create-New and Save buttons in DefaultButtons.tsx
+ *    B. icon backgrounds on app home screens (Home.tsx)
+ *    C. progress bar background on processes (ProcessRun.tsx usage of Stepper)
+ *    D. the little pagination buttons on the bottoms of like the TableData widget
+ ***************************************************************************/
+
+/***************************************************************************
+ * private function used by other functions in here to decide if the info
+ * color is preferred over the primary color, based on the css variable
+ * --qqq-prefer-info-color-to-primary-color being equal to 1 or not.
+ *
+ * 1 = prefer info color; anything else = prefer primary color
+ *
+ * Legacy behavior was to always prefer info color; Apps setting their own
+ * primary color may want to use their primary color for more UI elements,
+ * and set that css var to 0.
+ ***************************************************************************/
+function preferInfoColorToPrimaryColor(): boolean {
+   return getComputedStyle(document.body).getPropertyValue('--qqq-prefer-info-color-to-primary-color').trim() === "1";
+}
+
+/***************************************************************************
+ * private function that, based on the value of preferInfoColorToPrimaryColor(),
+ * returns the hex code for either the default info color (a blue), or the
+ * default primary color (a red/fuchsia).
+ ***************************************************************************/
+function preferredDefaultColorInfoOrPrimary(): string {
+   return preferInfoColorToPrimaryColor() ? "#0062FF" : "#E91E63";
+}
+
+/***************************************************************************
+ * public function that returns either "info" or "primary" based on the
+ * value of preferInfoColorToPrimaryColor().
+ *
+ * So elements that should probably be displayed in the primary color (e.g.,
+ * primary action buttons on screens, or some UI decorations), they can use
+ * this function to get their color name - but - if the primary is undesirable,
+ * then the info color (default blue) can be used instead.
+ ***************************************************************************/
+export function preferredColorNameInfoOrPrimary(): "info" | "primary" {
+   return preferInfoColorToPrimaryColor() ? "info" : "primary";
+}
+
+/***************************************************************************
+ * public function that returns a css var(--qqq...color, #default) expression,
+ * based on the value of preferInfoColorToPrimaryColor().
+ *
+ * For use-cases similar to preferredColorNameInfoOrPrimary(), but where we
+ * need a CSS value, not a color name for MUI to interpret.
+ ***************************************************************************/
+export function preferredInfoOrPrimaryColorVarExpression(): string {
+   return `var(--qqq-${preferredColorNameInfoOrPrimary()}-color, ${preferredDefaultColorInfoOrPrimary()})`;
+}

src/qqq/authorization/ScopeUtils.test.ts

@@ -0,0 +1,40 @@
+/*
+ * QQQ - Low-code Application Framework for Engineers.
+ * Copyright (C) 2021-2022.  Kingsrook, LLC
+ * 651 N Broad St Ste 205 # 6917 | Middletown DE 19709 | United States
+ * contact@kingsrook.com
+ * https://github.com/Kingsrook/
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+import {hasScope} from "./ScopeUtils";
+
+describe("OAuth scopes", () =>
+{
+   const driveScope = "https://www.googleapis.com/auth/drive";
+
+   it("accepts the exact scope among granted scopes", () =>
+   {
+      expect(hasScope(driveScope, driveScope)).toBe(true);
+      expect(hasScope(`openid profile ${driveScope} email`, driveScope)).toBe(true);
+   });
+
+   it("rejects missing scopes and substring lookalikes", () =>
+   {
+      for (const scope of ["", "openid profile", `${driveScope}.readonly`, `https://example.com/${driveScope}`, `${driveScope}.example.com`])
+      {
+         expect(hasScope(scope, driveScope)).toBe(false);
+      }
+   });
+});

src/qqq/authorization/ScopeUtils.ts

@@ -0,0 +1,24 @@
+/*
+ * QQQ - Low-code Application Framework for Engineers.
+ * Copyright (C) 2021-2022.  Kingsrook, LLC
+ * 651 N Broad St Ste 205 # 6917 | Middletown DE 19709 | United States
+ * contact@kingsrook.com
+ * https://github.com/Kingsrook/
+ *
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
+ *
+ *     https://www.apache.org/licenses/LICENSE-2.0
+ *
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
+ */
+
+export function hasScope(grantedScopes: string, requiredScope: string): boolean
+{
+   return grantedScopes.split(/\s+/).includes(requiredScope);
+}

src/qqq/authorization/anonymous/useAnonymousAuthenticationModule.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {QAuthenticationMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QAuthenticationMetaData";
@@ -50,6 +49,21 @@ export default function useAnonymousAuthenticationModule({setIsFullyAuthenticate
       setIsFullyAuthenticated(true);
       Client.setGotAuthenticationInAllControllers();
       setCookie(SESSION_UUID_COOKIE_NAME, Md5.hashStr(`${new Date()}`), {path: "/"});
+
+      try
+      {
+         const {values} = await qController.manageSession(null, null, null);
+         localStorage.setItem("sessionValues", JSON.stringify(values ?? {}));
+         if (values?.user)
+         {
+            setLoggedInUser(values.user);
+         }
+      }
+      catch (e)
+      {
+         console.log("manageSession call failed (may be expected for some backends)", e);
+      }
+
       console.log("Token generation complete.");
    };
 
@@ -60,6 +74,7 @@ export default function useAnonymousAuthenticationModule({setIsFullyAuthenticate
    const logout = () =>
    {
       qController.clearAuthenticationMetaDataLocalStorage();
+      localStorage.removeItem("sessionValues");
       removeCookie(SESSION_UUID_COOKIE_NAME, {path: "/"});
    };
 

src/qqq/authorization/auth0/CodeSnippet.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import React from "react";

src/qqq/authorization/auth0/Loader.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import React from "react";

src/qqq/authorization/auth0/Profile.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {useAuth0} from "@auth0/auth0-react";

src/qqq/authorization/auth0/ProtectedRoute.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {withAuthenticationRequired} from "@auth0/auth0-react";

src/qqq/authorization/auth0/useAuth0AuthenticationModule.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 import {Auth0Provider, useAuth0} from "@auth0/auth0-react";
 import {QAuthenticationMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QAuthenticationMetaData";
@@ -25,6 +24,7 @@ import HandleAuthorizationError from "HandleAuthorizationError";
 import jwt_decode from "jwt-decode";
 import ProtectedRoute from "qqq/authorization/auth0/ProtectedRoute";
 import {MaterialUIControllerProvider} from "qqq/context";
+import AnalyticsUtils from "qqq/utils/analytics/AnalyticsUtils";
 import Client from "qqq/utils/qqq/Client";
 import {useCookies} from "react-cookie";
 import {useNavigate, useSearchParams} from "react-router-dom";
@@ -106,6 +106,40 @@ export default function useAuth0AuthenticationModule({setIsFullyAuthenticated, s
    };
 
 
+   /***************************************************************************
+    **
+    ***************************************************************************/
+   const readStoredSessionValues = (): {[key: string]: any} | null =>
+   {
+      try
+      {
+         const rawSessionValues = localStorage.getItem("sessionValues");
+         return (rawSessionValues ? JSON.parse(rawSessionValues) : null);
+      }
+      catch (e)
+      {
+         console.log("Error parsing sessionValues from localStorage: " + e);
+         return (null);
+      }
+   };
+
+
+   /***************************************************************************
+    **
+    ***************************************************************************/
+   const hasAnalyticsIdentityValues = (sessionValues: {[key: string]: any} | null): boolean =>
+   {
+      const analyticsIdentityValues = AnalyticsUtils.getAnalyticsIdentityValues(sessionValues);
+      return Boolean(
+         analyticsIdentityValues["user_email"]
+         || sessionValues?.user?.email
+         || sessionValues?.user?.idReference
+         || sessionValues?.user?.id
+         || sessionValues?.user?.userId
+      );
+   };
+
+
    /***************************************************************************
     **
     ***************************************************************************/
@@ -115,26 +149,41 @@ export default function useAuth0AuthenticationModule({setIsFullyAuthenticated, s
       {
          console.log("Loading token from auth0...");
          const accessToken = await auth0GetAccessTokenSilently();
+         let loggedInUserForApp = auth0User;
 
          const lsAccessToken = localStorage.getItem("accessToken");
          if (shouldStoreNewToken(accessToken, lsAccessToken))
          {
             console.log("Sending accessToken to backend, requesting a sessionUUID...");
-            const {uuid: values} = await qController.manageSession(accessToken, null);
+            const {values} = await qController.manageSession(accessToken, null);
 
             localStorage.setItem("accessToken", accessToken);
-            localStorage.setItem("sessionValues", JSON.stringify(values));
+            localStorage.setItem("sessionValues", JSON.stringify(values ?? {}));
+            loggedInUserForApp = values?.user ?? auth0User;
             console.log("Got new sessionUUID from backend, and stored new accessToken");
          }
          else
          {
+            const storedSessionValues = readStoredSessionValues();
+            if (!hasAnalyticsIdentityValues(storedSessionValues))
+            {
+               console.log("Refreshing session values from existing sessionUUID...");
+               const {values} = await qController.manageSession(null, cookies[SESSION_UUID_COOKIE_NAME]);
+               localStorage.setItem("sessionValues", JSON.stringify(values ?? {}));
+               loggedInUserForApp = values?.user ?? auth0User;
+            }
+            else if (storedSessionValues?.user)
+            {
+               loggedInUserForApp = storedSessionValues.user;
+            }
+
             console.log("Using existing sessionUUID cookie");
          }
 
          setIsFullyAuthenticated(true);
          Client.setGotAuthenticationInAllControllers();
 
-         setLoggedInUser(auth0User);
+         setLoggedInUser(loggedInUserForApp);
          console.log("Token load complete.");
       }
       catch (e)
@@ -142,6 +191,7 @@ export default function useAuth0AuthenticationModule({setIsFullyAuthenticated, s
          console.log(`Error loading token: ${JSON.stringify(e)}`);
          qController.clearAuthenticationMetaDataLocalStorage();
          localStorage.removeItem("accessToken");
+         localStorage.removeItem("sessionValues");
          removeCookie(SESSION_UUID_COOKIE_NAME, {path: "/"});
          useAuth0Logout();
          return;
@@ -155,6 +205,7 @@ export default function useAuth0AuthenticationModule({setIsFullyAuthenticated, s
    const logout = () =>
    {
       localStorage.removeItem("accessToken");
+      localStorage.removeItem("sessionValues");
       useAuth0Logout({returnTo: window.location.origin});
    };
 

src/qqq/authorization/oauth2/useOAuth2AuthenticationModule.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {QAuthenticationMetaData} from "@qrunio/qqq-frontend-core/lib/model/metaData/QAuthenticationMetaData";
@@ -31,6 +30,7 @@ import {useNavigate, useSearchParams} from "react-router-dom";
 // ** Singleton instance of the QQQ client controller for API communication * //
 ////////////////////////////////////////////////////////////////////////////////
 const qController = Client.getInstance();
+const qControllerV1 = Client.getInstanceV1();
 
 /**
  * Properties interface for the useOAuth2AuthenticationModule hook.
@@ -95,10 +95,9 @@ export default function useOAuth2AuthenticationModule({setIsFullyAuthenticated,
    const authOidc: AuthContextProps | null = inOAuthContext ? useAuth() : null;
 
    /////////////////////////////////////////////////////////////////////////////
-   // ** Cookie management hook for reading the session UUID cookie         * //
-   // ** (Removal is done via direct document.cookie manipulation in logout) * //
+   // ** Cookie management hook for reading and removing session cookies    * //
    /////////////////////////////////////////////////////////////////////////////
-   const [cookies] = useCookies([SESSION_UUID_COOKIE_NAME]);
+   const [cookies, , removeCookie] = useCookies([SESSION_UUID_COOKIE_NAME, "sessionId"]);
 
    ////////////////////////////////////////////////////////////////////////////////////////////
    // ** URL search parameters hook for extracting OAuth callback parameters (code, state) * //
@@ -186,6 +185,7 @@ export default function useOAuth2AuthenticationModule({setIsFullyAuthenticated,
                // ** Exchange authorization code for session UUID via backend API * //
                ///////////////////////////////////////////////////////////////////////
                const {uuid: newSessionUuid, values} = await qController.manageSession(null, null, manageSessionRequestBody);
+               localStorage.setItem("sessionValues", JSON.stringify(values ?? {}));
 
                /////////////////////////////////////////////////////////
                // ** Update parent component's authentication state * //
@@ -265,6 +265,7 @@ export default function useOAuth2AuthenticationModule({setIsFullyAuthenticated,
                // ** Validate the session UUID with backend and retrieve user data * //
                ////////////////////////////////////////////////////////////////////////
                const {values} = await qController.manageSession(null, sessionUuid, null);
+               localStorage.setItem("sessionValues", JSON.stringify(values ?? {}));
 
                /////////////////////////////////////////////////////////
                // ** Update parent component's authentication state * //
@@ -337,30 +338,50 @@ export default function useOAuth2AuthenticationModule({setIsFullyAuthenticated,
     * Logs out the current user by clearing all authentication data and redirecting to the identity provider's logout endpoint.
     *
     * This function performs a complete cleanup of the authentication session:
-    * 1. Clears authentication metadata from local storage (via QQQ client controller)
-    * 2. Removes the session UUID cookie from the browser
-    * 3. Clears all OIDC-related localStorage items (session state, verifiers, etc.)
-    * 4. Redirects to the identity provider's logout endpoint for server-side session cleanup
+    * 1. Calls the backend logout endpoint to invalidate the server-side session
+    * 2. Clears authentication metadata from local storage (via QQQ client controller)
+    * 3. Removes the session UUID cookie from the browser
+    * 4. Clears all OIDC-related localStorage items (session state, verifiers, etc.)
+    * 5. Redirects to the identity provider's logout endpoint for server-side session cleanup
     *
     * After logout, the user will need to re-authenticate to access protected resources.
     *
     * @function logout
-    * @returns {void}
+    * @returns {Promise<void>}
     */
-   const logout = () =>
+   const logout = async () =>
    {
+      ///////////////////////////////////////////////////////////////////////////////////
+      // ** Call backend logout endpoint FIRST to invalidate server-side session      * //
+      // ** This ensures the session is deleted from database and cache is cleared    * //
+      ///////////////////////////////////////////////////////////////////////////////////
+      try
+      {
+         await qControllerV1.axiosRequest({
+            method: "POST",
+            url: "/qqq/v1/logout",
+            withCredentials: true
+         });
+      }
+      catch (e)
+      {
+         console.warn("[OAuth2] Backend logout failed:", e);
+      }
+
       //////////////////////////////////////////////////////////////////////////////////
       // ** Clear authentication metadata stored in local storage by the QQQ client * //
       //////////////////////////////////////////////////////////////////////////////////
       qController.clearAuthenticationMetaDataLocalStorage();
+      localStorage.removeItem("sessionValues");
 
       /////////////////////////////////////////////////////////////////////////////////////////////////////
-      // ** Remove the session UUID cookie from the browser                                            * //
-      // ** Backend always sets the cookie at path="/", so we only need to remove it from that path    * //
-      // ** Use direct document.cookie manipulation (react-cookie's removeCookie has bugs)             * //
+      // ** Remove session cookies from the browser                                                    * //
+      // ** Backend sets both sessionUUID and sessionId cookies (see issue #339)                       * //
+      // ** Must clear both to prevent stale session persistence                                       * //
       /////////////////////////////////////////////////////////////////////////////////////////////////////
-      console.log("[OAuth2] Removing sessionUUID cookie (path: /)");
-      document.cookie = `${SESSION_UUID_COOKIE_NAME}=; expires=Thu, 01 Jan 1970 00:00:00 UTC; path=/; max-age=0;`;
+      console.log("[OAuth2] Removing session cookies (path: /)");
+      removeCookie(SESSION_UUID_COOKIE_NAME, {path: "/"});
+      removeCookie("sessionId", {path: "/"});
 
       ///////////////////////////////////////////////////////////////////////////////////
       // ** Clear all OIDC-related items from localStorage (state, verifiers, etc.) * //
@@ -410,7 +431,7 @@ export default function useOAuth2AuthenticationModule({setIsFullyAuthenticated,
       ////////////////////////////////////////////////////////////////////////////////////
       // ** Extract the OAuth2 identity provider's base URL (authority) from metadata * //
       ////////////////////////////////////////////////////////////////////////////////////
-      const authority: string = authenticationMetaData.data.baseUrl;
+      const authority: string = authenticationMetaData.data.externalBaseUrl || authenticationMetaData.data.baseUrl;
 
       //////////////////////////////////////////////////////////////////////////
       // ** Extract the OAuth2 client ID for this application from metadata * //
@@ -442,13 +463,18 @@ export default function useOAuth2AuthenticationModule({setIsFullyAuthenticated,
       const basePath = detectBasePath();
       const baseUrl = (basePath && basePath !== "/") ? `${window.location.origin}${basePath}` : window.location.origin;
       
+      ///////////////////////////////////////////////////////////////////////////////////////////
+      // ** Extract scopes from metadata, with sensible default for backwards compatibility * //
+      ///////////////////////////////////////////////////////////////////////////////////////////
+      const scopes = authenticationMetaData.data.scopes || "openid profile email offline_access";
+
       const oidcConfig = {
          authority: authority,
          client_id: clientId,
          redirect_uri: `${baseUrl}/token`,
          post_logout_redirect_uri: baseUrl,
          response_type: "code",
-         scope: "openid profile email offline_access",
+         scope: scopes,
       };
 
       ///////////////////////////////////////////////////////////////////////////////

src/qqq/components/audits/AuditBody.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {QException} from "@qrunio/qqq-frontend-core/lib/exceptions/QException";

src/qqq/components/buttons/DefaultButtons.tsx

@@ -5,22 +5,23 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import Box from "@mui/material/Box";
 import Icon from "@mui/material/Icon";
+import {preferredColorNameInfoOrPrimary} from "qqq/assets/theme/functions/preferInfoColorToPrimaryColor";
+import {QIcon} from "@qrunio/qqq-frontend-core/lib/model/metaData/QIcon";
 import React from "react";
 import {Link} from "react-router-dom";
 import MDButton from "qqq/components/legacy/MDButton";
@@ -42,7 +43,7 @@ export function QCreateNewButton({tablePath}: QCreateNewButtonProps): JSX.Elemen
    return (
       <Box display="inline-block" ml={standardML} mr={0} width={standardWidth}>
          <Link to={`${tablePath}/create`}>
-            <MDButton variant="gradient" color="info" fullWidth startIcon={<Icon>add</Icon>}>
+            <MDButton qqqId="create-new" variant="gradient" color={preferredColorNameInfoOrPrimary()} fullWidth startIcon={<Icon>add</Icon>}>
                Create New
             </MDButton>
          </Link>
@@ -67,7 +68,7 @@ export function QSaveButton({label, iconName, onClickHandler, disabled}: QSaveBu
 {
    return (
       <Box ml={standardML} width={standardWidth}>
-         <MDButton type="submit" variant="gradient" color="info" size="small" onClick={onClickHandler} fullWidth startIcon={<Icon>{iconName}</Icon>} disabled={disabled}>
+         <MDButton qqqId="save" type="submit" variant="gradient" color={preferredColorNameInfoOrPrimary()} size="small" onClick={onClickHandler} fullWidth startIcon={<Icon>{iconName}</Icon>} disabled={disabled}>
             {label}
          </MDButton>
       </Box>
@@ -88,7 +89,7 @@ export function QDeleteButton({onClickHandler, disabled}: QDeleteButtonProps): J
 {
    return (
       <Box ml={standardML} width={standardWidth}>
-         <MDButton variant="gradient" color="primary" size="small" onClick={onClickHandler} fullWidth startIcon={<Icon>delete</Icon>} disabled={disabled}>
+         <MDButton qqqId="delete" variant="contained" color="error" size="small" onClick={onClickHandler} fullWidth startIcon={<Icon>delete</Icon>} disabled={disabled}>
             Delete
          </MDButton>
       </Box>
@@ -112,20 +113,23 @@ interface QActionsMenuButtonProps
 {
    isOpen: boolean;
    onClickHandler: any;
+   label?: string;
+   qIcon?: QIcon;
 }
 
-export function QActionsMenuButton({isOpen, onClickHandler}: QActionsMenuButtonProps): JSX.Element
+export function QActionsMenuButton({isOpen, onClickHandler, label, qIcon}: QActionsMenuButtonProps): JSX.Element
 {
    return (
       <Box width={standardWidth} ml={1}>
          <MDButton
-            variant={isOpen ? "contained" : "outlined"}
+            qqqId="actions-menu"
+            variant={"outlined"}
             color="dark"
             onClick={onClickHandler}
-            startIcon={<Icon>games</Icon>}
+            startIcon={<Icon>{qIcon?.name ?? "games"}</Icon>}
             fullWidth
          >
-            actions&nbsp;
+            {label ?? "actions"}&nbsp;
             <Icon>keyboard_arrow_down</Icon>
          </MDButton>
       </Box>
@@ -138,15 +142,16 @@ interface QCancelButtonProps
    disabled: boolean;
    label?: string;
    iconName?: string;
+   qqqId?: string;
 }
 
 export function QCancelButton({
-   onClickHandler, disabled, label, iconName,
+   onClickHandler, disabled, label, iconName, qqqId
 }: QCancelButtonProps): JSX.Element
 {
    return (
       <Box ml={standardML} width={standardWidth}>
-         <MDButton type="button" variant="outlined" color="dark" size="small" fullWidth startIcon={<Icon>{iconName}</Icon>} onClick={onClickHandler} disabled={disabled}>
+         <MDButton type="button" variant="outlined" color="dark" size="small" fullWidth startIcon={<Icon>{iconName}</Icon>} onClick={onClickHandler} disabled={disabled} qqqId={qqqId}>
             {label}
          </MDButton>
       </Box>
@@ -156,6 +161,7 @@ export function QCancelButton({
 QCancelButton.defaultProps = {
    label: "cancel",
    iconName: "cancel",
+   qqqId: "cancel"
 };
 
 interface QSubmitButtonProps
@@ -163,13 +169,14 @@ interface QSubmitButtonProps
    label?: string;
    iconName?: string;
    disabled: boolean;
+   qqqId?: string;
 }
 
-export function QSubmitButton({label, iconName, disabled}: QSubmitButtonProps): JSX.Element
+export function QSubmitButton({label, iconName, disabled, qqqId}: QSubmitButtonProps): JSX.Element
 {
    return (
       <Box ml={standardML} width={standardWidth}>
-         <MDButton type="submit" variant="gradient" color="dark" size="small" fullWidth startIcon={<Icon>{iconName}</Icon>} disabled={disabled}>
+         <MDButton type="submit" variant="gradient" color="dark" size="small" fullWidth startIcon={<Icon>{iconName}</Icon>} disabled={disabled} qqqId={qqqId}>
             {label}
          </MDButton>
       </Box>
@@ -179,6 +186,7 @@ export function QSubmitButton({label, iconName, disabled}: QSubmitButtonProps):
 QSubmitButton.defaultProps = {
    label: "Submit",
    iconName: "check",
+   qqqId: "submit"
 };
 
 interface QAlternateButtonProps
@@ -186,18 +194,21 @@ interface QAlternateButtonProps
    label: string,
    iconName?: string,
    disabled: boolean,
-   onClick?: () => void
+   onClick?: () => void,
+   qqqId?: string;
 }
 
-export function QAlternateButton({label, iconName, disabled, onClick}: QAlternateButtonProps): JSX.Element
+export function QAlternateButton({label, iconName, disabled, onClick, qqqId}: QAlternateButtonProps): JSX.Element
 {
    return (
       <Box ml={standardML} width={standardWidth}>
-         <MDButton type="button" variant="gradient" color="secondary" size="small" fullWidth startIcon={iconName && <Icon>{iconName}</Icon>} onClick={onClick} disabled={disabled}>
+         <MDButton type="button" variant="gradient" color="secondary" size="small" fullWidth startIcon={iconName && <Icon>{iconName}</Icon>} onClick={onClick} disabled={disabled} qqqId={qqqId}>
             {label}
          </MDButton>
       </Box>
    );
 }
 
-QAlternateButton.defaultProps = {};
+QAlternateButton.defaultProps = {
+   qqqId: "alternate"
+};

src/qqq/components/buttons/MenuButton.tsx

@@ -5,18 +5,17 @@
  * contact@kingsrook.com
  * https://github.com/Kingsrook/
  *
- * This program is free software: you can redistribute it and/or modify
- * it under the terms of the GNU Affero General Public License as
- * published by the Free Software Foundation, either version 3 of the
- * License, or (at your option) any later version.
+ * Licensed under the Apache License, Version 2.0 (the "License");
+ * you may not use this file except in compliance with the License.
+ * You may obtain a copy of the License at
  *
- * This program is distributed in the hope that it will be useful,
- * but WITHOUT ANY WARRANTY; without even the implied warranty of
- * MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
- * GNU Affero General Public License for more details.
+ *     https://www.apache.org/licenses/LICENSE-2.0
  *
- * You should have received a copy of the GNU Affero General Public License
- * along with this program.  If not, see <https://www.gnu.org/licenses/>.
+ * Unless required by applicable law or agreed to in writing, software
+ * distributed under the License is distributed on an "AS IS" BASIS,
+ * WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
+ * See the License for the specific language governing permissions and
+ * limitations under the License.
  */
 
 import {ClickAwayListener, Grow, MenuList, Paper, Popper} from "@mui/material";
@@ -24,6 +23,7 @@ import Button from "@mui/material/Button/Button";
 import Icon from "@mui/material/Icon";
 import MenuItem from "@mui/material/MenuItem";
 import React, {useEffect, useRef, useState} from "react";
+import {generateButtonId, generateMenuItemId} from "qqq/utils/qqqIdUtils";
 
 
 interface Props
@@ -95,7 +95,7 @@ function MenuButton({label, iconName, options, disabled, callback}: Props)
    const menuItems: JSX.Element[] = []
    options.map((option, index) =>
    {
-      menuItems.push(<MenuItem key={index} onClick={e => menuItemClicked(e, index)}>
+      menuItems.push(<MenuItem key={index} data-qqq-id={generateMenuItemId(undefined, option)} onClick={e => menuItemClicked(e, index)}>
          {option}
       </MenuItem>);
    })
@@ -105,6 +105,7 @@ function MenuButton({label, iconName, options, disabled, callback}: Props)
          <Button
             ref={anchorRef}
             id="composition-button"
+            data-qqq-id={generateButtonId(undefined, label)}
             aria-controls={open ? "composition-menu" : undefined}
             aria-expanded={open ? "true" : undefined}
             aria-haspopup="true"