themes lol

src/features/settings/server.ts

@@ -2,12 +2,28 @@ import { createServerFn } from "@tanstack/react-start";
 import { superTokensFunctionMiddleware } from "@/utils/supertokens";
 import { serverFnLoggingMiddleware } from "@/utils/activities";
 
+// Whitelists: these values flow into Mantine's primaryColor / the
+// data-mantine-color-scheme attribute — an unknown value crash-loops or
+// unstyles the account's UI on every load.
+const ACCENT_COLORS = [
+  "blue",
+  "red",
+  "green",
+  "yellow",
+  "grape",
+  "orange",
+  "pink",
+  "lime",
+];
+const COLOR_SCHEMES = ["light", "dark", "auto"];
+
 export const updateUserColorScheme = createServerFn({ method: "POST" })
   .validator((data: string) => data)
   .middleware([superTokensFunctionMiddleware, serverFnLoggingMiddleware])
   .handler(async ({ context, data }) => {
     const { userAuthId, metadata } = context;
     if (!userAuthId) return;
+    if (!COLOR_SCHEMES.includes(data)) return;
 
     const { updateUserMetadataFields } = await import(
       "@/utils/supertokens-core.server"
@@ -51,12 +67,41 @@ export const updateUserLocale = createServerFn({ method: "POST" })
     };
   });
 
+export const updateUserTheme = createServerFn({ method: "POST" })
+  .validator((data: string) => data)
+  .middleware([superTokensFunctionMiddleware, serverFnLoggingMiddleware])
+  .handler(async ({ context, data }) => {
+    const { userAuthId, metadata } = context;
+    if (!userAuthId) return;
+
+    const { THEME_IDS } = await import("@/themes/registry");
+    if (!THEME_IDS.includes(data)) {
+      throw new Error("Unknown theme");
+    }
+
+    const { updateUserMetadataFields } = await import(
+      "@/utils/supertokens-core.server"
+    );
+
+    await updateUserMetadataFields(userAuthId, {
+      theme: data,
+    });
+
+    return {
+      metadata: {
+        ...metadata,
+        theme: data,
+      },
+    };
+  });
+
 export const updateUserAccentColor = createServerFn({ method: "POST" })
   .validator((data: string) => data)
   .middleware([superTokensFunctionMiddleware, serverFnLoggingMiddleware])
   .handler(async ({ context, data }) => {
     const { userAuthId, metadata } = context;
     if (!userAuthId) return;
+    if (!ACCENT_COLORS.includes(data)) return;
 
     const { updateUserMetadataFields } = await import(
       "@/utils/supertokens-core.server"