photo visibility for demo events, hardened the demo mode. fixed dark/light mode toggle and notification bell toggle. fixed photo upload page sizes & header visibility.

app/Http/Controllers/Api/EventPublicController.php

@@ -1785,6 +1785,8 @@ class EventPublicController extends BaseController
             $this->joinTokenService->incrementUsage($joinToken);
         }
 
+        $demoReadOnly = (bool) Arr::get($joinToken?->metadata ?? [], 'demo_read_only', false);
+
         return response()->json([
             'id' => $event->id,
             'slug' => $event->slug,
@@ -1794,6 +1796,7 @@ class EventPublicController extends BaseController
             'updated_at' => $event->updated_at,
             'type' => $eventTypeData,
             'join_token' => $joinToken?->token,
+            'demo_read_only' => $demoReadOnly,
             'photobooth_enabled' => (bool) ($event->photoboothSetting?->enabled),
             'branding' => $branding,
             'guest_upload_visibility' => Arr::get($event->settings ?? [], 'guest_upload_visibility', 'review'),
@@ -2751,6 +2754,28 @@ class EventPublicController extends BaseController
 
         [$event, $joinToken] = $result;
         $eventId = $event->id;
+        $demoReadOnly = (bool) Arr::get($joinToken?->metadata ?? [], 'demo_read_only', false);
+
+        if ($demoReadOnly) {
+            $this->recordTokenEvent(
+                $joinToken,
+                $request,
+                'demo_read_only',
+                ['event_id' => $eventId],
+                $token,
+                Response::HTTP_FORBIDDEN
+            );
+
+            return ApiError::response(
+                'demo_read_only',
+                'Demo mode',
+                'Uploads are disabled in demo mode.',
+                Response::HTTP_FORBIDDEN,
+                [
+                    'event_id' => $eventId,
+                ]
+            );
+        }
 
         $eventModel = Event::with([
             'tenant',