@anvilkit/plugin-asset-manager 0.1.1

package/dist/adapters/s3-presigned.cjs

@@ -0,0 +1,166 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    s3PresignedAdapter: ()=>s3PresignedAdapter,
+    RetryableError: ()=>external_retry_cjs_namespaceObject.RetryableError
+});
+const external_errors_cjs_namespaceObject = require("../errors.cjs");
+const external_retry_cjs_namespaceObject = require("../retry.cjs");
+function s3PresignedAdapter(options) {
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    if ("function" != typeof fetchImpl) throw new Error("s3PresignedAdapter: no `fetch` implementation available. Pass `options.fetch`.");
+    const generateId = options.idGenerator ?? defaultIdGenerator;
+    return async (file)=>{
+        const presign = await (0, external_retry_cjs_namespaceObject.withRetry)(()=>requestPresign(file, fetchImpl, options), {
+            ...options.retry ?? {},
+            signal: options.signal
+        });
+        await (0, external_retry_cjs_namespaceObject.withRetry)(()=>putToS3(file, presign, fetchImpl, options.signal), {
+            ...options.retry ?? {},
+            signal: options.signal
+        });
+        const id = presign.id ?? generateId();
+        const publicUrl = presign.publicUrl ?? stripQueryAndFragment(presign.url);
+        const result = {
+            id,
+            url: publicUrl,
+            ...file.name ? {
+                name: file.name
+            } : {},
+            meta: {
+                size: file.size,
+                ...file.type ? {
+                    mimeType: file.type
+                } : {}
+            }
+        };
+        return result;
+    };
+}
+async function requestPresign(file, fetchImpl, options) {
+    const url = "string" == typeof options.presignEndpoint ? options.presignEndpoint : options.presignEndpoint.toString();
+    const body = JSON.stringify({
+        name: file.name,
+        type: file.type,
+        size: file.size
+    });
+    let response;
+    try {
+        response = await fetchImpl(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                ...options.headers ?? {}
+            },
+            body,
+            ...options.signal ? {
+                signal: options.signal
+            } : {}
+        });
+    } catch (cause) {
+        throw new external_retry_cjs_namespaceObject.RetryableError(`s3PresignedAdapter: presign request failed (${describeError(cause)}).`, {
+            cause
+        });
+    }
+    if (response.status >= 500) throw new external_retry_cjs_namespaceObject.RetryableError(`s3PresignedAdapter: presign returned ${response.status}.`, {
+        retryAfterMs: parseRetryAfter(response.headers.get("retry-after"))
+    });
+    if (!response.ok) throw new external_errors_cjs_namespaceObject.AssetValidationError("UPLOAD_FAILED", `s3PresignedAdapter: presign returned ${response.status}.`);
+    let payload;
+    try {
+        payload = await response.json();
+    } catch (cause) {
+        throw new external_errors_cjs_namespaceObject.AssetValidationError("UPLOAD_FAILED", "s3PresignedAdapter: presign response was not JSON.", {
+            cause
+        });
+    }
+    if (!isPresignResponse(payload)) throw new external_errors_cjs_namespaceObject.AssetValidationError("UPLOAD_FAILED", "s3PresignedAdapter: presign response missing `url`.");
+    return payload;
+}
+async function putToS3(file, presign, fetchImpl, signal) {
+    const headers = {
+        ...file.type ? {
+            "Content-Type": file.type
+        } : {},
+        ...presign.headers ?? {}
+    };
+    let response;
+    try {
+        response = await fetchImpl(presign.url, {
+            method: "PUT",
+            body: file,
+            headers,
+            ...signal ? {
+                signal
+            } : {}
+        });
+    } catch (cause) {
+        throw new external_retry_cjs_namespaceObject.RetryableError(`s3PresignedAdapter: PUT failed (${describeError(cause)}).`, {
+            cause
+        });
+    }
+    if (response.status >= 500) throw new external_retry_cjs_namespaceObject.RetryableError(`s3PresignedAdapter: PUT returned ${response.status}.`, {
+        retryAfterMs: parseRetryAfter(response.headers.get("retry-after"))
+    });
+    if (!response.ok) throw new external_errors_cjs_namespaceObject.AssetValidationError("UPLOAD_FAILED", `s3PresignedAdapter: PUT returned ${response.status}.`);
+}
+function isPresignResponse(value) {
+    return null !== value && "object" == typeof value && "string" == typeof value.url && value.url.length > 0;
+}
+function stripQueryAndFragment(url) {
+    const queryIdx = url.indexOf("?");
+    const fragmentIdx = url.indexOf("#");
+    const cuts = [
+        queryIdx,
+        fragmentIdx
+    ].filter((i)=>-1 !== i);
+    if (0 === cuts.length) return url;
+    return url.slice(0, Math.min(...cuts));
+}
+function parseRetryAfter(header) {
+    if (null === header) return;
+    const seconds = Number(header);
+    if (Number.isFinite(seconds) && seconds >= 0) return 1000 * seconds;
+    const date = Date.parse(header);
+    if (!Number.isNaN(date)) return Math.max(0, date - Date.now());
+}
+function describeError(error) {
+    if (error instanceof Error) return error.message || error.name;
+    return String(error);
+}
+function defaultIdGenerator() {
+    if (void 0 !== globalThis.crypto && "function" == typeof globalThis.crypto.randomUUID) return globalThis.crypto.randomUUID();
+    return `asset-${Math.random().toString(36).slice(2)}-${Date.now()}`;
+}
+exports.RetryableError = __webpack_exports__.RetryableError;
+exports.s3PresignedAdapter = __webpack_exports__.s3PresignedAdapter;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "RetryableError",
+    "s3PresignedAdapter"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/adapters/s3-presigned.d.cts

@@ -0,0 +1,59 @@
+/**
+ * @file S3 presigned adapter — production-ready upload backend that
+ * fronts an arbitrary "presign + PUT" service.
+ *
+ * Pipeline:
+ *  1. POST `presignEndpoint` with `{ name, type, size }`.
+ *  2. Receive `{ url, publicUrl?, fields?, headers?, id? }`.
+ *  3. PUT the file body to `url` with `Content-Type: file.type`.
+ *  4. Return a validated `UploadResult` for the registry.
+ *
+ * Both phases are wrapped in `withRetry()` — 5xx and network failures
+ * throw `RetryableError`; 4xx and shape errors throw
+ * `AssetValidationError("UPLOAD_FAILED")` (no retry).
+ *
+ * The adapter never logs file contents — only `name`, `size`, and
+ * `mimeType` are safe to log.
+ *
+ * @experimental Public surface may change before v1.0.
+ */
+import { type RetryOptions } from "../retry.js";
+import type { UploadAdapter } from "../types.js";
+export { RetryableError } from "../retry.js";
+export type { RetryOptions } from "../retry.js";
+export interface S3PresignedAdapterOptions {
+    /** Endpoint that returns a presigned PUT target for the file. */
+    readonly presignEndpoint: string | URL;
+    /**
+     * Injectable `fetch` implementation. Defaults to `globalThis.fetch`.
+     * Tests pass a fake; production callers can wire in a custom fetch
+     * for instrumentation or redirects.
+     */
+    readonly fetch?: typeof globalThis.fetch;
+    /** Recorded for logs / diagnostics; the adapter does not validate it. */
+    readonly region?: string;
+    /** Forwarded to `withRetry()` for both phases. */
+    readonly retry?: RetryOptions;
+    /** Aborts the in-flight presign + PUT (and any retry sleeps). */
+    readonly signal?: AbortSignal;
+    /** Extra headers applied to the presign POST (e.g. auth). */
+    readonly headers?: Record<string, string>;
+    /** Override the asset id generator. Default: `crypto.randomUUID()`. */
+    readonly idGenerator?: () => string;
+}
+/**
+ * Shape returned by `presignEndpoint`. Hosts may return additional
+ * fields — the adapter ignores them.
+ */
+export interface S3PresignResponse {
+    /** Presigned PUT URL. */
+    readonly url: string;
+    /** Canonical URL recorded on the asset. Defaults to a stripped `url`. */
+    readonly publicUrl?: string;
+    /** Optional headers to forward on the PUT (e.g. `x-amz-*`). */
+    readonly headers?: Record<string, string>;
+    /** Optional asset id; falls back to `idGenerator()`. */
+    readonly id?: string;
+}
+export declare function s3PresignedAdapter(options: S3PresignedAdapterOptions): UploadAdapter;
+//# sourceMappingURL=s3-presigned.d.cts.map

package/dist/adapters/s3-presigned.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-presigned.d.cts","sourceRoot":"","sources":["../../src/adapters/s3-presigned.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAkB,KAAK,YAAY,EAAa,MAAM,aAAa,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,yBAAyB;IACzC,iEAAiE;IACjE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,GAAG,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,uEAAuE;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IACjC,yBAAyB;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,wDAAwD;IACxD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,yBAAyB,GAChC,aAAa,CAkCf"}

package/dist/adapters/s3-presigned.d.ts

@@ -0,0 +1,59 @@
+/**
+ * @file S3 presigned adapter — production-ready upload backend that
+ * fronts an arbitrary "presign + PUT" service.
+ *
+ * Pipeline:
+ *  1. POST `presignEndpoint` with `{ name, type, size }`.
+ *  2. Receive `{ url, publicUrl?, fields?, headers?, id? }`.
+ *  3. PUT the file body to `url` with `Content-Type: file.type`.
+ *  4. Return a validated `UploadResult` for the registry.
+ *
+ * Both phases are wrapped in `withRetry()` — 5xx and network failures
+ * throw `RetryableError`; 4xx and shape errors throw
+ * `AssetValidationError("UPLOAD_FAILED")` (no retry).
+ *
+ * The adapter never logs file contents — only `name`, `size`, and
+ * `mimeType` are safe to log.
+ *
+ * @experimental Public surface may change before v1.0.
+ */
+import { type RetryOptions } from "../retry.js";
+import type { UploadAdapter } from "../types.js";
+export { RetryableError } from "../retry.js";
+export type { RetryOptions } from "../retry.js";
+export interface S3PresignedAdapterOptions {
+    /** Endpoint that returns a presigned PUT target for the file. */
+    readonly presignEndpoint: string | URL;
+    /**
+     * Injectable `fetch` implementation. Defaults to `globalThis.fetch`.
+     * Tests pass a fake; production callers can wire in a custom fetch
+     * for instrumentation or redirects.
+     */
+    readonly fetch?: typeof globalThis.fetch;
+    /** Recorded for logs / diagnostics; the adapter does not validate it. */
+    readonly region?: string;
+    /** Forwarded to `withRetry()` for both phases. */
+    readonly retry?: RetryOptions;
+    /** Aborts the in-flight presign + PUT (and any retry sleeps). */
+    readonly signal?: AbortSignal;
+    /** Extra headers applied to the presign POST (e.g. auth). */
+    readonly headers?: Record<string, string>;
+    /** Override the asset id generator. Default: `crypto.randomUUID()`. */
+    readonly idGenerator?: () => string;
+}
+/**
+ * Shape returned by `presignEndpoint`. Hosts may return additional
+ * fields — the adapter ignores them.
+ */
+export interface S3PresignResponse {
+    /** Presigned PUT URL. */
+    readonly url: string;
+    /** Canonical URL recorded on the asset. Defaults to a stripped `url`. */
+    readonly publicUrl?: string;
+    /** Optional headers to forward on the PUT (e.g. `x-amz-*`). */
+    readonly headers?: Record<string, string>;
+    /** Optional asset id; falls back to `idGenerator()`. */
+    readonly id?: string;
+}
+export declare function s3PresignedAdapter(options: S3PresignedAdapterOptions): UploadAdapter;
+//# sourceMappingURL=s3-presigned.d.ts.map

package/dist/adapters/s3-presigned.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"s3-presigned.d.ts","sourceRoot":"","sources":["../../src/adapters/s3-presigned.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAGH,OAAO,EAAkB,KAAK,YAAY,EAAa,MAAM,aAAa,CAAC;AAC3E,OAAO,KAAK,EAAE,aAAa,EAAgB,MAAM,aAAa,CAAC;AAE/D,OAAO,EAAE,cAAc,EAAE,MAAM,aAAa,CAAC;AAC7C,YAAY,EAAE,YAAY,EAAE,MAAM,aAAa,CAAC;AAEhD,MAAM,WAAW,yBAAyB;IACzC,iEAAiE;IACjE,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,GAAG,CAAC;IACvC;;;;OAIG;IACH,QAAQ,CAAC,KAAK,CAAC,EAAE,OAAO,UAAU,CAAC,KAAK,CAAC;IACzC,yEAAyE;IACzE,QAAQ,CAAC,MAAM,CAAC,EAAE,MAAM,CAAC;IACzB,kDAAkD;IAClD,QAAQ,CAAC,KAAK,CAAC,EAAE,YAAY,CAAC;IAC9B,iEAAiE;IACjE,QAAQ,CAAC,MAAM,CAAC,EAAE,WAAW,CAAC;IAC9B,6DAA6D;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,uEAAuE;IACvE,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,MAAM,CAAC;CACpC;AAED;;;GAGG;AACH,MAAM,WAAW,iBAAiB;IACjC,yBAAyB;IACzB,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,yEAAyE;IACzE,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,CAAC;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC;IAC1C,wDAAwD;IACxD,QAAQ,CAAC,EAAE,CAAC,EAAE,MAAM,CAAC;CACrB;AAED,wBAAgB,kBAAkB,CACjC,OAAO,EAAE,yBAAyB,GAChC,aAAa,CAkCf"}

package/dist/adapters/s3-presigned.js

@@ -0,0 +1,129 @@
+import { AssetValidationError } from "../errors.js";
+import { RetryableError, withRetry } from "../retry.js";
+function s3PresignedAdapter(options) {
+    const fetchImpl = options.fetch ?? globalThis.fetch;
+    if ("function" != typeof fetchImpl) throw new Error("s3PresignedAdapter: no `fetch` implementation available. Pass `options.fetch`.");
+    const generateId = options.idGenerator ?? defaultIdGenerator;
+    return async (file)=>{
+        const presign = await withRetry(()=>requestPresign(file, fetchImpl, options), {
+            ...options.retry ?? {},
+            signal: options.signal
+        });
+        await withRetry(()=>putToS3(file, presign, fetchImpl, options.signal), {
+            ...options.retry ?? {},
+            signal: options.signal
+        });
+        const id = presign.id ?? generateId();
+        const publicUrl = presign.publicUrl ?? stripQueryAndFragment(presign.url);
+        const result = {
+            id,
+            url: publicUrl,
+            ...file.name ? {
+                name: file.name
+            } : {},
+            meta: {
+                size: file.size,
+                ...file.type ? {
+                    mimeType: file.type
+                } : {}
+            }
+        };
+        return result;
+    };
+}
+async function requestPresign(file, fetchImpl, options) {
+    const url = "string" == typeof options.presignEndpoint ? options.presignEndpoint : options.presignEndpoint.toString();
+    const body = JSON.stringify({
+        name: file.name,
+        type: file.type,
+        size: file.size
+    });
+    let response;
+    try {
+        response = await fetchImpl(url, {
+            method: "POST",
+            headers: {
+                "Content-Type": "application/json",
+                ...options.headers ?? {}
+            },
+            body,
+            ...options.signal ? {
+                signal: options.signal
+            } : {}
+        });
+    } catch (cause) {
+        throw new RetryableError(`s3PresignedAdapter: presign request failed (${describeError(cause)}).`, {
+            cause
+        });
+    }
+    if (response.status >= 500) throw new RetryableError(`s3PresignedAdapter: presign returned ${response.status}.`, {
+        retryAfterMs: parseRetryAfter(response.headers.get("retry-after"))
+    });
+    if (!response.ok) throw new AssetValidationError("UPLOAD_FAILED", `s3PresignedAdapter: presign returned ${response.status}.`);
+    let payload;
+    try {
+        payload = await response.json();
+    } catch (cause) {
+        throw new AssetValidationError("UPLOAD_FAILED", "s3PresignedAdapter: presign response was not JSON.", {
+            cause
+        });
+    }
+    if (!isPresignResponse(payload)) throw new AssetValidationError("UPLOAD_FAILED", "s3PresignedAdapter: presign response missing `url`.");
+    return payload;
+}
+async function putToS3(file, presign, fetchImpl, signal) {
+    const headers = {
+        ...file.type ? {
+            "Content-Type": file.type
+        } : {},
+        ...presign.headers ?? {}
+    };
+    let response;
+    try {
+        response = await fetchImpl(presign.url, {
+            method: "PUT",
+            body: file,
+            headers,
+            ...signal ? {
+                signal
+            } : {}
+        });
+    } catch (cause) {
+        throw new RetryableError(`s3PresignedAdapter: PUT failed (${describeError(cause)}).`, {
+            cause
+        });
+    }
+    if (response.status >= 500) throw new RetryableError(`s3PresignedAdapter: PUT returned ${response.status}.`, {
+        retryAfterMs: parseRetryAfter(response.headers.get("retry-after"))
+    });
+    if (!response.ok) throw new AssetValidationError("UPLOAD_FAILED", `s3PresignedAdapter: PUT returned ${response.status}.`);
+}
+function isPresignResponse(value) {
+    return null !== value && "object" == typeof value && "string" == typeof value.url && value.url.length > 0;
+}
+function stripQueryAndFragment(url) {
+    const queryIdx = url.indexOf("?");
+    const fragmentIdx = url.indexOf("#");
+    const cuts = [
+        queryIdx,
+        fragmentIdx
+    ].filter((i)=>-1 !== i);
+    if (0 === cuts.length) return url;
+    return url.slice(0, Math.min(...cuts));
+}
+function parseRetryAfter(header) {
+    if (null === header) return;
+    const seconds = Number(header);
+    if (Number.isFinite(seconds) && seconds >= 0) return 1000 * seconds;
+    const date = Date.parse(header);
+    if (!Number.isNaN(date)) return Math.max(0, date - Date.now());
+}
+function describeError(error) {
+    if (error instanceof Error) return error.message || error.name;
+    return String(error);
+}
+function defaultIdGenerator() {
+    if (void 0 !== globalThis.crypto && "function" == typeof globalThis.crypto.randomUUID) return globalThis.crypto.randomUUID();
+    return `asset-${Math.random().toString(36).slice(2)}-${Date.now()}`;
+}
+export { RetryableError, s3PresignedAdapter };

package/dist/asset-reference.cjs

@@ -0,0 +1,38 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    createAssetReference: ()=>createAssetReference
+});
+function createAssetReference(id) {
+    return `asset://${id}`;
+}
+exports.createAssetReference = __webpack_exports__.createAssetReference;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "createAssetReference"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/asset-reference.d.cts

@@ -0,0 +1,10 @@
+/**
+ * @file Canonical `asset://${id}` reference helper.
+ *
+ * Lives in its own file so both `plugin.ts` (which dispatches asset
+ * references into Puck data) and `studio-asset-source.ts` (which
+ * surfaces the URL to the sidebar's `image` module) can reuse it
+ * without creating a circular import between them.
+ */
+export declare function createAssetReference(id: string): string;
+//# sourceMappingURL=asset-reference.d.cts.map

package/dist/asset-reference.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-reference.d.cts","sourceRoot":"","sources":["../src/asset-reference.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/asset-reference.d.ts

@@ -0,0 +1,10 @@
+/**
+ * @file Canonical `asset://${id}` reference helper.
+ *
+ * Lives in its own file so both `plugin.ts` (which dispatches asset
+ * references into Puck data) and `studio-asset-source.ts` (which
+ * surfaces the URL to the sidebar's `image` module) can reuse it
+ * without creating a circular import between them.
+ */
+export declare function createAssetReference(id: string): string;
+//# sourceMappingURL=asset-reference.d.ts.map

package/dist/asset-reference.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"asset-reference.d.ts","sourceRoot":"","sources":["../src/asset-reference.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,wBAAgB,oBAAoB,CAAC,EAAE,EAAE,MAAM,GAAG,MAAM,CAEvD"}

package/dist/asset-reference.js

@@ -0,0 +1,4 @@
+function createAssetReference(id) {
+    return `asset://${id}`;
+}
+export { createAssetReference };

package/dist/csp.cjs

@@ -0,0 +1,83 @@
+"use strict";
+var __webpack_require__ = {};
+(()=>{
+    __webpack_require__.d = (exports1, definition)=>{
+        for(var key in definition)if (__webpack_require__.o(definition, key) && !__webpack_require__.o(exports1, key)) Object.defineProperty(exports1, key, {
+            enumerable: true,
+            get: definition[key]
+        });
+    };
+})();
+(()=>{
+    __webpack_require__.o = (obj, prop)=>Object.prototype.hasOwnProperty.call(obj, prop);
+})();
+(()=>{
+    __webpack_require__.r = (exports1)=>{
+        if ("u" > typeof Symbol && Symbol.toStringTag) Object.defineProperty(exports1, Symbol.toStringTag, {
+            value: 'Module'
+        });
+        Object.defineProperty(exports1, '__esModule', {
+            value: true
+        });
+    };
+})();
+var __webpack_exports__ = {};
+__webpack_require__.r(__webpack_exports__);
+__webpack_require__.d(__webpack_exports__, {
+    getRequiredCsp: ()=>getRequiredCsp
+});
+function getRequiredCsp(options = {}) {
+    const connectSrc = new Set();
+    const imgSrc = new Set();
+    const mediaSrc = new Set();
+    if (true === options.dataUrl) {
+        imgSrc.add("data:");
+        mediaSrc.add("data:");
+    }
+    if (true === options.inMemory) {
+        imgSrc.add("blob:");
+        mediaSrc.add("blob:");
+    }
+    const s3List = Array.isArray(options.s3) ? options.s3 : options.s3 ? [
+        options.s3
+    ] : [];
+    for (const entry of s3List){
+        const presignOrigin = parseOrigin(entry.presignEndpoint);
+        if (void 0 !== presignOrigin) connectSrc.add(presignOrigin);
+        const publicOrigin = void 0 !== entry.publicHost ? parseOrigin(entry.publicHost) : void 0;
+        if (void 0 !== publicOrigin) {
+            connectSrc.add(publicOrigin);
+            imgSrc.add(publicOrigin);
+            mediaSrc.add(publicOrigin);
+        } else if (void 0 !== presignOrigin) {
+            imgSrc.add(presignOrigin);
+            mediaSrc.add(presignOrigin);
+        }
+    }
+    return Object.freeze({
+        connectSrc: Object.freeze([
+            ...connectSrc
+        ]),
+        imgSrc: Object.freeze([
+            ...imgSrc
+        ]),
+        mediaSrc: Object.freeze([
+            ...mediaSrc
+        ])
+    });
+}
+function parseOrigin(value) {
+    const raw = "string" == typeof value ? value : value.toString();
+    try {
+        return new URL(raw).origin;
+    } catch  {
+        return;
+    }
+}
+exports.getRequiredCsp = __webpack_exports__.getRequiredCsp;
+for(var __rspack_i in __webpack_exports__)if (-1 === [
+    "getRequiredCsp"
+].indexOf(__rspack_i)) exports[__rspack_i] = __webpack_exports__[__rspack_i];
+Object.defineProperty(exports, '__esModule', {
+    value: true
+});

package/dist/csp.d.cts

@@ -0,0 +1,45 @@
+/**
+ * @file CSP advisor — computes the minimum `connect-src` / `img-src` /
+ * `media-src` directives a host page needs in order for the
+ * configured adapters and their served URLs to load. Pure static
+ * derivation; no network or DOM dependencies.
+ *
+ * The host calls this once at boot with a description of which
+ * adapters are wired in, then merges the result into its existing CSP
+ * builder.
+ *
+ * @example
+ *   const csp = getRequiredCsp({
+ *     dataUrl: true,
+ *     s3: { presignEndpoint: "https://uploads.example.com/sign" },
+ *   });
+ *   // csp.connectSrc → ["https://uploads.example.com"]
+ *   // csp.imgSrc     → ["data:"]
+ *   // csp.mediaSrc   → ["data:"]
+ */
+export interface S3CspOptions {
+    /** The presign endpoint configured on `s3PresignedAdapter`. */
+    readonly presignEndpoint: string | URL;
+    /**
+     * Optional public-bucket origin (e.g. `https://cdn.example.com`).
+     * If your `publicUrl` returned by the presign service points at a
+     * different host than the presign endpoint itself, list it here so
+     * the advisor can include it in `img-src` / `media-src`.
+     */
+    readonly publicHost?: string;
+}
+export interface RequiredCspOptions {
+    /** True if `dataUrlUploader` is mounted. Defaults to false. */
+    readonly dataUrl?: boolean;
+    /** True if `inMemoryUploader` is mounted. Defaults to false. */
+    readonly inMemory?: boolean;
+    /** Description of any `s3PresignedAdapter` instance(s). */
+    readonly s3?: S3CspOptions | readonly S3CspOptions[];
+}
+export interface RequiredCsp {
+    readonly connectSrc: readonly string[];
+    readonly imgSrc: readonly string[];
+    readonly mediaSrc: readonly string[];
+}
+export declare function getRequiredCsp(options?: RequiredCspOptions): RequiredCsp;
+//# sourceMappingURL=csp.d.cts.map

package/dist/csp.d.cts.map

@@ -0,0 +1 @@
+{"version":3,"file":"csp.d.cts","sourceRoot":"","sources":["../src/csp.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;GAkBG;AAEH,MAAM,WAAW,YAAY;IAC5B,+DAA+D;IAC/D,QAAQ,CAAC,eAAe,EAAE,MAAM,GAAG,GAAG,CAAC;IACvC;;;;;OAKG;IACH,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,kBAAkB;IAClC,+DAA+D;IAC/D,QAAQ,CAAC,OAAO,CAAC,EAAE,OAAO,CAAC;IAC3B,gEAAgE;IAChE,QAAQ,CAAC,QAAQ,CAAC,EAAE,OAAO,CAAC;IAC5B,2DAA2D;IAC3D,QAAQ,CAAC,EAAE,CAAC,EAAE,YAAY,GAAG,SAAS,YAAY,EAAE,CAAC;CACrD;AAED,MAAM,WAAW,WAAW;IAC3B,QAAQ,CAAC,UAAU,EAAE,SAAS,MAAM,EAAE,CAAC;IACvC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAC;IACnC,QAAQ,CAAC,QAAQ,EAAE,SAAS,MAAM,EAAE,CAAC;CACrC;AAED,wBAAgB,cAAc,CAAC,OAAO,GAAE,kBAAuB,GAAG,WAAW,CA4C5E"}