@arcblock/did-connect-service 4.1.56 → 4.1.57

package/dist/og/tree-node.js

@@ -0,0 +1,192 @@
+/**
+ * Node entry of the tree renderer (`og-node` → `renderOgTree`, ArcBlock/did#300).
+ *
+ * Same contract as the Worker's `renderOgTree` (`worker.ts`): the tree is
+ * validated by `tree.ts` first (data: images only, hard limits, bounded
+ * shadows/filters/text, nothing is fetched), renders run one at a time per
+ * process, and the result is PNG bytes from the same satori +
+ * `@resvg/resvg-wasm` stack the Worker uses — never sharp, so output and memory
+ * behave the same on both runtimes and in a `bun --compile` binary.
+ *
+ * Fonts: Node has one CJK family (Noto Sans SC — it also covers Latin, kana
+ * and most Traditional glyphs), so `locale` only shapes the observer event.
+ * - Regular: `fontUrl` / `CONNECT_OG_FONT_URL` / the bundled face (like og.png).
+ * - Bold: `boldFontUrl` / `CONNECT_OG_FONT_BOLD_URL`; when neither is set it is
+ *   DERIVED from the Regular URL by swapping `Regular`→`Bold` in the file name
+ *   (`…/NotoSansSC-Regular.otf` → `…/NotoSansSC-Bold.otf`,
+ *   `…/noto-sans-sc-regular.otf` → `…/noto-sans-sc-bold.otf`). No Bold is
+ *   bundled in the npm package. `file:` URLs are read from disk.
+ * - Missing Bold renders 700 with Regular (`boldFallback: true` on the event).
+ *   Only a success, "not configured", or a missing DERIVED file is cached; a
+ *   failure of an explicitly configured URL is retried on the next render.
+ *
+ * No wall-clock guard around satori/resvg here (`Resvg.render()` is one
+ * synchronous wasm call; a timer cannot interrupt it). Render cost is bounded
+ * up front instead: the validator refuses SVG styles/filters and caps images,
+ * text, inline <svg> and an area-weighted shadow/filter budget, and
+ * `og-tree.test.ts` asserts the worst tree within those caps renders in < 3 s.
+ * Moving renders into `worker_threads` with a timeout is left to the host
+ * (ArcBlock/arc#8746) if still wanted.
+ */
+import { createHash } from "node:crypto";
+import { existsSync, mkdirSync, readFileSync, writeFileSync } from "node:fs";
+import { readFile } from "node:fs/promises";
+import { createRequire } from "node:module";
+import { tmpdir } from "node:os";
+import { dirname, join } from "node:path";
+import { fileURLToPath } from "node:url";
+import { consoleLogger } from "../logger.js";
+import { FONT_FETCH_TIMEOUT_MS, loadFont } from "./generator.js";
+import { resolveNodeOgConfig } from "./node-config.js";
+import { rasterizeSvgToPngWithWasm } from "./node-wasm-fallback.js";
+import { createSerialQueue, OG_RENDER_UNAVAILABLE_CODES, OG_TREE_ERROR_CODES, OgRenderUnavailableError, OgTreeRenderError, prepareOgTree, wantsBold, withTimeout, } from "./tree.js";
+/** Default deadline for waiting in the process render queue. */
+export const OG_NODE_QUEUE_MAX_WAIT_MS = 20_000;
+const serialRender = createSerialQueue();
+let satoriReady;
+/** One cached Bold result (keyed by its URL); a different URL replaces it. `null` = no Bold. */
+let boldSlot;
+let boldMissingWarned = false;
+/**
+ * `satori/standalone` with yoga.wasm read from disk — the default `satori`
+ * build instantiates its inlined yoga by calling `fetch()` on a data: URI,
+ * and a tree render makes no fetch calls at all.
+ */
+function loadSatori() {
+    if (!satoriReady) {
+        satoriReady = (async () => {
+            const { default: satori, init } = await import("satori/standalone");
+            const require = createRequire(import.meta.url);
+            await init(readFileSync(require.resolve("satori/yoga.wasm")));
+            return satori;
+        })().catch((error) => {
+            satoriReady = undefined;
+            throw error;
+        });
+    }
+    return satoriReady;
+}
+function md5(s) {
+    return createHash("md5").update(s).digest("hex");
+}
+/** `…Regular…` → `…Bold…` in the last path segment; undefined when the name has no Regular marker. */
+export function deriveBoldFontUrl(regularUrl) {
+    if (!regularUrl)
+        return undefined;
+    const slash = regularUrl.lastIndexOf("/");
+    const head = regularUrl.slice(0, slash + 1);
+    const name = regularUrl.slice(slash + 1);
+    const bold = name.replace(/Regular/, "Bold").replace(/regular/, "bold");
+    return bold === name ? undefined : head + bold;
+}
+async function fetchFontBytes(url, fontCacheDir, fetchImpl) {
+    if (url.startsWith("file:"))
+        return readFile(fileURLToPath(url));
+    const diskPath = join(fontCacheDir, `${md5(url)}.font`);
+    if (existsSync(diskPath))
+        return readFile(diskPath);
+    const res = await fetchImpl(url, { signal: AbortSignal.timeout(FONT_FETCH_TIMEOUT_MS) });
+    if (!res.ok)
+        throw new Error(`font fetch failed: ${res.status}`);
+    const buf = Buffer.from(await res.arrayBuffer());
+    mkdirSync(dirname(diskPath), { recursive: true });
+    writeFileSync(diskPath, buf);
+    return buf;
+}
+async function loadBold(explicitUrl, regularUrl, fontCacheDir, fetchImpl, logger) {
+    const url = explicitUrl ?? deriveBoldFontUrl(regularUrl);
+    const key = url ?? "(not configured)";
+    if (boldSlot?.key === key)
+        return boldSlot.bytes;
+    if (!url) {
+        boldSlot = { key, bytes: null };
+        return null;
+    }
+    try {
+        const bytes = await fetchFontBytes(url, fontCacheDir, fetchImpl);
+        boldSlot = { key, bytes };
+        return bytes;
+    }
+    catch (err) {
+        if (!explicitUrl) {
+            // A derived sibling that does not exist is "not configured", not an outage.
+            boldSlot = { key, bytes: null };
+            return null;
+        }
+        // Explicit URL failed: fall back for THIS render only; retry next time.
+        logger.warn({ message: "[og] bold font load failed; rendering weight 700 with the regular face", mod: "og", err });
+        return null;
+    }
+}
+/** Test isolation: forget cached Bold bytes and re-arm the missing-Bold warning. */
+export function resetOgNodeTreeFontsForTesting() {
+    boldSlot = undefined;
+    boldMissingWarned = false;
+}
+/**
+ * Renders a caller-built satori tree to PNG bytes. Rejects with an
+ * `OgTreeRenderError` (400, see `OG_TREE_ERROR_CODES`) before any work when the
+ * tree breaks a rule, or with an `OgRenderUnavailableError` (503) when fonts or
+ * the queue time out.
+ */
+export async function renderOgTree(options) {
+    const startedAt = performance.now();
+    const tree = prepareOgTree(options);
+    const config = resolveNodeOgConfig();
+    const logger = options.logger ?? consoleLogger;
+    const fetchImpl = options.fetchImpl ?? fetch;
+    const fontCacheDir = options.fontCacheDir ?? join(tmpdir(), "og-fonts");
+    const fontTimeout = options.fontReadTimeoutMs ?? FONT_FETCH_TIMEOUT_MS;
+    const regularUrl = options.fontUrl ?? config.fontUrl;
+    const timeoutError = () => new OgRenderUnavailableError(OG_RENDER_UNAVAILABLE_CODES.fontTimeout, `font load exceeded ${fontTimeout}ms`);
+    const { png, queueMs, fontReadMs, boldFallback } = await serialRender(async ({ queueMs }) => {
+        const satori = await loadSatori();
+        const fontStart = performance.now();
+        const regular = await withTimeout(loadFont({ fontUrl: regularUrl, fontCacheDir, fetchImpl, logger, timeoutMs: fontTimeout }), fontTimeout, timeoutError);
+        let bold = null;
+        const boldWanted = wantsBold(options.weights);
+        if (boldWanted) {
+            bold = await withTimeout(loadBold(options.boldFontUrl ?? config.boldFontUrl, regularUrl, fontCacheDir, fetchImpl, logger), fontTimeout, timeoutError);
+            if (!bold && !boldMissingWarned) {
+                boldMissingWarned = true;
+                logger.warn({ message: "[og] bold font missing; rendering weight 700 with the regular face", mod: "og" });
+            }
+        }
+        const fontReadMs = performance.now() - fontStart;
+        // Fresh ArrayBuffer copies per render: satori's parsed font objects are
+        // released with them instead of staying resident (same as the Worker).
+        const copy = (b) => b.buffer.slice(b.byteOffset, b.byteOffset + b.byteLength);
+        const fonts = [
+            { name: "Noto", data: copy(regular), weight: 400, style: "normal" },
+        ];
+        if (bold)
+            fonts.push({ name: "Noto", data: copy(bold), weight: 700, style: "normal" });
+        let png;
+        try {
+            // No `loadAdditionalAsset`: og.png's emoji loader downloads glyphs, and a
+            // tree render must make no request on behalf of its content.
+            const svg = await satori(tree, {
+                width: options.width,
+                height: options.height,
+                fonts,
+            });
+            png = await rasterizeSvgToPngWithWasm(svg, regular);
+        }
+        catch {
+            // satori/resvg messages can quote the input; report a generic 400.
+            throw new OgTreeRenderError(OG_TREE_ERROR_CODES.renderFailed, "the tree could not be rendered");
+        }
+        return { png, queueMs, fontReadMs, boldFallback: boldWanted && !bold };
+    }, { maxWaitMs: options.queueMaxWaitMs ?? OG_NODE_QUEUE_MAX_WAIT_MS });
+    options.observer?.({
+        locale: options.locale,
+        cacheStatus: "BYPASS",
+        durationMs: performance.now() - startedAt,
+        queueMs,
+        fontReadMs,
+        template: "tree",
+        ...(boldFallback ? { boldFallback: true } : {}),
+    });
+    return new Uint8Array(png.buffer, png.byteOffset, png.byteLength);
+}
+//# sourceMappingURL=tree-node.js.map

package/dist/og/tree-node.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree-node.js","sourceRoot":"","sources":["../../src/og/tree-node.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA6BG;AAEH,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EAAE,UAAU,EAAE,SAAS,EAAE,YAAY,EAAE,aAAa,EAAE,MAAM,SAAS,CAAC;AAC7E,OAAO,EAAE,QAAQ,EAAE,MAAM,kBAAkB,CAAC;AAC5C,OAAO,EAAE,aAAa,EAAE,MAAM,aAAa,CAAC;AAC5C,OAAO,EAAE,MAAM,EAAE,MAAM,SAAS,CAAC;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAC;AAC1C,OAAO,EAAE,aAAa,EAAE,MAAM,UAAU,CAAC;AACzC,OAAO,EAAE,aAAa,EAAe,MAAM,cAAc,CAAC;AAC1D,OAAO,EAAE,qBAAqB,EAAE,QAAQ,EAAE,MAAM,gBAAgB,CAAC;AACjE,OAAO,EAAE,mBAAmB,EAAE,MAAM,kBAAkB,CAAC;AACvD,OAAO,EAAE,yBAAyB,EAAE,MAAM,yBAAyB,CAAC;AACpE,OAAO,EACL,iBAAiB,EACjB,2BAA2B,EAC3B,mBAAmB,EACnB,wBAAwB,EACxB,iBAAiB,EAEjB,aAAa,EACb,SAAS,EACT,WAAW,GACZ,MAAM,WAAW,CAAC;AAEnB,gEAAgE;AAChE,MAAM,CAAC,MAAM,yBAAyB,GAAG,MAAM,CAAC;AA+BhD,MAAM,YAAY,GAAG,iBAAiB,EAAE,CAAC;AACzC,IAAI,WAA4E,CAAC;AAEjF,gGAAgG;AAChG,IAAI,QAA2D,CAAC;AAChE,IAAI,iBAAiB,GAAG,KAAK,CAAC;AAE9B;;;;GAIG;AACH,SAAS,UAAU;IACjB,IAAI,CAAC,WAAW,EAAE,CAAC;QACjB,WAAW,GAAG,CAAC,KAAK,IAAI,EAAE;YACxB,MAAM,EAAE,OAAO,EAAE,MAAM,EAAE,IAAI,EAAE,GAAG,MAAM,MAAM,CAAC,mBAAmB,CAAC,CAAC;YACpE,MAAM,OAAO,GAAG,aAAa,CAAC,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;YAC/C,MAAM,IAAI,CAAC,YAAY,CAAC,OAAO,CAAC,OAAO,CAAC,kBAAkB,CAAC,CAAC,CAAC,CAAC;YAC9D,OAAO,MAAM,CAAC;QAChB,CAAC,CAAC,EAAE,CAAC,KAAK,CAAC,CAAC,KAAc,EAAE,EAAE;YAC5B,WAAW,GAAG,SAAS,CAAC;YACxB,MAAM,KAAK,CAAC;QACd,CAAC,CAAC,CAAC;IACL,CAAC;IACD,OAAO,WAAW,CAAC;AACrB,CAAC;AAED,SAAS,GAAG,CAAC,CAAS;IACpB,OAAO,UAAU,CAAC,KAAK,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;AACnD,CAAC;AAED,sGAAsG;AACtG,MAAM,UAAU,iBAAiB,CAAC,UAA8B;IAC9D,IAAI,CAAC,UAAU;QAAE,OAAO,SAAS,CAAC;IAClC,MAAM,KAAK,GAAG,UAAU,CAAC,WAAW,CAAC,GAAG,CAAC,CAAC;IAC1C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,CAAC,EAAE,KAAK,GAAG,CAAC,CAAC,CAAC;IAC5C,MAAM,IAAI,GAAG,UAAU,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC;IACzC,MAAM,IAAI,GAAG,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC,OAAO,CAAC,SAAS,EAAE,MAAM,CAAC,CAAC;IACxE,OAAO,IAAI,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,GAAG,IAAI,CAAC;AACjD,CAAC;AAED,KAAK,UAAU,cAAc,CAAC,GAAW,EAAE,YAAoB,EAAE,SAAuB;IACtF,IAAI,GAAG,CAAC,UAAU,CAAC,OAAO,CAAC;QAAE,OAAO,QAAQ,CAAC,aAAa,CAAC,GAAG,CAAC,CAAC,CAAC;IACjE,MAAM,QAAQ,GAAG,IAAI,CAAC,YAAY,EAAE,GAAG,GAAG,CAAC,GAAG,CAAC,OAAO,CAAC,CAAC;IACxD,IAAI,UAAU,CAAC,QAAQ,CAAC;QAAE,OAAO,QAAQ,CAAC,QAAQ,CAAC,CAAC;IACpD,MAAM,GAAG,GAAG,MAAM,SAAS,CAAC,GAAG,EAAE,EAAE,MAAM,EAAE,WAAW,CAAC,OAAO,CAAC,qBAAqB,CAAC,EAAE,CAAC,CAAC;IACzF,IAAI,CAAC,GAAG,CAAC,EAAE;QAAE,MAAM,IAAI,KAAK,CAAC,sBAAsB,GAAG,CAAC,MAAM,EAAE,CAAC,CAAC;IACjE,MAAM,GAAG,GAAG,MAAM,CAAC,IAAI,CAAC,MAAM,GAAG,CAAC,WAAW,EAAE,CAAC,CAAC;IACjD,SAAS,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,aAAa,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC;IAC7B,OAAO,GAAG,CAAC;AACb,CAAC;AAED,KAAK,UAAU,QAAQ,CACrB,WAA+B,EAC/B,UAA8B,EAC9B,YAAoB,EACpB,SAAuB,EACvB,MAAc;IAEd,MAAM,GAAG,GAAG,WAAW,IAAI,iBAAiB,CAAC,UAAU,CAAC,CAAC;IACzD,MAAM,GAAG,GAAG,GAAG,IAAI,kBAAkB,CAAC;IACtC,IAAI,QAAQ,EAAE,GAAG,KAAK,GAAG;QAAE,OAAO,QAAQ,CAAC,KAAK,CAAC;IACjD,IAAI,CAAC,GAAG,EAAE,CAAC;QACT,QAAQ,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;QAChC,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,CAAC;QACH,MAAM,KAAK,GAAG,MAAM,cAAc,CAAC,GAAG,EAAE,YAAY,EAAE,SAAS,CAAC,CAAC;QACjE,QAAQ,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,CAAC;QAC1B,OAAO,KAAK,CAAC;IACf,CAAC;IAAC,OAAO,GAAG,EAAE,CAAC;QACb,IAAI,CAAC,WAAW,EAAE,CAAC;YACjB,4EAA4E;YAC5E,QAAQ,GAAG,EAAE,GAAG,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC;YAChC,OAAO,IAAI,CAAC;QACd,CAAC;QACD,wEAAwE;QACxE,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,wEAAwE,EAAE,GAAG,EAAE,IAAI,EAAE,GAAG,EAAE,CAAC,CAAC;QACnH,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED,oFAAoF;AACpF,MAAM,UAAU,8BAA8B;IAC5C,QAAQ,GAAG,SAAS,CAAC;IACrB,iBAAiB,GAAG,KAAK,CAAC;AAC5B,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,OAAgC;IACjE,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;IACpC,MAAM,IAAI,GAAG,aAAa,CAAC,OAAO,CAAC,CAAC;IACpC,MAAM,MAAM,GAAG,mBAAmB,EAAE,CAAC;IACrC,MAAM,MAAM,GAAG,OAAO,CAAC,MAAM,IAAI,aAAa,CAAC;IAC/C,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,KAAK,CAAC;IAC7C,MAAM,YAAY,GAAG,OAAO,CAAC,YAAY,IAAI,IAAI,CAAC,MAAM,EAAE,EAAE,UAAU,CAAC,CAAC;IACxE,MAAM,WAAW,GAAG,OAAO,CAAC,iBAAiB,IAAI,qBAAqB,CAAC;IACvE,MAAM,UAAU,GAAG,OAAO,CAAC,OAAO,IAAI,MAAM,CAAC,OAAO,CAAC;IACrD,MAAM,YAAY,GAAG,GAAG,EAAE,CACxB,IAAI,wBAAwB,CAAC,2BAA2B,CAAC,WAAW,EAAE,sBAAsB,WAAW,IAAI,CAAC,CAAC;IAE/G,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,GAAG,MAAM,YAAY,CACnE,KAAK,EAAE,EAAE,OAAO,EAAE,EAAE,EAAE;QACpB,MAAM,MAAM,GAAG,MAAM,UAAU,EAAE,CAAC;QAClC,MAAM,SAAS,GAAG,WAAW,CAAC,GAAG,EAAE,CAAC;QACpC,MAAM,OAAO,GAAG,MAAM,WAAW,CAC/B,QAAQ,CAAC,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,WAAW,EAAE,CAAC,EAC1F,WAAW,EACX,YAAY,CACb,CAAC;QACF,IAAI,IAAI,GAAkB,IAAI,CAAC;QAC/B,MAAM,UAAU,GAAG,SAAS,CAAC,OAAO,CAAC,OAAO,CAAC,CAAC;QAC9C,IAAI,UAAU,EAAE,CAAC;YACf,IAAI,GAAG,MAAM,WAAW,CACtB,QAAQ,CAAC,OAAO,CAAC,WAAW,IAAI,MAAM,CAAC,WAAW,EAAE,UAAU,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,CAAC,EAChG,WAAW,EACX,YAAY,CACb,CAAC;YACF,IAAI,CAAC,IAAI,IAAI,CAAC,iBAAiB,EAAE,CAAC;gBAChC,iBAAiB,GAAG,IAAI,CAAC;gBACzB,MAAM,CAAC,IAAI,CAAC,EAAE,OAAO,EAAE,oEAAoE,EAAE,GAAG,EAAE,IAAI,EAAE,CAAC,CAAC;YAC5G,CAAC;QACH,CAAC;QACD,MAAM,UAAU,GAAG,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS,CAAC;QACjD,wEAAwE;QACxE,uEAAuE;QACvE,MAAM,IAAI,GAAG,CAAC,CAAS,EAAE,EAAE,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,UAAU,EAAE,CAAC,CAAC,UAAU,GAAG,CAAC,CAAC,UAAU,CAAgB,CAAC;QACrG,MAAM,KAAK,GAAmF;YAC5F,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,OAAO,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE;SACpE,CAAC;QACF,IAAI,IAAI;YAAE,KAAK,CAAC,IAAI,CAAC,EAAE,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,CAAC,EAAE,MAAM,EAAE,GAAG,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;QACvF,IAAI,GAAW,CAAC;QAChB,IAAI,CAAC;YACH,0EAA0E;YAC1E,6DAA6D;YAC7D,MAAM,GAAG,GAAG,MAAM,MAAM,CAAC,IAAoC,EAAE;gBAC7D,KAAK,EAAE,OAAO,CAAC,KAAK;gBACpB,MAAM,EAAE,OAAO,CAAC,MAAM;gBACtB,KAAK;aACN,CAAC,CAAC;YACH,GAAG,GAAG,MAAM,yBAAyB,CAAC,GAAG,EAAE,OAAO,CAAC,CAAC;QACtD,CAAC;QAAC,MAAM,CAAC;YACP,mEAAmE;YACnE,MAAM,IAAI,iBAAiB,CAAC,mBAAmB,CAAC,YAAY,EAAE,gCAAgC,CAAC,CAAC;QAClG,CAAC;QACD,OAAO,EAAE,GAAG,EAAE,OAAO,EAAE,UAAU,EAAE,YAAY,EAAE,UAAU,IAAI,CAAC,IAAI,EAAE,CAAC;IACzE,CAAC,EACD,EAAE,SAAS,EAAE,OAAO,CAAC,cAAc,IAAI,yBAAyB,EAAE,CACnE,CAAC;IACF,OAAO,CAAC,QAAQ,EAAE,CAAC;QACjB,MAAM,EAAE,OAAO,CAAC,MAAM;QACtB,WAAW,EAAE,QAAQ;QACrB,UAAU,EAAE,WAAW,CAAC,GAAG,EAAE,GAAG,SAAS;QACzC,OAAO;QACP,UAAU;QACV,QAAQ,EAAE,MAAM;QAChB,GAAG,CAAC,YAAY,CAAC,CAAC,CAAC,EAAE,YAAY,EAAE,IAAI,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;KAChD,CAAC,CAAC;IACH,OAAO,IAAI,UAAU,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,UAAU,EAAE,GAAG,CAAC,UAAU,CAAC,CAAC;AACpE,CAAC"}

package/dist/og/tree.d.ts

@@ -0,0 +1,192 @@
+/**
+ * Runtime-neutral half of the tree renderer (`renderOgTree`, ArcBlock/did#300).
+ *
+ * A caller hands in a plain satori object tree (the same `{ type, props }`
+ * shape `templates.ts` builds). Before anything is parsed or rasterized, this
+ * module walks the whole tree and enforces the image contract:
+ *
+ *  - every image reference (`src`, `href`, any `url(...)` in a style or other
+ *    prop) must be a `data:` URI — anything else rejects the WHOLE render and
+ *    no request is ever made (keeps did#220's no-remote-media stance);
+ *  - the bytes must be PNG / JPEG / SVG by magic bytes, matching the declared
+ *    MIME type;
+ *  - hard limits are read from the image headers (never by decoding):
+ *    PNG/JPEG ≤ 1.5 MP and ≤ 1 MB each, SVG ≤ 256 KB, the whole tree
+ *    ≤ 2.5 MP and ≤ 2 MB of raw image bytes. Nothing is resized; an
+ *    over-limit tree is refused with a code that names the reason.
+ *
+ * Both runtime entries (`worker.ts` → `og-worker`, `tree-node.ts` → `og-node`)
+ * call {@link validateOgTree} and share {@link createSerialQueue}.
+ */
+import { OgValidationError } from "./types.js";
+/** Font weights a tree may declare. Fonts are loaded by the renderer per locale. */
+export type OgTreeWeight = 400 | 700;
+/** A satori node: `{ type, props }`, children under `props.children`. */
+export interface OgTreeNode {
+    type: string;
+    props?: Record<string, unknown>;
+}
+export interface OgTreeRenderOptions {
+    /** Plain satori object tree. Only `data:` image URIs are accepted. */
+    tree: OgTreeNode;
+    width: number;
+    height: number;
+    /** BCP-47-ish locale; selects the font family (normalized like og.png). */
+    locale: string;
+    /** Weights the tree uses. Defaults to `[400]`. Regular is always loaded. */
+    weights?: readonly OgTreeWeight[];
+}
+/** Font family name trees should use in `fontFamily` (same as the templates). */
+export declare const OG_TREE_FONT_FAMILY = "Noto";
+export declare const OG_TREE_LIMITS: {
+    /** PNG/JPEG: max pixels per image. */
+    readonly maxImagePixels: 1500000;
+    /** PNG/JPEG: max raw bytes per image. */
+    readonly maxImageBytes: 1000000;
+    /** SVG: max raw bytes per image. */
+    readonly maxSvgBytes: number;
+    /** Sum of PNG/JPEG pixels over every image occurrence in the tree. */
+    readonly maxTotalPixels: 2500000;
+    /** Sum of raw image bytes (all types) over every image occurrence. */
+    readonly maxTotalBytes: 2000000;
+    /** Image occurrences per tree. */
+    readonly maxImages: 32;
+    /** Output canvas. */
+    readonly maxCanvasDimension: 2400;
+    readonly maxCanvasPixels: 1000000;
+    /** Tree shape. */
+    readonly maxDepth: 64;
+    readonly maxNodes: 5000;
+    /** Characters per text string (satori lays out every glyph). */
+    readonly maxStringChars: 2000;
+    /** Characters of text over the whole tree. */
+    readonly maxTextChars: 10000;
+    /** Characters per non-image prop string; inline `<svg>` props (path data) get more. */
+    readonly maxPropStringChars: 2000;
+    readonly maxSvgPropStringChars: 16384;
+    /** Characters over all non-image prop strings in the tree. */
+    readonly maxPropChars: 65536;
+    /** box-shadow / text-shadow: entries per value; |offset| per entry, in px. */
+    readonly maxShadows: 4;
+    readonly maxShadowLengthPx: 100;
+    /** Blur radius and spread for shadows, drop-shadow() and blur(), in px — blur drives render cost. */
+    readonly maxBlurPx: 16;
+    readonly maxSpreadPx: 16;
+    /** CSS filter: functions per value. */
+    readonly maxFilterFunctions: 4;
+    /**
+     * Tree-wide effect budget, in units. Render cost of a shadow or filter
+     * follows the AREA it covers, not its blur radius (measured on the Worker
+     * stack: a full-canvas box-shadow ≈ 0.4 s, a CSS filter on a full-canvas
+     * group ≈ 1.6 s at blur 4px and 16px alike). An element's area unit count
+     * is ceil(width × height / 250,000) from numeric px `width`/`height` in its
+     * style, or the whole canvas when either is not a number. Charges:
+     * - each boxShadow entry: 1 × area units;
+     * - each CSS filter function: 1 × area units, `blur()` 4 × area units (so a
+     *   blur fits only on an element ≤ 250,000 px); filters are allowed only on
+     *   elements without children (a filtered group rasterizes its whole,
+     *   possibly overflowing, subtree: 6–8 s measured);
+     * - each textShadow entry: 1 per started 250 characters of every text
+     *   string it reaches (textShadow is inherited, so a declaration on a
+     *   container is paid for every text node below it).
+     * `drop-shadow()` is refused (use boxShadow).
+     */
+    readonly maxEffects: 4;
+    readonly effectAreaUnitPx: 250000;
+    readonly effectCostBlur: 4;
+    readonly textShadowCharsPerUnit: 250;
+    /** Inline <svg>: nodes and prop characters per tree (paths are costly to rasterize). */
+    readonly maxSvgNodes: 500;
+    readonly maxSvgChars: 16384;
+};
+export declare const OG_TREE_ERROR_CODES: {
+    readonly treeInvalid: "OG_TREE_INVALID";
+    readonly canvasInvalid: "OG_TREE_CANVAS_INVALID";
+    readonly weightsInvalid: "OG_TREE_WEIGHTS_INVALID";
+    readonly imageNotDataUri: "OG_IMAGE_NOT_DATA_URI";
+    readonly imageUnsupportedType: "OG_IMAGE_UNSUPPORTED_TYPE";
+    readonly imageUnreadable: "OG_IMAGE_UNREADABLE";
+    readonly imageTooManyPixels: "OG_IMAGE_TOO_MANY_PIXELS";
+    readonly imageTooLarge: "OG_IMAGE_TOO_LARGE";
+    readonly svgTooLarge: "OG_SVG_TOO_LARGE";
+    readonly svgUnsafe: "OG_SVG_UNSAFE";
+    readonly treeTooManyImages: "OG_TREE_TOO_MANY_IMAGES";
+    readonly treeTooManyPixels: "OG_TREE_TOO_MANY_PIXELS";
+    readonly treeTooManyBytes: "OG_TREE_TOO_MANY_BYTES";
+    readonly svgFilterForbidden: "OG_SVG_FILTER_FORBIDDEN";
+    readonly shadowLimit: "OG_TREE_SHADOW_LIMIT";
+    readonly cssFilterLimit: "OG_TREE_FILTER_LIMIT";
+    readonly textTooLong: "OG_TREE_TEXT_TOO_LONG";
+    /** satori/resvg failed on a tree that passed validation (generic; no input echoed). */
+    readonly renderFailed: "OG_TREE_RENDER_FAILED";
+};
+export type OgTreeErrorCode = (typeof OG_TREE_ERROR_CODES)[keyof typeof OG_TREE_ERROR_CODES];
+/** Rejection of a tree render. `statusCode` 400 (inherited): the input is at fault. */
+export declare class OgTreeRenderError extends OgValidationError {
+    readonly code: OgTreeErrorCode;
+    constructor(code: OgTreeErrorCode, message: string);
+}
+export declare const OG_RENDER_UNAVAILABLE_CODES: {
+    /** A font read did not finish within the timeout; the cached slot was dropped. */
+    readonly fontTimeout: "OG_FONT_TIMEOUT";
+    /** The render waited in the isolate/process queue past its deadline. */
+    readonly queueTimeout: "OG_QUEUE_TIMEOUT";
+};
+export type OgRenderUnavailableCode = (typeof OG_RENDER_UNAVAILABLE_CODES)[keyof typeof OG_RENDER_UNAVAILABLE_CODES];
+/** The renderer is temporarily unable to serve (font storage hung, queue backed up). Retryable: 503. */
+export declare class OgRenderUnavailableError extends Error {
+    readonly statusCode = 503;
+    readonly code: OgRenderUnavailableCode;
+    constructor(code: OgRenderUnavailableCode, message: string);
+}
+/** Rejects with `onTimeout()` if `promise` has not settled within `ms`. */
+export declare function withTimeout<T>(promise: Promise<T>, ms: number, onTimeout: () => Error): Promise<T>;
+export type OgImageKind = "png" | "jpeg" | "svg";
+/** Detects PNG / JPEG / SVG from the bytes themselves; anything else is `undefined`. */
+export declare function sniffOgImageKind(bytes: Uint8Array): OgImageKind | undefined;
+export declare function ogImageMime(kind: OgImageKind): string;
+export interface OgTreeImageStats {
+    imageCount: number;
+    totalPixels: number;
+    totalBytes: number;
+}
+/**
+ * Validates a tree render request without rendering. Throws an
+ * {@link OgTreeRenderError} naming the first violated rule; never performs I/O.
+ */
+export declare function validateOgTree(options: OgTreeRenderOptions): OgTreeImageStats;
+/** Validation for the renderers: returns the snapshot that was validated — render exactly this. */
+export declare function prepareOgTree(options: OgTreeRenderOptions): OgTreeNode;
+export type OgImageInspection = {
+    kind: OgImageKind;
+    width: number | null;
+    height: number | null;
+    bytes: number;
+} | {
+    code: OgTreeErrorCode;
+};
+/**
+ * Checks ONE image data: URI against the per-image rules (type, bytes, pixels,
+ * SVG safety) without rendering, so a caller can drop an image before building
+ * a tree. `width`/`height` are null for SVG. Tree-wide totals are not applied.
+ */
+export declare function inspectOgImage(dataUri: string): OgImageInspection;
+export declare function wantsBold(weights: readonly OgTreeWeight[] | undefined): boolean;
+export interface SerialTaskInfo {
+    /** Milliseconds the task waited in the queue before starting. */
+    queueMs: number;
+}
+export type SerialQueue = <T>(task: (info: SerialTaskInfo) => Promise<T>, options?: {
+    maxWaitMs?: number;
+}) => Promise<T>;
+/**
+ * A FIFO mutex: a task starts only after every previously queued task has
+ * settled (fulfilled or rejected). One queue per isolate/process keeps
+ * satori's per-render font parse and resvg's wasm heap from stacking.
+ *
+ * `maxWaitMs`: a task still waiting when the deadline passes is rejected with
+ * an {@link OgRenderUnavailableError} (`OG_QUEUE_TIMEOUT`) and never runs, so a
+ * wedged predecessor cannot pile up callers forever.
+ */
+export declare function createSerialQueue(): SerialQueue;
+//# sourceMappingURL=tree.d.ts.map

package/dist/og/tree.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"tree.d.ts","sourceRoot":"","sources":["../../src/og/tree.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAEH,OAAO,EAAE,iBAAiB,EAAE,MAAM,YAAY,CAAC;AAE/C,oFAAoF;AACpF,MAAM,MAAM,YAAY,GAAG,GAAG,GAAG,GAAG,CAAC;AAErC,yEAAyE;AACzE,MAAM,WAAW,UAAU;IACzB,IAAI,EAAE,MAAM,CAAC;IACb,KAAK,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;CACjC;AAED,MAAM,WAAW,mBAAmB;IAClC,sEAAsE;IACtE,IAAI,EAAE,UAAU,CAAC;IACjB,KAAK,EAAE,MAAM,CAAC;IACd,MAAM,EAAE,MAAM,CAAC;IACf,2EAA2E;IAC3E,MAAM,EAAE,MAAM,CAAC;IACf,4EAA4E;IAC5E,OAAO,CAAC,EAAE,SAAS,YAAY,EAAE,CAAC;CACnC;AAED,iFAAiF;AACjF,eAAO,MAAM,mBAAmB,SAAS,CAAC;AAE1C,eAAO,MAAM,cAAc;IACzB,sCAAsC;;IAEtC,yCAAyC;;IAEzC,oCAAoC;;IAEpC,sEAAsE;;IAEtE,sEAAsE;;IAEtE,kCAAkC;;IAElC,qBAAqB;;;IAGrB,kBAAkB;;;IAGlB,gEAAgE;;IAEhE,8CAA8C;;IAE9C,uFAAuF;;;IAGvF,8DAA8D;;IAE9D,8EAA8E;;;IAG9E,qGAAqG;;;IAGrG,uCAAuC;;IAEvC;;;;;;;;;;;;;;;;OAgBG;;;;;IAKH,wFAAwF;;;CAGhF,CAAC;AAEX,eAAO,MAAM,mBAAmB;;;;;;;;;;;;;;;;;;IAkB9B,uFAAuF;;CAE/E,CAAC;AAEX,MAAM,MAAM,eAAe,GAAG,CAAC,OAAO,mBAAmB,CAAC,CAAC,MAAM,OAAO,mBAAmB,CAAC,CAAC;AAE7F,uFAAuF;AACvF,qBAAa,iBAAkB,SAAQ,iBAAiB;IACtD,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;gBACnB,IAAI,EAAE,eAAe,EAAE,OAAO,EAAE,MAAM;CAKnD;AAED,eAAO,MAAM,2BAA2B;IACtC,kFAAkF;;IAElF,wEAAwE;;CAEhE,CAAC;AAEX,MAAM,MAAM,uBAAuB,GAAG,CAAC,OAAO,2BAA2B,CAAC,CAAC,MAAM,OAAO,2BAA2B,CAAC,CAAC;AAErH,wGAAwG;AACxG,qBAAa,wBAAyB,SAAQ,KAAK;IACjD,QAAQ,CAAC,UAAU,OAAO;IAC1B,QAAQ,CAAC,IAAI,EAAE,uBAAuB,CAAC;gBAC3B,IAAI,EAAE,uBAAuB,EAAE,OAAO,EAAE,MAAM;CAK3D;AAED,2EAA2E;AAC3E,wBAAgB,WAAW,CAAC,CAAC,EAAE,OAAO,EAAE,OAAO,CAAC,CAAC,CAAC,EAAE,EAAE,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM,KAAK,GAAG,OAAO,CAAC,CAAC,CAAC,CAclG;AAMD,MAAM,MAAM,WAAW,GAAG,KAAK,GAAG,MAAM,GAAG,KAAK,CAAC;AAoBjD,wFAAwF;AACxF,wBAAgB,gBAAgB,CAAC,KAAK,EAAE,UAAU,GAAG,WAAW,GAAG,SAAS,CAK3E;AAQD,wBAAgB,WAAW,CAAC,IAAI,EAAE,WAAW,GAAG,MAAM,CAErD;AAsND,MAAM,WAAW,gBAAgB;IAC/B,UAAU,EAAE,MAAM,CAAC;IACnB,WAAW,EAAE,MAAM,CAAC;IACpB,UAAU,EAAE,MAAM,CAAC;CACpB;AA6bD;;;GAGG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,mBAAmB,GAAG,gBAAgB,CAG7E;AAED,mGAAmG;AACnG,wBAAgB,aAAa,CAAC,OAAO,EAAE,mBAAmB,GAAG,UAAU,CAKtE;AAED,MAAM,MAAM,iBAAiB,GACzB;IAAE,IAAI,EAAE,WAAW,CAAC;IAAC,KAAK,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,MAAM,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,KAAK,EAAE,MAAM,CAAA;CAAE,GACjF;IAAE,IAAI,EAAE,eAAe,CAAA;CAAE,CAAC;AAE9B;;;;GAIG;AACH,wBAAgB,cAAc,CAAC,OAAO,EAAE,MAAM,GAAG,iBAAiB,CAajE;AAED,wBAAgB,SAAS,CAAC,OAAO,EAAE,SAAS,YAAY,EAAE,GAAG,SAAS,GAAG,OAAO,CAE/E;AAMD,MAAM,WAAW,cAAc;IAC7B,iEAAiE;IACjE,OAAO,EAAE,MAAM,CAAC;CACjB;AAED,MAAM,MAAM,WAAW,GAAG,CAAC,CAAC,EAAE,IAAI,EAAE,CAAC,IAAI,EAAE,cAAc,KAAK,OAAO,CAAC,CAAC,CAAC,EAAE,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAAK,OAAO,CAAC,CAAC,CAAC,CAAC;AAE1H;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,IAAI,WAAW,CAuB/C"}