@atmo-dev/kit 0.3.0 → 0.4.0

package/dist/grain/types.d.ts

@@ -0,0 +1,41 @@
+export type GrainReference = {
+    actor: string;
+    rkey: string;
+    atUri: string;
+    url: string;
+};
+export type GrainAlbum = {
+    uri: string;
+    url: string;
+    title: string;
+    creator: {
+        did: string;
+        handle: string;
+        displayName?: string;
+    };
+    photoCount: number;
+    cover?: string;
+    contentWarning: boolean;
+};
+export type GrainPhoto = {
+    uri: string;
+    thumb: string;
+    fullsize: string;
+    alt: string;
+    width?: number;
+    height?: number;
+    contentWarning: boolean;
+};
+export type GrainGallery = GrainAlbum & {
+    photos: GrainPhoto[];
+};
+export type GrainAlbumPage = {
+    albums: GrainAlbum[];
+    cursor?: string;
+};
+/** Normalized public reads. Implement with Grain XRPC today, or atmo.pics/Contrail later. */
+export type GrainClient = {
+    getGallery(reference: string): Promise<GrainGallery>;
+    listAlbums(actor: string, cursor?: string): Promise<GrainAlbumPage>;
+};
+export type GrainSelection = (album: GrainAlbum) => void | string | Promise<void | string>;

package/dist/grain/types.js

@@ -0,0 +1 @@
+export {};

package/dist/grain/urls.d.ts

@@ -0,0 +1,7 @@
+import type { GrainReference } from './types.js';
+export declare function isLinkedActor(value: string): boolean;
+export declare function parseGrainLink(input: string): GrainReference | null;
+export declare function parseStreamplaceLink(input: string): {
+    actor: string;
+    url: string;
+} | null;

package/dist/grain/urls.js

@@ -0,0 +1,74 @@
+export function isLinkedActor(value) {
+    if (value.length > 253)
+        return false;
+    return (/^did:[a-z]+:[A-Za-z0-9._:%-]+$/.test(value) ||
+        /^(?:[a-zA-Z0-9](?:[a-zA-Z0-9-]{0,61}[a-zA-Z0-9])?\.)+[a-zA-Z][a-zA-Z0-9-]*$/.test(value));
+}
+export function parseGrainLink(input) {
+    try {
+        const raw = input.trim();
+        let actor;
+        let rkey;
+        if (raw.startsWith('at://')) {
+            const match = /^at:\/\/([^/]+)\/social\.grain\.gallery\/([^/?#]+)$/.exec(raw);
+            if (!match)
+                return null;
+            [, actor, rkey] = match;
+        }
+        else {
+            const url = new URL(/^grain\.social\//i.test(raw) ? `https://${raw}` : raw);
+            if (!['https:', 'http:'].includes(url.protocol) ||
+                url.hostname !== 'grain.social' ||
+                url.username ||
+                url.password ||
+                url.port)
+                return null;
+            const match = /^\/profile\/([^/]+)\/gallery\/([^/]+)\/?$/.exec(url.pathname);
+            if (!match)
+                return null;
+            actor = decodeURIComponent(match[1]);
+            rkey = decodeURIComponent(match[2]);
+        }
+        if (!isLinkedActor(actor) ||
+            !/^[A-Za-z0-9._~:-]{1,512}$/.test(rkey) ||
+            ['.', '..'].includes(rkey))
+            return null;
+        if (!actor.startsWith('did:'))
+            actor = actor.toLowerCase();
+        return {
+            actor,
+            rkey,
+            atUri: `at://${actor}/social.grain.gallery/${rkey}`,
+            url: `https://grain.social/profile/${actor.replaceAll('%', '%25')}/gallery/${rkey}`
+        };
+    }
+    catch {
+        return null;
+    }
+}
+export function parseStreamplaceLink(input) {
+    try {
+        let actor = input.trim().replace(/^@/, '');
+        if (/^(?:https?:\/\/|stream\.place\/)/i.test(actor)) {
+            const url = new URL(/^stream\.place\//i.test(actor) ? `https://${actor}` : actor);
+            if (!['https:', 'http:'].includes(url.protocol) ||
+                url.hostname !== 'stream.place' ||
+                url.username ||
+                url.password ||
+                url.port)
+                return null;
+            const match = /^\/([^/]+)\/?$/.exec(url.pathname);
+            if (!match)
+                return null;
+            actor = decodeURIComponent(match[1]);
+        }
+        if (!isLinkedActor(actor))
+            return null;
+        if (!actor.startsWith('did:'))
+            actor = actor.toLowerCase();
+        return { actor, url: `https://stream.place/${actor.replaceAll('%', '%25')}` };
+    }
+    catch {
+        return null;
+    }
+}

package/dist/grain/xrpc.d.ts

@@ -0,0 +1,3 @@
+import type { GrainClient } from './types.js';
+/** Current Grain.social XRPC implementation; not a configurable proxy or an app session. */
+export declare function createGrainXrpcClient(fetchImpl?: typeof fetch): GrainClient;

package/dist/grain/xrpc.js

@@ -0,0 +1,129 @@
+import { isLinkedActor, parseGrainLink } from './urls.js';
+// Grain's unspecced API is deliberately isolated here; never proxy a user-supplied host.
+const ORIGIN = 'https://grain.social';
+function object(value) {
+    return value && typeof value === 'object' && !Array.isArray(value) ? value : {};
+}
+function text(value, fallback = '') {
+    return typeof value === 'string' ? value : fallback;
+}
+function image(value) {
+    try {
+        const url = new URL(text(value));
+        return url.protocol === 'https:' &&
+            url.hostname === 'cdn.grain.social' &&
+            !url.username &&
+            !url.password &&
+            !url.port
+            ? url.href
+            : undefined;
+    }
+    catch {
+        return undefined;
+    }
+}
+function warned(value) {
+    if (value == null)
+        return false;
+    if (typeof value === 'string')
+        return value.length > 0;
+    const labels = Array.isArray(value) ? value : object(value).values;
+    // Unknown nonempty label shapes are treated conservatively too.
+    if (!Array.isArray(labels))
+        return Object.keys(object(value)).length > 0;
+    return labels.some((label) => object(label).neg !== true);
+}
+function photo(value) {
+    const p = object(value);
+    const thumb = image(p.thumb), fullsize = image(p.fullsize);
+    if (!thumb || !fullsize || !text(p.uri).startsWith('at://'))
+        return null;
+    const ratio = object(p.aspectRatio);
+    return {
+        uri: text(p.uri),
+        thumb,
+        fullsize,
+        alt: text(p.alt),
+        ...(typeof ratio.width === 'number' && ratio.width > 0 ? { width: ratio.width } : {}),
+        ...(typeof ratio.height === 'number' && ratio.height > 0 ? { height: ratio.height } : {}),
+        contentWarning: warned(p.labels) || warned(object(p.record).labels)
+    };
+}
+function album(value) {
+    const g = object(value), record = object(g.record), creator = object(g.creator);
+    const ref = parseGrainLink(text(g.uri));
+    const did = text(creator.did);
+    if (!ref ||
+        !ref.actor.startsWith('did:') ||
+        ref.actor !== did ||
+        !isLinkedActor(did) ||
+        !Array.isArray(g.items)) {
+        throw new Error('Invalid Grain gallery');
+    }
+    const contentWarning = warned(record.labels) || warned(g.labels) || warned(creator.labels);
+    const cover = g.items.map(photo).find((p) => p && !p.contentWarning)?.thumb;
+    return {
+        uri: ref.atUri,
+        url: ref.url,
+        title: text(g.title, text(record.title, 'Untitled album')),
+        creator: {
+            did,
+            handle: text(creator.handle, did),
+            displayName: text(creator.displayName) || undefined
+        },
+        photoCount: g.items.length,
+        contentWarning,
+        ...(!contentWarning && cover ? { cover } : {})
+    };
+}
+/** Current Grain.social XRPC implementation; not a configurable proxy or an app session. */
+export function createGrainXrpcClient(fetchImpl = fetch) {
+    async function request(method, params) {
+        const url = new URL(`/xrpc/${method}`, ORIGIN);
+        url.search = new URLSearchParams(params).toString();
+        const response = await fetchImpl(url, {
+            headers: { accept: 'application/json' },
+            signal: AbortSignal.timeout(5000),
+            redirect: 'error'
+        });
+        if (!response.ok)
+            throw new Error(`Grain unavailable (${response.status})`);
+        return object(await response.json());
+    }
+    return {
+        async getGallery(reference) {
+            const ref = parseGrainLink(reference);
+            if (!ref)
+                throw new Error('Invalid Grain reference');
+            const data = await request('social.grain.unspecced.getGallery', { gallery: ref.atUri });
+            const result = album(data.gallery);
+            const canonical = parseGrainLink(result.uri);
+            if (canonical.rkey !== ref.rkey ||
+                (ref.actor.startsWith('did:') && canonical.actor !== ref.actor))
+                throw new Error('Mismatched Grain gallery');
+            const photos = object(data.gallery).items
+                .map(photo)
+                .filter((p) => p !== null);
+            return { ...result, photos };
+        },
+        async listAlbums(actor, cursor) {
+            if (!isLinkedActor(actor))
+                throw new Error('Invalid actor');
+            const data = await request('dev.hatk.getFeed', {
+                feed: 'actor',
+                actor,
+                limit: '24',
+                ...(cursor ? { cursor } : {})
+            });
+            if (!Array.isArray(data.items))
+                throw new Error('Invalid Grain feed');
+            const albums = data.items
+                .map(album)
+                .filter((g) => !actor.startsWith('did:') || g.creator.did === actor);
+            return {
+                albums,
+                ...(typeof data.cursor === 'string' && data.cursor ? { cursor: data.cursor } : {})
+            };
+        }
+    };
+}

package/dist/grain.d.ts

@@ -0,0 +1,3 @@
+export type { GrainClient, GrainAlbum, GrainGallery, GrainPhoto, GrainAlbumPage, GrainReference, GrainSelection } from './grain/types.js';
+export { parseGrainLink, isLinkedActor } from './grain/urls.js';
+export { createGrainXrpcClient } from './grain/xrpc.js';

package/dist/grain.js

@@ -0,0 +1,2 @@
+export { parseGrainLink, isLinkedActor } from './grain/urls.js';
+export { createGrainXrpcClient } from './grain/xrpc.js';

package/dist/index.d.ts

@@ -19,6 +19,19 @@ export { default as UserProfile } from './components/UserProfile.svelte';
 export type { UserProfileProps } from './components/UserProfile.svelte';
 export { blueskyProfileToProfileData } from './social/profile.js';
 export type { ProfileData, ProfileLink } from './social/profile.js';
+export { default as PhotoLightbox } from './components/PhotoLightbox.svelte';
+export type { PhotoLightboxProps } from './components/PhotoLightbox.svelte';
+export { default as PhotoGrid } from './components/PhotoGrid.svelte';
+export type { PhotoGridProps } from './components/PhotoGrid.svelte';
+export type { Photo } from './media.js';
+export { default as GrainAlbumPicker } from './components/GrainAlbumPicker.svelte';
+export type { GrainAlbumPickerProps } from './components/GrainAlbumPicker.svelte';
+export { default as GrainAlbumView } from './components/GrainAlbumView.svelte';
+export type { GrainAlbumViewProps } from './components/GrainAlbumView.svelte';
+export { default as StreamplacePicker } from './components/StreamplacePicker.svelte';
+export type { StreamplacePickerProps } from './components/StreamplacePicker.svelte';
+export * from './grain.js';
+export * from './streamplace.js';
 export { default as InsetImage } from './components/InsetImage.svelte';
 export { default as Badge } from './components/Badge.svelte';
 export { default as Modal } from './components/Modal.svelte';
@@ -60,6 +73,9 @@ export { default as InlineEditor } from './components/InlineEditor.svelte';
 export { default as PostComposer } from './components/PostComposer.svelte';
 export { default as NestedComments } from './components/NestedComments.svelte';
 export { default as PostContent } from './components/PostContent.svelte';
+export { default as ExternalEmbed } from './components/ExternalEmbed.svelte';
+export { defaultExternalEmbedProviders, youtubeEmbedProvider, klipyEmbedProvider, resolveExternalEmbed } from './social/external-embeds.js';
+export type { ExternalPostEmbed, ExternalEmbedProvider, ExternalEmbedPlayer } from './social/external-embeds.js';
 export { blueskyPostToPostData } from './social/posts.js';
 export type { PostData, PostEmbed, BlueskyPostView } from './social/posts.js';
 export { editorJsonToBlueskyPost, textToDoc, graphemeLength } from './social/richtext.js';

package/dist/index.js

@@ -14,6 +14,13 @@ export { default as Surface } from './components/Surface.svelte';
 export { default as Avatar } from './components/Avatar.svelte';
 export { default as UserProfile } from './components/UserProfile.svelte';
 export { blueskyProfileToProfileData } from './social/profile.js';
+export { default as PhotoLightbox } from './components/PhotoLightbox.svelte';
+export { default as PhotoGrid } from './components/PhotoGrid.svelte';
+export { default as GrainAlbumPicker } from './components/GrainAlbumPicker.svelte';
+export { default as GrainAlbumView } from './components/GrainAlbumView.svelte';
+export { default as StreamplacePicker } from './components/StreamplacePicker.svelte';
+export * from './grain.js';
+export * from './streamplace.js';
 export { default as InsetImage } from './components/InsetImage.svelte';
 export { default as Badge } from './components/Badge.svelte';
 export { default as Modal } from './components/Modal.svelte';
@@ -42,6 +49,8 @@ export { default as InlineEditor } from './components/InlineEditor.svelte';
 export { default as PostComposer } from './components/PostComposer.svelte';
 export { default as NestedComments } from './components/NestedComments.svelte';
 export { default as PostContent } from './components/PostContent.svelte';
+export { default as ExternalEmbed } from './components/ExternalEmbed.svelte';
+export { defaultExternalEmbedProviders, youtubeEmbedProvider, klipyEmbedProvider, resolveExternalEmbed } from './social/external-embeds.js';
 export { blueskyPostToPostData } from './social/posts.js';
 export { editorJsonToBlueskyPost, textToDoc, graphemeLength } from './social/richtext.js';
 export { launchConfetti } from './confetti.js';

package/dist/media.d.ts

@@ -0,0 +1,10 @@
+/** Provider-neutral images; callers own URL validation, hydration and moderation policy. */
+export type Photo = {
+    id?: string;
+    src: string;
+    thumbnail?: string;
+    alt?: string;
+    width?: number;
+    height?: number;
+    contentWarning?: boolean;
+};

package/dist/media.js

@@ -0,0 +1 @@
+export {};

package/dist/social/external-embeds.d.ts

@@ -0,0 +1,39 @@
+import type { PostEmbed } from './posts.js';
+export type ExternalPostEmbed = Extract<PostEmbed, {
+    type: 'external';
+}>;
+/** Iframes are always click-to-load. Providers perform no network IO. */
+export type ExternalEmbedPlayer = {
+    type: 'iframe';
+    src: string;
+    aspectRatio?: number;
+} | {
+    type: 'video';
+    sources: readonly {
+        src: string;
+        type: string;
+    }[];
+    aspectRatio?: number;
+    autoplay?: boolean;
+    controls?: boolean;
+} | {
+    type: 'image';
+    src: string;
+    aspectRatio?: number;
+    autoplay?: boolean;
+};
+export type ExternalEmbedProvider = {
+    id: string;
+    label: string;
+    /** Trusted app-owned code. Return null for unsupported URLs; never return arbitrary embed HTML. */
+    resolve: (url: URL, embed: ExternalPostEmbed) => ExternalEmbedPlayer | null;
+};
+export declare const youtubeEmbedProvider: ExternalEmbedProvider;
+/** Bluesky's Klipy GIF links carry video slugs and dimensions in query parameters. */
+export declare const klipyEmbedProvider: ExternalEmbedProvider;
+/** Ordered, explicit registry. Pass [] to keep all external links as ordinary cards. */
+export declare const defaultExternalEmbedProviders: readonly ExternalEmbedProvider[];
+export declare function resolveExternalEmbed(embed: ExternalPostEmbed, providers?: readonly ExternalEmbedProvider[]): {
+    provider: ExternalEmbedProvider;
+    player: ExternalEmbedPlayer;
+} | null;

package/dist/social/external-embeds.js

@@ -0,0 +1,107 @@
+import { safeWebUrl } from './richtext.js';
+function youtubeStart(value) {
+    if (!value)
+        return 0;
+    if (/^\d+$/.test(value))
+        return Math.min(Number(value), 2147483647);
+    const match = /^(?:(\d+)h)?(?:(\d+)m)?(?:(\d+)s)?$/.exec(value);
+    return match
+        ? Math.min(Number(match[1] ?? 0) * 3600 + Number(match[2] ?? 0) * 60 + Number(match[3] ?? 0), 2147483647)
+        : 0;
+}
+export const youtubeEmbedProvider = {
+    id: 'youtube',
+    label: 'YouTube',
+    resolve(url) {
+        let id;
+        let shorts = false;
+        if (url.hostname === 'youtu.be') {
+            id = /^\/([\w-]{11})\/?$/.exec(url.pathname)?.[1];
+        }
+        else if ([
+            'youtube.com',
+            'www.youtube.com',
+            'm.youtube.com',
+            'www.youtube-nocookie.com',
+            'youtube-nocookie.com'
+        ].includes(url.hostname)) {
+            if (url.pathname === '/watch')
+                id = url.searchParams.get('v') ?? undefined;
+            else {
+                const match = /^\/(shorts|live|embed)\/([\w-]{11})\/?$/.exec(url.pathname);
+                id = match?.[2];
+                shorts = match?.[1] === 'shorts';
+            }
+        }
+        if (!id || !/^[\w-]{11}$/.test(id))
+            return null;
+        const player = new URL(`https://www.youtube-nocookie.com/embed/${id}`);
+        player.searchParams.set('autoplay', '1');
+        const start = youtubeStart(url.searchParams.get('t') ?? url.searchParams.get('start'));
+        if (start)
+            player.searchParams.set('start', String(start));
+        return { type: 'iframe', src: player.href, aspectRatio: shorts ? 9 / 16 : 16 / 9 };
+    }
+};
+/** Bluesky's Klipy GIF links carry video slugs and dimensions in query parameters. */
+export const klipyEmbedProvider = {
+    id: 'klipy',
+    label: 'Klipy',
+    resolve(url) {
+        if (!['static.klipy.com', 'k.gifs.bsky.app'].includes(url.hostname) ||
+            !/^\/ii\/(?:[\w-]+\/)+[\w-]+\.(gif|webp|png|jpe?g|mp4|webm)$/i.test(url.pathname))
+            return null;
+        const width = Number(url.searchParams.get('ww'));
+        const height = Number(url.searchParams.get('hh'));
+        const aspectRatio = Number.isFinite(width) && Number.isFinite(height) && width > 0 && height > 0
+            ? Math.max(0.25, Math.min(4, width / height))
+            : undefined;
+        // Use the same media proxy as Bluesky; never fetch Klipy metadata or scripts.
+        const src = `https://k.gifs.bsky.app${url.pathname}`;
+        const sources = [];
+        for (const format of ['webm', 'mp4']) {
+            const slug = url.searchParams.get(format);
+            if (slug && /^[\w-]+$/.test(slug))
+                sources.push({ src: src.replace(/[^/]+$/, `${slug}.${format}`), type: `video/${format}` });
+        }
+        if (sources.length)
+            return { type: 'video', sources, aspectRatio, autoplay: true, controls: false };
+        const format = /\.(mp4|webm)$/i.exec(url.pathname)?.[1].toLowerCase();
+        return format
+            ? {
+                type: 'video',
+                sources: [{ src, type: `video/${format}` }],
+                aspectRatio,
+                autoplay: true,
+                controls: false
+            }
+            : { type: 'image', src, aspectRatio, autoplay: true };
+    }
+};
+/** Ordered, explicit registry. Pass [] to keep all external links as ordinary cards. */
+export const defaultExternalEmbedProviders = [
+    youtubeEmbedProvider,
+    klipyEmbedProvider
+];
+export function resolveExternalEmbed(embed, providers = defaultExternalEmbedProviders) {
+    const href = safeWebUrl(embed.uri);
+    if (!href)
+        return null;
+    const url = new URL(href);
+    if (url.port || url.username || url.password)
+        return null;
+    for (const provider of providers) {
+        const player = provider.resolve(new URL(url), embed);
+        if (!player)
+            continue;
+        // Even custom providers cannot inject executable URL schemes.
+        if (player.type === 'video') {
+            if (!player.sources.length || player.sources.some((source) => !safeWebUrl(source.src)))
+                continue;
+        }
+        else if (!safeWebUrl(player.src))
+            continue;
+        return { provider, player };
+    }
+    return null;
+}

package/dist/social/posts.d.ts

@@ -23,6 +23,17 @@ export type PostEmbed = {
     type: 'quote';
     post?: PostData;
     unavailable?: boolean;
+    reason?: 'blocked' | 'detached';
+} | {
+    type: 'record';
+    kind: 'feed' | 'list' | 'starter-pack' | 'labeler';
+    href: string;
+    title: string;
+    description?: string;
+    image?: string;
+    handle?: string;
+} | {
+    type: 'unsupported';
 };
 export type PostData = {
     uri: string;
@@ -37,32 +48,56 @@ export type PostData = {
     facets?: Facet[];
     createdAt?: string;
     replyCount?: number;
+    repostCount?: number;
     likeCount?: number;
     embeds?: PostEmbed[];
     replies?: PostData[];
 };
+type PostRecord = {
+    text?: string;
+    facets?: Facet[];
+    createdAt?: string;
+};
+type ActorView = {
+    did: string;
+    handle: string;
+    displayName?: string;
+    avatar?: string;
+};
 /** The public AppView view shape; no session or network dependency. */
 export type BlueskyPostView = {
     uri: string;
-    author: {
+    author: ActorView;
+    record?: PostRecord;
+    value?: PostRecord;
+    embed?: BlueskyEmbedView;
+    embeds?: BlueskyEmbedView[];
+    replyCount?: number;
+    repostCount?: number;
+    likeCount?: number;
+};
+type RecordView = {
+    $type?: string;
+    uri?: string;
+    author?: {
         did: string;
-        handle: string;
+        handle?: string;
         displayName?: string;
         avatar?: string;
     };
-    record?: {
-        text?: string;
-        facets?: Facet[];
-        createdAt?: string;
-    };
-    value?: {
-        text?: string;
-        facets?: Facet[];
-        createdAt?: string;
-    };
-    embed?: BlueskyEmbedView;
+    creator?: ActorView;
+    value?: PostRecord;
+    record?: unknown;
     embeds?: BlueskyEmbedView[];
+    displayName?: string;
+    name?: string;
+    description?: string;
+    avatar?: string;
+    blocked?: boolean;
+    detached?: boolean;
+    notFound?: boolean;
     replyCount?: number;
+    repostCount?: number;
     likeCount?: number;
 };
 type BlueskyEmbedView = {
@@ -76,6 +111,16 @@ type BlueskyEmbedView = {
             height: number;
         };
     }[];
+    items?: {
+        $type?: string;
+        thumbnail?: string;
+        fullsize?: string;
+        alt?: string;
+        aspectRatio?: {
+            width: number;
+            height: number;
+        };
+    }[];
     external?: {
         uri: string;
         title: string;
@@ -85,10 +130,7 @@ type BlueskyEmbedView = {
     playlist?: string;
     thumbnail?: string;
     alt?: string;
-    record?: BlueskyPostView & {
-        $type?: string;
-        record?: BlueskyPostView;
-    };
+    record?: RecordView;
     media?: BlueskyEmbedView;
 };
 export declare function blueskyPostToPostData(post: BlueskyPostView, depth?: number): PostData;