@fluxfiles/node 0.1.9 → 0.1.11

package/dist/index.d.mts

@@ -82,11 +82,20 @@ interface BaseTokenOptions {
     webpMaxWidth?: number;
     /** Default WebP quality when a request omits it. `0`/omitted = inherit (80). */
     webpDefaultQuality?: number;
+    /** Responsive `srcset` width ladder (px); list() emits these as `img_srcset` on images.
+     *  Snapped to 100px and clamped to webpMaxWidth on decode. Omit to inherit the default
+     *  `[320, 640, 768, 1024, 1366, 1920]`. */
+    srcsetWidths?: number[];
+    /** Optional `sizes` attribute surfaced as `img_sizes` (omit to let the host supply its own). */
+    srcsetSizes?: string;
     /** May this token mint clean original download URLs? Default true. `false` = preview-only
      *  (list withholds url/permanent_url/variants; GET presign is denied — only watermarked img_base). */
     allowDownload?: boolean;
     /** Allow chmod (POST /api/fm/chmod) on an SFTP disk. Default true; `false` = read-only permissions. */
     allowChmod?: boolean;
+    /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
+     *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
+    allowCodeEdit?: boolean;
     /** Enable on-the-fly watermark on `/api/fm/img` (source file is never modified). Default off. */
     watermarkEnabled?: boolean;
     /** Watermark kind: 'text' or 'logo' (a PNG path in storage). Default 'text'. */

package/dist/index.d.ts

@@ -82,11 +82,20 @@ interface BaseTokenOptions {
     webpMaxWidth?: number;
     /** Default WebP quality when a request omits it. `0`/omitted = inherit (80). */
     webpDefaultQuality?: number;
+    /** Responsive `srcset` width ladder (px); list() emits these as `img_srcset` on images.
+     *  Snapped to 100px and clamped to webpMaxWidth on decode. Omit to inherit the default
+     *  `[320, 640, 768, 1024, 1366, 1920]`. */
+    srcsetWidths?: number[];
+    /** Optional `sizes` attribute surfaced as `img_sizes` (omit to let the host supply its own). */
+    srcsetSizes?: string;
     /** May this token mint clean original download URLs? Default true. `false` = preview-only
      *  (list withholds url/permanent_url/variants; GET presign is denied — only watermarked img_base). */
     allowDownload?: boolean;
     /** Allow chmod (POST /api/fm/chmod) on an SFTP disk. Default true; `false` = read-only permissions. */
     allowChmod?: boolean;
+    /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
+     *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
+    allowCodeEdit?: boolean;
     /** Enable on-the-fly watermark on `/api/fm/img` (source file is never modified). Default off. */
     watermarkEnabled?: boolean;
     /** Watermark kind: 'text' or 'logo' (a PNG path in storage). Default 'text'. */

package/dist/index.js

@@ -157,8 +157,11 @@ function applyTenantOverrides(payload, opts) {
   if (opts.webpEnabled !== void 0) payload.webp_enabled = !!opts.webpEnabled;
   if (opts.webpMaxWidth && opts.webpMaxWidth > 0) payload.webp_max_width = Math.trunc(opts.webpMaxWidth);
   if (opts.webpDefaultQuality && opts.webpDefaultQuality > 0) payload.webp_default_quality = Math.trunc(opts.webpDefaultQuality);
+  if (Array.isArray(opts.srcsetWidths)) payload.srcset_widths = opts.srcsetWidths.map((w) => Math.trunc(w));
+  if (opts.srcsetSizes) payload.srcset_sizes = String(opts.srcsetSizes);
   if (opts.allowDownload !== void 0) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== void 0) payload.allow_chmod = !!opts.allowChmod;
+  if (opts.allowCodeEdit !== void 0) payload.allow_code_edit = !!opts.allowCodeEdit;
   if (opts.watermarkEnabled) {
     payload.watermark_enabled = true;
     if (opts.watermarkType) payload.watermark_type = opts.watermarkType;

package/dist/index.mjs

@@ -135,8 +135,11 @@ function applyTenantOverrides(payload, opts) {
   if (opts.webpEnabled !== void 0) payload.webp_enabled = !!opts.webpEnabled;
   if (opts.webpMaxWidth && opts.webpMaxWidth > 0) payload.webp_max_width = Math.trunc(opts.webpMaxWidth);
   if (opts.webpDefaultQuality && opts.webpDefaultQuality > 0) payload.webp_default_quality = Math.trunc(opts.webpDefaultQuality);
+  if (Array.isArray(opts.srcsetWidths)) payload.srcset_widths = opts.srcsetWidths.map((w) => Math.trunc(w));
+  if (opts.srcsetSizes) payload.srcset_sizes = String(opts.srcsetSizes);
   if (opts.allowDownload !== void 0) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== void 0) payload.allow_chmod = !!opts.allowChmod;
+  if (opts.allowCodeEdit !== void 0) payload.allow_code_edit = !!opts.allowCodeEdit;
   if (opts.watermarkEnabled) {
     payload.watermark_enabled = true;
     if (opts.watermarkType) payload.watermark_type = opts.watermarkType;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@fluxfiles/node",
-  "version": "0.1.9",
+  "version": "0.1.11",
   "description": "Server-side Node/TypeScript SDK for minting FluxFiles JWTs (plain + BYOB), byte-compatible with the PHP core",
   "license": "MIT",
   "sideEffects": false,

package/src/token.ts

@@ -125,10 +125,13 @@ function applyTenantOverrides(payload: Record<string, unknown>, opts: BaseTokenO
   if (opts.webpEnabled !== undefined) payload.webp_enabled = !!opts.webpEnabled;
   if (opts.webpMaxWidth && opts.webpMaxWidth > 0) payload.webp_max_width = Math.trunc(opts.webpMaxWidth);
   if (opts.webpDefaultQuality && opts.webpDefaultQuality > 0) payload.webp_default_quality = Math.trunc(opts.webpDefaultQuality);
+  if (Array.isArray(opts.srcsetWidths)) payload.srcset_widths = opts.srcsetWidths.map((w) => Math.trunc(w));
+  if (opts.srcsetSizes) payload.srcset_sizes = String(opts.srcsetSizes);
 
   // Download gate + watermark.
   if (opts.allowDownload !== undefined) payload.allow_download = !!opts.allowDownload;
   if (opts.allowChmod !== undefined) payload.allow_chmod = !!opts.allowChmod;
+  if (opts.allowCodeEdit !== undefined) payload.allow_code_edit = !!opts.allowCodeEdit;
   if (opts.watermarkEnabled) {
     payload.watermark_enabled = true;
     if (opts.watermarkType) payload.watermark_type = opts.watermarkType;

package/src/types.ts

@@ -86,11 +86,20 @@ export interface BaseTokenOptions {
   webpMaxWidth?: number;
   /** Default WebP quality when a request omits it. `0`/omitted = inherit (80). */
   webpDefaultQuality?: number;
+  /** Responsive `srcset` width ladder (px); list() emits these as `img_srcset` on images.
+   *  Snapped to 100px and clamped to webpMaxWidth on decode. Omit to inherit the default
+   *  `[320, 640, 768, 1024, 1366, 1920]`. */
+  srcsetWidths?: number[];
+  /** Optional `sizes` attribute surfaced as `img_sizes` (omit to let the host supply its own). */
+  srcsetSizes?: string;
   /** May this token mint clean original download URLs? Default true. `false` = preview-only
    *  (list withholds url/permanent_url/variants; GET presign is denied — only watermarked img_base). */
   allowDownload?: boolean;
   /** Allow chmod (POST /api/fm/chmod) on an SFTP disk. Default true; `false` = read-only permissions. */
   allowChmod?: boolean;
+  /** Allow editing a file's text content (GET/PUT /api/fm/content). Default **false** — editing
+   *  config/executable files (wp-config.php, .env, nginx.conf, deploy.sh) is powerful, so it's opt-in. */
+  allowCodeEdit?: boolean;
   /** Enable on-the-fly watermark on `/api/fm/img` (source file is never modified). Default off. */
   watermarkEnabled?: boolean;
   /** Watermark kind: 'text' or 'logo' (a PNG path in storage). Default 'text'. */