@geekmidas/manifest 10.0.0-alpha.166 → 10.0.0-alpha.167

package/dist/index.cjs

@@ -76,7 +76,7 @@ const DERIVES_FROM = {
 * can legitimately use any of them. A bucket's `url` presigns and stays private.
 */
 const PUBLIC = {
-	objects: [],
+	objects: ["signedOrigin"],
 	"file-server": ["url"],
 	email: ["inboxUrl"],
 	inbox: [],
@@ -875,8 +875,32 @@ function cookieDomain(urls) {
 function providedKeyFor(id, kind, role) {
 	if (kind === "secret") return environmentCase(id);
 	if (kind === "telemetry") return "OTEL_EXPORTER_OTLP_ENDPOINT";
+	if (kind === "file-server") return provideKey(fileServerName(id), role);
 	return provideKey(id, role);
 }
+/**
+* What a file server's surface node adds to the construct's id. The bucket
+* keeps the plain id, so serving a bucket you already have adds a node rather
+* than renaming the one holding the data.
+*/
+const FILE_SERVER_SUFFIX = "Server";
+/**
+* A file server's surface node id, from the construct's id.
+*
+* @example fileServerSurfaceId('Assets') // 'AssetsServer'
+*/
+function fileServerSurfaceId(id) {
+	return `${id}${FILE_SERVER_SUFFIX}`;
+}
+/**
+* The construct's id, from its surface node's: what its key and its host are
+* named after.
+*
+* @example fileServerName('AssetsServer') // 'Assets'
+*/
+function fileServerName(surfaceId) {
+	return surfaceId.endsWith("Server") && surfaceId.length > 6 ? surfaceId.slice(0, -6) : surfaceId;
+}
 //#endregion
 //#region src/derive.ts
 /** Whether a declaration names a parent. */
@@ -1013,16 +1037,74 @@ function publicEnvFor(declaration, manifest) {
 		const key = provideKey(declaration.id, role);
 		keys[`${prefix}${key}`] = key;
 	}
+	const inline = (id, target) => {
+		for (const role of PUBLIC[target.kind] ?? []) {
+			const key = providedKeyFor(id, target.kind, role);
+			keys[`${prefix}${key}`] = key;
+		}
+	};
 	for (const edge of declaration.dependencies) {
 		const target = manifest[edge.target];
 		if (!target) continue;
-		for (const role of PUBLIC[target.kind] ?? []) {
-			const key = provideKey(edge.target, role);
-			keys[`${prefix}${key}`] = key;
+		inline(edge.target, target);
+		if (target.kind === "objects") {
+			for (const [id, other] of Object.entries(manifest)) if (other.kind === "file-server" && other.of === edge.target) inline(id, other);
+		}
+		if (target.kind === "file-server") {
+			const bucket = manifest[target.of];
+			if (bucket) inline(target.of, bucket);
 		}
 	}
 	return keys;
 }
+/**
+* The key, under a site's public prefix, that lists every origin its pages
+* load files from: `NEXT_PUBLIC_GKM_IMAGE_ORIGINS`. Comma-separated.
+*
+* One composed key rather than a rule over names, because a file server's
+* `<ID>_URL` and an API's look the same: which of a bundle's addresses serve
+* files is a fact about the graph, so the graph says it.
+*/
+const IMAGE_ORIGINS_KEY = "GKM_IMAGE_ORIGINS";
+/**
+* The keys whose values are the origins a site's pages load files from: each
+* file server it reaches, and where each bucket it reaches signs its links —
+* by either edge, the same walk {@link publicEnvFor} makes. Sorted, so the
+* value composed from them does not churn.
+*/
+function imageOriginSources(declaration, manifest) {
+	const sources = /* @__PURE__ */ new Set();
+	const bucket = (id) => sources.add(providedKeyFor(id, "objects", "signedOrigin"));
+	const server = (id) => sources.add(providedKeyFor(id, "file-server", "url"));
+	for (const edge of declaration.dependencies) {
+		const target = manifest[edge.target];
+		if (target?.kind === "objects") {
+			bucket(edge.target);
+			for (const [id, other] of Object.entries(manifest)) if (other.kind === "file-server" && other.of === edge.target) server(id);
+		}
+		if (target?.kind === "file-server") {
+			server(edge.target);
+			if (manifest[target.of]?.kind === "objects") bucket(target.of);
+		}
+	}
+	return [...sources].sort();
+}
+/**
+* {@link IMAGE_ORIGINS_KEY}'s value: the origin of each source that resolved,
+* de-duplicated and comma-separated. `undefined` when none did, so a site
+* that shows no files is built without the key at all.
+*/
+function imageOrigins(sources, resolve) {
+	const origins = /* @__PURE__ */ new Set();
+	for (const source of sources) {
+		const value = resolve(source);
+		if (!value) continue;
+		try {
+			origins.add(new URL(value).origin);
+		} catch {}
+	}
+	return origins.size > 0 ? [...origins].sort().join(",") : void 0;
+}
 //#endregion
 //#region src/derived.ts
 /** Where a processor keeps what it made, in the bucket it reads. */
@@ -1451,6 +1533,8 @@ exports.DERIVED_PREFIX = DERIVED_PREFIX;
 exports.DERIVES_FROM = DERIVES_FROM;
 exports.EDGE_TOKEN_HEADER = EDGE_TOKEN_HEADER;
 exports.EDGE_TOKEN_KEY = EDGE_TOKEN_KEY;
+exports.FILE_SERVER_SUFFIX = FILE_SERVER_SUFFIX;
+exports.IMAGE_ORIGINS_KEY = IMAGE_ORIGINS_KEY;
 exports.INBOX_EVENT = INBOX_EVENT;
 exports.INBOX_MESSAGES_PREFIX = INBOX_MESSAGES_PREFIX;
 exports.IllegalDerivation = IllegalDerivation;
@@ -1479,6 +1563,10 @@ exports.dependentsOf = dependentsOf;
 exports.drawSecret = drawSecret;
 exports.environmentCase = environmentCase;
 exports.externalApiUrl = externalApiUrl;
+exports.fileServerName = fileServerName;
+exports.fileServerSurfaceId = fileServerSurfaceId;
+exports.imageOriginSources = imageOriginSources;
+exports.imageOrigins = imageOrigins;
 exports.inboxRecipient = inboxRecipient;
 exports.isDerived = isDerived;
 exports.isWebOrigin = isWebOrigin;