@gradial/aci 0.2.0-canary.720 → 0.2.0-canary.726

package/CHANGELOG.md

@@ -4,6 +4,15 @@
 
 ### Fixed
 
+- Page verification judges a Next.js image optimizer URL
+  (`/_next/image?url=…`, what `next/image` renders) by the image it wraps.
+  The optimizer is the host's runtime endpoint, not a file in the release,
+  so before staging it answered 404 and every Next site using `next/image`
+  was refused with `fetch.notFound` although its images load. A root-relative
+  source is fetched like any own file (a missing one is still an error, named
+  by its own path "via next/image"); a remote source is a third-party URL
+  (a warning). Each source is fetched and reported once per page, however
+  many srcset widths name it.
 - The staged and live checks fetch the stable collect script
   (`/_aci/aci.js`) at the judged release's own path,
   `/__r/<release>/_aci/aci.js`. The stable URL answers the active

package/README.md

@@ -1,6 +1,6 @@
 # Agentic Content Infrastructure SDK
 
-`@gradial/aci` `0.2.0-canary.720` is a pre-1.0 public-surface reset for the ACI
+`@gradial/aci` `0.2.0-canary.726` is a pre-1.0 public-surface reset for the ACI
 client SDK. Breaking changes from the old `0.1.x` accidental surface are
 intentional: the root import is framework-neutral, framework runtime behavior is
 behind explicit subpaths, and the first required customer path is React/Next.
@@ -8,7 +8,7 @@ behind explicit subpaths, and the first required customer path is React/Next.
 ## Install
 
 ```bash
-npm install @gradial/aci@0.2.0-canary.720 zod@^4
+npm install @gradial/aci@0.2.0-canary.726 zod@^4
 ```
 
 ## Root Import
@@ -141,13 +141,13 @@ host bundles select and serve immutable release artifacts.
 The first RC scaffold path is Next:
 
 ```bash
-npx @gradial/aci@0.2.0-canary.720 init my-site --template next-starter
+npx @gradial/aci@0.2.0-canary.726 init my-site --template next-starter
 ```
 
 List available templates:
 
 ```bash
-npx @gradial/aci@0.2.0-canary.720 init --list
+npx @gradial/aci@0.2.0-canary.726 init --list
 ```
 
 ## Personalization: The One-Tag Install

package/dist/verify/checks/fetch.js

@@ -3,7 +3,8 @@
 // references answers 2xx. Each URL is fetched once per unit, and once per run
 // when the caller shares withFetchCache. A failed own URL is an error, a
 // failed third-party URL a warning (resource.ts). Same-origin links to routes
-// are the links check's.
+// are the links check's. A next/image optimizer URL is judged by the image it
+// wraps (html/refs.ts).
 import { isFilePath } from '../paths.js';
 import { fetchAll } from './resource.js';
 const FETCH_CODES = {

package/dist/verify/checks/resource.js

@@ -8,7 +8,7 @@ function judgeFetched(input, ref, outcome, codes) {
     if ('status' in outcome && outcome.status >= 200 && outcome.status < 300)
         return null;
     const own = ref.url.origin === input.origin;
-    const shown = own ? `${ref.url.pathname}${ref.url.search}` : ref.url.href;
+    const shown = `"${own ? `${ref.url.pathname}${ref.url.search}` : ref.url.href}"${ref.via ? ` (via ${ref.via})` : ''}`;
     const fix = own
         ? 'publish the file it points to, or change the reference to one that exists'
         : 'this third-party URL is outside the release; check it is still live';
@@ -16,7 +16,7 @@ function judgeFetched(input, ref, outcome, codes) {
         return judge(own ? 'error' : 'warning', input, {
             code: codes.failed,
             url: ref.raw,
-            message: `the ${ref.source} "${shown}" could not be fetched (${outcome.error}); ${fix}`,
+            message: `the ${ref.source} ${shown} could not be fetched (${outcome.error}); ${fix}`,
         });
     }
     const notFound = outcome.status === 404 || outcome.status === 410;
@@ -28,7 +28,7 @@ function judgeFetched(input, ref, outcome, codes) {
     return judge(own ? 'error' : 'warning', input, {
         code: notFound ? codes.notFound : codes.failed,
         url: ref.raw,
-        message: `the ${ref.source} "${shown}" ${answered}; ${fix}`,
+        message: `the ${ref.source} ${shown} ${answered}; ${fix}`,
     });
 }
 /** Fetches every target once through the context's cache and keeps the failures. */

package/dist/verify/html/refs.d.ts

@@ -8,6 +8,8 @@ export interface Ref {
     raw: string;
     /** Resolved against the page (or its <base>); null when it does not parse as a URL. */
     url: URL | null;
+    /** Set when `url` is the source a wrapper URL in `raw` names, e.g. a next/image optimizer URL. */
+    via?: 'next/image';
 }
 /** Every reference in `tags`, resolved against `pageURL`. Fragment-only and non-HTTP references are left out. */
 export declare function collectRefs(tags: readonly Tag[], pageURL: string): Ref[];

package/dist/verify/html/refs.js

@@ -4,7 +4,13 @@
 // rendered HTML, not content fields, so links components generate count too.
 // An inline `style` attribute's `url()` images are resources; a fetched
 // stylesheet's `url()`s are not read (the suite fetches status only).
+// A Next.js image optimizer URL (`/_next/image?url=…`) is the host's runtime
+// endpoint, not a file in the release, so it stands for its wrapped source:
+// the source is the reference, collected once per page however many widths
+// and attributes name it.
 import { srcsetURLs } from './srcset.js';
+/** The Next.js image optimizer's path; its `url` query parameter is the image it serves. */
+const NEXT_IMAGE_PATH = '/_next/image';
 /** link rel values whose href the browser loads for the page itself. Other rels (canonical, alternate, preconnect) are not fetched. */
 const RESOURCE_RELS = new Set(['stylesheet', 'icon', 'apple-touch-icon', 'mask-icon', 'preload', 'modulepreload', 'manifest']);
 /** Resource attributes by tag. */
@@ -23,14 +29,23 @@ const SKIPPED = /^(?:#|mailto:|tel:|sms:|javascript:|data:|blob:|about:)/i;
 export function collectRefs(tags, pageURL) {
     const base = baseURL(tags, pageURL);
     const refs = [];
+    const nextImageSources = new Set();
     const add = (kind, source, raw) => {
         const value = raw?.trim();
         if (!value || SKIPPED.test(value))
             return;
         const url = parseURL(value, base);
-        if (url && url.protocol !== 'http:' && url.protocol !== 'https:')
+        if (url && !isHTTP(url))
             return;
-        refs.push({ kind, source, raw: value, url });
+        const wrapped = url && nextImageSource(url);
+        if (!wrapped) {
+            refs.push({ kind, source, raw: value, url });
+            return;
+        }
+        if (nextImageSources.has(wrapped.href))
+            return;
+        nextImageSources.add(wrapped.href);
+        refs.push({ kind, source, raw: value, url: wrapped, via: 'next/image' });
     };
     for (const tag of tags) {
         if (NAVIGATION_TAGS.has(tag.name))
@@ -62,6 +77,15 @@ function cssURLs(css) {
     }
     return urls;
 }
+/** The image a next/image optimizer URL serves, resolved against it; null for any other URL, or a source that is not HTTP. */
+function nextImageSource(url) {
+    const param = url.pathname === NEXT_IMAGE_PATH ? url.searchParams.get('url') : null;
+    const wrapped = param ? parseURL(param, url.href) : null;
+    return wrapped && isHTTP(wrapped) ? wrapped : null;
+}
+function isHTTP(url) {
+    return url.protocol === 'http:' || url.protocol === 'https:';
+}
 function isResourceLink(tag) {
     const rels = (tag.attrs.get('rel') ?? '').toLowerCase().split(/\s+/);
     return rels.some((rel) => RESOURCE_RELS.has(rel));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@gradial/aci",
-  "version": "0.2.0-canary.720",
+  "version": "0.2.0-canary.726",
   "repository": {
     "type": "git",
     "url": "https://github.com/gradial/bare-metal-go.git",
@@ -179,11 +179,11 @@
     "astro": "^6.4.8"
   },
   "optionalDependencies": {
-    "@gradial/aci-cli-darwin-arm64": "0.2.0-canary.720",
-    "@gradial/aci-cli-darwin-x64": "0.2.0-canary.720",
-    "@gradial/aci-cli-linux-arm64": "0.2.0-canary.720",
-    "@gradial/aci-cli-linux-x64": "0.2.0-canary.720",
-    "@gradial/aci-cli-win32-arm64": "0.2.0-canary.720",
-    "@gradial/aci-cli-win32-x64": "0.2.0-canary.720"
+    "@gradial/aci-cli-darwin-arm64": "0.2.0-canary.726",
+    "@gradial/aci-cli-darwin-x64": "0.2.0-canary.726",
+    "@gradial/aci-cli-linux-arm64": "0.2.0-canary.726",
+    "@gradial/aci-cli-linux-x64": "0.2.0-canary.726",
+    "@gradial/aci-cli-win32-arm64": "0.2.0-canary.726",
+    "@gradial/aci-cli-win32-x64": "0.2.0-canary.726"
   }
 }