@hatk/hatk 0.0.1-alpha.93 → 0.0.1-alpha.95

package/dist/hydrate.d.ts

@@ -1,3 +1,4 @@
+import { type SpaceBlobPreset } from './spaces/blob.ts';
 import type { Row } from './lex-types.ts';
 export type { Row };
 export interface BaseContext {
@@ -53,8 +54,13 @@ export interface BaseContext {
     records: <R = unknown>(collection: string, field: string, values: string[]) => Promise<Row<R>[]>;
     /** Throw `NotAuthorized` unless the viewer may read this space. */
     requireSpace: (space: string) => void;
-    /** The URL this appview serves a space blob at, for the viewer asking. */
-    spaceBlobUrl: (space: string, repo: string, cid: string) => string;
+    /**
+     * The URL this appview serves a space blob at, for the viewer asking.
+     *
+     * The preset names the size it is drawn at, from the same list the public
+     * path uses. Left out, the original comes back.
+     */
+    spaceBlobUrl: (space: string, repo: string, cid: string, preset?: SpaceBlobPreset) => string;
 }
 /** Fetch records for URIs, reshape them, and filter out taken-down DIDs. */
 export declare function resolveRecords(uris: string[]): Promise<Row<unknown>[]>;

package/dist/hydrate.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"hydrate.d.ts","sourceRoot":"","sources":["../src/hydrate.ts"],"names":[],"mappings":"AAgBA,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AAEzC,YAAY,EAAE,GAAG,EAAE,CAAA;AAInB,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC/C,EAAE,EAAE;QACF,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9D;;;;WAIG;QACH,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;KACpE,CAAA;IACD,UAAU,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1G,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IAC3D,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC3E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpG;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACnF,6FAA6F;IAC7F,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChG,mEAAmE;IACnE,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC,0EAA0E;IAC1E,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,KAAK,MAAM,CAAA;CACnE;AAID,4EAA4E;AAC5E,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAsC5E;AAID,yCAAyC;AACzC,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,WAAW,CAuB7F"}
+{"version":3,"file":"hydrate.d.ts","sourceRoot":"","sources":["../src/hydrate.ts"],"names":[],"mappings":"AAeA,OAAO,EAAE,KAAK,eAAe,EAAgB,MAAM,kBAAkB,CAAA;AACrE,OAAO,KAAK,EAAE,GAAG,EAAE,MAAM,gBAAgB,CAAA;AAEzC,YAAY,EAAE,GAAG,EAAE,CAAA;AAInB,MAAM,WAAW,WAAW;IAC1B,MAAM,EAAE;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,CAAC,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC/C,EAAE,EAAE;QACF,KAAK,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QAC9D;;;;WAIG;QACH,UAAU,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,OAAO,EAAE,KAAK,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;KACpE,CAAA;IACD,UAAU,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC7F,MAAM,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAA;IAC1G,KAAK,EAAE,CAAC,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAA;IAC5F,MAAM,EAAE,CAAC,IAAI,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,MAAM,EAAE,OAAO,EAAE,CAAC,CAAC,CAAA;IAC3D,OAAO,EAAE,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,OAAO,EAAE,MAAM,CAAC,EAAE,MAAM,KAAK,MAAM,GAAG,SAAS,CAAA;IAC3E;;;;;;;;;;;;;;;;;;;OAmBG;IACH,WAAW,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,KAAK;QAAE,GAAG,EAAE,MAAM,CAAC;QAAC,MAAM,EAAE,MAAM,EAAE,CAAC;QAAC,OAAO,EAAE,MAAM,CAAA;KAAE,CAAA;IACpG;;;OAGG;IACH,YAAY,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IACnF,6FAA6F;IAC7F,OAAO,EAAE,CAAC,CAAC,GAAG,OAAO,EAAE,UAAU,EAAE,MAAM,EAAE,KAAK,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,EAAE,KAAK,OAAO,CAAC,GAAG,CAAC,CAAC,CAAC,EAAE,CAAC,CAAA;IAChG,mEAAmE;IACnE,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,KAAK,IAAI,CAAA;IACrC;;;;;OAKG;IACH,YAAY,EAAE,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,KAAK,MAAM,CAAA;CAC7F;AAID,4EAA4E;AAC5E,wBAAsB,cAAc,CAAC,IAAI,EAAE,MAAM,EAAE,GAAG,OAAO,CAAC,GAAG,CAAC,OAAO,CAAC,EAAE,CAAC,CAsC5E;AAID,yCAAyC;AACzC,wBAAgB,gBAAgB,CAAC,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAC;IAAC,MAAM,CAAC,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,GAAG,WAAW,CAuB7F"}

package/dist/indexer.d.ts

@@ -23,7 +23,7 @@ export declare function getLastSeq(): number | null;
  */
 export declare function checkpointCursor(): Promise<void>;
 /** Point cursor persistence at a stream's own `_cursor` row. See {@link cursorKey}. */
-export declare function setCursorKey(key: 'relay' | 'jetstream'): void;
+export declare function setCursorKey(key: string): void;
 /**
  * The cursor a reconnect should resume from: the latest seq this process has
  * seen, falling back to the boot-time cursor before any message has arrived.
@@ -123,6 +123,16 @@ export interface AuxIndexerOpts {
 }
 /** The `_cursor` row an auxiliary firehose persists its position to. */
 export declare function auxCursorKey(relayUrl: string): string;
+/**
+ * The `_cursor` row a Jetstream instance persists its position to.
+ *
+ * Named for the instance, because a Jetstream sequence means nothing on
+ * another one. Pointed at a second instance — a region swap, an outage
+ * worked around — a shared row would hand over a number from somewhere else,
+ * and the stream would resume at whatever that happens to address there:
+ * no error, no refusal, just a silent jump past whatever fell in between.
+ */
+export declare function jetstreamCursorKey(jetstreamUrl: string): string;
 /**
  * Tail a second `subscribeRepos` alongside the primary stream.
  *

package/dist/indexer.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA+ChD,iFAAiF;AACjF,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC7B;AAgMD,6GAA6G;AAC7G,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEzC;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAE1C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAStD;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,GAAG,EAAE,OAAO,GAAG,WAAW,GAAG,IAAI,CAE7D;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAErH;AAED,+CAA+C;AAC/C,wBAAgB,yBAAyB,IAAI,IAAI,CAIhD;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAMjD;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;AAED;;;;;;;GAOG;AACH,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxD;AA0BD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAM3G;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAoBvD;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAM3C;AAED,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAoFjF;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACxB,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,oDAAoD;AACpD,UAAU,WAAY,SAAQ,eAAe;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B3E;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAkCxE;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAgD/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CvG;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAE3F;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAmE9D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,KAAK,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAc,GACrC,IAAI,CAoDN"}
+{"version":3,"file":"indexer.d.ts","sourceRoot":"","sources":["../src/indexer.ts"],"names":[],"mappings":"AAAA,OAAO,KAAK,EAAE,aAAa,EAAE,MAAM,aAAa,CAAA;AA+ChD,iFAAiF;AACjF,MAAM,WAAW,QAAQ;IACvB,MAAM,EAAE,QAAQ,GAAG,QAAQ,GAAG,QAAQ,CAAA;IACtC,UAAU,EAAE,MAAM,CAAA;IAClB,IAAI,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,yBAAyB;IACzB,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC7B;AAkMD,6GAA6G;AAC7G,wBAAgB,OAAO,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAEzC;AAED,6EAA6E;AAC7E,wBAAgB,UAAU,IAAI,MAAM,GAAG,IAAI,CAE1C;AAED;;;;;;;GAOG;AACH,wBAAsB,gBAAgB,IAAI,OAAO,CAAC,IAAI,CAAC,CAStD;AAED,uFAAuF;AACvF,wBAAgB,YAAY,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAE9C;AAED;;;;;GAKG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,MAAM,GAAG,IAAI,EAAE,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,MAAM,GAAG,IAAI,GAAG,SAAS,CAErH;AAED,+CAA+C;AAC/C,wBAAgB,yBAAyB,IAAI,IAAI,CAIhD;AAED;;;;;;;;;GASG;AACH,wBAAgB,0BAA0B,IAAI,IAAI,CAMjD;AAED;;;;;GAKG;AACH,wBAAsB,cAAc,IAAI,OAAO,CAAC,IAAI,CAAC,CAMpD;AAED;;;;;;;GAOG;AACH,iEAAiE;AACjE,wBAAgB,aAAa,CAAC,GAAG,EAAE,MAAM,GAAG,OAAO,CAAC,IAAI,CAAC,CAGxD;AA0BD;;;;;;GAMG;AACH,wBAAgB,mBAAmB,CAAC,UAAU,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,GAAG,IAAI,CAM3G;AAED;;;;;;;;GAQG;AACH,wBAAsB,eAAe,IAAI,OAAO,CAAC,MAAM,CAAC,CAoBvD;AAED,wBAAgB,SAAS,CAAC,GAAG,EAAE,MAAM,GAAG,IAAI,CAM3C;AAED,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,OAAO,SAAI,GAAG,OAAO,CAAC,IAAI,CAAC,CAoFjF;AAED;;;;GAIG;AACH,MAAM,WAAW,eAAe;IAC9B,mEAAmE;IACnE,UAAU,CAAC,EAAE,aAAa,EAAE,CAAA;IAC5B,MAAM,EAAE,MAAM,CAAA;IACd,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACxB,iBAAiB,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IAC/B,WAAW,CAAC,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACzB,YAAY,EAAE,MAAM,CAAA;IACpB,UAAU,EAAE,MAAM,CAAA;IAClB,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,kBAAkB,CAAC,EAAE,MAAM,CAAA;CAC5B;AAED,oDAAoD;AACpD,UAAU,WAAY,SAAQ,eAAe;IAC3C,QAAQ,EAAE,MAAM,CAAA;IAChB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED;;;;;;;;;GASG;AACH,wBAAsB,gBAAgB,CAAC,IAAI,EAAE,eAAe,GAAG,OAAO,CAAC,IAAI,CAAC,CA4B3E;AAED,wBAAsB,YAAY,CAAC,IAAI,EAAE,WAAW,GAAG,OAAO,CAAC,SAAS,CAAC,CAkCxE;AAED,6EAA6E;AAC7E,MAAM,WAAW,cAAc;IAC7B,QAAQ,EAAE,MAAM,CAAA;IAChB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;IACxB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,wEAAwE;AACxE,wBAAgB,YAAY,CAAC,QAAQ,EAAE,MAAM,GAAG,MAAM,CAErD;AAED;;;;;;;;GAQG;AACH,wBAAgB,kBAAkB,CAAC,YAAY,EAAE,MAAM,GAAG,MAAM,CAE/D;AAED;;;;;;;;;;;;;;GAcG;AACH,wBAAgB,eAAe,CAAC,IAAI,EAAE,cAAc,GAAG,SAAS,CAgD/D;AAED;;;;;;;;GAQG;AACH,wBAAsB,mBAAmB,CAAC,GAAG,EAAE,MAAM,EAAE,aAAa,EAAE,MAAM,GAAG,SAAS,GAAG,OAAO,CAAC,IAAI,CAAC,CA4CvG;AAED;;;;;;GAMG;AACH,wBAAgB,qBAAqB,CAAC,UAAU,EAAE,MAAM,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,OAAO,CAE3F;AAED;;;;;;;;;GASG;AACH,wBAAgB,WAAW,CAAC,GAAG,EAAE,MAAM,EAAE,GAAG,EAAE,QAAQ,EAAE,GAAG,IAAI,CAmE9D;AAED;;;;GAIG;AACH,wBAAgB,cAAc,CAC5B,KAAK,EAAE,UAAU,EACjB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,KAAK,GAAE,CAAC,GAAG,EAAE,MAAM,KAAK,IAAc,GACrC,IAAI,CAoDN"}

package/dist/indexer.js

@@ -22,8 +22,10 @@ let cursorCheckpointTimer = null;
  *
  * The relay's `subscribeRepos` seq and Jetstream's seq are different
  * coordinate systems — resuming one from the other's value would either skip
- * a swathe of the stream or replay from a nonsense offset. Each source owns
- * its own key so switching between them (or back) is safe.
+ * a swathe of the stream or replay from a nonsense offset. So is one Jetstream
+ * instance's seq against another's, which is why the key names the instance
+ * rather than the kind. Each source owns its own key so switching between them
+ * (or back) is safe.
  */
 let cursorKey = 'relay';
 const BATCH_SIZE = 100;
@@ -517,6 +519,18 @@ export async function startIndexer(opts) {
 export function auxCursorKey(relayUrl) {
     return `relay:${relayUrl}`;
 }
+/**
+ * The `_cursor` row a Jetstream instance persists its position to.
+ *
+ * Named for the instance, because a Jetstream sequence means nothing on
+ * another one. Pointed at a second instance — a region swap, an outage
+ * worked around — a shared row would hand over a number from somewhere else,
+ * and the stream would resume at whatever that happens to address there:
+ * no error, no refusal, just a silent jump past whatever fell in between.
+ */
+export function jetstreamCursorKey(jetstreamUrl) {
+    return `jetstream:${jetstreamUrl}`;
+}
 /**
  * Tail a second `subscribeRepos` alongside the primary stream.
  *

package/dist/jetstream.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"jetstream.d.ts","sourceRoot":"","sources":["../src/jetstream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EASL,KAAK,QAAQ,EACb,KAAK,eAAe,EACrB,MAAM,cAAc,CAAA;AAGrB,sEAAsE;AACtE,eAAO,MAAM,eAAe,MAAM,CAAA;AAClC,eAAO,MAAM,QAAQ,QAAS,CAAA;AAO9B;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAA;AAEnC,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,wDAAwD;AACxD,UAAU,eAAe;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,CASR;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAalG;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,GAAG,IAAI,CAY7F;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAuBzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACpC,MAAM,GAAG,IAAI,GAAG,SAAS,CAK3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CA0DjG"}
+{"version":3,"file":"jetstream.d.ts","sourceRoot":"","sources":["../src/jetstream.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;GAeG;AAEH,OAAO,EAUL,KAAK,QAAQ,EACb,KAAK,eAAe,EACrB,MAAM,cAAc,CAAA;AAGrB,sEAAsE;AACtE,eAAO,MAAM,eAAe,MAAM,CAAA;AAClC,eAAO,MAAM,QAAQ,QAAS,CAAA;AAO9B;;;;;;;;;;;;;;;;GAgBG;AACH,eAAO,MAAM,kBAAkB,IAAI,CAAA;AAEnC,MAAM,WAAW,aAAc,SAAQ,eAAe;IACpD,sEAAsE;IACtE,YAAY,EAAE,MAAM,CAAA;IACpB,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;CACvB;AAED,wDAAwD;AACxD,UAAU,eAAe;IACvB,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,IAAI,CAAC,EAAE,MAAM,CAAA;IACb,GAAG,CAAC,EAAE,MAAM,CAAA;IACZ,MAAM,CAAC,EAAE,MAAM,CAAC,MAAM,EAAE,GAAG,CAAC,CAAA;CAC7B;AAED;;;;;;;;GAQG;AACH,wBAAgB,iBAAiB,CAC/B,YAAY,EAAE,MAAM,EACpB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EACxB,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,EAC/B,MAAM,CAAC,EAAE,MAAM,GAAG,IAAI,GACrB,MAAM,CASR;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAAC,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,GAAG,IAAI,CAalG;AAED;;;;;;;;GAQG;AACH,wBAAgB,UAAU,CAAC,MAAM,EAAE,eAAe,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,QAAQ,GAAG,IAAI,CAY7F;AAED;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,OAAO,EAAE,GAAG,EAAE,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,GAAG,IAAI,CAuBzE;AAED;;;;;;;;;;GAUG;AACH,wBAAgB,eAAe,CAC7B,QAAQ,EAAE,MAAM,EAChB,OAAO,EAAE,MAAM,GAAG,IAAI,EACtB,UAAU,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GACpC,MAAM,GAAG,IAAI,GAAG,SAAS,CAK3B;AAED;;;;;;;;;;;;;;;GAeG;AACH,wBAAsB,qBAAqB,CAAC,IAAI,EAAE,aAAa,EAAE,QAAQ,SAAI,GAAG,OAAO,CAAC,SAAS,CAAC,CA0DjG"}

package/dist/jetstream.js

@@ -14,7 +14,7 @@
  * @see https://bsky.network/docs/jetstream
  * @module
  */
-import { applyCommit, configureIndexer, getLastSeq, handleIdentityEvent, isIndexableCollection, noteSeq, resumeCursor, setCursorKey, } from "./indexer.js";
+import { applyCommit, configureIndexer, getLastSeq, handleIdentityEvent, isIndexableCollection, jetstreamCursorKey, noteSeq, resumeCursor, setCursorKey, } from "./indexer.js";
 import { log, emit } from "./logger.js";
 /** Server-side filter caps, rejected before the WebSocket upgrade. */
 export const MAX_COLLECTIONS = 100;
@@ -170,7 +170,7 @@ export async function startJetstreamIndexer(opts, refusals = 0) {
     const { jetstreamUrl, collections } = opts;
     const pinnedRepos = opts.pinnedRepos || null;
     assertFilterLimits(collections, pinnedRepos);
-    setCursorKey('jetstream');
+    setCursorKey(jetstreamCursorKey(opts.jetstreamUrl));
     await configureIndexer(opts);
     const cursor = reconnectCursor(refusals, getLastSeq(), opts.cursor);
     const wsUrl = buildSubscribeUrl(jetstreamUrl, collections, pinnedRepos, cursor);

package/dist/main.js

@@ -22,7 +22,7 @@ import { initFeeds, listFeeds } from "./feeds.js";
 import { initXrpc, listXrpc, configureRelay, configureCdn, configureOAuth, callXrpc } from "./xrpc.js";
 import { initOpengraph } from "./opengraph.js";
 import { initLabels, getLabelDefinitions } from "./labels.js";
-import { auxCursorKey, startAuxIndexer, startIndexer, sweepReferences } from "./indexer.js";
+import { auxCursorKey, jetstreamCursorKey, startAuxIndexer, startIndexer, sweepReferences } from "./indexer.js";
 import { startJetstreamIndexer } from "./jetstream.js";
 import { rebuildAllIndexes } from "./database/fts.js";
 import { createHandler, registerCoreHandlers } from "./server.js";
@@ -237,7 +237,7 @@ const indexerCore = {
     ftsRebuildInterval: config.ftsRebuildInterval,
 };
 if (config.jetstream) {
-    const cursor = ignoreSavedCursor ? null : await getCursor('jetstream');
+    const cursor = ignoreSavedCursor ? null : await getCursor(jetstreamCursorKey(config.jetstream.url));
     startJetstreamIndexer({ ...indexerCore, jetstreamUrl: config.jetstream.url, cursor });
 }
 else {

package/dist/server.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAsEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAuE9C;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CA2M3F;AAgDD,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC5D,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAC5B;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CAyqC5F;AAGD,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,WAAW,GAAG,IAAI,EACzB,MAAM,GAAE,MAAM,EAAO,EACrB,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC5D,QAAQ,CAAC,EAAE,MAAM,IAAI,GACpB,OAAO,WAAW,EAAE,MAAM,CAG5B"}
+{"version":3,"file":"server.d.ts","sourceRoot":"","sources":["../src/server.ts"],"names":[],"mappings":"AAsEA,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,aAAa,CAAA;AAuE9C;;;GAGG;AACH,wBAAgB,oBAAoB,CAAC,WAAW,EAAE,MAAM,EAAE,EAAE,KAAK,EAAE,WAAW,GAAG,IAAI,GAAG,IAAI,CA2M3F;AAgDD,MAAM,WAAW,kBAAkB;IACjC,UAAU,CAAC,EAAE,MAAM,CAAA;IACnB,eAAe,CAAC,EAAE,MAAM,CAAA;IACxB,mFAAmF;IACnF,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED,MAAM,WAAW,aAAa;IAC5B,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,SAAS,EAAE,MAAM,GAAG,IAAI,CAAA;IACxB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,MAAM,EAAE,MAAM,EAAE,CAAA;IAChB,QAAQ,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,GAAG,KAAK,OAAO,CAAC;QAAE,IAAI,EAAE,MAAM,CAAC;QAAC,IAAI,CAAC,EAAE,MAAM,CAAA;KAAE,CAAC,CAAA;IACxF,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK;QAAE,GAAG,EAAE,MAAM,CAAA;KAAE,GAAG,IAAI,CAAA;IAC5D,QAAQ,CAAC,EAAE,MAAM,IAAI,CAAA;IACrB,mFAAmF;IACnF,MAAM,CAAC,EAAE,kBAAkB,CAAA;CAC5B;AAED;;;GAGG;AACH,wBAAgB,aAAa,CAAC,MAAM,EAAE,aAAa,GAAG,CAAC,OAAO,EAAE,OAAO,KAAK,OAAO,CAAC,QAAQ,CAAC,CA0qC5F;AAGD,wBAAgB,WAAW,CACzB,IAAI,EAAE,MAAM,EACZ,WAAW,EAAE,MAAM,EAAE,EACrB,SAAS,EAAE,MAAM,GAAG,IAAI,EACxB,KAAK,EAAE,WAAW,GAAG,IAAI,EACzB,MAAM,GAAE,MAAM,EAAO,EACrB,aAAa,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,KAAK;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC5D,QAAQ,CAAC,EAAE,MAAM,IAAI,GACpB,OAAO,WAAW,EAAE,MAAM,CAG5B"}

package/dist/server.js

@@ -1342,15 +1342,16 @@ export function createHandler(config) {
                     throw err;
                 }
             }
-            // GET /space-blob?space=&repo=&cid= — a blob inside a permissioned space,
-            // fetched with the viewer's own credential. Unlike /blob/ below it is not
-            // dev-only and not cacheable: a space blob has no public URL by design,
-            // and this response belongs to one viewer.
+            // GET /space-blob?space=&repo=&cid= — a blob inside a permissioned space.
+            // Unlike /blob/ below it is not dev-only, and every request is authorized
+            // with the viewer's own credential for the space: a space blob has no
+            // public URL by design. `if-none-match` is passed along because the
+            // answer may be that the viewer already holds it.
             if (url.pathname === '/space-blob') {
                 const parsed = parseSpaceBlobRequest(url.searchParams);
                 if (!parsed)
                     return withCors(jsonError(400, 'Expected space, repo and cid', acceptEncoding));
-                return withCors(await serveSpaceBlob(oauth, viewer, parsed));
+                return withCors(await serveSpaceBlob(oauth, viewer, parsed, request.headers.get('if-none-match')));
             }
             // GET /blob/:did/:cid — dev-only image proxy (see blobUrl in xrpc.ts).
             // A PDS serves getBlob as an attachment with nosniff, which a browser

package/dist/spaces/blob.d.ts

@@ -8,19 +8,71 @@
  * public URL would turn that URL into the capability the credential exists to
  * replace.
  *
- * So the bytes come through here, fetched on the viewer's own behalf with the
- * viewer's own credential, and go no further: `private, no-store` keeps them
- * out of every shared cache between this server and that browser.
+ * So the bytes come through here, and every request is authorized before any
+ * of them move: the viewer's credential for the space, or the same 404 a
+ * missing blob gets. What that authorization guards is served two ways —
+ * `private` so the viewer's own browser may hold it and no shared cache may,
+ * and out of a bounded in-memory cache so the same photo is fetched from its
+ * repo once rather than once per member looking at it.
  */
 import type { OAuthConfig } from '../config.ts';
+/**
+ * The sizes a space blob is served at.
+ *
+ * The same words hatk's public path uses for imgproxy, with the same numbers,
+ * so an app naming a size says it once and means it either side of the line
+ * between a public blob and a permissioned one. What differs is who resizes:
+ * a space blob may not pass through an image CDN, so it happens here.
+ *
+ * A request naming none gets the original, which is what every caller written
+ * before presets existed asks for.
+ */
+declare const PRESETS: {
+    readonly avatar: {
+        readonly width: 1000;
+        readonly height: 1000;
+        readonly fit: "cover";
+        readonly quality: 85;
+    };
+    readonly avatar_thumbnail: {
+        readonly width: 128;
+        readonly height: 128;
+        readonly fit: "cover";
+        readonly quality: 70;
+    };
+    readonly feed_thumbnail: {
+        readonly width: 1000;
+        readonly fit: "inside";
+        readonly quality: 70;
+    };
+    readonly feed_fullsize: {
+        readonly quality: 90;
+    };
+    readonly banner: {
+        readonly width: 3000;
+        readonly height: 1000;
+        readonly fit: "cover";
+        readonly quality: 85;
+    };
+};
+export type SpaceBlobPreset = keyof typeof PRESETS;
+/**
+ * Only a name from that list is a preset.
+ *
+ * Free-form dimensions would let anyone mint unlimited distinct cache keys and
+ * evict everything real, and would put the cost of an arbitrary resize behind
+ * a URL. An unrecognised name is treated as none rather than refused: a broken
+ * image is a worse answer than a large one.
+ */
+export declare function asPreset(name: string | null | undefined): SpaceBlobPreset | undefined;
 /**
  * The URL this appview serves a space blob at, for whoever is asking.
  *
  * Built here rather than by the app, because the route is hatk's: a blob in a
  * space has no public address by design, and this is the one address it does
- * have — answered per viewer, with that viewer's credential, uncacheable.
+ * have — answered only to a viewer who may read the space it names.
  */
-export declare function spaceBlobUrl(space: string, repo: string, cid: string): string;
+export declare function spaceBlobUrl(space: string, repo: string, cid: string, preset?: SpaceBlobPreset): string;
 /**
  * The CID a blob reference names, in whichever spelling the read used.
  *
@@ -35,8 +87,12 @@ export interface SpaceBlobRequest {
     /** The repo holding the blob — the writer's, not the authority's. */
     repo: string;
     cid: string;
+    /** The size to serve it at. Absent means the original. */
+    preset?: SpaceBlobPreset;
 }
 export declare function parseSpaceBlobRequest(params: URLSearchParams): SpaceBlobRequest | null;
+/** Drop everything held. For tests, and for an operator who wants it gone. */
+export declare function resetSpaceBlobCache(): void;
 /**
  * Fetch a space blob as this viewer, or answer why not.
  *
@@ -44,8 +100,13 @@ export declare function parseSpaceBlobRequest(params: URLSearchParams): SpaceBlo
  * there. The distinction between "you may not" and "it does not exist" is
  * itself information about a private space, and the space host draws the line
  * the same way when it reports a non-member's repo as simply absent.
+ *
+ * The credential is checked on every request, including the ones answered from
+ * the cache and the ones answered with a 304. Nothing here is ever served to
+ * somebody the authority has not just said yes to.
  */
 export declare function serveSpaceBlob(oauth: OAuthConfig | null, viewer: {
     did: string;
-} | null, request: SpaceBlobRequest): Promise<Response>;
+} | null, request: SpaceBlobRequest, ifNoneMatch?: string | null): Promise<Response>;
+export {};
 //# sourceMappingURL=blob.d.ts.map

package/dist/spaces/blob.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"blob.d.ts","sourceRoot":"","sources":["../../src/spaces/blob.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;GAaG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AAe/C;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,GAAG,MAAM,CAG7E;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;CACZ;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB,GAAG,IAAI,CAOtF;AAED;;;;;;;GAOG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,GAAG,IAAI,EACzB,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC9B,OAAO,EAAE,gBAAgB,GACxB,OAAO,CAAC,QAAQ,CAAC,CAsCnB"}
+{"version":3,"file":"blob.d.ts","sourceRoot":"","sources":["../../src/spaces/blob.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;GAgBG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,MAAM,cAAc,CAAA;AA6C/C;;;;;;;;;;GAUG;AACH,QAAA,MAAM,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;CAMsG,CAAA;AAEnH,MAAM,MAAM,eAAe,GAAG,MAAM,OAAO,OAAO,CAAA;AAElD;;;;;;;GAOG;AACH,wBAAgB,QAAQ,CAAC,IAAI,EAAE,MAAM,GAAG,IAAI,GAAG,SAAS,GAAG,eAAe,GAAG,SAAS,CAErF;AAKD;;;;;;GAMG;AACH,wBAAgB,YAAY,CAAC,KAAK,EAAE,MAAM,EAAE,IAAI,EAAE,MAAM,EAAE,GAAG,EAAE,MAAM,EAAE,MAAM,CAAC,EAAE,eAAe,GAAG,MAAM,CAIvG;AAED;;;;;;;GAOG;AACH,wBAAgB,OAAO,CAAC,IAAI,EAAE,OAAO,GAAG,MAAM,GAAG,SAAS,CAMzD;AAED,MAAM,WAAW,gBAAgB;IAC/B,KAAK,EAAE,MAAM,CAAA;IACb,qEAAqE;IACrE,IAAI,EAAE,MAAM,CAAA;IACZ,GAAG,EAAE,MAAM,CAAA;IACX,0DAA0D;IAC1D,MAAM,CAAC,EAAE,eAAe,CAAA;CACzB;AAED,wBAAgB,qBAAqB,CAAC,MAAM,EAAE,eAAe,GAAG,gBAAgB,GAAG,IAAI,CAQtF;AA0DD,8EAA8E;AAC9E,wBAAgB,mBAAmB,IAAI,IAAI,CAI1C;AAuDD;;;;;;;;;;;GAWG;AACH,wBAAsB,cAAc,CAClC,KAAK,EAAE,WAAW,GAAG,IAAI,EACzB,MAAM,EAAE;IAAE,GAAG,EAAE,MAAM,CAAA;CAAE,GAAG,IAAI,EAC9B,OAAO,EAAE,gBAAgB,EACzB,WAAW,CAAC,EAAE,MAAM,GAAG,IAAI,GAC1B,OAAO,CAAC,QAAQ,CAAC,CA+BnB"}

package/dist/spaces/blob.js

@@ -8,9 +8,12 @@
  * public URL would turn that URL into the capability the credential exists to
  * replace.
  *
- * So the bytes come through here, fetched on the viewer's own behalf with the
- * viewer's own credential, and go no further: `private, no-store` keeps them
- * out of every shared cache between this server and that browser.
+ * So the bytes come through here, and every request is authorized before any
+ * of them move: the viewer's credential for the space, or the same 404 a
+ * missing blob gets. What that authorization guards is served two ways —
+ * `private` so the viewer's own browser may hold it and no shared cache may,
+ * and out of a bounded in-memory cache so the same photo is fetched from its
+ * repo once rather than once per member looking at it.
  */
 import { emit } from "../logger.js";
 import { repoEndpoint } from "./identity.js";
@@ -24,15 +27,74 @@ import { viewerCredential } from "./viewer.js";
  * what a browser executes in this origin.
  */
 const SERVABLE = new Set(['image/jpeg', 'image/png', 'image/webp', 'image/avif', 'image/gif']);
+/**
+ * How long a browser may reuse a blob it has before it asks again.
+ *
+ * Every request that does arrive is authorized, so this is the window in which
+ * a viewer who has just lost access still sees what they had. A minute is
+ * small against what the surrounding design already accepts: the readable set
+ * is cached for five, and the space host lets a minted credential outlive a
+ * revocation by up to two hours.
+ */
+const MAX_AGE_S = 60;
+/**
+ * Bytes held across every cached blob, and the largest single one worth
+ * holding. A blob past the entry limit streams straight through instead —
+ * caching it would evict a great many small ones to save one fetch.
+ */
+const CACHE_BYTES = 64 * 1024 * 1024;
+const MAX_ENTRY_BYTES = 4 * 1024 * 1024;
+/**
+ * How much of an original we will read in order to make a smaller one.
+ *
+ * Larger than what we hold, and deliberately: a photograph straight off a
+ * camera is exactly the case where resizing pays, and refusing to read it
+ * would be refusing the request that needs answering most. What comes back out
+ * is a derivative small enough to keep.
+ */
+const MAX_SOURCE_BYTES = 20 * 1024 * 1024;
+/**
+ * The sizes a space blob is served at.
+ *
+ * The same words hatk's public path uses for imgproxy, with the same numbers,
+ * so an app naming a size says it once and means it either side of the line
+ * between a public blob and a permissioned one. What differs is who resizes:
+ * a space blob may not pass through an image CDN, so it happens here.
+ *
+ * A request naming none gets the original, which is what every caller written
+ * before presets existed asks for.
+ */
+const PRESETS = {
+    avatar: { width: 1000, height: 1000, fit: 'cover', quality: 85 },
+    avatar_thumbnail: { width: 128, height: 128, fit: 'cover', quality: 70 },
+    feed_thumbnail: { width: 1000, fit: 'inside', quality: 70 },
+    feed_fullsize: { quality: 90 },
+    banner: { width: 3000, height: 1000, fit: 'cover', quality: 85 },
+};
+/**
+ * Only a name from that list is a preset.
+ *
+ * Free-form dimensions would let anyone mint unlimited distinct cache keys and
+ * evict everything real, and would put the cost of an arbitrary resize behind
+ * a URL. An unrecognised name is treated as none rather than refused: a broken
+ * image is a worse answer than a large one.
+ */
+export function asPreset(name) {
+    return name && name in PRESETS ? name : undefined;
+}
+/** Resizing is skipped for these: one frame of an animation is not the animation. */
+const ANIMATED = new Set(['image/gif']);
 /**
  * The URL this appview serves a space blob at, for whoever is asking.
  *
  * Built here rather than by the app, because the route is hatk's: a blob in a
  * space has no public address by design, and this is the one address it does
- * have — answered per viewer, with that viewer's credential, uncacheable.
+ * have — answered only to a viewer who may read the space it names.
  */
-export function spaceBlobUrl(space, repo, cid) {
+export function spaceBlobUrl(space, repo, cid, preset) {
     const params = new URLSearchParams({ space, repo, cid });
+    if (preset)
+        params.set('preset', preset);
     return `/space-blob?${params}`;
 }
 /**
@@ -61,7 +123,114 @@ export function parseSpaceBlobRequest(params) {
         return null;
     if (!parseSpaceRef(space) || !repo.startsWith('did:'))
         return null;
-    return { space, repo, cid };
+    const preset = asPreset(params.get('preset'));
+    return { space, repo, cid, ...(preset ? { preset } : {}) };
+}
+/**
+ * Blobs held in memory, least recently used first.
+ *
+ * In memory and not on disk on purpose. These are members' private photos, and
+ * a cache that survives a restart is a store of them: this one is bounded,
+ * forgotten when the process ends, and never written anywhere a backup would
+ * find it.
+ */
+const cache = new Map();
+let cachedBytes = 0;
+/**
+ * Fetches in flight, so a page opening with the same image in it twenty times
+ * fetches it once. Keyed like the cache.
+ */
+const inFlight = new Map();
+/**
+ * The space is part of the key, and has to be.
+ *
+ * A CID names bytes, so caching by CID alone would hit across spaces — and the
+ * check that a blob is actually referenced from the space being named lives
+ * upstream, in `com.atproto.space.getBlob`. A viewer who may read one space
+ * could then name any CID they had heard of and be served it out of the cache
+ * without that check ever running.
+ */
+const keyFor = (request) => `${request.space}\n${request.cid}\n${request.preset ?? ''}`;
+function cacheGet(key) {
+    const entry = cache.get(key);
+    if (!entry)
+        return undefined;
+    // Re-inserted so iteration order is least-recently-used first.
+    cache.delete(key);
+    cache.set(key, entry);
+    return entry;
+}
+function cachePut(key, entry) {
+    if (entry.bytes.byteLength > MAX_ENTRY_BYTES)
+        return;
+    const existing = cache.get(key);
+    if (existing)
+        cachedBytes -= existing.bytes.byteLength;
+    cache.set(key, entry);
+    cachedBytes += entry.bytes.byteLength;
+    while (cachedBytes > CACHE_BYTES) {
+        const oldest = cache.keys().next();
+        if (oldest.done)
+            break;
+        cachedBytes -= cache.get(oldest.value).bytes.byteLength;
+        cache.delete(oldest.value);
+    }
+}
+/** Drop everything held. For tests, and for an operator who wants it gone. */
+export function resetSpaceBlobCache() {
+    cache.clear();
+    inFlight.clear();
+    cachedBytes = 0;
+}
+/**
+ * A CID is a hash of the bytes it names, which is exactly what an ETag is for.
+ * Strong, free, and stable for as long as the blob exists. The preset is part
+ * of it because it is part of what comes back.
+ */
+const etagFor = (request) => request.preset ? `"${request.cid}-${request.preset}"` : `"${request.cid}"`;
+/** Whether the browser already holds this blob. `*` matches anything it has. */
+function matches(ifNoneMatch, etag) {
+    if (!ifNoneMatch)
+        return false;
+    return ifNoneMatch
+        .split(',')
+        .map((candidate) => candidate.trim().replace(/^W\//, ''))
+        .some((candidate) => candidate === '*' || candidate === etag);
+}
+/**
+ * Headers every answer carries, whether it has a body or not.
+ *
+ * `private` is the whole of the caching posture: the viewer's own browser may
+ * keep what it was shown, and no cache between here and there may. `vary`
+ * keeps it honest on a browser where two people sign in — the response turns
+ * on who asked, and who asked is the cookie or the token.
+ */
+function cacheHeaders(request) {
+    return {
+        etag: etagFor(request),
+        'cache-control': `private, max-age=${MAX_AGE_S}, must-revalidate`,
+        vary: 'cookie, authorization',
+    };
+}
+function serve(entry, request) {
+    return new Response(entry.bytes, {
+        status: 200,
+        headers: {
+            'content-type': entry.contentType,
+            ...cacheHeaders(request),
+            'content-disposition': 'inline',
+            'content-security-policy': "default-src 'none'; sandbox",
+            'x-content-type-options': 'nosniff',
+        },
+    });
+}
+/** A refusal from the repo host, carried out through the in-flight promise. */
+class UpstreamRefusal extends Error {
+    status;
+    constructor(status) {
+        super(`upstream refused with ${status}`);
+        this.status = status;
+    }
 }
 /**
  * Fetch a space blob as this viewer, or answer why not.
@@ -70,42 +239,222 @@ export function parseSpaceBlobRequest(params) {
  * there. The distinction between "you may not" and "it does not exist" is
  * itself information about a private space, and the space host draws the line
  * the same way when it reports a non-member's repo as simply absent.
+ *
+ * The credential is checked on every request, including the ones answered from
+ * the cache and the ones answered with a 304. Nothing here is ever served to
+ * somebody the authority has not just said yes to.
  */
-export async function serveSpaceBlob(oauth, viewer, request) {
+export async function serveSpaceBlob(oauth, viewer, request, ifNoneMatch) {
     if (!viewer)
         return new Response('Unauthorized', { status: 401 });
     const credential = await viewerCredential(oauth, viewer, request.space);
     if (!credential)
         return new Response('Not found', { status: 404 });
+    // The browser has it already. Authorized above, so this is a viewer who may
+    // go on looking at what they hold — and it costs neither of us the bytes.
+    if (matches(ifNoneMatch, etagFor(request))) {
+        return new Response(null, { status: 304, headers: cacheHeaders(request) });
+    }
+    const key = keyFor(request);
+    const hit = cacheGet(key);
+    if (hit)
+        return serve(hit, request);
+    let entry;
+    try {
+        entry = await (inFlight.get(key) ?? fetchOnce(key, credential, request));
+    }
+    catch (err) {
+        if (err instanceof UpstreamRefusal)
+            return new Response('Not found', { status: err.status });
+        emit('spaces', 'blob_error', { space: request.space, repo: request.repo, error: err.message });
+        return new Response('Blob unavailable', { status: 502 });
+    }
+    // Too large to hold, which the read above discovered from its headers and
+    // then dropped. Asking again costs a round trip and no bytes, and buys a
+    // body that is streamed rather than gathered into memory to be served once.
+    if (!entry)
+        return streamThrough(credential, request);
+    return serve(entry, request);
+}
+function blobUrlFor(endpoint, request) {
+    const url = new URL(`${endpoint}/xrpc/com.atproto.space.getBlob`);
+    url.searchParams.set('space', request.space);
+    // `repo`, not `did`: a space read names the repo holding the record the
+    // same way everywhere. A server hosting one account falls back to it,
+    // which is what makes `did` ever appear to work.
+    url.searchParams.set('repo', request.repo);
+    url.searchParams.set('cid', request.cid);
+    return url;
+}
+/**
+ * The upstream read, shared by everyone who asked for this blob at once.
+ *
+ * Resolves to null for a blob too large to hold, which the caller streams
+ * instead. A failure rejects, and rejects for all of them: one refusal is
+ * every caller's refusal, because the credential each of them presented had
+ * already been accepted for this space.
+ */
+function fetchOnce(key, credential, request) {
+    const task = (async () => {
+        const upstream = await credential.fetch(blobUrlFor(await repoEndpoint(request.repo), request));
+        if (!upstream.ok) {
+            // A credential the repo host rejects reads as absent, not as
+            // unauthorized: the viewer holds one, so what they are being told is
+            // that this blob is not theirs to see.
+            throw new UpstreamRefusal(upstream.status === 401 ? 404 : upstream.status);
+        }
+        const contentType = servableType(upstream);
+        const limit = request.preset ? MAX_SOURCE_BYTES : MAX_ENTRY_BYTES;
+        const declared = Number(upstream.headers.get('content-length') ?? NaN);
+        if (declared > limit) {
+            await upstream.body?.cancel();
+            return null;
+        }
+        // Read against the limit rather than trusting the length, which a repo host
+        // is free not to send and free to get wrong.
+        const source = await readBounded(upstream, limit);
+        if (!source)
+            return null;
+        // A resize that cannot happen is not a failure to serve. Sharp missing, an
+        // animation, or an image it cannot read all end here with the original,
+        // which is the answer this route gave before presets existed.
+        const bytes = request.preset ? ((await resize(source, contentType, request.preset)) ?? source) : source;
+        const entry = { bytes, contentType };
+        cachePut(key, entry);
+        return entry;
+    })().finally(() => {
+        if (inFlight.get(key) === task)
+            inFlight.delete(key);
+    });
+    inFlight.set(key, task);
+    return task;
+}
+/**
+ * The whole body, or null once it is plainly too big to hold.
+ *
+ * Bounded as it reads: a body that goes past the limit is abandoned there, so
+ * the most this ever holds is one blob's worth over the limit by one chunk.
+ */
+async function readBounded(upstream, limit) {
+    if (!upstream.body)
+        return new Uint8Array(0);
+    const reader = upstream.body.getReader();
+    const chunks = [];
+    let total = 0;
+    try {
+        while (true) {
+            const { done, value } = await reader.read();
+            if (done)
+                break;
+            total += value.byteLength;
+            if (total > limit) {
+                await reader.cancel();
+                return null;
+            }
+            chunks.push(value);
+        }
+    }
+    finally {
+        reader.releaseLock();
+    }
+    const bytes = new Uint8Array(total);
+    let at = 0;
+    for (const chunk of chunks) {
+        bytes.set(chunk, at);
+        at += chunk.byteLength;
+    }
+    return bytes;
+}
+/**
+ * Sharp, if this deployment has it.
+ *
+ * An optional peer dependency: hatk is a library, and most of what installs it
+ * never serves a permissioned space at all. Resolved once — a missing module
+ * is answered from the same settled promise rather than re-attempted per
+ * image.
+ */
+let sharpModule;
+function loadSharp() {
+    sharpModule ??= import('sharp')
+        .then((m) => m.default)
+        .catch(() => {
+        emit('spaces', 'resize_unavailable', { reason: 'sharp is not installed' });
+        return null;
+    });
+    return sharpModule;
+}
+/**
+ * The blob at the size it is drawn, or null to serve the original instead.
+ *
+ * Orientation is applied before the resize and the metadata that carried it is
+ * dropped with everything else — which also means the GPS in a ride photo's
+ * EXIF stops being served to everyone the space admits.
+ *
+ * The format is kept rather than normalised to JPEG. Re-encoding a PNG that
+ * way silently flattens its transparency, and no size is worth that.
+ *
+ * Null when the original is the better answer — an animation, an image sharp
+ * cannot read, sharp absent, or a derivative that came out no smaller.
+ */
+async function resize(source, contentType, preset) {
+    if (ANIMATED.has(contentType))
+        return null;
+    const sharp = await loadSharp();
+    if (!sharp)
+        return null;
+    const { width, height, fit, quality } = PRESETS[preset];
+    try {
+        let pipeline = sharp(source).rotate();
+        if (width)
+            pipeline = pipeline.resize({ width, height, fit, withoutEnlargement: true });
+        // Named explicitly rather than left to sharp, which keeps the input format
+        // but not the quality — without this a preset that only sets quality, like
+        // a full-size one, would re-encode at sharp's default and do nothing.
+        if (contentType === 'image/jpeg')
+            pipeline = pipeline.jpeg({ quality, mozjpeg: true });
+        else if (contentType === 'image/webp')
+            pipeline = pipeline.webp({ quality });
+        else if (contentType === 'image/avif')
+            pipeline = pipeline.avif({ quality });
+        else if (contentType === 'image/png')
+            pipeline = pipeline.png({ compressionLevel: 9 });
+        const out = await pipeline.toBuffer();
+        // A derivative bigger than what it came from is a worse answer than the
+        // original — small images re-encoded at a higher quality can land there.
+        if (out.byteLength >= source.byteLength)
+            return null;
+        return new Uint8Array(out.buffer, out.byteOffset, out.byteLength);
+    }
+    catch (err) {
+        emit('spaces', 'resize_failed', { preset, content_type: contentType, error: err?.message ?? String(err) });
+        return null;
+    }
+}
+/** A blob too large to cache, passed through as it arrives. */
+async function streamThrough(credential, request) {
     let upstream;
     try {
-        const url = new URL(`${await repoEndpoint(request.repo)}/xrpc/com.atproto.space.getBlob`);
-        url.searchParams.set('space', request.space);
-        // `repo`, not `did`: a space read names the repo holding the record the
-        // same way everywhere. A server hosting one account falls back to it,
-        // which is what makes `did` ever appear to work.
-        url.searchParams.set('repo', request.repo);
-        url.searchParams.set('cid', request.cid);
-        upstream = await credential.fetch(url);
+        upstream = await credential.fetch(blobUrlFor(await repoEndpoint(request.repo), request));
     }
     catch (err) {
         emit('spaces', 'blob_error', { space: request.space, repo: request.repo, error: err.message });
         return new Response('Blob unavailable', { status: 502 });
     }
-    if (!upstream.ok)
+    if (!upstream.ok) {
         return new Response('Not found', { status: upstream.status === 401 ? 404 : upstream.status });
-    const claimed = (upstream.headers.get('content-type') ?? '').split(';')[0].trim();
-    const contentType = SERVABLE.has(claimed) ? claimed : 'application/octet-stream';
+    }
     return new Response(upstream.body, {
         status: 200,
         headers: {
-            'content-type': contentType,
-            // Not a public cache: this response is one viewer's, and the next
-            // request for the same URL may be somebody with no right to it.
-            'cache-control': 'private, no-store',
+            'content-type': servableType(upstream),
+            ...cacheHeaders(request),
             'content-disposition': 'inline',
             'content-security-policy': "default-src 'none'; sandbox",
             'x-content-type-options': 'nosniff',
         },
     });
 }
+function servableType(upstream) {
+    const claimed = (upstream.headers.get('content-type') ?? '').split(';')[0].trim();
+    return SERVABLE.has(claimed) ? claimed : 'application/octet-stream';
+}

package/dist/spaces/index.d.ts

@@ -22,7 +22,7 @@ export declare function serverDpopProof(method: string, url: string, accessToken
 export { handleWriteNotice } from './engine.ts';
 export { clearPendingNotices, NoticeError, parseWriteNotice, scheduleNoticeSync, verifyNotice, type WriteNotice, } from './notify.ts';
 export * from './uri.ts';
-export { blobCid, spaceBlobUrl } from './blob.ts';
+export { asPreset, blobCid, resetSpaceBlobCache, type SpaceBlobPreset, spaceBlobUrl } from './blob.ts';
 export { records, requireSpace, spaceRecords } from './records.ts';
 export declare function spaceServiceId(): string | null;
 /**

package/dist/spaces/index.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/spaces/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG7D,OAAO,EAA+D,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAOnH,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,YAAY,EACZ,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AACvG,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAErF;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AACD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,KAAK,WAAW,GACjB,MAAM,aAAa,CAAA;AACpB,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAWlE,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzG;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,6CAA6C;IAC7C,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAqD1D;AAED,wBAAgB,UAAU,IAAI,IAAI,CAMjC;AAED,+FAA+F;AAC/F,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,YAAY,IAAI,aAAa,EAAE,CAAA"}
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../../src/spaces/index.ts"],"names":[],"mappings":"AAAA;;;;;;GAMG;AAEH,OAAO,KAAK,EAAE,WAAW,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAG7D,OAAO,EAA+D,YAAY,EAAE,UAAU,EAAE,MAAM,aAAa,CAAA;AAOnH,OAAO,EACL,uBAAuB,EACvB,YAAY,EACZ,cAAc,EACd,aAAa,EACb,YAAY,EACZ,UAAU,GACX,MAAM,aAAa,CAAA;AACpB,OAAO,EAAE,kBAAkB,EAAE,mBAAmB,EAAE,eAAe,EAAE,WAAW,EAAE,MAAM,iBAAiB,CAAA;AACvG,OAAO,EAAE,cAAc,EAAE,gBAAgB,EAAE,KAAK,UAAU,EAAE,MAAM,YAAY,CAAA;AAC9E,OAAO,EAAE,eAAe,EAAE,cAAc,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACrF,OAAO,EAAE,sBAAsB,EAAE,sBAAsB,EAAE,MAAM,YAAY,CAAA;AAC3E,OAAO,EAAE,kBAAkB,EAAE,iBAAiB,EAAE,gBAAgB,EAAE,MAAM,aAAa,CAAA;AAErF;;;;GAIG;AACH,wBAAsB,eAAe,CACnC,MAAM,EAAE,MAAM,EACd,GAAG,EAAE,MAAM,EACX,WAAW,CAAC,EAAE,MAAM,EACpB,KAAK,CAAC,EAAE,MAAM,GACb,OAAO,CAAC,MAAM,CAAC,CAIjB;AACD,OAAO,EAAE,iBAAiB,EAAE,MAAM,aAAa,CAAA;AAC/C,OAAO,EACL,mBAAmB,EACnB,WAAW,EACX,gBAAgB,EAChB,kBAAkB,EAClB,YAAY,EACZ,KAAK,WAAW,GACjB,MAAM,aAAa,CAAA;AACpB,cAAc,UAAU,CAAA;AACxB,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,mBAAmB,EAAE,KAAK,eAAe,EAAE,YAAY,EAAE,MAAM,WAAW,CAAA;AACtG,OAAO,EAAE,OAAO,EAAE,YAAY,EAAE,YAAY,EAAE,MAAM,cAAc,CAAA;AAWlE,wBAAgB,cAAc,IAAI,MAAM,GAAG,IAAI,CAE9C;AAED;;;;;;GAMG;AACH,wBAAgB,gBAAgB,CAAC,GAAG,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,EAAE,QAAQ,EAAE,MAAM,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAYzG;AAED,MAAM,WAAW,kBAAkB;IACjC,MAAM,EAAE,YAAY,CAAA;IACpB,KAAK,EAAE,WAAW,GAAG,IAAI,CAAA;IACzB,GAAG,EAAE,MAAM,CAAA;IACX,6CAA6C;IAC7C,WAAW,EAAE,GAAG,CAAC,MAAM,CAAC,CAAA;CACzB;AAED;;;;;;;GAOG;AACH,wBAAgB,WAAW,CAAC,IAAI,EAAE,kBAAkB,GAAG,IAAI,CAqD1D;AAED,wBAAgB,UAAU,IAAI,IAAI,CAMjC;AAED,+FAA+F;AAC/F,OAAO,EAAE,UAAU,IAAI,WAAW,EAAE,YAAY,IAAI,aAAa,EAAE,CAAA"}

package/dist/spaces/index.js

@@ -33,7 +33,7 @@ export async function serverDpopProof(method, url, accessToken, nonce) {
 export { handleWriteNotice } from "./engine.js";
 export { clearPendingNotices, NoticeError, parseWriteNotice, scheduleNoticeSync, verifyNotice, } from "./notify.js";
 export * from "./uri.js";
-export { blobCid, spaceBlobUrl } from "./blob.js";
+export { asPreset, blobCid, resetSpaceBlobCache, spaceBlobUrl } from "./blob.js";
 export { records, requireSpace, spaceRecords } from "./records.js";
 let sweepTimer = null;
 /**

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@hatk/hatk",
-  "version": "0.0.1-alpha.93",
+  "version": "0.0.1-alpha.95",
   "license": "MIT",
   "bin": {
     "hatk": "dist/cli.js"
@@ -50,9 +50,16 @@
     "@types/better-sqlite3": "^7.6.13",
     "@types/react": "^19.2.14",
     "@vitest/coverage-v8": "^4.1.11",
+    "sharp": "^0.35.4",
     "vite": "^8.0.0"
   },
   "peerDependencies": {
+    "sharp": "^0.35.4",
     "vite": "^8.0.0"
+  },
+  "peerDependenciesMeta": {
+    "sharp": {
+      "optional": true
+    }
   }
 }