@jant/core 0.6.10 → 0.6.11

package/dist/{export-DY1v5Iqu.js → export-Ba7NJImL.js}

@@ -1320,6 +1320,97 @@ function buildJantBrandPackReadme() {
 	return null;
 }
 //#endregion
+//#region src/lib/image.ts
+/**
+* Generates an image URL with optional transformations.
+*
+* If `transformUrl` is provided and options are specified, returns a transformed image URL.
+* Otherwise, returns the original URL unchanged.
+*
+* Compatible with:
+* - Cloudflare Image Transformations (`/cdn-cgi/image/...`)
+* - imgproxy
+* - Cloudinary
+* - Any service with similar URL-based transformation API
+*
+* @param originalUrl - The original image URL
+* @param transformUrl - The base URL for transformations (e.g., `https://example.com/cdn-cgi/image`)
+* @param options - Transformation options (width, height, quality, format, fit)
+* @returns The transformed URL or original URL if transformations are not configured
+*
+* @example
+* ```ts
+* // Without transform URL - returns original
+* getImageUrl("/media/abc123", undefined, { width: 200 });
+* // Returns: "/media/abc123"
+*
+* // With transform URL - returns transformed
+* getImageUrl("/media/abc123", "https://example.com/cdn-cgi/image", { width: 200, quality: 80 });
+* // Returns: "https://example.com/cdn-cgi/image/width=200,quality=80/https://example.com/media/abc123"
+* ```
+*/ function getImageUrl(originalUrl, transformUrl, options) {
+	if (!transformUrl || !options || Object.keys(options).length === 0) return originalUrl;
+	const params = [];
+	if (options.width) params.push(`width=${options.width}`);
+	if (options.height) params.push(`height=${options.height}`);
+	if (options.quality) params.push(`quality=${options.quality}`);
+	if (options.format) params.push(`format=${options.format}`);
+	if (options.fit) params.push(`fit=${options.fit}`);
+	if (params.length === 0) return originalUrl;
+	return `${transformUrl}/${params.join(",")}/${originalUrl}`;
+}
+/**
+* Returns the appropriate public URL base for a given storage provider.
+*
+* For `"s3"` provider, returns `s3PublicUrl`. For all other providers
+* (including `"r2"`), returns `r2PublicUrl`. Falls back to `undefined`
+* if the matching URL is not configured.
+*
+* @param provider - The storage provider identifier (e.g., `"r2"`, `"s3"`)
+* @param r2PublicUrl - Optional R2 public URL
+* @param s3PublicUrl - Optional S3 public URL
+* @returns The public URL base for the provider, or undefined
+*
+* @example
+* ```ts
+* getPublicUrlForProvider("r2", "https://r2.example.com", "https://s3.example.com");
+* // Returns: "https://r2.example.com"
+*
+* getPublicUrlForProvider("s3", "https://r2.example.com", "https://s3.example.com");
+* // Returns: "https://s3.example.com"
+* ```
+*/ function getPublicUrlForProvider(provider, r2PublicUrl, s3PublicUrl, localPublicUrl) {
+	if (provider === "s3") return s3PublicUrl;
+	if (provider === "local") return localPublicUrl;
+	return r2PublicUrl;
+}
+/**
+* Generates a media URL from a storage key.
+*
+* Both proxy and CDN paths use the same structure — only the domain differs.
+* Without a public URL, returns a root-relative path for the local proxy.
+* With a public URL, prefixes that domain.
+*
+* @param storageKey - The storage object key (e.g. `"media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp"`)
+* @param publicUrl - Optional public URL base for direct CDN access
+* @returns The public URL for the media file
+*
+* @example
+* ```ts
+* // Without public URL - local proxy
+* getMediaUrl("media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp");
+* // Returns: "/media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp"
+*
+* // With public URL - CDN
+* getMediaUrl("media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp", "https://cdn.example.com");
+* // Returns: "https://cdn.example.com/media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp"
+* ```
+*/ function getMediaUrl(storageKey, publicUrl, sitePathPrefix = "") {
+	const base = publicUrl ? publicUrl.replace(/\/+$/, "") : "";
+	if (base) return `${base}/${storageKey}`;
+	return toPublicPath(`/${storageKey}`, sitePathPrefix);
+}
+//#endregion
 //#region src/lib/time.ts
 var time_exports = /* @__PURE__ */ __exportAll({
 	formatDate: () => formatDate,
@@ -1524,97 +1615,6 @@ function formatYearMonth(timestamp, timeZone = "UTC") {
 	return `${parts.find((part) => part.type === "year")?.value ?? "1970"}-${parts.find((part) => part.type === "month")?.value ?? "01"}`;
 }
 //#endregion
-//#region src/lib/image.ts
-/**
-* Generates an image URL with optional transformations.
-*
-* If `transformUrl` is provided and options are specified, returns a transformed image URL.
-* Otherwise, returns the original URL unchanged.
-*
-* Compatible with:
-* - Cloudflare Image Transformations (`/cdn-cgi/image/...`)
-* - imgproxy
-* - Cloudinary
-* - Any service with similar URL-based transformation API
-*
-* @param originalUrl - The original image URL
-* @param transformUrl - The base URL for transformations (e.g., `https://example.com/cdn-cgi/image`)
-* @param options - Transformation options (width, height, quality, format, fit)
-* @returns The transformed URL or original URL if transformations are not configured
-*
-* @example
-* ```ts
-* // Without transform URL - returns original
-* getImageUrl("/media/abc123", undefined, { width: 200 });
-* // Returns: "/media/abc123"
-*
-* // With transform URL - returns transformed
-* getImageUrl("/media/abc123", "https://example.com/cdn-cgi/image", { width: 200, quality: 80 });
-* // Returns: "https://example.com/cdn-cgi/image/width=200,quality=80/https://example.com/media/abc123"
-* ```
-*/ function getImageUrl(originalUrl, transformUrl, options) {
-	if (!transformUrl || !options || Object.keys(options).length === 0) return originalUrl;
-	const params = [];
-	if (options.width) params.push(`width=${options.width}`);
-	if (options.height) params.push(`height=${options.height}`);
-	if (options.quality) params.push(`quality=${options.quality}`);
-	if (options.format) params.push(`format=${options.format}`);
-	if (options.fit) params.push(`fit=${options.fit}`);
-	if (params.length === 0) return originalUrl;
-	return `${transformUrl}/${params.join(",")}/${originalUrl}`;
-}
-/**
-* Returns the appropriate public URL base for a given storage provider.
-*
-* For `"s3"` provider, returns `s3PublicUrl`. For all other providers
-* (including `"r2"`), returns `r2PublicUrl`. Falls back to `undefined`
-* if the matching URL is not configured.
-*
-* @param provider - The storage provider identifier (e.g., `"r2"`, `"s3"`)
-* @param r2PublicUrl - Optional R2 public URL
-* @param s3PublicUrl - Optional S3 public URL
-* @returns The public URL base for the provider, or undefined
-*
-* @example
-* ```ts
-* getPublicUrlForProvider("r2", "https://r2.example.com", "https://s3.example.com");
-* // Returns: "https://r2.example.com"
-*
-* getPublicUrlForProvider("s3", "https://r2.example.com", "https://s3.example.com");
-* // Returns: "https://s3.example.com"
-* ```
-*/ function getPublicUrlForProvider(provider, r2PublicUrl, s3PublicUrl, localPublicUrl) {
-	if (provider === "s3") return s3PublicUrl;
-	if (provider === "local") return localPublicUrl;
-	return r2PublicUrl;
-}
-/**
-* Generates a media URL from a storage key.
-*
-* Both proxy and CDN paths use the same structure — only the domain differs.
-* Without a public URL, returns a root-relative path for the local proxy.
-* With a public URL, prefixes that domain.
-*
-* @param storageKey - The storage object key (e.g. `"media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp"`)
-* @param publicUrl - Optional public URL base for direct CDN access
-* @returns The public URL for the media file
-*
-* @example
-* ```ts
-* // Without public URL - local proxy
-* getMediaUrl("media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp");
-* // Returns: "/media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp"
-*
-* // With public URL - CDN
-* getMediaUrl("media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp", "https://cdn.example.com");
-* // Returns: "https://cdn.example.com/media/med_01jpx7gb2w4rcg9w82g5r8kkx3.webp"
-* ```
-*/ function getMediaUrl(storageKey, publicUrl, sitePathPrefix = "") {
-	const base = publicUrl ? publicUrl.replace(/\/+$/, "") : "";
-	if (base) return `${base}/${storageKey}`;
-	return toPublicPath(`/${storageKey}`, sitePathPrefix);
-}
-//#endregion
 //#region src/lib/footnotes.ts
 /**
 * Shared Footnote Helpers
@@ -4334,4 +4334,4 @@ Safe to re-run; files already on disk are reused. Anything that fails to downloa
 `;
 }
 //#endregion
-export { JANT_POSITIVE_LOGO_PNG_FILENAME as A, getJantLogoHref as B, formatYearMonth as C, HOME_BRANDING_LINK_LABEL as D, toISOString as E, getJantBundledAsset as F, base64ToUint8Array as G, JANT_LOGO_PATH_DATA as H, getJantIconFilename as I, getJantIconHref as L, getDefaultJantAppleTouchIconBytes as M, getDefaultJantFaviconIcoBytes as N, HOME_BRANDING_PREFIX as O, getJantBrandPackHref as P, getJantLogoFilename as R, formatTime as S, time_exports as T, JANT_LOGO_VIEW_BOX as U, getJantPositiveLogoPngHref as V, arrayBufferToBase64 as W, getMediaUrl as _, markdown_exports as a, formatRelativeAge as b, parseMarkdownDocument as c, extractSummaryHtml as d, renderTiptapDocument as f, getImageUrl as g, escapeHtml as h, tiptapJsonToMarkdown as i, JANT_REPO_URL as j, JANT_BRAND_PACK_FILENAME as k, extractBodyText as l, trimTiptapBody as m, export_exports as n, render as o, renderTiptapJson as p, parseFrontMatter as r, toPlainText as s, createExportService as t, extractSummary as u, getPublicUrlForProvider as v, now as w, formatRelativeTime as x, formatDate as y, getJantLogoFills as z };
+export { JANT_POSITIVE_LOGO_PNG_FILENAME as A, getJantLogoHref as B, toISOString as C, HOME_BRANDING_LINK_LABEL as D, getPublicUrlForProvider as E, getJantBundledAsset as F, base64ToUint8Array as G, JANT_LOGO_PATH_DATA as H, getJantIconFilename as I, getJantIconHref as L, getDefaultJantAppleTouchIconBytes as M, getDefaultJantFaviconIcoBytes as N, HOME_BRANDING_PREFIX as O, getJantBrandPackHref as P, getJantLogoFilename as R, time_exports as S, getMediaUrl as T, JANT_LOGO_VIEW_BOX as U, getJantPositiveLogoPngHref as V, arrayBufferToBase64 as W, formatRelativeAge as _, markdown_exports as a, formatYearMonth as b, parseMarkdownDocument as c, extractSummaryHtml as d, renderTiptapDocument as f, formatDate as g, escapeHtml as h, tiptapJsonToMarkdown as i, JANT_REPO_URL as j, JANT_BRAND_PACK_FILENAME as k, extractBodyText as l, trimTiptapBody as m, export_exports as n, render as o, renderTiptapJson as p, parseFrontMatter as r, toPlainText as s, createExportService as t, extractSummary as u, formatRelativeTime as v, getImageUrl as w, now as x, formatTime as y, getJantLogoFills as z };

package/dist/{github-sync-LefaslGJ.js → github-sync-BD4w2m8-.js}

@@ -1,4 +1,4 @@
 import "./url-BMYO-Zlt.js";
-import "./export-DY1v5Iqu.js";
-import { i as classifyRepoForSync, o as createGitHubSyncService } from "./github-sync-2_T7nbOv.js";
+import "./export-Ba7NJImL.js";
+import { i as classifyRepoForSync, o as createGitHubSyncService } from "./github-sync-Cb4_6_i7.js";
 export { classifyRepoForSync, createGitHubSyncService };

package/dist/{github-sync-2_T7nbOv.js → github-sync-Cb4_6_i7.js}

@@ -1,4 +1,4 @@
-import { c as parseMarkdownDocument, r as parseFrontMatter, t as createExportService } from "./export-DY1v5Iqu.js";
+import { c as parseMarkdownDocument, r as parseFrontMatter, t as createExportService } from "./export-Ba7NJImL.js";
 import { r as getInstallationToken } from "./github-app-BbklkFmU.js";
 import { r as parseRepoSlug, t as createGitHubClient } from "./github-api-BgSiE71w.js";
 //#region src/lib/markdown-to-tiptap.ts

package/dist/index.js

@@ -1,6 +1,6 @@
 import { y as url_exports } from "./url-BMYO-Zlt.js";
-import { A as MAX_MEDIA_ATTACHMENTS, C as toMediaView, D as toPostViews, E as toPostView, F as STATUSES, I as TEXT_ATTACHMENT_CONTENT_FORMATS, M as MEDIA_KINDS, N as NAV_ITEM_TYPES, O as toSearchResultView, P as SORT_ORDERS, S as toArchiveGroupsWithMedia, T as toNavItemViews, b as createMediaContext, j as MAX_PINNED_POSTS, k as FORMATS, m as defaultFeedRenderer, t as createApp, w as toNavItemView, x as toArchiveGroups } from "./app-CGHkOdme.js";
-import { T as time_exports, a as markdown_exports } from "./export-DY1v5Iqu.js";
+import { A as MAX_MEDIA_ATTACHMENTS, C as toMediaView, D as toPostViews, E as toPostView, F as STATUSES, I as TEXT_ATTACHMENT_CONTENT_FORMATS, M as MEDIA_KINDS, N as NAV_ITEM_TYPES, O as toSearchResultView, P as SORT_ORDERS, S as toArchiveGroupsWithMedia, T as toNavItemViews, b as createMediaContext, j as MAX_PINNED_POSTS, k as FORMATS, m as defaultFeedRenderer, t as createApp, w as toNavItemView, x as toArchiveGroups } from "./app-CpmficmQ.js";
+import { S as time_exports, a as markdown_exports } from "./export-Ba7NJImL.js";
 import "./env-OHRKGcMj.js";
-import "./github-sync-2_T7nbOv.js";
+import "./github-sync-Cb4_6_i7.js";
 export { FORMATS, MAX_MEDIA_ATTACHMENTS, MAX_PINNED_POSTS, MEDIA_KINDS, NAV_ITEM_TYPES, SORT_ORDERS, STATUSES, TEXT_ATTACHMENT_CONTENT_FORMATS, createApp, createMediaContext, defaultFeedRenderer, markdown_exports as markdown, time_exports as time, toArchiveGroups, toArchiveGroupsWithMedia, toMediaView, toNavItemView, toNavItemViews, toPostView, toPostViews, toSearchResultView, url_exports as url };

package/dist/node.js

@@ -1,8 +1,8 @@
 import "./url-BMYO-Zlt.js";
-import { B as isAssetPath, L as buildThemeStyle, R as BUILTIN_COLOR_THEMES, _ as sqliteSchemaBundle, a as resolveDatabaseDialect, c as getWebhookUrl, d as BUILTIN_FONT_THEMES, f as getCjkSerifCssVariables, g as pgSchemaBundle, h as createStorageDriver, i as createSiteService, l as setMyCommands, n as createNodeCliRuntime, o as getHostBasedStartupConfigurationIssues, p as getFontThemeCssVariables, r as createNodeRequestRuntime, s as resolveConfig, t as createApp, u as setWebhook, v as createNodeDatabase, y as schema_exports, z as getPublicAssetBasePath } from "./app-CGHkOdme.js";
-import { t as createExportService } from "./export-DY1v5Iqu.js";
+import { B as isAssetPath, L as buildThemeStyle, R as BUILTIN_COLOR_THEMES, _ as sqliteSchemaBundle, a as resolveDatabaseDialect, c as getWebhookUrl, d as BUILTIN_FONT_THEMES, f as getCjkSerifCssVariables, g as pgSchemaBundle, h as createStorageDriver, i as createSiteService, l as setMyCommands, n as createNodeCliRuntime, o as getHostBasedStartupConfigurationIssues, p as getFontThemeCssVariables, r as createNodeRequestRuntime, s as resolveConfig, t as createApp, u as setWebhook, v as createNodeDatabase, y as schema_exports, z as getPublicAssetBasePath } from "./app-CpmficmQ.js";
+import { t as createExportService } from "./export-Ba7NJImL.js";
 import { C as shouldTrustProxy, S as getTelegramWebhookSecret, b as getSiteResolutionMode, d as getHostedControlPlaneBaseUrl, i as getConfiguredSingleSitePathPrefix, l as getEnvString, r as getConfiguredSingleSiteOrigin, x as getTelegramBotPool, y as getPort } from "./env-OHRKGcMj.js";
-import "./github-sync-2_T7nbOv.js";
+import "./github-sync-Cb4_6_i7.js";
 import { drizzle } from "drizzle-orm/better-sqlite3";
 import { serve } from "@hono/node-server";
 import Database from "better-sqlite3";
@@ -529,7 +529,7 @@ async function createNodeRequestHandler(options) {
 async function start(env = process.env, app) {
 	const handler = await createNodeRequestHandler({
 		env,
-		app: async () => app ?? (await import("./app-D24n0DoH.js")).createApp()
+		app: async () => app ?? (await import("./app-DqKkZenB.js")).createApp()
 	});
 	const hostname = resolveHost(env);
 	const port = resolvePort(env);

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@jant/core",
-  "version": "0.6.10",
+  "version": "0.6.11",
   "description": "A modern, open-source microblogging platform built on Cloudflare Workers",
   "type": "module",
   "exports": {

package/src/client/components/__tests__/jant-compose-editor-rehost-notice.test.ts

@@ -0,0 +1,62 @@
+// @vitest-environment happy-dom
+
+import { afterEach, beforeEach, describe, expect, it, vi } from "vitest";
+import type { Editor } from "@tiptap/core";
+import type { ComposeLabels } from "../compose-types.js";
+import "../jant-compose-editor.js";
+import type { JantComposeEditor } from "../jant-compose-editor.js";
+
+const labels = {
+  bodyPlaceholder: "What's on your mind...",
+  imageNotRehosted: "An image couldn't be saved — its original link was kept.",
+  imagesNotRehosted:
+    "{count} images couldn't be saved — their original links were kept.",
+} as unknown as ComposeLabels;
+
+function editorOf(el: JantComposeEditor): Editor {
+  const editor = (el as unknown as { _editor?: Editor | null })._editor;
+  if (!editor) throw new Error("expected compose editor instance");
+  return editor;
+}
+
+const wait = (ms: number) => new Promise((resolve) => setTimeout(resolve, ms));
+
+beforeEach(() => {
+  const container = document.createElement("div");
+  container.id = "toast-container";
+  document.body.appendChild(container);
+});
+
+afterEach(() => {
+  document.body.innerHTML = "";
+  vi.restoreAllMocks();
+});
+
+describe("compose editor: rehost failure notice", () => {
+  it("shows an error toast when a pasted remote image can't be rehosted", async () => {
+    // Server rejects the sideload (e.g. host hotlink protection).
+    vi.stubGlobal(
+      "fetch",
+      vi.fn(async () => new Response("blocked", { status: 403 })),
+    );
+
+    const el = document.createElement(
+      "jant-compose-editor",
+    ) as JantComposeEditor;
+    el.format = "note";
+    el.labels = labels;
+    document.body.appendChild(el);
+    await el.updateComplete;
+
+    editorOf(el).commands.setImage({ src: "https://ext.example/blocked.png" });
+
+    // Let the rehost fire, the sideload fail, then the debounce window elapse.
+    await wait(50);
+    await wait(900);
+
+    const toast = document.querySelector("#toast-container .toast");
+    expect(toast).not.toBeNull();
+    expect(toast?.className).toContain("toast-error");
+    expect(toast?.textContent ?? "").toContain("couldn't be saved");
+  });
+});

package/src/client/components/compose-types.ts

@@ -145,6 +145,10 @@ export interface ComposeLabels {
   addMore: string;
   removeAttachment: string;
   uploading: string;
+  /** Toast when exactly one pasted remote image couldn't be rehosted. */
+  imageNotRehosted?: string;
+  /** Toast when several pasted remote images couldn't be rehosted (uses a {count} placeholder). */
+  imagesNotRehosted?: string;
   loadingPost: string;
   loadPostFailed: string;
   published: string;

package/src/client/components/jant-compose-editor.ts

@@ -46,7 +46,11 @@ import { createTiptapEditor } from "../tiptap/create-editor.js";
 import {
   uploadAndInsertInlineImage,
   adoptPendingInlineImageUploads,
+  rehostInlineImage,
+  sideloadImage,
 } from "../tiptap/inline-image-upload.js";
+import { clearRehostInFlight } from "../tiptap/rehost-images.js";
+import { uploadWithMetadata } from "../upload-with-metadata.js";
 import { getClipboardFiles } from "../tiptap/paste-media.js";
 import { isSafeAbsoluteUrl } from "../../lib/url.js";
 import { randomUUID } from "../random-uuid.js";
@@ -247,6 +251,8 @@ export class JantComposeEditor extends LitElement {
   private _suppressContentChangedOnce = false;
   #inlineImageUploadGeneration = 0;
   #inlineImageUploadPromises = new Set<Promise<void>>();
+  #rehostFailureCount = 0;
+  #rehostFailureNoticeTimer: ReturnType<typeof setTimeout> | undefined;
   #sortable: { destroy(): void } | null = null;
   #revertNextSibling: globalThis.Node | null = null;
 
@@ -429,6 +435,102 @@ export class JantComposeEditor extends LitElement {
     return uploadPromise;
   }
 
+  /**
+   * Decide whether a pasted image node's `src` should be rehosted into our own
+   * storage. Skips images that are already ours (same-origin or on the
+   * configured media CDN), relative paths, and `blob:` placeholders (handled by
+   * the insert flow). Remote `http(s)` and inline `data:` srcs are rehosted.
+   */
+  #shouldRehostSrc(src: string): boolean {
+    if (src.startsWith("data:")) return true;
+    if (!/^https?:\/\//i.test(src)) return false;
+    let origin: string;
+    try {
+      origin = new URL(src).origin;
+    } catch {
+      return false;
+    }
+    if (origin === window.location.origin) return false;
+    const mediaBase = document.documentElement.dataset.mediaBase;
+    if (mediaBase && src.startsWith(mediaBase)) return false;
+    return true;
+  }
+
+  /**
+   * Rehost a pasted inline image into our storage and swap its `src`. Remote
+   * URLs go through the server sideload endpoint (bypasses CORS); `data:` URLs
+   * are decoded locally and run through the normal client upload pipeline
+   * (gaining WebP/resize/blurhash). Tracked like other inline uploads so submit
+   * waits for it; failures leave the node with its original src.
+   */
+  #rehostInlineImage(src: string) {
+    const editor = this._editor;
+    if (!editor) {
+      clearRehostInFlight(src);
+      return;
+    }
+
+    const resolver = src.startsWith("data:")
+      ? async () => {
+          const blob = await (await fetch(src)).blob();
+          const file = new File([blob], "pasted-image", {
+            type: blob.type || "image/png",
+          });
+          return (await uploadWithMetadata(file)).url;
+        }
+      : async () => (await sideloadImage(src)).url;
+
+    // Surface failures so a blocked rehost (e.g. a host's hotlink protection)
+    // isn't silent — the node keeps its original link, but the author is told.
+    const trackedResolver = async () => {
+      try {
+        return await resolver();
+      } catch (error) {
+        this.#noteRehostFailure();
+        throw error;
+      }
+    };
+
+    const generation = this.#inlineImageUploadGeneration;
+    const rehostPromise = rehostInlineImage(
+      editor,
+      src,
+      trackedResolver,
+    ).finally(() => {
+      clearRehostInFlight(src);
+      if (generation !== this.#inlineImageUploadGeneration) return;
+      this.#inlineImageUploadPromises.delete(rehostPromise);
+    });
+    this.#inlineImageUploadPromises.add(rehostPromise);
+  }
+
+  /** Count a failed rehost and debounce a single batched notice. */
+  #noteRehostFailure() {
+    this.#rehostFailureCount += 1;
+    if (this.#rehostFailureNoticeTimer !== undefined) return;
+    this.#rehostFailureNoticeTimer = setTimeout(() => {
+      this.#flushRehostFailureNotice();
+    }, 800);
+  }
+
+  /** Show one toast summarizing all rehost failures collected in the window. */
+  #flushRehostFailureNotice() {
+    this.#rehostFailureNoticeTimer = undefined;
+    const count = this.#rehostFailureCount;
+    this.#rehostFailureCount = 0;
+    if (count <= 0 || !this.isConnected) return;
+
+    const message =
+      count === 1
+        ? (this.labels.imageNotRehosted ??
+          "An image couldn't be saved to your library — its original link was kept.")
+        : (
+            this.labels.imagesNotRehosted ??
+            "{count} images couldn't be saved to your library — their original links were kept."
+          ).replace("{count}", String(count));
+    showToast(message, "error");
+  }
+
   hasPendingInlineImageUploads(): boolean {
     return this.#inlineImageUploadPromises.size > 0;
   }
@@ -446,6 +548,11 @@ export class JantComposeEditor extends LitElement {
   #clearPendingInlineImageUploads() {
     this.#inlineImageUploadGeneration += 1;
     this.#inlineImageUploadPromises.clear();
+    if (this.#rehostFailureNoticeTimer !== undefined) {
+      clearTimeout(this.#rehostFailureNoticeTimer);
+      this.#rehostFailureNoticeTimer = undefined;
+    }
+    this.#rehostFailureCount = 0;
   }
 
   /** Adopt in-flight inline image uploads from another editor (e.g. fullscreen). */
@@ -824,6 +931,10 @@ export class JantComposeEditor extends LitElement {
           this.addFiles(files);
         },
       },
+      rehostImages: {
+        shouldRehost: (src) => this.#shouldRehostSrc(src),
+        rehost: (src) => this.#rehostInlineImage(src),
+      },
     });
     this._lastEditorSelection = this._readEditorSelection();
 

package/src/client/compose-bridge.ts

@@ -32,7 +32,23 @@ import { uploadViaSession } from "./upload-session.js";
 import { publicPath } from "./runtime-paths.js";
 import { tiptapJsonToMarkdown } from "../lib/tiptap-to-markdown.js";
 import { getMediaCategory } from "../lib/upload.js";
-import { resolveInlineImageUrls } from "./tiptap/inline-image-upload.js";
+import {
+  resolveInlineImageUrls,
+  hasPendingInlineImagePlaceholders,
+} from "./tiptap/inline-image-upload.js";
+
+/**
+ * Whether a serialized post body still references inline image placeholders
+ * pending upload or paste-rehost. Drives the "uploading" toast and whether to
+ * resolve placeholders before submit.
+ */
+function bodyHasPendingInline(body: string): boolean {
+  try {
+    return hasPendingInlineImagePlaceholders(JSON.parse(body));
+  } catch {
+    return false;
+  }
+}
 
 function getComposeEditorFromEventTarget(
   target: globalThis.EventTarget | null,
@@ -679,10 +695,10 @@ document.addEventListener("jant:compose-submit-deferred", async (e: Event) => {
   // Get labels for toast messages
   const labels = composeEl?.labels;
   const uploadingMsg = labels?.uploading ?? "Uploading...";
-  const hasInlineBlobs = detail.threadPosts
-    ? detail.threadPosts.some((p) => p.body.includes('"blob:'))
-    : detail.body.includes('"blob:');
-  const hasPending = detail.pendingAttachments.length > 0 || hasInlineBlobs;
+  const hasInlinePending = detail.threadPosts
+    ? detail.threadPosts.some((p) => bodyHasPendingInline(p.body))
+    : bodyHasPendingInline(detail.body);
+  const hasPending = detail.pendingAttachments.length > 0 || hasInlinePending;
   const publishedMsg = labels?.published ?? "Published!";
   const viewLabel = labels?.view ?? "View";
 
@@ -831,7 +847,7 @@ document.addEventListener("jant:compose-submit-deferred", async (e: Event) => {
       const resolvedPosts = await Promise.all(
         threadPosts.map(async (post) => {
           let body = post.body;
-          if (body.includes('"blob:')) {
+          if (bodyHasPendingInline(body)) {
             try {
               const bodyJson = JSON.parse(body);
               const resolved = await resolveInlineImageUrls(bodyJson);
@@ -940,8 +956,9 @@ document.addEventListener("jant:compose-submit-deferred", async (e: Event) => {
       mediaClientIdMap,
     );
 
-    // Resolve any blob: inline image URLs to real URLs before submitting
-    if (hasInlineBlobs) {
+    // Resolve any pending inline image placeholders (blob upload + paste rehost)
+    // to their stored URLs before submitting.
+    if (hasInlinePending) {
       try {
         const bodyJson = JSON.parse(detail.body);
         const resolved = await resolveInlineImageUrls(bodyJson);