@lolyjs/core 0.3.0-alpha.5 → 0.3.0-alpha.6

package/dist/cli.cjs

@@ -9953,7 +9953,7 @@ var require_built3 = __commonJS({
 });
 
 // modules/cli/index.ts
-var import_path37 = __toESM(require("path"));
+var import_path40 = __toESM(require("path"));
 var import_process = __toESM(require("process"));
 
 // modules/build/index.ts
@@ -11742,6 +11742,7 @@ async function processRewrites(urlPath, compiledRewrites, req) {
   const normalizedPath = urlPath.replace(/\/$/, "") || "/";
   if (normalizedPath.startsWith("/static/") || // Static assets (client.js, client.css, etc.)
   normalizedPath.startsWith("/__fw/") || // Framework internal routes (hot reload, etc.)
+  normalizedPath.startsWith("/_loly/") || // Framework internal routes (image optimization, etc.)
   normalizedPath === "/favicon.ico" || // Favicon
   normalizedPath.startsWith("/wss/")) {
     if (process.env.NODE_ENV === "development") {
@@ -13175,12 +13176,12 @@ var DEFAULT_IGNORED_PATHS = [
   /^\/sockjs-node/
   // Hot reload websocket
 ];
-function shouldIgnorePath(path34, ignoredPaths) {
+function shouldIgnorePath(path37, ignoredPaths) {
   return ignoredPaths.some((pattern) => {
     if (typeof pattern === "string") {
-      return path34 === pattern || path34.startsWith(pattern);
+      return path37 === pattern || path37.startsWith(pattern);
     }
-    return pattern.test(path34);
+    return pattern.test(path37);
   });
 }
 function requestLoggerMiddleware(options = {}) {
@@ -15143,7 +15144,20 @@ var DEFAULT_CONFIG2 = {
     ssr: true,
     ssg: true
   },
-  plugins: []
+  plugins: [],
+  images: {
+    remotePatterns: [],
+    domains: [],
+    deviceSizes: [640, 750, 828, 1080, 1200, 1920, 2048, 3840],
+    imageSizes: [16, 32, 48, 64, 96, 128, 256, 384],
+    formats: ["image/webp", "image/avif"],
+    quality: 75,
+    minimumCacheTTL: 60,
+    dangerouslyAllowSVG: false,
+    contentSecurityPolicy: "default-src 'self'; script-src 'none'; sandbox;",
+    maxWidth: 3840,
+    maxHeight: 3840
+  }
 };
 function deepMerge(target, source) {
   const result = { ...target };
@@ -15260,6 +15274,53 @@ function validateConfig(config, projectRoot) {
   if (typeof config.rendering.ssg !== "boolean") {
     errors.push("config.rendering.ssg must be a boolean");
   }
+  if (config.images) {
+    if (config.images.quality !== void 0) {
+      if (typeof config.images.quality !== "number" || config.images.quality < 1 || config.images.quality > 100) {
+        errors.push("config.images.quality must be a number between 1 and 100");
+      }
+    }
+    if (config.images.minimumCacheTTL !== void 0) {
+      if (typeof config.images.minimumCacheTTL !== "number" || config.images.minimumCacheTTL < 0) {
+        errors.push("config.images.minimumCacheTTL must be a non-negative number");
+      }
+    }
+    if (config.images.deviceSizes) {
+      if (!Array.isArray(config.images.deviceSizes) || config.images.deviceSizes.some((s) => typeof s !== "number" || s <= 0)) {
+        errors.push("config.images.deviceSizes must be an array of positive numbers");
+      }
+    }
+    if (config.images.imageSizes) {
+      if (!Array.isArray(config.images.imageSizes) || config.images.imageSizes.some((s) => typeof s !== "number" || s <= 0)) {
+        errors.push("config.images.imageSizes must be an array of positive numbers");
+      }
+    }
+    if (config.images.formats) {
+      const validFormats = ["image/webp", "image/avif"];
+      if (!Array.isArray(config.images.formats) || config.images.formats.some((f) => !validFormats.includes(f))) {
+        errors.push(`config.images.formats must be an array containing only: ${validFormats.join(", ")}`);
+      }
+    }
+    if (config.images.remotePatterns) {
+      if (!Array.isArray(config.images.remotePatterns)) {
+        errors.push("config.images.remotePatterns must be an array");
+      } else {
+        config.images.remotePatterns.forEach((pattern, idx) => {
+          if (!pattern.hostname || typeof pattern.hostname !== "string") {
+            errors.push(`config.images.remotePatterns[${idx}].hostname must be a non-empty string`);
+          }
+          if (pattern.protocol && !["http", "https"].includes(pattern.protocol)) {
+            errors.push(`config.images.remotePatterns[${idx}].protocol must be 'http' or 'https'`);
+          }
+        });
+      }
+    }
+    if (config.images.domains) {
+      if (!Array.isArray(config.images.domains) || config.images.domains.some((d) => typeof d !== "string")) {
+        errors.push("config.images.domains must be an array of strings");
+      }
+    }
+  }
   if (errors.length > 0) {
     const errorMessage = [
       "\u274C Configuration validation failed:",
@@ -15393,8 +15454,8 @@ async function buildApp(options = {}) {
 }
 
 // src/server.ts
-var import_fs26 = __toESM(require("fs"));
-var import_path36 = __toESM(require("path"));
+var import_fs28 = __toESM(require("fs"));
+var import_path39 = __toESM(require("path"));
 
 // modules/server/setup.ts
 var import_express = __toESM(require("express"));
@@ -15477,7 +15538,7 @@ var ReaddirpStream = class extends import_node_stream.Readable {
     this._directoryFilter = normalizeFilter(opts.directoryFilter);
     const statMethod = opts.lstat ? import_promises.lstat : import_promises.stat;
     if (wantBigintFsStats) {
-      this._stat = (path34) => statMethod(path34, { bigint: true });
+      this._stat = (path37) => statMethod(path37, { bigint: true });
     } else {
       this._stat = statMethod;
     }
@@ -15502,8 +15563,8 @@ var ReaddirpStream = class extends import_node_stream.Readable {
         const par = this.parent;
         const fil = par && par.files;
         if (fil && fil.length > 0) {
-          const { path: path34, depth } = par;
-          const slice = fil.splice(0, batch).map((dirent) => this._formatEntry(dirent, path34));
+          const { path: path37, depth } = par;
+          const slice = fil.splice(0, batch).map((dirent) => this._formatEntry(dirent, path37));
           const awaited = await Promise.all(slice);
           for (const entry of awaited) {
             if (!entry)
@@ -15543,20 +15604,20 @@ var ReaddirpStream = class extends import_node_stream.Readable {
       this.reading = false;
     }
   }
-  async _exploreDir(path34, depth) {
+  async _exploreDir(path37, depth) {
     let files;
     try {
-      files = await (0, import_promises.readdir)(path34, this._rdOptions);
+      files = await (0, import_promises.readdir)(path37, this._rdOptions);
     } catch (error) {
       this._onError(error);
     }
-    return { files, depth, path: path34 };
+    return { files, depth, path: path37 };
   }
-  async _formatEntry(dirent, path34) {
+  async _formatEntry(dirent, path37) {
     let entry;
     const basename3 = this._isDirent ? dirent.name : dirent;
     try {
-      const fullPath = (0, import_node_path.resolve)((0, import_node_path.join)(path34, basename3));
+      const fullPath = (0, import_node_path.resolve)((0, import_node_path.join)(path37, basename3));
       entry = { path: (0, import_node_path.relative)(this._root, fullPath), fullPath, basename: basename3 };
       entry[this._statsProp] = this._isDirent ? dirent : await this._stat(fullPath);
     } catch (err) {
@@ -15956,16 +16017,16 @@ var delFromSet = (main, prop, item) => {
 };
 var isEmptySet = (val) => val instanceof Set ? val.size === 0 : !val;
 var FsWatchInstances = /* @__PURE__ */ new Map();
-function createFsWatchInstance(path34, options, listener, errHandler, emitRaw) {
+function createFsWatchInstance(path37, options, listener, errHandler, emitRaw) {
   const handleEvent = (rawEvent, evPath) => {
-    listener(path34);
-    emitRaw(rawEvent, evPath, { watchedPath: path34 });
-    if (evPath && path34 !== evPath) {
-      fsWatchBroadcast(sysPath.resolve(path34, evPath), KEY_LISTENERS, sysPath.join(path34, evPath));
+    listener(path37);
+    emitRaw(rawEvent, evPath, { watchedPath: path37 });
+    if (evPath && path37 !== evPath) {
+      fsWatchBroadcast(sysPath.resolve(path37, evPath), KEY_LISTENERS, sysPath.join(path37, evPath));
     }
   };
   try {
-    return (0, import_fs23.watch)(path34, {
+    return (0, import_fs23.watch)(path37, {
       persistent: options.persistent
     }, handleEvent);
   } catch (error) {
@@ -15981,12 +16042,12 @@ var fsWatchBroadcast = (fullPath, listenerType, val1, val2, val3) => {
     listener(val1, val2, val3);
   });
 };
-var setFsWatchListener = (path34, fullPath, options, handlers) => {
+var setFsWatchListener = (path37, fullPath, options, handlers) => {
   const { listener, errHandler, rawEmitter } = handlers;
   let cont = FsWatchInstances.get(fullPath);
   let watcher;
   if (!options.persistent) {
-    watcher = createFsWatchInstance(path34, options, listener, errHandler, rawEmitter);
+    watcher = createFsWatchInstance(path37, options, listener, errHandler, rawEmitter);
     if (!watcher)
       return;
     return watcher.close.bind(watcher);
@@ -15997,7 +16058,7 @@ var setFsWatchListener = (path34, fullPath, options, handlers) => {
     addAndConvert(cont, KEY_RAW, rawEmitter);
   } else {
     watcher = createFsWatchInstance(
-      path34,
+      path37,
       options,
       fsWatchBroadcast.bind(null, fullPath, KEY_LISTENERS),
       errHandler,
@@ -16012,7 +16073,7 @@ var setFsWatchListener = (path34, fullPath, options, handlers) => {
         cont.watcherUnusable = true;
       if (isWindows && error.code === "EPERM") {
         try {
-          const fd = await (0, import_promises2.open)(path34, "r");
+          const fd = await (0, import_promises2.open)(path37, "r");
           await fd.close();
           broadcastErr(error);
         } catch (err) {
@@ -16043,7 +16104,7 @@ var setFsWatchListener = (path34, fullPath, options, handlers) => {
   };
 };
 var FsWatchFileInstances = /* @__PURE__ */ new Map();
-var setFsWatchFileListener = (path34, fullPath, options, handlers) => {
+var setFsWatchFileListener = (path37, fullPath, options, handlers) => {
   const { listener, rawEmitter } = handlers;
   let cont = FsWatchFileInstances.get(fullPath);
   const copts = cont && cont.options;
@@ -16065,7 +16126,7 @@ var setFsWatchFileListener = (path34, fullPath, options, handlers) => {
         });
         const currmtime = curr.mtimeMs;
         if (curr.size !== prev.size || currmtime > prev.mtimeMs || currmtime === 0) {
-          foreach(cont.listeners, (listener2) => listener2(path34, curr));
+          foreach(cont.listeners, (listener2) => listener2(path37, curr));
         }
       })
     };
@@ -16093,13 +16154,13 @@ var NodeFsHandler = class {
    * @param listener on fs change
    * @returns closer for the watcher instance
    */
-  _watchWithNodeFs(path34, listener) {
+  _watchWithNodeFs(path37, listener) {
     const opts = this.fsw.options;
-    const directory = sysPath.dirname(path34);
-    const basename3 = sysPath.basename(path34);
+    const directory = sysPath.dirname(path37);
+    const basename3 = sysPath.basename(path37);
     const parent = this.fsw._getWatchedDir(directory);
     parent.add(basename3);
-    const absolutePath = sysPath.resolve(path34);
+    const absolutePath = sysPath.resolve(path37);
     const options = {
       persistent: opts.persistent
     };
@@ -16109,12 +16170,12 @@ var NodeFsHandler = class {
     if (opts.usePolling) {
       const enableBin = opts.interval !== opts.binaryInterval;
       options.interval = enableBin && isBinaryPath(basename3) ? opts.binaryInterval : opts.interval;
-      closer = setFsWatchFileListener(path34, absolutePath, options, {
+      closer = setFsWatchFileListener(path37, absolutePath, options, {
         listener,
         rawEmitter: this.fsw._emitRaw
       });
     } else {
-      closer = setFsWatchListener(path34, absolutePath, options, {
+      closer = setFsWatchListener(path37, absolutePath, options, {
         listener,
         errHandler: this._boundHandleError,
         rawEmitter: this.fsw._emitRaw
@@ -16136,7 +16197,7 @@ var NodeFsHandler = class {
     let prevStats = stats;
     if (parent.has(basename3))
       return;
-    const listener = async (path34, newStats) => {
+    const listener = async (path37, newStats) => {
       if (!this.fsw._throttle(THROTTLE_MODE_WATCH, file, 5))
         return;
       if (!newStats || newStats.mtimeMs === 0) {
@@ -16150,11 +16211,11 @@ var NodeFsHandler = class {
             this.fsw._emit(EV.CHANGE, file, newStats2);
           }
           if ((isMacos || isLinux || isFreeBSD) && prevStats.ino !== newStats2.ino) {
-            this.fsw._closeFile(path34);
+            this.fsw._closeFile(path37);
             prevStats = newStats2;
             const closer2 = this._watchWithNodeFs(file, listener);
             if (closer2)
-              this.fsw._addPathCloser(path34, closer2);
+              this.fsw._addPathCloser(path37, closer2);
           } else {
             prevStats = newStats2;
           }
@@ -16186,7 +16247,7 @@ var NodeFsHandler = class {
    * @param item basename of this item
    * @returns true if no more processing is needed for this entry.
    */
-  async _handleSymlink(entry, directory, path34, item) {
+  async _handleSymlink(entry, directory, path37, item) {
     if (this.fsw.closed) {
       return;
     }
@@ -16196,7 +16257,7 @@ var NodeFsHandler = class {
       this.fsw._incrReadyCount();
       let linkPath;
       try {
-        linkPath = await (0, import_promises2.realpath)(path34);
+        linkPath = await (0, import_promises2.realpath)(path37);
       } catch (e) {
         this.fsw._emitReady();
         return true;
@@ -16206,12 +16267,12 @@ var NodeFsHandler = class {
       if (dir.has(item)) {
         if (this.fsw._symlinkPaths.get(full) !== linkPath) {
           this.fsw._symlinkPaths.set(full, linkPath);
-          this.fsw._emit(EV.CHANGE, path34, entry.stats);
+          this.fsw._emit(EV.CHANGE, path37, entry.stats);
         }
       } else {
         dir.add(item);
         this.fsw._symlinkPaths.set(full, linkPath);
-        this.fsw._emit(EV.ADD, path34, entry.stats);
+        this.fsw._emit(EV.ADD, path37, entry.stats);
       }
       this.fsw._emitReady();
       return true;
@@ -16240,9 +16301,9 @@ var NodeFsHandler = class {
         return;
       }
       const item = entry.path;
-      let path34 = sysPath.join(directory, item);
+      let path37 = sysPath.join(directory, item);
       current.add(item);
-      if (entry.stats.isSymbolicLink() && await this._handleSymlink(entry, directory, path34, item)) {
+      if (entry.stats.isSymbolicLink() && await this._handleSymlink(entry, directory, path37, item)) {
         return;
       }
       if (this.fsw.closed) {
@@ -16251,8 +16312,8 @@ var NodeFsHandler = class {
       }
       if (item === target || !target && !previous.has(item)) {
         this.fsw._incrReadyCount();
-        path34 = sysPath.join(dir, sysPath.relative(dir, path34));
-        this._addToNodeFs(path34, initialAdd, wh, depth + 1);
+        path37 = sysPath.join(dir, sysPath.relative(dir, path37));
+        this._addToNodeFs(path37, initialAdd, wh, depth + 1);
       }
     }).on(EV.ERROR, this._boundHandleError);
     return new Promise((resolve3, reject) => {
@@ -16321,13 +16382,13 @@ var NodeFsHandler = class {
    * @param depth Child path actually targeted for watch
    * @param target Child path actually targeted for watch
    */
-  async _addToNodeFs(path34, initialAdd, priorWh, depth, target) {
+  async _addToNodeFs(path37, initialAdd, priorWh, depth, target) {
     const ready = this.fsw._emitReady;
-    if (this.fsw._isIgnored(path34) || this.fsw.closed) {
+    if (this.fsw._isIgnored(path37) || this.fsw.closed) {
       ready();
       return false;
     }
-    const wh = this.fsw._getWatchHelpers(path34);
+    const wh = this.fsw._getWatchHelpers(path37);
     if (priorWh) {
       wh.filterPath = (entry) => priorWh.filterPath(entry);
       wh.filterDir = (entry) => priorWh.filterDir(entry);
@@ -16343,8 +16404,8 @@ var NodeFsHandler = class {
       const follow = this.fsw.options.followSymlinks;
       let closer;
       if (stats.isDirectory()) {
-        const absPath = sysPath.resolve(path34);
-        const targetPath = follow ? await (0, import_promises2.realpath)(path34) : path34;
+        const absPath = sysPath.resolve(path37);
+        const targetPath = follow ? await (0, import_promises2.realpath)(path37) : path37;
         if (this.fsw.closed)
           return;
         closer = await this._handleDir(wh.watchPath, stats, initialAdd, depth, target, wh, targetPath);
@@ -16354,29 +16415,29 @@ var NodeFsHandler = class {
           this.fsw._symlinkPaths.set(absPath, targetPath);
         }
       } else if (stats.isSymbolicLink()) {
-        const targetPath = follow ? await (0, import_promises2.realpath)(path34) : path34;
+        const targetPath = follow ? await (0, import_promises2.realpath)(path37) : path37;
         if (this.fsw.closed)
           return;
         const parent = sysPath.dirname(wh.watchPath);
         this.fsw._getWatchedDir(parent).add(wh.watchPath);
         this.fsw._emit(EV.ADD, wh.watchPath, stats);
-        closer = await this._handleDir(parent, stats, initialAdd, depth, path34, wh, targetPath);
+        closer = await this._handleDir(parent, stats, initialAdd, depth, path37, wh, targetPath);
         if (this.fsw.closed)
           return;
         if (targetPath !== void 0) {
-          this.fsw._symlinkPaths.set(sysPath.resolve(path34), targetPath);
+          this.fsw._symlinkPaths.set(sysPath.resolve(path37), targetPath);
         }
       } else {
         closer = this._handleFile(wh.watchPath, stats, initialAdd);
       }
       ready();
       if (closer)
-        this.fsw._addPathCloser(path34, closer);
+        this.fsw._addPathCloser(path37, closer);
       return false;
     } catch (error) {
       if (this.fsw._handleError(error)) {
         ready();
-        return path34;
+        return path37;
       }
     }
   }
@@ -16419,26 +16480,26 @@ function createPattern(matcher) {
   }
   return () => false;
 }
-function normalizePath(path34) {
-  if (typeof path34 !== "string")
+function normalizePath(path37) {
+  if (typeof path37 !== "string")
     throw new Error("string expected");
-  path34 = sysPath2.normalize(path34);
-  path34 = path34.replace(/\\/g, "/");
+  path37 = sysPath2.normalize(path37);
+  path37 = path37.replace(/\\/g, "/");
   let prepend = false;
-  if (path34.startsWith("//"))
+  if (path37.startsWith("//"))
     prepend = true;
   const DOUBLE_SLASH_RE2 = /\/\//;
-  while (path34.match(DOUBLE_SLASH_RE2))
-    path34 = path34.replace(DOUBLE_SLASH_RE2, "/");
+  while (path37.match(DOUBLE_SLASH_RE2))
+    path37 = path37.replace(DOUBLE_SLASH_RE2, "/");
   if (prepend)
-    path34 = "/" + path34;
-  return path34;
+    path37 = "/" + path37;
+  return path37;
 }
 function matchPatterns(patterns, testString, stats) {
-  const path34 = normalizePath(testString);
+  const path37 = normalizePath(testString);
   for (let index = 0; index < patterns.length; index++) {
     const pattern = patterns[index];
-    if (pattern(path34, stats)) {
+    if (pattern(path37, stats)) {
       return true;
     }
   }
@@ -16478,19 +16539,19 @@ var toUnix = (string) => {
   }
   return str;
 };
-var normalizePathToUnix = (path34) => toUnix(sysPath2.normalize(toUnix(path34)));
-var normalizeIgnored = (cwd = "") => (path34) => {
-  if (typeof path34 === "string") {
-    return normalizePathToUnix(sysPath2.isAbsolute(path34) ? path34 : sysPath2.join(cwd, path34));
+var normalizePathToUnix = (path37) => toUnix(sysPath2.normalize(toUnix(path37)));
+var normalizeIgnored = (cwd = "") => (path37) => {
+  if (typeof path37 === "string") {
+    return normalizePathToUnix(sysPath2.isAbsolute(path37) ? path37 : sysPath2.join(cwd, path37));
   } else {
-    return path34;
+    return path37;
   }
 };
-var getAbsolutePath = (path34, cwd) => {
-  if (sysPath2.isAbsolute(path34)) {
-    return path34;
+var getAbsolutePath = (path37, cwd) => {
+  if (sysPath2.isAbsolute(path37)) {
+    return path37;
   }
-  return sysPath2.join(cwd, path34);
+  return sysPath2.join(cwd, path37);
 };
 var EMPTY_SET = Object.freeze(/* @__PURE__ */ new Set());
 var DirEntry = class {
@@ -16545,10 +16606,10 @@ var DirEntry = class {
 var STAT_METHOD_F = "stat";
 var STAT_METHOD_L = "lstat";
 var WatchHelper = class {
-  constructor(path34, follow, fsw) {
+  constructor(path37, follow, fsw) {
     this.fsw = fsw;
-    const watchPath = path34;
-    this.path = path34 = path34.replace(REPLACER_RE, "");
+    const watchPath = path37;
+    this.path = path37 = path37.replace(REPLACER_RE, "");
     this.watchPath = watchPath;
     this.fullWatchPath = sysPath2.resolve(watchPath);
     this.dirParts = [];
@@ -16670,20 +16731,20 @@ var FSWatcher = class extends import_events.EventEmitter {
     this._closePromise = void 0;
     let paths = unifyPaths(paths_);
     if (cwd) {
-      paths = paths.map((path34) => {
-        const absPath = getAbsolutePath(path34, cwd);
+      paths = paths.map((path37) => {
+        const absPath = getAbsolutePath(path37, cwd);
         return absPath;
       });
     }
-    paths.forEach((path34) => {
-      this._removeIgnoredPath(path34);
+    paths.forEach((path37) => {
+      this._removeIgnoredPath(path37);
     });
     this._userIgnored = void 0;
     if (!this._readyCount)
       this._readyCount = 0;
     this._readyCount += paths.length;
-    Promise.all(paths.map(async (path34) => {
-      const res = await this._nodeFsHandler._addToNodeFs(path34, !_internal, void 0, 0, _origAdd);
+    Promise.all(paths.map(async (path37) => {
+      const res = await this._nodeFsHandler._addToNodeFs(path37, !_internal, void 0, 0, _origAdd);
       if (res)
         this._emitReady();
       return res;
@@ -16705,17 +16766,17 @@ var FSWatcher = class extends import_events.EventEmitter {
       return this;
     const paths = unifyPaths(paths_);
     const { cwd } = this.options;
-    paths.forEach((path34) => {
-      if (!sysPath2.isAbsolute(path34) && !this._closers.has(path34)) {
+    paths.forEach((path37) => {
+      if (!sysPath2.isAbsolute(path37) && !this._closers.has(path37)) {
         if (cwd)
-          path34 = sysPath2.join(cwd, path34);
-        path34 = sysPath2.resolve(path34);
+          path37 = sysPath2.join(cwd, path37);
+        path37 = sysPath2.resolve(path37);
       }
-      this._closePath(path34);
-      this._addIgnoredPath(path34);
-      if (this._watched.has(path34)) {
+      this._closePath(path37);
+      this._addIgnoredPath(path37);
+      if (this._watched.has(path37)) {
         this._addIgnoredPath({
-          path: path34,
+          path: path37,
           recursive: true
         });
       }
@@ -16779,38 +16840,38 @@ var FSWatcher = class extends import_events.EventEmitter {
    * @param stats arguments to be passed with event
    * @returns the error if defined, otherwise the value of the FSWatcher instance's `closed` flag
    */
-  async _emit(event, path34, stats) {
+  async _emit(event, path37, stats) {
     if (this.closed)
       return;
     const opts = this.options;
     if (isWindows)
-      path34 = sysPath2.normalize(path34);
+      path37 = sysPath2.normalize(path37);
     if (opts.cwd)
-      path34 = sysPath2.relative(opts.cwd, path34);
-    const args = [path34];
+      path37 = sysPath2.relative(opts.cwd, path37);
+    const args = [path37];
     if (stats != null)
       args.push(stats);
     const awf = opts.awaitWriteFinish;
     let pw;
-    if (awf && (pw = this._pendingWrites.get(path34))) {
+    if (awf && (pw = this._pendingWrites.get(path37))) {
       pw.lastChange = /* @__PURE__ */ new Date();
       return this;
     }
     if (opts.atomic) {
       if (event === EVENTS.UNLINK) {
-        this._pendingUnlinks.set(path34, [event, ...args]);
+        this._pendingUnlinks.set(path37, [event, ...args]);
         setTimeout(() => {
-          this._pendingUnlinks.forEach((entry, path35) => {
+          this._pendingUnlinks.forEach((entry, path38) => {
             this.emit(...entry);
             this.emit(EVENTS.ALL, ...entry);
-            this._pendingUnlinks.delete(path35);
+            this._pendingUnlinks.delete(path38);
           });
         }, typeof opts.atomic === "number" ? opts.atomic : 100);
         return this;
       }
-      if (event === EVENTS.ADD && this._pendingUnlinks.has(path34)) {
+      if (event === EVENTS.ADD && this._pendingUnlinks.has(path37)) {
         event = EVENTS.CHANGE;
-        this._pendingUnlinks.delete(path34);
+        this._pendingUnlinks.delete(path37);
       }
     }
     if (awf && (event === EVENTS.ADD || event === EVENTS.CHANGE) && this._readyEmitted) {
@@ -16828,16 +16889,16 @@ var FSWatcher = class extends import_events.EventEmitter {
           this.emitWithAll(event, args);
         }
       };
-      this._awaitWriteFinish(path34, awf.stabilityThreshold, event, awfEmit);
+      this._awaitWriteFinish(path37, awf.stabilityThreshold, event, awfEmit);
       return this;
     }
     if (event === EVENTS.CHANGE) {
-      const isThrottled = !this._throttle(EVENTS.CHANGE, path34, 50);
+      const isThrottled = !this._throttle(EVENTS.CHANGE, path37, 50);
       if (isThrottled)
         return this;
     }
     if (opts.alwaysStat && stats === void 0 && (event === EVENTS.ADD || event === EVENTS.ADD_DIR || event === EVENTS.CHANGE)) {
-      const fullPath = opts.cwd ? sysPath2.join(opts.cwd, path34) : path34;
+      const fullPath = opts.cwd ? sysPath2.join(opts.cwd, path37) : path37;
       let stats2;
       try {
         stats2 = await (0, import_promises3.stat)(fullPath);
@@ -16868,23 +16929,23 @@ var FSWatcher = class extends import_events.EventEmitter {
    * @param timeout duration of time to suppress duplicate actions
    * @returns tracking object or false if action should be suppressed
    */
-  _throttle(actionType, path34, timeout) {
+  _throttle(actionType, path37, timeout) {
     if (!this._throttled.has(actionType)) {
       this._throttled.set(actionType, /* @__PURE__ */ new Map());
     }
     const action = this._throttled.get(actionType);
     if (!action)
       throw new Error("invalid throttle");
-    const actionPath = action.get(path34);
+    const actionPath = action.get(path37);
     if (actionPath) {
       actionPath.count++;
       return false;
     }
     let timeoutObject;
     const clear = () => {
-      const item = action.get(path34);
+      const item = action.get(path37);
       const count = item ? item.count : 0;
-      action.delete(path34);
+      action.delete(path37);
       clearTimeout(timeoutObject);
       if (item)
         clearTimeout(item.timeoutObject);
@@ -16892,7 +16953,7 @@ var FSWatcher = class extends import_events.EventEmitter {
     };
     timeoutObject = setTimeout(clear, timeout);
     const thr = { timeoutObject, clear, count: 0 };
-    action.set(path34, thr);
+    action.set(path37, thr);
     return thr;
   }
   _incrReadyCount() {
@@ -16906,44 +16967,44 @@ var FSWatcher = class extends import_events.EventEmitter {
    * @param event
    * @param awfEmit Callback to be called when ready for event to be emitted.
    */
-  _awaitWriteFinish(path34, threshold, event, awfEmit) {
+  _awaitWriteFinish(path37, threshold, event, awfEmit) {
     const awf = this.options.awaitWriteFinish;
     if (typeof awf !== "object")
       return;
     const pollInterval = awf.pollInterval;
     let timeoutHandler;
-    let fullPath = path34;
-    if (this.options.cwd && !sysPath2.isAbsolute(path34)) {
-      fullPath = sysPath2.join(this.options.cwd, path34);
+    let fullPath = path37;
+    if (this.options.cwd && !sysPath2.isAbsolute(path37)) {
+      fullPath = sysPath2.join(this.options.cwd, path37);
     }
     const now = /* @__PURE__ */ new Date();
     const writes = this._pendingWrites;
     function awaitWriteFinishFn(prevStat) {
       (0, import_fs24.stat)(fullPath, (err, curStat) => {
-        if (err || !writes.has(path34)) {
+        if (err || !writes.has(path37)) {
           if (err && err.code !== "ENOENT")
             awfEmit(err);
           return;
         }
         const now2 = Number(/* @__PURE__ */ new Date());
         if (prevStat && curStat.size !== prevStat.size) {
-          writes.get(path34).lastChange = now2;
+          writes.get(path37).lastChange = now2;
         }
-        const pw = writes.get(path34);
+        const pw = writes.get(path37);
         const df = now2 - pw.lastChange;
         if (df >= threshold) {
-          writes.delete(path34);
+          writes.delete(path37);
           awfEmit(void 0, curStat);
         } else {
           timeoutHandler = setTimeout(awaitWriteFinishFn, pollInterval, curStat);
         }
       });
     }
-    if (!writes.has(path34)) {
-      writes.set(path34, {
+    if (!writes.has(path37)) {
+      writes.set(path37, {
         lastChange: now,
         cancelWait: () => {
-          writes.delete(path34);
+          writes.delete(path37);
           clearTimeout(timeoutHandler);
           return event;
         }
@@ -16954,8 +17015,8 @@ var FSWatcher = class extends import_events.EventEmitter {
   /**
    * Determines whether user has asked to ignore this path.
    */
-  _isIgnored(path34, stats) {
-    if (this.options.atomic && DOT_RE.test(path34))
+  _isIgnored(path37, stats) {
+    if (this.options.atomic && DOT_RE.test(path37))
       return true;
     if (!this._userIgnored) {
       const { cwd } = this.options;
@@ -16965,17 +17026,17 @@ var FSWatcher = class extends import_events.EventEmitter {
       const list = [...ignoredPaths.map(normalizeIgnored(cwd)), ...ignored];
       this._userIgnored = anymatch(list, void 0);
     }
-    return this._userIgnored(path34, stats);
+    return this._userIgnored(path37, stats);
   }
-  _isntIgnored(path34, stat4) {
-    return !this._isIgnored(path34, stat4);
+  _isntIgnored(path37, stat4) {
+    return !this._isIgnored(path37, stat4);
   }
   /**
    * Provides a set of common helpers and properties relating to symlink handling.
    * @param path file or directory pattern being watched
    */
-  _getWatchHelpers(path34) {
-    return new WatchHelper(path34, this.options.followSymlinks, this);
+  _getWatchHelpers(path37) {
+    return new WatchHelper(path37, this.options.followSymlinks, this);
   }
   // Directory helpers
   // -----------------
@@ -17007,63 +17068,63 @@ var FSWatcher = class extends import_events.EventEmitter {
    * @param item      base path of item/directory
    */
   _remove(directory, item, isDirectory) {
-    const path34 = sysPath2.join(directory, item);
-    const fullPath = sysPath2.resolve(path34);
-    isDirectory = isDirectory != null ? isDirectory : this._watched.has(path34) || this._watched.has(fullPath);
-    if (!this._throttle("remove", path34, 100))
+    const path37 = sysPath2.join(directory, item);
+    const fullPath = sysPath2.resolve(path37);
+    isDirectory = isDirectory != null ? isDirectory : this._watched.has(path37) || this._watched.has(fullPath);
+    if (!this._throttle("remove", path37, 100))
       return;
     if (!isDirectory && this._watched.size === 1) {
       this.add(directory, item, true);
     }
-    const wp = this._getWatchedDir(path34);
+    const wp = this._getWatchedDir(path37);
     const nestedDirectoryChildren = wp.getChildren();
-    nestedDirectoryChildren.forEach((nested) => this._remove(path34, nested));
+    nestedDirectoryChildren.forEach((nested) => this._remove(path37, nested));
     const parent = this._getWatchedDir(directory);
     const wasTracked = parent.has(item);
     parent.remove(item);
     if (this._symlinkPaths.has(fullPath)) {
       this._symlinkPaths.delete(fullPath);
     }
-    let relPath = path34;
+    let relPath = path37;
     if (this.options.cwd)
-      relPath = sysPath2.relative(this.options.cwd, path34);
+      relPath = sysPath2.relative(this.options.cwd, path37);
     if (this.options.awaitWriteFinish && this._pendingWrites.has(relPath)) {
       const event = this._pendingWrites.get(relPath).cancelWait();
       if (event === EVENTS.ADD)
         return;
     }
-    this._watched.delete(path34);
+    this._watched.delete(path37);
     this._watched.delete(fullPath);
     const eventName = isDirectory ? EVENTS.UNLINK_DIR : EVENTS.UNLINK;
-    if (wasTracked && !this._isIgnored(path34))
-      this._emit(eventName, path34);
-    this._closePath(path34);
+    if (wasTracked && !this._isIgnored(path37))
+      this._emit(eventName, path37);
+    this._closePath(path37);
   }
   /**
    * Closes all watchers for a path
    */
-  _closePath(path34) {
-    this._closeFile(path34);
-    const dir = sysPath2.dirname(path34);
-    this._getWatchedDir(dir).remove(sysPath2.basename(path34));
+  _closePath(path37) {
+    this._closeFile(path37);
+    const dir = sysPath2.dirname(path37);
+    this._getWatchedDir(dir).remove(sysPath2.basename(path37));
   }
   /**
    * Closes only file-specific watchers
    */
-  _closeFile(path34) {
-    const closers = this._closers.get(path34);
+  _closeFile(path37) {
+    const closers = this._closers.get(path37);
     if (!closers)
       return;
     closers.forEach((closer) => closer());
-    this._closers.delete(path34);
+    this._closers.delete(path37);
   }
-  _addPathCloser(path34, closer) {
+  _addPathCloser(path37, closer) {
     if (!closer)
       return;
-    let list = this._closers.get(path34);
+    let list = this._closers.get(path37);
     if (!list) {
       list = [];
-      this._closers.set(path34, list);
+      this._closers.set(path37, list);
     }
     list.push(closer);
   }
@@ -17433,11 +17494,11 @@ function createStrictRateLimiterFromConfig(config) {
 }
 
 // modules/server/middleware/auto-rate-limit.ts
-function matchesStrictPattern(path34, patterns) {
+function matchesStrictPattern(path37, patterns) {
   for (const pattern of patterns) {
     const regexPattern = pattern.replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*").replace(/\//g, "\\/");
     const regex = new RegExp(`^${regexPattern}$`);
-    if (regex.test(path34)) {
+    if (regex.test(path37)) {
       return true;
     }
   }
@@ -17627,9 +17688,441 @@ async function handleApiRequest(options) {
   }
 }
 
+// modules/server/image-optimizer/index.ts
+var import_sharp = __toESM(require("sharp"));
+var import_fs27 = __toESM(require("fs"));
+var import_path37 = __toESM(require("path"));
+
+// modules/server/image-optimizer/validation.ts
+var import_path35 = __toESM(require("path"));
+function isRemoteUrl(url) {
+  return url.startsWith("http://") || url.startsWith("https://");
+}
+function sanitizeImagePath(imagePath) {
+  const normalized = import_path35.default.normalize(imagePath).replace(/^(\.\.(\/|\\|$))+/, "");
+  return normalized.replace(/^[/\\]+/, "");
+}
+function patternToRegex(pattern) {
+  const parts = [];
+  if (pattern.protocol) {
+    parts.push(pattern.protocol === "https" ? "https" : "http");
+  } else {
+    parts.push("https?");
+  }
+  parts.push("://");
+  let hostnamePattern = pattern.hostname.replace(/\./g, "\\.").replace(/\*\*/g, ".*").replace(/\*/g, "[^.]*");
+  parts.push(hostnamePattern);
+  if (pattern.port) {
+    parts.push(`:${pattern.port}`);
+  }
+  if (pattern.pathname) {
+    let pathnamePattern = pattern.pathname.replace(/\*\*/g, ".*").replace(/\*/g, "[^/]*");
+    parts.push(pathnamePattern);
+  } else {
+    parts.push(".*");
+  }
+  const regexSource = `^${parts.join("")}`;
+  return new RegExp(regexSource);
+}
+function validateRemoteUrl(url, config) {
+  if (!config.remotePatterns && !config.domains) {
+    return false;
+  }
+  try {
+    const urlObj = new URL(url);
+    const protocol = urlObj.protocol.replace(":", "");
+    const hostname = urlObj.hostname;
+    const port = urlObj.port || "";
+    const pathname = urlObj.pathname;
+    if (config.remotePatterns && config.remotePatterns.length > 0) {
+      for (const pattern of config.remotePatterns) {
+        const regex = patternToRegex(pattern);
+        const testUrl = `${protocol}://${hostname}${port ? `:${port}` : ""}${pathname}`;
+        if (regex.test(testUrl)) {
+          if (pattern.protocol && pattern.protocol !== protocol) {
+            continue;
+          }
+          if (pattern.port && pattern.port !== port) {
+            continue;
+          }
+          return true;
+        }
+      }
+    }
+    if (config.domains && config.domains.length > 0) {
+      for (const domain of config.domains) {
+        const domainPattern = domain.replace(/\./g, "\\.").replace(/\*\*/g, ".*").replace(/\*/g, "[^.]*");
+        const regex = new RegExp(`^${domainPattern}$`);
+        if (regex.test(hostname)) {
+          if (process.env.NODE_ENV === "production" && protocol !== "https") {
+            continue;
+          }
+          return true;
+        }
+      }
+    }
+    return false;
+  } catch (error) {
+    return false;
+  }
+}
+function validateImageDimensions(width, height, config) {
+  const maxWidth = config.maxWidth || 3840;
+  const maxHeight = config.maxHeight || 3840;
+  if (width !== void 0 && (width <= 0 || width > maxWidth)) {
+    return {
+      valid: false,
+      error: `Image width must be between 1 and ${maxWidth}, got ${width}`
+    };
+  }
+  if (height !== void 0 && (height <= 0 || height > maxHeight)) {
+    return {
+      valid: false,
+      error: `Image height must be between 1 and ${maxHeight}, got ${height}`
+    };
+  }
+  return { valid: true };
+}
+function validateQuality(quality) {
+  if (quality === void 0) {
+    return { valid: true };
+  }
+  if (typeof quality !== "number" || quality < 1 || quality > 100) {
+    return {
+      valid: false,
+      error: `Image quality must be between 1 and 100, got ${quality}`
+    };
+  }
+  return { valid: true };
+}
+
+// modules/server/image-optimizer/cache.ts
+var import_fs26 = __toESM(require("fs"));
+var import_path36 = __toESM(require("path"));
+var import_crypto = __toESM(require("crypto"));
+function generateCacheKey(src, width, height, quality, format) {
+  const data = `${src}-${width || ""}-${height || ""}-${quality || ""}-${format || ""}`;
+  return import_crypto.default.createHash("sha256").update(data).digest("hex");
+}
+function getCacheDir(projectRoot, config) {
+  const buildDir = getBuildDir(projectRoot, config);
+  return import_path36.default.join(buildDir, "cache", "images");
+}
+function ensureCacheDir(cacheDir) {
+  if (!import_fs26.default.existsSync(cacheDir)) {
+    import_fs26.default.mkdirSync(cacheDir, { recursive: true });
+  }
+}
+function getCachedImagePath(cacheKey, extension, cacheDir) {
+  return import_path36.default.join(cacheDir, `${cacheKey}.${extension}`);
+}
+function hasCachedImage(cacheKey, extension, cacheDir) {
+  const cachedPath = getCachedImagePath(cacheKey, extension, cacheDir);
+  return import_fs26.default.existsSync(cachedPath);
+}
+function readCachedImage(cacheKey, extension, cacheDir) {
+  const cachedPath = getCachedImagePath(cacheKey, extension, cacheDir);
+  try {
+    if (import_fs26.default.existsSync(cachedPath)) {
+      return import_fs26.default.readFileSync(cachedPath);
+    }
+  } catch (error) {
+    console.warn(`[image-optimizer] Failed to read cached image: ${cachedPath}`, error);
+  }
+  return null;
+}
+function writeCachedImage(cacheKey, extension, cacheDir, imageBuffer) {
+  ensureCacheDir(cacheDir);
+  const cachedPath = getCachedImagePath(cacheKey, extension, cacheDir);
+  try {
+    import_fs26.default.writeFileSync(cachedPath, imageBuffer);
+  } catch (error) {
+    console.warn(`[image-optimizer] Failed to write cached image: ${cachedPath}`, error);
+  }
+}
+function getImageMimeType(format) {
+  const formatMap = {
+    webp: "image/webp",
+    avif: "image/avif",
+    jpeg: "image/jpeg",
+    jpg: "image/jpeg",
+    png: "image/png",
+    gif: "image/gif",
+    svg: "image/svg+xml"
+  };
+  const normalized = format.toLowerCase();
+  return formatMap[normalized] || "image/jpeg";
+}
+function getImageExtension(format) {
+  const formatMap = {
+    "image/webp": "webp",
+    "image/avif": "avif",
+    "image/jpeg": "jpg",
+    "image/png": "png",
+    "image/gif": "gif",
+    "image/svg+xml": "svg",
+    webp: "webp",
+    avif: "avif",
+    jpeg: "jpg",
+    jpg: "jpg",
+    png: "png",
+    gif: "gif",
+    svg: "svg"
+  };
+  const normalized = format.toLowerCase();
+  return formatMap[normalized] || "jpg";
+}
+
+// modules/server/image-optimizer/index.ts
+async function downloadRemoteImage(url, timeout = 1e4) {
+  let fetchFn;
+  try {
+    if (typeof fetch !== "undefined") {
+      fetchFn = fetch;
+    } else {
+      const { fetch: undiciFetch } = await import("undici");
+      fetchFn = undiciFetch;
+    }
+  } catch (error) {
+    throw new Error("Failed to load fetch implementation. Node 18+ required or install undici.");
+  }
+  const controller = new AbortController();
+  const timeoutId = setTimeout(() => controller.abort(), timeout);
+  try {
+    const response = await fetchFn(url, {
+      signal: controller.signal,
+      headers: {
+        "User-Agent": "Loly-Image-Optimizer/1.0"
+      }
+    });
+    clearTimeout(timeoutId);
+    if (!response.ok) {
+      throw new Error(`Failed to download image: ${response.status} ${response.statusText}`);
+    }
+    const arrayBuffer = await response.arrayBuffer();
+    return Buffer.from(arrayBuffer);
+  } catch (error) {
+    clearTimeout(timeoutId);
+    if (error instanceof Error && error.name === "AbortError") {
+      throw new Error(`Image download timeout after ${timeout}ms`);
+    }
+    throw error;
+  }
+}
+function readLocalImage(src, projectRoot, config) {
+  const sanitized = sanitizeImagePath(src);
+  const staticDir = getStaticDir(projectRoot, config);
+  const staticPath = import_path37.default.join(staticDir, sanitized);
+  if (import_fs27.default.existsSync(staticPath)) {
+    return import_fs27.default.readFileSync(staticPath);
+  }
+  if (src.startsWith("/")) {
+    const absolutePath = import_path37.default.join(projectRoot, sanitized);
+    if (import_fs27.default.existsSync(absolutePath)) {
+      return import_fs27.default.readFileSync(absolutePath);
+    }
+  }
+  throw new Error(`Image not found: ${src}`);
+}
+function determineOutputFormat(sourceFormat, requestedFormat, config) {
+  if (sourceFormat === "svg") {
+    return "svg";
+  }
+  if (requestedFormat && requestedFormat !== "auto") {
+    return requestedFormat;
+  }
+  const supportedFormats = config.formats || ["image/webp"];
+  if (supportedFormats.includes("image/avif")) {
+    return "avif";
+  }
+  if (supportedFormats.includes("image/webp")) {
+    return "webp";
+  }
+  return sourceFormat === "svg" ? "jpeg" : sourceFormat;
+}
+async function optimizeImage(options, projectRoot, config) {
+  const imageConfig = config.images || {};
+  const dimValidation = validateImageDimensions(options.width, options.height, imageConfig);
+  if (!dimValidation.valid) {
+    throw new Error(dimValidation.error);
+  }
+  const qualityValidation = validateQuality(options.quality);
+  if (!qualityValidation.valid) {
+    throw new Error(qualityValidation.error);
+  }
+  if (isRemoteUrl(options.src)) {
+    if (!validateRemoteUrl(options.src, imageConfig)) {
+      throw new Error(`Remote image domain not allowed: ${options.src}`);
+    }
+  }
+  const sourceFormat = import_path37.default.extname(options.src).slice(1).toLowerCase() || "jpeg";
+  const outputFormat = determineOutputFormat(
+    sourceFormat,
+    options.format,
+    imageConfig
+  );
+  const cacheKey = generateCacheKey(
+    options.src,
+    options.width,
+    options.height,
+    options.quality || imageConfig.quality || 75,
+    outputFormat
+  );
+  const cacheDir = getCacheDir(projectRoot, config);
+  const extension = getImageExtension(outputFormat);
+  if (hasCachedImage(cacheKey, extension, cacheDir)) {
+    const cached = readCachedImage(cacheKey, extension, cacheDir);
+    if (cached) {
+      const metadata2 = await (0, import_sharp.default)(cached).metadata();
+      return {
+        buffer: cached,
+        format: outputFormat,
+        mimeType: getImageMimeType(outputFormat),
+        width: metadata2.width || options.width || 0,
+        height: metadata2.height || options.height || 0
+      };
+    }
+  }
+  let imageBuffer;
+  if (isRemoteUrl(options.src)) {
+    imageBuffer = await downloadRemoteImage(options.src);
+  } else {
+    imageBuffer = readLocalImage(options.src, projectRoot, config);
+  }
+  if (outputFormat === "svg" || sourceFormat === "svg") {
+    if (!imageConfig.dangerouslyAllowSVG) {
+      throw new Error("SVG images are not allowed. Set images.dangerouslyAllowSVG to true to enable.");
+    }
+    return {
+      buffer: imageBuffer,
+      format: "svg",
+      mimeType: "image/svg+xml",
+      width: options.width || 0,
+      height: options.height || 0
+    };
+  }
+  let sharpInstance = (0, import_sharp.default)(imageBuffer);
+  const metadata = await sharpInstance.metadata();
+  if (options.width || options.height) {
+    const fit = options.fit || "cover";
+    sharpInstance = sharpInstance.resize(options.width, options.height, {
+      fit,
+      withoutEnlargement: true
+    });
+  }
+  const quality = options.quality || imageConfig.quality || 75;
+  switch (outputFormat) {
+    case "webp":
+      sharpInstance = sharpInstance.webp({ quality });
+      break;
+    case "avif":
+      sharpInstance = sharpInstance.avif({ quality });
+      break;
+    case "jpeg":
+    case "jpg":
+      sharpInstance = sharpInstance.jpeg({ quality });
+      break;
+    case "png":
+      sharpInstance = sharpInstance.png({ quality: Math.round(quality / 100 * 9) });
+      break;
+    default:
+      sharpInstance = sharpInstance.jpeg({ quality });
+  }
+  const optimizedBuffer = await sharpInstance.toBuffer();
+  const finalMetadata = await (0, import_sharp.default)(optimizedBuffer).metadata();
+  writeCachedImage(cacheKey, extension, cacheDir, optimizedBuffer);
+  return {
+    buffer: optimizedBuffer,
+    format: outputFormat,
+    mimeType: getImageMimeType(outputFormat),
+    width: finalMetadata.width || options.width || metadata.width || 0,
+    height: finalMetadata.height || options.height || metadata.height || 0
+  };
+}
+
+// modules/server/handlers/image.ts
+async function handleImageRequest(options) {
+  const { req, res, projectRoot, config } = options;
+  try {
+    const src = req.query.src;
+    const width = req.query.w ? parseInt(req.query.w, 10) : void 0;
+    const height = req.query.h ? parseInt(req.query.h, 10) : void 0;
+    const quality = req.query.q ? parseInt(req.query.q, 10) : void 0;
+    const format = req.query.format;
+    const fit = req.query.fit;
+    if (!src) {
+      res.status(400).json({
+        error: "Missing required parameter: src"
+      });
+      return;
+    }
+    if (typeof src !== "string") {
+      res.status(400).json({
+        error: "Parameter 'src' must be a string"
+      });
+      return;
+    }
+    const result = await optimizeImage(
+      {
+        src,
+        width,
+        height,
+        quality,
+        format,
+        fit
+      },
+      projectRoot,
+      config
+    );
+    const imageConfig = config.images || {};
+    const cacheTTL = imageConfig.minimumCacheTTL || 60;
+    res.setHeader("Content-Type", result.mimeType);
+    res.setHeader("Content-Length", result.buffer.length);
+    res.setHeader("Cache-Control", `public, max-age=${cacheTTL}, immutable`);
+    res.setHeader("X-Content-Type-Options", "nosniff");
+    res.send(result.buffer);
+  } catch (error) {
+    if (error instanceof Error) {
+      if (error.message.includes("not allowed")) {
+        res.status(403).json({
+          error: "Forbidden",
+          message: error.message
+        });
+        return;
+      }
+      if (error.message.includes("not found") || error.message.includes("Image not found")) {
+        res.status(404).json({
+          error: "Not Found",
+          message: error.message
+        });
+        return;
+      }
+      if (error.message.includes("must be")) {
+        res.status(400).json({
+          error: "Bad Request",
+          message: error.message
+        });
+        return;
+      }
+      if (error.message.includes("timeout") || error.message.includes("download")) {
+        res.status(504).json({
+          error: "Gateway Timeout",
+          message: error.message
+        });
+        return;
+      }
+    }
+    console.error("[image-optimizer] Error processing image:", error);
+    res.status(500).json({
+      error: "Internal Server Error",
+      message: "Failed to process image"
+    });
+  }
+}
+
 // modules/server/routes.ts
 init_globals();
-var import_path35 = __toESM(require("path"));
+var import_path38 = __toESM(require("path"));
 var cachedRewriteLoader = null;
 var cachedProjectRoot = null;
 var cachedIsDev = null;
@@ -17657,10 +18150,20 @@ function setupRoutes(options) {
   } = options;
   const routeChunks = routeLoader.loadRouteChunks();
   const rewriteLoader = getRewriteLoader(projectRoot, isDev);
-  const ssgOutDir = import_path35.default.join(
-    config ? getBuildDir(projectRoot, config) : import_path35.default.join(projectRoot, BUILD_FOLDER_NAME),
+  const ssgOutDir = import_path38.default.join(
+    config ? getBuildDir(projectRoot, config) : import_path38.default.join(projectRoot, BUILD_FOLDER_NAME),
     "ssg"
   );
+  if (config) {
+    app.get("/_loly/image", async (req, res) => {
+      await handleImageRequest({
+        req,
+        res,
+        projectRoot,
+        config
+      });
+    });
+  }
   app.all("/api/*", async (req, res) => {
     const apiRoutes = isDev && getRoutes ? (await getRoutes()).apiRoutes : initialApiRoutes;
     const serverConfig = await getServerConfig(projectRoot);
@@ -18707,7 +19210,7 @@ var import_cors = __toESM(require("cors"));
 var import_helmet = __toESM(require("helmet"));
 var import_cookie_parser = __toESM(require("cookie-parser"));
 var import_compression = __toESM(require("compression"));
-var import_crypto = __toESM(require("crypto"));
+var import_crypto2 = __toESM(require("crypto"));
 var setupApplication = async ({
   projectRoot
 }) => {
@@ -18816,7 +19319,7 @@ var setupApplication = async ({
   if (process.env.NODE_ENV !== "development" && security?.contentSecurityPolicy !== false) {
     app.use(
       (req, res, next) => {
-        const nonce = import_crypto.default.randomBytes(16).toString("base64");
+        const nonce = import_crypto2.default.randomBytes(16).toString("base64");
         res.locals.nonce = nonce;
         next();
       }
@@ -18887,8 +19390,8 @@ var setupApplication = async ({
 
 // src/server.ts
 var import_dotenv2 = __toESM(require("dotenv"));
-var envPath = import_path36.default.join(process.cwd(), ".env");
-if (import_fs26.default.existsSync(envPath)) {
+var envPath = import_path39.default.join(process.cwd(), ".env");
+if (import_fs28.default.existsSync(envPath)) {
   import_dotenv2.default.config({ path: envPath });
 } else {
   import_dotenv2.default.config();
@@ -18909,8 +19412,8 @@ async function startServer(options = {}) {
   }
   const port = options.port ?? (process.env.PORT ? parseInt(process.env.PORT, 10) : void 0) ?? config.server.port;
   const host = process.env.HOST ?? (!isDev ? "0.0.0.0" : void 0) ?? config.server.host;
-  const appDir = options.appDir ?? (isDev ? getAppDir(projectRoot, config) : import_path36.default.join(getBuildDir(projectRoot, config), "server"));
-  if (!isDev && !import_fs26.default.existsSync(appDir)) {
+  const appDir = options.appDir ?? (isDev ? getAppDir(projectRoot, config) : import_path39.default.join(getBuildDir(projectRoot, config), "server"));
+  if (!isDev && !import_fs28.default.existsSync(appDir)) {
     logger4.error("Compiled directory not found", void 0, {
       buildDir: config.directories.build,
       appDir,
@@ -19106,7 +19609,7 @@ async function run() {
   }
   const args = parseArgs(argv.slice(1));
   const projectRoot = import_process.default.cwd();
-  const appDir = import_path37.default.resolve(projectRoot, args.appDir || "app");
+  const appDir = import_path40.default.resolve(projectRoot, args.appDir || "app");
   const port = typeof args.port === "string" && args.port.trim().length > 0 ? Number(args.port) : 3e3;
   switch (command) {
     case "dev": {