@nitida/sdk 0.32.3 → 0.35.0

package/dist/server.js

@@ -32,6 +32,7 @@ import {
   configureSlotResolver as configureSlotResolver2,
   contrastRatio,
   deriveAccessKey,
+  deriveTransformKid,
   extractAssetSha,
   getAmbientGradient,
   getAssetDimensions,
@@ -55,6 +56,9 @@ import {
   invalidateSlotCache as invalidateSlotCache2,
   isRequestablePreset as isRequestablePreset2,
   iteratePaletteSwatches,
+  MAX_SIGNED_TRANSFORM_TTL_SECONDS,
+  MAX_SIGNED_URL_TTL_SECONDS,
+  MIN_SIGNED_TRANSFORM_TTL_SECONDS,
   PRESET_EXT,
   PRESET_LONG,
   PRESET_MAX_DIM,
@@ -70,7 +74,8 @@ import {
   signAccessUrl,
   signTransformUrl,
   TRANSFORM_WIDTHS,
-  toRequestablePresets as toRequestablePresets2
+  toRequestablePresets as toRequestablePresets2,
+  transformMessage
 } from "@nitida/asset-client";
 function endpointUrl(opts, path, searchParams) {
   const endpoint = opts.endpoint.replace(/\/+$/, "");
@@ -508,6 +513,13 @@ function mimeFromFileName(fileName) {
   return ext ? MIME_BY_EXT[ext] ?? null : null;
 }
 var DEFAULT_UPLOAD_PRESETS = ["original"];
+function kindForMime(mime) {
+  const m = (mime ?? "").toLowerCase();
+  if (m.startsWith("video/")) return "video";
+  if (m.startsWith("audio/")) return "audio";
+  if (m.startsWith("image/")) return "image";
+  return "other";
+}
 async function computeSha256(bytes) {
   const buf = bytes instanceof Blob ? await bytes.arrayBuffer() : bytes instanceof Uint8Array ? bytes.buffer : bytes;
   const digest = await crypto.subtle.digest("SHA-256", buf);
@@ -593,7 +605,11 @@ var NitidaClient = class {
         "aq.transform({ sign: true }) requires `signingKey` in NitidaClientOptions. No signingKey on this client. It is returned ONCE, in the response that creates your project (POST /admin/projects \u2192 `signingKey`, next to the three API keys; the console shows it in the same panel). If you never saw one \u2014 projects created before 2026-08-23 were not handed it \u2014 ask the platform operator to rotate: with no signed URLs in flight that invalidates nothing and is free. If you DO have signed URLs circulating, ask for the current key instead, because rotating would kill them. Then pass it to the SDK constructor on a SERVER-side instance only."
       );
     }
-    return getSignedTransformUrl(asset, opts, this.opts.signingKey) ?? Promise.resolve(this.urlFor(asset, "lg"));
+    return getSignedTransformUrl(asset, opts, this.opts.signingKey, {
+      expiresInSeconds: signOpts.expiresInSeconds,
+      tenantId: signOpts.tenantId ?? this.opts.tenantId,
+      nowSeconds: signOpts.nowSeconds
+    }) ?? Promise.resolve(this.urlFor(asset, "lg"));
   }
   transformSrcSet(asset, widths, extraOpts = {}, signOpts) {
     if (!signOpts?.sign) return getTransformSrcSet(asset, widths, extraOpts);
@@ -603,12 +619,18 @@ var NitidaClient = class {
       );
     }
     const key = this.opts.signingKey;
+    const sign = {
+      expiresInSeconds: signOpts.expiresInSeconds,
+      tenantId: signOpts.tenantId ?? this.opts.tenantId,
+      nowSeconds: signOpts.nowSeconds
+    };
     return Promise.all(
       widths.map(async (w) => {
         const signed = await getSignedTransformUrl(
           asset,
           { ...extraOpts, width: w },
-          key
+          key,
+          sign
         );
         return signed ? `${signed} ${w}w` : null;
       })
@@ -777,6 +799,7 @@ var NitidaClient = class {
         // Same shape as the presign branch below, for the same reason. This
         // DTO does carry `sha` today — but relying on that is how the other
         // branch broke, and the value we hashed ourselves is authoritative.
+        kind: existing.kind ?? kindForMime(mime),
         visibility: existing.visibility ?? "public",
         presets: existing.presets ?? "",
         variants: existing.variants ?? [],
@@ -837,6 +860,7 @@ var NitidaClient = class {
         // ACTUALLY has, now that we waited for it — not from
         // `defaultPresetForMime`, which is a guess made before anything exists.
         // Guessing was safe only while this branch never ran.
+        kind: settled.kind ?? kindForMime(mime),
         visibility: settled.visibility ?? "public",
         presets: settled.presets ?? "",
         variants: settled.variants ?? [],
@@ -888,6 +912,7 @@ var NitidaClient = class {
       sha: sha.slice(0, 16),
       mime: final.mime ?? mime,
       oext: final.oext ?? null,
+      kind: final.kind ?? kindForMime(final.mime ?? mime),
       visibility: final.visibility ?? "public",
       presets: final.presets ?? "",
       variants: final.variants ?? [],
@@ -949,6 +974,9 @@ var NitidaClient2 = class extends NitidaClient {
   }
 };
 export {
+  MAX_SIGNED_TRANSFORM_TTL_SECONDS,
+  MAX_SIGNED_URL_TTL_SECONDS,
+  MIN_SIGNED_TRANSFORM_TTL_SECONDS,
   NitidaClient2 as NitidaClient,
   PRESET_EXT,
   PRESET_LONG,
@@ -964,6 +992,7 @@ export {
   configureSlotResolver2 as configureSlotResolver,
   contrastRatio,
   deriveAccessKey,
+  deriveTransformKid,
   extractAssetSha,
   getAmbientGradient,
   getAssetDimensions,
@@ -998,6 +1027,7 @@ export {
   setTenantId2 as setTenantId,
   signAccessUrl,
   signTransformUrl,
-  toRequestablePresets2 as toRequestablePresets
+  toRequestablePresets2 as toRequestablePresets,
+  transformMessage
 };
 //# sourceMappingURL=server.js.map