@ranx729/ducktape-assets 1.2.0 → 1.4.0

package/sets/walters-w102.json

@@ -1,6 +1,7 @@
 {
   "assets": {
     "centaur-archer": {
+      "attribution": "Walters Art Museum W.102, fol. 82v",
       "categories": [
         "hybrids",
         "fantasy",
@@ -195,6 +196,7 @@
       "width": 720
     },
     "elephant-castle": {
+      "attribution": "Walters Art Museum W.102, fol. 28r",
       "categories": [
         "animals",
         "humans",
@@ -364,6 +366,7 @@
       "width": 270
     },
     "horse-flute-drum": {
+      "attribution": "Walters Art Museum W.102, fol. 74v",
       "categories": [
         "animals",
         "music",
@@ -518,6 +521,7 @@
       "width": 236
     },
     "rabbit-church-bells": {
+      "attribution": "Walters Art Museum W.102, fol. 81r",
       "categories": [
         "animals",
         "music",
@@ -730,11 +734,11 @@
       "width": 823
     }
   },
-  "attribution": "Walters Art Museum W.102 (CC0-1.0)",
-  "builtAt": "2026-10-27T17:29:52.282Z",
-  "cdn": "https://cdn.jsdelivr.net/npm/@ranx729/ducktape-assets-walters-w102@1.0.1/",
+  "attribution": "Walters Art Museum W.102",
+  "builtAt": "2026-10-27T18:38:16.005Z",
+  "cdn": "https://cdn.jsdelivr.net/npm/@ranx729/ducktape-assets-walters-w102@1.0.2/",
   "contentHash": "sha256:af3a33a4e36be1b741107aef88b7abcd613fb23e5d951f334e97f1c8176b8947",
-  "inputsHash": "sha256:905f4894698885139731e88e2e830b4795ddc673ab95c960e7f12cd45e787e86",
+  "inputsHash": "sha256:6a5c69cc4fa64c07754faefdf125f54bb9730d226ba767e6457c220575877109",
   "kind": "historical",
   "license": {
     "artwork": "CC0-1.0",
@@ -753,7 +757,7 @@
     "concurrency": 1,
     "libvips": "8.18.7",
     "sharp": "0.35.5",
-    "tools": "0.1.0"
+    "tools": "0.2.0"
   },
-  "version": "1.0.1"
+  "version": "1.0.2"
 }

package/src/generate.mjs

@@ -91,7 +91,7 @@ function table(list) {
 
 const FLOWS = `1. **Paste a URL.** Any HTML, CSS or Markdown references one file on jsDelivr, for example \`https://cdn.jsdelivr.net/npm/@ranx729/ducktape-assets-walters-w102@1.2.0/webp/rabbit-church-bells-512.webp\`. Only that file is transferred. \`catalog.json\` lists the exact URL of every width and format, so nothing has to be guessed.
 2. **Pick and copy.** Keep a small \`ducktape.json\` listing the asset ids you want, with optional widths, formats and \`masters: true\`. \`npx @ranx729/ducktape-assets copy\` fetches exactly those files into the project (default \`src/assets/ducktape/\`), verifies every SHA-256 against the manifest, and writes \`ducktape.manifest.json\` beside them with type, dimensions (native and of the capped master), transparency, render geometry (tile axis, frame slice), thumbhash, licence and attribution per asset. \`masters: true\` alone copies only the lossless master (for apps that encode their own images); add \`formats\`, \`widths\` or \`max\` to copy ladder files as well. Re-running is idempotent.
-3. **Resolve in code.** \`npm i @ranx729/ducktape-assets\` installs metadata and a resolver, zero images. \`assets.image(id, { width })\` returns \`src\`, \`srcset\`, \`sizes\`, width, height, thumbhash, licence, \`attribution\`, and \`file\` / \`files\` (path, bytes and sha256 of every referenced rung, for scripts that record or verify what they use). Bytes come from the CDN at request time, or from flow 2 when \`base\` points at the copied directory.
+3. **Resolve in code.** \`npm i @ranx729/ducktape-assets\` installs metadata and a resolver, zero images. \`assets.image(id, { width })\` returns \`src\`, \`srcset\`, \`sizes\`, width, height, thumbhash, \`license\`, \`attribution\` (the bare credit, licence kept separate), \`set\` / \`package\` / \`version\` (where the bytes come from), and \`file\` / \`files\` (path, bytes and sha256 of every referenced rung, for scripts that record or verify what they use). Bytes come from the CDN at request time, or from flow 2 when \`base\` points at the copied directory.
 
 Build-time recipe in Node, offline, no network:
 
@@ -174,7 +174,7 @@ ${URLS}
 
 ## Rules
 
-- Honour the licence block: show the \`attribution\` line when the asset's licence requires it.
+- Honour the licence block: show the \`attribution\` credit together with \`license\` (SPDX id) when the licence requires it; \`attribution\` is the institution and object for historical sets, or the author for authored and imported ones, and never contains the licence.
 - Never use \`@latest\` or range URLs; always an exact version from \`index.json\` or \`catalog.json\`.
 - Never put a master on a page. Masters are for re-encoding in a build.
 - Images are decorative by default (\`alt=""\`); use \`description\` when the image carries meaning.

package/src/resolver.mjs

@@ -115,6 +115,11 @@ export function createResolver({ index, base, formats = ['avif', 'webp'], pin =
     }
     if (!fallback) throw new Error(`${id}: none of the formats ${formats.join(', ')} is available`);
     const out = {
+      // Where the bytes come from, for scripts that record what they used: the set, its first package and the version
+      // the URLs point at (a pin overrides the index). Files in a volume part carry their own `package`.
+      set: setId,
+      package: entry.package,
+      version: pin[setId] ?? entry.version,
       src: urlOf(entry, fallback.src, setId),
       srcset: sources[sources.length - 1].srcset,
       sources,