@raster-app/sdk 0.1.0-canary-2e1834e

package/dist/client.js

@@ -0,0 +1,122 @@
+import { getAsset, hasMorePages, listAssets } from './api/assets.js';
+import { RasterApiError } from './api/errors.js';
+import { listLibraries } from './api/libraries.js';
+import { getMe, meCredentialOrganizations } from './api/me.js';
+import { promoteVariant, waitUntilPromoted } from './api/promote.js';
+import { searchAssets } from './api/search.js';
+import { createTransport } from './api/transport.js';
+import { uploadAsset, waitUntilProcessed } from './api/upload.js';
+import { signInWithDevice } from './auth/device.js';
+import { createSessionStore } from './auth/session.js';
+import { revokeSession } from './auth/tokens.js';
+import { API_ORIGIN, AUTH_ORIGIN } from './constants.js';
+export function createRasterClient(config) {
+    const apiOrigin = config.apiOrigin ?? API_ORIGIN;
+    const authOrigin = config.authOrigin ?? AUTH_ORIGIN;
+    // Bound to globalThis: an unbound `fetch` throws `Illegal invocation` in a browser.
+    const fetchImpl = config.fetch ?? globalThis.fetch.bind(globalThis);
+    const auth = { authOrigin, fetch: fetchImpl };
+    const session = createSessionStore({ credentials: config.credentials, auth });
+    const transport = createTransport({ origin: apiOrigin, session, fetch: fetchImpl });
+    async function connect(credential, options = {}) {
+        const { organizationId, signal } = options;
+        if ('apiKey' in credential) {
+            // Copied keys often carry stray whitespace, which the API would refuse as another key.
+            credential = { apiKey: credential.apiKey.trim() };
+            if (credential.apiKey === '') {
+                throw new RasterApiError('Enter your API key to continue.', 'API_KEY_REQUIRED', 400);
+            }
+        }
+        const bearer = 'apiKey' in credential ? credential.apiKey : credential.oauth.accessToken;
+        const me = await getMe(transport, bearer, signal);
+        // Only an organization-bound grant names its organization at the top level. A grant of
+        // the whole account lists `organizations`, even when the account holds just that one.
+        if (organizationId !== undefined &&
+            ('organizations' in me || me.organizationId !== organizationId)) {
+            throw new RasterApiError('That sign-in doesn’t match the Raster organization this app uses. Sign in again and choose that organization.', 'ORGANIZATION_MISMATCH', 403);
+        }
+        const existing = session.current() ?? (await session.hydrate());
+        const next = {
+            // The registration outlives the session it was made for; see `StoredCredentials`.
+            clientId: 'oauth' in credential ? credential.oauth.clientId : (existing.clientId ?? null),
+            apiKey: 'apiKey' in credential ? credential.apiKey : null,
+            oauth: 'oauth' in credential ? { ...credential.oauth, signInId: crypto.randomUUID() } : null,
+            userName: me.user?.name ?? null,
+            organizations: meCredentialOrganizations(me),
+        };
+        // The last point a cancel can stop the sign-in, after `/me` and the hydrate awaits.
+        if (signal?.aborted)
+            throw new RasterApiError('Sign-in cancelled.', 'ABORTED', 0);
+        await session.save(next);
+        // Nobody holds the replaced session now. Left live, it would sit in Connected apps
+        // under this client's name beside the new one. Best-effort, like `signOut`.
+        const previous = existing.oauth;
+        if (previous !== null && previous.refreshToken !== next.oauth?.refreshToken) {
+            void revokeSession(auth, previous).catch(() => { });
+        }
+        return next;
+    }
+    return {
+        host: config.host,
+        session,
+        transport,
+        me: (bearer) => getMe(transport, bearer),
+        libraries: {
+            list: (options) => listLibraries(transport, options),
+        },
+        assets: {
+            list: (options) => listAssets(transport, options),
+            get: (options) => getAsset(transport, options),
+            upload: (options) => uploadAsset(transport, options),
+            waitUntilProcessed: (options) => waitUntilProcessed(transport, options),
+            promote: (options) => promoteVariant(transport, options),
+            waitUntilPromoted: (options) => waitUntilPromoted(transport, options),
+            hasMorePages,
+        },
+        search: (options) => searchAssets(transport, options),
+        auth: {
+            async signInWithDevice({ onCode, signal, openBrowser = true, scope = 'user', organizationId, }) {
+                const credentials = session.current() ?? (await session.hydrate());
+                const registration = { clientId: null };
+                let oauth = null;
+                try {
+                    oauth = await signInWithDevice(auth, {
+                        clientName: config.host.name,
+                        // The token's audience: the real API even when `apiOrigin` is a proxy, since
+                        // Raster refuses a resource it does not serve.
+                        resource: API_ORIGIN,
+                        clientId: credentials.clientId,
+                        onRegister: (clientId) => {
+                            registration.clientId = clientId;
+                        },
+                        scope,
+                        onCode: (device) => {
+                            onCode(device);
+                            if (openBrowser)
+                                void config.host.openExternal(device.verificationUrl);
+                        },
+                        signal,
+                    });
+                    return await connect({ oauth }, { organizationId, signal });
+                }
+                catch (caught) {
+                    // Minted but never adopted, so nobody holds it: revoke rather than leave it live.
+                    if (oauth !== null)
+                        void revokeSession(auth, oauth).catch(() => { });
+                    // Keep a client this attempt registered, so the next sign-in reuses it, and the saved
+                    // credential as it was: an earlier session refreshes under its own client.
+                    const kept = session.current();
+                    const { clientId } = registration;
+                    if (clientId !== null && kept !== undefined && kept.clientId !== clientId) {
+                        await session.save({ ...kept, clientId }).catch(() => { });
+                    }
+                    throw caught;
+                }
+            },
+            // One argument only: a callback's extra arguments would reach the internal options.
+            connect: (credential) => connect(credential),
+            signOut: () => session.signOut(),
+        },
+    };
+}
+//# sourceMappingURL=client.js.map

package/dist/client.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"client.js","sourceRoot":"","sources":["../src/client.ts"],"names":[],"mappings":"AACA,OAAO,EAAE,QAAQ,EAAE,YAAY,EAAE,UAAU,EAAE,MAAM,iBAAiB,CAAA;AACpE,OAAO,EAAE,cAAc,EAAE,MAAM,iBAAiB,CAAA;AAChD,OAAO,EAAE,aAAa,EAAE,MAAM,oBAAoB,CAAA;AAClD,OAAO,EAAW,KAAK,EAAE,yBAAyB,EAAE,MAAM,aAAa,CAAA;AACvE,OAAO,EAAsB,cAAc,EAAE,iBAAiB,EAAE,MAAM,kBAAkB,CAAA;AACxF,OAAO,EAAqB,YAAY,EAAE,MAAM,iBAAiB,CAAA;AACjE,OAAO,EAAkB,eAAe,EAAE,MAAM,oBAAoB,CAAA;AACpE,OAAO,EAAqB,WAAW,EAAE,kBAAkB,EAAE,MAAM,iBAAiB,CAAA;AACpF,OAAO,EAA4B,gBAAgB,EAAE,MAAM,kBAAkB,CAAA;AAE7E,OAAO,EAAqB,kBAAkB,EAAE,MAAM,mBAAmB,CAAA;AACzE,OAAO,EAAE,aAAa,EAAE,MAAM,kBAAkB,CAAA;AAChD,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,gBAAgB,CAAA;AAuIxD,MAAM,UAAU,kBAAkB,CAAC,MAA0B;IAC5D,MAAM,SAAS,GAAG,MAAM,CAAC,SAAS,IAAI,UAAU,CAAA;IAChD,MAAM,UAAU,GAAG,MAAM,CAAC,UAAU,IAAI,WAAW,CAAA;IACnD,oFAAoF;IACpF,MAAM,SAAS,GAAG,MAAM,CAAC,KAAK,IAAI,UAAU,CAAC,KAAK,CAAC,IAAI,CAAC,UAAU,CAAC,CAAA;IAEnE,MAAM,IAAI,GAAgB,EAAE,UAAU,EAAE,KAAK,EAAE,SAAS,EAAE,CAAA;IAC1D,MAAM,OAAO,GAAG,kBAAkB,CAAC,EAAE,WAAW,EAAE,MAAM,CAAC,WAAW,EAAE,IAAI,EAAE,CAAC,CAAA;IAC7E,MAAM,SAAS,GAAG,eAAe,CAAC,EAAE,MAAM,EAAE,SAAS,EAAE,OAAO,EAAE,KAAK,EAAE,SAAS,EAAE,CAAC,CAAA;IAEnF,KAAK,UAAU,OAAO,CACrB,UAAwD,EACxD,UAA6D,EAAE;QAE/D,MAAM,EAAE,cAAc,EAAE,MAAM,EAAE,GAAG,OAAO,CAAA;QAC1C,IAAI,QAAQ,IAAI,UAAU,EAAE,CAAC;YAC5B,uFAAuF;YACvF,UAAU,GAAG,EAAE,MAAM,EAAE,UAAU,CAAC,MAAM,CAAC,IAAI,EAAE,EAAE,CAAA;YACjD,IAAI,UAAU,CAAC,MAAM,KAAK,EAAE,EAAE,CAAC;gBAC9B,MAAM,IAAI,cAAc,CAAC,iCAAiC,EAAE,kBAAkB,EAAE,GAAG,CAAC,CAAA;YACrF,CAAC;QACF,CAAC;QACD,MAAM,MAAM,GAAG,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,WAAW,CAAA;QACxF,MAAM,EAAE,GAAG,MAAM,KAAK,CAAC,SAAS,EAAE,MAAM,EAAE,MAAM,CAAC,CAAA;QACjD,uFAAuF;QACvF,sFAAsF;QACtF,IACC,cAAc,KAAK,SAAS;YAC5B,CAAC,eAAe,IAAI,EAAE,IAAI,EAAE,CAAC,cAAc,KAAK,cAAc,CAAC,EAC9D,CAAC;YACF,MAAM,IAAI,cAAc,CACvB,+GAA+G,EAC/G,uBAAuB,EACvB,GAAG,CACH,CAAA;QACF,CAAC;QAED,MAAM,QAAQ,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;QAC/D,MAAM,IAAI,GAAsB;YAC/B,kFAAkF;YAClF,QAAQ,EAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,QAAQ,IAAI,IAAI,CAAC;YACzF,MAAM,EAAE,QAAQ,IAAI,UAAU,CAAC,CAAC,CAAC,UAAU,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI;YACzD,KAAK,EAAE,OAAO,IAAI,UAAU,CAAC,CAAC,CAAC,EAAE,GAAG,UAAU,CAAC,KAAK,EAAE,QAAQ,EAAE,MAAM,CAAC,UAAU,EAAE,EAAE,CAAC,CAAC,CAAC,IAAI;YAC5F,QAAQ,EAAE,EAAE,CAAC,IAAI,EAAE,IAAI,IAAI,IAAI;YAC/B,aAAa,EAAE,yBAAyB,CAAC,EAAE,CAAC;SAC5C,CAAA;QACD,oFAAoF;QACpF,IAAI,MAAM,EAAE,OAAO;YAAE,MAAM,IAAI,cAAc,CAAC,oBAAoB,EAAE,SAAS,EAAE,CAAC,CAAC,CAAA;QACjF,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,CAAA;QAExB,mFAAmF;QACnF,4EAA4E;QAC5E,MAAM,QAAQ,GAAG,QAAQ,CAAC,KAAK,CAAA;QAC/B,IAAI,QAAQ,KAAK,IAAI,IAAI,QAAQ,CAAC,YAAY,KAAK,IAAI,CAAC,KAAK,EAAE,YAAY,EAAE,CAAC;YAC7E,KAAK,aAAa,CAAC,IAAI,EAAE,QAAQ,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACnD,CAAC;QACD,OAAO,IAAI,CAAA;IACZ,CAAC;IAED,OAAO;QACN,IAAI,EAAE,MAAM,CAAC,IAAI;QACjB,OAAO;QACP,SAAS;QAET,EAAE,EAAE,CAAC,MAAM,EAAE,EAAE,CAAC,KAAK,CAAC,SAAS,EAAE,MAAM,CAAC;QAExC,SAAS,EAAE;YACV,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,aAAa,CAAC,SAAS,EAAE,OAAO,CAAC;SACpD;QAED,MAAM,EAAE;YACP,IAAI,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,SAAS,EAAE,OAAO,CAAC;YACjD,GAAG,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;YAC9C,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,WAAW,CAAC,SAAS,EAAE,OAAO,CAAC;YACpD,kBAAkB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,kBAAkB,CAAC,SAAS,EAAE,OAAO,CAAC;YACvE,OAAO,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,cAAc,CAAC,SAAS,EAAE,OAAO,CAAC;YACxD,iBAAiB,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,iBAAiB,CAAC,SAAS,EAAE,OAAO,CAAC;YACrE,YAAY;SACZ;QAED,MAAM,EAAE,CAAC,OAAO,EAAE,EAAE,CAAC,YAAY,CAAC,SAAS,EAAE,OAAO,CAAC;QAErD,IAAI,EAAE;YACL,KAAK,CAAC,gBAAgB,CAAC,EACtB,MAAM,EACN,MAAM,EACN,WAAW,GAAG,IAAI,EAClB,KAAK,GAAG,MAAM,EACd,cAAc,GACd;gBACA,MAAM,WAAW,GAAG,OAAO,CAAC,OAAO,EAAE,IAAI,CAAC,MAAM,OAAO,CAAC,OAAO,EAAE,CAAC,CAAA;gBAClE,MAAM,YAAY,GAAgC,EAAE,QAAQ,EAAE,IAAI,EAAE,CAAA;gBACpE,IAAI,KAAK,GAAwB,IAAI,CAAA;gBACrC,IAAI,CAAC;oBACJ,KAAK,GAAG,MAAM,gBAAgB,CAAC,IAAI,EAAE;wBACpC,UAAU,EAAE,MAAM,CAAC,IAAI,CAAC,IAAI;wBAC5B,6EAA6E;wBAC7E,+CAA+C;wBAC/C,QAAQ,EAAE,UAAU;wBACpB,QAAQ,EAAE,WAAW,CAAC,QAAQ;wBAC9B,UAAU,EAAE,CAAC,QAAQ,EAAE,EAAE;4BACxB,YAAY,CAAC,QAAQ,GAAG,QAAQ,CAAA;wBACjC,CAAC;wBACD,KAAK;wBACL,MAAM,EAAE,CAAC,MAAM,EAAE,EAAE;4BAClB,MAAM,CAAC,MAAM,CAAC,CAAA;4BACd,IAAI,WAAW;gCAAE,KAAK,MAAM,CAAC,IAAI,CAAC,YAAY,CAAC,MAAM,CAAC,eAAe,CAAC,CAAA;wBACvE,CAAC;wBACD,MAAM;qBACN,CAAC,CAAA;oBACF,OAAO,MAAM,OAAO,CAAC,EAAE,KAAK,EAAE,EAAE,EAAE,cAAc,EAAE,MAAM,EAAE,CAAC,CAAA;gBAC5D,CAAC;gBAAC,OAAO,MAAM,EAAE,CAAC;oBACjB,kFAAkF;oBAClF,IAAI,KAAK,KAAK,IAAI;wBAAE,KAAK,aAAa,CAAC,IAAI,EAAE,KAAK,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBACnE,sFAAsF;oBACtF,2EAA2E;oBAC3E,MAAM,IAAI,GAAG,OAAO,CAAC,OAAO,EAAE,CAAA;oBAC9B,MAAM,EAAE,QAAQ,EAAE,GAAG,YAAY,CAAA;oBACjC,IAAI,QAAQ,KAAK,IAAI,IAAI,IAAI,KAAK,SAAS,IAAI,IAAI,CAAC,QAAQ,KAAK,QAAQ,EAAE,CAAC;wBAC3E,MAAM,OAAO,CAAC,IAAI,CAAC,EAAE,GAAG,IAAI,EAAE,QAAQ,EAAE,CAAC,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;oBAC1D,CAAC;oBACD,MAAM,MAAM,CAAA;gBACb,CAAC;YACF,CAAC;YAED,oFAAoF;YACpF,OAAO,EAAE,CAAC,UAAU,EAAE,EAAE,CAAC,OAAO,CAAC,UAAU,CAAC;YAE5C,OAAO,EAAE,GAAG,EAAE,CAAC,OAAO,CAAC,OAAO,EAAE;SAChC;KACD,CAAA;AACF,CAAC","sourcesContent":["import type { CredentialStore, RasterHost } from './adapters/index.js'\nimport { getAsset, hasMorePages, listAssets } from './api/assets.js'\nimport { RasterApiError } from './api/errors.js'\nimport { listLibraries } from './api/libraries.js'\nimport { type Me, getMe, meCredentialOrganizations } from './api/me.js'\nimport { type PromoteResult, promoteVariant, waitUntilPromoted } from './api/promote.js'\nimport { type SearchResult, searchAssets } from './api/search.js'\nimport { type Transport, createTransport } from './api/transport.js'\nimport { type UploadSource, uploadAsset, waitUntilProcessed } from './api/upload.js'\nimport { type DeviceAuthorization, signInWithDevice } from './auth/device.js'\nimport type { AuthContext } from './auth/http.js'\nimport { type SessionStore, createSessionStore } from './auth/session.js'\nimport { revokeSession } from './auth/tokens.js'\nimport { API_ORIGIN, AUTH_ORIGIN } from './constants.js'\nimport type { Asset, UploadedAsset } from './types/asset.js'\nimport type { Library } from './types/library.js'\nimport type { OAuthSession, StoredCredentials } from './types/session.js'\n\nexport type RasterClientConfig = {\n\t/** Which application this is, and how it reaches the user's browser. */\n\thost: RasterHost\n\t/** Where the credential lives. See the security note on `CredentialStore`. */\n\tcredentials: CredentialStore\n\t/** Override for tests or a proxy. Defaults to `https://api.raster.app`. */\n\tapiOrigin?: string\n\t/** Override for tests. Defaults to `https://raster.app`. */\n\tauthOrigin?: string\n\t/** Override `fetch`. Defaults to the global one, bound to `globalThis`. */\n\tfetch?: typeof globalThis.fetch\n}\n\nexport interface RasterClient {\n\treadonly host: RasterHost\n\treadonly session: SessionStore\n\t/** Escape hatch: the raw authorized transport, for endpoints the SDK has not wrapped. */\n\treadonly transport: Transport\n\n\t/** Resolve what the current credential can reach. Doubles as credential validation. */\n\tme(bearer?: string): Promise<Me>\n\n\tlibraries: {\n\t\t/** Every library in the organization, however many pages that takes. */\n\t\tlist(options: {\n\t\t\torganizationId: string\n\t\t\torganizationName?: string | null\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<Array<Library>>\n\t}\n\n\tassets: {\n\t\tlist(options: {\n\t\t\torganizationId: string\n\t\t\tlibraryId: string\n\t\t\tpage?: number\n\t\t\tpageSize?: number\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<Array<Asset>>\n\t\tget(options: {\n\t\t\torganizationId: string\n\t\t\tlibraryId: string\n\t\t\tassetId: string\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<Asset>\n\t\tupload(options: {\n\t\t\torganizationId: string\n\t\t\tlibraryId: string\n\t\t\tparentId?: string | null\n\t\t\tsource: UploadSource\n\t\t\tfilename?: string\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<UploadedAsset>\n\t\t/**\n\t\t * Wait until Raster has processed an upload, which is after `upload` returns. Resolves\n\t\t * with the asset — for a variant, its parent, whose `variants` then carry it — or with\n\t\t * null if it was still processing when the wait gave up.\n\t\t */\n\t\twaitUntilProcessed(options: {\n\t\t\torganizationId: string\n\t\t\tlibraryId: string\n\t\t\tassetId: string\n\t\t\tparentId?: string | null\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<Asset | null>\n\t\tpromote(options: {\n\t\t\torganizationId: string\n\t\t\tlibraryId: string\n\t\t\tassetId: string\n\t\t\tvariantId: string\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<PromoteResult>\n\t\t/**\n\t\t * Wait until a promote has landed, which is after `promote` returns. Resolves with the\n\t\t * asset as it then reads, or with null if it had not landed when the wait gave up.\n\t\t */\n\t\twaitUntilPromoted(options: {\n\t\t\torganizationId: string\n\t\t\tlibraryId: string\n\t\t\tassetId: string\n\t\t\tvariantId: string\n\t\t\tsignal?: AbortSignal\n\t\t}): Promise<Asset | null>\n\t\thasMorePages: typeof hasMorePages\n\t}\n\n\tsearch(options: {\n\t\torganizationId: string\n\t\tquery: string\n\t\tlibraryIds?: Array<string>\n\t\tpage?: number\n\t\tpageSize?: number\n\t\tsignal?: AbortSignal\n\t}): Promise<SearchResult>\n\n\tauth: {\n\t\t/**\n\t\t * Sign in with the device grant (RFC 8628), which works in every host, a Figma plugin's\n\t\t * null-origin iframe included. Opens the consent page through `host.openExternal` as\n\t\t * soon as the code exists, unless `openBrowser: false` leaves that to the caller.\n\t\t */\n\t\tsignInWithDevice(options: {\n\t\t\tonCode: (device: DeviceAuthorization) => void\n\t\t\tsignal: AbortSignal\n\t\t\topenBrowser?: boolean\n\t\t\t/**\n\t\t\t * `user`, the default, lets the user grant every organization or narrow the grant to\n\t\t\t * one on the consent page; `org` has them pick exactly one. Access tokens last 60\n\t\t\t * minutes for one organization and 15 for every organization.\n\t\t\t */\n\t\t\tscope?: 'user' | 'org'\n\t\t\t/**\n\t\t\t * The organization the sign-in must be bound to. The consent page cannot preselect it,\n\t\t\t * so when the user grants another, or the whole account, the session is revoked\n\t\t\t * unsaved and the call fails with `ORGANIZATION_MISMATCH`.\n\t\t\t */\n\t\t\torganizationId?: string\n\t\t}): Promise<StoredCredentials>\n\n\t\t/**\n\t\t * Adopt a credential once `/me` accepts it, and persist what `/me` reports with it (the\n\t\t * account name, the organizations reached). The device sign-in ends here too. Verifying\n\t\t * first makes a bad key an error on the form rather than a broken session later.\n\t\t */\n\t\tconnect(credential: { apiKey: string } | { oauth: OAuthSession }): Promise<StoredCredentials>\n\n\t\tsignOut(): Promise<void>\n\t}\n}\n\nexport function createRasterClient(config: RasterClientConfig): RasterClient {\n\tconst apiOrigin = config.apiOrigin ?? API_ORIGIN\n\tconst authOrigin = config.authOrigin ?? AUTH_ORIGIN\n\t// Bound to globalThis: an unbound `fetch` throws `Illegal invocation` in a browser.\n\tconst fetchImpl = config.fetch ?? globalThis.fetch.bind(globalThis)\n\n\tconst auth: AuthContext = { authOrigin, fetch: fetchImpl }\n\tconst session = createSessionStore({ credentials: config.credentials, auth })\n\tconst transport = createTransport({ origin: apiOrigin, session, fetch: fetchImpl })\n\n\tasync function connect(\n\t\tcredential: { apiKey: string } | { oauth: OAuthSession },\n\t\toptions: { organizationId?: string; signal?: AbortSignal } = {}\n\t): Promise<StoredCredentials> {\n\t\tconst { organizationId, signal } = options\n\t\tif ('apiKey' in credential) {\n\t\t\t// Copied keys often carry stray whitespace, which the API would refuse as another key.\n\t\t\tcredential = { apiKey: credential.apiKey.trim() }\n\t\t\tif (credential.apiKey === '') {\n\t\t\t\tthrow new RasterApiError('Enter your API key to continue.', 'API_KEY_REQUIRED', 400)\n\t\t\t}\n\t\t}\n\t\tconst bearer = 'apiKey' in credential ? credential.apiKey : credential.oauth.accessToken\n\t\tconst me = await getMe(transport, bearer, signal)\n\t\t// Only an organization-bound grant names its organization at the top level. A grant of\n\t\t// the whole account lists `organizations`, even when the account holds just that one.\n\t\tif (\n\t\t\torganizationId !== undefined &&\n\t\t\t('organizations' in me || me.organizationId !== organizationId)\n\t\t) {\n\t\t\tthrow new RasterApiError(\n\t\t\t\t'That sign-in doesn’t match the Raster organization this app uses. Sign in again and choose that organization.',\n\t\t\t\t'ORGANIZATION_MISMATCH',\n\t\t\t\t403\n\t\t\t)\n\t\t}\n\n\t\tconst existing = session.current() ?? (await session.hydrate())\n\t\tconst next: StoredCredentials = {\n\t\t\t// The registration outlives the session it was made for; see `StoredCredentials`.\n\t\t\tclientId: 'oauth' in credential ? credential.oauth.clientId : (existing.clientId ?? null),\n\t\t\tapiKey: 'apiKey' in credential ? credential.apiKey : null,\n\t\t\toauth: 'oauth' in credential ? { ...credential.oauth, signInId: crypto.randomUUID() } : null,\n\t\t\tuserName: me.user?.name ?? null,\n\t\t\torganizations: meCredentialOrganizations(me),\n\t\t}\n\t\t// The last point a cancel can stop the sign-in, after `/me` and the hydrate awaits.\n\t\tif (signal?.aborted) throw new RasterApiError('Sign-in cancelled.', 'ABORTED', 0)\n\t\tawait session.save(next)\n\n\t\t// Nobody holds the replaced session now. Left live, it would sit in Connected apps\n\t\t// under this client's name beside the new one. Best-effort, like `signOut`.\n\t\tconst previous = existing.oauth\n\t\tif (previous !== null && previous.refreshToken !== next.oauth?.refreshToken) {\n\t\t\tvoid revokeSession(auth, previous).catch(() => {})\n\t\t}\n\t\treturn next\n\t}\n\n\treturn {\n\t\thost: config.host,\n\t\tsession,\n\t\ttransport,\n\n\t\tme: (bearer) => getMe(transport, bearer),\n\n\t\tlibraries: {\n\t\t\tlist: (options) => listLibraries(transport, options),\n\t\t},\n\n\t\tassets: {\n\t\t\tlist: (options) => listAssets(transport, options),\n\t\t\tget: (options) => getAsset(transport, options),\n\t\t\tupload: (options) => uploadAsset(transport, options),\n\t\t\twaitUntilProcessed: (options) => waitUntilProcessed(transport, options),\n\t\t\tpromote: (options) => promoteVariant(transport, options),\n\t\t\twaitUntilPromoted: (options) => waitUntilPromoted(transport, options),\n\t\t\thasMorePages,\n\t\t},\n\n\t\tsearch: (options) => searchAssets(transport, options),\n\n\t\tauth: {\n\t\t\tasync signInWithDevice({\n\t\t\t\tonCode,\n\t\t\t\tsignal,\n\t\t\t\topenBrowser = true,\n\t\t\t\tscope = 'user',\n\t\t\t\torganizationId,\n\t\t\t}) {\n\t\t\t\tconst credentials = session.current() ?? (await session.hydrate())\n\t\t\t\tconst registration: { clientId: string | null } = { clientId: null }\n\t\t\t\tlet oauth: OAuthSession | null = null\n\t\t\t\ttry {\n\t\t\t\t\toauth = await signInWithDevice(auth, {\n\t\t\t\t\t\tclientName: config.host.name,\n\t\t\t\t\t\t// The token's audience: the real API even when `apiOrigin` is a proxy, since\n\t\t\t\t\t\t// Raster refuses a resource it does not serve.\n\t\t\t\t\t\tresource: API_ORIGIN,\n\t\t\t\t\t\tclientId: credentials.clientId,\n\t\t\t\t\t\tonRegister: (clientId) => {\n\t\t\t\t\t\t\tregistration.clientId = clientId\n\t\t\t\t\t\t},\n\t\t\t\t\t\tscope,\n\t\t\t\t\t\tonCode: (device) => {\n\t\t\t\t\t\t\tonCode(device)\n\t\t\t\t\t\t\tif (openBrowser) void config.host.openExternal(device.verificationUrl)\n\t\t\t\t\t\t},\n\t\t\t\t\t\tsignal,\n\t\t\t\t\t})\n\t\t\t\t\treturn await connect({ oauth }, { organizationId, signal })\n\t\t\t\t} catch (caught) {\n\t\t\t\t\t// Minted but never adopted, so nobody holds it: revoke rather than leave it live.\n\t\t\t\t\tif (oauth !== null) void revokeSession(auth, oauth).catch(() => {})\n\t\t\t\t\t// Keep a client this attempt registered, so the next sign-in reuses it, and the saved\n\t\t\t\t\t// credential as it was: an earlier session refreshes under its own client.\n\t\t\t\t\tconst kept = session.current()\n\t\t\t\t\tconst { clientId } = registration\n\t\t\t\t\tif (clientId !== null && kept !== undefined && kept.clientId !== clientId) {\n\t\t\t\t\t\tawait session.save({ ...kept, clientId }).catch(() => {})\n\t\t\t\t\t}\n\t\t\t\t\tthrow caught\n\t\t\t\t}\n\t\t\t},\n\n\t\t\t// One argument only: a callback's extra arguments would reach the internal options.\n\t\t\tconnect: (credential) => connect(credential),\n\n\t\t\tsignOut: () => session.signOut(),\n\t\t},\n\t}\n}\n"]}

package/dist/constants.d.ts

@@ -0,0 +1,18 @@
+/**
+ * The Raster REST API. Also the OAuth resource every token is minted for (RFC 8707), so a
+ * token meant for another Raster host is refused here and vice versa.
+ */
+export declare const API_ORIGIN = "https://api.raster.app";
+/** The Raster authorization server, described at `/.well-known/oauth-authorization-server`. */
+export declare const AUTH_ORIGIN = "https://raster.app";
+/**
+ * The API version the SDK is written against, sent on every request. Payload shapes vary by
+ * version (`Vary: Api-Version`), so bumping it is a minor release with a changelog entry.
+ */
+export declare const API_VERSION = "2026-07-08";
+/**
+ * Every Raster host the SDK reaches: the API, the auth server and the two CDNs. A Figma
+ * plugin must list each in its manifest's `networkAccess.allowedDomains`, or requests to it
+ * fail as `NETWORK_ERROR`; checking the manifest against this list keeps the two in step.
+ */
+export declare const RASTER_HOSTS: readonly ["https://raster.app", "https://api.raster.app", "https://cdn.raster.app", "https://rstr.in"];

package/dist/constants.js

@@ -0,0 +1,24 @@
+/**
+ * The Raster REST API. Also the OAuth resource every token is minted for (RFC 8707), so a
+ * token meant for another Raster host is refused here and vice versa.
+ */
+export const API_ORIGIN = 'https://api.raster.app';
+/** The Raster authorization server, described at `/.well-known/oauth-authorization-server`. */
+export const AUTH_ORIGIN = 'https://raster.app';
+/**
+ * The API version the SDK is written against, sent on every request. Payload shapes vary by
+ * version (`Vary: Api-Version`), so bumping it is a minor release with a changelog entry.
+ */
+export const API_VERSION = '2026-07-08';
+/**
+ * Every Raster host the SDK reaches: the API, the auth server and the two CDNs. A Figma
+ * plugin must list each in its manifest's `networkAccess.allowedDomains`, or requests to it
+ * fail as `NETWORK_ERROR`; checking the manifest against this list keeps the two in step.
+ */
+export const RASTER_HOSTS = [
+    'https://raster.app',
+    'https://api.raster.app',
+    'https://cdn.raster.app',
+    'https://rstr.in',
+];
+//# sourceMappingURL=constants.js.map

package/dist/constants.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"constants.js","sourceRoot":"","sources":["../src/constants.ts"],"names":[],"mappings":"AAAA;;;GAGG;AACH,MAAM,CAAC,MAAM,UAAU,GAAG,wBAAwB,CAAA;AAElD,+FAA+F;AAC/F,MAAM,CAAC,MAAM,WAAW,GAAG,oBAAoB,CAAA;AAE/C;;;GAGG;AACH,MAAM,CAAC,MAAM,WAAW,GAAG,YAAY,CAAA;AAEvC;;;;GAIG;AACH,MAAM,CAAC,MAAM,YAAY,GAAG;IAC3B,oBAAoB;IACpB,wBAAwB;IACxB,wBAAwB;IACxB,iBAAiB;CACR,CAAA","sourcesContent":["/**\n * The Raster REST API. Also the OAuth resource every token is minted for (RFC 8707), so a\n * token meant for another Raster host is refused here and vice versa.\n */\nexport const API_ORIGIN = 'https://api.raster.app'\n\n/** The Raster authorization server, described at `/.well-known/oauth-authorization-server`. */\nexport const AUTH_ORIGIN = 'https://raster.app'\n\n/**\n * The API version the SDK is written against, sent on every request. Payload shapes vary by\n * version (`Vary: Api-Version`), so bumping it is a minor release with a changelog entry.\n */\nexport const API_VERSION = '2026-07-08'\n\n/**\n * Every Raster host the SDK reaches: the API, the auth server and the two CDNs. A Figma\n * plugin must list each in its manifest's `networkAccess.allowedDomains`, or requests to it\n * fail as `NETWORK_ERROR`; checking the manifest against this list keeps the two in step.\n */\nexport const RASTER_HOSTS = [\n\t'https://raster.app',\n\t'https://api.raster.app',\n\t'https://cdn.raster.app',\n\t'https://rstr.in',\n] as const\n"]}

package/dist/format.d.ts

@@ -0,0 +1,13 @@
+/** Decimal (SI) byte units, as the Raster app shows sizes and storage quotas. */
+export declare function formatBytes(bytes: number): string;
+/** An asset's `size`, or empty when it has none. */
+export declare function formatFileSize(bytes: number | null | undefined): string;
+/** `Jan 15, 2024`, in `en-US` as the Raster app shows dates. Empty for null. */
+export declare function formatDate(date: Date | number | null): string;
+/** The date with its weekday and time, in `en-US`. Empty for null. */
+export declare function formatDateLong(date: Date | number | null): string;
+/**
+ * A short relative label ("just now", "5m ago", "3h ago", "2d ago"), or `formatDate` once
+ * the date is 7 days old. Empty for null. `now` is injectable for deterministic tests.
+ */
+export declare function formatRelativeTime(date: Date | number | null, now?: Date): string;

package/dist/format.js

@@ -0,0 +1,83 @@
+const BYTES_PER_KB = 1000;
+const BYTES_PER_MB = 1000 * BYTES_PER_KB;
+const BYTES_PER_GB = 1000 * BYTES_PER_MB;
+const BYTES_PER_TB = 1000 * BYTES_PER_GB;
+/** Decimal (SI) byte units, as the Raster app shows sizes and storage quotas. */
+export function formatBytes(bytes) {
+    if (bytes >= BYTES_PER_TB)
+        return `${(bytes / BYTES_PER_TB).toFixed(2)} TB`;
+    if (bytes >= BYTES_PER_GB)
+        return `${(bytes / BYTES_PER_GB).toFixed(2)} GB`;
+    if (bytes >= BYTES_PER_MB)
+        return `${(bytes / BYTES_PER_MB).toFixed(1)} MB`;
+    if (bytes >= BYTES_PER_KB)
+        return `${(bytes / BYTES_PER_KB).toFixed(0)} KB`;
+    return `${bytes} B`;
+}
+/** An asset's `size`, or empty when it has none. */
+export function formatFileSize(bytes) {
+    if (bytes == null || !Number.isFinite(bytes) || bytes < 0)
+        return '';
+    return formatBytes(bytes);
+}
+/** A `Date`, or the Unix milliseconds `Asset.created` and `updated` hold. */
+function toDate(date) {
+    return typeof date === 'number' ? new Date(date) : date;
+}
+/** `Jan 15, 2024`, in `en-US` as the Raster app shows dates. Empty for null. */
+export function formatDate(date) {
+    const value = toDate(date);
+    if (!value)
+        return '';
+    return value.toLocaleDateString('en-US', {
+        month: 'short',
+        day: 'numeric',
+        year: 'numeric',
+    });
+}
+/** The date with its weekday and time, in `en-US`. Empty for null. */
+export function formatDateLong(date) {
+    const value = toDate(date);
+    if (!value)
+        return '';
+    return value.toLocaleDateString('en-US', {
+        weekday: 'long',
+        month: 'long',
+        day: 'numeric',
+        year: 'numeric',
+        hour: 'numeric',
+        minute: '2-digit',
+    });
+}
+const SECOND_MS = 1000;
+const MINUTE_MS = 60 * SECOND_MS;
+const HOUR_MS = 60 * MINUTE_MS;
+const DAY_MS = 24 * HOUR_MS;
+/** Beyond this age, a relative label is less useful than an absolute date. */
+const RELATIVE_TIME_FALLBACK_MS = 7 * DAY_MS;
+/**
+ * A short relative label ("just now", "5m ago", "3h ago", "2d ago"), or `formatDate` once
+ * the date is 7 days old. Empty for null. `now` is injectable for deterministic tests.
+ */
+export function formatRelativeTime(date, now = new Date()) {
+    const value = toDate(date);
+    if (!value)
+        return '';
+    const diffMs = now.getTime() - value.getTime();
+    if (diffMs >= RELATIVE_TIME_FALLBACK_MS)
+        return formatDate(value);
+    if (diffMs < MINUTE_MS)
+        return 'just now';
+    const relative = new Intl.RelativeTimeFormat('en-US', {
+        numeric: 'always',
+        style: 'narrow',
+    });
+    if (diffMs < HOUR_MS) {
+        return relative.format(-Math.floor(diffMs / MINUTE_MS), 'minute');
+    }
+    if (diffMs < DAY_MS) {
+        return relative.format(-Math.floor(diffMs / HOUR_MS), 'hour');
+    }
+    return relative.format(-Math.floor(diffMs / DAY_MS), 'day');
+}
+//# sourceMappingURL=format.js.map

package/dist/format.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"format.js","sourceRoot":"","sources":["../src/format.ts"],"names":[],"mappings":"AAAA,MAAM,YAAY,GAAG,IAAI,CAAA;AACzB,MAAM,YAAY,GAAG,IAAI,GAAG,YAAY,CAAA;AACxC,MAAM,YAAY,GAAG,IAAI,GAAG,YAAY,CAAA;AACxC,MAAM,YAAY,GAAG,IAAI,GAAG,YAAY,CAAA;AAExC,iFAAiF;AACjF,MAAM,UAAU,WAAW,CAAC,KAAa;IACxC,IAAI,KAAK,IAAI,YAAY;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC3E,IAAI,KAAK,IAAI,YAAY;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC3E,IAAI,KAAK,IAAI,YAAY;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC3E,IAAI,KAAK,IAAI,YAAY;QAAE,OAAO,GAAG,CAAC,KAAK,GAAG,YAAY,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,KAAK,CAAA;IAC3E,OAAO,GAAG,KAAK,IAAI,CAAA;AACpB,CAAC;AAED,oDAAoD;AACpD,MAAM,UAAU,cAAc,CAAC,KAAgC;IAC9D,IAAI,KAAK,IAAI,IAAI,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,KAAK,GAAG,CAAC;QAAE,OAAO,EAAE,CAAA;IACpE,OAAO,WAAW,CAAC,KAAK,CAAC,CAAA;AAC1B,CAAC;AAED,6EAA6E;AAC7E,SAAS,MAAM,CAAC,IAA0B;IACzC,OAAO,OAAO,IAAI,KAAK,QAAQ,CAAC,CAAC,CAAC,IAAI,IAAI,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC,IAAI,CAAA;AACxD,CAAC;AAED,gFAAgF;AAChF,MAAM,UAAU,UAAU,CAAC,IAA0B;IACpD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACxC,KAAK,EAAE,OAAO;QACd,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;KACf,CAAC,CAAA;AACH,CAAC;AAED,sEAAsE;AACtE,MAAM,UAAU,cAAc,CAAC,IAA0B;IACxD,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IACrB,OAAO,KAAK,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACxC,OAAO,EAAE,MAAM;QACf,KAAK,EAAE,MAAM;QACb,GAAG,EAAE,SAAS;QACd,IAAI,EAAE,SAAS;QACf,IAAI,EAAE,SAAS;QACf,MAAM,EAAE,SAAS;KACjB,CAAC,CAAA;AACH,CAAC;AAED,MAAM,SAAS,GAAG,IAAK,CAAA;AACvB,MAAM,SAAS,GAAG,EAAE,GAAG,SAAS,CAAA;AAChC,MAAM,OAAO,GAAG,EAAE,GAAG,SAAS,CAAA;AAC9B,MAAM,MAAM,GAAG,EAAE,GAAG,OAAO,CAAA;AAC3B,8EAA8E;AAC9E,MAAM,yBAAyB,GAAG,CAAC,GAAG,MAAM,CAAA;AAE5C;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,IAA0B,EAAE,MAAY,IAAI,IAAI,EAAE;IACpF,MAAM,KAAK,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;IAC1B,IAAI,CAAC,KAAK;QAAE,OAAO,EAAE,CAAA;IAErB,MAAM,MAAM,GAAG,GAAG,CAAC,OAAO,EAAE,GAAG,KAAK,CAAC,OAAO,EAAE,CAAA;IAC9C,IAAI,MAAM,IAAI,yBAAyB;QAAE,OAAO,UAAU,CAAC,KAAK,CAAC,CAAA;IACjE,IAAI,MAAM,GAAG,SAAS;QAAE,OAAO,UAAU,CAAA;IAEzC,MAAM,QAAQ,GAAG,IAAI,IAAI,CAAC,kBAAkB,CAAC,OAAO,EAAE;QACrD,OAAO,EAAE,QAAQ;QACjB,KAAK,EAAE,QAAQ;KACf,CAAC,CAAA;IAEF,IAAI,MAAM,GAAG,OAAO,EAAE,CAAC;QACtB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,SAAS,CAAC,EAAE,QAAQ,CAAC,CAAA;IAClE,CAAC;IACD,IAAI,MAAM,GAAG,MAAM,EAAE,CAAC;QACrB,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,OAAO,CAAC,EAAE,MAAM,CAAC,CAAA;IAC9D,CAAC;IACD,OAAO,QAAQ,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,KAAK,CAAC,MAAM,GAAG,MAAM,CAAC,EAAE,KAAK,CAAC,CAAA;AAC5D,CAAC","sourcesContent":["const BYTES_PER_KB = 1000\nconst BYTES_PER_MB = 1000 * BYTES_PER_KB\nconst BYTES_PER_GB = 1000 * BYTES_PER_MB\nconst BYTES_PER_TB = 1000 * BYTES_PER_GB\n\n/** Decimal (SI) byte units, as the Raster app shows sizes and storage quotas. */\nexport function formatBytes(bytes: number): string {\n\tif (bytes >= BYTES_PER_TB) return `${(bytes / BYTES_PER_TB).toFixed(2)} TB`\n\tif (bytes >= BYTES_PER_GB) return `${(bytes / BYTES_PER_GB).toFixed(2)} GB`\n\tif (bytes >= BYTES_PER_MB) return `${(bytes / BYTES_PER_MB).toFixed(1)} MB`\n\tif (bytes >= BYTES_PER_KB) return `${(bytes / BYTES_PER_KB).toFixed(0)} KB`\n\treturn `${bytes} B`\n}\n\n/** An asset's `size`, or empty when it has none. */\nexport function formatFileSize(bytes: number | null | undefined): string {\n\tif (bytes == null || !Number.isFinite(bytes) || bytes < 0) return ''\n\treturn formatBytes(bytes)\n}\n\n/** A `Date`, or the Unix milliseconds `Asset.created` and `updated` hold. */\nfunction toDate(date: Date | number | null): Date | null {\n\treturn typeof date === 'number' ? new Date(date) : date\n}\n\n/** `Jan 15, 2024`, in `en-US` as the Raster app shows dates. Empty for null. */\nexport function formatDate(date: Date | number | null): string {\n\tconst value = toDate(date)\n\tif (!value) return ''\n\treturn value.toLocaleDateString('en-US', {\n\t\tmonth: 'short',\n\t\tday: 'numeric',\n\t\tyear: 'numeric',\n\t})\n}\n\n/** The date with its weekday and time, in `en-US`. Empty for null. */\nexport function formatDateLong(date: Date | number | null): string {\n\tconst value = toDate(date)\n\tif (!value) return ''\n\treturn value.toLocaleDateString('en-US', {\n\t\tweekday: 'long',\n\t\tmonth: 'long',\n\t\tday: 'numeric',\n\t\tyear: 'numeric',\n\t\thour: 'numeric',\n\t\tminute: '2-digit',\n\t})\n}\n\nconst SECOND_MS = 1_000\nconst MINUTE_MS = 60 * SECOND_MS\nconst HOUR_MS = 60 * MINUTE_MS\nconst DAY_MS = 24 * HOUR_MS\n/** Beyond this age, a relative label is less useful than an absolute date. */\nconst RELATIVE_TIME_FALLBACK_MS = 7 * DAY_MS\n\n/**\n * A short relative label (\"just now\", \"5m ago\", \"3h ago\", \"2d ago\"), or `formatDate` once\n * the date is 7 days old. Empty for null. `now` is injectable for deterministic tests.\n */\nexport function formatRelativeTime(date: Date | number | null, now: Date = new Date()): string {\n\tconst value = toDate(date)\n\tif (!value) return ''\n\n\tconst diffMs = now.getTime() - value.getTime()\n\tif (diffMs >= RELATIVE_TIME_FALLBACK_MS) return formatDate(value)\n\tif (diffMs < MINUTE_MS) return 'just now'\n\n\tconst relative = new Intl.RelativeTimeFormat('en-US', {\n\t\tnumeric: 'always',\n\t\tstyle: 'narrow',\n\t})\n\n\tif (diffMs < HOUR_MS) {\n\t\treturn relative.format(-Math.floor(diffMs / MINUTE_MS), 'minute')\n\t}\n\tif (diffMs < DAY_MS) {\n\t\treturn relative.format(-Math.floor(diffMs / HOUR_MS), 'hour')\n\t}\n\treturn relative.format(-Math.floor(diffMs / DAY_MS), 'day')\n}\n"]}

package/dist/images/blurhash-placeholder.d.ts

@@ -0,0 +1,5 @@
+/**
+ * A BlurHash as a tiny PNG `data:` URL, to paint behind a thumbnail while it loads. Null for a
+ * missing or malformed hash, or without a `document` to draw it with.
+ */
+export declare function blurhashToDataUrl(hash: string | null | undefined): string | null;

package/dist/images/blurhash-placeholder.js

@@ -0,0 +1,47 @@
+import { decodeBlurhash } from './blurhash.js';
+/** The browser upscales a smooth gradient with no visible blocks, so 32×32 is plenty. */
+const PLACEHOLDER_EDGE = 32;
+/** Grid cells re-render on scroll, so decodes are cached, up to this many hashes. */
+const CACHE_LIMIT = 400;
+/** A hash that fails to decode is cached as null, so it is not decoded again every frame. */
+const cache = new Map();
+/**
+ * A BlurHash as a tiny PNG `data:` URL, to paint behind a thumbnail while it loads. Null for a
+ * missing or malformed hash, or without a `document` to draw it with.
+ */
+export function blurhashToDataUrl(hash) {
+    if (!hash)
+        return null;
+    if (cache.has(hash))
+        return cache.get(hash) ?? null;
+    // Not cached: once a server-rendered page hydrates, the first client render retries.
+    if (typeof document === 'undefined')
+        return null;
+    let dataUrl = null;
+    try {
+        const pixels = decodeBlurhash(hash, PLACEHOLDER_EDGE, PLACEHOLDER_EDGE);
+        const canvas = document.createElement('canvas');
+        canvas.width = PLACEHOLDER_EDGE;
+        canvas.height = PLACEHOLDER_EDGE;
+        const context = canvas.getContext('2d');
+        if (context) {
+            const imageData = context.createImageData(PLACEHOLDER_EDGE, PLACEHOLDER_EDGE);
+            imageData.data.set(pixels);
+            context.putImageData(imageData, 0, 0);
+            dataUrl = canvas.toDataURL();
+        }
+    }
+    catch {
+        // A render path must not throw.
+        dataUrl = null;
+    }
+    // FIFO-evict the oldest entry when full (Map preserves insertion order).
+    if (cache.size >= CACHE_LIMIT) {
+        const oldest = cache.keys().next().value;
+        if (oldest !== undefined)
+            cache.delete(oldest);
+    }
+    cache.set(hash, dataUrl);
+    return dataUrl;
+}
+//# sourceMappingURL=blurhash-placeholder.js.map

package/dist/images/blurhash-placeholder.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blurhash-placeholder.js","sourceRoot":"","sources":["../../src/images/blurhash-placeholder.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,cAAc,EAAE,MAAM,eAAe,CAAA;AAE9C,yFAAyF;AACzF,MAAM,gBAAgB,GAAG,EAAE,CAAA;AAC3B,qFAAqF;AACrF,MAAM,WAAW,GAAG,GAAG,CAAA;AACvB,6FAA6F;AAC7F,MAAM,KAAK,GAAG,IAAI,GAAG,EAAyB,CAAA;AAE9C;;;GAGG;AACH,MAAM,UAAU,iBAAiB,CAAC,IAA+B;IAChE,IAAI,CAAC,IAAI;QAAE,OAAO,IAAI,CAAA;IAEtB,IAAI,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC;QAAE,OAAO,KAAK,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,IAAI,CAAA;IAEnD,qFAAqF;IACrF,IAAI,OAAO,QAAQ,KAAK,WAAW;QAAE,OAAO,IAAI,CAAA;IAEhD,IAAI,OAAO,GAAkB,IAAI,CAAA;IACjC,IAAI,CAAC;QACJ,MAAM,MAAM,GAAG,cAAc,CAAC,IAAI,EAAE,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;QACvE,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,CAAC,QAAQ,CAAC,CAAA;QAC/C,MAAM,CAAC,KAAK,GAAG,gBAAgB,CAAA;QAC/B,MAAM,CAAC,MAAM,GAAG,gBAAgB,CAAA;QAChC,MAAM,OAAO,GAAG,MAAM,CAAC,UAAU,CAAC,IAAI,CAAC,CAAA;QACvC,IAAI,OAAO,EAAE,CAAC;YACb,MAAM,SAAS,GAAG,OAAO,CAAC,eAAe,CAAC,gBAAgB,EAAE,gBAAgB,CAAC,CAAA;YAC7E,SAAS,CAAC,IAAI,CAAC,GAAG,CAAC,MAAM,CAAC,CAAA;YAC1B,OAAO,CAAC,YAAY,CAAC,SAAS,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;YACrC,OAAO,GAAG,MAAM,CAAC,SAAS,EAAE,CAAA;QAC7B,CAAC;IACF,CAAC;IAAC,MAAM,CAAC;QACR,gCAAgC;QAChC,OAAO,GAAG,IAAI,CAAA;IACf,CAAC;IAED,yEAAyE;IACzE,IAAI,KAAK,CAAC,IAAI,IAAI,WAAW,EAAE,CAAC;QAC/B,MAAM,MAAM,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,IAAI,EAAE,CAAC,KAAK,CAAA;QACxC,IAAI,MAAM,KAAK,SAAS;YAAE,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAA;IAC/C,CAAC;IACD,KAAK,CAAC,GAAG,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACxB,OAAO,OAAO,CAAA;AACf,CAAC","sourcesContent":["import { decodeBlurhash } from './blurhash.js'\n\n/** The browser upscales a smooth gradient with no visible blocks, so 32×32 is plenty. */\nconst PLACEHOLDER_EDGE = 32\n/** Grid cells re-render on scroll, so decodes are cached, up to this many hashes. */\nconst CACHE_LIMIT = 400\n/** A hash that fails to decode is cached as null, so it is not decoded again every frame. */\nconst cache = new Map<string, string | null>()\n\n/**\n * A BlurHash as a tiny PNG `data:` URL, to paint behind a thumbnail while it loads. Null for a\n * missing or malformed hash, or without a `document` to draw it with.\n */\nexport function blurhashToDataUrl(hash: string | null | undefined): string | null {\n\tif (!hash) return null\n\n\tif (cache.has(hash)) return cache.get(hash) ?? null\n\n\t// Not cached: once a server-rendered page hydrates, the first client render retries.\n\tif (typeof document === 'undefined') return null\n\n\tlet dataUrl: string | null = null\n\ttry {\n\t\tconst pixels = decodeBlurhash(hash, PLACEHOLDER_EDGE, PLACEHOLDER_EDGE)\n\t\tconst canvas = document.createElement('canvas')\n\t\tcanvas.width = PLACEHOLDER_EDGE\n\t\tcanvas.height = PLACEHOLDER_EDGE\n\t\tconst context = canvas.getContext('2d')\n\t\tif (context) {\n\t\t\tconst imageData = context.createImageData(PLACEHOLDER_EDGE, PLACEHOLDER_EDGE)\n\t\t\timageData.data.set(pixels)\n\t\t\tcontext.putImageData(imageData, 0, 0)\n\t\t\tdataUrl = canvas.toDataURL()\n\t\t}\n\t} catch {\n\t\t// A render path must not throw.\n\t\tdataUrl = null\n\t}\n\n\t// FIFO-evict the oldest entry when full (Map preserves insertion order).\n\tif (cache.size >= CACHE_LIMIT) {\n\t\tconst oldest = cache.keys().next().value\n\t\tif (oldest !== undefined) cache.delete(oldest)\n\t}\n\tcache.set(hash, dataUrl)\n\treturn dataUrl\n}\n"]}

package/dist/images/blurhash.d.ts

@@ -0,0 +1,2 @@
+/** Decode a BlurHash into RGBA pixel bytes of the requested size. `punch` boosts contrast. */
+export declare function decodeBlurhash(hash: string, width: number, height: number, punch?: number): Uint8ClampedArray;

package/dist/images/blurhash.js

@@ -0,0 +1,77 @@
+// The 83-character alphabet the BlurHash wire format packs integers into.
+const BASE83 = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz#$%*+,-.:;=?@[]^_{|}~';
+function base83Decode(text) {
+    let value = 0;
+    for (const character of text) {
+        const digit = BASE83.indexOf(character);
+        if (digit === -1)
+            throw new Error(`Invalid base83 character: ${character}`);
+        value = value * 83 + digit;
+    }
+    return value;
+}
+// sRGB gamma -> linear light (standard IEC 61966-2-1 transfer function).
+function toLinear(srgb) {
+    const channel = srgb / 255;
+    return channel <= 0.04045 ? channel / 12.92 : ((channel + 0.055) / 1.055) ** 2.4;
+}
+function toSrgb(linear) {
+    const clamped = Math.max(0, Math.min(1, linear));
+    const channel = clamped <= 0.0031308 ? clamped * 12.92 : 1.055 * clamped ** (1 / 2.4) - 0.055;
+    return Math.trunc(channel * 255 + 0.5);
+}
+function signedPow(value, exponent) {
+    return (value < 0 ? -1 : 1) * Math.abs(value) ** exponent;
+}
+/** Decode a BlurHash into RGBA pixel bytes of the requested size. `punch` boosts contrast. */
+export function decodeBlurhash(hash, width, height, punch = 1) {
+    const sizeFlag = base83Decode(hash[0] ?? '');
+    const componentsX = (sizeFlag % 9) + 1;
+    const componentsY = Math.floor(sizeFlag / 9) + 1;
+    const maximumValue = (base83Decode(hash[1] ?? '') + 1) / 166;
+    const colors = [];
+    const componentCount = componentsX * componentsY;
+    for (let index = 0; index < componentCount; index++) {
+        if (index === 0) {
+            const value = base83Decode(hash.substring(2, 6));
+            colors.push([toLinear(value >> 16), toLinear((value >> 8) & 255), toLinear(value & 255)]);
+        }
+        else {
+            const value = base83Decode(hash.substring(4 + index * 2, 6 + index * 2));
+            const scale = maximumValue * punch;
+            const quantR = Math.floor(value / (19 * 19));
+            const quantG = Math.floor(value / 19) % 19;
+            const quantB = value % 19;
+            colors.push([
+                signedPow((quantR - 9) / 9, 2) * scale,
+                signedPow((quantG - 9) / 9, 2) * scale,
+                signedPow((quantB - 9) / 9, 2) * scale,
+            ]);
+        }
+    }
+    const bytesPerRow = width * 4;
+    const pixels = new Uint8ClampedArray(bytesPerRow * height);
+    for (let y = 0; y < height; y++) {
+        for (let x = 0; x < width; x++) {
+            let red = 0;
+            let green = 0;
+            let blue = 0;
+            for (let cy = 0; cy < componentsY; cy++) {
+                for (let cx = 0; cx < componentsX; cx++) {
+                    const basis = Math.cos((Math.PI * x * cx) / width) * Math.cos((Math.PI * y * cy) / height);
+                    const color = colors[cx + cy * componentsX] ?? [0, 0, 0];
+                    red += color[0] * basis;
+                    green += color[1] * basis;
+                    blue += color[2] * basis;
+                }
+            }
+            const index = 4 * x + y * bytesPerRow;
+            pixels[index] = toSrgb(red);
+            pixels[index + 1] = toSrgb(green);
+            pixels[index + 2] = toSrgb(blue);
+            pixels[index + 3] = 255;
+        }
+    }
+    return pixels;
+}
+//# sourceMappingURL=blurhash.js.map

package/dist/images/blurhash.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"blurhash.js","sourceRoot":"","sources":["../../src/images/blurhash.ts"],"names":[],"mappings":"AAAA,0EAA0E;AAC1E,MAAM,MAAM,GAAG,qFAAqF,CAAA;AAEpG,SAAS,YAAY,CAAC,IAAY;IACjC,IAAI,KAAK,GAAG,CAAC,CAAA;IACb,KAAK,MAAM,SAAS,IAAI,IAAI,EAAE,CAAC;QAC9B,MAAM,KAAK,GAAG,MAAM,CAAC,OAAO,CAAC,SAAS,CAAC,CAAA;QACvC,IAAI,KAAK,KAAK,CAAC,CAAC;YAAE,MAAM,IAAI,KAAK,CAAC,6BAA6B,SAAS,EAAE,CAAC,CAAA;QAC3E,KAAK,GAAG,KAAK,GAAG,EAAE,GAAG,KAAK,CAAA;IAC3B,CAAC;IACD,OAAO,KAAK,CAAA;AACb,CAAC;AAED,yEAAyE;AACzE,SAAS,QAAQ,CAAC,IAAY;IAC7B,MAAM,OAAO,GAAG,IAAI,GAAG,GAAG,CAAA;IAC1B,OAAO,OAAO,IAAI,OAAO,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,GAAG,KAAK,CAAC,IAAI,GAAG,CAAA;AACjF,CAAC;AAED,SAAS,MAAM,CAAC,MAAc;IAC7B,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,IAAI,CAAC,GAAG,CAAC,CAAC,EAAE,MAAM,CAAC,CAAC,CAAA;IAChD,MAAM,OAAO,GAAG,OAAO,IAAI,SAAS,CAAC,CAAC,CAAC,OAAO,GAAG,KAAK,CAAC,CAAC,CAAC,KAAK,GAAG,OAAO,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,GAAG,KAAK,CAAA;IAC7F,OAAO,IAAI,CAAC,KAAK,CAAC,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,CAAA;AACvC,CAAC;AAED,SAAS,SAAS,CAAC,KAAa,EAAE,QAAgB;IACjD,OAAO,CAAC,KAAK,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,KAAK,CAAC,IAAI,QAAQ,CAAA;AAC1D,CAAC;AAID,8FAA8F;AAC9F,MAAM,UAAU,cAAc,CAC7B,IAAY,EACZ,KAAa,EACb,MAAc,EACd,KAAK,GAAG,CAAC;IAET,MAAM,QAAQ,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,CAAA;IAC5C,MAAM,WAAW,GAAG,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IACtC,MAAM,WAAW,GAAG,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,CAAC,CAAC,GAAG,CAAC,CAAA;IAChD,MAAM,YAAY,GAAG,CAAC,YAAY,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,EAAE,CAAC,GAAG,CAAC,CAAC,GAAG,GAAG,CAAA;IAE5D,MAAM,MAAM,GAAU,EAAE,CAAA;IACxB,MAAM,cAAc,GAAG,WAAW,GAAG,WAAW,CAAA;IAChD,KAAK,IAAI,KAAK,GAAG,CAAC,EAAE,KAAK,GAAG,cAAc,EAAE,KAAK,EAAE,EAAE,CAAC;QACrD,IAAI,KAAK,KAAK,CAAC,EAAE,CAAC;YACjB,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,CAAA;YAChD,MAAM,CAAC,IAAI,CAAC,CAAC,QAAQ,CAAC,KAAK,IAAI,EAAE,CAAC,EAAE,QAAQ,CAAC,CAAC,KAAK,IAAI,CAAC,CAAC,GAAG,GAAG,CAAC,EAAE,QAAQ,CAAC,KAAK,GAAG,GAAG,CAAC,CAAC,CAAC,CAAA;QAC1F,CAAC;aAAM,CAAC;YACP,MAAM,KAAK,GAAG,YAAY,CAAC,IAAI,CAAC,SAAS,CAAC,CAAC,GAAG,KAAK,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,GAAG,CAAC,CAAC,CAAC,CAAA;YACxE,MAAM,KAAK,GAAG,YAAY,GAAG,KAAK,CAAA;YAClC,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,CAAC,EAAE,GAAG,EAAE,CAAC,CAAC,CAAA;YAC5C,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,GAAG,EAAE,CAAC,GAAG,EAAE,CAAA;YAC1C,MAAM,MAAM,GAAG,KAAK,GAAG,EAAE,CAAA;YACzB,MAAM,CAAC,IAAI,CAAC;gBACX,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;gBACtC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;gBACtC,SAAS,CAAC,CAAC,MAAM,GAAG,CAAC,CAAC,GAAG,CAAC,EAAE,CAAC,CAAC,GAAG,KAAK;aACtC,CAAC,CAAA;QACH,CAAC;IACF,CAAC;IAED,MAAM,WAAW,GAAG,KAAK,GAAG,CAAC,CAAA;IAC7B,MAAM,MAAM,GAAG,IAAI,iBAAiB,CAAC,WAAW,GAAG,MAAM,CAAC,CAAA;IAC1D,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACjC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,EAAE,CAAC,EAAE,EAAE,CAAC;YAChC,IAAI,GAAG,GAAG,CAAC,CAAA;YACX,IAAI,KAAK,GAAG,CAAC,CAAA;YACb,IAAI,IAAI,GAAG,CAAC,CAAA;YACZ,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC;gBACzC,KAAK,IAAI,EAAE,GAAG,CAAC,EAAE,EAAE,GAAG,WAAW,EAAE,EAAE,EAAE,EAAE,CAAC;oBACzC,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,KAAK,CAAC,GAAG,IAAI,CAAC,GAAG,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,CAAC,GAAG,EAAE,CAAC,GAAG,MAAM,CAAC,CAAA;oBAC1F,MAAM,KAAK,GAAG,MAAM,CAAC,EAAE,GAAG,EAAE,GAAG,WAAW,CAAC,IAAI,CAAC,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC,CAAA;oBACxD,GAAG,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;oBACvB,KAAK,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;oBACzB,IAAI,IAAI,KAAK,CAAC,CAAC,CAAC,GAAG,KAAK,CAAA;gBACzB,CAAC;YACF,CAAC;YACD,MAAM,KAAK,GAAG,CAAC,GAAG,CAAC,GAAG,CAAC,GAAG,WAAW,CAAA;YACrC,MAAM,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YAC3B,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;YACjC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,MAAM,CAAC,IAAI,CAAC,CAAA;YAChC,MAAM,CAAC,KAAK,GAAG,CAAC,CAAC,GAAG,GAAG,CAAA;QACxB,CAAC;IACF,CAAC;IACD,OAAO,MAAM,CAAA;AACd,CAAC","sourcesContent":["// The 83-character alphabet the BlurHash wire format packs integers into.\nconst BASE83 = '0123456789ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz#$%*+,-.:;=?@[]^_{|}~'\n\nfunction base83Decode(text: string): number {\n\tlet value = 0\n\tfor (const character of text) {\n\t\tconst digit = BASE83.indexOf(character)\n\t\tif (digit === -1) throw new Error(`Invalid base83 character: ${character}`)\n\t\tvalue = value * 83 + digit\n\t}\n\treturn value\n}\n\n// sRGB gamma -> linear light (standard IEC 61966-2-1 transfer function).\nfunction toLinear(srgb: number): number {\n\tconst channel = srgb / 255\n\treturn channel <= 0.04045 ? channel / 12.92 : ((channel + 0.055) / 1.055) ** 2.4\n}\n\nfunction toSrgb(linear: number): number {\n\tconst clamped = Math.max(0, Math.min(1, linear))\n\tconst channel = clamped <= 0.0031308 ? clamped * 12.92 : 1.055 * clamped ** (1 / 2.4) - 0.055\n\treturn Math.trunc(channel * 255 + 0.5)\n}\n\nfunction signedPow(value: number, exponent: number): number {\n\treturn (value < 0 ? -1 : 1) * Math.abs(value) ** exponent\n}\n\ntype Rgb = [number, number, number]\n\n/** Decode a BlurHash into RGBA pixel bytes of the requested size. `punch` boosts contrast. */\nexport function decodeBlurhash(\n\thash: string,\n\twidth: number,\n\theight: number,\n\tpunch = 1\n): Uint8ClampedArray {\n\tconst sizeFlag = base83Decode(hash[0] ?? '')\n\tconst componentsX = (sizeFlag % 9) + 1\n\tconst componentsY = Math.floor(sizeFlag / 9) + 1\n\tconst maximumValue = (base83Decode(hash[1] ?? '') + 1) / 166\n\n\tconst colors: Rgb[] = []\n\tconst componentCount = componentsX * componentsY\n\tfor (let index = 0; index < componentCount; index++) {\n\t\tif (index === 0) {\n\t\t\tconst value = base83Decode(hash.substring(2, 6))\n\t\t\tcolors.push([toLinear(value >> 16), toLinear((value >> 8) & 255), toLinear(value & 255)])\n\t\t} else {\n\t\t\tconst value = base83Decode(hash.substring(4 + index * 2, 6 + index * 2))\n\t\t\tconst scale = maximumValue * punch\n\t\t\tconst quantR = Math.floor(value / (19 * 19))\n\t\t\tconst quantG = Math.floor(value / 19) % 19\n\t\t\tconst quantB = value % 19\n\t\t\tcolors.push([\n\t\t\t\tsignedPow((quantR - 9) / 9, 2) * scale,\n\t\t\t\tsignedPow((quantG - 9) / 9, 2) * scale,\n\t\t\t\tsignedPow((quantB - 9) / 9, 2) * scale,\n\t\t\t])\n\t\t}\n\t}\n\n\tconst bytesPerRow = width * 4\n\tconst pixels = new Uint8ClampedArray(bytesPerRow * height)\n\tfor (let y = 0; y < height; y++) {\n\t\tfor (let x = 0; x < width; x++) {\n\t\t\tlet red = 0\n\t\t\tlet green = 0\n\t\t\tlet blue = 0\n\t\t\tfor (let cy = 0; cy < componentsY; cy++) {\n\t\t\t\tfor (let cx = 0; cx < componentsX; cx++) {\n\t\t\t\t\tconst basis = Math.cos((Math.PI * x * cx) / width) * Math.cos((Math.PI * y * cy) / height)\n\t\t\t\t\tconst color = colors[cx + cy * componentsX] ?? [0, 0, 0]\n\t\t\t\t\tred += color[0] * basis\n\t\t\t\t\tgreen += color[1] * basis\n\t\t\t\t\tblue += color[2] * basis\n\t\t\t\t}\n\t\t\t}\n\t\t\tconst index = 4 * x + y * bytesPerRow\n\t\t\tpixels[index] = toSrgb(red)\n\t\t\tpixels[index + 1] = toSrgb(green)\n\t\t\tpixels[index + 2] = toSrgb(blue)\n\t\t\tpixels[index + 3] = 255\n\t\t}\n\t}\n\treturn pixels\n}\n"]}

package/dist/images/image-src.d.ts

@@ -0,0 +1,42 @@
+/**
+ * Append `?v=` so a cache holding this URL serves the current pixels. A promote replaces the
+ * file behind a stable URL, and `contentVersion` changes exactly when the bytes do. The CDN
+ * caches each `v` apart, so a value that changes more often, such as `updated`, would mint a
+ * cache entry per rename. An asset with no version keeps the bare URL others share.
+ */
+export declare function versionedUrl(url: string, contentVersion: number | null | undefined): string;
+/**
+ * The thumbnail `src` for an asset: a smaller size from `sizes`, or the full-size `url` until
+ * the sizes exist or when the source is smaller than that size, carrying the content version
+ * when the asset has one.
+ */
+export declare function getThumbUrl(asset: {
+    sizes?: string | null;
+    url?: string | null;
+    contentVersion?: number | null;
+    displaySizes?: string | null;
+    displayUrl?: string | null;
+}): string | undefined;
+/**
+ * The `src` for an asset shown large, as a picker's opened asset is: the 1080px size, chosen as
+ * `getThumbUrl` chooses. The host still takes `getFullSizeUrl`.
+ */
+export declare function getPreviewUrl(asset: Parameters<typeof getThumbUrl>[0]): string | undefined;
+/**
+ * The full-size image to hand to the host: the asset's `url`, or the largest of its `sizes`
+ * when it has no `url`, as with a search hit. Carries the content version when it has one.
+ */
+export declare function getFullSizeUrl(asset: {
+    sizes?: string | null;
+    url?: string | null;
+    contentVersion?: number | null;
+    displaySizes?: string | null;
+    displayUrl?: string | null;
+}): string | null;
+/**
+ * Decoded blurhash placeholder for an asset, or null when absent/invalid. Paint this behind
+ * `getThumbUrl` (e.g. as a CSS background) for a progressive load.
+ */
+export declare function getBlurhashPlaceholder(asset: {
+    blurhash?: string | null;
+}): string | null;

package/dist/images/image-src.js

@@ -0,0 +1,83 @@
+import { blurhashToDataUrl } from './blurhash-placeholder.js';
+import { parseSizes, pickSizeUrl } from './sizes.js';
+// Two of the sizes Raster generates: a grid's thumbnail, and an image shown large.
+const THUMB_TARGET_EDGE = 400;
+const PREVIEW_TARGET_EDGE = 1080;
+/**
+ * Append `?v=` so a cache holding this URL serves the current pixels. A promote replaces the
+ * file behind a stable URL, and `contentVersion` changes exactly when the bytes do. The CDN
+ * caches each `v` apart, so a value that changes more often, such as `updated`, would mint a
+ * cache entry per rename. An asset with no version keeps the bare URL others share.
+ */
+export function versionedUrl(url, contentVersion) {
+    // The counter starts at 1, so 0 and anything non-finite can only be a corrupt value —
+    // render the bare URL rather than mint a junk cache entry per render.
+    if (typeof contentVersion !== 'number' ||
+        !Number.isFinite(contentVersion) ||
+        contentVersion <= 0) {
+        return url;
+    }
+    return `${url}${url.includes('?') ? '&' : '?'}v=${contentVersion}`;
+}
+/**
+ * The thumbnail `src` for an asset: a smaller size from `sizes`, or the full-size `url` until
+ * the sizes exist or when the source is smaller than that size, carrying the content version
+ * when the asset has one.
+ */
+export function getThumbUrl(asset) {
+    return sizedUrl(asset, THUMB_TARGET_EDGE);
+}
+/**
+ * The `src` for an asset shown large, as a picker's opened asset is: the 1080px size, chosen as
+ * `getThumbUrl` chooses. The host still takes `getFullSizeUrl`.
+ */
+export function getPreviewUrl(asset) {
+    return sizedUrl(asset, PREVIEW_TARGET_EDGE);
+}
+function sizedUrl(asset, targetEdge) {
+    // The override goes bare, as in `getFullSizeUrl`.
+    const display = sizedImage(asset.displayUrl, asset.displaySizes, targetEdge);
+    if (display !== null)
+        return display;
+    const own = sizedImage(asset.url, asset.sizes, targetEdge);
+    return own === null ? undefined : versionedUrl(own, asset.contentVersion);
+}
+/**
+ * The smallest size at or above `targetEdge`. Raster makes only sizes smaller than the source,
+ * so without one the source is no larger than the next size up: its `url` serves, or, for a
+ * search hit, which has no `url`, the largest size.
+ */
+function sizedImage(url, sizes, targetEdge) {
+    const parsed = parseSizes(sizes);
+    if (Object.keys(parsed ?? {}).some((size) => Number(size) >= targetEdge)) {
+        return pickSizeUrl(parsed, targetEdge);
+    }
+    return url || pickSizeUrl(parsed, targetEdge);
+}
+/**
+ * The full-size image to hand to the host: the asset's `url`, or the largest of its `sizes`
+ * when it has no `url`, as with a search hit. Carries the content version when it has one.
+ */
+export function getFullSizeUrl(asset) {
+    // The override is the promoted variant's own image, which the asset's version does not
+    // describe: that would pin a stale cache entry the bare URL avoids.
+    const display = largestImage(asset.displayUrl, asset.displaySizes);
+    if (display !== null)
+        return display;
+    const own = largestImage(asset.url, asset.sizes);
+    return own === null ? null : versionedUrl(own, asset.contentVersion);
+}
+function largestImage(url, sizes) {
+    if (typeof url === 'string' && url !== '')
+        return url;
+    // No size reaches Number.MAX_SAFE_INTEGER, so this always lands on the largest.
+    return pickSizeUrl(parseSizes(sizes), Number.MAX_SAFE_INTEGER);
+}
+/**
+ * Decoded blurhash placeholder for an asset, or null when absent/invalid. Paint this behind
+ * `getThumbUrl` (e.g. as a CSS background) for a progressive load.
+ */
+export function getBlurhashPlaceholder(asset) {
+    return blurhashToDataUrl(asset.blurhash);
+}
+//# sourceMappingURL=image-src.js.map

package/dist/images/image-src.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-src.js","sourceRoot":"","sources":["../../src/images/image-src.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,MAAM,2BAA2B,CAAA;AAC7D,OAAO,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,YAAY,CAAA;AAEpD,mFAAmF;AACnF,MAAM,iBAAiB,GAAG,GAAG,CAAA;AAC7B,MAAM,mBAAmB,GAAG,IAAI,CAAA;AAEhC;;;;;GAKG;AACH,MAAM,UAAU,YAAY,CAAC,GAAW,EAAE,cAAyC;IAClF,sFAAsF;IACtF,sEAAsE;IACtE,IACC,OAAO,cAAc,KAAK,QAAQ;QAClC,CAAC,MAAM,CAAC,QAAQ,CAAC,cAAc,CAAC;QAChC,cAAc,IAAI,CAAC,EAClB,CAAC;QACF,OAAO,GAAG,CAAA;IACX,CAAC;IACD,OAAO,GAAG,GAAG,GAAG,GAAG,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,GAAG,KAAK,cAAc,EAAE,CAAA;AACnE,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,WAAW,CAAC,KAM3B;IACA,OAAO,QAAQ,CAAC,KAAK,EAAE,iBAAiB,CAAC,CAAA;AAC1C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,aAAa,CAAC,KAAwC;IACrE,OAAO,QAAQ,CAAC,KAAK,EAAE,mBAAmB,CAAC,CAAA;AAC5C,CAAC;AAED,SAAS,QAAQ,CAChB,KAAwC,EACxC,UAAkB;IAElB,kDAAkD;IAClD,MAAM,OAAO,GAAG,UAAU,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,EAAE,UAAU,CAAC,CAAA;IAC5E,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAA;IACpC,MAAM,GAAG,GAAG,UAAU,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,EAAE,UAAU,CAAC,CAAA;IAC1D,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,SAAS,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;AAC1E,CAAC;AAED;;;;GAIG;AACH,SAAS,UAAU,CAClB,GAA8B,EAC9B,KAAgC,EAChC,UAAkB;IAElB,MAAM,MAAM,GAAG,UAAU,CAAC,KAAK,CAAC,CAAA;IAChC,IAAI,MAAM,CAAC,IAAI,CAAC,MAAM,IAAI,EAAE,CAAC,CAAC,IAAI,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,MAAM,CAAC,IAAI,CAAC,IAAI,UAAU,CAAC,EAAE,CAAC;QAC1E,OAAO,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;IACvC,CAAC;IACD,OAAO,GAAG,IAAI,WAAW,CAAC,MAAM,EAAE,UAAU,CAAC,CAAA;AAC9C,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,cAAc,CAAC,KAM9B;IACA,uFAAuF;IACvF,oEAAoE;IACpE,MAAM,OAAO,GAAG,YAAY,CAAC,KAAK,CAAC,UAAU,EAAE,KAAK,CAAC,YAAY,CAAC,CAAA;IAClE,IAAI,OAAO,KAAK,IAAI;QAAE,OAAO,OAAO,CAAA;IACpC,MAAM,GAAG,GAAG,YAAY,CAAC,KAAK,CAAC,GAAG,EAAE,KAAK,CAAC,KAAK,CAAC,CAAA;IAChD,OAAO,GAAG,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,YAAY,CAAC,GAAG,EAAE,KAAK,CAAC,cAAc,CAAC,CAAA;AACrE,CAAC;AAED,SAAS,YAAY,CACpB,GAA8B,EAC9B,KAAgC;IAEhC,IAAI,OAAO,GAAG,KAAK,QAAQ,IAAI,GAAG,KAAK,EAAE;QAAE,OAAO,GAAG,CAAA;IACrD,gFAAgF;IAChF,OAAO,WAAW,CAAC,UAAU,CAAC,KAAK,CAAC,EAAE,MAAM,CAAC,gBAAgB,CAAC,CAAA;AAC/D,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,sBAAsB,CAAC,KAAmC;IACzE,OAAO,iBAAiB,CAAC,KAAK,CAAC,QAAQ,CAAC,CAAA;AACzC,CAAC","sourcesContent":["import { blurhashToDataUrl } from './blurhash-placeholder.js'\nimport { parseSizes, pickSizeUrl } from './sizes.js'\n\n// Two of the sizes Raster generates: a grid's thumbnail, and an image shown large.\nconst THUMB_TARGET_EDGE = 400\nconst PREVIEW_TARGET_EDGE = 1080\n\n/**\n * Append `?v=` so a cache holding this URL serves the current pixels. A promote replaces the\n * file behind a stable URL, and `contentVersion` changes exactly when the bytes do. The CDN\n * caches each `v` apart, so a value that changes more often, such as `updated`, would mint a\n * cache entry per rename. An asset with no version keeps the bare URL others share.\n */\nexport function versionedUrl(url: string, contentVersion: number | null | undefined): string {\n\t// The counter starts at 1, so 0 and anything non-finite can only be a corrupt value —\n\t// render the bare URL rather than mint a junk cache entry per render.\n\tif (\n\t\ttypeof contentVersion !== 'number' ||\n\t\t!Number.isFinite(contentVersion) ||\n\t\tcontentVersion <= 0\n\t) {\n\t\treturn url\n\t}\n\treturn `${url}${url.includes('?') ? '&' : '?'}v=${contentVersion}`\n}\n\n/**\n * The thumbnail `src` for an asset: a smaller size from `sizes`, or the full-size `url` until\n * the sizes exist or when the source is smaller than that size, carrying the content version\n * when the asset has one.\n */\nexport function getThumbUrl(asset: {\n\tsizes?: string | null\n\turl?: string | null\n\tcontentVersion?: number | null\n\tdisplaySizes?: string | null\n\tdisplayUrl?: string | null\n}): string | undefined {\n\treturn sizedUrl(asset, THUMB_TARGET_EDGE)\n}\n\n/**\n * The `src` for an asset shown large, as a picker's opened asset is: the 1080px size, chosen as\n * `getThumbUrl` chooses. The host still takes `getFullSizeUrl`.\n */\nexport function getPreviewUrl(asset: Parameters<typeof getThumbUrl>[0]): string | undefined {\n\treturn sizedUrl(asset, PREVIEW_TARGET_EDGE)\n}\n\nfunction sizedUrl(\n\tasset: Parameters<typeof getThumbUrl>[0],\n\ttargetEdge: number\n): string | undefined {\n\t// The override goes bare, as in `getFullSizeUrl`.\n\tconst display = sizedImage(asset.displayUrl, asset.displaySizes, targetEdge)\n\tif (display !== null) return display\n\tconst own = sizedImage(asset.url, asset.sizes, targetEdge)\n\treturn own === null ? undefined : versionedUrl(own, asset.contentVersion)\n}\n\n/**\n * The smallest size at or above `targetEdge`. Raster makes only sizes smaller than the source,\n * so without one the source is no larger than the next size up: its `url` serves, or, for a\n * search hit, which has no `url`, the largest size.\n */\nfunction sizedImage(\n\turl: string | null | undefined,\n\tsizes: string | null | undefined,\n\ttargetEdge: number\n): string | null {\n\tconst parsed = parseSizes(sizes)\n\tif (Object.keys(parsed ?? {}).some((size) => Number(size) >= targetEdge)) {\n\t\treturn pickSizeUrl(parsed, targetEdge)\n\t}\n\treturn url || pickSizeUrl(parsed, targetEdge)\n}\n\n/**\n * The full-size image to hand to the host: the asset's `url`, or the largest of its `sizes`\n * when it has no `url`, as with a search hit. Carries the content version when it has one.\n */\nexport function getFullSizeUrl(asset: {\n\tsizes?: string | null\n\turl?: string | null\n\tcontentVersion?: number | null\n\tdisplaySizes?: string | null\n\tdisplayUrl?: string | null\n}): string | null {\n\t// The override is the promoted variant's own image, which the asset's version does not\n\t// describe: that would pin a stale cache entry the bare URL avoids.\n\tconst display = largestImage(asset.displayUrl, asset.displaySizes)\n\tif (display !== null) return display\n\tconst own = largestImage(asset.url, asset.sizes)\n\treturn own === null ? null : versionedUrl(own, asset.contentVersion)\n}\n\nfunction largestImage(\n\turl: string | null | undefined,\n\tsizes: string | null | undefined\n): string | null {\n\tif (typeof url === 'string' && url !== '') return url\n\t// No size reaches Number.MAX_SAFE_INTEGER, so this always lands on the largest.\n\treturn pickSizeUrl(parseSizes(sizes), Number.MAX_SAFE_INTEGER)\n}\n\n/**\n * Decoded blurhash placeholder for an asset, or null when absent/invalid. Paint this behind\n * `getThumbUrl` (e.g. as a CSS background) for a progressive load.\n */\nexport function getBlurhashPlaceholder(asset: { blurhash?: string | null }): string | null {\n\treturn blurhashToDataUrl(asset.blurhash)\n}\n"]}