@realiizlabs/admin 0.11.2 → 0.13.1

package/dist/media/index.cjs.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/media/errors.ts","../../src/media/resize.ts","../../src/media/paths.ts"],"names":[],"mappings":";;;AACO,IAAM,UAAA,GAAN,cAAyB,KAAA,CAAM;AAAA,EACpC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AAAA,EACd;AACF;AAEO,IAAM,QAAA,GAAW;AAAA,EACtB,IAAA,EAAM,oEAAA;AAAA,EACN,IAAA,EAAM,6DAAA;AAAA,EACN,MAAA,EAAQ;AACV;;;ACIO,IAAM,cAAA,GAAiB,CAAC,YAAA,EAAc,WAAA,EAAa,cAAc,WAAW;AAC5E,IAAM,eAAA,GAAkB,KAAK,IAAA,GAAO;AAkBpC,SAAS,SAAA,CAAU,KAAA,EAAe,MAAA,EAAgB,QAAA,EAAqD;AAC5G,EAAA,IAAI,KAAA,IAAS,QAAA,EAAU,OAAO,EAAE,OAAO,MAAA,EAAO;AAC9C,EAAA,MAAM,QAAQ,QAAA,GAAW,KAAA;AACzB,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,KAAK,CAAA,EAAG,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,GAAG,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,KAAK,CAAC,CAAA,EAAE;AAC7F;AAGO,SAAS,WAAW,IAAA,EAA4C;AACrE,EAAA,IAAI,CAAE,cAAA,CAAqC,QAAA,CAAS,IAAA,CAAK,IAAI,GAAG,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,IAAI,CAAA;AAClG,EAAA,IAAI,KAAK,IAAA,GAAO,eAAA,QAAuB,IAAI,UAAA,CAAW,SAAS,IAAI,CAAA;AACrE;AAEA,eAAsB,WAAA,CAAY,IAAA,EAAY,IAAA,GAAsB,EAAC,EAA0B;AAC7F,EAAA,UAAA,CAAW,IAAI,CAAA;AACf,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,OAAA,GAAU,MAAM,QAAA,GAAW,GAAA,GAAM,MAAK,GAAI,IAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAI,CAAA;AAChC,EAAA,MAAM,EAAE,OAAO,MAAA,EAAO,GAAI,UAAU,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,IAAI,CAAA;AAClC,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,UAAA,CAAW,SAAS,MAAM,CAAA;AAC9C,EAAA,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,CAAA,EAAG,CAAA,EAAG,OAAO,MAAM,CAAA;AACzC,EAAA,MAAA,CAAO,KAAA,IAAQ;AAEf,EAAA,IAAI,CAAA,GAAI,OAAA;AACR,EAAA,IAAI,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AACjC,EAAA,OAAO,IAAA,CAAK,IAAA,GAAO,QAAA,IAAY,CAAA,GAAI,QAAQ,GAAA,EAAK;AAC9C,IAAA,CAAA,IAAK,IAAA;AACL,IAAA,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO;AAC/B;AAEA,eAAe,OAAO,IAAA,EAAkC;AACtD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,kBAAkB,IAAI,CAAA;AAAA,EACrC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAAA,EACtC;AACF;AAIA,SAAS,UAAA,CAAW,OAAe,MAAA,EAA2B;AAC5D,EAAA,IAAI,OAAO,eAAA,KAAoB,WAAA,SAAoB,IAAI,eAAA,CAAgB,OAAO,MAAM,CAAA;AACpF,EAAA,MAAM,CAAA,GAAI,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACzC,EAAA,CAAA,CAAE,KAAA,GAAQ,KAAA;AACV,EAAA,CAAA,CAAE,MAAA,GAAS,MAAA;AACX,EAAA,OAAO,CAAA;AACT;AAEA,eAAe,MAAA,CAAO,QAAmB,OAAA,EAAgC;AACvE,EAAA,MAAM,IAAA,GACJ,eAAA,IAAmB,MAAA,GACf,MAAM,MAAA,CAAO,aAAA,CAAc,EAAE,IAAA,EAAM,YAAA,EAAc,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA,GAC5E,MAAM,IAAI,OAAA,CAAqB,CAAC,OAAA,KAAY,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,YAAA,EAAc,OAAO,CAAC,CAAA;AAC/F,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,IAAA,KAAS,cAAc,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAC7E,EAAA,OAAO,IAAA;AACT;;;AC/EO,SAAS,YAAY,IAAA,EAAsB;AAChD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,IAAI,IAAA,CACP,SAAA,CAAU,MAAM,CAAA,CAChB,QAAQ,QAAA,EAAU,EAAE,CAAA,CACpB,WAAA,GACA,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAC1B,OAAA,CAAQ,YAAY,EAAE,CAAA;AACzB,EAAA,OAAO,CAAA,IAAK,OAAA;AACd;AAEO,SAAS,aAAa,IAAA,EAAiB,IAAA,EAAc,eAAe,EAAA,EAAI,IAAA,GAAoB,EAAC,EAAW;AAC7G,EAAA,MAAM,OAAO,IAAA,CAAK,SAAA,IAAa,OAAA,EAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzD,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,CAAA;AAAA,IACvB,KAAK,QAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,YAAA,CAAA;AAAA,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,GAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,WAAA,CAAY,YAAY,CAAC,CAAA,KAAA,CAAA;AAAA;AAExD","file":"index.cjs","sourcesContent":["/** A picture problem the person can act on. The message is the sentence shown under the control. */\nexport class MediaError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"MediaError\";\n  }\n}\n\nexport const MESSAGES = {\n  type: \"That file type isn’t supported — use a JPG, PNG or WebP.\",\n  size: \"That picture is too big to send — pick one under 10MB.\",\n  encode: \"This browser can’t prepare pictures — try Chrome, Edge or Safari 16+.\",\n} as const;\n","/**\n * resizeImage — shrink a picture in the browser to web size, as WebP.\n *\n * Phone photos are 3–8MB; a Vercel server action body is capped at 4.5MB and the\n * GitHub API wants base64. So the shrink happens here, before anything leaves the\n * browser: decode → fit inside maxWidth → draw to a canvas → encode WebP, lowering\n * quality in steps until the result is under maxBytes. GIFs lose their animation\n * (a still frame is encoded) — acceptable for a blog.\n *\n * No network, no dependencies. Throws MediaError with a plain sentence for the\n * three things that can go wrong: wrong type, too big to even try, or a browser\n * that cannot encode WebP (toBlob returns null or a non-WebP type).\n */\n\nimport { MediaError, MESSAGES } from \"./errors\";\n\nexport const ACCEPTED_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\", \"image/gif\"] as const;\nexport const MAX_INPUT_BYTES = 10 * 1024 * 1024;\n\nexport interface ResizeOptions {\n  /** Longest allowed width in pixels. Default 1600. */\n  maxWidth?: number;\n  /** Starting WebP quality 0–1. Default 0.82. */\n  quality?: number;\n  /** Target ceiling for the encoded size. Default 600KB. */\n  maxBytes?: number;\n}\n\nexport interface ResizedImage {\n  blob: Blob;\n  width: number;\n  height: number;\n}\n\n/** Pure: fit (width × height) inside maxWidth, never scaling up, whole pixels. */\nexport function fitWithin(width: number, height: number, maxWidth: number): { width: number; height: number } {\n  if (width <= maxWidth) return { width, height };\n  const ratio = maxWidth / width;\n  return { width: Math.round(width * ratio), height: Math.max(1, Math.round(height * ratio)) };\n}\n\n/** The type/size guards, separated so they can run (and be tested) without a canvas. */\nexport function checkInput(file: { type: string; size: number }): void {\n  if (!(ACCEPTED_TYPES as readonly string[]).includes(file.type)) throw new MediaError(MESSAGES.type);\n  if (file.size > MAX_INPUT_BYTES) throw new MediaError(MESSAGES.size);\n}\n\nexport async function resizeImage(file: File, opts: ResizeOptions = {}): Promise<ResizedImage> {\n  checkInput(file);\n  const { maxWidth = 1600, quality = 0.82, maxBytes = 600 * 1024 } = opts;\n\n  const bitmap = await decode(file);\n  const { width, height } = fitWithin(bitmap.width, bitmap.height, maxWidth);\n  const canvas = makeCanvas(width, height);\n  const ctx = canvas.getContext(\"2d\");\n  if (!ctx) throw new MediaError(MESSAGES.encode);\n  ctx.drawImage(bitmap, 0, 0, width, height);\n  bitmap.close?.();\n\n  let q = quality;\n  let blob = await encode(canvas, q);\n  while (blob.size > maxBytes && q - 0.08 >= 0.5) {\n    q -= 0.08;\n    blob = await encode(canvas, q);\n  }\n  return { blob, width, height };\n}\n\nasync function decode(file: File): Promise<ImageBitmap> {\n  try {\n    return await createImageBitmap(file);\n  } catch {\n    throw new MediaError(MESSAGES.encode);\n  }\n}\n\ntype AnyCanvas = HTMLCanvasElement | OffscreenCanvas;\n\nfunction makeCanvas(width: number, height: number): AnyCanvas {\n  if (typeof OffscreenCanvas !== \"undefined\") return new OffscreenCanvas(width, height);\n  const c = document.createElement(\"canvas\");\n  c.width = width;\n  c.height = height;\n  return c;\n}\n\nasync function encode(canvas: AnyCanvas, quality: number): Promise<Blob> {\n  const blob =\n    \"convertToBlob\" in canvas\n      ? await canvas.convertToBlob({ type: \"image/webp\", quality }).catch(() => null)\n      : await new Promise<Blob | null>((resolve) => canvas.toBlob(resolve, \"image/webp\", quality));\n  if (!blob || blob.type !== \"image/webp\") throw new MediaError(MESSAGES.encode);\n  return blob;\n}\n","/**\n * Where a picture lives, decided from the post's slug so the path is known before\n * anything is committed: hero → /blog/{slug}.webp, social → /blog/{slug}-social.webp,\n * body → /blog/{slug}/{name}.webp. The host commits the file under public/ + path.\n */\n\nexport type ImageKind = \"hero\" | \"social\" | \"body\";\n\nexport interface PathOptions {\n  /** URL prefix the pictures are served from. Default \"/blog\". */\n  publicDir?: string;\n}\n\n/** Lower-case letters, digits and single hyphens; empty in → \"image\". */\nexport function slugifyName(name: string): string {\n  const base = name.replace(/\\.[a-z0-9]+$/i, \"\");\n  const s = base\n    .normalize(\"NFKD\")\n    .replace(/[̀-ͯ]/g, \"\")\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return s || \"image\";\n}\n\nexport function imagePathFor(kind: ImageKind, slug: string, originalName = \"\", opts: PathOptions = {}): string {\n  const dir = (opts.publicDir ?? \"/blog\").replace(/\\/$/, \"\");\n  switch (kind) {\n    case \"hero\":\n      return `${dir}/${slug}.webp`;\n    case \"social\":\n      return `${dir}/${slug}-social.webp`;\n    case \"body\":\n      return `${dir}/${slug}/${slugifyName(originalName)}.webp`;\n  }\n}\n"]}
+{"version":3,"sources":["../../src/media/errors.ts","../../src/media/resize.ts","../../src/media/paths.ts","../../src/media/validate.ts"],"names":[],"mappings":";;;AACO,IAAM,UAAA,GAAN,cAAyB,KAAA,CAAM;AAAA,EACpC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AAAA,EACd;AACF;AAEO,IAAM,QAAA,GAAW;AAAA,EACtB,IAAA,EAAM,oEAAA;AAAA,EACN,IAAA,EAAM,6DAAA;AAAA,EACN,MAAA,EAAQ;AACV;;;ACIO,IAAM,cAAA,GAAiB,CAAC,YAAA,EAAc,WAAA,EAAa,cAAc,WAAW;AAC5E,IAAM,eAAA,GAAkB,KAAK,IAAA,GAAO;AAkBpC,SAAS,SAAA,CAAU,KAAA,EAAe,MAAA,EAAgB,QAAA,EAAqD;AAC5G,EAAA,IAAI,KAAA,IAAS,QAAA,EAAU,OAAO,EAAE,OAAO,MAAA,EAAO;AAC9C,EAAA,MAAM,QAAQ,QAAA,GAAW,KAAA;AACzB,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,KAAK,CAAA,EAAG,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,GAAG,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,KAAK,CAAC,CAAA,EAAE;AAC7F;AAGO,SAAS,WAAW,IAAA,EAA4C;AACrE,EAAA,IAAI,CAAE,cAAA,CAAqC,QAAA,CAAS,IAAA,CAAK,IAAI,GAAG,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,IAAI,CAAA;AAClG,EAAA,IAAI,KAAK,IAAA,GAAO,eAAA,QAAuB,IAAI,UAAA,CAAW,SAAS,IAAI,CAAA;AACrE;AAEA,eAAsB,WAAA,CAAY,IAAA,EAAY,IAAA,GAAsB,EAAC,EAA0B;AAC7F,EAAA,UAAA,CAAW,IAAI,CAAA;AACf,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,OAAA,GAAU,MAAM,QAAA,GAAW,GAAA,GAAM,MAAK,GAAI,IAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAI,CAAA;AAChC,EAAA,MAAM,EAAE,OAAO,MAAA,EAAO,GAAI,UAAU,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,IAAI,CAAA;AAClC,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,UAAA,CAAW,SAAS,MAAM,CAAA;AAC9C,EAAA,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,CAAA,EAAG,CAAA,EAAG,OAAO,MAAM,CAAA;AACzC,EAAA,MAAA,CAAO,KAAA,IAAQ;AAEf,EAAA,IAAI,CAAA,GAAI,OAAA;AACR,EAAA,IAAI,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AACjC,EAAA,OAAO,IAAA,CAAK,IAAA,GAAO,QAAA,IAAY,CAAA,GAAI,QAAQ,GAAA,EAAK;AAC9C,IAAA,CAAA,IAAK,IAAA;AACL,IAAA,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO;AAC/B;AAEA,eAAe,OAAO,IAAA,EAAkC;AACtD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,kBAAkB,IAAI,CAAA;AAAA,EACrC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAAA,EACtC;AACF;AAIA,SAAS,UAAA,CAAW,OAAe,MAAA,EAA2B;AAC5D,EAAA,IAAI,OAAO,eAAA,KAAoB,WAAA,SAAoB,IAAI,eAAA,CAAgB,OAAO,MAAM,CAAA;AACpF,EAAA,MAAM,CAAA,GAAI,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACzC,EAAA,CAAA,CAAE,KAAA,GAAQ,KAAA;AACV,EAAA,CAAA,CAAE,MAAA,GAAS,MAAA;AACX,EAAA,OAAO,CAAA;AACT;AAEA,eAAe,MAAA,CAAO,QAAmB,OAAA,EAAgC;AACvE,EAAA,MAAM,IAAA,GACJ,eAAA,IAAmB,MAAA,GACf,MAAM,MAAA,CAAO,aAAA,CAAc,EAAE,IAAA,EAAM,YAAA,EAAc,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA,GAC5E,MAAM,IAAI,OAAA,CAAqB,CAAC,OAAA,KAAY,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,YAAA,EAAc,OAAO,CAAC,CAAA;AAC/F,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,IAAA,KAAS,cAAc,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAC7E,EAAA,OAAO,IAAA;AACT;;;AC/EO,SAAS,YAAY,IAAA,EAAsB;AAChD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,IAAI,IAAA,CACP,SAAA,CAAU,MAAM,CAAA,CAChB,QAAQ,QAAA,EAAU,EAAE,CAAA,CACpB,WAAA,GACA,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAC1B,OAAA,CAAQ,YAAY,EAAE,CAAA;AACzB,EAAA,OAAO,CAAA,IAAK,OAAA;AACd;AAEO,SAAS,aAAa,IAAA,EAAiB,IAAA,EAAc,eAAe,EAAA,EAAI,IAAA,GAAoB,EAAC,EAAW;AAC7G,EAAA,MAAM,OAAO,IAAA,CAAK,SAAA,IAAa,OAAA,EAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzD,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,CAAA;AAAA,IACvB,KAAK,QAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,YAAA,CAAA;AAAA,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,GAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,WAAA,CAAY,YAAY,CAAC,CAAA,KAAA,CAAA;AAAA;AAExD;;;ACZO,IAAM,YAAA,GAA4B,EAAE,OAAA,EAAS,GAAA,GAAM,IAAA,EAAM,UAAU,GAAA,GAAM,IAAA,GAAO,IAAA,EAAM,MAAA,EAAQ,QAAA;AAE9F,IAAM,YAAA,GAAe;AAAA,EAC1B,IAAA,EAAM,qCAAA;AAAA,EACN,IAAA,EAAM;AACR;AAMA,IAAM,SAAA,GAAY,8BAAA;AAGX,SAAS,YAAY,GAAA,EAAqB;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,GAAI,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA;AACjE,EAAA,OAAO,KAAK,KAAA,CAAO,KAAA,CAAM,MAAA,GAAS,CAAA,GAAK,CAAC,CAAA,GAAI,GAAA;AAC9C;AAEO,SAAS,cAAA,CAAe,MAAA,EAAwB,MAAA,GAAsB,YAAA,EAA+B;AAC1G,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,MAAM,QAAiE,EAAC;AACxE,EAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACxB,IAAA,IAAI,OAAO,GAAA,EAAK,IAAA,KAAS,QAAA,IAAY,OAAO,GAAA,EAAK,MAAA,KAAW,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,aAAa,IAAA,EAAK;AACnH,IAAA,IAAI,CAAC,GAAA,CAAI,IAAA,CAAK,WAAW,MAAA,CAAO,MAAM,KAAK,GAAA,CAAI,IAAA,CAAK,QAAA,CAAS,IAAI,GAAG,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,aAAa,IAAA,EAAK;AACjH,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAC5B,IAAA,IAAI,CAAC,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,YAAA,CAAa,IAAA,EAAK;AACvE,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA;AACnC,IAAA,IAAI,IAAA,KAAS,CAAA,IAAK,IAAA,GAAO,MAAA,CAAO,OAAA,EAAS,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,YAAA,CAAa,IAAA,EAAK;AACtF,IAAA,KAAA,IAAS,IAAA;AACT,IAAA,IAAI,KAAA,GAAQ,OAAO,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,YAAA,CAAa,IAAA,EAAK;AAC1E,IAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,CAAA,OAAA,EAAU,GAAG,CAAA,CAAA,EAAI,OAAA,EAAS,GAAA,CAAI,MAAA,CAAO,QAAQ,MAAA,EAAQ,EAAE,CAAA,EAAG,QAAA,EAAU,UAAU,CAAA;AAAA,EACnG;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAM;AAC3B","file":"index.cjs","sourcesContent":["/** A picture problem the person can act on. The message is the sentence shown under the control. */\nexport class MediaError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"MediaError\";\n  }\n}\n\nexport const MESSAGES = {\n  type: \"That file type isn’t supported — use a JPG, PNG or WebP.\",\n  size: \"That picture is too big to send — pick one under 10MB.\",\n  encode: \"This browser can’t prepare pictures — try Chrome, Edge or Safari 16+.\",\n} as const;\n","/**\n * resizeImage — shrink a picture in the browser to web size, as WebP.\n *\n * Phone photos are 3–8MB; a Vercel server action body is capped at 4.5MB and the\n * GitHub API wants base64. So the shrink happens here, before anything leaves the\n * browser: decode → fit inside maxWidth → draw to a canvas → encode WebP, lowering\n * quality in steps until the result is under maxBytes. GIFs lose their animation\n * (a still frame is encoded) — acceptable for a blog.\n *\n * No network, no dependencies. Throws MediaError with a plain sentence for the\n * three things that can go wrong: wrong type, too big to even try, or a browser\n * that cannot encode WebP (toBlob returns null or a non-WebP type).\n */\n\nimport { MediaError, MESSAGES } from \"./errors\";\n\nexport const ACCEPTED_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\", \"image/gif\"] as const;\nexport const MAX_INPUT_BYTES = 10 * 1024 * 1024;\n\nexport interface ResizeOptions {\n  /** Longest allowed width in pixels. Default 1600. */\n  maxWidth?: number;\n  /** Starting WebP quality 0–1. Default 0.82. */\n  quality?: number;\n  /** Target ceiling for the encoded size. Default 600KB. */\n  maxBytes?: number;\n}\n\nexport interface ResizedImage {\n  blob: Blob;\n  width: number;\n  height: number;\n}\n\n/** Pure: fit (width × height) inside maxWidth, never scaling up, whole pixels. */\nexport function fitWithin(width: number, height: number, maxWidth: number): { width: number; height: number } {\n  if (width <= maxWidth) return { width, height };\n  const ratio = maxWidth / width;\n  return { width: Math.round(width * ratio), height: Math.max(1, Math.round(height * ratio)) };\n}\n\n/** The type/size guards, separated so they can run (and be tested) without a canvas. */\nexport function checkInput(file: { type: string; size: number }): void {\n  if (!(ACCEPTED_TYPES as readonly string[]).includes(file.type)) throw new MediaError(MESSAGES.type);\n  if (file.size > MAX_INPUT_BYTES) throw new MediaError(MESSAGES.size);\n}\n\nexport async function resizeImage(file: File, opts: ResizeOptions = {}): Promise<ResizedImage> {\n  checkInput(file);\n  const { maxWidth = 1600, quality = 0.82, maxBytes = 600 * 1024 } = opts;\n\n  const bitmap = await decode(file);\n  const { width, height } = fitWithin(bitmap.width, bitmap.height, maxWidth);\n  const canvas = makeCanvas(width, height);\n  const ctx = canvas.getContext(\"2d\");\n  if (!ctx) throw new MediaError(MESSAGES.encode);\n  ctx.drawImage(bitmap, 0, 0, width, height);\n  bitmap.close?.();\n\n  let q = quality;\n  let blob = await encode(canvas, q);\n  while (blob.size > maxBytes && q - 0.08 >= 0.5) {\n    q -= 0.08;\n    blob = await encode(canvas, q);\n  }\n  return { blob, width, height };\n}\n\nasync function decode(file: File): Promise<ImageBitmap> {\n  try {\n    return await createImageBitmap(file);\n  } catch {\n    throw new MediaError(MESSAGES.encode);\n  }\n}\n\ntype AnyCanvas = HTMLCanvasElement | OffscreenCanvas;\n\nfunction makeCanvas(width: number, height: number): AnyCanvas {\n  if (typeof OffscreenCanvas !== \"undefined\") return new OffscreenCanvas(width, height);\n  const c = document.createElement(\"canvas\");\n  c.width = width;\n  c.height = height;\n  return c;\n}\n\nasync function encode(canvas: AnyCanvas, quality: number): Promise<Blob> {\n  const blob =\n    \"convertToBlob\" in canvas\n      ? await canvas.convertToBlob({ type: \"image/webp\", quality }).catch(() => null)\n      : await new Promise<Blob | null>((resolve) => canvas.toBlob(resolve, \"image/webp\", quality));\n  if (!blob || blob.type !== \"image/webp\") throw new MediaError(MESSAGES.encode);\n  return blob;\n}\n","/**\n * Where a picture lives, decided from the post's slug so the path is known before\n * anything is committed: hero → /blog/{slug}.webp, social → /blog/{slug}-social.webp,\n * body → /blog/{slug}/{name}.webp. The host commits the file under public/ + path.\n */\n\nexport type ImageKind = \"hero\" | \"social\" | \"body\";\n\nexport interface PathOptions {\n  /** URL prefix the pictures are served from. Default \"/blog\". */\n  publicDir?: string;\n}\n\n/** Lower-case letters, digits and single hyphens; empty in → \"image\". */\nexport function slugifyName(name: string): string {\n  const base = name.replace(/\\.[a-z0-9]+$/i, \"\");\n  const s = base\n    .normalize(\"NFKD\")\n    .replace(/[̀-ͯ]/g, \"\")\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return s || \"image\";\n}\n\nexport function imagePathFor(kind: ImageKind, slug: string, originalName = \"\", opts: PathOptions = {}): string {\n  const dir = (opts.publicDir ?? \"/blog\").replace(/\\/$/, \"\");\n  switch (kind) {\n    case \"hero\":\n      return `${dir}/${slug}.webp`;\n    case \"social\":\n      return `${dir}/${slug}-social.webp`;\n    case \"body\":\n      return `${dir}/${slug}/${slugifyName(originalName)}.webp`;\n  }\n}\n","/**\n * Server-side checks on the pictures a save carries. Pure.\n *\n * The browser already shrank them, but anyone can POST to a server action, so\n * the path, type and size are re-checked before anything is committed: only\n * WebP under the type's public folder, ≤ 800 KB each, ≤ 3.5 MB per save.\n * Frontmatter paths are URL paths (/blog/x.webp); the repo file lives under public/.\n */\n\nexport interface ImagePayload {\n  /** URL path as written in the frontmatter or body, e.g. /blog/my-post.webp. */\n  path: string;\n  /** Base64 of the WebP bytes. */\n  base64: string;\n}\n\nexport interface ImageLimits {\n  maxEach: number;\n  maxTotal: number;\n  /** URL prefix pictures must live under. */\n  prefix: string;\n}\n\nexport const IMAGE_LIMITS: ImageLimits = { maxEach: 800 * 1024, maxTotal: 3.5 * 1024 * 1024, prefix: \"/blog/\" };\n\nexport const IMAGE_ERRORS = {\n  path: \"That image path isn’t allowed.\",\n  size: \"That picture is too large to send — try a smaller one.\",\n} as const;\n\nexport type ValidatedImages =\n  | { ok: true; files: { path: string; content: string; encoding: \"base64\" }[] }\n  | { ok: false; error: string };\n\nconst SAFE_PATH = /^[a-z0-9][a-z0-9/_-]*\\.webp$/;\n\n/** Bytes a base64 string decodes to, without decoding it. */\nexport function decodedSize(b64: string): number {\n  const clean = b64.replace(/\\s+/g, \"\");\n  const pad = clean.endsWith(\"==\") ? 2 : clean.endsWith(\"=\") ? 1 : 0;\n  return Math.floor((clean.length * 3) / 4) - pad;\n}\n\nexport function validateImages(images: ImagePayload[], limits: ImageLimits = IMAGE_LIMITS): ValidatedImages {\n  let total = 0;\n  const files: { path: string; content: string; encoding: \"base64\" }[] = [];\n  for (const img of images) {\n    if (typeof img?.path !== \"string\" || typeof img?.base64 !== \"string\") return { ok: false, error: IMAGE_ERRORS.path };\n    if (!img.path.startsWith(limits.prefix) || img.path.includes(\"..\")) return { ok: false, error: IMAGE_ERRORS.path };\n    const rel = img.path.slice(1);\n    if (!SAFE_PATH.test(rel)) return { ok: false, error: IMAGE_ERRORS.path };\n    const size = decodedSize(img.base64);\n    if (size === 0 || size > limits.maxEach) return { ok: false, error: IMAGE_ERRORS.size };\n    total += size;\n    if (total > limits.maxTotal) return { ok: false, error: IMAGE_ERRORS.size };\n    files.push({ path: `public/${rel}`, content: img.base64.replace(/\\s+/g, \"\"), encoding: \"base64\" });\n  }\n  return { ok: true, files };\n}\n"]}

package/dist/media/index.d.cts

@@ -1,3 +1,5 @@
+export { I as IMAGE_ERRORS, a as IMAGE_LIMITS, b as ImageLimits, c as ImagePayload, V as ValidatedImages, d as decodedSize, v as validateImages } from '../validate-C84Ll1cD.cjs';
+
 /**
  * resizeImage — shrink a picture in the browser to web size, as WebP.
  *

package/dist/media/index.d.ts

@@ -1,3 +1,5 @@
+export { I as IMAGE_ERRORS, a as IMAGE_LIMITS, b as ImageLimits, c as ImagePayload, V as ValidatedImages, d as decodedSize, v as validateImages } from '../validate-C84Ll1cD.js';
+
 /**
  * resizeImage — shrink a picture in the browser to web size, as WebP.
  *

package/dist/media/index.js

@@ -80,6 +80,35 @@ function imagePathFor(kind, slug, originalName = "", opts = {}) {
   }
 }
 
-export { ACCEPTED_TYPES, MAX_INPUT_BYTES, MESSAGES as MEDIA_MESSAGES, MediaError, checkInput, fitWithin, imagePathFor, resizeImage, slugifyName };
+// src/media/validate.ts
+var IMAGE_LIMITS = { maxEach: 800 * 1024, maxTotal: 3.5 * 1024 * 1024, prefix: "/blog/" };
+var IMAGE_ERRORS = {
+  path: "That image path isn\u2019t allowed.",
+  size: "That picture is too large to send \u2014 try a smaller one."
+};
+var SAFE_PATH = /^[a-z0-9][a-z0-9/_-]*\.webp$/;
+function decodedSize(b64) {
+  const clean = b64.replace(/\s+/g, "");
+  const pad = clean.endsWith("==") ? 2 : clean.endsWith("=") ? 1 : 0;
+  return Math.floor(clean.length * 3 / 4) - pad;
+}
+function validateImages(images, limits = IMAGE_LIMITS) {
+  let total = 0;
+  const files = [];
+  for (const img of images) {
+    if (typeof img?.path !== "string" || typeof img?.base64 !== "string") return { ok: false, error: IMAGE_ERRORS.path };
+    if (!img.path.startsWith(limits.prefix) || img.path.includes("..")) return { ok: false, error: IMAGE_ERRORS.path };
+    const rel = img.path.slice(1);
+    if (!SAFE_PATH.test(rel)) return { ok: false, error: IMAGE_ERRORS.path };
+    const size = decodedSize(img.base64);
+    if (size === 0 || size > limits.maxEach) return { ok: false, error: IMAGE_ERRORS.size };
+    total += size;
+    if (total > limits.maxTotal) return { ok: false, error: IMAGE_ERRORS.size };
+    files.push({ path: `public/${rel}`, content: img.base64.replace(/\s+/g, ""), encoding: "base64" });
+  }
+  return { ok: true, files };
+}
+
+export { ACCEPTED_TYPES, IMAGE_ERRORS, IMAGE_LIMITS, MAX_INPUT_BYTES, MESSAGES as MEDIA_MESSAGES, MediaError, checkInput, decodedSize, fitWithin, imagePathFor, resizeImage, slugifyName, validateImages };
 //# sourceMappingURL=index.js.map
 //# sourceMappingURL=index.js.map

package/dist/media/index.js.map

@@ -1 +1 @@
-{"version":3,"sources":["../../src/media/errors.ts","../../src/media/resize.ts","../../src/media/paths.ts"],"names":[],"mappings":";AACO,IAAM,UAAA,GAAN,cAAyB,KAAA,CAAM;AAAA,EACpC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AAAA,EACd;AACF;AAEO,IAAM,QAAA,GAAW;AAAA,EACtB,IAAA,EAAM,oEAAA;AAAA,EACN,IAAA,EAAM,6DAAA;AAAA,EACN,MAAA,EAAQ;AACV;;;ACIO,IAAM,cAAA,GAAiB,CAAC,YAAA,EAAc,WAAA,EAAa,cAAc,WAAW;AAC5E,IAAM,eAAA,GAAkB,KAAK,IAAA,GAAO;AAkBpC,SAAS,SAAA,CAAU,KAAA,EAAe,MAAA,EAAgB,QAAA,EAAqD;AAC5G,EAAA,IAAI,KAAA,IAAS,QAAA,EAAU,OAAO,EAAE,OAAO,MAAA,EAAO;AAC9C,EAAA,MAAM,QAAQ,QAAA,GAAW,KAAA;AACzB,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,KAAK,CAAA,EAAG,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,GAAG,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,KAAK,CAAC,CAAA,EAAE;AAC7F;AAGO,SAAS,WAAW,IAAA,EAA4C;AACrE,EAAA,IAAI,CAAE,cAAA,CAAqC,QAAA,CAAS,IAAA,CAAK,IAAI,GAAG,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,IAAI,CAAA;AAClG,EAAA,IAAI,KAAK,IAAA,GAAO,eAAA,QAAuB,IAAI,UAAA,CAAW,SAAS,IAAI,CAAA;AACrE;AAEA,eAAsB,WAAA,CAAY,IAAA,EAAY,IAAA,GAAsB,EAAC,EAA0B;AAC7F,EAAA,UAAA,CAAW,IAAI,CAAA;AACf,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,OAAA,GAAU,MAAM,QAAA,GAAW,GAAA,GAAM,MAAK,GAAI,IAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAI,CAAA;AAChC,EAAA,MAAM,EAAE,OAAO,MAAA,EAAO,GAAI,UAAU,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,IAAI,CAAA;AAClC,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,UAAA,CAAW,SAAS,MAAM,CAAA;AAC9C,EAAA,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,CAAA,EAAG,CAAA,EAAG,OAAO,MAAM,CAAA;AACzC,EAAA,MAAA,CAAO,KAAA,IAAQ;AAEf,EAAA,IAAI,CAAA,GAAI,OAAA;AACR,EAAA,IAAI,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AACjC,EAAA,OAAO,IAAA,CAAK,IAAA,GAAO,QAAA,IAAY,CAAA,GAAI,QAAQ,GAAA,EAAK;AAC9C,IAAA,CAAA,IAAK,IAAA;AACL,IAAA,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO;AAC/B;AAEA,eAAe,OAAO,IAAA,EAAkC;AACtD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,kBAAkB,IAAI,CAAA;AAAA,EACrC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAAA,EACtC;AACF;AAIA,SAAS,UAAA,CAAW,OAAe,MAAA,EAA2B;AAC5D,EAAA,IAAI,OAAO,eAAA,KAAoB,WAAA,SAAoB,IAAI,eAAA,CAAgB,OAAO,MAAM,CAAA;AACpF,EAAA,MAAM,CAAA,GAAI,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACzC,EAAA,CAAA,CAAE,KAAA,GAAQ,KAAA;AACV,EAAA,CAAA,CAAE,MAAA,GAAS,MAAA;AACX,EAAA,OAAO,CAAA;AACT;AAEA,eAAe,MAAA,CAAO,QAAmB,OAAA,EAAgC;AACvE,EAAA,MAAM,IAAA,GACJ,eAAA,IAAmB,MAAA,GACf,MAAM,MAAA,CAAO,aAAA,CAAc,EAAE,IAAA,EAAM,YAAA,EAAc,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA,GAC5E,MAAM,IAAI,OAAA,CAAqB,CAAC,OAAA,KAAY,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,YAAA,EAAc,OAAO,CAAC,CAAA;AAC/F,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,IAAA,KAAS,cAAc,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAC7E,EAAA,OAAO,IAAA;AACT;;;AC/EO,SAAS,YAAY,IAAA,EAAsB;AAChD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,IAAI,IAAA,CACP,SAAA,CAAU,MAAM,CAAA,CAChB,QAAQ,QAAA,EAAU,EAAE,CAAA,CACpB,WAAA,GACA,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAC1B,OAAA,CAAQ,YAAY,EAAE,CAAA;AACzB,EAAA,OAAO,CAAA,IAAK,OAAA;AACd;AAEO,SAAS,aAAa,IAAA,EAAiB,IAAA,EAAc,eAAe,EAAA,EAAI,IAAA,GAAoB,EAAC,EAAW;AAC7G,EAAA,MAAM,OAAO,IAAA,CAAK,SAAA,IAAa,OAAA,EAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzD,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,CAAA;AAAA,IACvB,KAAK,QAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,YAAA,CAAA;AAAA,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,GAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,WAAA,CAAY,YAAY,CAAC,CAAA,KAAA,CAAA;AAAA;AAExD","file":"index.js","sourcesContent":["/** A picture problem the person can act on. The message is the sentence shown under the control. */\nexport class MediaError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"MediaError\";\n  }\n}\n\nexport const MESSAGES = {\n  type: \"That file type isn’t supported — use a JPG, PNG or WebP.\",\n  size: \"That picture is too big to send — pick one under 10MB.\",\n  encode: \"This browser can’t prepare pictures — try Chrome, Edge or Safari 16+.\",\n} as const;\n","/**\n * resizeImage — shrink a picture in the browser to web size, as WebP.\n *\n * Phone photos are 3–8MB; a Vercel server action body is capped at 4.5MB and the\n * GitHub API wants base64. So the shrink happens here, before anything leaves the\n * browser: decode → fit inside maxWidth → draw to a canvas → encode WebP, lowering\n * quality in steps until the result is under maxBytes. GIFs lose their animation\n * (a still frame is encoded) — acceptable for a blog.\n *\n * No network, no dependencies. Throws MediaError with a plain sentence for the\n * three things that can go wrong: wrong type, too big to even try, or a browser\n * that cannot encode WebP (toBlob returns null or a non-WebP type).\n */\n\nimport { MediaError, MESSAGES } from \"./errors\";\n\nexport const ACCEPTED_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\", \"image/gif\"] as const;\nexport const MAX_INPUT_BYTES = 10 * 1024 * 1024;\n\nexport interface ResizeOptions {\n  /** Longest allowed width in pixels. Default 1600. */\n  maxWidth?: number;\n  /** Starting WebP quality 0–1. Default 0.82. */\n  quality?: number;\n  /** Target ceiling for the encoded size. Default 600KB. */\n  maxBytes?: number;\n}\n\nexport interface ResizedImage {\n  blob: Blob;\n  width: number;\n  height: number;\n}\n\n/** Pure: fit (width × height) inside maxWidth, never scaling up, whole pixels. */\nexport function fitWithin(width: number, height: number, maxWidth: number): { width: number; height: number } {\n  if (width <= maxWidth) return { width, height };\n  const ratio = maxWidth / width;\n  return { width: Math.round(width * ratio), height: Math.max(1, Math.round(height * ratio)) };\n}\n\n/** The type/size guards, separated so they can run (and be tested) without a canvas. */\nexport function checkInput(file: { type: string; size: number }): void {\n  if (!(ACCEPTED_TYPES as readonly string[]).includes(file.type)) throw new MediaError(MESSAGES.type);\n  if (file.size > MAX_INPUT_BYTES) throw new MediaError(MESSAGES.size);\n}\n\nexport async function resizeImage(file: File, opts: ResizeOptions = {}): Promise<ResizedImage> {\n  checkInput(file);\n  const { maxWidth = 1600, quality = 0.82, maxBytes = 600 * 1024 } = opts;\n\n  const bitmap = await decode(file);\n  const { width, height } = fitWithin(bitmap.width, bitmap.height, maxWidth);\n  const canvas = makeCanvas(width, height);\n  const ctx = canvas.getContext(\"2d\");\n  if (!ctx) throw new MediaError(MESSAGES.encode);\n  ctx.drawImage(bitmap, 0, 0, width, height);\n  bitmap.close?.();\n\n  let q = quality;\n  let blob = await encode(canvas, q);\n  while (blob.size > maxBytes && q - 0.08 >= 0.5) {\n    q -= 0.08;\n    blob = await encode(canvas, q);\n  }\n  return { blob, width, height };\n}\n\nasync function decode(file: File): Promise<ImageBitmap> {\n  try {\n    return await createImageBitmap(file);\n  } catch {\n    throw new MediaError(MESSAGES.encode);\n  }\n}\n\ntype AnyCanvas = HTMLCanvasElement | OffscreenCanvas;\n\nfunction makeCanvas(width: number, height: number): AnyCanvas {\n  if (typeof OffscreenCanvas !== \"undefined\") return new OffscreenCanvas(width, height);\n  const c = document.createElement(\"canvas\");\n  c.width = width;\n  c.height = height;\n  return c;\n}\n\nasync function encode(canvas: AnyCanvas, quality: number): Promise<Blob> {\n  const blob =\n    \"convertToBlob\" in canvas\n      ? await canvas.convertToBlob({ type: \"image/webp\", quality }).catch(() => null)\n      : await new Promise<Blob | null>((resolve) => canvas.toBlob(resolve, \"image/webp\", quality));\n  if (!blob || blob.type !== \"image/webp\") throw new MediaError(MESSAGES.encode);\n  return blob;\n}\n","/**\n * Where a picture lives, decided from the post's slug so the path is known before\n * anything is committed: hero → /blog/{slug}.webp, social → /blog/{slug}-social.webp,\n * body → /blog/{slug}/{name}.webp. The host commits the file under public/ + path.\n */\n\nexport type ImageKind = \"hero\" | \"social\" | \"body\";\n\nexport interface PathOptions {\n  /** URL prefix the pictures are served from. Default \"/blog\". */\n  publicDir?: string;\n}\n\n/** Lower-case letters, digits and single hyphens; empty in → \"image\". */\nexport function slugifyName(name: string): string {\n  const base = name.replace(/\\.[a-z0-9]+$/i, \"\");\n  const s = base\n    .normalize(\"NFKD\")\n    .replace(/[̀-ͯ]/g, \"\")\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return s || \"image\";\n}\n\nexport function imagePathFor(kind: ImageKind, slug: string, originalName = \"\", opts: PathOptions = {}): string {\n  const dir = (opts.publicDir ?? \"/blog\").replace(/\\/$/, \"\");\n  switch (kind) {\n    case \"hero\":\n      return `${dir}/${slug}.webp`;\n    case \"social\":\n      return `${dir}/${slug}-social.webp`;\n    case \"body\":\n      return `${dir}/${slug}/${slugifyName(originalName)}.webp`;\n  }\n}\n"]}
+{"version":3,"sources":["../../src/media/errors.ts","../../src/media/resize.ts","../../src/media/paths.ts","../../src/media/validate.ts"],"names":[],"mappings":";AACO,IAAM,UAAA,GAAN,cAAyB,KAAA,CAAM;AAAA,EACpC,YAAY,OAAA,EAAiB;AAC3B,IAAA,KAAA,CAAM,OAAO,CAAA;AACb,IAAA,IAAA,CAAK,IAAA,GAAO,YAAA;AAAA,EACd;AACF;AAEO,IAAM,QAAA,GAAW;AAAA,EACtB,IAAA,EAAM,oEAAA;AAAA,EACN,IAAA,EAAM,6DAAA;AAAA,EACN,MAAA,EAAQ;AACV;;;ACIO,IAAM,cAAA,GAAiB,CAAC,YAAA,EAAc,WAAA,EAAa,cAAc,WAAW;AAC5E,IAAM,eAAA,GAAkB,KAAK,IAAA,GAAO;AAkBpC,SAAS,SAAA,CAAU,KAAA,EAAe,MAAA,EAAgB,QAAA,EAAqD;AAC5G,EAAA,IAAI,KAAA,IAAS,QAAA,EAAU,OAAO,EAAE,OAAO,MAAA,EAAO;AAC9C,EAAA,MAAM,QAAQ,QAAA,GAAW,KAAA;AACzB,EAAA,OAAO,EAAE,KAAA,EAAO,IAAA,CAAK,KAAA,CAAM,KAAA,GAAQ,KAAK,CAAA,EAAG,MAAA,EAAQ,IAAA,CAAK,GAAA,CAAI,GAAG,IAAA,CAAK,KAAA,CAAM,MAAA,GAAS,KAAK,CAAC,CAAA,EAAE;AAC7F;AAGO,SAAS,WAAW,IAAA,EAA4C;AACrE,EAAA,IAAI,CAAE,cAAA,CAAqC,QAAA,CAAS,IAAA,CAAK,IAAI,GAAG,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,IAAI,CAAA;AAClG,EAAA,IAAI,KAAK,IAAA,GAAO,eAAA,QAAuB,IAAI,UAAA,CAAW,SAAS,IAAI,CAAA;AACrE;AAEA,eAAsB,WAAA,CAAY,IAAA,EAAY,IAAA,GAAsB,EAAC,EAA0B;AAC7F,EAAA,UAAA,CAAW,IAAI,CAAA;AACf,EAAA,MAAM,EAAE,WAAW,IAAA,EAAM,OAAA,GAAU,MAAM,QAAA,GAAW,GAAA,GAAM,MAAK,GAAI,IAAA;AAEnE,EAAA,MAAM,MAAA,GAAS,MAAM,MAAA,CAAO,IAAI,CAAA;AAChC,EAAA,MAAM,EAAE,OAAO,MAAA,EAAO,GAAI,UAAU,MAAA,CAAO,KAAA,EAAO,MAAA,CAAO,MAAA,EAAQ,QAAQ,CAAA;AACzE,EAAA,MAAM,MAAA,GAAS,UAAA,CAAW,KAAA,EAAO,MAAM,CAAA;AACvC,EAAA,MAAM,GAAA,GAAM,MAAA,CAAO,UAAA,CAAW,IAAI,CAAA;AAClC,EAAA,IAAI,CAAC,GAAA,EAAK,MAAM,IAAI,UAAA,CAAW,SAAS,MAAM,CAAA;AAC9C,EAAA,GAAA,CAAI,SAAA,CAAU,MAAA,EAAQ,CAAA,EAAG,CAAA,EAAG,OAAO,MAAM,CAAA;AACzC,EAAA,MAAA,CAAO,KAAA,IAAQ;AAEf,EAAA,IAAI,CAAA,GAAI,OAAA;AACR,EAAA,IAAI,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AACjC,EAAA,OAAO,IAAA,CAAK,IAAA,GAAO,QAAA,IAAY,CAAA,GAAI,QAAQ,GAAA,EAAK;AAC9C,IAAA,CAAA,IAAK,IAAA;AACL,IAAA,IAAA,GAAO,MAAM,MAAA,CAAO,MAAA,EAAQ,CAAC,CAAA;AAAA,EAC/B;AACA,EAAA,OAAO,EAAE,IAAA,EAAM,KAAA,EAAO,MAAA,EAAO;AAC/B;AAEA,eAAe,OAAO,IAAA,EAAkC;AACtD,EAAA,IAAI;AACF,IAAA,OAAO,MAAM,kBAAkB,IAAI,CAAA;AAAA,EACrC,CAAA,CAAA,MAAQ;AACN,IAAA,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAAA,EACtC;AACF;AAIA,SAAS,UAAA,CAAW,OAAe,MAAA,EAA2B;AAC5D,EAAA,IAAI,OAAO,eAAA,KAAoB,WAAA,SAAoB,IAAI,eAAA,CAAgB,OAAO,MAAM,CAAA;AACpF,EAAA,MAAM,CAAA,GAAI,QAAA,CAAS,aAAA,CAAc,QAAQ,CAAA;AACzC,EAAA,CAAA,CAAE,KAAA,GAAQ,KAAA;AACV,EAAA,CAAA,CAAE,MAAA,GAAS,MAAA;AACX,EAAA,OAAO,CAAA;AACT;AAEA,eAAe,MAAA,CAAO,QAAmB,OAAA,EAAgC;AACvE,EAAA,MAAM,IAAA,GACJ,eAAA,IAAmB,MAAA,GACf,MAAM,MAAA,CAAO,aAAA,CAAc,EAAE,IAAA,EAAM,YAAA,EAAc,OAAA,EAAS,CAAA,CAAE,KAAA,CAAM,MAAM,IAAI,CAAA,GAC5E,MAAM,IAAI,OAAA,CAAqB,CAAC,OAAA,KAAY,MAAA,CAAO,MAAA,CAAO,OAAA,EAAS,YAAA,EAAc,OAAO,CAAC,CAAA;AAC/F,EAAA,IAAI,CAAC,QAAQ,IAAA,CAAK,IAAA,KAAS,cAAc,MAAM,IAAI,UAAA,CAAW,QAAA,CAAS,MAAM,CAAA;AAC7E,EAAA,OAAO,IAAA;AACT;;;AC/EO,SAAS,YAAY,IAAA,EAAsB;AAChD,EAAA,MAAM,IAAA,GAAO,IAAA,CAAK,OAAA,CAAQ,eAAA,EAAiB,EAAE,CAAA;AAC7C,EAAA,MAAM,IAAI,IAAA,CACP,SAAA,CAAU,MAAM,CAAA,CAChB,QAAQ,QAAA,EAAU,EAAE,CAAA,CACpB,WAAA,GACA,OAAA,CAAQ,aAAA,EAAe,GAAG,CAAA,CAC1B,OAAA,CAAQ,YAAY,EAAE,CAAA;AACzB,EAAA,OAAO,CAAA,IAAK,OAAA;AACd;AAEO,SAAS,aAAa,IAAA,EAAiB,IAAA,EAAc,eAAe,EAAA,EAAI,IAAA,GAAoB,EAAC,EAAW;AAC7G,EAAA,MAAM,OAAO,IAAA,CAAK,SAAA,IAAa,OAAA,EAAS,OAAA,CAAQ,OAAO,EAAE,CAAA;AACzD,EAAA,QAAQ,IAAA;AAAM,IACZ,KAAK,MAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,KAAA,CAAA;AAAA,IACvB,KAAK,QAAA;AACH,MAAA,OAAO,CAAA,EAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,YAAA,CAAA;AAAA,IACvB,KAAK,MAAA;AACH,MAAA,OAAO,GAAG,GAAG,CAAA,CAAA,EAAI,IAAI,CAAA,CAAA,EAAI,WAAA,CAAY,YAAY,CAAC,CAAA,KAAA,CAAA;AAAA;AAExD;;;ACZO,IAAM,YAAA,GAA4B,EAAE,OAAA,EAAS,GAAA,GAAM,IAAA,EAAM,UAAU,GAAA,GAAM,IAAA,GAAO,IAAA,EAAM,MAAA,EAAQ,QAAA;AAE9F,IAAM,YAAA,GAAe;AAAA,EAC1B,IAAA,EAAM,qCAAA;AAAA,EACN,IAAA,EAAM;AACR;AAMA,IAAM,SAAA,GAAY,8BAAA;AAGX,SAAS,YAAY,GAAA,EAAqB;AAC/C,EAAA,MAAM,KAAA,GAAQ,GAAA,CAAI,OAAA,CAAQ,MAAA,EAAQ,EAAE,CAAA;AACpC,EAAA,MAAM,GAAA,GAAM,KAAA,CAAM,QAAA,CAAS,IAAI,CAAA,GAAI,IAAI,KAAA,CAAM,QAAA,CAAS,GAAG,CAAA,GAAI,CAAA,GAAI,CAAA;AACjE,EAAA,OAAO,KAAK,KAAA,CAAO,KAAA,CAAM,MAAA,GAAS,CAAA,GAAK,CAAC,CAAA,GAAI,GAAA;AAC9C;AAEO,SAAS,cAAA,CAAe,MAAA,EAAwB,MAAA,GAAsB,YAAA,EAA+B;AAC1G,EAAA,IAAI,KAAA,GAAQ,CAAA;AACZ,EAAA,MAAM,QAAiE,EAAC;AACxE,EAAA,KAAA,MAAW,OAAO,MAAA,EAAQ;AACxB,IAAA,IAAI,OAAO,GAAA,EAAK,IAAA,KAAS,QAAA,IAAY,OAAO,GAAA,EAAK,MAAA,KAAW,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,aAAa,IAAA,EAAK;AACnH,IAAA,IAAI,CAAC,GAAA,CAAI,IAAA,CAAK,WAAW,MAAA,CAAO,MAAM,KAAK,GAAA,CAAI,IAAA,CAAK,QAAA,CAAS,IAAI,GAAG,OAAO,EAAE,IAAI,KAAA,EAAO,KAAA,EAAO,aAAa,IAAA,EAAK;AACjH,IAAA,MAAM,GAAA,GAAM,GAAA,CAAI,IAAA,CAAK,KAAA,CAAM,CAAC,CAAA;AAC5B,IAAA,IAAI,CAAC,SAAA,CAAU,IAAA,CAAK,GAAG,CAAA,EAAG,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,YAAA,CAAa,IAAA,EAAK;AACvE,IAAA,MAAM,IAAA,GAAO,WAAA,CAAY,GAAA,CAAI,MAAM,CAAA;AACnC,IAAA,IAAI,IAAA,KAAS,CAAA,IAAK,IAAA,GAAO,MAAA,CAAO,OAAA,EAAS,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,YAAA,CAAa,IAAA,EAAK;AACtF,IAAA,KAAA,IAAS,IAAA;AACT,IAAA,IAAI,KAAA,GAAQ,OAAO,QAAA,EAAU,OAAO,EAAE,EAAA,EAAI,KAAA,EAAO,KAAA,EAAO,YAAA,CAAa,IAAA,EAAK;AAC1E,IAAA,KAAA,CAAM,IAAA,CAAK,EAAE,IAAA,EAAM,CAAA,OAAA,EAAU,GAAG,CAAA,CAAA,EAAI,OAAA,EAAS,GAAA,CAAI,MAAA,CAAO,QAAQ,MAAA,EAAQ,EAAE,CAAA,EAAG,QAAA,EAAU,UAAU,CAAA;AAAA,EACnG;AACA,EAAA,OAAO,EAAE,EAAA,EAAI,IAAA,EAAM,KAAA,EAAM;AAC3B","file":"index.js","sourcesContent":["/** A picture problem the person can act on. The message is the sentence shown under the control. */\nexport class MediaError extends Error {\n  constructor(message: string) {\n    super(message);\n    this.name = \"MediaError\";\n  }\n}\n\nexport const MESSAGES = {\n  type: \"That file type isn’t supported — use a JPG, PNG or WebP.\",\n  size: \"That picture is too big to send — pick one under 10MB.\",\n  encode: \"This browser can’t prepare pictures — try Chrome, Edge or Safari 16+.\",\n} as const;\n","/**\n * resizeImage — shrink a picture in the browser to web size, as WebP.\n *\n * Phone photos are 3–8MB; a Vercel server action body is capped at 4.5MB and the\n * GitHub API wants base64. So the shrink happens here, before anything leaves the\n * browser: decode → fit inside maxWidth → draw to a canvas → encode WebP, lowering\n * quality in steps until the result is under maxBytes. GIFs lose their animation\n * (a still frame is encoded) — acceptable for a blog.\n *\n * No network, no dependencies. Throws MediaError with a plain sentence for the\n * three things that can go wrong: wrong type, too big to even try, or a browser\n * that cannot encode WebP (toBlob returns null or a non-WebP type).\n */\n\nimport { MediaError, MESSAGES } from \"./errors\";\n\nexport const ACCEPTED_TYPES = [\"image/jpeg\", \"image/png\", \"image/webp\", \"image/gif\"] as const;\nexport const MAX_INPUT_BYTES = 10 * 1024 * 1024;\n\nexport interface ResizeOptions {\n  /** Longest allowed width in pixels. Default 1600. */\n  maxWidth?: number;\n  /** Starting WebP quality 0–1. Default 0.82. */\n  quality?: number;\n  /** Target ceiling for the encoded size. Default 600KB. */\n  maxBytes?: number;\n}\n\nexport interface ResizedImage {\n  blob: Blob;\n  width: number;\n  height: number;\n}\n\n/** Pure: fit (width × height) inside maxWidth, never scaling up, whole pixels. */\nexport function fitWithin(width: number, height: number, maxWidth: number): { width: number; height: number } {\n  if (width <= maxWidth) return { width, height };\n  const ratio = maxWidth / width;\n  return { width: Math.round(width * ratio), height: Math.max(1, Math.round(height * ratio)) };\n}\n\n/** The type/size guards, separated so they can run (and be tested) without a canvas. */\nexport function checkInput(file: { type: string; size: number }): void {\n  if (!(ACCEPTED_TYPES as readonly string[]).includes(file.type)) throw new MediaError(MESSAGES.type);\n  if (file.size > MAX_INPUT_BYTES) throw new MediaError(MESSAGES.size);\n}\n\nexport async function resizeImage(file: File, opts: ResizeOptions = {}): Promise<ResizedImage> {\n  checkInput(file);\n  const { maxWidth = 1600, quality = 0.82, maxBytes = 600 * 1024 } = opts;\n\n  const bitmap = await decode(file);\n  const { width, height } = fitWithin(bitmap.width, bitmap.height, maxWidth);\n  const canvas = makeCanvas(width, height);\n  const ctx = canvas.getContext(\"2d\");\n  if (!ctx) throw new MediaError(MESSAGES.encode);\n  ctx.drawImage(bitmap, 0, 0, width, height);\n  bitmap.close?.();\n\n  let q = quality;\n  let blob = await encode(canvas, q);\n  while (blob.size > maxBytes && q - 0.08 >= 0.5) {\n    q -= 0.08;\n    blob = await encode(canvas, q);\n  }\n  return { blob, width, height };\n}\n\nasync function decode(file: File): Promise<ImageBitmap> {\n  try {\n    return await createImageBitmap(file);\n  } catch {\n    throw new MediaError(MESSAGES.encode);\n  }\n}\n\ntype AnyCanvas = HTMLCanvasElement | OffscreenCanvas;\n\nfunction makeCanvas(width: number, height: number): AnyCanvas {\n  if (typeof OffscreenCanvas !== \"undefined\") return new OffscreenCanvas(width, height);\n  const c = document.createElement(\"canvas\");\n  c.width = width;\n  c.height = height;\n  return c;\n}\n\nasync function encode(canvas: AnyCanvas, quality: number): Promise<Blob> {\n  const blob =\n    \"convertToBlob\" in canvas\n      ? await canvas.convertToBlob({ type: \"image/webp\", quality }).catch(() => null)\n      : await new Promise<Blob | null>((resolve) => canvas.toBlob(resolve, \"image/webp\", quality));\n  if (!blob || blob.type !== \"image/webp\") throw new MediaError(MESSAGES.encode);\n  return blob;\n}\n","/**\n * Where a picture lives, decided from the post's slug so the path is known before\n * anything is committed: hero → /blog/{slug}.webp, social → /blog/{slug}-social.webp,\n * body → /blog/{slug}/{name}.webp. The host commits the file under public/ + path.\n */\n\nexport type ImageKind = \"hero\" | \"social\" | \"body\";\n\nexport interface PathOptions {\n  /** URL prefix the pictures are served from. Default \"/blog\". */\n  publicDir?: string;\n}\n\n/** Lower-case letters, digits and single hyphens; empty in → \"image\". */\nexport function slugifyName(name: string): string {\n  const base = name.replace(/\\.[a-z0-9]+$/i, \"\");\n  const s = base\n    .normalize(\"NFKD\")\n    .replace(/[̀-ͯ]/g, \"\")\n    .toLowerCase()\n    .replace(/[^a-z0-9]+/g, \"-\")\n    .replace(/^-+|-+$/g, \"\");\n  return s || \"image\";\n}\n\nexport function imagePathFor(kind: ImageKind, slug: string, originalName = \"\", opts: PathOptions = {}): string {\n  const dir = (opts.publicDir ?? \"/blog\").replace(/\\/$/, \"\");\n  switch (kind) {\n    case \"hero\":\n      return `${dir}/${slug}.webp`;\n    case \"social\":\n      return `${dir}/${slug}-social.webp`;\n    case \"body\":\n      return `${dir}/${slug}/${slugifyName(originalName)}.webp`;\n  }\n}\n","/**\n * Server-side checks on the pictures a save carries. Pure.\n *\n * The browser already shrank them, but anyone can POST to a server action, so\n * the path, type and size are re-checked before anything is committed: only\n * WebP under the type's public folder, ≤ 800 KB each, ≤ 3.5 MB per save.\n * Frontmatter paths are URL paths (/blog/x.webp); the repo file lives under public/.\n */\n\nexport interface ImagePayload {\n  /** URL path as written in the frontmatter or body, e.g. /blog/my-post.webp. */\n  path: string;\n  /** Base64 of the WebP bytes. */\n  base64: string;\n}\n\nexport interface ImageLimits {\n  maxEach: number;\n  maxTotal: number;\n  /** URL prefix pictures must live under. */\n  prefix: string;\n}\n\nexport const IMAGE_LIMITS: ImageLimits = { maxEach: 800 * 1024, maxTotal: 3.5 * 1024 * 1024, prefix: \"/blog/\" };\n\nexport const IMAGE_ERRORS = {\n  path: \"That image path isn’t allowed.\",\n  size: \"That picture is too large to send — try a smaller one.\",\n} as const;\n\nexport type ValidatedImages =\n  | { ok: true; files: { path: string; content: string; encoding: \"base64\" }[] }\n  | { ok: false; error: string };\n\nconst SAFE_PATH = /^[a-z0-9][a-z0-9/_-]*\\.webp$/;\n\n/** Bytes a base64 string decodes to, without decoding it. */\nexport function decodedSize(b64: string): number {\n  const clean = b64.replace(/\\s+/g, \"\");\n  const pad = clean.endsWith(\"==\") ? 2 : clean.endsWith(\"=\") ? 1 : 0;\n  return Math.floor((clean.length * 3) / 4) - pad;\n}\n\nexport function validateImages(images: ImagePayload[], limits: ImageLimits = IMAGE_LIMITS): ValidatedImages {\n  let total = 0;\n  const files: { path: string; content: string; encoding: \"base64\" }[] = [];\n  for (const img of images) {\n    if (typeof img?.path !== \"string\" || typeof img?.base64 !== \"string\") return { ok: false, error: IMAGE_ERRORS.path };\n    if (!img.path.startsWith(limits.prefix) || img.path.includes(\"..\")) return { ok: false, error: IMAGE_ERRORS.path };\n    const rel = img.path.slice(1);\n    if (!SAFE_PATH.test(rel)) return { ok: false, error: IMAGE_ERRORS.path };\n    const size = decodedSize(img.base64);\n    if (size === 0 || size > limits.maxEach) return { ok: false, error: IMAGE_ERRORS.size };\n    total += size;\n    if (total > limits.maxTotal) return { ok: false, error: IMAGE_ERRORS.size };\n    files.push({ path: `public/${rel}`, content: img.base64.replace(/\\s+/g, \"\"), encoding: \"base64\" });\n  }\n  return { ok: true, files };\n}\n"]}

package/dist/members-nhbRSYyr.d.cts

@@ -0,0 +1,106 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/**
+ * Types for the identity layer. All config arrives as arguments — never env.
+ */
+/**
+ * Either cookie-store shape a host can hand us:
+ *  - @supabase/ssr's CookieMethodsServer: { getAll, setAll }
+ *  - Next's `await cookies()` store:      { getAll, set }
+ * `setAll` is preferred when present; otherwise each cookie goes through `set`.
+ */
+interface CookieStore {
+    getAll(): {
+        name: string;
+        value: string;
+    }[] | Promise<{
+        name: string;
+        value: string;
+    }[]>;
+    setAll?(cookies: {
+        name: string;
+        value: string;
+        options?: Record<string, unknown>;
+    }[]): void | Promise<void>;
+    set?(name: string, value: string, options?: Record<string, unknown>): unknown;
+}
+/** Enough to read the signed-in user with the anon key + their cookies. */
+interface IdentityContext {
+    url: string;
+    anonKey: string;
+    cookies: CookieStore;
+}
+/** Server-only. The service-role key bypasses RLS; the module checks roles in code first. */
+interface ServiceContext {
+    url: string;
+    serviceRoleKey: string;
+}
+type SiteRole = "staff" | "owner" | "editor";
+declare const ROLE_RANK: Record<SiteRole, number>;
+interface IdentityUser {
+    id: string;
+    email: string | null;
+}
+interface SiteMembership {
+    userId: string;
+    siteId: string;
+    role: "owner" | "editor";
+}
+
+/**
+ * createIdentityClient — a Supabase client bound to the request's cookies.
+ *
+ * Built per request from arguments. A Next 16 route does:
+ *
+ *   const store = await cookies();
+ *   const client = createIdentityClient({ url, anonKey, cookies: store });
+ *
+ * No `next` import here. The CookieStore interface accepts either shape a
+ * host might hand us: @supabase/ssr's { getAll, setAll }, or Next's
+ * cookies() store, which has { getAll, set } — the session cookies are
+ * written through whichever exists. (Observed 2026-09-08: with only setAll
+ * supported, Next's store silently wrote nothing and every sign-in bounced.)
+ */
+
+type IdentityClient = SupabaseClient;
+declare function createIdentityClient(ctx: IdentityContext): IdentityClient;
+
+/**
+ * Per-site branding — the Business tab. Reads and writes public.sites through
+ * the signed-in user's client, so RLS decides who may (members read; owners
+ * and staff write). Nothing here needs the service role.
+ */
+
+interface SiteBranding {
+    name: string;
+    logoUrl: string | null;
+    faviconUrl: string | null;
+    businessEmail: string | null;
+    businessPhone: string | null;
+}
+type BrandingPatch = Partial<SiteBranding> & {
+    name: string;
+};
+declare function getSiteBranding(client: IdentityClient, siteId: string): Promise<SiteBranding | null>;
+/** Upsert the row. RLS refuses anyone but the site's owners or staff. */
+declare function updateSiteBranding(client: IdentityClient, siteId: string, patch: BrandingPatch): Promise<void>;
+
+/**
+ * The Team roster — public.site_members(site_id), a SECURITY DEFINER function
+ * that returns rows only to that site's owners or staff (editors get a 42501).
+ * Read with the signed-in user's client; writes are in service.ts.
+ */
+
+interface SiteMember {
+    userId: string;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "owner" | "editor";
+    /** "invited" until the person has signed in once. */
+    status: "invited" | "active";
+    invitedAt: string;
+}
+declare function listSiteMembers(client: IdentityClient, siteId: string): Promise<SiteMember[]>;
+
+export { type BrandingPatch as B, type CookieStore as C, type IdentityClient as I, ROLE_RANK as R, type ServiceContext as S, type IdentityUser as a, type IdentityContext as b, type SiteBranding as c, type SiteMember as d, type SiteMembership as e, type SiteRole as f, createIdentityClient as g, getSiteBranding as h, listSiteMembers as l, updateSiteBranding as u };

package/dist/members-nhbRSYyr.d.ts

@@ -0,0 +1,106 @@
+import { SupabaseClient } from '@supabase/supabase-js';
+
+/**
+ * Types for the identity layer. All config arrives as arguments — never env.
+ */
+/**
+ * Either cookie-store shape a host can hand us:
+ *  - @supabase/ssr's CookieMethodsServer: { getAll, setAll }
+ *  - Next's `await cookies()` store:      { getAll, set }
+ * `setAll` is preferred when present; otherwise each cookie goes through `set`.
+ */
+interface CookieStore {
+    getAll(): {
+        name: string;
+        value: string;
+    }[] | Promise<{
+        name: string;
+        value: string;
+    }[]>;
+    setAll?(cookies: {
+        name: string;
+        value: string;
+        options?: Record<string, unknown>;
+    }[]): void | Promise<void>;
+    set?(name: string, value: string, options?: Record<string, unknown>): unknown;
+}
+/** Enough to read the signed-in user with the anon key + their cookies. */
+interface IdentityContext {
+    url: string;
+    anonKey: string;
+    cookies: CookieStore;
+}
+/** Server-only. The service-role key bypasses RLS; the module checks roles in code first. */
+interface ServiceContext {
+    url: string;
+    serviceRoleKey: string;
+}
+type SiteRole = "staff" | "owner" | "editor";
+declare const ROLE_RANK: Record<SiteRole, number>;
+interface IdentityUser {
+    id: string;
+    email: string | null;
+}
+interface SiteMembership {
+    userId: string;
+    siteId: string;
+    role: "owner" | "editor";
+}
+
+/**
+ * createIdentityClient — a Supabase client bound to the request's cookies.
+ *
+ * Built per request from arguments. A Next 16 route does:
+ *
+ *   const store = await cookies();
+ *   const client = createIdentityClient({ url, anonKey, cookies: store });
+ *
+ * No `next` import here. The CookieStore interface accepts either shape a
+ * host might hand us: @supabase/ssr's { getAll, setAll }, or Next's
+ * cookies() store, which has { getAll, set } — the session cookies are
+ * written through whichever exists. (Observed 2026-09-08: with only setAll
+ * supported, Next's store silently wrote nothing and every sign-in bounced.)
+ */
+
+type IdentityClient = SupabaseClient;
+declare function createIdentityClient(ctx: IdentityContext): IdentityClient;
+
+/**
+ * Per-site branding — the Business tab. Reads and writes public.sites through
+ * the signed-in user's client, so RLS decides who may (members read; owners
+ * and staff write). Nothing here needs the service role.
+ */
+
+interface SiteBranding {
+    name: string;
+    logoUrl: string | null;
+    faviconUrl: string | null;
+    businessEmail: string | null;
+    businessPhone: string | null;
+}
+type BrandingPatch = Partial<SiteBranding> & {
+    name: string;
+};
+declare function getSiteBranding(client: IdentityClient, siteId: string): Promise<SiteBranding | null>;
+/** Upsert the row. RLS refuses anyone but the site's owners or staff. */
+declare function updateSiteBranding(client: IdentityClient, siteId: string, patch: BrandingPatch): Promise<void>;
+
+/**
+ * The Team roster — public.site_members(site_id), a SECURITY DEFINER function
+ * that returns rows only to that site's owners or staff (editors get a 42501).
+ * Read with the signed-in user's client; writes are in service.ts.
+ */
+
+interface SiteMember {
+    userId: string;
+    email: string;
+    name: string | null;
+    avatarUrl: string | null;
+    role: "owner" | "editor";
+    /** "invited" until the person has signed in once. */
+    status: "invited" | "active";
+    invitedAt: string;
+}
+declare function listSiteMembers(client: IdentityClient, siteId: string): Promise<SiteMember[]>;
+
+export { type BrandingPatch as B, type CookieStore as C, type IdentityClient as I, ROLE_RANK as R, type ServiceContext as S, type IdentityUser as a, type IdentityContext as b, type SiteBranding as c, type SiteMember as d, type SiteMembership as e, type SiteRole as f, createIdentityClient as g, getSiteBranding as h, listSiteMembers as l, updateSiteBranding as u };

package/dist/roles-BjWuj2_v.d.cts

@@ -0,0 +1,25 @@
+import { f as SiteRole, I as IdentityClient, a as IdentityUser } from './members-nhbRSYyr.cjs';
+
+/**
+ * Role resolution and the request gate.
+ *
+ * Two selects on the caller's OWN rows — both permitted by RLS with the anon
+ * key, so this never needs the service role. Staff wins over any site role.
+ */
+
+declare function getSiteRole(client: IdentityClient, siteId: string, userId?: string): Promise<SiteRole | null>;
+declare function roleAtLeast(actual: SiteRole | null, minimum: SiteRole): boolean;
+interface RequireOptions {
+    /** Default "editor" — any member of the site. */
+    minimumRole?: SiteRole;
+}
+/**
+ * The gate. Throws UnauthenticatedError (→ sign in) or ForbiddenError (→ 403);
+ * otherwise returns the user and their effective role for this site.
+ */
+declare function requireSiteUser(client: IdentityClient, siteId: string, opts?: RequireOptions): Promise<{
+    user: IdentityUser;
+    role: SiteRole;
+}>;
+
+export { type RequireOptions as R, roleAtLeast as a, getSiteRole as g, requireSiteUser as r };

package/dist/roles-Dnwj-DAm.d.ts

@@ -0,0 +1,25 @@
+import { f as SiteRole, I as IdentityClient, a as IdentityUser } from './members-nhbRSYyr.js';
+
+/**
+ * Role resolution and the request gate.
+ *
+ * Two selects on the caller's OWN rows — both permitted by RLS with the anon
+ * key, so this never needs the service role. Staff wins over any site role.
+ */
+
+declare function getSiteRole(client: IdentityClient, siteId: string, userId?: string): Promise<SiteRole | null>;
+declare function roleAtLeast(actual: SiteRole | null, minimum: SiteRole): boolean;
+interface RequireOptions {
+    /** Default "editor" — any member of the site. */
+    minimumRole?: SiteRole;
+}
+/**
+ * The gate. Throws UnauthenticatedError (→ sign in) or ForbiddenError (→ 403);
+ * otherwise returns the user and their effective role for this site.
+ */
+declare function requireSiteUser(client: IdentityClient, siteId: string, opts?: RequireOptions): Promise<{
+    user: IdentityUser;
+    role: SiteRole;
+}>;
+
+export { type RequireOptions as R, roleAtLeast as a, getSiteRole as g, requireSiteUser as r };

package/dist/shell/index.d.cts

@@ -1,62 +1,7 @@
 import * as react from 'react';
 import { ReactNode, ButtonHTMLAttributes, AnchorHTMLAttributes } from 'react';
-
-/**
- * Light / dark, remembered per browser. The attribute lives on the .rz-admin
- * root (not <html>) so the host site's own theme is never touched.
- *
- * No flash of the wrong theme: the server renders defaultTheme, and the effect
- * only flips when a stored value differs — a single client-side change, never
- * a mismatch between server HTML and first client render.
- */
-type Theme = "light" | "dark";
-declare function useTheme(defaultTheme?: Theme): [Theme, (t: Theme) => void];
-declare function ThemeToggle({ theme, onChange }: {
-    theme: Theme;
-    onChange: (t: Theme) => void;
-}): react.JSX.Element;
-
-interface ShellUser {
-    email: string;
-    name?: string | null;
-    /** Profile photo; initials show when absent. */
-    avatarUrl?: string | null;
-}
-declare function firstNameOf(user: ShellUser): string;
-declare function initialsOf(user: ShellUser): string;
-declare function AccountMenu({ user, role, theme, onTheme, signOutPath, accountHref, helpHref }: {
-    user: ShellUser;
-    role: string;
-    theme: Theme;
-    onTheme: (t: Theme) => void;
-    signOutPath: string;
-    /** The Account page (My Profile · Change Password · Team · Business). Omit to hide the item. */
-    accountHref?: string;
-    /** The Help centre. Omit to hide the item. */
-    helpHref?: string;
-}): react.JSX.Element;
-
-/**
- * Sidebar — items from the content-type registry (via navFromContentTypes),
- * active by href prefix, collapsible with the state remembered per browser.
- * Plain anchors: the package does not know which router the host uses.
- */
-interface NavItem {
-    id: string;
-    label: string;
-    href: string;
-    /** Icon id; unknown ids fall back to a document icon. Defaults to `id`. */
-    icon?: string;
-    /** Shown greyed out and not navigable — a section that is coming but not built yet. */
-    disabled?: boolean;
-}
-declare function isActive(item: NavItem, activeHref: string, basePath: string): boolean;
-declare function Sidebar({ items, pinned, activeHref, basePath }: {
-    items: NavItem[];
-    pinned?: NavItem[];
-    activeHref: string;
-    basePath: string;
-}): react.JSX.Element;
+import { S as ShellUser, N as NavItem, T as Theme } from '../Sidebar-CNuphww6.cjs';
+export { A as AccountMenu, a as Sidebar, b as ThemeToggle, f as firstNameOf, i as initialsOf, c as isActive, u as useTheme } from '../Sidebar-CNuphww6.cjs';
 
 interface AdminShellProps {
     siteName: string;
@@ -213,4 +158,4 @@ declare function Tabs({ options, value, onChange, label }: {
     label?: string;
 }): react.JSX.Element;
 
-export { AccountMenu, AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, type NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, type ShellUser, Sidebar, StatusPill, type StepState, Steps, type TabOption, Tabs, type Theme, ThemeToggle, TopBar, buttonClass, buttonStyle, firstNameOf, iconFor, initialsOf, isActive, useTheme };
+export { AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, ShellUser, StatusPill, type StepState, Steps, type TabOption, Tabs, Theme, TopBar, buttonClass, buttonStyle, iconFor };

package/dist/shell/index.d.ts

@@ -1,62 +1,7 @@
 import * as react from 'react';
 import { ReactNode, ButtonHTMLAttributes, AnchorHTMLAttributes } from 'react';
-
-/**
- * Light / dark, remembered per browser. The attribute lives on the .rz-admin
- * root (not <html>) so the host site's own theme is never touched.
- *
- * No flash of the wrong theme: the server renders defaultTheme, and the effect
- * only flips when a stored value differs — a single client-side change, never
- * a mismatch between server HTML and first client render.
- */
-type Theme = "light" | "dark";
-declare function useTheme(defaultTheme?: Theme): [Theme, (t: Theme) => void];
-declare function ThemeToggle({ theme, onChange }: {
-    theme: Theme;
-    onChange: (t: Theme) => void;
-}): react.JSX.Element;
-
-interface ShellUser {
-    email: string;
-    name?: string | null;
-    /** Profile photo; initials show when absent. */
-    avatarUrl?: string | null;
-}
-declare function firstNameOf(user: ShellUser): string;
-declare function initialsOf(user: ShellUser): string;
-declare function AccountMenu({ user, role, theme, onTheme, signOutPath, accountHref, helpHref }: {
-    user: ShellUser;
-    role: string;
-    theme: Theme;
-    onTheme: (t: Theme) => void;
-    signOutPath: string;
-    /** The Account page (My Profile · Change Password · Team · Business). Omit to hide the item. */
-    accountHref?: string;
-    /** The Help centre. Omit to hide the item. */
-    helpHref?: string;
-}): react.JSX.Element;
-
-/**
- * Sidebar — items from the content-type registry (via navFromContentTypes),
- * active by href prefix, collapsible with the state remembered per browser.
- * Plain anchors: the package does not know which router the host uses.
- */
-interface NavItem {
-    id: string;
-    label: string;
-    href: string;
-    /** Icon id; unknown ids fall back to a document icon. Defaults to `id`. */
-    icon?: string;
-    /** Shown greyed out and not navigable — a section that is coming but not built yet. */
-    disabled?: boolean;
-}
-declare function isActive(item: NavItem, activeHref: string, basePath: string): boolean;
-declare function Sidebar({ items, pinned, activeHref, basePath }: {
-    items: NavItem[];
-    pinned?: NavItem[];
-    activeHref: string;
-    basePath: string;
-}): react.JSX.Element;
+import { S as ShellUser, N as NavItem, T as Theme } from '../Sidebar-CNuphww6.js';
+export { A as AccountMenu, a as Sidebar, b as ThemeToggle, f as firstNameOf, i as initialsOf, c as isActive, u as useTheme } from '../Sidebar-CNuphww6.js';
 
 interface AdminShellProps {
     siteName: string;
@@ -213,4 +158,4 @@ declare function Tabs({ options, value, onChange, label }: {
     label?: string;
 }): react.JSX.Element;
 
-export { AccountMenu, AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, type NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, type ShellUser, Sidebar, StatusPill, type StepState, Steps, type TabOption, Tabs, type Theme, ThemeToggle, TopBar, buttonClass, buttonStyle, firstNameOf, iconFor, initialsOf, isActive, useTheme };
+export { AdminShell, type AdminShellProps, Button, type ButtonSize, type ButtonVariant, Card, EmptyState, ForwardArrow, Icon, type IconName, LinkButton, NavItem, OutboundArrow, PageHeader, type PillTone, SHELL_CSS, ShellUser, StatusPill, type StepState, Steps, type TabOption, Tabs, Theme, TopBar, buttonClass, buttonStyle, iconFor };