@rebask/core 0.3.0 → 0.4.0

package/dist/lib/image-optimization/handler.js

@@ -1,165 +1,380 @@
+import { createHash } from "node:crypto";
 import { readFile } from "node:fs/promises";
-import { join } from "node:path";
+import { isAbsolute, relative, resolve, sep } from "node:path";
 import { imageConfig, publicDir } from "virtual:rebask/image-config";
+import { LRUCache } from "../lru-cache.js";
+import { fetchRemoteImage, PUBLIC_IMAGE_CACHE_CONTROL, } from "./fetch-remote-image.js";
 import { imageConfigDefault } from "./image-config.js";
-async function fetchLocalImage(href, publicDir) {
-    // Remove leading slash
-    const filePath = href.startsWith("/") ? href.slice(1) : href;
-    const fullPath = join(publicDir, filePath);
-    return await readFile(fullPath);
-}
-async function fetchRemoteImage(href) {
-    const response = await fetch(href);
-    if (!response.ok) {
-        throw new Error(`Failed to fetch remote image: ${response.statusText}`);
+import { ImageError, INVALID_UPSTREAM, NOT_ALLOWED, TIMED_OUT } from "./image-error.js";
+import { hasLocalMatch, hasRemoteMatch } from "./match-patterns.js";
+import { readBody } from "./read-body.js";
+const LOCAL_FETCH_TIMEOUT_MS = 7000;
+const LOCAL_URL_BASE = "http://n";
+const isDev = import.meta.env.DEV;
+const NOT_AN_IMAGE = "The requested resource isn't a valid image.";
+const imageCache = new LRUCache(imageConfig?.maximumCacheSize ?? imageConfigDefault.maximumCacheSize, (image) => image.buffer.byteLength);
+function resolveLocalImage(href, publicDir) {
+    const url = new URL(href, LOCAL_URL_BASE);
+    let pathname;
+    try {
+        pathname = decodeURIComponent(url.pathname);
+    }
+    catch {
+        return;
+    }
+    if (pathname.includes("\0"))
+        return;
+    const fullPath = resolve(publicDir, `.${pathname}`);
+    const relativePath = relative(publicDir, fullPath);
+    // On Windows, a colon in the name makes `relative` return an absolute path.
+    if (!relativePath ||
+        relativePath === ".." ||
+        relativePath.startsWith(`..${sep}`) ||
+        isAbsolute(relativePath)) {
+        return;
     }
-    const arrayBuffer = await response.arrayBuffer();
-    return Buffer.from(arrayBuffer);
+    return { path: fullPath, pathname: `/${relativePath.split(sep).join("/")}`, search: url.search };
 }
-async function optimizeImage({ buffer, contentType, quality, width, height, sharp, }) {
-    const transformer = sharp(buffer).rotate();
-    if (height) {
-        transformer.resize(width, height);
-    }
-    else {
-        transformer.resize(width, undefined, {
-            withoutEnlargement: true,
-        });
+function getFileName(href, contentType) {
+    const name = new URL(href, LOCAL_URL_BASE).pathname.split("/").pop();
+    const base = name?.replace(/\.[^.]*$/, "") || "image";
+    const extension = contentType === "image/jpeg" ? "jpg" : contentType.slice("image/".length).split("+")[0];
+    return `${base}.${extension}`;
+}
+function getResponseCacheControl(cacheControl, serverMaxAge) {
+    if (cacheControl.noStore)
+        return "no-store";
+    const scope = cacheControl.private ? "private" : "public";
+    const browserMaxAge = cacheControl.noCache
+        ? 0
+        : (cacheControl.browserMaxAge ??
+            (cacheControl.private || cacheControl.maxAge !== undefined ? 0 : serverMaxAge));
+    const directives = [scope, `max-age=${isDev ? 0 : browserMaxAge}`];
+    if (!isDev &&
+        !cacheControl.private &&
+        !cacheControl.noCache &&
+        cacheControl.sharedMaxAge !== undefined) {
+        directives.push(`s-maxage=${cacheControl.sharedMaxAge}`);
     }
-    if (contentType === "image/avif") {
-        transformer.avif({
-            quality: Math.max(quality - 20, 1),
-            effort: 3,
-        });
+    directives.push("must-revalidate");
+    return directives.join(", ");
+}
+async function fetchLocalAsset(href, request, maximumResponseBody) {
+    const requestUrl = new URL(request.url);
+    const url = new URL(href, requestUrl);
+    if (url.origin !== requestUrl.origin) {
+        throw new ImageError(400, NOT_ALLOWED);
     }
-    else if (contentType === "image/webp") {
-        transformer.webp({ quality });
+    const signal = AbortSignal.timeout(LOCAL_FETCH_TIMEOUT_MS);
+    const response = await fetch(url, { redirect: "manual", signal }).catch(() => {
+        if (signal.aborted) {
+            throw new ImageError(504, TIMED_OUT);
+        }
+        throw new ImageError(400, INVALID_UPSTREAM);
+    });
+    if (!response.ok || !response.body) {
+        await response.body?.cancel();
+        throw new ImageError(400, INVALID_UPSTREAM);
     }
-    else if (contentType === "image/png") {
-        transformer.png({ quality });
+    return readBody(response.body, maximumResponseBody, signal);
+}
+function sendImage(request, image, config, cacheControl, cacheStatus, href) {
+    const headers = new Headers({
+        Vary: "Accept",
+        "Cache-Control": cacheControl,
+        "X-Rebask-Cache": cacheStatus,
+        ETag: image.etag,
+    });
+    const ifNoneMatch = request.headers.get("if-none-match");
+    if (ifNoneMatch
+        ?.split(",")
+        .some((value) => value.trim() === "*" || value.trim().replace(/^W\//, "") === image.etag)) {
+        return new Response(null, { status: 304, headers });
     }
-    else if (contentType === "image/jpeg" || contentType === "image/jpg") {
-        transformer.jpeg({ quality, mozjpeg: true });
+    headers.set("Content-Type", image.contentType);
+    headers.set("Content-Length", String(image.buffer.byteLength));
+    headers.set("Content-Security-Policy", config.contentSecurityPolicy);
+    headers.set("Content-Disposition", `${config.contentDispositionType}; filename="${getFileName(href, image.contentType)}"`);
+    if (request.method === "HEAD") {
+        return new Response(null, { status: 200, headers });
     }
-    return await transformer.toBuffer();
+    const body = new Uint8Array(image.buffer.byteLength);
+    body.set(image.buffer);
+    return new Response(body, { status: 200, headers });
+}
+function hasFtypBrand(buffer, brand) {
+    if (buffer.byteLength < 16)
+        return false;
+    const boxSize = buffer.readUInt32BE(0);
+    if (boxSize < 16 || boxSize > buffer.byteLength)
+        return false;
+    if (buffer.toString("ascii", 4, 8) !== "ftyp")
+        return false;
+    // The major brand and the compatible brands all live inside the ftyp box.
+    return buffer.subarray(8, boxSize).includes(brand);
 }
 function detectContentType(buffer) {
-    // Simple detection based on magic bytes
     if (buffer[0] === 0xff && buffer[1] === 0xd8) {
         return "image/jpeg";
     }
-    if (buffer[0] === 0x89 && buffer[1] === 0x50) {
+    if (buffer[0] === 0x89 && buffer[1] === 0x50 && buffer[2] === 0x4e && buffer[3] === 0x47) {
         return "image/png";
     }
-    if (buffer[0] === 0x47 && buffer[1] === 0x49) {
+    const magic = buffer.toString("ascii", 0, 4);
+    if (magic === "GIF8") {
         return "image/gif";
     }
-    if (buffer[8] === 0x57 && buffer[9] === 0x45 && buffer[10] === 0x42) {
+    if (magic === "RIFF" && buffer.toString("ascii", 8, 12) === "WEBP") {
         return "image/webp";
     }
-    // Default to jpeg
-    return "image/jpeg";
+    if (hasFtypBrand(buffer, "avif")) {
+        return "image/avif";
+    }
+    if (hasFtypBrand(buffer, "heic") ||
+        hasFtypBrand(buffer, "heix") ||
+        hasFtypBrand(buffer, "hevc") ||
+        hasFtypBrand(buffer, "hevx")) {
+        return "image/heic";
+    }
+    const head = buffer.subarray(0, 1024).toString("utf8").trimStart();
+    if (/^(?:<\?xml[^>]*>\s*)?(?:<!--[\s\S]*?-->\s*)*(?:<!DOCTYPE[^>]*>\s*)?<svg[\s/>]/i.test(head)) {
+        return "image/svg+xml";
+    }
+}
+async function isAnimated(sharp, buffer, contentType) {
+    if (contentType !== "image/gif" && contentType !== "image/webp")
+        return false;
+    const metadata = await sharp(buffer).metadata();
+    return (metadata.pages ?? 1) > 1;
+}
+function negotiateFormat(accept, formats) {
+    const accepted = new Map();
+    for (const part of accept.split(",")) {
+        const [rawType, ...params] = part.split(";");
+        const type = rawType?.trim().toLowerCase();
+        if (!type)
+            continue;
+        let quality = 1;
+        for (const param of params) {
+            const [key, value] = param.split("=");
+            if (key?.trim().toLowerCase() === "q") {
+                quality = Number.parseFloat(value?.trim().replace(/^"|"$/g, "") ?? "1");
+            }
+        }
+        accepted.set(type, Number.isNaN(quality) ? 0 : quality);
+    }
+    function qualityFor(type) {
+        return accepted.get(type) ?? accepted.get("image/*") ?? accepted.get("*/*") ?? 0;
+    }
+    let format;
+    let bestQuality = 0;
+    for (const candidate of formats) {
+        const quality = qualityFor(candidate);
+        if (quality > bestQuality) {
+            bestQuality = quality;
+            format = candidate;
+        }
+    }
+    return {
+        format,
+        acceptsAvif: qualityFor("image/avif") > 0,
+        acceptsWebp: qualityFor("image/webp") > 0,
+    };
+}
+function validateUrlParam(rawUrl, config) {
+    if (!rawUrl) {
+        return { error: '"url" parameter is required' };
+    }
+    if (rawUrl.startsWith("//")) {
+        return { error: '"url" parameter cannot be a protocol-relative URL' };
+    }
+    if (rawUrl.startsWith("/")) {
+        if (/[\\\t\n\r]/.test(rawUrl)) {
+            return { error: '"url" parameter is invalid' };
+        }
+        const imagePath = config.path.replace(/\/$/, "");
+        if (imagePath) {
+            let pathname;
+            try {
+                pathname = decodeURIComponent(new URL(rawUrl, LOCAL_URL_BASE).pathname);
+            }
+            catch {
+                pathname = undefined;
+            }
+            if (pathname && (pathname === imagePath || pathname.startsWith(`${imagePath}/`))) {
+                return { error: '"url" parameter cannot be recursive' };
+            }
+        }
+        return { href: rawUrl, isLocal: true };
+    }
+    let url;
+    try {
+        url = new URL(rawUrl);
+    }
+    catch {
+        return { error: '"url" parameter is invalid' };
+    }
+    if (url.protocol !== "http:" && url.protocol !== "https:") {
+        return { error: '"url" parameter is invalid' };
+    }
+    if (!hasRemoteMatch(config.remotePatterns, url)) {
+        return { error: NOT_ALLOWED };
+    }
+    return { href: url.href, isLocal: false };
 }
-/**
- * Handler for image optimization requests.
- */
 export async function handleImage(request, sharp) {
-    if (!imageConfig) {
+    const config = imageConfig;
+    if (!config) {
         return new Response("Image optimization is not configured", { status: 404 });
     }
-    const mergedConfig = {
-        ...imageConfigDefault,
-        ...imageConfig,
-    };
-    const url = new URL(request.url);
-    const params = url.searchParams;
-    const imageUrl = params.get("url");
+    const params = new URL(request.url).searchParams;
     const widthStr = params.get("w");
     const qualityStr = params.get("q");
-    const heightStr = params.get("h");
-    if (!imageUrl || !widthStr) {
-        return new Response("Missing required parameters: url, w", {
+    if (!widthStr) {
+        return new Response('"w" parameter (width) is required', { status: 400 });
+    }
+    const urlResult = validateUrlParam(params.get("url"), config);
+    if ("error" in urlResult) {
+        return new Response(urlResult.error, { status: 400 });
+    }
+    if (!/^[0-9]+$/.test(widthStr)) {
+        return new Response('"w" parameter (width) must be an integer greater than 0', {
             status: 400,
         });
     }
     const width = parseInt(widthStr, 10);
-    const quality = qualityStr ? parseInt(qualityStr, 10) : 75;
-    const height = heightStr ? parseInt(heightStr, 10) : undefined;
-    if (Number.isNaN(width) || width <= 0) {
-        return new Response("Invalid width parameter", {
-            status: 400,
-        });
+    if (!config.deviceSizes.includes(width) && !config.imageSizes.includes(width)) {
+        return new Response(`"w" parameter (width) of ${width} is not allowed`, { status: 400 });
     }
-    if (quality && (Number.isNaN(quality) || quality < 1 || quality > 100)) {
-        return new Response("Invalid quality parameter", {
+    const quality = qualityStr ? parseInt(qualityStr, 10) : (config.qualities?.[0] ?? 75);
+    if ((qualityStr && !/^[0-9]+$/.test(qualityStr)) || quality < 1 || quality > 100) {
+        return new Response('"q" parameter (quality) must be an integer between 1 and 100', {
             status: 400,
         });
     }
+    if (config.qualities?.length && !config.qualities.includes(quality)) {
+        return new Response(`"q" parameter (quality) of ${quality} is not allowed`, { status: 400 });
+    }
     try {
-        // Decode the URL
-        const decodedUrl = decodeURIComponent(imageUrl);
-        const isLocal = decodedUrl.startsWith("/");
-        if (isLocal && !publicDir) {
-            const message = import.meta.env.DEV
-                ? "Local image optimization requires a public directory. Please configure `publicDir` in your Vite config."
-                : "";
-            return new Response(message, {
-                status: 404,
-            });
-        }
-        const imageBuffer = isLocal
-            ? await fetchLocalImage(decodedUrl, publicDir)
-            : await fetchRemoteImage(decodedUrl);
-        // Detect content type
-        let contentType = detectContentType(imageBuffer);
-        // SVG images are not optimized - they should be served directly
-        if (contentType === "image/svg+xml") {
-            return new Response("SVG images are not supported", {
-                status: 400,
-            });
-        }
-        // Check Accept header for preferred format
-        const acceptHeader = request.headers.get("accept") || "";
-        if (acceptHeader.includes("image/avif")) {
-            contentType = "image/avif";
-        }
-        else if (acceptHeader.includes("image/webp")) {
-            contentType = "image/webp";
-        }
-        // Optimize the image
-        const optimizedBuffer = await optimizeImage({
-            buffer: imageBuffer,
-            contentType,
-            quality,
-            width,
-            height,
-            sharp,
-        });
-        // Generate ETag for caching
-        const etag = `"${Buffer.from(optimizedBuffer).toString("base64").slice(0, 16)}"`;
-        // Check if client has cached version
-        const ifNoneMatch = request.headers.get("if-none-match");
-        if (ifNoneMatch === etag) {
-            return new Response(null, {
-                status: 304,
-                headers: {
-                    ETag: etag,
-                },
-            });
-        }
-        return new Response(new Uint8Array(optimizedBuffer), {
-            status: 200,
-            headers: {
-                "Content-Type": contentType,
-                "Cache-Control": `public, max-age=${mergedConfig.minimumCacheTTL}, immutable`,
-                ETag: etag,
-            },
-        });
+        const { href, isLocal } = urlResult;
+        const { format: negotiatedFormat, acceptsAvif, acceptsWebp, } = negotiateFormat(request.headers.get("accept") ?? "", config.formats);
+        const formatKey = negotiatedFormat ?? `source|${acceptsAvif}|${acceptsWebp}`;
+        const cacheKey = `${href}\n${width}\n${quality}\n${formatKey}`;
+        const cached = isDev ? undefined : imageCache.get(cacheKey);
+        if (cached) {
+            if (cached.expiresAt > Date.now()) {
+                return sendImage(request, cached, config, cached.cacheControl, "HIT", href);
+            }
+            imageCache.delete(cacheKey);
+        }
+        let imageBuffer;
+        let upstreamCacheControl = PUBLIC_IMAGE_CACHE_CONTROL;
+        if (isLocal) {
+            if (publicDir) {
+                const local = resolveLocalImage(href, publicDir);
+                if (!local)
+                    return new Response(NOT_ALLOWED, { status: 400 });
+                try {
+                    imageBuffer = await readFile(local.path);
+                    if (!hasLocalMatch(config.localPatterns, local.pathname, local.search)) {
+                        return new Response(NOT_ALLOWED, { status: 400 });
+                    }
+                }
+                catch (error) {
+                    const code = error.code;
+                    if (code === "ENOENT") {
+                        // Static imports are Vite-emitted assets outside publicDir. Fetch them from the app
+                        // itself so they go through the optimizer.
+                        imageBuffer = await fetchLocalAsset(href, request, config.maximumResponseBody);
+                    }
+                    else if (code === "EISDIR" || code === "ENOTDIR") {
+                        throw new ImageError(400, NOT_AN_IMAGE);
+                    }
+                    else {
+                        throw error;
+                    }
+                }
+            }
+            else {
+                imageBuffer = await fetchLocalAsset(href, request, config.maximumResponseBody);
+            }
+        }
+        else {
+            const remote = await fetchRemoteImage(href, config);
+            imageBuffer = remote.buffer;
+            upstreamCacheControl = remote.cacheControl;
+        }
+        const maxAge = !upstreamCacheControl.noStore &&
+            !upstreamCacheControl.private &&
+            !upstreamCacheControl.noCache &&
+            (upstreamCacheControl.maxAge === undefined || upstreamCacheControl.maxAge > 0)
+            ? Math.max(config.minimumCacheTTL, upstreamCacheControl.maxAge ?? 0)
+            : 0;
+        const responseCacheControl = getResponseCacheControl(upstreamCacheControl, maxAge);
+        const respond = (buffer, responseType) => {
+            const etag = `"${createHash("sha256").update(buffer).digest("base64url")}"`;
+            if (!isDev && maxAge > 0) {
+                imageCache.set(cacheKey, {
+                    buffer,
+                    contentType: responseType,
+                    etag,
+                    cacheControl: responseCacheControl,
+                    expiresAt: Date.now() + maxAge * 1000,
+                });
+            }
+            return sendImage(request, { buffer, contentType: responseType, etag }, config, responseCacheControl, "MISS", href);
+        };
+        const sourceType = detectContentType(imageBuffer);
+        if (!sourceType) {
+            throw new ImageError(400, NOT_AN_IMAGE);
+        }
+        if (sourceType === "image/svg+xml") {
+            if (!config.dangerouslyAllowSVG) {
+                throw new ImageError(400, '"url" parameter is valid but image type is not allowed');
+            }
+            return respond(imageBuffer, sourceType);
+        }
+        if (sourceType === "image/heic" || (await isAnimated(sharp, imageBuffer, sourceType))) {
+            return respond(imageBuffer, sourceType);
+        }
+        let contentType = sourceType;
+        if (negotiatedFormat) {
+            contentType = negotiatedFormat;
+        }
+        else if ((sourceType === "image/webp" && !acceptsWebp) ||
+            (sourceType === "image/avif" && !acceptsAvif)) {
+            contentType = "image/jpeg";
+        }
+        let optimizedBuffer;
+        try {
+            const transformer = sharp(imageBuffer).rotate().timeout({ seconds: 7 });
+            transformer.resize(width, undefined, { withoutEnlargement: true });
+            if (contentType === "image/avif") {
+                // Match the visual quality of the same webp quality.
+                transformer.avif({ quality: Math.max(Math.round(quality * (50 / 80)), 1), effort: 3 });
+            }
+            else if (contentType === "image/webp") {
+                transformer.webp({ quality });
+            }
+            else if (contentType === "image/png") {
+                transformer.png({ quality });
+            }
+            else if (contentType === "image/jpeg") {
+                transformer.jpeg({ quality, mozjpeg: true });
+            }
+            optimizedBuffer = await transformer.toBuffer();
+        }
+        catch (error) {
+            console.error("[rebask] Image optimization failed:", error);
+            return respond(imageBuffer, sourceType);
+        }
+        return respond(optimizedBuffer, contentType);
     }
     catch (error) {
+        if (error instanceof ImageError) {
+            return new Response(error.message, { status: error.statusCode });
+        }
         console.error("[rebask] Image optimization error:", error);
-        return new Response(error.message || "Image optimization failed", {
-            status: 500,
-        });
+        return new Response("Image optimization failed", { status: 500 });
     }
 }

package/dist/lib/image-optimization/image-config.d.ts

@@ -4,11 +4,24 @@ export type ImageLoaderProps = {
     quality?: number;
     config: Readonly<ImageConfigComplete>;
 };
-type ImageFormat = "image/avif" | "image/webp";
-type LocalPattern = {
+export type ImageFormat = "image/avif" | "image/webp";
+export type ImageBlur = {
+    dataURL: string;
+    width: number;
+    height: number;
+};
+export type LocalPattern = {
+    /** `*` matches one path segment, `**` matches any number of segments. */
     pathname?: string;
+    /** Exact query string including the leading `?`. Empty means no query. Omit to allow any. */
     search?: string;
 };
+export type RemotePattern = LocalPattern & {
+    protocol?: "http" | "https";
+    /** `*` matches one subdomain segment, `**` matches any number of segments. */
+    hostname: string;
+    port?: string;
+};
 /**
  * Image configurations
  */
@@ -31,8 +44,23 @@ export type ImageConfigComplete = {
     qualities: number[] | undefined;
     /** Unoptimized mode */
     unoptimized: boolean;
-    /** Local image path patterns (undefined = allow all local images) */
+    /**
+     * Patterns for files under the public directory (undefined = allow all).
+     * Static imports are always allowed.
+     */
     localPatterns?: LocalPattern[];
+    /** Remote image URL patterns (default: allow no remote images) */
+    remotePatterns: RemotePattern[];
+    /** Allow SVG images to be served by the optimizer. */
+    dangerouslyAllowSVG: boolean;
+    /** Allow remote images to resolve to private or loopback addresses. */
+    dangerouslyAllowLocalIP: boolean;
+    /** Maximum number of redirects to follow for a remote image. */
+    maximumRedirects: number;
+    /** Maximum number of bytes to download for a remote image. */
+    maximumResponseBody: number;
+    /** Maximum number of bytes kept in the in-memory image cache. */
+    maximumCacheSize: number;
     /**
      * Path to the image handler file, relative to the project root.
      * @default "rebask.image.ts" or "rebask.image.js"
@@ -41,5 +69,4 @@ export type ImageConfigComplete = {
 };
 export type ImageConfig = Partial<ImageConfigComplete>;
 export declare const imageConfigDefault: ImageConfigComplete;
-export {};
 //# sourceMappingURL=image-config.d.ts.map

package/dist/lib/image-optimization/image-config.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-config.d.ts","sourceRoot":"","sources":["../../../src/lib/image-optimization/image-config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA;CACrC,CAAA;AAED,KAAK,WAAW,GAAG,YAAY,GAAG,YAAY,CAAA;AAE9C,KAAK,YAAY,GAAG;IACnB,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,MAAM,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IACjC,yCAAyC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAA;IAErB,wCAAwC;IACxC,UAAU,EAAE,MAAM,EAAE,CAAA;IAEpB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;IAEZ,mCAAmC;IACnC,eAAe,EAAE,MAAM,CAAA;IAEvB,yBAAyB;IACzB,OAAO,EAAE,WAAW,EAAE,CAAA;IAEtB,8BAA8B;IAC9B,qBAAqB,EAAE,MAAM,CAAA;IAE7B,+BAA+B;IAC/B,sBAAsB,EAAE,QAAQ,GAAG,YAAY,CAAA;IAE/C,qBAAqB;IACrB,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAE/B,uBAAuB;IACvB,WAAW,EAAE,OAAO,CAAA;IAEpB,qEAAqE;IACrE,aAAa,CAAC,EAAE,YAAY,EAAE,CAAA;IAE9B;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;AAEtD,eAAO,MAAM,kBAAkB,EAAE,mBAUhC,CAAA"}
+{"version":3,"file":"image-config.d.ts","sourceRoot":"","sources":["../../../src/lib/image-optimization/image-config.ts"],"names":[],"mappings":"AAAA,MAAM,MAAM,gBAAgB,GAAG;IAC9B,GAAG,EAAE,MAAM,CAAA;IACX,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,CAAC,EAAE,MAAM,CAAA;IAChB,MAAM,EAAE,QAAQ,CAAC,mBAAmB,CAAC,CAAA;CACrC,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,YAAY,GAAG,YAAY,CAAA;AAErD,MAAM,MAAM,SAAS,GAAG;IACvB,OAAO,EAAE,MAAM,CAAA;IACf,KAAK,EAAE,MAAM,CAAA;IACb,MAAM,EAAE,MAAM,CAAA;CACd,CAAA;AAED,MAAM,MAAM,YAAY,GAAG;IAC1B,yEAAyE;IACzE,QAAQ,CAAC,EAAE,MAAM,CAAA;IACjB,6FAA6F;IAC7F,MAAM,CAAC,EAAE,MAAM,CAAA;CACf,CAAA;AAED,MAAM,MAAM,aAAa,GAAG,YAAY,GAAG;IAC1C,QAAQ,CAAC,EAAE,MAAM,GAAG,OAAO,CAAA;IAC3B,8EAA8E;IAC9E,QAAQ,EAAE,MAAM,CAAA;IAChB,IAAI,CAAC,EAAE,MAAM,CAAA;CACb,CAAA;AAED;;GAEG;AACH,MAAM,MAAM,mBAAmB,GAAG;IACjC,yCAAyC;IACzC,WAAW,EAAE,MAAM,EAAE,CAAA;IACrB,wCAAwC;IACxC,UAAU,EAAE,MAAM,EAAE,CAAA;IACpB,0CAA0C;IAC1C,IAAI,EAAE,MAAM,CAAA;IACZ,mCAAmC;IACnC,eAAe,EAAE,MAAM,CAAA;IACvB,yBAAyB;IACzB,OAAO,EAAE,WAAW,EAAE,CAAA;IACtB,8BAA8B;IAC9B,qBAAqB,EAAE,MAAM,CAAA;IAC7B,+BAA+B;IAC/B,sBAAsB,EAAE,QAAQ,GAAG,YAAY,CAAA;IAC/C,qBAAqB;IACrB,SAAS,EAAE,MAAM,EAAE,GAAG,SAAS,CAAA;IAC/B,uBAAuB;IACvB,WAAW,EAAE,OAAO,CAAA;IACpB;;;OAGG;IACH,aAAa,CAAC,EAAE,YAAY,EAAE,CAAA;IAC9B,kEAAkE;IAClE,cAAc,EAAE,aAAa,EAAE,CAAA;IAC/B,sDAAsD;IACtD,mBAAmB,EAAE,OAAO,CAAA;IAC5B,uEAAuE;IACvE,uBAAuB,EAAE,OAAO,CAAA;IAChC,gEAAgE;IAChE,gBAAgB,EAAE,MAAM,CAAA;IACxB,8DAA8D;IAC9D,mBAAmB,EAAE,MAAM,CAAA;IAC3B,iEAAiE;IACjE,gBAAgB,EAAE,MAAM,CAAA;IACxB;;;OAGG;IACH,OAAO,CAAC,EAAE,MAAM,CAAA;CAChB,CAAA;AAED,MAAM,MAAM,WAAW,GAAG,OAAO,CAAC,mBAAmB,CAAC,CAAA;AAEtD,eAAO,MAAM,kBAAkB,EAAE,mBAgBhC,CAAA"}

package/dist/lib/image-optimization/image-config.js

@@ -6,6 +6,12 @@ export const imageConfigDefault = {
     formats: ["image/webp"],
     contentSecurityPolicy: `script-src 'none'; frame-src 'none'; sandbox;`,
     contentDispositionType: "attachment",
+    remotePatterns: [],
+    dangerouslyAllowSVG: false,
+    dangerouslyAllowLocalIP: false,
+    maximumRedirects: 3,
+    maximumResponseBody: 50_000_000,
+    maximumCacheSize: 50_000_000,
     qualities: [75],
     unoptimized: false,
 };

package/dist/lib/image-optimization/image-error.d.ts

@@ -0,0 +1,8 @@
+export declare const NOT_ALLOWED = "\"url\" parameter is not allowed";
+export declare const INVALID_UPSTREAM = "\"url\" parameter is valid but upstream response is invalid";
+export declare const TIMED_OUT = "\"url\" parameter is valid but upstream response timed out";
+export declare class ImageError extends Error {
+    readonly statusCode: number;
+    constructor(statusCode: number, message: string);
+}
+//# sourceMappingURL=image-error.d.ts.map

package/dist/lib/image-optimization/image-error.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"image-error.d.ts","sourceRoot":"","sources":["../../../src/lib/image-optimization/image-error.ts"],"names":[],"mappings":"AAAA,eAAO,MAAM,WAAW,qCAAmC,CAAA;AAC3D,eAAO,MAAM,gBAAgB,gEAA8D,CAAA;AAC3F,eAAO,MAAM,SAAS,+DAA6D,CAAA;AAEnF,qBAAa,UAAW,SAAQ,KAAK;IACpC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAA;IAE3B,YAAY,UAAU,EAAE,MAAM,EAAE,OAAO,EAAE,MAAM,EAG9C;CACD"}

package/dist/lib/image-optimization/image-error.js

@@ -0,0 +1,10 @@
+export const NOT_ALLOWED = '"url" parameter is not allowed';
+export const INVALID_UPSTREAM = '"url" parameter is valid but upstream response is invalid';
+export const TIMED_OUT = '"url" parameter is valid but upstream response timed out';
+export class ImageError extends Error {
+    statusCode;
+    constructor(statusCode, message) {
+        super(message);
+        this.statusCode = statusCode;
+    }
+}

package/dist/lib/image-optimization/image-plugin.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"image-plugin.d.ts","sourceRoot":"","sources":["../../../src/lib/image-optimization/image-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAA;AAClC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,mBAAmB,EAAsB,MAAM,mBAAmB,CAAA;AAIlG,qCAAqC;AACrC,eAAO,MAAM,wBAAwB,iBAAiB,CAAA;AA0BtD,MAAM,WAAW,oBAAoB;IACpC,2CAA2C;IAC3C,cAAc,EAAE,MAAM,mBAAmB,CAAA;IACzC,8CAA8C;IAC9C,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAClC;;;OAGG;IACH,cAAc,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CA+EzD"}
+{"version":3,"file":"image-plugin.d.ts","sourceRoot":"","sources":["../../../src/lib/image-optimization/image-plugin.ts"],"names":[],"mappings":"AAEA,OAAO,KAAK,EAAE,MAAM,EAAE,MAAM,MAAM,CAAA;AAClC,OAAO,EAAE,KAAK,WAAW,EAAE,KAAK,mBAAmB,EAAsB,MAAM,mBAAmB,CAAA;AAMlG,qCAAqC;AACrC,eAAO,MAAM,wBAAwB,iBAAiB,CAAA;AA4BtD,MAAM,WAAW,oBAAoB;IACpC,2CAA2C;IAC3C,cAAc,EAAE,MAAM,mBAAmB,CAAA;IACzC,8CAA8C;IAC9C,UAAU,EAAE,MAAM,OAAO,CAAC,OAAO,CAAC,CAAA;IAClC;;;OAGG;IACH,cAAc,EAAE,MAAM,IAAI,CAAA;CAC1B;AAED,wBAAgB,WAAW,CAAC,OAAO,CAAC,EAAE,WAAW,GAAG,MAAM,CAgGzD"}