@sevenfold/setto-client 0.34.0 → 0.35.0

package/dist/index.d.ts

@@ -13,6 +13,7 @@ export type { SettoIconProps, SettoIconRenderProps } from './SettoIcon';
 export { SettoImage } from './SettoImage';
 export type { SettoImageProps, ImageToolsProps } from './SettoImage';
 export { SETTO_IMAGE_QUALITY, SETTO_IMAGE_WIDTHS, isOptimizable, optimizedSrcSet, optimizedUrl, settoVercelImagesConfig, } from './lib/optimized-image';
+export { SETTO_MEDIA_HOST, isSettoMediaUrl } from './lib/media';
 export { SettoRepeater } from './SettoRepeater';
 export type { SettoRepeaterProps } from './SettoRepeater';
 export { SettoForm, FORM_FIELD_TYPES, FORM_FIELD_TYPE_LABELS, fieldTypeHasOptions, fieldTypeHasPlaceholder, formFieldsPrefix, isFormFieldType, readLocaleFields, settoSubmissionUrl, } from './modules/forms';

package/dist/lib/media.d.ts

@@ -0,0 +1,16 @@
+/**
+ * Setto's public media store: the `setto-media` Vercel Blob store, where blog
+ * photographs live instead of in each site's repo (R24). setto-server writes
+ * to it (`blog/<siteId>/<hash>/<name>.<ext>`), a post refers to the URL, and
+ * the site's Vercel Image Optimization resizes it through the
+ * `remotePatterns` entry in `settoVercelImagesConfig`.
+ *
+ * One store for every site, so its host is a constant. It changes only if the
+ * store is replaced — then here, in the server's token, and in each site's
+ * `vercel.json`, together.
+ */
+export declare const SETTO_MEDIA_HOST = "3adyw42hy72dtzjo.public.blob.vercel-storage.com";
+/** Where blog photographs sit in the store. */
+export declare const SETTO_MEDIA_BLOG_PREFIX = "/blog/";
+/** A blog photograph in Setto's media store: https, that host, under `/blog/`. */
+export declare function isSettoMediaUrl(src: string | null | undefined): src is string;

package/dist/lib/optimized-image.d.ts

@@ -8,6 +8,12 @@
  * `images` block in `vercel.json` whose `sizes` and `qualities` are exactly
  * the constants below — Vercel refuses a `w` or `q` it was not given. The
  * block, for copying: `settoVercelImagesConfig`.
+ *
+ * Blog photographs are the one exception to "a file of this site's own": they
+ * live in Setto's media store (`./media.ts`) and reach the optimizer through
+ * the block's `remotePatterns` entry. A site whose `vercel.json` predates that
+ * entry gets a refusal from the optimizer, and `SettoImage` falls back to the
+ * original, as it does for any failed variant.
  */
 /** Phone, phone at 2–3×, tablet, laptop, wide and retina desktop. */
 export declare const SETTO_IMAGE_WIDTHS: readonly [384, 640, 828, 1080, 1440, 1920, 2560];
@@ -22,12 +28,18 @@ export declare const settoVercelImagesConfig: {
         readonly pathname: "^/images/.*$";
         readonly search: "";
     }];
+    readonly remotePatterns: readonly [{
+        readonly protocol: "https";
+        readonly hostname: `^${string}$`;
+        readonly pathname: `^${string}.*$`;
+    }];
     readonly minimumCacheTTL: 2678400;
 };
 /**
  * Whether an image can go through the optimizer: a file of this site's own,
- * under `/images/`, in a format it transforms. A draft's `blob:` preview, an
- * external address, an SVG logo and a moving GIF cannot.
+ * under `/images/`, or a blog photograph in Setto's media store, in a format
+ * it transforms. A draft's `blob:` preview, any other external address, an
+ * SVG logo and a moving GIF cannot.
  */
 export declare function isOptimizable(src: string | null | undefined): src is string;
 /**

package/dist/setto-client.js

@@ -37714,6 +37714,18 @@ function SettoIcon({ k, icons, size = 24, className, style }) {
     )
   ] });
 }
+const SETTO_MEDIA_HOST = "3adyw42hy72dtzjo.public.blob.vercel-storage.com";
+const SETTO_MEDIA_BLOG_PREFIX = "/blog/";
+function isSettoMediaUrl(src) {
+  if (!src) return false;
+  try {
+    const url = new URL(src);
+    return url.protocol === "https:" && url.hostname === SETTO_MEDIA_HOST && !url.username && !url.password && url.port === "" && url.pathname.startsWith(SETTO_MEDIA_BLOG_PREFIX);
+  } catch {
+    return false;
+  }
+}
+const escapeRegExp = (value) => value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
 const SETTO_IMAGE_WIDTHS = [384, 640, 828, 1080, 1440, 1920, 2560];
 const SETTO_IMAGE_QUALITY = 75;
 const settoVercelImagesConfig = {
@@ -37721,12 +37733,23 @@ const settoVercelImagesConfig = {
   qualities: [SETTO_IMAGE_QUALITY],
   formats: ["image/avif", "image/webp"],
   localPatterns: [{ pathname: "^/images/.*$", search: "" }],
+  // Vercel reads hostname and pathname as regular expressions; anchored so a
+  // look-alike host cannot borrow the optimizer. Checked on a deployment
+  // (R24): this form resizes, an unlisted host or path is refused with 400.
+  remotePatterns: [
+    {
+      protocol: "https",
+      hostname: `^${escapeRegExp(SETTO_MEDIA_HOST)}$`,
+      pathname: `^${escapeRegExp(SETTO_MEDIA_BLOG_PREFIX)}.*$`
+    }
+  ],
   minimumCacheTTL: 2678400
 };
 const OPTIMIZABLE = /\.(jpe?g|png|webp|avif)$/i;
 function isOptimizable(src) {
-  if (!src || !src.startsWith("/images/")) return false;
-  return OPTIMIZABLE.test(src.split(/[?#]/)[0]);
+  if (!src) return false;
+  if (src.startsWith("/images/")) return OPTIMIZABLE.test(src.split(/[?#]/)[0]);
+  return isSettoMediaUrl(src) && OPTIMIZABLE.test(new URL(src).pathname);
 }
 function hasNoOptimizer(hostname) {
   return hostname === "localhost" || hostname === "127.0.0.1" || hostname === "[::1]" || hostname.endsWith(".localhost");
@@ -40280,6 +40303,7 @@ export {
   SETTO_BASE,
   SETTO_IMAGE_QUALITY,
   SETTO_IMAGE_WIDTHS,
+  SETTO_MEDIA_HOST,
   SETTO_MODULES,
   SettoAdminApp,
   SettoAnimation,
@@ -40322,6 +40346,7 @@ export {
   isLinkContext,
   isOptimizable,
   isSafeHref,
+  isSettoMediaUrl,
   languageFromPath,
   languageName,
   nodeChildren,