@tailorkit/app 0.1.0-beta.6 → 0.1.0-beta.7

package/dist/builder/upload-manifest.d.ts

@@ -2,8 +2,12 @@ import { z } from "zod";
 export declare const tailorkitUploadManifestSchema: z.ZodObject<{
     assets: z.ZodObject<{
         client: z.ZodLiteral<"client.js">;
+        logos: z.ZodOptional<z.ZodObject<{
+            dark: z.ZodOptional<z.ZodString>;
+            light: z.ZodOptional<z.ZodString>;
+        }, z.core.$strip>>;
     }, z.core.$strip>;
     version: z.ZodLiteral<1>;
 }, z.core.$strip>;
 export type TailorKitUploadManifest = z.output<typeof tailorkitUploadManifestSchema>;
-export declare const createTailorKitUploadManifest: () => TailorKitUploadManifest;
+export declare const createTailorKitUploadManifest: (logos?: TailorKitUploadManifest["assets"]["logos"]) => TailorKitUploadManifest;

package/dist/builder.js

@@ -1,12 +1,77 @@
 import {
   loadTailorKitConfig
-} from "./chunk-7L6ZZHCK.js";
-import "./chunk-AGGRUUWG.js";
+} from "./chunk-EKCUETAV.js";
+import "./chunk-ZFYKVXDO.js";
 
 // src/builder/index.ts
 import path from "path";
 import { createRequire } from "module";
-import { writeFile } from "fs/promises";
+import { readFile, writeFile } from "fs/promises";
+
+// ../asset-delivery/dist/logo-validation.mjs
+var maxLogoBytes = 262144;
+var maxLogoDimension = 2048;
+var readPngDimensions = (content) => {
+  if (content.length < 33 || ![
+    137,
+    80,
+    78,
+    71,
+    13,
+    10,
+    26,
+    10
+  ].every((byte, index) => content[index] === byte)) throw new Error("Logo content is not a valid PNG file.");
+  const view = new DataView(content.buffer, content.byteOffset, content.byteLength);
+  const isIhdr = content[12] === 73 && content[13] === 72 && content[14] === 68 && content[15] === 82;
+  if (view.getUint32(8) !== 13 || !isIhdr) throw new Error("Logo content is not a valid PNG file.");
+  return {
+    width: view.getUint32(16),
+    height: view.getUint32(20)
+  };
+};
+var readWebpDimensions = (content) => {
+  const text = (start, end) => new TextDecoder().decode(content.subarray(start, end));
+  if (content.length < 30 || text(0, 4) !== "RIFF" || text(8, 12) !== "WEBP") throw new Error("Logo content is not a valid WebP file.");
+  const view = new DataView(content.buffer, content.byteOffset, content.byteLength);
+  const chunk = text(12, 16);
+  if (chunk === "VP8X") return {
+    width: 1 + view.getUint16(24, true) + (content[26] ?? 0) * 65536,
+    height: 1 + view.getUint16(27, true) + (content[29] ?? 0) * 65536
+  };
+  if (chunk === "VP8L" && content[20] === 47) {
+    const bits = view.getUint32(21, true);
+    return {
+      width: bits % 16384 + 1,
+      height: Math.floor(bits / 16384) % 16384 + 1
+    };
+  }
+  if (chunk === "VP8 " && content[23] === 157 && content[24] === 1 && content[25] === 42) return {
+    width: view.getUint16(26, true) % 16384,
+    height: view.getUint16(28, true) % 16384
+  };
+  throw new Error("Logo content is not a supported WebP file.");
+};
+var validateSvg = (content) => {
+  const svg = new TextDecoder("utf-8", {
+    fatal: true,
+    ignoreBOM: false
+  }).decode(content);
+  if (!/<svg(?:\s|>)/iu.test(svg)) throw new Error("Logo content is not a valid SVG file.");
+  if (/<(?:script|foreignObject|iframe|object|embed)(?:\s|>)/iu.test(svg) || /\son[a-z]+\s*=/iu.test(svg) || /(?:href|src)\s*=\s*["'](?!#)/iu.test(svg) || /(?:@import|url\(\s*(?!["']?#))/iu.test(svg) || /<!DOCTYPE|<!ENTITY|<\?xml-stylesheet/iu.test(svg)) throw new Error("SVG logos cannot contain scripts or external resources.");
+};
+function validateLogoAsset(content, contentType) {
+  if (content.byteLength < 1 || content.byteLength > 262144) throw new Error(`Logo must be between 1 and ${maxLogoBytes} bytes.`);
+  if (contentType === "image/svg+xml") {
+    validateSvg(content);
+    return {};
+  }
+  const dimensions = contentType === "image/png" ? readPngDimensions(content) : readWebpDimensions(content);
+  if (dimensions.width < 1 || dimensions.height < 1 || dimensions.width > 2048 || dimensions.height > 2048) throw new Error(`Raster logos cannot exceed ${maxLogoDimension} by ${maxLogoDimension} pixels.`);
+  return dimensions;
+}
+
+// src/builder/index.ts
 import { build as viteBuild } from "vite";
 
 // src/preact-version.ts
@@ -35,13 +100,18 @@ var assertSupportedPreactVersion = (version) => {
 import { z } from "zod";
 var tailorkitUploadManifestSchema = z.object({
   assets: z.object({
-    client: z.literal("client.js")
+    client: z.literal("client.js"),
+    logos: z.object({
+      dark: z.string().regex(/^logo-dark\.(?:png|svg|webp)$/u).optional(),
+      light: z.string().regex(/^logo-light\.(?:png|svg|webp)$/u).optional()
+    }).optional()
   }),
   version: z.literal(1)
 });
-var createTailorKitUploadManifest = () => tailorkitUploadManifestSchema.parse({
+var createTailorKitUploadManifest = (logos) => tailorkitUploadManifestSchema.parse({
   assets: {
-    client: "client.js"
+    client: "client.js",
+    ...logos && Object.keys(logos).length > 0 ? { logos } : {}
   },
   version: 1
 });
@@ -104,9 +174,30 @@ var buildApp = async (options = {}) => {
     ],
     root: loaded.root
   });
+  const logoManifest = {};
+  for (const variant of ["light", "dark"]) {
+    const configuredPath = loaded.config.logos?.[variant];
+    if (!configuredPath) {
+      continue;
+    }
+    const extension = path.extname(configuredPath).toLowerCase().slice(1);
+    const contentType = {
+      png: "image/png",
+      svg: "image/svg+xml",
+      webp: "image/webp"
+    }[extension];
+    if (!contentType) {
+      throw new Error(`The ${variant} logo must be an SVG, PNG, or WebP file.`);
+    }
+    const content = await readFile(path.resolve(loaded.root, configuredPath));
+    validateLogoAsset(content, contentType);
+    const filename = `logo-${variant}.${extension}`;
+    await writeFile(path.join(resolvedOutDir, filename), content);
+    logoManifest[variant] = filename;
+  }
   await writeFile(
     path.join(resolvedOutDir, "tailorkit-upload.json"),
-    `${JSON.stringify(createTailorKitUploadManifest(), null, 2)}
+    `${JSON.stringify(createTailorKitUploadManifest(logoManifest), null, 2)}
 `,
     "utf-8"
   );

package/dist/{chunk-7L6ZZHCK.js → chunk-EKCUETAV.js}

@@ -1,6 +1,6 @@
 import {
   tailorkitConfigSchema
-} from "./chunk-AGGRUUWG.js";
+} from "./chunk-ZFYKVXDO.js";
 
 // src/config/loader.ts
 import { cosmiconfig } from "cosmiconfig";

package/dist/{chunk-AGGRUUWG.js → chunk-ZFYKVXDO.js}

@@ -6,11 +6,16 @@ var clientConfigSchema = z.object({
 var buildConfigSchema = z.object({
   outDir: z.string().default(".tailorkit")
 });
+var logosConfigSchema = z.object({
+  dark: z.string().min(1).optional(),
+  light: z.string().min(1).optional()
+});
 var tailorkitConfigSchema = z.object({
   appId: z.string().min(1).optional(),
   build: buildConfigSchema.optional(),
   client: clientConfigSchema.optional(),
-  host: z.string().url()
+  host: z.string().url(),
+  logos: logosConfigSchema.optional()
 });
 var defineConfig = (config) => config;
 var defineTailorKitConfig = defineConfig;

package/dist/config/config.d.ts

@@ -8,6 +8,10 @@ declare const tailorkitConfigSchema: z.ZodObject<{
         entry: z.ZodDefault<z.ZodString>;
     }, z.core.$strip>>;
     host: z.ZodString;
+    logos: z.ZodOptional<z.ZodObject<{
+        dark: z.ZodOptional<z.ZodString>;
+        light: z.ZodOptional<z.ZodString>;
+    }, z.core.$strip>>;
 }, z.core.$strip>;
 export type TailorKitConfig = z.input<typeof tailorkitConfigSchema>;
 export type ResolvedTailorKitConfig = z.output<typeof tailorkitConfigSchema>;

package/dist/config-loader.js

@@ -1,7 +1,7 @@
 import {
   loadTailorKitConfig
-} from "./chunk-7L6ZZHCK.js";
-import "./chunk-AGGRUUWG.js";
+} from "./chunk-EKCUETAV.js";
+import "./chunk-ZFYKVXDO.js";
 export {
   loadTailorKitConfig
 };

package/dist/config.js

@@ -1,7 +1,7 @@
 import {
   defineConfig,
   defineTailorKitConfig
-} from "./chunk-AGGRUUWG.js";
+} from "./chunk-ZFYKVXDO.js";
 export {
   defineConfig,
   defineTailorKitConfig

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@tailorkit/app",
-  "version": "0.1.0-beta.6",
+  "version": "0.1.0-beta.7",
   "license": "AGPL-3.0-only",
   "repository": {
     "type": "git",
@@ -33,12 +33,13 @@
     "access": "public"
   },
   "dependencies": {
-    "@tailorkit/core": "0.1.0-beta.6",
+    "@tailorkit/core": "0.1.0-beta.7",
     "cosmiconfig": "^10.0.0",
     "vite": "^8.2.2",
     "zod": "^4.4.3"
   },
   "devDependencies": {
+    "@tailorkit/asset-delivery": "0.0.0",
     "@tailorkit/config": "0.0.0",
     "@types/node": "26.2.0",
     "preact": "^10.29.8",