@ultimat3/seo 8.0.0 → 10.0.0

package/CLAUDE.md

@@ -82,6 +82,11 @@ Tier 1. May import `@ultimat3/core`, `@ultimat3/schema`, `@ultimat3/i18n`. Nothi
   whether that string is a path, a storage key or a URL is the app's fact, not seo's — never add
   a filesystem fallback. Pixels come from `@ultimat3/core`'s pipeline; seo owns no second scaler,
   and the driver reports the size it probed off the output, never the size that was requested.
+- **A table keyed on a caller string is read with `Object.hasOwn`, never a bare index.**
+  `MIME_TYPES[format]` in `images.ts` walked the prototype, so `formats: ['constructor']` rendered
+  `<source type="function Object() { [native code] }">` — into the one attribute a browser reads to
+  decide whether to fetch the candidate at all. `mimeTypeFor` is the own-key read; the fallback is
+  still `image/<format>`.
 - **One spelling of the transform query keys.** `IMAGE_QUERY_KEYS` in `images.ts` is the only
   place `w`/`f`/`q` are spelled; `defaultUrlFor` writes them and `parseImageQuery` is the only
   reader — never hand-roll either half against a literal. A present-but-unusable `w` or `q`

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/seo",
-  "version": "8.0.0",
+  "version": "10.0.0",
   "description": "Enforced SEO: typed meta, JSON-LD, sitemap, robots, feeds, responsive images, perf budgets",
   "license": "MIT",
   "type": "module",
@@ -31,6 +31,6 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ultimat3/core": "8.0.0"
+    "@ultimat3/core": "10.0.0"
   }
 }

package/src/errors.ts

@@ -55,7 +55,6 @@ export class SeoError extends UltimateError {
       code: init.code,
       cause: init.cause,
       fix: init.fix,
-      docs: `https://ultimate.dev/errors/${init.code}`,
       meta: init.meta,
     });
   }

package/src/images.ts

@@ -186,6 +186,11 @@ export function srcsetFor(
   return widths.map((width) => `${urlFor(input.src, width, format)} ${width}w`).join(', ');
 }
 
+/** The declared MIME type, else the conventional `image/<format>`. Own keys only. */
+function mimeTypeFor(format: string): string {
+  return Object.hasOwn(MIME_TYPES, format) ? (MIME_TYPES[format] as string) : `image/${format}`;
+}
+
 export function responsiveImage(
   input: ImageInput,
   options: ResponsiveImageOptions = {},
@@ -196,7 +201,10 @@ export function responsiveImage(
   const formats = options.formats ?? FORMAT_ORDER;
 
   const sources: ImageSourceSet[] = formats.map((format) => ({
-    type: MIME_TYPES[format] ?? `image/${format}`,
+    // `Object.hasOwn`, never a bare index: `MIME_TYPES` is a `{}`-prototyped literal, so an
+    // unlisted format spelled `constructor` or `toString` rendered a function into the one
+    // attribute a browser reads to decide whether to fetch the candidate at all.
+    type: mimeTypeFor(format),
     srcset: srcsetFor(input, widths, format, urlFor),
     sizes,
   }));