@ultimat3/storage 5.0.1 → 7.0.0

package/README.md

@@ -235,7 +235,7 @@ Inside `pending/` deliberately: an upload nobody ever scanned is still an orphan
 | `X_STORAGE_QUARANTINED` | `promoteAttachment` on a key nothing has released from `pending/quarantine/` |
 | `X_NOT_IMPLEMENTED` | S3 user metadata / cache-control; `serverSideEncryption` on either driver |
 | `X_ENV_MISSING` | core's: S3 credential env vars, or a `localDriver` built outside development where neither `signingSecret` nor `STORAGE_SIGNING_SECRET` holds a secret other than the published `DEV_SIGNING_SECRET` |
-| `X_IMAGE_UNSUPPORTED` | core's: an `avif`/`webp` encode, or a source no built-in decoder reads |
+| `X_IMAGE_UNSUPPORTED` | core's: an `avif` encode, or a source no built-in decoder reads |
 | `X_IMAGE_DECODE_FAILED` | core's: truncated or corrupt image bytes |
 
 ## Images
@@ -243,11 +243,14 @@ Inside `pending/` deliberately: an upload nobody ever scanned is still an orphan
 `variantKey()`, `srcsetDescriptors()`, `fitDimensions()` are pure — `@ultimat3/seo` builds
 `srcset` from them without decoding a byte.
 
-`transformImage()` and `blurPlaceholder()` are real, over `@ultimat3/core`'s zero-dependency
-pipeline. **It encodes `png` and `jpeg`, nothing else** — `avif`/`webp` remain key and `srcset`
-math, and asking for their bytes rejects with core's `X_IMAGE_UNSUPPORTED` naming the two that
-work; produce them through a CDN or a custom `ImageTransformDriver`. `png` is the only output
-that keeps alpha. The encoded size is always exactly `fitDimensions()`, so the `width`/`height`
-`@ultimat3/seo` already wrote into the tag match the bytes — `contain` fits inside the box, it
-does not letterbox to it. `blurPlaceholder()` returns a real 16px-wide PNG `data:` URI.
+`transformImage()` and `blurPlaceholder()` are real, over `@ultimat3/core`'s pipeline, which is
+`Bun.Image` — no `sharp`, no dependency. **It encodes `png`, `jpeg` and `webp`** — so the default
+format and the default `.webp` key extension finally agree, and a `srcset` entry can be served
+rather than only named. `avif` remains key and `srcset` math: it needs an OS codec the portable
+backend never uses, so asking for its bytes rejects with core's `X_IMAGE_UNSUPPORTED` naming the
+three that work; produce it through a CDN or a custom `ImageTransformDriver`. `png` and `webp` are
+the outputs that keep alpha. The encoded size is always exactly `fitDimensions()`, so the
+`width`/`height` `@ultimat3/seo` already wrote into the tag match the bytes — `contain` fits inside
+the box, it does not letterbox to it. `blurPlaceholder()` returns a ThumbHash PNG `data:` URI, at
+most 32px on its long edge.
 `bun test` from `packages/storage`.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@ultimat3/storage",
-  "version": "5.0.1",
+  "version": "7.0.0",
   "description": "Named disks over Bun.file and Bun.s3: safe keys, signed URLs, sniffed uploads",
   "license": "MIT",
   "type": "module",
@@ -31,6 +31,6 @@
     "test": "bun test"
   },
   "dependencies": {
-    "@ultimat3/core": "5.0.1"
+    "@ultimat3/core": "7.0.0"
   }
 }

package/src/image.ts

@@ -3,12 +3,7 @@
 // `<img srcset>` from `srcsetDescriptors()` without decoding a byte, and when it does need the
 // bytes, `transformImage()` returns exactly the size `fitDimensions()` already promised.
 
-import {
-  blurDataUrl,
-  BLUR_PLACEHOLDER_WIDTH as CORE_BLUR_PLACEHOLDER_WIDTH,
-  probeImage,
-  transformImageBytes,
-} from '@ultimat3/core';
+import { blurDataUrl, probeImage, transformImageBytes } from '@ultimat3/core';
 import { assertSafeKey, keyExtname } from './path';
 
 export const IMAGE_FORMATS = ['avif', 'webp', 'jpeg', 'png'] as const;
@@ -33,8 +28,6 @@ export interface ImageSize {
 
 export const DEFAULT_QUALITY = 80;
 export const DEFAULT_SRCSET_WIDTHS = [320, 640, 960, 1280, 1920] as const;
-/** Small enough to inline in HTML; big enough to blur convincingly. Core owns the number. */
-export const BLUR_PLACEHOLDER_WIDTH = CORE_BLUR_PLACEHOLDER_WIDTH;
 
 const FORMAT_EXTENSIONS: Readonly<Record<ImageFormat, string>> = {
   avif: 'avif',
@@ -116,10 +109,10 @@ export function fitDimensions(source: ImageSize, transform: ImageTransform): Ima
 }
 
 /**
- * Decode, resize, encode — core's pipeline, which encodes **png and jpeg only**. `avif` and
- * `webp` stay key/`srcset` math: asking for their bytes rejects with core's
- * `X_IMAGE_UNSUPPORTED` (not re-wrapped — one failure, one code), and producing them means a
- * CDN or a custom `ImageTransformDriver`. PNG is also the only output that keeps alpha.
+ * Decode, resize, encode — core's pipeline, which encodes **png, jpeg and webp**. `avif` stays
+ * key/`srcset` math: asking for its bytes rejects with core's `X_IMAGE_UNSUPPORTED` (not
+ * re-wrapped — one failure, one code) because it needs an OS codec the portable backend never
+ * uses, and producing it means a CDN or a custom `ImageTransformDriver`.
  *
  * The output box is `fitDimensions()`, always: that is the size `@ultimat3/seo` has already
  * written into the `<img>` tag, and bytes that disagreed with it would be the layout shift
@@ -144,5 +137,5 @@ export async function transformImage(
 
 /** A `data:` URI small enough to inline as the LQIP behind a real image. Always PNG. */
 export async function blurPlaceholder(bytes: Uint8Array): Promise<string> {
-  return blurDataUrl(bytes, BLUR_PLACEHOLDER_WIDTH);
+  return blurDataUrl(bytes);
 }

package/src/index.ts

@@ -104,7 +104,6 @@ export type {
   SrcsetOptions,
 } from './image';
 export {
-  BLUR_PLACEHOLDER_WIDTH,
   blurPlaceholder,
   DEFAULT_QUALITY,
   DEFAULT_SRCSET_WIDTHS,