bookcover-web 0.10.0 → 0.12.0

package/dist/embed_types.d.ts

@@ -8,29 +8,39 @@ export interface InitMessage {
     type: 'init';
     preset?: Partial<EmbedFormState>;
     bg_image?: File | null;
+    bg_image_builtin?: string | null;
     custom_fonts?: CustomFont[];
     finished_mode?: boolean;
     hide_size_section?: boolean;
     locale?: AppLocale;
 }
-/** Widget -> host. `schema` is the renderable generator schema derived from `data` (also
- *  derivable host-side via build_schema). `bg_image` rides on every data/finished message
- *  (cloning a File is cheap); `custom_fonts` byte arrays are expensive to clone, so on 'data'
- *  messages the field is only present when the font set changed since the last message
- *  (absent = unchanged), while 'finished' always carries the complete array. */
+/** Widget -> host. `bg_image` rides on every data/finished message (cloning a File is cheap);
+ *  `custom_fonts` byte arrays are expensive to clone, so on 'data' messages the field is only
+ *  present when the font set changed since the last message (absent = unchanged), while
+ *  'finished' always carries the complete array.
+ *
+ *  `bg_image_builtin` is ADVISORY background identity, so a host doesn't have to recover it by
+ *  hashing returned bytes: when the user picks one of the widget's built-in backgrounds it
+ *  carries that image's published filename, and it is null for a user upload or no image at all.
+ *  The filename IS the id — hosts join it onto their own assets path to get the bytes and slice
+ *  its extension off for the MIME type, so it must stay a filename (see the contract on
+ *  BACKGROUNDS in the widget's services/backgrounds.ts). It exists purely so the host can store a
+ *  reference instead of a private copy of a shipped image. Treat it as untrusted input — map it
+ *  to a built-in only after checking it against your own allowlist, and fall back to the upload
+ *  path otherwise. Nothing in bookcover ever resolves bytes from this field. */
 export type WidgetMessage = {
     type: 'ready';
 } | {
     type: 'data';
     data: EmbedFormState;
-    schema: Record<string, unknown>;
     bg_image: File | null;
+    bg_image_builtin: string | null;
     custom_fonts?: CustomFont[];
 } | {
     type: 'finished';
     data: EmbedFormState;
-    schema: Record<string, unknown>;
     bg_image: File | null;
+    bg_image_builtin: string | null;
     custom_fonts: CustomFont[];
 } | {
     type: 'cancelled';

package/dist/embed_types.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"embed_types.d.ts","sourceRoot":"","sources":["../src/embed_types.ts"],"names":[],"mappings":"AAOA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAA;AAClD,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAE3C;+CAC+C;AAC/C,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAA;AAErC,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAA;IAEZ,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IAEhC,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IAEtB,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAE3B,aAAa,CAAC,EAAE,OAAO,CAAA;IAEvB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,SAAS,CAAA;CACrB;AAED;;;;gFAIgF;AAChF,MAAM,MAAM,aAAa,GACnB;IAAC,IAAI,EAAE,OAAO,CAAA;CAAC,GACf;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACnE,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;CAAC,GACrD;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,MAAM,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;IACvE,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,UAAU,EAAE,CAAA;CAAC,GACpD;IAAC,IAAI,EAAE,WAAW,CAAA;CAAC,CAAA"}
+{"version":3,"file":"embed_types.d.ts","sourceRoot":"","sources":["../src/embed_types.ts"],"names":[],"mappings":"AAWA,OAAO,KAAK,EAAC,cAAc,EAAC,MAAM,gBAAgB,CAAA;AAClD,OAAO,KAAK,EAAC,UAAU,EAAC,MAAM,aAAa,CAAA;AAE3C;+CAC+C;AAC/C,MAAM,MAAM,SAAS,GAAG,KAAK,GAAG,KAAK,CAAA;AAErC,+DAA+D;AAC/D,MAAM,WAAW,WAAW;IACxB,IAAI,EAAE,MAAM,CAAA;IAEZ,MAAM,CAAC,EAAE,OAAO,CAAC,cAAc,CAAC,CAAA;IAEhC,QAAQ,CAAC,EAAE,IAAI,GAAG,IAAI,CAAA;IAItB,gBAAgB,CAAC,EAAE,MAAM,GAAG,IAAI,CAAA;IAEhC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;IAE3B,aAAa,CAAC,EAAE,OAAO,CAAA;IAEvB,iBAAiB,CAAC,EAAE,OAAO,CAAA;IAC3B,MAAM,CAAC,EAAE,SAAS,CAAA;CACrB;AAED;;;;;;;;;;;;;gFAagF;AAChF,MAAM,MAAM,aAAa,GACnB;IAAC,IAAI,EAAE,OAAO,CAAA;CAAC,GACf;IAAC,IAAI,EAAE,MAAM,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IACzD,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,CAAC,EAAE,UAAU,EAAE,CAAA;CAAC,GAC/D;IAAC,IAAI,EAAE,UAAU,CAAC;IAAC,IAAI,EAAE,cAAc,CAAC;IAAC,QAAQ,EAAE,IAAI,GAAG,IAAI,CAAC;IAC7D,gBAAgB,EAAE,MAAM,GAAG,IAAI,CAAC;IAAC,YAAY,EAAE,UAAU,EAAE,CAAA;CAAC,GAC9D;IAAC,IAAI,EAAE,WAAW,CAAA;CAAC,CAAA"}

package/dist/embed_types.js

@@ -1,7 +1,11 @@
 // Protocol types for embedding the cover-editor widget in an iframe. The host sends one
 // InitMessage in reply to the widget's 'ready' message; the widget reports edits back with
-// WidgetMessage. Binaries (background image, custom font bytes) always travel as separate
-// structured-clone fields beside the pure-JSON form values, so hosts can persist `data`
-// as-is (e.g. to Firestore) and store the binaries elsewhere.
+// WidgetMessage.
+//
+// Binaries are never part of the stored record. The background image and custom font bytes
+// travel as separate structured-clone fields beside the pure-JSON form values, so hosts persist
+// `data` as-is (e.g. to Firestore) and own the storage and identity of the binaries themselves.
+// Messages carry no derived schema: hosts call build_schema(form) from bookcover-core, so there
+// is exactly one place that form → schema conversion happens.
 export {};
 //# sourceMappingURL=embed_types.js.map

package/dist/embed_types.js.map

@@ -1 +1 @@
-{"version":3,"file":"embed_types.js","sourceRoot":"","sources":["../src/embed_types.ts"],"names":[],"mappings":"AACA,wFAAwF;AACxF,2FAA2F;AAC3F,0FAA0F;AAC1F,wFAAwF;AACxF,8DAA8D"}
+{"version":3,"file":"embed_types.js","sourceRoot":"","sources":["../src/embed_types.ts"],"names":[],"mappings":"AACA,wFAAwF;AACxF,2FAA2F;AAC3F,iBAAiB;AACjB,EAAE;AACF,2FAA2F;AAC3F,gGAAgG;AAChG,gGAAgG;AAChG,gGAAgG;AAChG,8DAA8D"}

package/package.json

@@ -1,6 +1,6 @@
 {
     "name": "bookcover-web",
-    "version": "0.10.0",
+    "version": "0.12.0",
     "license": "MIT-0",
     "repository": {
         "type": "git",
@@ -20,10 +20,10 @@
         "dev": "tsc --watch"
     },
     "dependencies": {
-        "@myriaddreamin/typst-ts-renderer": "^0.7.0",
-        "@myriaddreamin/typst-ts-web-compiler": "^0.7.0",
-        "@myriaddreamin/typst.ts": "^0.7.0",
-        "bookcover-core": "^0.10.0",
+        "@myriaddreamin/typst-ts-renderer": "0.7.0",
+        "@myriaddreamin/typst-ts-web-compiler": "0.7.0",
+        "@myriaddreamin/typst.ts": "0.7.0",
+        "bookcover-core": "^0.12.0",
         "typst-fonts": "^0.1.0"
     }
 }