emdash 1.0.1 → 1.1.0

package/dist/enrich-Duu4sV3a.mjs

@@ -0,0 +1,194 @@
+import { t as imageSize } from "./dist-Cfu8mMBs.mjs";
+import { n as normalizeMime } from "./mime-B5M9R53H.mjs";
+import { encode } from "blurhash";
+
+//#region src/media/placeholder.ts
+/**
+* Image Placeholder Generation
+*
+* Generates blurhash and dominant color from image buffers for LQIP support.
+* Decodes images via jpeg-js (pure JS) and upng-js (pure JS, uses pako for
+* deflate). No Node-specific dependencies — works in Workers and Node SSR.
+*/
+const SUPPORTED_TYPES = {
+	"image/jpeg": "jpeg",
+	"image/jpg": "jpeg",
+	"image/png": "png"
+};
+/** Max width for blurhash input. Encode is O(w*h*components), so downsample first. */
+const MAX_ENCODE_WIDTH = 32;
+/** Max decoded RGBA size (32 MB). Images exceeding this skip placeholder generation. */
+const MAX_DECODED_BYTES = 32 * 1024 * 1024;
+/**
+* Decode a JPEG buffer into raw RGBA pixel data.
+*/
+async function decodeJpeg(buffer) {
+	const { decode } = await import("jpeg-js");
+	const result = decode(buffer, { useTArray: true });
+	return {
+		width: result.width,
+		height: result.height,
+		data: result.data
+	};
+}
+/**
+* Decode a PNG buffer into raw RGBA pixel data.
+* Uses upng-js (pure JS with pako deflate) — no Node zlib dependency.
+*/
+async function decodePng(buffer) {
+	const UPNG = (await import("upng-js")).default;
+	const img = UPNG.decode(buffer.buffer);
+	const frames = UPNG.toRGBA8(img);
+	const rgba = new Uint8Array(frames[0]);
+	return {
+		width: img.width,
+		height: img.height,
+		data: rgba
+	};
+}
+/**
+* Extract the dominant color from RGBA pixel data.
+* Simple average of all non-transparent pixels.
+*/
+function extractDominantColor(data, width, height) {
+	let r = 0;
+	let g = 0;
+	let b = 0;
+	let count = 0;
+	const len = width * height * 4;
+	for (let i = 0; i < len; i += 4) {
+		if (data[i + 3] < 128) continue;
+		r += data[i];
+		g += data[i + 1];
+		b += data[i + 2];
+		count++;
+	}
+	if (count === 0) return "rgb(0,0,0)";
+	return `rgb(${Math.round(r / count)},${Math.round(g / count)},${Math.round(b / count)})`;
+}
+/**
+* Read image dimensions from headers without decoding pixel data.
+* Returns null when the header cannot be parsed.
+*
+* Shared by every caller that needs pixel dimensions so the header is parsed
+* once per buffer, not re-read inside generatePlaceholder.
+*/
+function readDimensions(buffer) {
+	try {
+		const result = imageSize(buffer);
+		if (result.width != null && result.height != null) return {
+			width: result.width,
+			height: result.height
+		};
+		return null;
+	} catch {
+		return null;
+	}
+}
+/**
+* Generate blurhash and dominant color from an image buffer.
+* Returns null for non-image MIME types or on failure.
+*
+* @param dimensions - Optional pre-known dimensions. When present they are
+*   trusted verbatim (the caller has typically already read them via
+*   readDimensions); otherwise dimensions are read from this buffer's header.
+*   Generation is skipped (returns null) when no dimensions are available at
+*   all, or when the decoded size (width * height * 4) exceeds
+*   MAX_DECODED_BYTES — both guards avoid OOM from unbounded decodes on
+*   memory-constrained runtimes.
+*/
+async function generatePlaceholder(buffer, mimeType, dimensions) {
+	const format = SUPPORTED_TYPES[normalizeMime(mimeType)];
+	if (!format) return null;
+	try {
+		const dims = dimensions ?? readDimensions(buffer);
+		if (!dims) return null;
+		if (dims.width * dims.height * 4 > MAX_DECODED_BYTES) return null;
+		const { width, height, data } = format === "jpeg" ? await decodeJpeg(buffer) : await decodePng(buffer);
+		if (width === 0 || height === 0) return null;
+		let encodePixels;
+		let encodeWidth;
+		let encodeHeight;
+		if (width > MAX_ENCODE_WIDTH) {
+			const scale = MAX_ENCODE_WIDTH / width;
+			encodeWidth = MAX_ENCODE_WIDTH;
+			encodeHeight = Math.max(1, Math.round(height * scale));
+			encodePixels = downsample(data, width, height, encodeWidth, encodeHeight);
+		} else {
+			encodeWidth = width;
+			encodeHeight = height;
+			encodePixels = new Uint8ClampedArray(data.buffer, data.byteOffset, data.byteLength);
+		}
+		return {
+			blurhash: encode(encodePixels, encodeWidth, encodeHeight, 4, 3),
+			dominantColor: extractDominantColor(data, width, height)
+		};
+	} catch {
+		return null;
+	}
+}
+/**
+* Nearest-neighbor downsample of RGBA pixel data.
+*/
+function downsample(src, srcW, srcH, dstW, dstH) {
+	const dst = new Uint8ClampedArray(dstW * dstH * 4);
+	for (let y = 0; y < dstH; y++) {
+		const srcY = Math.floor(y * srcH / dstH);
+		for (let x = 0; x < dstW; x++) {
+			const srcX = Math.floor(x * srcW / dstW);
+			const srcIdx = (srcY * srcW + srcX) * 4;
+			const dstIdx = (y * dstW + x) * 4;
+			dst[dstIdx] = src[srcIdx];
+			dst[dstIdx + 1] = src[srcIdx + 1];
+			dst[dstIdx + 2] = src[srcIdx + 2];
+			dst[dstIdx + 3] = src[srcIdx + 3];
+		}
+	}
+	return dst;
+}
+
+//#endregion
+//#region src/media/enrich.ts
+/**
+* Image Metadata Enrichment
+*
+* Single seam that derives image dimensions and LQIP placeholders (blurhash,
+* dominant color) from raw image bytes. Every server-side media-creation path
+* routes through this so records are populated consistently. Pure-JS and
+* Workers-safe (image-size reads headers only; generatePlaceholder guards
+* decode size).
+*/
+/**
+* Derive dimensions + LQIP placeholders from image bytes.
+*
+* - Non-image content types return `{}`.
+* - `knownDimensions` (e.g. browser `naturalWidth/Height`) win over `image-size`
+*   for the *stored record* because the browser applies EXIF orientation;
+*   `image-size` reports raw header dimensions, which are swapped for
+*   90°/270°-rotated JPEGs. They are NOT used for the decode OOM guard — see below.
+* - The placeholder OOM guard uses only header dimensions read from the bytes
+*   actually decoded. Caller-supplied `knownDimensions` are untrusted for the
+*   guard: a client could claim a tiny size for a huge image to bypass the cap.
+* - `placeholder` lets a caller decode a smaller thumbnail for the blurhash to
+*   avoid OOM on large originals; dimensions still come from `bytes`.
+* - Placeholders are jpeg/png only (the generator's supported formats); other
+*   image types still get dimensions.
+*/
+async function enrichImageMetadata(bytes, contentType, opts) {
+	const normalizedContentType = normalizeMime(contentType);
+	if (!normalizedContentType.startsWith("image/")) return {};
+	const headerDims = readDimensions(bytes) ?? void 0;
+	const recordDims = opts?.knownDimensions ?? headerDims;
+	const override = opts?.placeholder;
+	const placeholder = await generatePlaceholder(override ? override.bytes : bytes, override ? normalizeMime(override.contentType) : normalizedContentType, override ? void 0 : headerDims);
+	return {
+		width: recordDims?.width,
+		height: recordDims?.height,
+		blurhash: placeholder?.blurhash,
+		dominantColor: placeholder?.dominantColor
+	};
+}
+
+//#endregion
+export { generatePlaceholder as n, enrichImageMetadata as t };
+//# sourceMappingURL=enrich-Duu4sV3a.mjs.map

package/dist/enrich-Duu4sV3a.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"enrich-Duu4sV3a.mjs","names":[],"sources":["../src/media/placeholder.ts","../src/media/enrich.ts"],"sourcesContent":["/**\n * Image Placeholder Generation\n *\n * Generates blurhash and dominant color from image buffers for LQIP support.\n * Decodes images via jpeg-js (pure JS) and upng-js (pure JS, uses pako for\n * deflate). No Node-specific dependencies — works in Workers and Node SSR.\n */\n\nimport { encode } from \"blurhash\";\nimport { imageSize } from \"image-size\";\n\nimport { normalizeMime } from \"./mime.js\";\n\nexport interface PlaceholderData {\n\tblurhash: string;\n\tdominantColor: string;\n}\n\nconst SUPPORTED_TYPES: Record<string, \"jpeg\" | \"png\"> = {\n\t\"image/jpeg\": \"jpeg\",\n\t\"image/jpg\": \"jpeg\",\n\t\"image/png\": \"png\",\n};\n\n/** Max width for blurhash input. Encode is O(w*h*components), so downsample first. */\nconst MAX_ENCODE_WIDTH = 32;\n\n/** Max decoded RGBA size (32 MB). Images exceeding this skip placeholder generation. */\nconst MAX_DECODED_BYTES = 32 * 1024 * 1024;\n\ninterface DecodedImage {\n\twidth: number;\n\theight: number;\n\tdata: Uint8Array;\n}\n\n/**\n * Decode a JPEG buffer into raw RGBA pixel data.\n */\nasync function decodeJpeg(buffer: Uint8Array): Promise<DecodedImage> {\n\tconst { decode } = await import(\"jpeg-js\");\n\tconst result = decode(buffer, { useTArray: true });\n\treturn { width: result.width, height: result.height, data: result.data };\n}\n\n/**\n * Decode a PNG buffer into raw RGBA pixel data.\n * Uses upng-js (pure JS with pako deflate) — no Node zlib dependency.\n */\nasync function decodePng(buffer: Uint8Array): Promise<DecodedImage> {\n\t// @ts-expect-error -- upng-js has no type declarations\n\tconst UPNG = (await import(\"upng-js\")).default;\n\tconst img = UPNG.decode(buffer.buffer);\n\t// toRGBA8 returns an array of frames; take the first frame\n\tconst frames: ArrayBuffer[] = UPNG.toRGBA8(img);\n\tconst rgba = new Uint8Array(frames[0]);\n\treturn { width: img.width, height: img.height, data: rgba };\n}\n\n/**\n * Extract the dominant color from RGBA pixel data.\n * Simple average of all non-transparent pixels.\n */\nfunction extractDominantColor(data: Uint8Array, width: number, height: number): string {\n\tlet r = 0;\n\tlet g = 0;\n\tlet b = 0;\n\tlet count = 0;\n\n\tconst len = width * height * 4;\n\tfor (let i = 0; i < len; i += 4) {\n\t\tconst a = data[i + 3];\n\t\tif (a < 128) continue; // skip mostly-transparent pixels\n\t\tr += data[i];\n\t\tg += data[i + 1];\n\t\tb += data[i + 2];\n\t\tcount++;\n\t}\n\n\tif (count === 0) return \"rgb(0,0,0)\";\n\n\tconst avgR = Math.round(r / count);\n\tconst avgG = Math.round(g / count);\n\tconst avgB = Math.round(b / count);\n\treturn `rgb(${avgR},${avgG},${avgB})`;\n}\n\n/**\n * Read image dimensions from headers without decoding pixel data.\n * Returns null when the header cannot be parsed.\n *\n * Shared by every caller that needs pixel dimensions so the header is parsed\n * once per buffer, not re-read inside generatePlaceholder.\n */\nexport function readDimensions(buffer: Uint8Array): { width: number; height: number } | null {\n\ttry {\n\t\tconst result = imageSize(buffer);\n\t\tif (result.width != null && result.height != null) {\n\t\t\treturn { width: result.width, height: result.height };\n\t\t}\n\t\treturn null;\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/**\n * Generate blurhash and dominant color from an image buffer.\n * Returns null for non-image MIME types or on failure.\n *\n * @param dimensions - Optional pre-known dimensions. When present they are\n *   trusted verbatim (the caller has typically already read them via\n *   readDimensions); otherwise dimensions are read from this buffer's header.\n *   Generation is skipped (returns null) when no dimensions are available at\n *   all, or when the decoded size (width * height * 4) exceeds\n *   MAX_DECODED_BYTES — both guards avoid OOM from unbounded decodes on\n *   memory-constrained runtimes.\n */\nexport async function generatePlaceholder(\n\tbuffer: Uint8Array,\n\tmimeType: string,\n\tdimensions?: { width: number; height: number },\n): Promise<PlaceholderData | null> {\n\tconst format = SUPPORTED_TYPES[normalizeMime(mimeType)];\n\tif (!format) return null;\n\n\ttry {\n\t\t// Trust caller-supplied dimensions when present (the caller has usually\n\t\t// already read them via readDimensions); otherwise read them from this\n\t\t// buffer. The header is parsed at most once per call.\n\t\tconst dims = dimensions ?? readDimensions(buffer);\n\n\t\t// Safety net: the decoders allocate the full RGBA buffer with no internal\n\t\t// cap, so refuse to decode unless we can bound the output size. When we\n\t\t// have no parseable header AND no known dimensions, the decoded size is\n\t\t// unbounded — a crafted/truncated PNG whose header image-size can't read\n\t\t// could still be decodable by upng-js, so we must bail to avoid OOM on\n\t\t// memory-constrained runtimes. LQIP is progressive enhancement; missing\n\t\t// it is preferable to crashing the request.\n\t\tif (!dims) return null;\n\t\tif (dims.width * dims.height * 4 > MAX_DECODED_BYTES) {\n\t\t\treturn null;\n\t\t}\n\n\t\tconst imageData = format === \"jpeg\" ? await decodeJpeg(buffer) : await decodePng(buffer);\n\t\tconst { width, height, data } = imageData;\n\n\t\tif (width === 0 || height === 0) return null;\n\n\t\t// Downsample for blurhash encoding if needed\n\t\tlet encodePixels: Uint8ClampedArray;\n\t\tlet encodeWidth: number;\n\t\tlet encodeHeight: number;\n\n\t\tif (width > MAX_ENCODE_WIDTH) {\n\t\t\tconst scale = MAX_ENCODE_WIDTH / width;\n\t\t\tencodeWidth = MAX_ENCODE_WIDTH;\n\t\t\tencodeHeight = Math.max(1, Math.round(height * scale));\n\t\t\tencodePixels = downsample(data, width, height, encodeWidth, encodeHeight);\n\t\t} else {\n\t\t\tencodeWidth = width;\n\t\t\tencodeHeight = height;\n\t\t\tencodePixels = new Uint8ClampedArray(data.buffer, data.byteOffset, data.byteLength);\n\t\t}\n\n\t\tconst blurhash = encode(encodePixels, encodeWidth, encodeHeight, 4, 3);\n\t\tconst dominantColor = extractDominantColor(data, width, height);\n\n\t\treturn { blurhash, dominantColor };\n\t} catch {\n\t\treturn null;\n\t}\n}\n\n/**\n * Nearest-neighbor downsample of RGBA pixel data.\n */\nfunction downsample(\n\tsrc: Uint8Array,\n\tsrcW: number,\n\tsrcH: number,\n\tdstW: number,\n\tdstH: number,\n): Uint8ClampedArray {\n\tconst dst = new Uint8ClampedArray(dstW * dstH * 4);\n\n\tfor (let y = 0; y < dstH; y++) {\n\t\tconst srcY = Math.floor((y * srcH) / dstH);\n\t\tfor (let x = 0; x < dstW; x++) {\n\t\t\tconst srcX = Math.floor((x * srcW) / dstW);\n\t\t\tconst srcIdx = (srcY * srcW + srcX) * 4;\n\t\t\tconst dstIdx = (y * dstW + x) * 4;\n\t\t\tdst[dstIdx] = src[srcIdx]!;\n\t\t\tdst[dstIdx + 1] = src[srcIdx + 1]!;\n\t\t\tdst[dstIdx + 2] = src[srcIdx + 2]!;\n\t\t\tdst[dstIdx + 3] = src[srcIdx + 3]!;\n\t\t}\n\t}\n\n\treturn dst;\n}\n","/**\n * Image Metadata Enrichment\n *\n * Single seam that derives image dimensions and LQIP placeholders (blurhash,\n * dominant color) from raw image bytes. Every server-side media-creation path\n * routes through this so records are populated consistently. Pure-JS and\n * Workers-safe (image-size reads headers only; generatePlaceholder guards\n * decode size).\n */\n\nimport { normalizeMime } from \"./mime.js\";\nimport { generatePlaceholder, readDimensions } from \"./placeholder.js\";\n\nexport interface EnrichedImageMetadata {\n\twidth?: number;\n\theight?: number;\n\tblurhash?: string;\n\tdominantColor?: string;\n}\n\n/**\n * Derive dimensions + LQIP placeholders from image bytes.\n *\n * - Non-image content types return `{}`.\n * - `knownDimensions` (e.g. browser `naturalWidth/Height`) win over `image-size`\n *   for the *stored record* because the browser applies EXIF orientation;\n *   `image-size` reports raw header dimensions, which are swapped for\n *   90°/270°-rotated JPEGs. They are NOT used for the decode OOM guard — see below.\n * - The placeholder OOM guard uses only header dimensions read from the bytes\n *   actually decoded. Caller-supplied `knownDimensions` are untrusted for the\n *   guard: a client could claim a tiny size for a huge image to bypass the cap.\n * - `placeholder` lets a caller decode a smaller thumbnail for the blurhash to\n *   avoid OOM on large originals; dimensions still come from `bytes`.\n * - Placeholders are jpeg/png only (the generator's supported formats); other\n *   image types still get dimensions.\n */\nexport async function enrichImageMetadata(\n\tbytes: Uint8Array,\n\tcontentType: string,\n\topts?: {\n\t\tknownDimensions?: { width: number; height: number };\n\t\tplaceholder?: { bytes: Uint8Array; contentType: string };\n\t},\n): Promise<EnrichedImageMetadata> {\n\tconst normalizedContentType = normalizeMime(contentType);\n\tif (!normalizedContentType.startsWith(\"image/\")) return {};\n\n\t// Header dimensions are read once from the actual bytes. They feed the\n\t// placeholder OOM guard, which must never trust caller-supplied dimensions:\n\t// `knownDimensions` is decoupled from the buffer, so a client could claim a\n\t// tiny size for a huge image and slip past the decoded-size cap, making the\n\t// decoder allocate an unbounded RGBA buffer and OOM the runtime. Only dims\n\t// read from the buffer that actually gets decoded can bound the decode.\n\tconst headerDims = readDimensions(bytes) ?? undefined;\n\n\t// Dimensions published on the record prefer the caller's knownDimensions\n\t// (e.g. browser naturalWidth/Height, which apply EXIF orientation) over the\n\t// raw header dims, which are swapped for 90°/270°-rotated JPEGs.\n\tconst recordDims = opts?.knownDimensions ?? headerDims;\n\n\t// When a smaller thumbnail override is supplied, decode that for the blurhash\n\t// and let generatePlaceholder read the thumbnail's own header for the OOM\n\t// guard (the override buffer is what actually gets decoded). On the common\n\t// no-override path pass the header dims already read from this same buffer.\n\tconst override = opts?.placeholder;\n\tconst placeholder = await generatePlaceholder(\n\t\toverride ? override.bytes : bytes,\n\t\toverride ? normalizeMime(override.contentType) : normalizedContentType,\n\t\toverride ? undefined : headerDims,\n\t);\n\n\treturn {\n\t\twidth: recordDims?.width,\n\t\theight: recordDims?.height,\n\t\tblurhash: placeholder?.blurhash,\n\t\tdominantColor: placeholder?.dominantColor,\n\t};\n}\n"],"mappings":";;;;;;;;;;;;AAkBA,MAAM,kBAAkD;CACvD,cAAc;CACd,aAAa;CACb,aAAa;CACb;;AAGD,MAAM,mBAAmB;;AAGzB,MAAM,oBAAoB,KAAK,OAAO;;;;AAWtC,eAAe,WAAW,QAA2C;CACpE,MAAM,EAAE,WAAW,MAAM,OAAO;CAChC,MAAM,SAAS,OAAO,QAAQ,EAAE,WAAW,MAAM,CAAC;AAClD,QAAO;EAAE,OAAO,OAAO;EAAO,QAAQ,OAAO;EAAQ,MAAM,OAAO;EAAM;;;;;;AAOzE,eAAe,UAAU,QAA2C;CAEnE,MAAM,QAAQ,MAAM,OAAO,YAAY;CACvC,MAAM,MAAM,KAAK,OAAO,OAAO,OAAO;CAEtC,MAAM,SAAwB,KAAK,QAAQ,IAAI;CAC/C,MAAM,OAAO,IAAI,WAAW,OAAO,GAAG;AACtC,QAAO;EAAE,OAAO,IAAI;EAAO,QAAQ,IAAI;EAAQ,MAAM;EAAM;;;;;;AAO5D,SAAS,qBAAqB,MAAkB,OAAe,QAAwB;CACtF,IAAI,IAAI;CACR,IAAI,IAAI;CACR,IAAI,IAAI;CACR,IAAI,QAAQ;CAEZ,MAAM,MAAM,QAAQ,SAAS;AAC7B,MAAK,IAAI,IAAI,GAAG,IAAI,KAAK,KAAK,GAAG;AAEhC,MADU,KAAK,IAAI,KACX,IAAK;AACb,OAAK,KAAK;AACV,OAAK,KAAK,IAAI;AACd,OAAK,KAAK,IAAI;AACd;;AAGD,KAAI,UAAU,EAAG,QAAO;AAKxB,QAAO,OAHM,KAAK,MAAM,IAAI,MAAM,CAGf,GAFN,KAAK,MAAM,IAAI,MAAM,CAEP,GADd,KAAK,MAAM,IAAI,MAAM,CACC;;;;;;;;;AAUpC,SAAgB,eAAe,QAA8D;AAC5F,KAAI;EACH,MAAM,SAAS,UAAU,OAAO;AAChC,MAAI,OAAO,SAAS,QAAQ,OAAO,UAAU,KAC5C,QAAO;GAAE,OAAO,OAAO;GAAO,QAAQ,OAAO;GAAQ;AAEtD,SAAO;SACA;AACP,SAAO;;;;;;;;;;;;;;;AAgBT,eAAsB,oBACrB,QACA,UACA,YACkC;CAClC,MAAM,SAAS,gBAAgB,cAAc,SAAS;AACtD,KAAI,CAAC,OAAQ,QAAO;AAEpB,KAAI;EAIH,MAAM,OAAO,cAAc,eAAe,OAAO;AASjD,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,KAAK,QAAQ,KAAK,SAAS,IAAI,kBAClC,QAAO;EAIR,MAAM,EAAE,OAAO,QAAQ,SADL,WAAW,SAAS,MAAM,WAAW,OAAO,GAAG,MAAM,UAAU,OAAO;AAGxF,MAAI,UAAU,KAAK,WAAW,EAAG,QAAO;EAGxC,IAAI;EACJ,IAAI;EACJ,IAAI;AAEJ,MAAI,QAAQ,kBAAkB;GAC7B,MAAM,QAAQ,mBAAmB;AACjC,iBAAc;AACd,kBAAe,KAAK,IAAI,GAAG,KAAK,MAAM,SAAS,MAAM,CAAC;AACtD,kBAAe,WAAW,MAAM,OAAO,QAAQ,aAAa,aAAa;SACnE;AACN,iBAAc;AACd,kBAAe;AACf,kBAAe,IAAI,kBAAkB,KAAK,QAAQ,KAAK,YAAY,KAAK,WAAW;;AAMpF,SAAO;GAAE,UAHQ,OAAO,cAAc,aAAa,cAAc,GAAG,EAAE;GAGnD,eAFG,qBAAqB,MAAM,OAAO,OAAO;GAE7B;SAC3B;AACP,SAAO;;;;;;AAOT,SAAS,WACR,KACA,MACA,MACA,MACA,MACoB;CACpB,MAAM,MAAM,IAAI,kBAAkB,OAAO,OAAO,EAAE;AAElD,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,KAAK;EAC9B,MAAM,OAAO,KAAK,MAAO,IAAI,OAAQ,KAAK;AAC1C,OAAK,IAAI,IAAI,GAAG,IAAI,MAAM,KAAK;GAC9B,MAAM,OAAO,KAAK,MAAO,IAAI,OAAQ,KAAK;GAC1C,MAAM,UAAU,OAAO,OAAO,QAAQ;GACtC,MAAM,UAAU,IAAI,OAAO,KAAK;AAChC,OAAI,UAAU,IAAI;AAClB,OAAI,SAAS,KAAK,IAAI,SAAS;AAC/B,OAAI,SAAS,KAAK,IAAI,SAAS;AAC/B,OAAI,SAAS,KAAK,IAAI,SAAS;;;AAIjC,QAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;ACnKR,eAAsB,oBACrB,OACA,aACA,MAIiC;CACjC,MAAM,wBAAwB,cAAc,YAAY;AACxD,KAAI,CAAC,sBAAsB,WAAW,SAAS,CAAE,QAAO,EAAE;CAQ1D,MAAM,aAAa,eAAe,MAAM,IAAI;CAK5C,MAAM,aAAa,MAAM,mBAAmB;CAM5C,MAAM,WAAW,MAAM;CACvB,MAAM,cAAc,MAAM,oBACzB,WAAW,SAAS,QAAQ,OAC5B,WAAW,cAAc,SAAS,YAAY,GAAG,uBACjD,WAAW,SAAY,WACvB;AAED,QAAO;EACN,OAAO,YAAY;EACnB,QAAQ,YAAY;EACpB,UAAU,aAAa;EACvB,eAAe,aAAa;EAC5B"}

package/dist/entry-lock-De1L8qUQ.mjs

@@ -0,0 +1,163 @@
+import { t as EntryLockRepository } from "./entry-locks-DJAqVweV.mjs";
+import { t as ErrorCode } from "./errors-DTE6C3K_.mjs";
+import { ulid } from "ulidx";
+
+//#region src/api/handlers/entry-lock.ts
+/**
+* How long an entry stays locked without a heartbeat or save. Long enough to
+* survive a pause in typing, short enough that a closed tab frees the entry
+* within a coffee break.
+*/
+const ENTRY_LOCK_LEASE_MS = 420 * 1e3;
+const ENTRY_LOCK_LEASE_SECONDS = ENTRY_LOCK_LEASE_MS / 1e3;
+function toHolder(lock) {
+	return {
+		userId: lock.userId,
+		userName: lock.userName,
+		acquiredAt: lock.acquiredAt,
+		expiresAt: lock.expiresAt
+	};
+}
+function holderLabel(holder) {
+	return holder.userName?.trim() ? holder.userName : "Another editor";
+}
+async function isLockingEnabled(db, collection) {
+	const row = await db.selectFrom("_emdash_collections").select("edit_locking").where("slug", "=", collection).executeTakeFirst();
+	if (!row) return null;
+	return row.edit_locking !== 0;
+}
+function collectionNotFound(collection) {
+	return {
+		success: false,
+		error: {
+			code: ErrorCode.COLLECTION_NOT_FOUND,
+			message: `Collection '${collection}' not found`
+		}
+	};
+}
+/**
+* Takes the entry's lock for `userId`, or reports who is holding it. A
+* take-over is only granted when the caller asks for one.
+*/
+async function handleEntryLockAcquire(db, collection, entryId, userId, options = {}) {
+	try {
+		const enabled = await isLockingEnabled(db, collection);
+		if (enabled === null) return collectionNotFound(collection);
+		if (!enabled) return {
+			success: true,
+			data: {
+				enabled: false,
+				holder: null,
+				heldByCaller: false
+			}
+		};
+		const claim = await new EntryLockRepository(db).acquire({
+			collection,
+			entryId,
+			userId,
+			token: options.token ?? ulid(),
+			leaseSeconds: ENTRY_LOCK_LEASE_SECONDS,
+			takeover: options.takeover
+		});
+		return {
+			success: true,
+			data: {
+				enabled: true,
+				holder: toHolder(claim.lock),
+				heldByCaller: claim.outcome === "acquired"
+			}
+		};
+	} catch (error) {
+		console.error("[entry-lock] acquire failed:", error);
+		return {
+			success: false,
+			error: {
+				code: ErrorCode.ENTRY_LOCK_ERROR,
+				message: "Failed to acquire the entry lock"
+			}
+		};
+	}
+}
+async function handleEntryLockRead(db, collection, entryId, userId) {
+	try {
+		const enabled = await isLockingEnabled(db, collection);
+		if (enabled === null) return collectionNotFound(collection);
+		if (!enabled) return {
+			success: true,
+			data: {
+				enabled: false,
+				holder: null,
+				heldByCaller: false
+			}
+		};
+		const lock = await new EntryLockRepository(db).findLive(collection, entryId);
+		return {
+			success: true,
+			data: {
+				enabled: true,
+				holder: lock ? toHolder(lock) : null,
+				heldByCaller: lock?.userId === userId
+			}
+		};
+	} catch (error) {
+		console.error("[entry-lock] read failed:", error);
+		return {
+			success: false,
+			error: {
+				code: ErrorCode.ENTRY_LOCK_ERROR,
+				message: "Failed to read the entry lock"
+			}
+		};
+	}
+}
+async function handleEntryLockRelease(db, collection, entryId, userId, options = {}) {
+	try {
+		return {
+			success: true,
+			data: { released: await new EntryLockRepository(db).release({
+				collection,
+				entryId,
+				userId,
+				token: options.token
+			}) }
+		};
+	} catch (error) {
+		console.error("[entry-lock] release failed:", error);
+		return {
+			success: false,
+			error: {
+				code: ErrorCode.ENTRY_LOCK_ERROR,
+				message: "Failed to release the entry lock"
+			}
+		};
+	}
+}
+/**
+* Decides whether a write may proceed, and keeps the caller's own lease alive
+* while it does. Resolves to `null` when the write is allowed.
+*
+* A write never takes a lock it was not given, so a CLI or API caller writing
+* an unlocked entry leaves it unlocked.
+*/
+async function claimEntryLockForWrite(db, collection, entryId, userId, options = {}) {
+	if (options.override === true) return null;
+	const repo = new EntryLockRepository(db);
+	if (await repo.refreshHeld({
+		collection,
+		entryId,
+		userId,
+		leaseSeconds: ENTRY_LOCK_LEASE_SECONDS
+	})) return null;
+	const holder = await repo.findEnforceable(collection, entryId);
+	if (!holder) return null;
+	const details = toHolder(holder);
+	return {
+		code: ErrorCode.ENTRY_LOCKED,
+		message: `${holderLabel(details)} is holding this entry`,
+		details
+	};
+}
+
+//#endregion
+export { handleEntryLockRelease as i, handleEntryLockAcquire as n, handleEntryLockRead as r, claimEntryLockForWrite as t };
+//# sourceMappingURL=entry-lock-De1L8qUQ.mjs.map

package/dist/entry-lock-De1L8qUQ.mjs.map

@@ -0,0 +1 @@
+{"version":3,"file":"entry-lock-De1L8qUQ.mjs","names":[],"sources":["../src/api/handlers/entry-lock.ts"],"sourcesContent":["import type { Kysely } from \"kysely\";\nimport { ulid } from \"ulidx\";\n\nimport { EntryLockRepository, type EntryLock } from \"../../database/repositories/entry-locks.js\";\nimport type { Database } from \"../../database/types.js\";\nimport { ErrorCode } from \"../errors.js\";\nimport type { ApiResult } from \"../types.js\";\n\n/**\n * How long an entry stays locked without a heartbeat or save. Long enough to\n * survive a pause in typing, short enough that a closed tab frees the entry\n * within a coffee break.\n */\nexport const ENTRY_LOCK_LEASE_MS = 7 * 60 * 1000;\n\nconst ENTRY_LOCK_LEASE_SECONDS = ENTRY_LOCK_LEASE_MS / 1000;\n\nexport interface EntryLockHolder {\n\tuserId: string;\n\tuserName: string | null;\n\tacquiredAt: string;\n\texpiresAt: string;\n}\n\nexport interface EntryLockStatus {\n\t/** Whether the collection takes edit locks at all. */\n\tenabled: boolean;\n\t/** The live lease, whoever holds it. */\n\tholder: EntryLockHolder | null;\n\t/** Whether `holder` is the caller. */\n\theldByCaller: boolean;\n}\n\nexport interface EntryLockRefusal {\n\tcode: typeof ErrorCode.ENTRY_LOCKED;\n\tmessage: string;\n\tdetails: EntryLockHolder;\n}\n\nfunction toHolder(lock: EntryLock): EntryLockHolder {\n\treturn {\n\t\tuserId: lock.userId,\n\t\tuserName: lock.userName,\n\t\tacquiredAt: lock.acquiredAt,\n\t\texpiresAt: lock.expiresAt,\n\t};\n}\n\nfunction holderLabel(holder: EntryLockHolder): string {\n\treturn holder.userName?.trim() ? holder.userName : \"Another editor\";\n}\n\nasync function isLockingEnabled(db: Kysely<Database>, collection: string): Promise<boolean | null> {\n\tconst row = await db\n\t\t.selectFrom(\"_emdash_collections\")\n\t\t.select(\"edit_locking\")\n\t\t.where(\"slug\", \"=\", collection)\n\t\t.executeTakeFirst();\n\tif (!row) return null;\n\treturn row.edit_locking !== 0;\n}\n\nfunction collectionNotFound(collection: string): ApiResult<never> {\n\treturn {\n\t\tsuccess: false,\n\t\terror: {\n\t\t\tcode: ErrorCode.COLLECTION_NOT_FOUND,\n\t\t\tmessage: `Collection '${collection}' not found`,\n\t\t},\n\t};\n}\n\n/**\n * Takes the entry's lock for `userId`, or reports who is holding it. A\n * take-over is only granted when the caller asks for one.\n */\nexport async function handleEntryLockAcquire(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tentryId: string,\n\tuserId: string,\n\toptions: { takeover?: boolean; token?: string } = {},\n): Promise<ApiResult<EntryLockStatus>> {\n\ttry {\n\t\tconst enabled = await isLockingEnabled(db, collection);\n\t\tif (enabled === null) return collectionNotFound(collection);\n\t\tif (!enabled) {\n\t\t\treturn { success: true, data: { enabled: false, holder: null, heldByCaller: false } };\n\t\t}\n\n\t\tconst claim = await new EntryLockRepository(db).acquire({\n\t\t\tcollection,\n\t\t\tentryId,\n\t\t\tuserId,\n\t\t\ttoken: options.token ?? ulid(),\n\t\t\tleaseSeconds: ENTRY_LOCK_LEASE_SECONDS,\n\t\t\ttakeover: options.takeover,\n\t\t});\n\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tenabled: true,\n\t\t\t\tholder: toHolder(claim.lock),\n\t\t\t\theldByCaller: claim.outcome === \"acquired\",\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"[entry-lock] acquire failed:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.ENTRY_LOCK_ERROR, message: \"Failed to acquire the entry lock\" },\n\t\t};\n\t}\n}\n\nexport async function handleEntryLockRead(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tentryId: string,\n\tuserId: string,\n): Promise<ApiResult<EntryLockStatus>> {\n\ttry {\n\t\tconst enabled = await isLockingEnabled(db, collection);\n\t\tif (enabled === null) return collectionNotFound(collection);\n\t\tif (!enabled) {\n\t\t\treturn { success: true, data: { enabled: false, holder: null, heldByCaller: false } };\n\t\t}\n\n\t\tconst lock = await new EntryLockRepository(db).findLive(collection, entryId);\n\t\treturn {\n\t\t\tsuccess: true,\n\t\t\tdata: {\n\t\t\t\tenabled: true,\n\t\t\t\tholder: lock ? toHolder(lock) : null,\n\t\t\t\theldByCaller: lock?.userId === userId,\n\t\t\t},\n\t\t};\n\t} catch (error) {\n\t\tconsole.error(\"[entry-lock] read failed:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.ENTRY_LOCK_ERROR, message: \"Failed to read the entry lock\" },\n\t\t};\n\t}\n}\n\nexport async function handleEntryLockRelease(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tentryId: string,\n\tuserId: string,\n\toptions: { token?: string } = {},\n): Promise<ApiResult<{ released: boolean }>> {\n\ttry {\n\t\tconst released = await new EntryLockRepository(db).release({\n\t\t\tcollection,\n\t\t\tentryId,\n\t\t\tuserId,\n\t\t\ttoken: options.token,\n\t\t});\n\t\treturn { success: true, data: { released } };\n\t} catch (error) {\n\t\tconsole.error(\"[entry-lock] release failed:\", error);\n\t\treturn {\n\t\t\tsuccess: false,\n\t\t\terror: { code: ErrorCode.ENTRY_LOCK_ERROR, message: \"Failed to release the entry lock\" },\n\t\t};\n\t}\n}\n\n/**\n * Decides whether a write may proceed, and keeps the caller's own lease alive\n * while it does. Resolves to `null` when the write is allowed.\n *\n * A write never takes a lock it was not given, so a CLI or API caller writing\n * an unlocked entry leaves it unlocked.\n */\nexport async function claimEntryLockForWrite(\n\tdb: Kysely<Database>,\n\tcollection: string,\n\tentryId: string,\n\tuserId: string,\n\toptions: { override?: boolean } = {},\n): Promise<EntryLockRefusal | null> {\n\tif (options.override === true) return null;\n\n\tconst repo = new EntryLockRepository(db);\n\tconst heldByCaller = await repo.refreshHeld({\n\t\tcollection,\n\t\tentryId,\n\t\tuserId,\n\t\tleaseSeconds: ENTRY_LOCK_LEASE_SECONDS,\n\t});\n\tif (heldByCaller) return null;\n\n\tconst holder = await repo.findEnforceable(collection, entryId);\n\tif (!holder) return null;\n\n\tconst details = toHolder(holder);\n\treturn {\n\t\tcode: ErrorCode.ENTRY_LOCKED,\n\t\tmessage: `${holderLabel(details)} is holding this entry`,\n\t\tdetails,\n\t};\n}\n"],"mappings":";;;;;;;;;;AAaA,MAAa,sBAAsB,MAAS;AAE5C,MAAM,2BAA2B,sBAAsB;AAwBvD,SAAS,SAAS,MAAkC;AACnD,QAAO;EACN,QAAQ,KAAK;EACb,UAAU,KAAK;EACf,YAAY,KAAK;EACjB,WAAW,KAAK;EAChB;;AAGF,SAAS,YAAY,QAAiC;AACrD,QAAO,OAAO,UAAU,MAAM,GAAG,OAAO,WAAW;;AAGpD,eAAe,iBAAiB,IAAsB,YAA6C;CAClG,MAAM,MAAM,MAAM,GAChB,WAAW,sBAAsB,CACjC,OAAO,eAAe,CACtB,MAAM,QAAQ,KAAK,WAAW,CAC9B,kBAAkB;AACpB,KAAI,CAAC,IAAK,QAAO;AACjB,QAAO,IAAI,iBAAiB;;AAG7B,SAAS,mBAAmB,YAAsC;AACjE,QAAO;EACN,SAAS;EACT,OAAO;GACN,MAAM,UAAU;GAChB,SAAS,eAAe,WAAW;GACnC;EACD;;;;;;AAOF,eAAsB,uBACrB,IACA,YACA,SACA,QACA,UAAkD,EAAE,EACd;AACtC,KAAI;EACH,MAAM,UAAU,MAAM,iBAAiB,IAAI,WAAW;AACtD,MAAI,YAAY,KAAM,QAAO,mBAAmB,WAAW;AAC3D,MAAI,CAAC,QACJ,QAAO;GAAE,SAAS;GAAM,MAAM;IAAE,SAAS;IAAO,QAAQ;IAAM,cAAc;IAAO;GAAE;EAGtF,MAAM,QAAQ,MAAM,IAAI,oBAAoB,GAAG,CAAC,QAAQ;GACvD;GACA;GACA;GACA,OAAO,QAAQ,SAAS,MAAM;GAC9B,cAAc;GACd,UAAU,QAAQ;GAClB,CAAC;AAEF,SAAO;GACN,SAAS;GACT,MAAM;IACL,SAAS;IACT,QAAQ,SAAS,MAAM,KAAK;IAC5B,cAAc,MAAM,YAAY;IAChC;GACD;UACO,OAAO;AACf,UAAQ,MAAM,gCAAgC,MAAM;AACpD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAkB,SAAS;IAAoC;GACxF;;;AAIH,eAAsB,oBACrB,IACA,YACA,SACA,QACsC;AACtC,KAAI;EACH,MAAM,UAAU,MAAM,iBAAiB,IAAI,WAAW;AACtD,MAAI,YAAY,KAAM,QAAO,mBAAmB,WAAW;AAC3D,MAAI,CAAC,QACJ,QAAO;GAAE,SAAS;GAAM,MAAM;IAAE,SAAS;IAAO,QAAQ;IAAM,cAAc;IAAO;GAAE;EAGtF,MAAM,OAAO,MAAM,IAAI,oBAAoB,GAAG,CAAC,SAAS,YAAY,QAAQ;AAC5E,SAAO;GACN,SAAS;GACT,MAAM;IACL,SAAS;IACT,QAAQ,OAAO,SAAS,KAAK,GAAG;IAChC,cAAc,MAAM,WAAW;IAC/B;GACD;UACO,OAAO;AACf,UAAQ,MAAM,6BAA6B,MAAM;AACjD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAkB,SAAS;IAAiC;GACrF;;;AAIH,eAAsB,uBACrB,IACA,YACA,SACA,QACA,UAA8B,EAAE,EACY;AAC5C,KAAI;AAOH,SAAO;GAAE,SAAS;GAAM,MAAM,EAAE,UANf,MAAM,IAAI,oBAAoB,GAAG,CAAC,QAAQ;IAC1D;IACA;IACA;IACA,OAAO,QAAQ;IACf,CAAC,EACwC;GAAE;UACpC,OAAO;AACf,UAAQ,MAAM,gCAAgC,MAAM;AACpD,SAAO;GACN,SAAS;GACT,OAAO;IAAE,MAAM,UAAU;IAAkB,SAAS;IAAoC;GACxF;;;;;;;;;;AAWH,eAAsB,uBACrB,IACA,YACA,SACA,QACA,UAAkC,EAAE,EACD;AACnC,KAAI,QAAQ,aAAa,KAAM,QAAO;CAEtC,MAAM,OAAO,IAAI,oBAAoB,GAAG;AAOxC,KANqB,MAAM,KAAK,YAAY;EAC3C;EACA;EACA;EACA,cAAc;EACd,CAAC,CACgB,QAAO;CAEzB,MAAM,SAAS,MAAM,KAAK,gBAAgB,YAAY,QAAQ;AAC9D,KAAI,CAAC,OAAQ,QAAO;CAEpB,MAAM,UAAU,SAAS,OAAO;AAChC,QAAO;EACN,MAAM,UAAU;EAChB,SAAS,GAAG,YAAY,QAAQ,CAAC;EACjC;EACA"}