jamdesk 1.1.217 → 1.1.218

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "jamdesk",
-  "version": "1.1.217",
+  "version": "1.1.218",
   "description": "CLI for Jamdesk — build, preview, and deploy documentation sites from MDX. Dev server with hot reload, 50+ components, OpenAPI support, AI search, and Mintlify migration",
   "keywords": [
     "jamdesk",

package/vendored/app/api/og/route.tsx

@@ -1,7 +1,7 @@
 import { ImageResponse } from '@vercel/og';
 import { NextRequest } from 'next/server';
 import { sanitizeLogoUrl } from '@/lib/sanitize-url';
-import { parseCardOptions } from '@/lib/og-card';
+import { parseCardOptions, isRenderableImageType } from '@/lib/og-card';
 
 export const runtime = 'edge';
 
@@ -18,7 +18,7 @@ function truncateText(text: string, maxLength: number): string {
 
 /**
  * Fetch an image and convert it to a base64 data URI for Satori compatibility
- * (Satori doesn't support webp and can fail on remote URLs). 3s timeout; '' on failure.
+ * (Satori can fail on remote URLs). 3s timeout; '' on failure or on a type Satori can't decode.
  */
 async function fetchDataUri(url: string): Promise<string> {
   const controller = new AbortController();
@@ -28,6 +28,8 @@ async function fetchDataUri(url: string): Promise<string> {
     const res = await fetch(url, { signal: controller.signal, redirect: 'manual' });
     if (!res.ok) return '';
     const contentType = res.headers.get('content-type') || 'image/png';
+    // Satori throws on these and the route would answer 200 with an empty body; "no image" is the safe outcome.
+    if (!isRenderableImageType(contentType)) return '';
     const buf = await res.arrayBuffer();
     return `data:${contentType};base64,${Buffer.from(buf).toString('base64')}`;
   } catch {

package/vendored/lib/og-card.ts

@@ -117,3 +117,28 @@ export function parseCardOptions(params: URLSearchParams): CardOptions {
     showSiteName: params.get('hideName') !== '1',
   };
 }
+
+/**
+ * Satori throws on these, and the route then answers 200 with an empty body that
+ * the CDN caches as a blank card. A deny-list rather than an allow-list on purpose:
+ * any type not listed renders (or fails) exactly as it does today, so no root tenant
+ * loses a logo that currently shows. ICO is deliberately NOT listed: Satori drops the
+ * icon but still renders a full card (with the logo slot reserved), and an existing
+ * card may only change when it is broken. Measured 2026-10-02; GIF, SVG, JPEG, PNG and
+ * octet-stream all draw.
+ */
+const UNRENDERABLE_IMAGE_TYPES = new Set([
+  'image/webp', 'image/avif',
+  'image/tiff', 'image/heic', 'image/heif', 'image/jxl', 'image/bmp',
+  // Non-standard spellings of JPEG that real servers send; Satori only knows image/jpeg.
+  'image/jpg', 'image/pjpeg',
+]);
+
+export function isRenderableImageType(contentType: string): boolean {
+  const type = contentType.split(';')[0].trim().toLowerCase();
+  // A 200 HTML page for a missing image (soft 404) is the realistic non-image case.
+  // Only plain-letter subtypes throw (html, plain, xml, css, svg+xml); text/x-generic,
+  // text/vnd.foo and text/html5 are byte-sniffed and draw today, so they must stay allowed.
+  if (/^text\/[a-z+]+$/.test(type)) return false;
+  return !UNRENDERABLE_IMAGE_TYPES.has(type);
+}

package/vendored/lib/seo.ts

@@ -96,6 +96,15 @@ function isUndecodableImage(pathOrUrl: string): boolean {
   return /\.(?:webp|avif)$/i.test(pathOrUrl.split(/[?#]/)[0]);
 }
 
+/**
+ * True for formats the OG card reliably draws as a logo. Deliberately an
+ * allow-list: ICO renders as an empty slot and WebP/AVIF are dropped, so none
+ * of them gain anything from the subpath /_jd/ rewrite.
+ */
+function isSubpathRewritableImage(pathOrUrl: string): boolean {
+  return /\.(?:png|jpe?g|gif|svg)$/i.test(pathOrUrl.split(/[?#]/)[0]);
+}
+
 /**
  * Resolve the tenant's effective docs prefix and the domain-root URL that
  * OG assets and metadataBase resolve against.
@@ -169,7 +178,13 @@ function buildOgImageUrl(
       }
       // Make logo URL absolute (use root URL since assets are at domain root)
       if (logoPath && !logoPath.startsWith('http')) {
-        logoPath = `${rootUrl}${logoPath.startsWith('/') ? '' : '/'}${logoPath}`;
+        // A subpath tenant's worker only proxies /docs and /_jd/, so a bare
+        // root-relative logo 404s on their origin; /_jd/ is where it is served.
+        // Gated to formats the card renders, so ICO/WebP/AVIF keep today's URL
+        // rather than turning "no logo" into an empty icon slot.
+        logoPath = isHostAtDocs && isSubpathRewritableImage(logoPath)
+          ? toAbsoluteAssetUrl(logoPath, rootUrl)
+          : `${rootUrl}${logoPath.startsWith('/') ? '' : '/'}${logoPath}`;
       }
       if (logoPath) {
         params.set('logo', logoPath);