nuxt-og-image 6.7.2 → 6.7.3

package/dist/chunks/tw4.cjs

@@ -4,23 +4,20 @@ const promises = require('node:fs/promises');
 const node_url = require('node:url');
 const exsolve = require('exsolve');
 const pathe = require('pathe');
-const module$1 = require('../shared/nuxt-og-image.BCK8Adm4.cjs');
+const module$1 = require('../shared/nuxt-og-image.BRBtdkUp.cjs');
 require('node:crypto');
 require('node:fs');
 require('@nuxt/kit');
 require('defu');
+require('fnv1a-64');
 require('nuxt-site-config/kit');
-require('ohash');
 require('pkg-types');
 require('std-env');
 require('oxc-walker');
-require('../shared/nuxt-og-image.DQkJQHaN.cjs');
-require('magicast');
-require('magicast/helpers');
-require('../../dist/runtime/logger.js');
-require('nypm');
 require('nuxtseo-shared/kit');
+require('../../dist/runtime/logger.js');
 require('chrome-launcher');
+require('nypm');
 require('nuxtseo-shared/devtools');
 require('unstorage');
 require('unstorage/drivers/fs-lite');
@@ -33,6 +30,9 @@ require('@vue/compiler-sfc');
 require('ofetch');
 require('ultrahtml');
 require('../../dist/runtime/server/og-image/core/transforms/emojis/emoji-utils.js');
+require('../shared/nuxt-og-image.CMYbz66P.cjs');
+require('magicast');
+require('magicast/helpers');
 
 const RE_GRADIENT_STOP_PREFIX = /^(from|via|to)-/;
 const RE_COLOR_SHADE = /^(.+)-(\d+)$/;

package/dist/chunks/tw4.mjs

@@ -2,23 +2,20 @@ import { readFile } from 'node:fs/promises';
 import { pathToFileURL } from 'node:url';
 import { resolveModulePath } from 'exsolve';
 import { dirname, join } from 'pathe';
-import { e as extractVariantBaseClasses, r as resolveVariantPrefixes, h as resolveExtractedVars, i as resolveVarsDeep, s as simplifyCss, p as postProcessStyles, l as loadLightningCss, a as extractCssVars, c as extractUniversalVars, d as extractPerClassVars, g as extractVarsFromCss, f as extractClassStyles } from '../shared/nuxt-og-image.Pfj5JkJd.mjs';
+import { e as extractVariantBaseClasses, r as resolveVariantPrefixes, h as resolveExtractedVars, i as resolveVarsDeep, s as simplifyCss, p as postProcessStyles, l as loadLightningCss, a as extractCssVars, c as extractUniversalVars, d as extractPerClassVars, g as extractVarsFromCss, f as extractClassStyles } from '../shared/nuxt-og-image.Bv8VSGTj.mjs';
 import 'node:crypto';
 import 'node:fs';
 import '@nuxt/kit';
 import 'defu';
+import 'fnv1a-64';
 import 'nuxt-site-config/kit';
-import 'ohash';
 import 'pkg-types';
 import 'std-env';
 import 'oxc-walker';
-import '../shared/nuxt-og-image.LgUGeaz-.mjs';
-import 'magicast';
-import 'magicast/helpers';
-import '../../dist/runtime/logger.js';
-import 'nypm';
 import 'nuxtseo-shared/kit';
+import '../../dist/runtime/logger.js';
 import 'chrome-launcher';
+import 'nypm';
 import 'nuxtseo-shared/devtools';
 import 'unstorage';
 import 'unstorage/drivers/fs-lite';
@@ -31,6 +28,9 @@ import '@vue/compiler-sfc';
 import 'ofetch';
 import 'ultrahtml';
 import '../../dist/runtime/server/og-image/core/transforms/emojis/emoji-utils.js';
+import '../shared/nuxt-og-image.CJa2KCie.mjs';
+import 'magicast';
+import 'magicast/helpers';
 
 const RE_GRADIENT_STOP_PREFIX = /^(from|via|to)-/;
 const RE_COLOR_SHADE = /^(.+)-(\d+)$/;

package/dist/chunks/uno.cjs

@@ -3,23 +3,20 @@
 const promises = require('node:fs/promises');
 const defu = require('defu');
 const logger_js = require('../../dist/runtime/logger.js');
-const module$1 = require('../shared/nuxt-og-image.BCK8Adm4.cjs');
+const module$1 = require('../shared/nuxt-og-image.BRBtdkUp.cjs');
 require('node:crypto');
 require('node:fs');
 require('node:url');
 require('@nuxt/kit');
+require('fnv1a-64');
 require('nuxt-site-config/kit');
-require('ohash');
 require('pathe');
 require('pkg-types');
 require('std-env');
 require('oxc-walker');
-require('../shared/nuxt-og-image.DQkJQHaN.cjs');
-require('magicast');
-require('magicast/helpers');
-require('nypm');
 require('nuxtseo-shared/kit');
 require('chrome-launcher');
+require('nypm');
 require('nuxtseo-shared/devtools');
 require('unstorage');
 require('unstorage/drivers/fs-lite');
@@ -33,6 +30,9 @@ require('ofetch');
 require('ultrahtml');
 require('../../dist/runtime/server/og-image/core/transforms/emojis/emoji-utils.js');
 require('exsolve');
+require('../shared/nuxt-og-image.CMYbz66P.cjs');
+require('magicast');
+require('magicast/helpers');
 
 const RE_SVG_DATA_URL = /url\("data:image\/svg\+xml[;,]([^"]+)"\)/;
 const RE_UTF8_PREFIX = /^utf8,/;

package/dist/chunks/uno.mjs

@@ -1,23 +1,20 @@
 import { readFile } from 'node:fs/promises';
 import { defu } from 'defu';
 import { logger } from '../../dist/runtime/logger.js';
-import { e as extractVariantBaseClasses, s as simplifyCss, a as extractCssVars, b as extractPropertyInitialValues, c as extractUniversalVars, d as extractPerClassVars, f as extractClassStyles, p as postProcessStyles, r as resolveVariantPrefixes, g as extractVarsFromCss, h as resolveExtractedVars } from '../shared/nuxt-og-image.Pfj5JkJd.mjs';
+import { e as extractVariantBaseClasses, s as simplifyCss, a as extractCssVars, b as extractPropertyInitialValues, c as extractUniversalVars, d as extractPerClassVars, f as extractClassStyles, p as postProcessStyles, r as resolveVariantPrefixes, g as extractVarsFromCss, h as resolveExtractedVars } from '../shared/nuxt-og-image.Bv8VSGTj.mjs';
 import 'node:crypto';
 import 'node:fs';
 import 'node:url';
 import '@nuxt/kit';
+import 'fnv1a-64';
 import 'nuxt-site-config/kit';
-import 'ohash';
 import 'pathe';
 import 'pkg-types';
 import 'std-env';
 import 'oxc-walker';
-import '../shared/nuxt-og-image.LgUGeaz-.mjs';
-import 'magicast';
-import 'magicast/helpers';
-import 'nypm';
 import 'nuxtseo-shared/kit';
 import 'chrome-launcher';
+import 'nypm';
 import 'nuxtseo-shared/devtools';
 import 'unstorage';
 import 'unstorage/drivers/fs-lite';
@@ -31,6 +28,9 @@ import 'ofetch';
 import 'ultrahtml';
 import '../../dist/runtime/server/og-image/core/transforms/emojis/emoji-utils.js';
 import 'exsolve';
+import '../shared/nuxt-og-image.CJa2KCie.mjs';
+import 'magicast';
+import 'magicast/helpers';
 
 const RE_SVG_DATA_URL = /url\("data:image\/svg\+xml[;,]([^"]+)"\)/;
 const RE_UTF8_PREFIX = /^utf8,/;

package/dist/cli.cjs

@@ -10,14 +10,10 @@ const nypm = require('nypm');
 const oxcWalker = require('oxc-walker');
 const pathe = require('pathe');
 const ultrahtml = require('ultrahtml');
-const dependencies = require('./shared/nuxt-og-image.DQkJQHaN.cjs');
+const fonts = require('./shared/nuxt-og-image.CMYbz66P.cjs');
 require('magicast');
 require('magicast/helpers');
 require('../dist/runtime/logger.js');
-require('std-env');
-require('defu');
-require('nuxtseo-shared/kit');
-require('chrome-launcher');
 
 var _documentCurrentScript = typeof document !== 'undefined' ? document.currentScript : null;
 function _interopNamespaceCompat(e) {
@@ -193,14 +189,11 @@ const RENDERERS = [
   }
 ];
 const EDGE_PRESETS = ["cloudflare", "cloudflare-pages", "cloudflare-module", "vercel-edge", "netlify-edge"];
-function getRendererDeps(renderer, isEdge, options = {}) {
+function getRendererDeps(renderer, isEdge) {
   switch (renderer) {
     case "satori":
       return isEdge ? ["satori", "@resvg/resvg-js", "@resvg/resvg-wasm"] : ["satori", "@resvg/resvg-js"];
     case "takumi":
-      if (options.installSpec) {
-        return isEdge ? [dependencies.TAKUMI_CORE_INSTALL_SPEC, dependencies.TAKUMI_WASM_INSTALL_SPEC] : [dependencies.TAKUMI_CORE_INSTALL_SPEC];
-      }
       return isEdge ? ["@takumi-rs/core", "@takumi-rs/wasm"] : ["@takumi-rs/core"];
     case "browser":
       return isEdge ? [] : ["playwright-core"];
@@ -561,7 +554,7 @@ async function installRendererDeps(renderers, isEdge) {
   const pmName = pm?.name || "npm";
   const allDeps = [];
   for (const renderer of renderers) {
-    allDeps.push(...getRendererDeps(renderer, isEdge, { installSpec: true }));
+    allDeps.push(...getRendererDeps(renderer, isEdge));
   }
   const uniqueDeps = [...new Set(allDeps)];
   if (uniqueDeps.length === 0)
@@ -713,7 +706,7 @@ async function runMigrate(args2) {
     if (dryRun) {
       p__namespace.log.info(`Would remove defaults.component: '${migrationCheck.defaultComponentName}'`);
     } else {
-      const result = await dependencies.migrateDefaultsComponent(cwd).catch((err) => {
+      const result = await fonts.migrateDefaultsComponent(cwd).catch((err) => {
         p__namespace.log.warn(`Failed to migrate defaults.component: ${err.message}`);
         return { migrated: false, componentName: null, message: err.message };
       });
@@ -727,7 +720,7 @@ async function runMigrate(args2) {
     if (dryRun) {
       p__namespace.log.info("Would migrate ogImage.fonts to @nuxt/fonts config");
     } else {
-      const result = await dependencies.migrateFontsConfig(cwd).catch((err) => {
+      const result = await fonts.migrateFontsConfig(cwd).catch((err) => {
         p__namespace.log.warn(`Failed to migrate fonts config: ${err.message}`);
         return { migrated: false, message: err.message };
       });

package/dist/cli.mjs

@@ -8,14 +8,10 @@ import { detectPackageManager, removeDependency, addDependency } from 'nypm';
 import { parseAndWalk } from 'oxc-walker';
 import { dirname, resolve, join, relative, basename } from 'pathe';
 import { parse, walkSync, ELEMENT_NODE } from 'ultrahtml';
-import { m as migrateDefaultsComponent, a as migrateFontsConfig, T as TAKUMI_CORE_INSTALL_SPEC, b as TAKUMI_WASM_INSTALL_SPEC } from './shared/nuxt-og-image.LgUGeaz-.mjs';
+import { m as migrateDefaultsComponent, a as migrateFontsConfig } from './shared/nuxt-og-image.CJa2KCie.mjs';
 import 'magicast';
 import 'magicast/helpers';
 import '../dist/runtime/logger.js';
-import 'std-env';
-import 'defu';
-import 'nuxtseo-shared/kit';
-import 'chrome-launcher';
 
 const __dirname$1 = dirname(fileURLToPath(import.meta.url));
 const communityDir = resolve(__dirname$1, "runtime/app/components/Templates/Community");
@@ -176,14 +172,11 @@ const RENDERERS = [
   }
 ];
 const EDGE_PRESETS = ["cloudflare", "cloudflare-pages", "cloudflare-module", "vercel-edge", "netlify-edge"];
-function getRendererDeps(renderer, isEdge, options = {}) {
+function getRendererDeps(renderer, isEdge) {
   switch (renderer) {
     case "satori":
       return isEdge ? ["satori", "@resvg/resvg-js", "@resvg/resvg-wasm"] : ["satori", "@resvg/resvg-js"];
     case "takumi":
-      if (options.installSpec) {
-        return isEdge ? [TAKUMI_CORE_INSTALL_SPEC, TAKUMI_WASM_INSTALL_SPEC] : [TAKUMI_CORE_INSTALL_SPEC];
-      }
       return isEdge ? ["@takumi-rs/core", "@takumi-rs/wasm"] : ["@takumi-rs/core"];
     case "browser":
       return isEdge ? [] : ["playwright-core"];
@@ -544,7 +537,7 @@ async function installRendererDeps(renderers, isEdge) {
   const pmName = pm?.name || "npm";
   const allDeps = [];
   for (const renderer of renderers) {
-    allDeps.push(...getRendererDeps(renderer, isEdge, { installSpec: true }));
+    allDeps.push(...getRendererDeps(renderer, isEdge));
   }
   const uniqueDeps = [...new Set(allDeps)];
   if (uniqueDeps.length === 0)

package/dist/devtools/lib/og-image/shared/urlEncoding.ts

@@ -1,4 +1,4 @@
-import { hash } from 'ohash'
+import { digest } from 'ohash/crypto'
 
 /**
  * URL encoding for OG image options (Cloudinary/IPX style)
@@ -421,11 +421,12 @@ export function buildOgImageUrl(
 }
 
 /**
- * Sign encoded params using a keyed hash (ohash, cross-runtime compatible).
- * Returns first 16 chars of the base64url hash for URL brevity.
+ * Sign encoded params using a keyed SHA-256 digest (cross-runtime, sync).
+ * Returns first 16 chars of the base64url digest for URL brevity.
+ * Must stay cryptographic — a fast hash here would make signatures forgeable.
  */
 export function signEncodedParams(encoded: string, secret: string): string {
-  return hash(`${secret}:${encoded}`).slice(0, 16)
+  return digest(`${secret}:${encoded}`).slice(0, 16)
 }
 
 /**

package/dist/module.cjs

@@ -6,16 +6,17 @@ require('node:fs/promises');
 require('node:url');
 require('@nuxt/kit');
 require('defu');
+require('fnv1a-64');
 require('nuxt-site-config/kit');
-require('ohash');
 require('pathe');
 require('pkg-types');
 require('std-env');
-const module$1 = require('./shared/nuxt-og-image.BCK8Adm4.cjs');
-require('./shared/nuxt-og-image.DQkJQHaN.cjs');
+const module$1 = require('./shared/nuxt-og-image.BRBtdkUp.cjs');
 require('nuxtseo-shared/kit');
 require('../dist/runtime/logger.js');
 require('oxc-walker');
+require('chrome-launcher');
+require('nypm');
 require('nuxtseo-shared/devtools');
 require('unstorage');
 require('unstorage/drivers/fs-lite');
@@ -29,10 +30,9 @@ require('ofetch');
 require('ultrahtml');
 require('../dist/runtime/server/og-image/core/transforms/emojis/emoji-utils.js');
 require('exsolve');
+require('./shared/nuxt-og-image.CMYbz66P.cjs');
 require('magicast');
 require('magicast/helpers');
-require('nypm');
-require('chrome-launcher');
 
 
 

package/dist/module.json

@@ -4,7 +4,7 @@
     "nuxt": ">=3.16.0"
   },
   "configKey": "ogImage",
-  "version": "6.7.2",
+  "version": "6.7.3",
   "builder": {
     "@nuxt/module-builder": "1.0.2",
     "unbuild": "3.6.1"

package/dist/module.mjs

@@ -4,16 +4,17 @@ import 'node:fs/promises';
 import 'node:url';
 import '@nuxt/kit';
 import 'defu';
+import 'fnv1a-64';
 import 'nuxt-site-config/kit';
-import 'ohash';
 import 'pathe';
 import 'pkg-types';
 import 'std-env';
-export { m as default } from './shared/nuxt-og-image.Pfj5JkJd.mjs';
-import './shared/nuxt-og-image.LgUGeaz-.mjs';
+export { m as default } from './shared/nuxt-og-image.Bv8VSGTj.mjs';
 import 'nuxtseo-shared/kit';
 import '../dist/runtime/logger.js';
 import 'oxc-walker';
+import 'chrome-launcher';
+import 'nypm';
 import 'nuxtseo-shared/devtools';
 import 'unstorage';
 import 'unstorage/drivers/fs-lite';
@@ -27,7 +28,6 @@ import 'ofetch';
 import 'ultrahtml';
 import '../dist/runtime/server/og-image/core/transforms/emojis/emoji-utils.js';
 import 'exsolve';
+import './shared/nuxt-og-image.CJa2KCie.mjs';
 import 'magicast';
 import 'magicast/helpers';
-import 'nypm';
-import 'chrome-launcher';

package/dist/runtime/app/plugins/__zero-runtime/og-image-canonical-urls.server.js

@@ -1,9 +1,7 @@
 import { defineNuxtPlugin } from "#app";
-import { ogImageCanonicalUrls as setup } from "../../utils/plugins.js";
-export default defineNuxtPlugin({
-  setup(nuxtApp) {
-    if (import.meta.dev || import.meta.prerender) {
-      setup(nuxtApp);
-    }
+import { ogImageCanonicalUrls } from "../../utils/plugins.js";
+export default defineNuxtPlugin((nuxtApp) => {
+  if (import.meta.dev || import.meta.prerender) {
+    return ogImageCanonicalUrls(nuxtApp);
   }
 });

package/dist/runtime/app/plugins/__zero-runtime/route-rule-og-image.server.js

@@ -1,9 +1,7 @@
 import { defineNuxtPlugin } from "#app";
-import { routeRuleOgImage as setup } from "../../utils/plugins.js";
-export default defineNuxtPlugin({
-  setup(nuxtApp) {
-    if (import.meta.dev || import.meta.prerender) {
-      setup(nuxtApp);
-    }
+import { routeRuleOgImage } from "../../utils/plugins.js";
+export default defineNuxtPlugin((nuxtApp) => {
+  if (import.meta.dev || import.meta.prerender) {
+    return routeRuleOgImage(nuxtApp);
   }
 });

package/dist/runtime/app/plugins/og-image-canonical-urls.server.d.ts

@@ -1,2 +1 @@
-declare const _default: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
-export default _default;
+export { ogImageCanonicalUrls as default } from '../utils/plugins.js';

package/dist/runtime/app/plugins/og-image-canonical-urls.server.js

@@ -1,7 +1 @@
-import { defineNuxtPlugin } from "#app";
-import { ogImageCanonicalUrls as setup } from "../utils/plugins.js";
-export default defineNuxtPlugin({
-  setup(nuxtApp) {
-    setup(nuxtApp);
-  }
-});
+export { ogImageCanonicalUrls as default } from "../utils/plugins.js";

package/dist/runtime/app/plugins/route-rule-og-image.server.d.ts

@@ -1,2 +1 @@
-declare const _default: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
-export default _default;
+export { routeRuleOgImage as default } from '../utils/plugins.js';

package/dist/runtime/app/plugins/route-rule-og-image.server.js

@@ -1,7 +1 @@
-import { defineNuxtPlugin } from "#app";
-import { routeRuleOgImage as setup } from "../utils/plugins.js";
-export default defineNuxtPlugin({
-  setup(nuxtApp) {
-    setup(nuxtApp);
-  }
-});
+export { routeRuleOgImage as default } from "../utils/plugins.js";

package/dist/runtime/app/utils/plugins.d.ts

@@ -1,3 +1,2 @@
-import type { NuxtSSRContext } from '#app/nuxt';
-export declare function ogImageCanonicalUrls(nuxtApp: NuxtSSRContext['nuxt']): void;
-export declare function routeRuleOgImage(nuxtApp: NuxtSSRContext['nuxt']): void;
+export declare const ogImageCanonicalUrls: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;
+export declare const routeRuleOgImage: import("nuxt/app").Plugin<Record<string, unknown>> & import("nuxt/app").ObjectPlugin<Record<string, unknown>>;

package/dist/runtime/app/utils/plugins.js

@@ -3,12 +3,12 @@ import { defu } from "defu";
 import { createRouter as createRadixRouter, toRouteMatcher } from "radix3";
 import { parseURL, withoutBase } from "ufo";
 import { toValue } from "vue";
-import { useRequestEvent } from "#app";
+import { defineNuxtPlugin, useRequestEvent } from "#app";
 import { withSiteUrl } from "#site-config/app/composables";
 import { createOgImageMeta, getOgImagePath } from "../../app/utils.js";
 import { isInternalRoute } from "../../shared.js";
 const RE_COMMA = /,/g;
-export function ogImageCanonicalUrls(nuxtApp) {
+export const ogImageCanonicalUrls = defineNuxtPlugin((nuxtApp) => {
   nuxtApp.hooks.hook("app:rendered", async (ctx) => {
     const { ssrContext } = ctx;
     const e = useRequestEvent();
@@ -52,8 +52,8 @@ export function ogImageCanonicalUrls(nuxtApp) {
       }
     });
   });
-}
-export function routeRuleOgImage(nuxtApp) {
+});
+export const routeRuleOgImage = defineNuxtPlugin((nuxtApp) => {
   nuxtApp.hooks.hook("app:rendered", async (ctx) => {
     const { ssrContext } = ctx;
     const e = useRequestEvent();
@@ -92,4 +92,4 @@ export function routeRuleOgImage(nuxtApp) {
       prerenderPaths.set(ogKey, prerenderPath);
     }
   });
-}
+});

package/dist/runtime/server/og-image/context.js

@@ -1,7 +1,6 @@
 import { defu } from "defu";
 import { createError, getQuery } from "h3";
 import { useNitroApp } from "nitropack/runtime";
-import { hash } from "ohash";
 import { parseURL, withoutLeadingSlash, withoutTrailingSlash, withQuery } from "ufo";
 import { normalizeKey } from "unstorage";
 import { prerenderOptionsCache } from "#og-image-cache";
@@ -9,6 +8,7 @@ import { getSiteConfig } from "#site-config/server/composables/getSiteConfig";
 import { createSitePathResolver } from "#site-config/server/composables/utils";
 import { logger } from "../../logger.js";
 import { decodeOgImageParams, extractEncodedSegment, sanitizeProps, separateProps, verifyOgImageSignature } from "../../shared.js";
+import { hashKey } from "../../shared/hash.js";
 import { autoEjectCommunityTemplate } from "../util/auto-eject.js";
 import { createNitroRouteRuleMatcher } from "../util/kit.js";
 import { normaliseOptions } from "../util/options.js";
@@ -28,10 +28,10 @@ export function resolvePathCacheKey(e, path, resolvedOptions) {
     import.meta.prerender ? "" : siteConfig.url
   ];
   if (resolvedOptions)
-    hashParts.push(hash(resolvedOptions));
+    hashParts.push(hashKey(resolvedOptions));
   return [
     !basePath || basePath === "/" ? "index" : basePath,
-    hash(hashParts)
+    hashKey(hashParts)
   ].join(":");
 }
 export async function resolveContext(e) {

package/dist/runtime/server/util/cache.js

@@ -1,6 +1,6 @@
+import { fnv1a64Base36 } from "fnv1a-64";
 import { createError, getQuery, handleCacheHeaders, setHeader, setHeaders } from "h3";
 import { useStorage } from "nitropack/runtime";
-import { digest } from "ohash";
 import { withTrailingSlash } from "ufo";
 import { prefixStorage } from "unstorage";
 import { logger } from "../../logger.js";
@@ -83,7 +83,7 @@ export async function useOgImageBufferCache(ctx, options) {
       const headers = {
         // avoid multi-tenancy cache issues
         "Vary": "accept-encoding, host",
-        "etag": `W/"${digest(value)}"`,
+        "etag": `W/"${fnv1a64Base36(value)}"`,
         "last-modified": (/* @__PURE__ */ new Date()).toUTCString(),
         "cache-control": `public, max-age=${maxAge}, s-maxage=${maxAge}, immutable`
       };

package/dist/runtime/server/util/kit.js

@@ -1,11 +1,11 @@
 import { defu } from "defu";
 import { useRuntimeConfig } from "nitropack/runtime";
-import { hash } from "ohash";
 import { createRouter as createRadixRouter, toRouteMatcher } from "radix3";
 import { withoutBase, withoutTrailingSlash } from "ufo";
+import { getIslandHash } from "#og-image/island-hash";
 export { withoutQuery } from "nuxtseo-shared/utils";
 export function fetchIsland(e, component, props, timeout) {
-  const hashId = hash([component, props, {}, void 0]).replace(/[-_]/g, "");
+  const hashId = getIslandHash({ name: component, props });
   const signal = timeout ? AbortSignal.timeout(timeout) : void 0;
   return e.$fetch(`/__nuxt_island/${component}_${hashId}.json`, {
     params: {

package/dist/runtime/shared/hash.d.ts

@@ -0,0 +1,10 @@
+/**
+ * Hash an arbitrary value into a short, stable string key.
+ *
+ * Values are serialized to a canonical representation (equal structures hash
+ * equally regardless of key order), then digested with fnv1a-64. Matches the
+ * approach Nuxt uses for `useAsyncData`/`useFetch` keys.
+ *
+ * Non-cryptographic — never use for signatures or integrity checks.
+ */
+export declare function hashKey(value: unknown): string;

package/dist/runtime/shared/hash.js

@@ -0,0 +1,5 @@
+import { fnv1a64Base36 } from "fnv1a-64";
+import { identify } from "object-identity";
+export function hashKey(value) {
+  return fnv1a64Base36(identify(value));
+}

package/dist/runtime/shared/urlEncoding.d.ts

@@ -38,8 +38,9 @@ export interface BuildOgImageUrlResult {
  */
 export declare function buildOgImageUrl(options: Record<string, any>, extension?: string, isStatic?: boolean, defaults?: Record<string, any>, secret?: string): BuildOgImageUrlResult;
 /**
- * Sign encoded params using a keyed hash (ohash, cross-runtime compatible).
- * Returns first 16 chars of the base64url hash for URL brevity.
+ * Sign encoded params using a keyed SHA-256 digest (cross-runtime, sync).
+ * Returns first 16 chars of the base64url digest for URL brevity.
+ * Must stay cryptographic — a fast hash here would make signatures forgeable.
  */
 export declare function signEncodedParams(encoded: string, secret: string): string;
 /**

package/dist/runtime/shared/urlEncoding.js

@@ -1,4 +1,4 @@
-import { hash } from "ohash";
+import { digest } from "ohash/crypto";
 const MAX_PATH_LENGTH = 200;
 const RE_BASE64_PADDING = /=/g;
 const RE_BASE64_PLUS = /\+/g;
@@ -85,13 +85,13 @@ function b64Decode(str) {
   return Buffer.from(padded, "base64").toString("utf8");
 }
 function simpleHash(str) {
-  let hash2 = 0;
+  let hash = 0;
   for (let i = 0; i < str.length; i++) {
     const char = str.charCodeAt(i);
-    hash2 = (hash2 << 5) - hash2 + char;
-    hash2 = hash2 & hash2;
+    hash = (hash << 5) - hash + char;
+    hash = hash & hash;
   }
-  return Math.abs(hash2).toString(36);
+  return Math.abs(hash).toString(36);
 }
 export function hashOgImageOptions(options, componentHash, version) {
   const { _path, _hash, ...hashableOptions } = options;
@@ -233,10 +233,10 @@ export function buildOgImageUrl(options, extension = "png", isStatic = false, de
   const encoded = encodeOgImageParams(options, defaults);
   const prefix = isStatic ? "/_og/s" : "/_og/d";
   if (isStatic && (encoded.length > MAX_PATH_LENGTH || encoded.includes("%"))) {
-    const hash2 = hashOgImageOptions(options);
+    const hash = hashOgImageOptions(options);
     return {
-      url: `${prefix}/o_${hash2}.${extension}`,
-      hash: hash2
+      url: `${prefix}/o_${hash}.${extension}`,
+      hash
     };
   }
   const segment = encoded || "default";
@@ -246,7 +246,7 @@ export function buildOgImageUrl(options, extension = "png", isStatic = false, de
   };
 }
 export function signEncodedParams(encoded, secret) {
-  return hash(`${secret}:${encoded}`).slice(0, 16);
+  return digest(`${secret}:${encoded}`).slice(0, 16);
 }
 export function verifyOgImageSignature(encoded, signature, secret) {
   const expected = signEncodedParams(encoded, secret);