vinext 0.0.30 → 0.0.31

package/dist/shims/image-config.js

@@ -1,91 +1,58 @@
+//#region src/shims/image-config.ts
 /**
- * Image remote pattern validation.
- *
- * Validates remote image URLs against the `images.remotePatterns` and
- * `images.domains` config from next.config.js. This prevents SSRF and
- * open-redirect attacks by blocking URLs that don't match any configured
- * pattern.
- *
- * Pattern matching follows Next.js semantics:
- * - `*` matches a single segment (subdomain in hostname, path segment in pathname)
- * - `**` matches any number of segments
- * - protocol, port, and search are matched exactly when specified
- */
-/**
- * Convert a glob pattern (with `*` and `**`) to a RegExp.
- *
- * For hostnames, segments are separated by `.`:
- *   - `*` matches a single segment (no dots): [^.]+
- *   - `**` matches any number of segments: .+
- *
- * For pathnames, segments are separated by `/`:
- *   - `*` matches a single segment (no slashes): [^/]+
- *   - `**` matches any number of segments (including empty): .*
- *
- * Literal characters are escaped for regex safety.
- */
+* Convert a glob pattern (with `*` and `**`) to a RegExp.
+*
+* For hostnames, segments are separated by `.`:
+*   - `*` matches a single segment (no dots): [^.]+
+*   - `**` matches any number of segments: .+
+*
+* For pathnames, segments are separated by `/`:
+*   - `*` matches a single segment (no slashes): [^/]+
+*   - `**` matches any number of segments (including empty): .*
+*
+* Literal characters are escaped for regex safety.
+*/
 function globToRegex(pattern, separator) {
-    // Split by ** first, then handle * within each part
-    let regexStr = "^";
-    const doubleStar = separator === "." ? ".+" : ".*";
-    const singleStar = separator === "." ? "[^.]+" : "[^/]+";
-    const parts = pattern.split("**");
-    for (let i = 0; i < parts.length; i++) {
-        if (i > 0) {
-            regexStr += doubleStar;
-        }
-        // Within each part, split by * and escape the literals
-        const subParts = parts[i].split("*");
-        for (let j = 0; j < subParts.length; j++) {
-            if (j > 0) {
-                regexStr += singleStar;
-            }
-            // Escape regex special chars in the literal portion
-            regexStr += subParts[j].replace(/[.+?^${}()|[\]\\]/g, "\\$&");
-        }
-    }
-    regexStr += "$";
-    return new RegExp(regexStr);
+	let regexStr = "^";
+	const doubleStar = separator === "." ? ".+" : ".*";
+	const singleStar = separator === "." ? "[^.]+" : "[^/]+";
+	const parts = pattern.split("**");
+	for (let i = 0; i < parts.length; i++) {
+		if (i > 0) regexStr += doubleStar;
+		const subParts = parts[i].split("*");
+		for (let j = 0; j < subParts.length; j++) {
+			if (j > 0) regexStr += singleStar;
+			regexStr += subParts[j].replace(/[.+?^${}()|[\]\\]/g, "\\$&");
+		}
+	}
+	regexStr += "$";
+	return new RegExp(regexStr);
 }
 /**
- * Check whether a URL matches a single remote pattern.
- * Follows the same semantics as Next.js's matchRemotePattern().
- */
-export function matchRemotePattern(pattern, url) {
-    // Protocol check (strip trailing colon for comparison)
-    if (pattern.protocol !== undefined) {
-        if (pattern.protocol.replace(/:$/, "") !== url.protocol.replace(/:$/, "")) {
-            return false;
-        }
-    }
-    // Port check
-    if (pattern.port !== undefined) {
-        if (pattern.port !== url.port) {
-            return false;
-        }
-    }
-    // Hostname check (required field)
-    if (!globToRegex(pattern.hostname, ".").test(url.hostname)) {
-        return false;
-    }
-    // Search/query string check
-    if (pattern.search !== undefined) {
-        if (pattern.search !== url.search) {
-            return false;
-        }
-    }
-    // Pathname check — defaults to ** (match everything) if not specified
-    const pathnamePattern = pattern.pathname ?? "**";
-    if (!globToRegex(pathnamePattern, "/").test(url.pathname)) {
-        return false;
-    }
-    return true;
+* Check whether a URL matches a single remote pattern.
+* Follows the same semantics as Next.js's matchRemotePattern().
+*/
+function matchRemotePattern(pattern, url) {
+	if (pattern.protocol !== void 0) {
+		if (pattern.protocol.replace(/:$/, "") !== url.protocol.replace(/:$/, "")) return false;
+	}
+	if (pattern.port !== void 0) {
+		if (pattern.port !== url.port) return false;
+	}
+	if (!globToRegex(pattern.hostname, ".").test(url.hostname)) return false;
+	if (pattern.search !== void 0) {
+		if (pattern.search !== url.search) return false;
+	}
+	if (!globToRegex(pattern.pathname ?? "**", "/").test(url.pathname)) return false;
+	return true;
 }
 /**
- * Check whether a URL matches any configured remote pattern or legacy domain.
- */
-export function hasRemoteMatch(domains, remotePatterns, url) {
-    return (domains.some((domain) => url.hostname === domain) ||
-        remotePatterns.some((p) => matchRemotePattern(p, url)));
+* Check whether a URL matches any configured remote pattern or legacy domain.
+*/
+function hasRemoteMatch(domains, remotePatterns, url) {
+	return domains.some((domain) => url.hostname === domain) || remotePatterns.some((p) => matchRemotePattern(p, url));
 }
+//#endregion
+export { hasRemoteMatch, matchRemotePattern };
+
 //# sourceMappingURL=image-config.js.map

package/dist/shims/image-config.js.map

@@ -1 +1 @@
-{"version":3,"file":"image-config.js","sourceRoot":"","sources":["../../src/shims/image-config.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;GAYG;AAUH;;;;;;;;;;;;GAYG;AACH,SAAS,WAAW,CAAC,OAAe,EAAE,SAAoB;IACxD,oDAAoD;IACpD,IAAI,QAAQ,GAAG,GAAG,CAAC;IACnB,MAAM,UAAU,GAAG,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC;IACnD,MAAM,UAAU,GAAG,SAAS,KAAK,GAAG,CAAC,CAAC,CAAC,OAAO,CAAC,CAAC,CAAC,OAAO,CAAC;IAEzD,MAAM,KAAK,GAAG,OAAO,CAAC,KAAK,CAAC,IAAI,CAAC,CAAC;IAClC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,KAAK,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;QACtC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;YACV,QAAQ,IAAI,UAAU,CAAC;QACzB,CAAC;QACD,uDAAuD;QACvD,MAAM,QAAQ,GAAG,KAAK,CAAC,CAAC,CAAC,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC;QACrC,KAAK,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC,GAAG,QAAQ,CAAC,MAAM,EAAE,CAAC,EAAE,EAAE,CAAC;YACzC,IAAI,CAAC,GAAG,CAAC,EAAE,CAAC;gBACV,QAAQ,IAAI,UAAU,CAAC;YACzB,CAAC;YACD,oDAAoD;YACpD,QAAQ,IAAI,QAAQ,CAAC,CAAC,CAAC,CAAC,OAAO,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAAC;QAChE,CAAC;IACH,CAAC;IACD,QAAQ,IAAI,GAAG,CAAC;IAChB,OAAO,IAAI,MAAM,CAAC,QAAQ,CAAC,CAAC;AAC9B,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB,CAAC,OAAsB,EAAE,GAAQ;IACjE,uDAAuD;IACvD,IAAI,OAAO,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;QACnC,IAAI,OAAO,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,KAAK,GAAG,CAAC,QAAQ,CAAC,OAAO,CAAC,IAAI,EAAE,EAAE,CAAC,EAAE,CAAC;YAC1E,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,aAAa;IACb,IAAI,OAAO,CAAC,IAAI,KAAK,SAAS,EAAE,CAAC;QAC/B,IAAI,OAAO,CAAC,IAAI,KAAK,GAAG,CAAC,IAAI,EAAE,CAAC;YAC9B,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,kCAAkC;IAClC,IAAI,CAAC,WAAW,CAAC,OAAO,CAAC,QAAQ,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC3D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,4BAA4B;IAC5B,IAAI,OAAO,CAAC,MAAM,KAAK,SAAS,EAAE,CAAC;QACjC,IAAI,OAAO,CAAC,MAAM,KAAK,GAAG,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,KAAK,CAAC;QACf,CAAC;IACH,CAAC;IAED,sEAAsE;IACtE,MAAM,eAAe,GAAG,OAAO,CAAC,QAAQ,IAAI,IAAI,CAAC;IACjD,IAAI,CAAC,WAAW,CAAC,eAAe,EAAE,GAAG,CAAC,CAAC,IAAI,CAAC,GAAG,CAAC,QAAQ,CAAC,EAAE,CAAC;QAC1D,OAAO,KAAK,CAAC;IACf,CAAC;IAED,OAAO,IAAI,CAAC;AACd,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,cAAc,CAC5B,OAAiB,EACjB,cAA+B,EAC/B,GAAQ;IAER,OAAO,CACL,OAAO,CAAC,IAAI,CAAC,CAAC,MAAM,EAAE,EAAE,CAAC,GAAG,CAAC,QAAQ,KAAK,MAAM,CAAC;QACjD,cAAc,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,kBAAkB,CAAC,CAAC,EAAE,GAAG,CAAC,CAAC,CACvD,CAAC;AACJ,CAAC","sourcesContent":["/**\n * Image remote pattern validation.\n *\n * Validates remote image URLs against the `images.remotePatterns` and\n * `images.domains` config from next.config.js. This prevents SSRF and\n * open-redirect attacks by blocking URLs that don't match any configured\n * pattern.\n *\n * Pattern matching follows Next.js semantics:\n * - `*` matches a single segment (subdomain in hostname, path segment in pathname)\n * - `**` matches any number of segments\n * - protocol, port, and search are matched exactly when specified\n */\n\nexport interface RemotePattern {\n  protocol?: string;\n  hostname: string;\n  port?: string;\n  pathname?: string;\n  search?: string;\n}\n\n/**\n * Convert a glob pattern (with `*` and `**`) to a RegExp.\n *\n * For hostnames, segments are separated by `.`:\n *   - `*` matches a single segment (no dots): [^.]+\n *   - `**` matches any number of segments: .+\n *\n * For pathnames, segments are separated by `/`:\n *   - `*` matches a single segment (no slashes): [^/]+\n *   - `**` matches any number of segments (including empty): .*\n *\n * Literal characters are escaped for regex safety.\n */\nfunction globToRegex(pattern: string, separator: \".\" | \"/\"): RegExp {\n  // Split by ** first, then handle * within each part\n  let regexStr = \"^\";\n  const doubleStar = separator === \".\" ? \".+\" : \".*\";\n  const singleStar = separator === \".\" ? \"[^.]+\" : \"[^/]+\";\n\n  const parts = pattern.split(\"**\");\n  for (let i = 0; i < parts.length; i++) {\n    if (i > 0) {\n      regexStr += doubleStar;\n    }\n    // Within each part, split by * and escape the literals\n    const subParts = parts[i].split(\"*\");\n    for (let j = 0; j < subParts.length; j++) {\n      if (j > 0) {\n        regexStr += singleStar;\n      }\n      // Escape regex special chars in the literal portion\n      regexStr += subParts[j].replace(/[.+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n    }\n  }\n  regexStr += \"$\";\n  return new RegExp(regexStr);\n}\n\n/**\n * Check whether a URL matches a single remote pattern.\n * Follows the same semantics as Next.js's matchRemotePattern().\n */\nexport function matchRemotePattern(pattern: RemotePattern, url: URL): boolean {\n  // Protocol check (strip trailing colon for comparison)\n  if (pattern.protocol !== undefined) {\n    if (pattern.protocol.replace(/:$/, \"\") !== url.protocol.replace(/:$/, \"\")) {\n      return false;\n    }\n  }\n\n  // Port check\n  if (pattern.port !== undefined) {\n    if (pattern.port !== url.port) {\n      return false;\n    }\n  }\n\n  // Hostname check (required field)\n  if (!globToRegex(pattern.hostname, \".\").test(url.hostname)) {\n    return false;\n  }\n\n  // Search/query string check\n  if (pattern.search !== undefined) {\n    if (pattern.search !== url.search) {\n      return false;\n    }\n  }\n\n  // Pathname check — defaults to ** (match everything) if not specified\n  const pathnamePattern = pattern.pathname ?? \"**\";\n  if (!globToRegex(pathnamePattern, \"/\").test(url.pathname)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Check whether a URL matches any configured remote pattern or legacy domain.\n */\nexport function hasRemoteMatch(\n  domains: string[],\n  remotePatterns: RemotePattern[],\n  url: URL,\n): boolean {\n  return (\n    domains.some((domain) => url.hostname === domain) ||\n    remotePatterns.some((p) => matchRemotePattern(p, url))\n  );\n}\n"]}
+{"version":3,"file":"image-config.js","names":[],"sources":["../../src/shims/image-config.ts"],"sourcesContent":["/**\n * Image remote pattern validation.\n *\n * Validates remote image URLs against the `images.remotePatterns` and\n * `images.domains` config from next.config.js. This prevents SSRF and\n * open-redirect attacks by blocking URLs that don't match any configured\n * pattern.\n *\n * Pattern matching follows Next.js semantics:\n * - `*` matches a single segment (subdomain in hostname, path segment in pathname)\n * - `**` matches any number of segments\n * - protocol, port, and search are matched exactly when specified\n */\n\nexport interface RemotePattern {\n  protocol?: string;\n  hostname: string;\n  port?: string;\n  pathname?: string;\n  search?: string;\n}\n\n/**\n * Convert a glob pattern (with `*` and `**`) to a RegExp.\n *\n * For hostnames, segments are separated by `.`:\n *   - `*` matches a single segment (no dots): [^.]+\n *   - `**` matches any number of segments: .+\n *\n * For pathnames, segments are separated by `/`:\n *   - `*` matches a single segment (no slashes): [^/]+\n *   - `**` matches any number of segments (including empty): .*\n *\n * Literal characters are escaped for regex safety.\n */\nfunction globToRegex(pattern: string, separator: \".\" | \"/\"): RegExp {\n  // Split by ** first, then handle * within each part\n  let regexStr = \"^\";\n  const doubleStar = separator === \".\" ? \".+\" : \".*\";\n  const singleStar = separator === \".\" ? \"[^.]+\" : \"[^/]+\";\n\n  const parts = pattern.split(\"**\");\n  for (let i = 0; i < parts.length; i++) {\n    if (i > 0) {\n      regexStr += doubleStar;\n    }\n    // Within each part, split by * and escape the literals\n    const subParts = parts[i].split(\"*\");\n    for (let j = 0; j < subParts.length; j++) {\n      if (j > 0) {\n        regexStr += singleStar;\n      }\n      // Escape regex special chars in the literal portion\n      regexStr += subParts[j].replace(/[.+?^${}()|[\\]\\\\]/g, \"\\\\$&\");\n    }\n  }\n  regexStr += \"$\";\n  return new RegExp(regexStr);\n}\n\n/**\n * Check whether a URL matches a single remote pattern.\n * Follows the same semantics as Next.js's matchRemotePattern().\n */\nexport function matchRemotePattern(pattern: RemotePattern, url: URL): boolean {\n  // Protocol check (strip trailing colon for comparison)\n  if (pattern.protocol !== undefined) {\n    if (pattern.protocol.replace(/:$/, \"\") !== url.protocol.replace(/:$/, \"\")) {\n      return false;\n    }\n  }\n\n  // Port check\n  if (pattern.port !== undefined) {\n    if (pattern.port !== url.port) {\n      return false;\n    }\n  }\n\n  // Hostname check (required field)\n  if (!globToRegex(pattern.hostname, \".\").test(url.hostname)) {\n    return false;\n  }\n\n  // Search/query string check\n  if (pattern.search !== undefined) {\n    if (pattern.search !== url.search) {\n      return false;\n    }\n  }\n\n  // Pathname check — defaults to ** (match everything) if not specified\n  const pathnamePattern = pattern.pathname ?? \"**\";\n  if (!globToRegex(pathnamePattern, \"/\").test(url.pathname)) {\n    return false;\n  }\n\n  return true;\n}\n\n/**\n * Check whether a URL matches any configured remote pattern or legacy domain.\n */\nexport function hasRemoteMatch(\n  domains: string[],\n  remotePatterns: RemotePattern[],\n  url: URL,\n): boolean {\n  return (\n    domains.some((domain) => url.hostname === domain) ||\n    remotePatterns.some((p) => matchRemotePattern(p, url))\n  );\n}\n"],"mappings":";;;;;;;;;;;;;;AAmCA,SAAS,YAAY,SAAiB,WAA8B;CAElE,IAAI,WAAW;CACf,MAAM,aAAa,cAAc,MAAM,OAAO;CAC9C,MAAM,aAAa,cAAc,MAAM,UAAU;CAEjD,MAAM,QAAQ,QAAQ,MAAM,KAAK;AACjC,MAAK,IAAI,IAAI,GAAG,IAAI,MAAM,QAAQ,KAAK;AACrC,MAAI,IAAI,EACN,aAAY;EAGd,MAAM,WAAW,MAAM,GAAG,MAAM,IAAI;AACpC,OAAK,IAAI,IAAI,GAAG,IAAI,SAAS,QAAQ,KAAK;AACxC,OAAI,IAAI,EACN,aAAY;AAGd,eAAY,SAAS,GAAG,QAAQ,sBAAsB,OAAO;;;AAGjE,aAAY;AACZ,QAAO,IAAI,OAAO,SAAS;;;;;;AAO7B,SAAgB,mBAAmB,SAAwB,KAAmB;AAE5E,KAAI,QAAQ,aAAa,KAAA;MACnB,QAAQ,SAAS,QAAQ,MAAM,GAAG,KAAK,IAAI,SAAS,QAAQ,MAAM,GAAG,CACvE,QAAO;;AAKX,KAAI,QAAQ,SAAS,KAAA;MACf,QAAQ,SAAS,IAAI,KACvB,QAAO;;AAKX,KAAI,CAAC,YAAY,QAAQ,UAAU,IAAI,CAAC,KAAK,IAAI,SAAS,CACxD,QAAO;AAIT,KAAI,QAAQ,WAAW,KAAA;MACjB,QAAQ,WAAW,IAAI,OACzB,QAAO;;AAMX,KAAI,CAAC,YADmB,QAAQ,YAAY,MACV,IAAI,CAAC,KAAK,IAAI,SAAS,CACvD,QAAO;AAGT,QAAO;;;;;AAMT,SAAgB,eACd,SACA,gBACA,KACS;AACT,QACE,QAAQ,MAAM,WAAW,IAAI,aAAa,OAAO,IACjD,eAAe,MAAM,MAAM,mBAAmB,GAAG,IAAI,CAAC"}

package/dist/shims/image.d.ts

@@ -1,49 +1,39 @@
-/**
- * next/image shim
- *
- * Translates Next.js Image props to @unpic/react Image component.
- * @unpic/react auto-detects CDN from URL and uses native transforms.
- * For local images (relative paths), routes through `/_vinext/image`
- * for server-side optimization (resize, format negotiation, quality).
- *
- * Remote images are validated against `images.remotePatterns` and
- * `images.domains` from next.config.js. Unmatched URLs are blocked
- * in production and warn in development, matching Next.js behavior.
- */
 import React from "react";
-export interface StaticImageData {
-    src: string;
-    height: number;
-    width: number;
-    blurDataURL?: string;
+
+//#region src/shims/image.d.ts
+interface StaticImageData {
+  src: string;
+  height: number;
+  width: number;
+  blurDataURL?: string;
 }
 interface ImageProps {
-    src: string | StaticImageData;
-    alt: string;
-    width?: number;
-    height?: number;
-    fill?: boolean;
-    priority?: boolean;
+  src: string | StaticImageData;
+  alt: string;
+  width?: number;
+  height?: number;
+  fill?: boolean;
+  priority?: boolean;
+  quality?: number;
+  placeholder?: "blur" | "empty";
+  blurDataURL?: string;
+  loader?: (params: {
+    src: string;
+    width: number;
     quality?: number;
-    placeholder?: "blur" | "empty";
-    blurDataURL?: string;
-    loader?: (params: {
-        src: string;
-        width: number;
-        quality?: number;
-    }) => string;
-    sizes?: string;
-    className?: string;
-    style?: React.CSSProperties;
-    onLoad?: React.ReactEventHandler<HTMLImageElement>;
-    /** @deprecated Use onLoad instead. Still supported for migration compat. */
-    onLoadingComplete?: (img: HTMLImageElement) => void;
-    onError?: React.ReactEventHandler<HTMLImageElement>;
-    onClick?: React.MouseEventHandler<HTMLImageElement>;
-    id?: string;
-    unoptimized?: boolean;
-    overrideSrc?: string;
-    loading?: "lazy" | "eager";
+  }) => string;
+  sizes?: string;
+  className?: string;
+  style?: React.CSSProperties;
+  onLoad?: React.ReactEventHandler<HTMLImageElement>;
+  /** @deprecated Use onLoad instead. Still supported for migration compat. */
+  onLoadingComplete?: (img: HTMLImageElement) => void;
+  onError?: React.ReactEventHandler<HTMLImageElement>;
+  onClick?: React.MouseEventHandler<HTMLImageElement>;
+  id?: string;
+  unoptimized?: boolean;
+  overrideSrc?: string;
+  loading?: "lazy" | "eager";
 }
 /**
  * Build a `/_vinext/image` optimization URL.
@@ -52,14 +42,15 @@ interface ImageProps {
  * the Images binding to resize/transcode on the fly. In dev, the Vite dev
  * server handles it as a passthrough (serves the original file).
  */
-export declare function imageOptimizationUrl(src: string, width: number, quality?: number): string;
+declare function imageOptimizationUrl(src: string, width: number, quality?: number): string;
 declare const Image: React.ForwardRefExoticComponent<ImageProps & React.RefAttributes<HTMLImageElement>>;
 /**
  * getImageProps — for advanced use cases (picture elements, background images).
  * Returns the props that would be passed to the underlying <img> element.
  */
-export declare function getImageProps(props: ImageProps): {
-    props: React.ImgHTMLAttributes<HTMLImageElement>;
+declare function getImageProps(props: ImageProps): {
+  props: React.ImgHTMLAttributes<HTMLImageElement>;
 };
-export default Image;
+//#endregion
+export { StaticImageData, Image as default, getImageProps, imageOptimizationUrl };
 //# sourceMappingURL=image.d.ts.map