All checks were successful
Build and Publish Docker Image / build-and-push (push) Successful in 51s
Search: GET /api/search sent each matching user's full row — password hash and email included — to anyone, signed in or not, because searchUsersGlobal returned User[] and the route passed it through. It returns profiles only now, stripped where the rows are read, and the search test fails on the old code. Types alone wouldn't have caught it (a User is structurally a PublicUser), so the strip is explicit and tested.
Typed routes. Every JSON response is declared as APIResponse<T>, the way the typed routes already did, with the missing shapes named in api/model/interfaces.ts: PublicUser (no hash, no email) and SelfUser (your own profile, with email) plus toPublicUser/toSelfUser in place of ten hand-written destructurings, AuthTokens, AuthResponse, MediaTokenResponse, InviteResponse, AttachmentResponse, SearchResults, LinkPreview, UserSuggestion and Invitee. Request bodies are `unknown` and narrowed by the existing guards, or by a new fieldOf(obj, key) where a route reads one field — no more reading off Oak's `any` or casting to Record<string, unknown>. The password-reset routes answer `{ success: true, data: null }` rather than a bare `{ success: true }`, so every success fits the envelope; the frontend only reads `success`.
Socket protocol: routes/ws.ts had its own send() taking Record<string, unknown>, so nothing checked what it sent. It takes ServerToClientMessage now, which turned up two mismatches: `pong` was missing from the union although the server answers every client ping with one, and vote_ack carried a `success: true` no type declares and no client reads. The union has PongMessage and vote_ack lost the field.
No explicit any. The YouTube playlist parse reads ytInitialData as `unknown` through a small at(node, …path) that checks each step, instead of `type Json = any`. The backend test helpers type the response body as the server's envelope: request<T>() and get/post/put/patch/del<T>() name what `data` holds, res.data throws with the server's message when the call didn't succeed and res.error when it didn't fail, and each test says which API type it expects, so a test reading a field the route doesn't send no longer compiles. Assertions that a field is absent are `assertFalse("passwordHash" in …)` rather than reading a field the type says isn't there. The socket tests' messages are ServerToClientMessage, with next()/all() keyed by type so each returns that message's shape.
No double casts in src/ either. window.YT and onYouTubeIframeAPIReady are declared on Window; the test's fake player is a class forwarding to the spies the tests inspect. WSContext, FollowContext and PlayerContext export their defaults (defaultWSValue, defaultFollowValue, defaultPlayerValue), which the tests import instead of reading React's private _currentValue. handleMentionKeyDown takes a MentionKey — the key fields it reads — so the test builds a plain object; useUserDumpFeed declares sentinelRef as the callback ref it is. In src/test/setup.ts the IntersectionObserver fake implements IntersectionObserver, and report(isIntersecting, top?) builds complete entries in place of partial ones cast in five files; the Animation fake implements Animation; the canvas getContext stub goes in through defineProperty. The XHR fake's last request is optional behind a getter that fails if none was made, the keyframes are checked with matchers, and the roleless legacy session is built by leaving the role out. One test changes meaning slightly: "leaving the view…" relied on entries with no position at all, and now leaves and re-enters at the same height, which is what it describes. The one cast left is in api/test/ws.test.ts: deno.json's "dom" lib hides Deno's WebSocket overload that takes handshake headers, and dropping that lib would break the editor's view of src/; it's commented and names the real signature.
Also: the notifications test answered a Response-typed promise with a plain object, which failed `tsc -b`; it uses the fetch stub's deferred() now. ESLint didn't read the `deno-lint-ignore no-explicit-any` comments, so `eslint .` failed on three files; those anys are gone. `deno fmt` over api/ and src/ (not the compiled src/locales/*.js); the reflow left all 332 message ids intact, and the .po files only have their source line references updated.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
173 lines
5.7 KiB
TypeScript
173 lines
5.7 KiB
TypeScript
// Generates the full favicon set + web manifest from a single emoji.
|
||
//
|
||
// Twemoji ships each emoji as a plain vector-path SVG, so it rasterizes without
|
||
// any system emoji font (which matters in the minimal Alpine runtime image).
|
||
// @resvg/resvg-wasm does the rasterization; the .ico is assembled by hand.
|
||
//
|
||
// Invoked by api/scripts/generate-icons.ts at server startup (into dist/ in
|
||
// prod, public/ in dev) — see that script for how the output dir is chosen.
|
||
import { initWasm, Resvg } from "@resvg/resvg-wasm";
|
||
|
||
// Pinned Twemoji release.
|
||
const TWEMOJI_VERSION = "16.0.1";
|
||
const PNG_SIZES = [16, 32, 48, 64, 96, 128, 192, 256, 512];
|
||
const APPLE_SIZE = 180;
|
||
const ICO_SIZES = [16, 32, 48];
|
||
|
||
/**
|
||
* Mirror Twemoji's filename convention: strip variation selectors (FE0F) unless
|
||
* the emoji is a ZWJ sequence, then join codepoints with "-". Also doubles as a
|
||
* stable cache-busting version string for the icon URLs.
|
||
*/
|
||
export function emojiToCodepoint(emoji: string): string {
|
||
const cleaned = emoji.includes("") ? emoji : emoji.replace(/️/g, "");
|
||
return [...cleaned].map((ch) => ch.codePointAt(0)!.toString(16)).join("-");
|
||
}
|
||
|
||
let wasmReady: Promise<unknown> | undefined;
|
||
function ensureWasm(): Promise<unknown> {
|
||
if (!wasmReady) {
|
||
const wasmUrl = new URL(
|
||
import.meta.resolve("@resvg/resvg-wasm/index_bg.wasm"),
|
||
);
|
||
wasmReady = Deno.readFile(wasmUrl).then((bytes) => initWasm(bytes));
|
||
}
|
||
return wasmReady;
|
||
}
|
||
|
||
// Cache the fetched glyph per emoji so repeated runs don't re-hit the network.
|
||
const glyphCache = new Map<string, string>();
|
||
|
||
async function fetchGlyph(emoji: string): Promise<string> {
|
||
const cp = emojiToCodepoint(emoji);
|
||
const cached = glyphCache.get(cp);
|
||
if (cached) return cached;
|
||
const url =
|
||
`https://cdn.jsdelivr.net/gh/jdecked/twemoji@${TWEMOJI_VERSION}/assets/svg/${cp}.svg`;
|
||
let res: Response;
|
||
try {
|
||
res = await fetch(url);
|
||
} catch (cause) {
|
||
throw new Error(
|
||
`Failed to fetch Twemoji glyph for "${emoji}" (${cp}) from ${url}`,
|
||
{ cause },
|
||
);
|
||
}
|
||
if (!res.ok) {
|
||
throw new Error(
|
||
`Failed to fetch Twemoji glyph for "${emoji}" (${cp}) from ${url}: ${res.status} ${res.statusText}`,
|
||
);
|
||
}
|
||
const svg = await res.text();
|
||
glyphCache.set(cp, svg);
|
||
return svg;
|
||
}
|
||
|
||
function renderPng(svg: string, size: number, background?: string): Uint8Array {
|
||
const resvg = new Resvg(svg, {
|
||
fitTo: { mode: "width", value: size },
|
||
background,
|
||
});
|
||
return resvg.render().asPng();
|
||
}
|
||
|
||
// Pack PNG payloads into a (PNG-compressed) .ico container.
|
||
function buildIco(images: { size: number; png: Uint8Array }[]): Uint8Array {
|
||
const HEADER = 6;
|
||
const ENTRY = 16;
|
||
const offsetBase = HEADER + ENTRY * images.length;
|
||
const total = offsetBase + images.reduce((sum, i) => sum + i.png.length, 0);
|
||
const buf = new Uint8Array(total);
|
||
const dv = new DataView(buf.buffer);
|
||
dv.setUint16(2, 1, true); // type: icon
|
||
dv.setUint16(4, images.length, true);
|
||
let offset = offsetBase;
|
||
images.forEach((img, idx) => {
|
||
const e = HEADER + idx * ENTRY;
|
||
buf[e] = img.size >= 256 ? 0 : img.size; // width (0 means 256)
|
||
buf[e + 1] = img.size >= 256 ? 0 : img.size; // height
|
||
dv.setUint16(e + 4, 1, true); // color planes
|
||
dv.setUint16(e + 6, 32, true); // bits per pixel
|
||
dv.setUint32(e + 8, img.png.length, true); // size of image data
|
||
dv.setUint32(e + 12, offset, true); // offset of image data
|
||
buf.set(img.png, offset);
|
||
offset += img.png.length;
|
||
});
|
||
return buf;
|
||
}
|
||
|
||
function buildManifest(siteName: string, bgColor: string): string {
|
||
const manifest = {
|
||
name: siteName,
|
||
short_name: siteName,
|
||
start_url: "/",
|
||
display: "standalone",
|
||
background_color: bgColor,
|
||
theme_color: bgColor,
|
||
icons: [
|
||
{ src: "/favicon.svg", type: "image/svg+xml", sizes: "any" },
|
||
{ src: "/favicon-192x192.png", type: "image/png", sizes: "192x192" },
|
||
{
|
||
src: "/favicon-512x512.png",
|
||
type: "image/png",
|
||
sizes: "512x512",
|
||
purpose: "any maskable",
|
||
},
|
||
],
|
||
share_target: {
|
||
action: "/",
|
||
method: "GET",
|
||
params: { url: "share_url", title: "share_title", text: "share_text" },
|
||
},
|
||
};
|
||
return JSON.stringify(manifest, null, 2) + "\n";
|
||
}
|
||
|
||
export interface GenerateSiteIconsOptions {
|
||
/** Emoji to render the icons from. */
|
||
emoji: string;
|
||
/** Directory to write the assets into (created if missing). */
|
||
outDir: string;
|
||
/** Site name written into the manifest. */
|
||
siteName: string;
|
||
/** Background color for the Apple touch icon and manifest (iOS ignores transparency). */
|
||
bgColor: string;
|
||
}
|
||
|
||
/**
|
||
* Generate `favicon.svg`, `favicon.ico`, `favicon-<size>x<size>.png` (16–512),
|
||
* `apple-touch-icon.png` and `manifest.webmanifest` into `outDir`.
|
||
* Throws if the emoji glyph can't be fetched.
|
||
*/
|
||
export async function generateSiteIcons(
|
||
opts: GenerateSiteIconsOptions,
|
||
): Promise<void> {
|
||
const { emoji, outDir, siteName, bgColor } = opts;
|
||
const svg = await fetchGlyph(emoji);
|
||
await ensureWasm();
|
||
|
||
await Deno.mkdir(outDir, { recursive: true });
|
||
const out = (name: string) => `${outDir}/${name}`;
|
||
|
||
await Deno.writeTextFile(out("favicon.svg"), svg);
|
||
|
||
const pngs = new Map<number, Uint8Array>();
|
||
for (const size of PNG_SIZES) pngs.set(size, renderPng(svg, size));
|
||
for (const size of PNG_SIZES) {
|
||
await Deno.writeFile(out(`favicon-${size}x${size}.png`), pngs.get(size)!);
|
||
}
|
||
// Apple touch icon gets a solid background — iOS doesn't honor transparency.
|
||
await Deno.writeFile(
|
||
out("apple-touch-icon.png"),
|
||
renderPng(svg, APPLE_SIZE, bgColor),
|
||
);
|
||
await Deno.writeFile(
|
||
out("favicon.ico"),
|
||
buildIco(ICO_SIZES.map((size) => ({ size, png: pngs.get(size)! }))),
|
||
);
|
||
await Deno.writeTextFile(
|
||
out("manifest.webmanifest"),
|
||
buildManifest(siteName, bgColor),
|
||
);
|
||
}
|