Merge remote-tracking branch 'origin/feat/og-image-v6' into feat/og-image-v6

Author: harlan-zw

.env.example

@@ -1,2 +1,5 @@
 #secure password, can use openssl rand -hex 32
-NUXT_SESSION_PASSWORD=""
+NUXT_SESSION_PASSWORD=""
+
+#HMAC secret for image proxy URL signing, can use openssl rand -hex 32
+NUXT_IMAGE_PROXY_SECRET=""

.github/workflows/ci.yml

@@ -154,6 +154,7 @@ jobs:
         run: pnpm build:test
         env:
           VALIDATE_HTML: true
+          NODE_OPTIONS: --max-old-space-size=6144
 
       - name: 🖥️ Test project (browser)
         run: pnpm test:browser:prebuilt
@@ -182,6 +183,8 @@ jobs:
 
       - name: 🏗️ Build project
         run: pnpm build:test
+        env:
+          NODE_OPTIONS: --max-old-space-size=6144
 
       - name: ♿ Accessibility audit (Lighthouse - ${{ matrix.mode }} mode)
         run: pnpm test:a11y:prebuilt

app/components/Package/Versions.vue

@@ -0,0 +1,41 @@
+import { defineNuxtModule, useNuxt } from 'nuxt/kit'
+import process from 'node:process'
+import { join } from 'node:path'
+import { appendFileSync, existsSync, readFileSync } from 'node:fs'
+import { randomUUID } from 'node:crypto'
+
+/**
+ * Auto-generates `NUXT_IMAGE_PROXY_SECRET` for local development if it is not
+ * already set. The secret is used to HMAC-sign image proxy URLs so that only
+ * server-generated URLs are accepted by the proxy endpoint.
+ *
+ * In production, `NUXT_IMAGE_PROXY_SECRET` must be set as an environment variable.
+ */
+export default defineNuxtModule({
+  meta: {
+    name: 'image-proxy',
+  },
+  setup() {
+    const nuxt = useNuxt()
+
+    if (nuxt.options._prepare || process.env.NUXT_IMAGE_PROXY_SECRET) {
+      return
+    }
+
+    const envPath = join(nuxt.options.rootDir, '.env')
+    const hasSecret =
+      existsSync(envPath) && /^NUXT_IMAGE_PROXY_SECRET=/m.test(readFileSync(envPath, 'utf-8'))
+
+    if (!hasSecret) {
+      // eslint-disable-next-line no-console
+      console.info('Generating NUXT_IMAGE_PROXY_SECRET for development environment.')
+      const secret = randomUUID().replace(/-/g, '')
+
+      nuxt.options.runtimeConfig.imageProxySecret = secret
+      appendFileSync(
+        envPath,
+        `# generated by image-proxy module\nNUXT_IMAGE_PROXY_SECRET=${secret}\n`,
+      )
+    }
+  },
+})

modules/image-proxy.ts

@@ -34,6 +34,7 @@ export default defineNuxtConfig({
 
   runtimeConfig: {
     sessionPassword: '',
+    imageProxySecret: '',
     github: {
       orgToken: '',
     },

nuxt.config.ts

@@ -30,12 +30,12 @@
     "mock-connector": "pnpm --filter npmx-connector dev:mock",
     "generate-pwa-icons": "pwa-assets-generator",
     "preview": "nuxt preview",
-    "postinstall": "pnpm generate:lexicons && nuxt prepare && pnpm generate:sprite && simple-git-hooks",
+    "postinstall": "pnpm generate:lexicons && pnpm generate:sprite && nuxt prepare && simple-git-hooks",
     "generate:sprite": "node scripts/generate-file-tree-sprite.ts",
     "generate:fixtures": "node scripts/generate-fixtures.ts",
     "generate:lexicons": "lex build --lexicons lexicons --out shared/types/lexicons --clear",
     "generate:jwk": "node scripts/gen-jwk.ts",
-    "test": "vite test",
+    "test": "vp test",
     "test:a11y": "pnpm build:test && LIGHTHOUSE_COLOR_MODE=dark pnpm test:a11y:prebuilt && LIGHTHOUSE_COLOR_MODE=light pnpm test:a11y:prebuilt",
     "test:a11y:prebuilt": "./scripts/lighthouse.sh",
     "test:perf": "pnpm build:test && pnpm test:perf:prebuilt",
@@ -44,9 +44,9 @@
     "test:browser:prebuilt": "playwright test",
     "test:browser:ui": "pnpm build:test && pnpm test:browser:prebuilt --ui",
     "test:browser:update": "pnpm build:test && pnpm test:browser:prebuilt --update-snapshots",
-    "test:nuxt": "vite test --project nuxt",
+    "test:nuxt": "vp test --project nuxt",
     "test:types": "pnpm generate:lexicons && nuxt prepare && vue-tsc -b --noEmit && pnpm --filter npmx-connector test:types",
-    "test:unit": "vite test --project unit",
+    "test:unit": "vp test --project unit",
     "start:playwright:webserver": "NODE_ENV=test pnpm preview --port 5678"
   },
   "dependencies": {
@@ -78,7 +78,7 @@
     "@upstash/redis": "1.36.2",
     "@vite-pwa/assets-generator": "1.0.2",
     "@vite-pwa/nuxt": "1.1.1",
-    "@voidzero-dev/vite-plus-core": "0.0.0-b1666489.20260220-0254",
+    "@voidzero-dev/vite-plus-core": "0.0.0-g52709db6.20260226-1136",
     "@vueuse/core": "14.2.1",
     "@vueuse/integrations": "14.2.1",
     "@vueuse/nuxt": "14.2.1",
@@ -89,6 +89,7 @@
     "fast-npm-meta": "1.2.1",
     "focus-trap": "^8.0.0",
     "gray-matter": "4.0.3",
+    "ipaddr.js": "2.3.0",
     "marked": "17.0.3",
     "module-replacements": "2.11.0",
     "nuxt": "4.3.1",
@@ -110,7 +111,7 @@
     "validate-npm-package-name": "7.0.2",
     "virtua": "0.48.6",
     "vite-plugin-pwa": "1.2.0",
-    "vite-plus": "0.0.0-833c515fa25cef20905a7f9affb156dfa6f151ab",
+    "vite-plus": "0.0.0-g52709db6.20260226-1136",
     "vue": "3.5.29",
     "vue-data-ui": "3.15.8"
   },
@@ -123,7 +124,6 @@
     "@types/sanitize-html": "2.16.0",
     "@types/semver": "7.7.1",
     "@types/validate-npm-package-name": "4.0.2",
-    "@vitest/browser-playwright": "4.0.18",
     "@vitest/coverage-v8": "4.0.18",
     "@vue/test-utils": "2.4.6",
     "axe-core": "4.11.1",
@@ -140,7 +140,7 @@
     "schema-dts": "1.1.5",
     "simple-git-hooks": "2.13.1",
     "typescript": "5.9.3",
-    "vitest": "npm:@voidzero-dev/vite-plus-test@0.0.0-b1666489.20260220-0254",
+    "vitest": "npm:@voidzero-dev/vite-plus-test@0.0.0-g52709db6.20260226-1136",
     "vitest-environment-nuxt": "1.0.1",
     "vue-i18n-extract": "2.0.7",
     "vue-tsc": "3.2.5"