Made-with: Cursor

Root cause: bluesky-social/social-app classifies pasted URLs with a
client-side `getLikelyType` BEFORE calling Cardyb. It splits the URL
path by `.`, takes the last segment, and looks it up in a baked-in
MIME-type table. For atproto handles like `foo.com` the segment is
`com`, mapped to `application/x-msdownload` (a Windows executable).
The composer therefore returns LikelyType.Other, never calls Cardyb,
and shows a link card without an image.

Source:
https://github.com/bluesky-social/social-app/blob/main/src/lib/link-meta/link-meta.ts

Fix: append `/` to project page share URLs. The composer now sees
extension `com/`, falls through to LikelyType.HTML, calls Cardyb
extract, and unfurls the page (Cardyb follows our 308 to the
canonical no-slash URL and reads the OG meta tags as expected).

This is purely a share-URL change; the canonical Fresh route stays
at `/explore/[handle]`, and `/explore/[handle]/` continues to 308.

Made-with: Cursor

Project pages now set og:image to `/api/registry/project-og/{handle}` instead
of og-banner with an encoded DID, so Cardyb’s nested URL encoding stays
simpler and matches patterns that unfurl reliably.

- Add `lib/og-banner-serve.ts` with shared `buildOgBannerResponse`, exact
ArrayBuffer slicing for Content-Length bodies, JPEG magic validation on
DB cache (invalid rows fall back to PDS resize + overwrite)
- Store tight `Uint8Array` copies (`.slice()`) before writing og_jpeg to Turso
- Keep `/api/registry/og-banner/{did}` as a thin wrapper for compatibility

Made-with: Cursor

The root cause of the Bluesky link card image not appearing was response
latency. The og-banner route was fetching the full-resolution blob from the
PDS and running ImageScript decode+resize+encode on every request. The first
(uncached) hit could take 3–5 s; Cardyb's timeout is shorter than that, so it
returned "Unable to serve image" and cached the failure.

Fix: generate and store the 1200×630 JPEG in a new `og_jpeg` BLOB column at
profile-save time. The og-banner route now returns the cached bytes in < 10 ms
(a single DB SELECT), identical in latency profile to serving a static file.

- lib/db.ts: add `og_jpeg BLOB` column + additive migration
- lib/registry.ts: add `ogJpeg` to UpsertProfileInput; new storeOgJpeg /
getOgJpeg helpers; ON CONFLICT preserves existing og_jpeg when not replaced
- routes/api/registry/profile.ts: run generateOgJpeg() on banner upload bytes
and pass result to upsertProfile
- routes/api/registry/og-banner/[did].ts: fast path returns DB-cached JPEG;
slow path (pre-feature profiles) fetches PDS blob, resizes, stores to DB,
returns result so next request is fast
- routes/api/admin/backfill-og-jpegs.ts: POST endpoint to backfill og_jpeg
for existing profiles that pre-date this feature

Made-with: Cursor

og-hero.png (static file, works) returns Content-Length: 317687.
og-banner (dynamic route, broken) had no Content-Length — Deno Deploy
does not set it for Blob bodies on dynamic routes. Bluesky's image upload
pipeline requires Content-Length to process external card thumbnails;
without it the image is silently rejected and the card shows text-only.

Use ArrayBuffer body + explicit content-length header so the og-banner
response matches the header profile of a static image file.

Made-with: Cursor

Some clients (including possible Bluesky composer fetch paths) validate
og:image via cross-origin fetch rather than plain <img>. Add
Access-Control-Allow-Origin: *, Cross-Origin-Resource-Policy: cross-origin,
and Content-Disposition: inline on /api/registry/banner and /og-banner.

Made-with: Cursor

Reuses explore project-page share copy and the canonical /explore/{handle}
URL. Hidden until a published registry handle exists (not takedown).

Made-with: Cursor

Cardyb could preview full PNG banners while the Bluesky composer still
omitted thumbnails—likely size/format limits on the external thumb
pipeline. Add /api/registry/og-banner/{did} that decodes the PDS banner,
center-crops to 1.91:1, and emits a small JPEG; project pages use it for
og:image while keeping full-resolution /api/registry/banner for <img>.

ImageScript handles PNG/WebP/JPEG decode; on resize failure, serve raw bytes.

Made-with: Cursor

Homepage link cards used /og-hero.png (~320KB, atmosphereaccount.com).
Project pages used full-size cdn.bsky.app banner URLs (~650KB+), which
matched Cardyb extract but often showed text-only cards in the Bluesky
composer. Use absolute /api/registry/banner/{did} for og/twitter image
metadata so embeds follow the same origin/size pattern as the homepage.

Remove unused bsky CDN banner helpers from lib/avatar.ts.

Made-with: Cursor

Trailing slash on project URLs (e.g. /explore/handle/) returned 404, so
Bluesky Cardyb and other unfurlers saw no HTML and produced empty cards.
Add middleware to 308-redirect GET/HEAD to the canonical path without a
trailing slash.

Project pages: set og:url + link rel=canonical to the share URL, use
og:type website for broader parser compatibility, and emit twitter:title /
twitter:description alongside existing Twitter card image tags.

Made-with: Cursor

Bluesky's link-preview crawler (cardyb.bsky.app) only proxies og:images
from its own allowlisted domains. When the project's PDS is on Bluesky
(bsky.social / *.bsky.network), use cdn.bsky.app directly for og:image
so Bluesky can actually retrieve and display the embed card image.
Custom-PDS accounts continue to use our own banner proxy endpoint.

Also adds @png/@jpeg format suffix to bskyCdnBannerUrl (required by
Bluesky's CDN for correct content-type negotiation).

Made-with: Cursor

Made-with: Cursor