@onlyworlds/sdk 4.53.1 → 4.53.3

package/AGENTS.md

@@ -1,6 +1,6 @@
 # For AI agents using @onlyworlds/sdk
 
-**Current as of**: SDK **4.x** · schema-dist **v0.32.2-dist.41** (canonical 00.32.02).
+**Current as of**: SDK **4.x** · schema-dist **v0.32.2-dist.42** (canonical 00.32.02).
 This line is asserted by `codegen:check` in CI — if the pin moves and this file is not
 re-read against it, the check fails rather than letting this document rot quietly.
 

package/CHANGELOG.md

@@ -5,6 +5,18 @@ earlier history lives in git log only.
 
 ## [Unreleased]
 
+## [4.53.3] - 2026-10-22
+
+### Changed
+
+- **Schema repinned to schema-dist v0.32.2-dist.42** (same canonical 00.32.02; fixtures/owworld gains `fail-OW-6-marker-bom`, a `mimetype` marker that starts with a byte order mark, 81 cases; nothing else; no schema file moved). It is the case 4.53.2's fix refuses: the reader rejects it as `marker`, and the set runs 81 of 81. Generated output moves its provenance lines only.
+
+## [4.53.2] - 2026-10-22
+
+### Fixed
+
+- **A `mimetype` marker with a byte order mark is refused** (`marker`, spec §4.7 OW-6). The reader compared the entry as decoded text, and `TextDecoder`'s default strips a leading BOM, so a marker of BOM plus the media type passed; the spec says bytes exactly. Found by the Python package's port of the reader (`onlyworlds` 0.17.0), which refused it. No fixture carries the case yet (proposed for the conformance set).
+
 ## [4.53.1] - 2026-10-22
 
 ### Changed

package/SCHEMA.md

@@ -1,6 +1,6 @@
 # OnlyWorlds Schema Reference
 
-**Source**: https://github.com/OnlyWorlds/schema-dist @ **v0.32.2-dist.41** — canonical schema **00.32.02**, published 2026-10-22.
+**Source**: https://github.com/OnlyWorlds/schema-dist @ **v0.32.2-dist.42** — canonical schema **00.32.02**, published 2026-10-22.
 
 GENERATED from the canonical schema YAML — do not hand-edit (regenerate: `python codegen/generate_types.py`).
 Written for both humans and AI agents reading this package locally.

package/dist/index.js

@@ -2906,7 +2906,7 @@ function readWorldFile(bytes, opts = {}) {
   const names = new Set(files.map((e) => e.name));
   checkFileAndFolder(names);
   const marker = files.find((e) => e.name === MARKER_NAME);
-  if (marker && new TextDecoder().decode(inflateEntry(bytes, marker)) !== WORLD_FILE_MEDIA_TYPE) {
+  if (marker && new TextDecoder("utf-8", { ignoreBOM: true }).decode(inflateEntry(bytes, marker)) !== WORLD_FILE_MEDIA_TYPE) {
     refuse("marker", "The mimetype entry holds other bytes than the OnlyWorlds media type.");
   }
   const candidates = [...names].filter((n) => n !== MARKER_NAME && !isJunk(n));

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@onlyworlds/sdk",
-  "version": "4.53.1",
+  "version": "4.53.3",
   "description": "TypeScript SDK for the OnlyWorlds API - build world-building applications with type safety",
   "type": "module",
   "exports": {