@pixelmatters/markup 1.18.1 → 1.18.3

package/README.md

@@ -37,9 +37,9 @@ CDN drop-in (no build step) — paste this just before `</body>`:
 ```html
 <script type="module">
   // Pin the exact version — esm.sh resolves it from npm
-  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.1'
+  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.3'
   // or
-  // import { init } from 'https://esm.run/@pixelmatters/markup@1.18.1'
+  // import { init } from 'https://esm.run/@pixelmatters/markup@1.18.3'
 
   init({
     apiUrl: 'https://your-deployment.convex.site',
@@ -50,14 +50,14 @@ CDN drop-in (no build step) — paste this just before `</body>`:
 </script>
 ```
 
-> **Why pin the version?** CDN URLs without a version (`@pixelmatters/markup`) resolve to whatever's `latest` on npm — a future major release will break your page silently. Always pin (`@pixelmatters/markup@1.18.1`).
+> **Why pin the version?** CDN URLs without a version (`@pixelmatters/markup`) resolve to whatever's `latest` on npm — a future major release will break your page silently. Always pin (`@pixelmatters/markup@1.18.3`).
 
 If your platform doesn't allow inline JS (some CMS / page-builder editors), use the auto-init form instead — point a `<script src=…>` at the bundle and pass config via `data-*` attributes:
 
 ```html
 <script
   type="module"
-  src="https://esm.sh/@pixelmatters/markup@1.18.1"
+  src="https://esm.sh/@pixelmatters/markup@1.18.3"
   data-markup-widget="true"
   data-api-url="https://your-deployment.convex.site"
   data-api-key="markup_..."
@@ -307,12 +307,24 @@ Signed-in authors render their profile picture — on their comments and on the
 
 ## AI prompt
 
-If your IDE / agent supports the [`skills`](https://www.npmjs.com/package/skills) CLI (Claude Code, Cursor, etc.), install the bundled skill instead of pasting a prompt — it gives the agent persistent, up-to-date install + troubleshooting guidance:
+This package ships its own Agent Skill — persistent install + troubleshooting guidance for your agent, instead of a prompt you paste once and lose. Install it rather than the prompt below where you can.
+
+If `@pixelmatters/markup` is already a dependency, the skill is already on disk under `node_modules`, versioned with the release you installed. [TanStack Intent](https://tanstack.com/intent/latest) wires it into whatever agent config you use (`AGENTS.md`, `CLAUDE.md`, `.cursorrules`, …):
 
 ```bash
-npx skills add Pixelmatters/markup --skill pixelmatters-markup
+npx @tanstack/intent@latest install
 ```
 
+Re-run it when you add another Intent-enabled package. A `pnpm update` of this one is enough on its own — the skill travels with the tarball, so it refreshes in place.
+
+If you'd rather pull it straight from the repo, or you're deciding whether to adopt the widget at all and haven't installed it yet, the [`skills`](https://www.npmjs.com/package/skills) CLI takes it by path:
+
+```bash
+npx skills add Pixelmatters/markup/packages/widget/skills/install-markup-widget
+```
+
+The path matters — it's where the skill lives in the repo, and without it the CLI picks up this repo's internal contributor skills instead.
+
 Otherwise, paste the block below into Claude, ChatGPT, Cursor, or any other LLM and it'll wire the widget into your codebase end-to-end.
 
 ````markdown
@@ -358,7 +370,7 @@ For a `<script>` tag drop-in (no bundler), use the inline ESM form and **pin the
 
 ```html
 <script type="module">
-  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.1'
+  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.3'
 
   init({
     apiUrl: '...',
@@ -374,7 +386,7 @@ If inline JS is disallowed (some CMS / page-builder editors), use the auto-init
 ```html
 <script
   type="module"
-  src="https://esm.sh/@pixelmatters/markup@1.18.1"
+  src="https://esm.sh/@pixelmatters/markup@1.18.3"
   data-markup-widget="true"
   data-api-url="..."
   data-api-key="..."

package/dist/widget.js

@@ -3245,12 +3245,14 @@ async function ki(e, t) {
 		if (!(await fetch(`${n}/widget/auth/probe-set`, {
 			method: "POST",
 			credentials: "include",
-			headers: r
+			headers: r,
+			signal: Ti(15e3)
 		})).ok) return !1;
 		let e = await fetch(`${n}/widget/auth/probe-check`, {
 			method: "POST",
 			credentials: "include",
-			headers: r
+			headers: r,
+			signal: Ti(wi)
 		});
 		if (!e.ok) return !1;
 		let { supported: t } = await e.json(), i = t === !0;
@@ -3470,7 +3472,8 @@ async function Qi(e) {
 				"content-type": "application/json",
 				"x-markup-api-key": n
 			},
-			body: "{}"
+			body: "{}",
+			signal: Ti(J)
 		});
 		if (!e.ok) throw Error(`popup-exchange responded with ${e.status}`);
 		let { code: r } = await e.json(), i = new URL("/widget/auth", t);
@@ -3545,7 +3548,8 @@ async function Qi(e) {
 			body: JSON.stringify({
 				accessToken: d.token,
 				refreshToken: d.refreshToken
-			})
+			}),
+			signal: Ti(J)
 		});
 		if (!e.ok) {
 			let t = /* @__PURE__ */ Error(`Failed to install widget cookies (${e.status})`);
@@ -4188,7 +4192,7 @@ async function Lo(e) {
 				"content-type": "application/json",
 				"x-markup-api-key": e.apiKey
 			},
-			signal: e.signal
+			signal: Ti(J, e.signal)
 		};
 		if (e.mode === "cookies") t.credentials = "include", t.body = "{}";
 		else {
@@ -7495,7 +7499,7 @@ function Dc({ apiUrl: e, apiKey: t, position: n = "bottom-right", screenshots: r
 					onOpenPrivacy: () => C("privacy"),
 					onOpenShortcuts: () => C("shortcuts"),
 					onHideForSession: () => Ce({ type: "hide-with-toast" }),
-					version: "1.18.1",
+					version: "1.18.3",
 					dashboardUrl: i
 				})
 			}) : null,
@@ -7592,11 +7596,11 @@ function jc(e, t) {
 	a.className = "markup-shadow-root", r.appendChild(a), je({
 		apiUrl: t.apiUrl,
 		apiKey: t.apiKey,
-		widgetVersion: "1.18.1"
+		widgetVersion: "1.18.3"
 	}), be(t.analytics === !1 ? null : {
 		apiUrl: t.apiUrl,
 		apiKey: t.apiKey,
-		widgetVersion: "1.18.1"
+		widgetVersion: "1.18.3"
 	}), F("widget_loaded");
 	let { theme: o, analytics: s, ...c } = t;
 	return de(/* @__PURE__ */ Q(Ce, {