@pixelmatters/markup 1.18.2 → 1.18.4

package/README.md

@@ -37,9 +37,9 @@ CDN drop-in (no build step) — paste this just before `</body>`:
 ```html
 <script type="module">
   // Pin the exact version — esm.sh resolves it from npm
-  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.2'
+  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.4'
   // or
-  // import { init } from 'https://esm.run/@pixelmatters/markup@1.18.2'
+  // import { init } from 'https://esm.run/@pixelmatters/markup@1.18.4'
 
   init({
     apiUrl: 'https://your-deployment.convex.site',
@@ -50,14 +50,14 @@ CDN drop-in (no build step) — paste this just before `</body>`:
 </script>
 ```
 
-> **Why pin the version?** CDN URLs without a version (`@pixelmatters/markup`) resolve to whatever's `latest` on npm — a future major release will break your page silently. Always pin (`@pixelmatters/markup@1.18.2`).
+> **Why pin the version?** CDN URLs without a version (`@pixelmatters/markup`) resolve to whatever's `latest` on npm — a future major release will break your page silently. Always pin (`@pixelmatters/markup@1.18.4`).
 
 If your platform doesn't allow inline JS (some CMS / page-builder editors), use the auto-init form instead — point a `<script src=…>` at the bundle and pass config via `data-*` attributes:
 
 ```html
 <script
   type="module"
-  src="https://esm.sh/@pixelmatters/markup@1.18.2"
+  src="https://esm.sh/@pixelmatters/markup@1.18.4"
   data-markup-widget="true"
   data-api-url="https://your-deployment.convex.site"
   data-api-key="markup_..."
@@ -323,7 +323,7 @@ If you'd rather pull it straight from the repo, or you're deciding whether to ad
 npx skills add Pixelmatters/markup/packages/widget/skills/install-markup-widget
 ```
 
-The path matters — it's where the skill lives in the repo, and without it the CLI picks up this repo's internal contributor skills instead.
+Pass the full path, not just the repository — it's where this skill lives, and a bare repository reference resolves to a different set of skills.
 
 Otherwise, paste the block below into Claude, ChatGPT, Cursor, or any other LLM and it'll wire the widget into your codebase end-to-end.
 
@@ -370,7 +370,7 @@ For a `<script>` tag drop-in (no bundler), use the inline ESM form and **pin the
 
 ```html
 <script type="module">
-  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.2'
+  import { init } from 'https://esm.sh/@pixelmatters/markup@1.18.4'
 
   init({
     apiUrl: '...',
@@ -386,7 +386,7 @@ If inline JS is disallowed (some CMS / page-builder editors), use the auto-init
 ```html
 <script
   type="module"
-  src="https://esm.sh/@pixelmatters/markup@1.18.2"
+  src="https://esm.sh/@pixelmatters/markup@1.18.4"
   data-markup-widget="true"
   data-api-url="..."
   data-api-key="..."
@@ -428,15 +428,9 @@ Only `img-src` degrades gracefully: a blocked avatar falls back to initials, and
 
 Modern evergreen browsers (Chrome, Edge, Firefox, Safari) and their mobile equivalents. The widget uses native ESM, shadow DOM, and `IntersectionObserver` — no IE11 / legacy bundle.
 
-## Development
+## Self-hosting Markup
 
-```bash
-pnpm dev          # vite dev server with the playground page
-pnpm build        # production build → dist/widget.{js,d.ts}
-pnpm typecheck    # tsc --noEmit
-```
-
-To test against a local Convex deployment, pass the printed `convex.site` URL as `apiUrl`.
+The widget talks to a Markup deployment; `apiUrl` is where yours lives. If you're running your own rather than using a hosted project, the backend, the dashboard and the deployment steps are in the [project repository](https://github.com/Pixelmatters/markup).
 
 ## License
 

package/dist/widget.js

@@ -3245,12 +3245,14 @@ async function ki(e, t) {
 		if (!(await fetch(`${n}/widget/auth/probe-set`, {
 			method: "POST",
 			credentials: "include",
-			headers: r
+			headers: r,
+			signal: Ti(15e3)
 		})).ok) return !1;
 		let e = await fetch(`${n}/widget/auth/probe-check`, {
 			method: "POST",
 			credentials: "include",
-			headers: r
+			headers: r,
+			signal: Ti(wi)
 		});
 		if (!e.ok) return !1;
 		let { supported: t } = await e.json(), i = t === !0;
@@ -3470,7 +3472,8 @@ async function Qi(e) {
 				"content-type": "application/json",
 				"x-markup-api-key": n
 			},
-			body: "{}"
+			body: "{}",
+			signal: Ti(J)
 		});
 		if (!e.ok) throw Error(`popup-exchange responded with ${e.status}`);
 		let { code: r } = await e.json(), i = new URL("/widget/auth", t);
@@ -3545,7 +3548,8 @@ async function Qi(e) {
 			body: JSON.stringify({
 				accessToken: d.token,
 				refreshToken: d.refreshToken
-			})
+			}),
+			signal: Ti(J)
 		});
 		if (!e.ok) {
 			let t = /* @__PURE__ */ Error(`Failed to install widget cookies (${e.status})`);
@@ -4188,7 +4192,7 @@ async function Lo(e) {
 				"content-type": "application/json",
 				"x-markup-api-key": e.apiKey
 			},
-			signal: e.signal
+			signal: Ti(J, e.signal)
 		};
 		if (e.mode === "cookies") t.credentials = "include", t.body = "{}";
 		else {
@@ -7495,7 +7499,7 @@ function Dc({ apiUrl: e, apiKey: t, position: n = "bottom-right", screenshots: r
 					onOpenPrivacy: () => C("privacy"),
 					onOpenShortcuts: () => C("shortcuts"),
 					onHideForSession: () => Ce({ type: "hide-with-toast" }),
-					version: "1.18.2",
+					version: "1.18.4",
 					dashboardUrl: i
 				})
 			}) : null,
@@ -7592,11 +7596,11 @@ function jc(e, t) {
 	a.className = "markup-shadow-root", r.appendChild(a), je({
 		apiUrl: t.apiUrl,
 		apiKey: t.apiKey,
-		widgetVersion: "1.18.2"
+		widgetVersion: "1.18.4"
 	}), be(t.analytics === !1 ? null : {
 		apiUrl: t.apiUrl,
 		apiKey: t.apiKey,
-		widgetVersion: "1.18.2"
+		widgetVersion: "1.18.4"
 	}), F("widget_loaded");
 	let { theme: o, analytics: s, ...c } = t;
 	return de(/* @__PURE__ */ Q(Ce, {