@quillmark/quiver 0.5.0 → 0.5.1

package/README.md

@@ -19,8 +19,8 @@ an npm package. Consumers decide how to consume it:
   output as static assets, loading it with `Quiver.fromBuilt`.
 
 Each loader names exactly what it loads: `fromPackage` and `fromDir` always
-read source layouts; `fromBuilt` always reads build output over HTTP/HTTPS.
-No auto-detection, no branching on artifact shape.
+read source layouts; `fromBuilt` always reads build output over an HTTP(S)
+or origin-relative URL. No auto-detection, no branching on artifact shape.
 
 This keeps the author flow to a single command (`npm publish` or `git tag`)
 and puts the deployment-topology decision where it belongs: with the
@@ -115,10 +115,12 @@ const quiver = await Quiver.fromBuilt("https://cdn.example.com/quivers/my-quiver
 await quiver.warm();
 ```
 
-`warm()` is network-only: it fetches every quill's tree and caches them.
-It does not require an engine and does not materialize Quill instances —
-that happens lazily on the first `getQuill` call, which is microseconds.
-A subsequent `getQuill` reuses the cached tree, skipping the fetch.
+`warm()` is I/O-only: it loads every quill's tree (over the network for
+`fromBuilt`, off the filesystem for `fromPackage`/`fromDir`) and caches
+them. It does not require an engine and does not materialize Quill
+instances — that happens lazily on the first `getQuill` call, which is
+microseconds. A subsequent `getQuill` reuses the cached tree, skipping
+the load.
 
 Once a tree has been turned into a Quill, the cached tree is dropped so
 its bytes can be GC'd — the materialized Quill is the runtime artifact.

package/dist/bundle.js

@@ -4,9 +4,15 @@
 import { zipSync, unzipSync } from "fflate";
 /**
  * Fixed epoch mtime for deterministic zip output.
- * All entries get this timestamp so byte-identical inputs → byte-identical zips.
+ *
+ * fflate reads mtime via local-time getters (getFullYear/getMonth/...) and rejects
+ * years before 1980. Date.UTC(1980, 0, 1) becomes 1979-12-31 in any TZ west of UTC,
+ * which both crashes the encoder and (where it doesn't crash) produces TZ-dependent
+ * bytes. Using the local-time constructor anchors the components to 1980-01-01
+ * 00:00:00 in *every* timezone, so the DOS timestamp written into the zip header
+ * is always identical.
  */
-const ZIP_EPOCH = new Date(Date.UTC(1980, 0, 1));
+const ZIP_EPOCH = new Date(1980, 0, 1, 0, 0, 0, 0);
 /**
  * Pack a flat file map into a deterministic zip.
  * Keys are sorted before zipping so insertion order doesn't affect output.

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@quillmark/quiver",
-  "version": "0.5.0",
+  "version": "0.5.1",
   "description": "Quiver registry and build tooling for Quillmark",
   "type": "module",
   "license": "MIT",