@symbo.ls/utils 3.14.742 → 3.14.756

package/CHANGELOG.md

@@ -1,6 +1,12 @@
 # @symbo.ls/utils
 
-## 3.14.742
+## 3.14.756
+
+### Patch Changes
+
+- Auto-generated cross-repo patch release.
+
+## 3.14.743
 
 ### Patch Changes
 

package/cdn.js

@@ -61,15 +61,72 @@ export const getCdnProviderFromConfig = (symbolsConfig = {}) => {
   return PACKAGE_MANAGER_TO_CDN[packageManager] || null
 }
 
+// npm-style caret/tilde RANGE prefixes (`^6.0.1`, `~6.0.1`) resolve to a
+// single concrete version once the operator is dropped — but every
+// CDN_PROVIDERS.formatUrl above concatenates `@${version}` into a URL path
+// segment VERBATIM, with zero awareness of npm range syntax. A raw,
+// unstripped `^6.0.1` observed live (system--workspace-ui.at.symbo.ls,
+// 2026-08-10 probe — tickets/opus.md "P1 Monaco retry loop / P1 prismjs+
+// fuse.js", same importmap family) produced `.../codemirror@^6.0.1`, which
+// esm.sh resolved to a build lacking codemirror 6's `basicSetup` export —
+// `SyntaxError: The requested module '/codemirror@^6.0.1...' does not
+// provide an export named 'basicSetup'` — an uncaught page error that
+// survived SPA navigation to an unrelated route. Only the two common
+// npm-default prefixes are stripped; anything else (compound ranges,
+// `x`/`*` wildcards, dist-tags like `next`) is left exactly as declared —
+// this fixes the concretely observed failure mode without guessing at CDN
+// behavior for shapes nobody has reported.
+export const stripVersionRangePrefix = (version) => {
+  if (typeof version !== 'string') return version
+  const m = version.trim().match(/^[\^~](\d.*)$/)
+  return m ? m[1] : version
+}
+
 export const getCDNUrl = (
   packageName,
   version = 'latest',
   provider = 'esmsh'
 ) => {
   const cdnConfig = CDN_PROVIDERS[provider] || CDN_PROVIDERS.esmsh
-  return cdnConfig.formatUrl(packageName, version)
+  return cdnConfig.formatUrl(packageName, stripVersionRangePrefix(version))
 }
 
+// SMBLS-IMPORTMAP-SKIP — shared with packages/smbls/src/prepare.js's own
+// client-side loader (fc660da57, tickets/opus.md "runtime importmap loader
+// burns ~25-40s retrying unresolvable specifiers"). That fix only covers
+// prepareDependencies()'s EAGER boot-time fetch loop; it never touches
+// `getImportMapScript` below, which builds the `<script type="importmap">`
+// HTML embedded directly into SSR'd project pages. Live-reproduced
+// 2026-08-10 on system--workspace-ui.at.symbo.ls: frank-compiled `await
+// import('@symbo-ls/workspace-shared/functions/*.js')` calls resolve
+// through THIS importmap — a completely separate resolution path from
+// prepareDependencies() — so permanently-unresolvable specifiers kept
+// round-tripping esm.sh (404) then pkg.symbo.ls (502) on every LAZY `await
+// import(...)` regardless of whether the client-side loader fix is live.
+// Same two shapes as prepare.js's `UNRESOLVABLE_DEP_RE`:
+//   - `node:*`      — a Node.js builtin protocol; there is no CDN URL for it.
+//   - `@symbo-ls/*` — the GitHub Packages private-registry scope; an
+//     anonymous browser fetch has no auth header to send, so this 404s by
+//     construction, every time.
+const UNRESOLVABLE_DEP_RE = /^node:|^@symbo-ls\//
+
+export const isUnresolvableDependency = (name) =>
+  typeof name === 'string' && UNRESOLVABLE_DEP_RE.test(name)
+
+// A DIFFERENT failure mode: a template placeholder that never got
+// interpolated before landing in a project's `dependencies` (e.g.
+// `<shared>/functions/diagnoseAuth.js`, `…/aiService.js` — both observed
+// live). `<`/`>`/the horizontal-ellipsis character can never appear in a
+// real npm specifier or URL path segment. Unlike the two cases above this
+// ISN'T expected-by-design — it's a bug upstream of this function (most
+// likely frank's free-var → `importPath` classification) — so callers that
+// distinguish "silently skip" from "skip and warn" can do so via this
+// separate predicate.
+const MALFORMED_DEP_RE = /[<>…]/
+
+export const isMalformedDependency = (name) =>
+  typeof name === 'string' && MALFORMED_DEP_RE.test(name)
+
 /**
  * Generate an HTML <script type="importmap"> tag from project dependencies.
  *
@@ -106,9 +163,17 @@ export const getImportMapScript = (
   const pin = options.pin || {}
   const imports = {}
   for (const pkgName of keys) {
+    // See SMBLS-IMPORTMAP-SKIP above — these can never resolve from an
+    // anonymous browser fetch (or are a bug upstream of this function), so
+    // omit them entirely instead of shipping a URL that always 404s/502s.
+    // A bare `import()` for an omitted specifier still fails when the code
+    // that needs it actually runs — but it fails FAST, at resolution time
+    // with zero network round trips, instead of after two doomed requests.
+    if (isUnresolvableDependency(pkgName) || isMalformedDependency(pkgName)) continue
     const version = pin[pkgName] || dependencies[pkgName] || 'latest'
     imports[pkgName] = getCDNUrl(pkgName, version, defaultProvider)
   }
+  if (!Object.keys(imports).length) return ''
 
   const openTag = '<script type="importmap">'
   const closeTag = '</' + 'script>'

package/dist/cjs/cdn.js

@@ -1,3 +1,3 @@
-"use strict";var p=Object.defineProperty;var d=Object.getOwnPropertyDescriptor;var y=Object.getOwnPropertyNames;var f=Object.prototype.hasOwnProperty;var h=(t,s)=>{for(var e in s)p(t,e,{get:s[e],enumerable:!0})},C=(t,s,e,n)=>{if(s&&typeof s=="object"||typeof s=="function")for(let r of y(s))!f.call(t,r)&&r!==e&&p(t,r,{get:()=>s[r],enumerable:!(n=d(s,r))||n.enumerable});return t};var b=t=>C(p({},"__esModule",{value:!0}),t);var N={};h(N,{CDN_PROVIDERS:()=>o,PACKAGE_MANAGER_TO_CDN:()=>m,getCDNUrl:()=>a,getCdnProviderFromConfig:()=>U,getImportMapScript:()=>j});module.exports=b(N);const o={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${o.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${o.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${o.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${o.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>`${o.symbols.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`}},m={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},U=(t={})=>{const{packageManager:s}=t;return m[s]||null},a=(t,s="latest",e="esmsh")=>(o[e]||o.esmsh).formatUrl(t,s),j=(t,s="skypack",e={})=>{const n=t.dependencies||{},r=Object.keys(n);if(!r.length)return"";const $=e.pin||{},c={};for(const l of r){const i=$[l]||n[l]||"latest";c[l]=a(l,i,s)}const k='<script type="importmap">',u="<\/script>",g=`{
+"use strict";var l=Object.defineProperty;var h=Object.getOwnPropertyDescriptor;var b=Object.getOwnPropertyNames;var E=Object.prototype.hasOwnProperty;var x=(t,s)=>{for(var e in s)l(t,e,{get:s[e],enumerable:!0})},D=(t,s,e,o)=>{if(s&&typeof s=="object"||typeof s=="function")for(let r of b(s))!E.call(t,r)&&r!==e&&l(t,r,{get:()=>s[r],enumerable:!(o=h(s,r))||o.enumerable});return t};var U=t=>D(l({},"__esModule",{value:!0}),t);var N={};x(N,{CDN_PROVIDERS:()=>n,PACKAGE_MANAGER_TO_CDN:()=>m,getCDNUrl:()=>i,getCdnProviderFromConfig:()=>C,getImportMapScript:()=>j,isMalformedDependency:()=>g,isUnresolvableDependency:()=>u,stripVersionRangePrefix:()=>a});module.exports=U(N);const n={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${n.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${n.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${n.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${n.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>`${n.symbols.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`}},m={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},C=(t={})=>{const{packageManager:s}=t;return m[s]||null},a=t=>{if(typeof t!="string")return t;const s=t.trim().match(/^[\^~](\d.*)$/);return s?s[1]:t},i=(t,s="latest",e="esmsh")=>(n[e]||n.esmsh).formatUrl(t,a(s)),R=/^node:|^@symbo-ls\//,u=t=>typeof t=="string"&&R.test(t),_=/[<>…]/,g=t=>typeof t=="string"&&_.test(t),j=(t,s="skypack",e={})=>{const o=t.dependencies||{},r=Object.keys(o);if(!r.length)return"";const $=e.pin||{},c={};for(const p of r){if(u(p)||g(p))continue;const f=$[p]||o[p]||"latest";c[p]=i(p,f,s)}if(!Object.keys(c).length)return"";const k='<script type="importmap">',d="<\/script>",y=`{
     "imports": ${JSON.stringify(c,null,2)}
-  }`;return`${k}${g}${u}`};
+  }`;return`${k}${y}${d}`};

package/dist/esm/cdn.js

@@ -1,3 +1,3 @@
-const e={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${e.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${e.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${e.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${e.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>`${e.symbols.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`}},u={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},i=(t={})=>{const{packageManager:s}=t;return u[s]||null},g=(t,s="latest",o="esmsh")=>(e[o]||e.esmsh).formatUrl(t,s),d=(t,s="skypack",o={})=>{const n=t.dependencies||{},l=Object.keys(n);if(!l.length)return"";const c=o.pin||{},p={};for(const r of l){const k=c[r]||n[r]||"latest";p[r]=g(r,k,s)}const m='<script type="importmap">',a="<\/script>",$=`{
+const e={skypack:{url:"https://cdn.skypack.dev",formatUrl:(t,s)=>`${e.skypack.url}/${t}${s!=="latest"?`@${s}`:""}`},esmsh:{url:"https://esm.sh",formatUrl:(t,s)=>`${e.esmsh.url}/${t}${s!=="latest"?`@${s}`:""}`},unpkg:{url:"https://unpkg.com",formatUrl:(t,s)=>`${e.unpkg.url}/${t}${s!=="latest"?`@${s}`:""}?module`},jsdelivr:{url:"https://cdn.jsdelivr.net/npm",formatUrl:(t,s)=>`${e.jsdelivr.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`},symbols:{url:"https://pkg.symbo.ls",formatUrl:(t,s)=>`${e.symbols.url}/${t}${s!=="latest"?`@${s}`:""}/+esm`}},g={"esm.sh":"esmsh",unpkg:"unpkg",skypack:"skypack",jsdelivr:"jsdelivr","pkg.symbo.ls":"symbols"},b=(t={})=>{const{packageManager:s}=t;return g[s]||null},$=t=>{if(typeof t!="string")return t;const s=t.trim().match(/^[\^~](\d.*)$/);return s?s[1]:t},k=(t,s="latest",n="esmsh")=>(e[n]||e.esmsh).formatUrl(t,$(s)),d=/^node:|^@symbo-ls\//,y=t=>typeof t=="string"&&d.test(t),f=/[<>…]/,h=t=>typeof t=="string"&&f.test(t),E=(t,s="skypack",n={})=>{const o=t.dependencies||{},c=Object.keys(o);if(!c.length)return"";const l=n.pin||{},p={};for(const r of c){if(y(r)||h(r))continue;const u=l[r]||o[r]||"latest";p[r]=k(r,u,s)}if(!Object.keys(p).length)return"";const m='<script type="importmap">',a="<\/script>",i=`{
     "imports": ${JSON.stringify(p,null,2)}
-  }`;return`${m}${$}${a}`};export{e as CDN_PROVIDERS,u as PACKAGE_MANAGER_TO_CDN,g as getCDNUrl,i as getCdnProviderFromConfig,d as getImportMapScript};
+  }`;return`${m}${i}${a}`};export{e as CDN_PROVIDERS,g as PACKAGE_MANAGER_TO_CDN,k as getCDNUrl,b as getCdnProviderFromConfig,E as getImportMapScript,h as isMalformedDependency,y as isUnresolvableDependency,$ as stripVersionRangePrefix};

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@symbo.ls/utils",
-  "version": "3.14.742",
+  "version": "3.14.756",
   "license": "CC-BY-NC-4.0",
   "type": "module",
   "module": "./dist/esm/index.js",