dexie-cloud-addon 4.4.7 → 4.4.8

package/dist/umd/service-worker.js

@@ -8,7 +8,7 @@
  *
  * ==========================================================================
  *
- * Version 4.4.7, Fri Mar 27 2026
+ * Version 4.4.8, Tue Mar 31 2026
  *
  * https://dexie.org
  *
@@ -13623,7 +13623,7 @@
      *
      * ==========================================================================
      *
-     * Version 4.4.0, Fri Mar 27 2026
+     * Version 4.4.0, Tue Mar 31 2026
      *
      * https://dexie.org
      *
@@ -14667,6 +14667,14 @@
             });
             return Promise.resolve(currentUser.accessToken);
         }
+        // If the current user is not logged in (no isLoggedIn flag), there's no
+        // token to load from the database — skip the Dexie.ignoreTransaction() call.
+        // This avoids a crash in service worker context where Dexie's Promise zone
+        // (PSD.transless.env) may be undefined when called from within an active
+        // rw transaction (e.g. during applyServerChanges).
+        if (!(currentUser === null || currentUser === void 0 ? void 0 : currentUser.isLoggedIn)) {
+            return Promise.resolve(null);
+        }
         return Dexie.ignoreTransaction(() => loadAccessToken(db).then((user) => {
             var _a, _b;
             if (user === null || user === void 0 ? void 0 : user.accessToken) {
@@ -15248,8 +15256,9 @@
             if (!promise) {
                 promise = loadCachedAccessToken(this.db)
                     .then((accessToken) => {
-                    if (!accessToken)
-                        throw new Error('No access token available for blob download');
+                    // accessToken may be null for anonymous/unauthenticated users.
+                    // Public realm blobs (rlm-public) are accessible without auth.
+                    // downloadBlob will omit the Authorization header when token is null.
                     return downloadBlob(blobRef, dbUrl, accessToken);
                 })
                     .finally(() => this.inFlight.delete(blobRef.ref));
@@ -15262,19 +15271,22 @@
     /**
      * Download blob data from server via proxy endpoint.
      * Uses auth header for authentication (same as sync).
+     * When accessToken is null, the request is made without Authorization header —
+     * this allows downloading blobs from public realms (rlm-public) for
+     * unauthenticated users.
      *
      * @param blobRef - The BlobRef to download
      * @param dbUrl - Base URL for the database (e.g., 'https://mydb.dexie.cloud')
-     * @param accessToken - Access token for authentication
+     * @param accessToken - Access token for authentication, or null for anonymous access
      */
     function downloadBlob(blobRef, dbUrl, accessToken) {
         return __awaiter(this, void 0, void 0, function* () {
             const downloadUrl = `${dbUrl}/blob/${blobRef.ref}`;
-            const response = yield fetch(downloadUrl, {
-                headers: {
-                    Authorization: `Bearer ${accessToken}`,
-                },
-            });
+            const headers = {};
+            if (accessToken) {
+                headers['Authorization'] = `Bearer ${accessToken}`;
+            }
+            const response = yield fetch(downloadUrl, { headers });
             if (!response.ok) {
                 throw new Error(`Failed to download blob ${blobRef.ref}: ${response.status} ${response.statusText}`);
             }
@@ -19547,7 +19559,7 @@
         const downloading$ = createDownloadingState();
         dexie.cloud = {
             // @ts-ignore
-            version: "4.4.7",
+            version: "4.4.8",
             options: Object.assign({}, DEFAULT_OPTIONS),
             schema: null,
             get currentUserId() {
@@ -19983,7 +19995,7 @@
         }
     }
     // @ts-ignore
-    dexieCloud.version = "4.4.7";
+    dexieCloud.version = "4.4.8";
     Dexie.Cloud = dexieCloud;
 
     // In case the SW lives for a while, let it reuse already opened connections: