dexie-cloud-addon 4.4.7 → 4.4.8

package/dist/modern/service-worker.js

@@ -8,7 +8,7 @@
  *
  * ==========================================================================
  *
- * Version 4.4.7, Fri Mar 27 2026
+ * Version 4.4.8, Tue Mar 31 2026
  *
  * https://dexie.org
  *
@@ -3699,6 +3699,14 @@ function loadCachedAccessToken(db) {
         });
         return Promise.resolve(currentUser.accessToken);
     }
+    // If the current user is not logged in (no isLoggedIn flag), there's no
+    // token to load from the database — skip the Dexie.ignoreTransaction() call.
+    // This avoids a crash in service worker context where Dexie's Promise zone
+    // (PSD.transless.env) may be undefined when called from within an active
+    // rw transaction (e.g. during applyServerChanges).
+    if (!(currentUser === null || currentUser === void 0 ? void 0 : currentUser.isLoggedIn)) {
+        return Promise.resolve(null);
+    }
     return Dexie.ignoreTransaction(() => loadAccessToken(db).then((user) => {
         var _a, _b;
         if (user === null || user === void 0 ? void 0 : user.accessToken) {
@@ -4280,8 +4288,9 @@ class BlobDownloadTracker {
         if (!promise) {
             promise = loadCachedAccessToken(this.db)
                 .then((accessToken) => {
-                if (!accessToken)
-                    throw new Error('No access token available for blob download');
+                // accessToken may be null for anonymous/unauthenticated users.
+                // Public realm blobs (rlm-public) are accessible without auth.
+                // downloadBlob will omit the Authorization header when token is null.
                 return downloadBlob(blobRef, dbUrl, accessToken);
             })
                 .finally(() => this.inFlight.delete(blobRef.ref));
@@ -4294,19 +4303,22 @@ class BlobDownloadTracker {
 /**
  * Download blob data from server via proxy endpoint.
  * Uses auth header for authentication (same as sync).
+ * When accessToken is null, the request is made without Authorization header —
+ * this allows downloading blobs from public realms (rlm-public) for
+ * unauthenticated users.
  *
  * @param blobRef - The BlobRef to download
  * @param dbUrl - Base URL for the database (e.g., 'https://mydb.dexie.cloud')
- * @param accessToken - Access token for authentication
+ * @param accessToken - Access token for authentication, or null for anonymous access
  */
 function downloadBlob(blobRef, dbUrl, accessToken) {
     return __awaiter(this, void 0, void 0, function* () {
         const downloadUrl = `${dbUrl}/blob/${blobRef.ref}`;
-        const response = yield fetch(downloadUrl, {
-            headers: {
-                Authorization: `Bearer ${accessToken}`,
-            },
-        });
+        const headers = {};
+        if (accessToken) {
+            headers['Authorization'] = `Bearer ${accessToken}`;
+        }
+        const response = yield fetch(downloadUrl, { headers });
         if (!response.ok) {
             throw new Error(`Failed to download blob ${blobRef.ref}: ${response.status} ${response.statusText}`);
         }
@@ -8317,7 +8329,7 @@ function dexieCloud(dexie) {
     const downloading$ = createDownloadingState();
     dexie.cloud = {
         // @ts-ignore
-        version: "4.4.7",
+        version: "4.4.8",
         options: Object.assign({}, DEFAULT_OPTIONS),
         schema: null,
         get currentUserId() {
@@ -8753,7 +8765,7 @@ function dexieCloud(dexie) {
     }
 }
 // @ts-ignore
-dexieCloud.version = "4.4.7";
+dexieCloud.version = "4.4.8";
 Dexie.Cloud = dexieCloud;
 
 // In case the SW lives for a while, let it reuse already opened connections: