dsh-unlag 1.9.74 → 1.9.76

package/client.js

@@ -287,9 +287,17 @@ window.__ModuleLoader__.load({
       const covered = new Set();
       const sources = [];
       for (const batch of batches) {
-        const url = typeof batch?.url === 'string' ? batch.url : '';
+        // A batch is read field by field: the list can be the page's own boot object, and a batch
+        // whose fields cannot be read leaves that address unproven rather than the page broken.
+        let url = '';
+        let listed = [];
+        try {
+          url = typeof batch?.url === 'string' ? batch.url : '';
+          listed = Array.isArray(batch?.entries) && batch.entries.every((id) => typeof id === 'string') ? batch.entries : [];
+        } catch {
+          return held('row');
+        }
         if (url === '') continue;
-        const listed = Array.isArray(batch.entries) && batch.entries.every((id) => typeof id === 'string') ? batch.entries : [];
         const ids = listed.length > 0 ? listed : bundledIds(url);
         if (ids.length === 0) return held('row');
         let resolved = null;
@@ -303,7 +311,12 @@ window.__ModuleLoader__.load({
       }
       if (sources.length === 0) return held('graph');
       for (const entry of entries) {
-        const id = typeof entry === 'string' ? entry : entry?.id;
+        let id = '';
+        try {
+          id = typeof entry === 'string' ? entry : entry?.id;
+        } catch {
+          return held('covers');
+        }
         if (typeof id !== 'string' || !covered.has(id)) return held('covers');
       }
       // Reading these bodies here would need a parser the page does not have and would not prove
@@ -400,8 +413,27 @@ window.__ModuleLoader__.load({
         // The frozen list decides what this document boots. Without the current plugin list there
         // is nothing to prove every plugin in it still exists, so the page is not rebuilt.
         if (live === null) return held('graph');
-        const kept = Array.isArray(frozen.entries) ? frozen.entries : [];
-        const liveIds = new Set((Array.isArray(live.entries) ? live.entries : []).map((entry) => (typeof entry === 'string' ? entry : entry?.id)));
+        // Both lists come from outside this function: the saved one from the shell, the current one
+        // from the app. One that cannot be read leaves the comparison unanswered, and each names
+        // itself rather than the page.
+        let kept = [];
+        try {
+          kept = Array.isArray(frozen.entries) ? frozen.entries : [];
+        } catch {
+          return held('list');
+        }
+        let liveEntries = [];
+        try {
+          liveEntries = Array.isArray(live.entries) ? live.entries : [];
+        } catch {
+          return held('graph');
+        }
+        const liveIds = new Set();
+        try {
+          for (const entry of liveEntries) liveIds.add(typeof entry === 'string' ? entry : entry?.id);
+        } catch {
+          return held('graph');
+        }
         let vanished = false;
         for (const entry of kept) {
           const id = typeof entry === 'string' ? entry : entry?.id;

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "dsh-unlag",
-  "version": "1.9.74",
+  "version": "1.9.76",
   "type": "module",
   "description": "A press applies plugin edits right away and brings a laggy interface back; automatic reloading stays off unless you turn it on, so the press is the only trigger, and nothing restarts.",
   "license": "MIT",