fullbleed 0.1.2 → 0.1.4

package/README.md

@@ -4,9 +4,11 @@ Generate PDFs from static HTML and CSS in Node.js. The package includes the
 Fullbleed Rust engine compiled to WebAssembly and four font faces, so installing
 it does not require Python, Rust, a browser, or system fonts. MIT licensed.
 
-This is an optional integration around the unchanged **Fullbleed 2.5.6** engine.
-The Node package has its own version, **0.1.2**. This patch keeps synthesized-bold
-headings searchable once instead of exposing duplicate text to PDF readers.
+This is an optional integration around the published **Fullbleed 2.5.7** engine.
+The Node package has its own version, **0.1.4**. This release reduces embedded
+font metadata while preserving the retained glyph outlines, metrics, and font
+notices. See the [installed-package font checks](docs/font-subsets.md) for the
+fixtures and verification commands.
 
 ## Install and render
 
@@ -16,9 +18,9 @@ Use Node.js 22 or newer. Install the [npm package](https://www.npmjs.com/package
 npm install fullbleed
 ```
 
-For a version-pinned installation, use `npm install --save-exact fullbleed@0.1.2`.
+For a version-pinned installation, use `npm install --save-exact fullbleed@0.1.4`.
 The npm tarball is byte-identical to the verified
-[GitHub release](https://github.com/fullbleed-engine/fullbleed-node/releases/tag/v0.1.2).
+[GitHub release](https://github.com/fullbleed-engine/fullbleed-node/releases/tag/v0.1.4).
 See the [installation verification records](https://github.com/fullbleed-engine/fullbleed-node/tree/main/verification).
 
 Save this as `invoice.mjs` and run `node invoice.mjs`:
@@ -121,7 +123,12 @@ native engine.
 | `allowMissingGlyphs` | Default `false`: reject engine-reported missing glyphs. |
 
 Rendering runs in a dedicated worker. Concurrent calls use separate workers and
-document state. Bound concurrency in a server according to its available memory;
+document state. The returned promise waits for that worker to exit on success,
+render failure, timeout, or cancellation. Awaiting jobs in sequence therefore
+does not overlap their worker lifetimes. A timeout or abort starts termination;
+settlement includes the time needed to stop the worker.
+
+Bound concurrency in a server according to its available memory;
 each worker's WebAssembly memory has a 512 MiB ceiling. HTML and CSS together are
 limited to 4,000,000 UTF-8 bytes; supplied fonts and assets together to 64 MiB.
 Preview images can use substantially more memory than PDF-only rendering.
@@ -158,8 +165,8 @@ arbitrary browser pages.
 ## Build and verify from source
 
 Contributors need Node.js 22+ and Rust 1.97.0 with the WASI target. The independent
-PDF text check also uses Python with the test-only `pypdf==6.19.0` reader. Package
-users do not need a compiler or Python. Dependencies are pinned in both lockfiles.
+PDF checks also use Python with the test-only readers listed below. Package users
+do not need a compiler or Python. Dependencies are pinned in both lockfiles.
 
 ```bash
 rustup target add wasm32-wasip1
@@ -169,8 +176,10 @@ npm test
 npm run check:types
 npm run verify:native
 npm run verify:pack
-python -m pip install pypdf==6.19.0
+python -m pip install pypdf==6.19.0 pypdfium2==5.14.0 fonttools==4.65.0 pillow==12.3.0
 npm run verify:text
+npm run render:fonts
+npm run verify:fonts
 ```
 
 The build records engine metadata, licenses, and artifact hashes in `dist/`.
@@ -179,6 +188,16 @@ fonts, and image assets; compares native and WebAssembly PDF/PNG bytes; checks
 error recovery; and installs the packed tarball into a separate directory with
 spaces in its path. CI exercises Node 22, 24, and 26 on Windows, Linux, and macOS.
 Retained release evidence describes the verified fixtures and scope.
+The font check reads PDFs from the isolated tarball installation, checks the
+embedded TrueType programs against their source fonts, and compares two
+independent text readers. CI also compares text and native/PDFium pixels with
+the previous public npm release.
+
+An intermittent process crash observed on Linux with Node 24.21.0 remains under
+investigation in [issue #7](https://github.com/fullbleed-engine/fullbleed-node/issues/7).
+Version 0.1.3 fixes worker shutdown timing, but does not establish that this crash
+is resolved. See the [runtime investigation and diagnostic](docs/runtime-diagnostics.md)
+for the observed scope, retained results, and a synthetic reproducer.
 
 ## License and support
 

package/dist/THIRD_PARTY_NOTICES.txt

@@ -1,4 +1,4 @@
-fullbleed 2.5.6 / LICENSE
+fullbleed 2.5.7 / LICENSE
 
 MIT License
 
@@ -23,7 +23,7 @@ OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
 SOFTWARE.
 
 
-fullbleed 2.5.6 / THIRD_PARTY_LICENSES.md
+fullbleed 2.5.7 / THIRD_PARTY_LICENSES.md
 
 <!-- SPDX-License-Identifier: MIT -->
 # Third-Party Licenses

package/dist/build.json

@@ -1,7 +1,7 @@
 {
-  "packageVersion": "0.1.2",
-  "engineVersion": "2.5.6",
-  "engineSource": "https://crates.io/crates/fullbleed/2.5.6",
+  "packageVersion": "0.1.4",
+  "engineVersion": "2.5.7",
+  "engineSource": "https://crates.io/crates/fullbleed/2.5.7",
   "target": "wasm32-wasip1",
   "memoryMaximumBytes": 536870912,
   "fonts": [
@@ -13,7 +13,7 @@
   "dependencies": [
     {
       "name": "fullbleed",
-      "version": "2.5.6",
+      "version": "2.5.7",
       "source": "registry+https://github.com/rust-lang/crates.io-index",
       "license": "MIT"
     },
@@ -44,12 +44,12 @@
   ],
   "files": {
     "dist/engine.wasm": {
-      "bytes": 5053312,
-      "sha256": "2e9c27d67f21483df2e9e63414346eb01170ae5a8ba4a04f48c0a7d647a577a6"
+      "bytes": 5064368,
+      "sha256": "3b5b0200268264b947f7b5bdc658a2d32d9fd160b8652f0ee6834e5296db9abb"
     },
     "dist/THIRD_PARTY_NOTICES.txt": {
       "bytes": 57660,
-      "sha256": "4a945a683c5f4be6a4c74b59f45aa1f5e6627022a80addddb6eaf68ed3916d9f"
+      "sha256": "90c2828609b2a61323dfd97564a023123e38e1df7c9e9a9db0a29bb12aad1438"
     },
     "assets/fonts/BebasNeue-OFL.txt": {
       "bytes": 4337,

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "fullbleed",
-  "version": "0.1.2",
+  "version": "0.1.4",
   "description": "Generate PDFs from HTML and CSS in Node.js with the Fullbleed Rust engine, bundled fonts, and optional PNG previews.",
   "type": "module",
   "main": "./src/index.cjs",
@@ -35,7 +35,9 @@
     "verify:native": "node tools/verify-native.mjs",
     "example": "node examples/invoice.mjs",
     "verify:pack": "node tools/verify-pack.mjs",
-    "verify:text": "python tools/verify-installed-text.py"
+    "verify:text": "python tools/verify-installed-text.py",
+    "render:fonts": "node tools/render-font-subsets.mjs",
+    "verify:fonts": "python tools/verify-font-subsets.py"
   },
   "dependencies": {
     "@bjorn3/browser_wasi_shim": "0.4.2"
@@ -63,7 +65,7 @@
     "access": "public"
   },
   "fullbleed": {
-    "engineVersion": "2.5.6"
+    "engineVersion": "2.5.7"
   },
   "devDependencies": {
     "@types/node": "22.20.5",

package/src/index.cjs

@@ -87,13 +87,20 @@ async function renderPdf(options) {
   if (remaining <= 0) throw new FullbleedError('TIMEOUT', `PDF rendering exceeded ${job.timeoutMs} ms.`);
   return new Promise((resolve, reject) => {
     let worker, timer, settled = false;
-    const finish = (error, result) => {
+    const finish = async (error, result) => {
       if (settled) return;
       settled = true;
       clearTimeout(timer);
       job.signal?.removeEventListener('abort', abort);
-      const termination = worker?.terminate();
-      if (termination) termination.catch(() => {});
+      // A process 'worker' listener can abort synchronously inside the Worker
+      // constructor. Let that constructor assign its handle before cleanup.
+      await Promise.resolve();
+      try {
+        await worker?.terminate();
+      } catch (cause) {
+        reject(new FullbleedError('WORKER_FAILED', 'Could not stop the rendering worker.', { cause }));
+        return;
+      }
       if (error) reject(error); else resolve(result);
     };
     const abort = () => finish(aborted());