minimojs 1.0.0-alpha.31 → 1.0.0-alpha.32

package/dist/internal/AssetSystem.js

@@ -255,10 +255,18 @@ export class AssetSystem {
             throw new Error(`MinimoJS: ${caller} cannot use the key "${safeKey}", which an asset file declares. Keys must be unique in the whole game.`);
         }
     }
-    /** @internal */
+    /**
+     * Loads one image with a CORS request, as `fetch` loads sounds, so an image
+     * from another origin never taints the canvas and the game can still read
+     * its pixels or export it. A host that does not answer with CORS fails the
+     * image instead.
+     *
+     * @internal
+     */
     loadImage(src) {
         return new Promise((resolve, reject) => {
             const image = new Image();
+            image.crossOrigin = "anonymous";
             image.onload = () => resolve(image);
             image.onerror = () => {
                 reject(new Error(`MinimoJS: Failed to load image "${src}".`));

package/dist/minimo.d.ts

@@ -1534,6 +1534,10 @@ export declare class Game {
      * `loadImage` may only be called from within {@link Game.onPreload} or a
      * scene's {@link IScene.onPreload}.
      *
+     * Images are requested with CORS, as sounds are, so the canvas stays
+     * readable and exportable. An image on another origin loads only when its
+     * host answers with CORS headers.
+     *
      * @param key - Stable key used later by {@link BackgroundLayer.imageKey} or {@link Game.getImage}.
      * @param src - Image URL or relative path.
      *

package/dist/minimo.js

@@ -1682,6 +1682,10 @@ export class Game {
      * `loadImage` may only be called from within {@link Game.onPreload} or a
      * scene's {@link IScene.onPreload}.
      *
+     * Images are requested with CORS, as sounds are, so the canvas stays
+     * readable and exportable. An image on another origin loads only when its
+     * host answers with CORS headers.
+     *
      * @param key - Stable key used later by {@link BackgroundLayer.imageKey} or {@link Game.getImage}.
      * @param src - Image URL or relative path.
      *

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "minimojs",
-  "version": "1.0.0-alpha.31",
+  "version": "1.0.0-alpha.32",
   "description": "MinimoJS v1 — ultra-minimal, flat, deterministic 2D web game engine. Image-first sprites with emoji as a zero-asset alternative, rAF loop, TypeScript-first, LLM-friendly.",
   "type": "module",
   "main": "dist/minimo.js",