ugly-app 0.1.1081 → 0.1.1082

package/dist/cli/version.d.ts

@@ -1,2 +1,2 @@
-export declare const CLI_VERSION = "0.1.1081";
+export declare const CLI_VERSION = "0.1.1082";
 //# sourceMappingURL=version.d.ts.map

package/dist/cli/version.js

@@ -1,3 +1,3 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.1081";
+export const CLI_VERSION = "0.1.1082";
 //# sourceMappingURL=version.js.map

package/dist/client/crossOriginWorker.d.ts

@@ -18,7 +18,7 @@
  * shim would hand each caller its own private worker and silently break the
  * sharing that is the entire point of the API.
  */
-/** The shim source: pull in the real script, nothing else. */
+/** Load the real script without dropping messages posted during its import. */
 export declare function workerShimSource(href: string, type: WorkerType): string;
 /**
  * Whether `scriptURL` needs the blob shim — i.e. it resolves to a different

package/dist/client/crossOriginWorker.d.ts.map

@@ -1 +1 @@
-{"version":3,"file":"crossOriginWorker.d.ts","sourceRoot":"","sources":["../../src/client/crossOriginWorker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,8DAA8D;AAC9D,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CAIvE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,GAAG,GAAG,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAST;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAsC/C"}
+{"version":3,"file":"crossOriginWorker.d.ts","sourceRoot":"","sources":["../../src/client/crossOriginWorker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,+EAA+E;AAC/E,wBAAgB,gBAAgB,CAAC,IAAI,EAAE,MAAM,EAAE,IAAI,EAAE,UAAU,GAAG,MAAM,CA0BvE;AAED;;;GAGG;AACH,wBAAgB,eAAe,CAC7B,SAAS,EAAE,MAAM,GAAG,GAAG,EACvB,MAAM,EAAE,MAAM,EACd,IAAI,EAAE,MAAM,GACX,OAAO,CAST;AAID;;;GAGG;AACH,wBAAgB,wBAAwB,IAAI,IAAI,CAsC/C"}

package/dist/client/crossOriginWorker.js

@@ -18,10 +18,32 @@
  * shim would hand each caller its own private worker and silently break the
  * sharing that is the entire point of the API.
  */
-/** The shim source: pull in the real script, nothing else. */
+/** Load the real script without dropping messages posted during its import. */
 export function workerShimSource(href, type) {
     return type === 'module'
-        ? `import ${JSON.stringify(href)};`
+        ? // WebKit rejects a static CDN import from a blob worker under COEP
+            // require-corp (even when the CDN permits CORS/CORP). A dynamic import
+            // works and preserves the module's original URL for relative imports.
+            // Unlike a static import, it yields to message delivery: hold their data, including transferred ports/buffers, until handlers are
+            // installed. Recreate events: Chromium retains stopImmediatePropagation
+            // when redispatching an original event.
+            `const pending = [];
+const hold = event => { event.stopImmediatePropagation(); pending.push(event); };
+self.addEventListener('message', hold);
+self.addEventListener('messageerror', hold);
+import(${JSON.stringify(href)}).then(() => {
+  self.removeEventListener('message', hold);
+  self.removeEventListener('messageerror', hold);
+  for (const event of pending) self.dispatchEvent(new MessageEvent(event.type, {
+    data: event.data, origin: event.origin, lastEventId: event.lastEventId, ports: event.ports,
+  }));
+  pending.length = 0;
+}, error => {
+  pending.length = 0;
+  self.removeEventListener('message', hold);
+  self.removeEventListener('messageerror', hold);
+  setTimeout(() => { throw new Error('Worker module failed to load: ' + ${JSON.stringify(href)} + ': ' + String(error)); }, 0);
+});`
         : `importScripts(${JSON.stringify(href)});`;
 }
 /**

package/dist/client/crossOriginWorker.js.map

@@ -1 +1 @@
-{"version":3,"file":"crossOriginWorker.js","sourceRoot":"","sources":["../../src/client/crossOriginWorker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,8DAA8D;AAC9D,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAgB;IAC7D,OAAO,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,UAAU,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,GAAG;QACnC,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAuB,EACvB,MAAc,EACd,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACvE,OAAO,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,SAAS;QAAE,OAAO;IACtB,MAAM,CAAC,GAAG,UAA0D,CAAC;IACrE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ;QAAE,OAAO;IAC9D,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU;QAAE,OAAO;IACtD,SAAS,GAAG,IAAI,CAAC;IAEjB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IAEjC,MAAM,iBAAkB,SAAQ,MAAM;QACpC,YAAY,SAAuB,EAAE,OAAuB;YAC1D,IAAI,OAA2B,CAAC;YAChC,IAAI,MAAM,GAAG,SAAS,CAAC;YACvB,IAAI,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,QAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAC/D,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;gBAC/D,OAAO,GAAG,GAAG,CAAC,eAAe,CAC3B,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAC7C,CAAC;gBACF,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;YACD,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,uEAAuE;gBACvE,uEAAuE;gBACvE,qCAAqC;gBACrC,MAAM,GAAG,GAAG,OAAO,CAAC;gBACpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,CAAC,SAAS,GAAG,GAAS,EAAE;oBAC1B,SAAS,EAAE,CAAC;oBACZ,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC,CAAC;YACJ,CAAC;QACH,CAAC;KACF;IAED,CAAC,CAAC,MAAM,GAAG,iBAAiB,CAAC;AAC/B,CAAC"}
+{"version":3,"file":"crossOriginWorker.js","sourceRoot":"","sources":["../../src/client/crossOriginWorker.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;GAmBG;AAOH,+EAA+E;AAC/E,MAAM,UAAU,gBAAgB,CAAC,IAAY,EAAE,IAAgB;IAC7D,OAAO,IAAI,KAAK,QAAQ;QACtB,CAAC,CAAC,mEAAmE;YACnE,uEAAuE;YACvE,sEAAsE;YACtE,kIAAkI;YAClI,wEAAwE;YACxE,wCAAwC;YACxC;;;;SAIG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;;;;;;;;;;;0EAW6C,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC;IAC1F;QACA,CAAC,CAAC,iBAAiB,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC;AAChD,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,eAAe,CAC7B,SAAuB,EACvB,MAAc,EACd,IAAY;IAEZ,IAAI,CAAC;QACH,MAAM,GAAG,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,IAAI,CAAC,CAAC;QAC7C,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO,IAAI,GAAG,CAAC,QAAQ,KAAK,OAAO;YAAE,OAAO,KAAK,CAAC;QACvE,OAAO,GAAG,CAAC,MAAM,KAAK,MAAM,CAAC;IAC/B,CAAC;IAAC,MAAM,CAAC;QACP,oEAAoE;QACpE,OAAO,KAAK,CAAC;IACf,CAAC;AACH,CAAC;AAED,IAAI,SAAS,GAAG,KAAK,CAAC;AAEtB;;;GAGG;AACH,MAAM,UAAU,wBAAwB;IACtC,IAAI,SAAS;QAAE,OAAO;IACtB,MAAM,CAAC,GAAG,UAA0D,CAAC;IACrE,MAAM,MAAM,GAAG,CAAC,CAAC,MAAM,CAAC;IACxB,IAAI,CAAC,MAAM,IAAI,OAAO,CAAC,CAAC,QAAQ,EAAE,MAAM,KAAK,QAAQ;QAAE,OAAO;IAC9D,IAAI,OAAO,GAAG,CAAC,eAAe,KAAK,UAAU;QAAE,OAAO;IACtD,SAAS,GAAG,IAAI,CAAC;IAEjB,MAAM,MAAM,GAAG,CAAC,CAAC,QAAQ,CAAC,MAAM,CAAC;IAEjC,MAAM,iBAAkB,SAAQ,MAAM;QACpC,YAAY,SAAuB,EAAE,OAAuB;YAC1D,IAAI,OAA2B,CAAC;YAChC,IAAI,MAAM,GAAG,SAAS,CAAC;YACvB,IAAI,eAAe,CAAC,SAAS,EAAE,MAAM,EAAE,CAAC,CAAC,QAAS,CAAC,IAAI,CAAC,EAAE,CAAC;gBACzD,MAAM,IAAI,GAAG,IAAI,GAAG,CAAC,MAAM,CAAC,SAAS,CAAC,EAAE,CAAC,CAAC,QAAS,CAAC,IAAI,CAAC,CAAC,IAAI,CAAC;gBAC/D,MAAM,GAAG,GAAG,gBAAgB,CAAC,IAAI,EAAE,OAAO,EAAE,IAAI,IAAI,SAAS,CAAC,CAAC;gBAC/D,OAAO,GAAG,GAAG,CAAC,eAAe,CAC3B,IAAI,IAAI,CAAC,CAAC,GAAG,CAAC,EAAE,EAAE,IAAI,EAAE,iBAAiB,EAAE,CAAC,CAC7C,CAAC;gBACF,MAAM,GAAG,OAAO,CAAC;YACnB,CAAC;YACD,KAAK,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC;YACvB,IAAI,OAAO,EAAE,CAAC;gBACZ,uEAAuE;gBACvE,uEAAuE;gBACvE,qCAAqC;gBACrC,MAAM,GAAG,GAAG,OAAO,CAAC;gBACpB,MAAM,SAAS,GAAG,IAAI,CAAC,SAAS,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;gBAC5C,IAAI,CAAC,SAAS,GAAG,GAAS,EAAE;oBAC1B,SAAS,EAAE,CAAC;oBACZ,GAAG,CAAC,eAAe,CAAC,GAAG,CAAC,CAAC;gBAC3B,CAAC,CAAC;YACJ,CAAC;QACH,CAAC;KACF;IAED,CAAC,CAAC,MAAM,GAAG,iBAAiB,CAAC;AAC/B,CAAC"}

package/package.json

@@ -1,7 +1,7 @@
 {
   "name": "ugly-app",
   "packageManager": "pnpm@10.34.5",
-  "version": "0.1.1081",
+  "version": "0.1.1082",
   "type": "module",
   "comment:files": "Allowlist what ships to npm. dist = runtime; src = sourcemap targets (dist/*.js.map reference ../../src/); templates = CLI scaffold. Everything else at repo root (.pgdata local Postgres, coverage, assets/icons sources, test/, test-results/) is excluded by omission. The !negations strip the scaffold's installed deps + cruft (templates/node_modules is 200MB+ and must never ship). package.json/README/LICENSE ship automatically.",
   "files": [
@@ -91,11 +91,12 @@
     "release:quick": "SKIP_README=1 pnpm run release",
     "test:e2e-pages": "playwright test --config playwright.e2e-pages.config.ts",
     "test:character-gpu": "node scripts/character-stage2-gpu.mjs",
-    "test:full": "pnpm run test:parity && pnpm run test:e2e-pages",
+    "test:full": "pnpm run test:parity && pnpm run test:e2e-pages && pnpm run test:cross-origin-workers",
     "test:template": "node scripts/test-template.mjs",
     "pretty": "prettier --write .",
     "lint": "ESLINT_USE_FLAT_CONFIG=true NODE_OPTIONS=--max-old-space-size=8192 eslint .",
-    "prepublishOnly": "pnpm run pretty && pnpm run lint"
+    "prepublishOnly": "pnpm run pretty && pnpm run lint",
+    "test:cross-origin-workers": "node scripts/cross-origin-worker-browser.mjs"
   },
   "dependencies": {
     "@aws-sdk/client-s3": "^3.700.0",

package/src/cli/version.ts

@@ -1,2 +1,2 @@
 // Auto-generated by prebuild — do not edit manually
-export const CLI_VERSION = "0.1.1081";
+export const CLI_VERSION = "0.1.1082";

package/src/client/crossOriginWorker.test.ts

@@ -63,9 +63,9 @@ describe('needsWorkerShim', () => {
 });
 
 describe('workerShimSource', () => {
-  it('imports for a module worker', () => {
-    expect(workerShimSource('https://cdn.example/w.js', 'module')).toBe(
-      'import "https://cdn.example/w.js";',
+  it('dynamically imports a module worker for WebKit COEP compatibility', () => {
+    expect(workerShimSource('https://cdn.example/w.js', 'module')).toContain(
+      'import("https://cdn.example/w.js")',
     );
   });
 
@@ -77,8 +77,8 @@ describe('workerShimSource', () => {
 
   // A quote or backslash in the URL must not break out of the string literal.
   it('escapes the URL rather than interpolating it raw', () => {
-    expect(workerShimSource('https://cdn.example/a"b.js', 'module')).toBe(
-      'import "https://cdn.example/a\\"b.js";',
+    expect(workerShimSource('https://cdn.example/a"b.js', 'module')).toContain(
+      'import("https://cdn.example/a\\"b.js")',
     );
   });
 });

package/src/client/crossOriginWorker.ts

@@ -24,10 +24,32 @@ interface WorkerCtor {
   prototype: Worker;
 }
 
-/** The shim source: pull in the real script, nothing else. */
+/** Load the real script without dropping messages posted during its import. */
 export function workerShimSource(href: string, type: WorkerType): string {
   return type === 'module'
-    ? `import ${JSON.stringify(href)};`
+    ? // WebKit rejects a static CDN import from a blob worker under COEP
+      // require-corp (even when the CDN permits CORS/CORP). A dynamic import
+      // works and preserves the module's original URL for relative imports.
+      // Unlike a static import, it yields to message delivery: hold their data, including transferred ports/buffers, until handlers are
+      // installed. Recreate events: Chromium retains stopImmediatePropagation
+      // when redispatching an original event.
+      `const pending = [];
+const hold = event => { event.stopImmediatePropagation(); pending.push(event); };
+self.addEventListener('message', hold);
+self.addEventListener('messageerror', hold);
+import(${JSON.stringify(href)}).then(() => {
+  self.removeEventListener('message', hold);
+  self.removeEventListener('messageerror', hold);
+  for (const event of pending) self.dispatchEvent(new MessageEvent(event.type, {
+    data: event.data, origin: event.origin, lastEventId: event.lastEventId, ports: event.ports,
+  }));
+  pending.length = 0;
+}, error => {
+  pending.length = 0;
+  self.removeEventListener('message', hold);
+  self.removeEventListener('messageerror', hold);
+  setTimeout(() => { throw new Error('Worker module failed to load: ' + ${JSON.stringify(href)} + ': ' + String(error)); }, 0);
+});`
     : `importScripts(${JSON.stringify(href)});`;
 }
 

package/src/client/index.ts

@@ -190,7 +190,10 @@ export {
   consumeLoginReturnPath,
 } from './auth/startLogin.js';
 export type { StartLoginOptions } from './auth/startLogin.js';
-export { InstallPrompt, installInstallPromptCapture } from './InstallPrompt.js';
+export {
+  InstallPrompt,
+  installInstallPromptCapture,
+} from './InstallPrompt.js';
 export { NewVersionBanner } from './NewVersionBanner.js';
 export { installStaleBuildReload } from './staleBuild.js';
 export { Link, createRouter, lazyPage, lazyPageLoader } from './Router.js';