inline-core 1.2.73__tar.gz → 1.2.74__tar.gz

{inline_core-1.2.73 → inline_core-1.2.74}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.5
 Name: inline-core
-Version: 1.2.73
+Version: 1.2.74
 Summary: The generation engine behind Inline Studio.
 License-Expression: GPL-3.0-or-later
 Requires-Python: >=3.11

{inline_core-1.2.73 → inline_core-1.2.74}/pyproject.toml

@@ -1,7 +1,7 @@
 [project]
 # PyPI name; the import package is `inline_core` (src/inline_core).
 name = "inline-core"
-version = "1.2.73"
+version = "1.2.74"
 description = "The generation engine behind Inline Studio."
 readme = "README.md"
 license = "GPL-3.0-or-later"

{inline_core-1.2.73 → inline_core-1.2.74}/src/inline_core/server/app.py

@@ -6,6 +6,7 @@ import asyncio
 import hashlib
 import json
 import logging
+import mimetypes
 import os
 import re
 import tempfile
@@ -112,6 +113,27 @@ def _version(registry: Registry, catalog: ModelCatalog) -> str:
     return f"r_{hashlib.sha256(payload.encode()).hexdigest()[:8]}"
 
 
+# The SPA's content types, pinned rather than asked of the host - see _pin_web_mime_types.
+_WEB_MIME_TYPES = (
+    (".js", "text/javascript"),
+    (".mjs", "text/javascript"),
+    (".css", "text/css"),
+    (".json", "application/json"),
+    (".map", "application/json"),
+    (".svg", "image/svg+xml"),
+    (".wasm", "application/wasm"),
+    (".woff2", "font/woff2"),
+)
+
+
+def _pin_web_mime_types() -> None:
+    """A clean Windows install sets HKCR\\.js = text/plain and Python lets that registry value
+    override its own table, so the SPA's ES modules ship as text/plain and no browser executes
+    them - a blank page. add_type runs after the registry read, so these win."""
+    for ext, mime in _WEB_MIME_TYPES:
+        mimetypes.add_type(mime, ext)
+
+
 def create_app(
     registry: Registry | None = None,
     cache: NodeCache | None = None,
@@ -128,6 +150,7 @@ def create_app(
 ) -> FastAPI:
     _setup_app_logging()
     _quiet_access_log()
+    _pin_web_mime_types()
     registry = registry or build_default_registry()
     cache = cache or InMemoryCache()
     policy = policy or MemoryPolicy()

{inline_core-1.2.73 → inline_core-1.2.74}/tests/test_frontend_serving.py

@@ -4,13 +4,15 @@ the /v1 API still winning. No torch/models needed."""
 from __future__ import annotations
 
 import builtins
+import mimetypes
 import sys
 import types
 from pathlib import Path
 
+import pytest
 from fastapi.testclient import TestClient
 
-from inline_core.server.app import create_app
+from inline_core.server.app import _WEB_MIME_TYPES, create_app
 from inline_core.server.frontend import resolve_frontend_root
 
 
@@ -109,3 +111,29 @@ def test_no_mount_when_frontend_root_is_none(tmp_path):
     with TestClient(app) as client:
         assert client.get("/v1/health").status_code == 200
         assert client.get("/").status_code == 404  # API only, no SPA
+
+
+@pytest.fixture
+def hostile_host_mime_table():
+    mimetypes.init()  # rebind the module globals the way first use does, then poison them
+    for ext, _ in _WEB_MIME_TYPES:
+        mimetypes.add_type("text/plain", ext)
+    try:
+        yield
+    finally:
+        mimetypes.init()
+
+
+def test_serves_js_as_javascript_when_the_host_table_is_wrong(tmp_path, hostile_host_mime_table):
+    root = _spa(tmp_path)
+    app = create_app(frontend_root=str(root))
+    with TestClient(app) as client:
+        asset = client.get("/assets/index-abc123.js")
+    # text/plain here blocks the ES module outright and the app renders a blank page.
+    assert asset.headers["content-type"].split(";")[0] == "text/javascript"
+
+
+def test_create_app_pins_every_web_mime_type(tmp_path, hostile_host_mime_table):
+    create_app(frontend_root=str(_spa(tmp_path)))
+    for ext, mime in _WEB_MIME_TYPES:
+        assert mimetypes.guess_type(f"asset{ext}")[0] == mime

{inline_core-1.2.73 → inline_core-1.2.74}/uv.lock

@@ -610,7 +610,7 @@ wheels = [
 
 [[package]]
 name = "inline-core"
-version = "1.2.70"
+version = "1.2.74"
 source = { editable = "." }
 dependencies = [
     { name = "numpy", version = "2.4.6", source = { registry = "https://pypi.org/simple" }, marker = "python_full_version < '3.12'" },