diff --git a/deployment/cloud/admin.mjs b/deployment/cloud/admin.mjs index 3db085981..2abf630ce 100644 --- a/deployment/cloud/admin.mjs +++ b/deployment/cloud/admin.mjs @@ -42,7 +42,7 @@ const refuse = (msg) => (PUBLIC // fetch() hands back the body DECOMPRESSED, so the upstream Content-Encoding and Content-Length no longer describe // what is sent on: forwarding them made browsers try to gunzip plain HTML, and PocketBase's dashboard never rendered -// (rega, 2026-09-29). And PocketBase redirects to its own root (/_ -> /_/), which is put back under the mount (/pb/_/). +// (measured 2026-09-29). And PocketBase redirects to its own root (/_ -> /_/), which is put back under the mount (/pb/_/). // A backend path as the backend will read it: percent-decoded, runs of slashes collapsed. The admin gates run on // THIS form, so /pb/%5F/ (PocketBase decodes it to /_/) meets the same check as /pb/_/ (studio, 2026-09-29). // Encoded slashes or backslashes and undecodable input are refused: nothing legitimate sends them. diff --git a/internal/check-mapbox-drew.mjs b/internal/check-mapbox-drew.mjs index ac925643c..4d4856d5f 100644 --- a/internal/check-mapbox-drew.mjs +++ b/internal/check-mapbox-drew.mjs @@ -25,8 +25,8 @@ * owner; counting it as a pass would be false. It exits 75 NOT MEASURED instead, NAMING every * distinct blocked request path and the token's source, so the next reader can tell which * credential was in play without the gate ever printing it. - * ✗ AN EARLIER VERSION CALLED THIS "TILESET ENTITLEMENT" AND THAT WAS WRONG. Measured 2026-09-29 by - * rega on this gate's own token: /v4/ streets-v8 and country-boundaries both return 200, with no + * ✗ AN EARLIER VERSION CALLED THIS "TILESET ENTITLEMENT" AND THAT WAS WRONG. Measured 2026-09-29 with + * this gate's own token: /v4/ streets-v8 and country-boundaries both return 200, with no * Referer and from our research and maps-dev hosts, doxa.life, 127.0.0.1 and * example.com. The token is unrestricted and entitled. The old claim rested on three no-Referer * probes, which cannot distinguish a URL-restricted token from a missing entitlement. Whatever 403s @@ -102,7 +102,7 @@ async function serve(dir) { // rather than FAILED. // // ✗ WHY THIS NO LONGER CLAIMS "ENTITLEMENT" (corrected 2026-09-29). It used to report a 403 here -// as "tileset, not the embed", on the strength of three no-Referer probes. MEASURED since, by rega, +// as "tileset, not the embed", on the strength of three no-Referer probes. MEASURED since, // with the very token this gate runs on: /v4/ streets-v8 AND country-boundaries return 200 — with // no Referer, and with our research and maps-dev hosts, doxa.life, 127.0.0.1 and // example.com. The token is unrestricted and entitled, so whatever 403s here is a DIFFERENT @@ -168,7 +168,7 @@ async function measure(page, url, provider) { : c.classList.contains('maplibregl-canvas') ? 'maplibre' : 'other' // ★ EVERY map, not the two this repo happens to publish. Reading only // window.__rcmMap/__rdashMap made 5 of the 7 production leaves report -1 and then FAIL as - // "0 rendered features" even when they had drawn (measured by rega, 2026-09-29). The hook + // "0 rendered features" even when they had drawn (measured 2026-09-29). The hook // installed before navigation collects every Map the page constructs, whatever it calls it. const maps = (window.__gateMaps || []).slice() const published = window.__rcmMap || window.__rdashMap || null diff --git a/internal/generate-tree.mjs b/internal/generate-tree.mjs index c370c3f6b..eae24fab2 100644 --- a/internal/generate-tree.mjs +++ b/internal/generate-tree.mjs @@ -857,9 +857,9 @@ const MAPLIBRE_STYLE_ORIGIN = 'https://tiles.openfreemap.org' // useMapInstanc * token; the hint follows the build default and the report names that miss case (one unused preconnect). */ function engineFor({ config }) { - // CORRECTED 2026-09-29 (regions executed the shipping resolver; rega's A9NET confirmed on the wire): + // CORRECTED 2026-09-29 (the shipping resolver was executed, and a network trace confirmed it on the wire): // a token no longer selects Mapbox. useMapProvider's default is MapLibre unless provider is EXPLICITLY - // 'mapbox'. rega measured all 8 auto leaves — which DO carry a pray.doxa.life token endpoint — loading + // 'mapbox'. A browser check measured all 8 auto leaves — which DO carry a pray.doxa.life token endpoint — loading // MapLibre from jsdelivr cold. So the hint's engine is Mapbox ONLY when provider:'mapbox' is set; every // other case (auto, or provider:'maplibre') is MapLibre, regardless of any baked token / tokenUrl. return String((config && config.provider) || '').toLowerCase().trim() === 'mapbox' ? 'mapbox' : 'maplibre' @@ -963,8 +963,8 @@ function mapPageHtml(opts) { // where the leaf emits no engine