From 3b99291f3ed28e760230f29fa1c0eeccf6f565df Mon Sep 17 00:00:00 2001
From: posimai <posimai.project@gmail.com>
Date: Thu, 23 Apr 2026 18:25:33 +0900
Subject: [PATCH] fix: resolve CSP and service worker asset errors

Allow posimai-ui base script under CSP, permit unpkg source map fetches, and make SW precache resilient while adding the missing logo asset to prevent install/runtime errors.

Made-with: Cursor
---
 logo.png    | Bin 0 -> 2417 bytes
 sw.js       |   6 +++++-
 vercel.json |   2 +-
 3 files changed, 6 insertions(+), 2 deletions(-)
 create mode 100644 logo.png

diff --git a/logo.png b/logo.png
new file mode 100644
index 0000000000000000000000000000000000000000..077474fd2c7e39a3cc97135aad2eb0e1683c9508
GIT binary patch
literal 2417
zcmbtWeNa?Y6hHUwV|T$_S-@mjLDvD4j1(z>MvSMdDaou~m1|l9tD;R*On$Vwg;x|2
zlh7H3?PF*wl`%==pP~`;`4KYN7>-l3L!xhV)Nytdt5s<ytaBeMsDU%uo4Mzl-|u|f
zbKl3=EuUkZp${{K0f0Vdrez)gMU#S-D}Fgm+1~(!Cg)hDzT{}X{_9aaov4GO&x#jT
z>7OuPzIuFe{J5LXy?(lUE%|#*(K%u{_JgKPHDi>hJNE%37TqB`r4G#;T02Tqe^v}J
zMFFx@x~ADuAT7|eE|aR&Nd=Nd-8xBnF9fZt0$K|Mv`(s$(xl~FXt=1Q=!mB1C?g2R
za&Zz+EayT4Thb&y*-BE@F}q3^=k~xQHS%t<Ri9#KD^x#4yNz%>1SuQ&QlB!P*+Dl9
zqrMU_F_tG<Fe=x8QI}Lm`2eX5PU(?~=TsA?k~tNI)Dnu+HV}a2f=+90hqJ^0kV;Za
ze76u0pjD9O0PYn51Q2@S;1cgL8FP9Vn-Mm0W>_DC6@t#7DaVi$+7ln7u-GG-N&}CW
zb5A4xGhN`vA7ppd<<9Cn_4z_V4SJ>q+BT5X0o^`yQ15_QZh|?53^Tc<pdZ;j+J|~r
z25!=`4%U)X(Bd9^St}xTr{;alU<H^5T)sD$u0MA>RxatQ6s#E3N@dEs=Sv)?+8fq~
zf^1MrHR@K-f~j}y)49g=qaYj9PLo;H-yUzcA3fOk;0=3-0G*?TFpve=8xM`N%ddr@
z<nUxF)hv=@wY+UJ?}y>NXdKejrUk3&a4MC~d-HZv28JnyD^H^T%!quK0;9$#a8~{{
z1r9Gr;$CMyQ((;Au^b-Hf1AVRxXoiY{4?LKKyynXhw=7T5b|BAc&)@(ji%-2vhq-b
z{x!x=I1DfQUV%$pH5_)9k}&SIxxV0VLg_>W=DK!s_|B$$1&Xd(4(m7WK*-Lr`fVVO
zm$T!cuvz<23A!5Z^7DEt(aaFKZfM~EJU@l9C{|wya`zJa!ZV9~3|MvLBm>;^HH1=7
zg`fZQyYQ;1P}JQJd7G;U{DwPYKimNFjwR^^Xez4HP<FLKKNW6%+mN7zk!iODBJFR%
z$E9mpKD+&xXE>2=ojh$ba@FpMA<{D~S3I#q8qxBHZ6uLYEqBe}Xts?OV0QGPO(1vJ
zcVH*4`XZ?$t-NJ_Yv<}nSiC-YR|QwTU3(&-X<l8`FOiTrx3Ky;qS?u=kSNHs`do2Q
z(3D&E@gzjE3Qd%ymoLi(qoZPE0_Ddy^W%r3>Dc6%a%e0#HrTSfsER$}h$L`0ZPR9<
za(J?xs8-vi???5n=Y`*rK$n@;smB|%c)bDe9O;Qi4wW`kQI@q3t5wa%`+_skR||3g
z-!<D@42cGEa1U-b0WhLpM<*&+_B*Y}Yniw6=}`VMjIS<Bz%a;IRI{DG8FIneEG1y$
z<=?eD;6N6`6QCoY!mMyD{8JowZM}#c0V(PxLZ0_l`pZ3Vg&@r&BuOo0Dl$cp35ql-
zQm05zq#sCYh;$Bke48RqD6&zJb?}hsc+U)d9P@E<?w_*{>CG_@PM_)hCAvT9o^3a)
z+yu_xBf>uf4DcpH9Ust^`XhkP07-E)PAfz6UCMnY_;~G&7Lx~bbl^M{{edAMrU(7X
z$X6<^>f7x<VJ2wfn*?Lku!^_Pn@~@n!~1~1mV1l53F4i=1L72Ne&hm!JNiQu3q`<x
z3S@u0ik+?0f%S+EGP+*``NmU(9jX`L#$h951lECk@xou!nY;3R!0V#1SmZiqy4Aw<
JfoXXq{{ja*YLfr}

literal 0
HcmV?d00001

diff --git a/sw.js b/sw.js
index 4f892d2..472be1e 100644
--- a/sw.js
+++ b/sw.js
@@ -4,7 +4,11 @@ const STATIC = ['/', '/index.html', '/manifest.json', '/logo.png'];
 
 self.addEventListener('install', e => {
     e.waitUntil(
-        caches.open(CACHE).then(c => c.addAll(STATIC))
+        caches.open(CACHE).then(async c => {
+            await Promise.allSettled(
+                STATIC.map(path => c.add(path))
+            );
+        })
     );
     self.skipWaiting();
 });
diff --git a/vercel.json b/vercel.json
index ccc41d8..32496ac 100644
--- a/vercel.json
+++ b/vercel.json
@@ -30,7 +30,7 @@
         },
         {
           "key": "Content-Security-Policy",
-          "value": "default-src 'self'; script-src 'self' 'unsafe-inline' https://unpkg.com https://cdn.jsdelivr.net https://esm.sh; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://posimai-ui.vercel.app; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://api.soar-enrich.com wss://api.soar-enrich.com; worker-src 'self'; frame-ancestors 'none';"
+          "value": "default-src 'self'; script-src 'self' 'unsafe-inline' https://unpkg.com https://cdn.jsdelivr.net https://esm.sh https://posimai-ui.vercel.app; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://fonts.gstatic.com https://posimai-ui.vercel.app; font-src 'self' data: https://fonts.gstatic.com; img-src 'self' data: https:; media-src 'self' https:; connect-src 'self' https://api.soar-enrich.com wss://api.soar-enrich.com https://unpkg.com; worker-src 'self'; frame-ancestors 'none';"
         },
         {
           "key": "Strict-Transport-Security",