[parked spike — do not merge] #1610 cross-origin isolation headers: MT wasm + break inventory - #1612
Draft
pablo-mayrgundter wants to merge 2 commits into
Draft
[parked spike — do not merge] #1610 cross-origin isolation headers: MT wasm + break inventory#1612pablo-mayrgundter wants to merge 2 commits into
pablo-mayrgundter wants to merge 2 commits into
Conversation
✅ Deploy Preview for bldrs-share-dev ready!
To edit notification comments on pull requests, go to your Netlify project configuration. |
DO NOT MERGE YET - deploy-preview reconnaissance for cross-origin isolation. With these headers crossOriginIsolated goes true, SharedArrayBuffer unlocks, and conway-geom's loader auto-selects the multithreaded wasm (~2.8x geometry extraction; both wasm variants already ship in /static/js). Known breakage on this preview, by design (fix phases follow in #1610): GIS OAuth popup (COOP severs window.opener) and the Google Drive Picker iframe (CORP: same-site under COEP). The fix pattern for both is same-origin popup documents relaying over BroadcastChannel; see the header comments. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S6gTXmrq1GbhqknPqQMRuz
pablo-mayrgundter
force-pushed
the
claude/isolation-spike
branch
from
July 21, 2026 17:56
69df271 to
a91663b
Compare
Picks up conway#421: under crossOriginIsolated, shim Init sets the runtime module prefix so the MT engine module imports from /static/js/ and its pthread workers resolve a correct script URL. Package contents verified (setModulePrefix wiring present in the shim). Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S6gTXmrq1GbhqknPqQMRuz
pablo-mayrgundter
changed the title
pablo-mayrgundter
pushed a commit
that referenced
this pull request
Jul 22, 2026
B1 incremental BatchedMesh assembly (dissolve the end-of-load build), B2 residency slider + eviction metrics, P1 props worker at indexReady, P2 geometry worker sharding (driver-parallel, consistent with the #1612 MT spike findings), session observer generalization. Co-Authored-By: Claude Fable 5 <noreply@anthropic.com> Claude-Session: https://claude.ai/code/session_01S6gTXmrq1GbhqknPqQMRuz
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
PARKED (2026-07-21): the spike completed and refuted its premise — see the measurement thread in bldrs-ai/conway-geom#148 and the reframe in #1610. Browser geometry is ~75% serial JS driver; MT nets zero-to-negative on real machines today (45s vs 31s on PSB). Shipping these headers would regress PSB, so this stays a draft until extraction moves off the main thread and/or the MT tax shrinks — at which point the phases documented below (auth relay over BroadcastChannel, Picker in an owned popup) resume unchanged.
What the spike proved: the header flip + conway 1.421.1270 (worker-spawn fix, bldrs-ai/conway#421) gives
crossOriginIsolated === true, MT wasm selection, and a live pthread worker fleet in a real deploy. The infrastructure works; the payoff doesn't, yet.Phase 1 of #1610 — deploy-preview reconnaissance only, not for merge. Two header lines flip the app to full cross-origin isolation (
COOP: same-origin+COEP: credentialless). No build changes needed: conway-geom's loader already auto-selects the MT wasm at runtime whencrossOriginIsolatedis true, andbuild-sharealready ships both wasm variants to/static/js.Verification checklist (on this preview)
crossOriginIsolated→ should betrue;typeof SharedArrayBuffer→"function".ConwayGeomWasmWebMT.wasm.window.opener); Google Drive Picker iframe (CORP under COEP).Fix phases before this merges (tracked in #1610)
/authcallback page that relays the auth code overBroadcastChannel— channel scope is the origin, not the browsing-context group, so COOP's severing doesn't affect it.🤖 Generated with Claude Code
https://claude.ai/code/session_01S6gTXmrq1GbhqknPqQMRuz