fix(modules): harden the import-map preloader against poisoning and unbounded growth - #3308

Merged

kojiwakayama merged 44 commits into

mainfrom

fix/import-map-preloader-hardening

Aug 3, 2026

Commits on Aug 3, 2026

fix(modules): harden the import-map preloader against poisoning and unbounded growth
kojiwakayama
committed
c8e7c9e
chore: drop unused stringifyJsonValue imports to unblock pre-push lint
kojiwakayama
committed
a1cd585
chore(lint): remove preloader.test.ts from the test-typecheck baseline
kojiwakayama
committed
b6db54e
fix(transforms): canonicalize cache identities safely
kojiwakayama
committed
1a6e9c9
Stabilize import-map preloading under reviewed cache edges
kojiwakayama
committed
0126305
Keep generated bundles aligned with cache hardening
kojiwakayama
committed
897a299
fix(modules): complete import-map isolation hardening
kojiwakayama
committed
0247bd4
Merge remote-tracking branch 'origin/main' into codex/pr3308-review-fix
kojiwakayama
committed
d4bf779
Merge remote-tracking branch 'origin/fix/import-map-preloader-hardening' into codex/pr3308-review-fix
kojiwakayama
committed
399b7c8
Keep import-map hardening compatible with the release baseline
kojiwakayama
committed
e662c5c
Merge remote-tracking branch 'origin/fix/import-map-preloader-hardening' into codex/pr3308-review-fix
kojiwakayama
committed
722cd22
Prevent poisoned primordials from collapsing import-map identities
kojiwakayama
committed
4dec2eb
fix(modules): close import-map review gaps
kojiwakayama
committed
5211fc7
chore(modules): remove redundant context guard
kojiwakayama
committed
0056d6a
fix(modules): capture descriptor primitive before cache getters
kojiwakayama
committed
3777ddf
Unify concurrent import-map hardening before review handoff
kojiwakayama
committed
f29e56d
Keep the review gate meaningful under parallel scheduler load
kojiwakayama
committed
3731374
Preserve descriptor capture before cache getter snapshots
kojiwakayama
committed
dcec078
Keep import-map hardening current with verified mainline fixes
kojiwakayama
committed
8182395
Keep the hardening branch current with durable agent events
kojiwakayama
committed
97a7799
fix(modules): close import-map review gaps
kojiwakayama
committed
9a21a73
refactor(platform): centralize trusted array primordials
kojiwakayama
committed
7276df1
Align import-map integration coverage with scoped framework hardening
kojiwakayama
committed
d752f16
Merge remote-tracking branch 'origin/main' into codex/pr3308-review-fix-1785758599
kojiwakayama
committed
a1e93a5
Clarify import-map follow-up review paths
kojiwakayama
committed
4f7e508
fix(transforms): bind pipeline cache identities
kojiwakayama
committed
a258e7f
Preserve PR cache identity compatibility
kojiwakayama
committed
ad56bd4
Harden cache identity execution primordials
kojiwakayama
committed
4a8fefa
fix(modules): close remaining cache poisoning gaps
kojiwakayama
committed
cf03534
Require concrete transform plugin stages
kojiwakayama
committed
00db338
fix(transforms): preserve fractional plugin stages
kojiwakayama
committed
cb3e27c
test(rendering): lock import-map preload context wiring end to end

kwakayama
and
claude
committed
95fd72b
Bound timed-out import-map loads by project
kojiwakayama
committed
65b0ddb
Keep timed-out import-map loads inside project admission limits
kojiwakayama
committed
c645be7
Keep import-map admission within its documented ceilings
kojiwakayama
committed
d84d573
Preserve import-map metadata compatibility during preload
kojiwakayama
committed
69d3138
test(modules): lock import-map capacity transitions
kojiwakayama
committed
080e050
Preserve HTTP cache identity after URL prototype mutation
kojiwakayama
committed
ad6f7fe
Close remaining HTTP identity poisoning paths
kojiwakayama
committed
a85156a
Reject poisoned cached bundle paths
kojiwakayama
committed
60abe11
Merge origin/main into PR 3308 after dev UI extraction
kojiwakayama
committed
b430d7f
Keep transform cache boundaries exact
kojiwakayama
committed
04b5bad
Unify SSR import-map cache identity
kojiwakayama
committed
11eca22
Keep HTTP specifier routing stable after prefix poisoning
kojiwakayama
committed
97e3373