ShuaixinHuang
e9fc8fb30c
fix(javascript): preserve runtime path bytes and Electron ownership ( #4941 )
...
* fix(javascript): preserve literal percent runtime paths
* fix(javascript): ignore resolve prefixes before the final anchor
* fix(electron): retain application roots for loadFile declarations
* fix(electron): resolve loadFile from enclosing application package
* fix(electron): retain outer application root across package scopes
* fix(electron): derive application ownership from inventoried packages
* fix(electron): retain resolved package entrypoint ownership
* fix(electron): preserve competing application ownership
* fix(electron): retain invalid and omitted runtime ownership
* fix(electron): preserve omitted module ownership and runtime paths
* fix(electron): preserve proven roots before confining page paths
* fix(electron): retain possible owners behind missing imports
* fix(electron): distinguish absent imports and owned page candidates
* fix(electron): keep unavailable JSON out of owner gaps
* fix(electron): retain exact loader formats and default entry status
* fix(electron): retain unavailable entrypoint ownership candidates
* test(ghidra): preserve Windows Node probe prerequisites
* test(ghidra): assert cancellation during profile shutdown
* fix(electron): separate examined imports from frontend ownership
* fix(electron): retain unavailable directory entrypoint owners
* test(jeb): retain Linux ownership prerequisite in isolation
* fix(javascript): retain unchecked loader ownership and literal main paths
* fix(javascript): preserve runtime paths and call-site module aliases
* fix(javascript): bound module alias traversal and preserve projections
* fix(javascript): retain host module and nested artifact path boundaries
* fix(javascript): preserve ESM and archive module loader provenance
* test(javascript): distinguish unmapped containers from missing exports
* fix: retain default module aliases and Electron builtin imports
* fix: preserve host file URL and inward ASAR ownership
* fix: preserve CommonJS file URL classification in CI fixtures
* fix: retain bound module loaders and Windows entrypoint uncertainty
* fix: retain ASAR uncertainty and invalidate changed Electron app roots
* fix(javascript): retain ownership uncertainty across loader boundaries
* fix(javascript): preserve loader sources and bound alias queries
* fix(javascript): retain destructured loader sources
* fix(javascript): preserve loader uncertainty at resolution boundaries
* fix(javascript): preserve callable and package launch ownership
* fix(javascript): preserve captured values across member reads
* test(process): assert tagged filesystem cancellation failures
* fix(javascript): preserve inventory bases and invocation read timing
* fix(javascript): preserve ownership across indirect and unread loads
* test(javascript): order fixture directory creation on Windows
* test(javascript): share ordered filesystem fixture writer
* fix(javascript): unify loader provenance and package validation
* fix(javascript): preserve captured Node require loader values
* fix(javascript): preserve loader invocation authority
* fix(javascript): verify generic loader invocation authority
* fix(javascript): preserve conditional loader method alternatives
* fix(javascript): require proven factories for source association
* fix(javascript): honor replaced Electron app path setters
* fix(javascript): prove path and assignment source ownership
* fix(javascript): retain native delegate eligibility through shared writes
* fix(process): settle stale baseline errors after confirmed absence
* fix(javascript): preserve assignment and path boundary evidence
* fix(javascript): prove source-directory resolve anchors
* fix: preserve application path provenance and portable schemas
* fix(javascript): retain CommonJS exported setter effects
* fix: isolate Linux identity observations and retain native module exports
* fix(javascript): preserve published app and helper provenance
* fix(javascript): normalize typed stores and native path fixtures
2026-10-20 17:25:19 +08:00
morluto
369cd3dfdc
fix(javascript): normalize package URLs before array selection ( #1916 )
2026-10-12 01:36:42 +08:00
Matt Van Horn and morluto
d28b41ea4e
feat(javascript): resolve exact package import aliases ( #1862 )
...
* feat(javascript): resolve exact package import aliases
Resolve exact #alias specifiers against the importer's enclosing
package.json imports map using the shared condition, array, and null
target selection. Nested packages keep their own maps; missing keys,
explicit nulls, and out-of-scope aliases report a precise reason.
Wildcard, recursive, and external-package import targets remain
unresolved.
* fix(javascript): keep nested import aliases in CLI graphs
Bound nested #alias requires produce application-graph require edges
from the enclosing package. Node reports MODULE_NOT_FOUND when a nested
package.json has no imports field, without inheriting the ancestor map.
* fix(javascript): resolve literal package import keys before path admission
* fix(javascript): preserve import keys and invalid-target fallback
* fix(javascript): preserve unmatched package target arrays
* fix(javascript): retain package target refusal evidence
* test(browser): match real verifier startup budget
---------
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-10-12 01:17:58 +08:00
Yann Roberto
3ad5782dfd
fix(javascript): honor package exports before sibling files
...
Resolve package exports before sibling-file fallback, preserve explicit export blocking, and retain precise CommonJS package self-reference behavior and caller provenance.
Fixes #1761 .
Co-authored-by: Yann Roberto <165009858+shoyann@users.noreply.github.com >
2026-10-11 18:57:58 +08:00
AC
7a4f2685d4
fix(javascript): reject invalid package exports configurations
2026-10-10 01:45:00 +08:00
Rudy Mizrahi Celekli and Ysopwnable
8d5c88f17c
fix(javascript): resolve module URLs and reject invalid exports targets ( #1031 )
...
Resolve module URL paths once and reject invalid root package exports targets before normalization. Preserve actionable graph diagnostics and array selection behavior.
Fixes #1040 .
Co-authored-by: Rudy Mizrahi Celekli <47457359+rudycelekli@users.noreply.github.com >
Co-authored-by: Ysopwnable <161784452+N0zoM1z0@users.noreply.github.com >
2026-10-08 14:00:34 +08:00
ysopwnable
f0a68dce60
refactor(artifacts): isolate JavaScript file acquisition ( #916 )
2026-10-07 17:57:33 +08:00
ysopwnable
0804722cdf
refactor(javascript): group application workflows and verification ( #896 )
2026-10-07 16:03:37 +08:00
Rudy Mizrahi Celekli
adc07f5eaa
fix(javascript): preserve Node exports fallback stop reasons ( #606 )
...
* fix(javascript): preserve Node exports fallback stop reasons
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
* test(browser): preserve unknown with-scope loader bindings
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
---------
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
2026-10-06 02:09:12 +08:00
Rudy Mizrahi Celekli and morluto
82895959d1
fix(javascript): honor package exports condition order ( #591 )
...
* fix(javascript): honor package exports condition order
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
* fix(javascript): resolve exports against Node's full condition set
The declared-order fix selected targets against {default, import|require},
but Node's active set for the resolver that owns installed packages also
includes "node" and "node-addons". Ordering only means something against the
full active set, so a package declaring {"node", "import"} resolved to the
wrong target, and a package declaring only {"import"} reported no target
where Node resolves ./node.cjs.
Nested condition objects and fallback arrays are also valid Node targets.
They are now flattened in Node's own order: a condition object stops at its
first active key, so a null or unmatched nested target ends the search, while
an array skips the entries it cannot resolve and concatenates the rest. Node
does not fall through a target whose file is absent, so the first flattened
target stands and its absence is reported rather than skipped.
A valid exports map that matches no active condition is reported as external
with the declared condition names, and one that selects an unsupported nested
or array target no longer borrows the "not valid package JSON" reason.
The differential test installs a real package and resolves the same bare
specifier through Node and through REA, mirroring file presence between the
filesystem and the inventory. 18 of the 25 cases fail without this change.
* style: apply Prettier to the conditional exports differential test
---------
Signed-off-by: Rudy Celekli <47457359+rudycelekli@users.noreply.github.com >
Co-authored-by: morluto <76467478+morluto@users.noreply.github.com >
2026-10-06 01:03:18 +08:00
ShuaixinHuang