feat(prepack): gate installed dependencies (AB7014/AB7015); host-native INSTALL.md - #547

Merged

ScriptedAlchemy merged 38 commits into

mainfrom

feat/prepack-dependency-gate

Sep 4, 2026

Commits on Sep 4, 2026

feat(prepack): gate installed dependencies (AB7014/AB7015) and make emitted INSTALL.md host-native
ScriptedAlchemy
committed
b325261
chore: changeset PR number
ScriptedAlchemy
committed
f89a4ff
Merge remote-tracking branch 'origin/main' into feat/prepack-dependency-gate
ScriptedAlchemy
committed
0027685
refactor(prepack): pure dependency evidence, shared digest cache, classifier fixes
ScriptedAlchemy
committed
48165af
fix(prepack): dependency gate honours tilde ranges, declaration imports, optional peers, and the packer
ScriptedAlchemy
committed
9db0511
refactor(prepack): packer policy at the process edge, pure specifier classifiers, table-tested scanners
ScriptedAlchemy
committed
76cb637
fix(prepack): resolution calls, bundleDependencies, optional overrides; INSTALL.md gates marketplace removal
ScriptedAlchemy
committed
99e53f8
fix(prepack): peers are never bundled; npm: alias targets are classified
ScriptedAlchemy
committed
7a2be52
fix(prepack): type directives map to @types, computed import() withholds AB7014, Claude marketplace inventory
ScriptedAlchemy
committed
5e3554d
fix(prepack): imports-map targets, computed require(), and install-script bins count as usage
ScriptedAlchemy
committed
6ca7920
fix(prepack): computed resolve/createRequire withhold AB7014; unresolvable optional deps warn
ScriptedAlchemy
committed
346da1b
fix(prepack): warning-only diagnostics pass prepack; literal-prefixed computed loads withhold AB7014
ScriptedAlchemy
committed
a1ab106
fix(prepack): unknown schemes are non-registry, optional peers keep protocol checks, createRequire bindings are loaders
ScriptedAlchemy
committed
fd7f4cf
fix(prepack): bundled exemption needs a packed node_modules entry; aliased createRequire; uninstalled bin fallback
ScriptedAlchemy
committed
9391777
fix(prepack): namespace-qualified createRequire factories; reference summary names every evidence source
ScriptedAlchemy
committed
1513cc9
fix(prepack): validate scheme-less selectors; unparseable optional specifiers stay fatal
ScriptedAlchemy
committed
331dcd9
fix(prepack): empty known-scheme specifiers unparseable; follow npm run delegation; unused peers warn
ScriptedAlchemy
committed
3b9b78b
fix(prepack): URL-form specifiers must parse; chained require('node:module').createRequire; AB7014 summary rows list every evidence source
ScriptedAlchemy
committed
44a8c01
fix(prepack): bare tarball filenames are file sources; invalid dependency names fail AB7015
ScriptedAlchemy
committed
f945afd
fix(prepack): reserved package names, strict semver identifiers, bare directory specs
ScriptedAlchemy
committed
3649715
fix(prepack): alias names validated, inline createRequire literal, npm git transports, leading run flags, declare module, empty fetch sources parse
ScriptedAlchemy
committed
f0b2b29
docs(diagnostics): alias name validity, git transports, empty fetch sources, declare module, run flags
ScriptedAlchemy
committed
65a2ad5
fix(prepack): alias targets must be registry specifiers, NPM: prefix case-insensitive, git+ftp/rsync transports
ScriptedAlchemy
committed
28da0f4
refactor(prepack): classify dependency entries with npm-package-arg
ScriptedAlchemy
committed
1876a86
Merge origin/main into feat/prepack-dependency-gate
ScriptedAlchemy
committed
16524b5
fix(prepack): executables run by packed code, valued npm run options, optional fetches install scripts need
ScriptedAlchemy
committed
9c5fa96
fix(prepack): read dependency values exactly as npm does; follow npm run aliases
ScriptedAlchemy
committed
61daea9
fix(prepack): nested createRequire arguments, quoted delegated script names
ScriptedAlchemy
committed
76b2de6
fix(prepack): file: sources shipped in the tarball install; install-script files load optional deps
ScriptedAlchemy
committed
a0351b9
fix(prepack): resolve extensionless/quoted install-script files, npm test/start delegation, validate packed file: sources
ScriptedAlchemy
committed
eb2f5fc
fix(prepack): parse packaged tarball manifests, split shell operators, follow own-file imports targets, allow call-site comments
ScriptedAlchemy
committed
f1711da
fix(prepack): install-script command positions, directory mains, imports wildcards, shadowed peers
ScriptedAlchemy
committed
6b5441c
fix(prepack): node . root main, --require/--import preloads, newline command separators
ScriptedAlchemy
committed
d6a5d21
fix(prepack): npm run first-positional delegation, Node option grammar, shell backslash escapes
ScriptedAlchemy
committed
a093992
fix(prepack): npm restart fallback, NODE_OPTIONS preloads, bare require aliases mark evidence incomplete
ScriptedAlchemy
committed
9ce8c93
fix(prepack): qualified createRequire factories, import() in inline programs, unreadable dependency manifests
ScriptedAlchemy
committed
1e6e5cf
fix(prepack): treat lexer failure as incomplete evidence; read installed manifests as npm does
ScriptedAlchemy
committed
76056b7
Merge branch 'main' into feat/prepack-dependency-gate
ScriptedAlchemy
authored
dd51de5