fix(artifacts): retain permission omissions through JavaScript lookups

This commit is contained in:
morluto
2026-10-24 03:00:21 +08:00
parent dd55e2c7d5
commit 693ecec082
14 changed files with 343 additions and 30 deletions
@@ -118,6 +118,7 @@ export const applicationRootPath = (
context: JavaScriptArtifactGraphContext,
source: JavaScriptArtifactFile,
): string | null => {
if (context.snapshot.coverage.status !== "complete") return null;
// Unread launch metadata can name a main in another inventoried container.
// Archive occurrence identity does not prove isolation from the Node loader.
if (context.applicationOwnershipUnknownContainers.size > 0) return null;