feat(server)!: jspm.io direct vendor (Rails-style no-build)#89

Open

vivek7405 wants to merge 61 commits into

mainfrom

feat/jspm-direct-vendor

Commits on May 25, 2026

feat(server): tighten bare-import scanner to exclude server-only files and false positives
vivek7405
committed
feat(check): add no-non-erasable-typescript rule
vivek7405
committed
feat(server)!: replace esbuild-on-demand vendor with jspm.io direct (Rails-style no-build)
vivek7405
committed
feat(server,cli): file-based pin command for Rails-style vendor persistence
vivek7405
committed
test(server): coverage for file-based pin commands (pinAll, unpin, list, serve, prune)
vivek7405
committed
docs(top-level): describe jspm.io vendor pipeline + webjs vendor pin commands
vivek7405
committed
docs(readme): vendor pipeline via jspm.io + webjs vendor pin commands
vivek7405
committed
docs(server): describe jspm.io vendor resolution + check.js rules
vivek7405
committed
docs(docs-site): describe jspm.io vendor architecture in no-build + deployment pages
vivek7405
committed
docs(deployment): update vendor URL pattern + cache headers for jspm.io architecture
vivek7405
committed
test(e2e): vendor pin/unpin/list CLI integration coverage
vivek7405
committed
docs(server): update importmap.js header comment to reflect jspm.io flow
vivek7405
committed
feat(server): support subpath imports (dayjs/plugin/utc) in vendor pipeline
vivek7405
committed
fix(scaffold,server): unignore .webjs/vendor + correct listPinned subpath version parsing
vivek7405
committed
fix(gitignore): unignore .webjs/vendor in repo root + examples/blog
vivek7405
committed
fix(test): dev-handler vendor tests accurately reflect --download behavior
vivek7405
committed
fix(dockerignore): unignore .webjs/vendor so committed pin files reach production images
vivek7405
committed
fix(server): jspmGenerate caches the in-flight Promise, not just the resolved value
vivek7405
committed
docs(deployment): add CSP guidance for jspm.io vendor URLs
vivek7405
committed
docs(scaffold): add 'NPM packages (vendor pipeline)' section to AGENTS.md
vivek7405
committed
fix(gitignore,dockerignore): correct exception pattern for .webjs/vendor
vivek7405
committed
Add gitignore-vendor-not-ignored lint rule
vivek7405
committed
Strengthen .webjs/vendor gitignore warnings
vivek7405
committed
Exclude dot-dirs and *.config.* files from vendor scanner
vivek7405
committed
Per-package jspm.io resolution to isolate bad deps
vivek7405
committed
Thread CSP nonce into script type=importmap tag
vivek7405
committed
Add crossorigin=anonymous to cross-origin modulepreload links
vivek7405
committed
Add SRI integrity hashes for vendor packages
vivek7405
committed
Test SRI integrity flow + guard against clobbering real node_modules
vivek7405
committed
Drop esbuild fallback from runtime TS stripper
vivek7405
committed
Replace esbuildPlugin with a node:module strip-types WTR plugin
vivek7405
committed
Replace esbuildPlugin in blog-e2e WTR config with strip-types plugin
vivek7405
committed
Update docs prose: remove esbuild fallback references
vivek7405
committed
Update lint rule + scaffold prose: esbuild fallback is gone
vivek7405
committed
Update remaining esbuild prose: scaffold CONVENTIONS + blog example + test comments
vivek7405
committed
Update top-level docs: esbuild fallback gone + vendor pipeline rewrite
vivek7405
committed
Catch missed esbuild prose in README + no-build docs
vivek7405
committed
flattenScope:true + nonce on modulepreload (Rails+Turbo parity)
vivek7405
committed
Propagate CSP nonce to client-router dynamic scripts (Turbo pattern)
vivek7405
committed

Commits on May 26, 2026