Hermes
4d97a11978
The deploy host showed phantom dist drift on every git pull: committed
dist bundles could not be reproduced on DNS2. Root cause (verified with
esbuild 0.25.12 probes): the production transform uses sourcemap:'both',
whose inline map base64-embeds RAW source bytes as sourcesContent — a CRLF
working copy (Windows dev, core.autocrlf=true) vs an LF checkout produces
different dist bytes and a different sw.js cache tag.
- build.js: normalizeSource (\r\n -> \n) on every source read (bundle
inputs + sw.js read); exported + require.main guard so tests can import
it without triggering a build
- .gitattributes: * text=auto eol=lf (git-layer kill of the CRLF vector)
+ binary exclusions; 9 CRLF-in-index asset files renormalized
- tests/build-determinism.test.js: 3-case pin (byte-identity after
normalization, divergence pre-normalization, CR-strip contract) importing
the ACTUAL normalizeSource from build.js
- package.json: declare jsdom devDependency — 2 committed test files
require('jsdom') but it was never declared, so fresh-checkout
npm test failed (it only passed where a stray ancestor node_modules
happened to contain it)
- dist/features.js + sw.js: canonical deterministic rebuild
(cache tag 3354f5fd96 -> d39ab69dd4)
Verified: status 54/54, API 2858/2858 (128 suites); CRLF-sim tree and LF
tree of same HEAD produce byte-identical dist artifacts (sha256-equal).
Judge: glm-5.3 cold round 1 = A, round 2 (post-fold) = A clean, 0 blocking.
21 lines
677 B
ApacheConf
21 lines
677 B
ApacheConf
# Font file headers to prevent sanitizer issues
|
|
<FilesMatch "\.(woff2|woff|ttf|eot)$">
|
|
Header set Access-Control-Allow-Origin "*"
|
|
Header set Access-Control-Allow-Methods "GET, POST, OPTIONS"
|
|
Header set Access-Control-Allow-Headers "Content-Type"
|
|
Header set Cache-Control "public, max-age=31536000"
|
|
|
|
# Proper MIME types
|
|
<IfModule mod_mime.c>
|
|
AddType font/woff2 .woff2
|
|
AddType font/woff .woff
|
|
AddType font/ttf .ttf
|
|
AddType application/vnd.ms-fontobject .eot
|
|
</IfModule>
|
|
</FilesMatch>
|
|
|
|
# Prevent direct access to font conversion scripts
|
|
<FilesMatch "\.(py|bat)$">
|
|
Order allow,deny
|
|
Deny from all
|
|
</FilesMatch> |