efdf6841e5
generate-tree now hashes each built bundle IIFE and writes integrity: 'sha384-…' into manifest.json, so the app-shell can load embedded (direct-mounted) plugins with integrity=… and refuse a tampered/CDN-swapped bundle. Pairs with the mount/locked flags convert.py adds (DOXA=embedded, foreign=iframe, all locked). |
||
|---|---|---|
| .. | ||
| clean.mjs | ||
| drop-portability-check.mjs | ||
| generate-library-index.mjs | ||
| generate-tree.mjs | ||
| inline-parse-check.mjs | ||
| install-shell.mjs | ||
| smoke.mjs | ||
| staging-forge.css | ||
| staging-forge.js | ||
| staging-reference-v2.html | ||
| staging.js | ||
| write-token.mjs | ||