Skip to content

fix: disable production source maps#20

Merged
smiggleworth merged 2 commits into
mainfrom
fix/security-production-sourcemaps
Jul 26, 2026
Merged

fix: disable production source maps#20
smiggleworth merged 2 commits into
mainfrom
fix/security-production-sourcemaps

Conversation

@smiggleworth

Copy link
Copy Markdown
Contributor

Closes #19.

Disables Vite production source maps and extends static verification to reject every .map artifact in both .askr/client and the final dist tree.

Full local npm run check passes: formatting, lint, types, docs drift, 12 unit tests, client build with no map outputs, 338-route SSG build, and static verification with 32,442 API anchors.

Copilot AI review requested due to automatic review settings July 26, 2026 17:38

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR addresses Issue #19 by preventing production source maps from being generated and by tightening static output verification to ensure no .map artifacts are present in either the client staging output or the final dist tree.

Changes:

  • Disable Vite production build source maps (build.sourcemap: false).
  • Extend verify-static-output to fail verification if any .map files are found under dist or .askr/client.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.

File Description
vite.config.ts Disables production source map generation for the Vite client build.
scripts/verify-static-output.ts Adds recursive scanning to reject any .map files in staging and final static output directories.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comment thread scripts/verify-static-output.ts
@smiggleworth
smiggleworth merged commit a224efc into main Jul 26, 2026
1 check passed
@smiggleworth
smiggleworth deleted the fix/security-production-sourcemaps branch July 26, 2026 17:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Security: disable production source maps

2 participants