fix(framework): five issues surfaced by the git-module field test - #267

Merged

antosubash merged 14 commits into

mainfrom

worktree-framework-fixes

Aug 20, 2026

Commits on Aug 19, 2026

fix(hosting): JSON error bodies for API and fetch callers
antosubash
committed
f9ecc01
fix(hosting): cwd-independent .env discovery and SQLite paths
antosubash
committed
3dc4467
feat(core+hosting): register_csp_sources — modules extend the CSP
antosubash
committed
ab5094f
fix(cli): scaffolded Vite config derives port/origin from SM_VITE_DEV_URL
antosubash
committed
2d31af1
feat(hosting): opt-in session-bound CSRF primitive for modules
antosubash
committed
e361935
style+fix: file-size cap for vite template (extract vite.dev-url.ts), lint fixes
antosubash
committed
2185737
docs: cover the five framework fixes across the doc tree
antosubash
committed
5d4c9d6
docs(skills): teach the shipped agent skills the five framework fixes
antosubash
committed
dd8c54e
fix: address code review findings (round 1, pass 1)
antosubash
committed
3ae1b14
fix: address code review findings (round 1, pass 2)
antosubash
committed
21536d9
fix: address code review findings (round 1, pass 3)
antosubash
committed
b44d89e

Commits on Aug 20, 2026