fix: eliminate SWC temporal-dead-zone import cycles (one already crashing), stop a silent Secure-cookie strip, and add the CI guard that would have caught all of it#560

Merged

kaihaase merged 21 commits into

developfrom

fix/better-auth-di-token-circular-import

Jul 15, 2026

Commits on Jul 13, 2026

fix(better-auth): extract DI tokens to break module/service circular import (SWC TDZ crash)
kaihaase
committed

Commits on Jul 14, 2026

fix(core): merge FilterInput and CombinedFilterInput into one module

kaihaase
and
claude
committed
fix(core): take restricted.decorator off every import cycle

kaihaase
and
claude
committed
fix(better-auth): remove the last module cycle and the reset() leak

kaihaase
and
claude
committed
fix(better-auth): stop a consumer key from silently stripping Secure

kaihaase
and
claude
committed
test(core): add the SWC/TDZ guard that CI was missing entirely

kaihaase
and
claude
committed
test: refuse to drop a database that is not recognizably a test database

kaihaase
and
claude
committed
docs: write down the leaf-file rule so this bug class cannot come back

kaihaase
and
claude
committed
fix(check): make the SWC guard side-effect free, fail-fast and unfoolable

kaihaase
and
claude
committed
fix(better-auth): keep the token-service registry out of the public API

kaihaase
and
claude
committed
docs: fix the rule that still showed the forbidden pattern, complete the guide

kaihaase
and
claude
committed
fix(core): move every remaining DI token into an import-free leaf

kaihaase
and
claude
committed
test(e2e): auto-enable low-resource mode when the machine is already loaded

kaihaase
and
claude
committed
test: enforce the leaf rule instead of documenting it

kaihaase
and
claude
committed
chore: sync spectaql version stamp to 11.27.7

kaihaase
and
claude
committed
docs: complete the vendor-mode file sets (AI + TUS leaves)

kaihaase
and
claude
committed
docs: correct the new-file count in the migration guide (six -> seven)

kaihaase
and
claude
committed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

fix: eliminate SWC temporal-dead-zone import cycles (one already crashing), stop a silent Secure-cookie strip, and add the CI guard that would have caught all of it#560

fix: eliminate SWC temporal-dead-zone import cycles (one already crashing), stop a silent Secure-cookie strip, and add the CI guard that would have caught all of it#560
kaihaase merged 21 commits into
developfrom
fix/better-auth-di-token-circular-import

Commits on Jul 13, 2026

fix(better-auth): extract DI tokens to break module/service circular import (SWC TDZ crash)

Commits on Jul 14, 2026

fix(core): merge FilterInput and CombinedFilterInput into one module

fix(core): take restricted.decorator off every import cycle

fix(better-auth): remove the last module cycle and the reset() leak

fix(better-auth): stop a consumer key from silently stripping Secure

test(core): add the SWC/TDZ guard that CI was missing entirely

test: refuse to drop a database that is not recognizably a test database

docs: write down the leaf-file rule so this bug class cannot come back

fix(check): make the SWC guard side-effect free, fail-fast and unfoolable

fix(better-auth): keep the token-service registry out of the public API

docs: fix the rule that still showed the forbidden pattern, complete the guide

fix(core): move every remaining DI token into an import-free leaf

test(e2e): auto-enable low-resource mode when the machine is already loaded

test: enforce the leaf rule instead of documenting it

chore: sync spectaql version stamp to 11.27.7

docs: complete the vendor-mode file sets (AI + TUS leaves)

docs: correct the new-file count in the migration guide (six -> seven)

Commits on Jul 15, 2026

fix(check): don't hard-fail when npm retires the audit endpoint

chore(pnpm): upgrade to pnpm 11 and migrate config to pnpm-workspace.yaml

test(e2e): isolate the run database per worker to kill the 401 flake

test(e2e): point the failure-debug message at the per-worker fork DBs