fix(cactus): SHA-256 integrity verification + cross-bundle runtime singleton#529

Closed

sroussey wants to merge 11 commits into

mainfrom

claude/sweet-edison-NSph2-cactus

Commits on May 22, 2026

fix(cactus): unify runtime state across bundle entry points via globalThis singleton (HIGH)
sroussey
committed
feat(cactus): verify SHA-256 integrity of fetched model assets (HIGH)
sroussey
committed
fix(cactus): remove unused imports to satisfy noUnusedLocals (build fix)
sroussey
committed
fix(cactus): validate model_id and filename against allowlist regex (CodeQL)
sroussey
committed
fix(cactus): generic integrity error message and propagate err.message in Download
sroussey
committed
feat(cactus): assert catalog SHA-256 hex format at module load
sroussey
committed
fix(cactus): satisfy StreamPhase.progress required + tighten sha256 buffer types
sroussey
committed
fix(cactus): materialize concrete ArrayBuffer in Integrity test (build fix)
sroussey
committed
fix(cactus): add safeJoinUnderRoot containment check for CodeQL js/path-injection sanitizer
sroussey
committed
fix(cactus): inline path-injection sanitizer at every fs call site
sroussey
committed
fix(cactus): remove orphaned resolveModelDir/safeJoinUnderRoot/tmpPath (build fix)
sroussey
committed