From 0f70c1cd18d202e2c8860d8b39667ac0294aeb52 Mon Sep 17 00:00:00 2001
From: Dotta <bippadotta@protonmail.com>
Date: Wed, 2 Sep 2026 19:00:25 -0500
Subject: [PATCH] ci(runner): validate sealed CommonJS loader

---
 .github/workflows/runner-full-stack-e2e.yml | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/.github/workflows/runner-full-stack-e2e.yml b/.github/workflows/runner-full-stack-e2e.yml
index a69162f5365..69ddfd9c9fc 100644
--- a/.github/workflows/runner-full-stack-e2e.yml
+++ b/.github/workflows/runner-full-stack-e2e.yml
@@ -380,9 +380,12 @@ jobs:
               "command": "initialize",
               "params": {"agent": "codex", "model": "gpt-5.6-sol"},
           }
+          loader = r'''const fs=require("node:fs");const Module=require("node:module");const filename=process.argv[1];const source=fs.readFileSync(filename,"utf8").replace(/^#![^\r\n]*(?:\r?\n|$)/,"");const artifact=new Module(filename);artifact.filename=filename;artifact.paths=[];artifact._compile(source,filename);'''
           result = subprocess.run(
               [
                   f"/proc/self/fd/{node_descriptor}",
+                  "--eval",
+                  loader,
                   f"/proc/self/fd/{sidecar_descriptor}",
               ],
               input=json.dumps(request) + "\n",