fix(javascript): preserve loader authority for exact suffixes (#9477)

* fix(javascript): require exact loader suffix case

* fix(javascript): share exact loader mode across import resolution

* test(process): align symlink fixture with filesystem checkpoints

* test(javascript): normalize the module resolution oracle path separators

* test(frida): assert the CLI spawn Evidence contract

* test(mcp): use an unsupported analysis-view parent

* test(browser): separate source-location line bounds from parity

* fix(javascript): preserve uncertain loader provenance

* test(javascript): cover uncertain require resolution

* fix(javascript): retain conditional Electron evidence

* fix(javascript): preserve timed semantic provenance

* fix(javascript): retain conditional builtin effects

* test(javascript): distinguish bundled host authority

* fix(javascript): preserve nested loader invocation identity

* test(javascript): qualify Electron fixture authority

* fix(javascript): preserve loader invocation authority

* fix(javascript): respect source order for resolver escapes

* fix(javascript): check nested loader callable mutations

* fix(javascript): retain conditional constructor requests

* fix(reference): retain constructor loader relationships

* fix(reference): follow nested loader callable paths

* refactor(javascript): share callable mutation interpretation

* fix(javascript): require exact package loader suffixes

* refactor(javascript): unify conditional relation evidence

* refactor(javascript): unify conditional node evidence

* fix(javascript): retain unknown authority for mixed case sources

* fix(javascript): preserve loader uncertainty for dotfiles

* fix(reference): classify javascript suffix dotfiles

* test(reference): cover suffix dotfiles through cli

* fix(javascript): retain equivalent conditional built-in origins

* fix(javascript): preserve wrapped resolver operation

* fix(javascript): retain nested conditional built-in receivers

* test(javascript): declare CommonJS in native addon fixtures

* fix(javascript): retain wrapped resolver candidates

* style: format merged native command schema

* fix(javascript): preserve uncertain loader authority

* test(javascript): require candidate preload evidence

* test(javascript): cover reference loader member writes

---------

Co-authored-by: ShuaixinHuang <1836656514@qq.com>

src/domain/javascript/javascriptStaticAnalysis.sqliteStorage.test.ts

@@ -1,4 +1,5 @@
 import { expect, it } from "vitest";
+import { analyzeCommonJsStaticFixture } from "../../../tests/fixtures/javascriptCommonJsAnalysis.js";
 import { analyzeJavaScriptStaticSource } from "./javascriptStaticAnalysis.js";
 
 it.each([
@@ -36,7 +37,6 @@ it.each([
   'import Database from "better-sqlite3"; new Database("known.db");',
   'import Database = require("better-sqlite3"); new Database("known.db");',
   'import sqlite = require("sqlite3"); new sqlite.Database("known.db");',
-  'const Database = require("better-sqlite3"); new Database("known.db");',
   'import {Database} from "sqlite3"; new Database("known.db");',
   'import * as sqlite from "sqlite3"; new sqlite.Database("known.db");',
 ])("retains proven SQLite API origins: %s", (source) => {
@@ -48,3 +48,15 @@ it.each([
   });
   expect(analysis.storage[0]).not.toHaveProperty("interpretation");
 });
+
+it("distinguishes conditional and proven CommonJS SQLite origins", () => {
+  const source =
+    'const Database = require("better-sqlite3"); new Database("known.db");';
+  expect(analyzeJavaScriptStaticSource(source).storage).toMatchObject([
+    { kind: "sqlite", name: "known.db", interpretation: "candidate" },
+  ]);
+  const proven = analyzeCommonJsStaticFixture(source).storage;
+  expect(proven).toHaveLength(1);
+  expect(proven[0]).toMatchObject({ kind: "sqlite", name: "known.db" });
+  expect(proven[0]).not.toHaveProperty("interpretation");
+});