fix(rsc): fix false detection of import.meta.viteRsc API inside comments and strings

[Copilot]

• Add strip-literal dependency to packages/plugin-rsc/package.json
• Import stripLiteral function in packages/plugin-rsc/src/plugin.ts
• Apply stripLiteral() to code before matchAll for import.meta.viteRsc.loadModule
• Apply stripLiteral() to code before matchAll for import.meta.viteRsc.loadBootstrapScriptContent
• Apply stripLiteral() to code before matchAll for import.meta.viteRsc.loadCss
• Extract arguments using indices from original code (not from stripped code)
• Remove strip-literal.test.ts file per maintainer feedback
• Run pnpm install to update lockfile
• Run build to ensure everything compiles
• Run all unit tests (57 tests passing)
• Run linting checks
• Run TypeScript compiler checks
• Run CodeQL security check (no vulnerabilities found)

Summary

Fixed false detection of import.meta.viteRsc API calls inside comments and strings by:

1. Added strip-literal@^3.1.0 dependency to strip comments and string literals before pattern matching
2. Updated three transform functions to use stripLiteral(code).matchAll() instead of code.matchAll()
3. Used match indices to extract arguments from original code (not stripped version) to preserve actual values

The fix ensures that API calls in comments like // import.meta.viteRsc.loadModule("test") and strings like "import.meta.viteRsc.loadCss('test')" are correctly ignored, while actual API calls are properly detected and transformed.

Original prompt

take over to fix #931

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[hi-ogawa]

@copilot remove packages/plugin-rsc/src/plugins/strip-literal.test.ts.

[Copilot]

@copilot remove packages/plugin-rsc/src/plugins/strip-literal.test.ts.

Removed in f13b79a