fix(pre-init): stop processPreloadedItem mutating the shared ready-queue item

[darrenli-rokt]

Problem

processPreloadedItem (src/pre-init-utils.ts) splices the queued item array in place:

const args = readyQueueItem;      // same reference as the item in the ready queue
const method = args.splice(0, 1)[0];

The ready queue can be drained more than once (e.g. a synchronous cache-hit identify re-enters processReadyQueue via parseIdentityResponse before the outer drain resets the queue). On a second pass over an already-consumed item, the array has already been stripped:

• ["Identity.login", opts] → [opts] → method is an object → method.split('.') throws "e.split is not a function"
• ["logEvent"] → [] → method is undefined → "Cannot read properties of undefined (reading 'split')"

method.split('.') is outside the local try/catch, so the TypeError propagates up through sendIdentityRequest and is reported with code IDENTITY_REQUEST ("Error sending identity request to servers - ...") — even though the identity request itself succeeded. This surfaces as a high volume of misleading IDENTITY_REQUEST client-error reports.

Fix

• Operate on a copy of the queued item (readyQueueItem.slice()) so a repeat drain cannot corrupt the shared array.
• Skip malformed entries (empty array / non-string method) instead of throwing an uncaught TypeError.

Existing behaviour is otherwise unchanged (all pre-existing tests pass untouched).

Tests

Full jest suite green. Added regression tests in test/jest/pre-init-utils.spec.ts:

• the queued item is not mutated after processing (can be drained again)
• draining the same queue twice does not throw
• malformed items (empty array, non-string method) are skipped

Follow-up (not in this PR)

This stops the crash and the mislabelled IDENTITY_REQUEST errors. A complementary hardening is to make the ready-queue drain itself re-entrancy-safe (reset the queue before draining) so a queued method is not executed twice under re-entrancy. There is also a separate latent issue at the window.mParticle[args[0]] membership check (it should key off method), left untouched here to keep the diff surgical.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[cursor]

PR Summary

^{Cursor Bugbot is generating a summary for commit 57972d0. Configure here.}