1tube 0.1.38 → 0.1.39

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "1tube",
-  "version": "0.1.38",
+  "version": "0.1.39",
   "private": false,
   "description": "Self-hosted Supabase Edge Functions gateway for Deno, plus an ESLint plugin for consumers",
   "license": "MIT",

package/src/backends/vercel/bundle-profile.ts

@@ -19,7 +19,12 @@
 
 import * as esbuild from "npm:esbuild@^0.28.1";
 import type { BundleProfile } from "../../bundler/profile.ts";
-import { NODE_BUILTIN_MODULES, VERCEL_BANNER, VERCEL_FOOTER } from "./wrapper.ts";
+import {
+  NODE_BUILTIN_MODULES,
+  VERCEL_BANNER,
+  VERCEL_FOOTER,
+  VERCEL_REQUIRE_SHIM,
+} from "./wrapper.ts";
 
 const NODE_BUILTIN_SET = new Set<string>(NODE_BUILTIN_MODULES);
 
@@ -144,6 +149,7 @@ export const VERCEL_PROFILE: BundleProfile = {
   mainFields: ["module", "main"],
   banner: VERCEL_BANNER,
   footer: VERCEL_FOOTER,
+  outputPreamble: VERCEL_REQUIRE_SHIM,
   resolverPlugins: [
     // node-builtins first so `crypto`/`stream`/… short-circuit to `node:` and
     // never reach the optional-dependency probe.

package/src/backends/vercel/wrapper.ts

@@ -87,6 +87,30 @@ export const NODE_BUILTIN_MODULES: readonly string[] = [
   "zlib",
 ];
 
+/**
+ * Output preamble prepended to EVERY emitted file — entry points and the
+ * code-split chunks alike (see `BundleProfile.outputPreamble`).
+ *
+ * Why this can't live in the banner: esbuild only injects `banner` into entry
+ * points. When CJS dependencies `require()` at module-init time (e.g.
+ * `google-auth-library` → `require("node:child_process")`), esbuild hoists its
+ * `__require` helper into a *shared chunk*. That helper falls back to a real
+ * `require` only `if (typeof require !== "undefined")` — and an ESM module has
+ * no `require` in scope, so the chunk throws "Dynamic require of … is not
+ * supported" at runtime on Vercel.
+ *
+ * Defining a module-scoped `require` backed by `node:module`'s `createRequire`
+ * gives esbuild's `__require` a working delegate in whichever chunk it lands.
+ * The per-file minify pass renames our `require` (and the helper's `typeof
+ * require` checks) consistently, collapsing `__require` to the real delegate.
+ * The shim is kept in every file (minify can't prove `createRequire()` is
+ * side-effect-free) — a few harmless bytes where unused. `import.meta.url` is
+ * always valid because every output is ESM.
+ */
+export const VERCEL_REQUIRE_SHIM =
+  `import { createRequire as __1tubeCreateRequire } from "node:module";
+var require = __1tubeCreateRequire(import.meta.url);`;
+
 /**
  * Banner injected at the top of every Vercel bundle. Runs before the user
  * entrypoint import so top-level `Deno.env.get(...)` / `serve(...)` calls find

package/src/bundler/core.ts

@@ -358,11 +358,19 @@ async function minifyOutputFile(
   path: string,
   sourcemap: boolean | "linked" | "inline",
   target: string | string[],
+  preamble?: string,
 ): Promise<{
   originalByteLength: number;
   byteLength: number;
 }> {
-  const original = await Deno.readTextFile(path);
+  const raw = await Deno.readTextFile(path);
+  // Prepend the profile preamble (e.g. the Node createRequire shim) before the
+  // minify transform so it reaches the shared chunks where esbuild hoists
+  // helpers like `__require`. esbuild's own `banner` can't do this — it only
+  // injects into entry points, never chunks. The transform keeps the preamble
+  // in every file (it can't prove the initializer is side-effect-free), which
+  // is harmless where unused.
+  const original = preamble ? `${preamble}\n${raw}` : raw;
   const originalByteLength = new TextEncoder().encode(original).byteLength;
   const result = await esbuild.transform(original, {
     loader: "js",
@@ -616,7 +624,12 @@ export async function bundleAllChunked(
     emittedJs.map(async (file) => {
       minifiedSizesByFile.set(
         file,
-        await minifyOutputFile(join(opts.outDir, file), sourcemap, target),
+        await minifyOutputFile(
+          join(opts.outDir, file),
+          sourcemap,
+          target,
+          profile.outputPreamble,
+        ),
       );
     }),
   );
@@ -725,7 +738,12 @@ export async function bundleSharedModule(opts: {
     mainFields: [...profile.mainFields],
   });
   await patchOutputFile(outfile);
-  const sizes = await minifyOutputFile(outfile, false, target);
+  const sizes = await minifyOutputFile(
+    outfile,
+    false,
+    target,
+    profile.outputPreamble,
+  );
   return {
     id: opts.module.id,
     bundlePath: outfile,

package/src/bundler/profile.ts

@@ -56,4 +56,22 @@ export interface BundleProfile {
    * target). Most profiles need none.
    */
   readonly resolverPlugins?: readonly esbuild.Plugin[];
+  /**
+   * Source prepended to EVERY emitted output file (entry points AND
+   * code-split chunks) before the final minify pass. Unlike {@link banner},
+   * which esbuild only injects into entry points, this reaches chunks too.
+   *
+   * Needed when a runtime shim must be present in the chunk that esbuild
+   * happens to hoist a helper into — e.g. the Node target injects a
+   * `createRequire(import.meta.url)`-backed `require` so esbuild's `__require`
+   * shim (emitted into a shared chunk for CJS deps that `require()` at module
+   * init) works instead of throwing "Dynamic require of … is not supported".
+   *
+   * It is prepended to every file (the per-file minify pass keeps it even where
+   * unused, since it can't prove the initializer is side-effect-free — a few
+   * harmless bytes per chunk). In the chunk that defines the helper, esbuild's
+   * minifier rewrites the helper's `typeof require` checks to the injected
+   * binding, so the shim wires up automatically.
+   */
+  readonly outputPreamble?: string;
 }