@agentuity/cli 1.0.59 → 1.0.60

package/dist/utils/zip.js

@@ -1,10 +1,21 @@
-import { readFileSync, lstatSync } from 'node:fs';
-import { relative } from 'node:path';
+import { createWriteStream, lstatSync } from 'node:fs';
+import { mkdir } from 'node:fs/promises';
+import { dirname, relative } from 'node:path';
 import { Glob } from 'bun';
-import AdmZip from 'adm-zip';
+import archiver from 'archiver';
 import { toForwardSlash } from './normalize-path';
 export async function zipDir(dir, outdir, options) {
-    const zip = new AdmZip();
+    await mkdir(dirname(outdir), { recursive: true });
+    const output = createWriteStream(outdir);
+    const zip = archiver('zip', {
+        zlib: { level: 9 },
+    });
+    const writeDone = new Promise((resolve, reject) => {
+        output.on('close', resolve);
+        output.on('error', reject);
+        zip.on('error', reject);
+    });
+    zip.pipe(output);
     const files = await Array.fromAsync(new Glob('**/*').scan({ cwd: dir, absolute: true, dot: true, followSymlinks: false }));
     const total = files.length;
     let count = 0;
@@ -23,11 +34,8 @@ export async function zipDir(dir, outdir, options) {
                 // across machines and would cause EISDIR errors on extraction.
                 const stat = lstatSync(file);
                 if (!stat.isSymbolicLink() && !stat.isDirectory()) {
-                    // Use addFile with explicit Unix permissions (0o644) instead of addLocalFile.
-                    // On Windows, addLocalFile relies on OS file stats which may produce zip entries
-                    // with incorrect Unix permission bits, causing EACCES errors when extracted on Linux.
-                    const data = readFileSync(file);
-                    zip.addFile(rel, data, '', 0o644);
+                    // Set explicit Unix permissions (0o644) for portability across OSes.
+                    zip.file(file, { name: rel, mode: 0o644 });
                 }
             }
             catch (err) {
@@ -41,7 +49,8 @@ export async function zipDir(dir, outdir, options) {
             await Bun.sleep(10); // give some time for the progress bar to render
         }
     }
-    await zip.writeZip(outdir);
+    await zip.finalize();
+    await writeDone;
     if (options?.progress) {
         options.progress(100);
         await Bun.sleep(100); // give some time for the progress bar to render

package/dist/utils/zip.js.map

@@ -1 +1 @@
-{"version":3,"file":"zip.js","sourceRoot":"","sources":["../../src/utils/zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,YAAY,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AAClD,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AACrC,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAC3B,OAAO,MAAM,MAAM,SAAS,CAAC;AAC7B,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAOlD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,MAAc,EAAE,OAAiB;IAC1E,MAAM,GAAG,GAAG,IAAI,MAAM,EAAE,CAAC;IACzB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAClC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CACrF,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAChC,IAAI,GAAG,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,IAAI,CAAC;gBACJ,mEAAmE;gBACnE,mEAAmE;gBACnE,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnD,8EAA8E;oBAC9E,iFAAiF;oBACjF,sFAAsF;oBACtF,MAAM,IAAI,GAAG,YAAY,CAAC,IAAI,CAAC,CAAC;oBAChC,GAAG,CAAC,OAAO,CAAC,GAAG,EAAE,IAAI,EAAE,EAAE,EAAE,KAAK,CAAC,CAAC;gBACnC,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAChF,CAAC;QACF,CAAC;QACD,KAAK,EAAE,CAAC;QACR,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gDAAgD;QACtE,CAAC;IACF,CAAC;IACD,MAAM,GAAG,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;IAC3B,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,gDAAgD;IACvE,CAAC;AACF,CAAC"}
+{"version":3,"file":"zip.js","sourceRoot":"","sources":["../../src/utils/zip.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,iBAAiB,EAAE,SAAS,EAAE,MAAM,SAAS,CAAC;AACvD,OAAO,EAAE,KAAK,EAAE,MAAM,kBAAkB,CAAC;AACzC,OAAO,EAAE,OAAO,EAAE,QAAQ,EAAE,MAAM,WAAW,CAAC;AAC9C,OAAO,EAAE,IAAI,EAAE,MAAM,KAAK,CAAC;AAC3B,OAAO,QAAQ,MAAM,UAAU,CAAC;AAChC,OAAO,EAAE,cAAc,EAAE,MAAM,kBAAkB,CAAC;AAOlD,MAAM,CAAC,KAAK,UAAU,MAAM,CAAC,GAAW,EAAE,MAAc,EAAE,OAAiB;IAC1E,MAAM,KAAK,CAAC,OAAO,CAAC,MAAM,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;IAClD,MAAM,MAAM,GAAG,iBAAiB,CAAC,MAAM,CAAC,CAAC;IACzC,MAAM,GAAG,GAAG,QAAQ,CAAC,KAAK,EAAE;QAC3B,IAAI,EAAE,EAAE,KAAK,EAAE,CAAC,EAAE;KAClB,CAAC,CAAC;IAEH,MAAM,SAAS,GAAG,IAAI,OAAO,CAAO,CAAC,OAAO,EAAE,MAAM,EAAE,EAAE;QACvD,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC;QAC5B,MAAM,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;QAC3B,GAAG,CAAC,EAAE,CAAC,OAAO,EAAE,MAAM,CAAC,CAAC;IACzB,CAAC,CAAC,CAAC;IAEH,GAAG,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;IAEjB,MAAM,KAAK,GAAG,MAAM,KAAK,CAAC,SAAS,CAClC,IAAI,IAAI,CAAC,MAAM,CAAC,CAAC,IAAI,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,QAAQ,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,cAAc,EAAE,KAAK,EAAE,CAAC,CACrF,CAAC;IACF,MAAM,KAAK,GAAG,KAAK,CAAC,MAAM,CAAC;IAC3B,IAAI,KAAK,GAAG,CAAC,CAAC;IACd,KAAK,MAAM,IAAI,IAAI,KAAK,EAAE,CAAC;QAC1B,MAAM,GAAG,GAAG,cAAc,CAAC,QAAQ,CAAC,GAAG,EAAE,IAAI,CAAC,CAAC,CAAC;QAChD,IAAI,IAAI,GAAG,KAAK,CAAC;QACjB,IAAI,OAAO,EAAE,MAAM,EAAE,CAAC;YACrB,IAAI,CAAC,OAAO,CAAC,MAAM,CAAC,IAAI,EAAE,GAAG,CAAC,EAAE,CAAC;gBAChC,IAAI,GAAG,IAAI,CAAC;YACb,CAAC;QACF,CAAC;QACD,IAAI,CAAC,IAAI,EAAE,CAAC;YACX,IAAI,CAAC;gBACJ,mEAAmE;gBACnE,mEAAmE;gBACnE,+DAA+D;gBAC/D,MAAM,IAAI,GAAG,SAAS,CAAC,IAAI,CAAC,CAAC;gBAC7B,IAAI,CAAC,IAAI,CAAC,cAAc,EAAE,IAAI,CAAC,IAAI,CAAC,WAAW,EAAE,EAAE,CAAC;oBACnD,qEAAqE;oBACrE,GAAG,CAAC,IAAI,CAAC,IAAI,EAAE,EAAE,IAAI,EAAE,GAAG,EAAE,IAAI,EAAE,KAAK,EAAE,CAAC,CAAC;gBAC5C,CAAC;YACF,CAAC;YAAC,OAAO,GAAG,EAAE,CAAC;gBACd,MAAM,IAAI,KAAK,CAAC,8BAA8B,GAAG,KAAK,IAAI,GAAG,EAAE,EAAE,KAAK,EAAE,GAAG,EAAE,CAAC,CAAC;YAChF,CAAC;QACF,CAAC;QACD,KAAK,EAAE,CAAC;QACR,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;YACvB,MAAM,QAAQ,GAAG,IAAI,CAAC,KAAK,CAAC,CAAC,KAAK,GAAG,KAAK,CAAC,GAAG,GAAG,CAAC,CAAC;YACnD,OAAO,CAAC,QAAQ,CAAC,QAAQ,CAAC,CAAC;YAC3B,MAAM,GAAG,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC,CAAC,gDAAgD;QACtE,CAAC;IACF,CAAC;IACD,MAAM,GAAG,CAAC,QAAQ,EAAE,CAAC;IACrB,MAAM,SAAS,CAAC;IAChB,IAAI,OAAO,EAAE,QAAQ,EAAE,CAAC;QACvB,OAAO,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC;QACtB,MAAM,GAAG,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,CAAC,gDAAgD;IACvE,CAAC;AACF,CAAC"}

package/package.json

@@ -1,6 +1,6 @@
 {
 	"name": "@agentuity/cli",
-	"version": "1.0.59",
+	"version": "1.0.60",
 	"license": "Apache-2.0",
 	"author": "Agentuity employees and contributors",
 	"type": "module",
@@ -41,13 +41,13 @@
 		"prepublishOnly": "bun run clean && bun run build"
 	},
 	"dependencies": {
-		"@agentuity/auth": "1.0.59",
-		"@agentuity/core": "1.0.59",
-		"@agentuity/server": "1.0.59",
+		"@agentuity/auth": "1.0.60",
+		"@agentuity/core": "1.0.60",
+		"@agentuity/server": "1.0.60",
 		"@datasert/cronjs-parser": "^1.4.0",
 		"@vitejs/plugin-react": "^5.1.2",
 		"acorn-loose": "^8.5.2",
-		"adm-zip": "^0.5.16",
+		"archiver": "^7.0.1",
 		"astring": "^1.9.0",
 		"cli-table3": "^0.6.5",
 		"commander": "^14.0.2",
@@ -59,11 +59,11 @@
 		"typescript": "^5.9.0",
 		"vite": "^7.2.7",
 		"zod": "^4.3.5",
-		"@agentuity/frontend": "1.0.59"
+		"@agentuity/frontend": "1.0.60"
 	},
 	"devDependencies": {
-		"@agentuity/test-utils": "1.0.59",
-		"@types/adm-zip": "^0.5.7",
+		"@agentuity/test-utils": "1.0.60",
+		"@types/archiver": "^6.0.3",
 		"@types/bun": "latest",
 		"@types/tar-fs": "^2.0.4",
 		"bun-plugin-tailwind": "^0.1.2",

package/src/cmd/build/vite/static-render-worker.ts

@@ -0,0 +1,72 @@
+import { format } from 'node:util';
+import type { Logger } from '../../../types';
+import { runStaticRender } from './static-renderer';
+
+function createWorkerLogger(): Logger {
+	const write = (writer: (...args: unknown[]) => void, args: unknown[]) => {
+		writer(format(...args));
+	};
+	let loggerRef: Logger;
+
+	loggerRef = {
+		trace: (...args: unknown[]) => write(console.debug, args),
+		debug: (...args: unknown[]) => write(console.debug, args),
+		info: (...args: unknown[]) => write(console.log, args),
+		warn: (...args: unknown[]) => write(console.warn, args),
+		error: (...args: unknown[]) => write(console.error, args),
+		child: () => loggerRef,
+		fatal: (...args: unknown[]) => {
+			const message = format(...args);
+			console.error(message);
+			throw new Error(message);
+		},
+	};
+
+	return loggerRef;
+}
+
+export interface StaticRenderWorkerOptions {
+	rootDir: string;
+}
+
+async function main(): Promise<void> {
+	const optionsPath = process.argv[2];
+	if (!optionsPath) {
+		throw new Error('Missing worker options file path argument');
+	}
+
+	const optionsFile = Bun.file(optionsPath);
+	if (!(await optionsFile.exists())) {
+		throw new Error(`Worker options file does not exist: ${optionsPath}`);
+	}
+
+	const options = JSON.parse(await optionsFile.text()) as StaticRenderWorkerOptions;
+	const logger = createWorkerLogger();
+
+	// Load user plugins from agentuity.config.ts (can't serialize plugin functions)
+	const { loadAgentuityConfig } = await import('./config-loader');
+	const config = await loadAgentuityConfig(options.rootDir, logger);
+	const userPlugins = config?.plugins || [];
+
+	const result = await runStaticRender({
+		rootDir: options.rootDir,
+		logger,
+		userPlugins,
+	});
+
+	// Write result to stdout for parent to parse
+	console.log(JSON.stringify(result));
+}
+
+void main()
+	.then(() => {
+		process.exit(0);
+	})
+	.catch((error) => {
+		const message = error instanceof Error ? error.message : String(error);
+		console.error(`[static-render-worker] ${message}`);
+		if (error instanceof Error && error.stack) {
+			console.error(error.stack);
+		}
+		process.exit(1);
+	});

package/src/cmd/build/vite/vite-build-worker.ts

@@ -0,0 +1,58 @@
+import { format } from 'node:util';
+import type { Logger } from '../../../types';
+import { runViteBuild, type ViteBuildWorkerOptions } from './vite-builder';
+
+function createWorkerLogger(): Logger {
+	const write = (writer: (...args: unknown[]) => void, args: unknown[]) => {
+		writer(format(...args));
+	};
+	let loggerRef: Logger;
+
+	loggerRef = {
+		trace: (...args: unknown[]) => write(console.debug, args),
+		debug: (...args: unknown[]) => write(console.debug, args),
+		info: (...args: unknown[]) => write(console.log, args),
+		warn: (...args: unknown[]) => write(console.warn, args),
+		error: (...args: unknown[]) => write(console.error, args),
+		child: () => loggerRef,
+		fatal: (...args: unknown[]) => {
+			const message = format(...args);
+			console.error(message);
+			throw new Error(message);
+		},
+	};
+
+	return loggerRef;
+}
+
+async function main(): Promise<void> {
+	const optionsPath = process.argv[2];
+	if (!optionsPath) {
+		throw new Error('Missing worker options file path argument');
+	}
+
+	const optionsFile = Bun.file(optionsPath);
+	if (!(await optionsFile.exists())) {
+		throw new Error(`Worker options file does not exist: ${optionsPath}`);
+	}
+
+	const options = JSON.parse(await optionsFile.text()) as ViteBuildWorkerOptions;
+
+	await runViteBuild({
+		...options,
+		logger: createWorkerLogger(),
+	});
+}
+
+void main()
+	.then(() => {
+		process.exit(0);
+	})
+	.catch((error) => {
+		const message = error instanceof Error ? error.message : String(error);
+		console.error(`[vite-build-worker] ${message}`);
+		if (error instanceof Error && error.stack) {
+			console.error(error.stack);
+		}
+		process.exit(1);
+	});

package/src/cmd/build/vite/vite-builder.ts

@@ -6,7 +6,11 @@
 
 import { join } from 'node:path';
 import { existsSync, renameSync, rmSync } from 'node:fs';
+import { randomUUID } from 'node:crypto';
 import { createRequire } from 'node:module';
+import { tmpdir } from 'node:os';
+import { fileURLToPath } from 'node:url';
+import { StructuredError } from '@agentuity/core';
 import type { InlineConfig, Plugin } from 'vite';
 import type { Logger, DeployOptions } from '../../../types';
 import { browserEnvPlugin } from './browser-env-plugin';
@@ -15,6 +19,8 @@ import { beaconPlugin } from './beacon-plugin';
 import { publicAssetPathPlugin } from './public-asset-path-plugin';
 import type { BuildReportCollector } from '../../../build-report';
 
+const BuildFailedError = StructuredError('BuildFailedError');
+
 /**
  * Vite plugin to flatten the output structure for index.html
  *
@@ -70,6 +76,232 @@ export interface ViteBuildOptions {
 	profile?: string;
 }
 
+export type ViteBuildWorkerOptions = Omit<ViteBuildOptions, 'logger' | 'collector'>;
+
+/**
+ * Drain a subprocess stream, forwarding each chunk to the callback
+ * without accumulating in memory. Only the last `tailBytes` of output
+ * are retained so we can include them in error messages on failure.
+ */
+async function drainSubprocessStream(
+	stream: ReadableStream<Uint8Array>,
+	onChunk: (chunk: string) => void,
+	tailBytes = 4096
+): Promise<string> {
+	const reader = stream.getReader();
+	const decoder = new TextDecoder();
+	// Ring buffer that keeps only the trailing output for error context
+	let tail = '';
+
+	while (true) {
+		const { done, value } = await reader.read();
+		if (done) break;
+		const text = decoder.decode(value, { stream: true });
+		if (!text) continue;
+		onChunk(text);
+		tail = (tail + text).slice(-tailBytes);
+	}
+
+	const finalText = decoder.decode();
+	if (finalText) {
+		onChunk(finalText);
+		tail = (tail + finalText).slice(-tailBytes);
+	}
+
+	return tail;
+}
+
+/**
+ * Detect actually available memory for subprocess heap sizing.
+ * Reads cgroup v2/v1 max and current usage to compute free memory.
+ * Falls back to os.freemem() if cgroup files aren't available.
+ */
+async function detectAvailableMemory(
+	logger: Logger,
+	label: string
+): Promise<Record<string, string>> {
+	let cgroupMaxBytes = 0;
+	let cgroupCurrentBytes = 0;
+	let availableBytes = 0;
+	try {
+		if (process.platform === 'linux') {
+			// Try cgroup v2
+			const cgroupMax = Bun.file('/sys/fs/cgroup/memory.max');
+			const cgroupCurrent = Bun.file('/sys/fs/cgroup/memory.current');
+			if ((await cgroupMax.exists()) && (await cgroupCurrent.exists())) {
+				const maxStr = (await cgroupMax.text()).trim();
+				const currentStr = (await cgroupCurrent.text()).trim();
+				// "max" means unlimited — use total system memory
+				if (maxStr === 'max') {
+					const { totalmem } = await import('node:os');
+					cgroupMaxBytes = totalmem();
+				} else if (/^\d+$/.test(maxStr)) {
+					cgroupMaxBytes = Number(maxStr);
+				}
+				if (/^\d+$/.test(currentStr)) {
+					cgroupCurrentBytes = Number(currentStr);
+				}
+				if (cgroupMaxBytes > 0) {
+					availableBytes =
+						cgroupCurrentBytes > 0 ? cgroupMaxBytes - cgroupCurrentBytes : cgroupMaxBytes;
+				}
+			}
+			// Fallback to cgroup v1
+			if (!availableBytes) {
+				const v1Limit = Bun.file('/sys/fs/cgroup/memory/memory.limit_in_bytes');
+				const v1Usage = Bun.file('/sys/fs/cgroup/memory/memory.usage_in_bytes');
+				if ((await v1Limit.exists()) && (await v1Usage.exists())) {
+					const limitStr = (await v1Limit.text()).trim();
+					const usageStr = (await v1Usage.text()).trim();
+					if (/^\d+$/.test(limitStr) && /^\d+$/.test(usageStr)) {
+						cgroupMaxBytes = Number(limitStr);
+						cgroupCurrentBytes = Number(usageStr);
+						availableBytes = cgroupMaxBytes - cgroupCurrentBytes;
+					}
+				}
+			}
+		}
+		if (!availableBytes) {
+			const { freemem } = await import('node:os');
+			availableBytes = freemem();
+		}
+	} catch {
+		// If detection fails, let JSC use its own defaults
+	}
+
+	const jscEnv: Record<string, string> = {};
+	if (availableBytes > 0) {
+		const maxMb = Math.round(cgroupMaxBytes / 1024 / 1024);
+		const usedMb = Math.round(cgroupCurrentBytes / 1024 / 1024);
+		const availMb = Math.round(availableBytes / 1024 / 1024);
+		const maxHeap = Math.round(availableBytes * 0.8);
+		const maxHeapMb = Math.round(maxHeap / 1024 / 1024);
+		jscEnv.BUN_JSC_forceRAMSize = String(availableBytes);
+		jscEnv.BUN_JSC_gcMaxHeapSize = String(maxHeap);
+		logger.debug(
+			`[${label}] Memory: cgroup max=${maxMb} MiB, used=${usedMb} MiB, available=${availMb} MiB, gcMaxHeapSize=${maxHeapMb} MiB`
+		);
+	} else {
+		logger.debug(`[${label}] Could not detect available memory, using JSC defaults`);
+	}
+	return jscEnv;
+}
+
+function resolveWorkerScript(name: string): string {
+	const tsPath = fileURLToPath(new URL(`./${name}.ts`, import.meta.url));
+	const jsPath = fileURLToPath(new URL(`./${name}.js`, import.meta.url));
+	return existsSync(tsPath) ? tsPath : jsPath;
+}
+
+/**
+ * Spawn an isolated worker subprocess with JSC memory tuning.
+ * Returns the captured stdout tail (for parsing results) and throws on failure.
+ */
+async function spawnIsolatedWorker(opts: {
+	workerName: string;
+	label: string;
+	optionsJson: unknown;
+	cwd: string;
+	logger: Logger;
+}): Promise<string> {
+	const { workerName, label, optionsJson, cwd, logger } = opts;
+	const workerScript = resolveWorkerScript(workerName);
+	const optionsPath = join(tmpdir(), `agentuity-${label}-${randomUUID()}.json`);
+
+	try {
+		await Bun.write(optionsPath, JSON.stringify(optionsJson));
+		const jscEnv = await detectAvailableMemory(logger, label);
+
+		const proc = Bun.spawn({
+			cmd: [process.execPath, workerScript, optionsPath],
+			cwd,
+			env: { ...process.env, ...jscEnv },
+			stdin: 'ignore',
+			stdout: 'pipe',
+			stderr: 'pipe',
+		});
+
+		const stdoutPromise =
+			proc.stdout && typeof proc.stdout !== 'number'
+				? drainSubprocessStream(proc.stdout, (chunk) => {
+						const text = chunk.trim();
+						if (text) logger.debug(`[${label}] ${text}`);
+					})
+				: Promise.resolve('');
+
+		const stderrPromise =
+			proc.stderr && typeof proc.stderr !== 'number'
+				? drainSubprocessStream(proc.stderr, (chunk) => {
+						const text = chunk.trim();
+						if (text) logger.error(`[${label}] ${text}`);
+					})
+				: Promise.resolve('');
+
+		const [stdout, stderr, exitCode] = await Promise.all([
+			stdoutPromise,
+			stderrPromise,
+			proc.exited,
+		]);
+
+		if (exitCode !== 0) {
+			const errorOutput = stderr.trim() || stdout.trim();
+			const suffix = errorOutput ? `: ${errorOutput}` : '';
+			throw new BuildFailedError({
+				message: `${label} failed with exit code ${exitCode}${suffix}`,
+			});
+		}
+		return stdout;
+	} catch (error) {
+		if (error instanceof Error && error.name === 'BuildFailedError') throw error;
+		throw new BuildFailedError({
+			message: `Failed to run ${label}: ${error instanceof Error ? error.message : String(error)}`,
+		});
+	} finally {
+		rmSync(optionsPath, { force: true });
+	}
+}
+
+async function runViteBuildInSubprocess(
+	options: ViteBuildWorkerOptions,
+	logger: Logger
+): Promise<void> {
+	await spawnIsolatedWorker({
+		workerName: 'vite-build-worker',
+		label: `vite-build-worker:${options.mode}`,
+		optionsJson: options,
+		cwd: options.rootDir,
+		logger,
+	});
+}
+
+async function runStaticRenderInSubprocess(
+	rootDir: string,
+	logger: Logger
+): Promise<{ routes: number; duration: number }> {
+	const stdout = await spawnIsolatedWorker({
+		workerName: 'static-render-worker',
+		label: 'static-render-worker',
+		optionsJson: { rootDir },
+		cwd: rootDir,
+		logger,
+	});
+
+	// Worker writes JSON result as last line of stdout
+	try {
+		// Find the last JSON line in the tail
+		const lines = stdout.split('\n').filter((l) => l.trim());
+		for (let i = lines.length - 1; i >= 0; i--) {
+			const line = lines[i]!.trim();
+			if (line.startsWith('{')) {
+				return JSON.parse(line);
+			}
+		}
+	} catch {
+		// Parse failure — return defaults
+	}
+	return { routes: 0, duration: 0 };
+}
+
 /**
  * Run a Vite build for the specified mode
  * Uses inline Vite config (customizable via agentuity.config.ts)
@@ -256,6 +488,9 @@ export async function runViteBuild(options: ViteBuildOptions): Promise<void> {
 				// Copy public files to output for CDN upload (production builds only)
 				// In dev mode, Vite serves them directly from src/web/public/
 				copyPublicDir: !dev,
+				// Skip compressed size reporting to save memory — we measure
+				// sizes during the asset upload phase instead.
+				reportCompressedSize: false,
 			},
 			logLevel: isViteDebug ? 'info' : 'warn',
 		};
@@ -322,6 +557,7 @@ interface BuildResult {
  */
 export async function runAllBuilds(options: Omit<ViteBuildOptions, 'mode'>): Promise<BuildResult> {
 	const { rootDir, projectId = '', dev = false, logger, collector } = options;
+	const { logger: _logger, collector: _collector, ...workerBaseOptions } = options;
 
 	if (!dev) {
 		rmSync(join(rootDir, '.agentuity'), { force: true, recursive: true });
@@ -393,13 +629,26 @@ export async function runAllBuilds(options: Omit<ViteBuildOptions, 'mode'>): Pro
 		logger.debug('Building client assets...');
 		const endClientDiagnostic = collector?.startDiagnostic('client-build');
 		const started = Date.now();
-		await runViteBuild({
-			...options,
-			mode: 'client',
-			workbenchEnabled: workbenchConfig.enabled,
-			workbenchRoute: workbenchConfig.route,
-			analyticsEnabled,
-		});
+		if (dev) {
+			await runViteBuild({
+				...options,
+				mode: 'client',
+				workbenchEnabled: workbenchConfig.enabled,
+				workbenchRoute: workbenchConfig.route,
+				analyticsEnabled,
+			});
+		} else {
+			await runViteBuildInSubprocess(
+				{
+					...workerBaseOptions,
+					mode: 'client',
+					workbenchEnabled: workbenchConfig.enabled,
+					workbenchRoute: workbenchConfig.route,
+					analyticsEnabled,
+				},
+				logger
+			);
+		}
 		result.client.included = true;
 		result.client.duration = Date.now() - started;
 		endClientDiagnostic?.();
@@ -411,15 +660,22 @@ export async function runAllBuilds(options: Omit<ViteBuildOptions, 'mode'>): Pro
 	if (config?.render === 'static' && hasWebFrontend) {
 		logger.debug('Running static rendering (pre-rendering all routes)...');
 		const endStaticDiagnostic = collector?.startDiagnostic('static-render');
-		const { runStaticRender } = await import('./static-renderer');
-		const staticResult = await runStaticRender({
-			rootDir,
-			logger,
-			userPlugins: config?.plugins || [],
-		});
-		result.static.included = true;
-		result.static.duration = staticResult.duration;
-		result.static.routes = staticResult.routes;
+		if (dev) {
+			const { runStaticRender } = await import('./static-renderer');
+			const staticResult = await runStaticRender({
+				rootDir,
+				logger,
+				userPlugins: config?.plugins || [],
+			});
+			result.static.included = true;
+			result.static.duration = staticResult.duration;
+			result.static.routes = staticResult.routes;
+		} else {
+			const staticResult = await runStaticRenderInSubprocess(rootDir, logger);
+			result.static.included = true;
+			result.static.duration = staticResult.duration;
+			result.static.routes = staticResult.routes;
+		}
 		endStaticDiagnostic?.();
 	}
 
@@ -428,12 +684,24 @@ export async function runAllBuilds(options: Omit<ViteBuildOptions, 'mode'>): Pro
 		logger.debug('Building workbench assets...');
 		const endWorkbenchDiagnostic = collector?.startDiagnostic('workbench-build');
 		const started = Date.now();
-		await runViteBuild({
-			...options,
-			mode: 'workbench',
-			workbenchRoute: workbenchConfig.route,
-			workbenchEnabled: true,
-		});
+		if (dev) {
+			await runViteBuild({
+				...options,
+				mode: 'workbench',
+				workbenchRoute: workbenchConfig.route,
+				workbenchEnabled: true,
+			});
+		} else {
+			await runViteBuildInSubprocess(
+				{
+					...workerBaseOptions,
+					mode: 'workbench',
+					workbenchRoute: workbenchConfig.route,
+					workbenchEnabled: true,
+				},
+				logger
+			);
+		}
 		result.workbench.included = true;
 		result.workbench.duration = Date.now() - started;
 		endWorkbenchDiagnostic?.();
@@ -443,7 +711,11 @@ export async function runAllBuilds(options: Omit<ViteBuildOptions, 'mode'>): Pro
 	logger.debug('Building server...');
 	const endServerDiagnostic = collector?.startDiagnostic('server-build');
 	const serverStarted = Date.now();
-	await runViteBuild({ ...options, mode: 'server' });
+	if (dev) {
+		await runViteBuild({ ...options, mode: 'server' });
+	} else {
+		await runViteBuildInSubprocess({ ...workerBaseOptions, mode: 'server' }, logger);
+	}
 	result.server.included = true;
 	result.server.duration = Date.now() - serverStarted;
 	endServerDiagnostic?.();