@bleedingdev/modern-js-app-tools 3.5.0-ultramodern.6 → 3.5.0-ultramodern.76

package/dist/esm/ultramodern-release-envelope/index.mjs

@@ -0,0 +1,335 @@
+import { createHash } from "node:crypto";
+import promises from "node:fs/promises";
+import node_path from "node:path";
+import { canonicalSerializeMicroVerticalReleaseEnvelope, digestMicroVerticalReleaseEnvelopePayload, releaseEnvelopePayload } from "./canonical.mjs";
+import { MICROVERTICAL_RELEASE_ENVELOPE_KIND, MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION, MICROVERTICAL_RELEASE_TARGETS } from "./types.mjs";
+const SHA256_PATTERN = /^[a-f0-9]{64}$/u;
+const SOURCE_REVISION_PATTERN = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u;
+const TARGETS = new Set(MICROVERTICAL_RELEASE_TARGETS);
+const isRecord = (value)=>'object' == typeof value && null !== value && !Array.isArray(value);
+const assertRecord = (value, location)=>{
+    if (!isRecord(value)) throw new Error(`${location} must be an object.`);
+    return value;
+};
+const assertExactKeys = (value, expected, location)=>{
+    const expectedKeys = new Set(expected);
+    for (const key of Object.keys(value))if (!expectedKeys.has(key)) throw new Error(`${location} contains unknown field "${key}".`);
+    for (const key of expected)if (!(key in value)) throw new Error(`${location}.${key} is required.`);
+};
+const assertNonEmptyString = (value, location)=>{
+    if ('string' != typeof value || 0 === value.trim().length) throw new Error(`${location} must be a non-empty string.`);
+    if (value !== value.trim()) throw new Error(`${location} must not contain surrounding whitespace.`);
+    return value;
+};
+const assertTarget = (value, location = 'target')=>{
+    const target = assertNonEmptyString(value, location);
+    if (!TARGETS.has(target)) throw new Error(`${location} must be one of: ${MICROVERTICAL_RELEASE_TARGETS.join(', ')}.`);
+    return target;
+};
+const assertReleaseIdentity = (value, location = 'identity')=>{
+    const identity = assertRecord(value, location);
+    assertExactKeys(identity, [
+        'unitId',
+        'buildMarker',
+        'sourceRevision',
+        'releaseVersion'
+    ], location);
+    const sourceRevision = assertNonEmptyString(identity.sourceRevision, `${location}.sourceRevision`);
+    if (!SOURCE_REVISION_PATTERN.test(sourceRevision)) throw new Error(`${location}.sourceRevision must be an exact lowercase 40- or 64-character Git object ID; "${sourceRevision}" is not promotable.`);
+    return {
+        unitId: assertNonEmptyString(identity.unitId, `${location}.unitId`),
+        buildMarker: assertNonEmptyString(identity.buildMarker, `${location}.buildMarker`),
+        sourceRevision,
+        releaseVersion: assertNonEmptyString(identity.releaseVersion, `${location}.releaseVersion`)
+    };
+};
+const assertNormalizedLogicalPath = (value, location)=>{
+    const logicalPath = assertNonEmptyString(value, location);
+    if (logicalPath.includes('\\') || node_path.posix.isAbsolute(logicalPath) || node_path.posix.normalize(logicalPath) !== logicalPath || '.' === logicalPath || logicalPath.split('/').some((segment)=>'..' === segment || '.' === segment)) throw new Error(`${location} must be a normalized relative POSIX path.`);
+    return logicalPath;
+};
+const isPathInside = (root, candidate)=>{
+    const relative = node_path.relative(root, candidate);
+    return '' === relative || !relative.startsWith(`..${node_path.sep}`) && '..' !== relative && !node_path.isAbsolute(relative);
+};
+const assertArtifactInput = (value, location)=>{
+    const artifact = assertRecord(value, location);
+    assertExactKeys(artifact, [
+        'logicalPath',
+        'runtime'
+    ], location);
+    return {
+        logicalPath: assertNormalizedLogicalPath(artifact.logicalPath, `${location}.logicalPath`),
+        runtime: assertNonEmptyString(artifact.runtime, `${location}.runtime`)
+    };
+};
+const readFinalArtifact = async (artifactRoot, input, resolvedLogicalPath = input.logicalPath)=>{
+    const artifactInput = {
+        logicalPath: input.logicalPath,
+        runtime: input.runtime
+    };
+    const logicalPath = assertNormalizedLogicalPath(resolvedLogicalPath, `staged path for ${input.logicalPath}`);
+    const resolvedRoot = node_path.resolve(artifactRoot);
+    const logicalSegments = logicalPath.split('/');
+    const lexicalPath = node_path.resolve(resolvedRoot, ...logicalSegments);
+    if (!isPathInside(resolvedRoot, lexicalPath)) throw new Error(`Artifact logicalPath "${logicalPath}" resolves outside artifactRoot.`);
+    const realRoot = await promises.realpath(resolvedRoot);
+    for(let index = 0; index < logicalSegments.length - 1; index++){
+        const linkLogicalPath = logicalSegments.slice(0, index + 1).join('/');
+        const candidate = node_path.join(resolvedRoot, ...logicalSegments.slice(0, index + 1));
+        let candidateStat;
+        try {
+            candidateStat = await promises.lstat(candidate);
+        } catch  {
+            throw new Error(`Artifact "${logicalPath}" does not exist.`);
+        }
+        if (candidateStat.isSymbolicLink()) throw new Error(`Artifact "${logicalPath}" traverses symbolic-link ancestor "${linkLogicalPath}"; bind the symbolic link itself.`);
+    }
+    let lexicalStat;
+    try {
+        lexicalStat = await promises.lstat(lexicalPath);
+    } catch  {
+        throw new Error(`Artifact "${logicalPath}" does not exist.`);
+    }
+    if (lexicalStat.isSymbolicLink()) {
+        let realTarget;
+        try {
+            realTarget = await promises.realpath(lexicalPath);
+        } catch  {
+            throw new Error(`Artifact symbolic link "${logicalPath}" cannot be resolved.`);
+        }
+        if (!isPathInside(realRoot, realTarget)) throw new Error(`Artifact logicalPath "${logicalPath}" resolves outside artifactRoot.`);
+        const targetStat = await promises.stat(realTarget);
+        const targetKind = targetStat.isFile() ? 'file' : targetStat.isDirectory() ? 'directory' : void 0;
+        if (!targetKind) throw new Error(`Artifact symbolic link "${logicalPath}" must resolve to a file or directory.`);
+        const targetLogicalPath = node_path.relative(realRoot, realTarget).split(node_path.sep).join('/');
+        if ('release' === targetLogicalPath || targetLogicalPath.startsWith('release/')) throw new Error(`Artifact symbolic link "${logicalPath}" targets private release metadata.`);
+        if ('directory' === targetKind && isPathInside(realTarget, await promises.realpath(node_path.dirname(lexicalPath)))) throw new Error(`Artifact symbolic link "${logicalPath}" targets an ancestor directory.`);
+        return {
+            ...artifactInput,
+            kind: 'symbolic-link',
+            linkTarget: await promises.readlink(lexicalPath),
+            targetKind,
+            targetLogicalPath
+        };
+    }
+    if (!lexicalStat.isFile()) throw new Error(`Artifact "${logicalPath}" must be a file or symlink.`);
+    const realPath = await promises.realpath(lexicalPath);
+    if (!isPathInside(realRoot, realPath)) throw new Error(`Artifact logicalPath "${logicalPath}" resolves outside artifactRoot.`);
+    const bytes = await promises.readFile(realPath);
+    return {
+        ...artifactInput,
+        kind: 'file',
+        byteLength: bytes.byteLength,
+        sha256: createHash('sha256').update(bytes).digest('hex')
+    };
+};
+const assertReleaseArtifact = (value, location)=>{
+    const artifact = assertRecord(value, location);
+    const kind = assertNonEmptyString(artifact.kind, `${location}.kind`);
+    const input = {
+        logicalPath: artifact.logicalPath,
+        runtime: artifact.runtime
+    };
+    if ('file' === kind) {
+        assertExactKeys(artifact, [
+            'kind',
+            'logicalPath',
+            'runtime',
+            'byteLength',
+            'sha256'
+        ], location);
+        const byteLength = artifact.byteLength;
+        if ('number' != typeof byteLength || !Number.isSafeInteger(byteLength) || byteLength < 0) throw new Error(`${location}.byteLength must be a non-negative integer.`);
+        const sha256 = assertNonEmptyString(artifact.sha256, `${location}.sha256`);
+        if (!SHA256_PATTERN.test(sha256)) throw new Error(`${location}.sha256 must be a lowercase SHA-256 digest.`);
+        return {
+            ...assertArtifactInput(input, location),
+            kind,
+            byteLength,
+            sha256
+        };
+    }
+    if ('symbolic-link' === kind) {
+        assertExactKeys(artifact, [
+            'kind',
+            'logicalPath',
+            'runtime',
+            'linkTarget',
+            'targetKind',
+            'targetLogicalPath'
+        ], location);
+        const targetKind = assertNonEmptyString(artifact.targetKind, `${location}.targetKind`);
+        if ('directory' !== targetKind && 'file' !== targetKind) throw new Error(`${location}.targetKind must be "directory" or "file".`);
+        return {
+            ...assertArtifactInput(input, location),
+            kind,
+            linkTarget: assertNonEmptyString(artifact.linkTarget, `${location}.linkTarget`),
+            targetKind,
+            targetLogicalPath: assertNormalizedLogicalPath(artifact.targetLogicalPath, `${location}.targetLogicalPath`)
+        };
+    }
+    throw new Error(`${location}.kind must be "file" or "symbolic-link".`);
+};
+const assertUniqueSortedArtifacts = (artifacts, location)=>{
+    const paths = artifacts.map((artifact)=>artifact.logicalPath);
+    const unique = new Set(paths);
+    if (unique.size !== paths.length) {
+        const duplicate = paths.find((logicalPath, index)=>paths.indexOf(logicalPath) !== index);
+        throw new Error(`Duplicate artifact logicalPath "${duplicate}".`);
+    }
+    const sorted = [
+        ...paths
+    ].sort((left, right)=>left.localeCompare(right));
+    if (paths.some((logicalPath, index)=>logicalPath !== sorted[index])) throw new Error(`${location} must be sorted by logicalPath.`);
+};
+const assertSurfacePaths = (value, location)=>{
+    if (!Array.isArray(value) || 0 === value.length) throw new Error(`${location} must contain at least one artifact path.`);
+    const paths = value.map((item, index)=>assertNormalizedLogicalPath(item, `${location}[${index}]`));
+    const sorted = [
+        ...paths
+    ].sort((left, right)=>left.localeCompare(right));
+    if (paths.some((logicalPath, index)=>logicalPath !== sorted[index])) throw new Error(`${location} must be sorted by logicalPath.`);
+    if (new Set(paths).size !== paths.length) throw new Error(`${location} must not contain duplicate artifact paths.`);
+    return paths;
+};
+const assertSurfaces = (value)=>{
+    const surfaces = assertRecord(value, 'surfaces');
+    assertExactKeys(surfaces, [
+        'uiClient',
+        'ssr',
+        'apiBackend',
+        'backendFederation'
+    ], 'surfaces');
+    const backendFederation = assertRecord(surfaces.backendFederation, 'surfaces.backendFederation');
+    assertExactKeys(backendFederation, [
+        'manifest',
+        'container'
+    ], 'surfaces.backendFederation');
+    return {
+        uiClient: assertSurfacePaths(surfaces.uiClient, 'surfaces.uiClient'),
+        ssr: assertSurfacePaths(surfaces.ssr, 'surfaces.ssr'),
+        apiBackend: assertSurfacePaths(surfaces.apiBackend, 'surfaces.apiBackend'),
+        backendFederation: {
+            manifest: assertNormalizedLogicalPath(backendFederation.manifest, 'surfaces.backendFederation.manifest'),
+            container: assertNormalizedLogicalPath(backendFederation.container, 'surfaces.backendFederation.container')
+        }
+    };
+};
+const assertSurfaceReferences = (artifacts, surfaces)=>{
+    const artifactPaths = new Set(artifacts.map((artifact)=>artifact.logicalPath));
+    for (const [surface, paths] of Object.entries({
+        uiClient: surfaces.uiClient,
+        ssr: surfaces.ssr,
+        apiBackend: surfaces.apiBackend,
+        'backendFederation.manifest': [
+            surfaces.backendFederation.manifest
+        ],
+        'backendFederation.container': [
+            surfaces.backendFederation.container
+        ]
+    }))for (const logicalPath of paths)if (!artifactPaths.has(logicalPath)) throw new Error(`surfaces.${surface} references unbound artifact "${logicalPath}".`);
+};
+const assertTargetSurfaceContract = (target, artifacts, surfaces)=>{
+    const byPath = new Map(artifacts.map((artifact)=>[
+            artifact.logicalPath,
+            artifact
+        ]));
+    const assertRuntime = (paths, expected, surface)=>{
+        for (const logicalPath of paths){
+            const artifact = byPath.get(logicalPath);
+            if (artifact?.runtime !== expected) throw new Error(`${target} ${surface} artifact "${logicalPath}" must use runtime "${expected}"; received "${String(artifact?.runtime)}".`);
+            if ('kind' in artifact && 'file' !== artifact.kind) throw new Error(`${target} ${surface} artifact "${logicalPath}" must be a file.`);
+        }
+    };
+    assertRuntime(surfaces.uiClient, 'browser', 'UI/client');
+    assertRuntime(surfaces.ssr, 'node' === target ? 'nodejs' : 'workerd', 'SSR');
+    assertRuntime(surfaces.apiBackend, 'node' === target ? 'nodejs' : 'workerd-effect', 'API/backend');
+    assertRuntime([
+        surfaces.backendFederation.manifest
+    ], 'module-federation-manifest', 'backend federation manifest');
+    assertRuntime([
+        surfaces.backendFederation.container
+    ], 'node' === target ? 'nodejs' : 'commonjs-module', 'backend federation container');
+};
+const deepFreeze = (value)=>{
+    if (null !== value && 'object' == typeof value && !Object.isFrozen(value)) {
+        Object.freeze(value);
+        for (const child of Object.values(value))deepFreeze(child);
+    }
+    return value;
+};
+const assertEnvelope = (value)=>{
+    const envelope = assertRecord(value, 'envelope');
+    assertExactKeys(envelope, [
+        'schemaVersion',
+        'kind',
+        'target',
+        'identity',
+        'artifacts',
+        'surfaces',
+        'envelopeDigest'
+    ], 'envelope');
+    if (envelope.schemaVersion !== MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION) throw new Error(`envelope.schemaVersion must be ${MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION}.`);
+    if (envelope.kind !== MICROVERTICAL_RELEASE_ENVELOPE_KIND) throw new Error(`envelope.kind must be "${MICROVERTICAL_RELEASE_ENVELOPE_KIND}".`);
+    if (!Array.isArray(envelope.artifacts) || 0 === envelope.artifacts.length) throw new Error('envelope.artifacts must contain at least one artifact.');
+    const artifacts = envelope.artifacts.map((artifact, index)=>assertReleaseArtifact(artifact, `envelope.artifacts[${index}]`));
+    assertUniqueSortedArtifacts(artifacts, 'envelope.artifacts');
+    const target = assertTarget(envelope.target, 'envelope.target');
+    const surfaces = assertSurfaces(envelope.surfaces);
+    assertSurfaceReferences(artifacts, surfaces);
+    assertTargetSurfaceContract(target, artifacts, surfaces);
+    const parsed = {
+        schemaVersion: MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION,
+        kind: MICROVERTICAL_RELEASE_ENVELOPE_KIND,
+        target,
+        identity: assertReleaseIdentity(envelope.identity, 'envelope.identity'),
+        artifacts,
+        surfaces,
+        envelopeDigest: assertNonEmptyString(envelope.envelopeDigest, 'envelope.envelopeDigest')
+    };
+    if (!SHA256_PATTERN.test(parsed.envelopeDigest)) throw new Error('envelope.envelopeDigest must be a lowercase SHA-256 digest.');
+    const expectedDigest = digestMicroVerticalReleaseEnvelopePayload(releaseEnvelopePayload(parsed));
+    if (parsed.envelopeDigest !== expectedDigest) throw new Error('envelope.envelopeDigest does not match canonical payload.');
+    return parsed;
+};
+const createMicroVerticalReleaseEnvelope = async (input)=>{
+    const artifactRoot = await promises.realpath(node_path.resolve(input.artifactRoot));
+    const target = assertTarget(input.target);
+    const identity = assertReleaseIdentity(input.identity);
+    if (!Array.isArray(input.artifacts) || 0 === input.artifacts.length) throw new Error('artifacts must contain at least one artifact.');
+    const inputs = input.artifacts.map((artifact, index)=>assertArtifactInput(artifact, `artifacts[${index}]`));
+    const sortedInputs = [
+        ...inputs
+    ].sort((left, right)=>left.logicalPath.localeCompare(right.logicalPath));
+    assertUniqueSortedArtifacts(sortedInputs, 'artifacts');
+    const surfaces = assertSurfaces(input.surfaces);
+    assertSurfaceReferences(sortedInputs, surfaces);
+    assertTargetSurfaceContract(target, sortedInputs, surfaces);
+    const artifacts = await Promise.all(sortedInputs.map((artifact)=>readFinalArtifact(artifactRoot, artifact)));
+    assertTargetSurfaceContract(target, artifacts, surfaces);
+    const payload = {
+        schemaVersion: MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION,
+        kind: MICROVERTICAL_RELEASE_ENVELOPE_KIND,
+        target,
+        identity,
+        artifacts,
+        surfaces
+    };
+    return deepFreeze({
+        ...payload,
+        envelopeDigest: digestMicroVerticalReleaseEnvelopePayload(payload)
+    });
+};
+const verifyMicroVerticalReleaseEnvelope = async (value, options)=>{
+    const envelope = assertEnvelope(value);
+    if (void 0 !== options.expectedTarget && envelope.target !== options.expectedTarget) throw new Error(`envelope.target must be "${options.expectedTarget}" for this staging target; received "${envelope.target}".`);
+    const artifactRoot = await promises.realpath(node_path.resolve(options.artifactRoot));
+    for (const artifact of envelope.artifacts){
+        const finalArtifact = await readFinalArtifact(artifactRoot, artifact, options.logicalPathForArtifact?.(artifact) ?? artifact.logicalPath);
+        const matches = finalArtifact.kind === artifact.kind && ('file' === artifact.kind && 'file' === finalArtifact.kind ? finalArtifact.byteLength === artifact.byteLength && finalArtifact.sha256 === artifact.sha256 : 'symbolic-link' === artifact.kind && 'symbolic-link' === finalArtifact.kind && finalArtifact.linkTarget === artifact.linkTarget && finalArtifact.targetKind === artifact.targetKind && finalArtifact.targetLogicalPath === artifact.targetLogicalPath);
+        if (!matches) throw new Error('file' === artifact.kind && 'file' === finalArtifact.kind ? `Artifact "${artifact.logicalPath}" digest does not match final artifact bytes.` : `Artifact "${artifact.logicalPath}" does not match its final filesystem binding.`);
+    }
+    return deepFreeze(envelope);
+};
+export { MICROVERTICAL_RELEASE_ENVELOPE_KIND, MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION, MICROVERTICAL_RELEASE_TARGETS, canonicalSerializeMicroVerticalReleaseEnvelope, createMicroVerticalReleaseEnvelope, verifyMicroVerticalReleaseEnvelope };

package/dist/esm/ultramodern-release-envelope/types.mjs

@@ -0,0 +1,7 @@
+const MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION = 3;
+const MICROVERTICAL_RELEASE_ENVELOPE_KIND = 'ultramodern-target-microvertical-release-envelope';
+const MICROVERTICAL_RELEASE_TARGETS = [
+    'node',
+    'cloudflare'
+];
+export { MICROVERTICAL_RELEASE_ENVELOPE_KIND, MICROVERTICAL_RELEASE_ENVELOPE_SCHEMA_VERSION, MICROVERTICAL_RELEASE_TARGETS };

package/dist/esm/ultramodern-release-identity.mjs

@@ -0,0 +1,66 @@
+import { execFileSync } from "node:child_process";
+import { createHash } from "node:crypto";
+const BUILD_MARKER_NAMESPACE = 'ultramodern-delivery-unit-release-build-marker:v1';
+const PROMOTABLE_SOURCE_REVISION_PATTERN = /^(?:[a-f0-9]{40}|[a-f0-9]{64})$/u;
+const gitOutput = (workspaceRoot, args)=>{
+    try {
+        return execFileSync('git', [
+            '-C',
+            workspaceRoot,
+            ...args
+        ], {
+            encoding: 'utf8',
+            stdio: [
+                'ignore',
+                'pipe',
+                'ignore'
+            ]
+        }).trim();
+    } catch  {
+        return;
+    }
+};
+const createUltramodernReleaseBuildMarker = ({ generationBuildMarker, sourceRevision, unitId })=>createHash('sha256').update(`${BUILD_MARKER_NAMESPACE}:${unitId}:${generationBuildMarker}:${sourceRevision}`).digest('hex').slice(0, 16);
+const resolveUltramodernSourceRevision = (workspaceRoot = process.cwd(), configuredSourceRevision)=>{
+    const configuredArgumentValue = configuredSourceRevision?.trim();
+    const configuredEnvironmentValue = process.env.ULTRAMODERN_SOURCE_REVISION?.trim();
+    const configuredArgument = configuredArgumentValue && 'workspace' !== configuredArgumentValue ? configuredArgumentValue : void 0;
+    const configuredEnvironment = configuredEnvironmentValue && 'workspace' !== configuredEnvironmentValue ? configuredEnvironmentValue : void 0;
+    if (configuredArgument && configuredEnvironment && configuredArgument !== configuredEnvironment) throw new Error(`Configured source revision ${configuredArgument} does not match environment source revision ${configuredEnvironment}.`);
+    const configured = configuredArgument ?? configuredEnvironment;
+    const gitRoot = gitOutput(workspaceRoot, [
+        'rev-parse',
+        '--show-toplevel'
+    ]);
+    if (!gitRoot) {
+        if (!configured) return 'workspace';
+        if (!PROMOTABLE_SOURCE_REVISION_PATTERN.test(configured)) throw new Error(`Configured source revision ${configured} must be an exact lowercase 40- or 64-character Git object ID.`);
+        return configured;
+    }
+    const revision = gitOutput(gitRoot, [
+        'rev-parse',
+        'HEAD'
+    ]);
+    const status = gitOutput(gitRoot, [
+        'status',
+        '--porcelain=v1',
+        '--untracked-files=all'
+    ]);
+    if (!revision || void 0 === status || status.length > 0) return 'workspace';
+    if (!PROMOTABLE_SOURCE_REVISION_PATTERN.test(revision)) return 'workspace';
+    if (configured && configured !== revision) throw new Error(`Configured source revision ${configured} does not match clean Git HEAD ${revision}.`);
+    return revision;
+};
+const resolveUltramodernReleaseIdentity = ({ generationBuildMarker, sourceRevision: configuredSourceRevision, unitId, workspaceRoot })=>{
+    const explicitSourceRevision = configuredSourceRevision?.trim();
+    const sourceRevision = resolveUltramodernSourceRevision(workspaceRoot, explicitSourceRevision);
+    return {
+        buildMarker: 'workspace' === sourceRevision ? generationBuildMarker : createUltramodernReleaseBuildMarker({
+            generationBuildMarker,
+            sourceRevision,
+            unitId
+        }),
+        sourceRevision
+    };
+};
+export { createUltramodernReleaseBuildMarker, resolveUltramodernReleaseIdentity, resolveUltramodernSourceRevision };

package/dist/esm-node/builder/generator/getBuilderEnvironments.mjs

@@ -4,6 +4,7 @@ import node_fs from "node:fs";
 import node_path from "node:path";
 import { SERVICE_WORKER_ENVIRONMENT_NAME } from "@modern-js/builder";
 import { isProd, isSSR, isServiceWorker, isUseRsc, isUseSSRBundle } from "@modern-js/utils";
+import { CLOUDFLARE_WORKER_NODE_BUILTINS } from "../../plugins/deploy/platforms/cloudflare-output-contract.mjs";
 import { fileURLToPath as __rspack_fileURLToPath } from "node:url";
 import { dirname as __rspack_dirname } from "node:path";
 var __rspack_import_meta_dirname__ = __rspack_dirname(__rspack_fileURLToPath(import.meta.url));
@@ -19,20 +20,6 @@ const JS_OR_TS_EXTS = [
     '.cjs',
     '.cts'
 ];
-const CLOUDFLARE_WORKER_NODE_BUILTINS = [
-    'async_hooks',
-    'buffer',
-    'crypto',
-    'events',
-    'fs/promises',
-    'module',
-    'path',
-    'process',
-    'stream',
-    'string_decoder',
-    'url',
-    'util'
-];
 const CLOUDFLARE_WORKER_COMPAT_TEMPLATE_DIR = node_path.resolve(__rspack_import_meta_dirname__, '../../plugins/deploy/platforms/templates');
 function findExistingFile(candidates) {
     return candidates.find((candidate)=>node_fs.existsSync(candidate));
@@ -263,7 +250,17 @@ function getBuilderEnvironments(normalizedConfig, appContext, tempBuilderConfig)
                         });
                         chain.output.module(true).library({
                             type: 'module'
-                        }).chunkFormat('module').chunkLoading('import').workerChunkLoading('import');
+                        }).publicPath('/').chunkFormat('module').chunkLoading('import').workerChunkLoading('import');
+                        chain.optimization.usedExports(false).providedExports(true).innerGraph(false).sideEffects(false);
+                        for (const condition of [
+                            'workerd',
+                            'worker',
+                            'webpack',
+                            isProd() ? 'production' : 'development',
+                            'import',
+                            'require',
+                            'module'
+                        ])chain.resolve.conditionNames.add(condition);
                         chain.plugins.delete('plugin-module-federation');
                         if (tanstackRouterSsrServerFile) {
                             chain.resolve.alias.set('@tanstack/router-core/ssr/server$', tanstackRouterSsrServerFile);

package/dist/esm-node/builder/shared/builderPlugins/adapterPrecompress.mjs

@@ -31,10 +31,19 @@ const mergeCompressionOptions = (base, next)=>{
         ...base,
         ...next
     };
-    if (base.compressionOptions || next.compressionOptions) merged.compressionOptions = {
-        ...base.compressionOptions,
-        ...next.compressionOptions
-    };
+    if (base.compressionOptions || next.compressionOptions) {
+        const baseCompressionOptions = base.compressionOptions;
+        const nextCompressionOptions = next.compressionOptions;
+        const mergedCompressionOptions = {
+            ...baseCompressionOptions,
+            ...nextCompressionOptions
+        };
+        if (baseCompressionOptions?.params || nextCompressionOptions?.params) mergedCompressionOptions.params = {
+            ...baseCompressionOptions?.params,
+            ...nextCompressionOptions?.params
+        };
+        merged.compressionOptions = mergedCompressionOptions;
+    }
     return merged;
 };
 const resolveCodecOptions = (codecConfig, createDefaultOptions)=>{

package/dist/esm-node/builder/shared/builderPlugins/adapterSSR.mjs

@@ -4,7 +4,7 @@ import { SERVICE_WORKER_ENVIRONMENT_NAME, isHtmlDisabled } from "@modern-js/buil
 import { fs, isUseRsc, isUseSSRBundle } from "@modern-js/utils";
 import { mergeRsbuildConfig } from "@rsbuild/core";
 import { getServerCombinedModuleFile } from "../../../plugins/analyze/utils.mjs";
-import { HtmlAsyncChunkPlugin, RouterPlugin } from "../bundlerPlugins/index.mjs";
+import { CssExtractRuntimePlugin, HtmlAsyncChunkPlugin, RouterPlugin } from "../bundlerPlugins/index.mjs";
 import * as __rspack_external_path from "path";
 const builderPluginAdapterSSR = (options)=>({
         name: 'builder-plugin-adapter-modern-ssr',
@@ -65,17 +65,20 @@ function applyRouterPlugin(chain, pluginName, options, HtmlBundlerPlugin) {
     const workerSSR = Boolean(normalizedConfig.deploy.worker?.ssr);
     const { enableInlineRouteManifests, disableInlineRouteManifests } = normalizedConfig.output;
     const inlineRouteManifests = disableInlineRouteManifests ? !disableInlineRouteManifests : enableInlineRouteManifests;
-    if (existNestedRoutes || workerSSR) chain.plugin(pluginName).use(RouterPlugin, [
-        {
-            HtmlBundlerPlugin,
-            enableInlineRouteManifests: inlineRouteManifests,
-            staticJsDir: normalizedConfig.output?.distPath?.js,
-            disableFilenameHash: normalizedConfig.output?.filenameHash === false,
-            scriptLoading: normalizedConfig.html?.scriptLoading,
-            nonce: normalizedConfig.security?.nonce,
-            useRsc: isUseRsc(normalizedConfig)
-        }
-    ]);
+    if (existNestedRoutes || workerSSR) {
+        chain.plugin(`${pluginName}-css-extract-runtime`).use(CssExtractRuntimePlugin);
+        chain.plugin(pluginName).use(RouterPlugin, [
+            {
+                HtmlBundlerPlugin,
+                enableInlineRouteManifests: inlineRouteManifests,
+                staticJsDir: normalizedConfig.output?.distPath?.js,
+                disableFilenameHash: normalizedConfig.output?.filenameHash === false,
+                scriptLoading: normalizedConfig.html?.scriptLoading,
+                nonce: normalizedConfig.security?.nonce,
+                useRsc: isUseRsc(normalizedConfig)
+            }
+        ]);
+    }
 }
 function applyFilterEntriesBySSRConfig({ isProd, chain, appNormalizedConfig }) {
     const { server: serverConfig, output: outputConfig } = appNormalizedConfig;

package/dist/esm-node/builder/shared/bundlerPlugins/CssExtractRuntimePlugin.mjs

@@ -0,0 +1,31 @@
+import "node:module";
+const PLUGIN_NAME = 'ModernjsCssExtractRuntimePlugin';
+const CSS_LOADING_RUNTIME_MODULE = 'webpack/runtime/css loading';
+const CSS_EXTRACT_STYLESHEET_MATCH = '\t\tif (tag.rel === "stylesheet" && (dataHref === href || dataHref === fullhref)) return tag;';
+const CSS_EXTRACT_STYLESHEET_MATCH_WITH_NORMALIZED_URL = `\t\tvar absoluteHref = tag.href;
+\t\tvar absoluteFullHref = new URL(fullhref, document.baseURI).href;
+\t\tif (tag.rel === "stylesheet" && (dataHref === href || dataHref === fullhref || absoluteHref === absoluteFullHref)) return tag;`;
+const isAutomaticPublicPath = (publicPath)=>'auto' === publicPath || 'auto/' === publicPath;
+const normalizeCssExtractRuntimeStylesheetLookup = (source)=>{
+    if (!source.includes('__webpack_require__.miniCssF')) return source;
+    const occurrences = source.split(CSS_EXTRACT_STYLESHEET_MATCH).length - 1;
+    if (1 !== occurrences) throw new Error(`Unsupported CssExtractRspackPlugin runtime shape: expected one stylesheet lookup, found ${occurrences}.`);
+    return source.replace(CSS_EXTRACT_STYLESHEET_MATCH, CSS_EXTRACT_STYLESHEET_MATCH_WITH_NORMALIZED_URL);
+};
+class CssExtractRuntimePlugin {
+    apply(compiler) {
+        if (!isAutomaticPublicPath(compiler.options.output.publicPath)) return;
+        compiler.hooks.thisCompilation.tap(PLUGIN_NAME, (compilation)=>{
+            compilation.hooks.runtimeModule.tap(PLUGIN_NAME, (runtimeModule)=>{
+                if (runtimeModule.identifier() !== CSS_LOADING_RUNTIME_MODULE) return;
+                const runtimeSource = runtimeModule.source?.source;
+                if ('string' != typeof runtimeSource) return;
+                runtimeModule.source.source = normalizeCssExtractRuntimeStylesheetLookup(runtimeSource);
+            });
+        });
+    }
+    constructor(){
+        this.name = PLUGIN_NAME;
+    }
+}
+export { CssExtractRuntimePlugin, normalizeCssExtractRuntimeStylesheetLookup };

package/dist/esm-node/builder/shared/bundlerPlugins/RouterPlugin.mjs

@@ -5,6 +5,13 @@ import { ROUTE_MANIFEST } from "@modern-js/utils/universal/constants";
 import { createHash } from "crypto";
 const PLUGIN_NAME = 'ModernjsRoutePlugin';
 const generateContentHash = (content)=>createHash('md5').update(content).digest('hex').slice(0, 8);
+const isAutomaticPublicPath = (publicPath)=>'auto' === publicPath || 'auto/' === publicPath;
+const normalizeAutomaticHtmlAsset = (asset)=>asset.startsWith('auto/') ? `/${asset.slice(5)}` : asset;
+const normalizeRouterAssetPublicPath = (publicPath)=>{
+    if (!publicPath) return '';
+    if (isAutomaticPublicPath(publicPath)) return '/';
+    return publicPath.endsWith('/') ? publicPath : `${publicPath}/`;
+};
 class RouterPlugin {
     isTargetNodeOrWebWorker(target) {
         if ('node' === target || Array.isArray(target) && target.includes('node')) return true;
@@ -30,15 +37,21 @@ class RouterPlugin {
         const { rspack } = compiler;
         const { Compilation, sources } = rspack;
         const { RawSource } = sources;
-        const normalizePath = (path)=>{
-            if (!path.endsWith('/')) return `${path}/`;
-            return path;
-        };
         const chunksToHtmlName = new Map();
         const ROUTE_MANIFEST_HOLDER = "route-manifest";
         const placeholder = `<!--<?- ${ROUTE_MANIFEST_HOLDER} ?>-->`;
         compiler.hooks.thisCompilation.tap(PLUGIN_NAME, (compilation)=>{
-            this.HtmlBundlerPlugin.getCompilationHooks(compilation).beforeEmit.tapAsync('RouterManifestPlugin', (data, callback)=>{
+            const htmlPluginHooks = this.HtmlBundlerPlugin.getCompilationHooks(compilation);
+            htmlPluginHooks.beforeAssetTagGeneration.tapAsync('RouterManifestPlugin', (data, callback)=>{
+                if (isAutomaticPublicPath(compiler.options.output.publicPath)) {
+                    data.assets.publicPath = '/';
+                    data.assets.js = data.assets.js.map(normalizeAutomaticHtmlAsset);
+                    data.assets.css = data.assets.css.map(normalizeAutomaticHtmlAsset);
+                    if (data.assets.favicon) data.assets.favicon = normalizeAutomaticHtmlAsset(data.assets.favicon);
+                }
+                callback(null, data);
+            });
+            htmlPluginHooks.beforeEmit.tapAsync('RouterManifestPlugin', (data, callback)=>{
                 const { outputName } = data;
                 const { chunks } = data.plugin.options;
                 chunksToHtmlName.set(chunks, outputName);
@@ -58,6 +71,7 @@ class RouterPlugin {
                     ids: true
                 });
                 const { publicPath, chunks = [], namedChunkGroups } = stats;
+                const assetPublicPath = normalizeRouterAssetPublicPath(publicPath);
                 const routeAssets = {};
                 if (!namedChunkGroups) return;
                 const prevManifestAsset = compilation.getAsset(ROUTE_MANIFEST_FILE);
@@ -79,7 +93,7 @@ class RouterPlugin {
                         const child = stack.pop();
                         if (visited.has(child)) continue;
                         visited.add(child);
-                        for (const chunk of child.chunks)for (const file of chunk.files)if (/\.css$/.test(file)) cssFiles.add(publicPath ? normalizePath(publicPath) + file : file);
+                        for (const chunk of child.chunks)for (const file of chunk.files)if (/\.css$/.test(file)) cssFiles.add(assetPublicPath + file);
                         for (const c of child.childrenIterable)stack.push(c);
                     }
                     return Array.from(cssFiles);
@@ -89,7 +103,7 @@ class RouterPlugin {
                     if (name.startsWith('async-')) asyncEntryNames.push(name);
                     const assets = chunkGroup.assets.map((asset)=>{
                         const filename = asset.name;
-                        return publicPath ? normalizePath(publicPath) + filename : filename;
+                        return assetPublicPath + filename;
                     });
                     const directCssAssets = assets.filter((asset)=>/\.css$/.test(asset));
                     const descendantCssAssets = collectDescendantCssAssets(name).filter((asset)=>!directCssAssets.includes(asset));
@@ -144,7 +158,7 @@ class RouterPlugin {
               window.${ROUTE_MANIFEST} = ${JSON.stringify(manifest, (k, v)=>{
                         if (('assets' === k || 'referenceCssAssets' === k) && Array.isArray(v)) {
                             if (!useRsc) return;
-                            return v.map((item)=>item.replace(publicPath, ''));
+                            return v.map((item)=>assetPublicPath ? item.replace(assetPublicPath, '') : item);
                         }
                         return v;
                     })};
@@ -161,7 +175,7 @@ class RouterPlugin {
                     if (oldHtml) if (enableInlineRouteManifests) compilation.updateAsset(htmlName, new RawSource(oldHtml.source().toString().replace(placeholder, `<script ${nonceAttr}>${injectedContent}</script>`)), void 0);
                     else {
                         const scriptPath = `${staticJsDir}/${ROUTE_MANIFEST_HOLDER}-${entryName}${disableFilenameHash ? '.js' : `.${generateContentHash(injectedContent)}.js`}`;
-                        const scriptUrl = `${publicPath}${scriptPath}`;
+                        const scriptUrl = `${assetPublicPath}${scriptPath}`;
                         const scriptLoadingAttr = 'defer' === scriptLoading ? scriptLoading : 'module' === scriptLoading ? 'type="module"' : '';
                         const script = `<script ${scriptLoadingAttr} ${nonceAttr} src="${scriptUrl}"></script>`;
                         compilation.updateAsset(htmlName, new RawSource(oldHtml.source().toString().replace(placeholder, script)), void 0);
@@ -184,4 +198,4 @@ class RouterPlugin {
         this.useRsc = useRsc;
     }
 }
-export { RouterPlugin };
+export { RouterPlugin, normalizeRouterAssetPublicPath };

package/dist/esm-node/builder/shared/bundlerPlugins/index.mjs

@@ -1,4 +1,5 @@
 import "node:module";
+export * from "./CssExtractRuntimePlugin.mjs";
 export * from "./HtmlAsyncChunkPlugin.mjs";
 export * from "./HtmlBottomTemplate.mjs";
 export * from "./RouterPlugin.mjs";