@componentonce/compiler-esbuild 0.1.0-beta.0

package/LICENSE

@@ -0,0 +1,21 @@
+MIT License
+
+Copyright (c) 2026
+
+Permission is hereby granted, free of charge, to any person obtaining a copy
+of this software and associated documentation files (the "Software"), to deal
+in the Software without restriction, including without limitation the rights
+to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
+copies of the Software, and to permit persons to whom the Software is
+furnished to do so, subject to the following conditions:
+
+The above copyright notice and this permission notice shall be included in all
+copies or substantial portions of the Software.
+
+THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
+IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
+FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
+AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
+LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
+OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
+SOFTWARE.

package/README.md

@@ -0,0 +1,31 @@
+# @componentonce/compiler-esbuild
+
+Optional trusted compiler/evaluator tooling for ComponentOnce.
+
+This package is not part of the core runtime ABI and owns no storage or transport.
+
+## Generic modules
+
+compileTrustedModule compiles JavaScript/TypeScript into an immutable CommonJS artifact. It adds no runtime externals implicitly. Any imported host module must be declared explicitly through externalModules and injected when instantiateTrustedBundle executes the trusted artifact.
+
+This is suitable for ordinary DOM/HTML modules and other non-React implementations.
+
+## React convenience
+
+compileTrustedReactModule wraps the generic compiler with automatic JSX transformation and allows the React module specifiers as host externals:
+
+- react
+- react/jsx-runtime
+- react/jsx-dev-runtime
+
+React is still never bundled. The host injects its own React singleton at instantiation. Additional host SDK imports use additionalExternalModules.
+
+## Artifact and trust model
+
+Artifacts contain deterministic bundle text, byte length, SHA-256 hash/integrity, normalized diagnostics, exact referenced externals, and esbuild metafile data.
+
+instantiateTrustedBundle deliberately uses new Function with a narrow injected require map. It is for trusted internal code and is not a security sandbox.
+
+Storage is host-owned: compiled text/bytes can live in a database-backed file object, local disk, object storage, or any other adapter.
+
+esbuild transpiles TypeScript syntax but does not perform semantic type checking; hosts that need that guarantee should run their TypeScript checker separately.

package/dist/index.d.ts

@@ -0,0 +1,137 @@
+import { type Metafile } from "esbuild";
+/** Stable identifier for the trusted CommonJS bundle contract emitted by this package. */
+export declare const COMPONENTONCE_TRUSTED_BUNDLE_FORMAT: "componentonce.trusted-cjs.v1";
+/** Source syntaxes accepted by the trusted compiler. */
+export type ComponentOnceSourceLoader = "js" | "jsx" | "ts" | "tsx";
+/** JSX transform mode forwarded to esbuild by the generic compiler. */
+export type ComponentOnceJsxMode = "transform" | "preserve" | "automatic";
+/** Input for compiling one trusted JavaScript or TypeScript module. */
+export interface ComponentOnceCompileInput {
+    /** TypeScript, TSX, JavaScript, or JSX module source. */
+    readonly source: string;
+    /** Stable diagnostic/source-map name. */
+    readonly sourceFileName?: string;
+    /** Explicit source syntax, otherwise inferred from sourceFileName. */
+    readonly loader?: ComponentOnceSourceLoader;
+    /** Exact import specifiers the host will inject during instantiation. */
+    readonly externalModules?: readonly string[];
+    /** JSX transform mode; generic compilation defaults to transform. */
+    readonly jsx?: ComponentOnceJsxMode;
+}
+/** React convenience compiler input; React externals are supplied by the wrapper. */
+export interface ComponentOnceReactCompileInput {
+    readonly source: string;
+    readonly sourceFileName?: string;
+    readonly loader?: ComponentOnceSourceLoader;
+    /** Additional non-React host externals. */
+    readonly additionalExternalModules?: readonly string[];
+}
+/** Source location attached to a normalized compiler diagnostic. */
+export interface ComponentOnceDiagnosticLocation {
+    /** Source file name supplied to the compiler. */
+    readonly file: string;
+    /** One-based source line. */
+    readonly line: number;
+    /** Zero-based source column. */
+    readonly column: number;
+    /** Length of the highlighted source range. */
+    readonly length: number;
+    /** Full source line associated with the diagnostic. */
+    readonly lineText: string;
+}
+/** Secondary explanatory note attached to a compiler diagnostic. */
+export interface ComponentOnceDiagnosticNote {
+    /** Human-readable note. */
+    readonly text: string;
+    /** Source location when esbuild can identify one. */
+    readonly location?: ComponentOnceDiagnosticLocation;
+}
+/** Storage-neutral compiler warning or error. */
+export interface ComponentOnceDiagnostic {
+    /** Diagnostic severity. */
+    readonly kind: "error" | "warning";
+    /** Human-readable diagnostic text. */
+    readonly text: string;
+    /** Primary source location when available. */
+    readonly location?: ComponentOnceDiagnosticLocation;
+    /** Supporting notes supplied by esbuild. */
+    readonly notes: readonly ComponentOnceDiagnosticNote[];
+}
+/** Read-only esbuild metadata describing the emitted bundle and its external imports. */
+export type ComponentOnceBundleMetafile = Readonly<Metafile>;
+/** Immutable, storage-neutral output of the trusted module compiler. */
+export interface ComponentOnceTrustedBundleArtifact {
+    /** Bundle contract understood by `instantiateTrustedBundle`. */
+    readonly format: typeof COMPONENTONCE_TRUSTED_BUNDLE_FORMAT;
+    /** Executable CommonJS bundle text. */
+    readonly code: string;
+    /** UTF-8 byte length of `code`. */
+    readonly byteLength: number;
+    /** Lowercase hexadecimal SHA-256 digest of `code`. */
+    readonly sha256: string;
+    /** Subresource-integrity-style SHA-256 value for `code`. */
+    readonly integrity: string;
+    /** Exact external module specifiers referenced by the emitted bundle. */
+    readonly externalModules: readonly string[];
+    /** Normalized non-fatal compiler diagnostics. */
+    readonly diagnostics: readonly ComponentOnceDiagnostic[];
+    /** esbuild metadata for dependency and output inspection. */
+    readonly metafile: ComponentOnceBundleMetafile;
+}
+/** Compilation failure with stable, normalized esbuild diagnostics. */
+export declare class ComponentOnceCompileError extends Error {
+    /** Compiler errors that caused the build to fail. */
+    readonly diagnostics: readonly ComponentOnceDiagnostic[];
+    constructor(diagnostics: readonly ComponentOnceDiagnostic[]);
+}
+/** Exact host-owned module values exposed to a trusted bundle's local `require`. */
+export type ComponentOnceHostExternals = Readonly<Record<string, unknown>>;
+/** JavaScript text, UTF-8 bytes, or an in-memory artifact accepted by the trusted evaluator. */
+export type ComponentOnceTrustedBundleSource = string | Uint8Array | ComponentOnceTrustedBundleArtifact;
+/** Options controlling explicit external injection and optional integrity verification. */
+export interface InstantiateTrustedBundleOptions {
+    /** Exact external values, including the host's React and JSX runtime instances. */
+    readonly externals: ComponentOnceHostExternals;
+    /** Expected integrity for separately loaded text/bytes; artifacts verify their own value by default. */
+    readonly expectedIntegrity?: string;
+    /** Debugger-only source name appended to the evaluated bundle. */
+    readonly sourceName?: string;
+}
+/** Deterministic error raised when a bundle requests an external the host did not inject. */
+export declare class ComponentOnceMissingExternalError extends Error {
+    /** Exact module specifier requested by the bundle. */
+    readonly specifier: string;
+    /** Sorted external specifiers supplied by the host. */
+    readonly availableExternals: readonly string[];
+    constructor(specifier: string, availableExternals: readonly string[]);
+}
+/** Error raised when loaded bundle content does not match its expected SHA-256 integrity. */
+export declare class ComponentOnceIntegrityError extends Error {
+    /** Expected subresource-integrity-style SHA-256 value. */
+    readonly expectedIntegrity: string;
+    /** Actual subresource-integrity-style SHA-256 value. */
+    readonly actualIntegrity: string;
+    constructor(expectedIntegrity: string, actualIntegrity: string);
+}
+/**
+ * Compile one trusted module into a deterministic CommonJS artifact.
+ *
+ * Only caller-declared imports remain external. This generic path does not add React or any other
+ * runtime implicitly; every external must be injected explicitly by the host at instantiation.
+ */
+export declare function compileTrustedModule(input: ComponentOnceCompileInput): Promise<ComponentOnceTrustedBundleArtifact>;
+/** Compile a trusted React module while keeping the host React singleton external. */
+export declare function compileTrustedReactModule(input: ComponentOnceReactCompileInput): Promise<ComponentOnceTrustedBundleArtifact>;
+/** Calculate a subresource-integrity-style SHA-256 value for bundle text or UTF-8 bytes. */
+export declare function calculateTrustedBundleIntegrity(source: string | Uint8Array): string;
+/** Throw when bundle text or bytes do not match an expected SHA-256 integrity value. */
+export declare function assertTrustedBundleIntegrity(source: string | Uint8Array, expectedIntegrity: string): void;
+/**
+ * Execute a trusted bundle with a deliberately narrow CommonJS environment.
+ *
+ * This API uses `new Function` and is only for trusted internal code. It is not a sandbox: evaluated
+ * code retains access to JavaScript globals. The only available `require` values are provided by
+ * `options.externals`, so React is always the exact instance selected by the host.
+ */
+export declare function instantiateTrustedBundle<TExports = Record<string, unknown>>(source: ComponentOnceTrustedBundleSource, options: InstantiateTrustedBundleOptions): TExports;
+//# sourceMappingURL=index.d.ts.map

package/dist/index.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.d.ts","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AACA,OAAO,EAKL,KAAK,QAAQ,EAEd,MAAM,SAAS,CAAC;AAEjB,0FAA0F;AAC1F,eAAO,MAAM,mCAAmC,EAAG,8BAAuC,CAAC;AAO3F,wDAAwD;AACxD,MAAM,MAAM,yBAAyB,GAAG,IAAI,GAAG,KAAK,GAAG,IAAI,GAAG,KAAK,CAAC;AAEpE,uEAAuE;AACvE,MAAM,MAAM,oBAAoB,GAAG,WAAW,GAAG,UAAU,GAAG,WAAW,CAAC;AAE1E,uEAAuE;AACvE,MAAM,WAAW,yBAAyB;IACxC,yDAAyD;IACzD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,yCAAyC;IACzC,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,sEAAsE;IACtE,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IAC5C,yEAAyE;IACzE,QAAQ,CAAC,eAAe,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;IAC7C,qEAAqE;IACrE,QAAQ,CAAC,GAAG,CAAC,EAAE,oBAAoB,CAAC;CACrC;AAED,qFAAqF;AACrF,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,MAAM,CAAC,EAAE,yBAAyB,CAAC;IAC5C,2CAA2C;IAC3C,QAAQ,CAAC,yBAAyB,CAAC,EAAE,SAAS,MAAM,EAAE,CAAC;CACxD;AAED,oEAAoE;AACpE,MAAM,WAAW,+BAA+B;IAC9C,iDAAiD;IACjD,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,6BAA6B;IAC7B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,gCAAgC;IAChC,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,8CAA8C;IAC9C,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,uDAAuD;IACvD,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;CAC3B;AAED,oEAAoE;AACpE,MAAM,WAAW,2BAA2B;IAC1C,2BAA2B;IAC3B,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,qDAAqD;IACrD,QAAQ,CAAC,QAAQ,CAAC,EAAE,+BAA+B,CAAC;CACrD;AAED,iDAAiD;AACjD,MAAM,WAAW,uBAAuB;IACtC,2BAA2B;IAC3B,QAAQ,CAAC,IAAI,EAAE,OAAO,GAAG,SAAS,CAAC;IACnC,sCAAsC;IACtC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,8CAA8C;IAC9C,QAAQ,CAAC,QAAQ,CAAC,EAAE,+BAA+B,CAAC;IACpD,4CAA4C;IAC5C,QAAQ,CAAC,KAAK,EAAE,SAAS,2BAA2B,EAAE,CAAC;CACxD;AAED,yFAAyF;AACzF,MAAM,MAAM,2BAA2B,GAAG,QAAQ,CAAC,QAAQ,CAAC,CAAC;AAE7D,wEAAwE;AACxE,MAAM,WAAW,kCAAkC;IACjD,gEAAgE;IAChE,QAAQ,CAAC,MAAM,EAAE,OAAO,mCAAmC,CAAC;IAC5D,uCAAuC;IACvC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,mCAAmC;IACnC,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,sDAAsD;IACtD,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,4DAA4D;IAC5D,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,yEAAyE;IACzE,QAAQ,CAAC,eAAe,EAAE,SAAS,MAAM,EAAE,CAAC;IAC5C,iDAAiD;IACjD,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;IACzD,6DAA6D;IAC7D,QAAQ,CAAC,QAAQ,EAAE,2BAA2B,CAAC;CAChD;AAED,uEAAuE;AACvE,qBAAa,yBAA0B,SAAQ,KAAK;IAClD,qDAAqD;IACrD,QAAQ,CAAC,WAAW,EAAE,SAAS,uBAAuB,EAAE,CAAC;gBAE7C,WAAW,EAAE,SAAS,uBAAuB,EAAE;CAK5D;AAED,oFAAoF;AACpF,MAAM,MAAM,0BAA0B,GAAG,QAAQ,CAAC,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAC,CAAC;AAE3E,gGAAgG;AAChG,MAAM,MAAM,gCAAgC,GACxC,MAAM,GACN,UAAU,GACV,kCAAkC,CAAC;AAEvC,2FAA2F;AAC3F,MAAM,WAAW,+BAA+B;IAC9C,mFAAmF;IACnF,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,wGAAwG;IACxG,QAAQ,CAAC,iBAAiB,CAAC,EAAE,MAAM,CAAC;IACpC,kEAAkE;IAClE,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,CAAC;CAC9B;AAED,6FAA6F;AAC7F,qBAAa,iCAAkC,SAAQ,KAAK;IAC1D,sDAAsD;IACtD,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,uDAAuD;IACvD,QAAQ,CAAC,kBAAkB,EAAE,SAAS,MAAM,EAAE,CAAC;gBAEnC,SAAS,EAAE,MAAM,EAAE,kBAAkB,EAAE,SAAS,MAAM,EAAE;CAQrE;AAED,6FAA6F;AAC7F,qBAAa,2BAA4B,SAAQ,KAAK;IACpD,0DAA0D;IAC1D,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,wDAAwD;IACxD,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;gBAErB,iBAAiB,EAAE,MAAM,EAAE,eAAe,EAAE,MAAM;CAQ/D;AAED;;;;;GAKG;AACH,wBAAsB,oBAAoB,CACxC,KAAK,EAAE,yBAAyB,GAC/B,OAAO,CAAC,kCAAkC,CAAC,CA+D7C;AAED,sFAAsF;AACtF,wBAAgB,yBAAyB,CACvC,KAAK,EAAE,8BAA8B,GACpC,OAAO,CAAC,kCAAkC,CAAC,CAW7C;AAED,4FAA4F;AAC5F,wBAAgB,+BAA+B,CAAC,MAAM,EAAE,MAAM,GAAG,UAAU,GAAG,MAAM,CAEnF;AAED,wFAAwF;AACxF,wBAAgB,4BAA4B,CAC1C,MAAM,EAAE,MAAM,GAAG,UAAU,EAC3B,iBAAiB,EAAE,MAAM,GACxB,IAAI,CAKN;AAED;;;;;;GAMG;AACH,wBAAgB,wBAAwB,CAAC,QAAQ,GAAG,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,EACzE,MAAM,EAAE,gCAAgC,EACxC,OAAO,EAAE,+BAA+B,GACvC,QAAQ,CAiCV"}

package/dist/index.js

@@ -0,0 +1,290 @@
+import { createHash } from "node:crypto";
+import { build, } from "esbuild";
+/** Stable identifier for the trusted CommonJS bundle contract emitted by this package. */
+export const COMPONENTONCE_TRUSTED_BUNDLE_FORMAT = "componentonce.trusted-cjs.v1";
+const DEFAULT_SOURCE_FILE_NAME = "componentonce-module.ts";
+const DEFAULT_REACT_SOURCE_FILE_NAME = "componentonce-module.tsx";
+const DEFAULT_EVALUATED_SOURCE_NAME = "componentonce-trusted-bundle.js";
+const REACT_EXTERNALS = ["react", "react/jsx-runtime", "react/jsx-dev-runtime"];
+/** Compilation failure with stable, normalized esbuild diagnostics. */
+export class ComponentOnceCompileError extends Error {
+    /** Compiler errors that caused the build to fail. */
+    diagnostics;
+    constructor(diagnostics) {
+        super(formatCompileErrorMessage(diagnostics));
+        this.name = "ComponentOnceCompileError";
+        this.diagnostics = Object.freeze([...diagnostics]);
+    }
+}
+/** Deterministic error raised when a bundle requests an external the host did not inject. */
+export class ComponentOnceMissingExternalError extends Error {
+    /** Exact module specifier requested by the bundle. */
+    specifier;
+    /** Sorted external specifiers supplied by the host. */
+    availableExternals;
+    constructor(specifier, availableExternals) {
+        const sortedExternals = Object.freeze([...availableExternals].sort());
+        const available = sortedExternals.length === 0 ? "(none)" : sortedExternals.join(", ");
+        super(`Missing trusted bundle external "${specifier}". Available externals: ${available}.`);
+        this.name = "ComponentOnceMissingExternalError";
+        this.specifier = specifier;
+        this.availableExternals = sortedExternals;
+    }
+}
+/** Error raised when loaded bundle content does not match its expected SHA-256 integrity. */
+export class ComponentOnceIntegrityError extends Error {
+    /** Expected subresource-integrity-style SHA-256 value. */
+    expectedIntegrity;
+    /** Actual subresource-integrity-style SHA-256 value. */
+    actualIntegrity;
+    constructor(expectedIntegrity, actualIntegrity) {
+        super(`Trusted bundle integrity mismatch. Expected "${expectedIntegrity}" but received "${actualIntegrity}".`);
+        this.name = "ComponentOnceIntegrityError";
+        this.expectedIntegrity = expectedIntegrity;
+        this.actualIntegrity = actualIntegrity;
+    }
+}
+/**
+ * Compile one trusted module into a deterministic CommonJS artifact.
+ *
+ * Only caller-declared imports remain external. This generic path does not add React or any other
+ * runtime implicitly; every external must be injected explicitly by the host at instantiation.
+ */
+export async function compileTrustedModule(input) {
+    const sourceFileName = input.sourceFileName ?? DEFAULT_SOURCE_FILE_NAME;
+    const loader = input.loader ?? inferLoader(sourceFileName);
+    const allowedExternals = normalizeAllowedExternals(input.externalModules ?? []);
+    try {
+        const result = await build({
+            bundle: true,
+            charset: "utf8",
+            format: "cjs",
+            jsx: input.jsx ?? "transform",
+            legalComments: "none",
+            logLevel: "silent",
+            metafile: true,
+            minify: false,
+            platform: "neutral",
+            plugins: [createHostExternalPlugin(allowedExternals)],
+            sourcemap: "inline",
+            sourcesContent: true,
+            stdin: {
+                contents: input.source,
+                loader: loader,
+                sourcefile: sourceFileName,
+            },
+            target: "es2022",
+            treeShaking: true,
+            write: false,
+        });
+        const output = result.outputFiles?.[0];
+        if (output === undefined || result.metafile === undefined) {
+            throw new ComponentOnceCompileError([
+                createInternalDiagnostic("esbuild did not return an in-memory bundle and metafile."),
+            ]);
+        }
+        const code = output.text;
+        const hashes = hashBundleSource(code);
+        const metafile = deepFreeze(result.metafile);
+        const diagnostics = Object.freeze(result.warnings.map((warning) => normalizeMessage("warning", warning)));
+        const externalModules = Object.freeze(collectExternalModules(metafile));
+        return Object.freeze({
+            format: COMPONENTONCE_TRUSTED_BUNDLE_FORMAT,
+            code,
+            byteLength: hashes.byteLength,
+            sha256: hashes.sha256,
+            integrity: hashes.integrity,
+            externalModules,
+            diagnostics,
+            metafile,
+        });
+    }
+    catch (error) {
+        if (error instanceof ComponentOnceCompileError)
+            throw error;
+        if (isBuildFailure(error)) {
+            throw new ComponentOnceCompileError(error.errors.map((message) => normalizeMessage("error", message)));
+        }
+        throw error;
+    }
+}
+/** Compile a trusted React module while keeping the host React singleton external. */
+export function compileTrustedReactModule(input) {
+    return compileTrustedModule({
+        source: input.source,
+        sourceFileName: input.sourceFileName ?? DEFAULT_REACT_SOURCE_FILE_NAME,
+        ...(input.loader === undefined ? {} : { loader: input.loader }),
+        externalModules: [
+            ...REACT_EXTERNALS,
+            ...(input.additionalExternalModules ?? []),
+        ],
+        jsx: "automatic",
+    });
+}
+/** Calculate a subresource-integrity-style SHA-256 value for bundle text or UTF-8 bytes. */
+export function calculateTrustedBundleIntegrity(source) {
+    return hashBundleSource(source).integrity;
+}
+/** Throw when bundle text or bytes do not match an expected SHA-256 integrity value. */
+export function assertTrustedBundleIntegrity(source, expectedIntegrity) {
+    const actualIntegrity = calculateTrustedBundleIntegrity(source);
+    if (actualIntegrity !== expectedIntegrity) {
+        throw new ComponentOnceIntegrityError(expectedIntegrity, actualIntegrity);
+    }
+}
+/**
+ * Execute a trusted bundle with a deliberately narrow CommonJS environment.
+ *
+ * This API uses `new Function` and is only for trusted internal code. It is not a sandbox: evaluated
+ * code retains access to JavaScript globals. The only available `require` values are provided by
+ * `options.externals`, so React is always the exact instance selected by the host.
+ */
+export function instantiateTrustedBundle(source, options) {
+    const artifact = isBundleArtifact(source) ? source : undefined;
+    if (artifact !== undefined && artifact.format !== COMPONENTONCE_TRUSTED_BUNDLE_FORMAT) {
+        throw new TypeError(`Unsupported trusted bundle format: "${String(artifact.format)}".`);
+    }
+    const bundleSource = artifact === undefined ? source : artifact.code;
+    const expectedIntegrity = options.expectedIntegrity ?? artifact?.integrity;
+    if (expectedIntegrity !== undefined) {
+        assertTrustedBundleIntegrity(bundleSource, expectedIntegrity);
+    }
+    const code = typeof bundleSource === "string" ? bundleSource : decodeUtf8(bundleSource);
+    const availableExternals = Object.keys(options.externals).sort();
+    const trustedRequire = (specifier) => {
+        if (!Object.prototype.hasOwnProperty.call(options.externals, specifier)) {
+            throw new ComponentOnceMissingExternalError(specifier, availableExternals);
+        }
+        return options.externals[specifier];
+    };
+    const commonJsModule = { exports: {} };
+    const sourceName = sanitizeSourceName(options.sourceName ?? DEFAULT_EVALUATED_SOURCE_NAME);
+    const evaluate = new Function("module", "exports", "require", `"use strict";\n${code}\n//# sourceURL=${sourceName}`);
+    evaluate(commonJsModule, commonJsModule.exports, trustedRequire);
+    return commonJsModule.exports;
+}
+function createHostExternalPlugin(allowedExternals) {
+    return {
+        name: "componentonce-host-externals",
+        setup(buildApi) {
+            buildApi.onResolve({ filter: /.*/ }, (args) => {
+                if (allowedExternals.has(args.path)) {
+                    return { external: true, path: args.path };
+                }
+                return {
+                    errors: [
+                        {
+                            text: `Import "${args.path}" is not an allowed host external. ` +
+                                "Add its exact specifier to externalModules (or additionalExternalModules for the React helper).",
+                        },
+                    ],
+                };
+            });
+        },
+    };
+}
+function normalizeAllowedExternals(additionalExternals) {
+    const externals = new Set();
+    for (const specifier of additionalExternals) {
+        if (specifier.length === 0 ||
+            specifier !== specifier.trim() ||
+            specifier.includes("\0") ||
+            specifier.includes("\n") ||
+            specifier.includes("\r")) {
+            throw new ComponentOnceCompileError([
+                createInternalDiagnostic(`Invalid additional external module specifier: ${JSON.stringify(specifier)}.`),
+            ]);
+        }
+        externals.add(specifier);
+    }
+    return externals;
+}
+function inferLoader(sourceFileName) {
+    const lowerName = sourceFileName.toLowerCase();
+    if (lowerName.endsWith(".jsx"))
+        return "jsx";
+    if (lowerName.endsWith(".js") || lowerName.endsWith(".mjs") || lowerName.endsWith(".cjs")) {
+        return "js";
+    }
+    if (lowerName.endsWith(".ts") || lowerName.endsWith(".mts") || lowerName.endsWith(".cts")) {
+        return "ts";
+    }
+    return "tsx";
+}
+function normalizeMessage(kind, message) {
+    return Object.freeze({
+        kind,
+        text: message.text,
+        ...(message.location === null ? {} : { location: normalizeLocation(message.location) }),
+        notes: Object.freeze(message.notes.map((note) => Object.freeze({
+            text: note.text,
+            ...(note.location === null ? {} : { location: normalizeLocation(note.location) }),
+        }))),
+    });
+}
+function normalizeLocation(location) {
+    return Object.freeze({
+        file: location.file,
+        line: location.line,
+        column: location.column,
+        length: location.length,
+        lineText: location.lineText,
+    });
+}
+function createInternalDiagnostic(text) {
+    return Object.freeze({ kind: "error", text, notes: Object.freeze([]) });
+}
+function formatCompileErrorMessage(diagnostics) {
+    const details = diagnostics.map((diagnostic) => {
+        const location = diagnostic.location;
+        const prefix = location === undefined
+            ? diagnostic.kind
+            : `${location.file}:${location.line}:${location.column + 1}`;
+        return `${prefix}: ${diagnostic.text}`;
+    });
+    return `ComponentOnce compilation failed${details.length === 0 ? "." : `:\n${details.join("\n")}`}`;
+}
+function isBuildFailure(error) {
+    return (typeof error === "object" &&
+        error !== null &&
+        "errors" in error &&
+        Array.isArray(error.errors));
+}
+function collectExternalModules(metafile) {
+    const modules = new Set();
+    for (const output of Object.values(metafile.outputs)) {
+        for (const imported of output.imports) {
+            if (imported.external)
+                modules.add(imported.path);
+        }
+    }
+    return [...modules].sort();
+}
+function hashBundleSource(source) {
+    const bytes = typeof source === "string" ? Buffer.from(source, "utf8") : source;
+    const digest = createHash("sha256").update(bytes).digest();
+    return {
+        byteLength: bytes.byteLength,
+        sha256: digest.toString("hex"),
+        integrity: `sha256-${digest.toString("base64")}`,
+    };
+}
+function isBundleArtifact(source) {
+    return typeof source === "object" && !(source instanceof Uint8Array);
+}
+function decodeUtf8(source) {
+    return new TextDecoder("utf-8", { fatal: true }).decode(source);
+}
+function sanitizeSourceName(sourceName) {
+    return sourceName.replace(/[\r\n\u2028\u2029]/g, "_");
+}
+function deepFreeze(value) {
+    if (value !== null && typeof value === "object" && !Object.isFrozen(value)) {
+        for (const child of Object.values(value)) {
+            deepFreeze(child);
+        }
+        Object.freeze(value);
+    }
+    return value;
+}
+//# sourceMappingURL=index.js.map

package/dist/index.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"index.js","sourceRoot":"","sources":["../src/index.ts"],"names":[],"mappings":"AAAA,OAAO,EAAE,UAAU,EAAE,MAAM,aAAa,CAAC;AACzC,OAAO,EACL,KAAK,GAMN,MAAM,SAAS,CAAC;AAEjB,0FAA0F;AAC1F,MAAM,CAAC,MAAM,mCAAmC,GAAG,8BAAuC,CAAC;AAE3F,MAAM,wBAAwB,GAAG,yBAAyB,CAAC;AAC3D,MAAM,8BAA8B,GAAG,0BAA0B,CAAC;AAClE,MAAM,6BAA6B,GAAG,iCAAiC,CAAC;AACxE,MAAM,eAAe,GAAG,CAAC,OAAO,EAAE,mBAAmB,EAAE,uBAAuB,CAAU,CAAC;AAwFzF,uEAAuE;AACvE,MAAM,OAAO,yBAA0B,SAAQ,KAAK;IAClD,qDAAqD;IAC5C,WAAW,CAAqC;IAEzD,YAAY,WAA+C;QACzD,KAAK,CAAC,yBAAyB,CAAC,WAAW,CAAC,CAAC,CAAC;QAC9C,IAAI,CAAC,IAAI,GAAG,2BAA2B,CAAC;QACxC,IAAI,CAAC,WAAW,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,WAAW,CAAC,CAAC,CAAC;IACrD,CAAC;CACF;AAqBD,6FAA6F;AAC7F,MAAM,OAAO,iCAAkC,SAAQ,KAAK;IAC1D,sDAAsD;IAC7C,SAAS,CAAS;IAC3B,uDAAuD;IAC9C,kBAAkB,CAAoB;IAE/C,YAAY,SAAiB,EAAE,kBAAqC;QAClE,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,CAAC,GAAG,kBAAkB,CAAC,CAAC,IAAI,EAAE,CAAC,CAAC;QACtE,MAAM,SAAS,GAAG,eAAe,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,eAAe,CAAC,IAAI,CAAC,IAAI,CAAC,CAAC;QACvF,KAAK,CAAC,oCAAoC,SAAS,2BAA2B,SAAS,GAAG,CAAC,CAAC;QAC5F,IAAI,CAAC,IAAI,GAAG,mCAAmC,CAAC;QAChD,IAAI,CAAC,SAAS,GAAG,SAAS,CAAC;QAC3B,IAAI,CAAC,kBAAkB,GAAG,eAAe,CAAC;IAC5C,CAAC;CACF;AAED,6FAA6F;AAC7F,MAAM,OAAO,2BAA4B,SAAQ,KAAK;IACpD,0DAA0D;IACjD,iBAAiB,CAAS;IACnC,wDAAwD;IAC/C,eAAe,CAAS;IAEjC,YAAY,iBAAyB,EAAE,eAAuB;QAC5D,KAAK,CACH,gDAAgD,iBAAiB,mBAAmB,eAAe,IAAI,CACxG,CAAC;QACF,IAAI,CAAC,IAAI,GAAG,6BAA6B,CAAC;QAC1C,IAAI,CAAC,iBAAiB,GAAG,iBAAiB,CAAC;QAC3C,IAAI,CAAC,eAAe,GAAG,eAAe,CAAC;IACzC,CAAC;CACF;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,oBAAoB,CACxC,KAAgC;IAEhC,MAAM,cAAc,GAAG,KAAK,CAAC,cAAc,IAAI,wBAAwB,CAAC;IACxE,MAAM,MAAM,GAAG,KAAK,CAAC,MAAM,IAAI,WAAW,CAAC,cAAc,CAAC,CAAC;IAC3D,MAAM,gBAAgB,GAAG,yBAAyB,CAAC,KAAK,CAAC,eAAe,IAAI,EAAE,CAAC,CAAC;IAEhF,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,MAAM,KAAK,CAAC;YACzB,MAAM,EAAE,IAAI;YACZ,OAAO,EAAE,MAAM;YACf,MAAM,EAAE,KAAK;YACb,GAAG,EAAE,KAAK,CAAC,GAAG,IAAI,WAAW;YAC7B,aAAa,EAAE,MAAM;YACrB,QAAQ,EAAE,QAAQ;YAClB,QAAQ,EAAE,IAAI;YACd,MAAM,EAAE,KAAK;YACb,QAAQ,EAAE,SAAS;YACnB,OAAO,EAAE,CAAC,wBAAwB,CAAC,gBAAgB,CAAC,CAAC;YACrD,SAAS,EAAE,QAAQ;YACnB,cAAc,EAAE,IAAI;YACpB,KAAK,EAAE;gBACL,QAAQ,EAAE,KAAK,CAAC,MAAM;gBACtB,MAAM,EAAE,MAAgB;gBACxB,UAAU,EAAE,cAAc;aAC3B;YACD,MAAM,EAAE,QAAQ;YAChB,WAAW,EAAE,IAAI;YACjB,KAAK,EAAE,KAAK;SACb,CAAC,CAAC;QAEH,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,CAAC;QACvC,IAAI,MAAM,KAAK,SAAS,IAAI,MAAM,CAAC,QAAQ,KAAK,SAAS,EAAE,CAAC;YAC1D,MAAM,IAAI,yBAAyB,CAAC;gBAClC,wBAAwB,CAAC,0DAA0D,CAAC;aACrF,CAAC,CAAC;QACL,CAAC;QAED,MAAM,IAAI,GAAG,MAAM,CAAC,IAAI,CAAC;QACzB,MAAM,MAAM,GAAG,gBAAgB,CAAC,IAAI,CAAC,CAAC;QACtC,MAAM,QAAQ,GAAG,UAAU,CAAC,MAAM,CAAC,QAAQ,CAAC,CAAC;QAC7C,MAAM,WAAW,GAAG,MAAM,CAAC,MAAM,CAC/B,MAAM,CAAC,QAAQ,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,SAAS,EAAE,OAAO,CAAC,CAAC,CACvE,CAAC;QACF,MAAM,eAAe,GAAG,MAAM,CAAC,MAAM,CAAC,sBAAsB,CAAC,QAAQ,CAAC,CAAC,CAAC;QAExE,OAAO,MAAM,CAAC,MAAM,CAAC;YACnB,MAAM,EAAE,mCAAmC;YAC3C,IAAI;YACJ,UAAU,EAAE,MAAM,CAAC,UAAU;YAC7B,MAAM,EAAE,MAAM,CAAC,MAAM;YACrB,SAAS,EAAE,MAAM,CAAC,SAAS;YAC3B,eAAe;YACf,WAAW;YACX,QAAQ;SACT,CAAC,CAAC;IACL,CAAC;IAAC,OAAO,KAAc,EAAE,CAAC;QACxB,IAAI,KAAK,YAAY,yBAAyB;YAAE,MAAM,KAAK,CAAC;QAC5D,IAAI,cAAc,CAAC,KAAK,CAAC,EAAE,CAAC;YAC1B,MAAM,IAAI,yBAAyB,CACjC,KAAK,CAAC,MAAM,CAAC,GAAG,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,gBAAgB,CAAC,OAAO,EAAE,OAAO,CAAC,CAAC,CAClE,CAAC;QACJ,CAAC;QACD,MAAM,KAAK,CAAC;IACd,CAAC;AACH,CAAC;AAED,sFAAsF;AACtF,MAAM,UAAU,yBAAyB,CACvC,KAAqC;IAErC,OAAO,oBAAoB,CAAC;QAC1B,MAAM,EAAE,KAAK,CAAC,MAAM;QACpB,cAAc,EAAE,KAAK,CAAC,cAAc,IAAI,8BAA8B;QACtE,GAAG,CAAC,KAAK,CAAC,MAAM,KAAK,SAAS,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,MAAM,EAAE,KAAK,CAAC,MAAM,EAAE,CAAC;QAC/D,eAAe,EAAE;YACf,GAAG,eAAe;YAClB,GAAG,CAAC,KAAK,CAAC,yBAAyB,IAAI,EAAE,CAAC;SAC3C;QACD,GAAG,EAAE,WAAW;KACjB,CAAC,CAAC;AACL,CAAC;AAED,4FAA4F;AAC5F,MAAM,UAAU,+BAA+B,CAAC,MAA2B;IACzE,OAAO,gBAAgB,CAAC,MAAM,CAAC,CAAC,SAAS,CAAC;AAC5C,CAAC;AAED,wFAAwF;AACxF,MAAM,UAAU,4BAA4B,CAC1C,MAA2B,EAC3B,iBAAyB;IAEzB,MAAM,eAAe,GAAG,+BAA+B,CAAC,MAAM,CAAC,CAAC;IAChE,IAAI,eAAe,KAAK,iBAAiB,EAAE,CAAC;QAC1C,MAAM,IAAI,2BAA2B,CAAC,iBAAiB,EAAE,eAAe,CAAC,CAAC;IAC5E,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,wBAAwB,CACtC,MAAwC,EACxC,OAAwC;IAExC,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,SAAS,CAAC;IAC/D,IAAI,QAAQ,KAAK,SAAS,IAAI,QAAQ,CAAC,MAAM,KAAK,mCAAmC,EAAE,CAAC;QACtF,MAAM,IAAI,SAAS,CAAC,uCAAuC,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC;IAC1F,CAAC;IAED,MAAM,YAAY,GAChB,QAAQ,KAAK,SAAS,CAAC,CAAC,CAAE,MAA8B,CAAC,CAAC,CAAC,QAAQ,CAAC,IAAI,CAAC;IAC3E,MAAM,iBAAiB,GAAG,OAAO,CAAC,iBAAiB,IAAI,QAAQ,EAAE,SAAS,CAAC;IAC3E,IAAI,iBAAiB,KAAK,SAAS,EAAE,CAAC;QACpC,4BAA4B,CAAC,YAAY,EAAE,iBAAiB,CAAC,CAAC;IAChE,CAAC;IACD,MAAM,IAAI,GAAG,OAAO,YAAY,KAAK,QAAQ,CAAC,CAAC,CAAC,YAAY,CAAC,CAAC,CAAC,UAAU,CAAC,YAAY,CAAC,CAAC;IAExF,MAAM,kBAAkB,GAAG,MAAM,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,CAAC,CAAC,IAAI,EAAE,CAAC;IACjE,MAAM,cAAc,GAAG,CAAC,SAAiB,EAAW,EAAE;QACpD,IAAI,CAAC,MAAM,CAAC,SAAS,CAAC,cAAc,CAAC,IAAI,CAAC,OAAO,CAAC,SAAS,EAAE,SAAS,CAAC,EAAE,CAAC;YACxE,MAAM,IAAI,iCAAiC,CAAC,SAAS,EAAE,kBAAkB,CAAC,CAAC;QAC7E,CAAC;QACD,OAAO,OAAO,CAAC,SAAS,CAAC,SAAS,CAAC,CAAC;IACtC,CAAC,CAAC;IAEF,MAAM,cAAc,GAAyB,EAAE,OAAO,EAAE,EAAE,EAAE,CAAC;IAC7D,MAAM,UAAU,GAAG,kBAAkB,CAAC,OAAO,CAAC,UAAU,IAAI,6BAA6B,CAAC,CAAC;IAC3F,MAAM,QAAQ,GAAG,IAAI,QAAQ,CAC3B,QAAQ,EACR,SAAS,EACT,SAAS,EACT,kBAAkB,IAAI,mBAAmB,UAAU,EAAE,CACsC,CAAC;IAE9F,QAAQ,CAAC,cAAc,EAAE,cAAc,CAAC,OAAO,EAAE,cAAc,CAAC,CAAC;IACjE,OAAO,cAAc,CAAC,OAAmB,CAAC;AAC5C,CAAC;AAED,SAAS,wBAAwB,CAAC,gBAAqC;IACrE,OAAO;QACL,IAAI,EAAE,8BAA8B;QACpC,KAAK,CAAC,QAAQ;YACZ,QAAQ,CAAC,SAAS,CAAC,EAAE,MAAM,EAAE,IAAI,EAAE,EAAE,CAAC,IAAI,EAAE,EAAE;gBAC5C,IAAI,gBAAgB,CAAC,GAAG,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,CAAC;oBACpC,OAAO,EAAE,QAAQ,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,CAAC,IAAI,EAAE,CAAC;gBAC7C,CAAC;gBACD,OAAO;oBACL,MAAM,EAAE;wBACN;4BACE,IAAI,EACF,WAAW,IAAI,CAAC,IAAI,qCAAqC;gCACzD,iGAAiG;yBACpG;qBACF;iBACF,CAAC;YACJ,CAAC,CAAC,CAAC;QACL,CAAC;KACF,CAAC;AACJ,CAAC;AAED,SAAS,yBAAyB,CAAC,mBAAsC;IACvE,MAAM,SAAS,GAAG,IAAI,GAAG,EAAU,CAAC;IACpC,KAAK,MAAM,SAAS,IAAI,mBAAmB,EAAE,CAAC;QAC5C,IACE,SAAS,CAAC,MAAM,KAAK,CAAC;YACtB,SAAS,KAAK,SAAS,CAAC,IAAI,EAAE;YAC9B,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YACxB,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC;YACxB,SAAS,CAAC,QAAQ,CAAC,IAAI,CAAC,EACxB,CAAC;YACD,MAAM,IAAI,yBAAyB,CAAC;gBAClC,wBAAwB,CACtB,iDAAiD,IAAI,CAAC,SAAS,CAAC,SAAS,CAAC,GAAG,CAC9E;aACF,CAAC,CAAC;QACL,CAAC;QACD,SAAS,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;IAC3B,CAAC;IACD,OAAO,SAAS,CAAC;AACnB,CAAC;AAED,SAAS,WAAW,CAAC,cAAsB;IACzC,MAAM,SAAS,GAAG,cAAc,CAAC,WAAW,EAAE,CAAC;IAC/C,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC;QAAE,OAAO,KAAK,CAAC;IAC7C,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,IAAI,SAAS,CAAC,QAAQ,CAAC,KAAK,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,SAAS,CAAC,QAAQ,CAAC,MAAM,CAAC,EAAE,CAAC;QAC1F,OAAO,IAAI,CAAC;IACd,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC;AAED,SAAS,gBAAgB,CACvB,IAAqC,EACrC,OAAgB;IAEhB,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI;QACJ,IAAI,EAAE,OAAO,CAAC,IAAI;QAClB,GAAG,CAAC,OAAO,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,OAAO,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvF,KAAK,EAAE,MAAM,CAAC,MAAM,CAClB,OAAO,CAAC,KAAK,CAAC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE,CACzB,MAAM,CAAC,MAAM,CAAC;YACZ,IAAI,EAAE,IAAI,CAAC,IAAI;YACf,GAAG,CAAC,IAAI,CAAC,QAAQ,KAAK,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,CAAC,CAAC,EAAE,QAAQ,EAAE,iBAAiB,CAAC,IAAI,CAAC,QAAQ,CAAC,EAAE,CAAC;SAClF,CAAC,CACH,CACF;KACF,CAAC,CAAC;AACL,CAAC;AAED,SAAS,iBAAiB,CAAC,QAA0C;IACnE,OAAO,MAAM,CAAC,MAAM,CAAC;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,IAAI,EAAE,QAAQ,CAAC,IAAI;QACnB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,MAAM,EAAE,QAAQ,CAAC,MAAM;QACvB,QAAQ,EAAE,QAAQ,CAAC,QAAQ;KAC5B,CAAC,CAAC;AACL,CAAC;AAED,SAAS,wBAAwB,CAAC,IAAY;IAC5C,OAAO,MAAM,CAAC,MAAM,CAAC,EAAE,IAAI,EAAE,OAAO,EAAE,IAAI,EAAE,KAAK,EAAE,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,CAAC,CAAC;AAC1E,CAAC;AAED,SAAS,yBAAyB,CAAC,WAA+C;IAChF,MAAM,OAAO,GAAG,WAAW,CAAC,GAAG,CAAC,CAAC,UAAU,EAAE,EAAE;QAC7C,MAAM,QAAQ,GAAG,UAAU,CAAC,QAAQ,CAAC;QACrC,MAAM,MAAM,GACV,QAAQ,KAAK,SAAS;YACpB,CAAC,CAAC,UAAU,CAAC,IAAI;YACjB,CAAC,CAAC,GAAG,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,IAAI,IAAI,QAAQ,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QACjE,OAAO,GAAG,MAAM,KAAK,UAAU,CAAC,IAAI,EAAE,CAAC;IACzC,CAAC,CAAC,CAAC;IACH,OAAO,mCAAmC,OAAO,CAAC,MAAM,KAAK,CAAC,CAAC,CAAC,CAAC,GAAG,CAAC,CAAC,CAAC,MAAM,OAAO,CAAC,IAAI,CAAC,IAAI,CAAC,EAAE,EAAE,CAAC;AACtG,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,OAAO,CACL,OAAO,KAAK,KAAK,QAAQ;QACzB,KAAK,KAAK,IAAI;QACd,QAAQ,IAAI,KAAK;QACjB,KAAK,CAAC,OAAO,CAAE,KAAuC,CAAC,MAAM,CAAC,CAC/D,CAAC;AACJ,CAAC;AAED,SAAS,sBAAsB,CAAC,QAAkB;IAChD,MAAM,OAAO,GAAG,IAAI,GAAG,EAAU,CAAC;IAClC,KAAK,MAAM,MAAM,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,OAAO,CAAC,EAAE,CAAC;QACrD,KAAK,MAAM,QAAQ,IAAI,MAAM,CAAC,OAAO,EAAE,CAAC;YACtC,IAAI,QAAQ,CAAC,QAAQ;gBAAE,OAAO,CAAC,GAAG,CAAC,QAAQ,CAAC,IAAI,CAAC,CAAC;QACpD,CAAC;IACH,CAAC;IACD,OAAO,CAAC,GAAG,OAAO,CAAC,CAAC,IAAI,EAAE,CAAC;AAC7B,CAAC;AAED,SAAS,gBAAgB,CAAC,MAA2B;IAKnD,MAAM,KAAK,GAAG,OAAO,MAAM,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,IAAI,CAAC,MAAM,EAAE,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC;IAChF,MAAM,MAAM,GAAG,UAAU,CAAC,QAAQ,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,MAAM,EAAE,CAAC;IAC3D,OAAO;QACL,UAAU,EAAE,KAAK,CAAC,UAAU;QAC5B,MAAM,EAAE,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAC9B,SAAS,EAAE,UAAU,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC,EAAE;KACjD,CAAC;AACJ,CAAC;AAED,SAAS,gBAAgB,CACvB,MAAwC;IAExC,OAAO,OAAO,MAAM,KAAK,QAAQ,IAAI,CAAC,CAAC,MAAM,YAAY,UAAU,CAAC,CAAC;AACvE,CAAC;AAED,SAAS,UAAU,CAAC,MAAkB;IACpC,OAAO,IAAI,WAAW,CAAC,OAAO,EAAE,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;AAClE,CAAC;AAED,SAAS,kBAAkB,CAAC,UAAkB;IAC5C,OAAO,UAAU,CAAC,OAAO,CAAC,qBAAqB,EAAE,GAAG,CAAC,CAAC;AACxD,CAAC;AAED,SAAS,UAAU,CAAI,KAAQ;IAC7B,IAAI,KAAK,KAAK,IAAI,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QAC3E,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,CAAC,KAAgC,CAAC,EAAE,CAAC;YACpE,UAAU,CAAC,KAAK,CAAC,CAAC;QACpB,CAAC;QACD,MAAM,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC;IACvB,CAAC;IACD,OAAO,KAAK,CAAC;AACf,CAAC"}

package/package.json

@@ -0,0 +1,39 @@
+{
+  "name": "@componentonce/compiler-esbuild",
+  "version": "0.1.0-beta.0",
+  "type": "module",
+  "files": [
+    "dist",
+    "README.md"
+  ],
+  "exports": {
+    ".": {
+      "types": "./dist/index.d.ts",
+      "import": "./dist/index.js"
+    }
+  },
+  "dependencies": {
+    "esbuild": "^0.27.0",
+    "@componentonce/core": "0.1.0-beta.0"
+  },
+  "devDependencies": {
+    "@types/node": "^24.10.0",
+    "@types/react": "^19.2.2",
+    "@types/react-dom": "^19.2.2",
+    "react": "^19.2.0",
+    "react-dom": "^19.2.0",
+    "typescript": "^5.9.3",
+    "vitest": "^4.0.5"
+  },
+  "description": "Optional esbuild compiler and trusted loader for dynamically loaded ComponentOnce modules.",
+  "license": "MIT",
+  "publishConfig": {
+    "access": "public",
+    "tag": "beta"
+  },
+  "scripts": {
+    "build": "tsc -p tsconfig.json",
+    "check": "tsc --noEmit -p tsconfig.json && tsc --noEmit -p tsconfig.test.json",
+    "test": "vitest run"
+  }
+}