@crustjs/crust-linux-x64-musl 0.5.6 → 0.6.1

package/bin/dist/index.js

@@ -1,20 +1,20 @@
-import { accessSync, constants, copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, rmdirSync, statSync, writeFileSync } from "node:fs";
-import { chmod, copyFile, mkdtemp, readFile, readdir, rm, writeFile } from "node:fs/promises";
+import { copyFileSync, cpSync, existsSync, lstatSync, mkdirSync, readFileSync, readdirSync, realpathSync, rmSync, rmdirSync, statSync, writeFileSync } from "node:fs";
+import { chmod, copyFile, mkdtemp, readFile, readdir, realpath, rm, writeFile } from "node:fs/promises";
 import { tmpdir } from "node:os";
-import { delimiter, dirname, extname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
+import { basename, dirname, isAbsolute, join, posix, relative, resolve, sep, win32 } from "node:path";
 import { randomBytes } from "node:crypto";
-import { spawn, spawnSync } from "node:child_process";
+import { fileURLToPath, pathToFileURL } from "node:url";
+import { spawn } from "node:child_process";
 import { once } from "node:events";
 import { text } from "node:stream/consumers";
-//#region \0rolldown/runtime.js
+// \0rolldown/runtime.js
 var __create = Object.create;
 var __defProp = Object.defineProperty;
 var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
 var __getOwnPropNames = Object.getOwnPropertyNames;
 var __getProtoOf = Object.getPrototypeOf;
 var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod), cb = null), mod.exports);
+var __commonJSMin = (cb, mod) => () => (mod || (cb((mod = { exports: {} }).exports, mod, mod.exports), cb = null), mod.exports);
 var __copyProps = (to, from, except, desc) => {
 	if (from && typeof from === "object" || typeof from === "function") for (var keys = __getOwnPropNames(from), i = 0, n = keys.length, key; i < n; i++) {
 		key = keys[i];
@@ -29,26 +29,40 @@ var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__ge
 	value: mod,
 	enumerable: true
 }) : target, mod));
-//#endregion
-//#region ../utils/dist/artifacts.js
-/**
-* Set by `crust build` while it prepares the Command Snapshot: the absolute
-* entry-isolated directory Extension build hooks write into. Core reads it
-* to run the hooks; `resolveArtifactDir` reads it so sections evaluated during
-* that run see the artifacts being built instead of the wiped `.crust/root`.
-*/
-const BUILD_OUT_DIR_ENV = "CRUST_INTERNAL_BUILD_OUT_DIR";
+// ../utils/dist/signals.js
+/** SigIgn bits from the first read, taken before Crust installs any listener. */
+let ignoredMask;
 /**
-* `Symbol.for` registry key of the packaged-build marker, for bundlers without a
-* `define` option (native `deno bundle`). `crust build` prepends
-* `globalThis[Symbol.for(PACKAGED_BUILD_KEY)] = true` to the command bundle,
-* before the inlined application graph, so every bundled copy sees it.
-* The registry key is shared across module copies; the value is never read from
-* the environment, so detection needs no Deno env permission.
+* Whether `signal` is inherited as ignored, such as SIGHUP under `nohup` or SIGINT for a
+* background job in a script. Adding a listener replaces that disposition and removing the
+* last one restores the default action, so code that listens temporarily skips ignored
+* signals to keep the process immune to them. Only Bun keeps an inherited ignore; Node
+* resets it at startup, so this is always false there and skips the read.
+*
+* shortcut: Linux-only (`/proc/self/status`); macOS Bun still loses the ignore. Remove once
+* Bun restores the previous disposition on listener removal (oven-sh/bun#47574).
 */
-const PACKAGED_BUILD_KEY = "crustjs.packagedBuild";
-//#endregion
-//#region ../core/dist/invocation-BstcKEMM.js
+function isSignalIgnored(signal) {
+	if (process.platform !== "linux" || process.versions.bun === void 0) return false;
+	ignoredMask ??= readIgnoredMask();
+	const number = process.getBuiltinModule("node:os").constants.signals[signal];
+	return number !== void 0 && number <= 32 && (ignoredMask >>> number - 1 & 1) === 1;
+}
+function readIgnoredMask() {
+	try {
+		const status = process.getBuiltinModule("node:fs").readFileSync("/proc/self/status", "utf8");
+		const hex = /^SigIgn:\s*([0-9a-f]+)$/m.exec(status)?.[1];
+		return hex ? Number.parseInt(hex.slice(-8), 16) : 0;
+	} catch {
+		return 0;
+	}
+}
+// ../utils/dist/error.js
+/** Narrows a caught Node.js system error to its stable errno contract. */
+function isErrnoException(error) {
+	return error instanceof Error && "code" in error && typeof error.code === "string";
+}
+// ../core/dist/invocation-DKSTuFCO.js
 /**
 * A typed error for runtime recipe, Extension, Context, documentation, argv, and validation failures.
 *
@@ -81,6 +95,9 @@ var CrustError = class extends Error {
 		this.code = code;
 		this.details = details[0];
 	}
+	static [Symbol.hasInstance](value) {
+		return Function.prototype[Symbol.hasInstance].call(this, value);
+	}
 	is(code) {
 		return Object.is(this.code, code);
 	}
@@ -96,7 +113,6 @@ var CrustError = class extends Error {
 		};
 	}
 };
-Object.freeze({ [Symbol("crust.handled")]: true });
 /**
 * Snapshot subprocess protocol used by first-party build tooling.
 *
@@ -106,13 +122,23 @@ Object.freeze({ [Symbol("crust.handled")]: true });
 * without dispatching a Command Action. In-process callers use `Crust.snapshot()`.
 *
 * Only source entries run by `crust build` honor it: finished Bun/Node bundles carry
-* `process.env.CRUST_INTERNAL_BUILD === "1"` as a literal and compile the protocol out;
-* packaged Deno bundles set the `isPackagedBuild()` marker and skip it without
-* reading the environment.
+* `process.env.CRUST_INTERNAL_BUILD === "1"` as a literal and compile the protocol out.
 */
 const SNAPSHOT_PATH_ENV = "CRUST_INTERNAL_SNAPSHOT_PATH";
-//#endregion
-//#region ../core/dist/tooling.js
+// ../utils/dist/artifacts.js
+/**
+* Set by `crust build` while it prepares the Command Snapshot: the absolute
+* entry-isolated directory Extension build hooks write into. Core reads it
+* to run the hooks; `resolveArtifactDir` reads it so sections evaluated during
+* that run see the artifacts being built instead of the wiped `.crust/root`.
+*/
+const BUILD_OUT_DIR_ENV = "CRUST_INTERNAL_BUILD_OUT_DIR";
+// ../utils/dist/json.js
+/** Narrow a JSON document root to an object (not array/scalar/null). */
+function isJsonObject(value) {
+	return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+// ../core/dist/tooling.js
 const INSTALLED_COMMAND_NAME_PATTERN = /^[A-Za-z0-9][A-Za-z0-9._-]*$/;
 /** {@link isInstalledCommandName}'s rule as prose, for error messages: "Use <rule>." */
 const INSTALLED_COMMAND_NAME_RULE = "letters, digits, \".\", \"_\", and \"-\", starting with a letter or digit";
@@ -124,83 +150,18 @@ const INSTALLED_COMMAND_NAME_RULE = "letters, digits, \".\", \"_\", and \"-\", s
 function isInstalledCommandName(name) {
 	return INSTALLED_COMMAND_NAME_PATTERN.test(name);
 }
-new Intl.Segmenter(void 0, { granularity: "grapheme" });
-new RegExp([
+[
 	String.raw`(?:\x1b\[|\x9b)[^\x1b\x18\x1a\x9c\x40-\x7e]*[\x40-\x7e\x18\x1a\x9c]?`,
 	String.raw`(?:\x1b\]|\x9d)[^\x07\x1b\x18\x1a\x9c]*(?:\x07|\x1b\\|[\x18\x1a\x9c])?`,
 	String.raw`(?:\x1b[PX^_]|[\x90\x98\x9e\x9f])[^\x1b\x18\x1a\x9c]*(?:\x1b\\|[\x18\x1a\x9c])?`,
 	String.raw`\x1b[\x20-\x2f][^\x1b]?`,
 	String.raw`\x1b[\x18\x1a\x9c\x30-\x7e]?`
-].join("|"), "g");
-const modifierCodes = {
-	/** Bold / increased intensity. */
-	bold: [1, 22],
-	/** Dim / decreased intensity. */
-	dim: [2, 22],
-	italic: [3, 23],
-	underline: [4, 24],
-	/** Inverse / reverse video. */
-	inverse: [7, 27],
-	/** Hidden / conceal. */
-	hidden: [8, 28],
-	/** Strikethrough / crossed out. */
-	strikethrough: [9, 29]
-};
-const colorCodes = {
-	black: [30, 39],
-	red: [31, 39],
-	green: [32, 39],
-	yellow: [33, 39],
-	blue: [34, 39],
-	magenta: [35, 39],
-	cyan: [36, 39],
-	white: [37, 39],
-	/** Bright black (gray). */
-	gray: [90, 39],
-	brightRed: [91, 39],
-	brightGreen: [92, 39],
-	brightYellow: [93, 39],
-	brightBlue: [94, 39],
-	brightMagenta: [95, 39],
-	brightCyan: [96, 39],
-	brightWhite: [97, 39],
-	bgBlack: [40, 49],
-	bgRed: [41, 49],
-	bgGreen: [42, 49],
-	bgYellow: [43, 49],
-	bgBlue: [44, 49],
-	bgMagenta: [45, 49],
-	bgCyan: [46, 49],
-	bgWhite: [47, 49],
-	bgBrightBlack: [100, 49],
-	bgBrightRed: [101, 49],
-	bgBrightGreen: [102, 49],
-	bgBrightYellow: [103, 49],
-	bgBrightBlue: [104, 49],
-	bgBrightMagenta: [105, 49],
-	bgBrightCyan: [106, 49],
-	bgBrightWhite: [107, 49]
-};
-const styleMethodCodes = {
-	...modifierCodes,
-	...colorCodes
-};
-const styleMethodNames = Object.freeze(Object.keys(styleMethodCodes));
-const styleMethodPairs = Object.freeze(Object.fromEntries(styleMethodNames.map((name) => {
-	const [open, close] = styleMethodCodes[name];
-	return [name, {
-		open: `\x1b[${open}m`,
-		close: `\x1b[${close}m`
-	}];
-})));
-function isModifierName(name) {
-	return Object.hasOwn(modifierCodes, name);
-}
+].join("|");
 function read(overrides, key, environment) {
 	return overrides !== void 0 && key in overrides ? overrides[key] : environment;
 }
 function readTTY(overrides) {
-	return read(overrides, "isTTY", process.stdout?.isTTY) ?? false;
+	return (overrides !== void 0 && "isTTY" in overrides ? overrides.isTTY : process.stdout?.isTTY) ?? false;
 }
 function readForceColor(overrides) {
 	return read(overrides, "forceColor", process.env.FORCE_COLOR);
@@ -209,6 +170,9 @@ function readForceColor(overrides) {
 function forceColorDisables(forceColor) {
 	return forceColor === "0" || forceColor === "false";
 }
+function isDumbTerm(term) {
+	return term?.toLowerCase() === "dumb";
+}
 function isTrueColorTerm(term) {
 	const lower = term.toLowerCase();
 	return lower.includes("24bit") || lower.includes("truecolor") || lower.endsWith("-direct");
@@ -232,25 +196,26 @@ function detectDepth(colorTerm, term) {
 * - `"never"` → `"none"`.
 * - `"always"` → `"truecolor"`.
 * - `"auto"`:
-*   1. `FORCE_COLOR` set → decides unconditionally (overrides TTY and
-*      `NO_COLOR`, chalk convention): `0` / `false` → `"none"`; `1` →
+*   1. `FORCE_COLOR` set → decides unconditionally (overrides TTY,
+*      `NO_COLOR`, and `TERM=dumb`, as in Node's `tty` color detection):
+*      `0` / `false` → `"none"`; `1` →
 *      `"16"`; `2` → `"256"`; `3` → `"truecolor"`; any other value
 *      (including empty) → forced on at the `COLORTERM` / `TERM`
 *      detected depth.
-*   2. Not a TTY OR `NO_COLOR` set non-empty → `"none"`.
+*   2. Not a TTY OR `NO_COLOR` set non-empty OR `TERM=dumb`
+*      (case-insensitive) → `"none"`.
 *   3. `COLORTERM` is `"truecolor"` or `"24bit"` (case-insensitive) →
 *      `"truecolor"`.
 *   4. `TERM` ends with `-direct` OR contains `truecolor` / `24bit` →
 *      `"truecolor"`.
-*   5. `TERM === "dumb"` → `"none"`.
-*   6. `TERM` contains `256color` → `"256"`.
-*   7. Any other TTY value → `"16"`.
+*   5. `TERM` contains `256color` → `"256"`.
+*   6. Any other TTY value → `"16"`.
 *
 * Detection follows the ecosystem `FORCE_COLOR` / `NO_COLOR` / `COLORTERM`
 * / `TERM` conventions; no bespoke environment variables are introduced.
 *
 * @param mode - The color emission mode.
-* @param overrides - Optional overrides for deterministic testing.
+* @param overrides - Optional capability inputs, such as another stream's TTY state or fixed test values.
 * @returns The resolved {@link ColorDepth} tier.
 *
 * @example
@@ -286,14 +251,15 @@ function resolveColorDepth(mode, overrides) {
 	if (!readTTY(overrides)) return "none";
 	const noColor = read(overrides, "noColor", process.env.NO_COLOR);
 	if (noColor !== void 0 && noColor !== "") return "none";
-	if (term !== void 0 && term.toLowerCase() === "dumb" && !detectsTruecolor(colorTerm, term)) return "none";
+	if (isDumbTerm(term)) return "none";
 	return detectDepth(colorTerm, term);
 }
 /**
 * Resolve whether non-color ANSI modifiers should be emitted.
 *
-* In `"auto"` mode, modifiers are enabled when stdout is a TTY, but are
-* **not** affected by `NO_COLOR` (which only controls color output).
+* In `"auto"` mode, modifiers are enabled when stdout is a TTY and `TERM`
+* is not `dumb`, but are **not** affected by `NO_COLOR` (which only
+* controls color output).
 * `FORCE_COLOR`, when set, decides unconditionally — it is the all-ANSI
 * switch, while `NO_COLOR` is the colors-only switch.
 *
@@ -305,750 +271,8 @@ function resolveModifierCapability(mode, overrides) {
 	if (mode === "never") return false;
 	const forceColor = readForceColor(overrides);
 	if (forceColor !== void 0) return !forceColorDisables(forceColor);
-	return readTTY(overrides);
+	return readTTY(overrides) && !isDumbTerm(read(overrides, "term", process.env.TERM));
 }
-const namedColorValues = {
-	aliceblue: [
-		240,
-		248,
-		255
-	],
-	antiquewhite: [
-		250,
-		235,
-		215
-	],
-	aqua: [
-		0,
-		255,
-		255
-	],
-	aquamarine: [
-		127,
-		255,
-		212
-	],
-	azure: [
-		240,
-		255,
-		255
-	],
-	beige: [
-		245,
-		245,
-		220
-	],
-	bisque: [
-		255,
-		228,
-		196
-	],
-	black: [
-		0,
-		0,
-		0
-	],
-	blanchedalmond: [
-		255,
-		235,
-		205
-	],
-	blue: [
-		0,
-		0,
-		255
-	],
-	blueviolet: [
-		138,
-		43,
-		226
-	],
-	brown: [
-		165,
-		42,
-		42
-	],
-	burlywood: [
-		222,
-		184,
-		135
-	],
-	cadetblue: [
-		95,
-		158,
-		160
-	],
-	chartreuse: [
-		127,
-		255,
-		0
-	],
-	chocolate: [
-		210,
-		105,
-		30
-	],
-	coral: [
-		255,
-		127,
-		80
-	],
-	cornflowerblue: [
-		100,
-		149,
-		237
-	],
-	cornsilk: [
-		255,
-		248,
-		220
-	],
-	crimson: [
-		220,
-		20,
-		60
-	],
-	cyan: [
-		0,
-		255,
-		255
-	],
-	darkblue: [
-		0,
-		0,
-		139
-	],
-	darkcyan: [
-		0,
-		139,
-		139
-	],
-	darkgoldenrod: [
-		184,
-		134,
-		11
-	],
-	darkgray: [
-		169,
-		169,
-		169
-	],
-	darkgreen: [
-		0,
-		100,
-		0
-	],
-	darkgrey: [
-		169,
-		169,
-		169
-	],
-	darkkhaki: [
-		189,
-		183,
-		107
-	],
-	darkmagenta: [
-		139,
-		0,
-		139
-	],
-	darkolivegreen: [
-		85,
-		107,
-		47
-	],
-	darkorange: [
-		255,
-		140,
-		0
-	],
-	darkorchid: [
-		153,
-		50,
-		204
-	],
-	darkred: [
-		139,
-		0,
-		0
-	],
-	darksalmon: [
-		233,
-		150,
-		122
-	],
-	darkseagreen: [
-		143,
-		188,
-		143
-	],
-	darkslateblue: [
-		72,
-		61,
-		139
-	],
-	darkslategray: [
-		47,
-		79,
-		79
-	],
-	darkslategrey: [
-		47,
-		79,
-		79
-	],
-	darkturquoise: [
-		0,
-		206,
-		209
-	],
-	darkviolet: [
-		148,
-		0,
-		211
-	],
-	deeppink: [
-		255,
-		20,
-		147
-	],
-	deepskyblue: [
-		0,
-		191,
-		255
-	],
-	dimgray: [
-		105,
-		105,
-		105
-	],
-	dimgrey: [
-		105,
-		105,
-		105
-	],
-	dodgerblue: [
-		30,
-		144,
-		255
-	],
-	firebrick: [
-		178,
-		34,
-		34
-	],
-	floralwhite: [
-		255,
-		250,
-		240
-	],
-	forestgreen: [
-		34,
-		139,
-		34
-	],
-	fuchsia: [
-		255,
-		0,
-		255
-	],
-	gainsboro: [
-		220,
-		220,
-		220
-	],
-	ghostwhite: [
-		248,
-		248,
-		255
-	],
-	gold: [
-		255,
-		215,
-		0
-	],
-	goldenrod: [
-		218,
-		165,
-		32
-	],
-	gray: [
-		128,
-		128,
-		128
-	],
-	green: [
-		0,
-		128,
-		0
-	],
-	greenyellow: [
-		173,
-		255,
-		47
-	],
-	grey: [
-		128,
-		128,
-		128
-	],
-	honeydew: [
-		240,
-		255,
-		240
-	],
-	hotpink: [
-		255,
-		105,
-		180
-	],
-	indianred: [
-		205,
-		92,
-		92
-	],
-	indigo: [
-		75,
-		0,
-		130
-	],
-	ivory: [
-		255,
-		255,
-		240
-	],
-	khaki: [
-		240,
-		230,
-		140
-	],
-	lavender: [
-		230,
-		230,
-		250
-	],
-	lavenderblush: [
-		255,
-		240,
-		245
-	],
-	lawngreen: [
-		124,
-		252,
-		0
-	],
-	lemonchiffon: [
-		255,
-		250,
-		205
-	],
-	lightblue: [
-		173,
-		216,
-		230
-	],
-	lightcoral: [
-		240,
-		128,
-		128
-	],
-	lightcyan: [
-		224,
-		255,
-		255
-	],
-	lightgoldenrodyellow: [
-		250,
-		250,
-		210
-	],
-	lightgray: [
-		211,
-		211,
-		211
-	],
-	lightgreen: [
-		144,
-		238,
-		144
-	],
-	lightgrey: [
-		211,
-		211,
-		211
-	],
-	lightpink: [
-		255,
-		182,
-		193
-	],
-	lightsalmon: [
-		255,
-		160,
-		122
-	],
-	lightseagreen: [
-		32,
-		178,
-		170
-	],
-	lightskyblue: [
-		135,
-		206,
-		250
-	],
-	lightslategray: [
-		119,
-		136,
-		153
-	],
-	lightslategrey: [
-		119,
-		136,
-		153
-	],
-	lightsteelblue: [
-		176,
-		196,
-		222
-	],
-	lightyellow: [
-		255,
-		255,
-		224
-	],
-	lime: [
-		0,
-		255,
-		0
-	],
-	limegreen: [
-		50,
-		205,
-		50
-	],
-	linen: [
-		250,
-		240,
-		230
-	],
-	magenta: [
-		255,
-		0,
-		255
-	],
-	maroon: [
-		128,
-		0,
-		0
-	],
-	mediumaquamarine: [
-		102,
-		205,
-		170
-	],
-	mediumblue: [
-		0,
-		0,
-		205
-	],
-	mediumorchid: [
-		186,
-		85,
-		211
-	],
-	mediumpurple: [
-		147,
-		112,
-		219
-	],
-	mediumseagreen: [
-		60,
-		179,
-		113
-	],
-	mediumslateblue: [
-		123,
-		104,
-		238
-	],
-	mediumspringgreen: [
-		0,
-		250,
-		154
-	],
-	mediumturquoise: [
-		72,
-		209,
-		204
-	],
-	mediumvioletred: [
-		199,
-		21,
-		133
-	],
-	midnightblue: [
-		25,
-		25,
-		112
-	],
-	mintcream: [
-		245,
-		255,
-		250
-	],
-	mistyrose: [
-		255,
-		228,
-		225
-	],
-	moccasin: [
-		255,
-		228,
-		181
-	],
-	navajowhite: [
-		255,
-		222,
-		173
-	],
-	navy: [
-		0,
-		0,
-		128
-	],
-	oldlace: [
-		253,
-		245,
-		230
-	],
-	olive: [
-		128,
-		128,
-		0
-	],
-	olivedrab: [
-		107,
-		142,
-		35
-	],
-	orange: [
-		255,
-		165,
-		0
-	],
-	orangered: [
-		255,
-		69,
-		0
-	],
-	orchid: [
-		218,
-		112,
-		214
-	],
-	palegoldenrod: [
-		238,
-		232,
-		170
-	],
-	palegreen: [
-		152,
-		251,
-		152
-	],
-	paleturquoise: [
-		175,
-		238,
-		238
-	],
-	palevioletred: [
-		219,
-		112,
-		147
-	],
-	papayawhip: [
-		255,
-		239,
-		213
-	],
-	peachpuff: [
-		255,
-		218,
-		185
-	],
-	peru: [
-		205,
-		133,
-		63
-	],
-	pink: [
-		255,
-		192,
-		203
-	],
-	plum: [
-		221,
-		160,
-		221
-	],
-	powderblue: [
-		176,
-		224,
-		230
-	],
-	purple: [
-		128,
-		0,
-		128
-	],
-	rebeccapurple: [
-		102,
-		51,
-		153
-	],
-	red: [
-		255,
-		0,
-		0
-	],
-	rosybrown: [
-		188,
-		143,
-		143
-	],
-	royalblue: [
-		65,
-		105,
-		225
-	],
-	saddlebrown: [
-		139,
-		69,
-		19
-	],
-	salmon: [
-		250,
-		128,
-		114
-	],
-	sandybrown: [
-		244,
-		164,
-		96
-	],
-	seagreen: [
-		46,
-		139,
-		87
-	],
-	seashell: [
-		255,
-		245,
-		238
-	],
-	sienna: [
-		160,
-		82,
-		45
-	],
-	silver: [
-		192,
-		192,
-		192
-	],
-	skyblue: [
-		135,
-		206,
-		235
-	],
-	slateblue: [
-		106,
-		90,
-		205
-	],
-	slategray: [
-		112,
-		128,
-		144
-	],
-	slategrey: [
-		112,
-		128,
-		144
-	],
-	snow: [
-		255,
-		250,
-		250
-	],
-	springgreen: [
-		0,
-		255,
-		127
-	],
-	steelblue: [
-		70,
-		130,
-		180
-	],
-	tan: [
-		210,
-		180,
-		140
-	],
-	teal: [
-		0,
-		128,
-		128
-	],
-	thistle: [
-		216,
-		191,
-		216
-	],
-	tomato: [
-		255,
-		99,
-		71
-	],
-	turquoise: [
-		64,
-		224,
-		208
-	],
-	violet: [
-		238,
-		130,
-		238
-	],
-	wheat: [
-		245,
-		222,
-		179
-	],
-	white: [
-		255,
-		255,
-		255
-	],
-	whitesmoke: [
-		245,
-		245,
-		245
-	],
-	yellow: [
-		255,
-		255,
-		0
-	],
-	yellowgreen: [
-		154,
-		205,
-		50
-	]
-};
 /**
 * Apply an ANSI style pair to a string with nesting-safe composition.
 *
@@ -1081,422 +305,57 @@ function applyStyle(text, style) {
 	if (result.includes(close)) result = result.replaceAll(close, close + open);
 	return open + result + close;
 }
-/** Foreground close: matches the close of every static fg color (`\x1b[39m`). */
-const FG_CLOSE = "\x1B[39m";
-/** Background close: matches the close of every static bg color (`\x1b[49m`). */
-const BG_CLOSE = "\x1B[49m";
-/** Foreground/background extended-color SGR introducers. */
-const FG_INTRODUCER = "\x1B[38;";
-const BG_INTRODUCER = "\x1B[48;";
-/** Quote supported inputs, falling back to `String()` for hostile runtime values. */
-function describeInput(input) {
-	try {
-		return JSON.stringify(input) ?? String(input);
-	} catch {
-		return String(input);
-	}
-}
-function isNamedColor(value) {
-	return Object.hasOwn(namedColorValues, value);
-}
-/** Parse a supported color into an RGB triple. */
-function parseRgb(input) {
-	if (Array.isArray(input)) {
-		if (input.length === 3 && input.every((channel) => Number.isInteger(channel) && channel >= 0 && channel <= 255)) return [
-			input[0],
-			input[1],
-			input[2]
-		];
-	} else if (typeof input === "string") {
-		const value = input.toLowerCase();
-		if (isNamedColor(value)) return namedColorValues[value];
-		const hex = /^#([0-9a-f]{3}|[0-9a-f]{6})$/i.exec(value)?.[1];
-		if (hex) {
-			const expanded = hex.length === 3 ? hex.split("").map((digit) => digit + digit).join("") : hex;
-			return [
-				Number.parseInt(expanded.slice(0, 2), 16),
-				Number.parseInt(expanded.slice(2, 4), 16),
-				Number.parseInt(expanded.slice(4, 6), 16)
-			];
-		}
-		const rgb = /^rgb\(\s*(\d{1,3})\s*,\s*(\d{1,3})\s*,\s*(\d{1,3})\s*\)$/.exec(value) ?? /^rgb\(\s*(\d{1,3})\s+(\d{1,3})\s+(\d{1,3})\s*\)$/.exec(value);
-		if (rgb) {
-			const channels = [
-				Number(rgb[1]),
-				Number(rgb[2]),
-				Number(rgb[3])
-			];
-			if (channels.every((channel) => channel <= 255)) return channels;
-		}
-	}
-	throw new TypeError(`Invalid color input: ${describeInput(input)}`);
-}
-function rgbToAnsi256(r, g, b) {
-	const levels = [
-		0,
-		95,
-		135,
-		175,
-		215,
-		255
-	];
-	const nearest = (channel) => levels.reduce((best, value, index) => Math.abs(value - channel) < Math.abs(levels[best] - channel) ? index : best, 0);
-	const [ir, ig, ib] = [
-		nearest(r),
-		nearest(g),
-		nearest(b)
-	];
-	const grayIndex = Math.min(23, Math.max(0, Math.round(((r + g + b) / 3 - 8) / 10)));
-	const gray = 8 + grayIndex * 10;
-	const distance = (cr, cg, cb) => (r - cr) ** 2 + (g - cg) ** 2 + (b - cb) ** 2;
-	return distance(gray, gray, gray) < distance(levels[ir], levels[ig], levels[ib]) ? 232 + grayIndex : 16 + 36 * ir + 6 * ig + ib;
-}
-/**
-* Quantize `[r, g, b]` to a foreground SGR parameter (`30`–`37`, `90`–`97`).
-* Same algorithm as `ansi-styles` / `chalk`: bucket each channel at 50%,
-* pack into a 3-bit base color, then add 60 for bright when the max
-* channel rounds up. Call sites add `+10` for backgrounds.
-*/
-function rgbToAnsi16Param(r, g, b) {
-	const brightnessBucket = Math.round(Math.max(r, g, b) / 127.5);
-	if (brightnessBucket === 0) return 30;
-	let ansi = 30 + ((Math.round(b / 255) << 2 | Math.round(g / 255) << 1 | Math.round(r / 255)) & 7);
-	if (brightnessBucket === 2) ansi += 60;
-	return ansi;
-}
-/**
-* Foreground SGR open sequence at `depth`.
-*/
-function fgOpen(input, depth) {
-	const [r, g, b] = parseRgb(input);
-	if (depth === "16") return `\x1b[${rgbToAnsi16Param(r, g, b)}m`;
-	if (depth === "256") return `\x1b[38;5;${rgbToAnsi256(r, g, b)}m`;
-	return `\x1b[38;2;${r};${g};${b}m`;
-}
-/**
-* Background SGR open sequence at `depth`. For `truecolor` / `256`,
-* derived from {@link fgOpen} by swapping the `\x1b[38;` introducer for
-* `\x1b[48;` (both the truecolor and 256-color forms use it). For `16`,
-* quantized directly to a real background SGR.
-*/
-function bgOpen(input, depth) {
-	if (depth === "16") {
-		const [r, g, b] = parseRgb(input);
-		return `\x1b[${rgbToAnsi16Param(r, g, b) + 10}m`;
-	}
-	return fgOpen(input, depth).replace(FG_INTRODUCER, BG_INTRODUCER);
-}
-function colorPair(kind, input, depth) {
-	if (depth === "none") {
-		parseRgb(input);
-		return {
-			open: "",
-			close: ""
-		};
-	}
-	return {
-		open: kind === "fg" ? fgOpen(input, depth) : bgOpen(input, depth),
-		close: kind === "fg" ? FG_CLOSE : BG_CLOSE
-	};
-}
-function paint(kind, text, input, depth) {
-	const pair = colorPair(kind, input, depth);
-	return depth === "none" ? text : applyStyle(text, pair);
-}
-const OSC = "\x1B]";
-const ST = "\x1B\\";
-const HYPERLINK_CLOSE = `${OSC}8;;${ST}`;
-function assertMatches(value, label, pattern, suffix = "") {
-	if (!pattern.test(value)) throw new TypeError(`Invalid ${label}: ${JSON.stringify(value)} must contain only printable ASCII characters${suffix}.`);
-}
-function serializeParams(options) {
-	const id = options?.id;
-	if (id === void 0 || id === "") return "";
-	assertMatches(id, "hyperlink id", /^[\x20-\x7e]*$/);
-	if (id.includes(":") || id.includes(";")) throw new TypeError("Invalid hyperlink id: \":\" and \";\" are reserved by the OSC 8 format.");
-	return `id=${id}`;
-}
-/**
-* Create an OSC 8 hyperlink escape pair for `url`. Backs {@link link} and
-* the `link` method on style instances; also used to validate URLs when
-* hyperlink emission is disabled.
-*
-* @param url - Target URL. Must contain only printable ASCII characters
-*   and no spaces (per the OSC 8 spec). URL-encode characters outside
-*   that range before passing.
-* @param options - Optional {@link HyperlinkOptions} — currently just
-*   `id` for grouping multi-segment links.
-* @returns An {@link AnsiPair} whose `open` carries the URL and `close`
-*   terminates the hyperlink.
-* @throws {TypeError} If `url` contains spaces or non-printable ASCII,
-*   or if `options.id` contains `":"` / `";"` (reserved by OSC 8) or
-*   non-printable characters.
-*
-* @internal
-*/
-function linkCode(url, options) {
-	assertMatches(url, "hyperlink URL", /^[\x21-\x7e]*$/, " without spaces");
-	const params = serializeParams(options);
-	return {
-		open: `${OSC}8;${params};${url}${ST}`,
-		close: HYPERLINK_CLOSE
-	};
-}
-/**
-* Wrap `text` in OSC 8 hyperlink escape sequences.
-*
-* @param text - The visible label.
-* @param url - Target URL. Must contain only printable ASCII characters
-*   and no spaces (per the OSC 8 spec); URL-encode anything outside that
-*   range before passing.
-* @param options - Optional {@link HyperlinkOptions}.
-* @returns The styled string.
-* @throws {TypeError} If `url` contains spaces or non-printable ASCII,
-*   or if `options.id` contains `":"` / `";"` (reserved by OSC 8) or
-*   non-printable characters.
-*
-* @example
-* ```ts
-* import { link } from "@crustjs/style";
-*
-* console.log(link("docs", "https://crustjs.com"));
-* console.log(link("page 1", "https://example.com/p1", { id: "intro" }));
-* ```
-*/
-function link$1(text, url, options) {
-	return applyStyle(text, linkCode(url, options));
-}
-const dynamicColorKinds = ["fg", "bg"];
-function stepIsModifier(step) {
-	return step.kind === "named" && isModifierName(step.name);
-}
-function stepPair(step, colorDepth) {
-	return step.kind === "named" ? styleMethodPairs[step.name] : colorPair(step.kind, step.input, colorDepth);
-}
-function colorStep(kind, input) {
-	const step = {
-		kind,
-		input
-	};
-	stepPair(step, "truecolor");
-	return Array.isArray(input) ? {
-		kind,
-		input: [
-			input[0],
-			input[1],
-			input[2]
-		]
-	} : step;
-}
-function applyChain(text, steps, resolveCapabilities) {
-	if (text == null) return "";
-	let result = String(text);
-	if (result === "") return result;
-	const capabilities = resolveCapabilities();
-	const { modifiersEnabled, colorsEnabled } = capabilities;
-	for (let i = steps.length - 1; i >= 0; i--) {
-		const step = steps[i];
-		if (step === void 0) continue;
-		if (stepIsModifier(step) ? !modifiersEnabled : !colorsEnabled) continue;
-		result = applyStyle(result, stepPair(step, capabilities.colorDepth));
-	}
-	return result;
-}
 function isTemplateStringsArray(value) {
 	return Array.isArray(value) && "raw" in value && Array.isArray(value.raw);
 }
-function buildChainableStyleFactory(resolveCapabilities, runtime) {
-	const cache = /* @__PURE__ */ new Map();
-	const pairDepth = runtime ? "truecolor" : resolveCapabilities().colorDepth;
-	function createChainableStyle(steps) {
-		const key = steps.map((step) => step.kind === "named" ? step.name : `~${stepPair(step, "truecolor").open}`).join("|");
-		const cached = cache.get(key);
-		if (cached) return cached;
-		const styleFn = ((first, ...rest) => {
-			if (isTemplateStringsArray(first)) {
-				let text = "";
-				for (let i = 0; i < first.length; i++) {
-					text += first[i] ?? "";
-					if (i < rest.length) text += String(rest[i]);
-				}
-				return applyChain(text, steps, resolveCapabilities);
-			}
-			return applyChain(first, steps, resolveCapabilities);
-		});
-		if (cache.size >= 1024) cache.delete(cache.keys().next().value);
-		cache.set(key, styleFn);
-		for (const name of styleMethodNames) Object.defineProperty(styleFn, name, {
-			configurable: false,
-			enumerable: true,
-			get() {
-				return createChainableStyle([...steps, {
-					kind: "named",
-					name
-				}]);
-			}
-		});
-		for (const kind of dynamicColorKinds) Object.defineProperty(styleFn, kind, {
-			configurable: false,
-			enumerable: true,
-			value: (input) => createChainableStyle([...steps, colorStep(kind, input)]),
-			writable: false
-		});
-		let open = "";
-		let close = "";
-		for (const step of steps) {
-			const pair = stepPair(step, pairDepth);
-			open += pair.open;
-			close = pair.close + close;
-		}
-		Object.defineProperty(styleFn, "open", {
-			value: open,
-			writable: false,
-			configurable: false,
-			enumerable: true
-		});
-		Object.defineProperty(styleFn, "close", {
-			value: close,
-			writable: false,
-			configurable: false,
-			enumerable: true
-		});
-		return Object.freeze(styleFn);
+/**
+* Resolve the text of a style function call: a direct `fn(text)` call passes
+* `text` through; a tagged template `` fn`a ${b}` `` joins its cooked strings
+* with each value coerced via `String(...)`.
+*/
+function callText(first, values) {
+	if (!isTemplateStringsArray(first)) return first;
+	let text = "";
+	for (let i = 0; i < first.length; i++) {
+		text += first[i] ?? "";
+		if (i < values.length) text += String(values[i]);
 	}
-	return createChainableStyle;
-}
-function buildStyleMethods(createChainableStyle) {
-	const methods = {};
-	for (const methodName of styleMethodNames) methods[methodName] = createChainableStyle([{
-		kind: "named",
-		name: methodName
-	}]);
-	return methods;
-}
-function resolveStyleCapabilities(options) {
-	const mode = options?.mode ?? "auto";
-	const modifiersEnabled = resolveModifierCapability(mode, options?.overrides);
-	const colorDepth = resolveColorDepth(mode, options?.overrides);
-	return {
-		modifiersEnabled,
-		colorDepth,
-		colorsEnabled: colorDepth !== "none",
-		trueColorEnabled: colorDepth === "truecolor"
-	};
+	return text;
 }
-function createStyleInstance(options, runtime) {
-	const resolveCapabilities = runtime ? resolveStyleCapabilities : (() => {
-		const capabilities = resolveStyleCapabilities(options);
-		return () => capabilities;
-	})();
-	const createChainableStyle = buildChainableStyleFactory(resolveCapabilities, runtime);
-	const methods = buildStyleMethods(createChainableStyle);
-	const instance = {
-		get enabled() {
-			const { modifiersEnabled, colorsEnabled } = resolveCapabilities();
-			return modifiersEnabled || colorsEnabled;
-		},
-		get colorsEnabled() {
-			return resolveCapabilities().colorsEnabled;
-		},
-		get trueColorEnabled() {
-			return resolveCapabilities().trueColorEnabled;
-		},
-		get colorDepth() {
-			return resolveCapabilities().colorDepth;
-		},
-		link(text, url, hyperlinkOptions) {
-			if (resolveCapabilities().modifiersEnabled) return link$1(text, url, hyperlinkOptions);
-			linkCode(url, hyperlinkOptions);
-			return text;
-		},
-		...Object.fromEntries(dynamicColorKinds.map((kind) => [kind, (...args) => {
-			if (args.length === 1) return createChainableStyle([colorStep(kind, args[0])]);
-			return paint(kind, args[0], args[1], resolveCapabilities().colorDepth);
-		}])),
-		...methods
+/** A plain (non-chaining) style function that applies `pair` while `enabled()` is true. */
+function plainStyleFn(pair, enabled) {
+	return (first, ...values) => {
+		const text = callText(first, values);
+		return enabled() ? applyStyle(text, pair) : text == null ? "" : String(text);
 	};
-	return Object.freeze(instance);
 }
-/**
-* Default style instance using `"auto"` mode.
-*
-* Emits color ANSI codes when stdout is a TTY and `NO_COLOR` is not set.
-* Non-color modifiers (bold, italic, etc.) follow TTY only; `FORCE_COLOR`,
-* when set, decides unconditionally for both.
-* Import this for convenient access without explicit configuration.
-*
-* @example
-* ```ts
-* import { style } from "@crustjs/style";
-*
-* console.log(style.bold("hello"));
-* console.log(style.red("error"));
-* ```
-*/
-const style = createStyleInstance(void 0, true);
-style.black;
-style.red;
-const green = style.green;
-const yellow = style.yellow;
-style.blue;
-style.magenta;
-const cyan = style.cyan;
-style.white;
-style.gray;
-style.brightRed;
-style.brightGreen;
-style.brightYellow;
-style.brightBlue;
-style.brightMagenta;
-style.brightCyan;
-style.brightWhite;
-style.bgBlack;
-style.bgRed;
-style.bgGreen;
-style.bgYellow;
-style.bgBlue;
-style.bgMagenta;
-style.bgCyan;
-style.bgWhite;
-style.bgBrightBlack;
-style.bgBrightRed;
-style.bgBrightGreen;
-style.bgBrightYellow;
-style.bgBrightBlue;
-style.bgBrightMagenta;
-style.bgBrightCyan;
-style.bgBrightWhite;
-const bold = style.bold;
-const dim = style.dim;
-style.italic;
-style.underline;
-style.inverse;
-style.hidden;
-style.strikethrough;
-style.link;
-style.fg;
-style.bg;
-//#endregion
-//#region ../utils/dist/error.js
-/** Narrows a caught Node.js system error to its stable errno contract. */
-function isErrnoException(error) {
-	return error instanceof Error && "code" in error && typeof error.code === "string";
-}
-//#endregion
-//#region ../utils/dist/json.js
-/** Narrow a JSON document root to an object (not array/scalar/null). */
-function isJsonObject(value) {
-	return typeof value === "object" && value !== null && !Array.isArray(value);
+const modifiersEnabled = () => resolveModifierCapability("auto");
+const colorsEnabled = () => resolveColorDepth("auto") !== "none";
+function modifier(open, close) {
+	return plainStyleFn({
+		open: `\x1b[${open}m`,
+		close: `\x1b[${close}m`
+	}, modifiersEnabled);
 }
-//#endregion
-//#region ../utils/dist/path.js
+function color(open, close) {
+	return plainStyleFn({
+		open: `\x1b[${open}m`,
+		close: `\x1b[${close}m`
+	}, colorsEnabled);
+}
+const green = /* @__PURE__ */ color(32, 39);
+const yellow = /* @__PURE__ */ color(33, 39);
+const cyan = /* @__PURE__ */ color(36, 39);
+const bold = /* @__PURE__ */ modifier(1, 22);
+const dim = /* @__PURE__ */ modifier(2, 22);
+// ../utils/dist/path.js
 /** Returns whether child is parent itself or lies below it. */
 function isWithin(parent, child) {
+	const { isAbsolute, relative, sep } = process.getBuiltinModule("node:path");
 	const path = relative(parent, child);
 	return path === "" || !isAbsolute(path) && path !== ".." && !path.startsWith(`..${sep}`);
 }
-//#endregion
-//#region src/artifacts.ts
+// src/artifacts.ts
 /**
 * `crust.include` directories normalized to cwd-relative POSIX names. They are
 * staged exactly like Extension artifacts.
@@ -1525,20 +384,35 @@ function collectIncludeDirs(cwd, stageDir, include, artifactNames) {
 	return includeDirs;
 }
 /**
+* Names a template ships on purpose that `npm pack`/`npm publish` drop from
+* every directory of a package whatever its `files` says, in any letter case.
+* A dropped `.gitignore` or `.npmignore` also acts as ignore rules for its own
+* directory. The rest of npm's ignore list (`.DS_Store`, `*.orig`, …) is junk
+* nobody means to publish, so it stays silently dropped.
+*/
+const NPM_DROPPED_NAME = /^\.(?:gitignore|npmignore|npmrc)$/i;
+/**
 * Walks `dir` the way the dereferencing copy will (through symlinked
-* directories) and rejects any path whose real location leaves the project.
+* directories) and rejects any path whose real location leaves the project,
+* and any {@link NPM_DROPPED_NAME} name.
 */
 function assertResolvesInsideProject(cwd, entry, dir) {
 	const realCwd = realpathSync(cwd);
 	const seen = /* @__PURE__ */ new Set();
+	const npmDropped = [];
 	const walk = (path) => {
 		const real = realpathSync(path);
 		if (!isWithin(realCwd, real)) throw new Error(`package.json crust.include entry ${JSON.stringify(entry)} resolves outside the project root: ${relative(cwd, path)} -> ${real}`);
+		if (NPM_DROPPED_NAME.test(basename(path))) npmDropped.push(relative(cwd, path));
 		if (seen.has(real) || !statSync(path).isDirectory()) return;
 		seen.add(real);
 		for (const child of readdirSync(path)) walk(join(path, child));
 	};
 	walk(dir);
+	if (npmDropped.length > 0) {
+		const listed = npmDropped.sort().map((path) => `\n  ${path}`).join("");
+		throw new Error(`package.json crust.include entry ${JSON.stringify(entry)} contains files npm leaves out of published packages:${listed}\n  Rename each (e.g. .gitignore -> _gitignore) and restore the name when your CLI copies it; scaffold() from @crustjs/create turns a leading _ on a file name into a dot.`);
+	}
 }
 /**
 * Copies one entry's Extension build hook output into the shared artifact
@@ -1591,8 +465,46 @@ function collectArtifacts(artifactOutDir) {
 		manPages: names.includes("man") ? readdirSync(join(artifactOutDir, "man"), { withFileTypes: true }).filter((entry) => entry.isFile()).map((entry) => entry.name).sort() : []
 	};
 }
-//#endregion
-//#region ../utils/dist/process.js
+// ../utils/dist/process.js
+const LIFETIME_SIGNALS = [
+	"SIGINT",
+	"SIGTERM",
+	"SIGHUP",
+	"SIGQUIT"
+];
+const bindings = /* @__PURE__ */ new Set();
+function onLifetimeSignal(signal) {
+	const pending = [...bindings];
+	bindings.clear();
+	removeLifetimeListeners();
+	for (const binding of pending) binding.onSignal(signal);
+	if (process.listenerCount(signal) === 0) process.kill(process.pid, signal);
+}
+function onLifetimeExit() {
+	for (const binding of bindings) binding.onExit();
+}
+function removeLifetimeListeners() {
+	for (const signal of LIFETIME_SIGNALS) process.removeListener(signal, onLifetimeSignal);
+	process.removeListener("exit", onLifetimeExit);
+}
+/**
+* Ties a detached POSIX child group to this process, which the group no longer shares
+* terminal signals with. Until the returned release runs, SIGINT, SIGTERM, SIGHUP or SIGQUIT
+* calls `onSignal` once and is then re-raised when no other listener handles it, and a
+* synchronous exit (`process.exit`, an uncaught error) calls `onExit`. SIGKILL and native
+* crashes cannot be observed and still orphan the group. A signal this process inherited as
+* ignored (Bun on Linux, such as SIGHUP under `nohup`) stays ignored and is never listened for.
+*/
+function bindToProcessLifetime(binding) {
+	if (bindings.size === 0) {
+		for (const signal of LIFETIME_SIGNALS) if (!isSignalIgnored(signal)) process.prependListener(signal, onLifetimeSignal);
+		process.on("exit", onLifetimeExit);
+	}
+	bindings.add(binding);
+	return () => {
+		if (bindings.delete(binding) && bindings.size === 0) removeLifetimeListeners();
+	};
+}
 const WINDOWS_SHELL_UNSAFE = /[\0\r\n"%!^`<>&|]/;
 const WINDOWS_SHELL_META = /([()\][%!^"`<>&|;, *?])/g;
 function escapeWindowsShellArgument(value) {
@@ -1604,7 +516,7 @@ function escapeWindowsShellArgument(value) {
 /** @internal Build Node's escaped Windows command-shim workaround. */
 function getWindowsShimCommand(command, args, shell, platform = process.platform) {
 	if (shell || platform !== "win32" || !/\.(cmd|bat)$/i.test(command)) return null;
-	const shimCommand = win32.normalize(command);
+	const shimCommand = process.getBuiltinModule("node:path").win32.normalize(command);
 	for (const [index, value] of [shimCommand, ...args].entries()) if (WINDOWS_SHELL_UNSAFE.test(value)) {
 		const label = index === 0 ? "command" : `argument ${index}`;
 		throw new Error(`Windows command shim ${label} ${JSON.stringify(value)} contains unsafe shell characters`);
@@ -1630,6 +542,7 @@ function killProcessTree(child) {
 	if (child.pid === void 0) return;
 	if (process.platform === "win32") {
 		if (child.exitCode === null && child.signalCode === null) {
+			const { spawnSync } = process.getBuiltinModule("node:child_process");
 			const result = spawnSync("taskkill", [
 				"/pid",
 				String(child.pid),
@@ -1660,9 +573,12 @@ function killProcessTree(child) {
 * calls are passed through unchanged and own their shell escaping.
 */
 async function runProcess(command, args = [], options = {}) {
+	options.signal?.throwIfAborted();
 	const windowsShimCommand = getWindowsShimCommand(command, args, options.shell);
 	const collect = (options.stdio ?? "collect") === "collect";
 	const collectStdout = collect && options.stdout !== "ignore";
+	const detached = options.timeout !== void 0 && process.platform !== "win32";
+	const { spawn } = process.getBuiltinModule("node:child_process");
 	const proc = spawn(windowsShimCommand?.command ?? command, windowsShimCommand?.args ?? args, {
 		cwd: options.cwd,
 		env: options.env,
@@ -1672,31 +588,54 @@ async function runProcess(command, args = [], options = {}) {
 			collectStdout ? "pipe" : "ignore",
 			"pipe"
 		] : "inherit",
-		detached: options.timeout !== void 0 && process.platform !== "win32",
+		detached,
 		windowsVerbatimArguments: windowsShimCommand?.windowsVerbatimArguments
 	});
-	let timer;
-	const deadline = new Promise((_, reject) => {
-		if (options.timeout === void 0) return;
-		const timeout = options.timeout;
-		timer = setTimeout(() => {
-			let failure = /* @__PURE__ */ new Error(`${[command, ...args].join(" ")} did not exit within ${timeout} ms and was killed.`);
+	const commandLine = [command, ...args].join(" ");
+	let stop;
+	const stopped = new Promise((_, reject) => {
+		stop = (message, reason) => {
+			let failure = new Error(message);
 			try {
 				killProcessTree(proc);
 			} catch (cause) {
-				failure = new Error("Process-tree cleanup failed after timeout.", { cause });
+				failure = new Error(`Process-tree cleanup failed after ${reason}.`, { cause });
 			}
 			proc.stdout?.destroy();
 			proc.stderr?.destroy();
 			reject(failure);
-		}, timeout);
+		};
 	});
+	const timeout = options.timeout;
+	const timer = timeout === void 0 ? void 0 : setTimeout(() => stop(`${commandLine} did not exit within ${timeout} ms and was killed.`, "timeout"), timeout);
+	const release = detached ? bindToProcessLifetime({
+		onSignal: (signal) => stop(`${commandLine} was interrupted by ${signal}.`, signal),
+		onExit: () => {
+			try {
+				killProcessTree(proc);
+			} catch {}
+		}
+	}) : () => {};
+	let forceKillTimer;
+	const onAbort = () => {
+		try {
+			if (detached || process.platform === "win32") killProcessTree(proc);
+			else {
+				proc.kill("SIGTERM");
+				forceKillTimer = setTimeout(() => proc.kill("SIGKILL"), 5e3);
+			}
+		} catch {}
+	};
+	options.signal?.addEventListener("abort", onAbort, { once: true });
+	const { text } = process.getBuiltinModule("node:stream/consumers");
+	const { once } = process.getBuiltinModule("node:events");
 	try {
 		const [stdout, stderr, [exitCode]] = await Promise.race([Promise.all([
 			collectStdout ? text(proc.stdout) : "",
 			collect ? text(proc.stderr) : "",
 			once(proc, "close")
-		]), deadline]);
+		]), stopped]);
+		options.signal?.throwIfAborted();
 		return {
 			exitCode,
 			stdout,
@@ -1704,9 +643,13 @@ async function runProcess(command, args = [], options = {}) {
 		};
 	} finally {
 		clearTimeout(timer);
+		clearTimeout(forceKillTimer);
+		release();
+		options.signal?.removeEventListener("abort", onAbort);
 	}
 }
 function isExecutableFile(path) {
+	const { accessSync, constants, statSync } = process.getBuiltinModule("node:fs");
 	try {
 		accessSync(path, constants.X_OK);
 		return statSync(path).isFile();
@@ -1716,6 +659,7 @@ function isExecutableFile(path) {
 }
 /** Resolve a bare executable name from PATH (and PATHEXT on Windows). */
 function which(command) {
+	const { delimiter, extname, join, resolve, sep } = process.getBuiltinModule("node:path");
 	if (command.includes(sep) || command.includes("/")) return isExecutableFile(command) ? command : null;
 	const extensions = process.platform === "win32" && !extname(command) ? (process.env.PATHEXT ?? ".EXE;.CMD;.BAT;.COM").split(";") : [""];
 	for (const directory of process.env.PATH?.split(delimiter) ?? []) for (const extension of extensions) {
@@ -1724,8 +668,7 @@ function which(command) {
 	}
 	return null;
 }
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/lrucache.js
 var require_lrucache = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	var LRUCache = class {
 		constructor() {
@@ -1757,8 +700,7 @@ var require_lrucache = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	module.exports = LRUCache;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/parse-options.js
 var require_parse_options = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const looseOption = Object.freeze({ loose: true });
 	const emptyOpts = Object.freeze({});
@@ -1769,8 +711,7 @@ var require_parse_options = /* @__PURE__ */ __commonJSMin(((exports, module) =>
 	};
 	module.exports = parseOptions;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/constants.js
 var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = {
 		MAX_LENGTH: 256,
@@ -1792,13 +733,11 @@ var require_constants = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		FLAG_LOOSE: 2
 	};
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/debug.js
 var require_debug = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	module.exports = typeof process === "object" && process.env && process.env.NODE_DEBUG && /\bsemver\b/i.test(process.env.NODE_DEBUG) ? (...args) => console.error("SEMVER", ...args) : () => {};
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/re.js
 var require_re = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const { MAX_SAFE_COMPONENT_LENGTH, MAX_SAFE_BUILD_LENGTH, MAX_LENGTH } = require_constants();
 	const debug = require_debug();
@@ -1876,8 +815,7 @@ var require_re = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	createToken("GTE0", "^\\s*>=\\s*0\\.0\\.0\\s*$");
 	createToken("GTE0PRE", "^\\s*>=\\s*0\\.0\\.0-0\\s*$");
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/internal/identifiers.js
 var require_identifiers = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const numeric = /^[0-9]+$/;
 	const compareIdentifiers = (a, b) => {
@@ -1896,8 +834,7 @@ var require_identifiers = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		rcompareIdentifiers
 	};
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/semver.js
 var require_semver = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const debug = require_debug();
 	const { MAX_LENGTH, MAX_SAFE_INTEGER } = require_constants();
@@ -2082,57 +1019,49 @@ var require_semver = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		}
 	};
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/compare.js
 var require_compare = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const SemVer = require_semver();
 	const compare = (a, b, loose) => new SemVer(a, loose).compare(new SemVer(b, loose));
 	module.exports = compare;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/eq.js
 var require_eq = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const compare = require_compare();
 	const eq = (a, b, loose) => compare(a, b, loose) === 0;
 	module.exports = eq;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/neq.js
 var require_neq = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const compare = require_compare();
 	const neq = (a, b, loose) => compare(a, b, loose) !== 0;
 	module.exports = neq;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gt.js
 var require_gt = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const compare = require_compare();
 	const gt = (a, b, loose) => compare(a, b, loose) > 0;
 	module.exports = gt;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/gte.js
 var require_gte = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const compare = require_compare();
 	const gte = (a, b, loose) => compare(a, b, loose) >= 0;
 	module.exports = gte;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lt.js
 var require_lt = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const compare = require_compare();
 	const lt = (a, b, loose) => compare(a, b, loose) < 0;
 	module.exports = lt;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/lte.js
 var require_lte = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const compare = require_compare();
 	const lte = (a, b, loose) => compare(a, b, loose) <= 0;
 	module.exports = lte;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/cmp.js
 var require_cmp = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const eq = require_eq();
 	const neq = require_neq();
@@ -2163,8 +1092,7 @@ var require_cmp = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	module.exports = cmp;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/comparator.js
 var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const ANY = Symbol("SemVer ANY");
 	module.exports = class Comparator {
@@ -2235,8 +1163,7 @@ var require_comparator = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const SemVer = require_semver();
 	const Range = require_range();
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/classes/range.js
 var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const SPACE_CHARACTERS = /\s+/g;
 	module.exports = class Range {
@@ -2518,8 +1445,7 @@ var require_range = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 		return true;
 	};
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/satisfies.js
 var require_satisfies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const Range = require_range();
 	const satisfies = (version, range, options) => {
@@ -2532,8 +1458,7 @@ var require_satisfies = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	module.exports = satisfies;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/parse.js
 var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const SemVer = require_semver();
 	const parse = (version, options, throwErrors = false) => {
@@ -2547,8 +1472,7 @@ var require_parse = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	module.exports = parse;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/functions/valid.js
 var require_valid$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const parse = require_parse();
 	const valid = (version, options) => {
@@ -2557,8 +1481,7 @@ var require_valid$1 = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	module.exports = valid;
 }));
-//#endregion
-//#region ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js
+// ../../node_modules/.pnpm/semver@7.8.5/node_modules/semver/ranges/valid.js
 var require_valid = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	const Range = require_range();
 	const validRange = (range, options) => {
@@ -2570,16 +1493,11 @@ var require_valid = /* @__PURE__ */ __commonJSMin(((exports, module) => {
 	};
 	module.exports = validRange;
 }));
-//#endregion
-//#region src/targets.ts
+// src/targets.ts
 var import_satisfies = /* @__PURE__ */ __toESM(require_satisfies(), 1);
 var import_valid = /* @__PURE__ */ __toESM(require_valid$1(), 1);
 var import_valid$1 = /* @__PURE__ */ __toESM(require_valid(), 1);
-const BUILD_RUNTIMES = [
-	"bun",
-	"deno",
-	"node"
-];
+const BUILD_RUNTIMES = ["bun", "node"];
 const BUN_TARGETS = {
 	runtime: "Bun",
 	targets: [
@@ -2647,57 +1565,6 @@ const BUN_TARGETS = {
 		}
 	}
 };
-const DENO_TARGETS = {
-	runtime: "Deno",
-	targets: [
-		"x86_64-unknown-linux-gnu",
-		"aarch64-unknown-linux-gnu",
-		"x86_64-apple-darwin",
-		"aarch64-apple-darwin",
-		"x86_64-pc-windows-msvc",
-		"aarch64-pc-windows-msvc"
-	],
-	info: {
-		"x86_64-unknown-linux-gnu": {
-			alias: "linux-x64",
-			platformKey: "linux-x64",
-			os: "linux",
-			cpu: "x64",
-			libc: "glibc"
-		},
-		"aarch64-unknown-linux-gnu": {
-			alias: "linux-arm64",
-			platformKey: "linux-arm64",
-			os: "linux",
-			cpu: "arm64",
-			libc: "glibc"
-		},
-		"x86_64-apple-darwin": {
-			alias: "darwin-x64",
-			platformKey: "darwin-x64",
-			os: "darwin",
-			cpu: "x64"
-		},
-		"aarch64-apple-darwin": {
-			alias: "darwin-arm64",
-			platformKey: "darwin-arm64",
-			os: "darwin",
-			cpu: "arm64"
-		},
-		"x86_64-pc-windows-msvc": {
-			alias: "windows-x64",
-			platformKey: "win32-x64",
-			os: "win32",
-			cpu: "x64"
-		},
-		"aarch64-pc-windows-msvc": {
-			alias: "windows-arm64",
-			platformKey: "win32-arm64",
-			os: "win32",
-			cpu: "arm64"
-		}
-	}
-};
 const NODE_TARGETS = {
 	runtime: "Node",
 	targets: [
@@ -2786,8 +1653,7 @@ function hostTarget(table) {
 	const platformKey = hostPlatformKey();
 	return table.targets.find((target) => table.info[target].platformKey === platformKey) ?? null;
 }
-//#endregion
-//#region src/compilers.ts
+// src/compilers.ts
 /** A finished compiler process's stderr, then stdout, for error messages. */
 function processOutput({ stdout, stderr }) {
 	return [stderr.trim(), stdout.trim()].filter(Boolean).join("\n");
@@ -2851,15 +1717,6 @@ function assertTargetsBuildableWithoutBun(targets, runner, host = hostTarget(BUN
 	throw new Error(`Cannot build ${host} without a separate bun executable on PATH.\n  Bun reuses the running crust executable as the base for its own platform, which yields a binary that crashes on start.
   Install Bun (https://bun.sh), or ${alternative}.`);
 }
-/** The external `deno` on PATH; Deno has no embedded fallback. */
-function resolveDenoBuildRunner() {
-	const denoPath = which("deno");
-	if (!denoPath) throw new Error("Deno is required for the deno runtime but was not found on PATH.\n  Install Deno from https://deno.com/ and try again.");
-	return {
-		command: denoPath,
-		env: { ...process.env }
-	};
-}
 /** The external `node` on PATH, which runs tsdown's executable builder; there is no embedded fallback. */
 function resolveNodeBuildRunner() {
 	const nodePath = which("node");
@@ -2871,14 +1728,13 @@ function resolveNodeBuildRunner() {
 }
 const RUNTIME_LABELS = {
 	bun: "Bun",
-	deno: "Deno",
 	node: "Node"
 };
 const COMPILER_VERSION_TIMEOUT_MS = 3e4;
 /**
 * Runtime version reported by the runner itself (`<command> --version`), never
-* the runtime hosting this process: `bun` prints `1.4.2`, `deno` prints
-* `deno 2.9.6 (…)`, `node` prints `v24.21.0`. Under the `BUN_BE_BUN` fallback
+* the runtime hosting this process: `bun` prints `1.4.2`, `node` prints
+* `v24.21.0`. Under the `BUN_BE_BUN` fallback
 * this is the embedded Bun, which is the compiler. `cwd` must be the directory
 * compilation runs in: a version-manager shim picks its runtime from it. A
 * probe still running after {@link COMPILER_VERSION_TIMEOUT_MS} is killed and
@@ -2892,8 +1748,7 @@ async function readCompilerVersion(runtime, runner, cwd) {
 		timeout: COMPILER_VERSION_TIMEOUT_MS
 	});
 	const stdout = result.stdout.trim();
-	const reported = runtime === "deno" ? /^deno (\S+)/.exec(stdout)?.[1] : stdout;
-	const version = result.exitCode === 0 && reported !== void 0 ? (0, import_valid.default)(reported) : null;
+	const version = result.exitCode === 0 ? (0, import_valid.default)(stdout) : null;
 	if (version === null) {
 		const output = processOutput(result);
 		throw new Error(`Could not read the ${RUNTIME_LABELS[runtime]} version from ${runner.command} --version (exit ${result.exitCode})${output ? `:\n${output}` : "."}`);
@@ -2922,47 +1777,22 @@ function assertCompilerSatisfiesEngines(compiler, userPackageJson) {
 	}
 }
 /**
-* Select the binary compiler once for a build: the Bun runner (external bun
-* first, then the embedded fallback) or the external deno. Returns its actual
-* version, read in the project directory `cwd`, after validating it against
-* `engines`. Pass `runner` and the same `cwd` on to the `exec*`/`buildEntrypoint`
+* Select the Bun binary compiler once for a build: external bun first, then
+* the embedded fallback. Returns its actual version, read in the project
+* directory `cwd`, after validating it against `engines`. Pass `runner` and the same `cwd` on to the `exec*`/`buildEntrypoint`
 * helpers so every step uses this same compiler.
 */
-async function resolveBinaryCompiler(runtime, userPackageJson, cwd) {
-	const runner = runtime === "bun" ? resolveBunBuildRunner() : resolveDenoBuildRunner();
+async function resolveBinaryCompiler(userPackageJson, cwd) {
+	const runner = resolveBunBuildRunner();
 	const compiler = {
-		runtime,
+		runtime: "bun",
 		runner,
-		version: await readCompilerVersion(runtime, runner, cwd)
+		version: await readCompilerVersion("bun", runner, cwd)
 	};
 	assertCompilerSatisfiesEngines(compiler, userPackageJson);
 	return compiler;
 }
-/**
-* Oldest `deno` accepted to bundle a Deno runtime package. Deno 2.4 resolves a
-* package.json project's npm dependencies from the registry instead of its
-* installed node_modules, so it can bundle a different Crust than the project
-* installed. Tested on Linux x64 with Deno 2.5.0 through 2.9.6.
-*/
-const DENO_PACKAGE_MIN_VERSION = "2.5.0";
-/**
-* Select the external deno that bundles a Deno runtime package, reading its
-* version in the project directory `cwd`. Call it before staging is replaced.
-* A runtime package embeds no Deno, so `engines.deno` stays a consumer
-* requirement and is not checked against this bundler.
-*/
-async function resolveDenoPackageBundler(cwd, runner = resolveDenoBuildRunner()) {
-	const version = await readCompilerVersion("deno", runner, cwd);
-	if (!(0, import_satisfies.default)(version, `>=2.5.0`, { includePrerelease: true })) throw new Error(`Deno ${version} (${runner.command}) cannot bundle a Deno runtime package; deno ${DENO_PACKAGE_MIN_VERSION} or newer is required.\n  Older deno bundle resolves package.json dependencies from the npm registry instead of the installed node_modules.
-  crust does not install or upgrade Deno; put a newer deno first on PATH (e.g. with your version manager).`);
-	return {
-		runtime: "deno",
-		runner,
-		version
-	};
-}
-//#endregion
-//#region src/bundle.ts
+// src/bundle.ts
 function toBunEnvFileArgs(envFiles) {
 	return envFiles.flatMap((envFile) => ["--env-file", envFile]);
 }
@@ -2978,8 +1808,7 @@ function resolveBunPluginSource(specifier, cwd) {
 /**
 * Marks every Bun/Node bundle crust produces so `resolveArtifactDir` (core)
 * can tell a staged bundle from source at runtime. Not a `PUBLIC_*` variable:
-* it is internal to crust, never user-set. Deno compile has no define, but
-* standalone Deno binaries are detected directly.
+* it is internal to crust, never user-set.
 */
 const CRUST_BUILD_DEFINE = { "process.env.CRUST_INTERNAL_BUILD": "\"1\"" };
 const CRUST_BUILD_DEFINE_ARG = "process.env.CRUST_INTERNAL_BUILD=\"1\"";
@@ -3010,6 +1839,12 @@ for (const { specifier, source } of options.plugins) {
 	}
 	plugins.push(plugin);
 }
+if (options.stripShebang) {
+	// Last, so a project plugin's onLoad for the entry still wins. The emptied line keeps line numbers.
+	plugins.push({ name: "crust-strip-shebang", setup(build) {
+		build.onLoad({ filter: new RegExp(\`^(?:\${options.stripShebang.map(RegExp.escape).join("|")})$\`) }, async ({ path, loader }) => ({ contents: (await Bun.file(path).text()).replace(/^#![^\\n]*/, ""), loader }));
+	} });
+}
 const result = await Bun.build({ ...options.build, define: ${JSON.stringify(CRUST_BUILD_DEFINE)}, plugins, throw: false });
 if (!result.success) {
 	for (const log of result.logs) console.error(log);
@@ -3025,7 +1860,7 @@ if (!options.build.compile) {
 }
 `;
 }
-async function runBunPluginDriver(build, outfilePath, { cwd, envFiles, bunPlugins }, runner) {
+async function runBunPluginDriver(build, outfilePath, { cwd, envFiles, bunPlugins }, runner, stripShebang) {
 	const driverPath = join(cwd, `.crust-build-${randomBytes(6).toString("hex")}.ts`);
 	await writeFile(driverPath, createBunPluginDriverScript({
 		plugins: bunPlugins.map((specifier) => ({
@@ -3033,7 +1868,8 @@ async function runBunPluginDriver(build, outfilePath, { cwd, envFiles, bunPlugin
 			source: resolveBunPluginSource(specifier, cwd)
 		})),
 		build,
-		outfile: outfilePath
+		outfile: outfilePath,
+		stripShebang
 	}));
 	try {
 		await runBuildProcess(runner, [...toBunEnvFileArgs(envFiles), driverPath], outfilePath, cwd);
@@ -3067,13 +1903,17 @@ async function execBuild(entryPath, outfilePath, target, settings, runner = reso
 				target: compileTarget,
 				outfile: outfilePath,
 				autoloadBunfig: false
-			}
+			},
+			...settings.bytecode ? {
+				bytecode: true,
+				format: "esm"
+			} : {}
 		}, outfilePath, settings, runner);
 		return;
 	}
-	await runBuildProcess(runner, createBunCompileArgs(entryPath, outfilePath, settings.minify, compileTarget, settings.envFiles), outfilePath, settings.cwd);
+	await runBuildProcess(runner, createBunCompileArgs(entryPath, outfilePath, settings.minify, compileTarget, settings.envFiles, settings.bytecode), outfilePath, settings.cwd);
 }
-function createBunCompileArgs(entryPath, outfilePath, minify, target, envFiles = []) {
+function createBunCompileArgs(entryPath, outfilePath, minify, target, envFiles = [], bytecode = false) {
 	return [
 		"build",
 		"--compile",
@@ -3085,17 +1925,7 @@ function createBunCompileArgs(entryPath, outfilePath, minify, target, envFiles =
 		"--outfile",
 		outfilePath,
 		...minify ? ["--minify"] : [],
-		"--target",
-		target,
-		entryPath
-	];
-}
-function createDenoCompileArgs(entryPath, outfilePath, target) {
-	return [
-		"compile",
-		"-A",
-		"--output",
-		outfilePath,
+		...bytecode ? ["--bytecode", "--format=esm"] : [],
 		"--target",
 		target,
 		entryPath
@@ -3118,14 +1948,15 @@ async function runBuildProcess(runner, args, outfilePath, cwd) {
 */
 async function execScriptBuild(target, entryPath, outfilePath, settings, runner = resolveBunBuildRunner()) {
 	const { cwd, minify, envFiles, external } = settings;
-	if (settings.bunPlugins.length > 0) await runBunPluginDriver({
+	const stripShebang = target === "node" && /^#![^\n]*\bbun\b/.test(await readFile(entryPath, "utf8")) ? [entryPath, await realpath(entryPath)] : void 0;
+	if (settings.bunPlugins.length > 0 || stripShebang !== void 0) await runBunPluginDriver({
 		entrypoints: [entryPath],
 		minify,
 		env: "PUBLIC_*",
 		target,
 		format: "esm",
 		external
-	}, outfilePath, settings, runner);
+	}, outfilePath, settings, runner, stripShebang);
 	else await runBuildProcess(runner, [
 		"build",
 		...toBunEnvFileArgs(envFiles),
@@ -3142,40 +1973,14 @@ async function execScriptBuild(target, entryPath, outfilePath, settings, runner
 		...minify ? ["--minify"] : [],
 		entryPath
 	], outfilePath, cwd);
-	const output = await readFile(outfilePath, "utf8");
-	const shebang = `#!/usr/bin/env ${target}\n`;
-	await writeFile(outfilePath, shebang + output.replace(/^#![^\n]*(?:\n|$)/, ""));
+	const output = (await readFile(outfilePath, "utf8")).replace(/^#![^\n]*(?:\n|$)/, "");
+	if (target === "node" && output.startsWith("// @bun")) throw new Error(`Build failed for ${outfilePath}: Bun emitted Bun-only code for a Node bundle because the entry reached it starting with "#!/usr/bin/env bun".\n  Remove that line from ${entryPath}, or from what a crust.bunPlugins onLoad hook returns for it.`);
+	await writeFile(outfilePath, `#!/usr/bin/env ${target}\n${output}`);
 	if (process.platform !== "win32") await chmod(outfilePath, 493);
 }
-async function execDenoBuild(entryPath, outfilePath, target, cwd, runner = resolveDenoBuildRunner()) {
-	await runBuildProcess(runner, createDenoCompileArgs(entryPath, outfilePath, target), outfilePath, cwd);
-}
-/**
-* Bundle a Deno runtime package entry with native `deno bundle`, which resolves
-* dependencies through the project's own Deno setup (deno.json imports,
-* package.json with its installed node_modules) and inlines them into one file.
-*
-* Bundle the declared command directly so Deno preserves its `import.meta.main`
-* semantics without making dependencies main. Prepend the packaged-build marker
-* (`PACKAGED_BUILD_KEY`) to the bundled code so it runs before the inlined
-* application graph. The output has no shebang or permission flags: consumers
-* choose grants with `deno run` / `deno install`.
-* No env files or plugins: `deno bundle` has no PUBLIC_* filter or Bun plugins.
-*/
-async function execDenoPackageBuild(entryPath, outfilePath, cwd, runner = resolveDenoBuildRunner()) {
-	await runBuildProcess(runner, [
-		"bundle",
-		"--platform=deno",
-		"--packages=bundle",
-		"--output",
-		outfilePath,
-		resolve(cwd, entryPath)
-	], outfilePath, cwd);
-	const output = await readFile(outfilePath, "utf8");
-	await writeFile(outfilePath, `globalThis[Symbol.for(${JSON.stringify(PACKAGED_BUILD_KEY)})] = true;\n` + output.replace(/^#![^\n]*(?:\n|$)/, ""));
-}
-//#endregion
-//#region src/launcher.ts
+// src/launcher.ts
+/** Node.js the launcher needs for `process.execve`: the same floor as every Crust package. */
+const LAUNCHER_NODE_RANGE = ">=24";
 /** Platform binary filename: `<command>-<target>`, `.exe` on Windows. */
 function binaryFilename(command, target) {
 	return `${command}-${target.target}${target.os === "win32" ? ".exe" : ""}`;
@@ -3190,18 +1995,34 @@ function generateLauncher(command, targets) {
 	const supportedPlatforms = targets.map((target) => target.targetAlias).join(", ");
 	return `#!/usr/bin/env node
 // Auto-generated by crust build -- do not edit
-import { spawn } from "node:child_process";
-import { chmodSync, existsSync } from "node:fs";
-import { dirname, resolve } from "node:path";
-import process from "node:process";
-import { fileURLToPath } from "node:url";
-
 const NAME = ${JSON.stringify(command)};
+if (typeof process.getBuiltinModule !== "function" ||
+	(process.platform !== "win32" && typeof process.execve !== "function")) {
+	console.error("[" + NAME + "] Requires Node.js ${LAUNCHER_NODE_RANGE} (found " + process.version + ").");
+	process.exit(1);
+}
+
+// Builtins come from process.getBuiltinModule (cheaper than imports) and never from
+// node:process: importing it touches stdio, which leaves the shared terminal and pipes
+// non-blocking for the binary after execve.
+const { chmodSync, closeSync, existsSync, openSync, readSync } = process.getBuiltinModule("node:fs");
+const { resolve } = process.getBuiltinModule("node:path");
+
 const PLATFORMS = ${JSON.stringify(targetMap, null, "	")};
-const dir = dirname(fileURLToPath(import.meta.url));
+const dir = import.meta.dirname;
 
-// Same check as Bun's own npm installer: glibc reports its version, musl does not.
 function isMusl() {
+	// The first 2 KB of Node's ELF image hold its interpreter path (detect-libc reads the same
+	// span), which names its libc without the milliseconds a diagnostic report costs on every start.
+	try {
+		const fd = openSync("/proc/self/exe", "r");
+		const head = Buffer.alloc(2048);
+		const interpreter = head.toString("latin1", 0, readSync(fd, head, 0, head.length, 0));
+		closeSync(fd);
+		if (interpreter.includes("/ld-musl-")) return true;
+		if (interpreter.includes("/ld-linux-")) return false;
+	} catch {}
+	// Same check as Bun's own npm installer: glibc reports its version, musl does not.
 	try {
 		const report = process.report?.getReport();
 		if (report?.header) return report.header.glibcVersionRuntime === undefined;
@@ -3239,39 +2060,55 @@ if (!binPath) {
 \tprocess.exit(1);
 }
 
-if (process.platform !== "win32") {
+if (process.platform === "win32") {
+\tlaunchWindows(binPath);
+} else {
 \ttry {
 \t\tchmodSync(binPath, 0o755);
 \t} catch {
-\t\t// Ignore permission adjustment failures and let spawn surface real errors.
+\t\t// Ignore permission adjustment failures and let execve surface real errors.
 \t}
+\t// Become the binary: one process, so signals and exit status reach it with no relay.
+\t// Node ignores SIGPIPE and SIGXFSZ, and ignored signals survive execve; handled ones reset.
+\t// Ignores Node inherited (nohup's SIGHUP) were reset at its startup, so none pass on.
+\tprocess.on("SIGPIPE", () => {});
+\tprocess.on("SIGXFSZ", () => {});
+\t// Early execve versions (e.g. Node 24.0.0) default to an empty environment.
+\tprocess.execve(binPath, [binPath, ...process.argv.slice(2)], process.env);
 }
 
-const child = spawn(binPath, process.argv.slice(2), {
-\tstdio: "inherit",
-});
-
-child.on("error", (error) => {
-\tconsole.error("[" + NAME + "] Failed to launch binary: " + error.message);
-\tprocess.exit(1);
-});
-
-child.on("exit", (code, signal) => {
-\tif (signal) {
-\t\ttry {
-\t\t\tprocess.kill(process.pid, signal);
-\t\t} catch {
-\t\t\tprocess.exit(1);
+// Windows has no execve. Its console delivers Ctrl-C to the binary directly, and
+// child.kill("SIGINT") would hard-terminate it, so SIGINT is never forwarded.
+function launchWindows(binPath) {
+\tconst { spawn } = process.getBuiltinModule("node:child_process");
+\tconst child = spawn(binPath, process.argv.slice(2), { stdio: "inherit" });
+\tconst forward = (signal) => child.kill(signal);
+\tconst ignore = () => {};
+\tprocess.on("SIGINT", ignore);
+\tprocess.on("SIGTERM", forward);
+\tprocess.on("SIGHUP", forward);
+\tchild.on("error", (error) => {
+\t\tconsole.error("[" + NAME + "] Failed to launch binary: " + error.message);
+\t\tprocess.exit(1);
+\t});
+\tchild.on("exit", (code, signal) => {
+\t\tprocess.off("SIGINT", ignore);
+\t\tprocess.off("SIGTERM", forward);
+\t\tprocess.off("SIGHUP", forward);
+\t\tif (signal) {
+\t\t\ttry {
+\t\t\t\tprocess.kill(process.pid, signal);
+\t\t\t} catch {
+\t\t\t\tprocess.exit(1);
+\t\t\t}
+\t\t\treturn;
 \t\t}
-\t\treturn;
-\t}
-
-\tprocess.exit(code ?? 0);
-});
+\t\tprocess.exit(code ?? 0);
+\t});
+}
 `;
 }
-//#endregion
-//#region src/distribute.ts
+// src/distribute.ts
 /** Project-relative directory that `crust build` owns: wiped per build, read by `crust publish`. */
 const CRUST_DIR = ".crust";
 /**
@@ -3314,8 +2151,14 @@ function platformBinMap(commands, target) {
 	return Object.fromEntries(commands.map((command) => [command, `bin/${binaryFilename(command, target)}`]));
 }
 function buildDistributionRootPackageJson(metadata, commands, targets, { artifactDirs, manPages }) {
+	const { engines } = metadata.rootPackageJson;
+	const launcherEngines = targets.length > 0 && metadata.exports === void 0 ? {
+		...engines !== void 0 && isJsonObject(engines) ? engines : {},
+		node: LAUNCHER_NODE_RANGE
+	} : void 0;
 	return {
 		...metadata.rootPackageJson,
+		...launcherEngines ? { engines: launcherEngines } : {},
 		name: metadata.rootPackageName,
 		version: metadata.version,
 		type: "module",
@@ -3456,7 +2299,7 @@ function resolveDistributionMetadata(pkgJson, external) {
 		version: pkgJson.version,
 		rootPackageJson: pickRootMetadata(pkgJson),
 		sourceType: pkgJson.type,
-		...pkgJson.exports !== void 0 ? { exports: pkgJson.exports } : {},
+		...pkgJson.exports !== void 0 && pkgJson.exports !== null ? { exports: pkgJson.exports } : {},
 		...pkgJson.peerDependencies !== void 0 ? validatePeerDependencies(pkgJson.peerDependencies, pkgJson.peerDependenciesMeta) : {},
 		...external.length > 0 ? { dependencies: externalDependencies(pkgJson, external) } : {}
 	};
@@ -3639,14 +2482,12 @@ async function runDistributeBuild(plan, distribution, io, build) {
 	io.stdout(`\n${dim("Manifest:")} ${manifestPath}`);
 	return produced;
 }
-//#endregion
-//#region package.json
+// package.json
 var optionalDependencies = {
-	"@tsdown/exe": "0.23.1",
-	"tsdown": "0.23.1"
+	"@tsdown/exe": "0.23.4",
+	"tsdown": "0.23.4"
 };
-//#endregion
-//#region src/node-exe.ts
+// src/node-exe.ts
 /**
 * Crust's own optional dependencies that build Node standalone binaries.
 * Crust's staged root and platform packages declare them
@@ -3802,7 +2643,7 @@ await build({
 	// Bun leaves only Node built-ins as imports; fail on anything else, which
 	// an executable shipping no node_modules could not resolve.
 	deps: { alwaysBundle: () => true, onlyBundle: false, onlyImport: [] },
-	exe: { outDir: options.exeDir, fileName: "app", targets: [options.target] },
+	exe: { outDir: options.exeDir, fileName: "app", targets: [options.target], seaConfig: { useCodeCache: options.useCodeCache } },
 });
 `;
 }
@@ -3824,7 +2665,7 @@ await build({
 *   signature) after a successful build
 * @throws {Error} If the build fails
 */
-async function execNodeBinaryBuild(entryPath, outfilePath, target, settings, compiler, bunRunner, onWarning = () => {}) {
+async function execNodeBinaryBuild(entryPath, outfilePath, target, settings, compiler, bunRunner, onWarning = () => {}, useCodeCache = false) {
 	const { cwd, minify } = settings;
 	const workDir = await mkdtemp(join(tmpdir(), "crust-node-exe-"));
 	try {
@@ -3843,7 +2684,8 @@ async function execNodeBinaryBuild(entryPath, outfilePath, target, settings, com
 			bundleDir: join(workDir, "bundle"),
 			exeDir,
 			minify,
-			target: nodeExeTarget(target, compiler.version)
+			target: nodeExeTarget(target, compiler.version),
+			useCodeCache
 		}));
 		const output = await runBuildProcess(compiler.runner, [scriptPath], outfilePath, cwd);
 		const produced = await readdir(exeDir);
@@ -3861,12 +2703,13 @@ async function execNodeBinaryBuild(entryPath, outfilePath, target, settings, com
 }
 function createNodeExeProvisionScript(tsdownPackageJson, targets) {
 	return `// Generated by crust build to provision Node binaries for targets; deleted when it exits.
-import { realpathSync } from "node:fs";
+import { readFileSync, realpathSync, statSync } from "node:fs";
 import { createRequire } from "node:module";
 import { pathToFileURL } from "node:url";
 
 const exe = createRequire(realpathSync(${JSON.stringify(tsdownPackageJson)})).resolve("@tsdown/exe");
-const { resolveNodeBinary } = await import(pathToFileURL(exe).href);
+const { resolveNodeBinary, getCachedBinaryPath } = await import(pathToFileURL(exe).href);
+const useCodeCache = {};
 for (const { name, target } of ${JSON.stringify(targets)}) {
 	try {
 		await resolveNodeBinary(target, {});
@@ -3874,7 +2717,23 @@ for (const { name, target } of ${JSON.stringify(targets)}) {
 		console.error(name + ": " + error.message + (error.cause?.message ? "\\n" + error.cause.message : ""));
 		process.exit(1);
 	}
-}
+	// tsdown runs --build-sea with this Node, which writes the code cache; V8
+	// rejects it (with a warning on every start) unless the embedded Node is this
+	// exact binary with the same V8 flags, so another platform's or a distro build
+	// of the same version, or NODE_OPTIONS such as --jitless, gets none. Decided
+	// once per build: comparing reads both ~150 MB binaries.
+	const embedded = getCachedBinaryPath(target);
+	const host = (process.platform === "win32" ? "win" : process.platform) + "-" + process.arch;
+	useCodeCache[name] = process.env.NODE_OPTIONS
+		? "NODE_OPTIONS is set"
+		: target.platform + "-" + target.arch !== host
+			? "cross-built"
+			: statSync(embedded, { throwIfNoEntry: false })?.size === statSync(process.execPath).size &&
+				  readFileSync(embedded).equals(readFileSync(process.execPath))
+				? true
+				: "the build's node is not the official v" + target.nodeVersion + " binary";
+}
+console.log(JSON.stringify(useCodeCache));
 `;
 }
 /**
@@ -3887,6 +2746,9 @@ for (const { name, target } of ${JSON.stringify(targets)}) {
 * download, or a checksum mismatch therefore fails here, before `.crust/` is
 * replaced; cached targets need nothing.
 *
+* @returns Per target, `true` when {@link execNodeBinaryBuild} may embed a V8 code
+*   cache (the selected Node is byte-identical to the binary the target embeds and
+*   `NODE_OPTIONS` is unset), or the reason it may not
 * @throws {Error} If a target cannot be provisioned
 */
 async function provisionNodeExeTargets(targets, cwd, compiler) {
@@ -3899,6 +2761,16 @@ async function provisionNodeExeTargets(targets, cwd, compiler) {
 		throw new Error(`Could not provision the Node ${compiler.version} binary that node standalone binaries embed${output ? `:\n${output}` : "."}\n  tsdown downloads each target's official Node archive once and unpacks it with tar (GNU tar also needs xz for linux targets), or unzip for win targets on non-Windows hosts.
   Install the missing tool, or build only targets this machine can provision (--target).`);
 	}
+	const decided = JSON.parse(provision.stdout.trim().split("\n").at(-1) || "{}");
+	return isJsonObject(decided) ? decided : {};
+}
+/** The build log's `Code cache:` value: `on`, `off (reason)`, or per-target groups when they differ. */
+function formatCodeCache(decisions) {
+	const groups = /* @__PURE__ */ new Map();
+	for (const [target, decision] of Object.entries(decisions)) groups.set(decision, [...groups.get(decision) ?? [], target]);
+	const entries = [...groups];
+	if (entries.length === 1) return entries[0][0] === true ? "on" : `off (${entries[0][0]})`;
+	return entries.map(([decision, targets]) => decision === true ? `on for ${targets.join(", ")}` : `off for ${targets.join(", ")} (${decision})`).join("; ");
 }
 /** Runs a generated `<name>.mjs` with `runner` from a temporary directory that is removed afterwards. */
 async function runGeneratedScript(runner, name, source, cwd) {
@@ -3918,9 +2790,7 @@ async function runGeneratedScript(runner, name, source, cwd) {
 		});
 	}
 }
-//#endregion
-//#region ../core/dist/index.js
-/** Mint an Extension identity from any non-blank, trimmed string. */
+// ../core/dist/index.js
 function defineExtensionId(id) {
 	if (!id || id !== id.trim()) throw new CrustError("DEFINITION", "Extension id must be a non-empty, trimmed string", {
 		subject: "extension",
@@ -3928,15 +2798,8 @@ function defineExtensionId(id) {
 	});
 	return id;
 }
-//#endregion
-//#region src/snapshot.ts
+// src/snapshot.ts
 const SNAPSHOT_TIMEOUT_MS = 3e4;
-const SNAPSHOT_FORWARDED_SIGNALS = [
-	"SIGINT",
-	"SIGTERM",
-	"SIGHUP",
-	"SIGQUIT"
-];
 function isBuildReport(value) {
 	return isJsonObject(value) && Array.isArray(value.extensions) && value.extensions.every((extension) => isJsonObject(extension) && typeof extension.id === "string" && Array.isArray(extension.files) && extension.files.every((file) => typeof file === "string"));
 }
@@ -3997,27 +2860,18 @@ async function buildEntrypoint(entryPath, outDir, envFiles, io, cwd, runner = re
 			};
 		});
 		const timer = setTimeout(() => stop(`Command Snapshot preparation timed out after ${timeoutMs / 1e3}s.\n  An Extension build hook may be hanging. Use --no-validate to skip entry preparation and build hooks.`), timeoutMs);
-		const onSignal = (signal) => {
-			removeLifetimeListeners();
-			stop(`Command Snapshot preparation was interrupted by ${signal}.`);
-			if (process.listenerCount(signal) === 0) process.kill(process.pid, signal);
-		};
 		const killRemainingGroup = () => {
 			try {
 				killProcessTree(proc);
 			} catch {}
 		};
-		const removeLifetimeListeners = () => {
-			for (const signal of SNAPSHOT_FORWARDED_SIGNALS) process.removeListener(signal, onSignal);
-			process.removeListener("exit", killRemainingGroup);
-		};
-		if (detached) {
-			for (const signal of SNAPSHOT_FORWARDED_SIGNALS) process.prependListener(signal, onSignal);
-			process.on("exit", killRemainingGroup);
-		}
+		const release = detached ? bindToProcessLifetime({
+			onSignal: (signal) => stop(`Command Snapshot preparation was interrupted by ${signal}.`),
+			onExit: killRemainingGroup
+		}) : () => {};
 		const [rawStderr, [exitCode]] = await Promise.race([Promise.all([text(proc.stderr), once(proc, "close")]), stopped]).finally(() => {
 			clearTimeout(timer);
-			removeLifetimeListeners();
+			release();
 			if (detached) killRemainingGroup();
 		});
 		const stderr = rawStderr.trim();
@@ -4075,8 +2929,7 @@ async function buildEntrypoint(entryPath, outDir, envFiles, io, cwd, runner = re
 		});
 	}
 }
-//#endregion
-//#region src/build.ts
+// src/build.ts
 function readUserPackageJson(cwd) {
 	const packageJsonPath = join(cwd, "package.json");
 	if (!existsSync(packageJsonPath)) throw new Error(`package.json not found in ${cwd}\n  crust build requires a package.json with name and version fields.`);
@@ -4165,7 +3018,6 @@ const NON_DEPENDENCY_SECTIONS = [
 function validateExternal(external, pkg, runtime, artifact) {
 	if (external.length === 0) return;
 	if (artifact === "binary") throw new Error("package.json crust.external is not supported for standalone binaries (artifact binary).\n  A binary bundles every dependency; remove crust.external or use artifact package.");
-	if (runtime === "deno") throw new Error("package.json crust.external is not supported with the deno runtime.\n  crust.external applies to Node and Bun runtime packages; remove crust.external or set crust.runtime to node or bun.");
 	const dependencies = pkg.dependencies !== void 0 && isJsonObject(pkg.dependencies) ? pkg.dependencies : {};
 	const rejectCrustPackage = (quoted, detail) => {
 		throw new Error(`package.json crust.external cannot name ${quoted}${detail}.\n  Crust packages must stay bundled: core detects a packaged build through a define the bundler injects, and an external Crust package would load a second copy of core.`);
@@ -4186,23 +3038,17 @@ function validateExternal(external, pkg, runtime, artifact) {
 		if (aliased !== void 0) rejectCrustPackage(quoted, ` (an alias of ${aliased})`);
 	}
 }
-const DENO_CONFIG_FILES = ["deno.json", "deno.jsonc"];
 /**
 * package.json `crust.runtime` > inference > Bun. Inference uses only
-* unambiguous signals: a Deno config file, or `@types/node` without
-* `@types/bun`. Lockfiles say which package manager installed dependencies,
-* not which runtime runs the CLI, so they are not consulted.
+* unambiguous signals: `@types/node` without `@types/bun`. Lockfiles say which
+* package manager installed dependencies, not which runtime runs the CLI, so
+* they are not consulted.
 */
-function resolveBuildRuntime(pkg, config, cwd) {
+function resolveBuildRuntime(pkg, config) {
 	if (config.runtime !== void 0) return {
 		runtime: config.runtime,
 		source: "from package.json"
 	};
-	const denoConfig = DENO_CONFIG_FILES.find((file) => existsSync(join(cwd, file)));
-	if (denoConfig) return {
-		runtime: "deno",
-		source: `inferred from ${denoConfig}`
-	};
 	if (hasDependency(pkg, "@types/node") && !hasDependency(pkg, "@types/bun")) return {
 		runtime: "node",
 		source: "inferred from @types/node"
@@ -4285,30 +3131,18 @@ function resolveBinEntries(cwd, pkg) {
 		};
 	});
 }
-/** What earlier releases built for each runtime without being asked; quoted in the migration error. */
-const IMPLICIT_ARTIFACTS = {
-	bun: "binary",
-	deno: "binary",
-	node: "package"
-};
 /** `option` (the `artifact` build option or `--artifact`) > package.json `crust.artifact`; no default. */
-function resolveArtifact(option, config, runtime) {
+function resolveArtifact(option, config) {
 	if (option !== void 0 && !isArtifactKind(option)) throw new Error(`Invalid artifact ${JSON.stringify(option)}. Valid artifacts: ${ARTIFACT_KINDS.join(", ")}`);
 	const artifact = option ?? config.artifact;
-	if (artifact === void 0) {
-		const previous = IMPLICIT_ARTIFACTS[runtime];
-		throw new Error(`crust build needs an artifact kind: pass --artifact package|binary or set package.json "crust": { "artifact": "package" | "binary" }.
-  package: one JavaScript bundle per command that runs on the consumer's installed runtime.
-  binary: standalone executables in per-platform npm packages behind a Node launcher.
-  Earlier versions built a ${previous} for the ${runtime} runtime implicitly; set "artifact": "${previous}" to keep that output.`);
-	}
+	if (artifact === void 0) throw new Error("crust build needs an artifact kind: pass --artifact package|binary or set package.json \"crust\": { \"artifact\": \"package\" | \"binary\" }.\n  package: one JavaScript bundle per command that runs on the consumer's installed runtime.\n  binary: standalone executables in per-platform npm packages behind a Node launcher.");
 	return artifact;
 }
 function planBuild(options, cwd) {
 	const userPackageJson = readUserPackageJson(cwd);
 	const config = readCrustConfig(userPackageJson);
-	const { runtime, source: runtimeSource } = resolveBuildRuntime(userPackageJson, config, cwd);
-	const artifact = resolveArtifact(options.artifact, config, runtime);
+	const { runtime, source: runtimeSource } = resolveBuildRuntime(userPackageJson, config);
+	const artifact = resolveArtifact(options.artifact, config);
 	const entries = resolveBinEntries(cwd, userPackageJson);
 	validatePackageIdentity(userPackageJson, "package.json");
 	const envFiles = resolveEnvFilePaths(cwd, options.envFiles);
@@ -4316,10 +3150,8 @@ function planBuild(options, cwd) {
 	const external = config.external ?? [];
 	if (artifact === "package" && options.targets?.length) throw new Error("--target cannot be used with runtime packages (artifact package).\n  A runtime package is one portable JavaScript bundle; drop --target or use artifact binary.");
 	if (artifact === "package" && config.targets !== void 0) throw new Error("package.json crust.targets is not supported for runtime packages (artifact package).\n  A runtime package is one portable JavaScript bundle; remove crust.targets or set \"artifact\": \"binary\".");
-	const denoTool = artifact === "binary" ? "deno compile" : "deno bundle";
-	if (runtime === "deno" && options.minify) throw new Error(artifact === "binary" ? "--minify is not supported with the deno runtime.\n  deno compile has no minification step; drop the flag." : "--minify is not supported with the deno runtime.\n  crust does not minify Deno runtime packages; drop the flag.");
-	if (runtime === "deno" && envFiles.length > 0) throw new Error(artifact === "binary" ? "--env-file is not supported with the deno runtime.\n  deno compile embeds every variable from the file into the binary — secrets included —\n  with no PUBLIC_* filter. Load configuration at runtime instead (e.g. deno run --env-file)." : "--env-file is not supported with the deno runtime.\n  deno bundle has no PUBLIC_* build-time constants. Load configuration at runtime instead (e.g. deno run --env-file).");
-	if (runtime === "deno" && bunPlugins.length > 0) throw new Error(`package.json crust.bunPlugins is not supported with the deno runtime.\n  ${denoTool} has no Bun bundler; remove crust.bunPlugins or set crust.runtime to bun.`);
+	const bunBinary = runtime === "bun" && artifact === "binary";
+	if (options.bytecode && !bunBinary) throw new Error(artifact === "package" ? "--bytecode is not supported for runtime packages (artifact package).\n  Bun bytecode only runs on the exact Bun version that built it, so it is embedded in bun binaries only; drop the flag." : `--bytecode is not supported with the ${runtime} runtime.\n  Bytecode is Bun's JavaScriptCore format; Node binaries cannot use it. Drop the flag.`);
 	if (runtime === "node" && artifact === "binary" && bunPlugins.length > 0) throw new Error("package.json crust.bunPlugins is not supported for node standalone binaries.\n  Remove crust.bunPlugins, or use artifact package or the bun runtime.");
 	validateExternal(external, userPackageJson, runtime, artifact);
 	const stageDir = resolve(cwd, CRUST_DIR);
@@ -4335,7 +3167,8 @@ function planBuild(options, cwd) {
 		outDir: join(stageDir, "artifacts"),
 		stageDir,
 		validate: options.validate ?? true,
-		minify: runtime === "deno" ? false : options.minify ?? true
+		minify: options.minify ?? true,
+		bytecode: bunBinary && (options.bytecode ?? true)
 	};
 	if (artifact === "package") return {
 		...common,
@@ -4349,17 +3182,11 @@ function planBuild(options, cwd) {
 		artifact,
 		targets: resolveTargets(BUN_TARGETS, targetInputs)
 	};
-	if (runtime === "node") return {
-		...common,
-		runtime,
-		artifact,
-		targets: resolveTargets(NODE_TARGETS, targetInputs)
-	};
 	return {
 		...common,
 		runtime,
 		artifact,
-		targets: resolveTargets(DENO_TARGETS, targetInputs)
+		targets: resolveTargets(NODE_TARGETS, targetInputs)
 	};
 }
 /**
@@ -4368,20 +3195,10 @@ function planBuild(options, cwd) {
 * the selected compiler's own version (`resolveBinaryCompiler`, or
 * `resolveNodeBinaryCompiler` with tsdown's requirements for node, whose
 * targets' embedded Node binaries are also provisioned here); runtime
-* packages are bundled by Bun (or, for Deno, by `deno bundle`) and embed no
-* runtime, so engines stay a consumer requirement there and are not checked
-* against the bundler.
+* packages are bundled by Bun and embed no runtime, so engines stay a consumer
+* requirement there and are not checked against the bundler.
 */
 async function selectCompilers(plan, io) {
-	if (plan.artifact === "package" && plan.runtime === "deno") {
-		const bundler = await resolveDenoPackageBundler(plan.cwd);
-		io.stdout(`${dim("Compiler:")} deno ${bundler.version} ${dim(`(${bundler.runner.command}, deno bundle)`)}`);
-		io.stderr("Deno runtime packages are experimental: they are bundled with deno bundle, which Deno marks experimental.");
-		return {
-			snapshotRunner: plan.validate ? resolveBunBuildRunner() : void 0,
-			stage: (reports) => runDistributeBuild(plan, { execute: (entry, outfile) => execDenoPackageBuild(entry, outfile, plan.cwd, bundler.runner) }, io, reports)
-		};
-	}
 	if (plan.artifact === "package") {
 		const runner = resolveBunBuildRunner();
 		const target = plan.runtime === "bun" ? "bun" : "node";
@@ -4394,42 +3211,31 @@ async function selectCompilers(plan, io) {
 	if (plan.runtime === "node") {
 		const compiler = await resolveNodeBinaryCompiler(plan.userPackageJson, plan.cwd);
 		printCompiler(compiler);
-		await provisionNodeExeTargets(plan.targets, plan.cwd, compiler);
+		const useCodeCache = await provisionNodeExeTargets(plan.targets, plan.cwd, compiler);
+		io.stdout(`${dim("Code cache:")} ${formatCodeCache(useCodeCache)}`);
 		const bunRunner = resolveBunBuildRunner();
 		const distribution = {
 			table: NODE_TARGETS,
 			targets: plan.targets,
 			embeddedRuntimeVersion: compiler.version,
-			execute: (entry, outfile, target) => execNodeBinaryBuild(entry, outfile, target, plan, compiler, bunRunner, io.stderr)
+			execute: (entry, outfile, target) => execNodeBinaryBuild(entry, outfile, target, plan, compiler, bunRunner, io.stderr, useCodeCache[target] === true)
 		};
 		return {
 			snapshotRunner: bunRunner,
 			stage: (reports) => runDistributeBuild(plan, distribution, io, reports)
 		};
 	}
-	const compiler = await resolveBinaryCompiler(plan.runtime, plan.userPackageJson, plan.cwd);
+	const compiler = await resolveBinaryCompiler(plan.userPackageJson, plan.cwd);
 	printCompiler(compiler);
-	if (plan.runtime === "bun") {
-		assertTargetsBuildableWithoutBun(plan.targets, compiler.runner);
-		const distribution = {
-			table: BUN_TARGETS,
-			targets: plan.targets,
-			embeddedRuntimeVersion: compiler.version,
-			execute: (entry, outfile, target) => execBuild(entry, outfile, target, plan, compiler.runner)
-		};
-		return {
-			snapshotRunner: compiler.runner,
-			stage: (reports) => runDistributeBuild(plan, distribution, io, reports)
-		};
-	}
+	assertTargetsBuildableWithoutBun(plan.targets, compiler.runner);
 	const distribution = {
-		table: DENO_TARGETS,
+		table: BUN_TARGETS,
 		targets: plan.targets,
 		embeddedRuntimeVersion: compiler.version,
-		execute: (entry, outfile, target) => execDenoBuild(entry, outfile, target, plan.cwd, compiler.runner)
+		execute: (entry, outfile, target) => execBuild(entry, outfile, target, plan, compiler.runner)
 	};
 	return {
-		snapshotRunner: plan.validate ? resolveBunBuildRunner() : void 0,
+		snapshotRunner: compiler.runner,
 		stage: (reports) => runDistributeBuild(plan, distribution, io, reports)
 	};
 }
@@ -4469,10 +3275,8 @@ async function prepareEntries(plan, io, runner) {
 * come from `bin`; the runtime, artifact, Bun plugins, extra directories, and
 * external dependencies from package.json `crust`. Bundling and Command
 * Snapshots run in bun subprocesses (bun on PATH, or the running Bun
-* executable), so this works under Node as well when Bun is installed; Deno
-* binaries and Deno runtime packages (experimental, deno 2.5.0 or newer) need
-* deno on PATH, and Node binaries a node on PATH that Crust's tsdown can build
-* executables with.
+* executable), so this works under Node as well when Bun is installed; Node
+* binaries need a node on PATH that Crust's tsdown can build executables with.
 *
 * Throws on any failure. Planning and compiler-selection failures (bad
 * options or package.json, a missing or hung compiler, an engines mismatch) leave the
@@ -4500,6 +3304,10 @@ async function build(options = {}) {
 		const plan = planBuild(options, cwd);
 		io.stdout(`${dim("Runtime:")} ${plan.runtime} ${dim(`(${plan.runtimeSource})`)}`);
 		io.stdout(`${dim("Artifact:")} ${plan.artifact}`);
+		for (const { entryPath } of plan.entries) {
+			const named = /^#![^\n]*\b(bun|node)\b/.exec(readFileSync(entryPath, "utf8"))?.[1];
+			if (named !== void 0 && named !== plan.runtime) io.stderr(`${yellow("Warning:")} ${entryPath} starts with a ${named} shebang but crust.runtime is "${plan.runtime}". The build targets ${plan.runtime}; a linked command (npm link) still starts ${named}.`);
+		}
 		const compilers = await selectCompilers(plan, io);
 		rmSync(plan.stageDir, {
 			recursive: true,
@@ -4516,5 +3324,4 @@ async function build(options = {}) {
 		rmdirSync(lockDir);
 	}
 }
-//#endregion
 export { build };