@hyperfrontend/builder 0.1.0 → 0.1.1

package/CHANGELOG.md

@@ -2,6 +2,12 @@
 
 All notable changes to this project will be documented in this file.
 
+## [0.1.1](https://github.com/AndrewRedican/hyperfrontend/compare/5f116abb8ba6355dfb283fa03b7481e5eb029480...7fb26b6a30c007cd0392f1fc973265c3d25e16dd) - 2026-06-28
+
+### Bug Fixes
+
+- self-locate workers beside the running module to make the builder embeddable
+
 ## 0.1.0 - 2026-06-23
 
 ### Features

package/_dependencies/@hyperfrontend/project-scope/core/fs/index.cjs.js

@@ -80,6 +80,10 @@ function createScopedLogger(namespace, options = {}) {
 }
 createScopedLogger('project-scope');
 
+function isSafePath(filePath) {
+    return !filePath.includes('\u0000');
+}
+
 const fsLogger = createScopedLogger('project-scope:fs');
 function createFileSystemError(message, code, context) {
     const error = index_cjs_js$6.createError(message);
@@ -90,7 +94,7 @@ function createFileSystemError(message, code, context) {
     return error;
 }
 function readFileIfExists(filePath, encoding = 'utf-8') {
-    if (!node_fs.existsSync(filePath)) {
+    if (!isSafePath(filePath) || !node_fs.existsSync(filePath)) {
         return null;
     }
     try {
@@ -101,6 +105,9 @@ function readFileIfExists(filePath, encoding = 'utf-8') {
     }
 }
 function readJsonFile(filePath, options) {
+    if (!isSafePath(filePath)) {
+        throw createFileSystemError(`Unsafe file path: ${filePath}`, 'FS_READ_ERROR', { path: filePath, operation: 'read' });
+    }
     if (!node_fs.existsSync(filePath)) {
         if (options && 'default' in options) {
             fsLogger.debug('JSON file not found, using default', { path: filePath });
@@ -127,7 +134,7 @@ function readJsonFile(filePath, options) {
     }
 }
 function readJsonFileIfExists(filePath) {
-    if (!node_fs.existsSync(filePath)) {
+    if (!isSafePath(filePath) || !node_fs.existsSync(filePath)) {
         return null;
     }
     try {
@@ -139,7 +146,7 @@ function readJsonFileIfExists(filePath) {
     }
 }
 function exists(filePath) {
-    return node_fs.existsSync(filePath);
+    return isSafePath(filePath) && node_fs.existsSync(filePath);
 }
 
 const fsDirLogger = createScopedLogger('project-scope:fs:dir');

package/_dependencies/@hyperfrontend/project-scope/core/fs/index.esm.js

@@ -78,6 +78,10 @@ function createScopedLogger(namespace, options = {}) {
 }
 createScopedLogger('project-scope');
 
+function isSafePath(filePath) {
+    return !filePath.includes('\u0000');
+}
+
 const fsLogger = createScopedLogger('project-scope:fs');
 function createFileSystemError(message, code, context) {
     const error = createError(message);
@@ -88,7 +92,7 @@ function createFileSystemError(message, code, context) {
     return error;
 }
 function readFileIfExists(filePath, encoding = 'utf-8') {
-    if (!existsSync(filePath)) {
+    if (!isSafePath(filePath) || !existsSync(filePath)) {
         return null;
     }
     try {
@@ -99,6 +103,9 @@ function readFileIfExists(filePath, encoding = 'utf-8') {
     }
 }
 function readJsonFile(filePath, options) {
+    if (!isSafePath(filePath)) {
+        throw createFileSystemError(`Unsafe file path: ${filePath}`, 'FS_READ_ERROR', { path: filePath, operation: 'read' });
+    }
     if (!existsSync(filePath)) {
         if (options && 'default' in options) {
             fsLogger.debug('JSON file not found, using default', { path: filePath });
@@ -125,7 +132,7 @@ function readJsonFile(filePath, options) {
     }
 }
 function readJsonFileIfExists(filePath) {
-    if (!existsSync(filePath)) {
+    if (!isSafePath(filePath) || !existsSync(filePath)) {
         return null;
     }
     try {
@@ -137,7 +144,7 @@ function readJsonFileIfExists(filePath) {
     }
 }
 function exists(filePath) {
-    return existsSync(filePath);
+    return isSafePath(filePath) && existsSync(filePath);
 }
 
 const fsDirLogger = createScopedLogger('project-scope:fs:dir');

package/_dependencies/@hyperfrontend/project-scope/core/index.cjs.js

@@ -87,6 +87,10 @@ const encodingLogger = createScopedLogger('project-scope:encoding');
 
 const convertLogger = createScopedLogger('project-scope:encoding:convert');
 
+function isSafePath(filePath) {
+    return !filePath.includes('\u0000');
+}
+
 const fsLogger = createScopedLogger('project-scope:fs');
 function createFileSystemError(message, code, context) {
     const error = index_cjs_js$8.createError(message);
@@ -97,6 +101,9 @@ function createFileSystemError(message, code, context) {
     return error;
 }
 function readFileContent(filePath, encoding = 'utf-8') {
+    if (!isSafePath(filePath)) {
+        throw createFileSystemError(`Unsafe file path: ${filePath}`, 'FS_READ_ERROR', { path: filePath, operation: 'read' });
+    }
     if (!node_fs.existsSync(filePath)) {
         fsLogger.debug('File not found', { path: filePath });
         throw createFileSystemError(`File not found: ${filePath}`, 'FS_NOT_FOUND', { path: filePath, operation: 'read' });
@@ -110,6 +117,9 @@ function readFileContent(filePath, encoding = 'utf-8') {
     }
 }
 function readJsonFile(filePath, options) {
+    if (!isSafePath(filePath)) {
+        throw createFileSystemError(`Unsafe file path: ${filePath}`, 'FS_READ_ERROR', { path: filePath, operation: 'read' });
+    }
     if (!node_fs.existsSync(filePath)) {
         if (options && 'default' in options) {
             fsLogger.debug('JSON file not found, using default', { path: filePath });
@@ -137,7 +147,7 @@ function readJsonFile(filePath, options) {
 }
 
 function getFileStat(filePath, followSymlinks = true) {
-    if (!node_fs.existsSync(filePath)) {
+    if (!isSafePath(filePath) || !node_fs.existsSync(filePath)) {
         return null;
     }
     try {
@@ -166,7 +176,7 @@ function isDirectory(dirPath) {
     return stats?.isDirectory ?? false;
 }
 function exists(filePath) {
-    return node_fs.existsSync(filePath);
+    return isSafePath(filePath) && node_fs.existsSync(filePath);
 }
 
 const fsDirLogger = createScopedLogger('project-scope:fs:dir');
@@ -246,16 +256,16 @@ function removeDirectory(dirPath, options) {
     });
 }
 
-function join(...paths) {
-    return node_path.join(...paths);
-}
-
 function normalizePath(filePath) {
     if (!filePath)
         return '';
     const normalized = node_path.normalize(filePath);
     return node_path.sep === '\\' ? normalized.replace(/\\/g, '/') : normalized;
 }
+
+function join(...paths) {
+    return node_path.join(...paths);
+}
 function relativePath(from, to) {
     return normalizePath(node_path.relative(from, to));
 }

package/_dependencies/@hyperfrontend/project-scope/core/index.esm.js

@@ -87,6 +87,10 @@ const encodingLogger = createScopedLogger('project-scope:encoding');
 
 const convertLogger = createScopedLogger('project-scope:encoding:convert');
 
+function isSafePath(filePath) {
+    return !filePath.includes('\u0000');
+}
+
 const fsLogger = createScopedLogger('project-scope:fs');
 function createFileSystemError(message, code, context) {
     const error = createError(message);
@@ -97,6 +101,9 @@ function createFileSystemError(message, code, context) {
     return error;
 }
 function readFileContent(filePath, encoding = 'utf-8') {
+    if (!isSafePath(filePath)) {
+        throw createFileSystemError(`Unsafe file path: ${filePath}`, 'FS_READ_ERROR', { path: filePath, operation: 'read' });
+    }
     if (!existsSync(filePath)) {
         fsLogger.debug('File not found', { path: filePath });
         throw createFileSystemError(`File not found: ${filePath}`, 'FS_NOT_FOUND', { path: filePath, operation: 'read' });
@@ -110,6 +117,9 @@ function readFileContent(filePath, encoding = 'utf-8') {
     }
 }
 function readJsonFile(filePath, options) {
+    if (!isSafePath(filePath)) {
+        throw createFileSystemError(`Unsafe file path: ${filePath}`, 'FS_READ_ERROR', { path: filePath, operation: 'read' });
+    }
     if (!existsSync(filePath)) {
         if (options && 'default' in options) {
             fsLogger.debug('JSON file not found, using default', { path: filePath });
@@ -137,7 +147,7 @@ function readJsonFile(filePath, options) {
 }
 
 function getFileStat(filePath, followSymlinks = true) {
-    if (!existsSync(filePath)) {
+    if (!isSafePath(filePath) || !existsSync(filePath)) {
         return null;
     }
     try {
@@ -166,7 +176,7 @@ function isDirectory(dirPath) {
     return stats?.isDirectory ?? false;
 }
 function exists(filePath) {
-    return existsSync(filePath);
+    return isSafePath(filePath) && existsSync(filePath);
 }
 
 const fsDirLogger = createScopedLogger('project-scope:fs:dir');
@@ -246,16 +256,16 @@ function removeDirectory(dirPath, options) {
     });
 }
 
-function join(...paths) {
-    return join$1(...paths);
-}
-
 function normalizePath(filePath) {
     if (!filePath)
         return '';
     const normalized = normalize(filePath);
     return sep === '\\' ? normalized.replace(/\\/g, '/') : normalized;
 }
+
+function join(...paths) {
+    return join$1(...paths);
+}
 function relativePath(from, to) {
     return normalizePath(relative(from, to));
 }

package/_dependencies/@hyperfrontend/project-scope/core/path/index.cjs.js

@@ -1,11 +1,6 @@
 'use strict';
-
 const node_path = require('node:path');
 
-function join(...paths) {
-    return node_path.join(...paths);
-}
-
 function normalizePath(filePath) {
     if (!filePath)
         return '';
@@ -17,6 +12,10 @@ function normalizeToForwardSlashes(filePath) {
         return '';
     return node_path.normalize(filePath).split(node_path.sep).join('/');
 }
+
+function join(...paths) {
+    return node_path.join(...paths);
+}
 function getDirname(filePath) {
     return normalizePath(node_path.dirname(filePath));
 }

package/_dependencies/@hyperfrontend/project-scope/core/path/index.esm.js

@@ -1,8 +1,5 @@
-import { join as join$1, normalize, sep, dirname } from 'node:path';
 
-function join(...paths) {
-    return join$1(...paths);
-}
+import { normalize, sep, join as join$1, dirname } from 'node:path';
 
 function normalizePath(filePath) {
     if (!filePath)
@@ -15,6 +12,10 @@ function normalizeToForwardSlashes(filePath) {
         return '';
     return normalize(filePath).split(sep).join('/');
 }
+
+function join(...paths) {
+    return join$1(...paths);
+}
 function getDirname(filePath) {
     return normalizePath(dirname(filePath));
 }

package/_dependencies/@hyperfrontend/project-scope/project/root/index.cjs.js

@@ -80,10 +80,14 @@ function createScopedLogger(namespace, options = {}) {
 }
 createScopedLogger('project-scope');
 
+function isSafePath(filePath) {
+    return !filePath.includes('\u0000');
+}
+
 createScopedLogger('project-scope:fs');
 
 function exists(filePath) {
-    return node_fs.existsSync(filePath);
+    return isSafePath(filePath) && node_fs.existsSync(filePath);
 }
 
 createScopedLogger('project-scope:fs:dir');

package/_dependencies/@hyperfrontend/project-scope/project/root/index.esm.js

@@ -78,10 +78,14 @@ function createScopedLogger(namespace, options = {}) {
 }
 createScopedLogger('project-scope');
 
+function isSafePath(filePath) {
+    return !filePath.includes('\u0000');
+}
+
 createScopedLogger('project-scope:fs');
 
 function exists(filePath) {
-    return existsSync(filePath);
+    return isSafePath(filePath) && existsSync(filePath);
 }
 
 createScopedLogger('project-scope:fs:dir');

package/bin/hf-build.js

@@ -112,8 +112,8 @@ const removeCodesign = (inputs) => {
 
 const log$g = index_cjs_js$3.logger.channel('builder:bin:native:dispatch');
 const REPORT_DIR_PREFIX$2 = 'hf-builder-inject-';
-const SWC_NODE_REGISTER$2 = '@swc-node/register';
-const swcNodeAvailable$2 = (workspaceRoot) => node_fs.existsSync(index_cjs_js$4.join(workspaceRoot, 'node_modules', '@swc-node', 'register', 'index.js'));
+const SWC_NODE_REGISTER$1 = '@swc-node/register';
+const swcNodeAvailable = (workspaceRoot) => node_fs.existsSync(index_cjs_js$4.join(workspaceRoot, 'node_modules', '@swc-node', 'register', 'index.js'));
 /**
  * Default worker-path resolution: prefers the built-and-published artifact, falls
  * back to the workspace dist path, and finally to the in-source TypeScript file
@@ -144,8 +144,8 @@ const resolveDefaultInjectWorkerPath = (workspaceRoot) => {
             return { path, execArgv: [] };
     }
     const sourcePath = index_cjs_js$4.join(workspaceRoot, 'libs', 'builder', 'src', 'bin', 'native', 'worker', 'index.ts');
-    if (node_fs.existsSync(sourcePath) && swcNodeAvailable$2(workspaceRoot)) {
-        return { path: sourcePath, execArgv: ['--require', SWC_NODE_REGISTER$2] };
+    if (node_fs.existsSync(sourcePath) && swcNodeAvailable(workspaceRoot)) {
+        return { path: sourcePath, execArgv: ['--require', SWC_NODE_REGISTER$1] };
     }
     return undefined;
 };
@@ -932,45 +932,91 @@ const toUmdBuildDescriptor = (entry, config, context, reportPath) => {
     };
 };
 
-const log$e = index_cjs_js$3.logger.channel('builder:bundle:rollup:dispatch');
-const REPORT_DIR_PREFIX$1 = 'hf-builder-rollup-';
-const SWC_NODE_REGISTER$1 = '@swc-node/register';
-const swcNodeAvailable$1 = (workspaceRoot) => node_fs.existsSync(index_cjs_js$4.join(workspaceRoot, 'node_modules', '@swc-node', 'register', 'index.js'));
+const SWC_NODE_REGISTER = '@swc-node/register';
+const probeDir = (dir, offset) => {
+    const compiled = node_path.join(dir, ...offset, 'index.cjs.js');
+    if (node_fs.existsSync(compiled))
+        return { path: compiled, execArgv: [] };
+    const source = node_path.join(dir, ...offset, 'index.ts');
+    if (node_fs.existsSync(source))
+        return { path: source, execArgv: ['--require', SWC_NODE_REGISTER] };
+    return undefined;
+};
 /**
- * Default worker-path resolution: prefers the built-and-published artifact, falls
- * back to the workspace dist path, and finally to the in-source TypeScript file
- * via `@swc-node/register` (bootstrap case where builder is building itself for
- * the first time and the dist worker doesn't exist yet).
- *
- * Looks at, in order:
- * 1. `<workspaceRoot>/dist/libs/builder/bundle/rollup/worker/index.cjs.js`
- * 2. `<workspaceRoot>/node_modules/@hyperfrontend/builder/bundle/rollup/worker/index.cjs.js`
- * 3. `<workspaceRoot>/libs/builder/src/bundle/rollup/worker/index.ts` (with `--require \@swc-node/register`)
+ * Directory of the currently-executing builder module, read from `__dirname`.
+ * It is present in the shipped CommonJS build, in the `@swc-node/register` source
+ * bootstrap, and under the test runner, so callers get their own on-disk location
+ * and can find the worker beside them however the builder was packaged.
  *
- * @param workspaceRoot - Absolute workspace root.
- * @returns Worker invocation descriptor, or `undefined` if no candidate exists.
+ * @returns Absolute directory path of the running module.
  *
- * @example Locating the worker for an in-workspace consumer
+ * @example Anchoring a lookup beside the running builder
  * ```typescript
- * const invocation = resolveDefaultRollupWorkerPath('/abs/repo')
- * if (!invocation) throw new Error('builder rollup worker artifact not found')
+ * const invocation = ascendForWorker(['bundle', 'rollup', 'worker'], currentModuleDir())
  * ```
  */
-const resolveDefaultRollupWorkerPath = (workspaceRoot) => {
-    const distCandidates = [
-        index_cjs_js$4.join(workspaceRoot, 'dist', 'libs', 'builder', 'bundle', 'rollup', 'worker', 'index.cjs.js'),
-        index_cjs_js$4.join(workspaceRoot, 'node_modules', '@hyperfrontend', 'builder', 'bundle', 'rollup', 'worker', 'index.cjs.js'),
-    ];
-    for (const path of distCandidates) {
-        if (node_fs.existsSync(path))
-            return { path, execArgv: [] };
+const currentModuleDir = () => {
+    /* istanbul ignore if -- @preserve the ESM build has no __dirname; the shipped CommonJS build and the test runner always define it, so this guard is unreachable under test */
+    if (typeof __dirname === 'undefined') {
+        throw index_cjs_js$6.createError('@hyperfrontend/builder self-location requires the CommonJS build; drive build() from the CommonJS entry point');
     }
-    const sourcePath = index_cjs_js$4.join(workspaceRoot, 'libs', 'builder', 'src', 'bundle', 'rollup', 'worker', 'index.ts');
-    if (node_fs.existsSync(sourcePath) && swcNodeAvailable$1(workspaceRoot)) {
-        return { path: sourcePath, execArgv: ['--require', SWC_NODE_REGISTER$1] };
+    return __dirname;
+};
+/**
+ * Locate a builder worker entry by ascending from a start directory toward the
+ * filesystem root, returning the first ancestor at which the worker exists at the
+ * given in-package offset. The compiled `index.cjs.js` is preferred; an `index.ts`
+ * sibling (source-mode bootstrap) resolves with the swc loader attached.
+ *
+ * The worker ships inside the builder's own package, so resolving relative to the
+ * running module finds it wherever the package lives — built dist, an installed
+ * `node_modules` copy, or melded into a host bundle under `_dependencies/`.
+ *
+ * @param offset - In-package path segments to the worker directory (e.g. `['bundle', 'rollup', 'worker']`).
+ * @param startDir - Directory to begin the ascent from. Defaults to the running module's directory; pass an explicit value to resolve from another anchor or under test.
+ * @returns The resolved worker invocation, or `undefined` if no worker exists at the offset under any ancestor.
+ *
+ * @example Resolving the rollup worker from the running module
+ * ```typescript
+ * const invocation = ascendForWorker(['bundle', 'rollup', 'worker'])
+ * if (!invocation) throw new Error('builder rollup worker not found beside the builder module')
+ * ```
+ */
+const ascendForWorker = (offset, startDir = currentModuleDir()) => {
+    let dir = startDir;
+    let parent = node_path.dirname(dir);
+    // how: probe each level then step up; the final probe covers the filesystem root, where parent === dir
+    while (parent !== dir) {
+        const found = probeDir(dir, offset);
+        if (found)
+            return found;
+        dir = parent;
+        parent = node_path.dirname(dir);
     }
-    return undefined;
+    return probeDir(dir, offset);
 };
+
+const log$e = index_cjs_js$3.logger.channel('builder:bundle:rollup:dispatch');
+const REPORT_DIR_PREFIX$1 = 'hf-builder-rollup-';
+/**
+ * Resolves the rollup worker by self-locating it beside the running builder
+ * module: ascends from the module's own directory to the builder package root
+ * and returns the worker at `bundle/rollup/worker`. This works whether the
+ * builder runs from its built dist, an installed `node_modules` copy, or melded
+ * into a host bundle under `_dependencies/`. The compiled `index.cjs.js` is
+ * preferred; an `index.ts` sibling resolves with the `@swc-node/register` loader
+ * for source-mode bootstrap.
+ *
+ * @param startDir - Directory to begin the ascent from. Defaults to the running module's directory; pass an explicit value to resolve from another anchor or under test.
+ * @returns Worker invocation descriptor, or `undefined` if no worker is found under any ancestor.
+ *
+ * @example Locating the worker beside the builder
+ * ```typescript
+ * const invocation = resolveDefaultRollupWorkerPath()
+ * if (!invocation) throw new Error('builder rollup worker artifact not found')
+ * ```
+ */
+const resolveDefaultRollupWorkerPath = (startDir) => ascendForWorker(['bundle', 'rollup', 'worker'], startDir);
 const createReportDir$1 = () => node_fs.mkdtempSync(index_cjs_js$4.join(node_os.tmpdir(), REPORT_DIR_PREFIX$1));
 const reportPathFor$1 = (reportDir, descriptor) => {
     const safeLabel = descriptor.inputFile.replace(/[^a-zA-Z0-9_-]+/g, '_');
@@ -1050,10 +1096,10 @@ const dispatchRollupWorker = async (descriptor, options) => {
 };
 
 const log$d = index_cjs_js$3.logger.channel('builder:bin:script');
-const resolveWorkerOrThrow = (workspaceRoot) => {
-    const invocation = resolveDefaultRollupWorkerPath(workspaceRoot);
+const resolveWorkerOrThrow = () => {
+    const invocation = resolveDefaultRollupWorkerPath();
     if (!invocation) {
-        throw index_cjs_js$6.createError('rollup worker could not be resolved for bin script bundling. Build @hyperfrontend/builder at least once before invoking the bin phase, or ensure @swc-node/register is installed for source-mode bootstrap.');
+        throw index_cjs_js$6.createError('rollup worker could not be located beside the builder module for bin script bundling. The @hyperfrontend/builder package appears incomplete, or @swc-node/register is missing for source-mode bootstrap.');
     }
     return invocation;
 };
@@ -1094,7 +1140,7 @@ const buildJsBin = async (bin, ctx) => {
     const formats = normalizeFormats(bin.format);
     const binDir = index_cjs_js$4.join(ctx.outputPath, 'bin');
     index_cjs_js$4.ensureDir(binDir);
-    const worker = resolveWorkerOrThrow(ctx.workspaceRoot);
+    const worker = resolveWorkerOrThrow();
     const outputs = [];
     for (const format of formats) {
         const descriptor = toBinBuildDescriptor(bin, ctx, format, formats, '');
@@ -1634,43 +1680,25 @@ const readReport = (reportPath, job) => {
     const data = index_cjs_js$5.parse(node_fs.readFileSync(reportPath, 'utf8'));
     return { job, outputSize: data.outputSize, endHeapMB: data.endHeapMB, endRssMB: data.endRssMB, durationMs: data.durationMs };
 };
-const SWC_NODE_REGISTER = '@swc-node/register';
-const swcNodeAvailable = (workspaceRoot) => node_fs.existsSync(index_cjs_js$4.join(workspaceRoot, 'node_modules', '@swc-node', 'register', 'index.js'));
 /**
- * Default worker-path resolution: prefers the built-and-published artifact, falls
- * back to the workspace dist path, and finally to the in-source TypeScript file
- * via `@swc-node/register` (bootstrap case where builder is building itself for
- * the first time and the dist worker doesn't exist yet).
- *
- * Looks at, in order:
- * 1. `<workspaceRoot>/dist/libs/builder/bundle/dependencies/worker/index.cjs.js`
- * 2. `<workspaceRoot>/node_modules/@hyperfrontend/builder/bundle/dependencies/worker/index.cjs.js`
- * 3. `<workspaceRoot>/libs/builder/src/bundle/dependencies/worker/index.ts` (with `--require \@swc-node/register`)
+ * Resolves the dependency pre-pass worker by self-locating it beside the running
+ * builder module: ascends from the module's own directory to the builder package
+ * root and returns the worker at `bundle/dependencies/worker`. This works whether
+ * the builder runs from its built dist, an installed `node_modules` copy, or
+ * melded into a host bundle under `_dependencies/`. The compiled `index.cjs.js`
+ * is preferred; an `index.ts` sibling resolves with the `@swc-node/register`
+ * loader for source-mode bootstrap.
  *
- * @param workspaceRoot - Absolute workspace root.
- * @returns Worker invocation descriptor, or `undefined` if no candidate exists.
+ * @param startDir - Directory to begin the ascent from. Defaults to the running module's directory; pass an explicit value to resolve from another anchor or under test.
+ * @returns Worker invocation descriptor, or `undefined` if no worker is found under any ancestor.
  *
- * @example Locating the worker for an in-workspace consumer
+ * @example Locating the worker beside the builder
  * ```typescript
- * const invocation = resolveDefaultWorkerPath('/abs/repo')
+ * const invocation = resolveDefaultWorkerPath()
  * if (!invocation) throw new Error('builder worker artifact not found')
  * ```
  */
-const resolveDefaultWorkerPath = (workspaceRoot) => {
-    const distCandidates = [
-        index_cjs_js$4.join(workspaceRoot, 'dist', 'libs', 'builder', 'bundle', 'dependencies', 'worker', 'index.cjs.js'),
-        index_cjs_js$4.join(workspaceRoot, 'node_modules', '@hyperfrontend', 'builder', 'bundle', 'dependencies', 'worker', 'index.cjs.js'),
-    ];
-    for (const path of distCandidates) {
-        if (node_fs.existsSync(path))
-            return { path, execArgv: [] };
-    }
-    const sourcePath = index_cjs_js$4.join(workspaceRoot, 'libs', 'builder', 'src', 'bundle', 'dependencies', 'worker', 'index.ts');
-    if (node_fs.existsSync(sourcePath) && swcNodeAvailable(workspaceRoot)) {
-        return { path: sourcePath, execArgv: ['--require', SWC_NODE_REGISTER] };
-    }
-    return undefined;
-};
+const resolveDefaultWorkerPath = (startDir) => ascendForWorker(['bundle', 'dependencies', 'worker'], startDir);
 /**
  * Sequentially runs the supplied pre-pass jobs by forking a fresh Node child
  * per invocation. Strict sequential execution is mandatory — concurrent
@@ -1799,9 +1827,9 @@ const buildJobs$1 = (entries, context) => {
 const runDtsPerEntry = async (context, monitor) => {
     if (context.bundledDeps.length === 0 && context.workspaceBundledDeps.length === 0)
         return;
-    const invocation = resolveDefaultWorkerPath(context.workspaceRoot);
+    const invocation = resolveDefaultWorkerPath();
     if (!invocation) {
-        throw index_cjs_js$6.createError('bundleAllDeps is enabled but the pre-pass worker artifact was not found for the per-entry d.ts pass.');
+        throw index_cjs_js$6.createError('bundleAllDeps is enabled but the pre-pass worker could not be located beside the builder module for the per-entry d.ts pass.');
     }
     const jobs = buildJobs$1(context.entryPointDiscovery.entryPoints, context);
     if (jobs.length === 0) {
@@ -1984,9 +2012,9 @@ const buildWorkspaceJobs = (context, npmDeps) => {
 const runDtsPrePass = async (context, monitor) => {
     if (context.bundledDeps.length === 0 && context.workspaceBundledDeps.length === 0)
         return;
-    const invocation = resolveDefaultWorkerPath(context.workspaceRoot);
+    const invocation = resolveDefaultWorkerPath();
     if (!invocation) {
-        throw index_cjs_js$6.createError('bundleAllDeps is enabled but the pre-pass worker artifact was not found for the d.ts pre-pass.');
+        throw index_cjs_js$6.createError('bundleAllDeps is enabled but the pre-pass worker could not be located beside the builder module for the d.ts pre-pass.');
     }
     const npmJobs = buildJobs(context.bundledDeps, context);
     const workspaceJobs = buildWorkspaceJobs(context, context.bundledDeps);
@@ -207186,25 +207214,25 @@ const buildWorkspaceJsPrePassJobs = (npmDeps, formats, context) => {
     }
     return jobs;
 };
-const resolvePrePassWorkerOrThrow = (workspaceRoot) => {
-    const invocation = resolveDefaultWorkerPath(workspaceRoot);
+const resolvePrePassWorkerOrThrow = () => {
+    const invocation = resolveDefaultWorkerPath();
     if (!invocation) {
-        throw index_cjs_js$6.createError('bundleAllDeps is enabled but the pre-pass worker could not be resolved. Build @hyperfrontend/builder once with bundleAllDeps disabled, or ensure @swc-node/register is installed for source-mode bootstrap.');
+        throw index_cjs_js$6.createError('bundleAllDeps is enabled but the pre-pass worker could not be located beside the builder module. The @hyperfrontend/builder package appears incomplete, or @swc-node/register is missing for source-mode bootstrap.');
     }
     return invocation;
 };
-const resolveRollupWorkerOrThrow = (workspaceRoot) => {
-    const invocation = resolveDefaultRollupWorkerPath(workspaceRoot);
+const resolveRollupWorkerOrThrow = () => {
+    const invocation = resolveDefaultRollupWorkerPath();
     if (!invocation) {
-        throw index_cjs_js$6.createError('rollup worker could not be resolved. Build @hyperfrontend/builder at least once before invoking the bundle phase, or ensure @swc-node/register is installed for source-mode bootstrap.');
+        throw index_cjs_js$6.createError('rollup worker could not be located beside the builder module. The @hyperfrontend/builder package appears incomplete, or @swc-node/register is missing for source-mode bootstrap.');
     }
     return invocation;
 };
-const createLazyDispatchResolver = (workspaceRoot) => {
+const createLazyDispatchResolver = () => {
     let cached = null;
     return () => {
         if (!cached) {
-            const invocation = resolveRollupWorkerOrThrow(workspaceRoot);
+            const invocation = resolveRollupWorkerOrThrow();
             cached = { workerPath: invocation.path, execArgv: invocation.execArgv };
         }
         return cached;
@@ -207298,7 +207326,7 @@ const runBundlePhase = async (context, config, monitor) => {
     const outputs = { esm: [], cjs: [], iife: [], umd: [] };
     const requestedPrePassFormats = collectFormatsRequestingPrePass(config);
     if (requestedPrePassFormats.length > 0 && (context.bundledDeps.length > 0 || context.workspaceBundledDeps.length > 0)) {
-        const invocation = resolvePrePassWorkerOrThrow(context.workspaceRoot);
+        const invocation = resolvePrePassWorkerOrThrow();
         const npmJobs = buildJsPrePassJobs(context.bundledDeps, requestedPrePassFormats, context);
         const workspaceJobs = buildWorkspaceJsPrePassJobs(context.bundledDeps, requestedPrePassFormats, context);
         const jobs = [...npmJobs, ...workspaceJobs];
@@ -207307,7 +207335,7 @@ const runBundlePhase = async (context, config, monitor) => {
         await runPrePass(jobs, { workerPath: invocation.path, execArgv: invocation.execArgv, monitor });
         monitor?.check('bundle:dependencies:prepass:end');
     }
-    const resolveDispatch = createLazyDispatchResolver(context.workspaceRoot);
+    const resolveDispatch = createLazyDispatchResolver();
     await runEsmFormats(config, context, outputs, resolveDispatch, monitor);
     await recover();
     monitor?.check('bundle:esm:end:post-recover');