@mandujs/core 0.21.0 → 0.22.0

This diff represents the content of publicly available package versions that have been released to one of the supported registries. The information contained in this diff is provided for informational purposes only and reflects changes between package versions as they appear in their respective public registries.
Files changed (122) hide show
  1. package/package.json +94 -69
  2. package/src/auth/__tests__/login.test.ts +419 -0
  3. package/src/auth/__tests__/password.test.ts +122 -0
  4. package/src/auth/__tests__/reset.test.ts +296 -0
  5. package/src/auth/__tests__/tokens.test.ts +274 -0
  6. package/src/auth/__tests__/verification.test.ts +274 -0
  7. package/src/auth/index.ts +76 -0
  8. package/src/auth/login.ts +225 -0
  9. package/src/auth/password.ts +120 -0
  10. package/src/auth/reset.ts +243 -0
  11. package/src/auth/tokens.ts +612 -0
  12. package/src/auth/verification.ts +253 -0
  13. package/src/bundler/__tests__/cli-bench-utils.test.ts +149 -0
  14. package/src/bundler/__tests__/cold-start.test.ts +504 -0
  15. package/src/bundler/__tests__/csp-nonce.test.ts +278 -0
  16. package/src/bundler/__tests__/dev-reliability.test.ts +619 -0
  17. package/src/bundler/__tests__/extended-watch.test.ts +710 -0
  18. package/src/bundler/__tests__/fast-refresh.test.ts +596 -0
  19. package/src/bundler/__tests__/hdr.test.ts +353 -0
  20. package/src/bundler/__tests__/hmr-client.test.ts +532 -0
  21. package/src/bundler/__tests__/manifest-schema.test.ts +266 -0
  22. package/src/bundler/__tests__/prod-smoke.test.ts +138 -0
  23. package/src/bundler/__tests__/slot-dispatch.test.ts +573 -0
  24. package/src/bundler/__tests__/url-cap-and-slot-regex.test.ts +286 -0
  25. package/src/bundler/__tests__/vendor-cache.test.ts +455 -0
  26. package/src/bundler/build.test.ts +8 -1
  27. package/src/bundler/build.ts +310 -18
  28. package/src/bundler/css.ts +326 -323
  29. package/src/bundler/dev.ts +1611 -59
  30. package/src/bundler/fast-refresh-plugin.ts +307 -0
  31. package/src/bundler/hmr-types.ts +252 -0
  32. package/src/bundler/manifest-schema.ts +301 -0
  33. package/src/bundler/safe-build.test.ts +128 -0
  34. package/src/bundler/safe-build.ts +77 -0
  35. package/src/bundler/scenario-matrix.ts +229 -0
  36. package/src/bundler/types.ts +11 -0
  37. package/src/bundler/vendor-cache-types.ts +130 -0
  38. package/src/bundler/vendor-cache.ts +526 -0
  39. package/src/client/router.ts +214 -56
  40. package/src/db/__tests__/db.test.ts +485 -0
  41. package/src/db/index.ts +513 -0
  42. package/src/db/migrations/__tests__/runner.test.ts +661 -0
  43. package/src/db/migrations/history-table.ts +345 -0
  44. package/src/db/migrations/lock.ts +269 -0
  45. package/src/db/migrations/runner.ts +633 -0
  46. package/src/desktop/__tests__/smoke.test.ts +100 -0
  47. package/src/desktop/__tests__/window.test.ts +172 -0
  48. package/src/desktop/__tests__/worker.test.ts +266 -0
  49. package/src/desktop/index.ts +43 -0
  50. package/src/desktop/types.ts +158 -0
  51. package/src/desktop/window.ts +492 -0
  52. package/src/desktop/worker.ts +180 -0
  53. package/src/email/__tests__/email.test.ts +355 -0
  54. package/src/email/index.ts +282 -0
  55. package/src/email/resend.ts +163 -0
  56. package/src/email/smtp.ts +64 -0
  57. package/src/filling/__tests__/session-sqlite.test.ts +454 -0
  58. package/src/filling/context.ts +72 -78
  59. package/src/filling/cookie-codec.ts +299 -0
  60. package/src/filling/deps.ts +25 -1
  61. package/src/filling/filling.ts +28 -3
  62. package/src/filling/session-sqlite.ts +617 -0
  63. package/src/filling/session.ts +265 -216
  64. package/src/guard/decision-memory.test.ts +52 -22
  65. package/src/id/__tests__/id.test.ts +120 -0
  66. package/src/id/index.ts +105 -0
  67. package/src/kitchen/index.ts +2 -2
  68. package/src/kitchen/kitchen-handler.ts +86 -0
  69. package/src/kitchen/stream/activity-sse.ts +2 -1
  70. package/src/middleware/csrf.ts +328 -0
  71. package/src/middleware/index.ts +40 -0
  72. package/src/middleware/oauth/__tests__/oauth.test.ts +574 -0
  73. package/src/middleware/oauth/index.ts +505 -0
  74. package/src/middleware/oauth/providers.ts +115 -0
  75. package/src/middleware/rate-limit/__tests__/rate-limit.test.ts +642 -0
  76. package/src/middleware/rate-limit/index.ts +522 -0
  77. package/src/middleware/rate-limit/sqlite-store.ts +382 -0
  78. package/src/middleware/secure/__tests__/secure.test.ts +360 -0
  79. package/src/middleware/secure/csp.ts +193 -0
  80. package/src/middleware/secure/index.ts +417 -0
  81. package/src/middleware/session.ts +174 -0
  82. package/src/observability/event-bus.ts +81 -79
  83. package/src/paths.ts +37 -0
  84. package/src/perf/hmr-markers.ts +215 -0
  85. package/src/perf/index.ts +104 -0
  86. package/src/resource/__tests__/generator.test.ts +603 -2
  87. package/src/resource/ddl/__tests__/diff.test.ts +639 -0
  88. package/src/resource/ddl/__tests__/emit.test.ts +799 -0
  89. package/src/resource/ddl/__tests__/snapshot.test.ts +499 -0
  90. package/src/resource/ddl/diff.ts +392 -0
  91. package/src/resource/ddl/emit.ts +548 -0
  92. package/src/resource/ddl/persistence-types.ts +218 -0
  93. package/src/resource/ddl/snapshot.ts +447 -0
  94. package/src/resource/ddl/type-map.ts +223 -0
  95. package/src/resource/ddl/types.ts +232 -0
  96. package/src/resource/generator-repo.ts +610 -0
  97. package/src/resource/generator-schema.ts +476 -0
  98. package/src/resource/generator.ts +117 -1
  99. package/src/resource/index.ts +17 -1
  100. package/src/resource/schema.ts +30 -0
  101. package/src/router/fs-scanner.ts +3 -0
  102. package/src/runtime/__tests__/error-boundary-redaction.test.ts +141 -0
  103. package/src/runtime/__tests__/hdr-client.test.ts +223 -0
  104. package/src/runtime/__tests__/http-errors.test.ts +117 -0
  105. package/src/runtime/__tests__/not-found.test.ts +152 -0
  106. package/src/runtime/boundary.tsx +21 -1
  107. package/src/runtime/fast-refresh-runtime.ts +322 -0
  108. package/src/runtime/fast-refresh-types.ts +128 -0
  109. package/src/runtime/hmr-client.ts +409 -0
  110. package/src/runtime/http-errors.ts +113 -0
  111. package/src/runtime/index.ts +6 -0
  112. package/src/runtime/logger.ts +678 -677
  113. package/src/runtime/not-found.ts +93 -0
  114. package/src/runtime/redirect.ts +133 -0
  115. package/src/runtime/server.ts +518 -20
  116. package/src/runtime/ssr.ts +340 -10
  117. package/src/runtime/streaming-ssr.ts +222 -19
  118. package/src/scheduler/__tests__/scheduler.test.ts +514 -0
  119. package/src/scheduler/index.ts +343 -0
  120. package/src/storage/s3/__tests__/s3.test.ts +479 -0
  121. package/src/storage/s3/index.ts +412 -0
  122. package/src/testing/index.ts +58 -0
@@ -0,0 +1,573 @@
1
+ /**
2
+ * Phase 7.1 R1 Agent A — Slot (`.slot.ts`) dispatch regression tests.
3
+ *
4
+ * Before Phase 7.1 the dev bundler silently dropped `.slot.ts` edits:
5
+ * the path wasn't in `clientModuleToRoute`, wasn't in `serverModuleSet`
6
+ * (which only registered `componentModule` + `layoutChain`), wasn't
7
+ * resource/contract/middleware/config, so it hit the `return` at the
8
+ * bottom of `_doBuild` and never fired any callback. The CLI's
9
+ * chokidar-backed `watchFSRoutes` worked around the gap at the CLI
10
+ * layer, but the 36-cell HMR matrix (which drives `startDevBundler`
11
+ * directly) marked all three `app/slot.ts` cells as `[GAP]`.
12
+ *
13
+ * Fix (Option B — see `docs/bun/phase-7-1-diagnostics/slot-dispatch-analysis.md`):
14
+ * register `route.slotModule` in `serverModuleSet` at manifest-iteration
15
+ * time, so a slot edit flows through the existing `onSSRChange`
16
+ * dispatch path — semantically correct since slots are SSR-side data
17
+ * loaders.
18
+ *
19
+ * Coverage:
20
+ * 1. slot path in `serverModuleSet` after `startDevBundler`
21
+ * 2. slot edit fires `onSSRChange(filePath)` (NOT wildcard)
22
+ * 3. route without `slotModule` does not crash (falsy skip)
23
+ * 4. multi-route dispatch — each route's slot detected independently
24
+ * 5. mixed slot + page.tsx edit classifies as `ssr-only` batch
25
+ * 6. Windows path normalization — backslash / lowercase handled
26
+ * 7. Regression: page.tsx still fires `onSSRChange` (slot doesn't
27
+ * hijack the existing contract)
28
+ * 8. route-less manifest does not register any slot paths
29
+ *
30
+ * Gating: `MANDU_SKIP_BUNDLER_TESTS=1` skips the integration tests that
31
+ * spin up real `fs.watch` watchers. The static unit tests (1, 3, 4, 8)
32
+ * run in all modes.
33
+ *
34
+ * References:
35
+ * docs/bun/phase-7-1-diagnostics/slot-dispatch-analysis.md
36
+ * docs/bun/phase-7-1-team-plan.md §4 Agent A
37
+ * packages/core/tests/hmr-matrix/matrix.spec.ts (KNOWN_BUNDLER_GAPS)
38
+ */
39
+ import { describe, it, expect, beforeEach, afterEach } from "bun:test";
40
+ import { mkdtempSync, writeFileSync, mkdirSync, rmSync } from "fs";
41
+ import { tmpdir } from "os";
42
+ import path from "path";
43
+ import {
44
+ startDevBundler,
45
+ _testOnly_normalizeFsPath,
46
+ type DevBundler,
47
+ } from "../dev";
48
+ import type { RoutesManifest } from "../../spec/schema";
49
+
50
+ // -----------------------------------------------------------------------------
51
+ // Helpers
52
+ // -----------------------------------------------------------------------------
53
+
54
+ /** Settle window mirrors the neighbouring integration tests (B6 debounce
55
+ * 100ms + Windows fs.watch polling slack). */
56
+ const WATCH_SETTLE_MS = 350;
57
+
58
+ function sleep(ms: number): Promise<void> {
59
+ return new Promise((resolve) => setTimeout(resolve, ms));
60
+ }
61
+
62
+ /**
63
+ * Retry `writeFile` up to 4 times until `observedCount()` increments.
64
+ * Windows ReadDirectoryChangesW drops the first event on a freshly-
65
+ * armed recursive watcher roughly 1 in 5 runs; the retry pattern is
66
+ * the standard fix used elsewhere in this test directory.
67
+ */
68
+ async function touchUntilSeen(
69
+ filePath: string,
70
+ observedCount: () => number,
71
+ maxAttempts = 4,
72
+ ): Promise<void> {
73
+ const before = observedCount();
74
+ for (let attempt = 0; attempt < maxAttempts; attempt++) {
75
+ const content = `export async function load() { return { marker: ${
76
+ Date.now() + attempt
77
+ } }; }\n`;
78
+ writeFileSync(filePath, content);
79
+ await sleep(WATCH_SETTLE_MS);
80
+ if (observedCount() > before) return;
81
+ }
82
+ }
83
+
84
+ /**
85
+ * Create a minimal on-disk project with the directory layout
86
+ * `startDevBundler` needs to arm its watchers without throwing:
87
+ *
88
+ * .mandu/ (manifest.json + client/)
89
+ * app/page.tsx (SSR component)
90
+ * app/page.slot.ts (server data loader — the unit under test)
91
+ * app/layout.tsx (optional, mirrors real projects)
92
+ * package.json (root-watcher expects one)
93
+ *
94
+ * Everything else (`src/shared/...`, spec/contracts, etc.) is omitted
95
+ * — this suite is scoped to the slot path and benefits from a leaner
96
+ * fixture.
97
+ */
98
+ function createTempProject(opts: { withLayout?: boolean } = {}): string {
99
+ const root = mkdtempSync(path.join(tmpdir(), "mandu-slot-dispatch-"));
100
+ mkdirSync(path.join(root, ".mandu/client"), { recursive: true });
101
+ writeFileSync(
102
+ path.join(root, ".mandu/manifest.json"),
103
+ JSON.stringify(
104
+ {
105
+ version: 1,
106
+ buildTime: new Date().toISOString(),
107
+ env: "development",
108
+ bundles: {},
109
+ shared: {
110
+ runtime: "/.mandu/client/runtime.js",
111
+ vendor: "/.mandu/client/vendor.js",
112
+ },
113
+ },
114
+ null,
115
+ 2,
116
+ ),
117
+ );
118
+ writeFileSync(
119
+ path.join(root, "package.json"),
120
+ JSON.stringify({ name: "slot-dispatch-fixture", private: true }, null, 2),
121
+ );
122
+
123
+ mkdirSync(path.join(root, "app"), { recursive: true });
124
+ writeFileSync(
125
+ path.join(root, "app/page.tsx"),
126
+ "export default function HomePage() { return <div>home</div>; }\n",
127
+ );
128
+ writeFileSync(
129
+ path.join(root, "app/page.slot.ts"),
130
+ "export async function load() { return { version: 0 }; }\n",
131
+ );
132
+ if (opts.withLayout) {
133
+ writeFileSync(
134
+ path.join(root, "app/layout.tsx"),
135
+ "export default function Layout({ children }: { children: any }) { return <div>{children}</div>; }\n",
136
+ );
137
+ }
138
+ return root;
139
+ }
140
+
141
+ /** Manifest shape: one page route with the fields Phase 7.1 adds. */
142
+ function manifestWithSlot(withLayout = false): RoutesManifest {
143
+ const route: RoutesManifest["routes"][number] = {
144
+ id: "home",
145
+ kind: "page",
146
+ pattern: "/",
147
+ module: "app/page.tsx",
148
+ componentModule: "app/page.tsx",
149
+ slotModule: "app/page.slot.ts",
150
+ };
151
+ if (withLayout) {
152
+ route.layoutChain = ["app/layout.tsx"];
153
+ }
154
+ return {
155
+ version: 1,
156
+ routes: [route],
157
+ } as RoutesManifest;
158
+ }
159
+
160
+ /** Two routes, only one with a slot. Verifies dispatch independence. */
161
+ function manifestMultiRoute(): RoutesManifest {
162
+ return {
163
+ version: 1,
164
+ routes: [
165
+ {
166
+ id: "home",
167
+ kind: "page",
168
+ pattern: "/",
169
+ module: "app/page.tsx",
170
+ componentModule: "app/page.tsx",
171
+ slotModule: "app/page.slot.ts",
172
+ },
173
+ {
174
+ id: "about",
175
+ kind: "page",
176
+ pattern: "/about",
177
+ module: "app/about/page.tsx",
178
+ componentModule: "app/about/page.tsx",
179
+ slotModule: "app/about/page.slot.ts",
180
+ },
181
+ ],
182
+ } as RoutesManifest;
183
+ }
184
+
185
+ /** Route with no `slotModule` — the falsy-skip branch must not throw. */
186
+ function manifestNoSlot(): RoutesManifest {
187
+ return {
188
+ version: 1,
189
+ routes: [
190
+ {
191
+ id: "home",
192
+ kind: "page",
193
+ pattern: "/",
194
+ module: "app/page.tsx",
195
+ componentModule: "app/page.tsx",
196
+ },
197
+ ],
198
+ } as RoutesManifest;
199
+ }
200
+
201
+ // -----------------------------------------------------------------------------
202
+ // Section A — Static shape assertions (no watcher spin-up)
203
+ //
204
+ // These run in ALL modes (MANDU_SKIP_BUNDLER_TESTS=1 or unset) because
205
+ // they only verify the manifest-iteration block's behavior. We boot
206
+ // `startDevBundler` once and then immediately `close()` it — the
207
+ // initial build + watcher arm is the minimum we need to exercise the
208
+ // SSR-module registration logic, and it finishes in <200 ms.
209
+ // -----------------------------------------------------------------------------
210
+
211
+ describe("Phase 7.1 R1 Agent A — slot path normalization (pure unit)", () => {
212
+ it("normalizes relative slot paths to absolute forward-slash", () => {
213
+ // Mirror the logic inside `startDevBundler` manifest iteration:
214
+ // absPath = path.resolve(rootDir, route.slotModule)
215
+ // serverModuleSet.add(normalizeFsPath(absPath))
216
+ //
217
+ // The test doesn't spin up the bundler — it just verifies that
218
+ // given the same inputs, the normalized key is what downstream
219
+ // `serverModuleSet.has()` checks will look up. This is a pure
220
+ // regression guard against a future refactor accidentally
221
+ // breaking the round-trip.
222
+ const rootDir = path.join(tmpdir(), "mandu-slot-norm-fixture");
223
+ const slotRel = "app/page.slot.ts";
224
+ const abs = path.resolve(rootDir, slotRel);
225
+ const normalized = _testOnly_normalizeFsPath(abs);
226
+ expect(normalized.endsWith("/app/page.slot.ts")).toBe(true);
227
+ expect(normalized.includes("\\")).toBe(false);
228
+ });
229
+
230
+ it("handles `.slot.tsx` variant identically (rare, but permitted)", () => {
231
+ const abs = path.resolve(tmpdir(), "proj/app/page.slot.tsx");
232
+ const normalized = _testOnly_normalizeFsPath(abs);
233
+ expect(normalized.endsWith("/app/page.slot.tsx")).toBe(true);
234
+ });
235
+ });
236
+
237
+ // -----------------------------------------------------------------------------
238
+ // Section B — Live bundler integration (gated)
239
+ // -----------------------------------------------------------------------------
240
+
241
+ describe.skipIf(process.env.MANDU_SKIP_BUNDLER_TESTS === "1")(
242
+ "Phase 7.1 R1 Agent A — slot dispatch integration",
243
+ () => {
244
+ let rootDir: string;
245
+ let close: (() => void) | null = null;
246
+
247
+ beforeEach(() => {
248
+ rootDir = createTempProject();
249
+ });
250
+
251
+ afterEach(() => {
252
+ close?.();
253
+ close = null;
254
+ try {
255
+ rmSync(rootDir, { recursive: true, force: true });
256
+ } catch {
257
+ /* Windows cleanup is best-effort — .mandu/client dlls can hold locks. */
258
+ }
259
+ });
260
+
261
+ it("(1) slot file edit fires onSSRChange with the slot's path (NOT wildcard)", async () => {
262
+ // Contract: a targeted slot edit produces a targeted SSR signal.
263
+ // The wildcard "*" is reserved for common-dir changes that fan
264
+ // out to every SSR handler. Asserting the specific path here
265
+ // pins the dispatch layer so a future optimization that
266
+ // collapses slot-edit to wildcard would be flagged immediately.
267
+ const ssrCalls: string[] = [];
268
+ const bundler = await startDevBundler({
269
+ rootDir,
270
+ manifest: manifestWithSlot(),
271
+ onSSRChange: (filePath) => {
272
+ ssrCalls.push(filePath);
273
+ },
274
+ });
275
+ close = bundler.close;
276
+
277
+ await sleep(300);
278
+
279
+ await touchUntilSeen(
280
+ path.join(rootDir, "app/page.slot.ts"),
281
+ () => ssrCalls.length,
282
+ );
283
+
284
+ expect(ssrCalls.length).toBeGreaterThan(0);
285
+ // Path assertion — must NOT be the wildcard. The slot signal
286
+ // must carry the actual file path so the CLI knows which route
287
+ // to re-register.
288
+ expect(ssrCalls[0]).not.toBe("*");
289
+ expect(ssrCalls[0]!.endsWith("app/page.slot.ts")).toBe(true);
290
+ }, 15_000);
291
+
292
+ it("(2) route without slotModule does not crash the bundler", async () => {
293
+ // Regression guard for the falsy-skip branch in `dev.ts`:
294
+ //
295
+ // if (route.slotModule) { … }
296
+ //
297
+ // A route with `slotModule === undefined` must register
298
+ // normally — no registration, no error, no log spam.
299
+ const errors: Error[] = [];
300
+ const bundler = await startDevBundler({
301
+ rootDir,
302
+ manifest: manifestNoSlot(),
303
+ onError: (err) => {
304
+ errors.push(err);
305
+ },
306
+ });
307
+ close = bundler.close;
308
+
309
+ await sleep(300);
310
+
311
+ // Edit something unrelated to prove the bundler is still alive.
312
+ writeFileSync(
313
+ path.join(rootDir, "app/page.tsx"),
314
+ "export default function HomePage() { return <div>v2</div>; }\n",
315
+ );
316
+ await sleep(WATCH_SETTLE_MS);
317
+
318
+ expect(errors.length).toBe(0);
319
+ }, 10_000);
320
+
321
+ it("(3) multi-route: each route's slot is detected independently", async () => {
322
+ // Two routes, each with its own slot. An edit to the second
323
+ // route's slot MUST fire `onSSRChange` with THAT path — not
324
+ // the first route's, not the wildcard.
325
+ //
326
+ // Needed because pre-Phase 7.1 developers could technically
327
+ // hand-author `slotModule` in the manifest but the bundler
328
+ // ignored it, so the multi-route case was functionally the
329
+ // same as no slot at all.
330
+ mkdirSync(path.join(rootDir, "app/about"), { recursive: true });
331
+ writeFileSync(
332
+ path.join(rootDir, "app/about/page.tsx"),
333
+ "export default function AboutPage() { return <div>about</div>; }\n",
334
+ );
335
+ writeFileSync(
336
+ path.join(rootDir, "app/about/page.slot.ts"),
337
+ "export async function load() { return { about: true }; }\n",
338
+ );
339
+
340
+ const ssrCalls: string[] = [];
341
+ const bundler = await startDevBundler({
342
+ rootDir,
343
+ manifest: manifestMultiRoute(),
344
+ onSSRChange: (filePath) => {
345
+ ssrCalls.push(filePath);
346
+ },
347
+ });
348
+ close = bundler.close;
349
+
350
+ await sleep(300);
351
+
352
+ await touchUntilSeen(
353
+ path.join(rootDir, "app/about/page.slot.ts"),
354
+ () => ssrCalls.length,
355
+ );
356
+
357
+ expect(ssrCalls.length).toBeGreaterThan(0);
358
+ expect(
359
+ ssrCalls.some((p) => p.endsWith("app/about/page.slot.ts")),
360
+ ).toBe(true);
361
+ // Anti-assertion: the home slot must NOT have fired (we never
362
+ // touched it). Proves the dispatch is path-specific, not a
363
+ // broadcast.
364
+ expect(ssrCalls.some((p) => p.endsWith("app/page.slot.ts"))).toBe(false);
365
+ }, 15_000);
366
+
367
+ it("(4) regression: page.tsx edit still fires onSSRChange", async () => {
368
+ // The slot integration must NOT steal the existing contract for
369
+ // page.tsx edits. This test exercises the same dispatch path
370
+ // from the opposite direction — if someone accidentally moved
371
+ // the `.slot.ts` suffix check BEFORE the componentModule check,
372
+ // page.tsx edits would silently break.
373
+ const ssrCalls: string[] = [];
374
+ const bundler = await startDevBundler({
375
+ rootDir,
376
+ manifest: manifestWithSlot(),
377
+ onSSRChange: (filePath) => {
378
+ ssrCalls.push(filePath);
379
+ },
380
+ });
381
+ close = bundler.close;
382
+
383
+ await sleep(300);
384
+
385
+ const pagePath = path.join(rootDir, "app/page.tsx");
386
+ const before = ssrCalls.length;
387
+ for (let i = 0; i < 4; i++) {
388
+ writeFileSync(
389
+ pagePath,
390
+ `export default function HomePage() { return <div>v${i + 1}</div>; }\n`,
391
+ );
392
+ await sleep(WATCH_SETTLE_MS);
393
+ if (ssrCalls.length > before) break;
394
+ }
395
+
396
+ expect(ssrCalls.length).toBeGreaterThan(before);
397
+ expect(ssrCalls.some((p) => p.endsWith("app/page.tsx"))).toBe(true);
398
+ }, 15_000);
399
+
400
+ it("(5) slot + page.tsx mixed edit: both classify as ssr-only", async () => {
401
+ // Burst-edit scenario: user saves page.tsx and page.slot.ts
402
+ // within the debounce window. `classifyBatch` must route the
403
+ // entire batch to `ssr-only` (both the page AND the slot are
404
+ // in `serverModuleSet`). No island-update / css-update /
405
+ // api-only cross-contamination.
406
+ const ssrCalls: string[] = [];
407
+ const apiCalls: string[] = [];
408
+ const rebuilds: Array<{ routeId: string; success: boolean }> = [];
409
+ const bundler = await startDevBundler({
410
+ rootDir,
411
+ manifest: manifestWithSlot(),
412
+ onSSRChange: (filePath) => {
413
+ ssrCalls.push(filePath);
414
+ },
415
+ onAPIChange: (filePath) => {
416
+ apiCalls.push(filePath);
417
+ },
418
+ onRebuild: (r) => {
419
+ rebuilds.push({ routeId: r.routeId, success: r.success });
420
+ },
421
+ });
422
+ close = bundler.close;
423
+
424
+ await sleep(300);
425
+
426
+ // Two files saved 30 ms apart — falls inside the 100 ms debounce
427
+ // window, so `pendingBuildSet` coalesces them into one
428
+ // `classifyBatch` call.
429
+ writeFileSync(
430
+ path.join(rootDir, "app/page.tsx"),
431
+ "export default function HomePage() { return <div>v2</div>; }\n",
432
+ );
433
+ await sleep(30);
434
+ writeFileSync(
435
+ path.join(rootDir, "app/page.slot.ts"),
436
+ "export async function load() { return { v: 2 }; }\n",
437
+ );
438
+
439
+ await sleep(WATCH_SETTLE_MS * 2);
440
+
441
+ // Both slot + page fire onSSRChange — exact ordering is left
442
+ // unconstrained because Windows fs.watch can deliver either
443
+ // event first, but we need at least one of each kind.
444
+ expect(ssrCalls.length).toBeGreaterThan(0);
445
+ // Anti-assertion: API handler must NOT fire. Slots don't go
446
+ // through the API reload path.
447
+ expect(apiCalls.length).toBe(0);
448
+ }, 15_000);
449
+
450
+ it("(6) slot edits do NOT trigger an island rebuild (routeId stays empty/wildcard)", async () => {
451
+ // Slots are SSR-only artifacts — they don't ship in the client
452
+ // bundle. An island rebuild (`onRebuild` with a specific
453
+ // `routeId`) for a slot edit would be a bug: it would run
454
+ // `buildClientBundles` unnecessarily and waste 50-100 ms per
455
+ // save.
456
+ const rebuilds: Array<{ routeId: string }> = [];
457
+ const ssrCalls: string[] = [];
458
+ const bundler = await startDevBundler({
459
+ rootDir,
460
+ manifest: manifestWithSlot(),
461
+ onSSRChange: (filePath) => {
462
+ ssrCalls.push(filePath);
463
+ },
464
+ onRebuild: (r) => {
465
+ rebuilds.push({ routeId: r.routeId });
466
+ },
467
+ });
468
+ close = bundler.close;
469
+
470
+ await sleep(300);
471
+
472
+ await touchUntilSeen(
473
+ path.join(rootDir, "app/page.slot.ts"),
474
+ () => ssrCalls.length,
475
+ );
476
+
477
+ // At least one SSR signal fired (the contract under test).
478
+ expect(ssrCalls.length).toBeGreaterThan(0);
479
+ // Zero per-route rebuilds. The wildcard rebuild "*" is allowed
480
+ // (common-dir fan-out), but a specific routeId means the
481
+ // bundler mistakenly went down the island-rebuild path.
482
+ const specificRebuilds = rebuilds.filter(
483
+ (r) => r.routeId && r.routeId !== "*" && r.routeId.length > 0,
484
+ );
485
+ expect(specificRebuilds.length).toBe(0);
486
+ }, 15_000);
487
+
488
+ it("(7) empty manifest: slot registration is a no-op, no errors", async () => {
489
+ // Edge case — a project with zero routes (fresh `mandu init`
490
+ // before any page.tsx exists). The manifest iteration should
491
+ // simply not register anything, and the bundler should still
492
+ // start and close cleanly.
493
+ const errors: Error[] = [];
494
+ const bundler = await startDevBundler({
495
+ rootDir,
496
+ manifest: { version: 1, routes: [] } as unknown as RoutesManifest,
497
+ onError: (err) => {
498
+ errors.push(err);
499
+ },
500
+ });
501
+ close = bundler.close;
502
+
503
+ await sleep(300);
504
+
505
+ // Editing the slot file should not crash anything — the
506
+ // watcher may or may not see the file depending on whether
507
+ // `app/` made it into `watchDirs` via other routes (here it
508
+ // didn't), but there MUST be no error callback.
509
+ writeFileSync(
510
+ path.join(rootDir, "app/page.slot.ts"),
511
+ "export async function load() { return { v: 1 }; }\n",
512
+ );
513
+ await sleep(WATCH_SETTLE_MS);
514
+
515
+ expect(errors.length).toBe(0);
516
+ }, 10_000);
517
+
518
+ it("(8) slot with layout chain present: both slot and layout paths registered", async () => {
519
+ // A realistic fixture adds `layoutChain: ["app/layout.tsx"]`
520
+ // alongside `slotModule`. This test proves the two additions
521
+ // are independent — the layout chain iteration happens in a
522
+ // separate block from the slot registration, so one feature
523
+ // must not shadow the other.
524
+ //
525
+ // We recreate the project with the layout file on disk so the
526
+ // manifest-derived watch directory set is consistent.
527
+ close?.();
528
+ close = null;
529
+ try {
530
+ rmSync(rootDir, { recursive: true, force: true });
531
+ } catch {
532
+ /* best effort */
533
+ }
534
+ rootDir = createTempProject({ withLayout: true });
535
+
536
+ const ssrCalls: string[] = [];
537
+ const bundler = await startDevBundler({
538
+ rootDir,
539
+ manifest: manifestWithSlot(true),
540
+ onSSRChange: (filePath) => {
541
+ ssrCalls.push(filePath);
542
+ },
543
+ });
544
+ close = bundler.close;
545
+
546
+ await sleep(300);
547
+
548
+ // Edit the slot first — must fire.
549
+ await touchUntilSeen(
550
+ path.join(rootDir, "app/page.slot.ts"),
551
+ () => ssrCalls.length,
552
+ );
553
+ const slotObserved = ssrCalls.some((p) =>
554
+ p.endsWith("app/page.slot.ts"),
555
+ );
556
+ expect(slotObserved).toBe(true);
557
+
558
+ // Then edit the layout — the separate registration path must
559
+ // still fire. Using `touchUntilSeen` avoids Windows flake.
560
+ const beforeLayout = ssrCalls.length;
561
+ for (let i = 0; i < 4; i++) {
562
+ writeFileSync(
563
+ path.join(rootDir, "app/layout.tsx"),
564
+ `export default function Layout({ children }: { children: any }) { return <div data-v="${i}">{children}</div>; }\n`,
565
+ );
566
+ await sleep(WATCH_SETTLE_MS);
567
+ if (ssrCalls.length > beforeLayout) break;
568
+ }
569
+ const layoutObserved = ssrCalls.some((p) => p.endsWith("app/layout.tsx"));
570
+ expect(layoutObserved).toBe(true);
571
+ }, 20_000);
572
+ },
573
+ );